Function at 0x42295e
Capabilities:
Reference sql statements

Disassembly:
push 0x24
mov eax, 0x461df7
call fcn.00449ec2
mov edi, ecx
push str.EvaluateCondition...:
lea ecx, [ebp - 0x24]
call fcn.0040130b
xor ebx, ebx
push ebx
mov dword [ebp - 4], ebx
push dword [ebp + 0xc]
lea eax, [ebp - 0x24]
push eax
push 2
call fcn.0040f821
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x24]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
push str.SELECT__FROM__Conditions__WHERE__Condition_
lea ecx, [ebp - 0x28]
call fcn.0040130b
xor esi, esi
inc esi
mov dword [ebp - 4], esi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
call fcn.00401115
push 0x48a1a4
lea ecx, [ebp - 0x28]
call fcn.00406262
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x14]
push ecx
push dword [ebp - 0x28]
mov dword [ebp - 0x14], ebx
push eax
call sub.msi.dll_MsiEnumClientsA
test eax, eax
je 0x422a1a
cmp dword [ebp - 0x10], ebx
je 0x4229f8
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], ebx
je 0x422a05
push dword [ebp - 0x14]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004017c4
xor eax, eax
call fcn.00449f9a
ret 8
push ebx
push dword [ebp - 0x14]
call sub.msi.dll_MsiViewModify
test eax, eax
jne 0x4229eb
cmp dword [ebp - 0x10], ebx
je 0x422a34
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
mov dword [ebp - 0x10], ebx
call sub.msi.dll_MsiDatabaseIsTablePersistentA
test eax, eax
je 0x422a72
cmp dword [ebp - 0x10], ebx
je 0x422a54
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], ebx
je 0x422a61
push dword [ebp - 0x14]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
xor esi, esi
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004017c4
mov eax, esi
jmp 0x422a12
call fcn.004366fe
push eax
lea ecx, [ebp + 0xc]
call fcn.00411d53
mov byte [ebp - 4], 4
call fcn.004366fe
push eax
lea ecx, [ebp + 8]
call fcn.00411d53
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 5
push 2
push dword [ebp - 0x10]
call fcn.00433e0c
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x422b12
push str.MGRS_Type_
lea ecx, [ebp - 0x20]
call fcn.0040130b
mov byte [ebp - 4], 6
push dword [ebp - 0x24]
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0040fcf3
mov ecx, dword [ebp - 0x20]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004017c4
cmp dword [ebp - 0x10], ebx
je 0x422afd
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], ebx
je 0x422b0a
push dword [ebp - 0x14]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
mov esi, dword [ebp - 0x24]
jmp 0x422a63
mov esi, dword [ebp + 0xc]
cmp dword [esi - 0xc], ebx
jne 0x422b7b
push str.Empty_Type
lea ecx, [ebp - 0x24]
call fcn.0040130b
push 0xd
lea eax, [ebp - 0x24]
push eax
push 1
mov byte [ebp - 4], 7
call fcn.0040fcf3
mov ecx, dword [ebp - 0x24]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [esi - 0x10]
call fcn.004017c4
cmp dword [ebp - 0x10], ebx
je 0x422b66
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], ebx
je 0x422b73
push dword [ebp - 0x14]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
push 0xd
pop esi
jmp 0x422a63
lea eax, [ebp + 8]
push eax
push 3
push dword [ebp - 0x10]
call fcn.00433e0c
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x422bd3
push str.MGRS_sKey_
lea ecx, [ebp - 0x1c]
call fcn.0040130b
mov byte [ebp - 4], 8
push dword [ebp - 0x24]
lea eax, [ebp - 0x1c]
push eax
push 1
call fcn.0040fcf3
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [esi - 0x10]
jmp 0x422aeb
mov ebx, dword [ebp + 8]
cmp dword [ebx - 0xc], 0
jne 0x422c2f
push str.Empty_Key
lea ecx, [ebp - 0x18]
call fcn.0040130b
push 0xd
lea eax, [ebp - 0x18]
push eax
push 1
mov byte [ebp - 4], 9
call fcn.0040fcf3
mov ecx, dword [ebp - 0x18]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [ebx - 0x10]
call fcn.004017c4
lea ecx, [esi - 0x10]
call fcn.004017c4
cmp dword [ebp - 0x10], 0
je 0x422c26
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], 0
jmp 0x422b69
push str.PATCH_GUID
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422c81
push edi
lea ecx, [ebp + 8]
call fcn.0042362a
mov edi, eax
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [esi - 0x10]
call fcn.004017c4
cmp dword [ebp - 0x10], 0
je 0x422c6c
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], 0
je 0x422c7a
push dword [ebp - 0x14]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
mov esi, edi
jmp 0x422a63
push str.ARM_ELEVATED
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422ccf
call fcn.0042fa0a
lea ecx, [ebx - 0x10]
mov dword [edi], eax
call fcn.004017c4
lea ecx, [esi - 0x10]
call fcn.004017c4
cmp dword [ebp - 0x10], 0
je 0x422cb7
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
xor esi, esi
cmp dword [ebp - 0x14], esi
je 0x422a63
push dword [ebp - 0x14]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
jmp 0x422a63
push str.USER_ADMIN
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422ce7
mov eax, dword [0x4a66d4]
jmp 0x422c97
push str.ARM_PREFERENCES
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422d11
mov eax, dword [0x4a66f8]
push ebx
mov dword [ebp + 0xc], eax
call fcn.00447fe7
sub eax, dword [ebp + 0xc]
pop ecx
neg eax
sbb eax, eax
inc eax
jmp 0x422c97
call fcn.004366fe
push eax
lea ecx, [ebp - 0x20]
call fcn.00411d53
mov byte [ebp - 4], 0xa
call fcn.004366fe
push eax
lea ecx, [ebp - 0x1c]
call fcn.00411d53
mov byte [ebp - 4], 0xb
call fcn.004366fe
push eax
lea ecx, [ebp - 0x18]
call fcn.00411d53
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 0xc
push 4
push dword [ebp - 0x10]
call fcn.00433e0c
add esp, 0xc
mov dword [ebp - 0x24], eax
test eax, eax
je 0x422dd4
push str.MGRS_sName_
lea ecx, [ebp - 0x2c]
call fcn.0040130b
mov byte [ebp - 4], 0xd
push dword [ebp - 0x24]
lea eax, [ebp - 0x2c]
push eax
push 1
call fcn.0040fcf3
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [ebx - 0x10]
call fcn.004017c4
lea ecx, [esi - 0x10]
call fcn.004017c4
cmp dword [ebp - 0x10], 0
je 0x422dcb
push dword [ebp - 0x10]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
cmp dword [ebp - 0x14], 0
jmp 0x422b00
lea eax, [ebp - 0x1c]
push eax
push 5
push dword [ebp - 0x10]
call fcn.00433e0c
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 6
push dword [ebp - 0x10]
call fcn.00433e0c
add esp, 0xc
push str.FILE
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422e43
push edi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
lea ebx, [ebp - 0x18]
lea edi, [ebp - 0x1c]
call fcn.004232be
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov edi, eax
call fcn.004017c4
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004017c4
jmp 0x422c4b
push str.REG_STR
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
je 0x422f52
push str.REG_DWORD
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
je 0x422f52
push 0x48b1a8
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422e96
push edi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00422f6f
jmp 0x422e1b
push str.MSI_PRODUCT
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422ee8
push edi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00423953
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov edi, eax
call fcn.004017c4
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [ebx - 0x10]
jmp 0x422c51
push str.DATE
lea ecx, [ebp + 0xc]
call fcn.00406240
test eax, eax
jne 0x422f08
push edi
lea eax, [ebp - 0x18]
push eax
lea edi, [ebp - 0x1c]
call fcn.00423b86
jmp 0x422ebd
push str.Not_supported_condition_type_in_Manifest
lea ecx, [ebp - 0x30]
call fcn.0040130b
push 0xd
lea eax, [ebp - 0x30]
push eax
push 1
mov byte [ebp - 4], 0xe
call fcn.0040fcf3
mov ecx, dword [ebp - 0x30]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x20]
jmp 0x422c00
push edi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp + 8]
call fcn.00423001
jmp 0x422ebd