Function at 0x140153b20
Capabilities:
Query environment variable
Reference sql statements

Disassembly:
push rdi
mov eax, 0x13d0
call fcn.140289b90
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + Ordinal_5100], rbx
mov qword [rsp + 0x13f0], rsi
mov rax, qword [0x140462840]
xor rax, rsp
mov qword [rsp + 0x13c0], rax
mov rdi, rcx
xor bl, bl
mov byte [rsp + 0x40], bl
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0xfc0]
call sub.MSVCR120.dll_memset
movaps xmm0, xmmword [str.SELECT_data_value_FROM_data_WHERE_entry_key__local_sync_root_path_]
movaps xmmword [rsp + 0xb50], xmm0
movaps xmm1, xmmword [0x140322440]
movaps xmmword [rsp + 0xb60], xmm1
movaps xmm0, xmmword [0x140322450]
movaps xmmword [rsp + 0xb70], xmm0
movaps xmm1, xmmword [0x140322460]
movaps xmmword [rsp + 0xb80], xmm1
mov eax, dword [0x140322470]
mov dword [rsp + 0xb90], eax
movzx eax, word [0x140322474]
mov word [rsp + 0xb94], ax
mov r8d, 0x20a
lea rdx, [rsp + 0xfc0]
lea rcx, str.LOCALAPPDATA
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0xdb0]
call sub.MSVCR120.dll_memset
lea rdx, str.GoogleDriveuser_default_sync_config.db
lea rcx, [rsp + 0xdb0]
call qword [sym.imp.MSVCR120.dll__swprintf]
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0xba0]
call sub.MSVCR120.dll_memset
lea rdx, [rsp + 0xfc0]
lea rcx, [rsp + 0xba0]
call qword [sym.imp.MSVCR120.dll__swprintf]
lea rdx, [rsp + 0xdb0]
lea rcx, [rsp + 0xba0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
cmp eax, 1
jne 0x140153e4e
lea rdx, [rsp + 0xba0]
lea rcx, [rsp + 0x110]
call fcn.14018e4e0
nop
lea rcx, [rsp + 0x110]
call fcn.14018fa30
test al, al
jne 0x140153d53
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0xba0]
call sub.MSVCR120.dll_memset
lea rdx, [rsp + 0xfc0]
lea rcx, [rsp + 0xba0]
call qword [sym.imp.MSVCR120.dll__swprintf]
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0xdb0]
call sub.MSVCR120.dll_memset
lea rdx, str.GoogleDrive_sync_config.db
lea rcx, [rsp + 0xdb0]
call qword [sym.imp.MSVCR120.dll__swprintf]
lea rdx, [rsp + 0xdb0]
lea rcx, [rsp + 0xba0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
setne sil
lea rdx, [rsp + 0xba0]
lea rcx, [rsp + 0x630]
call fcn.14018e4e0
nop
lea rcx, [rsp + 0x630]
call fcn.14018fa30
nop
lea rcx, [rsp + 0x630]
test al, al
jne 0x140153d45
call fcn.14018e600
nop
lea rcx, [rsp + 0x110]
call fcn.14018e600
xor al, al
jmp 0x140153e63
call fcn.14018e600
test sil, sil
je 0x140153e41
lea rax, [rsp + 0x88]
mov qword [rsp + 0x80], rax
mov r8d, 3
lea rdx, [rsp + 0xba0]
lea rcx, [rsp + 0x80]
call fcn.140002910
xor r9d, r9d
lea r8d, [r9 + 1]
lea rdx, [rsp + 0x58]
mov rcx, qword [rsp + 0x80]
call fcn.14000f260
mov esi, eax
lea rax, [rsp + 0x88]
mov rcx, qword [rsp + 0x80]
cmp rcx, rax
je 0x140153db4
call qword [sym.imp.MSVCR120.dll_free]
test esi, esi
je 0x140153dcc
lea rcx, [rsp + 0x110]
call fcn.14018e600
xor al, al
jmp 0x140153e63
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x48]
or r8d, 0xffffffff
lea rdx, [rsp + 0xb50]
mov rcx, qword [rsp + 0x58]
call fcn.140010ce0
test eax, eax
jne 0x140153e41
mov rcx, qword [rsp + 0x48]
call fcn.1400030e0
cmp eax, 0x64
jne 0x140153e36
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.140003df0
test rax, rax
je 0x140153e36
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_1500]
lea rdx, [0x140322538]
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_13891]
mov bl, 1
mov byte [rsp + 0x40], bl
mov rcx, qword [rsp + 0x48]
call fcn.140004390
nop
lea rcx, [rsp + 0x110]
call fcn.14018e600
mov rcx, qword [rsp + 0x58]
call fcn.140009430
nop
jmp 0x140153e60
movzx eax, bl
mov rcx, qword [rsp + 0x13c0]
xor rcx, rsp
call fcn.140289bf0
lea r11, [rsp + 0x13d0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret