Function at 0x14003ba60
Capabilities:
Print debug messages

Disassembly:
push rbp
push r14
push r15
sub rsp, 0x50
mov rax, qword [rdx + 0x18]
mov rbp, rdx
mov r9d, dword [rdx + 4]
mov r15, rcx
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov qword [rsp + 0x20], rax
lea rcx, str._s__d_nProcessType_d_sAppName_s
mov r8d, 0x74e
call fcn.140065460
cmp dword [0x1401aef44], 0
jne 0x14003bafe
cmp dword [0x1401aef40], 0
jne 0x14003bafe
cmp dword [0x1401aef48], 0
jne 0x14003bafe
call fcn.14000b810
test dword [rax + reloc.OLEAUT32.dll_LPSAFEARRAY_UserUnmarshal], 0x100
je 0x14003bafe
lea rcx, [rbp + 0x18]
call fcn.14003ab00
test eax, eax
jne 0x14003bafe
lea rcx, [rbp + 0x18]
call fcn.14003ad60
test eax, eax
jne 0x14003bafe
mov r8d, 0x752
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
lea rcx, str._s__d_NOT_in_support_list__return
add rsp, 0x50
pop r15
pop r14
pop rbp
jmp fcn.140065460
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x14003bb28
lea rdx, str.MicrosoftEdge
call fcn.1400da418
test rax, rax
je 0x14003bb28
sub rax, qword [rbp + 0x18]
sar rax, 1
test eax, eax
jns 0x14003c279
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x14003bb55
lea rdx, str.iexplore.exe
call fcn.1400da418
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x14003bb55
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14003c279
mov qword [rsp + 0x38], r12
lea rdx, str.Zoom.exe
mov qword [rsp + 0x30], r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003bb75
call fcn.14003d6e0
xor r12d, r12d
mov qword [rsp + 0x70], rbx
cmp dword [rbp + 4], 3
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
lea r13d, [r12 + 1]
jne 0x14003bea1
lea rcx, [rbp + 0x18]
call fcn.14003ab00
test eax, eax
je 0x14003c09a
call fcn.14000b810
mov r8d, 0x776
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
lea rcx, str._s__d_GlobalPolicy.UWPguiType__d
mov r9d, dword [rax + 0x2a4]
call fcn.140065460
call fcn.14000b810
cmp dword [rax + 0x2a4], 0x34
jl 0x14003bdda
mov eax, dword [0x1401ad88c]
add eax, 0xffff63bf
cmp eax, 6
ja 0x14003bdda
mov ecx, 0x49
bt ecx, eax
jae 0x14003bdda
mov rdi, qword [rbp + 0x28]
mov esi, r12d
test rdi, rdi
je 0x14003bc47
mov rbx, rdi
mov rdi, qword [rdi]
call fcn.14000b9e0
mov rdx, qword [rbx + 0x10]
call fcn.140097690
mov rbx, rax
test rax, rax
je 0x14003bc42
mov rcx, rax
call fcn.140017a40
test eax, eax
jne 0x14003bc42
mov rcx, rbx
call fcn.14000f9a0
test eax, eax
cmovne esi, r13d
test rdi, rdi
jne 0x14003bc0c
cmp dword [rbp + 4], 3
jne 0x14003bd5d
cmp dword [rbp + 8], r12d
jne 0x14003bd5d
mov rcx, qword [rbp + 0x18]
lea rdx, str.SkypeHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
lea rdx, str.Skype.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
lea rdx, str.lync.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], r12d
jl 0x14003bccf
lea rdx, str.Skype
call fcn.1400da418
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x14003bccf
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14003bd34
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe_old
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
lea rdx, str.Teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
lea rdx, str.msteams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003bd34
mov rcx, qword [rbp + 0x18]
lea rdx, str.ms_teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003bd5d
call fcn.14003d9a0
test eax, eax
je 0x14003bd5d
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x79f
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
mov esi, r12d
call fcn.140065460
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140007120
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x78]
add rax, 0x18
mov qword [rsp + 0x78], rax
call fcn.140043300
test eax, eax
jne 0x14003bdbd
test esi, esi
je 0x14003bdbd
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x7aa
lea rcx, str._s__d_sAppName_s_VoIP__delay_1_second_to_send_SRV_CMD_ShowVoipToast
call fcn.140065460
call fcn.14000bb60
mov edx, 0x431
mov rcx, rax
lea r8d, [rdx - 0x49]
call fcn.1400c8b50
jmp 0x14003bdda
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x7b0
lea rcx, str._s__d_sAppName_s_VoIP__non_IntegratedMic__NOT_send_SRV_CMD_ShowVoipToast
call fcn.140065460
lea rcx, [r15 + 0x80]
mov rax, 0xffffffffffffffff
lea rdx, [0x140119b08]
nop
inc rax
cmp word [rdx + rax*2], r12w
jne 0x14003bdf0
mov r8d, eax
call fcn.140004e70
mov rdx, qword [rbp + 0x18]
mov rbx, qword [r15 + 0x88]
sub rbx, 0x18
lea rcx, [rdx - 0x18]
cmp rcx, rbx
je 0x14003be69
cmp dword [rbx + 0x10], r12d
jl 0x14003be59
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14003be59
call fcn.140007120
mov rsi, rax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, r13d
jg 0x14003be4c
mov rcx, qword [rbx]
mov rdx, rbx
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r15 + 0x88], rax
jmp 0x14003be69
mov r8d, dword [rdx - 0x10]
lea rcx, [r15 + 0x88]
call fcn.140004e70
mov dword [r15 + 0x98], r13d
lea rdx, str.CiscoCollabHost.exe
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003bf2b
call fcn.14000bb60
mov rcx, rax
mov edx, 0x407
mov r8d, 0x2ee0
call fcn.1400c8b50
cmp dword [rbp + 4], r13d
jne 0x14003bebb
lea rcx, [rbp + 0x18]
call fcn.14003ab00
test eax, eax
je 0x14003bebb
mov dword [rbp + 4], 4
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140007120
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x88]
add rax, 0x18
mov qword [rsp + 0x88], rax
call fcn.140043300
test eax, eax
jne 0x14003c260
mov rsi, qword [rbp + 0x28]
test rsi, rsi
je 0x14003c260
mov rbx, rsi
mov rsi, qword [rsi]
call fcn.14000b9e0
mov rdx, qword [rbx + 0x10]
call fcn.140097690
mov rdi, rax
test rax, rax
je 0x14003c257
cmp dword [rbp + 8], r12d
je 0x14003c0b0
mov ebx, r13d
jmp 0x14003c0ba
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140007120
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x80]
add rax, 0x18
mov qword [rsp + 0x80], rax
call fcn.140043300
test eax, eax
jne 0x14003bea1
cmp dword [rbp + 4], 3
jne 0x14003bea1
cmp dword [rbp + 8], r12d
jne 0x14003bea1
mov rcx, qword [rbp + 0x18]
lea rdx, str.SkypeHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003c059
mov rcx, qword [rbp + 0x18]
lea rdx, str.Skype.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003c059
mov rcx, qword [rbp + 0x18]
lea rdx, str.lync.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003c059
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], r12d
jl 0x14003bfe4
lea rdx, str.Skype
call fcn.1400da418
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x14003bfe4
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x14003c059
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003c059
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe_old
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003c059
mov rcx, qword [rbp + 0x18]
lea rdx, str.Teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003c059
mov rcx, qword [rbp + 0x18]
lea rdx, str.msteams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, qword [rbp + 0x18]
lea rdx, str.ms_teams.exe
mov ebx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov r8d, r12d
mov edx, r12d
test eax, eax
sete r8b
test ebx, ebx
sete dl
or r8d, edx
je 0x14003c084
call fcn.14003d9a0
test eax, eax
je 0x14003c084
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x7d5
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
call fcn.140065460
jmp 0x14003bea1
call fcn.14000bb60
mov edx, 0x404
mov rcx, rax
lea r8d, [rdx - 0x1c]
jmp 0x14003be9c
cmp dword [rbp + 8], r12d
jne 0x14003bea1
mov dword [rbp + 4], 4
jmp 0x14003c260
cmp dword [rbp + 4], 3
mov ebx, r12d
setne bl
mov rcx, rdi
call fcn.140017a40
mov ecx, dword [rbp + 4]
test eax, eax
je 0x14003c0e7
sub ecx, r13d
je 0x14003c0e2
sub ecx, r13d
je 0x14003c0d8
sub ecx, r13d
je 0x14003c0dd
mov ebx, r12d
jmp 0x14003c100
add ebx, 2
jmp 0x14003c100
mov ebx, r13d
jmp 0x14003c100
sub ecx, r13d
je 0x14003c0fb
sub ecx, r13d
je 0x14003c0fb
mov ebx, 0x3e9
sub ecx, r13d
je 0x14003c100
mov ebx, 0x3e8
mov rcx, qword [rbp + 0x18]
lea rdx, str.chrome.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rdi
call fcn.140017a40
test eax, eax
je 0x14003c122
mov dword [rbp + 0xc], ebx
jmp 0x14003c125
mov dword [rbp + 0x10], ebx
lea rcx, [rdi + 0x10]
mov dword [rsp + 0x20], r12d
mov r9d, r13d
lea rdx, [0x140114670]
mov r8d, ebx
call fcn.1400035e0
test eax, eax
jne 0x14003c16b
mov eax, dword [rbp + 4]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r9, qword [rdi + 0x168]
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
mov r8d, 0x844
mov dword [rsp + 0x20], eax
call fcn.140065460
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoJabber.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003c1c6
mov rcx, rdi
call fcn.140017a40
test eax, eax
je 0x14003c1c6
cmp dword [rbp + 4], 3
jne 0x14003c1c6
mov rdx, qword [rdi + 0x168]
lea rcx, [r15 + 0x60]
test rdx, rdx
jne 0x14003c1a7
mov eax, r12d
jmp 0x14003c1ba
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rdx + rax*2], r12w
jne 0x14003c1b0
mov r8d, eax
call fcn.140004e70
mov dword [r15 + 0x68], r13d
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003c226
mov rcx, rdi
call fcn.140017a40
test eax, eax
je 0x14003c226
cmp dword [rbp + 4], 3
jne 0x14003c226
mov rdx, qword [rdi + 0x168]
lea rcx, [r15 + 0x70]
test rdx, rdx
jne 0x14003c202
mov eax, r12d
jmp 0x14003c21a
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdx + rax*2], r12w
jne 0x14003c210
mov r8d, eax
call fcn.140004e70
mov dword [r15 + 0x78], r13d
mov rdx, qword [rdi + 0x168]
lea rcx, [r15 + 0x80]
test rdx, rdx
jne 0x14003c23e
mov eax, r12d
jmp 0x14003c24f
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r12w
jne 0x14003c245
mov r8d, eax
call fcn.140004e70
test rsi, rsi
jne 0x14003bef9
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x70]
mov r12, qword [rsp + 0x38]
mov r13, qword [rsp + 0x30]
add rsp, 0x50
pop r15
pop r14
pop rbp
ret