Function at 0x10037f70
Capabilities:
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10096291
mov eax, dword fs:[0]
push eax
mov eax, 0x10ec
call fcn.1005e060
mov eax, dword [0x100c3384]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ebp + 0xc], 0
je 0x10037fab
cmp dword [ebp + 0x10], 0x64
jge 0x10037fb2
xor eax, eax
jmp 0x100381e0
mov eax, dword [ebp + 8]
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x1044], eax
cmp dword [ebp - 0x1044], 0
jne 0x100380da
call fcn.1003eb30
mov dword [ebp - 0x104c], eax
push 1
mov ecx, dword [ebp - 0x104c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x104c]
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 0x1054], al
cmp byte [ebp - 0x1054], 1
je 0x1003800a
jmp 0x100380d3
push 0x100a2208
lea ecx, [ebp - 0x1040]
call fcn.10004260
mov dword [ebp - 4], 0
push 0x100a2204
lea ecx, [ebp - 0x1028]
call fcn.10004260
mov byte [ebp - 4], 1
call fcn.1003eb30
mov dword [ebp - 0x1050], eax
push str._OpenProcess_Failed
lea ecx, [ebp + 8]
push ecx
push 0x212
lea edx, [ebp - 0x1040]
push edx
lea eax, [ebp - 0x1028]
push eax
lea ecx, [ebp - 0x10f8]
call fcn.10004a60
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp - 0x1058]
mov dword [ebp - 0x105c], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x105c]
call fcn.1001ebd0
mov ecx, eax
call fcn.10002a60
push eax
mov edx, dword [ebp - 0x1050]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1050]
mov edx, dword [eax + 0x1c]
call edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10f8]
call fcn.10005a70
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1028]
call fcn.10005680
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1040]
call fcn.10005680
xor eax, eax
jmp 0x100381e0
mov dword [ebp - 0x1060], 0x400
push 0x800
push 0
lea eax, [ebp - 0x810]
push eax
call fcn.1006c6b0
add esp, 0xc
mov dword [ebp - 0x1048], 0
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
mov edx, dword [ebp - 0x1044]
push edx
call sub.KERNEL32.dll_K32GetModuleFileNameExW
mov dword [ebp - 0x1048], eax
cmp dword [ebp - 0x1048], 0
je 0x10038194
push 0x800
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.1006c6b0
add esp, 0xc
push 0x400
lea ecx, [ebp - 0x1010]
push ecx
lea edx, [ebp - 0x810]
push edx
call fcn.10036ec0
add esp, 0xc
test eax, eax
je 0x1003817b
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x1010]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.10073992
add esp, 0xc
jmp 0x10038192
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x810]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.10073992
add esp, 0xc
jmp 0x100381cd
push 0x400
lea eax, [ebp - 0x810]
push eax
mov ecx, dword [ebp - 0x1044]
push ecx
call sub.KERNEL32.dll_K32GetProcessImageFileNameW
test eax, eax
je 0x100381cd
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x810]
push ecx
call fcn.10037330
add esp, 0xc
mov dword [ebp - 0x1048], eax
mov edx, dword [ebp - 0x1044]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1048]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005dfd5
mov esp, ebp
pop ebp
ret