Function at 0x140006eec
Capabilities:
Get session user name
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6d0]
sub rsp, 0x7d0
mov rax, qword [0x140046010]
xor rax, rsp
mov qword [rbp + 0x6c0], rax
mov r14, rdx
mov rsi, rcx
mov rcx, qword [rcx + 0x1a0]
cmp word [rcx], 0x5243
jne 0x140007f6d
cmp byte [rcx + 2], 0x44
jne 0x140007f6d
cmp dword [rcx + 0xc], 0x57b
je 0x140006f51
mov eax, 2
jmp 0x140007f72
mov eax, dword [rcx + 0x88]
mov dword [rsi + 0x110], eax
mov eax, dword [rcx + 0x8c]
mov dword [rsi + 0x114], eax
mov rax, qword [rcx + 0xb0]
mov qword [rsi + 0x118], rax
mov eax, dword [rcx + 0xb8]
mov dword [rsi + 0x90], eax
mov eax, dword [rcx + 0x90]
mov dword [rsi + 0x120], eax
test eax, eax
jne 0x140006fa1
mov eax, dword [rcx + 0x94]
mov dword [rsi + 0x124], eax
jmp 0x140007019
cmp eax, 8
jne 0x140006fb4
mov eax, dword [rcx + 0xa8]
mov dword [rsi + 0x128], eax
jmp 0x140007019
cmp eax, 6
jne 0x140007019
lea r8, [rsi + 0x130]
mov edx, dword [rcx + 0x98]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x138]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x9c]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x140]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0xa0]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
mov eax, dword [rcx + 0xa4]
mov dword [rsi + 0x148], eax
lea r8, [r14 + 0x20]
mov edx, dword [rcx + 0x48]
mov rcx, rsi
call fcn.1400080e0
lea rcx, [rsi + 0x20]
lea rdx, [r14 + 0x20]
call fcn.14000412c
lea r15, [r14 + 0x28]
mov rax, qword [rsi + 0x1a0]
mov r8, r15
mov edx, dword [rax + 0x4c]
mov rcx, rsi
call fcn.1400080e0
lea r8, [r14 + 0x18]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x60]
mov rcx, rsi
call fcn.1400080e0
lea rdi, [r14 + 0x30]
mov rax, qword [rsi + 0x1a0]
mov r8, rdi
mov edx, dword [rax + 0x80]
mov rcx, rsi
call fcn.1400080e0
mov r8, rdi
mov edx, dword [rsi + 0x110]
lea rcx, [rbp + 0x18]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, rdi
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400070ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
lea r12, [r14 + 0x38]
mov rax, qword [rsi + 0x1a0]
mov r8, r12
mov edx, dword [rax + 0x84]
mov rcx, rsi
call fcn.1400080e0
lea rcx, [rbp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rdx, qword [rsi + 0x1a0]
mov ecx, dword [rdx + 0x1c]
mov eax, ecx
shr eax, 0xd
mov ebx, 1
and eax, ebx
mov dword [rsi + 0x78], eax
mov eax, ecx
shr eax, 0xf
not eax
and eax, ebx
mov dword [rsi + 0x7c], eax
mov eax, ecx
shr eax, 0x14
and eax, ebx
mov dword [rsi + 0x80], eax
mov eax, ecx
shr eax, 0x15
and eax, ebx
mov dword [rsi + 0x84], eax
mov eax, ecx
shr eax, 0x16
and eax, ebx
mov dword [rsi + 0x88], eax
mov eax, ecx
shr eax, 0x13
and eax, ebx
mov dword [rsi + 0x8c], eax
mov eax, ecx
shr eax, 0x10
and eax, ebx
mov dword [rsi + 0x94], eax
mov eax, ecx
shr eax, 0x11
not eax
and eax, ebx
mov dword [rsi + 0xb8], eax
shr ecx, 0x12
and ecx, ebx
mov dword [rsi + 0x10c], ecx
mov eax, dword [rdx + 0x34]
mov dword [rsi + 0xbc], eax
lea r8, [rsi + 0x98]
mov edx, dword [rdx + 0x54]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
mov eax, dword [rcx + 0x58]
mov dword [rsi + 0xa0], eax
lea r8, [rsi + 0x70]
mov edx, dword [rcx + 0x44]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x30]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x5c]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
mov eax, dword [rcx + 0x20]
mov dword [rsi + 0x48], eax
lea r8, [rsi + 0x50]
mov edx, dword [rcx + 0x74]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
mov eax, dword [rcx + 0x24]
mov dword [rsi + 0x58], eax
lea r8, [rsi + 0x38]
mov edx, dword [rcx + 0x6c]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x40]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x70]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
movsd xmm0, qword [rcx + 0x28]
movsd qword [rsi + 0xa4], xmm0
mov eax, dword [rcx + 0x30]
mov dword [rsi + 0xac], eax
lea r8, [rsi + 0xb0]
mov edx, dword [rcx + 0x68]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x10]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x50]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x18]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x78]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 8]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0x64]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
mov eax, dword [rcx + 0x38]
mov dword [rsi + 0xc0], eax
mov eax, dword [rcx + 0x3c]
mov dword [rsi + 0xc4], eax
mov eax, dword [rcx + 0x40]
mov dword [rsi + 0xc8], eax
lea r8, [rsi + 0x28]
mov edx, dword [rcx + 0x7c]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x60]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0xbc]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rsi + 0x68]
mov rax, qword [rsi + 0x1a0]
mov edx, dword [rax + 0xc0]
mov rcx, rsi
call fcn.1400080e0
mov rcx, qword [rsi + 0x1a0]
mov eax, dword [rcx + 0xc4]
mov dword [rsi + 0xe4], eax
mov eax, dword [rcx + 0xc8]
mov dword [rsi + 0xe8], eax
mov eax, dword [rcx + 0xcc]
mov dword [rsi + 0xec], eax
mov eax, dword [rcx + 0xd0]
mov dword [rsi + 0xf0], eax
mov rax, qword [rcx + 0xd4]
mov qword [rsi + 0xf8], rax
mov rax, qword [rcx + 0xe0]
mov qword [rsi + 0x100], rax
mov eax, dword [rcx + 0xe8]
mov dword [rsi + 0x108], eax
mov r8, qword [rdi]
mov edx, dword [r8 - 0x10]
test edx, edx
js 0x140007f9c
mov ecx, ebx
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, edx
or eax, ecx
jge 0x14000736b
mov rcx, rdi
call fcn.140001f48
mov r8, qword [rdi]
mov edx, 0x104
lea rcx, [rbp + 0x2a0]
call fcn.140021198
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.SHLWAPI.dll_PathStripPathW]
mov r8, qword [r12]
mov edx, dword [r8 - 0x10]
xor edi, edi
test edx, edx
js 0x140007f9c
mov ecx, ebx
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, edx
or eax, ecx
jge 0x1400073b7
mov rcx, r12
call fcn.140001f48
mov r8, qword [r12]
mov edx, 0x104
lea rcx, [rbp + 0x90]
call fcn.140021198
lea rcx, [rbp + 0x90]
call qword [sym.imp.SHLWAPI.dll_PathStripPathW]
xor edx, edx
mov r8d, 0x202
lea rcx, [rbp + 0x4b0]
call fcn.140018c60
mov dword [rbp - 0x40], 0x101
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x4b0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp - 0x78]
call fcn.1400041b0
nop
lea rbx, [0x14003eb1c]
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.1400041b0
nop
mov rax, qword [rsi + 0x1a0]
movzx r12d, word [rax + 4]
cmp r12d, dword [rax + 8]
jae 0x14000779c
lea r13, [rsi + 0x170]
mov r8d, 6
mov edx, r12d
mov rcx, r13
call fcn.140001c30
mov r15, rax
cmp word [rax], 0x4946
jne 0x140007530
cmp byte [rax + 2], 0x4c
jne 0x140007530
movzx r8d, word [rax + 4]
mov edx, r12d
mov rcx, r13
call fcn.140001c30
mov rdi, rax
lea rcx, [rbp - 0x10]
call fcn.1400055cc
nop
lea r8, [rbp - 8]
mov edx, dword [rdi + 8]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rbp - 0x10]
mov edx, dword [rdi + 0xc]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rbp]
mov edx, dword [rdi + 0x10]
mov rcx, rsi
call fcn.1400080e0
mov eax, dword [rdi + 0x14]
mov dword [rbp + 8], eax
mov eax, dword [rdi + 0x18]
mov dword [rbp + 0xc], eax
lea rcx, [r14 + 0xc0]
lea rdx, [rbp - 0x10]
call fcn.140009894
mov rbx, rax
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.14000412c
lea rcx, [rbx + 8]
lea rdx, [rbp - 8]
call fcn.14000412c
lea rcx, [rbx + 0x10]
lea rdx, [rbp]
call fcn.14000412c
mov ecx, dword [rbp + 8]
mov dword [rbx + 0x18], ecx
mov ecx, dword [rbp + 0xc]
mov dword [rbx + 0x1c], ecx
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x10]
call fcn.14000412c
mov rdx, rdi
mov rcx, r13
call fcn.140001d44
nop
lea rcx, [rbp - 0x10]
call fcn.140008000
xor edi, edi
jmp 0x140007769
cmp word [rax], 0x5043
jne 0x14000763a
cmp byte [rax + 2], 0x52
jne 0x14000763a
movzx r8d, word [rax + 4]
mov edx, r12d
mov rcx, r13
call fcn.140001c30
mov rbx, rax
call fcn.1400016e0
test rax, rax
je 0x140007fbd
mov rdx, qword [rax]
mov rcx, rax
mov rax, qword [rdx + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x58], rax
call fcn.1400016e0
mov rcx, rax
test rax, rax
je 0x140007fb2
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea r8, [rbp - 0x58]
mov edx, dword [rbx + 8]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rbp - 0x60]
mov edx, dword [rbx + 0xc]
mov rcx, rsi
call fcn.1400080e0
lea rcx, [r14 + 0xe0]
lea rdx, [rbp - 0x58]
call fcn.1400095c0
mov rcx, rax
lea rdx, [rbp - 0x60]
call fcn.14000412c
lea rdx, str.UserNodeID
mov rcx, qword [rbp - 0x58]
call fcn.140031a90
test eax, eax
jne 0x1400075ff
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x70]
call fcn.14000412c
mov rdx, rbx
mov rcx, r13
call fcn.140001d44
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140007631
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x58]
jmp 0x140007731
cmp word [rax], 0x4552
jne 0x140007754
cmp byte [rax + 2], 0x47
jne 0x140007754
movzx r8d, word [rax + 4]
mov edx, r12d
mov rcx, r13
call fcn.140001c30
mov rdi, rax
call fcn.1400016e0
test rax, rax
je 0x140007fd3
mov rdx, qword [rax]
mov rcx, rax
mov rax, qword [rdx + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x38], rax
call fcn.1400016e0
mov rcx, rax
test rax, rax
je 0x140007fc8
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x20], rax
cmp dword [rdi + 8], 0
setne byte [rbp - 0x18]
lea r8, [rbp - 0x38]
mov edx, dword [rdi + 0xc]
mov rcx, rsi
call fcn.1400080e0
lea r8, [rbp - 0x20]
mov edx, dword [rdi + 0x10]
mov rcx, rsi
call fcn.1400080e0
lea rcx, [r14 + 0xd0]
lea rdx, [rbp - 0x38]
call fcn.1400096f8
mov rbx, rax
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.14000412c
mov cl, byte [rbp - 0x18]
mov byte [rbx + 8], cl
mov rdx, rdi
mov rcx, r13
call fcn.140001d44
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
xor edi, edi
sub eax, 1
jg 0x14000772d
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140007769
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
jmp 0x140007769
cmp word [rax], 0x5453
jne 0x140007ce2
cmp byte [rax + 2], 0x52
jne 0x140007ce2
movzx eax, word [r15 + 4]
add r12d, eax
mov rdx, r15
mov rcx, r13
call fcn.140001d44
mov rax, qword [rsi + 0x1a0]
cmp r12d, dword [rax + 8]
jb 0x140007443
lea r15, [r14 + 0x28]
or r13, 0xffffffffffffffff
lea rbx, [0x14003eb1c]
call fcn.1400016e0
mov rcx, rax
test rax, rax
je 0x140007fa7
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x68], rax
call fcn.1400016e0
mov rcx, rax
test rax, rax
je 0x140007fde
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x48], rax
call fcn.1400016e0
mov rcx, rax
test rax, rax
je 0x140007fe9
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x80], rax
call fcn.1400016e0
mov rcx, rax
test rax, rax
je 0x140007ff4
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14001400b.0]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, str.Client_ID
lea rcx, [rbp + 0x28]
call fcn.1400041b0
nop
mov r8, rax
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.140005fd8
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14000788a
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400078b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
mov rax, qword [rbp - 0x48]
cmp dword [rax - 0x10], edi
jne 0x1400078d5
mov rax, r13
inc rax
cmp word [rbx + rax*2], di
jne 0x1400078bd
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400020f4
lea rdx, str.Meeting_No
lea rcx, [rbp + 0x38]
call fcn.1400041b0
nop
mov r8, rax
lea rdx, [rbp + 0x30]
mov rcx, r14
call fcn.140005fd8
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14000792b
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007952
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
mov rax, qword [rbp - 0x68]
cmp dword [rax - 0x10], edi
jne 0x140007976
mov rax, r13
inc rax
cmp word [rbx + rax*2], di
jne 0x14000795e
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.1400020f4
lea rdx, str.USER
lea rcx, [rbp + 0x40]
call fcn.1400041b0
nop
mov r8, rax
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.140005fd8
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400079be
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
mov rbx, qword [rbp - 0x30]
mov eax, dword [rbx - 0x10]
test eax, eax
je 0x140007a37
js 0x140007a37
lea rdx, str.user_id:
mov rcx, rbx
call fcn.140018664
test rax, rax
je 0x140007a37
sub rax, rbx
sar rax, 1
test eax, eax
jle 0x140007a37
lea r8d, [rax + 8]
mov r9d, dword [rbx - 0x10]
sub r9d, r8d
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x30]
call fcn.140003ca4
nop
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x80]
call fcn.14000412c
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007a37
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
mov rax, qword [rbp - 0x80]
cmp dword [rax - 0x10], edi
jne 0x140007abd
lea rdx, str.User_ID
lea rcx, [rbp + 0x50]
call fcn.1400041b0
nop
mov r8, rax
lea rdx, [rbp + 0x48]
mov rcx, r14
call fcn.140005fd8
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007a96
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007abd
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
mov rax, qword [rbp - 0x80]
cmp dword [rax - 0x10], edi
jne 0x140007ae5
mov rax, r13
lea rdx, [0x14003eb1c]
inc rax
cmp word [rdx + rax*2], di
jne 0x140007ad0
mov r8d, eax
lea rcx, [rbp - 0x80]
call fcn.1400020f4
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x58]
call fcn.140006e30
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007b27
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
lea rdx, str.InMeetingName
lea rcx, [rbp + 0x68]
call fcn.1400041b0
nop
mov r8, rax
lea rdx, [rbp + 0x60]
mov rcx, r14
call fcn.140005fd8
nop
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007b7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007ba4
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
mov rax, qword [rbp - 0x50]
cmp dword [rax - 0x10], edi
je 0x140007bba
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x78]
call fcn.14000412c
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x70]
call fcn.140006e30
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14000412c
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007bfc
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
lea rcx, [r14 + 8]
mov edx, dword [rsi + 0x110]
movzx eax, word [rbp + 0x84]
movzx r9d, word [rbp + 0x82]
movzx r8d, word [rbp + 0x80]
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], eax
cmp dword [rsi + 0x78], edi
je 0x140007d8f
lea rdx, str.zoomcrash__02hu_02hu_02hu__d
call fcn.1400047a0
mov eax, dword [rsi + 0x120]
mov esi, dword [rsi + 0x110]
cmp eax, 0xd
jne 0x140007cf0
movzx edx, word [rbp + 0x84]
movzx r9d, word [rbp + 0x82]
movzx r10d, word [rbp + 0x80]
movzx r11d, word [rbp + 0x78]
movzx ebx, word [rbp + 0x7e]
movzx edi, word [rbp + 0x7a]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], esi
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x78]
mov r8, qword [r15]
lea rdx, str.ssbcrash_hang__s__s__s__02hu_02hu_04hu__02hu_02hu_02hu__s__d__s__s__s
mov rcx, r14
call fcn.1400047a0
xor edi, edi
jmp 0x140007e50
mov ebx, 1
or r13, 0xffffffffffffffff
jmp 0x140007f1a
movzx ecx, word [rbp + 0x84]
movzx edx, word [rbp + 0x82]
movzx r8d, word [rbp + 0x80]
movzx r9d, word [rbp + 0x78]
movzx r10d, word [rbp + 0x7e]
movzx r11d, word [rbp + 0x7a]
cmp eax, 0xe
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], esi
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], ecx
mov rax, qword [rbp - 0x70]
mov dword [rsp + 0x48], edx
mov rcx, r14
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x38], r9d
mov r8, qword [r15]
mov dword [rsp + 0x30], r10d
mov r9, qword [rbp - 0x78]
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], rax
lea rdx, str.ssbcrash_user__s__s__s__02hu_02hu_04hu__02hu_02hu_02hu__s__d__s__s__s
je 0x140007d85
lea rdx, str.ssbcrash__s__s__s__02hu_02hu_04hu__02hu_02hu_02hu__s__d__s__s__s
call fcn.1400047a0
jmp 0x140007e50
lea rdx, str.zoom_dev_crash__02hu_02hu_02hu__d
call fcn.1400047a0
mov eax, dword [rsi + 0x120]
mov r11d, dword [rsi + 0x110]
movzx ecx, word [rbp + 0x82]
movzx edx, word [rbp + 0x80]
lea rbx, [rbp + 0x90]
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x60], r11d
lea r11, [rbp + 0x2a0]
mov qword [rsp + 0x58], r11
cmp eax, 0xd
jne 0x140007df4
movzx eax, word [rbp + 0x84]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], edx
lea rdx, str.zoom_dev_crash_hang__s__s__s__02hu_02hu_04hu__02hu_02hu_02hu__s__d__s
jmp 0x140007e1a
cmp eax, 0xe
movzx eax, word [rbp + 0x84]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], edx
lea rdx, str.zoom_dev_crash_user__s__s__s__02hu_02hu_04hu__02hu_02hu_02hu__s__d__s
je 0x140007e1a
lea rdx, str.zoom_dev_crash__s__s__s__02hu_02hu_04hu__02hu_02hu_02hu__s__d__s
movzx r8d, word [rbp + 0x78]
mov dword [rsp + 0x38], r8d
movzx r9d, word [rbp + 0x7e]
mov dword [rsp + 0x30], r9d
movzx r10d, word [rbp + 0x7a]
mov dword [rsp + 0x28], r10d
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x78]
mov r8, qword [r15]
mov rcx, r14
call fcn.1400047a0
mov ebx, edi
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007e7a
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007ea2
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007eca
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007ef2
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007f1a
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140007f42
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14001400b.0]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov ecx, r13d
lock xadd dword [rdx + 0x10], ecx
add ecx, r13d
test ecx, ecx
jg 0x140007f69
mov rcx, qword [rdx]
mov r8, qword [rcx]
mov rax, qword [r8 + 8]
call qword [case.0x14001400b.0]
mov eax, ebx
jmp 0x140007f72
mov eax, 1
mov rcx, qword [rbp + 0x6c0]
xor rcx, rsp
call fcn.140016970
mov rbx, qword [rsp + 0x820]
add rsp, 0x7d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80070057
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
nop
mov ecx, 0x80004005
call fcn.140001558
int3