Function at 0x10029b50
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10066fda
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x100ad040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x188], edi
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x15c]
push eax
push 0x10093cf4
push str.AI_QWORD_REG_ENTRIES
mov dword [ebp - 0x198], 0
push edi
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x15c], 0
call dword [sym.imp.msi.dll_MsiGetSummaryInformationW]
cmp eax, 0xea
jne 0x10029c26
mov esi, dword [ebp - 0x15c]
xor ecx, ecx
inc esi
mov edx, 2
mov eax, esi
mov dword [ebp - 0x15c], esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x198], eax
push ecx
push eax
push str.AI_QWORD_REG_ENTRIES
push edi
mov dword [ebp - 0x19c], esi
call dword [sym.imp.msi.dll_MsiGetSummaryInformationW]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1a4]
mov ecx, dword [ebp - 0x198]
mov edx, 0x3b
push eax
call fcn.10024c60
add esp, 4
push str.ALLUSERS__1
push edi
call dword [sym.imp.msi.dll_MsiGetComponentStateW]
mov dword [ebp - 0x1a8], eax
xorps xmm0, xmm0
xor eax, eax
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
mov byte [ebp - 4], 2
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
mov byte [ebp - 4], 3
push edi
call dword [sym.imp.msi.dll_MsiGetFeatureCostA]
mov esi, eax
mov dword [ebp - 0x18c], esi
mov byte [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1a4], eax
jbe 0x1002a4cc
nop
mov dword [ebp - 0x160], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x15c], 0
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x1a0]
push 0x68
push 0x10097900
movups xmmword [ebp - 0xf8], xmm0
mov esi, dword [ecx + eax*8 + 4]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
call fcn.10002cb0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf8]
push 0x10093ff8
call fcn.10006e20
push esi
lea ecx, [ebp - 0xf8]
call fcn.10006e20
push 0x10093ff8
lea ecx, [ebp - 0xf8]
call fcn.10006e20
mov eax, dword [ebp - 0x160]
test eax, eax
je 0x10029d97
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
cmp dword [ebp - 0xe4], 7
lea ecx, [ebp - 0x160]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x160], 0
cmova eax, dword [ebp - 0xf8]
push ecx
push eax
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiEnumClientsA]
test eax, eax
jne 0x10029dde
push eax
push dword [ebp - 0x160]
call dword [sym.imp.msi.dll_MsiViewModify]
test eax, eax
je 0x10029e41
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xe4]
cmp eax, 7
jbe 0x10029e1f
mov ecx, dword [ebp - 0xf8]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x10029e14
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1002a5c6
test ecx, ecx
je 0x10029e1f
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
jmp 0x1002a47d
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x10029e52
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x15c], 0
push eax
push dword [ebp - 0x160]
call dword [sym.imp.msi.dll_MsiDatabaseIsTablePersistentA]
mov esi, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xe4]
cmp ecx, 7
jbe 0x10029eb3
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10029ea8
mov edx, dword [eax - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5c6
test edx, edx
je 0x10029eb3
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
test esi, esi
jne 0x1002a47d
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], 8
xor edi, edi
mov dword [ebp - 0x16c], esi
mov dword [ebp - 0x168], edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x178], edi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x170], edi
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x15c]
push 2
push eax
mov dword [ebp - 0x164], eax
call dword [sym.imp.msi.dll_MsiRecordReadStream]
mov ecx, dword [ebp - 0x164]
lea edx, [edi + 3]
mov esi, eax
lea eax, [ebp - 0x184]
push eax
call fcn.1002f650
add esp, 4
test al, al
je 0x10029fa1
lea eax, [ebp - 0x16c]
lea edx, [edi + 4]
mov edi, dword [ebp - 0x164]
push eax
mov ecx, edi
call fcn.1002f650
add esp, 4
test al, al
je 0x10029f9b
lea eax, [ebp - 0x17c]
mov edx, 5
push eax
mov ecx, edi
call fcn.1002f650
add esp, 4
test al, al
je 0x10029f9b
lea eax, [ebp - 0x174]
mov edx, 6
push eax
mov ecx, edi
call fcn.1002f650
add esp, 4
mov edi, dword [ebp - 0x168]
xor eax, eax
lea ecx, [ebp - 0xe0]
push 0xffffffffffffffff
mov edx, 0x10098290
mov word [ebp - 0xe0], ax
call fcn.10013e00
add esp, 4
cmp word [eax], 0
je 0x10029fce
add eax, 2
cmp word [eax], 0
jne 0x10029fc5
mov edx, dword [ebp - 0x170]
mov ecx, eax
push 0xffffffffffffffff
call fcn.10013e00
add esp, 4
cmp word [eax], 0
je 0x10029fef
add eax, 2
cmp word [eax], 0
jne 0x10029fe6
push 0xffffffffffffffff
mov edx, 0x10098294
mov ecx, eax
call fcn.10013e00
add esp, 4
lea eax, [ebp - 0xe0]
push eax
push dword [ebp - 0x188]
call dword [sym.imp.msi.dll_MsiGetComponentStateW]
cmp eax, 1
je 0x1002a07c
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x1002a02d
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x178]
test edx, edx
je 0x1002a056
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 8
test edi, edi
je 0x1002a440
push edi
jmp 0x1002a43a
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x194]
mov edx, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x188]
push eax
call fcn.1002ea70
add esp, 4
test al, al
jne 0x1002a144
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x1002a0cc
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x1002a0f5
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x178]
test eax, eax
je 0x1002a11e
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 8
test edi, edi
je 0x1002a440
push edi
jmp 0x1002a43a
lea edx, [ebp - 0x194]
lea ecx, [ebp - 0x158]
call fcn.10029860
mov byte [ebp - 4], 0xd
mov edi, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
push edi
push 6
push eax
mov dword [ebp - 0x164], eax
call dword [sym.imp.msi.dll_MsiRecordClearData]
test eax, eax
jne 0x1002a1c2
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiDatabaseGenerateTransformW]
cmp dword [ebp - 0x144], 7
lea eax, [ebp - 0x158]
cmova eax, dword [ebp - 0x158]
push eax
push 5
push edi
call dword [sym.imp.msi.dll_MsiReinstallFeatureW]
push edi
push 7
push dword [ebp - 0x164]
call dword [sym.imp.msi.dll_MsiRecordClearData]
test eax, eax
jne 0x1002a1c2
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiDatabaseGenerateTransformW]
cmp esi, 0xffffffff
jne 0x1002a1d5
mov esi, dword [ebp - 0x1a8]
dec esi
neg esi
sbb esi, esi
add esi, 2
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x184]
push eax
push esi
lea ecx, [ebp - 0x140]
call fcn.100299d0
add esp, 0xc
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x140]
mov edi, dword [ebp - 0x130]
cmp esi, 1
je 0x1002a27c
cmp dword [ebp - 0x12c], 7
mov ecx, dword [ebp - 0x118]
cmova edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x114]
sub eax, ecx
mov dword [ebp - 0x164], ecx
cmp edi, eax
ja 0x1002a274
cmp dword [ebp - 0x114], 7
lea eax, [ecx + edi]
lea esi, [ebp - 0x128]
mov dword [ebp - 0x118], eax
cmova esi, dword [ebp - 0x128]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.1004f2c0
mov eax, dword [ebp - 0x164]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x1002a2f4
lea ecx, [ebp - 0x128]
jmp 0x1002a2e6
cmp dword [ebp - 0x12c], 7
mov ecx, dword [ebp - 0x100]
cmova edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0xfc]
sub eax, ecx
mov dword [ebp - 0x164], ecx
cmp edi, eax
ja 0x1002a2e0
cmp dword [ebp - 0xfc], 7
lea eax, [edi + ecx]
lea esi, [ebp - 0x110]
mov dword [ebp - 0x100], eax
cmova esi, dword [ebp - 0x110]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.1004f2c0
mov eax, dword [ebp - 0x164]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x1002a2f4
lea ecx, [ebp - 0x110]
push edi
push edx
push dword [ebp - 0x1a8]
push edi
call fcn.100065f0
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x12c]
cmp eax, 7
jbe 0x1002a335
mov ecx, dword [ebp - 0x140]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x1002a32a
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1002a5c6
test ecx, ecx
je 0x1002a335
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x144]
cmp eax, 7
jbe 0x1002a393
mov ecx, dword [ebp - 0x158]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x1002a388
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1002a5c6
test ecx, ecx
je 0x1002a393
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 7
mov word [ebp - 0x158], ax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x1002a3c5
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x1002a3ee
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x178]
test eax, eax
je 0x1002a417
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x1002a440
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x16c], 0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x180]
test eax, eax
je 0x1002a469
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x184], 0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x1002a492
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x160]
test eax, eax
je 0x1002a4a7
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp eax, dword [ebp - 0x1a4]
jb 0x10029d00
mov edi, dword [ebp - 0x188]
mov esi, dword [ebp - 0x18c]
cmp dword [ebp - 0x114], 7
lea eax, [ebp - 0x128]
cmova eax, dword [ebp - 0x128]
push eax
push str.AI_PerformRegEntryTypeChangeElevated
push edi
call dword [sym.imp.msi.dll_MsiSummaryInfoGetPropertyCount]
cmp dword [ebp - 0xfc], 7
lea eax, [ebp - 0x110]
cmova eax, dword [ebp - 0x110]
push eax
push str.AI_PerformRegEntryTypeChangeNotElevated
push edi
call dword [sym.imp.msi.dll_MsiSummaryInfoGetPropertyCount]
mov byte [ebp - 4], 3
test esi, esi
je 0x1002a51d
push esi
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.10005610
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.10005610
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1a0]
test eax, eax
je 0x1002a567
push 0x10006c20
push dword [eax - 4]
lea esi, [eax - 4]
push 8
push eax
call fcn.1004d44c
test esi, esi
je 0x1002a567
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x198]
test eax, eax
je 0x1002a593
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x198], 0
xor eax, eax
mov dword [ebp - 0x19c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004d40a
mov esp, ebp
pop ebp
ret 4
call fcn.10050f8f
int3