Function at 0x140001cb0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
xor r15d, r15d
mov dword [rsp + 0x58], 1
mov dword [rbp + 8], ecx
mov qword [rsp + 0x68], r15
mov qword [rbp - 0x18], r15
mov qword [rbp + 0x18], rdx
lea rax, [rbp - 0x18]
mov qword [rbp - 0x70], r8
mov dword [rsp + 0x54], 1
mov qword [rbp + 0x28], rax
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
mov qword [rbp - 0x80], r15
movsxd rcx, dword [rax]
mov rax, qword [r8]
mov dword [rsp + 0x78], r15d
mov rdx, qword [rax + rcx*8 - 8]
lea rcx, [rbp + 0x1c0]
mov dword [rsp + 0x50], r15d
mov rax, qword [rdx + 0x1e8]
mov qword [rbp + 0x38], r15
mov dword [rbp - 0x10], 1
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x1c0]
mov qword [rbp - 8], r15
mov qword [rdx + 0x1e8], rax
mov rdx, rsp
mov qword [rbp - 0x30], r15
mov qword [rbp], r15
mov qword [rbp + 0x10], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x20], r15
mov dword [rbp - 0x78], r15d
mov dword [rsp + 0x74], r15d
mov qword [rsp + 0x60], r15
mov dword [rbp - 0x40], r15d
call sub.MSVCR110.dll__setjmp
mov rdi, qword [rbp - 0x70]
test eax, eax
jne case.0x14000263c.3
mov rax, qword [sym.imp.php5ts.dll_compiler_globals_id]
mov ebx, dword [rbp + 8]
mov r13, qword [rbp + 0x18]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov dword [rsp + 0x30], 2
mov rcx, qword [rax + rcx*8 - 8]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
lea r9, [rsp + 0x68]
mov byte [rcx + 0x159], r15b
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
lea rax, [rsp + 0x58]
lea r8, [0x14000e720]
mov qword [rcx + 0x20], r15
mov rdx, r13
mov ecx, ebx
mov dword [rsp + 0x28], r15d
mov qword [rbp + 0x30], rdi
mov dword [rsp + 0x7c], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.php5ts.dll_php_getopt]
cmp eax, 0xffffffff
je 0x140001e5e
nop dword [rax]
cmp eax, 0x69
je 0x140001ffb
cmp eax, 0x6d
je 0x140001f49
cmp eax, 0x76
je 0x140001ef6
lea rax, [rsp + 0x58]
mov dword [rsp + 0x30], 2
lea r9, [rsp + 0x68]
lea r8, [0x14000e720]
mov rdx, r13
mov ecx, ebx
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
call qword [sym.imp.php5ts.dll_php_getopt]
cmp eax, 0xffffffff
jne 0x140001e10
mov rax, qword [sym.imp.php5ts.dll_sapi_globals_id]
mov dword [rsp + 0x30], 2
lea r9, [rsp + 0x68]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
lea r8, [0x14000e720]
mov rdx, qword [rax + rcx*8 - 8]
mov eax, dword [rbp - 0x10]
mov ecx, ebx
or dword [rdx + 0x14c], 1
mov dword [rsp + 0x58], eax
mov rax, qword [rbp + 0x38]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov rdx, r13
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
call qword [sym.imp.php5ts.dll_php_getopt]
mov ebx, dword [rsp + 0x54]
mov r12, qword [rbp - 0x80]
mov rsi, qword [rbp - 0x60]
mov r14, qword [rsp + 0x60]
lea r10, [0x140000000]
cmp eax, 0xffffffff
je 0x140002338
mov r9, qword [rbp - 8]
mov r8, qword [rbp]
mov edx, dword [rbp - 0x78]
mov edi, dword [rsp + 0x7c]
mov qword [rbp - 0x28], r9
mov qword [rbp - 0x38], r8
mov dword [rsp + 0x70], edx
jmp 0x140002044
call qword [sym.imp.php5ts.dll_get_zend_version]
mov r8, qword [0x1400130f0]
lea r9, str.Jan__9_2019
mov qword [rsp + 0x30], rax
lea rax, [0x14000d984]
lea rdx, [0x14000e334]
mov qword [rsp + 0x28], rax
lea rax, str.15:10:36
lea rcx, str.PHP__s___s___built:__s__s___s_nCopyright__c__1997_2016_The_PHP_Group_n_s
mov qword [rsp + 0x20], rax
call qword [sym.imp.php5ts.dll_php_printf]
mov rcx, rdi
call qword [sym.imp.php5ts.dll_sapi_deactivate]
jmp 0x140002dfa
mov rcx, rdi
call qword [sym.imp.php5ts.dll_php_request_startup]
cmp eax, 0xffffffff
je 0x14000256a
mov dword [rsp + 0x78], 1
lea rcx, str._PHP_Modules__n
call qword [sym.imp.php5ts.dll_php_printf]
mov rcx, rdi
call fcn.140001270
lea rcx, str._n_Zend_Modules__n
call qword [sym.imp.php5ts.dll_php_printf]
mov rdx, qword [sym.imp.php5ts.dll_zend_extensions]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.php5ts.dll_zend_llist_copy]
lea rdx, [0x140001320]
lea rcx, [rbp + 0xd0]
mov r8, rdi
mov qword [rbp + 0xf0], r15
call qword [sym.imp.php5ts.dll_zend_llist_sort]
lea rdx, [0x140001300]
lea rcx, [rbp + 0xd0]
mov r8, rdi
call qword [sym.imp.php5ts.dll_zend_llist_apply]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.php5ts.dll_zend_llist_destroy]
lea rcx, [0x14000e3ac]
call qword [sym.imp.php5ts.dll_php_printf]
mov rcx, rdi
call qword [sym.imp.php5ts.dll_php_output_end_all]
mov dword [rsp + 0x50], r15d
jmp 0x140002dfa
mov rcx, rdi
call qword [sym.imp.php5ts.dll_php_request_startup]
cmp eax, 0xffffffff
je 0x14000256a
mov dword [rsp + 0x78], 1
mov rdx, rdi
or rcx, 0xffffffffffffffff
call qword [sym.imp.php5ts.dll_php_print_info]
mov rcx, rdi
call qword [sym.imp.php5ts.dll_php_output_end_all]
mov dword [rsp + 0x50], r15d
jmp 0x140002dfa
mov edx, dword [rsp + 0x70]
add eax, 0xfffffff6
cmp eax, 0x70
ja case.0x140002066.28
cdqe
movzx eax, byte [r10 + rax + 0x2ebc]
mov ecx, dword [r10 + rax*4 + 0x2e70]
add rcx, r10
jmp rcx
test edx, edx
jne case.0x140002066.28
cmp ebx, 1
je 0x140002086
lea r14, str.Either_execute_direct_code__process_stdin_or_use_a_file._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
mov eax, 1
mov dword [rsp + 0x70], eax
mov dword [rbp - 0x78], eax
jmp case.0x140002066.28
cmp ebx, 7
jne 0x1400020b8
cmp qword [rbp - 0x30], r15
jne 0x1400020a7
test rsi, rsi
je 0x1400020ce
lea r14, str.You_can_use__R_or__F_only_once._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
cmp ebx, 1
je 0x1400020ce
lea r14, str.Either_execute_direct_code__process_stdin_or_use_a_file._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
mov rsi, qword [rsp + 0x68]
mov ebx, 7
mov qword [rbp - 0x60], rsi
jmp 0x1400022e4
lea eax, [rbx - 6]
cmp eax, 1
jbe 0x140002075
test rsi, rsi
je 0x1400020ff
lea r14, str.You_can_use__f_only_once._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
mov rsi, qword [rsp + 0x68]
mov qword [rbp - 0x60], rsi
jmp case.0x140002066.28
cmp ebx, 1
jne case.0x140002066.28
mov ebx, 4
jmp 0x1400022e4
cmp ebx, 6
jne 0x140002140
test r9, r9
jne 0x14000212f
test rsi, rsi
je 0x140002151
lea r14, str.You_can_use__r_only_once._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
cmp ebx, 1
jne 0x140002075
test edx, edx
jne 0x140002075
mov rax, qword [rsp + 0x68]
mov ebx, 6
mov qword [rbp - 0x28], rax
mov qword [rbp - 8], rax
jmp 0x1400022e4
cmp ebx, 7
jne 0x14000218d
cmp qword [rbp - 0x30], r15
jne 0x1400020a7
test rsi, rsi
je 0x1400021a3
lea r14, str.You_can_use__R_or__F_only_once._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
cmp ebx, 1
je 0x1400021a3
lea r14, str.Either_execute_direct_code__process_stdin_or_use_a_file._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
mov rax, qword [rsp + 0x68]
mov ebx, 7
mov qword [rbp - 0x30], rax
jmp 0x1400022e4
cmp ebx, 7
jne 0x1400021d1
test r8, r8
je 0x1400021e2
lea r14, str.You_can_use__B_only_once._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
cmp ebx, 1
jne 0x140002075
test edx, edx
jne 0x140002075
mov rax, qword [rsp + 0x68]
mov ebx, 7
mov qword [rbp - 0x38], rax
mov qword [rbp], rax
jmp 0x1400022e4
cmp ebx, 7
jne 0x140002215
cmp qword [rbp + 0x10], r15
je 0x140002226
lea r14, str.You_can_use__E_only_once._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
cmp ebx, 1
jne 0x140002075
test edx, edx
jne 0x140002075
mov rax, qword [rsp + 0x68]
mov ebx, 7
mov qword [rbp + 0x10], rax
jmp 0x1400022e4
lea eax, [rbx - 6]
cmp eax, 1
jbe 0x14000224b
mov ebx, 2
jmp 0x1400022e4
lea r14, str.Source_highlighting_only_works_for_files._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
lea eax, [rbx - 6]
cmp eax, 1
jbe 0x14000226b
mov ebx, 5
jmp 0x1400022e4
lea r14, str.Source_stripping_only_works_for_files._n
mov qword [rsp + 0x60], r14
jmp case.0x140002066.28
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.php5ts.dll_zend_load_extension]
jmp case.0x140002066.28
mov dword [rbp - 0x40], 1
jmp case.0x140002066.28
mov r12, qword [rsp + 0x68]
mov ebx, 8
mov qword [rbp - 0x80], r12
jmp 0x1400022e4
mov r12, qword [rsp + 0x68]
mov ebx, 9
mov qword [rbp - 0x80], r12
jmp 0x1400022e4
mov r12, qword [rsp + 0x68]
mov ebx, 0xa
mov qword [rbp - 0x80], r12
jmp 0x1400022e4
mov r12, qword [rsp + 0x68]
mov ebx, ntohs
mov qword [rbp - 0x80], r12
jmp 0x1400022e4
mov r12, qword [rsp + 0x68]
mov ebx, ntohs
mov qword [rbp - 0x80], r12
jmp 0x1400022e4
mov ebx, reloc.WS2_32.dll_listen
mov dword [rsp + 0x54], ebx
lea rax, [rsp + 0x58]
mov dword [rsp + 0x30], 2
lea r9, [rsp + 0x68]
lea r8, [0x14000e720]
mov rdx, r13
mov ecx, edi
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
call qword [sym.imp.php5ts.dll_php_getopt]
mov r8, qword [rbp - 0x38]
mov r9, qword [rbp - 0x28]
lea r10, [0x140000000]
cmp eax, 0xffffffff
jne 0x140002040
mov rdi, qword [rbp + 0x30]
mov eax, dword [rsp + 0x70]
jmp 0x14000234f
mov rax, qword [rbp - 8]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp]
mov qword [rbp - 0x38], rax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x70], eax
test r14, r14
je 0x140002385
or rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [r14 + rsi], r15b
jne 0x140002360
mov rdx, rsi
mov r8, rdi
mov rcx, r14
call qword [sym.imp.php5ts.dll_php_output_write]
mov dword [rsp + 0x50], 1
jmp 0x14000256a
test eax, eax
je 0x1400023a6
lea rcx, str.Interactive_mode_enabled_n_n
call qword [sym.imp.MSVCR110.dll_printf]
call qword [sym.imp.MSVCR110.dll___iob_func]
lea rcx, [rax + 0x30]
call qword [sym.imp.MSVCR110.dll_fflush]
mov rax, qword [sym.imp.php5ts.dll_compiler_globals_id]
mov r14d, dword [rsp + 0x7c]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
mov eax, dword [rsp + 0x70]
mov dword [rcx + 0x1c8], eax
movsxd rcx, dword [rsp + 0x58]
cmp r14d, ecx
jle 0x140002415
test rsi, rsi
jne 0x14000241a
lea eax, [rbx - 6]
cmp eax, 1
jbe 0x140002415
mov rdx, qword [r13 + rcx*8 - 8]
movzx eax, byte [rdx]
cmp al, byte [0x14000e4cc]
jne 0x140002406
movzx eax, byte [rdx + 1]
cmp al, byte [0x14000e4cd]
jne 0x140002406
movzx eax, byte [rdx + 2]
cmp al, byte [0x14000e4ce]
je 0x140002415
mov rsi, qword [r13 + rcx*8]
inc ecx
mov qword [rbp - 0x60], rsi
mov dword [rsp + 0x58], ecx
test rsi, rsi
je 0x140002478
lea r8, [rsp + 0x74]
lea rcx, [rbp + 0x50]
mov r9, rdi
mov rdx, rsi
call fcn.140001ba0
test eax, eax
jne 0x14000256a
lea rdx, [rbp + 0x2c0]
mov r8, rdi
mov rcx, rsi
call qword [sym.imp.php5ts.dll_virtual_realpath]
test rax, rax
je 0x14000246b
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCR110.dll__strdup]
mov qword [0x1400130d8], rsi
mov r9, rax
mov qword [rbp - 0x20], rax
jmp 0x140002491
mov r9, qword [rbp - 0x20]
mov qword [0x1400130d8], rsi
jmp 0x140002491
lea rax, [0x14000e4d0]
mov qword [rbp + 0x58], rax
call qword [sym.imp.MSVCR110.dll___iob_func]
mov r9, qword [rbp - 0x20]
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x58]
mov r8, qword [sym.imp.php5ts.dll_sapi_globals_id]
mov dword [rbp + 0x50], 2
mov qword [0x1400130e8], rax
mov qword [rbp + 0x60], r15
mov byte [rbp + 0xc0], r15b
mov rax, qword [rdi]
movsxd rcx, dword [r8]
mov edx, r14d
mov rcx, qword [rax + rcx*8 - 8]
sub edx, dword [rsp + 0x58]
inc edx
mov dword [rcx + 0x8c], edx
movsxd rax, dword [rsp + 0x58]
mov rdx, qword [rbp + 0x58]
lea rsi, [rax*8 - 8]
mov rax, qword [r13 + rax*8 - 8]
mov qword [rbp - 0x18], rax
mov rax, qword [rdi]
movsxd rcx, dword [r8]
mov rcx, qword [rax + rcx*8 - 8]
add rsi, r13
test r9, r9
cmovne rdx, r9
mov qword [rbp + 0x28], rsi
mov qword [rcx + 0x28], rdx
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rbp + 0x58]
mov qword [r13 + rcx*8 - 8], rax
movsxd rax, dword [rsp + 0x58]
movsxd rcx, dword [r8]
lea rdx, [rax*8 - 8]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
add rdx, r13
mov qword [rcx + 0x90], rdx
mov rcx, rdi
call qword [sym.imp.php5ts.dll_php_request_startup]
cmp eax, 0xffffffff
jne 0x140002589
mov rax, qword [rbp - 0x18]
mov qword [rsi], rax
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.MSVCR110.dll_fclose]
lea rcx, str.Could_not_startup._n
mov r8, rdi
mov edx, reloc.WS2_32.dll_send
call qword [sym.imp.php5ts.dll_php_output_write]
mov rcx, rdi
call qword [sym.imp.php5ts.dll_sapi_deactivate]
mov rcx, rdi
call qword [sym.imp.php5ts.dll_zend_ini_deactivate]
mov dword [rsp + 0x50], 1
jmp 0x140002dfa
mov rax, qword [sym.imp.php5ts.dll_compiler_globals_id]
mov dword [rsp + 0x78], 1
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rdx, qword [rax + rcx*8 - 8]
mov eax, dword [rsp + 0x74]
mov dword [rdx + 0x1cc], eax
mov rax, qword [rbp - 0x18]
mov qword [rsi], rax
or rsi, 0xffffffffffffffff
cmp dword [rbp - 0x40], r15d
je 0x1400025ef
cmp r14d, 1
jle 0x1400025ef
lea r14, [r13 + 8]
mov r13d, dword [rsp + 0x7c]
dec r13d
mov rcx, qword [r14]
mov r8, rsi
inc r8
cmp byte [rcx + r8], r15b
jne 0x1400025d6
xor edx, edx
call sub.MSVCR110.dll_memset
add r14, 8
dec r13
jne 0x1400025d0
lea rcx, str._SERVER
mov r8, rdi
mov edx, 7
call qword [sym.imp.php5ts.dll_zend_is_auto_global]
mov rax, qword [sym.imp.php5ts.dll_core_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
lea eax, [rbx - 1]
mov byte [rcx + 0x1b2], r15b
cmp eax, 0xc
ja case.0x14000263c.3
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x2f30]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0x58]
movzx eax, byte [rcx]
cmp al, byte [0x14000e4d0]
jne 0x140002659
movzx eax, byte [rcx + 1]
cmp al, byte [0x14000e4d1]
je 0x140002661
mov rcx, rdi
call fcn.140001860
cmp dword [rsp + 0x70], r15d
je 0x140002682
mov rax, qword [0x140014140]
test rax, rax
je 0x140002682
mov rcx, rdi
call rax
mov dword [rsp + 0x50], eax
jmp case.0x14000263c.3
lea rcx, [rbp + 0x50]
mov rdx, rdi
call qword [sym.imp.php5ts.dll_php_execute_script]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
mov eax, dword [rcx + 0x1f8]
mov dword [rsp + 0x50], eax
jmp case.0x14000263c.3
lea rcx, [rbp + 0x50]
mov rdx, rdi
call qword [sym.imp.php5ts.dll_php_lint_script]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
mov rdx, qword [rbp + 0x58]
test eax, eax
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
jne 0x1400026e6
lea rcx, str.No_syntax_errors_detected_in__s_n
call qword [rax]
mov rdi, qword [rbp - 0x70]
jmp case.0x14000263c.3
lea rcx, str.Errors_parsing__s_n
call qword [rax]
mov rdi, qword [rbp - 0x70]
jmp case.0x14000263c.3
lea rcx, [rbp + 0x50]
mov rdx, rdi
call qword [sym.imp.php5ts.dll_open_file_for_scanning]
test eax, eax
jne 0x140002dfa
mov rcx, rdi
call qword [sym.imp.php5ts.dll_zend_strip]
jmp 0x140002dfa
lea rcx, [rbp + 0x50]
mov rdx, rdi
call qword [sym.imp.php5ts.dll_open_file_for_scanning]
test eax, eax
jne 0x140002dfa
lea rcx, [rbp + 0x108]
call qword [sym.imp.php5ts.dll_php_get_highlight_struct]
lea rcx, [rbp + 0x108]
mov rdx, rdi
call qword [sym.imp.php5ts.dll_zend_highlight]
jmp 0x140002dfa
mov rcx, rdi
call fcn.140001860
mov rcx, qword [rbp - 0x28]
lea r8, str.Command_line_code
xor edx, edx
mov qword [rsp + 0x20], rdi
lea r9d, [rdx + 1]
call qword [sym.imp.php5ts.dll_zend_eval_string_ex]
cmp eax, 0xffffffff
jne case.0x14000263c.3
mov dword [rsp + 0x50], 0xfe
jmp case.0x14000263c.3
mov rcx, rdi
mov r12, r15
call fcn.140001860
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x1400027ca
lea r8, str.Command_line_begin_code
mov r9d, 1
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x20], rdi
call qword [sym.imp.php5ts.dll_zend_eval_string_ex]
cmp eax, 0xffffffff
jne 0x1400027ca
mov dword [rsp + 0x50], 0xfe
mov ecx, 0x20
call qword [sym.imp.php5ts.dll__emalloc]
mov dword [rsp + 0x30], 1
lea r9, [rbp - 0x58]
mov qword [rbp - 0x58], rax
mov qword [rax + 0x18], r15
mov rax, qword [rbp - 0x58]
mov byte [rax + 0x14], 1
mov rax, qword [rbp - 0x58]
lea rdx, str.argi
mov dword [rax], r15d
mov rax, qword [rbp - 0x58]
mov r8d, 5
mov dword [rax + 0x10], 1
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x28], r15
mov byte [rax + 0x15], r12b
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
mov dword [rsp + 0x20], 8
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
add rcx, 0x168
call qword [sym.imp.php5ts.dll__zend_hash_add_or_update]
mov eax, dword [rsp + 0x50]
test eax, eax
jne 0x1400029fa
mov rdi, qword [rbp - 0x70]
mov rcx, qword [0x140014148]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.php5ts.dll__php_stream_get_line]
mov r14, rax
test rax, rax
je 0x1400029fe
mov rbx, rsi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], r15b
jne 0x140002880
test rbx, rbx
je 0x1400028aa
nop
movzx eax, byte [rbx + r14 - 1]
dec rbx
cmp al, 0xa
je 0x1400028a1
cmp al, 0xd
jne 0x1400028ad
mov byte [rbx + r14], r15b
test rbx, rbx
jne 0x140002890
dec rbx
mov ecx, 0x20
call qword [sym.imp.php5ts.dll__emalloc]
inc rbx
mov rcx, r14
mov qword [rbp - 0x68], rax
mov qword [rax + 0x18], r15
mov rax, qword [rbp - 0x68]
mov byte [rax + 0x14], 6
mov rax, qword [rbp - 0x68]
mov edx, ebx
mov dword [rax + 8], ebx
call qword [sym.imp.php5ts.dll__estrndup]
mov rcx, qword [rbp - 0x68]
mov qword [rcx], rax
mov rax, qword [rbp - 0x68]
mov dword [rsp + 0x30], 1
mov dword [rax + 0x10], 1
mov rax, qword [rbp - 0x68]
lea r9, [rbp - 0x68]
mov byte [rax + 0x15], r15b
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
lea rdx, str.argn
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov r8d, 5
mov rcx, qword [rax + rcx*8 - 8]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 8
add rcx, 0x168
call qword [sym.imp.php5ts.dll__zend_hash_add_or_update]
mov rax, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x30]
inc r12
mov dword [rax], r12d
test rcx, rcx
je 0x140002978
lea r8, str.Command_line_run_code
mov r9d, 1
xor edx, edx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.php5ts.dll_zend_eval_string_ex]
cmp eax, 0xffffffff
jne 0x1400029e5
mov dword [rsp + 0x50], 0xfe
jmp 0x1400029e5
mov rdx, qword [rbp - 0x60]
test rdx, rdx
je 0x1400029e5
lea r8, [rsp + 0x74]
lea rcx, [rbp + 0x50]
mov r9, rdi
call fcn.140001ba0
test eax, eax
je 0x1400029a0
mov dword [rsp + 0x50], 1
jmp 0x1400029e5
mov rax, qword [sym.imp.php5ts.dll_compiler_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rdx, qword [rax + rcx*8 - 8]
mov eax, dword [rsp + 0x74]
lea rcx, [rbp + 0x50]
mov dword [rdx + 0x1cc], eax
mov rdx, rdi
call qword [sym.imp.php5ts.dll_php_execute_script]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
mov eax, dword [rcx + 0x1f8]
mov dword [rsp + 0x50], eax
mov rcx, r14
call qword [sym.imp.php5ts.dll__efree]
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x140002850
mov rdi, qword [rbp - 0x70]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je case.0x14000263c.3
lea r8, str.Command_line_end_code
jmp 0x140002765
mov r14, r15
sub ebx, 8
je 0x140002a47
dec ebx
je 0x140002a3e
dec ebx
je 0x140002a35
cmp ebx, 2
jne 0x140002a6d
mov rax, qword [sym.imp.php5ts.dll_reflection_zend_extension_ptr]
jmp 0x140002a6a
mov rax, qword [sym.imp.php5ts.dll_reflection_extension_ptr]
jmp 0x140002a6a
mov rax, qword [sym.imp.php5ts.dll_reflection_class_ptr]
jmp 0x140002a6a
lea rdx, [0x14000e5a0]
mov rcx, r12
call qword [sym.imp.MSVCR110.dll_strstr]
test rax, rax
mov rax, qword [sym.imp.php5ts.dll_reflection_method_ptr]
jne 0x140002a6a
mov rax, qword [sym.imp.php5ts.dll_reflection_function_ptr]
mov r14, qword [rax]
mov ecx, 0x20
call qword [sym.imp.php5ts.dll__emalloc]
mov qword [rbp - 0x48], rax
mov qword [rax + 0x18], r15
mov rax, qword [rbp - 0x48]
mov dword [rax + 0x10], 1
mov rax, qword [rbp - 0x48]
mov byte [rax + 0x15], r15b
mov rbx, qword [rbp - 0x48]
inc rsi
cmp byte [r12 + rsi], r15b
jne 0x140002a97
mov dword [rbx + 8], esi
cmp esi, r15d
jge 0x140002aba
lea rdx, str.String_size_overflow
mov ecx, 1
call qword [sym.imp.php5ts.dll_zend_error]
mov edx, dword [rbx + 8]
mov rcx, r12
call qword [sym.imp.php5ts.dll__estrndup]
mov ecx, 0x20
mov byte [rbx + 0x14], 6
mov qword [rbx], rax
call qword [sym.imp.php5ts.dll__emalloc]
mov r8, rdi
mov qword [rbp - 0x50], rax
mov qword [rax + 0x18], r15
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call qword [sym.imp.php5ts.dll__object_init_ex]
mov rax, qword [rbp - 0x50]
lea rcx, [rbp + 0x130]
mov dword [rax + 0x10], 1
mov rax, qword [rbp - 0x50]
xor edx, edx
mov r8d, 0x88
mov byte [rax + 0x15], r15b
call sub.MSVCR110.dll_memset
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
mov qword [rsp + 0x48], rdi
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov qword [rsp + 0x40], r15
mov r8, qword [rax + rcx*8 - 8]
lea rax, [rbp + 0x130]
lea r9, str.__construct
mov qword [r8 + 0x4d8], rax
lea r8, [r14 + 0x108]
lea rcx, [rbp - 0x50]
mov rax, qword [r8]
mov rdx, r14
mov qword [rbp + 0x138], rax
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ntohs
call qword [sym.imp.php5ts.dll_zend_call_method]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
mov rbx, qword [rcx + 0x430]
test rbx, rbx
je 0x140002c1b
mov rcx, rdi
call qword [sym.imp.php5ts.dll_zend_exception_get_default]
lea r8, str.message
mov r9d, 7
mov rdx, rbx
mov rcx, rax
mov qword [rsp + 0x28], rdi
mov byte [rsp + 0x20], r15b
call qword [sym.imp.php5ts.dll_zend_read_property]
lea rcx, str.Exception:__s_n
mov rdx, qword [rax]
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
call qword [rax]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
add rcx, 0x430
call qword [sym.imp.php5ts.dll__zval_ptr_dtor]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax + rcx*8 - 8]
mov qword [rcx + 0x430], r15
jmp 0x140002c5f
mov rdx, qword [sym.imp.php5ts.dll_reflection_ptr]
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x48], rdi
mov rdx, qword [rdx]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 1
lea r9, str.export
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 6
call qword [sym.imp.php5ts.dll_zend_call_method]
lea rcx, [rbp - 0x50]
call qword [sym.imp.php5ts.dll__zval_ptr_dtor]
lea rcx, [rbp - 0x48]
call qword [sym.imp.php5ts.dll__zval_ptr_dtor]
jmp case.0x14000263c.3
inc rsi
cmp byte [r12 + rsi], r15b
jne case.0x14000263c.11
mov edx, esi
mov rcx, r12
call qword [sym.imp.php5ts.dll_zend_str_tolower_dup]
mov rcx, qword [sym.imp.php5ts.dll_module_registry]
lea r8d, [rsi + 1]
lea r9, [rbp + 0x20]
mov rdx, rax
mov rbx, rax
call qword [sym.imp.php5ts.dll_zend_hash_find]
cmp eax, 0xffffffff
jne 0x140002d14
lea rcx, str.main
nop dword [rax + rax]
movzx eax, byte [r12 + r15]
inc r15
cmp al, byte [rcx + r15 - 1]
jne 0x140002ceb
cmp r15, 5
jne 0x140002cc0
xor ecx, ecx
call qword [sym.imp.php5ts.dll_display_ini_entries]
mov rcx, rbx
call qword [sym.imp.php5ts.dll__efree]
jmp case.0x14000263c.3
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
lea rcx, str.Extension__s_not_present._n
mov rdx, r12
call qword [rax]
mov rcx, rbx
mov dword [rsp + 0x50], 1
call qword [sym.imp.php5ts.dll__efree]
jmp case.0x14000263c.3
mov rcx, qword [rbp + 0x20]
mov rdx, rdi
call qword [sym.imp.php5ts.dll_php_info_print_module]
mov rcx, rbx
call qword [sym.imp.php5ts.dll__efree]
jmp case.0x14000263c.3
lea rcx, str.SystemRoot
call qword [sym.imp.MSVCR110.dll_getenv]
test rax, rax
je 0x140002d50
lea rcx, str.SystemRoot
call qword [sym.imp.MSVCR110.dll_getenv]
jmp 0x140002d57
lea rax, [0x14000d984]
mov rdx, rax
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
lea rcx, str.Configuration_File__php.ini__Path:__s_n
call qword [rax]
mov rax, qword [sym.imp.php5ts.dll_php_ini_opened_path]
lea rbx, str._none_
mov rcx, qword [rax]
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
mov rdx, rbx
test rcx, rcx
cmovne rdx, rcx
lea rcx, str.Loaded_Configuration_File:__________s_n
call qword [rax]
mov rax, qword [sym.imp.php5ts.dll_php_ini_scanned_path]
mov rdx, rbx
mov rcx, qword [rax]
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
test rcx, rcx
cmovne rdx, rcx
lea rcx, str.Scan_for_additional_.ini_files_in:__s_n
call qword [rax]
mov rax, qword [sym.imp.php5ts.dll_php_ini_scanned_files]
mov rcx, qword [rax]
mov rax, qword [sym.imp.php5ts.dll_zend_printf]
test rcx, rcx
cmovne rbx, rcx
lea rcx, str.Additional_.ini_files_parsed:_______s_n
mov rdx, rbx
call qword [rax]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [rdi]
mov rdx, qword [rax + rcx*8 - 8]
mov rax, qword [rbp + 0x40]
mov qword [rdx + 0x1e8], rax
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x140002e0a
xor ecx, ecx
call qword [sym.imp.php5ts.dll_php_request_shutdown]
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140002e19
call qword [sym.imp.MSVCR110.dll_free]
mov eax, dword [rsp + 0x50]
test eax, eax
jne 0x140002e41
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rdx, dword [rax]
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8 - 8]
mov ecx, dword [rax + 0x1f8]
mov dword [rsp + 0x50], ecx
mov eax, dword [rsp + 0x50]
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.14000bdd0
mov rbx, qword [rsp + 0x538]
add rsp, 0x4e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret