Function at 0x4027c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
mov eax, ecx
mov dword [esp + 0x50], 0x28
mov dword [esp + 0x10], eax
xorps xmm0, xmm0
push ebx
push esi
mov edx, dword [eax + 4]
sub edx, dword [eax]
mov eax, 0x66666667
imul edx
movlpd qword [esp + 0x6c], xmm0
movlpd qword [esp + 0x74], xmm0
movlpd qword [esp + 0x7c], xmm0
push edi
sar edx, 4
mov ecx, edx
mov dword [esp + 0x60], 0x190
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x68], 0x180001
mov eax, ecx
mov dword [esp + 0x6c], 0
shl eax, 4
sub eax, ecx
push 0
lea eax, [eax*8 + 0xa]
mov dword [esp + 0x1c], eax
neg eax
mov dword [esp + 0x68], eax
call dword [sym.imp.USER32.dll_GetDC]
push 0
mov esi, eax
lea eax, [esp + 0x24]
push 0
push eax
push 0
lea eax, [esp + 0x6c]
push eax
push esi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
push esi
mov ebx, eax
push 0
mov dword [esp + 0x1c], ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
test ebx, ebx
jne 0x402883
push 0x10
push 0x429bac
push str.Failed_to_create_DIB_section.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
mov edi, eax
push ebx
push edi
call esi
mov ebx, dword [esp + 0x18]
push 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0x190
mov dword [esp + 0x44], ebx
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [esp + 0x38]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push dword [esp + 0x1c]
mov edx, edi
call fcn.00402530
mov eax, 0x4d42
mov dword [esp + 0x2e], 0
mov word [esp + 0x28], ax
add esp, 4
imul eax, ebx, 0x4b0
mov dword [esp + 0x2e], 0x36
mov dword [esp + 0x1c], eax
add eax, 0x36
mov dword [esp + 0x26], eax
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.libtoolsquiet.dll_get_save_path]
add esp, 4
lea eax, [esp + 0x44]
cmp dword [esp + 0x58], 0x10
cmovae eax, dword [esp + 0x44]
push 0
push pe_nt_image_headers32
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x402962
push 0x10
push 0x429bac
push str.Failed_to_create_or_open_the_file.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [esp + 0x10]
push edi
call esi
jmp 0x4029c2
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [esp + 0xc]
push 0
push eax
push 0xe
lea eax, [esp + 0x30]
push eax
push ebx
call esi
push 0
lea eax, [esp + 0x10]
push eax
push 0x28
lea eax, [esp + 0x68]
push eax
push ebx
call esi
push 0
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x24]
push dword [esp + 0x2c]
push ebx
call esi
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40
push str.Success
push str.Disk_information_saved_to_DiskInfo.bmp
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [esp + 0x10]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [esp + 0x58]
cmp ecx, 0x10
jb 0x402a05
mov edx, dword [esp + 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4029fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a0c
push ecx
push edx
call fcn.0040882a
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0040f0c3
int3