Function at 0x140037930
Capabilities:
Print debug messages

Disassembly:
push rbp
push r14
push r15
sub rsp, 0x50
mov rax, qword [rdx + 0x18]
mov rbp, rdx
mov r9d, dword [rdx + 4]
mov r15, rcx
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov qword [rsp + 0x20], rax
lea rcx, str._s__d_nProcessType_d_sAppName_s
mov r8d, 0x6b8
call fcn.14005dbf0
cmp dword [0x140161344], 0
jne 0x1400379ce
cmp dword [0x140161340], 0
jne 0x1400379ce
cmp dword [0x140161348], 0
jne 0x1400379ce
call fcn.14000b190
test dword [rax + reloc.OLEAUT32.dll_LPSAFEARRAY_UserUnmarshal], 0x100
je 0x1400379ce
lea rcx, [rbp + 0x18]
call fcn.140036ef0
test eax, eax
jne 0x1400379ce
lea rcx, [rbp + 0x18]
call fcn.140037140
test eax, eax
jne 0x1400379ce
mov r8d, 0x6bc
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
lea rcx, str._s__d_NOT_in_support_list__return
add rsp, 0x50
pop r15
pop r14
pop rbp
jmp fcn.14005dbf0
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x1400379f8
lea rdx, str.MicrosoftEdge
call fcn.1400c4db0
test rax, rax
je 0x1400379f8
sub rax, qword [rbp + 0x18]
sar rax, 1
test eax, eax
jns 0x140038124
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], 0
jl 0x140037a25
lea rdx, str.iexplore.exe
call fcn.1400c4db0
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x140037a25
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x140038124
mov qword [rsp + 0x38], r12
lea rdx, str.Zoom.exe
mov qword [rsp + 0x30], r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140037a45
call fcn.1400395b0
xor r12d, r12d
mov qword [rsp + 0x70], rbx
cmp dword [rbp + 4], 3
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
lea r13d, [r12 + 1]
jne 0x140037d61
lea rcx, [rbp + 0x18]
call fcn.140036ef0
test eax, eax
je 0x140037f31
call fcn.14000b190
mov r8d, 0x6e0
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
lea rcx, str._s__d_GlobalPolicy.UWPguiType__d
mov r9d, dword [rax + 0x2a4]
call fcn.14005dbf0
call fcn.14000b190
cmp dword [rax + 0x2a4], 0x34
jl 0x140037c96
mov eax, dword [0x14015fb94]
add eax, 0xffff63bf
cmp eax, 6
ja 0x140037c96
mov ecx, 0x49
bt ecx, eax
jae 0x140037c96
mov rdi, qword [rbp + 0x28]
mov esi, r12d
test rdi, rdi
je 0x140037b1c
mov rbx, rdi
mov rdi, qword [rdi]
call fcn.14000b470
mov rdx, qword [rbx + 0x10]
call fcn.14008e8b0
mov rbx, rax
test rax, rax
je 0x140037b17
mov rcx, rax
call fcn.140016400
cmp dword [rbx + 0x84], r12d
jne 0x140037b17
mov rcx, rbx
call fcn.14000f1a0
test eax, eax
cmovne esi, r13d
test rdi, rdi
jne 0x140037adc
cmp dword [rbp + 4], 3
jne 0x140037c19
cmp dword [rbp + 8], r12d
jne 0x140037c19
mov rcx, qword [rbp + 0x18]
lea rdx, str.SkypeHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037bf0
mov rcx, qword [rbp + 0x18]
lea rdx, str.Skype.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037bf0
mov rcx, qword [rbp + 0x18]
lea rdx, str.lync.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037bf0
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], r12d
jl 0x140037ba0
lea rdx, str.Skype
call fcn.1400c4db0
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x140037ba0
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x140037bf0
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037bf0
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe_old
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037bf0
mov rcx, qword [rbp + 0x18]
lea rdx, str.Teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037bf0
mov rcx, qword [rbp + 0x18]
lea rdx, str.msteams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140037c19
call fcn.140039880
test eax, eax
je 0x140037c19
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x707
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
mov esi, r12d
call fcn.14005dbf0
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140006b40
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x78]
add rax, 0x18
mov qword [rsp + 0x78], rax
call fcn.14003ec80
test eax, eax
jne 0x140037c79
test esi, esi
je 0x140037c79
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x712
lea rcx, str._s__d_sAppName_s_VoIP__delay_1_second_to_send_SRV_CMD_ShowVoipToast
call fcn.14005dbf0
call fcn.14000b5e0
mov edx, 0x431
mov rcx, rax
lea r8d, [rdx - 0x49]
call fcn.1400b43a0
jmp 0x140037c96
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x718
lea rcx, str._s__d_sAppName_s_VoIP__non_IntegratedMic__NOT_send_SRV_CMD_ShowVoipToast
call fcn.14005dbf0
lea rcx, [r15 + 0x80]
mov rax, 0xffffffffffffffff
lea rdx, [0x1400e2fc8]
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], r12w
jne 0x140037cb0
mov r8d, eax
call fcn.1400048e0
mov rdx, qword [rbp + 0x18]
mov rbx, qword [r15 + 0x88]
sub rbx, 0x18
lea rcx, [rdx - 0x18]
cmp rcx, rbx
je 0x140037d29
cmp dword [rbx + 0x10], r12d
jl 0x140037d19
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140037d19
call fcn.140006b40
mov rsi, rax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, r13d
jg 0x140037d0c
mov rcx, qword [rbx]
mov rdx, rbx
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r15 + 0x88], rax
jmp 0x140037d29
mov r8d, dword [rdx - 0x10]
lea rcx, [r15 + 0x88]
call fcn.1400048e0
mov dword [r15 + 0x98], r13d
lea rdx, str.CiscoCollabHost.exe
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140037deb
call fcn.14000b5e0
mov rcx, rax
mov edx, 0x407
mov r8d, 0x2ee0
call fcn.1400b43a0
cmp dword [rbp + 4], r13d
jne 0x140037d7b
lea rcx, [rbp + 0x18]
call fcn.140036ef0
test eax, eax
je 0x140037d7b
mov dword [rbp + 4], 4
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140006b40
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x88]
add rax, 0x18
mov qword [rsp + 0x88], rax
call fcn.14003ec80
test eax, eax
jne 0x14003810b
mov rsi, qword [rbp + 0x28]
test rsi, rsi
je 0x14003810b
mov rbx, rsi
mov rsi, qword [rsi]
call fcn.14000b470
mov rdx, qword [rbx + 0x10]
call fcn.14008e8b0
mov rdi, rax
test rax, rax
je 0x140038102
cmp dword [rbp + 8], r12d
je 0x140037f47
mov ebx, r13d
jmp 0x140037f51
mov rcx, qword [rbp + 0x18]
sub rcx, 0x18
call fcn.140006b40
mov edx, dword [rbp + 4]
lea rcx, [rsp + 0x80]
add rax, 0x18
mov qword [rsp + 0x80], rax
call fcn.14003ec80
test eax, eax
jne 0x140037d61
cmp dword [rbp + 4], 3
jne 0x140037d61
cmp dword [rbp + 8], r12d
jne 0x140037d61
mov rcx, qword [rbp + 0x18]
lea rdx, str.SkypeHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037ef0
mov rcx, qword [rbp + 0x18]
lea rdx, str.Skype.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037ef0
mov rcx, qword [rbp + 0x18]
lea rdx, str.lync.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037ef0
mov rcx, qword [rbp + 0x18]
cmp dword [rcx - 0x10], r12d
jl 0x140037ea0
lea rdx, str.Skype
call fcn.1400c4db0
mov rcx, qword [rbp + 0x18]
test rax, rax
je 0x140037ea0
sub rax, rcx
sar rax, 1
test eax, eax
jns 0x140037ef0
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037ef0
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe_old
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037ef0
mov rcx, qword [rbp + 0x18]
lea rdx, str.Teams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140037ef0
mov rcx, qword [rbp + 0x18]
lea rdx, str.msteams.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140037f1b
call fcn.140039880
test eax, eax
je 0x140037f1b
mov r9, qword [rbp + 0x18]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r8d, 0x73b
lea rcx, str._s__d_sAppName_s__this_project_uses_Forte_APO__DONT_show_toast_for_RAW_mode
call fcn.14005dbf0
jmp 0x140037d61
call fcn.14000b5e0
mov edx, 0x404
mov rcx, rax
lea r8d, [rdx - 0x1c]
jmp 0x140037d5c
cmp dword [rbp + 8], r12d
jne 0x140037d61
mov dword [rbp + 4], 4
jmp 0x14003810b
cmp dword [rbp + 4], 3
mov ebx, r12d
setne bl
mov rcx, rdi
call fcn.140016400
mov ecx, dword [rbp + 4]
cmp dword [rdi + 0x84], r12d
je 0x140037f83
sub ecx, r13d
je 0x140037f7e
sub ecx, r13d
je 0x140037f74
sub ecx, r13d
je 0x140037f79
mov ebx, r12d
jmp 0x140037f9c
add ebx, 2
jmp 0x140037f9c
mov ebx, r13d
jmp 0x140037f9c
sub ecx, r13d
je 0x140037f97
sub ecx, r13d
je 0x140037f97
mov ebx, 0x3e9
sub ecx, r13d
je 0x140037f9c
mov ebx, 0x3e8
mov rcx, qword [rbp + 0x18]
lea rdx, str.chrome.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rdi
call fcn.140016400
cmp dword [rdi + 0x84], r12d
je 0x140037fc3
mov dword [rbp + 0xc], ebx
jmp 0x140037fc6
mov dword [rbp + 0x10], ebx
lea rcx, [rdi + 0x10]
mov dword [rsp + 0x20], r12d
mov r9d, r13d
lea rdx, [0x1400ddad0]
mov r8d, ebx
call fcn.1400032a0
test eax, eax
jne 0x14003800c
mov eax, dword [rbp + 4]
lea rdx, str.CCustomizeHP::OnAppStartFirstSession
mov r9, qword [rdi + 0x168]
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
mov r8d, 0x7aa
mov dword [rsp + 0x20], eax
call fcn.14005dbf0
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoJabber.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003806a
mov rcx, rdi
call fcn.140016400
cmp dword [rdi + 0x84], r12d
je 0x14003806a
cmp dword [rbp + 4], 3
jne 0x14003806a
mov rdx, qword [rdi + 0x168]
lea rcx, [r15 + 0x60]
test rdx, rdx
jne 0x14003804d
mov eax, r12d
jmp 0x14003805e
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r12w
jne 0x140038054
mov r8d, eax
call fcn.1400048e0
mov dword [r15 + 0x68], r13d
mov rcx, qword [rbp + 0x18]
lea rdx, str.CiscoCollabHost.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400380c8
mov rcx, rdi
call fcn.140016400
cmp dword [rdi + 0x84], r12d
je 0x1400380c8
cmp dword [rbp + 4], 3
jne 0x1400380c8
mov rdx, qword [rdi + 0x168]
lea rcx, [r15 + 0x70]
test rdx, rdx
jne 0x1400380ab
mov eax, r12d
jmp 0x1400380bc
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r12w
jne 0x1400380b2
mov r8d, eax
call fcn.1400048e0
mov dword [r15 + 0x78], r13d
mov rdx, qword [rdi + 0x168]
lea rcx, [r15 + 0x80]
test rdx, rdx
jne 0x1400380e0
mov eax, r12d
jmp 0x1400380fa
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], r12w
jne 0x1400380f0
mov r8d, eax
call fcn.1400048e0
test rsi, rsi
jne 0x140037db9
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x70]
mov r12, qword [rsp + 0x38]
mov r13, qword [rsp + 0x30]
add rsp, 0x50
pop r15
pop r14
pop rbp
ret