Skip to content

Database Queries

Krys Kamieniecki edited this page Jun 17, 2020 · 4 revisions

The database engine is sqlite3. The file is located in the project work directory under db and is named "core.db". All standard sqlite3 tools will work with it.

One program that has been tested is DB Browser for SQLite

Examples

Find all strings that deca found that contain the sub-string "flash"

SELECT string FROM core_strings WHERE string LIKE "%flash%"

Find all files that reference strings that contains the sub-string "flash"

SELECT v_path FROM core_nodes WHERE node_id IN 
    (SELECT node_id_src FROM core_string_references WHERE string_rowid IN 
        (SELECT rowid FROM core_strings WHERE string LIKE "%flash%"))

This finds all files that reference strings that contains the sub-string "flash" (possible by hash value only)

It does this by:

  1. Finding all the core_strings records that contain flash
  2. Finding all the core_string_references records that link/reference to those strings
  3. Find all the core_nodes records that link to those string references
  4. Return the file/node virtual paths