Function at 0x140002f70
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rax, rdx
mov qword [rsp + 0x58], rdx
mov qword [rbp - 0x68], rdx
xor edx, edx
mov qword [0x140016208], rax
lea rdi, [0x1400130f0]
mov r12d, edx
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x68], edx
mov dword [rsp + 0x54], edx
mov qword [rsp + 0x48], rdx
mov dword [rsp + 0x78], edx
mov ebx, edx
mov qword [rsp + 0x70], rdx
mov r14d, edx
mov qword [rsp + 0x60], rdx
mov esi, edx
mov dword [rsp + 0x40], edx
mov dword [rbp - 0x7c], edx
lea rax, [0x14000ea00]
mov edx, 1
mov dword [rbp - 0x78], ecx
mov dword [rbp - 0x80], ecx
mov dword [0x140016314], ecx
mov ecx, edx
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x7c], 1
mov r15, rdi
mov qword [rbp - 0x70], rdi
mov qword [0x140013208], rax
call qword [sym.imp.php5ts.dll_tsrm_startup]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.php5ts.dll_ts_resource_ex]
mov r13, rax
mov qword [rbp - 0x60], rax
mov rax, qword [sym.imp.MSVCR110.dll__fmode]
mov dword [rax], 0x8000
call qword [sym.imp.MSVCR110.dll___iob_func]
mov rcx, rax
call qword [sym.imp.MSVCR110.dll__fileno]
mov edx, 0x8000
mov ecx, eax
call qword [sym.imp.MSVCR110.dll__setmode]
call qword [sym.imp.MSVCR110.dll___iob_func]
lea rcx, [rax + 0x30]
call qword [sym.imp.MSVCR110.dll__fileno]
mov edx, 0x8000
mov ecx, eax
call qword [sym.imp.MSVCR110.dll__setmode]
call qword [sym.imp.MSVCR110.dll___iob_func]
lea rcx, [rax + 0x60]
call qword [sym.imp.MSVCR110.dll__fileno]
mov edx, 0x8000
mov ecx, eax
call qword [sym.imp.MSVCR110.dll__setmode]
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], ebx
mov rdx, qword [rsp + 0x58]
mov ecx, dword [rbp - 0x78]
lea rax, [rsp + 0x7c]
lea r9, [rsp + 0x48]
lea r8, [0x14000e720]
mov qword [rsp + 0x20], rax
call qword [sym.imp.php5ts.dll_php_getopt]
cmp eax, 0xffffffff
je 0x1400033b7
add eax, 0xffffffc1
lea r8, str.cli_set_process_title
lea rcx, [0x140000000]
cmp eax, 0x37
ja case.0x140003103.70
cdqe
movzx eax, byte [rcx + rax + 0x3698]
mov edx, dword [rcx + rax*4 + 0x3678]
add rdx, rcx
jmp rdx
test rbx, rbx
je 0x140003113
mov rcx, rbx
call qword [sym.imp.MSVCR110.dll_free]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.MSVCR110.dll__strdup]
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], r12d
mov rbx, rax
mov qword [rsp + 0x70], rax
jmp 0x1400030a8
mov dword [rsp + 0x30], 2
mov dword [rbp - 0x7c], 1
mov dword [rsp + 0x28], r12d
jmp 0x1400030a8
mov rcx, qword [rsp + 0x48]
or rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [rcx + rbx], r12b
jne 0x140003160
mov edx, 0x3d
call qword [sym.imp.MSVCR110.dll_strchr]
mov rdi, rax
test rax, rax
je 0x1400032ab
movsx ecx, byte [rdi + 1]
inc rdi
call qword [sym.imp.MSVCR110.dll_isalnum]
test eax, eax
jne 0x14000323f
movzx eax, byte [rdi]
cmp al, 0x27
ja 0x1400031b0
movabs rcx, 0x8400000001
bt rcx, rax
jb 0x14000323f
lea eax, [rbx + rsi]
mov rcx, r14
movsxd rdx, eax
add rdx, 5
call qword [sym.imp.MSVCR110.dll_realloc]
mov rdx, qword [rsp + 0x48]
mov r8, rdi
movsxd rcx, esi
sub r8, rdx
mov r14, rax
add rcx, rax
mov qword [rsp + 0x60], rax
call sub.MSVCR110.dll_memcpy
mov eax, edi
movsxd r8, ebx
sub eax, dword [rsp + 0x48]
sub r8, rdi
mov rdx, rdi
add esi, eax
movsxd rax, esi
inc esi
mov byte [rax + r14], 0x22
add r8, qword [rsp + 0x48]
movsxd rcx, esi
add rcx, r14
call sub.MSVCR110.dll_memcpy
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x30], 2
sub eax, edi
mov dword [rsp + 0x28], r12d
add eax, ebx
mov rbx, qword [rsp + 0x70]
add esi, eax
movsxd rax, esi
add esi, 2
mov dword [rax + r14], 0xa22
mov dword [rsp + 0x40], esi
jmp 0x1400030a8
add esi, ebx
mov rcx, r14
movsxd rdx, esi
add rdx, 3
call qword [sym.imp.MSVCR110.dll_realloc]
mov rdx, qword [rsp + 0x48]
movsxd rdi, ebx
movsxd rbx, dword [rsp + 0x40]
mov r8, rdi
mov r14, rax
lea rcx, [rbx + rax]
mov qword [rsp + 0x60], rax
