Function at 0x406350
Capabilities:
Query environment variable
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x340
call fcn.0050ec60
mov dword [esp + 0x1c], 0
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push 0
call edi
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
add esp, 4
push 0x8000
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
add esp, 8
push 2
call edi
add esp, 4
push 0
push 4
push 0
push eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_setvbuf
add esp, 0x10
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__isatty]
push 0
call esi
add esp, 4
mov dword [0x53c140], eax
push 1
call esi
add esp, 4
mov dword [0x53c004], eax
push str.SQLITE_DEBUG_BREAK
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
add esp, 4
test eax, eax
je 0x40642a
push 0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__isatty]
add esp, 4
test eax, eax
je 0x406424
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__isatty]
add esp, 4
test eax, eax
je 0x406424
push 2
call edi
add esp, 4
mov esi, eax
call sub.api_ms_win_crt_runtime_l1_1_0.dll__getpid
push eax
push str.attach_debugger_to_process__d_and_press_any_key_to_continue._n
push esi
call fcn.004062d0
add esp, 0xc
push 0
call edi
add esp, 4
push eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fgetc
add esp, 4
jmp 0x40642a
call dword [sym.imp.KERNEL32.dll_DebugBreak]
call fcn.0043f180
push 0x3c
push 0x51d08a
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x407a2f
mov edi, dword [ebp + 0xc]
lea esi, [esp + 0x50]
push 0x2e8
push 0
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov dword [esp + 0x94], 2
mov dword [esp + 0x9c], 2
mov dword [esp + 0xa0], 2
mov byte [esp + 0x54], 1
lea eax, [esp + 0x274]
mov dword [esp + 0x2b0], eax
mov word [esp + 0xf6], 0x7c
mov word [esp + 0x10a], 0xa
mov dword [esp + 0xbc], 2
push 0xffffffffffffffff
call fcn.00438fa0
add esp, 4
cmp eax, 0x15
jne 0x4064d9
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push str.WARNING:_attempt_to_configure_SQLite_after_initialization._n
push eax
call fcn.004014c0
add esp, 8
push 1
push 0x11
call fcn.00438fa0
add esp, 8
push esi
push 0x419080
push 0x10
call fcn.00438fa0
add esp, 0xc
push 2
call fcn.00438fa0
add esp, 4
push 0x51e085
push 0x53ddbc
push 0x14
call fcn.00428750
add esp, 0xc
push str.___..._
push 0x53ddd0
push 0x14
call fcn.00428750
add esp, 0xc
mov eax, dword [edi]
mov dword [0x53ddb4], eax
push 1
push 0x407b70
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 0xffffffffffffffff
call fcn.00438fa0
add esp, 4
cmp eax, 0x15
jne 0x406563
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push str.WARNING:_attempt_to_configure_SQLite_after_initialization._n
push eax
call fcn.004014c0
add esp, 8
cmp dword [ebp + 8], 2
jl 0x406a95
mov esi, 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 1
jmp 0x4065b9
lea ebx, [esi + 1]
mov ecx, dword [ebp + 8]
cmp ebx, ecx
je 0x4079eb
inc ebx
mov esi, ebx
cmp ebx, ecx
jge 0x406ac2
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax + esi*4]
cmp byte [ebx], 0x2d
je 0x406610
cmp dword [esp + 0x278], 0
je 0x406604
mov edi, dword [esp + 0x20]
lea eax, [edi*4 + 4]
push eax
push dword [esp + 0x10]
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
add esp, 8
test eax, eax
je 0x407a0b
mov dword [esp + 0xc], eax
mov dword [eax + edi*4], ebx
inc edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], 0
jmp 0x406610
mov dword [esp + 0x278], ebx
nop dword [eax + eax]
lea edi, [ebx + 1]
cmp byte [ebx + 1], 0x2d
cmovne edi, ebx
push str._separator
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4065a0
push str._nullvalue
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4065a0
push str._newline
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4065a0
push str._cmd
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4065a0
push str._init
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406792
push str._batch
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4067b0
push str._heap
