Function at 0x140106060
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1403ad830]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rdi, qword [rsp + 0xb0]
xor r14d, r14d
mov rcx, qword [rsp + 0xb8]
mov bpl, 0x20
mov dword [r9], r14d
mov rsi, r9
mov rbx, r8
mov byte [rsp + 0x20], 0x20
mov dword [rdi], r14d
mov r15, rdx
movzx eax, byte [r8]
movzx r12d, bpl
movzx r13d, bpl
mov r9d, r14d
cmp al, bpl
je 0x1401060d4
test al, al
je 0x1401060d4
inc rbx
mov byte [rcx], al
inc rcx
movzx eax, byte [rbx]
cmp al, 0x20
jne 0x1401060c1
mov byte [rcx], r9b
cmp byte [rbx], 0x20
jne 0x1401060ef
mov al, 0x20
nop
test al, al
je 0x1401060ef
movzx eax, byte [rbx + 1]
inc rbx
cmp al, 0x20
je 0x1401060e0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r9b
jne 0x1401060f6
cmp rax, 3
jb 0x140106148
movsx ecx, byte [rbx]
call fcn.14029e36c
movsx ecx, byte [rbx + 1]
mov dword [rsp + 0x20], eax
call fcn.14029e36c
movsx ecx, byte [rbx + 2]
mov ebp, eax
call fcn.14029e36c
movsx ecx, byte [rbx + 3]
mov r12d, eax
call fcn.14029e36c
mov r8d, dword [rsp + 0x20]
mov r13d, eax
cmp r8b, 0x43
jne 0x140106175
cmp bpl, 0x48
je 0x14010618f
mov r9d, r14d
movsx ecx, byte [rsp + 0x20]
mov r8d, 1
add ecx, 0xffffffbe
cmp ecx, 0x14
ja case.0x140106173.69
lea rax, [0x140000000]
movsxd rcx, ecx
mov edx, dword [rax + rcx*4 + 0x106458]
add rdx, rax
jmp rdx
cmp r8b, 0x52
jne 0x140106145
cmp bpl, 0x41
jne 0x140106145
cmp r12b, 0x57
jne 0x140106145
cmp al, 0x5b
je 0x14010618f
cmp al, 0x28
jne 0x140106145
movzx eax, byte [rbx]
lea rcx, [rsp + 0x28]
cmp al, 0x5b
je 0x1401061b3
nop dword [rax + rax]
cmp al, 0x28
je 0x1401061b3
test al, al
je 0x1401061b3
movzx eax, byte [rbx + 1]
inc rbx
cmp al, 0x5b
jne 0x1401061a0
movzx eax, byte [rbx + 1]
inc rbx
cmp al, 0x5d
je 0x1401061d7
nop
cmp al, 0x29
je 0x1401061d7
test al, al
je 0x1401061d7
inc rbx
mov byte [rcx], al
inc rcx
movzx eax, byte [rbx]
cmp al, 0x5d
jne 0x1401061c0
mov byte [rcx], r14b
lea rcx, [rsp + 0x28]
call fcn.140299b04
mov r9d, eax
jmp 0x140106148
cmp bpl, 0x4c
jne 0x14010620c
mov dword [rsi], reloc.ODBC32.dll_SQLExecute
test r15, r15
je 0x140106201
mov r14d, dword [r15 + 0x38]
mov dword [rdi], r14d
mov eax, r8d
jmp 0x140106433
cmp bpl, 0x46
jne 0x140106226
mov dword [rsi], SQLFreeHandle
mov eax, r8d
mov dword [rdi], 4
jmp 0x140106433
cmp bpl, 0x44
jne 0x140106240
mov dword [rsi], reloc.ODBC32.dll_SQLEndTran
mov eax, r8d
mov dword [rdi], 8
jmp 0x140106433
cmp bpl, 0x49
jne 0x140106204
mov dword [rsi], reloc.ODBC32.dll_SQLRowCount
mov eax, r8d
mov dword [rdi], 8
jmp 0x140106433
cmp bpl, 0x48
jne 0x14010626e
mov dword [rsi], r8d
mov eax, r8d
mov dword [rdi], r9d
jmp 0x140106433
cmp bpl, 0x4c
jne 0x14010627f
mov dword [rsi], reloc.WS2_32.dll_inet_addr
jmp 0x1401061f8
mov r8d, r14d
mov eax, r14d
jmp 0x140106433
cmp bpl, 0x4f
jne 0x1401062a4
mov dword [rsi], 2
mov eax, r8d
mov dword [rdi], 8
jmp 0x140106433
cmp bpl, 0x42
jne 0x14010627f
cmp r12b, 0x32
jne 0x14010627f
cmp r13b, 0x54
jne 0x1401062ca
mov dword [rsi], reloc.ODBC32.dll_SQLFreeStmt
mov eax, r8d
mov dword [rdi], reloc.ODBC32.dll_SQLFreeStmt
jmp 0x140106433
cmp r13b, 0x44
jne 0x14010627f
mov dword [rsi], reloc.WS2_32.dll_recvfrom
mov eax, r8d
mov dword [rdi], reloc.ODBC32.dll_SQLFreeStmt
jmp 0x140106433
mov dword [rsi], 3
mov eax, r8d
mov dword [rdi], 4
jmp 0x140106433
mov dword [rsi], 4
mov eax, r8d
mov dword [rdi], 4
jmp 0x140106433
cmp bpl, 0x4e
jne 0x140106204
mov dword [rsi], 5
mov eax, r8d
mov dword [rdi], 4
jmp 0x140106433
cmp bpl, 0x45
jne 0x14010634b
cmp r12b, 0x46
jne 0x140106204
mov dword [rsi], reloc.WS2_32.dll_listen
mov eax, r8d
mov dword [rdi], r8d
jmp 0x140106433
cmp bpl, 0x41
jne 0x140106204
cmp r12b, 0x57
jne 0x140106204
cmp r13b, 0x5f
je 0x140106376
mov dword [rsi], reloc.WS2_32.dll_socket
mov eax, r8d
mov dword [rdi], r9d
jmp 0x140106433
mov dword [rsi], 0xa
jmp 0x14010641d
mov dword [rsi], 6
mov eax, r8d
mov dword [rdi], 2
jmp 0x140106433
cmp bpl, 0x4f
jne 0x1401063b6
cmp r12b, 0x4e
jne 0x14010627f
mov dword [rsi], 7
mov eax, r8d
mov dword [rdi], 4
jmp 0x140106433
cmp bpl, 0x54
jne 0x14010627f
cmp r12b, 0x5a
jne 0x14010627f
mov dword [rsi], reloc.WS2_32.dll_send
mov eax, r8d
mov dword [rdi], reloc.ODBC32.dll_SQLFreeStmt
jmp 0x140106433
cmp bpl, 0x5a
jne 0x1401063f2
mov dword [rsi], reloc.ODBC32.dll_SQLNumResultCols
mov eax, r8d
mov dword [rdi], reloc.ODBC32.dll_SQLFreeStmt
jmp 0x140106433
cmp bpl, 0x49
jne 0x14010627f
cmp r12b, 0x4d
jne 0x14010627f
mov dword [rsi], 8
mov eax, r8d
mov dword [rdi], reloc.ODBC32.dll_SQLFreeStmt
jmp 0x140106433
mov dword [rsi], 9
test r15, r15
je 0x140106201
mov eax, dword [r15 + 0x38]
mov dword [rdi], eax
mov eax, r8d
jmp 0x140106433
xor eax, eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140283120
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret