Function at 0x10023190
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005e48a
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x10088020]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x15c]
push eax
push 0x100707ac
mov dword [ebp - 0x198], 0
mov edi, dword [sym.imp.msi.dll_MsiGetSummaryInformationW]
push str.AI_QWORD_REG_ENTRIES
push esi
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x15c], 0
call edi
cmp eax, 0xea
jne 0x1002326a
mov esi, dword [ebp - 0x15c]
xor ecx, ecx
inc esi
mov edx, 2
mov eax, esi
mov dword [ebp - 0x15c], esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x198], eax
push ecx
push eax
push str.AI_QWORD_REG_ENTRIES
mov dword [ebp - 0x19c], esi
mov esi, dword [ebp - 0x168]
push esi
call edi
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1a4]
mov ecx, dword [ebp - 0x198]
mov edx, 0x3b
push eax
call fcn.1001e6d0
add esp, 4
push str.ALLUSERS__1
push esi
call dword [sym.imp.msi.dll_MsiGetComponentStateW]
cmp eax, 1
mov dword [ebp - 0x118], 0
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
sete byte [ebp - 0x162]
mov dword [ebp - 0x118], 0
xor eax, eax
mov dword [ebp - 0x114], 7
movups xmmword [ebp - 0x128], xmm0
mov word [ebp - 0x128], ax
mov byte [ebp - 4], 2
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
mov byte [ebp - 4], 3
push esi
call dword [sym.imp.msi.dll_MsiGetFeatureCostA]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 4
xor ecx, ecx
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x1a8], ecx
cmp dword [ebp - 0x1a4], ecx
jbe 0x100239e3
nop word [eax + eax]
mov dword [ebp - 0x160], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x15c], 0
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1a0]
push 0x68
push 0x10073c10
movups xmmword [ebp - 0xf8], xmm0
mov esi, dword [eax + ecx*8 + 4]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
call fcn.10002c20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf8]
push 0x10070a6c
call fcn.10006e70
push esi
lea ecx, [ebp - 0xf8]
call fcn.10006e70
push 0x10070a6c
lea ecx, [ebp - 0xf8]
call fcn.10006e70
mov eax, dword [ebp - 0x160]
mov esi, dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
test eax, eax
je 0x100233e9
push eax
call esi
cmp dword [ebp - 0xe4], 8
lea ecx, [ebp - 0x160]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x160], 0
cmovae eax, dword [ebp - 0xf8]
push ecx
push eax
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiEnumClientsA]
test eax, eax
jne 0x10023430
push eax
push dword [ebp - 0x160]
call dword [sym.imp.msi.dll_MsiViewModify]
test eax, eax
je 0x10023493
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xe4]
cmp eax, 8
jb 0x1002346d
mov ecx, dword [ebp - 0xf8]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x10023466
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x10023ade
test ecx, ecx
je 0x1002346d
push ecx
call edi
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
mov byte [ebp - 4], 5
jmp 0x100239a6
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x100234a0
push eax
call esi
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x15c], 0
push eax
push dword [ebp - 0x160]
call dword [sym.imp.msi.dll_MsiDatabaseIsTablePersistentA]
test eax, eax
sete byte [ebp - 0x161]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xe4]
cmp eax, 8
jb 0x10023503
mov ecx, dword [ebp - 0xf8]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x100234fc
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x10023ade
test ecx, ecx
je 0x10023503
push ecx
call edi
xor eax, eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp byte [ebp - 0x161], al
jne 0x10023531
mov byte [ebp - 4], 5
jmp 0x100239a6
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], eax
mov byte [ebp - 4], 8
xor edi, edi
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x188], edi
mov dword [ebp - 0x184], edi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x17c], edi
mov byte [ebp - 4], 0xb
mov esi, dword [ebp - 0x15c]
push 2
push esi
call dword [sym.imp.msi.dll_MsiRecordReadStream]
mov dword [ebp - 0x1ac], eax
lea edx, [edi + 3]
lea eax, [ebp - 0x178]
mov ecx, esi
push eax
call fcn.10028740
add esp, 4
test al, al
je 0x100235ee
lea eax, [ebp - 0x170]
mov ecx, esi
push eax
lea edx, [edi + 4]
call fcn.10028740
add esp, 4
test al, al
je 0x100235e8
lea eax, [ebp - 0x188]
mov ecx, esi
push eax
lea edx, [edi + 5]
call fcn.10028740
add esp, 4
test al, al
je 0x100235e8
lea eax, [ebp - 0x180]
mov ecx, esi
push eax
lea edx, [edi + 6]
call fcn.10028740
add esp, 4
mov edi, dword [ebp - 0x16c]
xor eax, eax
lea ecx, [ebp - 0xe0]
push 0xffffffffffffffff
mov edx, 0x100744b0
mov word [ebp - 0xe0], ax
call fcn.10013290
add esp, 4
cmp word [eax], 0
je 0x1002361b
add eax, 2
cmp word [eax], 0
jne 0x10023612
mov esi, dword [ebp - 0x17c]
mov ecx, eax
push 0xffffffffffffffff
mov edx, esi
call fcn.10013290
add esp, 4
cmp word [eax], 0
je 0x1002363e
add eax, 2
cmp word [eax], 0
jne 0x10023635
push 0xffffffffffffffff
mov edx, 0x100744b4
mov ecx, eax
call fcn.10013290
add esp, 4
lea eax, [ebp - 0xe0]
push eax
push dword [ebp - 0x168]
call dword [sym.imp.msi.dll_MsiGetComponentStateW]
cmp eax, 1
je 0x100236d8
mov byte [ebp - 4], 0xa
test esi, esi
je 0x1002367a
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
call esi
jmp 0x10023680
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x184]
test eax, eax
je 0x100236a5
push eax
call esi
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov byte [ebp - 4], 8
test edi, edi
je 0x100236cd
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10023961
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10023963
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x194]
mov esi, dword [ebp - 0x184]
mov edx, esi
mov ecx, dword [ebp - 0x168]
push eax
call fcn.10027b70
add esp, 4
test al, al
jne 0x100237a2
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x1002372a
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x17c]
test eax, eax
je 0x10023753
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov byte [ebp - 4], 9
test esi, esi
je 0x10023776
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov byte [ebp - 4], 8
test edi, edi
je 0x100236cd
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10023961
lea edx, [ebp - 0x194]
lea ecx, [ebp - 0x140]
call fcn.10022e90
mov byte [ebp - 4], 0xd
mov esi, dword [ebp - 0x15c]
mov edi, dword [ebp - 0x160]
push esi
push 6
push edi
call dword [sym.imp.msi.dll_MsiRecordClearData]
test eax, eax
jne 0x10023815
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiDatabaseGenerateTransformW]
cmp dword [ebp - 0x12c], 8
lea eax, [ebp - 0x140]
cmovae eax, dword [ebp - 0x140]
push eax
push 5
push esi
call dword [sym.imp.msi.dll_MsiReinstallFeatureW]
push esi
push 7
push edi
call dword [sym.imp.msi.dll_MsiRecordClearData]
test eax, eax
jne 0x10023815
push dword [ebp - 0x18c]
call dword [sym.imp.msi.dll_MsiDatabaseGenerateTransformW]
mov esi, dword [ebp - 0x1ac]
cmp esi, 0xffffffff
jne 0x10023828
movzx esi, byte [ebp - 0x162]
inc esi
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x178]
push eax
push esi
lea ecx, [ebp - 0x158]
call fcn.10022fd0
add esp, 0xc
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0x128]
push eax
cmp esi, 1
jne 0x10023867
lea ecx, [ebp - 0x110]
call fcn.10006480
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x158]
call fcn.100055a0
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x12c]
cmp eax, 8
jb 0x100238c0
mov ecx, dword [ebp - 0x140]
lea eax, [eax*2 + 2]
mov edx, ecx
cmp eax, 0x1000
jb 0x100238b1
mov ecx, dword [edx - 4]
sub edx, ecx
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x10023ade
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
test ecx, ecx
je 0x100238c6
push ecx
call edi
jmp 0x100238c6
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x100238f4
push eax
call edi
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x17c]
test eax, eax
je 0x10023919
push eax
call edi
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x184]
test eax, eax
je 0x1002393e
push eax
call edi
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x16c]
test eax, eax
je 0x10023963
push eax
call edi
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x170], 0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x174]
test eax, eax
je 0x10023988
push eax
call edi
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 4], 5
mov esi, dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x100239b3
push eax
call esi
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x160]
test eax, eax
je 0x100239c4
push eax
call esi
mov ecx, dword [ebp - 0x1a8]
inc ecx
mov dword [ebp - 0x1a8], ecx
cmp ecx, dword [ebp - 0x1a4]
jb 0x10023350
mov esi, dword [ebp - 0x168]
cmp dword [ebp - 0x114], 8
lea eax, [ebp - 0x128]
cmovae eax, dword [ebp - 0x128]
push eax
push str.AI_PerformRegEntryTypeChangeElevated
push esi
mov esi, dword [sym.imp.msi.dll_MsiSummaryInfoGetPropertyCount]
call esi
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
cmovae eax, dword [ebp - 0x110]
push eax
push str.AI_PerformRegEntryTypeChangeNotElevated
push dword [ebp - 0x168]
call esi
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x18c]
test eax, eax
je 0x10023a3d
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.100055a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.100055a0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1a0]
test eax, eax
je 0x10023a83
push 0x10006c70
push dword [eax - 4]
lea esi, [eax - 4]
push 8
push eax
call fcn.10044ad2
test esi, esi
je 0x10023a83
push esi
call edi
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x198]
test eax, eax
je 0x10023aab
push eax
call edi
mov dword [ebp - 0x198], 0
xor eax, eax
mov dword [ebp - 0x19c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10044a98
mov esp, ebp
pop ebp
ret 4
call fcn.1004872f
int3