Function at 0x413890
Capabilities:
Get file version info

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45657d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x240
mov eax, dword [0x47306c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebx + 8]
lea ecx, [edi + 0x108]
mov dword [ebp - 0x248], 0
test eax, eax
jne 0x413a52
push 0x2c
push 0x467d98
call fcn.00409b10
push 0xc
push str.gb0R_vz_f
lea ecx, [edi + 0x90]
call fcn.00409b10
push 0xd
push 0x467e10
lea ecx, [edi + 0xa8]
call fcn.00409b10
push 0xd
push 0x467e2c
lea ecx, [edi + 0x18]
call fcn.00409b10
push 0xe
push 0x467e48
lea ecx, [edi + 0x30]
call fcn.00409b10
push 4
push 0x467e68
mov ecx, edi
call fcn.00409b10
push 0x38
push 0x467e78
lea ecx, [edi + 0xd8]
call fcn.00409b10
push 0x91
push 0x467ef0
lea ecx, [edi + 0x48]
call fcn.00409b10
push 0x9c
push 0x468018
lea ecx, [edi + 0x60]
call fcn.00409b10
push 0x93
push 0x468158
lea ecx, [edi + 0x78]
call fcn.00409b10
push 0x4f
push 0x468280
lea ecx, [edi + 0x120]
call fcn.00409b10
push 0x17
push 0x468320
lea ecx, [edi + 0xc0]
call fcn.00409b10
push 0x37
push 0x468350
lea ecx, [edi + 0xf0]
call fcn.00409b10
push 0xe
push 0x4683c0
lea ecx, [edi + 0x138]
call fcn.00409b10
push 9
push 0x4683e0
lea ecx, [edi + 0x150]
call fcn.00409b10
push 0x30
push 0x4683f8
lea ecx, [edi + 0x168]
call fcn.00409b10
push 0x18
push 0x46845c
lea ecx, [edi + 0x180]
call fcn.00409b10
push 0xc
push 0x468490
lea ecx, [edi + 0x198]
call fcn.00409b10
push 0xb
push 0x468c5c
lea ecx, [edi + 0x1e0]
call fcn.00409b10
push 0x41
push 0x4684b0
lea ecx, [edi + 0x1f8]
call fcn.00409b10
push 0x40
push 0x468538
jmp 0x413d1b
cmp eax, 1
jne 0x413bad
push 0x2c
push 0x4685c0
call fcn.00409b10
push 0xc
push str.gb0R2
lea ecx, [edi + 0x90]
call fcn.00409b10
push 0xd
push 0x468638
lea ecx, [edi + 0xa8]
call fcn.00409b10
push 0xd
push 0x468654
lea ecx, [edi + 0x18]
call fcn.00409b10
push 0xe
push 0x468670
lea ecx, [edi + 0x30]
call fcn.00409b10
push 4
push 0x468690
mov ecx, edi
call fcn.00409b10
push 0x91
push 0x4686a0
lea ecx, [edi + 0x48]
call fcn.00409b10
push 0x9c
push 0x4687c8
lea ecx, [edi + 0x60]
call fcn.00409b10
push 0x93
push 0x468908
lea ecx, [edi + 0x78]
call fcn.00409b10
push 0x4f
push 0x468a30
lea ecx, [edi + 0x120]
call fcn.00409b10
push 0x17
push 0x468ad0
lea ecx, [edi + 0xc0]
call fcn.00409b10
push 0x37
push 0x468b00
lea ecx, [edi + 0xf0]
call fcn.00409b10
push 0xe
push 0x468b70
lea ecx, [edi + 0x138]
call fcn.00409b10
push 9
push 0x468b90
lea ecx, [edi + 0x150]
call fcn.00409b10
push 0x30
push 0x468ba8
lea ecx, [edi + 0x168]
call fcn.00409b10
push 0x18
push 0x468c0c
lea ecx, [edi + 0x180]
call fcn.00409b10
push 0xc
push 0x468c40
lea ecx, [edi + 0x198]
call fcn.00409b10
push 0xb
push 0x468c5c
lea ecx, [edi + 0x1e0]
call fcn.00409b10
push 0x41
push 0x468c78
lea ecx, [edi + 0x1f8]
call fcn.00409b10
push 0x41
push 0x468d00
jmp 0x413d1b
push 0x4f
push str.Game_Process_Name_:__n_s_n_nProcess_ID_:__.0d_n_nStatus_:__s_n_nCredit_:_FLiNG_3DMGAME
call fcn.00409b10
push 0x1c
push str.the_game_is_not_running_yet.
lea ecx, [edi + 0x90]
call fcn.00409b10
push 0x1e
push str.game_found__trainer_activated_
lea ecx, [edi + 0xa8]
call fcn.00409b10
push 0x23
push str.Game_not_found__trainer_is_waiting.
lea ecx, [edi + 0x18]
call fcn.00409b10
push 0x26
push str.Game_is_running__trainer_is_activated_
lea ecx, [edi + 0x30]
call fcn.00409b10
push 0xd
push str.Error_Message
mov ecx, edi
call fcn.00409b10
push 0xb1
push str.Fail_to_write_memory__please_check_if_your_anti_virus_or_firewall_blocked_the_trainers_action._Also__try_to_run_the_trainer_with_administrator_permission._n_nAddress:__p_nData:__s
lea ecx, [edi + 0xd8]
call fcn.00409b10
push 0x11d
push 0x4690c8
lea ecx, [edi + 0x48]
call fcn.00409b10
push 0x12e
push str.Address_not_found__please_try_to_restart_the_game__trainer._nIf_this_error_still_occur__please_contact_me__3DMGAME__
lea ecx, [edi + 0x60]
call fcn.00409b10
push 0x143
push str.Address_not_found._Reason:_Access_Denied._nPlease_run_the_trainer_with_administrator_privilege._n_Right_click_on_trainer___Run_as_administrator__n_nIf_this_error_still_occur__please_contact_me__3DMGAME__
lea ecx, [edi + 0x78]
call fcn.00409b10
push 0xc4
push str.Not_supported_game_version._Please_check_your_game_version._n_nSupported_game_version_:_t_s_nYour_game_version_is_:_t_s_n_nDo_you_wish_to_continue___n_Trainer_most_likely_wont_work_for_this_game_version_
lea ecx, [edi + 0x120]
call fcn.00409b10
push 0x40
push str.Please_save_location_at_least_once_before_do_undo_teleportation_
lea ecx, [edi + 0xc0]
call fcn.00409b10
push 0xd0
push str.Please_run_the_trainer_with_administrative_privilege___Run_as_administrator__n_nDo_you_wish_to_exit_and_try_again_with_administrator_permission__n_Trainer_most_likely_wont_work_without_administrator_permission_
lea ecx, [edi + 0xf0]
call fcn.00409b10
push 0x1d
push str.Failed_to_detect_games_path.
lea ecx, [edi + 0x138]
call fcn.00409b10
push 0x1e
push str.Failed_to_detect_game_version.
lea ecx, [edi + 0x150]
call fcn.00409b10
push 0xa0
push str.Unable_to_open_games_process_handle__No_enough_permission___please_run_the_trainer_with_administrator_privilege__Right_click_on_trainer___Run_as_administrator_
lea ecx, [edi + 0x168]
call fcn.00409b10
push 0x53
push str.Unable_to_allocate_memory__please_try_again_later_or_restart_the_game._nError_Code:
lea ecx, [edi + 0x180]
call fcn.00409b10
push 0x2d
push str.Unable_to_start_a_remote_thread__Error_Code:
lea ecx, [edi + 0x198]
call fcn.00409b10
push 0xe
push str.Missing_file:
lea ecx, [edi + 0x1e0]
call fcn.00409b10
push 0x74
push str.EasyAntiCheat_detected__in_order_to_use_trainer__you_must_disable_EAC__please_follow_the_instructions_in_readme.txt.
lea ecx, [edi + 0x1f8]
call fcn.00409b10
push 0xd2
push str.Trainer_and_game_process_mismatch__this_is_a_32_bit_trainer_which_targets_32_bit_game_process__the_detected_game_process_is_a_64_bit_process__please_exit_the_game_and_run_the_32_bit_version_of_the_game_instead.
lea ecx, [edi + 0x1b0]
call fcn.00409b10
cmp dword [edi + 0x1d8], 0
jne 0x413ef9
xor eax, eax
mov dword [ebp - 4], 0
push eax
push 0x467d20
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
call fcn.00409b10
push 0x208
lea eax, [ebp - 0x220]
mov dword [ebp - 0x248], 1
push 0
push eax
call fcn.00436d50
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x413e8d
cmp eax, 0x104
je 0x413e8d
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 0
push eax
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov dword [ebp - 0x23c], eax
test eax, eax
je 0x413e8d
push eax
call fcn.00435610
mov esi, eax
mov dword [ebp - 0x250], esi
push dword [ebp - 0x23c]
mov byte [ebp - 4], 1
push 0
push esi
mov dword [ebp - 0x244], 0
call fcn.00436d50
add esp, 0x10
mov dword [ebp - 0x24c], 0
lea eax, [ebp - 0x220]
push esi
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x413e80
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x244]
push eax
push str.StringFileInfo000004b0ProductName
push esi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x413e80
mov edx, dword [ebp - 0x244]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x23c], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413e60
sub ecx, dword [ebp - 0x23c]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x238]
call fcn.00409b10
test esi, esi
je 0x413e8d
push esi
call fcn.004350dd
add esp, 4
add edi, 0x1c8
lea eax, [ebp - 0x238]
cmp edi, eax
je 0x413ebd
mov ecx, edi
call fcn.0040a670
movups xmm0, xmmword [ebp - 0x238]
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0x228]
movq qword [edi + 0x10], xmm0
jmp 0x413ef9
mov edx, dword [ebp - 0x224]
cmp edx, 8
jb 0x413ef9
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x413eef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413f19
push edx
push ecx
call fcn.0043507c
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043506b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.00439e03
int3