Function at 0x40ce60
Capabilities:
Write file on windows

Disassembly:
sub esp, 0xd0
push ebx
push ebp
mov ebp, dword [esp + 0xdc]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
xor eax, eax
mov dword [esp + 0x18], 0x5b0a0d
mov ecx, 0x18
lea edi, [esp + 0x1c]
rep stosd dword es:[edi], eax
push str.Mouse
lea eax, [esp + 0x1c]
push eax
call esi
push 0x4173ec
lea ecx, [esp + 0x1c]
push ecx
call esi
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0
lea ecx, [esp + 0x18]
push ecx
push eax
lea edx, [esp + 0x24]
push edx
push ebp
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov edi, eax
and edi, 1
xor ebx, ebx
jmp 0x40cee0
test ebx, ebx
mov eax, dword [ebx*4 + 0x41b0d0]
mov dword [esp + 0x14], eax
mov eax, str.Button_03u
jl 0x40cf07
push ebx
push eax
lea ecx, [esp + 0x84]
push ecx
call esi
add esp, 0xc
lea eax, [esp + 0x7c]
mov edx, dword [esp + 0x14]
push edx
push eax
lea eax, [esp + 0x20]
push str._s_d_r_n
push eax
call esi
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0
lea edx, [esp + 0x14]
push edx
push eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x24]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, eax
inc ebx
cmp ebx, 0x17
jl 0x40cee0
xor ebx, ebx
lea esp, [esp]
test ebx, ebx
mov ecx, dword [ebx*4 + 0x41b12c]
mov dword [esp + 0x10], ecx
mov eax, str.Caption_03u
jl 0x40cf77
push ebx
push eax
lea edx, [esp + 0x84]
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x7c]
mov ecx, dword [esp + 0x10]
push ecx
push eax
lea edx, [esp + 0x20]
push str._s_d_r_n
push edx
call esi
add esp, 0x10
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0
lea ecx, [esp + 0x18]
push ecx
push eax
lea edx, [esp + 0x24]
push edx
push ebp
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, eax
inc ebx
cmp ebx, 0x17
jl 0x40cf50
xor ebx, ebx
lea esp, [esp]
test ebx, ebx
mov eax, dword [ebx*4 + 0x41b188]
mov dword [esp + 0x10], eax
mov eax, str.TrayIcon_03u
jl 0x40cfe7
push ebx
push eax
lea ecx, [esp + 0x84]
push ecx
call esi
add esp, 0xc
lea eax, [esp + 0x7c]
mov edx, dword [esp + 0x10]
push edx
push eax
lea eax, [esp + 0x20]
push str._s_d_r_n
push eax
call esi
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0
lea edx, [esp + 0x18]
push edx
push eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x24]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, eax
inc ebx
cmp ebx, 0x17
jl 0x40cfc0
xor ebx, ebx
lea esp, [esp]
test ebx, ebx
mov ecx, dword [ebx*4 + 0x41b1e4]
mov dword [esp + 0x10], ecx
mov eax, str.Menu_03u
jl 0x40d057
push ebx
push eax
lea edx, [esp + 0x84]
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x7c]
mov ecx, dword [esp + 0x10]
push ecx
push eax
lea edx, [esp + 0x20]
push str._s_d_r_n
push edx
call esi
add esp, 0x10
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0
lea ecx, [esp + 0x18]
push ecx
push eax
lea edx, [esp + 0x24]
push edx
push ebp
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, eax
inc ebx
cmp ebx, 0x17
jl 0x40d030
mov eax, dword [0x41b240]
push eax
push str.EmptyTrash
lea ecx, [esp + 0x20]
push str._s_d_r_n
push ecx
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call ebx
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x24]
push edx
push ebp
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, eax
mov eax, dword [0x41b244]
push eax
push str.ForceShutdown
lea ecx, [esp + 0x20]
push str._s_d_r_n
push ecx
call esi
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call ebx
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x24]
push edx
push ebp
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
and eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd0
ret