Function at 0x1800f91e0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xa8
xor edx, edx
lea rax, [0x1801437f4]
lea rcx, str._rowid___
cmp dword [rbp + 0x6f], edx
mov qword [rbp - 0x49], rax
lea rax, [0x180150604]
cmovne rax, rcx
mov r12d, edx
mov dword [rbp - 0x61], edx
mov ebx, edx
mov qword [rbp - 0x29], rdx
mov r14d, edx
mov qword [rbp - 0x19], rax
mov r13d, edx
mov qword [rbp - 0x21], rdx
mov qword [rbp - 0x59], rdx
mov qword [rbp - 0x11], rdx
mov esi, edx
mov dword [rbp + 0x6f], edx
mov r15d, edx
mov qword [rbp - 0x41], rdx
mov qword [rbp - 0x39], rdx
mov edi, pe_nt_image_headers64
add rdi, rdi
cmp rdi, 4
jl 0x1800f9264
mov eax, 0x7ffffeff
cmp rdi, rax
cmovg rdi, rax
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f92a0
mov rdx, rdi
xor ecx, ecx
call fcn.18000b2e0
test rax, rax
je 0x1800f92a0
mov rbx, rax
mov qword [rbp - 0x29], rax
mov r13d, edi
mov dword [rbp - 0x1d], edi
jmp 0x1800f92aa
mov r12d, 7
mov dword [rbp - 0x61], r12d
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f92d8
movzx eax, word [0x180156784]
mov r14d, 3
mov word [rbx], ax
movzx eax, byte [0x180156786]
mov dword [rbp - 0x21], r14d
mov byte [rbx + 2], al
mov byte [rbx + 3], sil
mov r10, qword [rbp + 0x67]
test r10, r10
je 0x1800f94e4
lea rdi, str.sqlite_stat1
mov r8, r10
lea r9, [0x180143970]
sub r8, rdi
nop dword [rax]
movzx ecx, byte [rdi]
movzx eax, byte [r8 + rdi]
cmp ecx, eax
jne 0x1800f9370
test ecx, ecx
jne 0x1800f9382
movsxd rsi, r14d
lea rcx, [rsi + 0x18]
test r12d, r12d
jne 0x1800f9392
movsxd rax, r13d
cmp rcx, rax
jle 0x1800f9392
mov eax, pe_nt_image_headers64
test r13d, r13d
cmovne eax, r13d
movsxd rdi, eax
add rdi, rdi
cmp rdi, rcx
jl 0x1800f9333
mov r13d, 0x7ffffeff
cmp rdi, r13
jle 0x1800f9352
mov edi, r13d
cmp rcx, r13
jg 0x1800f9421
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f938a
mov rdx, rdi
mov rcx, rbx
call fcn.18000b2e0
test rax, rax
je 0x1800f938a
mov rbx, rax
jmp 0x1800f9398
movzx edx, byte [rax + r9]
movzx ecx, byte [rcx + r9]
sub ecx, edx
jne 0x1800f94e4
inc rdi
jmp 0x1800f9300
mov r12d, 7
jmp 0x1800f9398
mov r13d, 0x7ffffeff
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f93e6
mov rax, qword [str._AND___6_OR__3_IS_stat_]
mov qword [rsi + rbx], rax
mov rax, qword [0x180156790]
mov qword [rsi + rbx + 8], rax
mov eax, dword [0x180156798]
mov dword [rsi + rbx + 0x10], eax
movzx eax, word [0x18015679c]
mov word [rsi + rbx + 0x14], ax
movzx eax, byte [0x18015679e]
mov byte [rsi + rbx + 0x16], al
lea eax, [r14 + 0x17]
cdqe
mov byte [rax + rbx], r15b
test r12d, r12d
jne 0x1800f9427
mov edi, pe_nt_image_headers64
add rdi, rdi
cmp rdi, 9
jl 0x1800f93f0
cmp rdi, r13
cmovg rdi, r13
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f9421
mov rdx, rdi
xor ecx, ecx
call fcn.18000b2e0
test rax, rax
je 0x1800f9421
mov rcx, rax
mov qword [rbp - 0x59], rax
jmp 0x1800f942a
mov r12d, 7
mov rcx, r15
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f9444
mov rax, qword [str.tbl__idx]
mov qword [rcx], rax
mov byte [rcx + 8], r15b
test r12d, r12d
jne 0x1800f9483
mov edi, pe_nt_image_headers64
nop
add rdi, rdi
cmp rdi, 0x2d
jl 0x1800f9450
cmp rdi, r13
cmovg rdi, r13
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f947d
mov rdx, rdi
xor ecx, ecx
call fcn.18000b2e0
test rax, rax
je 0x1800f947d
mov r15, rax
jmp 0x1800f9483
mov r12d, 7
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f94d4
mov rax, qword [str._1___CASE_WHEN__2X_THEN_NULL_ELSE__2_END_]
mov qword [r15], rax
mov rax, qword [0x1801567b8]
mov qword [r15 + 8], rax
mov rax, qword [0x1801567c0]
mov qword [r15 + 0x10], rax
mov rax, qword [0x1801567c8]
mov qword [r15 + 0x18], rax
mov rax, qword [0x1801567d0]
mov qword [r15 + 0x20], rax
mov eax, dword [0x1801567d8]
mov dword [r15 + 0x28], eax
mov byte [r15 + 0x2c], 0
mov r10, qword [rbp + 0x67]
lea rdx, str.tbl___2__stat
jmp 0x1800f9842
movsxd rcx, dword [rbp + 0x77]
xor eax, eax
mov qword [rbp - 0x31], rax
test rcx, rcx
jle 0x1800f983e
mov rdi, qword [rbp + 0x7f]
mov ecx, 1
mov dword [rbp - 0x51], ecx
mov rdx, qword [rbp + 0x87]
cmp byte [rax + rdx], 0
je 0x1800f97e5
mov r9, qword [rbp - 0x49]
test r9, r9
jne 0x1800f9521
xor ebx, ebx
jmp 0x1800f9539
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r9
repne scasb al, byte [rdi]
not rcx
lea rbx, [rcx - 1]
and ebx, 0x3fffffff
lea eax, [rbx + 1]
movsxd r14, esi
movsxd rdx, eax
add rdx, r14
test r12d, r12d
jne 0x1800f95c3
movsxd rcx, dword [rbp + 0x6f]
cmp rdx, rcx
jle 0x1800f95c3
mov eax, pe_nt_image_headers64
test ecx, ecx
cmovne eax, ecx
movsxd rdi, eax
add rdi, rdi
cmp rdi, rdx
jl 0x1800f9560
mov r8d, 0x7ffffeff
cmp rdi, r8
jle 0x1800f9587
mov edi, r8d
cmp rdx, r8
jle 0x1800f9587
mov r12d, 7
mov dword [rbp - 0x61], r12d
jmp 0x1800f95f2
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f95b5
mov rcx, qword [rbp - 0x59]
mov rdx, rdi
call fcn.18000b2e0
test rax, rax
je 0x1800f95b5
mov r9, qword [rbp - 0x49]
mov r13, rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x11], rax
mov dword [rbp + 0x6f], edi
jmp 0x1800f95c7
mov r9, qword [rbp - 0x49]
mov r12d, 7
mov dword [rbp - 0x61], r12d
mov r13, qword [rbp - 0x59]
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f95ec
lea rcx, [r14 + r13]
movsxd r8, ebx
mov rdx, r9
call fcn.1801278d0
add esi, ebx
movsxd r14, esi
mov byte [r14 + r13], 0
mov r8d, 0x7ffffeff
mov r9, qword [rbp - 0x49]
test r9, r9
jne 0x1800f95ff
xor ebx, ebx
jmp 0x1800f9617
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r9
repne scasb al, byte [rdi]
not rcx
lea rbx, [rcx - 1]
and ebx, 0x3fffffff
movsxd rdi, dword [rbp - 0x39]
lea eax, [rbx + 1]
movsxd rdx, eax
mov r13, rdi
add rdx, rdi
test r12d, r12d
jne 0x1800f9699
movsxd rcx, dword [rbp - 0x35]
cmp rdx, rcx
jle 0x1800f9699
mov eax, pe_nt_image_headers64
test ecx, ecx
cmovne eax, ecx
movsxd rdi, eax
add rdi, rdi
cmp rdi, rdx
jl 0x1800f9642
cmp rdi, r8
jle 0x1800f9663
mov rdi, r8
cmp rdx, r8
jle 0x1800f9663
mov r12d, 7
mov dword [rbp - 0x61], r12d
jmp 0x1800f96c8
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f9688
mov rdx, rdi
mov rcx, r15
call fcn.18000b2e0
test rax, rax
je 0x1800f9688
mov r15, rax
mov qword [rbp - 0x41], rax
mov dword [rbp - 0x35], edi
jmp 0x1800f9692
mov r12d, 7
mov dword [rbp - 0x61], r12d
mov r9, qword [rbp - 0x49]
mov edi, dword [rbp - 0x39]
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f96c2
lea rcx, [r13 + r15]
movsxd r8, ebx
mov rdx, r9
call fcn.1801278d0
add edi, ebx
movsxd rax, edi
mov dword [rbp - 0x39], edi
mov byte [rax + r15], 0
mov r8d, 0x7ffffeff
mov rbx, qword [rbp - 0x31]
lea rax, [0x18014d068]
mov qword [rbp - 0x49], rax
mov rax, qword [rbp + 0x7f]
mov rbx, qword [rax + rbx*8]
test rbx, rbx
jne 0x1800f96e8
xor ecx, ecx
jmp 0x1800f96ff
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
dec rcx
and ecx, 0x3fffffff
lea eax, [rcx + rcx + 4]
movsxd rcx, eax
add rcx, r14
test r12d, r12d
jne 0x1800f9779
movsxd rdx, dword [rbp + 0x6f]
cmp rcx, rdx
jle 0x1800f9779
mov eax, pe_nt_image_headers64
test edx, edx
cmovne eax, edx
movsxd rdi, eax
add rdi, rdi
cmp rdi, rcx
jl 0x1800f9724
cmp rdi, r8
jle 0x1800f9745
mov rdi, r8
cmp rcx, r8
jle 0x1800f9745
mov dword [rbp - 0x61], 7
jmp 0x1800f97c3
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x1800f976f
mov rcx, qword [rbp - 0x59]
mov rdx, rdi
call fcn.18000b2e0
test rax, rax
je 0x1800f976f
mov rcx, rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x11], rax
mov dword [rbp + 0x6f], edi
jmp 0x1800f977d
mov r12d, 7
mov dword [rbp - 0x61], r12d
mov rcx, qword [rbp - 0x59]
xor eax, eax
test r12d, r12d
setne al
test eax, eax
jne 0x1800f97c3
lea rsi, [r14 + rcx]
inc rsi
mov byte [rsi - 1], 0x22
cmp byte [rbx], al
je 0x1800f97b4
cmp byte [rbx], 0x22
jne 0x1800f97a3
mov byte [rsi], 0x22
inc rsi
movzx eax, byte [rbx]
inc rbx
inc rsi
mov byte [rsi - 1], al
cmp byte [rbx], 0
jne 0x1800f9798
mov byte [rsi], 0x22
sub esi, dword [rbp - 0x11]
inc esi
movsxd rax, esi
mov byte [rax + rcx], 0
mov r9d, dword [rbp - 0x51]
lea r8, [0x18014d148]
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.1800f8740
mov r15, qword [rbp - 0x41]
mov rdi, qword [rbp + 0x7f]
jmp 0x1800f9812
mov rax, qword [rdi + rax*8]
mov edx, dword [rbp + 0x77]
lea r8, str._AND____d_OR___d_IS__w._w_
mov qword [rsp + 0x30], rax
lea r9d, [rcx + rdx]
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], ecx
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x29]
