Function at 0x102f2990
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1035c28c
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x105be7d0]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x105be7d0]
xor eax, esp
push eax
lea eax, [esp + 0x18c]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x24], esi
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0x1c], ecx
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
je 0x102f360c
xorps xmm0, xmm0
mov dword [esp + 0xc8], 0
movq qword [esp + 0xc0], xmm0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0x194], 0
lea eax, [esp + 0xc0]
push eax
mov ecx, esi
call fcn.102f46f0
mov ebx, 0x2001f
call fcn.1016cf30
test al, al
mov ecx, 0x2011f
mov eax, dword [esi + 0x20]
cmovne ebx, ecx
mov dword [esp + 0x18], ebx
mov ebx, dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
test eax, eax
je 0x102f35c2
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1055dd00
push eax
call edi
push 0x1055dd10
push dword [esi + 0x20]
mov dword [esp + 0x38], eax
call edi
push 0x1055ddc8
push dword [esi + 0x20]
mov dword [esp + 0x34], eax
call edi
push 0x1055dd24
push dword [esi + 0x20]
mov ebp, eax
mov dword [esp + 0x3c], ebp
call edi
mov edi, dword [esp + 0x30]
mov dword [esp + 0x28], eax
test edi, edi
je 0x102f35c2
cmp dword [esp + 0x2c], 0
je 0x102f35c2
test ebp, ebp
je 0x102f35c2
test eax, eax
je 0x102f35c2
mov ebp, dword [esp + 0xc0]
cmp ebp, dword [esp + 0xc4]
je 0x102f2de3
push str.SOFTWAREMicrosoftWindowsCurrentVersionApplicationAssociationToasts
lea ecx, [esp + 0x158]
mov dword [esp + 0xa0], 0
call fcn.100cd5c0
mov byte [esp + 0x194], 1
lea ecx, [esp + 0x9c]
cmp dword [esp + 0x168], 8
lea eax, [esp + 0x154]
push ecx
push dword [esp + 0x1c]
cmovae eax, dword [esp + 0x15c]
push 0
push eax
push 0x80000001
call edi
test eax, eax
jne 0x102f2dcf
mov ecx, dword [esp + 0xc4]
mov eax, 0x2aaaaaab
sub ecx, ebp
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x102f2db9
mov dword [esp + 0x14], ebp
mov esi, eax
lea ebx, [ebx]
push ebp
lea ecx, [esp + 0xdc]
call fcn.100cd590
mov byte [esp + 0x194], 2
lea ecx, [esp + 0xd8]
call fcn.1014d810
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + 4]
mov edi, dword [eax]
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x102f2c5e
xor ebp, ebp
jmp 0x102f2bb0
lea eax, [edi + ebp]
mov edx, 0x1055d6ec
push eax
lea ecx, [esp + 0x10c]
call fcn.100ce3a0
add esp, 4
mov byte [esp + 0x194], 3
lea ecx, [esp + 0x108]
call fcn.1014d810
cmp dword [esp + 0x11c], 8
lea eax, [esp + 0x108]
mov edi, dword [esp + 0x118]
cmovae eax, dword [esp + 0x108]
push edi
push ecx
push eax
lea ecx, [esp + 0xe4]
call fcn.1014e9b0
cmp eax, 0xffffffff
je 0x102f2c1d
add eax, edi
cmp eax, dword [esp + 0xe8]
je 0x102f3636
mov byte [esp + 0x194], 2
lea ecx, [esp + 0x108]
call fcn.100cd690
mov eax, dword [esp + 0x1c]
add ebp, 0x18
inc dword [esp + 0x20]
mov ecx, dword [eax + 4]
mov edi, dword [eax]
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x20], eax
jb 0x102f2bb0
cmp dword [esp + 0xec], 8
lea eax, [esp + 0xd8]
mov dword [esp + 0xe8], 0
