Function at 0x1800228d0
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov qword [rsp + 0x50], rcx
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
mov edx, 8
movsxd rcx, ecx
mov rax, qword [rax]
mov qword [rsp + 0x58], 0
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + 0x7c8]
mov ecx, dword [0x180045d04]
shr rax, 0xd
and al, 1
mov byte [rsp + 0x40], al
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rcx*8]
mov rax, qword [0x18002f778]
add rdi, rdx
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
mov r8, qword [rcx + rdx*8]
mov rax, qword [r8 + 0x1e0]
mov rbx, qword [r8 + 0x1d8]
mov qword [rsp + 0x68], rax
mov rax, qword [r8 + 0x1e8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
call qword [0x18002f7b8]
mov rcx, qword [0x18002f608]
mov rax, qword [rax]
mov edx, dword [rcx]
dec edx
movsxd rcx, edx
mov rdx, qword [rax + rcx*8]
xor eax, eax
mov qword [rsp + 0x60], rdx
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rbp - 0x60], xmm1
movsd xmm1, qword [rdx + 0x30]
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov qword [rdx + 0x20], rax
mov qword [rdx + 0x28], rax
mov qword [rdx + 0x30], rax
movups xmmword [rbp - 0x50], xmm0
movsd qword [rbp - 0x40], xmm1
call qword [0x18002f860]
mov rax, qword [0x18002f778]
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8]
mov rcx, qword [rax + 0x1c8]
mov qword [rbx], rcx
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
movabs rax, 0x400000000
test qword [rcx + 0x7c8], rax
je 0x180022b7a
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
mov rax, qword [rcx + 0x7c0]
mov qword [rsp + 0x48], rax
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
lea rax, [rbp - 0x30]
mov rdx, rsp
mov qword [rcx + 0x7c0], rax
lea rcx, [rbp - 0x30]
call fcn.18002e8ae
mov rbx, qword [rsp + 0x48]
test eax, eax
jne 0x180022af5
mov rax, qword [0x18002f778]
xor r9d, r9d
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
lea rax, [0x1800227b0]
mov qword [rsp + 0x38], rax
lea rax, [0x180029390]
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov r8, qword [rcx + rdx*8]
mov rcx, qword [rsp + 0x50]
add r8, 0x130
mov qword [rsp + 0x20], rax
mov rdx, qword [rcx + 0x38]
mov rcx, qword [rcx + 0x30]
call sym.php7phpdbg.dll_qhpdbg_parse_variable_with_arg
jmp 0x180022b56
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
mov qword [rcx + 0x7c0], rbx
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
lea r9, [0x18002fd04]
dec ecx
lea r8, str.signalsegv
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
lea rax, str.Could_not_fetch_data__invalid_data_source
mov qword [rsp + 0x20], rax
mov edx, dword [rcx + 0x4f0]
mov ecx, 1
call sym.php7phpdbg.dll_qhpdbg_print
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
mov qword [rcx + 0x7c0], rbx
jmp 0x180022f20
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + 0x7c8]
bt rax, 0x18
jb 0x180022bc2
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
and qword [rcx + 0x7c8], 0xffffffffffffdfff
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
mov rax, qword [0x18002f778]
or qword [rcx + 0x7c8], 0x1000
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
mov r8, qword [rcx + rdx*8]
lea rcx, [rbp + 0xd0]
mov rdx, rsp
mov rax, qword [r8 + 0x1a0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xd0]
mov qword [r8 + 0x1a0], rax
call fcn.18002e8ae
mov rbx, qword [rsp + 0x48]
test eax, eax
jne 0x180022d6d
mov rcx, qword [rsp + 0x50]
lea r9, str.eval__d_code
lea r8, [rbp - 0x80]
mov rdx, qword [rcx + 0x38]
mov rcx, qword [rcx + 0x30]
call qword [0x18002f4d8]
test eax, eax
jne 0x180022d61
mov rax, qword [0x18002f778]
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8]
mov rcx, qword [rax + 0x3e0]
test rcx, rcx
je 0x180022c99
mov edx, 1
mov qword [rsp + 0x58], rcx
call qword [0x18002f440]
mov r10, qword [0x18002f778]
jmp 0x180022e76
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
lea rdx, str._eval__r_
mov ecx, dword [rcx + 0x4f0]
call sym.php7phpdbg.dll_qhpdbg_xml_internal
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
movabs rax, 0x100000000
test qword [rcx + 0x7c8], rax
je 0x180022cf7
lea rcx, [rbp - 0x80]
call sym.php7phpdbg.dll_qhpdbg_xml_var_dump
xor edx, edx
lea rcx, [rbp - 0x80]
call qword [0x18002f4e0]
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
lea rdx, str.__eval_
mov ecx, dword [rcx + 0x4f0]
call sym.php7phpdbg.dll_qhpdbg_xml_internal
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
lea rdx, [0x18003027c]
mov ecx, dword [rcx + 0x4f0]
call sym.php7phpdbg.dll_qhpdbg_out_internal
lea rcx, [rbp - 0x80]
call qword [0x18002f450]
mov r10, qword [0x18002f778]
jmp 0x180022e76
mov rax, qword [0x18002f778]
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8]
mov qword [rax + 0x1a0], rbx
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
mov byte [rcx + 0x461], 1
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x180022dcf
add dword [rcx], 0xffffffff
jne 0x180022dc2
call qword [0x18002f458]
jmp 0x180022dcf
cmp word [rcx + 6], 0
jne 0x180022dcf
call qword [0x18002f448]
mov r10, qword [0x18002f778]
mov r9, qword [rdi]
mov r8, qword [rsp + 0x78]
mov eax, dword [r10]
dec eax
movsxd rcx, eax
mov rax, qword [r9]
mov rdx, qword [rax + rcx*8]
mov rax, qword [rsp + 0x68]
mov qword [rdx + 0x1e0], rax
mov eax, dword [r10]
dec eax
movsxd rcx, eax
mov rax, qword [r9]
mov rdx, qword [rax + rcx*8]
mov rax, qword [rsp + 0x70]
mov qword [rdx + 0x1e8], rax
mov eax, dword [r10]
dec eax
movsxd rcx, eax
mov rax, qword [r9]
mov rdx, qword [rax + rcx*8]
mov rax, qword [r8]
mov qword [rdx + 0x1c8], rax
mov eax, dword [r10]
dec eax
movsxd rcx, eax
mov rax, qword [r9]
mov rdx, qword [rax + rcx*8]
mov rax, qword [r8 + 8]
mov qword [rdx + 0x1d0], rax
mov eax, dword [r10]
dec eax
movsxd rcx, eax
mov rax, qword [r9]
mov rcx, qword [rax + rcx*8]
mov qword [rcx + 0x1d8], r8
mov eax, dword [r10]
dec eax
movsxd rcx, eax
mov rax, qword [r9]
mov rcx, qword [rax + rcx*8]
mov dword [rcx + 0x1ac], 0
mov eax, dword [r10]
dec eax
movsxd rdx, eax
mov rax, qword [rdi]
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8]
mov qword [rax + 0x1a0], rbx
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
and qword [rcx + 0x7c8], 0xffffffffffffefff
cmp byte [rsp + 0x40], 0
je 0x180022f01
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rcx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + 0x7c8]
bt rax, 0x18
jb 0x180022f01
call qword [0x18002f7b8]
mov ecx, dword [0x180045d10]
dec ecx
movsxd rdx, ecx
mov rax, qword [rax]
mov rcx, qword [rax + rdx*8]
or qword [rcx + 0x7c8], 0x2000
mov rax, qword [0x18002f758]
mov ecx, dword [rax]
mov rax, qword [rdi]
dec ecx
movsxd rdx, ecx
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8]
mov byte [rax + 0x8b], 0
call qword [0x18002f830]
mov rax, qword [rsp + 0x60]
movups xmm0, xmmword [rbp - 0x70]
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rax + 0x10], xmm1
movsd xmm1, qword [rbp - 0x40]
movups xmmword [rax + 0x20], xmm0
movsd qword [rax + 0x30], xmm1
xor eax, eax
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.18002d840
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret