Function at 0x446965
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
xor ebx, ebx
cmp dword [ebp + 0xc], ebx
push esi
push edi
je case.0x446bad.14
mov edi, dword [ebp + 0x18]
mov ecx, dword [sym.stub.exe_core_globals_id]
mov esi, dword [ebp + 0x10]
mov eax, dword [edi]
mov eax, dword [eax + ecx*4 - 4]
cmp byte [eax + 3], bl
je 0x4469d1
cmp esi, 0xf
je 0x4469b7
cmp esi, 9
je 0x4469b7
cmp esi, 0xa
je 0x4469b7
cmp esi, 0xb
je 0x4469b7
cmp esi, 0xc
je 0x4469b7
cmp esi, 0xd
je 0x4469b7
cmp esi, 0xe
je 0x4469b7
xor eax, eax
jmp 0x4469ba
push 1
pop eax
push eax
push 2
push ebx
push dword [ebp + 8]
call sym.stub.exe_php_checkuid_ex
add esp, 0x10
test eax, eax
je case.0x446bad.14
cmp esi, 0xf
je 0x4469f9
cmp esi, 9
je 0x4469f9
cmp esi, 0xa
je 0x4469f9
cmp esi, 0xb
je 0x4469f9
cmp esi, 0xc
je 0x4469f9
cmp esi, 0xd
je 0x4469f9
cmp esi, 0xe
je 0x4469f9
push 1
pop eax
jmp 0x4469fb
xor eax, eax
push edi
push eax
push dword [ebp + 8]
call sym.stub.exe_php_check_open_basedir_ex
add esp, 0xc
test eax, eax
jne case.0x446bad.14
mov eax, dword [edi]
mov ecx, dword [0x559408]
mov eax, dword [eax + ecx*4 - 4]
lea esi, [eax + 0x1bc]
mov eax, dword [eax + 0x1b4]
cmp eax, ebx
je 0x446a3f
push eax
push dword [ebp + 8]
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x446b89
mov eax, dword [edi]
mov ecx, dword [0x559408]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, dword [eax + 0x1b4]
cmp ecx, ebx
je 0x446a7d
mov edx, dword [ebp + 0xc]
cmp edx, dword [eax + 0x1b8]
ja 0x446a72
mov eax, edx
inc eax
push eax
push dword [ebp + 8]
push ecx
call sub.MSVCRT.dll_memcpy
add esp, 0xc
jmp 0x446aaf
cmp ecx, ebx
je 0x446a7d
push ecx
call sym.stub.exe__efree
pop ecx
mov eax, dword [edi]
mov ecx, dword [0x559408]
mov ecx, dword [eax + ecx*4 - 4]
mov eax, dword [ebp + 0xc]
push eax
push dword [ebp + 8]
mov dword [ecx + 0x1b8], eax
call sym.stub.exe__estrndup
mov edx, dword [0x559408]
pop ecx
pop ecx
mov ecx, dword [edi]
mov ecx, dword [ecx + edx*4 - 4]
mov dword [ecx + 0x1b4], eax
mov eax, dword [edi]
mov ecx, dword [0x559408]
push edi
mov eax, dword [eax + ecx*4 - 4]
lea ecx, [eax + 0x1bc]
push ecx
push dword [eax + 0x1b4]
call sym.stub.exe_virtual_stat
add esp, 0xc
cmp eax, 0xffffffff
jne 0x446b89
mov eax, dword [ebp + 0x10]
cmp eax, 8
je 0x446b51
cmp eax, 0xe
je 0x446b51
cmp eax, 0x10
je 0x446b51
mov esi, dword [sym.imp.MSVCRT.dll__errno]
cmp eax, 0xf
je 0x446b10
cmp eax, 9
je 0x446b10
cmp eax, 0xa
je 0x446b10
cmp eax, 0xb
je 0x446b10
cmp eax, 0xc
je 0x446b10
cmp eax, 0xd
jne 0x446b1e
call esi
cmp dword [eax], 2
je 0x446b51
call esi
cmp dword [eax], 0x14
je 0x446b51
call esi
push dword [eax]
call dword [sym.imp.MSVCRT.dll_strerror]
pop ecx
push eax
call esi
push dword [eax]
mov eax, dword [edi]
mov ecx, dword [0x559408]
mov eax, dword [eax + ecx*4 - 4]
push dword [eax + 0x1b4]
push str.Stat_failed_for__s__errno_d____s_
push 2
push edi
push ebx
call sym.stub.exe_php_error_docref0
add esp, 0x1c
mov eax, dword [edi]
mov ecx, dword [0x559408]
mov eax, dword [eax + ecx*4 - 4]
mov eax, dword [eax + 0x1b4]
cmp eax, ebx
je case.0x446bad.14
push eax
call sym.stub.exe__efree
mov eax, dword [edi]
pop ecx
mov ecx, dword [0x559408]
mov eax, dword [eax + ecx*4 - 4]
mov dword [eax + 0x1b4], ebx
jmp case.0x446bad.14
mov ecx, dword [ebp + 0x10]
mov eax, dword [0x559408]
cmp ecx, 9
jl 0x446ba4
cmp ecx, 0xb
jg 0x446ba4
mov edx, dword [edi]
mov edx, dword [edx + eax*4 - 4]
mov dword [ebp + 8], edx
cmp ecx, 0x11
ja case.default.0x446bad
jmp dword [ecx*4 + 0x4475ad]
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
movzx ecx, word [ecx + 0x1c2]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
movzx ecx, word [ecx + 0x1c0]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov ecx, dword [ecx + 0x1d0]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
movsx ecx, word [ecx + 0x1c6]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
movsx ecx, word [ecx + 0x1c8]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov ecx, dword [ecx + 0x1d4]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov ecx, dword [ecx + 0x1d8]
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 1
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov ecx, dword [ecx + 0x1dc]