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4065a0
push str._pagecache
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4067c1
push str._lookaside
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
mov ebx, dword [ebp + 0xc]
je 0x4068c9
push str._threadsafe
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406930
push str._mmap
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406955
push str._vfs
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40697d
push str._append
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4069b1
push str._deserialize
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406a49
push str._maxsize
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
jne 0x4069bb
lea ebx, [esi + 1]
cmp ebx, dword [ebp + 8]
jge 0x4069bb
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + esi*4 + 4]
call fcn.00407c20
mov dword [esp + 0xcc], edx
mov dword [esp + 0xc8], eax
jmp 0x4069a9
lea ebx, [esi + 1]
mov ecx, dword [ebp + 8]
cmp ebx, ecx
je 0x4079eb
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + esi*4 + 4]
mov dword [esp + 0x10], eax
jmp 0x4065ae
mov dword [0x53c140], 0
mov ebx, esi
jmp 0x4069a9
lea eax, [esi + 1]
mov ecx, dword [ebp + 8]
cmp eax, ecx
mov ebx, dword [ebp + 0xc]
je 0x407a75
mov ecx, dword [ebx + esi*4 + 4]
call fcn.00407c20
cmp eax, 0x11170
mov ecx, 0x11170
cmovb ecx, eax
test edx, edx
mov edi, 0x11170
mov dword [esp + 0x2c], eax
cmovs edi, eax
cmove edi, ecx
mov eax, 0
mov dword [esp + 0x28], edx
cmovs eax, edx
test eax, eax
mov eax, 0
cmovs edi, eax
mov eax, ebx
lea ebx, [esi + 2]
cmp ebx, dword [ebp + 8]
je 0x407a8a
mov ecx, dword [eax + esi*4 + 8]
call fcn.00407c20
mov ecx, eax
mov eax, dword [esp + 0x2c]
cmp eax, 1
mov eax, dword [esp + 0x28]
sbb eax, 0
jl 0x40687c
cmp ecx, 1
mov eax, edx
sbb eax, 0
jl 0x40687c
push 0
push edi
push 0xffff
push 0xffffffffffffffff
mov esi, ecx
mov dword [esp + 0x24], edx
call fcn.0050f870
add esp, 0x10
cmp eax, esi
mov ecx, esi
cmovb ecx, eax
cmp edx, dword [esp + 0x14]
cmovb esi, eax
cmove esi, ecx
mov ecx, esi
mov eax, dword [esp + 0x14]
cmovb eax, edx
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x14]
xor eax, eax
mov esi, ecx
cmp ecx, 1
mov ecx, edx
sbb ecx, 0
jl 0x4068ac
cmp dword [esp + 0x2c], 1
sbb dword [esp + 0x28], 0
jl 0x4068ac
mov eax, esi
imul eax, edi
push eax
mov dword [esp + 0x18], edx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov edx, dword [esp + 0x18]
add esp, 4
push edx
push esi
push 0
push edi
push eax
push 7
call fcn.00438fa0
add esp, 0x18
or byte [esp + 0xbc], 1
jmp 0x4069a9
lea eax, [esi + 1]
mov ecx, dword [ebp + 8]
cmp eax, ecx
je 0x407a75
mov ecx, dword [ebx + esi*4 + 4]
call fcn.00407c20
mov edi, eax
mov eax, ebx
lea ebx, [esi + 2]
cmp ebx, dword [ebp + 8]
je 0x407a8a
test edi, edi
mov ecx, 0
cmovle edi, ecx
mov ecx, dword [eax + esi*4 + 8]
call fcn.00407c20
mov esi, eax
test eax, eax
mov eax, 0
cmovle esi, eax
push esi
push edi
push 0xd
call fcn.00438fa0
add esp, 0xc
imul esi, edi
test esi, esi
jne 0x4069a9
and byte [esp + 0xbc], 0xfd
jmp 0x4069a9
lea ebx, [esi + 1]
cmp ebx, dword [ebp + 8]
je 0x4079eb
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + esi*4 + 4]
call fcn.00407c20
cmp eax, 2
je 0x40699b
test eax, eax
jne 0x40699f
push 1
jmp 0x4069a1
lea ebx, [esi + 1]
cmp ebx, dword [ebp + 8]
je 0x4079eb
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + esi*4 + 4]
call fcn.00407c20
push edx
push eax
push edx
push eax
push 0x16
call fcn.00438fa0
add esp, 0x14
jmp 0x4069a9
lea ebx, [esi + 1]
mov ecx, dword [ebp + 8]
cmp ebx, ecx
je 0x4079eb
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + esi*4 + 4]
mov dword [esp + 0x18], eax
jmp 0x4065ae
push 2
jmp 0x4069a1
push 3
call fcn.00438fa0
add esp, 4
mov ecx, dword [ebp + 8]
jmp 0x4065ae
mov byte [esp + 0x59], 2
jmp 0x4067ba
push str._readonly
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406a53
push str._nofollow
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406a5d
push str._memtrace
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406a6d
push str._bail
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406a86
push str._nonce
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
jne 0x4067ba
push dword [esp + 0x2c0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov eax, dword [ebp + 0xc]
push dword [eax + esi*4 + 4]
inc esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
add esp, 4
mov dword [esp + 0x2c0], eax
jmp 0x4067ba
mov byte [esp + 0x59], 5
jmp 0x4067ba
mov byte [esp + 0x59], 4
jmp 0x4067ba
mov dword [esp + 0x80], 0x1000000
jmp 0x4067ba
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401550
add esp, 4
jmp 0x4067ba
mov dword [0x53ddb8], 1
jmp 0x4067ba
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x18], 0
mov ebx, 1
mov dword [esp + 0x10], 0
push 0xffffffffffffffff
call fcn.00438fa0
add esp, 4
cmp eax, 0x15
jne 0x406aea
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push str.WARNING:_attempt_to_configure_SQLite_after_initialization._n
push eax
call fcn.004014c0
add esp, 8
call fcn.00423a30
mov eax, dword [esp + 0x18]
test eax, eax
je 0x406b13
push eax
call fcn.004239b0
add esp, 4
test eax, eax
je 0x407a4f
push 1
push eax
call fcn.004246d0
add esp, 8
mov eax, dword [esp + 0x2b0]
xor ecx, ecx
cmp dword [eax + 4], 0
jne 0x406b32
mov dword [eax + 4], 0x51cf2a
xor ecx, ecx
cmp dword [ebp + 8], 1
sete cl
mov dword [esp + 0x14], ecx
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov dword [esp + 0x88], eax
push 0
call fcn.004239b0
add esp, 4
test eax, eax
je 0x406b7d
mov ecx, dword [eax]
mov dword [0x53c0e8], ecx
mov dword [0x53c0fc], eax
mov eax, dword [eax + 4]
add eax, 0x18
mov dword [0x53c0ec], eax
push 0
push 0x53c0e8
call fcn.004246d0
add esp, 8
mov eax, dword [esp + 0x2b0]
push 0
push dword [eax + 4]
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
add esp, 8
test eax, eax
jne 0x406ba1
lea ecx, [esp + 0x50]
xor edx, edx
call fcn.00407e40
mov ebx, dword [esp + 0x7c]
mov edi, dword [esp + 0x84]
mov esi, dword [esp + 0x10]
test esi, esi
je 0x406c01
mov dword [esp + 0x18], edi
push 0x51cfd8
push esi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
add esp, 8
mov dword [esp + 0x84], eax
xor edi, edi
test eax, eax
jne 0x406c49
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push esi
push str.cannot_open:___s__n
push eax
call fcn.004014c0
add esp, 0xc
xor edi, edi
cmp dword [0x53ddb8], 0
je 0x406c98
jmp 0x407a6e
xor ecx, ecx
call fcn.00410b30
test eax, eax
je 0x4076c9
mov dword [esp + 0x18], edi
push eax
push str._s_.sqliterc
call fcn.00428600
add esp, 8
test eax, eax
je 0x407a0b
mov edi, eax
push 0x51cfd8
push eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
add esp, 8
mov dword [esp + 0x84], eax
mov dword [esp + 0x10], edi
test eax, eax
je 0x406c98
cmp dword [0x53c140], 0
je 0x406c6f
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push dword [esp + 0x10]
push str.___Loading_resources_from__s_n
push eax
call fcn.004014c0
add esp, 0xc
lea ecx, [esp + 0x50]
call fcn.00410c60
test eax, eax
je 0x406c89
cmp dword [0x53ddb8], 0
jne 0x407a6e
push dword [esp + 0x84]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
add esp, 4
mov eax, dword [esp + 0x18]
mov dword [esp + 0x84], eax
mov dword [esp + 0x7c], ebx
push edi
call fcn.00424f10
add esp, 4
mov dword [esp + 0x10], 0
mov ecx, dword [ebp + 8]
cmp ecx, 2
mov esi, dword [esp + 0xc]
mov ebx, dword [ebp + 0xc]
jl 0x4074a4
lea eax, [ecx - 1]
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0
mov edi, 1
jmp 0x406cff
inc edi
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x94]
mov dword [esp + 0x9c], eax
inc edi
cmp edi, ecx
jge 0x4074a4
mov eax, dword [ebx + edi*4]
cmp byte [eax], 0x2d
jne 0x406cf6
lea ebx, [eax + 1]
cmp byte [eax + 1], 0x2d
cmovne ebx, eax
push str._init
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406ce1
push str._html
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406e72
push str._list
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406e82
push str._quote
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406e92
push str._line
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406ed0
push str._column
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406ee0
push str._json
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406ef0
push str._markdown
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406f00
push str._table
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406f10
push str._box
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406f20
push str._csv
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406f30
push str._append
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x406f4a
push str._deserialize
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4071fc
push str._maxsize
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
jne 0x406f54
lea esi, [edi + 1]
cmp esi, dword [ebp + 8]
jge 0x406f54
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebx + edi*4 + 4]
call fcn.00407c20
mov dword [esp + 0xcc], edx
mov dword [esp + 0xc8], eax
mov edi, esi
mov esi, dword [esp + 0xc]
jmp 0x406ce5
mov dword [esp + 0x94], 4
jmp 0x406ce2
mov dword [esp + 0x94], 2
jmp 0x406ce2
mov dword [esp + 0x94], 6
push 0x51d1e9
lea eax, [esp + 0xfa]
push eax
push 0x14
call fcn.00428750
add esp, 0xc
push 0x51d1eb
lea eax, [esp + 0x10e]
push eax
push 0x14
call fcn.00428750
add esp, 0xc
jmp 0x406ce2
mov dword [esp + 0x94], 0
jmp 0x406ce2
mov dword [esp + 0x94], 1
jmp 0x406ce2
mov dword [esp + 0x94], 0xd
jmp 0x406ce2
mov dword [esp + 0x94], 0xe
jmp 0x406ce2
mov dword [esp + 0x94], 0xf
jmp 0x406ce2
mov dword [esp + 0x94], 0x10
jmp 0x406ce2
mov dword [esp + 0x94], 8
mov word [esp + 0xf6], 0x2c
jmp 0x406ce2
mov byte [esp + 0x59], 2
jmp 0x406ce2
push str._readonly
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407206
push str._nofollow
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
mov esi, dword [esp + 0xc]
je 0x407214
push str._ascii
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407221
push str._tabs
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40724d
push str._separator
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407262
push str._newline
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407283
push str._nullvalue
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4072a4
push str._header
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4072d6
push str._noheader
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4072ee
push str._echo
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407306
push str._eqp
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407313
push str._eqpfull
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40731d
push str._stats
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40732b
push str._scanstats
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40733c
push str._backslash
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40734a
push str._bail
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4073eb
push str._version
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407aa2
push str._interactive
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40735b
push str._batch
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40736e
push str._heap
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40738d
push str._pagecache
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407381
push str._lookaside
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407381
push str._threadsafe
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407381
push str._nonce
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407381
push str._mmap
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40738d
push str._memtrace
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40738d
push str._vfs
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40738d
push str._help
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407b12
push str._cmd
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407397
push str._safe
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
jne 0x407aca
mov word [esp + 0x5d], 0x101
mov esi, dword [esp + 0xc]
jmp 0x406ce2
mov byte [esp + 0x59], 5
jmp 0x406ce2
mov byte [esp + 0x59], 4
mov esi, dword [esp + 0xc]
jmp 0x406ce2
or byte [esp + 0x83], 1
jmp 0x406ce2
mov dword [esp + 0x94], 0xa
push 0x51d223
lea eax, [esp + 0xfa]
push eax
push 0x14
call fcn.00428750
add esp, 0xc
push 0x51d225
jmp 0x406eb9
mov dword [esp + 0x94], 2
push 0x51d22d
jmp 0x406ea2
inc edi
mov ecx, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edx, ebx
push edi
call fcn.00407be0
add esp, 4
push eax
push 0x51d22f
lea eax, [esp + 0xfe]
jmp 0x4072c3
inc edi
mov ecx, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edx, ebx
push edi
call fcn.00407be0
add esp, 4
push eax
push 0x51d22f
lea eax, [esp + 0x112]
jmp 0x4072c3
inc edi
mov ecx, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edx, ebx
push edi
call fcn.00407be0
add esp, 4
push eax
push 0x51d22f
lea eax, [esp + 0x15c]
push eax
push 0x14
call fcn.00428750
mov ecx, dword [ebp + 8]
add esp, 0x10
jmp 0x406ce8
mov dword [esp + 0xa8], 1
or byte [esp + 0xbc], 0x80
jmp 0x406ce2
mov dword [esp + 0xa8], 0
or byte [esp + 0xbc], 0x80
jmp 0x406ce2
or byte [esp + 0xbc], 0x40
jmp 0x406ce2
mov byte [esp + 0x55], 1
jmp 0x406ce2
mov byte [esp + 0x55], 3
mov esi, dword [esp + 0xc]
jmp 0x406ce2
mov dword [esp + 0x68], 1
mov esi, dword [esp + 0xc]
jmp 0x406ce2
mov byte [esp + 0x58], 1
mov esi, dword [esp + 0xc]
jmp 0x406ce2
or byte [esp + 0xbc], 4
mov esi, dword [esp + 0xc]
jmp 0x406ce2
mov dword [0x53c140], 1
mov esi, dword [esp + 0xc]
jmp 0x406ce2
mov dword [0x53c140], 0
mov esi, dword [esp + 0xc]
jmp 0x406ce2
add edi, 2
mov esi, dword [esp + 0xc]
jmp 0x406ce2
inc edi
mov esi, dword [esp + 0xc]
jmp 0x406ce2
cmp edi, dword [esp + 0x18]
mov esi, dword [esp + 0xc]
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
je 0x4074a4
inc edi
push edi
call fcn.00407be0
add esp, 4
mov ebx, eax
cmp byte [eax], 0x2e
jne 0x4073f4
mov ecx, ebx
lea edx, [esp + 0x50]
call fcn.00408790
mov dword [esp + 0x10], eax
test eax, eax
je 0x4073eb
cmp dword [0x53ddb8], 0
mov esi, dword [esp + 0xc]
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
je 0x406ce8
jmp 0x407b17
mov esi, dword [esp + 0xc]
jmp 0x406ce2
lea esi, [esp + 0x50]
mov ecx, esi
xor edx, edx
call fcn.00407e40
mov ecx, esi
mov edx, ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00410460
add esp, 4
mov dword [esp + 0x10], eax
cmp dword [esp + 0x1c], 0
je 0x407456
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push dword [esp + 0x1c]
push str.Error:__s_n
push eax
call fcn.004014c0
add esp, 0xc
cmp dword [0x53ddb8], 0
mov esi, dword [esp + 0xc]
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
je 0x406ce8
jmp 0x407b22
cmp dword [esp + 0x10], 0
je 0x407493
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebx
push str.Error:_unable_to_process_SQL___s__n
push eax
call fcn.004014c0
add esp, 0xc
cmp dword [0x53ddb8], 0
mov esi, dword [esp + 0xc]
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
je 0x406ce8
jmp 0x40798e
mov dword [esp + 0x10], 0
mov esi, dword [esp + 0xc]
jmp 0x406ce2
cmp dword [esp + 0x24], 0
je 0x407598
cmp dword [0x53c140], 0
je 0x407633
call fcn.00438c00
mov edi, eax
call fcn.0043f180
push eax
push edi
push str.SQLite_version__s__.19s_nEnter__.help__for_usage_hints._n
call fcn.00408710
add esp, 0xc
cmp dword [esp + 0x14], 0
je 0x407552
push str.Connected_to_a
call fcn.00408710
add esp, 4
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, eax
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x30], xmm0
mov dword [esp + 0x42], 0xffffffff
mov dword [esp + 0x3e], 0xffffffff
lea eax, [esp + 0x30]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 0xc
push edi
call esi
push str.transient_in_memory_database
push 0x51d22f
call fcn.00408710
add esp, 8
movzx eax, word [esp + 0x38]
push eax
push edi
call esi
mov esi, dword [esp + 0xc]
push str.._nUse__.open_FILENAME__to_reopen_on_a_persistent_database.
call sub.api_ms_win_crt_stdio_l1_1_0.dll_puts
add esp, 4
push str.SQLITE_HISTORY
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
add esp, 4
test eax, eax
je 0x407657
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
add esp, 4
mov edi, eax
mov dword [esp + 0x84], 0
lea ecx, [esp + 0x50]
call fcn.00410c60
mov dword [esp + 0x10], eax
test edi, edi
jne 0x4076be
jmp 0x407711
cmp dword [esp + 0x20], 0
jle 0x407711
xor esi, esi
jmp 0x4075cc
lea edx, [esp + 0x50]
call fcn.00408790
test eax, eax
jne 0x40799a
inc esi
cmp dword [esp + 0x20], esi
je 0x4076eb
mov edi, dword [esp + 0xc]
mov ecx, dword [edi + esi*4]
cmp byte [ecx], 0x2e
je 0x4075b0
lea ebx, [esp + 0x50]
mov ecx, ebx
xor edx, edx
call fcn.00407e40
mov edx, dword [edi + esi*4]
mov ecx, ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00410460
add esp, 4
mov ebx, eax
mov edi, dword [esp + 0x1c]
test edi, edi
jne 0x407605
test ebx, ebx
je 0x4075c1
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
test edi, edi
je 0x4079af
push dword [esp + 0x1c]
push str.Error:__s_n
push eax
call fcn.004014c0
add esp, 0xc
mov esi, dword [esp + 0xc]
jmp 0x4079c6
push 0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov dword [esp + 0x84], eax
lea ecx, [esp + 0x50]
call fcn.00410c60
mov dword [esp + 0x10], eax
jmp 0x407711
xor ecx, ecx
call fcn.00410b30
test eax, eax
je 0x4076f5
mov ebx, eax
mov esi, 0xffffffff
nop dword [eax]
cmp byte [ebx + esi + 1], 0
lea esi, [esi + 1]
jne 0x407670
and esi, 0x3fffffff
add esi, 0x14
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4076f5
mov edi, eax
push ebx
push str._s_.sqlite_history
push eax
push esi
call fcn.00428750
add esp, 0x10
mov dword [esp + 0x84], 0
lea ecx, [esp + 0x50]
call fcn.00410c60
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
push edi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
jmp 0x407711
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x40
push str.___warning:_cannot_find_home_directory__cannot_read__.sqliterc_n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x406cb0
mov dword [esp + 0x10], 0
jmp 0x40770d
mov dword [esp + 0x84], 0
lea ecx, [esp + 0x50]
call fcn.00410c60
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x407739
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov dword [esp + 0xd0], 0
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x407776
push ebx
call fcn.00439d60
add esp, 4
test eax, eax
je 0x407776
mov esi, eax
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edi, eax
push ebx
call fcn.004362c0
add esp, 4
push eax
push esi
push str.Error:_sqlite3_close___returns__d:__s_n
push edi
call fcn.004014c0
add esp, 0x10
push dword [esp + 0x27c]
call fcn.00424f10
add esp, 4
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x4077c5
push ebx
call fcn.00439d60
add esp, 4
test eax, eax
je 0x4077c5
mov esi, eax
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edi, eax
push ebx
call fcn.004362c0
add esp, 4
push eax
push esi
push str.Error:_sqlite3_close___returns__d:__s_n
push edi
call fcn.004014c0
add esp, 0x10
push dword [esp + 0x288]
call fcn.00424f10
add esp, 4
mov ebx, dword [esp + 0x280]
test ebx, ebx
je 0x407814
push ebx
call fcn.00439d60
add esp, 4
test eax, eax
je 0x407814
mov esi, eax
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edi, eax
push ebx
call fcn.004362c0
add esp, 4
push eax
push esi
push str.Error:_sqlite3_close___returns__d:__s_n
push edi
call fcn.004014c0
add esp, 0x10
push dword [esp + 0x294]
call fcn.00424f10
add esp, 4
mov ebx, dword [esp + 0x28c]
test ebx, ebx
je 0x407863
push ebx
call fcn.00439d60
add esp, 4
test eax, eax
je 0x407863
mov esi, eax
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edi, eax
push ebx
call fcn.004362c0
add esp, 4
push eax
push esi
push str.Error:_sqlite3_close___returns__d:__s_n
push edi
call fcn.004014c0
add esp, 0x10
push dword [esp + 0x2a0]
call fcn.00424f10
add esp, 4
mov ebx, dword [esp + 0x298]
test ebx, ebx
je 0x4078b2
push ebx
call fcn.00439d60
add esp, 4
test eax, eax
je 0x4078b2
mov esi, eax
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edi, eax
push ebx
call fcn.004362c0
add esp, 4
push eax
push esi
push str.Error:_sqlite3_close___returns__d:__s_n
push edi
call fcn.004014c0
add esp, 0x10
push dword [esp + 0x2ac]
call fcn.00424f10
add esp, 4
mov ebx, dword [esp + 0x2a4]
test ebx, ebx
je 0x407901
push ebx
call fcn.00439d60
add esp, 4
test eax, eax
je 0x407901
mov esi, eax
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edi, eax
push ebx
call fcn.004362c0
add esp, 4
push eax
push esi
push str.Error:_sqlite3_close___returns__d:__s_n
push edi
call fcn.004014c0
add esp, 0x10
push dword [0x53de08]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov dword [0x53de08], 0
lea ecx, [esp + 0x50]
call fcn.00411380
mov byte [esp + 0x5a], 0
mov eax, dword [esp + 0xd4]
test eax, eax
je 0x407970
push eax
call fcn.00428f90
add esp, 4
mov esi, eax
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wunlink]
add esp, 4
mov edi, eax
push esi
call fcn.00424f10
add esp, 4
test edi, edi
jne 0x407970
push dword [esp + 0xd4]
call fcn.00424f10
add esp, 4
mov dword [esp + 0xd4], 0
push dword [esp + 0x148]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
push dword [esp + 0x2c0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov eax, dword [esp + 0x10]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ebx, eax
push dword [esp + 0xc]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
xor eax, eax
cmp ebx, 2
jmp 0x4079e2
mov ecx, dword [esp + 0xc]
push dword [ecx + esi*4]
mov esi, ecx
push str.Error:_unable_to_process_SQL:__s_n
push eax
call fcn.004014c0
add esp, 0xc
push dword [esp + 0x1c]
call fcn.00424f10
add esp, 4
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
test ebx, ebx
mov eax, 1
cmovne eax, ebx
mov dword [esp + 0x10], eax
jmp 0x40798e
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov ecx, dword [ebp + 0xc]
push dword [ecx + esi*4]
push dword [ecx]
push str._s:_Error:_missing_argument_to__s_n
push eax
call fcn.004014c0
jmp 0x407a25
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x15
push str.Error:_out_of_memory_n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov esi, eax
call fcn.0043f180
push 0x51d08a
push eax
push str.SQLite_header_and_source_version_mismatch_n_s_n_s_n
push esi
jmp 0x407a04
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov ecx, dword [ebp + 0xc]
push dword [ecx + ebx*4]
push str.no_such_VFS:___s__n
push eax
call fcn.004014c0
add esp, 0xc
push 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push dword [ebx + esi*4]
push dword [ebx]
jmp 0x4079fe
push 2
mov edi, eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push dword [edi + esi*4 + 4]
push dword [edi]
jmp 0x4079fe
call fcn.00438c00
mov esi, eax
call fcn.0043f180
push eax
push esi
push str._s__s_n
call fcn.00408710
add esp, 0xc
mov dword [esp + 0x10], 0
jmp 0x40798e
push 2
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
call esi
add esp, 4
push ebx
push dword [0x53ddb4]
push str._s:_Error:_unknown_option:__s_n
push eax
call fcn.004014c0
add esp, 0x10
push 2
call esi
add esp, 4
push eax
push 1
push 0x21
push str.Use__help_for_a_list_of_options._n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov dword [esp + 0x10], 1
jmp 0x40798e
call fcn.00408740
xor eax, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 2
jmp 0x407b2d
mov ecx, dword [esp + 0x10]
test ecx, ecx
mov eax, 1
cmove ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x40798e