Function at 0x409c11
Capabilities:
Check if file exists
Delete file
Get common file path
Get disk information
Get session user name
Query environment variable
Read .ini file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1050
call fcn.00415b60
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 0x2fc]
test eax, eax
jg 0x409c49
mov dword [edi + 0x314], 1
mov dword [edi + 0x310], 0x259
xor eax, eax
jmp 0x40a95f
push 0x41a654
push 4
call fcn.00409b37
mov eax, dword [0x41dddc]
pop ecx
pop ecx
mov esi, 0x41dddc
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [edi + 0xbc]
lea ebx, [eax + 0x10]
lea eax, [ebp - 0x25c]
push eax
mov ecx, 0x104
mov dword [ebp - 0xc], ebx
call fcn.00401fb7
push 0x419294
lea eax, [ebp - 0x25c]
push eax
call dword [0x417290]
lea eax, [ebp - 0x25c]
push eax
call dword [0x417284]
test eax, eax
je 0x409cb9
cmp dword [edi + 0xe0], 0
jne 0x409cb9
lea eax, [ebx - 0x10]
call fcn.00404aac
jmp 0x409c42
lea eax, [ebp - 0x25c]
push eax
call dword [0x4170f0]
lea eax, [ebp - 0x50]
push eax
call dword [0x4170bc]
mov edi, 0x80
push edi
lea eax, [ebp - 0xc3c]
push eax
push str.yyyy_MM_dd
lea eax, [ebp - 0x50]
push eax
push 0
mov ebx, 0x400
push ebx
call dword [0x4170c0]
push edi
lea eax, [ebp - 0xb3c]
push eax
push str.h:mm:ss_tt
lea eax, [ebp - 0x50]
push eax
push 0
push ebx
call dword [0x4170c4]
mov eax, dword [0x41dddc]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xb3c]
push eax
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0x38]
push str._s____s
push eax
call fcn.0040389f
mov ebx, dword [0x417220]
add esp, 0x10
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0x38]
mov edi, 0x4192c0
push 0x4192ac
push edi
call ebx
lea eax, [ebp - 0x25c]
push eax
push 0x418ee0
push str.IniVersion
push edi
call ebx
mov esi, 0x114
push esi
lea eax, [ebp - 0x374]
push 0
push eax
call fcn.0040f5f0
add esp, 0xc
lea eax, [ebp - 0x374]
push eax
mov dword [ebp - 0x374], esi
call dword [0x417208]
test eax, eax
je 0x409dcb
push dword [ebp - 0x36c]
lea eax, [ebp - 0xc]
push dword [ebp - 0x370]
push str._d._d
push eax
call fcn.0040389f
add esp, 0x10
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0xc]
push 0x41a6f4
push edi
call ebx
mov esi, 0xac
push esi
lea eax, [ebp - 0x424]
push 0
push eax
call fcn.0040f5f0
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0xe44]
push eax
call fcn.0040caef
pop ecx
test eax, eax
pop ecx
lea eax, [ebp - 0x25c]
push eax
jne 0x409e1e
call dword [0x4170f0]
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
jmp 0x409cb2
lea eax, [ebp - 0xe44]
push eax
push 0x4192cc
push edi
call ebx
lea eax, [ebp - 0x25c]
push eax
push str.NEVER_EVER_edit_the_below_line
push str.WARNING_1
push edi
call ebx
lea eax, [ebp - 0x25c]
push eax
push esi
lea eax, [ebp - 0x424]
push eax
push 0x41a758
push edi
call dword [0x417100]
lea eax, [ebp - 0x25c]
push eax
push str.NEVER_EVER_edit_the_above_line
push str.WARNING_2
push edi
call ebx
mov eax, 0x104
push eax
push eax
lea esi, [ebp - 0xc]
call fcn.00404ba8
push eax
push 0x41a7bc
call dword [0x417104]
mov dword [ebp - 0x14], eax
call fcn.00404a14
cmp dword [ebp - 0x14], 0
jne 0x409eb1
mov eax, 0x104
push eax
push eax
call fcn.00404ba8
push eax
call dword [0x4170d0]
call fcn.00404a14
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0xc]
push 0x4192e0
push edi
call ebx
push 2
pop ecx
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0xc]
call fcn.0040320b
mov eax, 0x104
push eax
push eax
lea esi, [ebp - 0xc]
call fcn.00404ba8
push eax
push dword [ebp - 0x3c]
call dword [0x4170f8]
mov dword [ebp - 0x14], eax
call fcn.00404a14
cmp dword [ebp - 0x14], 0
je 0x409f0a
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0xc]
push str.WinDevice
push edi
call ebx
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x104c]
push eax
mov dword [ebp - 0x40], 0x100
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x409f48
lea eax, [ebp - 0x104c]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004030f8
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0xc]
push 0x41a7ec
push edi
call ebx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2fc]
and dword [ebp - 8], 0
test eax, eax
jle 0x40a1ff
mov eax, dword [0x41dddc]
mov esi, 0x41dddc
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [0x41dddc]
mov ecx, esi
call dword [eax + 0xc]
mov edi, dword [ebp - 8]
push edi
add eax, 0x10
push 0x4192f0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0x4192fc
push eax
call fcn.0040389f
mov esi, dword [ebp + 8]
add esi, 0x2f8
add esp, 0x10
mov eax, edi
mov ecx, esi
call fcn.0040c214
cmp dword [eax], 0x80000002
jne 0x409fbd
mov eax, 0x41a7fc
jmp 0x409ff0
mov eax, edi
mov ecx, esi
call fcn.0040c214
cmp dword [eax], 0x80000001
jne 0x409fd5
mov eax, str.CURUSER
jmp 0x409ff0
mov eax, edi
mov ecx, esi
call fcn.0040c214
cmp dword [eax], 0x80000003
mov eax, 0x41a81c
je 0x409ff0
mov eax, 0x419a78
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004030f8
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 8]
add esi, 0x2f8
mov ecx, esi
call fcn.0040c214
add eax, 4
push eax
push 0x41a444
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x30]
call fcn.004032ea
pop ecx
lea ecx, [ebp - 0x34]
call fcn.004032ea
mov eax, dword [eax]
pop ecx
lea ecx, [ebp - 0x25c]
push ecx
push eax
push 0x41a828
push dword [ebp - 0x14]
call ebx
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp - 8]
mov ecx, esi
call fcn.0040c214
mov edi, eax
add edi, 0x414
lea esi, [ebp - 0x18]
call fcn.00403083
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi - 0xc]
add eax, 0xbc
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
mov edi, ecx
sub edi, eax
mov edx, eax
mov dword [ebp - 0x1c], edx
test eax, eax
jge 0x40a096
and dword [ebp - 0x1c], 0
mov edx, dword [ebp - 0x1c]
test edi, edi
jge 0x40a09c
xor edi, edi
mov eax, 0x7fffffff
sub eax, edx
cmp eax, edi
jl 0x40a2a9
lea eax, [edx + edi]
cmp eax, ecx
jle 0x40a0b6
mov edi, ecx
sub edi, edx
cmp edx, ecx
jle 0x40a0bc
xor edi, edi
test edx, edx
jne 0x40a0d4
cmp edi, ecx
jne 0x40a0d4
lea eax, [esi - 0x10]
call fcn.004037c8
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x40a0ed
lea eax, [ebp - 0x18]
call fcn.004035cf
mov ecx, dword [ebp - 0x1c]
lea ecx, [esi + ecx*2]
push ecx
mov ecx, eax
lea esi, [ebp - 0x20]
call fcn.0040357b
lea eax, [ebp - 0x20]
lea edi, [ebp - 0x18]
call fcn.004030b7
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
call fcn.00404aac
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0x18]
push 0x41a834
push dword [ebp - 0x14]
call ebx
mov eax, dword [0x41dddc]
mov ecx, 0x41dddc
call dword [eax + 0xc]
mov ecx, dword [ebp + 8]
add eax, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
add ecx, 0x2f8
call fcn.0040c214
mov edi, eax
push ecx
add edi, 0xc34
mov esi, esp
call fcn.00403083
call fcn.00409b7f
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
pop ecx
pop ecx
lea eax, [ebp - 0x25c]
push eax
push edi
push 0x41a840
push esi
call ebx
mov eax, dword [0x41dddc]
mov ecx, 0x41dddc
call dword [eax + 0xc]
mov ecx, dword [ebp + 8]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
add ecx, 0x2f8
call fcn.0040c214
push dword [eax + 0x1044]
lea eax, [ebp - 0x1c]
push 0x418ee8
push eax
call fcn.0040389f
add esp, 0xc
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0x1c]
push 0x419308
push esi
call ebx
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.00404aac
lea eax, [edi - 0x10]
call fcn.00404aac
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00404aac
lea eax, [esi - 0x10]
call fcn.00404aac
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.00404aac
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
cmp ecx, dword [eax + 0x2fc]
jl 0x409f5d
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2fc]
and dword [ebp - 8], 0
and dword [ebp - 0x14], 0
test eax, eax
jle 0x40a314
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push 0x418ee8
push eax
call fcn.0040389f
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x14]
add esp, 0xc
inc dword [ebp - 8]
add ecx, 0x2f8
call fcn.0040c214
mov edi, eax
add edi, 0x414
lea esi, [ebp - 0x18]
call fcn.00403083
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx - 0xc]
add eax, 0xbc
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
mov edi, ecx
sub edi, eax
mov esi, eax
test eax, eax
jge 0x40a26f
xor esi, esi
test edi, edi
jge 0x40a275
xor edi, edi
mov eax, 0x7fffffff
sub eax, esi
cmp eax, edi
jl 0x40a2a9
lea eax, [esi + edi]
cmp eax, ecx
jle 0x40a28b
mov edi, ecx
sub edi, esi
cmp esi, ecx
jle 0x40a291
xor edi, edi
test esi, esi
jne 0x40a2b3
cmp edi, ecx
jne 0x40a2b3
lea eax, [edx - 0x10]
call fcn.004037c8
add eax, 0x10
mov dword [ebp - 0x10], eax
jmp 0x40a2cc
push 0x80070057
call fcn.00404c03
lea eax, [ebp - 0x18]
call fcn.004035cf
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx + esi*2]
push ecx
mov ecx, eax
lea esi, [ebp - 0x10]
call fcn.0040357b
lea eax, [ebp - 0x10]
lea edi, [ebp - 0x18]
call fcn.004030b7
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.00404aac
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x25c]
push eax
push esi
push dword [ebp - 0xc]
push str.Files
call ebx
lea eax, [esi - 0x10]
call fcn.00404aac
inc dword [ebp - 0x14]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x2fc]
jl 0x40a218
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push 0x418ee8
push eax
call fcn.0040389f
add esp, 0xc
inc dword [ebp - 8]
lea eax, [ebp - 0x25c]
push eax
mov esi, str.REGRES.WRC
push esi
push dword [ebp - 0xc]
mov edi, str.Files
push edi
call ebx
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push 0x418ee8
push eax
call fcn.0040389f
add esp, 0xc
inc dword [ebp - 8]
lea eax, [ebp - 0x25c]
push eax
push str.REGRES.EXE
push dword [ebp - 0xc]
push edi
call ebx
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push 0x418ee8
push eax
call fcn.0040389f
add esp, 0xc
lea eax, [ebp - 0x25c]
push eax
push 0x419294
push dword [ebp - 0xc]
push edi
call ebx
mov eax, dword [ebp + 8]
add eax, 0xbc
mov edx, dword [eax]
lea eax, [ebp - 0xa3c]
push eax
mov ecx, 0x104
call fcn.00401fb7
push esi
lea eax, [ebp - 0xa3c]
push eax
call dword [0x417290]
lea eax, [ebp - 0xa3c]
push eax
call dword [0x4170f0]
xor eax, eax
push eax
push 0x80
push 2
push eax
push eax
push 0x40000000
lea eax, [ebp - 0xa3c]
push eax
xor esi, esi
call dword [0x4170e0]
mov dword [ebp - 0x20], eax
cmp eax, 0xffffffff
je 0x40a5d8
mov edi, dword [ebp + 8]
and dword [ebp - 8], esi
cmp dword [edi + 0x2fc], esi
jle 0x40a5cb
mov eax, dword [ebp - 8]
lea ecx, [edi + 0x2f8]
call fcn.0040c214
test byte [eax + 0x1044], 1
