Function at 0x1004d950
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
lea ebp, [esp - 0x300]
sub esp, 0x380
mov eax, dword [0x106499c8]
xor eax, ebp
mov dword [ebp + 0x2fc], eax
mov eax, dword [ebp + 0x30c]
push ebx
push esi
mov esi, dword [ebp + 0x308]
mov ebx, edx
mov edx, dword [ebp + 0x310]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x31c]
push edi
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x70], 0
cmp esi, ebx
jle 0x103a95bf
lea esp, [esp]
mov edi, esi
cmp esi, ebx
jle 0x1004de59
lea ebx, [ebx]
mov al, byte [ecx + edi - 1]
cmp al, 0x5c
je 0x1004d9d1
cmp al, 0x2f
je 0x1004d9d1
dec edi
cmp edi, ebx
jg 0x1004d9c0
cmp edi, esi
je 0x1004de59
lea eax, [esi - 1]
cmp edi, eax
je 0x1004de4f
lea eax, [esi - 2]
cmp edi, eax
je 0x1004ddd9
cmp dword [ebp + 0x314], 0
mov byte [esi + ecx], 0
je 0x1004dfff
mov eax, 1
mov dword [ebp - 0x64], eax
test ebx, ebx
je 0x1004daa8
test eax, eax
je 0x1004dac7
cmp dword [0x10667d8c], 0
je 0x1004daa8
cmp dword [edx], 0
je 0x1004dda3
mov eax, dword [edx]
mov dword [ebp - 0x60], eax
call fcn.1004e040
mov ebx, eax
mov edx, ebx
mov ecx, ebx
lea esi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x1004da41
sub edx, esi
add edx, ebx
test ebx, ebx
je 0x1004e006
mov esi, 0x811c9dc5
cmp ebx, edx
jae 0x1004da70
lea ecx, [ecx]
movsx eax, byte [ecx]
imul esi, esi, 0x1000193
inc ecx
xor esi, eax
cmp ecx, edx
jb 0x1004da60
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, esi
and eax, 0x3ff
cmp dword [eax*4 + 0x10667d94], 0
lea ecx, [eax*4 + 0x10667d94]
mov dword [ebp - 0x58], ecx
jne 0x1004dcc3
mov esi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x1004dac7
lea eax, [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x1004de79
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ebx, [esi + 1]
cmp ebx, 0x8000
jg 0x103a9178
mov eax, ebx
mov byte [ebp - 0x51], 0
call fcn.10312260
mov eax, esp
mov dword [ebp - 0x60], esp
push ebx
push dword [ebp - 0x50]
push eax
call sub.MSVCR110.dll_memcpy
mov edx, dword [ebp - 0x64]
add esp, 0xc
test edx, edx
je 0x1004dfce
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x50]
cmp esi, 2
jl 0x1004db1b
mov al, byte [edx]
cmp al, 0x2f
je 0x103a918d
cmp al, 0x5c
je 0x103a918d
test ecx, 0x400
jne 0x103a91b4
movzx eax, cl
shr eax, 4
and eax, 1
cmp dword [ebp + 0x318], 0
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x70], eax
je 0x1004db47
test eax, eax
je 0x103a95a7
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x74]
lea eax, [edi - 1]
cmp eax, ecx
jle 0x1004ddcf
test edx, edx
je 0x1004dfd9
mov edx, 1
push 0
push 1
push edx
push dword [ebp - 0x78]
mov edx, ecx
push dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x50]
push eax
call fcn.1004d950
mov ebx, eax
mov eax, dword [ebp - 0x70]
add esp, 0x18
mov dword [ebp - 0x58], eax
cmp ebx, dword [ebp - 0x74]
jle 0x1004ddd1
mov edx, dword [ebp - 0x50]
inc ebx
mov byte [edx + ebx - 1], 0x5c
test ebx, ebx
js 0x103a94f6
mov eax, esi
sub eax, edi
lea esi, [eax + ebx]
cmp esi, 0x103
jge 0x103a94f6
cmp dword [ebp - 0x64], 0
je 0x1004dfe4
lea esi, [ebp - 0x20]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1004dbc3
sub esi, ecx
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [edx + ebx]
push eax
call sub.MSVCR110.dll_memcpy
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x50]
add esp, 0xc
add ebx, esi
mov esi, dword [ebp - 0x78]
cmp dword [ebp - 0x74], 0
je 0x1004dc99
mov edi, dword [0x10667d8c]
test edi, edi
je 0x1004dc99
mov eax, dword [esi]
lea esi, [ecx + 0x25]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], 1
cmp ebx, ecx
jne 0x1004dc80
mov esi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
sub esi, 4
jb 0x1004dc35
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1004dc3a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1004dc24
cmp esi, 0xfffffffc
je 0x1004dc77
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1004e029
cmp esi, 0xfffffffd
je 0x1004dc77
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1004e029
cmp esi, 0xfffffffe
je 0x1004dc77
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1004e029
cmp esi, 0xffffffff
je 0x1004dc77
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x1004e029
xor eax, eax
mov esi, dword [ebp - 0x68]
test eax, eax
je 0x1004dc8a
inc esi
add esi, ebx
mov dword [ebp - 0x6c], 0
mov eax, dword [0x10667d88]
add eax, esi
cmp eax, edi
jle 0x1004de8e
cmp byte [ebp - 0x51], 0
jne 0x103a95af
mov eax, ebx
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2fc]
xor ecx, ebp
call fcn.10311bec
lea esp, [ebp + 0x300]
pop ebp
ret
cmp dword [0x10667d90], 0
je 0x1004dcda
mov edx, dword [ecx]
mov eax, dword [ebp - 0x60]
cmp dword [edx + 0x18], eax
jl 0x1004df8b
mov eax, dword [ecx]
mov dword [ebp - 0x7c], eax
cmp esi, dword [eax]
jne 0x1004ddbb
mov ebx, dword [ebp - 0x5c]
cmp ebx, dword [eax + 8]
jne 0x1004ddbb
mov ecx, dword [ebp - 0x50]
mov edx, dword [eax + 4]
sub ebx, 4
jb 0x1004dd11
mov edi, edi
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1004dd16
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x1004dd00
cmp ebx, 0xfffffffc
je 0x1004dd53
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1004e00d
cmp ebx, 0xfffffffd
je 0x1004dd53
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1004e00d
cmp ebx, 0xfffffffe
je 0x1004dd53
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1004e00d
cmp ebx, 0xffffffff
je 0x1004dd53
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x1004e00d
xor eax, eax
test eax, eax
jne 0x1004e017
mov eax, dword [ebp - 0x58]
mov esi, dword [eax]
test esi, esi
je 0x1004da9f
cmp dword [ebp + 0x318], 0
je 0x1004dd7d
cmp dword [esi + 0x14], 0
je 0x1004de86
mov edi, dword [ebp - 0x68]
test edi, edi
jne 0x1004e01f
mov eax, dword [esi + 0x10]
inc eax
push eax
push dword [esi + 0xc]
push dword [ebp - 0x50]
call sub.MSVCR110.dll_memcpy
mov eax, dword [esi + 0x10]
add esp, 0xc
jmp 0x1004dca5
push 0
call dword [sym.imp.MSVCR110.dll__time32]
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x50]
add esp, 4
mov dword [edx], eax
jmp 0x1004da2e
lea ecx, [eax + 0x20]
mov dword [ebp - 0x58], ecx
cmp dword [ecx], 0
je 0x1004da9f
jmp 0x1004dcc3
mov ebx, ecx
mov edx, dword [ebp - 0x50]
jmp 0x1004db98
cmp byte [ecx + edi], 0x2e
jne 0x1004d9ef
cmp byte [ecx + edi + 1], 0x2e
jne 0x1004d9ef
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x103a90c0
