Function at 0x10029be0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006704a
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x100ad040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x188], edi
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x15c]
push eax
push 0x10093cf4
push str.AI_QWORD_REG_ENTRIES
mov dword [ebp - 0x198], 0
push edi
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x15c], 0
call dword [sym.imp.msi.dll_MsiGetSummaryInformationW]
cmp eax, 0xea
jne 0x10029cb6
mov esi, dword [ebp - 0x15c]
xor ecx, ecx
inc esi
mov edx, 2
mov eax, esi
mov dword [ebp - 0x15c], esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x198], eax
push ecx
push eax
push str.AI_QWORD_REG_ENTRIES
push edi
mov dword [ebp - 0x19c], esi
call dword [sym.imp.msi.dll_MsiGetSummaryInformationW]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1a4]
mov ecx, dword [ebp - 0x198]
mov edx, 0x3b
push eax
call fcn.10024d00
add esp, 4
push str.ALLUSERS__1
push edi
call dword [sym.imp.msi.dll_MsiGetComponentStateW]
mov dword [ebp - 0x1a8], eax
xorps xmm0, xmm0
xor eax, eax
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
mov byte [ebp - 4], 2
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
mov byte [ebp - 4], 3
push edi
call dword [sym.imp.msi.dll_MsiGetFeatureCostA]
mov esi, eax
mov dword [ebp - 0x18c], esi
mov byte [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1a4], eax
jbe 0x1002a55c
nop
mov dword [ebp - 0x160], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x15c], 0
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x1a0]
push 0x68
push 0x10097900
movups xmmword [ebp - 0xf8], xmm0
mov esi, dword [ecx + eax*8 + 4]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
call fcn.10002cb0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf8]
push 0x10093ff8
call fcn.10006e30
push esi
lea ecx, [ebp - 0xf8]
call fcn.10006e30
push 0x10093ff8
lea ecx, [ebp - 0xf8]
call fcn.10006e30
mov eax, dword [ebp - 0x160]
test eax, eax
je 0x10029e27
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
cmp dword [ebp - 0xe4], 7
lea ecx, [ebp - 0x160]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x160], 0
cmova eax, dword [ebp - 0xf8]
push ecx
push eax
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiEnumClientsA]
test eax, eax
jne 0x10029e6e
push eax
push dword [ebp - 0x160]
call dword [sym.imp.msi.dll_MsiViewModify]
test eax, eax
je 0x10029ed1
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xe4]
cmp eax, 7
jbe 0x10029eaf
mov ecx, dword [ebp - 0xf8]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x10029ea4
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1002a656
test ecx, ecx
je 0x10029eaf
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
jmp 0x1002a50d
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x10029ee2
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x15c], 0
push eax
push dword [ebp - 0x160]
call dword [sym.imp.msi.dll_MsiDatabaseIsTablePersistentA]
mov esi, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xe4]
cmp ecx, 7
jbe 0x10029f43
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10029f38
mov edx, dword [eax - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a656
test edx, edx
je 0x10029f43
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
test esi, esi
jne 0x1002a50d
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], 8
xor edi, edi
mov dword [ebp - 0x16c], esi
mov dword [ebp - 0x168], edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x178], edi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x170], edi
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x15c]
push 2
push eax
mov dword [ebp - 0x164], eax
call dword [sym.imp.msi.dll_MsiRecordReadStream]
mov ecx, dword [ebp - 0x164]
lea edx, [edi + 3]
mov esi, eax
lea eax, [ebp - 0x184]
push eax
call fcn.1002f6e0
add esp, 4
test al, al
je 0x1002a031
lea eax, [ebp - 0x16c]
lea edx, [edi + 4]
mov edi, dword [ebp - 0x164]
push eax
mov ecx, edi
call fcn.1002f6e0
add esp, 4
test al, al
je 0x1002a02b
lea eax, [ebp - 0x17c]
mov edx, 5
push eax
mov ecx, edi
call fcn.1002f6e0
add esp, 4
test al, al
je 0x1002a02b
lea eax, [ebp - 0x174]
mov edx, 6
push eax
mov ecx, edi
call fcn.1002f6e0
add esp, 4
mov edi, dword [ebp - 0x168]
xor eax, eax
lea ecx, [ebp - 0xe0]
push 0xffffffffffffffff
mov edx, 0x10098290
mov word [ebp - 0xe0], ax
call fcn.10013e10
add esp, 4
cmp word [eax], 0
je 0x1002a05e
add eax, 2
cmp word [eax], 0
jne 0x1002a055
mov edx, dword [ebp - 0x170]
mov ecx, eax
push 0xffffffffffffffff
call fcn.10013e10
add esp, 4
cmp word [eax], 0
je 0x1002a07f
add eax, 2
cmp word [eax], 0
jne 0x1002a076
push 0xffffffffffffffff
mov edx, 0x10098294
mov ecx, eax
call fcn.10013e10
add esp, 4
lea eax, [ebp - 0xe0]
push eax
push dword [ebp - 0x188]
call dword [sym.imp.msi.dll_MsiGetComponentStateW]
cmp eax, 1
je 0x1002a10c
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x1002a0bd
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x178]
test edx, edx
je 0x1002a0e6
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 8
test edi, edi
je 0x1002a4d0
push edi
jmp 0x1002a4ca
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x194]
