Function at 0x44eac0
Capabilities:
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7037c3
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x7c0ab4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc4], ecx
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xb8], eax
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 1
push eax
push 0x209
mov ecx, eax
call fcn.00455f60
test esi, esi
je 0x44eb69
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
sub eax, ecx
sar eax, 1
dec eax
push eax
push ecx
push esi
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
mov byte [ebp - 0xa1], 1
test edi, edi
je 0x44ee24
mov ecx, dword [edi]
call fcn.0044aaa0
test al, al
je 0x44ee24
mov eax, dword [ebp - 0xd4]
mov ecx, str._noname_
cmp eax, dword [ebp - 0xd0]
xorps xmm0, xmm0
push 0x68
cmovne ecx, eax
movq qword [ebp - 0xb0], xmm0
mov dword [ebp - 0xbc], ecx
xor eax, eax
push str.Diagnostic_dump__1_will_be_created_for_the_process__2__3_will_be_terminated_due_to_the_exception__4.
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
call fcn.00449180
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
mov edx, dword [edi]
push 1
call fcn.00455280
mov dword [ebp - 0xc0], eax
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0x40]
push 0
mov byte [ebp - 4], 3
call fcn.00455280
add esp, 8
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
push dword [ebp - 0xb8]
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 5
call fcn.0044a820
push dword [ebp - 0xb4]
mov esi, eax
mov eax, dword [esi + 4]
cmp dword [esi + 8], eax
je 0x44ec5c
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44ec64
push eax
mov ecx, esi
call fcn.004565d0
push dword [ebp - 0xbc]
mov ecx, esi
call fcn.0044a820
push dword [ebp - 0xc0]
mov esi, eax
mov eax, dword [esi + 4]
cmp dword [esi + 8], eax
je 0x44ec8e
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44ec96
push eax
mov ecx, esi
call fcn.004565d0
push esi
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x88]
call fcn.004874d0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x44ecdc
mov ecx, eax
call fcn.00449120
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x44ed19
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44ed0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f588
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
call fcn.00454a90
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x44ed79
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44ed6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f58d
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp edx, 8
jb 0x44edcb
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44edc1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f592
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp edx, 8
jb 0x44ee1d
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44ee13
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f597
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor al, al
jmp 0x44f179
test esi, esi
je 0x44f173
test edi, edi
je 0x44f3f0
mov ecx, dword [ebp - 0xc4]
mov eax, dword [edi + 0xc]
push ecx
push 0x44e9d0
push esi
mov dword [ecx + 0x1c], eax
call dword [sym.imp.dbghelp.dll_EnumerateLoadedModules]
mov ecx, dword [ebp - 0xc4]
xorps xmm0, xmm0
mov edx, dword [edi + 0xc]
mov dword [ebp - 0xa8], 0
push ecx
cmp dword [ecx + 0x14], 0
movq qword [ebp - 0xb0], xmm0
je 0x44f1e1
lea ecx, [ebp - 0xa0]
call fcn.00455470
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
mov edx, dword [edi]
push 1
call fcn.00455280
mov dword [ebp - 0xc0], eax
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0x88]
push 0
mov byte [ebp - 4], 7
call fcn.00455280
add esp, 0xc
mov esi, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov edx, str.Process__1__2_will_be_terminated_due_to_the_exception__3___4__occured_in_the_module__5_at_the_address__6._Memory_dump__7_has_been_created.
lea ecx, [ebp - 0x40]
call fcn.00468e70
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb4], eax
push esi
cmp dword [ebp - 0xa8], ecx
je 0x44ef17
call fcn.00449040
add dword [ebp - 0xac], 0x18
jmp 0x44ef23
push ecx
lea ecx, [ebp - 0xb0]
call fcn.004565d0
mov ecx, dword [edi]
call fcn.0044e700
push eax
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xb0]
call fcn.0044a820
mov ecx, eax
call fcn.0044a920
push dword [ebp - 0xc0]
mov esi, eax
mov eax, dword [esi + 4]
cmp dword [esi + 8], eax
je 0x44ef60
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44ef68
push eax
mov ecx, esi
call fcn.004565d0
mov ecx, dword [ebp - 0xc4]
mov eax, dword [esi + 4]
add ecx, 4
push ecx
cmp dword [esi + 8], eax
je 0x44ef87
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44ef8f
push eax
mov ecx, esi
call fcn.004565d0
mov eax, dword [esi + 4]
push dword [ebp - 0xbc]
cmp dword [esi + 8], eax
je 0x44efaa
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44efb2
push eax
mov ecx, esi
call fcn.004565d0
push dword [ebp - 0xb8]
mov ecx, esi
call fcn.0044a820
mov edx, dword [ebp - 0xc8]
lea ecx, [ebp - 0x58]
push eax
call fcn.004874d0
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.00454530
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x44f014
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f00a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f59c
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp edx, 8
jb 0x44f066
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f05c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f5a1
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.00454a90
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x44f0c6
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f0bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f5a6
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp edx, 8
jb 0x44f11b
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f111
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f5ab
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp edx, 8
jb 0x44f173
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f169
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f5b0
push edx
push ecx
call fcn.006d0b31
add esp, 8
mov al, byte [ebp - 0xa1]
mov esi, dword [ebp - 0xb8]
cmp dword [ebp - 0x18], 0
je 0x44f558
test edi, edi
je 0x44f531
test al, al
jne 0x44f4f6
call fcn.0044aa50
test al, al
jne 0x44f4f6
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push ecx
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xb0]
push eax
mov dword [ebp - 0xb0], 0x78c2b4
mov dword [ebp - 0xac], str.c:_a_b_a_6cb29bb7_scsadminkitdevelopment2_appskldumperkldumpgen.cpp
mov dword [ebp - 0xa8], 0x2f2
call fcn.0044a800
jmp 0x44f531
lea ecx, [ebp - 0x70]
call fcn.00455470
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x88]
mov edx, dword [edi]
push 1
call fcn.00455280
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0xa0]
push 0
mov byte [ebp - 4], 0xc
call fcn.00455280
add esp, 0xc
mov esi, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov edx, str.Process__1__2_will_be_terminated_due_to_the_exception__3___4__occured_at_the_address__5._Memory_dump__6_has_been_created.
lea ecx, [ebp - 0x40]
call fcn.00468e70
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xc8], eax
push esi
cmp dword [ebp - 0xa8], ecx
je 0x44f282
call fcn.00449040
add dword [ebp - 0xac], 0x18
jmp 0x44f28e
push ecx
lea ecx, [ebp - 0xb0]
call fcn.004565d0
mov ecx, dword [edi]
call fcn.0044e700
push eax
push dword [ebp - 0xc8]
lea ecx, [ebp - 0xb0]
call fcn.0044a820
mov ecx, eax
call fcn.0044a920
push dword [ebp - 0xbc]
mov esi, eax
mov eax, dword [esi + 4]
cmp dword [esi + 8], eax
je 0x44f2cb
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44f2d3
push eax
mov ecx, esi
call fcn.004565d0
mov eax, dword [esi + 4]
push dword [ebp - 0xc0]
cmp dword [esi + 8], eax
je 0x44f2ee
mov ecx, eax
call fcn.00449040
add dword [esi + 4], 0x18
jmp 0x44f2f6
push eax
mov ecx, esi
call fcn.004565d0
push dword [ebp - 0xb8]
mov ecx, esi
call fcn.0044a820
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0x58]
push eax
call fcn.004874d0
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.00454530
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x44f358
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f34e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f5b5
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp edx, 8
jb 0x44f3aa
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44f3a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44f5ba
push edx
push ecx
call fcn.006d0b31
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.00454a90
lea ecx, [ebp - 0xa0]
call fcn.00449120
lea ecx, [ebp - 0x88]
call fcn.00449120
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.00449120
jmp 0x44f173
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0x40]
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
push 0
movq qword [ebp - 0xb0], xmm0
call fcn.00455280
add esp, 4
mov esi, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov edx, str.Process__1__2_will_be_abnormally_terminated._Memory_dump__3_has_been_created.
lea ecx, [ebp - 0x58]
call fcn.00468e70
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xc8], eax
push esi
cmp dword [ebp - 0xa8], ecx
je 0x44f478
call fcn.00449040
add dword [ebp - 0xac], 0x18
jmp 0x44f484
push ecx
lea ecx, [ebp - 0xb0]
call fcn.004565d0
mov esi, dword [ebp - 0xb8]
lea ecx, [ebp - 0xb0]
push esi
push dword [ebp - 0xc8]
call fcn.0044a820
mov ecx, eax
call fcn.0044a820
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0xa0]
push eax
call fcn.004874d0
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.00454530
lea ecx, [ebp - 0xa0]
call fcn.00449120
lea ecx, [ebp - 0x58]
call fcn.00449120
lea ecx, [ebp - 0xb0]
call fcn.00454a90
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.00449120
mov al, byte [ebp - 0xa1]
jmp 0x44f17f
mov ecx, esi
call fcn.00452890
lea ecx, [ebp - 0x28]
test al, al
je 0x44f50d
push 4
push 0x2ed
jmp 0x44f514
push 3
push 0x2ef
cmp dword [ebp - 0x14], 8
push str.c:_a_b_a_6cb29bb7_scsadminkitdevelopment2_appskldumperkldumpgen.cpp
cmovae ecx, dword [ebp - 0x28]
or edx, 0xffffffff
push 0x78c2b4
call fcn.004863e0
add esp, 0x10
mov eax, dword [ebp - 0xc4]
cmp byte [eax + 0x20], 0
je 0x44f558
lea ecx, [eax + 0x24]
lea eax, [ebp - 0x28]
cmp ecx, eax
je 0x44f558
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00449180
lea ecx, [ebp - 0xd4]
call fcn.004548a0
lea ecx, [ebp - 0x28]
call fcn.00449120
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006d0856
mov esp, ebp
pop ebp
ret 0x14
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
call fcn.006d79b8
int3