call fcn.1800f8740
mov rax, qword [rbp - 0x31]
mov ecx, dword [rbp - 0x51]
movsxd rdx, dword [rbp + 0x77]
mov r12d, dword [rbp - 0x61]
mov r10, qword [rbp + 0x67]
inc rax
inc ecx
mov qword [rbp - 0x31], rax
mov dword [rbp - 0x51], ecx
cmp rax, rdx
jl 0x1800f9503
mov rbx, qword [rbp - 0x29]
mov rdx, qword [rbp - 0x19]
mov rsi, qword [rbp - 0x59]
test r12d, r12d
jne 0x1800f9920
cmp dword [rbp + 0x57], r12d
mov r9, qword [rbp + 0x5f]
mov qword [rsp + 0x30], r15
lea r8, [0x1801437f4]
lea rcx, str.SELECT__s_s_FROM__Q._Q_WHERE___s__IS___s_
mov qword [rsp + 0x28], rsi
cmovne r8, rbx
mov qword [rsp + 0x20], r10
call sym.sqlite.dll_sqlite3_mprintf
mov rdi, rax
test rax, rax
jne 0x1800f988e
lea r12d, [rax + 7]
jmp 0x1800f9920
mov rax, qword [rbp + 0x8f]
mov rcx, qword [rbp + 0x4f]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
mov r9d, pe_nt_image_headers64
or r8d, 0xffffffff
mov rdx, rdi
mov qword [rsp + 0x20], 0
call fcn.1800873e0
cmp dword [0x180171920], 0
mov r12d, eax
je 0x1800f9917
mov rcx, qword [0x1801811a8]
test rcx, rcx
je 0x1800f98e0
call qword [0x1801719a0]
mov rcx, rdi
call qword [0x180171958]
dec qword [0x180181138]
movsxd rcx, eax
sub qword [0x1801810f0], rcx
mov rcx, rdi
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test rcx, rcx
je 0x1800f9927
call qword [0x1801719b0]
jmp 0x1800f9920
mov rcx, rdi
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test rbx, rbx
je 0x1800f9987
cmp dword [0x180171920], 0
je 0x1800f9977
test rcx, rcx
je 0x1800f9940
call qword [0x1801719a0]
mov rcx, rbx
call qword [0x180171958]
dec qword [0x180181138]
mov rcx, rbx
movsxd rdx, eax
sub qword [0x1801810f0], rdx
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test rcx, rcx
je 0x1800f9987
call qword [0x1801719b0]
jmp 0x1800f9980
mov rcx, rbx
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test rsi, rsi
je 0x1800f99e7
cmp dword [0x180171920], 0
je 0x1800f99d7
test rcx, rcx
je 0x1800f99a0
call qword [0x1801719a0]
mov rcx, rsi
call qword [0x180171958]
dec qword [0x180181138]
mov rcx, rsi
movsxd rdx, eax
sub qword [0x1801810f0], rdx
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test rcx, rcx
je 0x1800f99e7
call qword [0x1801719b0]
jmp 0x1800f99e0
mov rcx, rsi
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test r15, r15
je 0x1800f9a40
cmp dword [0x180171920], 0
je 0x1800f9a37
test rcx, rcx
je 0x1800f9a00
call qword [0x1801719a0]
mov rcx, r15
call qword [0x180171958]
dec qword [0x180181138]
mov rcx, r15
movsxd rdx, eax
sub qword [0x1801810f0], rdx
call qword [0x180171948]
mov rcx, qword [0x1801811a8]
test rcx, rcx
je 0x1800f9a40
call qword [0x1801719b0]
jmp 0x1800f9a40
mov rcx, r15
call qword [0x180171948]
mov eax, r12d
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret