Function at 0x42e290
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x664
mov eax, dword [0x4630b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x61b]
push 0x103
push 0
push eax
mov dword [ebp - 0x620], 0
mov byte [ebp - 0x61c], 0
call fcn.00434f70
push 0x103
lea eax, [ebp - 0x20b]
mov byte [ebp - 0x20c], 0
push 0
push eax
call fcn.00434f70
push 0x207
lea eax, [ebp - 0x517]
mov byte [ebp - 0x518], 0
push 0
push eax
call fcn.00434f70
push 0x103
lea eax, [ebp - 0x107]
mov byte [ebp - 0x108], 0
push 0
push eax
call fcn.00434f70
push 0x103
lea eax, [ebp - 0x30f]
mov byte [ebp - 0x310], 0
push 0
push eax
call fcn.00434f70
add esp, 0x3c
lea eax, [ebp - 0x20c]
push str.Info.txt
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x58
push 0
push 0x4653e8
call fcn.00434f70
add esp, 0xc
mov dword [0x4653e8], 0x58
lea eax, [ebp - 0x20c]
mov dword [0x46541c], 6
mov dword [0x4653f4], 0x4513d8
mov dword [0x4653ec], ebx
push 0x4653e8
mov dword [0x465404], eax
mov dword [0x465408], 0x104
mov dword [0x465414], 0x449a98
mov dword [0x465424], 0x4513f4
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameA]
test eax, eax
jne 0x42e3c4
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004344b4
mov esp, ebp
pop ebp
ret
push edi
push 0
push 0x80
push 2
push 0
push 3
push 0xc0000000
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
mov dword [ebp - 0x624], edi
cmp edi, 0xffffffff
jne 0x42e416
push 0x10
push str.PE_Tools_v1.9.762.2018_build
push str.Couldnt_create_file____
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004344b4
mov esp, ebp
pop ebp
ret
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x620]
push 0
push eax
push 0x451418
call esi
push eax
push 0x451418
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [0x468834]
push dword [0x468838]
call fcn.004030e0
push eax
push dword [0x468838]
lea eax, [ebp - 0x310]
push dword [0x468834]
push str.Total_files_scanned:__d_r_nDetected:__d___d____r_n_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
lea eax, [ebp - 0x620]
push 0
push eax
lea eax, [ebp - 0x310]
push eax
call esi
push eax
lea eax, [ebp - 0x310]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
push 0
push 0x1004
push 0x44f
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
call edi
xor esi, esi
mov dword [ebp - 0x628], eax
test eax, eax
je 0x42e620
lea esp, [esp]
push eax
push esi
call fcn.004030e0
push eax
lea eax, [ebp - 0x61c]
push str.Saving_list:__d__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push dword [0x468720]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x42e503
lea eax, [ebp - 0x61c]
push eax
push 0
push 0x401
push dword [0x46883c]
call edi
push 0x208
lea eax, [ebp - 0x518]
push 0
push eax
call fcn.00434f70
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.00434f70
add esp, 0x18
mov dword [ebp - 0x65c], 0
lea eax, [ebp - 0x518]
mov dword [ebp - 0x64c], 0x208
mov dword [ebp - 0x650], eax
lea eax, [ebp - 0x664]
push eax
push esi
push 0x102d
push 0x44f
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
lea eax, [ebp - 0x518]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x42e620
lea eax, [ebp - 0x108]
mov dword [ebp - 0x65c], 1
mov dword [ebp - 0x650], eax
lea eax, [ebp - 0x664]
push eax
push esi
push 0x102d
push 0x44f
push ebx
mov dword [ebp - 0x64c], 0x104
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x42e620
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x518]
push eax
push str._s_____s__r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x620]
push 0
push eax
lea eax, [ebp - 0x518]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0x518]
push eax
push dword [ebp - 0x624]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x628]
inc esi
cmp esi, eax
jb 0x42e4c0
push 0x40
push str.PE_Tools_v1.9.762.2018_build
push str.File_saved_successfully__
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push dword [0x468720]
call dword [sym.imp.USER32.dll_IsWindow]
pop esi
test eax, eax
je 0x42e658
push str.Ready...
push 0
push 0x401
push dword [0x46883c]
call edi
push dword [ebp - 0x624]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
xor ecx, ebp
pop ebx
call fcn.004344b4
mov esp, ebp
pop ebp
ret