Function at 0x14004dca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1401aa010]
xor rax, rsp
mov qword [rbp + 8], rax
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0x48], rcx
lea r14, [rdx + 0x18]
mov rax, qword [r14]
mov qword [rsp + 0x20], rax
mov r9d, dword [rdx + 4]
mov r8d, 0x9c7
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_nProcessType_d_sAppName_s
call fcn.140075db0
lea rdx, str.Zoom.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004dd17
call fcn.14004ebf0
cmp dword [0x1401aa4a4], 0
jne 0x14004ddb2
cmp dword [0x1401aa4a0], 0
jne 0x14004ddb2
cmp dword [0x1401aa4a8], 0
jne 0x14004ddb2
call fcn.140014310
test dword [rax + reloc.OLEAUT32.dll_LPSAFEARRAY_UserUnmarshal], 0x100
je 0x14004ddb2
mov rcx, qword [r15 + 0x20]
sub rcx, 0x18
call fcn.14000ec00
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x78]
mov rcx, r14
call fcn.14004b8c0
test eax, eax
jne 0x14004ddb2
mov r8d, 0x9d0
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_NOT_in_support_list__return
call fcn.140075db0
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1400f4410
mov rbx, qword [rsp + 0x160]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rbx, [0x14011c160]
mov rdi, 0xffffffffffffffff
cmp dword [r15 + 4], 3
je 0x14004de72
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x14004ebc2
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.14000c4c0
test al, al
jne 0x14004de2b
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x14004de10
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.14000c750
nop
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.14004b290
test eax, eax
je 0x14004de72
call fcn.1400147e0
mov rcx, rax
mov edx, 0x404
call fcn.1400e8940
call fcn.1400147e0
mov rcx, rax
mov edx, 0x407
call fcn.1400e8940
call fcn.1400147e0
mov rcx, rax
mov edx, 0x416
call fcn.1400e8940
mov r13d, 1
mov r12d, 0x3e8
cmp dword [r15 + 4], 3
jne 0x14004e358
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x14004ebcd
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000c4c0
test al, al
jne 0x14004deeb
mov rax, rdi
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x14004ded0
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000c750
nop
lea rdx, [rsp + 0x58]
mov rcx, r14
call fcn.14004b290
test eax, eax
je 0x14004e44e
call fcn.140014310
mov r9d, dword [rax + 0x2a4]
mov r8d, 0x9ec
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_GlobalPolicy.UWPguiType__d
call fcn.140075db0
call fcn.140014310
cmp dword [rax + 0x2a4], 0x34
jl 0x14004e137
mov eax, dword [0x1401b264c]
add eax, 0xffff63bf
cmp eax, 6
ja 0x14004e137
mov ecx, 0x49
bt ecx, eax
jae 0x14004e137
xor esi, esi
mov rdi, qword [r15 + 0x30]
test rdi, rdi
je 0x14004dfa6
lea rbx, [rdi]
mov rdi, qword [rdi]
call fcn.140014660
mov rdx, qword [rbx + 0x10]
call fcn.1400ac390
mov rbx, rax
test rax, rax
je 0x14004df9a
mov rcx, rax
call fcn.140020820
test eax, eax
jne 0x14004df9a
mov rcx, rbx
call fcn.1400186a0
test eax, eax
cmovne esi, r13d
test rdi, rdi
jne 0x14004df64
lea rbx, [0x14011c160]
cmp dword [r15 + 4], 3
jne 0x14004e0b3
cmp dword [r15 + 8], 0
jne 0x14004e0b3
lea rdx, str.SkypeHost.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
lea rdx, str.Skype.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
lea rdx, str.lync.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
mov rcx, qword [r14]
cmp dword [rcx - 0x10], 0
jl 0x14004e02b
lea rdx, str.Skype
call fcn.1400fa604
mov rcx, qword [r14]
test rax, rax
je 0x14004e02b
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14004e08c
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
lea rdx, str.CiscoCollabHost.exe_old
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
lea rdx, str.Teams.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
lea rdx, str.msteams.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e08c
lea rdx, str.ms_teams.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004e0b3
call fcn.14004ef80
test eax, eax
je 0x14004e0b3
xor esi, esi
mov r9, qword [r14]
mov r8d, 0xa15
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
call fcn.140075db0
mov rcx, qword [r14]
sub rcx, 0x18
call fcn.14000ec00
add rax, 0x18
mov qword [rbp - 0x80], rax
mov edx, dword [r15 + 4]
lea rcx, [rbp - 0x80]
call fcn.140055f30
test eax, eax
jne 0x14004e10f
test esi, esi
je 0x14004e10f
mov r9, qword [r14]
mov r8d, 0xa20
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_sAppName_s_VoIP__delay_1_second_to_send_SRV_CMD_ShowVoipToast
call fcn.140075db0
call fcn.1400147e0
mov rcx, rax
mov r8d, r12d
mov edx, 0x431
call fcn.1400e8700
jmp 0x14004e12b
mov r9, qword [r14]
mov r8d, 0xa26
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_sAppName_s_VoIP__non_IntegratedMic__NOT_send_SRV_CMD_ShowVoipToast
call fcn.140075db0
mov rdi, 0xffffffffffffffff
mov rsi, qword [rsp + 0x48]
lea rcx, [rsi + 0x80]
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x14004e141
mov r8d, eax
mov rdx, rbx
call fcn.14000c750
lea rcx, [rsi + 0x88]
mov rdx, r14
call fcn.14000eb60
mov dword [rsi + 0x98], r13d
lea rdx, str.CiscoCollabHost.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004e195
call fcn.1400147e0
mov edx, 0x407
mov r8d, 0x2ee0
jmp 0x14004e2d7
mov rcx, qword [r14]
sub rcx, 0x18
call fcn.14000ec00
add rax, 0x18
mov qword [rbp - 0x78], rax
mov edx, dword [r15 + 4]
lea rcx, [rbp - 0x78]
call fcn.140055f30
test eax, eax
jne 0x14004e2df
cmp dword [r15 + 4], 3
jne 0x14004e2df
cmp dword [r15 + 8], eax
jne 0x14004e2df
lea rdx, str.SkypeHost.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
lea rdx, str.Skype.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
lea rdx, str.lync.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
mov rcx, qword [r14]
cmp dword [rcx - 0x10], 0
jl 0x14004e242
lea rdx, str.Skype
call fcn.1400fa604
mov rcx, qword [r14]
test rax, rax
je 0x14004e242
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14004e2a3
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
lea rdx, str.CiscoCollabHost.exe_old
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
lea rdx, str.Teams.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
lea rdx, str.msteams.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004e2a3
lea rdx, str.ms_teams.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004e2ca
call fcn.14004ef80
test eax, eax
je 0x14004e2ca
mov r9, qword [r14]
mov r8d, 0xa4b
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
call fcn.140075db0
jmp 0x14004e2df
call fcn.1400147e0
mov r8d, r12d
mov edx, 0x404
mov rcx, rax
call fcn.1400e8700
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x14004ebd8
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.14000c4c0
test al, al
jne 0x14004e33f
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x14004e324
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.14000c750
nop
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.14004b290
test eax, eax
je 0x14004e358
mov dword [r15 + 0x14], 3
mov rcx, qword [r14]
sub rcx, 0x18
call fcn.14000ec00
add rax, 0x18
mov qword [rbp - 0x70], rax
mov edx, dword [r15 + 4]
lea rcx, [rbp - 0x70]
call fcn.140055f30
test eax, eax
je 0x14004e57e
cmp dword [r15 + 0x14], 3
jne 0x14004dd8b
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x14004ebac
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14000c4c0
test al, al
jne 0x14004e3ec
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x14004e3d1
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14000c750
nop
lea rdx, [rsp + 0x68]
mov rcx, r14
call fcn.14004b290
test eax, eax
je 0x14004e571
cmp dword [r15 + 4], 3
je 0x14004e571
call fcn.14002c560
mov rcx, qword [rax + 0x108]
sub rcx, 0x18
call fcn.14000ec00
lea rbx, [rax + 0x18]
mov qword [rbp], rbx
call fcn.140014660
mov rdx, rbx
call fcn.1400ac390
mov rsi, rax
test rax, rax
je 0x14004e550
cmp dword [r15 + 8], 0
je 0x14004e466
mov edi, r13d
jmp 0x14004e471
cmp dword [r15 + 8], 0
jne 0x14004e358
mov dword [r15 + 4], 4
jmp 0x14004dd8b
xor edi, edi
cmp dword [r15 + 4], 3
setne dil
mov rcx, rsi
call fcn.140020820
mov ecx, dword [r15 + 4]
test eax, eax
je 0x14004e4a0
sub ecx, 1
je 0x14004e49b
sub ecx, 1
je 0x14004e490
sub ecx, 1
je 0x14004e495
xor r12d, r12d
jmp 0x14004e4b5
lea r12d, [rdi + 2]
jmp 0x14004e4b5
mov r12d, r13d
jmp 0x14004e4b5
sub ecx, 1
je 0x14004e4b5
sub ecx, 1
je 0x14004e4b5
sub ecx, 1
jne 0x14004e4b5
mov r12d, 0x3e9
mov dword [rsp + 0x38], 0
mov r9d, r13d
lea r8, [rsp + 0x38]
lea rdx, [0x140119500]
lea rcx, [rsi + 0x10]
call fcn.14000ab50
test eax, eax
je 0x14004e4e0
cmp dword [rsp + 0x38], r12d
je 0x14004e549
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rax
mov eax, SafeArrayUnaccessData
mov word [rbp - 0x60], ax
mov dword [rbp - 0x58], r12d
mov r9d, r13d
lea r8, [rbp - 0x60]
lea rdx, [0x140119500]
lea rcx, [rsi + 0x10]
call fcn.14000bae0
mov edi, eax
lea rcx, [rbp - 0x60]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_PropVariantClear]
test edi, edi
jne 0x14004e549
mov eax, dword [r15 + 4]
mov dword [rsp + 0x20], eax
mov r9, qword [rsi + 0x170]
mov r8d, 0xa82
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
call fcn.140075db0
mov rdi, 0xffffffffffffffff
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14004e571
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14005eeb3.0]
mov dword [r15 + 0x14], 0xff
jmp 0x14004dd8b
mov rax, qword [r15 + 0x30]
test rax, rax
je 0x14004dd8b
lea rbx, [rax]
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
call fcn.140014660
mov rdx, qword [rbx + 0x10]
call fcn.1400ac390
mov r13, rax
test rax, rax
je 0x14004eba2
cmp dword [r15 + 8], 0
je 0x14004e5be
mov ebx, 1
jmp 0x14004e5c8
xor ebx, ebx
cmp dword [r15 + 4], 3
setne bl
mov rcx, r13
call fcn.140020820
mov ecx, dword [r15 + 4]
test eax, eax
je 0x14004e5f7
sub ecx, 1
je 0x14004e5f0
sub ecx, 1
je 0x14004e5e7
sub ecx, 1
je 0x14004e5eb
xor ebx, ebx
jmp 0x14004e60e
add ebx, 2
jmp 0x14004e60e
mov ebx, 1
jmp 0x14004e60e
sub ecx, 1
je 0x14004e60b
sub ecx, 1
je 0x14004e60b
sub ecx, 1
mov ebx, 0x3e9
je 0x14004e60e
mov ebx, r12d
lea rdx, str.chrome.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, r13
call fcn.140020820
test eax, eax
je 0x14004e630
mov dword [r15 + 0xc], ebx
jmp 0x14004e634
mov dword [r15 + 0x10], ebx
lea rdx, str.CiscoCollabHost.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004e70d
cmp dword [r15 + 4], 3
jne 0x14004e70d
call fcn.1400147e0
mov rcx, rax
mov edx, 0x416
mov r8d, 0x2ee0
call fcn.1400e8700
mov rcx, r13
call fcn.140020820
mov rdx, qword [r13 + 0x170]
test eax, eax
je 0x14004e6c3
lea rcx, [rsi + 0x1d0]
test rdx, rdx
jne 0x14004e6a3
xor eax, eax
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x1e0], ebx
jmp 0x14004e7aa
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x14004e6a6
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x1e0], ebx
jmp 0x14004e7aa
lea rcx, [rsi + 0x1d8]
test rdx, rdx
jne 0x14004e6e4
xor eax, eax
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x1e4], ebx
jmp 0x14004e7aa
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14004e6f0
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x1e4], ebx
jmp 0x14004e7aa
mov dword [rsp + 0x3c], 0
mov r9d, 1
lea r8, [rsp + 0x3c]
lea rdx, [0x140119500]
lea rcx, [r13 + 0x10]
call fcn.14000ab50
test eax, eax
je 0x14004e73a
cmp dword [rsp + 0x3c], ebx
je 0x14004e7a3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov eax, SafeArrayUnaccessData
mov word [rbp - 0x48], ax
mov dword [rbp - 0x40], ebx
lea r9d, [rax - 0x12]
lea r8, [rbp - 0x48]
lea rdx, [0x140119500]
lea rcx, [r13 + 0x10]
call fcn.14000bae0
mov ebx, eax
lea rcx, [rbp - 0x48]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_PropVariantClear]
test ebx, ebx
jne 0x14004e7a3
mov eax, dword [r15 + 4]
mov dword [rsp + 0x20], eax
mov r9, qword [r13 + 0x170]
mov r8d, 0xac5
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
call fcn.140075db0
mov rdi, 0xffffffffffffffff
lea rax, [rsp + 0x70]
mov qword [rbp - 0x68], rax
call fcn.14000cd60
mov rdx, rax
test rax, rax
je 0x14004ebb7
mov rcx, qword [rax]
mov rax, qword [rcx + 0x18]
mov rcx, rdx
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x14011c160]
lea rcx, [rsp + 0x70]
call fcn.14000c4c0
test al, al
jne 0x14004e807
xor r8d, r8d
lea rdx, [0x14011c160]
lea rcx, [rsp + 0x70]
call fcn.14000c750
nop
lea rdx, [rsp + 0x70]
mov rcx, r14
call fcn.14004b290
test eax, eax
je 0x14004e9c5
cmp dword [r15 + 4], 3
je 0x14004e9c5
call fcn.14002c560
mov rcx, qword [rax + 0x108]
sub rcx, 0x18
call fcn.14000ec00
lea rbx, [rax + 0x18]
mov qword [rbp - 0x68], rbx
lea rdx, str.chrome.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004e884
mov rdx, qword [r13 + 0x170]
test rdx, rdx
je 0x14004e884
cmp dword [rbx - 0x10], eax
jl 0x14004e884
mov rcx, rbx
call fcn.1400fa604
test rax, rax
je 0x14004e884
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x14004e9a2
call fcn.140014660
mov rdx, rbx
call fcn.1400ac390
mov r14, rax
test rax, rax
je 0x14004e99e
cmp dword [r15 + 8], 0
je 0x14004e8ab
mov edi, 1
jmp 0x14004e8b6
xor edi, edi
cmp dword [r15 + 4], 3
setne dil
mov rcx, r14
call fcn.140020820
mov ecx, dword [r15 + 4]
test eax, eax
je 0x14004e8e5
sub ecx, 1
je 0x14004e8de
sub ecx, 1
je 0x14004e8d5
sub ecx, 1
je 0x14004e8d9
xor edi, edi
jmp 0x14004e8fc
add edi, 2
jmp 0x14004e8fc
mov edi, 1
jmp 0x14004e8fc
sub ecx, 1
je 0x14004e8f9
sub ecx, 1
je 0x14004e8f9
sub ecx, 1
mov edi, 0x3e9
je 0x14004e8fc
mov edi, r12d
mov dword [rsp + 0x40], 0
mov r9d, 1
lea r8, [rsp + 0x40]
lea rdx, [0x140119500]
lea rcx, [r14 + 0x10]
call fcn.14000ab50
test eax, eax
je 0x14004e929
cmp dword [rsp + 0x40], edi
je 0x14004e992
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rax
mov eax, SafeArrayUnaccessData
mov word [rbp - 0x30], ax
mov dword [rbp - 0x28], edi
lea r9d, [rax - 0x12]
lea r8, [rbp - 0x30]
lea rdx, [0x140119500]
lea rcx, [r14 + 0x10]
call fcn.14000bae0
mov edi, eax
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_PropVariantClear]
test edi, edi
jne 0x14004e992
mov eax, dword [r15 + 4]
mov dword [rsp + 0x20], eax
mov r9, qword [r14 + 0x170]
mov r8d, 0xadb
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
call fcn.140075db0
mov rsi, qword [rsp + 0x48]
mov rdi, 0xffffffffffffffff
lea r14, [r15 + 0x18]
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004e9c5
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14005eeb3.0]
lea rdx, str.CiscoJabber.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004ea1c
mov rcx, r13
call fcn.140020820
test eax, eax
je 0x14004ea1c
cmp dword [r15 + 4], 3
jne 0x14004ea1c
mov rdx, qword [r13 + 0x170]
lea rcx, [rsi + 0x60]
test rdx, rdx
jne 0x14004ea00
xor eax, eax
jmp 0x14004ea0d
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x14004ea03
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x68], 1
lea rdx, str.CiscoCollabHost.exe
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004eb60
mov eax, dword [r15 + 4]
cmp eax, 3
jne 0x14004ea94
mov rcx, r13
call fcn.140020820
test eax, eax
je 0x14004eb60
mov rdx, qword [r13 + 0x170]
lea rcx, [rsi + 0x70]
test rdx, rdx
jne 0x14004ea73
xor eax, eax
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x78], 1
jmp 0x14004eb60
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x14004ea76
mov r8d, eax
call fcn.14000c750
mov dword [rsi + 0x78], 1
jmp 0x14004eb60
cmp eax, 2
jne 0x14004eb60
call fcn.140014660
mov rdx, qword [rsi + 0x70]
call fcn.1400ac390
mov rdi, rax
test rax, rax
je 0x14004eb52
mov dword [rsp + 0x44], 0
mov r9d, 1
lea r8, [rsp + 0x44]
lea rdx, [0x140119500]
lea rcx, [rax + 0x10]
call fcn.14000ab50
test eax, eax
je 0x14004eae5
cmp dword [rsp + 0x44], 2
je 0x14004eb52
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rax
mov eax, SafeArrayUnaccessData
mov word [rbp - 0x18], ax
mov dword [rbp - 0x10], 2
lea r9d, [rax - 0x12]
lea r8, [rbp - 0x18]
lea rdx, [0x140119500]
lea rcx, [rdi + 0x10]
call fcn.14000bae0
mov ebx, eax
lea rcx, [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_PropVariantClear]
test ebx, ebx
jne 0x14004eb52
mov eax, dword [r15 + 4]
mov dword [rsp + 0x20], eax
mov r9, qword [rdi + 0x170]
mov r8d, 0xb14
lea rdx, str.CCustomizeHP::OnAppSessionTypeChange
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
call fcn.140075db0
mov dword [rsi + 0x78], 0
mov rdi, 0xffffffffffffffff
mov rdx, qword [r13 + 0x170]
lea rcx, [rsi + 0x80]
test rdx, rdx
jne 0x14004eb87
xor eax, eax
mov r8d, eax
call fcn.14000c750
mov rax, qword [rsp + 0x30]
jmp 0x14004e582
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14004eb90
mov r8d, eax
call fcn.14000c750
mov rax, qword [rsp + 0x30]
jmp 0x14004e582
mov ecx, 0x80004005
call fcn.14000ce90
int3
mov ecx, 0x80004005
call fcn.14000ce90
int3
mov ecx, 0x80004005
call fcn.14000ce90
int3
mov ecx, 0x80004005
call fcn.14000ce90
int3
mov ecx, 0x80004005
call fcn.14000ce90
int3