Function at 0x40cbf0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1bc
mov eax, dword [0x41dedc]
mov ecx, dword [0x41ded8]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], eax
push str.HotKey
lea edx, [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x2c], 0x5b0a0d
mov ecx, 0x18
lea edi, [esp + 0x30]
push edx
rep stosd dword es:[edi], eax
call esi
push 0x4173ec
lea eax, [esp + 0x2c]
push eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x28]
push ecx
call ebx
mov edi, dword [ebp + 8]
push 0
lea edx, [esp + 0x10]
push edx
push eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x34]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [esp + 0x10]
push ecx
push str.Count
lea edx, [esp + 0x30]
mov esi, eax
push str._s_d_r_n
push edx
and esi, 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0x28]
push eax
call ebx
push 0
lea ecx, [esp + 0x10]
push ecx
push eax
lea edx, [esp + 0x34]
push edx
push edi
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
and esi, eax
mov eax, dword [esp + 0x10]
xor edx, edx
test eax, eax
mov dword [esp + 0x14], edx
jl 0x40ce48
mov eax, dword [esp + 0x18]
add eax, 8
mov dword [esp + 0xc], eax
jmp 0x40ccd3
mov edx, dword [esp + 0x14]
xor eax, eax
test edx, edx
mov ecx, 0x18
lea edi, [esp + 0x2c]
mov dword [esp + 0x28], 0x5b0a0d
rep stosd dword es:[edi], eax
jl 0x40cd09
push edx
push str.HotKey_03u
lea ecx, [esp + 0x30]
push ecx
call ebx
lea edx, [esp + eax + 0x30]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40cd19
push str.HotKey_03u
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x4173ec
lea ecx, [esp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [esp + 0x28]
push edx
call ebx
push 0
lea ecx, [esp + 0x1c]
push ecx
push eax
lea edx, [esp + 0x34]
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, dword [esp + 0xc]
movzx ecx, word [edi - 8]
push ecx
push str.Code
lea edx, [esp + 0x100]
push str._s_04x_r_n
push edx
and esi, eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0xf8]
push eax
call ebx
push 0
lea ecx, [esp + 0x24]
push ecx
push eax
lea edx, [esp + 0x104]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [edi - 4]
push ecx
push str.Page
lea edx, [esp + 0x98]
push str._s_d_r_n
push edx
and esi, eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0x90]
push eax
call ebx
push 0
lea ecx, [esp + 0x20]
push ecx
push eax
lea edx, [esp + 0x9c]
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [edi]
push ecx
push str.Button
lea edx, [esp + 0x168]
push str._s_d_r_n
push edx
and esi, eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0x160]
push eax
call ebx
push 0
lea ecx, [esp + 0x28]
push ecx
push eax
lea edx, [esp + 0x16c]
mov dword [esp + 0x30], eax
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [esp + 0x10]
and esi, eax
mov eax, dword [esp + 0x14]
inc eax
add edi, 0xc
cmp eax, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], edi
jle 0x40cccf
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret