Function at 0x43c5e8
Capabilities:
Enumerate process modules
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46a477
mov eax, dword fs:[0]
push eax
mov eax, 0x20c4
call fcn.0045b050
mov eax, dword [0x48e880]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
test esi, esi
jne 0x43c628
xor eax, eax
inc eax
jmp 0x43c84e
push 0xffffffffffffffff
push 0x4799c8
lea ecx, [ebp - 0x20b8]
call fcn.004200d5
and dword [ebp - 4], 0
lea ecx, [ebp - 0x20b8]
push esi
call fcn.0042046b
push 0xf3
mov edi, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerZoomProductUtil.cpp
lea ecx, [ebp - 0x20bc]
push edi
push 0
call fcn.0040c45a
xor ebx, ebx
lea ecx, [ebp - 0x20b8]
inc ebx
mov byte [ebp - 4], bl
call fcn.00420210
mov edx, str._CInstallerManager::TerminateApp__the_event_exists__need_terminate_mainboard:
mov ecx, 0x490340
mov esi, eax
call fcn.0041044a
mov edx, esi
mov ecx, eax
call fcn.0040b7dd
lea ecx, [ebp - 0x20bc]
mov byte [ebp - 4], 0
call fcn.0040c5f9
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x20c0]
push eax
push 0x1000
lea eax, [ebp - 0x1fb0]
push eax
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
jne 0x43c706
push 0x103
push edi
push ebx
lea ecx, [ebp - 0x20bc]
call fcn.0040c45a
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
mov edx, str._CInstallerManager::TerminateApp__failed_to_enum_processes__error_code:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x20bc]
call fcn.0040c5f9
jmp 0x43c841
mov eax, dword [ebp - 0x20c0]
mov esi, ebx
shr eax, 2
xor ebx, ebx
mov dword [ebp - 0x20cc], eax
mov dword [ebp - 0x20bc], esi
test eax, eax
je 0x43c83f
push dword [ebp + ebx*4 - 0x1fb0]
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x20c4], eax
test eax, eax
je 0x43c832
push 5
pop ecx
push 0xf8c
lea eax, [ebp - 0xf9c]
mov esi, str._unknown_
lea edi, [ebp - 0xfb0]
push 0
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0045e110
mov esi, dword [ebp - 0x20c4]
lea eax, [ebp - 0xfb0]
add esp, 0xc
push 0x7cf
push eax
push esi
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x20b8]
call fcn.00420210
push eax
lea eax, [ebp - 0xfb0]
push eax
call fcn.0046058a
pop ecx
pop ecx
test eax, eax
je 0x43c82c
mov ecx, dword [ebp + ebx*4 - 0x1fb0]
call fcn.0043c868
test eax, eax
jne 0x43c82c
push 0x12c
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerZoomProductUtil.cpp
push 1
lea ecx, [ebp - 0x20c8]
call fcn.0040c45a
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + ebx*4 - 0x1fb0]
mov edx, str._CInstallerManager::TerminateApp__failed_to_kill_processes__PID:
push ecx
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x20c8]
mov byte [ebp - 4], 0
call fcn.0040c5f9
xor esi, esi
mov dword [ebp - 0x20bc], esi
jmp 0x43c832
mov esi, dword [ebp - 0x20bc]
inc ebx
cmp ebx, dword [ebp - 0x20cc]
jb 0x43c727
mov ebx, esi
lea ecx, [ebp - 0x20b8]
call fcn.00420173
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045a206
leave
ret