Function at 0x14002f7b0
Capabilities:
Print debug messages

Disassembly:
push rbp
push r13
push r14
sub rsp, 0x50
mov rax, qword [rdx + 0x18]
mov rbp, rdx
mov r9d, dword [rdx + 4]
mov r13, rcx
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov qword [rsp + 0x20], rax
lea rcx, str._s__d_nProcessType_d_sAppName_s
mov r8d, 0x55d
call fcn.14004c3d0
cmp dword [0x140126804], 0
jne 0x14002f841
cmp dword [0x140126800], 0
jne 0x14002f841
cmp dword [0x140126808], 0
jne 0x14002f841
call fcn.14000ac00
test dword [rax + 0xac], 0x100
je 0x14002f841
lea rcx, [rbp + 0x18]
call fcn.14002efd0
test eax, eax
jne 0x14002f841
mov r8d, 0x561
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
lea rcx, str._s__d_NOT_in_support_list__return
add rsp, 0x50
pop r14
pop r13
pop rbp
jmp fcn.14004c3d0
mov rcx, qword [rbp + 0x18]
mov qword [rsp + 0x30], r15
cmp dword [rcx - 0x10], 0
jl 0x14002f888
lea rdx, str.MicrosoftEdge
call fcn.1400aa2c0
test rax, rax
je 0x14002f888
sub rax, qword [rbp + 0x18]
sar rax, 1
test eax, eax
js 0x14002f888
mov r15d, 1
mov dword [0x14011f2fc], r15d
mov r15, qword [rsp + 0x30]
add rsp, 0x50
pop r14
pop r13
pop rbp
ret
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x14002f8ca
lea rdx, str.iexplore.exe
call fcn.1400aa2c0
test rax, rax
je 0x14002f8ca
sub rax, qword [rbp + 0x18]
sar rax, 1
test eax, eax
js 0x14002f8ca
mov r15d, 1
mov dword [0x14011f2f8], r15d
mov r15, qword [rsp + 0x30]
add rsp, 0x50
pop r14
pop r13
pop rbp
ret
cmp dword [rbp + 4], 3
mov r15d, 1
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], r12
jne 0x14002fd2a
lea rcx, [rbp + 0x18]
call fcn.14002eda0
test eax, eax
jne 0x14002f927
lea rcx, [rbp + 0x18]
call fcn.14002ef50
test eax, eax
je 0x14002f911
cmp dword [0x140125da8], 0
jne 0x14002f927
cmp dword [rbp + 8], 0
jne 0x14002fd2a
mov dword [rbp + 4], 4
jmp 0x14003001f
call fcn.14000ac00
mov r8d, 0x580
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
lea rcx, str._s__d_GlobalPolicy.UWPguiType__d
mov r9d, dword [rax + 0x22c]
call fcn.14004c3d0
call fcn.14000ac00
cmp dword [rax + 0x22c], 0x34
jl 0x14002faea
mov eax, dword [0x140125c58]
add eax, 0xffff63bf
cmp eax, 6
ja 0x14002faea
mov ecx, 0x49
bt ecx, eax
jae 0x14002faea
mov rdi, qword [rbp + 0x28]
xor esi, esi
test rdi, rdi
je 0x14002f9cb
mov rbx, rdi
mov rdi, qword [rdi]
call fcn.14000adc0
mov rdx, qword [rbx + 0x10]
call fcn.140078610
mov rbx, rax
test rax, rax
je 0x14002f9c6
mov rcx, rax
call fcn.1400145b0
cmp dword [rbx + 0x84], 0
jne 0x14002f9c6
mov rcx, rbx
call fcn.14000e850
test eax, eax
cmovne esi, r15d
test rdi, rdi
jne 0x14002f98b
cmp dword [rbp + 4], 3
jne 0x14002fb6d
cmp dword [rbp + 8], 0
jne 0x14002fb6d
mov rcx, qword [rbp + 0x18]
lea rdx, str.SkypeHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002faa3
mov rcx, qword [rbp + 0x18]
lea rdx, str.Skype.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002faa3
mov rcx, qword [rbp + 0x18]
lea rdx, str.lync.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002faa3
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x14002fa4f
lea rdx, str.Skype
call fcn.1400aa2c0
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x14002fa4f
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14002faa3
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002faa3
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe_old
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002faa3
mov rcx, qword [rbp + 0x18]