dec edi
cmp edi, ebx
jle 0x103a90cb
push 0
push 1
push dword [ebp + 0x314]
push edx
push dword [ebp - 0x6c]
mov edx, ebx
push edi
call fcn.1004d950
add esp, 0x18
cmp eax, ebx
jle 0x103a9154
mov edx, dword [ebp - 0x50]
dec eax
cmp eax, ebx
jle 0x1004de42
jmp 0x1004de30
mov cl, byte [edx + eax]
cmp cl, 0x5c
je 0x1004de42
cmp cl, 0x2f
je 0x1004de42
dec eax
cmp eax, ebx
jg 0x1004de30
test ebx, ebx
jne 0x1004dca5
jmp 0x103a90d7
cmp byte [ecx + edi], 0x2e
jne 0x1004d9e4
lea esi, [edi - 1]
mov dword [ebp - 0x5c], esi
mov dword [ebp + 0x318], 1
cmp esi, ebx
jg 0x1004d9b0
mov eax, dword [ebp - 0x68]
jmp 0x103a95bf
cmp dword [ebp + 0x314], 2
jne 0x1004dfc2
or eax, 0xffffffff
jmp 0x1004dca5
push esi
call dword [sym.imp.MSVCR110.dll_malloc]
add esp, 4
mov dword [ebp - 0x74], eax
test eax, eax
je 0x1004dc99
mov ecx, dword [ebp - 0x60]
call fcn.1004e040
mov edi, eax
mov edx, edi
mov dword [ebp - 0x68], edi
lea eax, [edx + 1]
mov ecx, edi
mov dword [ebp - 0x80], eax
lea ebx, [ebx]
mov al, byte [edx]
inc edx
test al, al
jne 0x1004dec0
sub edx, dword [ebp - 0x80]
add edx, edi
test edi, edi
je 0x1004e033
mov eax, dword [ebp - 0x68]
mov edi, 0x811c9dc5
cmp eax, edx
jae 0x1004def3
movsx eax, byte [ecx]
imul edi, edi, 0x1000193
inc ecx
xor edi, eax
cmp ecx, edx
jb 0x1004dee0
mov eax, dword [ebp - 0x68]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], edi
inc ecx
mov edi, eax
push ecx
push dword [ebp - 0x60]
lea eax, [edi + 0x24]
push eax
mov dword [edi + 4], eax
call sub.MSVCR110.dll_memcpy
mov ecx, dword [ebp - 0x5c]
add esp, 0xc
cmp dword [ebp - 0x6c], 0
mov dword [edi + 8], ecx
jne 0x1004df83
lea eax, [ebx + 1]
push eax
push dword [ebp - 0x50]
inc ecx
add ecx, dword [edi + 4]
push ecx
mov dword [edi + 0xc], ecx
call sub.MSVCR110.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x58]
mov ecx, dword [edi]
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], ebx
mov dword [edi + 0x1c], 0
mov eax, dword [0x10667d90]
add eax, dword [ebp - 0x7c]
and ecx, 0x3ff
mov dword [edi + 0x18], eax
mov eax, dword [ecx*4 + 0x10667d94]
mov dword [edi + 0x20], eax
mov dword [ecx*4 + 0x10667d94], edi
add dword [0x10667d88], esi
jmp 0x1004dc99
mov eax, dword [edi + 4]
mov dword [edi + 0xc], eax
jmp 0x1004df44
mov eax, dword [edx + 0x20]
mov dword [ecx], eax
mov eax, dword [edx + 4]
cmp eax, dword [edx + 0xc]
je 0x1004dfbb
mov eax, 0xffffffda
sub eax, dword [edx + 0x10]
sub eax, dword [edx + 8]
push edx
add dword [0x10667d88], eax
call dword [sym.imp.MSVCR110.dll_free]
mov ecx, dword [ebp - 0x58]
add esp, 4
jmp 0x1004ddc1
mov eax, 0xffffffdb
jmp 0x1004dfa0
mov dword [ebp - 0x64], 0
jmp 0x1004dac7
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x58], eax
jmp 0x1004db4a
mov edx, dword [ebp + 0x314]
jmp 0x1004db65
inc eax
push eax
mov eax, dword [ebp - 0x60]
add eax, edi
push eax
lea eax, [edx + ebx]
push eax
call sub.MSVCR110.dll_memcpy
add esp, 0xc
mov ebx, esi
jmp 0x1004dc99
xor eax, eax
jmp 0x1004da05
xor esi, esi
jmp 0x1004da80
sbb eax, eax
or eax, 1
jmp 0x1004dd55
mov eax, dword [ebp - 0x7c]
jmp 0x1004ddbb
mov eax, dword [esi + 0x14]
mov dword [edi], eax
jmp 0x1004dd88
sbb eax, eax
or eax, 1
jmp 0x1004dc79
xor edi, edi
jmp 0x1004df03
mov dword [eax], 1
jmp 0x1004ddf9
test ebx, ebx
cmovne esi, ebx
mov eax, esi
jmp 0x1004dca5
test eax, eax
jne 0x103a9113
cmp byte [edx], 0x2e
jne 0x1004dca5
cmp byte [edx + 1], 0x2e
jne 0x1004dca5
mov cl, byte [edx + 2]
cmp cl, 0x2f
je 0x103a90ff
cmp cl, 0x5c
jne 0x1004dca5
mov word [edx + 3], 0x2e2e
mov byte [edx + 5], 0x5c
mov eax, 5
jmp 0x1004dca5
jle 0x1004dca5
cmp byte [edx + eax + 1], 0x2e
jne 0x1004dca5
cmp byte [edx + eax + 2], 0x2e
jne 0x1004dca5
mov cl, byte [edx + eax + 3]
cmp cl, 0x2f
je 0x103a9141
cmp cl, 0x5c
jne 0x1004dca5
mov word [edx + eax + 4], 0x2e2e
add eax, 6
mov byte [edx + eax], 0x5c
jmp 0x1004dca5
test ebx, ebx
jne 0x1004dca5
test eax, eax
jne 0x1004dca5
mov eax, dword [ebp - 0x50]
mov word [eax], 0x2e2e
mov byte [eax + 2], 0x5c
lea eax, [ebx + 2]
jmp 0x1004dca5
push ebx
mov byte [ebp - 0x51], 1
call sym.php5.dll__emalloc
add esp, 4
mov dword [ebp - 0x60], eax
jmp 0x1004dae6
mov al, byte [edx + 1]
cmp al, 0x2f
je 0x103a919c
cmp al, 0x5c
jne 0x1004db1b
cmp esi, 3
jl 0x1004db1b
cmp byte [edx + 2], 0x3f
jne 0x1004db27
jmp 0x1004db1b
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], 0
inc dword [eax]
cmp dword [eax], 0x20
jg 0x1004de86
push 0
push 0x2200000
push 3
push 0
push 0
push bind
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x58], eax
cmp eax, 0xffffffff
je 0x1004de86
mov eax, 0x4000
call fcn.10312260
mov esi, esp
mov dword [ebp - 0x64], esi
test esi, esi
je 0x1004de86
push 0
lea eax, [ebp - 0x7c]
push eax
push 0x4000
push esi
push 0
push 0
push 0x900a8
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push dword [ebp - 0x58]
test eax, eax
jne 0x103a9235
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1004de86
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
cmp eax, 0xa000000c
jne 0x103a9359
movzx eax, word [esi + 0xe]
push 0
shr eax, 1
push 0
xor ebx, ebx
cmp dword [esi + 0x10], ebx
push 0x104
sete bl
inc eax
lea edx, [ebp + 0xf4]
push edx
push eax
movzx eax, word [esi + 0xc]
lea ecx, [esi + 0x14]
shr eax, 1
mov dword [ebp - 0x80], ecx
lea eax, [ecx + eax*2]
push eax
push 0
push 3
mov dword [ebp - 0x58], ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x1004de86
movzx eax, word [esi + 0xe]
shr eax, 1
cmp eax, 0x104
jae 0x103a9354
mov ecx, dword [ebp - 0x80]
mov byte [ebp + eax + 0xf4], 0
movzx esi, word [esi + 0xa]
push 0
push 0
push 0x104
lea eax, [ebp + 0x1f8]
push eax
shr esi, 1
lea eax, [esi + 1]
push eax
mov eax, dword [ebp - 0x64]
movzx eax, word [eax + 8]
shr eax, 1
lea eax, [ecx + eax*2]
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x1004de86
cmp esi, 0x104
jae 0x103a9354
mov byte [ebp + esi + 0x1f8], 0
test ebx, ebx
jne 0x103a942e
xor ecx, ecx
lea eax, [ebp + 0x1f8]
sub esi, ecx
add eax, ecx
xor ebx, ebx
test esi, esi
jle 0x103a931b
mov ebx, esi
push ebx
push eax
push dword [ebp - 0x50]
call sub.MSVCR110.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x5c]
mov byte [edx + ebx], 0
cmp dword [ebp - 0x58], 1
jne 0x103a950f
cmp ebx, 3
jne 0x103a94cb
cmp byte [edx + 1], 0x3a
jne 0x103a94cb
cmp byte [edx + 2], 0x5c
jne 0x103a94cb
mov esi, dword [ebp - 0x78]
jmp 0x103a9589
call fcn.10311d44