jmp 0x446e1b
mov ecx, dword [edi]
mov eax, dword [ecx + eax*4 - 4]
mov ax, word [eax + 0x1c2]
and eax, 0xf000
cmp eax, 0x1000
je 0x446d2e
cmp eax, 0x2000
je 0x446d27
cmp eax, 0x4000
je 0x446d20
cmp eax, 0x6000
je 0x446d19
cmp eax, 0x8000
je 0x446d12
push eax
push str.Unknown_file_type___d_
push 2
push edi
push ebx
call sym.stub.exe_php_error_docref0
mov edi, 0x529fbc
push edi
call sub.MSVCRT.dll_strlen
mov esi, dword [ebp + 0x14]
push eax
push edi
mov dword [esi + 4], eax
call sym.stub.exe__estrndup
add esp, 0x20
mov dword [esi], eax
mov byte [esi + 8], 3
jmp 0x4475a8
mov edi, 0x518978
jmp 0x446d33
mov edi, str.block
jmp 0x446d33
mov edi, 0x518730
jmp 0x446d33
mov edi, str.char
jmp 0x446d33
mov edi, str.fifo
push edi
call sub.MSVCRT.dll_strlen
mov esi, dword [ebp + 0x14]
push eax
push edi
mov dword [esi + 4], eax
call sym.stub.exe__estrndup
add esp, 0xc
jmp 0x446d07
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 6
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov cl, byte [ecx + 0x1c2]
shr ecx, 7
and ecx, 1
jmp 0x446e1b
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 6
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov cx, word [ecx + 0x1c2]
shr ecx, 8
jmp 0x446d67
mov ecx, dword [ebp + 0x14]
mov byte [ecx + 8], 6
mov eax, dword [edi]
mov edx, dword [0x559408]
mov eax, dword [eax + edx*4 - 4]
mov ax, word [eax + 0x1c2]
test al, 0x40
je 0x446dbb
and ax, 0xf000
cmp ax, 0x4000
je 0x446dbb
push 1
pop esi
jmp 0x446dbd
xor esi, esi
xor eax, eax
cmp esi, ebx
setne al
mov dword [ecx], eax
jmp 0x4475a8
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 6
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov cx, word [ecx + 0x1c2]
and cx, 0xf000
sub cx, 0x8000
jmp 0x446e15
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 6
mov ecx, dword [edi]
mov edx, dword [0x559408]
mov ecx, dword [ecx + edx*4 - 4]
mov cx, word [ecx + 0x1c2]
and cx, 0xf000
sub cx, 0x4000
neg cx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
jmp 0x4475a8
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 6
mov dword [eax], 1
jmp 0x4475a8
mov edi, dword [ebp + 0x14]
push edi
call sym.stub.exe__array_init
push 0x10
call sym.stub.exe__emalloc
mov dword [ebp + 0x18], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp + 0x18]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp + 0x18]
mov byte [eax + 8], 1
mov ecx, dword [ebp + 0x18]
mov eax, dword [esi]
mov dword [ecx], eax
mov eax, dword [ebp + 0x18]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 4], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 4]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 4]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 4]
movzx eax, word [esi + 4]
mov dword [ecx], eax
mov eax, dword [ebp - 4]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 8], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 8]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 8]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 8]
movzx eax, word [esi + 6]
mov dword [ecx], eax
mov eax, dword [ebp - 8]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0xc], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0xc]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0xc]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0xc]
movsx eax, word [esi + 8]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x10], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x10]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x10]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x10]
movsx eax, word [esi + 0xa]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x14], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x14]
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x14]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x14]
movsx eax, word [esi + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
inc word [eax + 0xa]
push 0x10
call sym.stub.exe__emalloc
mov dword [ebp - 0x18], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x18]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x18]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x18]
mov eax, dword [esi + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x1c], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x1c]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x1c]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [esi + 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x20], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x20]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x20]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x20]
mov eax, dword [esi + 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x24], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x24]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x24]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x24]
mov eax, dword [esi + 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x28], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x28]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x28]
mov byte [eax + 8], 1
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
mov dword [ebp - 0x2c], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x2c]
push 0x10
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x2c]
mov byte [eax + 8], 1
mov eax, dword [ebp - 0x2c]
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x2c]
inc word [eax + 0xa]
call sym.stub.exe__emalloc
add esp, 0x38
mov dword [ebp - 0x30], eax
mov word [eax + 0xa], 1
mov eax, dword [ebp - 0x30]
mov byte [eax + 9], bl
mov eax, dword [ebp - 0x30]
mov byte [eax + 8], 1
mov eax, dword [ebp - 0x30]
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x30]
inc word [eax + 0xa]
mov al, byte [edi + 8]
cmp al, 4
jne 0x447087
mov eax, dword [edi]
jmp 0x447092
cmp al, 5
jne 0x447090
mov eax, dword [edi + 4]
jmp 0x447092
xor eax, eax
push 4
lea ecx, [ebp + 0x18]
pop esi
push esi
push ebx
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x4470b1
mov eax, dword [edi]
jmp 0x4470bc
cmp al, 5
jne 0x4470ba
mov eax, dword [edi + 4]
jmp 0x4470bc
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 4]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x4470d8
mov eax, dword [edi]
jmp 0x4470e3
cmp al, 5
jne 0x4470e1
mov eax, dword [edi + 4]
jmp 0x4470e3
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 8]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x4470ff
mov eax, dword [edi]
jmp 0x44710a
cmp al, 5
jne 0x447108
mov eax, dword [edi + 4]
jmp 0x44710a
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0xc]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x447126
mov eax, dword [edi]
jmp 0x447131
cmp al, 5
jne 0x44712f
mov eax, dword [edi + 4]
jmp 0x447131
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x10]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x44714d
mov eax, dword [edi]
jmp 0x447158
cmp al, 5
jne 0x447156
mov eax, dword [edi + 4]
jmp 0x447158
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x14]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x447174
mov eax, dword [edi]
jmp 0x44717f
cmp al, 5
jne 0x44717d
mov eax, dword [edi + 4]
jmp 0x44717f
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x18]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x44719b
mov eax, dword [edi]
jmp 0x4471a6
cmp al, 5
jne 0x4471a4
mov eax, dword [edi + 4]
jmp 0x4471a6
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x1c]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x4471c2
mov eax, dword [edi]
jmp 0x4471cd
cmp al, 5
jne 0x4471cb
mov eax, dword [edi + 4]
jmp 0x4471cd
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x20]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x4471e9
mov eax, dword [edi]
jmp 0x4471f4
cmp al, 5
jne 0x4471f2
mov eax, dword [edi + 4]
jmp 0x4471f4
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x24]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x447210
mov eax, dword [edi]
jmp 0x44721b
cmp al, 5
jne 0x447219
mov eax, dword [edi + 4]
jmp 0x44721b
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x28]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x447237
mov eax, dword [edi]
jmp 0x447242
cmp al, 5
jne 0x447240
mov eax, dword [edi + 4]
jmp 0x447242
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x2c]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x44725e
mov eax, dword [edi]
jmp 0x447269
cmp al, 5
jne 0x447267
mov eax, dword [edi + 4]
jmp 0x447269
xor eax, eax
push esi
push ebx
lea ecx, [ebp - 0x30]
push esi
push ecx
push ebx
push eax
call sym.stub.exe_zend_hash_index_update_or_next_insert
mov al, byte [edi + 8]
add esp, 0x18
cmp al, 4
jne 0x447288
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x447294
cmp al, 5
jne 0x447291
mov eax, dword [edi + 4]
jmp 0x447283
mov dword [ebp + 0x14], ebx
push 1
push ebx
push esi
lea eax, [ebp + 0x18]
mov esi, 0x518ec0
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x4472c4
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x4472d0
cmp al, 5
jne 0x4472cd
mov eax, dword [edi + 4]
jmp 0x4472bf
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 4]
push 4
mov esi, 0x518ebc
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x447301
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x44730d
cmp al, 5
jne 0x44730a
mov eax, dword [edi + 4]
jmp 0x4472fc
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 8]
push 4
mov esi, str.mode
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x44733e
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x44734a
cmp al, 5
jne 0x447347
mov eax, dword [edi + 4]
jmp 0x447339
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0xc]
push 4
mov esi, str.nlink
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x44737b
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x447387
cmp al, 5
jne 0x447384
mov eax, dword [edi + 4]
jmp 0x447376
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x10]
push 4
mov esi, 0x518ea8
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x4473b8
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x4473c4
cmp al, 5
jne 0x4473c1
mov eax, dword [edi + 4]
jmp 0x4473b3
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x14]
push 4
mov esi, 0x518ea4
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x4473f5
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x447401
cmp al, 5
jne 0x4473fe
mov eax, dword [edi + 4]
jmp 0x4473f0
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x18]
push 4
mov esi, str.rdev
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x447432
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x44743e
cmp al, 5
jne 0x44743b
mov eax, dword [edi + 4]
jmp 0x44742d
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x1c]
push 4
mov esi, str.size
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x44746f
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x44747b
cmp al, 5
jne 0x447478
mov eax, dword [edi + 4]
jmp 0x44746a
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x20]
push 4
mov esi, str.atime
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x4474ac
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x4474b8
cmp al, 5
jne 0x4474b5
mov eax, dword [edi + 4]
jmp 0x4474a7
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x24]
push 4
mov esi, str.mtime
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x4474e9
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x4474f5
cmp al, 5
jne 0x4474f2
mov eax, dword [edi + 4]
jmp 0x4474e4
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x28]
push 4
mov esi, str.ctime
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x447526
mov eax, dword [edi]
mov dword [ebp + 0x14], eax
jmp 0x447532
cmp al, 5
jne 0x44752f
mov eax, dword [edi + 4]
jmp 0x447521
mov dword [ebp + 0x14], ebx
push 1
push ebx
lea eax, [ebp - 0x2c]
push 4
mov esi, str.blksize
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [ebp + 0x14]
call sym.stub.exe_zend_hash_add_or_update
mov al, byte [edi + 8]
add esp, 0x1c
cmp al, 4
jne 0x447560
mov edi, dword [edi]
jmp 0x44756b
cmp al, 5
jne 0x447569
mov edi, dword [edi + 4]
jmp 0x44756b
xor edi, edi
push 1
push ebx
lea eax, [ebp - 0x30]
push 4
mov esi, str.blocks
push eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push edi
call sym.stub.exe_zend_hash_add_or_update
add esp, 0x1c
jmp 0x4475a8
push str.Didnt_understand_stat_call
push 2
push edi
push ebx
call sym.stub.exe_php_error_docref0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov byte [eax + 8], 6
mov dword [eax], ebx
pop edi
pop esi
pop ebx
leave
ret