call sub.MSVCR110.dll_memcpy
movzx eax, word [0x14000e6d0]
lea rcx, [rdi + rbx]
mov rbx, qword [rsp + 0x70]
mov word [rcx + r14], ax
movzx eax, byte [0x14000e6d2]
inc esi
mov dword [rsp + 0x30], 2
mov byte [rcx + r14 + 2], al
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x28], r12d
jmp 0x1400030a8
add esi, ebx
mov rcx, r14
movsxd rdx, esi
add rdx, 5
call qword [sym.imp.MSVCR110.dll_realloc]
mov rdx, qword [rsp + 0x48]
movsxd rdi, ebx
movsxd rbx, dword [rsp + 0x40]
mov r8, rdi
mov r14, rax
lea rcx, [rbx + rax]
mov qword [rsp + 0x60], rax
call sub.MSVCR110.dll_memcpy
mov eax, dword [0x14000e6d4]
lea rcx, [rdi + rbx]
mov rbx, qword [rsp + 0x70]
mov dword [rcx + r14], eax
movzx eax, byte [0x14000e6d8]
add esi, 3
mov dword [rsp + 0x30], 2
mov byte [rcx + r14 + 4], al
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x28], r12d
jmp 0x1400030a8
lea r15, str.cli_server
mov dword [rsp + 0x30], 2
mov qword [0x140013338], r8
mov qword [rbp - 0x70], r15
mov dword [rsp + 0x28], r12d
jmp 0x1400030a8
mov dword [rsp + 0x78], 1
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], r12d
jmp 0x1400030a8
mov rax, qword [rsp + 0x58]
mov edx, 0x2f
mov rcx, qword [rax]
call qword [sym.imp.MSVCR110.dll_strrchr]
test rax, rax
je 0x140003371
inc rax
jmp 0x140003378
lea rax, [0x14000da70]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea rcx, str.Usage:__s__options____f___file________args...__n____s__options___r__code________args...__n____s__options____B__begin_code____R__code____E__end_code_________args...__n____s__options____B__begin_code____F__file____E__end_code_________args...__n____s__options___S__addr_:_port____t_docroot__n____s__options______args...__n____s__options___a_n_n___a_______________Run_interactively_n___c__path__file__Look_for_php.ini_file_in_this_directory_n___n_______________No_php.ini_file_will_be_used_n___d_foo_bar______Define_INI_entry_foo_with_value_bar_n___e_______________Generate_extended_information_for_debugger_profiler_n___f__file_________Parse_and_execute__file_._n___h_______________This_help_n___i_______________PHP_information_n___l_______________Syntax_check_only__lint__n___m_______________Show_compiled_in_modules_n___r__code_________Run_PHP__code__without_using_script_tags___..___n___B__begin_code___Run_PHP__begin_code__before_processing_input_lines_n___R__code_________Run_PHP__code__for_every_input_line_n___F__file_________Parse_and_execute__file__for_every_input_line_n___E__end_code_____Run_PHP__end_code__after_processing_all_input_lines_n___H_______________Hide_any_passed_arguments_from_external_tools._n___S__addr_:_port__Run_with_built_in_web_server._n___t__docroot______Specify_document_root__docroot__for_built_in_web_server._n___s_______________Output_HTML_syntax_highlighted_source._n___v_______________Version_number_n___w_______________Output_source_with_stripped_comments_and_whitespace._n___z__file_________Load_Zend_extension__file_._n_n__args...__________Arguments_passed_to_script._Use____args_when_first_argument_n___________________starts_with___or_script_is_read_from_stdin_n_n____ini____________Show_configuration_file_names_n_n____rf__name_______Show_information_about_function__name_._n____rc__name_______Show_information_about_class__name_._n____re__name_______Show_information_about_extension__name_._n____rz__name_______Show_information_about_Zend_extension__name_._n____ri__name_______Show_configuration_for_extension__name_._n_n
mov r9, rax
mov r8, rax
mov rdx, rax
mov qword [rsp + 0x20], rax
call qword [sym.imp.MSVCR110.dll_printf]
jmp 0x14000360f
lea r12, [0x1400130f0]
mov r15, r12
mov qword [rbp - 0x70], r12
jmp 0x1400033be
lea r12, [0x1400130f0]
lea rax, [0x140001790]
mov rcx, r15
mov qword [r15 + 0x100], rax
mov qword [r15 + 0xa0], rbx
mov dword [r15 + 0x108], 1
mov dword [r15 + 0xd4], 1
call qword [sym.imp.php5ts.dll_sapi_startup]