cmovae eax, dword [esp + 0xd8]
xor ecx, ecx
mov word [eax], cx
cmp dword [esp + 0xe8], 0
mov ebp, dword [esp + 0x14]
je 0x102f2d65
lea eax, [esp + 0xd8]
cmp eax, ebp
je 0x102f2cae
push 0xffffffffffffffff
push 0
push ebp
mov ecx, eax
call fcn.100cd9d0
cmp dword [esp + 0xec], 8
lea ecx, [esp + 0xb8]
push ecx
lea ecx, [esp + 0xc0]
mov dword [esp + 0xc0], 0
push ecx
lea ecx, [esp + 0x128]
mov dword [esp + 0xc0], 4
push ecx
lea eax, [esp + 0xe4]
mov dword [esp + 0x12c], 4
cmovae eax, dword [esp + 0xe4]
push 0
push eax
push dword [esp + 0xb0]
call dword [esp + 0x44]
test eax, eax
jne 0x102f2d65
cmp dword [esp + 0x120], 4
jne 0x102f2d65
cmp dword [esp + 0xb8], 4
jne 0x102f2d65
cmp dword [esp + 0xbc], eax
je 0x102f2d65
cmp dword [esp + 0xec], 8
lea ecx, [esp + 0xbc]
push 4
push ecx
mov dword [esp + 0xc4], eax
lea eax, [esp + 0xe0]
cmovae eax, dword [esp + 0xe0]
push 4
push 0
push eax
push dword [esp + 0xb0]
call dword [esp + 0x4c]
mov byte [esp + 0x194], 1
cmp dword [esp + 0xec], 8
jb 0x102f2d83
push dword [esp + 0xd8]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0xec], 7
add ebp, 0x18
mov dword [esp + 0xe8], 0
mov word [esp + 0xd8], ax
mov dword [esp + 0x14], ebp
dec esi
jne 0x102f2b60
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
push dword [esp + 0x9c]
call dword [esp + 0x2c]
mov dword [esp + 0x9c], 0
mov byte [esp + 0x194], 0
lea ecx, [esp + 0x154]
call fcn.100cd690
xorps xmm0, xmm0
mov dword [esp + 0xd4], 0
movq qword [esp + 0xcc], xmm0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov byte [esp + 0x194], 4
lea eax, [esp + 0xcc]
push eax
mov ecx, esi
call fcn.102f47a0
mov ebp, dword [esp + 0xd0]
cmp dword [esp + 0xcc], ebp
je 0x102f35ae
push str.SOFTWAREMicrosoftWindowsCurrentVersionApplicationAssociationToasts
lea ecx, [esp + 0x170]
mov dword [esp + 0x9c], 0
call fcn.100cd5c0
mov byte [esp + 0x194], 5
lea ecx, [esp + 0x98]
cmp dword [esp + 0x180], 8
lea eax, [esp + 0x16c]
push ecx
push dword [esp + 0x1c]
cmovae eax, dword [esp + 0x174]
push 0
push eax
push 0x80000001
call edi
test eax, eax
jne 0x102f359a
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x150], 7
mov dword [esp + 0x14c], eax
mov word [esp + 0x13c], ax
mov byte [esp + 0x194], 6
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x138], 7
mov dword [esp + 0x134], eax
mov word [esp + 0x124], ax
mov byte [esp + 0x194], 7
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18], eax
mov eax, 0x2aaaaaab
mov edi, dword [ecx]
mov ecx, dword [ecx + 4]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x102f355c
sub ebp, dword [esp + 0xcc]
mov eax, 0x2aaaaaab
imul ebp
sar edx, 2
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
xor eax, eax
mov dword [esp + 0x24], ebp
mov dword [esp + 0x14], eax
jmp 0x102f2f50
add eax, edi
lea ecx, [esp + 0xf0]
push eax
call fcn.100cd590
mov byte [esp + 0x194], 8
lea ecx, [esp + 0xf0]
call fcn.1014d810
test ebp, ebp
je 0x102f320f
mov edi, dword [esp + 0xcc]
push str.FileAssociations
mov edx, edi
lea ecx, [esp + 0x54]
call fcn.100ce2a0
add esp, 4
mov byte [esp + 0x194], 9
lea ecx, [esp + 0x13c]
push eax
call fcn.100cd650
mov byte [esp + 0x194], 8
cmp dword [esp + 0x64], 8
jb 0x102f2fc2
push dword [esp + 0x50]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x64], 7
mov word [esp + 0x50], ax
mov ecx, esi
lea eax, [esp + 0xf0]
mov dword [esp + 0x60], 0
push eax
lea eax, [esp + 0x140]
push eax
push 0
push 0
lea eax, [esp + 0x90]
push eax
call fcn.102f3dc0
mov byte [esp + 0x194], 0xa
lea ecx, [esp + 0x124]
push eax
call fcn.100cd650
mov byte [esp + 0x194], 8
cmp dword [esp + 0x94], 8
jb 0x102f302f
push dword [esp + 0x80]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
mov word [esp + 0x80], ax
mov ecx, esi
lea eax, [esp + 0x124]
mov dword [esp + 0x90], 0
push eax
lea eax, [esp + 0xf4]
push eax
push dword [esp + 0xa0]
call fcn.102f3650
lea eax, [esp + 0xf0]
mov ecx, esi
push eax
lea eax, [esp + 0x140]
push eax
push 1
push 0
lea eax, [esp + 0x78]
push eax
call fcn.102f3dc0
mov byte [esp + 0x194], 0xb
lea ecx, [esp + 0x124]
push eax
call fcn.100cd650
mov byte [esp + 0x194], 8
cmp dword [esp + 0x7c], 8
jb 0x102f30ba
push dword [esp + 0x68]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov word [esp + 0x68], ax
mov ecx, esi
lea eax, [esp + 0x124]
mov dword [esp + 0x78], 0
push eax
lea eax, [esp + 0xf4]
push eax
push dword [esp + 0xa0]
call fcn.102f3650
lea eax, [esp + 0xf0]
mov ecx, esi
push eax
lea eax, [esp + 0x140]
push eax
push 0
push 1
lea eax, [esp + 0x48]
push eax
call fcn.102f3dc0
mov byte [esp + 0x194], 0xc
lea ecx, [esp + 0x124]
push eax
call fcn.100cd650
mov byte [esp + 0x194], 8
cmp dword [esp + 0x4c], 8
jb 0x102f313c
push dword [esp + 0x38]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov word [esp + 0x38], ax
mov ecx, esi
lea eax, [esp + 0x124]
mov dword [esp + 0x48], 0
push eax
lea eax, [esp + 0xf4]
push eax
push dword [esp + 0xa0]
call fcn.102f3650
lea eax, [esp + 0xf0]
mov ecx, esi
push eax
lea eax, [esp + 0x140]
push eax
push 1
push 1
lea eax, [esp + 0x164]
push eax
call fcn.102f3dc0
mov byte [esp + 0x194], 0xd
lea ecx, [esp + 0x124]
push eax
call fcn.100cd650
mov byte [esp + 0x194], 8
cmp dword [esp + 0x168], 8
jb 0x102f31c7
push dword [esp + 0x154]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x168], 7
mov word [esp + 0x154], ax
mov ecx, esi
lea eax, [esp + 0x124]
mov dword [esp + 0x164], 0
push eax
lea eax, [esp + 0xf4]
push eax
push dword [esp + 0xa0]
call fcn.102f3650
add edi, 0x18
dec ebp
jne 0x102f2f82
xorps xmm0, xmm0
mov dword [esp + 0xa8], 0
movq qword [esp + 0xa0], xmm0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov byte [esp + 0x194], 0xe
lea eax, [esp + 0xa0]
push eax
lea eax, [esp + 0xf4]
mov ecx, esi
push eax
call fcn.102f4030
lea eax, [esp + 0xa0]
mov ecx, esi
push eax
lea eax, [esp + 0xf4]
push eax
push 0
call fcn.102f4270
lea eax, [esp + 0xa0]
mov ecx, esi
push eax
lea eax, [esp + 0xf4]
push eax
push 1
call fcn.102f4270
lea eax, [esp + 0xa0]
push eax
call fcn.102f4850
mov ecx, dword [esp + 0xa4]
mov eax, 0x2aaaaaab
mov edi, dword [esp + 0xa0]
sub ecx, edi
imul ecx
sar edx, 2
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
je 0x102f32ed
jmp 0x102f32d0
push edi
lea eax, [esp + 0xf4]
mov ecx, esi
push eax
push dword [esp + 0xa0]
call fcn.102f3650
add edi, 0x18
dec ebp
jne 0x102f32d0
xorps xmm0, xmm0
mov dword [esp + 0xb4], 0
movq qword [esp + 0xac], xmm0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov byte [esp + 0x194], 0xf
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0xf4]
mov ecx, esi
push eax
push 0
call fcn.102f44c0
lea eax, [esp + 0xac]
mov ecx, esi
push eax
lea eax, [esp + 0xf4]
push eax
push 1
call fcn.102f44c0
lea eax, [esp + 0xac]
push eax
call fcn.102f4850
xor eax, eax
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x11c], 7
mov dword [esp + 0x118], 0
mov word [esp + 0x108], ax
mov byte [esp + 0x194], 0x10
mov eax, 0x2aaaaaab
mov ecx, dword [esp + 0xb0]
mov edi, dword [esp + 0xac]
sub ecx, edi
imul ecx
sar edx, 2
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
je 0x102f341f
lea ecx, [ecx]
push 0xd
push str.Applications_
lea ecx, [esp + 0x110]
call fcn.100cdd90
push 0xffffffffffffffff
push 0
push edi
lea ecx, [esp + 0x114]
call fcn.100cdc20
lea eax, [esp + 0x108]
mov ecx, esi
push eax
lea eax, [esp + 0xf4]
push eax
push dword [esp + 0xa0]
call fcn.102f3650
add edi, 0x18
dec ebp
jne 0x102f33d0
mov edi, dword [esp + 0xac]
mov byte [esp + 0x194], 0xf
cmp dword [esp + 0x11c], 8
jb 0x102f343d
push dword [esp + 0x108]
call ebx
add esp, 4
xor eax, eax
mov dword [esp + 0x11c], 7
mov dword [esp + 0x118], 0
mov word [esp + 0x108], ax
mov byte [esp + 0x194], 0xe
test edi, edi
je 0x102f349d
push dword [esp + 0xb0]
push edi
call fcn.100d6550
push edi
call ebx
add esp, 4
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov byte [esp + 0x194], 8
mov edi, dword [esp + 0xa0]
test edi, edi
je 0x102f34e4
push dword [esp + 0xa4]
push edi
call fcn.100d6550
push edi
call ebx
add esp, 4
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov byte [esp + 0x194], 7
cmp dword [esp + 0x104], 8
jb 0x102f3502
push dword [esp + 0xf0]
call ebx
add esp, 4
mov ebp, dword [esp + 0x18]
xor eax, eax
add dword [esp + 0x14], 0x18
inc ebp
mov word [esp + 0xf0], ax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x104], 7
mov dword [esp + 0x100], 0
mov ecx, dword [eax + 4]
mov edi, dword [eax]
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
jb 0x102f2f50
push dword [esp + 0x98]
call dword [esp + 0x2c]
mov dword [esp + 0x98], 0
mov byte [esp + 0x194], 6
lea ecx, [esp + 0x124]
call fcn.100cd690
mov byte [esp + 0x194], 5
lea ecx, [esp + 0x13c]
call fcn.100cd690
mov byte [esp + 0x194], 4
lea ecx, [esp + 0x16c]
call fcn.100cd690
mov byte [esp + 0x194], 0
lea ecx, [esp + 0xcc]
call fcn.100d5930
mov dword [esp + 0x194], 0xffffffff
mov esi, dword [esp + 0xc0]
test esi, esi
je 0x102f360c
push dword [esp + 0xc4]
push esi
call fcn.100d6550
push esi
call ebx
add esp, 4
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov ecx, dword [esp + 0x18c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x170]
xor ecx, esp
call fcn.1033d458
add esp, 0x184
ret 4
mov byte [esp + 0x194], 2
lea ecx, [esp + 0x108]
call fcn.100cd690
jmp 0x102f2c85