Function at 0x4606f0
Capabilities:
Delete file
Get file size
Print debug messages
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x202c]
mov eax, 0x202c
call fcn.00475e50
push 0xffffffffffffffff
push 0x47db26
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x4a5eb0]
xor eax, ebp
mov dword [ebp + 0x2028], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov eax, dword [0x4a643c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a643c
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], 0
call edx
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x2034]
mov ecx, dword [ebp + 0x203c]
push eax
push ecx
lea edx, [ebp - 0x18]
push str._s_s.xml
push edx
mov byte [ebp - 4], 2
call fcn.00402e80
push 0x4000
call fcn.00467b98
add esp, 0x14
push 0x480de0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.00406300
mov eax, dword [0x4a643c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a643c
mov byte [ebp - 4], 3
call edx
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [0x4a643c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a643c
mov byte [ebp - 4], 4
call edx
add eax, 0x10
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp + 0x2034]
push ecx
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.0045f3b0
mov edx, dword [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push str.ATPROF__s__r_n
push eax
call fcn.0040e480
mov ebx, dword [ebp - 0x1c]
mov edi, dword [ebx - 0xc]
add esp, 0xc
cmp dword [ebx - 4], 1
jle 0x460809
mov ecx, edi
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004015e0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [esi]
push 0x2710
push edi
push ebx
push eax
call fcn.00426020
test eax, eax
jl 0x460ab9
mov edi, dword [ebp - 0x30]
mov eax, dword [ebx - 0xc]
push 0x2710
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x2c]
push ecx
push edi
push eax
mov ecx, esi
call fcn.00460550
test eax, eax
jne 0x460927
push edi
call sub.MSVCR90.dll_void___cdecl_operator_delete___void__
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
add esp, 4
mov byte [ebp - 4], 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x460870
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebx - 0x10]
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460890
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4608b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4608d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4608fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46098d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46098d
cmp dword [ebp - 0x2c], 0
jne 0x4609b6
mov ebx, dword [ebx - 0xc]
push 0x2710
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x2c]
push edx
push edi
push ebx
mov ecx, esi
call fcn.00460550
test eax, eax
jne 0x4609b6
push edi
call sub.MSVCR90.dll_void___cdecl_operator_delete___void__
add esp, 4
lea ecx, [ebp - 0x24]
call fcn.004023d0
lea ecx, [ebp - 0x1c]
call fcn.004023d0
lea ecx, [ebp - 0x20]
call fcn.004023d0
lea ecx, [ebp - 0x18]
call fcn.004023d0
lea ecx, [ebp + 0x2034]
call fcn.004023d0
lea ecx, [ebp + 0x203c]
call fcn.004023d0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2028]
xor ecx, ebp
call fcn.00475d76
add ebp, 0x202c
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov dword [ebp - 0x14], edi
jmp 0x4609c0
mov eax, dword [edi + 0x491cfc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00409760
push eax
lea ecx, [ebp - 0x20]
push ecx
call fcn.00406b00
mov bl, al
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
add esp, 8
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4609fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
jne 0x460a0e
inc dword [ebp - 0x14]
add edi, 0xc
cmp edi, 0x24
jb 0x4609c0
jmp 0x460a3f
mov edi, dword [ebp - 0x14]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edi, [edi + edi*2]
add edi, edi
mov ecx, dword [edi + edi + 0x491d00]
add edi, edi
push ecx
lea edx, [ebp + 0x2014]
push edx
call ebx
mov eax, dword [edi + 0x491d04]
push eax
lea ecx, [ebp + 0x2000]
push ecx
call ebx
xor ebx, ebx
mov byte [ebp - 4], 6
cmp dword [ebp + 0x2038], ebx
jne 0x460cbe
mov edx, dword [ebp - 0x18]
push ebx
push ebx
push 3
push ebx
push ebx
push SysReAllocString
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
mov dword [ebp - 0x34], edi
cmp edi, 0xffffffff
je 0x460a81
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, dword [ebp - 0x2c]
jne 0x460cbe
lea eax, [ebp + 0x2000]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x460a93
mov ecx, dword [esi]
push 0x2710
sub eax, edx
push eax
lea eax, [ebp + 0x2000]
push eax
push ecx
call fcn.00426020
test eax, eax
jge 0x460ba8
push str._NPSDM__SaveProfile_Fail
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460ae7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460b0a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460b2d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460b50
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460b76
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46098d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46098d
mov esi, dword [esi]
push 1
lea ecx, [ebp - 0x28]
push ecx
push 0x2710
lea edx, [ebp - 0x14]
push edx
push 0x2000
lea eax, [ebp]
push eax
push esi
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], fcn.0045e690
call fcn.004260d0
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460bfc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460c1f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460c42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460c65
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460c8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460cb4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x46098f
push str.__
lea ecx, [ebp - 0x14]
call fcn.00409760
lea ecx, [ebp - 0x18]
push ecx
push eax
lea edx, [ebp - 0x28]
mov bl, 7
push edx
mov byte [ebp - 4], bl
call fcn.00410e40
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call fcn.00404450
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460d10
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov byte [ebp - 4], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460d33
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0x18]
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
mov dword [ebp - 0x34], ebx
cmp ebx, 0xffffffff
jne 0x460e6e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov ecx, esi
call fcn.0045f220
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x460d8d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460db0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460dd3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460df6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460e16
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460e3c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46098d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46098d
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
jmp 0x460e80
cmp dword [ebp - 0x14], 0
lea eax, [ebp + 0x2014]
lea edx, [eax + 1]
jle 0x461112
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x460e93
mov ecx, dword [esi]
push 0x2710
sub eax, edx
push eax
lea edx, [ebp + 0x2014]
push edx
push ecx
call fcn.00426020
test eax, eax
jge 0x460faf
push str._NPSDM__SaveProfile_Fail___ATSend
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460eee
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460f11
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460f34
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460f57
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460f7d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46098d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46098d
mov ecx, dword [ebp - 0x30]
mov edi, 0x4000
push edi
push 0
push ecx
call sub.MSVCR90.dll_memset
mov ecx, dword [ebp - 0x30]
add esp, 0xc
push 0x2710
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x38]
push eax
push edi
push ecx
mov ecx, esi
call fcn.004604e0
cmp eax, 1
je 0x4610ee
mov edx, dword [ebp - 0x30]
push edx
call sub.MSVCR90.dll_void___cdecl_operator_delete___void__
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x18]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str._NPSDM__SaveProfile_Fail___ReadXMLData
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461030
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461053
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461076
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461096
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4610bc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46098d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46098d
mov edi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x28]
push ecx
push edi
push edx
push ebx
mov dword [ebp - 0x28], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub dword [ebp - 0x14], edi
jmp 0x460e80
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x461112
mov ecx, dword [esi]
push 0x2710
sub eax, edx
push eax
lea eax, [ebp + 0x2014]
push eax
push ecx
call fcn.00426020
mov edi, eax
test edi, edi
jge 0x46127b
mov edx, dword [0x4a643c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4a643c
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
push edi
lea ecx, [ebp - 0x14]
push str._NPSDM__SaveProfile_lastpacket_error___d
push ecx
mov byte [ebp - 4], 9
call fcn.00402e80
mov esi, dword [ebp - 0x14]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esi - 0x10]
mov byte [ebp - 4], 6
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x461197
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4611ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4611dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461200
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461223
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461249
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46098d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46098d
mov edi, dword [ebp - 0x30]
push 0x2710
lea ecx, [ebp - 0x38]
push ecx
push 0x64
push edi
mov ecx, esi
call fcn.0045e890
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call sub.MSVCR90.dll_void___cdecl_operator_delete___void__
add esp, 4
push str._NPSDM__SaveProfile_Success
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4612d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4612f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46131c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46133f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x2034]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x461365
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x203c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x460cb4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x46098f