Function at 0x4127b0
Capabilities:
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57aad4
mov eax, dword fs:[0]
push eax
sub esp, 0x2e8
mov eax, dword [0x5c8a30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x23c], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x220], eax
mov word [esi], cx
push dword [eax]
mov dword [ebp - 4], ecx
push ecx
push 0x410
mov dword [ebp - 0x23c], 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x21c], edi
test edi, edi
jne 0x412956
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x21c], eax
call fcn.00440010
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x412abc
push 0x59
push str.d:jenkins.jenkinsworkspacegroup_clean_battert_protect_battery_protectcommonutils.cc
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], al
call fcn.0040abd0
push 3
push 0x5889ac
lea ecx, [ebp - 0x238]
mov dword [ebp - 4], 1
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], 0
call fcn.0040abd0
mov byte [ebp - 4], 2
call fcn.00440010
mov edi, eax
lea ecx, [ebp - 0x2f4]
push 0x339
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.00404b00
mov esi, eax
push str.OpenProcess_fail__errno_
push esi
mov byte [ebp - 4], 3
call fcn.00406170
add esp, 8
mov ecx, esi
push dword [ebp - 0x21c]
call fcn.0040f930
push str._pid_
push esi
call fcn.00406170
mov eax, dword [ebp - 0x220]
add esp, 8
mov ecx, esi
push dword [eax]
call fcn.0040f930
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x2f4]
call fcn.00406290
lea ecx, [ebp - 0x238]
call fcn.00405500
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0
call fcn.00405500
jmp 0x412abc
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00546c00
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push edi
call sub.KERNEL32.dll_K32GetProcessImageFileNameW
test eax, eax
jne 0x412a8e
call fcn.00440010
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x412ab5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x59
push str.d:jenkins.jenkinsworkspacegroup_clean_battert_protect_battery_protectcommonutils.cc
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], 0
call fcn.0040abd0
push 3
push 0x5889ac
lea ecx, [ebp - 0x258]
mov dword [ebp - 4], 4
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
call fcn.0040abd0
mov byte [ebp - 4], 5
call fcn.00440010
mov edi, eax
lea ecx, [ebp - 0x2f4]
push 0x33e
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x258]
push eax
call fcn.00404b00
mov esi, eax
push str.GetModuleBaseName_fail__errno_
push esi
mov byte [ebp - 4], 6
call fcn.00406170
add esp, 8
mov ecx, esi
push dword [ebp - 0x220]
call fcn.0040f930
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x2f4]
call fcn.00406290
lea ecx, [ebp - 0x258]
call fcn.00405500
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0
call fcn.00405500
mov edi, dword [ebp - 0x21c]
jmp 0x412ab5
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412a97
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.0040acd0
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x240]
mov edx, esi
cmp dword [esi + 0x14], 8
jb 0x412acc
mov edx, dword [esi]
mov edi, dword [esi + 0x10]
test edi, edi
je 0x412bac
or ecx, 0xffffffff
lea eax, [edi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp word [edx + ecx*2], 0x5c
lea ecx, [edx + ecx*2]
je 0x412b01
nop dword [eax]
cmp ecx, edx
je 0x412bac
sub ecx, 2
cmp word [ecx], 0x5c
jne 0x412af0
sub ecx, edx
sar ecx, 1
cmp ecx, 0xffffffff
je 0x412bac
xor eax, eax
mov dword [ebp - 0x228], 0
mov word [ebp - 0x238], ax
lea edx, [ecx + 1]
mov eax, edi
mov dword [ebp - 0x224], 7
sub eax, ecx
dec eax
cmp edi, edx
jb 0x412bc9
sub edi, edx
mov ecx, esi
cmp edi, eax
cmovb eax, edi
cmp dword [esi + 0x14], 8
jb 0x412b4c
mov ecx, dword [esi]
push eax
lea eax, [ecx + edx*2]
push eax
lea ecx, [ebp - 0x238]
call fcn.0040acd0
lea eax, [ebp - 0x238]
cmp esi, eax
je 0x412ba1
mov ecx, esi
call fcn.00405550
movups xmm0, xmmword [ebp - 0x238]
xor eax, eax
mov word [ebp - 0x238], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x228]
movq qword [esi + 0x10], xmm0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
lea ecx, [ebp - 0x238]
call fcn.00405550
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00441ed9
mov esp, ebp
pop ebp
ret
call fcn.0040a4a0
int3