Function at 0x10019160
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x1013ffc7
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x10170024]
xor eax, esp
mov dword [esp + 0x240], eax
push ebx
push esi
mov eax, dword [0x10170024]
xor eax, esp
push eax
lea eax, [esp + 0x250]
mov dword fs:[0], eax
lea ecx, [esp + 0xc]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea eax, [esp + 0xc]
xor ebx, ebx
push eax
mov dword [esp + 0x25c], ebx
call fcn.10003040
add esp, 4
push 0x1014cde8
lea ecx, [esp + 0x10]
call dword [0x101464cc]
push 0x206
lea ecx, [esp + 0x4a]
push ebx
push ecx
mov word [esp + 0x50], bx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x28]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0x258], 1
mov eax, dword [esp + 0x10]
mov esi, 8
cmp dword [esp + 0x24], esi
jae 0x10019205
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x2c]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [esp + 0x40], esi
mov eax, dword [esp + 0x2c]
jae 0x1001921e
lea eax, [esp + 0x2c]
push eax
push 0x104
lea edx, [esp + 0x4c]
push edx
push 0x1014be14
push str.SaveImagePath
push str.BackupParam
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ax, word [esp + 0x44]
cmp ax, 0x5c
jne 0x10019286
push 0x1014ceb0
mov ecx, edi
call dword [0x10146514]
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, str.2nas
jmp 0x10019459
cmp ax, 0x41
jb 0x10019292
cmp ax, 0x5a
jbe 0x100192a3
mov eax, dword [esp + 0x44]
add eax, 0xffffff9f
cmp ax, 0x19
ja 0x1001942e
test byte [0x101899a0], 1
jne 0x100192c5
or dword [0x101899a0], 1
call fcn.1009fc10
push 0x10145d90
call fcn.1012d48d
add esp, 4
mov edx, dword [esp + 0x44]
call fcn.10016c40
test eax, eax
je 0x1001930f
push str.local
mov ecx, edi
call dword [0x10146514]
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 0x1014e0d4
jmp 0x10019459
mov edx, dword [esp + 0x44]
call fcn.10016c90
test eax, eax
je 0x10019359
push str.local
mov ecx, edi
call dword [0x10146514]
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 0x1014e0d8
jmp 0x10019459
mov esi, dword [esp + 0x44]
call fcn.10016ce0
test eax, eax
je 0x100193a3
push str.local
mov ecx, edi
call dword [0x10146514]
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, str.2ext
jmp 0x10019459
mov edx, dword [0x10186f28]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x44]
push ecx
mov ecx, 0x10186f28
call eax
test al, al
mov ecx, edi
je 0x100193f6
push str.cloud_drive
call dword [0x10146514]
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, str.2cloud
jmp 0x10019459
push str.local
call dword [0x10146514]
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, str.2local
jmp 0x10019459
lea ecx, [esp + 0x28]
mov byte [esp + 0x258], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x258], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, str.unknown
mov ecx, dword [esp + 0x250]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [esp + 0x240]
xor ecx, esp
call fcn.1012d370
add esp, 0x250
ret