Function at 0x1400510f0
Capabilities:
Enumerate process modules
Get process image filename

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x2008]
mov eax, 0x20f0
call fcn.140072f80
sub rsp, rax
mov rax, qword [0x1400afa38]
xor rax, rsp
mov qword [rbp + 0x1fe0], rax
mov rbx, rcx
test rcx, rcx
jne 0x140051139
lea eax, [rcx + 1]
jmp 0x14005134d
or r8d, 0xffffffff
lea rdx, [0x140094940]
lea rcx, [rsp + 0x30]
call fcn.14002b8e4
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14002bdd4
mov r9d, 0xf3
lea r8, str.c:jenkinsworkspaceClientClientWindows_release_64client_srcinstallwindowsNoMSIInstallerZoomProductUtil.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.140010d78
nop
lea rcx, [rsp + 0x30]
call fcn.14002ba70
mov rbx, rax
lea rdx, str._CInstallerManager::TerminateApp__the_event_exists__need_terminate_mainboard:
lea rcx, [0x1400b21c0]
call fcn.140016720
mov rcx, rax
mov rdx, rbx
call fcn.14000f6a8
nop
lea rcx, [rsp + 0x20]
call fcn.140010fa4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r8, [rsp + 0x24]
mov edx, 0x1000
lea rcx, [rbp + 0x40]
call qword [sym.imp.PSAPI.DLL_EnumProcesses]
mov edi, 1
test eax, eax
jne 0x140051220
mov r9d, 0x103
lea r8, str.c:jenkinsworkspaceClientClientWindows_release_64client_srcinstallwindowsNoMSIInstallerZoomProductUtil.cpp
mov edx, edi
lea rcx, [rsp + 0x20]
call fcn.140010d78
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str._CInstallerManager::TerminateApp__failed_to_enum_processes__error_code:
lea rcx, [0x1400b20a0]
call fcn.140007b28
mov rcx, rax
mov edx, ebx
call fcn.140008cf4
nop
lea rcx, [rsp + 0x20]
call fcn.140010fa4
jmp 0x140051341
mov eax, dword [rsp + 0x24]
shr eax, 2
mov r15d, edi
test eax, eax
je 0x14005133e
lea rsi, [rbp + 0x40]
mov r14d, eax
mov r8d, dword [rsi]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140051331
movups xmm0, xmmword [str._unknown_]
movaps xmmword [rbp + 0x1040], xmm0
mov ecx, dword [0x1400a0170]
mov dword [rbp + 0x1050], ecx
xor edx, edx
mov r8d, 0xf8c
lea rcx, [rbp + 0x1054]
call fcn.140076b90
mov r8d, 0x7cf
lea rdx, [rbp + 0x1040]
mov rcx, rbx
call qword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call fcn.14002ba70
mov rdx, rax
lea rcx, [rbp + 0x1040]
call fcn.140077ab4
test rax, rax
je 0x140051331
mov ecx, dword [rsi]
call fcn.14005137c
test eax, eax
jne 0x140051331
mov r9d, 0x12c
lea r8, str.c:jenkinsworkspaceClientClientWindows_release_64client_srcinstallwindowsNoMSIInstallerZoomProductUtil.cpp
mov edx, edi
lea rcx, [rsp + 0x20]
call fcn.140010d78
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str._CInstallerManager::TerminateApp__failed_to_kill_processes__PID:
lea rcx, [0x1400b20a0]
call fcn.140007b28
mov rcx, rax
mov edx, dword [rsi]
call fcn.140008cf4
mov rcx, rax
lea rdx, [0x1400965f0]
call fcn.140007b28
mov rcx, rax
mov edx, ebx
call fcn.140008cf4
nop
lea rcx, [rsp + 0x20]
call fcn.140010fa4
xor r15d, r15d
add rsi, 4
sub r14, rdi
jne 0x140051239
mov edi, r15d
lea rcx, [rsp + 0x30]
call fcn.14002b9e0
mov eax, edi
mov rcx, qword [rbp + 0x1fe0]
xor rcx, rsp
call fcn.140072030
lea r11, [rsp + 0x20f0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret