Function at 0x1020d570
Capabilities:
Encode data using xor
Hash data with crc32
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xa8
mov eax, dword [0x106499c8]
xor eax, esp
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xb0]
movq xmm0, qword [str.__HALT_COMPILER___]
push ebx
mov ebx, dword [esp + 0xc0]
push esi
mov esi, dword [esp + 0xbc]
mov dword [esp + 0x18], eax
mov ax, word [0x105020f4]
movq qword [esp + 0x98], xmm0
movq xmm0, qword [0x105020ec]
push edi
mov edi, dword [esp + 0xb8]
movq qword [esp + 0xa4], xmm0
test dword [edi + 0xd4], 0x100
mov word [esp + 0xac], ax
mov al, byte [0x105020f6]
xorps xmm0, xmm0
mov dword [esp + 0x58], edi
mov byte [esp + 0xae], al
mov dword [esp + 0x34], 0
mov byte [esp + 0x2c], 0
mov dword [esp + 0x38], 0
movq qword [esp + 0x3c], xmm0
mov dword [esp + 0x4c], 1
mov dword [esp + 0x44], 1
mov dword [esp + 0x28], 0
je 0x1020d648
test ebx, ebx
je 0x1020ea21
push dword [edi]
push str.internal_error:_attempt_to_flush_cached_zip_based_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x10
jmp 0x1020ea21
test ebx, ebx
je 0x1020d652
mov dword [ebx], 0
lea eax, [edi + 0x2c]
push eax
call sym.php5.dll_zend_hash_num_elements
add esp, 4
test eax, eax
jne 0x1020d66c
cmp dword [esp + 0x1c], eax
je 0x1020ea21
lea eax, [edi + 0x54]
push eax
call sym.php5.dll_zend_hash_clean
mov eax, dword [edi + 0xd4]
add esp, 4
test al, 0x20
je 0x1020d6b0
push ebx
push dword [esp + 0xc8]
push esi
push dword [esp + 0x28]
push edi
call fcn.10228cd0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa4]
xor ecx, esp
call fcn.10311bec
add esp, 0xa8
ret
test al, 0x40
je 0x1020d6e2
push ebx
push dword [esp + 0xc8]
push esi
push dword [esp + 0x28]
push edi
call fcn.1021f650
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa4]
xor ecx, esp
call fcn.10311bec
add esp, 0xa8
ret
cmp dword [0x106607a0], 0
jne 0x1020ea21
mov ecx, dword [edi + 0xb0]
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x1020d718
test al, 8
jne 0x1020d718
push 0
push 0
push ecx
mov dword [esp + 0x20], 0
call sym.php5.dll__php_stream_seek
add esp, 0xc
jmp 0x1020d73c
push 0
push 0
push 0
push 0x1053acc4
push dword [edi]
call sym.php5.dll__php_stream_open_wrapper_ex
xor ecx, ecx
add esp, 0x14
test eax, eax
setne cl
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
push ebp
push 0
call sym.php5.dll__php_stream_fopen_tmpfile
mov ebp, eax
add esp, 4
mov dword [esp + 0x58], ebp
test ebp, ebp
jne 0x1020d782
test ebx, ebx
je 0x1020d764
push str.unable_to_create_temporary_file
push eax
push ebx
call sym.php5.dll_spprintf
add esp, 0xc
cmp dword [esp + 0x18], 0
je 0x1020ea20
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
jmp 0x1020ea20
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1020d973
test esi, esi
jns 0x1020d860
call sym.php5.dll_php_file_le_pstream
push eax
call sym.php5.dll_php_file_le_stream
push eax
push 2
push 0
push str.stream
push 0xffffffffffffffff
push dword [esp + 0x38]
call sym.php5.dll_zend_fetch_resource
add esp, 0x1c
test eax, eax
jne 0x1020d7f0
cmp dword [esp + 0x18], eax
je 0x1020d7d1
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_access_resource_to_copy_stub_to_new_phar___s_
jmp 0x1020ea15
cmp esi, 0xffffffff
jne 0x1020d7f9
or esi, esi
jmp 0x1020d7fb
neg esi
push 0
push esi
lea ecx, [esp + 0x28]
push ecx
push eax
mov dword [esp + 0x30], 0
call sym.php5.dll__php_stream_copy_to_mem
mov esi, eax
add esp, 0x10
test esi, esi
je 0x1020d82c
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1020d82c
mov dword [esp + 0x1c], 1
jmp 0x1020d868
cmp dword [esp + 0x18], 0
je 0x1020d841
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_read_resource_to_copy_stub_to_new_phar___s_
jmp 0x1020ea15
mov dword [esp + 0x1c], 0
push esi
push eax
call sym.php5.dll__estrndup
push 0x12
push esi
lea ecx, [esp + 0xb0]
push ecx
push eax
mov dword [esp + 0x40], eax
call sym.php5.dll_php_stristr
mov ecx, dword [esp + 0x40]
add esp, 0x18
mov esi, eax
push ecx
test esi, esi
jne 0x1020d8eb
call sym.php5.dll__efree
add esp, 4
cmp dword [esp + 0x18], esi
je 0x1020d8ae
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020d8cf
push dword [edi]
push str.illegal_stub_for_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x10
cmp dword [esp + 0x1c], 0
je 0x1020ea20
push dword [esp + 0x20]
call sym.php5.dll__efree
add esp, 4
jmp 0x1020ea20
mov eax, dword [esp + 0x24]
sub eax, ecx
add esi, eax
call sym.php5.dll__efree
mov eax, dword [esp + 0x24]
sub esi, eax
add esi, 0x12
push esi
push eax
push ebp
call sym.php5.dll__php_stream_write
add esp, 0x10
cmp esi, eax
jne 0x1020d93f
push 5
push str.____r_n
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp eax, 5
jne 0x1020d93f
cmp dword [esp + 0x1c], 0
lea eax, [esi + 5]
mov dword [edi + 0x28], eax
je 0x1020da83
push dword [esp + 0x20]
jmp 0x1020da7b
cmp dword [esp + 0x18], 0
je 0x1020d954
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020d8cf
push dword [edi]
push str.unable_to_create_stub_from_string_in_new_phar___s_
jmp 0x1020d8c4
mov eax, dword [edi + 0x28]
lea edx, [edi + 0x28]
test eax, eax
je 0x1020d9a6
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x1020d9a6
test byte [edi + 0xd4], 8
jne 0x1020d9a6
lea edx, [esp + 0x1c]
push edx
push eax
push ebp
push ecx
call sym.php5.dll__php_stream_copy_to_stream_ex
mov eax, dword [esp + 0x2c]
add esp, 0x10
xor esi, esi
jmp 0x1020da17
push str.ER______
push str.ART__n_n_n_nstatic_function_tmpdir___n_nif__strpos_PHP_OS__WIN____false___nif___var__getenv_TMP____getenv_TMP__:_getenv_TEMP____nreturn__var__n_nif__is_dir__temp___mkdir__temp____nreturn_realpath__temp___n_nreturn_false__n_nif___var__getenv_TMPDIR____nreturn__var__n_nreturn_realpath__tmp___n_n_nstatic_function__unpack__m__n_n_info__unpack_V__substr__m__0__4____n__l__unpack_V__substr__m__10__4____n_m__substr__m__14___l_1____n_s__unpack_V__substr__m__0__4____n_o__0__n_start__4___s_1___n_ret_c___0__n_nfor___i__0___i____info_1____i___n__len__unpack_V__substr__m___start__4____n_start__4__n__savepath__substr__m___start___len_1____n_start___len_1___n____ret_m___savepath___array_values_unpack_Va_Vb_Vc_Vd_Ve_Vf__substr__m___start__24_____n_ret_m___savepath__3___sprintf__u___ret_m___savepath__3__n_0xffffffff___n_ret_m___savepath__7____o__n_o___ret_m___savepath__2___n_start__24___ret_m___savepath__5___n_ret_c____ret_m___savepath__4___self::MASK__n_nreturn__ret__n_n_nstatic_function_extractFile__path___entry___fp__n_n_data____n_c___entry_2___n_nwhile___c___nif___c___8192___n_data_.__fread__fp___c___n_c__0__n_else__n_c___8192__n_data_.__fread__fp__8192___n_n_n_nif___entry_4___self::GZ___n_data__gzinflate__data___n_elseif___entry_4___self::BZ2___n_data__bzdecompress__data___n_n_nif__strlen__data_____entry_0____ndie__Invalid_internal_.phar_file__size_error___._strlen__data__._______._n_stat_7__._______n_n_nif___entry_3____sprintf___u___crc32__binary__data___0xffffffff____ndie__Invalid_internal_.phar_file__checksum_error_____n_n_nreturn__data__n_n_nstatic_function__removeTmpFiles__temp___origdir__n_nchdir__temp___n_nforeach__glob___as__f___nif__file_exists__f____nis_dir__f_____rmdir__f__:__unlink__f___nif__file_exists__f___is_dir__f____nself::_removeTmpFiles__f__getcwd_____n_n_n_n_n_rmdir__temp___nclearstatcache____nchdir__origdir___n_n_n_nExtract_Phar::go____n__HALT_COMPIL
push str.__n_nstatic_function_go__return__false__n_n_fp__fopen___FILE____rb___nfseek__fp__self::LEN___n_L__unpack_V___a___binary_fread__fp__4____n_m___binary___n_ndo__n_read__8192__nif___L_1____strlen__m____8192___n_read___L_1____strlen__m___n_n_last___binary_fread__fp___read___n_m_.__last__n_while__strlen__last___strlen__m_____L_1____n_nif__strlen__m_____L_1____ndie_ERROR:_manifest_length_read_was___._nstrlen__m__.__should_be___._n_L_1__._____n_n_n_info__self::_unpack__m___n_f___info_c___n_nif___f__self::GZ___nif___function_exists_gzinflate____ndie_Error:_zlib_extension_is_not_enabled___._n_gzinflate___function_needed_for_zlib_compressed_.phars___n_n_n_nif___f__self::BZ2___nif___function_exists_bzdecompress____ndie_Error:_bzip2_extension_is_not_enabled___._n_bzdecompress___function_needed_for_bz2_compressed_.phars___n_n_n_n_temp__self::tmpdir____n_nif____temp___is_writable__temp____n_sessionpath__session_save_path____nif__strpos___sessionpath_________false__n_sessionpath__substr___sessionpath__strpos___sessionpath______1___nif___file_exists__sessionpath____is_dir__sessionpath____ndie_Could_not_locate_temporary_directory_to_extract_phar___n_n_temp___sessionpath__n_n_n_temp_.__pharextract_.basename___FILE____.phar___nself::_temp___temp__nself::_origdir__getcwd____n_mkdir__temp__0777__true___n_temp__realpath__temp___n_nif___file_exists__temp_._DIRECTORY_SEPARATOR_._md5_file___FILE_______nself::_removeTmpFiles__temp__getcwd_____n_mkdir__temp__0777__true___n_file_put_contents__temp_.___._md5_file___FILE________n_nforeach___info_m__as__path____file___n_a___file_exists_dirname__temp_.___.__path____n_mkdir_dirname__temp_.___.__path___0777__true___nclearstatcache____n_nif___path_strlen__path____1_______n_mkdir__temp_.___.__path__0777___n_else__nfile_put_contents__temp_.___.__path__self::extractFile__path___file___fp____n_chmod__temp_.___.__path__0666___n_n_n_n_nchdir__temp___n_nif____return___ninclude_self::ST
push 0x1a1d
push str.__nconst_LEN_
push str.index.php
push str.Extract_Phar::_temp____nheader_HTTP_1.0_404_Not_Found___necho___html__n__head__n___title_File_Not_Found_title__n___head__n__body__n___h1_404___File_____pt____Not_Found__h1__n___body__n__html____nexit__n_n_b__pathinfo__a___nif___isset__b_extension_____nheader_Content_Type:_text_plain___nheader_Content_Length:__._filesize__a____nreadfile__a___nexit__n_nif__isset__mimes__b_extension______nif___mimes__b_extension____1___ninclude__a__nexit__n_nif___mimes__b_extension____2___nhighlight_file__a___nexit__n_nheader_Content_Type:__._mimes__b_extension_____nheader_Content_Length:__._filesize__a____nreadfile__a___nexit__n_n_n_nclass_Extract_Phar_n_nstatic__temp__nstatic__origdir__nconst_GZ__0x1000__nconst_BZ2__0x2000__nconst_MASK__0x3000__nconst_START__
push str.__n_nif__in_array_phar__stream_get_wrappers_____class_exists_Phar__0____nPhar::interceptFileFuncs____nset_include_path_phar:___.___FILE___._PATH_SEPARATOR_._get_include_path_____nPhar::webPhar_null___web___ninclude_phar:___.___FILE___.___._Extract_Phar::START__nreturn__n_n_nif____isset___SERVER_REQUEST_URI____isset___SERVER_REQUEST_METHOD_______SERVER_REQUEST_METHOD___GET____SERVER_REQUEST_METHOD___POST_____nExtract_Phar::go_true___n_mimes__array__nphps___2__nc___text_plain__ncc___text_plain__ncpp___text_plain__nc___text_plain__ndtd___text_plain__nh___text_plain__nlog___text_plain__nrng___text_plain__ntxt___text_plain__nxsd___text_plain__nphp___1__ninc___1__navi___video_avi__nbmp___image_bmp__ncss___text_css__ngif___image_gif__nhtm___text_html__nhtml___text_html__nhtmls___text_html__nico___image_x_ico__njpe___image_jpeg__njpg___image_jpeg__njpeg___image_jpeg__njs___application_x_javascript__nmidi___audio_midi__nmid___audio_midi__nmod___audio_mod__nmov___movie_quicktime__nmp3___audio_mp3__nmpg___video_mpeg__nmpeg___video_mpeg__npdf___application_pdf__npng___image_png__nswf___application_shockwave_flash__ntif___image_tiff__ntiff___image_tiff__nwav___audio_wav__nxbm___image_xbm__nxml___text_xml__n___n_nheader__Cache_Control:_no_cache__must_revalidate____nheader__Pragma:_no_cache____n_n_basename__basename___FILE_____nif___strpos___SERVER_REQUEST_URI____basename____nchdir_Extract_Phar::_temp___ninclude__web__nreturn__n_n_pt__substr___SERVER_REQUEST_URI___strpos___SERVER_REQUEST_URI____basename___strlen__basename____nif____pt___pt______n_pt___web__nheader_HTTP_1.1_301_Moved_Permanently___nheader_Location:__.___SERVER_REQUEST_URI__.___.__pt___nexit__n_n_a__realpath_Extract_Phar::_temp_._DIRECTORY_SEPARATOR_.__pt___nif____a__strlen_dirname__a_____strlen_
push str.index.php
push str.__php_n_n_web__
push str._s_s_s_s_s_s_d_s_s_s
lea eax, [esp + 0x54]
test edx, edx
push 0x1a1d
lea esi, [esp + 0x84]
push eax
mov dword [esp + 0x5c], 0
cmovne esi, edx
call sym.php5.dll_spprintf
mov dword [esi], eax
push dword [edi + 0x28]
mov esi, dword [esp + 0x60]
push esi
push ebp
call sym.php5.dll__php_stream_write
add esp, 0x40
mov dword [esp + 0x1c], eax
cmp dword [edi + 0x28], eax
je 0x1020da76
cmp dword [esp + 0x18], 0
je 0x1020da31
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020da56
push dword [edi]
test esi, esi
je 0x1020da6c
push str.unable_to_create_stub_in_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x10
test esi, esi
je 0x1020ea20
push esi
call sym.php5.dll__efree
add esp, 4
jmp 0x1020ea20
push str.unable_to_copy_stub_of_old_phar_to_new_phar___s_
jmp 0x1020ea15
test esi, esi
je 0x1020da83
push esi
call sym.php5.dll__efree
add esp, 4
push ebp
call sym.php5.dll__php_stream_tell
lea ecx, [edi + 0x2c]
push 0x10211340
push ecx
mov dword [esp + 0x60], eax
call sym.php5.dll_zend_hash_apply
lea esi, [edi + 0xc8]
add esp, 0xc
cmp dword [esi], 0
mov dword [esp + 0x3c], 0
je 0x1020db79
cmp dword [0x106618dc], 0
jne 0x1020dada
mov ecx, dword [0x106618e4]
test ecx, ecx
je 0x1020dada
mov eax, dword [0x106618e0]
inc ecx
mov dword [esp + 0x24], eax
mov dword [0x106618e4], ecx
jmp 0x1020db10
push 0x28
call sym.php5.dll__emalloc
push 0
push 0
push 0xa
push eax
mov dword [esp + 0x38], eax
call sym.php5.dll__zend_hash_init
add esp, 0x14
cmp dword [0x106618dc], 0
jne 0x1020db10
mov eax, dword [esp + 0x24]
mov dword [0x106618e0], eax
mov dword [0x106618e4], 1
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x40]
push esi
push eax
call sym.php5.dll_php_var_serialize
add esp, 0xc
cmp dword [0x106618dc], 0
jne 0x1020db62
mov eax, dword [0x106618e4]
test eax, eax
je 0x1020db62
dec eax
mov dword [0x106618e4], eax
jne 0x1020db81
push dword [0x106618e0]
call sym.php5.dll_zend_hash_destroy
push dword [0x106618e0]
call sym.php5.dll__efree
add esp, 8
mov dword [0x106618e0], 0
jmp 0x1020db81
push dword [esp + 0x24]
call sym.php5.dll_zend_hash_destroy
push dword [esp + 0x28]
call sym.php5.dll__efree
add esp, 8
jmp 0x1020db81
mov dword [esp + 0x40], 0
push 0
lea esi, [edi + 0x2c]
push esi
mov dword [esp + 0x30], 0
mov dword [esp + 0x24], 0
call sym.php5.dll_zend_hash_internal_pointer_reset_ex
push 0
push esi
call sym.php5.dll_zend_hash_get_current_key_type_ex
add esp, 0x10
cmp eax, 3
je 0x1020e146
push 0
lea eax, [esp + 0x14]
push eax
push esi
call sym.php5.dll_zend_hash_get_current_data_ex
add esp, 0xc
cmp eax, 0xffffffff
je 0x1020dfd3
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
je 0x1020dbee
push 3
push ecx
call sym.php5.dll__php_stream_free
mov eax, dword [esp + 0x18]
add esp, 8
mov dword [eax + 0x3c], 0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x68]
test cl, 0x14
jne 0x1020dfd3
test cl, 2
jne 0x1020dc1e
cmp dword [eax + 0x40], 0
je 0x1020dc1e
mov ecx, dword [eax + 0x28]
sub ecx, 0
je 0x1020dc16
dec ecx
jne 0x1020dc1e
mov dword [esp + 0x48], ecx
jmp 0x1020dc1e
mov dword [esp + 0x50], 0
push dword [eax + 0x20]
inc dword [esp + 0x2c]
push dword [eax + 0x24]
push edi
call fcn.102225a0
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
add esp, 0xc
test byte [esi + 0x68], 8
movzx eax, al
mov ecx, 1
cmovne eax, ecx
cmp dword [esi + 0x18], 0
mov dword [esp + 0x30], eax
je 0x1020dd65
cmp dword [esi + 0x4c], 0
je 0x1020dc85
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x1020dc73
push eax
call sym.php5.dll__efree
add esp, 4
mov dword [esi + 0x4c], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0
mov esi, dword [esp + 0x10]
mov dword [esi + 0x4c], 0
mov eax, dword [esp + 0x10]
mov dword [eax + 0x50], 0
cmp dword [0x106618dc], 0
jne 0x1020dcbc
mov ecx, dword [0x106618e4]
test ecx, ecx
je 0x1020dcbc
mov eax, dword [0x106618e0]
inc ecx
mov dword [esp + 0x24], eax
mov dword [0x106618e4], ecx
jmp 0x1020dcf2
push 0x28
call sym.php5.dll__emalloc
push 0
push 0
push 0xa
push eax
mov dword [esp + 0x38], eax
call sym.php5.dll__zend_hash_init
add esp, 0x14
cmp dword [0x106618dc], 0
jne 0x1020dcf2
mov eax, dword [esp + 0x24]
mov dword [0x106618e0], eax
mov dword [0x106618e4], 1
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push eax
lea eax, [ecx + 0x18]
push eax
lea eax, [ecx + 0x4c]
push eax
call sym.php5.dll_php_var_serialize
add esp, 0xc
cmp dword [0x106618dc], 0
jne 0x1020dd4e
mov eax, dword [0x106618e4]
test eax, eax
je 0x1020dd4e
dec eax
mov dword [0x106618e4], eax
jne 0x1020dda6
push dword [0x106618e0]
call sym.php5.dll_zend_hash_destroy
push dword [0x106618e0]
call sym.php5.dll__efree
add esp, 8
mov dword [0x106618e0], 0
jmp 0x1020dda6
push dword [esp + 0x24]
call sym.php5.dll_zend_hash_destroy
push dword [esp + 0x28]
call sym.php5.dll__efree
add esp, 8
jmp 0x1020dda6
cmp dword [esi + 0x4c], 0
je 0x1020dd94
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x1020dd82
push eax
call sym.php5.dll__efree
add esp, 4
mov dword [esi + 0x4c], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0
mov esi, dword [esp + 0x10]
mov dword [esi + 0x4c], 0
mov eax, dword [esp + 0x10]
mov dword [eax + 0x50], 0
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x1c]
mov edx, dword [ecx + 0x68]
mov eax, dword [ecx + 0x50]
add eax, dword [ecx + 0x20]
shr edx, 3
and edx, 1
add esi, 0x1c
add eax, edx
add esi, eax
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x14]
test esi, esi
je 0x1020ddd6
test byte [ecx + 0x68], 2
je 0x1020ddda
test edx, edx
je 0x1020ddf0
cmp dword [ecx + 0x28], 1
jne 0x1020dfd3
mov dword [ecx + 0x28], 0
jmp 0x1020dfd3
push 0
push ecx
call fcn.102231c0
add esp, 8
test eax, eax
jne 0x1020de2c
push ebx
push dword [esp + 0x14]
push edi
call fcn.10222c00
add esp, 0xc
test eax, eax
jne 0x1020de26
push dword [ebx]
call sym.php5.dll__efree
add esp, 4
mov dword [ebx], 0
jmp 0x1020dfd3
mov dword [esp + 0x10], eax
jmp 0x1020de30
mov eax, dword [esp + 0x10]
push 0
push eax
call fcn.102231c0
push 1
push 0
push 0
push 0
push dword [esp + 0x28]
mov dword [esp + 0x68], eax
call fcn.102230d0
add esp, 0x1c
cmp eax, 0xffffffff
je 0x1020e133
mov ecx, dword [esp + 0x10]
or esi, 0xffffffff
mov eax, dword [ecx]
mov dword [esp + 0x34], eax
test eax, eax
je 0x1020de99
mov edi, dword [esp + 0x4c]
mov ebp, eax
push edi
call sym.php5.dll__php_stream_getc
xor eax, esi
and eax, 0xff
shr esi, 8
xor esi, dword [eax*4 + 0x104ff728]
add esp, 4
dec ebp
jne 0x1020de70
mov edi, dword [esp + 0x5c]
mov ebp, dword [esp + 0x58]
mov ecx, dword [esp + 0x10]
not esi
mov dword [ecx + 0xc], esi
mov eax, dword [esp + 0x10]
or dword [eax + 0x68], 1
mov ecx, dword [esp + 0x10]
test dword [ecx + 0x10], 0xf000
jne 0x1020debd
mov eax, dword [ecx]
mov dword [ecx + 8], eax
jmp 0x1020dfd3
push 0
push 0
push 0
push ecx
call fcn.10222560
add esp, 8
push eax
call sym.php5.dll_php_stream_filter_create
add esp, 0xc
mov dword [esp + 0x34], eax
test eax, eax
je 0x1020e0c2
push 0
call sym.php5.dll__php_stream_fopen_tmpfile
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [ecx + 0x3c], eax
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 0x3c], 0
je 0x1020e089
mov esi, dword [esp + 0x4c]
push 0
push esi
call sym.php5.dll__php_stream_flush
push 0
push 0
push 0
push 0
push dword [esp + 0x28]
call fcn.102230d0
add esp, 0x1c
cmp eax, 0xffffffff
je 0x1020e043
mov eax, dword [esp + 0x10]
push dword [esp + 0x34]
mov eax, dword [eax + 0x3c]
add eax, 0x14
push eax
call sym.php5.dll__php_stream_filter_append
mov eax, dword [esp + 0x18]
push 0
push dword [eax]
push dword [eax + 0x3c]
push esi
call sym.php5.dll__php_stream_copy_to_stream_ex
add esp, 0x18
test eax, eax
jne 0x1020dffd
mov esi, dword [esp + 0x34]
push 1
push esi
call sym.php5.dll__php_stream_filter_flush
mov eax, dword [esp + 0x18]
push 0
push dword [eax + 0x3c]
call sym.php5.dll__php_stream_flush
push 1
push esi
call sym.php5.dll_php_stream_filter_remove
mov eax, dword [esp + 0x28]
push 2
push 0
push dword [eax + 0x3c]
call sym.php5.dll__php_stream_seek
mov eax, dword [esp + 0x34]
push dword [eax + 0x3c]
call sym.php5.dll__php_stream_tell
mov ecx, dword [esp + 0x38]
push 0
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x3c]
push 0
push dword [eax + 0x3c]
call sym.php5.dll__php_stream_seek
mov ecx, dword [esp + 0x44]
add esp, 0x34
mov eax, dword [ecx + 0x10]
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 0x10]
or dword [eax + 0x68], 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
and eax, 0xf000
or dword [esp + 0x38], eax
lea eax, [edi + 0x2c]
push 0
push eax
call sym.php5.dll_zend_hash_move_forward_ex
lea eax, [edi + 0x2c]
push 0
push eax
call sym.php5.dll_zend_hash_get_current_key_type_ex
add esp, 0x10
cmp eax, 3
je 0x1020e146
lea esi, [edi + 0x2c]
jmp 0x1020dbb0
cmp dword [esp + 0x18], 0
je 0x1020e012
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push dword [edi]
mov eax, dword [esp + 0x14]
push dword [eax + 0x24]
push str.unable_to_copy_compressed_file_contents_of_file___s__while_creating_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
cmp dword [esp + 0x18], 0
je 0x1020e058
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push dword [edi]
mov eax, dword [esp + 0x14]
push dword [eax + 0x24]
push str.unable_to_seek_to_start_of_file___s__while_creating_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
test ebx, ebx
je 0x1020e09d
push str.unable_to_create_temporary_file
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0xc
cmp dword [esp + 0x18], 0
je 0x1020e0b2
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
jmp 0x1020ea20
cmp dword [esp + 0x18], 0
je 0x1020e0d7
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
mov eax, dword [esp + 0x18]