cmp eax, 0xa0000003
jne 0x103a9406
movzx eax, word [esi + 0xe]
push 0
push 0
push 0x104
shr eax, 1
inc eax
lea ecx, [ebp + 0xf4]
push ecx
push eax
movzx eax, word [esi + 0xc]
shr eax, 1
lea ebx, [esi + 0x10]
mov dword [ebp - 0x58], 1
lea eax, [ebx + eax*2]
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x1004de86
movzx eax, word [esi + 0xe]
shr eax, 1
cmp eax, 0x104
jae 0x103a9354
mov byte [ebp + eax + 0xf4], 0
movzx esi, word [esi + 0xa]
push 0
push 0
push 0x104
lea eax, [ebp + 0x1f8]
push eax
shr esi, 1
lea eax, [esi + 1]
push eax
mov eax, dword [ebp - 0x64]
movzx eax, word [eax + 8]
shr eax, 1
lea eax, [ebx + eax*2]
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x1004de86
cmp esi, 0x104
jae 0x103a9354
mov byte [ebp + esi + 0x1f8], 0
jmp 0x103a942e
cmp eax, reloc.WS2_32.dll_send
jne 0x1004de86
push ebx
push dword [ebp - 0x50]
lea eax, [ebp + 0x1f8]
push eax
mov dword [ebp - 0x58], 1
call sub.MSVCR110.dll_memcpy
mov esi, dword [ebp - 0x5c]
add esp, 0xc
cmp esi, 4
jle 0x103a92fa
mov ebx, dword [sym.imp.MSVCR110.dll_strncmp]
push 0xb
lea eax, [ebp + 0x1f8]
push str.__Volume
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x103a94be
push 0xb
lea eax, [ebp + 0x1f8]
push str._Volume
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x103a94be
push 8
lea eax, [ebp + 0x1f8]
push str.__UNC_
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x103a94be
push 4
lea eax, [ebp + 0x1f8]
push str.___
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x103a94b4
push 4
lea eax, [ebp + 0x1f8]
push 0x106212d8
push eax
call ebx
add esp, 0xc
test eax, eax
jne 0x103a92fa
mov ecx, 4
jmp 0x103a92fc
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x50]
mov ebx, ecx
jmp 0x103a9325
mov esi, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x70]
push eax
push dword [ebp + 0x318]
xor edx, edx
push 0
push esi
push dword [ebp - 0x6c]
push ebx
call fcn.1004d950
mov ebx, eax
add esp, 0x18
test ebx, ebx
jns 0x103a9583
cmp byte [ebp - 0x51], 0
je 0x103a9507
push dword [ebp - 0x60]
call sym.php5.dll__efree
add esp, 4
or eax, 0xffffffff
jmp 0x1004dca5
lea eax, [ebx + edi]
cmp eax, 0x103
jge 0x103a94f6
lea eax, [ebx + 1]
push eax
lea esi, [edx + edi]
push edx
push esi
call dword [sym.imp.MSVCR110.dll_memmove]
lea eax, [edi - 1]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x50]
call sub.MSVCR110.dll_memcpy
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x70]
push eax
push dword [ebp + 0x318]
mov byte [esi - 1], 0x5c
push dword [ebp + 0x314]
mov esi, dword [ebp - 0x78]
push esi
push dword [ebp - 0x6c]
lea eax, [ebx + edi]
push eax
call fcn.1004d950
mov ebx, eax
add esp, 0x30
test ebx, ebx
jns 0x103a9583
cmp byte [ebp - 0x51], 0
je 0x103a9507
push dword [ebp - 0x60]
call sym.php5.dll__efree
add esp, 4
or eax, 0xffffffff
jmp 0x1004dca5
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x68]
and eax, 0x10
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x70], eax
test edi, edi
je 0x1004dbeb
mov dword [edi], eax
jmp 0x1004dbeb
or eax, 0xffffffff
jmp 0x1004dca5
push dword [ebp - 0x60]
call sym.php5.dll__efree
add esp, 4
jmp 0x1004dca3
test eax, eax
je 0x1004dca3
mov dword [eax], 1
jmp 0x1004dca3