Function at 0x100ef650
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x28
mov eax, dword [0x106499c8]
xor eax, esp
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
push ebx
mov ebx, dword [esp + 0x30]
cmp dword [eax + 0x4c], 0x10
push ebp
mov ebp, dword [esp + 0x44]
push esi
push edi
mov edi, dword [esp + 0x48]
push ebp
push ebx
push str.zv_p_byte_count_u
mov dword [esp + 0x1c], ebx
sete cl
call fcn.100ef9e0
add esp, 0xc
test byte [eax + 0x40], 0x20
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
lea eax, [ebp - 1]
je 0x100ef89d
cmp eax, 7
ja case.default.0x100ef6ab
jmp dword [eax*4 + 0x100ef988]
test cl, cl
je 0x100ef700
mov edx, dword [edi]
xor ebx, ebx
movzx esi, byte [edx + 4]
movzx eax, byte [edx + 5]
movzx ecx, byte [edx + 1]
shl esi, 8
add esi, eax
movzx eax, byte [edx + 6]
shl esi, 8
add esi, eax
movzx eax, byte [edx + 7]
shl esi, 8
add esi, eax
movzx eax, byte [edx]
shl eax, 8
add ecx, eax
movzx eax, byte [edx + 2]
shl ecx, 8
add ecx, eax
movzx eax, byte [edx + 3]
shl ecx, 8
add ecx, eax
add esi, ebx
adc ebx, ecx
jmp 0x100ef83c
mov eax, dword [edi]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x100ef83c
mov edx, dword [edi]
xor ebx, ebx
movzx esi, byte [edx + 3]
movzx eax, byte [edx + 4]
movzx ecx, byte [edx + 1]
shl esi, 8
add esi, eax
movzx eax, byte [edx + 5]
shl esi, 8
add esi, eax
movzx eax, byte [edx + 6]
shl esi, 8
add esi, eax
movzx eax, byte [edx]
shl eax, 8
add ecx, eax
movzx eax, byte [edx + 2]
shl ecx, 8
add ecx, eax
add esi, ebx
adc ebx, ecx
jmp 0x100ef83c
mov edx, dword [edi]
xor ebx, ebx
movzx esi, byte [edx + 2]
movzx eax, byte [edx + 3]
movzx ecx, byte [edx + 1]
shl esi, 8
add esi, eax
movzx eax, byte [edx + 4]
shl esi, 8
add esi, eax
movzx eax, byte [edx + 5]
shl esi, 8
add esi, eax
movzx eax, byte [edx]
shl eax, 8
add ecx, eax
add esi, ebx
adc ebx, ecx
jmp 0x100ef83c
mov ecx, dword [edi]
xor ebx, ebx
movzx esi, byte [ecx + 1]
movzx eax, byte [ecx + 2]
shl esi, 8
add esi, eax
movzx eax, byte [ecx + 3]
shl esi, 8
add esi, eax
movzx eax, byte [ecx + 4]
shl esi, 8
add esi, eax
movzx eax, byte [ecx]
cdq
add esi, ebx
adc ebx, eax
jmp 0x100ef83c
test cl, cl
je 0x100ef7dd
mov ecx, dword [edi]
movzx eax, byte [ecx]
movzx esi, byte [ecx + 1]
shl eax, 8
add esi, eax
movzx eax, byte [ecx + 2]
shl esi, 8
add esi, eax
movzx eax, byte [ecx + 3]
shl esi, 8
add esi, eax
xor ebx, ebx
jmp 0x100ef83c
mov eax, dword [edi]
xor ebx, ebx
mov esi, dword [eax]
jmp 0x100ef83c
test cl, cl
je 0x100ef804
mov ecx, dword [edi]
movzx eax, byte [ecx]
movzx esi, byte [ecx + 1]
shl eax, 8
add esi, eax
movzx eax, byte [ecx + 2]
shl esi, 8
add esi, eax
xor ebx, ebx
jmp 0x100ef83c
mov eax, dword [edi]
mov eax, dword [eax]
and eax, 0xffffff
jmp 0x100ef837
mov eax, dword [edi]
test cl, cl
je 0x100ef82d
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
mov edx, 0x100
imul ax, dx
add cx, ax
movzx eax, cx
jmp 0x100ef837
movzx eax, word [eax]
jmp 0x100ef837
mov eax, dword [edi]
movzx eax, byte [eax]
cdq
mov ebx, edx
mov esi, eax
test ebx, ebx
jne 0x100ef848
cmp esi, 0x7fffffff
jbe 0x100ef86a
push ebx
push esi
lea eax, [esp + 0x24]
push str._I64u
push eax
call sym.php5.dll_php_sprintf
mov ebx, dword [esp + 0x20]
jmp 0x100ef935
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
cmp ebp, 8
jb 0x100ef87e
cmp ebx, 0x7fffffff
jb 0x100ef87e
ja 0x100ef848
cmp esi, 0xffffffff
ja 0x100ef848
mov eax, dword [esp + 0x10]
mov dword [eax], esi
mov byte [eax + 0xc], 1
add dword [edi], ebp
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.10311bec
add esp, 0x28
ret
cmp eax, 7
ja case.0x100ef8a6.4
jmp dword [eax*4 + 0x100ef9a8]
mov eax, dword [edi]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
jmp 0x100ef907
mov eax, dword [edi]
mov eax, dword [eax]
jmp 0x100ef904
mov esi, dword [edi]
mov al, byte [esi + 2]
movzx edx, al
test al, al
jns 0x100ef8e3
movzx eax, byte [esi + 1]
or edx, 0xffffff00
shl edx, 8
or edx, eax
movzx eax, byte [esi]
shl edx, 8
or edx, eax
mov eax, edx
jmp 0x100ef904
movzx ecx, byte [esi + 1]
shl edx, 8
or edx, ecx
movzx ecx, byte [esi]
shl edx, 8
or edx, ecx
mov eax, edx
jmp 0x100ef904
mov eax, dword [edi]
movsx eax, word [eax]
jmp 0x100ef904
mov eax, dword [edi]
movsx eax, byte [eax]
cdq
mov ecx, eax
test edx, edx
jg 0x100ef924
jl 0x100ef915
cmp ecx, 0x7fffffff
ja 0x100ef924
cmp edx, 0xffffffff
jl 0x100ef924
jg 0x100ef96c
cmp ecx, 0x80000000
jae 0x100ef96c
push edx
push ecx
lea eax, [esp + 0x24]
push str._I64d
push eax
call sym.php5.dll_php_sprintf
add esp, 0x10
test eax, eax
je 0x100ef972
push eax
mov dword [ebx + 4], eax
lea eax, [esp + 0x20]
push eax
call sym.php5.dll__estrndup
add esp, 8
mov dword [ebx], eax
mov byte [ebx + 0xc], 6
add dword [edi], ebp
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.10311bec
add esp, 0x28
ret
mov ecx, dword [esp + 0x14]
mov dword [ebx], ecx
mov byte [ebx + 0xc], 1
add dword [edi], ebp
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10311bec
add esp, 0x28
ret