Function at 0x1400d9720
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rbp, r9
mov rsi, r8
mov rdi, rdx
mov r14, rcx
mov qword [rsp + 0x28], rcx
mov r15, qword [rsp + 0x80]
lea rax, vtable.ServiceThread.0
mov qword [rcx], rax
xor r12d, r12d
mov qword [rcx + 8], r12
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], r12
mov dword [rcx + 0x20], r12d
mov qword [rcx + 0x28], r12
add rcx, 0x30
mov edx, 0x80000400
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov rbx, 0xffffffffffffffff
mov dword [r14 + 0x58], ebx
lea rax, vtable.UsnJournalThread.0
mov qword [r14], rax
mov qword [r14 + 0x60], rdi
mov qword [r14 + 0x68], rsi
mov qword [r14 + 0x70], r15
mov qword [r14 + 0x78], rbp
mov rax, qword [rsp + 0x88]
mov qword [r14 + 0x80], rax
mov eax, dword [rsp + 0x90]
mov dword [r14 + 0x88], eax
mov dword [r14 + 0x8c], 0x3e8
mov qword [r14 + 0x90], rbx
mov qword [r14 + 0x98], r12
mov qword [r14 + 0xa0], r12
mov qword [r14 + 0xa8], r12
mov qword [r14 + 0xb0], r12
xorps xmm0, xmm0
movups xmmword [r14 + 0xc8], xmm0
movups xmmword [r14 + 0xd8], xmm0
movups xmmword [r14 + 0xe8], xmm0
lea rdi, [r14 + 0xf8]
mov qword [rsp + 0x20], rdi
mov qword [rdi], r12
mov qword [rdi + 8], r12
lfence
lea ecx, [rbx + 0x69]
call fcn.1401544fc
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rdi], rax
mov qword [r14 + 0x108], rbx
mov qword [r14 + 0xdf8], r12
mov qword [r14 + 0xe00], r12
mov qword [r14 + 0xe08], r12
mov qword [r14 + 0xe10], r12
mov qword [r14 + 0xe18], r12
lea rcx, [r14 + 0xe20]
call fcn.140084ef0
nop
lea rbp, [r14 + 0xe40]
xor edx, edx
mov r8d, 0x208
mov rcx, rbp
call fcn.140145ad0
mov qword [r14 + 0x1048], r12
mov qword [r14 + 0x1050], r12
mov qword [r14 + 0x1058], r12
mov qword [r14 + 0x1060], r12
mov qword [r14 + 0x1068], r12
mov qword [r14 + 0x1070], r12
mov qword [r14 + 0x1078], r12
mov dword [r14 + 0x1080], r12d
mov byte [r14 + 0x1088], r12b
lea rcx, [r14 + 0x1090]
mov edx, 0x80000400
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
nop
mov rax, qword [r14 + 0x60]
add rax, 0x10
lea rsi, vtable.SqliteStatement.0
mov qword [r14 + 0x10b8], rsi
mov dword [r14 + 0x10c0], r12d
mov qword [r14 + 0x10c8], rax
lea rdx, str.SELECT_FILE_ID_FROM_PINNED_APPLICATIONS_WHERE_PIN_ACTION__1
mov qword [r14 + 0x10d0], rdx
mov qword [r14 + 0x10d8], r12
mov qword [r14 + 0x10e0], r12
mov byte [r14 + 0x10e8], r12b
lea r8d, [r12 + 6]
lea rcx, [0x14029b200]
call fcn.1400e3d50
test eax, eax
jne 0x1400d9940
mov byte [r14 + 0x10e8], 1
lea rdi, vtable.TransactionSafeStatement.0
mov qword [r14 + 0x10b8], rdi
mov rax, qword [r14 + 0x60]
add rax, 0x10
mov qword [r14 + 0x10f0], rsi
mov dword [r14 + 0x10f8], r12d
mov qword [r14 + 0x1100], rax
lea rdx, str.SELECT_FILE_ID__PATH_FROM_PINNED_APPLICATIONS_WHERE_PIN_ACTION__2
mov qword [r14 + 0x1108], rdx
mov qword [r14 + 0x1110], r12
mov qword [r14 + 0x1118], r12
mov byte [r14 + 0x1120], 0
mov r8d, 6
lea rcx, [0x14029b200]
call fcn.1400e3d50
test eax, eax
jne 0x1400d99ad
mov byte [r14 + 0x1120], 1
mov qword [r14 + 0x10f0], rdi
mov rax, qword [r14 + 0x60]
add rax, 0x10
mov qword [r14 + 0x1128], rsi
mov dword [r14 + 0x1130], r12d
mov qword [r14 + 0x1138], rax
lea rdx, str.SELECT_FILE_ID__PATH_FROM_PINNED_APPLICATIONS_WHERE_PIN_ACTION__3
mov qword [r14 + 0x1140], rdx
mov qword [r14 + 0x1148], r12
mov qword [r14 + 0x1150], r12
mov byte [r14 + 0x1158], 0
mov r8d, 6
lea rcx, [0x14029b200]
call fcn.1400e3d50
test eax, eax
jne 0x1400d9a13
mov byte [r14 + 0x1158], 1
mov qword [r14 + 0x1128], rdi
lea rax, [0x1402eb3e0]
mov rcx, qword [0x1402eb3e0]
cmp rcx, rax
je 0x1400d9a51
test dword [rcx + 0x44], 0x20000
je 0x1400d9a51
cmp byte [rcx + 0x41], 3
jb 0x1400d9a51
mov edx, 0xa
lea r8, [0x1402764f0]
mov rcx, qword [rcx + 0x38]
call fcn.140024250
mov rcx, r14
call fcn.1400dad80
mov qword [r14 + 0x90], rax
lea rdi, [r15 + 0x68]
lea rbx, [rbx + 1]
cmp word [rdi + rbx*2], 0
jne 0x1400d9a64
lea rsi, [rbx + rbx]
test rsi, rsi
je 0x1400d9ad9
test rbp, rbp
jne 0x1400d9a8a
call fcn.1400e3c30
mov dword [rax], 0x16
jmp 0x1400d9ad4
test rdi, rdi
je 0x1400d9aab
cmp rsi, 0x208
ja 0x1400d9aab
lfence
mov r8, rsi
mov rdx, rdi
mov rcx, rbp
call fcn.140145e60
jmp 0x1400d9ad9
xor edx, edx
mov r8d, 0x208
mov rcx, rbp
call fcn.140145ad0
test rdi, rdi
je 0x1400d9a7d
cmp rsi, 0x208
jbe 0x1400d9ad9
call fcn.1400e3c30
mov dword [rax], 0x22
call fcn.1400e3a40
mov word [r14 + rbx*2 + 0xe40], r12w
mov rcx, r14
call fcn.1400dcbd0
nop
mov rax, r14
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret