Function at 0x40b700
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [esi + 0x98]
test eax, eax
je 0x40b74b
cmp byte [esi + 1], 0
je 0x40b74b
mov byte [eax + 0x10], 0
mov ebx, dword [esi + 0x98]
test ebx, ebx
je 0x40b74b
mov ecx, ebx
call fcn.00434360
mov eax, dword [0x45e820]
test eax, eax
je 0x40b745
dec dword [eax + 0x374]
push ebx
call edi
add esp, 4
cmp byte [esi], 0
mov dword [esi + 0x98], 0
je 0x40bf2d
cmp byte [esi + 0x2fe0], 0
je 0x40b7c5
mov ebx, dword [esi + 0x20]
test ebx, ebx
je 0x40b7c5
mov eax, dword [0x45e820]
lea ecx, [ebp - 4]
mov dword [ebp - 8], eax
mov dword [0x45e820], esi
mov dword [esi + 0x2fe4], 0
mov dword [ebp - 4], 0
call fcn.0041b910
mov edx, 0x4529fc
mov dword [ebp - 0xc], eax
mov ecx, ebx
call fcn.00405be0
mov ebx, eax
test ebx, ebx
je 0x40b7cd
push ebx
push dword [ebp - 4]
push 1
push dword [ebp - 0xc]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
jmp 0x40b7cd
mov eax, dword [0x45e820]
mov dword [ebp - 8], eax
mov dword [0x45e820], esi
call fcn.0041e4b0
mov eax, dword [ebp - 8]
xor ebx, ebx
mov dword [0x45e820], eax
mov eax, dword [esi + 0x2fb8]
test eax, eax
jle 0x40b84a
nop dword [eax]
test ebx, ebx
js 0x40b7f8
cmp ebx, eax
jl 0x40b810
push 0x6ca
push str.C:UsersXDesktop_freeimguiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x2fc0]
mov eax, dword [eax + ebx*8 + 4]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x40b83f
mov ecx, eax
call fcn.0041fd70
mov eax, dword [0x45e820]
test eax, eax
je 0x40b837
dec dword [eax + 0x374]
push dword [ebp - 0xc]
call edi
add esp, 4
mov eax, dword [esi + 0x2fb8]
inc ebx
cmp ebx, eax
jl 0x40b7f0
mov edx, 6
mov ecx, esi
call fcn.00408d60
mov eax, dword [esi + 0x1c00]
xor ebx, ebx
test eax, eax
jle 0x40b8bb
test ebx, ebx
js 0x40b86a
cmp ebx, eax
jl 0x40b882
push 0x6ca
push str.C:UsersXDesktop_freeimguiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x1c08]
mov eax, dword [eax + ebx*4]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x40b8b0
mov ecx, eax
call fcn.00408470
mov eax, dword [0x45e820]
test eax, eax
je 0x40b8a8
dec dword [eax + 0x374]
push dword [ebp - 0xc]
call edi
add esp, 4
mov eax, dword [esi + 0x1c00]
inc ebx
cmp ebx, eax
jl 0x40b862
mov ecx, dword [esi + 0x1c08]
test ecx, ecx
je 0x40b8f8
mov eax, dword [0x45e820]
mov dword [esi + 0x1c04], 0
mov dword [esi + 0x1c00], 0
test eax, eax
je 0x40b8e8
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1c08], 0
mov ecx, dword [esi + 0x1c14]
test ecx, ecx
je 0x40b935
mov eax, dword [0x45e820]
mov dword [esi + 0x1c10], 0
mov dword [esi + 0x1c0c], 0
test eax, eax
je 0x40b925
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1c14], 0
mov ecx, dword [esi + 0x1c20]
test ecx, ecx
je 0x40b972
mov eax, dword [0x45e820]
mov dword [esi + 0x1c1c], 0
mov dword [esi + 0x1c18], 0
test eax, eax
je 0x40b962
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1c20], 0
mov dword [esi + 0x1c48], 0
mov ecx, dword [esi + 0x1c2c]
test ecx, ecx
je 0x40b9b9
mov eax, dword [0x45e820]
mov dword [esi + 0x1c28], 0
mov dword [esi + 0x1c24], 0
test eax, eax
je 0x40b9a9
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1c2c], 0
mov ecx, dword [esi + 0x1c38]
test ecx, ecx
je 0x40b9f6
mov eax, dword [0x45e820]
mov dword [esi + 0x1c34], 0
mov dword [esi + 0x1c30], 0
test eax, eax
je 0x40b9e6
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1c38], 0
mov dword [esi + 0x1e18], 0
mov dword [esi + 0x1c50], 0
mov dword [esi + 0x1c4c], 0
mov dword [esi + 0x1cc4], 0
mov dword [esi + 0x1cb0], 0
mov dword [esi + 0x1c58], 0
mov ecx, dword [esi + 0x1d78]
test ecx, ecx
je 0x40ba6f
mov eax, dword [0x45e820]
mov dword [esi + 0x1d74], 0
mov dword [esi + 0x1d70], 0
test eax, eax
je 0x40ba5f
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1d78], 0
mov ecx, dword [esi + 0x1d84]
test ecx, ecx
je 0x40baac
mov eax, dword [0x45e820]
mov dword [esi + 0x1d80], 0
mov dword [esi + 0x1d7c], 0
test eax, eax
je 0x40ba9c
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1d84], 0
mov ecx, dword [esi + 0x1d90]
test ecx, ecx
je 0x40bae9
mov eax, dword [0x45e820]
mov dword [esi + 0x1d8c], 0
mov dword [esi + 0x1d88], 0
test eax, eax
je 0x40bad9
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1d90], 0
mov ecx, dword [esi + 0x1dc0]
test ecx, ecx
je 0x40bb26
mov eax, dword [0x45e820]
mov dword [esi + 0x1dbc], 0
mov dword [esi + 0x1db8], 0
test eax, eax
je 0x40bb16
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1dc0], 0
mov ecx, dword [esi + 0x1dcc]
test ecx, ecx
je 0x40bb63
mov eax, dword [0x45e820]
mov dword [esi + 0x1dc8], 0
mov dword [esi + 0x1dc4], 0
test eax, eax
je 0x40bb53
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1dcc], 0
mov eax, dword [esi + 0x1dd0]
xor ebx, ebx
mov dword [esi + 0x1de8], 0
mov dword [esi + 0x1de4], 0
mov dword [esi + 0x1de0], 0
test eax, eax
jle 0x40bbc9
nop dword [eax]
test ebx, ebx
js 0x40bb98
cmp ebx, eax
jl 0x40bbb0
push 0x6ca
push str.C:UsersXDesktop_freeimguiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov ecx, dword [esi + 0x1dd8]
mov ecx, dword [ecx + ebx*4]
call fcn.004293f0
mov eax, dword [esi + 0x1dd0]
inc ebx
cmp ebx, eax
jl 0x40bb90
mov ecx, dword [esi + 0x1dd8]
test ecx, ecx
je 0x40bc06
mov eax, dword [0x45e820]
mov dword [esi + 0x1dd4], 0
mov dword [esi + 0x1dd0], 0
test eax, eax
je 0x40bbf6
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x1dd8], 0
lea ecx, [esi + 0x2034]
call fcn.00428600
mov ecx, dword [esi + 0x2058]
test ecx, ecx
je 0x40bc4e
mov eax, dword [0x45e820]
mov dword [esi + 0x2054], 0
mov dword [esi + 0x2050], 0
test eax, eax
je 0x40bc3e
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2058], 0
mov ecx, dword [esi + 0x2064]
test ecx, ecx
je 0x40bc8b
mov eax, dword [0x45e820]
mov dword [esi + 0x2060], 0
mov dword [esi + 0x205c], 0
test eax, eax
je 0x40bc7b
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2064], 0
lea ecx, [esi + 0x1ff0]
call fcn.00428800
mov ecx, dword [esi + 0x2014]
test ecx, ecx
je 0x40bcd3
mov eax, dword [0x45e820]
mov dword [esi + 0x2010], 0
mov dword [esi + 0x200c], 0
test eax, eax
je 0x40bcc3
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2014], 0
mov ecx, dword [esi + 0x202c]
test ecx, ecx
je 0x40bd10
mov eax, dword [0x45e820]
mov dword [esi + 0x2028], 0
mov dword [esi + 0x2024], 0
test eax, eax
je 0x40bd00
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x202c], 0
mov ecx, dword [esi + 0x2f90]
test ecx, ecx
je 0x40bd4d
mov eax, dword [0x45e820]
mov dword [esi + 0x2f8c], 0
mov dword [esi + 0x2f88], 0
test eax, eax
je 0x40bd3d
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2f90], 0
mov ecx, dword [esi + 0x2f9c]
test ecx, ecx
je 0x40bd8a
mov eax, dword [0x45e820]
mov dword [esi + 0x2f98], 0
mov dword [esi + 0x2f94], 0
test eax, eax
je 0x40bd7a
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2f9c], 0
mov ecx, dword [esi + 0x2084]
test ecx, ecx
je 0x40bdc7
mov eax, dword [0x45e820]
mov dword [esi + 0x2080], 0
mov dword [esi + 0x207c], 0
test eax, eax
je 0x40bdb7
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2084], 0
mov ecx, dword [esi + 0x2090]
test ecx, ecx
je 0x40be04
mov eax, dword [0x45e820]
mov dword [esi + 0x208c], 0
mov dword [esi + 0x2088], 0
test eax, eax
je 0x40bdf4
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2090], 0
mov ecx, dword [esi + 0x209c]
test ecx, ecx
je 0x40be41
mov eax, dword [0x45e820]
mov dword [esi + 0x2098], 0
mov dword [esi + 0x2094], 0
test eax, eax
je 0x40be31
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x209c], 0
mov ecx, dword [esi + 0x3008]
test ecx, ecx
je 0x40be7e
mov eax, dword [0x45e820]
mov dword [esi + 0x3004], 0
mov dword [esi + 0x3000], 0
test eax, eax
je 0x40be6e
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x3008], 0
mov ecx, dword [esi + 0x2ffc]
test ecx, ecx
je 0x40bebb
mov eax, dword [0x45e820]
mov dword [esi + 0x2ff8], 0
mov dword [esi + 0x2ff4], 0
test eax, eax
je 0x40beab
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x2ffc], 0
cmp dword [esi + 0x3030], 0
je 0x40beed
mov ebx, dword [esi + 0x3030]
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp ebx, eax
je 0x40bee3
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [esi + 0x3030], 0
mov ecx, dword [esi + 0x303c]
test ecx, ecx
je 0x40bf2a
mov eax, dword [0x45e820]
mov dword [esi + 0x3038], 0
mov dword [esi + 0x3034], 0
test eax, eax
je 0x40bf1a
dec dword [eax + 0x374]
push ecx
call edi
add esp, 4
mov dword [esi + 0x303c], 0
mov byte [esi], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret