Function at 0x140007b58
Capabilities:
Check if file exists
Create process on windows
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x1400c4a20]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov r15b, r9b
mov rdi, r8
xor esi, esi
cmp qword [rdx + 0x10], rsi
jne 0x140007bd1
mov r9d, 0x123
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
lea edx, [rsi + 2]
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__binHome_is_empty
lea rcx, [0x1400c71f0]
call fcn.140004774
nop
lea rcx, [rsp + 0x50]
call fcn.14000b9c4
xor al, al
jmp 0x14000820e
lea r8, [0x1400a6488]
lea rcx, [rbp + 0xa0]
call fcn.14000a670
nop
lea r8, str.ZoomOutlookIMPlugin.exe
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14000a6f0
nop
lea rcx, [rbp + 0xa0]
call fcn.140005620
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rcx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x140007c74
mov r9d, 0x12b
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rbx, qword [rbp + 0x60]
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__file_not_exist:
lea rcx, [0x1400c7310]
call fcn.14000a398
mov rcx, rax
mov rdx, rbx
call fcn.14000a398
nop
lea rcx, [rsp + 0x50]
call fcn.14000b9c4
jmp 0x140008202
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rdx, qword [rbp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.140051f10
nop
lea rdx, [0x1400a6f68]
lea rcx, [rsp + 0x70]
call fcn.140052000
test al, al
jne 0x140007cee
mov r9d, VarBstrCmp
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rbx, qword [rbp + 0x60]
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__check_zoom_file_return_false__file:
lea rcx, [0x1400c7310]
call fcn.14000a398
mov rcx, rax
mov rdx, rbx
call fcn.14000a398
nop
jmp 0x140008170
mov r14, rsi
test r15b, r15b
je 0x140007dd5
mov ebx, 0x70
mov r8d, ebx
xor edx, edx
lea rcx, [rbp - 0x80]
call main
mov dword [rbp - 0x80], ebx
mov dword [rbp - 0x7c], 0x40
mov qword [rbp - 0x78], rsi
lea rax, str.runas
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rax, qword [rbp + 0x60]
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x58], rsi
mov dword [rbp - 0x50], esi
mov qword [rbp - 0x48], rsi
cmp qword [rdi + 0x18], 8
jb 0x140007d4d
mov rdi, qword [rdi]
mov qword [rbp - 0x60], rdi
lea rcx, [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x140007dcc
mov r9d, 0x14c
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rbx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__ShellExecuteEx_file_error:
lea rcx, [0x1400c7310]
call fcn.14000a398
mov rcx, rax
mov rdx, rbx
call fcn.14000a398
mov rcx, rax
lea rdx, str._error:
call fcn.14000a398
mov rcx, rax
mov edx, edi
call fcn.14000856c
nop
jmp 0x140008170
mov rbx, qword [rbp - 0x18]
jmp 0x14000813d
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xd0], rsi
mov r14d, 7
mov qword [rbp + 0xd8], r14
mov word [rbp + 0xc0], si
lea rdx, [0x1400a70c4]
lea rcx, [rbp + 0xc0]
call fcn.14000559c
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rbp + 0xc0]
call fcn.140005684
mov rbx, rax
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], rsi
lea r13d, [r14 + 0x19]
mov r8d, r13d
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140085820
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], r14
mov word [rbx], si
lea r8, [0x1400a70bc]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xe0]
call fcn.14000a6f0
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140007e8a
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140005684
mov rbx, rax
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], rsi
mov r8, r13
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140085820
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], r14
mov word [rbx], si
lea rcx, [rbp + 0xe0]
call fcn.140005620
nop
mov r13d, 0x1000
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x140007f20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, r13
jb 0x140007f1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008235
call fcn.1400222c0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r14
mov word [rbp + 0xa0], si
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x140007f77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, r13
jb 0x140007f72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000823b
call fcn.1400222c0
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], r14
mov word [rbp + 0xc0], si
mov ebx, 0x68
mov r8d, ebx
xor edx, edx
lea rcx, [rbp - 0x10]
call main
mov dword [rbp - 0x10], ebx
mov dword [rbp + 0x2c], 1
mov word [rbp + 0x30], si
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae rdx, qword [rbp + 0x80]
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rcx, qword [rbp + 0x60]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1400080d8
mov r9d, 0x15c
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rbx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__CreateProcess_file_error:
lea rcx, [0x1400c7310]
call fcn.14000a398
mov rcx, rax
mov rdx, rbx
call fcn.14000a398
mov rcx, rax
lea rdx, str._error:
call fcn.14000a398
mov rcx, rax
mov edx, edi
call fcn.14000856c
nop
lea rcx, [rsp + 0x50]
call fcn.14000b9c4
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x1400081ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, r13
jb 0x1400080ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000822f
call fcn.1400222c0
jmp 0x1400081ec
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x140008124
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, r13
jb 0x14000811f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000822f
call fcn.1400222c0
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], si
test rbx, rbx
jne 0x14000817c
mov r9d, 0x165
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__fail_to_Launch_process_
lea rcx, [0x1400c7310]
call fcn.14000a398
nop
lea rcx, [rsp + 0x50]
call fcn.14000b9c4
jmp 0x1400081ec
neg r15b
sbb edx, edx
and edx, 0xffffec77
add edx, 0x1388
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400081d2
mov r9d, 0x16b
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeIMPluginWrapper.cpp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000b798
nop
lea rdx, str._CIMPluginWrapper::LaunchAsAdmin__wait_error
lea rcx, [0x1400c7310]
call fcn.14000a398
nop
lea rcx, [rsp + 0x50]
call fcn.14000b9c4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14, r14
je 0x1400081e9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov sil, 1
mov rcx, qword [rsp + 0x78]
lea rdx, [rcx - 1]
cmp rdx, 0xfffffffffffffffd
ja 0x140008202
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x60]
call fcn.140005620
mov al, sil
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140080bf0
add rsp, 0x210
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140065e1c
nop
call fcn.140065e1c
nop
call fcn.140065e1c
int3