add esp, 8
test dword [eax + 0x10], 0x1000
je 0x1020e111
test ebx, ebx
je 0x1020ea20
push dword [edi]
push dword [eax + 0x24]
push str.unable_to_gzip_compress_file___s__to_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
test ebx, ebx
je 0x1020ea20
push dword [edi]
push dword [eax + 0x24]
push str.unable_to_bzip2_compress_file___s__to_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
cmp dword [esp + 0x18], 0
je 0x1020e058
push 3
push esi
jmp 0x1020e050
or dword [esp + 0x38], 0x10000
test byte [edi + 0xd4], 1
mov esi, dword [edi + 0x14]
je 0x1020e161
mov dword [edi + 0x14], 0
mov edx, dword [edi + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
add ecx, edx
add eax, 0x12
add eax, ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x74], eax
cmp al, 0xd
je 0x1020e183
cmp al, 0xa
jne 0x1020e194
inc eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x2c], 1
cmp byte [esp + 0x30], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x78], eax
mov word [esp + 0x7c], 0x1011
jne 0x1020e1b1
mov word [esp + 0x7c], 0x11
mov eax, dword [esp + 0x38]
mov dword [esp + 0x7e], eax
push 0x12
lea eax, [esp + 0x78]
push eax
push ebp
mov dword [esp + 0x8e], edx
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp eax, 0x12
jne 0x1020e9e7
push dword [edi + 0x14]
push dword [edi + 0x10]
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp dword [edi + 0x14], eax
jne 0x1020e9e7
mov eax, dword [esp + 0x40]
mov dword [esp + 0x74], eax
push 4
lea eax, [esp + 0x78]
push eax
push ebp
mov dword [edi + 0x14], esi
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp eax, 4
jne 0x1020e98e
mov eax, dword [esp + 0x40]
test eax, eax
je 0x1020e235
push eax
push dword [esp + 0x40]
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp dword [esp + 0x40], eax
jne 0x1020e98e
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1020e24e
push eax
call sym.php5.dll__efree
add esp, 4
mov dword [esp + 0x3c], 0
push ebp
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
call sym.php5.dll__php_stream_tell
push 0
lea esi, [edi + 0x2c]
push esi
call sym.php5.dll_zend_hash_internal_pointer_reset_ex
push 0
push esi
call sym.php5.dll_zend_hash_get_current_key_type_ex
add esp, 0x14
cmp eax, 3
je 0x1020e3af
push 0
lea eax, [esp + 0x14]
push eax
push esi
call sym.php5.dll_zend_hash_get_current_data_ex
add esp, 0xc
cmp eax, 0xffffffff
je 0x1020e393
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x68]
test cl, 0x14
jne 0x1020e393
mov eax, dword [eax + 0x20]
test cl, 8
je 0x1020e2b5
inc eax
mov dword [esp + 0x88], eax
push 4
lea eax, [esp + 0x8c]
push eax
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp eax, 4
jne 0x1020e456
mov eax, dword [esp + 0x10]
push dword [eax + 0x20]
push dword [eax + 0x24]
push ebp
call sym.php5.dll__php_stream_write
mov ecx, dword [esp + 0x1c]
add esp, 0xc
cmp dword [ecx + 0x20], eax
jne 0x1020e456
test byte [ecx + 0x68], 8
je 0x1020e317
push 1
push 0x10622d94
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp eax, 1
jne 0x1020e456
push 0
call dword [sym.imp.MSVCR110.dll__time32]
mov edx, dword [esp + 0x14]
push 0x18
mov ecx, dword [edx]
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], ecx
mov eax, dword [edx + 8]
mov dword [esp + 0x98], eax
mov eax, dword [edx + 0xc]
mov dword [esp + 0x9c], eax
mov eax, dword [edx + 0x10]
mov dword [esp + 0xa0], eax
mov eax, dword [edx + 0x50]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0x90]
push eax
push ebp
call sym.php5.dll__php_stream_write
add esp, 0x10
cmp eax, 0x18
jne 0x1020e410
mov eax, dword [esp + 0x10]
push dword [eax + 0x50]
push dword [eax + 0x4c]
push ebp
call sym.php5.dll__php_stream_write
mov ecx, dword [esp + 0x1c]
add esp, 0xc
cmp dword [ecx + 0x50], eax
jne 0x1020e410
push 0
push esi
call sym.php5.dll_zend_hash_move_forward_ex
push 0
push esi
call sym.php5.dll_zend_hash_get_current_key_type_ex
add esp, 0x10
cmp eax, 3
jne 0x1020e283
cmp dword [esp + 0x2c], 0
je 0x1020e4b7
push 1
lea eax, [esp + 0x78]
push eax
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
cmp eax, 1
je 0x1020e4b7
cmp dword [esp + 0x18], 0
je 0x1020e3e8
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push str.unable_to_write_manifest_padding_byte
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0xc
jmp 0x1020ea20
cmp dword [esp + 0x18], 0
je 0x1020e425
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push dword [edi]
mov eax, dword [esp + 0x14]
push dword [eax + 0x24]
push str.unable_to_write_temporary_manifest_of_file___s__to_manifest_of_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
cmp dword [esp + 0x18], 0
je 0x1020e46b
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
mov eax, dword [esp + 0x10]
push dword [edi]
test byte [eax + 0x68], 8
push dword [eax + 0x24]
je 0x1020e4a2
push str.unable_to_write_filename_of_directory___s__to_manifest_of_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
push str.unable_to_write_filename_of_file___s__to_manifest_of_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
push ebp
call sym.php5.dll__php_stream_tell
push 0
push esi
mov dword [esp + 0x38], eax
call sym.php5.dll_zend_hash_internal_pointer_reset_ex
push 0
push esi
call sym.php5.dll_zend_hash_get_current_key_type_ex
add esp, 0x14
cmp eax, 3
je 0x1020e617
lea ecx, [ecx]
push 0
lea eax, [esp + 0x14]
push eax
push esi
call sym.php5.dll_zend_hash_get_current_data_ex
add esp, 0xc
cmp eax, 0xffffffff
je 0x1020e5fb
mov eax, dword [esp + 0x10]
test byte [eax + 0x68], 0x1c
jne 0x1020e5fb
mov esi, dword [eax + 0x3c]
push 0
test esi, esi
je 0x1020e51d
push 0
push esi
call sym.php5.dll__php_stream_seek
add esp, 0xc
jmp 0x1020e542
push eax
call fcn.102231c0
push 0
push 0
push 0
push 0
push dword [esp + 0x28]
mov esi, eax
call fcn.102230d0
add esp, 0x1c
cmp eax, 0xffffffff
je 0x1020e043
test esi, esi
je 0x1020e043
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x2c], ecx
mov eax, dword [esp + 0x10]
mov dword [eax + 0x30], ecx
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
add ecx, eax
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x70]
push ecx
push eax
push ebp
push esi
call sym.php5.dll__php_stream_copy_to_stream_ex
add esp, 0x10
cmp eax, 0xffffffff
je 0x1020e6a8
mov eax, dword [esp + 0x10]
and dword [eax + 0x68], 0xfffffffd
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
je 0x1020e5af
push 3
push ecx
call sym.php5.dll__php_stream_free
mov eax, dword [esp + 0x18]
add esp, 8
mov dword [eax + 0x3c], 0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x28]
cmp ecx, 2
jne 0x1020e5ec
cmp dword [eax + 0x40], 0
jne 0x1020e5df
mov ecx, dword [eax + 0x38]
cmp ecx, dword [edi + 0xb0]
je 0x1020e5df
cmp ecx, dword [edi + 0xb4]
je 0x1020e5df
push 3
push ecx
call sym.php5.dll__php_stream_free
mov eax, dword [esp + 0x18]
add esp, 8
mov dword [eax + 0x38], 0
mov eax, dword [esp + 0x10]
jmp 0x1020e5f1
cmp ecx, 1
jne 0x1020e5f8
mov dword [eax + 0x28], 0
lea esi, [edi + 0x2c]
push 0
push esi
call sym.php5.dll_zend_hash_move_forward_ex
push 0
push esi
call sym.php5.dll_zend_hash_get_current_key_type_ex
add esp, 0x10
cmp eax, 3
jne 0x1020e4e0
test dword [esp + 0x38], 0x10000
je 0x1020e750
push 0
push 0
push ebp
call sym.php5.dll__php_stream_seek
mov eax, dword [edi + 0xc4]
add esp, 0xc
test eax, eax
je 0x1020e64f
push eax
call sym.php5.dll__efree
add esp, 4
mov dword [edi + 0xc4], 0
push ebx
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x24]
push eax
push ebp
push edi
mov dword [esp + 0x30], 0
call fcn.10222190
add esp, 0x14
cmp eax, 0xffffffff
jne 0x1020e6ee
test ebx, ebx
je 0x1020e68e
mov esi, dword [ebx]
push esi
push str.phar_error:_unable_to_write_signature:__s
push 0
push ebx
call sym.php5.dll_spprintf
push esi
call sym.php5.dll__efree
add esp, 0x14
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x1020e09d
push eax
call sym.php5.dll__efree
add esp, 4
jmp 0x1020e09d
cmp dword [esp + 0x18], 0
je 0x1020e6bd
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
test ebx, ebx
je 0x1020ea20
push dword [edi]
mov eax, dword [esp + 0x14]
push dword [eax + 0x24]
push str.unable_to_write_contents_of_file___s__to_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x14
jmp 0x1020ea20
push dword [esp + 0x2c]
push dword [esp + 0x20]
push ebp
call sym.php5.dll__php_stream_write
push dword [esp + 0x28]
call sym.php5.dll__efree
add esp, 0x10
cmp dword [edi + 0xbc], 0x10
jne 0x1020e729
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x30], eax
push 4
lea eax, [esp + 0x34]
push eax
push ebp
call sym.php5.dll__php_stream_write
add esp, 0xc
mov eax, dword [edi + 0xbc]
mov dword [esp + 0x30], eax
push 4
lea eax, [esp + 0x34]
push eax
push ebp
call sym.php5.dll__php_stream_write
push 4
push str.GBMB
push ebp
call sym.php5.dll__php_stream_write
add esp, 0x18
mov eax, dword [edi + 0xb0]
test eax, eax
je 0x1020e76c
cmp dword [esp + 0x50], 0
je 0x1020e76c
push 3
push eax
call sym.php5.dll__php_stream_free
add esp, 8
mov eax, dword [edi + 0xb4]
test eax, eax
je 0x1020e792
cmp dword [esp + 0x48], 0
je 0x1020e788
push 3
push eax
call sym.php5.dll__php_stream_free
add esp, 8
mov dword [edi + 0xb4], 0
cmp dword [esp + 0x18], 0
je 0x1020e7a7
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x54]
and dword [edi + 0xd4], 0xfffffff7
push 0
add eax, 4
add eax, ecx
push 0
push ebp
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], ecx
call sym.php5.dll__php_stream_seek
add esp, 0xc
test byte [edi + 0xd4], 0x10
je 0x1020e7e2
mov dword [edi + 0xb0], ebp
jmp 0x1020e95e
push 0
push 0
push 0x1a
push 0x10548f4c
push dword [edi]
call sym.php5.dll__php_stream_open_wrapper_ex
add esp, 0x14
mov dword [edi + 0xb0], eax
test eax, eax
jne 0x1020e820
mov dword [edi + 0xb0], ebp
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_open_new_phar___s__for_writing
push 0x1000
jmp 0x1020ea17
mov ecx, dword [edi + 0xa4]
test ecx, 0x100000
je 0x1020e8e7
lea eax, [esp + 0x60]
push 0
push eax
call sym.php5.dll__array_init
push 0x1f
push 7
lea eax, [esp + 0x70]
push str.window
push eax
call sym.php5.dll_add_assoc_long_ex
mov eax, dword [edi + 0xb0]
push dword [eax + 0x30]
lea eax, [esp + 0x7c]
push eax
push str.zlib.deflate
call sym.php5.dll_php_stream_filter_create
add esp, 0x24
cmp byte [esp + 0x6c], 3
mov esi, eax
jbe 0x1020e882
lea eax, [esp + 0x60]
push eax
call sym.php5.dll__zval_dtor_func
add esp, 4
test esi, esi
jne 0x1020e89f
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_compress_all_contents_of_phar___s__using_zlib__PHP_versions_older_than_5.2.6_have_a_buggy_zlib
push 0x1000
jmp 0x1020ea17
mov eax, dword [edi + 0xb0]
add eax, 0x14
push esi
push eax
call sym.php5.dll__php_stream_filter_append
push 0
push 0xffffffffffffffff
push dword [edi + 0xb0]
push ebp
call sym.php5.dll__php_stream_copy_to_stream_ex
push 1
push esi
call sym.php5.dll__php_stream_filter_flush
push 1
push esi
call sym.php5.dll_php_stream_filter_remove
push 3
push dword [edi + 0xb0]
call sym.php5.dll__php_stream_free
add esp, 0x30
mov dword [edi + 0xb0], ebp
jmp 0x1020e95e
test ecx, 0x200000
je 0x1020e948
push dword [eax + 0x30]
push 0
push str.bzip2.compress
call sym.php5.dll_php_stream_filter_create
mov ecx, dword [edi + 0xb0]
mov esi, eax
add ecx, 0x14
push esi
push ecx
call sym.php5.dll__php_stream_filter_append
push 0
push 0xffffffffffffffff
push dword [edi + 0xb0]
push ebp
call sym.php5.dll__php_stream_copy_to_stream_ex
push 1
push esi
call sym.php5.dll__php_stream_filter_flush
push 1
push esi
call sym.php5.dll_php_stream_filter_remove
push 3
push dword [edi + 0xb0]
call sym.php5.dll__php_stream_free
add esp, 0x3c
mov dword [edi + 0xb0], ebp
jmp 0x1020e95e
push 0
push 0xffffffffffffffff
push eax
push ebp
call sym.php5.dll__php_stream_copy_to_stream_ex
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 0x18
push 0
push dword [edi + 0x28]
push dword [edi + 0xb0]
call sym.php5.dll__php_stream_seek
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1020ea20
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_seek_to___HALT_COMPILER____in_new_phar___s_
jmp 0x1020ea15
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1020e9a7
push eax
call sym.php5.dll__efree
add esp, 4
mov dword [esp + 0x3c], 0
cmp dword [esp + 0x18], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
je 0x1020e9cc
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
mov dword [edi + 0x14], esi
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_write_manifest_meta_data_of_new_phar___s_
jmp 0x1020ea15
cmp dword [esp + 0x18], 0
je 0x1020e9fc
push 3
push dword [esp + 0x18]
call sym.php5.dll__php_stream_free
add esp, 8
push 3
push ebp
call sym.php5.dll__php_stream_free
add esp, 8
mov dword [edi + 0x14], esi
test ebx, ebx
je 0x1020ea20
push dword [edi]
push str.unable_to_write_manifest_header_of_new_phar___s_
push 0
push ebx
call sym.php5.dll_spprintf
add esp, 0x10
pop ebp
mov ecx, dword [esp + 0xb0]
pop edi
pop esi
pop ebx
xor ecx, esp
or eax, 0xffffffff
call fcn.10311bec
add esp, 0xa8
ret