Function at 0x1011c360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x154
push ebx
mov ebx, dword [esp + 0x15c]
push ebp
mov eax, dword [ebx + 0x30]
push esi
push edi
mov edi, dword [esp + 0x16c]
test eax, eax
mov edi, dword [edi + 4]
mov ebp, 0x1048d1f8
cmovne ebp, eax
push 0x11c
xorps xmm0, xmm0
lea eax, [esp + 0x38]
push 0
push eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], ebp
movq qword [esp + 0x15c], xmm0
movq qword [esp + 0x164], xmm0
mov dword [esp + 0x16c], 0
call sub.MSVCR110.dll_memset
movzx eax, word [ebx + 0x26]
movzx edx, word [ebx + 0x24]
movzx esi, word [ebx + 0x22]
imul edx, eax
lea eax, [ebp + 0x100]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x17c]
add edx, esi
mov dword [esp + 0x90], eax
xor eax, eax
add edx, ebx
add esp, 0xc
mov dword [esp + 0x80], ebp
mov ebp, dword [ebx + 8]
mov dword [esp + 0x160], edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x40], 0
cmp dword [edi + 0x28], eax
sete al
xor esi, esi
mov dword [esp + 0xa4], esi
mov dword [esp + 0x88], eax
mov eax, ebp
and eax, 0x700000
cmp eax, 0x300000
ja 0x1011c483
je 0x1011c4a8
test eax, eax
je 0x1011c475
cmp eax, 0x100000
je 0x1011c47c
cmp eax, 0x200000
jne 0x1011d6e7
mov ecx, 0xa
jmp 0x1011c4ad
mov ecx, 0xd
jmp 0x1011c4ad
cmp eax, 0x400000
je 0x1011c49c
cmp eax, 0x500000
jne 0x1011d6e7
mov esi, 2
jmp 0x1011c4a1
mov esi, 1
mov dword [esp + 0xa4], esi
mov ecx, 0xd0a
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xa8], getpeername
mov dword [esp + 0xac], 0
mov edi, 2
test ebp, 0x800000
jne 0x1011c4dc
mov edi, 1
mov eax, ebp
shr eax, 5
and eax, 1
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x18]
add eax, 0x340
mov dword [esp + 0xc4], eax
movzx eax, word [ebx + 0x22]
add eax, ebx
mov dword [esp + 0xc8], eax
movzx eax, word [ebx + 0x26]
mov dword [esp + 0xcc], eax
movzx eax, word [ebx + 0x24]
mov dword [esp + 0xd0], eax
mov eax, ebp
shr eax, 0x19
and eax, 1
mov dword [esp + 0x134], eax
mov eax, ebp
shr eax, 0xb
shr ebp, 0x1d
and eax, 1
and ebp, 1
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], getpeername
mov dword [esp + 0xbc], 0
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ebp
test eax, eax
je 0x1011c5d3
cmp esi, 1
jne 0x1011c57c
mov dword [esp + 0xa8], 0x2029
jmp 0x1011c5a6
cmp esi, 2
jne 0x1011c58e
mov dword [esp + 0xa8], 0xd
jmp 0x1011c5a6
and ecx, 0xff
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], ecx
test esi, esi
je 0x1011c5b1
mov dword [esp + 0xac], 0xa
mov eax, 0xd
mov ecx, 0x2029
cmp edi, 1
cmove eax, ecx
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0xa
movzx ecx, byte [edx + 1]
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
add edx, ecx
cmp byte [edx], 0x77
je 0x1011c5d3
movzx eax, word [ebx + 0x1e]
inc eax
lea ebp, [edx + 3]
push eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x58], 0x14
call dword [0x106438c4]
mov ecx, eax
add esp, 4
mov dword [esp + 0x44], ecx
test ecx, ecx
je 0x1011d6e7
movzx eax, word [ebx + 0x1e]
inc eax
push eax
push 1
push ecx
call sub.MSVCR110.dll_memset
push ebp
push dword [esp + 0x48]
lea eax, [esp + 0x48]
push eax
call fcn.10122110
add esp, 0x18
test eax, eax
jne 0x1011c64f
push dword [esp + 0x44]
call dword [sym.php5.dll_php_pcre_free]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret
mov eax, dword [esp + 0x170]
test eax, eax
jne 0x1011c680
test byte [ebx + 0xc], 0x40
je 0x1011c67a
