Function at 0x100526d0
Capabilities:
Hash data using djb2
Resolve function by parsing pe exports
Terminate process

Disassembly:
sub esp, 0x38
mov eax, dword [sym.php5.dll_compiler_globals]
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov edi, edx
mov dword [esp + 0x20], ebp
test eax, eax
jle 0x10052b6c
mov esi, dword [0x10668f08]
mov esi, dword [esi + eax*4 - 4]
mov eax, dword [edi + 0x18]
test al, 2
jne 0x10375ec0
cmp eax, 8
je 0x10375ec0
mov edx, dword [0x10668f98]
mov eax, dword [0x10668f94]
mov ecx, dword [edx + 0x34]
xorps xmm0, xmm0
movq qword [esp + 0x3c], xmm0
mov dword [esp + 0x40], eax
mov eax, ecx
shl eax, 4
mov ebx, 0xfffffff0
sub ebx, eax
lea eax, [ecx + 1]
mov dword [edx + 0x34], eax
cmp dword [edi], 1
mov al, byte [edi]
mov dword [esp + 0x44], 0
movq qword [esp + 0x34], xmm0
movq qword [esp + 0x2c], xmm0
mov byte [esp + 0x44], 0x54
mov byte [esp + 0x47], 4
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x45], al
je 0x10375f2b
mov eax, dword [edi + 8]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x30], eax
cmp dword [edi], 1
mov al, byte [edi]
mov byte [esp + 0x4c], al
mov byte [esp + 0x46], al
jne 0x100528ea
mov ecx, dword [0x10668f98]
mov dword [esp + 0x14], ecx
mov edx, dword [ecx + 0x78]
mov dword [esp + 0x18], edx
lea eax, [edx + 1]
mov dword [ecx + 0x78], eax
cmp edx, dword [0x10669094]
jge 0x10052904
mov eax, ecx
mov cl, byte [edi + 0x14]
cmp cl, 6
jne 0x100528f6
mov eax, dword [edi + 0xc]
push 1
inc eax
push eax
push dword [edi + 8]
call dword [sym.php5.dll_zend_new_interned_string]
mov edx, dword [esp + 0x24]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x20]
add esp, 0xc
mov eax, dword [eax + 0x74]
movq xmm0, qword [edi + 8]
lea ecx, [edx + edx*2]
movq qword [eax + ecx*8], xmm0
movq xmm0, qword [edi + 0x10]
mov edi, dword [esp + 0x14]
movq qword [eax + ecx*8 + 8], xmm0
mov eax, dword [edi + 0x74]
mov dword [eax + ecx*8 + 8], 2
mov eax, dword [edi + 0x74]
mov byte [eax + ecx*8 + 0xd], 1
mov eax, dword [edi + 0x74]
mov dword [eax + ecx*8 + 0x10], 0
mov eax, dword [edi + 0x74]
mov dword [eax + ecx*8 + 0x14], 0xffffffff
mov al, byte [esp + 0x4c]
mov dword [esp + 0x34], edx
cmp al, 1
jne 0x10052887
mov eax, dword [0x10668f98]
lea ecx, [edx + edx*2]
mov edi, dword [eax + 0x74]
shl ecx, 3
add edi, ecx
mov dword [esp + 0x24], ecx
cmp byte [edi + 0xc], 6
mov dword [esp + 0x28], edi
jne 0x10052887
mov eax, dword [edi]
mov edx, eax
cmp byte [edx], 0x2d
je 0x10052b66
mov cl, byte [edx]
cmp cl, 0x39
jle 0x1005294e
mov ecx, dword [edi]
mov dword [esp + 0x4c], ecx
cmp ecx, dword [0x106690c0]
jae 0x100529d8
cmp ecx, dword [0x106690bc]
jb 0x100529d8
mov edx, dword [ecx - 0x24]
mov dword [edi + 0x10], edx
mov dword [ebp], 4
mov dword [ebp + 8], ebx
mov dword [ebp + 0x18], 0
mov eax, dword [esi + 0xc]
add eax, 0xb
cmp byte [esi + 0x14], 0
push eax
jne 0x10375f73
call sym.php5.dll__emalloc
add esp, 4
mov ecx, eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov dword [ecx], 0
mov eax, dword [esi + 4]
test eax, eax
jne 0x100528f2
mov dword [esi], ecx
push dword [esi + 0xc]
lea eax, [esp + 0x30]
push eax
lea eax, [ecx + 8]
push eax
mov dword [esi + 4], ecx
call sub.MSVCR110.dll_memcpy
add esp, 0xc
inc dword [esi + 8]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret
mov edx, dword [edi + 8]
jmp 0x10052825
mov dword [eax], ecx
jmp 0x100528c8
cmp cl, 8
jne 0x100527d9
jmp 0x100527bb
mov eax, edx
mov edx, dword [0x10669094]
sub eax, edx
and eax, 0xfffffff0
add edx, 0x10
add eax, edx
mov dword [0x10669094], eax
mov edx, dword [ecx + 0x74]
mov ecx, dword [0x10660270]
lea eax, [eax + eax*2]
shl eax, 3
cmp dword [ecx], 0
push eax
je 0x10375f3e
call fcn.1000d2d0
add esp, 4
mov edx, dword [esp + 0x18]
mov ecx, eax
mov eax, dword [esp + 0x14]
mov dword [eax + 0x74], ecx
jmp 0x100527af
cmp cl, 0x30
jl 0x10052863
mov ebp, dword [edi + 4]
add ebp, eax
mov dword [esp + 0x14], ebp
cmp byte [ebp], 0
mov ebp, dword [esp + 0x20]
jne 0x10052863
cmp cl, 0x30
je 0x10052af2
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x4c], ebx
sub dword [esp + 0x4c], edx
cmp dword [esp + 0x4c], 0xa
mov ebx, dword [esp + 0x1c]
jg 0x10052863
je 0x10375f4c
movsx ecx, cl
sub ecx, 0x30
inc edx
mov dword [esp + 0x18], ecx
cmp edx, dword [esp + 0x14]
je 0x10052b27
mov eax, dword [esp + 0x14]
mov bl, byte [edx]
mov byte [esp + 0x4c], bl
cmp bl, 0x30
mov ebx, dword [esp + 0x1c]
jl 0x100529cb
cmp byte [esp + 0x4c], 0x39
jle 0x10052b06
cmp edx, eax
jne 0x10052863
jmp 0x10052b25
mov eax, dword [edi + 4]
inc eax
mov dword [esp + 0x18], eax
mov edx, 0x1505
cmp eax, 8
jb switch.0x10052a8c
mov edi, dword [esp + 0x4c]
mov ebp, eax
shr eax, 3
mov dword [esp + 0x24], eax
mov ebx, eax
lea ecx, [ecx]
movsx eax, byte [edi]
mov ecx, edx
shl ecx, 5
add ecx, edx
add ecx, eax
movsx eax, byte [edi + 1]
mov edx, ecx
shl edx, 5
add edx, ecx
add edx, eax
movsx eax, byte [edi + 2]
mov ecx, edx
shl ecx, 5
add ecx, edx
add ecx, eax
movsx eax, byte [edi + 3]
mov edx, ecx
shl edx, 5
add edx, ecx
add edx, eax
movsx eax, byte [edi + 4]
mov ecx, edx
shl ecx, 5
add ecx, edx
add ecx, eax
movsx eax, byte [edi + 5]
mov edx, ecx
shl edx, 5
add edx, ecx
add edx, eax
movsx eax, byte [edi + 6]
mov ecx, edx
shl ecx, 5
add ecx, edx
add ecx, eax
movsx eax, byte [edi + 7]
mov edx, ecx
shl edx, 5
add edx, ecx
add edx, eax
add edi, 8
sub ebp, 8
dec ebx
jne 0x10052a00
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x4c], edi
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x4c]
jmp dword [eax*4 + 0x10052b74]
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shl edx, 5
add edx, eax
movsx eax, byte [ecx]
add edx, eax
jmp 0x10052884
mov eax, dword [edi + 4]
inc eax
cmp eax, 2
jg 0x10052863
mov eax, dword [edi]
jmp 0x10052977
movsx eax, byte [esp + 0x4c]
lea ecx, [ecx + ecx*4]
inc edx
lea ecx, [ecx - 0x18]
lea ecx, [eax + ecx*2]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], ecx
cmp edx, eax
jne 0x100529b1
mov eax, dword [edi]
cmp byte [eax], 0x2d
je 0x10375f5a
cmp ecx, 0x7fffffff
ja 0x10052863
cmp byte [edi + 0xc], 3
jbe 0x10052b4f
push edi
call sym.php5.dll__zval_dtor_func
mov ecx, dword [esp + 0x1c]
add esp, 4
mov eax, dword [0x10668f98]
mov eax, dword [eax + 0x74]
add eax, dword [esp + 0x24]
mov dword [eax], ecx
mov byte [eax + 0xc], 1
jmp 0x10052887
inc edx
jmp 0x10052858
xor esi, esi
jmp 0x100526f6
cmp dword [edi], 1
mov eax, dword [0x10668f94]
xorps xmm0, xmm0
movq qword [esp + 0x3c], xmm0
mov dword [esp + 0x40], eax
mov al, byte [edi]
mov dword [esp + 0x44], 0
movq qword [esp + 0x2c], xmm0
movq qword [esp + 0x34], xmm0
mov byte [esp + 0x44], 0x9c
mov byte [esp + 0x45], al
jne 0x10375f06
mov ecx, dword [0x10668f98]
lea edx, [edi + 8]
call fcn.10008bd0
jmp 0x10375f09
mov eax, dword [edi + 8]
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x2c]
push eax
push esi
mov word [esp + 0x4e], 0x408
call sym.php5.dll_zend_llist_add_element
add esp, 8
jmp 0x1005270a
mov ecx, dword [0x10668f98]
lea edx, [edi + 8]
call fcn.10008bd0
jmp 0x1005276f
mov eax, dword [ecx + 0xc]
push edx
call eax
add esp, 8
jmp 0x1005293c
cmp cl, 0x32
jg 0x10052863
jmp 0x10052998
lea eax, [ecx - 1]
cmp eax, 0x7fffffff
ja 0x10052863
neg ecx
mov dword [esp + 0x18], ecx
jmp 0x10052b3c
call dword [sym.imp.MSVCR110.dll_malloc]
mov ecx, eax
add esp, 4
test ecx, ecx
jne 0x100528b3
push str.Out_of_memory_n
call dword [sym.imp.MSVCR110.dll___iob_func]
add eax, 0x40
push eax
call dword [sym.imp.MSVCR110.dll_fprintf]
add esp, 8
push 1
call dword [sym.imp.MSVCR110.dll_exit]
int3