mov edx, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x188]
push eax
call fcn.1002eb00
add esp, 4
test al, al
jne 0x1002a1d4
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x1002a15c
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x1002a185
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x178]
test eax, eax
je 0x1002a1ae
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 8
test edi, edi
je 0x1002a4d0
push edi
jmp 0x1002a4ca
lea edx, [ebp - 0x194]
lea ecx, [ebp - 0x158]
call fcn.100298d0
mov byte [ebp - 4], 0xd
mov edi, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
push edi
push 6
push eax
mov dword [ebp - 0x164], eax
call dword [sym.imp.msi.dll_MsiRecordClearData]
test eax, eax
jne 0x1002a252
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiDatabaseGenerateTransformW]
cmp dword [ebp - 0x144], 7
lea eax, [ebp - 0x158]
cmova eax, dword [ebp - 0x158]
push eax
push 5
push edi
call dword [sym.imp.msi.dll_MsiReinstallFeatureW]
push edi
push 7
push dword [ebp - 0x164]
call dword [sym.imp.msi.dll_MsiRecordClearData]
test eax, eax
jne 0x1002a252
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiDatabaseGenerateTransformW]
cmp esi, 0xffffffff
jne 0x1002a265
mov esi, dword [ebp - 0x1a8]
dec esi
neg esi
sbb esi, esi
add esi, 2
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x184]
push eax
push esi
lea ecx, [ebp - 0x140]
call fcn.10029a60
add esp, 0xc
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x140]
mov edi, dword [ebp - 0x130]
cmp esi, 1
je 0x1002a30c
cmp dword [ebp - 0x12c], 7
mov ecx, dword [ebp - 0x118]
cmova edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x114]
sub eax, ecx
mov dword [ebp - 0x164], ecx
cmp edi, eax
ja 0x1002a304
cmp dword [ebp - 0x114], 7
lea eax, [edi + ecx]
lea esi, [ebp - 0x128]
mov dword [ebp - 0x118], eax
cmova esi, dword [ebp - 0x128]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.1004f320
mov eax, dword [ebp - 0x164]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x1002a384
lea ecx, [ebp - 0x128]
jmp 0x1002a376
cmp dword [ebp - 0x12c], 7
mov ecx, dword [ebp - 0x100]
cmova edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0xfc]
sub eax, ecx
mov dword [ebp - 0x164], ecx
cmp edi, eax
ja 0x1002a370
cmp dword [ebp - 0xfc], 7
lea eax, [edi + ecx]
lea esi, [ebp - 0x110]
mov dword [ebp - 0x100], eax
cmova esi, dword [ebp - 0x110]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.1004f320
mov eax, dword [ebp - 0x164]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x1002a384
lea ecx, [ebp - 0x110]
push edi
push edx
push dword [ebp - 0x1a8]
push edi
call fcn.10006600
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x12c]
cmp eax, 7
jbe 0x1002a3c5
mov ecx, dword [ebp - 0x140]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x1002a3ba
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1002a656
test ecx, ecx
je 0x1002a3c5
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x144]
cmp eax, 7
jbe 0x1002a423
mov ecx, dword [ebp - 0x158]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x1002a418
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1002a656
test ecx, ecx
je 0x1002a423
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 7
mov word [ebp - 0x158], ax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x1002a455
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x1002a47e
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x178]
test eax, eax
je 0x1002a4a7
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x1002a4d0
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x16c], 0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x180]
test eax, eax
je 0x1002a4f9
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x184], 0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x1002a522
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x160]
test eax, eax
je 0x1002a537
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp eax, dword [ebp - 0x1a4]
jb 0x10029d90
mov edi, dword [ebp - 0x188]
mov esi, dword [ebp - 0x18c]
cmp dword [ebp - 0x114], 7
lea eax, [ebp - 0x128]
cmova eax, dword [ebp - 0x128]
push eax
push str.AI_PerformRegEntryTypeChangeElevated
push edi
call dword [sym.imp.msi.dll_MsiSummaryInfoGetPropertyCount]
cmp dword [ebp - 0xfc], 7
lea eax, [ebp - 0x110]
cmova eax, dword [ebp - 0x110]
push eax
push str.AI_PerformRegEntryTypeChangeNotElevated
push edi
call dword [sym.imp.msi.dll_MsiSummaryInfoGetPropertyCount]
mov byte [ebp - 4], 3
test esi, esi
je 0x1002a5ad
push esi
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.10005610
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.10005610
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1a0]
test eax, eax
je 0x1002a5f7
push 0x10006c30
push dword [eax - 4]
lea esi, [eax - 4]
push 8
push eax
call fcn.1004d4ac
test esi, esi
je 0x1002a5f7
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x198]
test eax, eax
je 0x1002a623
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x198], 0
xor eax, eax
mov dword [ebp - 0x19c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004d46a
mov esp, ebp
pop ebp
ret 4
call fcn.10050fef
int3