je 0x40a5b9
mov eax, dword [ebp - 8]
lea ecx, [edi + 0x2f8]
call fcn.0040c214
mov esi, eax
add esi, 0x824
je 0x40a448
push esi
call dword [0x4171f8]
inc eax
cmp eax, 0x3fffffff
jle 0x40a44e
and dword [ebp - 0x10], 0
jmp 0x40a46b
lea edi, [eax + eax]
mov eax, edi
call fcn.004158e0
mov eax, esp
push 3
push edi
push esi
mov esi, eax
call fcn.0040c864
mov edi, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
lea ecx, [edi + 0x2f8]
call fcn.0040c214
mov esi, eax
add esi, 0xc34
je 0x40a492
push esi
call dword [0x4171f8]
inc eax
cmp eax, 0x3fffffff
jle 0x40a496
xor eax, eax
jmp 0x40a4b0
lea edi, [eax + eax]
mov eax, edi
call fcn.004158e0
mov eax, esp
push 3
push edi
push esi
mov esi, eax
call fcn.0040c864
mov edi, dword [ebp + 8]
push dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x734]
push str.copy___s____s__r_n
push eax
call dword [0x4172d4]
add esp, 0x10
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x734]
push eax
call dword [0x417108]
push eax
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0x20]
call dword [0x4170e4]
mov eax, dword [ebp - 8]
lea ecx, [edi + 0x2f8]
call fcn.0040c214
mov esi, eax
add esi, 0xc34
je 0x40a514
push esi
call dword [0x4171f8]
inc eax
cmp eax, 0x3fffffff
jle 0x40a51a
and dword [ebp - 0x10], 0
jmp 0x40a537
lea edi, [eax + eax]
mov eax, edi
call fcn.004158e0
mov eax, esp
push 3
push edi
push esi
mov esi, eax
call fcn.0040c864
mov edi, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
lea ecx, [edi + 0x2f8]
call fcn.0040c214
mov esi, eax
add esi, 4
je 0x40a55b
push esi
call dword [0x4171f8]
inc eax
cmp eax, 0x3fffffff
jle 0x40a55f
xor eax, eax
jmp 0x40a579
lea edi, [eax + eax]
mov eax, edi
call fcn.004158e0
mov eax, esp
push 3
push edi
push esi
mov esi, eax
call fcn.0040c864
mov edi, dword [ebp + 8]
push dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x734]
push str.copy___s____s__r_n
push eax
call dword [0x4172d4]
add esp, 0x10
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x734]
push eax
call dword [0x417108]
push eax
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0x20]
call dword [0x4170e4]
xor esi, esi
inc esi
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp eax, dword [edi + 0x2fc]
jl 0x40a406
push dword [ebp - 0x20]
call dword [0x41709c]
test esi, esi
jne 0x40a5e5
lea eax, [ebp - 0xa3c]
push eax
call dword [0x4170f0]
xor eax, eax
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
call fcn.0040c357
mov eax, dword [0x41dddc]
mov ecx, 0x41dddc
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
add eax, 0xbc
lea edi, [ebp - 0xc]
call fcn.004030b7
mov eax, dword [ebp + 8]
add eax, 0xc4
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
je 0x40a679
lea edi, [ebp - 8]
call fcn.004030b7
mov eax, edi
call fcn.0040bc8c
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
call fcn.004037c8
add eax, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
call fcn.0040bc8c
mov eax, dword [ebp - 8]
xor ecx, ecx
lea esi, [ebp - 0x10]
call fcn.00403144
cmp eax, 0xffffffff
je 0x40a66e
push eax
lea eax, [ebp - 0xc]
call fcn.0040336f
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp + 8]
add eax, 0xc0
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
je 0x40a6d7
lea edi, [ebp - 8]
call fcn.004030b7
mov eax, edi
call fcn.0040bc8c
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
call fcn.004037c8
add eax, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
call fcn.0040bc8c
mov eax, dword [ebp - 8]
xor ecx, ecx
lea esi, [ebp - 0x10]
call fcn.00403144
cmp eax, 0xffffffff
je 0x40a6cc
push eax
lea eax, [ebp - 0xc]
call fcn.0040336f
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [0x41dddc]
mov ecx, 0x41dddc
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0xc]
push ecx
add eax, 0xfffffff0
mov esi, esp
call fcn.004037c8
push dword [ebp + 8]
add eax, 0x10
mov dword [esi], eax
call fcn.004088d3
mov edx, dword [ebp - 0x18]
call fcn.004084d5
cmp eax, 3
jne 0x40a727
lea ebx, [ebp - 0x18]
lea esi, [ebp - 0x2c]
call fcn.0040c2e1
mov ebx, dword [0x417220]
and dword [ebp - 0x14], 0
push dword [ebp - 0x14]
lea eax, [ebp - 0xc]
push 0x418ee8
push eax
call fcn.0040389f
add esp, 0xc
mov esi, 0x41e9d0
push esi
push 0x208
lea eax, [ebp - 0x834]
push eax
push 0x419a78
push dword [ebp - 0xc]
mov edi, str.BackupDirs
push edi
call dword [0x41722c]
test eax, eax
je 0x40a8cf
lea eax, [ebp - 0x834]
push eax
call dword [0x417268]
lea eax, [ebp - 0x834]
push eax
call dword [0x4171f8]
cmp eax, 2
jl 0x40a8cf
lea eax, [ebp - 0x834]
push eax
call dword [0x417278]
lea edi, [ebp - 0x834]
lea esi, [ebp + 8]
call fcn.00403083
mov ebx, esi
call fcn.0040316d
call fcn.004031af
xor esi, esi
cmp dword [ebp - 0x28], esi
jle 0x40a87f
mov ebx, 0x41a464
push ebx
mov eax, esi
lea ecx, [ebp - 0x2c]
call fcn.0040c449
lea ecx, [ebp - 0x30]
call fcn.004032ea
mov edi, dword [0x417260]
pop ecx
push dword [eax]
push dword [ebp + 8]
call edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
call fcn.00404aac
cmp dword [ebp - 0x34], 0
jne 0x40a8a4
push ebx
lea eax, [ebp + 8]
lea ecx, [ebp - 0x10]
call fcn.004032ea
mov ebx, dword [eax]
pop ecx
mov eax, esi
lea ecx, [ebp - 0x2c]
call fcn.0040c449
mov eax, dword [eax]
push ebx
push eax
call edi
mov edi, eax
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.00404aac
mov ebx, dword [ebp - 0x28]
test edi, edi
je 0x40a876
test esi, esi
jl 0x40a874
cmp esi, ebx
jge 0x40a874
mov eax, dword [ebp - 0x2c]
lea edi, [eax + esi*4]
mov eax, dword [edi]
sub eax, 0x10
call fcn.00404aac
lea eax, [ebx - 1]
mov dword [ebp - 0x34], eax
cmp esi, eax
je 0x40a86f
sub ebx, esi
shl ebx, 2
lea eax, [ebx - 4]
push eax
lea eax, [edi + 4]
push eax
push ebx
push edi
call fcn.004046f3
mov eax, dword [ebp - 0x34]
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, eax
xor esi, esi
inc esi
cmp esi, ebx
jl 0x40a7c2
push dword [ebp + 8]
call dword [0x417258]
test eax, eax
je 0x40a8a4
mov edx, dword [ebp + 8]
call fcn.004084d5
cmp eax, 3
jne 0x40a8a4
lea ebx, [ebp + 8]
lea esi, [ebp - 0x2c]
call fcn.0040c2e1
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.00404aac
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3e8
mov ebx, dword [0x417220]
jl 0x40a72b
mov edi, str.BackupDirs
mov esi, 0x41e9d0
cmp dword [0x41ebdc], 0
jne 0x40a91d
push esi
push 0
push 0
push edi
call ebx
and dword [ebp + 8], 0
cmp dword [ebp - 0x28], 0
jle 0x40a91d
push dword [ebp + 8]
lea eax, [ebp - 0xc]
push 0x418ee8
push eax
call fcn.0040389f
mov eax, dword [ebp + 8]
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.0040c449
push esi
push dword [eax]
push dword [ebp - 0xc]
push edi
call ebx
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x28]
jl 0x40a8ea
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp - 8]
add eax, 0xfffffff0
call fcn.00404aac
lea esi, [ebp - 0x2c]
call fcn.0040c357
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.00404aac
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
call fcn.00404aac
xor eax, eax
inc eax
lea esp, [ebp - 0x105c]
pop edi
pop esi
pop ebx
leave
ret 4