test dword [ebx + 8], 0x4000000
jne 0x1011c67a
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x58], ecx
add ecx, 4
mov dword [esp + 0x54], ecx
jmp 0x1011c6ac
mov ecx, dword [esp + 0x54]
jmp 0x1011c6ac
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x60], ecx
add ecx, 4
mov dword [esp + 0x54], ecx
cmp eax, 1
jne 0x1011c6a1
mov dword [esp + 0x64], ecx
add ecx, 8
mov dword [esp + 0x54], ecx
jmp 0x1011c6ac
mov dword [esp + 0x98], 1
test dword [ebx + 8], 0x40000
je 0x1011c6c0
mov dword [esp + 0x68], ecx
add ecx, 4
mov dword [esp + 0x54], ecx
cmp dword [esp + 0x70], 0
je 0x1011c6d2
mov dword [esp + 0x70], ecx
add ecx, 4
mov dword [esp + 0x54], ecx
cmp dword [esp + 0x98], 0
je 0x1011c6f1
cmp dword [esp + 0x8c], 0
je 0x1011c6f1
mov eax, ecx
add ecx, 4
mov dword [esp + 0x54], ecx
jmp 0x1011c700
mov eax, dword [esp + 0x78]
mov dword [esp + 0x98], 0
test cl, 4
je 0x1011c70c
add ecx, 4
mov dword [esp + 0x54], ecx
test eax, eax
cmove eax, ecx
cmp dword [esp + 0x74], 0
mov dword [esp + 0x78], eax
je 0x1011c734
movzx eax, word [ebx + 0x1e]
inc eax
push eax
push 0
push dword [esp + 0x4c]
call sub.MSVCR110.dll_memset
mov ecx, dword [esp + 0x60]
add esp, 0xc
movzx eax, word [ebx + 0x1e]
inc eax
mov esi, ebp
sub esi, dword [esp + 0x38]
lea eax, [ecx + eax*8]
mov dword [esp + 0x50], eax
xor eax, eax
cmp dword [esp + 0x94], eax
setne al
add eax, 4
imul eax, esi
push eax
call dword [0x106438c4]
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
je 0x1011c637
lea edi, [esi*4]
push edi
push 0
push eax
call sub.MSVCR110.dll_memset
movzx ecx, word [ebx + 0x1e]
mov eax, dword [esp + 0x5c]
push ebp
lea eax, [eax + ecx*4]
add eax, 4
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x48]
push eax
call fcn.10122780
mov ebp, dword [esp + 0x2c]
add esp, 0x18
cmp ebp, 0x10000
jle 0x1011c7d1
push dword [esp + 0x3c]
call dword [sym.php5.dll_php_pcre_free]
push dword [esp + 0x48]
call dword [sym.php5.dll_php_pcre_free]
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret
cmp dword [esp + 0x94], 0
je 0x1011c801
mov eax, dword [esp + 0x3c]
push esi
add eax, edi
push 0
push eax
mov dword [esp + 0x54], eax
call sub.MSVCR110.dll_memset
push 0
push dword [esp + 0x48]
lea eax, [esp + 0x48]
push eax
call fcn.10123a40
add esp, 0x18
push 0
call fcn.1011dc10
mov edi, eax
add esp, 4
test edi, edi
jne 0x1011c833
push dword [esp + 0x44]
call dword [sym.php5.dll_php_pcre_free]
push dword [esp + 0x40]
call dword [sym.php5.dll_php_pcre_free]
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret
push ebp
push 0
push 0
push 5
push 5
push 1
push 0
push edi
mov dword [esp + 0x54], edi
call fcn.1011dfb0
movzx eax, word [ebx + 0x1e]
lea eax, [eax*2 + 2]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.10123ee0
mov eax, dword [esp + 0x80]
add esp, 0x28
test eax, eax
je 0x1011c883
push 0
push 1
push eax
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
push 0
push 0xa
push 0
push 6
push 0x20
push edi
call fcn.1011e4d0
push 0
push 0xa
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
push 4
push 0x81
push 0
push 0xa
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x48
push 0xc
push 0x81
push 0
push 9
push 0x20
push edi
call fcn.1011e4d0
push 0
push 0x81
push 0
push 3
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x30
cmp dword [edi], 0
jne 0x1011c8fb
push 0x20
push 0x81
push 0
push 1
push edi
call fcn.101202a0
add esp, 0x14
push 4
push 0x83
push 0
push 2
push 0x20
push edi
call fcn.1011e4d0
push 8
push 0x83
push 0
push 8
push 0x20
push edi
call fcn.1011e4d0
push 0
push 1
push 0x10
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
mov esi, dword [esp + 0x1b8]
add esp, 0x48
cmp esi, 1
jne 0x1011c95b
push 0xffffffffffffffff
push 0x40
push dword [esp + 0x6c]
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x1011c978
push 0
push 0x40
push eax
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
mov eax, dword [esp + 0x70]
test eax, eax
je 0x1011c995
push 0
push 0x40
push eax
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
mov eax, dword [ebx + 8]
test al, 0x10
jne 0x1011ca70
shr eax, 0x12
and eax, 1
push eax
mov eax, dword [ebx + 0xc]
shr eax, 0xb
and eax, 1
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.10126250
push edi
mov dword [esp + 0x34], eax
call fcn.1011ece0
mov ecx, dword [ebx + 8]
add esp, 0x10
mov dword [esp + 0x18], eax
test ecx, 0x4000000
jne 0x1011ca7d
test esi, esi
jne 0x1011c9fb
shr ecx, 0x12
and ecx, 1
push ecx
lea eax, [esp + 0x38]
push eax
call fcn.10126e10
add esp, 8
test eax, eax
jne 0x1011cb9a
mov ecx, dword [ebx + 0xc]
test cl, 0x10
je 0x1011ca28
mov eax, dword [ebx + 8]
shr eax, 0x12
and eax, 1
push eax
movzx eax, byte [ebx + 0x18]
shr ecx, 5
and ecx, 1
push ecx
push eax
lea eax, [esp + 0x40]
push eax
call fcn.10127920
add esp, 0x10
jmp 0x1011ca7d
test ecx, 0x100
je 0x1011ca49
mov eax, dword [ebx + 8]
shr eax, 0x12
and eax, 1
push eax
lea eax, [esp + 0x38]
push eax
call fcn.10127b10
add esp, 8
jmp 0x1011ca7d
mov ebp, dword [esp + 0x10]
test byte [ebp + 4], 1
je 0x1011ca81
mov eax, dword [ebx + 8]
shr eax, 0x12
and eax, 1
push eax
lea eax, [ebp + 8]
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.10128300
add esp, 0xc
jmp 0x1011ca81
push edi
call fcn.1011ece0
add esp, 4
mov dword [esp + 0x18], eax
mov ebp, dword [esp + 0x10]
test esi, esi
je 0x1011cb9e
xor ebp, ebp
cmp dword [esp + 0x58], 0
je 0x1011cabb
mov edx, dword [ebx + 0xc]
movzx eax, byte [ebx + 0x1a]
mov ecx, edx
shr ecx, 4
and ecx, 1
push ecx
shr edx, 7
and edx, 1
push edx
push eax
lea eax, [esp + 0x40]
push eax
call fcn.10128560
add esp, 0x10
mov dword [esp + 0x20], eax
push 0
push 0xa
push dword [esp + 0x5c]
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
push 0x10
push 0x8b
push 0
push 7
push 0x20
push edi
call fcn.1011e4d0
mov eax, dword [esp + 0xa4]
add esp, 0x30
test eax, eax
je 0x1011cb06
push 0xffffffffffffffff
push 0x40
push eax
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
cmp dword [esp + 0x98], 0
je 0x1011cb2b
push 0
push 0xa
push dword [esp + 0x80]
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
cmp esi, 1
jne 0x1011cbf4
push 0xffffffffffffffff
push 0x40
push dword [esp + 0x6c]
push 0x8b
push esi
push edi
call fcn.1011ee70
push 0
push 0xa
push dword [esp + 0x80]
mov esi, eax
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
mov eax, dword [esp + 0x94]
push 0
push 0xa
add eax, 4
push eax
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x48
push edi
call fcn.1011ece0
push eax
push esi
call fcn.1011ef90
mov esi, dword [esp + 0x17c]
add esp, 0xc
jmp 0x1011cc11
mov ebp, dword [esp + 0x10]
cmp dword [ebp + 0x28], 0
jbe 0x1011ca89
test dword [ebx + 8], 0x4000000
jne 0x1011ca89
push 0xffffffffffffffff
push 0x40
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
push dword [ebp + 0x28]
push 0x40
push 0
push 0xa
push 0
push 3
push 0x60
push edi
call fcn.1011e870
push 0
push 9
push 0
push 3
push 4
push edi
call fcn.1011ee70
add esp, 0x50
mov ebp, eax
jmp 0x1011ca8b
cmp esi, 2
jne 0x1011cc11
push 0
push 0xa
push dword [esp + 0x68]
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
lea eax, [esp + 0x150]
push eax
push dword [esp + 0x2c]
lea eax, [esp + 0x3c]
push dword [esp + 0x40]
push eax
call fcn.1012d7c0
add esp, 0x10
cmp dword [edi], 0
je 0x1011cc67
push edi
call fcn.1011dd00
push dword [esp + 0x48]
call dword [sym.php5.dll_php_pcre_free]
push dword [esp + 0x44]
call dword [sym.php5.dll_php_pcre_free]
push dword [edi + 0x20]
push dword [esp + 0x50]
call fcn.10123eb0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret
cmp dword [esp + 0x88], 0
je 0x1011cc97
push dword [esp + 0x54]
push 0x8b
push 0
push 0xa
push 0
push edi
call fcn.1011ee70
push edi
mov dword [esp + 0x48], eax
call fcn.1011ece0
add esp, 0x1c
mov dword [esp + 0x1c], eax
push edi
call fcn.1011ece0
mov ecx, dword [esp + 0x10c]
add esp, 4
mov dword [esp + 0xe0], eax
test ecx, ecx
je 0x1011ccbc
push eax
push ecx
call fcn.10123b50
add esp, 8
movzx eax, word [ebx + 0x1e]
inc eax
push eax
lea eax, [esp + 0x38]
push eax
call fcn.10124210
push edi
call fcn.1011ece0
mov ecx, dword [esp + 0x108]
add esp, 0xc
mov dword [esp + 0xdc], eax
mov dword [esp + 0xd8], eax
test ecx, ecx
je 0x1011ccff
push eax
push ecx
call fcn.10123b50
mov eax, dword [esp + 0xe4]
add esp, 8
mov ecx, dword [esp + 0x104]
test ecx, ecx
je 0x1011cd1b
push eax
push ecx
call fcn.10123b50
mov eax, dword [esp + 0xe4]
add esp, 8
test ebp, ebp
je 0x1011cd29
push eax
push ebp
call fcn.1011ef90
add esp, 8
cmp dword [edi], 0
jne 0x1011ce16
push 0
push 0xb
push dword [edi + 0x3c]
mov dword [edi + 0x4c], 0
push 0x40
push 0x11
push edi
call fcn.10120560
add esp, 0x18
test eax, eax
jne 0x1011cd59
cmp dword [edi], eax
jne 0x1011ce16
test byte [edi + 4], 1
je 0x1011cd83
push 4
push edi
call fcn.1011f770
add esp, 8
test eax, eax
je 0x1011ce16
mov byte [eax], 3
add dword [edi + 0x40], 3
mov word [eax + 1], 0x248b
mov byte [eax + 3], 0x24
mov eax, dword [edi + 0x2c]
cmp eax, 7
jle 0x1011cd90
lea edx, [eax - 7]
jmp 0x1011cd92
xor edx, edx
mov ecx, 3
cmp dword [edi + 0x30], ecx
lea eax, [edx + 2]
cmovle ecx, dword [edi + 0x30]
add eax, ecx
cmp dword [edi + 0x48], 2
mov dword [esp + 0x14], eax
jle 0x1011cdb4
add eax, 2
mov dword [esp + 0x14], eax
inc eax
push eax
push edi
call fcn.1011f770
add esp, 8
test eax, eax
je 0x1011ce16
mov ecx, dword [esp + 0x14]
mov byte [eax], cl
add dword [edi + 0x40], ecx
inc eax
cmp dword [edi + 0x30], 0
jg 0x1011cdd9
cmp dword [edi + 0x2c], 9
jle 0x1011cddd
mov byte [eax], 0x5b
inc eax
cmp dword [edi + 0x30], 1
jg 0x1011cde9
cmp dword [edi + 0x2c], 8
jle 0x1011cded
mov byte [eax], 0x5e
inc eax
cmp dword [edi + 0x30], 2
jg 0x1011cdf9
cmp dword [edi + 0x2c], 7
jle 0x1011cdfd
mov byte [eax], 0x5f
inc eax
mov byte [eax], 0x5d
cmp dword [edi + 0x48], 2
jle 0x1011ce12
mov word [eax + 1], 0x4c2
mov byte [eax + 3], 0
jmp 0x1011ce16
mov byte [eax + 1], 0xc3
test esi, esi
je 0x1011ce48
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x100]
mov dword [esp + 0xe0], eax
call fcn.10123b50
push dword [esp + 0xe4]
lea eax, [esp + 0x44]
push eax
call fcn.101244e0
add esp, 0x14
cmp dword [esp + 0x88], 0
je 0x1011ce5f
push edi
call fcn.1011ece0
add esp, 4
mov dword [esp + 0x30], eax
push dword [esp + 0x158]
lea eax, [esp + 0x38]
push eax
call fcn.1012df10
add esp, 8
cmp dword [edi], 0
push edi
jne 0x1011cc34
call fcn.1011ece0
add esp, 4
mov ebp, eax
cmp esi, 1
jne 0x1011cefe
push 0
push 0x40
push dword [esp + 0x6c]
push 0x8b
push esi
push edi
call fcn.1011ee70
push dword [esp + 0x78]
mov esi, eax
push 0x8b
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
push 0xffffffffffffffff
push 0x40
push dword [esp + 0x98]
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x48
push 0
push 1
push dword [esp + 0x6c]
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
push edi
call fcn.1011ece0
push eax
push esi
call fcn.1011ef90
mov esi, dword [esp + 0x194]
add esp, 0x24
mov eax, dword [ebx + 8]
test al, 0x10
jne 0x1011cf24
test eax, 0x40000
je 0x1011cf24
push dword [esp + 0x68]
push 0x8b
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
push dword [esp + 0x78]
push 0x8b
push 0
push 0xa
push 0x20
push edi
call fcn.1011e4d0
mov eax, dword [ebx + 8]
add esp, 0x18
test al, 0x10
jne 0x1011cf87
mov ecx, dword [esp + 0xe4]
test ecx, ecx
je 0x1011cf5c
test eax, 0x40000
jne 0x1011cf87
push ecx
push 0
push 9
jmp 0x1011cf6f
push dword [esp + 0x24]
push 0
test eax, 0x40000
jne 0x1011cf6d
push 9
jmp 0x1011cf6f
push 1
push 0
push 0xa
push 2
push edi
call fcn.1011ee70
add esp, 0x18
push eax
call fcn.1011ef90
add esp, 8
cmp dword [esp + 0x20], 0
je 0x1011cfa1
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x28]
call fcn.1011ef90
add esp, 0xc
cmp esi, 1
jne 0x1011cfcd
push dword [esp + 0xd4]
push 0xffffffffffffffff
push 0x40
push dword [esp + 0x70]
push 0x8b
push esi
push edi
call fcn.1011ee70
add esp, 0x18
push eax
call fcn.1011ef90
add esp, 8
push 0xffffffffffffffff
push 0x40
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x18
push dword [esp + 0xd8]
push 0x16
push edi
call fcn.1011ed60
add esp, 8
push eax
call fcn.1011ef90
lea eax, [esp + 0x3c]
push eax
call fcn.10123c10
add esp, 0xc
cmp dword [esp + 0x88], 0
je 0x1011d0e5
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x34]
call fcn.1011ef90
push 0
push 6
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
push 0x2e
push 0x81
push 0
push 3
push 0x21
push edi
call fcn.1011e4d0
mov esi, dword [esp + 0x6c]
add esp, 0x3c
push esi
push 0
push 0x40
push 0
push 3
push 1
push edi
call fcn.1011ee70
add esp, 0x18
push eax
call fcn.1011ef90
push 0x2f
push 0x81
push 0
push 3
push 0x21
push edi
call fcn.1011e4d0
add esp, 0x20
push dword [esp + 0x1c]
push 0
push 0x40
push 0
push 3
push 0
push edi
call fcn.1011ee70
add esp, 0x18
push eax
call fcn.1011ef90
push 4
push 0x81
push 0
push 3
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x20
push dword [esp + 0x1c]
push 0
push 0xa
push 0
push 3
push 1
push edi
call fcn.1011ee70
add esp, 0x18
push eax
call fcn.1011ef90
add esp, 8
push esi
push 0x16
push edi
call fcn.1011ed60
add esp, 8
push eax
call fcn.1011ef90
add esp, 8
mov eax, dword [esp + 0xf0]
mov esi, dword [esp + 0xd8]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x9c], 1
test eax, eax
je 0x1011d147
lea esp, [esp]
lea eax, [esp + 0x34]
push eax
call fcn.10135b20
add esp, 4
cmp dword [edi], 0
jne 0x1011cc33
lea eax, [esp + 0x34]
push eax
call fcn.10123c10
mov eax, dword [esp + 0xf8]
add esp, 4
mov eax, dword [eax]
mov dword [esp + 0xf4], eax
test eax, eax
jne 0x1011d110
push edi
mov dword [esp + 0xa0], 0
mov dword [esp + 0xdc], esi
call fcn.1011ece0
push eax
push dword [esp + 0x118]
call fcn.10123b50
push 0
push 0x8b
push edi
call fcn.1011e340
push 0
push 3
push 4
push 0x8b
push 0x20
push edi
call fcn.1011e4d0
push 0
push 6
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x48
push 0
push 0x81
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
push 0
push 2
push 0
push 0x81
push 0x20
push edi
call fcn.1011e4d0
push 0x2000
push 0x40
push 8
push 0x81
push 0
push 3
push 0x60
push edi
call fcn.1011e870
add esp, 0x50
cmp dword [edi], 0
jne 0x1011d2a2
cmp dword [edi + 0x4c], 0
je 0x1011d1f8
mov dword [edi + 0x4c], 0
mov ecx, dword [edi + 0x24]
mov eax, dword [ecx + 4]
lea edx, [eax + 3]
cmp edx, 0xff8
ja 0x1011d213
add eax, 8
add eax, ecx
mov dword [ecx + 4], edx
jmp 0x1011d241
push 0x1000
call dword [0x106438c4]
mov ecx, eax
add esp, 4
test ecx, ecx
jne 0x1011d22f
mov dword [edi], 2
jmp 0x1011d245
mov eax, dword [edi + 0x24]
mov dword [ecx], eax
mov dword [edi + 0x24], ecx
mov dword [ecx + 4], 3
lea eax, [ecx + 8]
test eax, eax
jne 0x1011d24c
cmp dword [edi], 0
jne 0x1011d2a2
jmp 0x1011d259
mov byte [eax], 2
add dword [edi + 0x40], 2
mov word [eax + 1], 0xc88b
push 0x10
push edi
call fcn.1011f7d0
mov esi, eax
add esp, 8
test esi, esi
jne 0x1011d272
mov dword [edi], 2
jmp 0x1011d2a2
push 2
push edi
push esi
call fcn.1011f8c0
push 2
mov dword [esi + 0xc], fcn.1011f5e0
add dword [edi + 0x40], 5
push edi
call fcn.1011f770
add esp, 0x14
test eax, eax
jne 0x1011d29d
mov dword [edi], 2
jmp 0x1011d2a2
mov word [eax], 0x1e00
push 0
push 0x40
push 0
push 1
push 1
push edi
call fcn.1011ee70
push 0
push 6
push 0
push 1
push 0x20
push edi
mov esi, eax
call fcn.1011e4d0
push 0
push 0x81
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x48
push 0
push 0x81
push 0
push 2
push 0x20
push edi
call fcn.1011e4d0
push 8
push 0x81
push 0
push 8
push 0x20
push edi
call fcn.1011e4d0
push 4
push 0x8b
push 0
push 3
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x48
push 0
push 0x8b
push edi
call fcn.1011e3e0
push edi
call fcn.1011ece0
push eax
push esi
call fcn.1011ef90
push 0xffffffffffffffe5
push 0x40
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x30
push dword [esp + 0xd8]
push 0x16
push edi
call fcn.1011ed60
add esp, 8
push eax
call fcn.1011ef90
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x11c]
call fcn.10123b50
push 0xfffffffffffffff8
push 0x40
push 0
push 1
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x2c
push dword [esp + 0xd8]
push 0x16
push edi
call fcn.1011ed60
add esp, 8
push eax
call fcn.1011ef90
add esp, 8
cmp dword [esp + 0x114], 0
je 0x1011d3c6
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x11c]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.101287b0
add esp, 0x10
cmp dword [esp + 0x118], 0
je 0x1011d3f0
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x120]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.101289f0
add esp, 0x10
cmp dword [esp + 0x11c], 0
je 0x1011d41a
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x124]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10128ee0
add esp, 0x10
cmp dword [esp + 0x120], 0
je 0x1011d444
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x128]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.101290a0
add esp, 0x10
cmp dword [esp + 0x124], 0
je 0x1011d46e
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x12c]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.101294b0
add esp, 0x10
cmp dword [esp + 0x128], 0
je 0x1011d498
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x130]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10129690
add esp, 0x10
cmp dword [esp + 0x12c], 0
je 0x1011d4c2
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x134]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10129890
add esp, 0x10
cmp dword [esp + 0x130], 0
je 0x1011d53d
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x138]
call fcn.10123b50
movzx eax, word [ebx + 0x1e]
lea eax, [eax*2 + 2]
push eax
lea eax, [esp + 0x44]
push eax
call fcn.10123ff0
add esp, 0x14
push dword [esp + 0x18]
push 0
push 1
push 0
push 0xa
push 4
push edi
call fcn.1011ee70
add esp, 0x18
push eax
call fcn.1011ef90
push 0
push 1
push 0
push 0xa
push 0x20
push edi
call fcn.1011e4d0
add esp, 0x20
push ebp
push 0x16
push edi
call fcn.1011ed60
add esp, 8
push eax
call fcn.1011ef90
add esp, 8
cmp dword [esp + 0x140], 0
je 0x1011d567
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x148]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10125950
add esp, 0x10
cmp dword [esp + 0x144], 0
je 0x1011d591
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x14c]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10125c80
add esp, 0x10
cmp dword [esp + 0x148], 0
je 0x1011d5bb
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x150]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10125ec0
add esp, 0x10
cmp dword [esp + 0x14c], 0
je 0x1011d5e5
push edi
call fcn.1011ece0
push eax
push dword [esp + 0x154]
call fcn.10123b50
lea eax, [esp + 0x40]
push eax
call fcn.10126120
add esp, 0x10
push dword [esp + 0x44]
call dword [sym.php5.dll_php_pcre_free]
push dword [esp + 0x40]
call dword [sym.php5.dll_php_pcre_free]
push edi
call fcn.1011dda0
mov edx, dword [esp + 0xf8]
mov ebp, eax
mov eax, dword [edi + 0x44]
add esp, 0xc
mov dword [esp + 0x28], eax
test edx, edx
je 0x1011d627
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 4]
mov dword [ecx], eax
mov edx, dword [edx + 8]
test edx, edx
jne 0x1011d616
push edi
call fcn.1011dd00
add esp, 4
test ebp, ebp
jne 0x1011d64e
push dword [edi + 0x20]
push dword [esp + 0x44]
call fcn.10123eb0
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret
mov eax, dword [esp + 0x16c]
test byte [eax], 0x40
je 0x1011d661
mov esi, dword [eax + 0x1c]
test esi, esi
jne 0x1011d6cd
push 0x34
call dword [0x106438c4]
mov esi, eax
add esp, 4
test esi, esi
jne 0x1011d692
push ebp
call fcn.1011da60
push dword [edi + 0x20]
push dword [esp + 0x48]
call fcn.10123eb0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret
push 0x34
push 0
push esi
call sub.MSVCR110.dll_memset
movzx eax, word [ebx + 0x1e]
add esp, 0xc
lea eax, [eax*2 + 2]
mov dword [esi + 0x2c], eax
test dword [ebx + 0xc], 0x2000
je 0x1011d6bb
mov eax, dword [ebx + 0x10]
jmp 0x1011d6bd
xor eax, eax
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x16c]
or dword [eax], 0x40
mov dword [eax + 0x1c], esi
mov ecx, dword [esp + 0x170]
mov dword [esi + ecx*4], ebp
mov eax, dword [esp + 0x40]
mov dword [esi + ecx*4 + 0xc], eax
mov eax, dword [esp + 0x28]
mov dword [esi + ecx*4 + 0x18], eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x154
ret