Pasted

SELECT * FROM functions WHERE name LIKE '%KERNEL32%'
;
 
attach "mpengine.sqlite" AS diff;
 
SELECT COUNT(*) FROM diff.functions; -- 33614
 
SELECT COUNT(*) FROM functions; -- 34146
 
SELECT f.address ea, f.name name1
 FROM functions f,
      diff.functions df,
      (SELECT md_index
     FROM diff.functions
    WHERE md_index != 0
    GROUP BY md_index
       HAVING COUNT(*) <= 2
    UNION 
       SELECT md_index
     FROM main.functions
    WHERE md_index != 0
    GROUP BY md_index
       HAVING COUNT(*) <= 2
      ) shared_mds
WHERE f.md_index = df.md_index
  AND df.md_index = shared_mds.md_index
  AND f.nodes > 10
  AND f.name LIKE 'KERNEL%'
;