mov eax, dword [rbp - 0x7c]
mov dword [r15 + 0xd0], eax
mov rax, qword [rsp + 0x58]
mov edi, 1
mov rax, qword [rax]
mov dword [rsp + 0x54], edi
mov qword [r15 + 0xc8], rax
cmp r15, r12
jne 0x14000351d
test r14, r14
je 0x1400034be
movsxd rdx, esi
mov rcx, r14
add rdx, 0x70
call qword [sym.imp.MSVCR110.dll_realloc]
mov r14, rax
mov qword [rsp + 0x60], rax
lea eax, [rsi + 1]
lea rcx, [r14 + 0x6e]
movsxd r8, eax
mov rdx, r14
call qword [sym.imp.MSVCR110.dll_memmove]
movaps xmm0, xmmword [str.html_errors0_nregister_argc_argv1_nimplicit_flush1_noutput_buffering0_nmax_execution_time0_nmax_input_time_1_n]
movups xmmword [r14], xmm0
movaps xmm1, xmmword [0x14000e9a0]
movups xmmword [r14 + 0x10], xmm1
movaps xmm0, xmmword [0x14000e9b0]
movups xmmword [r14 + 0x20], xmm0
movaps xmm1, xmmword [0x14000e9c0]
movups xmmword [r14 + 0x30], xmm1
movaps xmm0, xmmword [0x14000e9d0]
movups xmmword [r14 + 0x40], xmm0
movaps xmm1, xmmword [0x14000e9e0]
movups xmmword [r14 + 0x50], xmm1
movsd xmm0, qword [0x14000e9f0]
movsd qword [r14 + 0x60], xmm0
mov eax, dword [0x14000e9f8]
mov dword [r14 + 0x68], eax
movzx eax, word [0x14000e9fc]
mov word [r14 + 0x6c], ax
jmp 0x14000351d
mov ecx, 0x70
call qword [sym.imp.MSVCR110.dll_malloc]
movaps xmm0, xmmword [str.html_errors0_nregister_argc_argv1_nimplicit_flush1_noutput_buffering0_nmax_execution_time0_nmax_input_time_1_n]
mov r14, rax
mov qword [rsp + 0x60], rax
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x14000e9a0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x14000e9b0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x14000e9c0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x14000e9d0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x14000e9e0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x14000e9f0]
movups xmmword [rax + 0x60], xmm0
mov rcx, r15
mov qword [r15 + 0x110], r14
call qword [r15 + reloc.WS2_32.dll_recv]
cmp eax, 0xffffffff
jne 0x14000353c
mov r12d, edi
mov dword [rsp + 0x50], edi
jmp 0x140003613
cmp dword [rsp + 0x78], 0
mov dword [rsp + 0x68], edi
je 0x140003560
mov rax, qword [sym.imp.php5ts.dll_compiler_globals_id]
movsxd rcx, dword [rax]
mov rax, qword [r13]
mov rdx, qword [rax + rcx*8 - 8]
or dword [rdx + 0x214], edi
mov rax, qword [r13]
mov rdx, qword [sym.imp.php5ts.dll_executor_globals_id]
movsxd rcx, dword [rdx]
mov rcx, qword [rax + rcx*8 - 8]
mov qword [rcx + 0x1e8], 0
movsxd rcx, dword [rdx]
mov rax, qword [r13]
mov rdx, qword [rax + rcx*8 - 8]
lea rcx, [rbp - 0x50]
mov rax, qword [rdx + 0x1e8]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x50]
mov qword [rdx + 0x1e8], rax
mov rdx, rsp
call sub.MSVCR110.dll__setjmp
mov r13, qword [rbp - 0x60]
test eax, eax
jne 0x1400035e1
mov rdx, qword [rbp - 0x68]
mov ecx, dword [rbp - 0x80]
mov r8, r13
cmp qword [rbp - 0x70], r12
jne 0x1400035d3
call fcn.140001cb0
mov r12d, eax
mov dword [rsp + 0x50], eax
jmp 0x1400035e6
call fcn.140009ab0
mov r12d, eax
mov dword [rsp + 0x50], eax
jmp 0x1400035e6
mov r12d, dword [rsp + 0x50]
mov rax, qword [sym.imp.php5ts.dll_executor_globals_id]
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x70]
movsxd rcx, dword [rax]
mov rax, qword [r13]
mov rdx, qword [rax + rcx*8 - 8]
mov rax, qword [rsp + 0x58]
mov qword [rdx + 0x1e8], rax
mov edi, dword [rsp + 0x54]
test rbx, rbx
je 0x140003621
mov rcx, rbx
call qword [sym.imp.MSVCR110.dll_free]
test r14, r14
je 0x14000362f
mov rcx, r14
call qword [sym.imp.MSVCR110.dll_free]
cmp dword [rsp + 0x68], 0
je 0x14000363f
mov rcx, r13
call qword [sym.imp.php5ts.dll_php_module_shutdown]
test edi, edi
je 0x140003649
call qword [sym.imp.php5ts.dll_sapi_shutdown]
call qword [sym.imp.php5ts.dll_tsrm_shutdown]
cmp qword [0x140016208], 0
je 0x14000366e
mov qword [0x140016208], 0
mov dword [0x140016314], 0
mov ecx, r12d
call qword [sym.imp.MSVCR110.dll_exit]
int3