lea rdx, str.Teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002faa3
mov rcx, qword [rbp + 0x18]
lea rdx, str.msteams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002fb6d
call fcn.140031500
test eax, eax
je 0x14002fb6d
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x5a7
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
call fcn.14004c3d0
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x5b4
lea rcx, str._s__d_sAppName_s_VoIP__non_IntegratedMic__NOT_send_SRV_CMD_ShowVoipToast
call fcn.14004c3d0
lea rcx, [r13 + 0x80]
mov rax, 0xffffffffffffffff
lea rdx, [0x1400c4360]
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x14002fb00
mov r8d, eax
call fcn.140003f80
mov rdx, qword [rbp + 0x18]
mov rbx, qword [r13 + 0x88]
sub rbx, 0x18
lea rcx, [rdx - 0x18]
cmp rcx, rbx
je 0x14002fbbd
cmp dword [rbx + 0x10], 0
jl 0x14002fbad
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002fbad
call fcn.140006110
mov rsi, rax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, r15d
jg 0x14002fb60
mov rcx, qword [rbx]
mov rdx, rbx
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r13 + 0x88], rax
jmp 0x14002fbbd
test esi, esi
je 0x14002facd
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x5ae
lea rcx, str._s__d_sAppName_s_VoIP__delay_1_second_to_send_SRV_CMD_ShowVoipToast
call fcn.14004c3d0
call fcn.14000af30
mov edx, 0x431
mov rcx, rax
lea r8d, [rdx - 0x49]
call fcn.1400989d0
jmp 0x14002faea
mov r8d, dword [rdx - 0x10]
lea rcx, [r13 + 0x88]
call fcn.140003f80
mov dword [r13 + 0x98], r15d
lea rdx, str.CiscoCollabHost.exe
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002fbee
call fcn.14000af30
mov edx, 0x407
mov r8d, 0x2ee0
jmp 0x14002fd22
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140006110
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x78]
add rax, 0x18
mov qword [rsp + 0x78], rax
call fcn.140036b30
test eax, eax
jne 0x14002fd2a
cmp dword [rbp + 4], 3
jne 0x14002fd2a
cmp dword [rbp + 8], eax
jne 0x14002fd2a
mov rcx, qword [rbp + 0x18]
lea rdx, str.SkypeHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002fcec
mov rcx, qword [rbp + 0x18]
lea rdx, str.Skype.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002fcec
mov rcx, qword [rbp + 0x18]
lea rdx, str.lync.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002fcec
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x14002fc9c
lea rdx, str.Skype
call fcn.1400aa2c0
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x14002fc9c
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14002fcec
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002fcec
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe_old
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002fcec
mov rcx, qword [rbp + 0x18]
lea rdx, str.Teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14002fcec
mov rcx, qword [rbp + 0x18]
lea rdx, str.msteams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002fd14
call fcn.140031500
test eax, eax
je 0x14002fd14
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x5d7
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
call fcn.14004c3d0
jmp 0x14002fd2a
call fcn.14000af30
mov edx, 0x404
lea r8d, [rdx - 0x1c]
mov rcx, rax
call fcn.1400989d0
cmp dword [rbp + 4], r15d
jne 0x14002fd44
lea rcx, [rbp + 0x18]
call fcn.14002eda0
test eax, eax
je 0x14002fd44
mov dword [rbp + 4], 4
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140006110
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x80]
add rax, 0x18
mov qword [rsp + 0x80], rax
call fcn.140036b30
test eax, eax
jne 0x14003001f
mov rsi, qword [rbp + 0x28]
test rsi, rsi
je 0x14003001f
movabs r12, 0x80041180002
mov rbx, rsi
mov rsi, qword [rsi]
call fcn.14000adc0
mov rdx, qword [rbx + 0x10]
call fcn.140078610
mov rdi, rax
test rax, rax
je 0x140030016
cmp dword [rbp + 8], 0
je 0x14002fdb7
mov ebx, r15d
jmp 0x14002fdc0
xor ebx, ebx
cmp dword [rbp + 4], 3
setne bl
mov rcx, rdi
call fcn.1400145b0
cmp dword [rdi + 0x84], 0
mov ecx, dword [rbp + 4]
je 0x14002fdf1
sub ecx, r15d
je 0x14002fdec
sub ecx, r15d
je 0x14002fde3
sub ecx, r15d
je 0x14002fde7
xor ebx, ebx
jmp 0x14002fe0a
add ebx, 2
jmp 0x14002fe0a
mov ebx, r15d
jmp 0x14002fe0a
sub ecx, r15d
je 0x14002fe05
sub ecx, r15d
je 0x14002fe05
mov ebx, 0x3e9
sub ecx, r15d
je 0x14002fe0a
mov ebx, 0x3e8
mov rcx, qword [rbp + 0x18]
lea rdx, str.chrome.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002fe29
cmp dword [rbp + 4], 3
je 0x14002feae
lea rcx, [rbp + 0x18]
call fcn.14002ef50
test eax, eax
je 0x14002feae
cmp dword [0x140125da8], 0
movsxd rcx, dword [0x140125da4]
je 0x14002fe54
xor ebx, ebx
cmp dword [rbp + 4], 3
setne bl
add ebx, 3
jmp 0x14002fe87
test ecx, ecx
jle 0x14002fe82
cmp ecx, 0x2b
ja 0x14002fe68
bt r12, rcx
jae 0x14002fe68
mov ebx, r15d
jmp 0x14002fe87
cmp ecx, 0x2a
ja 0x14002fe82
movabs rdx, 0x4043ac28004
mov ebx, 3
bt rdx, rcx
jb 0x14002fe87
mov ebx, 4
cmp ecx, 0xfffffffe
je 0x14002fec4
mov rcx, rdi
call fcn.1400145b0
mov edx, dword [rdi + 0x84]
xor r8d, r8d
cmp dword [rbp + 4], 3
mov ecx, ebx
sete r8b
call fcn.14000a930
mov ebx, eax
mov rcx, rdi
call fcn.1400145b0
cmp dword [rdi + 0x84], 0
je 0x14002fee6
mov dword [rbp + 0xc], ebx
jmp 0x14002fee9
mov r9d, dword [0x14011f138]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x649
lea rcx, str._s__d_m_bSetPresetAutoSwitch___d_
call fcn.14004c3d0
jmp 0x14002ff29
mov dword [rbp + 0x10], ebx
mov r9d, r15d
lea rdx, [0x1400c2658]
mov r8d, ebx
mov rcx, rdi
call fcn.140002a40
test eax, eax
jne 0x14002ff29
mov eax, dword [rbp + 4]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r9, qword [rdi + 0x170]
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
mov r8d, 0x645
mov dword [rsp + 0x20], eax
call fcn.14004c3d0
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoJabber.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002ff86
mov rcx, rdi
call fcn.1400145b0
cmp dword [rdi + 0x84], 0
je 0x14002ff86
cmp dword [rbp + 4], 3
jne 0x14002ff86
mov rdx, qword [rdi + 0x170]
lea rcx, [r13 + 0x60]
test rdx, rdx
jne 0x14002ff69
xor eax, eax
jmp 0x14002ff7a
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x14002ff70
mov r8d, eax
call fcn.140003f80
mov dword [r13 + 0x68], r15d
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002ffe6
mov rcx, rdi
call fcn.1400145b0
cmp dword [rdi + 0x84], 0
je 0x14002ffe6
cmp dword [rbp + 4], 3
jne 0x14002ffe6
mov rdx, qword [rdi + 0x170]
lea rcx, [r13 + 0x70]
test rdx, rdx
jne 0x14002ffc6
xor eax, eax
jmp 0x14002ffda
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14002ffd0
mov r8d, eax
call fcn.140003f80
mov dword [r13 + 0x78], r15d
mov rdx, qword [rdi + 0x170]
lea rcx, [r13 + 0x80]
test rdx, rdx
jne 0x14002fffd
xor eax, eax
jmp 0x14003000e
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140030004
mov r8d, eax
call fcn.140003f80
test rsi, rsi
jne 0x14002fd8c
mov r12, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x30]
add rsp, 0x50
pop r14
pop r13
pop rbp
ret