Function at 0x42feca
Capabilities:
Reference sql statements

Disassembly:
push 0x44
mov eax, 0x4b019f
call fcn.0046ac08
mov dword [ebp - 0x2c], ecx
xor ebx, ebx
lea ecx, [ebp - 0x40]
push str.ProcessOnDemandManifest...
mov dword [ebp - 0x1c], ebx
call fcn.00402829
push ebx
push 2
lea edx, [ebp - 0x40]
mov dword [ebp - 4], ebx
pop ecx
call fcn.004174f1
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov eax, dword [0x516150]
add eax, 0xfffffff0
push eax
call main
pop ecx
lea esi, [eax + 0x10]
mov dword [ebp - 0x38], esi
push 0
push 0x80
push 3
push 0
inc ebx
push ebx
push SysReAllocString
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.kernel32.dll_CreateFileW]
mov edi, eax
mov dword [ebp - 0x50], edi
mov byte [ebp - 4], 2
test edi, edi
je 0x43077d
cmp edi, 0xffffffff
je 0x43077d
push str.2_16_17_18_19_52_53_54_63_68_81_82_83_84_85_86_87_88_89_90_91_92_93_97
or edx, 0xffffffff
mov ecx, esi
call main
pop ecx
test eax, eax
jne 0x430768
mov ecx, dword [ebp - 0x2c]
add ecx, 4
call fcn.00402804
push eax
push 0
push esi
call dword [sym.imp.msi.dll_MsiOpenProductW]
mov esi, eax
test esi, esi
jne 0x430754
call fcn.00450db1
push eax
lea ecx, [ebp - 0x40]
call main
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 3
push eax
mov ecx, 0x5163e4
call fcn.0041a012
push str.SELECT__FROM__OnDemand__WHERE__OnDemandID_
lea ecx, [ebp - 0x34]
call fcn.00402829
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
mov esi, dword [ebp - 0x40]
push dword [esi - 0xc]
push esi
call main
push 0x4ef018
lea ecx, [ebp - 0x34]
call fcn.0041035e
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
and dword [ebp - 0x28], 0
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x34]
push dword [eax + 4]
call dword [sym.imp.msi.dll_MsiEnumClientsA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x430027
push 0x4ef01c
lea ecx, [ebp - 0x3c]
call fcn.00402829
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x3c]
push eax
mov ecx, ebx
call fcn.004175da
pop ecx
mov ecx, dword [ebp - 0x3c]
jmp 0x430716
push 0
push dword [ebp - 0x28]
call dword [sym.imp.msi.dll_MsiViewModify]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x43004c
push 0x4ef028
lea ecx, [ebp - 0x3c]
call fcn.00402829
mov byte [ebp - 4], 8
jmp 0x430010
cmp dword [ebp - 0x18], 0
je 0x43005b
push dword [ebp - 0x18]
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.msi.dll_MsiDatabaseIsTablePersistentA]
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x4306f3
call fcn.00450db1
push eax
lea ecx, [ebp - 0x24]
call main
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x18]
push eax
push 2
pop edx
call main
mov eax, dword [ebp - 0x24]
pop ecx
cmp dword [eax - 0xc], 0
jne 0x4300d5
push str.Empty_FileSequences_data
lea ecx, [ebp - 0x3c]
call fcn.00402829
push 0xd
pop eax
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x3c]
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], eax
call fcn.004175da
pop ecx
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x4306ee
call fcn.00450db1
push eax
lea ecx, [ebp - 0x20]
call main
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x18]
push eax
push 3
pop edx
call main
mov eax, dword [ebp - 0x20]
pop ecx
cmp dword [eax - 0xc], 0
jne 0x43013b
push str.Empty_product_name
lea ecx, [ebp - 0x3c]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push str.Adobe_Application
lea ecx, [ebp - 0x20]
call main
lea eax, [ebp - 0x20]
mov ecx, 0x515fdc
push eax
call main
call fcn.00450db1
push eax
lea ecx, [ebp - 0x30]
call main
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x18]
push eax
push 4
pop edx
call main
pop ecx
lea eax, [ebp - 0x30]
mov ecx, 0x516004
push eax
call main
lea eax, [ebp - 0x30]
mov ecx, 0x515fd4
push eax
call main
call fcn.00450db1
push eax
lea ecx, [ebp - 0x3c]
call main
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x18]
push eax
push 5
pop edx
call main
pop ecx
lea eax, [ebp - 0x3c]
mov ecx, 0x51606c
push eax
call main
call fcn.00450db1
push eax
lea ecx, [ebp - 0x14]
call main
push str.SkipArmOnDemandUAC
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xf
call fcn.00402829
mov esi, dword [ebp - 0x2c]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0x81
mov ecx, dword [esi + 4]
call fcn.00449ab5
pop ecx
test eax, eax
jne 0x43020c
push 0x4cc754
lea ecx, [ebp - 0x14]
call main
mov byte [ebp - 0xd], bl
test eax, eax
je 0x430210
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0xf
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], 0
je 0x43025d
push str.SkipArmOnDemandUAC_set_in_Manifest
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x11
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
and dword [0x516084], 0
lea ecx, [ebp - 0x14]
call fcn.00402a6b
push str.UrlFallback
lea ecx, [ebp - 0x44]
call fcn.00402829
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x14]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0x82
call fcn.00449ab5
pop ecx
test eax, eax
jne 0x43029d
mov eax, dword [ebp - 0x14]
mov byte [ebp - 0xd], bl
cmp dword [eax - 0xc], 0
jne 0x4302a1
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0xf
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], 0
je 0x4302fa
push str.UrlFallback:
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x13
push eax
push 2
lea edx, [ebp - 0x44]
pop ecx
call fcn.00416dc0
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x14]
mov ecx, 0x5160a0
push eax
call main
lea ecx, [ebp - 0x14]
call fcn.00402a6b
push str.AllowService
lea ecx, [ebp - 0x44]
mov dword [0x516058], ebx
call fcn.00402829
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x14]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0x84
call fcn.00449ab5
pop ecx
test eax, eax
jne 0x430348
push 0x4ced4c
lea ecx, [ebp - 0x14]
call main
mov byte [ebp - 0xd], bl
test eax, eax
je 0x43034c
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0xf
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], 0
je 0x430399
push str.Service_disabled_in_Manifest
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x15
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
and dword [0x516058], 0
call fcn.00450db1
push eax
lea ecx, [ebp - 0x48]
call main
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x16
push eax
mov ecx, 0x5163e4
call fcn.0041a012
and dword [0x516088], 0
lea ecx, [ebp - 0x14]
call fcn.00402a6b
push str.EnablePings
lea ecx, [ebp - 0x44]
call fcn.00402829
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x14]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0x88
call fcn.00449ab5
pop ecx
test eax, eax
jne 0x430400
mov eax, dword [ebp - 0x14]
mov byte [ebp - 0xd], bl
cmp dword [eax - 0xc], 0
jne 0x430404
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], 0
mov edi, dword [ebp - 0x48]
je 0x430463
push 0
push edi
lea ecx, [ebp - 0x14]
call main
cmp eax, 0xffffffff
je 0x430463
push str.Pings_enabled_in_Manifest
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x18
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov dword [0x516088], ebx
lea ecx, [ebp - 0x14]
call fcn.00402a6b
push str.AllowUpdateInSystemContext
lea ecx, [ebp - 0x44]
call fcn.00402829
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x14]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0x90
call fcn.00449ab5
pop ecx
test eax, eax
jne 0x4304a3
mov eax, dword [ebp - 0x14]
mov byte [ebp - 0xd], bl
cmp dword [eax - 0xc], 0
jne 0x4304a7
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], 0
lea ecx, [ebp - 0x44]
je 0x43050a
push str.AllowUpdateInSystemContext_property:
call fcn.00402829
push 0
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
push eax
push 2
lea edx, [ebp - 0x44]
pop ecx
call fcn.00416dc0
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0
push edi
lea ecx, [ebp - 0x14]
call main
cmp eax, 0xffffffff
je 0x430535
mov dword [0x51605c], ebx
jmp 0x430535
push str.AllowUpdateInSystemContext_property_not_found
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x1b
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [ebp - 0x14]
call fcn.00402a6b
push str.DoNotAllowStdUser
lea ecx, [ebp - 0x44]
call fcn.00402829
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x14]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0xa0
call fcn.00449ab5
pop ecx
test eax, eax
jne 0x430575
mov eax, dword [ebp - 0x14]
mov byte [ebp - 0xd], bl
cmp dword [eax - 0xc], 0
jne 0x430579
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], 0
je 0x4305d5
push 0
push edi
lea ecx, [ebp - 0x14]
call main
cmp eax, 0xffffffff
je 0x4305d5
push str.Std_User_disabled_in_Manifest
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
push 2
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x1d
pop ecx
call fcn.004174f1
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov dword [0x5160d8], ebx
lea ecx, [ebp - 0x14]
call fcn.00402a6b
push str.ToastGap
lea ecx, [ebp - 0x44]
call fcn.00402829
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x14]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c], 0xc0
call fcn.00449ab5
mov esi, dword [ebp - 0x14]
pop ecx
test eax, eax
jne 0x430612
cmp dword [esi - 0xc], 0
jne 0x430614
xor bl, bl
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
test bl, bl
je 0x43067b
push str.ToastGap_in_Manifest:
lea ecx, [ebp - 0x44]
call fcn.00402829
push 0
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
push eax
push 2
lea edx, [ebp - 0x44]
pop ecx
call fcn.00416dc0
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov esi, dword [ebp - 0x14]
push esi
call main
pop ecx
mov ecx, dword [0x51608c]
cmp eax, 0x1d4c0
cmovg ecx, eax
mov dword [0x51608c], ecx
call fcn.00450db1
push eax
lea ecx, [ebp - 0x4c]
call main
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x20
push eax
call fcn.00430d87
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
push eax
call fcn.00432692
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [edi - 0x10]
call fcn.00402e64
lea ecx, [esi - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov edi, dword [ebp - 0x50]
mov esi, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x24]
jmp 0x430716
push 0x4ef028
lea ecx, [ebp - 0x4c]
call fcn.00402829
mov byte [ebp - 4], 0x21
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
push eax
call fcn.004175da
pop ecx
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp dword [ebp - 0x18], 0
je 0x43072d
push dword [ebp - 0x18]
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
cmp dword [ebp - 0x28], 0
je 0x43073c
push dword [ebp - 0x28]
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [esi - 0x10]
call fcn.00402e64
mov ebx, dword [ebp - 0x1c]
jmp 0x4307b2
push str.MODB:
lea ecx, [ebp - 0x4c]
call fcn.00402829
mov byte [ebp - 4], 0x22
push esi
jmp 0x430793
push str.Manifest_file_not_valid
lea ecx, [ebp - 0x4c]
call fcn.00402829
mov byte [ebp - 4], 0x23
push 0
jmp 0x430793
push str.Failed_to_lock_Manifest_file
lea ecx, [ebp - 0x4c]
call fcn.00402829
mov byte [ebp - 4], 0x24
push 0x186a0
lea eax, [ebp - 0x38]
push eax
push 2
lea edx, [ebp - 0x4c]
pop ecx
call fcn.00416dc0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0xd
pop ebx
test edi, edi
je 0x4307bd
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.00402e64
mov eax, ebx
call fcn.0046abd1
ret