Function at 0x6191375a
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push 0xf7c
mov eax, 0x61921e1b
call fcn.6191ef5d
mov esi, ecx
lea ecx, [esi + 0x49f0]
call fcn.6190fca4
test eax, eax
je 0x619139ef
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
call sub.mfc100.dll_Ordinal_2219
xor ebx, ebx
lea ecx, [ebp - 0xec8]
mov dword [ebp - 4], ebx
call dword [0x61923a48]
lea ecx, [ebp - 0xed0]
call dword [0x61923a48]
lea ecx, [ebp - 0xecc]
call dword [0x61923a48]
lea ecx, [ebp - 0xec4]
call dword [0x61923a48]
push 0x6a8
lea eax, [ebp - 0xeb8]
push ebx
push eax
mov byte [ebp - 4], 4
call sub.MSVCR100.dll_memset
push ebx
lea eax, [ebp - 0xeb8]
push ebx
push eax
call dword [esi + 0x4a00]
push 1
call dword [esi + 0x4a24]
add esp, 0x1c
cmp dword [0x61931e30], 1
jne 0x619137fd
push 9
jmp 0x619137fe
push ebx
call dword [esi + 0x4a2c]
pop ecx
push 0x300c
lea edi, [esi + 0x19e4]
push ebx
push edi
call sub.MSVCR100.dll_memset
push 4
push edi
call dword [esi + 0x4a6c]
add esp, 0x14
cmp eax, ebx
jne 0x61913863
lea eax, [esi + 0x1e6c]
push eax
lea ecx, [esi + 0x4aa0]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea eax, [esi + 0x1a28]
push eax
lea ecx, [esi + 0x4a9c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
mov ecx, esi
mov dword [0x61931dfc], 1
call fcn.619108f2
jmp 0x619139b0
call dword [esi + 0x4a20]
mov dword [ebp - 0xec0], eax
call dword [esi + 0x4a0c]
mov edi, dword [reloc.mfc100.dll_Ordinal_4283]
push eax
push dword [ebp - 0xec0]
lea eax, [ebp - 0xec4]
push str.__d___s
push eax
call edi
add esp, 0x10
cmp dword [ebp - 0xec0], 0x9c4
jne 0x61913996
push ebx
lea ecx, [ebp - 0xf88]
call fcn.61902070
lea ecx, [ebp - 0xf88]
mov byte [ebp - 4], 5
call sub.mfc100.dll_Ordinal_3620
cmp eax, 0xa
jne 0x61913979
push 0x7ff
lea eax, [ebp - 0x80f]
push ebx
push eax
mov byte [ebp - 0x810], bl
call sub.MSVCR100.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xec0]
call dword [0x61923a48]
push dword [0x61931de8]
lea eax, [ebp - 0xec0]
push str._s_systemcommsu.ini
push eax
mov byte [ebp - 4], 6
call edi
add esp, 0xc
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 1
push str.CLOUDREAL
push str.STARTER
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, ebx
mov eax, str.https:__www.iprovest.com_Favorite.jsp_scr_id2229amho_yn1page_gb1linkUrl_weblogic_CMCTCertServlet_3Fmode_3DcloudRegi_26scr_id_3D2229
jne 0x61913936
mov eax, str.https:__dev2.iprovest.com_Favorite.jsp_scr_id2229amho_yn1page_gb1linkUrl_weblogic_CMCTCertServlet_3Fmode_3DcloudRegi_26scr_id_3D2229
lea ecx, [ebp - 0x810]
push ecx
push eax
mov ecx, esi
call fcn.61908e0e
push 1
push ebx
push ebx
lea eax, [ebp - 0x810]
push eax
push 0x61924724
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xec0]
call dword [0x61923a58]
lea ecx, [ebp - 0xf88]
mov byte [ebp - 4], 4
call fcn.61901fef
jmp 0x619139b0
cmp eax, 0xb
jne 0x61913987
mov ecx, esi
call fcn.61911fc7
jmp 0x61913968
lea ecx, [ebp - 0xf88]
mov byte [ebp - 4], 4
call fcn.61901fef
push ebx
push 0x619284b4
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov ecx, esi
call sub.mfc100.dll_Ordinal_7871
lea ecx, [ebp - 0xec4]
call dword [0x61923a58]
lea ecx, [ebp - 0xecc]
call dword [0x61923a58]
lea ecx, [ebp - 0xed0]
call dword [0x61923a58]
lea ecx, [ebp - 0xec8]
call dword [0x61923a58]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeb9]
call fcn.6190a43f
call fcn.6191efe0
ret