Function at 0x6190e9d6
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push 0x540
mov eax, 0x6192188c
call fcn.6191ef5d
mov dword [ebp - 0x540], ecx
lea ecx, [ebp - 0x52c]
call dword [0x61923a48]
xor edi, edi
lea ecx, [ebp - 0x524]
mov dword [ebp - 4], edi
call dword [0x61923a48]
push str._system
lea eax, [ebp - 0x530]
push 0x61931de8
push eax
mov byte [ebp - 4], 1
call fcn.61902e42
add esp, 0xc
push eax
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 1
call dword [0x61923a58]
push 0x103
lea eax, [ebp - 0x113]
push edi
push eax
mov byte [ebp - 0x114], 0
call sub.MSVCR100.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x524]
call dword [sym.imp.mfc100.dll_Ordinal_4499]
push eax
lea eax, [ebp - 0x114]
push str._s_notice.cfg
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
push edi
push 0x619252e4
mov esi, str.ANNOUNCE
push esi
call ebx
lea ecx, [ebp - 0x528]
mov dword [ebp - 0x538], eax
call dword [0x61923a48]
push str.commsu.ini
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x530]
push eax
mov byte [ebp - 4], 3
call fcn.61902e42
add esp, 0xc
push eax
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 3
call dword [0x61923a58]
lea ecx, [ebp - 0x528]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push edi
push str.ISRPA
push str.DEVMODE
call ebx
cmp dword [ebp - 0x538], edi
je 0x6190edb6
cmp eax, edi
jne 0x6190edb6
lea eax, [ebp - 0x114]
push eax
push 0x100
lea eax, [ebp - 0x41c]
push eax
push 0x61923b08
push str.START
push esi
call dword [0x619230d4]
push ecx
lea eax, [ebp - 0x41c]
mov ecx, esp
mov dword [ebp - 0x538], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov ecx, dword [ebp - 0x540]
lea eax, [ebp - 0x53c]
push eax
call fcn.61909334
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x548], eax
lea eax, [ebp - 0x114]
push eax
push 0x100
lea eax, [ebp - 0x41c]
push eax
push 0x61923b08
push 0x61927a70
push esi
mov dword [ebp - 0x54c], edi
call dword [0x619230d4]
push ecx
lea eax, [ebp - 0x41c]
mov ecx, esp
mov dword [ebp - 0x538], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov ecx, dword [ebp - 0x540]
lea eax, [ebp - 0x53c]
push eax
call fcn.61909334
or edi, dword [ebp - 0x548]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x540], eax
je 0x6190edb6
or ecx, eax
je 0x6190edb6
xor edi, edi
push edi
call dword [sym.imp.MSVCR100.dll__time64]
pop ecx
mov dword [ebp - 0x534], eax
lea eax, [ebp - 0x114]
push eax
push 1
push str.USE_IMAGE
push esi
mov dword [ebp - 0x530], edx
call ebx
push dword [ebp - 0x530]
lea ecx, [ebp - 0x54c]
push dword [ebp - 0x534]
mov dword [ebp - 0x538], eax
call fcn.61908076
test al, al
je 0x6190edb6
push dword [ebp - 0x530]
lea ecx, [ebp - 0x544]
push dword [ebp - 0x534]
call fcn.61908095
test al, al
je 0x6190edb6
mov ebx, 0x103
push ebx
lea eax, [ebp - 0x31b]
push edi
push eax
mov byte [ebp - 0x31c], 0
call sub.MSVCR100.dll_memset
add esp, 0xc
cmp dword [ebp - 0x538], edi
je 0x6190ed1c
push ebx
lea eax, [ebp - 0x217]
push edi
push eax
mov byte [ebp - 0x218], 0
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0x61931de8
call dword [sym.imp.mfc100.dll_Ordinal_1448]
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
push eax
lea eax, [ebp - 0x218]
push str._sImage_starter
push eax
call edi
push ebx
lea eax, [ebp - 0x51f]
push 0
push eax
mov byte [ebp - 0x520], 0
call sub.MSVCR100.dll_memset
add esp, 0x18
lea eax, [ebp - 0x114]
push eax
push 0x104
lea eax, [ebp - 0x520]
push eax
push 0x61923b08
push str.IMAGE
push esi
call dword [0x619230d4]
lea eax, [ebp - 0x520]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x31c]
push str._s_s
push eax
call edi
add esp, 0x10
xor edi, edi
jmp 0x6190ed9f
lea eax, [ebp - 0x114]
push eax
push 0x104
lea eax, [ebp - 0x31c]
push eax
push 0x61923b08
push 0x6192472c
push esi
call dword [0x619230d4]
lea eax, [ebp - 0x31c]
push eax
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x6190edb6
push ebx
lea eax, [ebp - 0x217]
push edi
push eax
mov byte [ebp - 0x218], 0
call sub.MSVCR100.dll_memset
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
lea eax, [ebp - 0x31c]
push eax
push dword [0x61931de8]
lea eax, [ebp - 0x218]
push 0x61923b0c
push eax
call esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x31c]
push 0x61927984
push eax
call esi
add esp, 0x28
push 1
push edi
push edi
lea eax, [ebp - 0x31c]
push eax
push 0x61924724
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x528]
call dword [0x61923a58]
lea ecx, [ebp - 0x524]
call dword [0x61923a58]
lea ecx, [ebp - 0x52c]
call dword [0x61923a58]
call fcn.6191efe0
ret