Function at 0x406fd0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x98]
test eax, eax
je 0x40701a
cmp byte [esi + 1], 0
je 0x40701a
mov byte [eax], 0
mov edi, dword [esi + 0x98]
test edi, edi
je 0x40701a
mov ecx, edi
call fcn.0041ece0
mov eax, dword [0x6ab9c0]
test eax, eax
je 0x407014
dec dword [eax + 0x374]
push edi
call ebx
add esp, 4
cmp byte [esi], 0
mov dword [esi + 0x98], 0
je 0x4076b5
cmp byte [esi + 0x2e1c], 0
je 0x40709a
mov edi, dword [esi + 0x20]
test edi, edi
je 0x40709a
mov eax, dword [0x6ab9c0]
lea ecx, [ebp - 4]
mov dword [ebp - 0xc], eax
mov dword [0x6ab9c0], esi
mov dword [esi + 0x2e20], 0
mov dword [ebp - 4], 0
call fcn.00413b20
mov edx, 0x431e5c
mov dword [ebp - 8], eax
mov ecx, edi
call fcn.00402cb0
mov edi, eax
test edi, edi
je 0x407092
push edi
push dword [ebp - 4]
push 1
push dword [ebp - 8]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
mov eax, dword [ebp - 0xc]
mov dword [0x6ab9c0], eax
mov eax, dword [esi + 0x19d8]
xor edi, edi
test eax, eax
jle 0x4070fb
cmp edi, eax
jl 0x4070c2
push 0x576
push str.C:UserskaragDesktopmunuguiimgui.h
push str.i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x19e0]
mov eax, dword [eax + edi*4]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x4070f0
mov ecx, eax
call fcn.00404680
mov eax, dword [0x6ab9c0]
test eax, eax
je 0x4070e8
dec dword [eax + 0x374]
push dword [ebp - 0xc]
call ebx
add esp, 4
mov eax, dword [esi + 0x19d8]
inc edi
cmp edi, eax
jl 0x4070c2
mov ecx, dword [esi + 0x19e0]
test ecx, ecx
je 0x407138
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x19dc], 0
mov dword [esi + 0x19d8], 0
test eax, eax
je 0x407128
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x19e0], 0
mov ecx, dword [esi + 0x19ec]
test ecx, ecx
je 0x407175
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x19e8], 0
mov dword [esi + 0x19e4], 0
test eax, eax
je 0x407165
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x19ec], 0
mov ecx, dword [esi + 0x19f8]
test ecx, ecx
je 0x4071b2
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x19f4], 0
mov dword [esi + 0x19f0], 0
test eax, eax
je 0x4071a2
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x19f8], 0
mov dword [esi + 0x1a18], 0
mov ecx, dword [esi + 0x1a04]
test ecx, ecx
je 0x4071f9
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1a00], 0
mov dword [esi + 0x19fc], 0
test eax, eax
je 0x4071e9
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1a04], 0
mov ecx, dword [esi + 0x1a10]
test ecx, ecx
je 0x407236
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1a0c], 0
mov dword [esi + 0x1a08], 0
test eax, eax
je 0x407226
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1a10], 0
mov dword [esi + 0x1b50], 0
mov dword [esi + 0x1a24], 0
mov dword [esi + 0x1a20], 0
mov dword [esi + 0x1a1c], 0
mov dword [esi + 0x1a94], 0
mov dword [esi + 0x1a80], 0
mov dword [esi + 0x1a28], 0
mov ecx, dword [esi + 0x1b1c]
test ecx, ecx
je 0x4072b9
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1b18], 0
mov dword [esi + 0x1b14], 0
test eax, eax
je 0x4072a9
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1b1c], 0
mov ecx, dword [esi + 0x1b28]
test ecx, ecx
je 0x4072f6
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1b24], 0
mov dword [esi + 0x1b20], 0
test eax, eax
je 0x4072e6
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1b28], 0
mov ecx, dword [esi + 0x1b34]
test ecx, ecx
je 0x407333
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1b30], 0
mov dword [esi + 0x1b2c], 0
test eax, eax
je 0x407323
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1b34], 0
mov ecx, dword [esi + 0x1b40]
test ecx, ecx
je 0x407370
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1b3c], 0
mov dword [esi + 0x1b38], 0
test eax, eax
je 0x407360
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1b40], 0
mov ecx, dword [esi + 0x1b4c]
test ecx, ecx
je 0x4073ad
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1b48], 0
mov dword [esi + 0x1b44], 0
test eax, eax
je 0x40739d
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1b4c], 0
mov eax, 2
lea edi, [esi + 0x1cc0]
mov dword [ebp - 4], eax
nop dword [eax + eax]
mov ecx, dword [edi]
test ecx, ecx
je 0x4073f2
mov eax, dword [0x6ab9c0]
mov dword [edi - 4], 0
mov dword [edi - 8], 0
test eax, eax
je 0x4073e3
dec dword [eax + 0x374]
push ecx
call ebx
mov eax, dword [ebp - 4]
add esp, 4
mov dword [edi], 0
add edi, 0xc
sub eax, 1
mov dword [ebp - 4], eax
jne 0x4073c0
lea ecx, [esi + 0x1cd4]
call fcn.0041c130
lea ecx, [esi + 0x1d70]
call fcn.0041c130
lea ecx, [esi + 0x1ea4]
call fcn.00414490
mov ecx, dword [esi + 0x1ec8]
test ecx, ecx
je 0x40745b
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1ec4], 0
mov dword [esi + 0x1ec0], 0
test eax, eax
je 0x40744b
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1ec8], 0
mov ecx, dword [esi + 0x1ed4]
test ecx, ecx
je 0x407498
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1ed0], 0
mov dword [esi + 0x1ecc], 0
test eax, eax
je 0x407488
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1ed4], 0
mov ecx, dword [esi + 0x2dfc]
test ecx, ecx
je 0x4074d5
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x2df8], 0
mov dword [esi + 0x2df4], 0
test eax, eax
je 0x4074c5
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x2dfc], 0
mov ecx, dword [esi + 0x2e08]
test ecx, ecx
je 0x407512
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x2e04], 0
mov dword [esi + 0x2e00], 0
test eax, eax
je 0x407502
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x2e08], 0
mov ecx, dword [esi + 0x1ef4]
test ecx, ecx
je 0x40754f
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1ef0], 0
mov dword [esi + 0x1eec], 0
test eax, eax
je 0x40753f
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1ef4], 0
mov ecx, dword [esi + 0x1f00]
test ecx, ecx
je 0x40758c
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1efc], 0
mov dword [esi + 0x1ef8], 0
test eax, eax
je 0x40757c
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1f00], 0
mov ecx, dword [esi + 0x1f0c]
test ecx, ecx
je 0x4075c9
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x1f08], 0
mov dword [esi + 0x1f04], 0
test eax, eax
je 0x4075b9
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x1f0c], 0
mov ecx, dword [esi + 0x2e44]
test ecx, ecx
je 0x407606
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x2e40], 0
mov dword [esi + 0x2e3c], 0
test eax, eax
je 0x4075f6
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x2e44], 0
mov ecx, dword [esi + 0x2e38]
test ecx, ecx
je 0x407643
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x2e34], 0
mov dword [esi + 0x2e30], 0
test eax, eax
je 0x407633
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x2e38], 0
cmp dword [esi + 0x2e50], 0
je 0x407675
mov edi, dword [esi + 0x2e50]
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp edi, eax
je 0x40766b
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [esi + 0x2e50], 0
mov ecx, dword [esi + 0x2e5c]
test ecx, ecx
je 0x4076b2
mov eax, dword [0x6ab9c0]
mov dword [esi + 0x2e58], 0
mov dword [esi + 0x2e54], 0
test eax, eax
je 0x4076a2
dec dword [eax + 0x374]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x2e5c], 0
mov byte [esi], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret