Function at 0x402070
Capabilities:
Move file

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
xor eax, eax
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x828]
push ebx
mov ebx, 0x411080
push ecx
sub esp, 0x8d8
mov esi, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, 0x41
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x724]
mov ecx, 0x41
mov dword [ebp - 0x8b6], 0x6b61622e
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x620]
mov ecx, 0x41
mov byte [ebp - 0x8b2], 0
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x51c]
mov ecx, 0x41
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x418]
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov ecx, 0x100
mov edi, ebx
rep stosd dword es:[edi], eax
test edx, edx
je 0x40210e
lea eax, [ebp - 0x828]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x40c292
mov dword [esp], eax
call fcn.004014f0
jmp 0x402138
lea eax, [ebp - 0x828]
mov dword [esp + 8], 0x104
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00401595
inc eax
jne 0x402138
mov dword [esp + 4], str.You_need_to_pick_a_file...
jmp 0x402228
lea eax, [ebp - 0x8b6]
mov dword [esp + 4], str._s_s
lea ebx, [ebp - 0x620]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x828]
lea edi, [ebp - 0x418]
mov dword [esp + 8], eax
lea eax, [ebp - 0x724]
mov dword [esp], eax
call fcn.004014f0
lea edx, [ebp - 0x51c]
lea eax, [ebp - 0x828]
mov dword [esp + 0x14], 0x104
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x104
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], 0x411080
call fcn.0040166e
mov dword [esp], edi
call sub.msvcrt.dll_strlen
lea edx, [ebp - 0x51c]
mov dword [esp + 4], str.Name:___s_n
add eax, edi
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.004014f0
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov dword [esp + 8], ebx
add eax, edi
mov dword [esp + 4], str.Dir:____s_n
mov dword [esp], eax
call fcn.004014f0
mov dword [esp], edi
call sub.msvcrt.dll_strlen
lea edx, [ebp - 0x828]
mov dword [esp + 4], str.Path:___s_n
add eax, edi
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.004014f0
lea eax, [ebp - 0x828]
mov dword [esp], eax
call fcn.00401720
mov dword [ebp - 0x8bc], eax
test eax, eax
jne 0x402243
mov dword [esp + 4], str.Cant_access_file.
mov dword [esp], 0x411080
call fcn.004014f0
mov dword [ebp - 0x8c0], 0xffffffff
jmp 0x4028cb
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov edx, dword [ebp - 0x8bc]
mov dword [esp + 4], str.Size:___d_n
add eax, edi
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.004014f0
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8bc]
mov dword [esp], eax
call sub.msvcrt.dll_calloc
mov ebx, eax
test eax, eax
jne 0x40228d
mov dword [esp + 4], str.Cant_allocate_enough_memory_to_load_file.
jmp 0x402228
mov eax, dword [ebp - 0x8bc]
mov dword [esp], ebx
mov dword [esp + 8], eax
lea eax, [ebp - 0x828]
mov dword [esp + 4], eax
call fcn.00401775
test eax, eax
jns 0x4022ca
mov dword [esp + 8], edi
mov dword [esp + 4], str.Cant_load_file:__s
mov dword [esp], 0x411080
call fcn.004014f0
jmp 0x40288e
xor eax, eax
lea edi, [ebp - 0x8a1]
xorps xmm0, xmm0
mov ecx, 0x21
rep stosb byte es:[edi], al
lea edi, [ebp - 0x880]
movups xmmword [ebp - 0x8b1], xmm0
mov dword [esp], edi
call fcn.0040372c
mov eax, dword [ebp - 0x8bc]
mov dword [esp + 4], ebx
mov dword [esp], edi
mov dword [esp + 8], eax
call fcn.00403757
lea eax, [ebp - 0x8b1]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004037ef
xor edx, edx
movzx eax, byte [ebp + edx - 0x8b1]
lea edi, [ebp - 0x8a1]
mov dword [esp + 4], str._02x
mov dword [esp + 8], eax
lea eax, [edx + edx]
add eax, edi
mov dword [ebp - 0x8c0], edx
mov dword [esp], eax
call fcn.004014f0
mov edx, dword [ebp - 0x8c0]
inc edx
cmp edx, 0x10
jne 0x40231b
xor eax, eax
mov dword [esp + 8], 0x29a
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x111
mov dword [esp], esi
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [ebp - 0x8bc]
sub esp, 0x10
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00401ff8
mov dword [ebp - 0x8c0], eax
test eax, eax
je 0x4023a3
mov dword [esp + 4], str.Public_key_not_found._Nothing_was_patched_
jmp 0x402882
mov dword [esp + 0xc], 0x24
mov dword [esp + 8], str.Info
mov dword [esp + 4], str.Do_you_want_to_make_a_backup_copy_of_the_file_s__before_applying_the_patch_
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
cmp eax, 6
jne 0x4023f5
lea eax, [ebp - 0x724]
mov dword [esp + 4], eax
lea eax, [ebp - 0x828]
mov dword [esp], eax
call sub.msvcrt.dll_rename
test eax, eax
je 0x4023f5
mov dword [esp + 4], str.Unable_to_save_a_backup_copy_of_the_file.
jmp 0x402882
mov dword [esp + 4], str.ed18178dc554270ea339606fbbc703ed
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40242b
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4180
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], str.583fa16c67f0273f87c7efbf4e9f3737
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x402461
xor ecx, ecx
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], ecx
mov dword [esp + 4], str.Detected_Sublime_Text_4178_DEV
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], str.21deefd96a8307c22d099abc64f98d7c
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4024a5
xor edx, edx
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], edx
mov dword [esp + 4], str.Detected_Sublime_Text_4175_DEV
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0x7face], 0xe0
mov byte [ebx + 0x7fb09], 7
mov dword [esp + 4], str.5b3c8cea0fca4323f0e8a994209042a8
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4024e9
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4169
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa0f2f], 0xd8
mov byte [ebx + 0xa0f6d], 7
mov dword [esp + 4], str.2cd2baf5e9e85b1747f4e7ff7a82fe28
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40253b
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4166
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa0ee1], 0xd8
mov byte [ebx + 0xa0ee7], 0xe0
mov byte [ebx + 0xa0eec], 0x35
mov byte [ebx + 0xa0f2a], 7
mov dword [esp + 4], str.15bb398d5663b89a44372ef15f70a46f
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x402571
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4152
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], str.5f129f1447bc38907b83e599d697af95
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4025ae
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4151
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa8eea], 0xd8
mov dword [esp + 4], str.654f4259e066f90f4964e695cf808ad0
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4025f9
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4143
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa99cc], 0xf
mov byte [ebx + 0xa99ce], 0x35
mov byte [ebx + 0xa9a1f], 7
mov dword [esp + 4], str.159a56f405e7a29a1444dee1cf37eba1
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x402636
xor ecx, ecx
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], ecx
mov dword [esp + 4], str.Detected_Sublime_Text_4142
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa99ca], 0x8c
mov dword [esp + 4], str.99383906efcd8fceb6c847e56a63909a
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40266c
xor edx, edx
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], edx
mov dword [esp + 4], str.Detected_Sublime_Text_4138_DEV
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], str.e2c0f7e9056fbe3473672827cfb3a226
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4026b0
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4137_DEV
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa9884], 0x8c
mov byte [ebx + 0xa9887], 0xe0
mov dword [esp + 4], str.924c781ac4fcd21a2b46c73b07d7bc27
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4026e6
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4126
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], str.5446869d73eaeadec1cace4e5a6cf64d
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x402723
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Text_4121
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0xa6a4d], 0xe0
mov dword [esp + 4], str.b4e6827719b1b2fb7e3f6744dcdf0286
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x402767
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Merge_2096
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0x1d891], 0xe0
mov byte [ebx + 0x1d8ca], 7
mov dword [esp + 4], str.6330681b8ea4bfadcc1c1de4e187251c
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4027a4
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Merge_2091
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0x25a4f], 7
mov dword [esp + 4], str.e33b76ada6e7e7577cd4e81a7a4580c7
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4027e1
xor ecx, ecx
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], ecx
mov dword [esp + 4], str.Detected_Sublime_Merge_2083
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0x2547c], 7
mov dword [esp + 4], str.cc38b7e3dab6420773962f2c18929669
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40281e
xor edx, edx
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], edx
mov dword [esp + 4], str.Detected_Sublime_Merge_2079
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0x256ee], 7
mov dword [esp + 4], str.80e989a90dfe6d9c17f4985dceaa8942
mov dword [esp], edi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40285b
xor eax, eax
mov dword [esp + 8], str.Info
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Detected_Sublime_Merge_2077
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov byte [ebx + 0x252e6], 0xf
mov eax, dword [ebp - 0x8bc]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
lea eax, [ebp - 0x828]
mov dword [esp], eax
call fcn.004017ca
inc eax
jne 0x40289b
mov dword [esp + 4], str.Unable_to_save_file._Make_sure_its_not_in_use_and_you_have_write_privileges.
mov dword [esp], 0x411080
call fcn.004014f0
mov dword [esp], ebx
call sub.msvcrt.dll_free
jmp 0x402234
lea eax, [ebp - 0x724]
mov dword [esp + 4], str.File_patched_successfully__n_nEnjoy_it_
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x418]
mov dword [esp + 8], eax
mov dword [esp], 0x411080
call fcn.004014f0
mov dword [esp], ebx
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x8c0]
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret