Function at 0x402370
Capabilities:
Query environment variable

Disassembly:
sub esp, 0x4c
push ebp
mov ebp, dword [esp + 0x54]
push esi
push edi
call fcn.00406420
mov esi, dword [sym.imp.MSVCR90.dll_getenv]
test eax, eax
je 0x4023b1
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov eax, dword [eax]
push 0xf
push str.SCRIPT_FILENAME
push eax
call fcn.00406180
mov edi, eax
add esp, 0xc
mov dword [esp + 0x18], edi
jmp 0x4023c1
push str.SCRIPT_FILENAME
call esi
add esp, 4
mov edi, eax
mov dword [esp + 0x18], eax
call fcn.00406420
test eax, eax
je 0x4023f1
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [ebp]
mov edx, dword [ecx]
mov ecx, dword [eax + edx*4 - 4]
mov eax, dword [ecx]
push 0xf
push str.PATH_TRANSLATED
push eax
call fcn.00406180
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x4023ff
push str.PATH_TRANSLATED
call esi
add esp, 4
mov dword [esp + 0x14], eax
xor ecx, ecx
mov edx, edi
mov dword [esp + 0xc], edx
cmp edi, ecx
jne 0x402415
cmp eax, ecx
je 0x402415
mov edx, eax
mov dword [esp + 0xc], eax
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 0x24], ecx
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 4], ecx
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 0x5c], 0x3e8
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 8], ecx
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 0x28], ecx
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 0x2c], ecx
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 0x18], ecx
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [eax]
mov edi, dword [ebp]
mov eax, dword [edi + eax*4 - 4]
mov dword [eax + 0x7c], 0xc8
cmp edx, ecx
je 0x402e81
call fcn.00406420
test eax, eax
je 0x4024d9
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [ebp]
mov edx, dword [ecx]
mov ecx, dword [eax + edx*4 - 4]
mov eax, dword [ecx]
push 0xe
push str.CONTENT_LENGTH
push eax
call fcn.00406180
add esp, 0xc
jmp 0x4024e3
push str.CONTENT_LENGTH
call esi
add esp, 4
mov dword [esp + 0x2c], eax
call fcn.00406420
test eax, eax
je 0x402513
mov edx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [edx]
mov ecx, dword [ebp]
mov edx, dword [ecx + eax*4 - 4]
mov eax, dword [edx]
push 0xc
push str.CONTENT_TYPE
push eax
call fcn.00406180
add esp, 0xc
jmp 0x40251d
push str.CONTENT_TYPE
call esi
add esp, 4
push ebx
mov dword [esp + 0x2c], eax
call fcn.00406420
test eax, eax
je 0x402553
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov eax, dword [eax]
push 9
push str.PATH_INFO
push eax
call fcn.00406180
mov ebx, eax
add esp, 0xc
mov dword [esp + 0x60], ebx
jmp 0x402563
push str.PATH_INFO
call esi
add esp, 4
mov ebx, eax
mov dword [esp + 0x60], eax
call fcn.00406420
test eax, eax
je 0x402595
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [ebp]
mov edx, dword [ecx]
mov ecx, dword [eax + edx*4 - 4]
mov eax, dword [ecx]
push 0xb
push str.SCRIPT_NAME
push eax
call fcn.00406180
mov edi, eax
add esp, 0xc
mov dword [esp + 0x20], edi
jmp 0x4025a5
push str.SCRIPT_NAME
call esi
add esp, 4
mov edi, eax
mov dword [esp + 0x20], eax
call fcn.00406420
test eax, eax
je 0x4025d1
mov edx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov eax, dword [edx]
mov ecx, dword [ebp]
mov edx, dword [ecx + eax*4 - 4]
mov eax, dword [edx]
push 0xf
push str.SERVER_SOFTWARE
push eax
call fcn.00406180
add esp, 0xc
jmp 0x4025db
push str.SERVER_SOFTWARE
call esi
add esp, 4
test eax, eax
je 0x402656
test edi, edi
je 0x402656
test ebx, ebx
je 0x402656
mov esi, dword [sym.imp.MSVCR90.dll_strncmp]
push 0xd
push str.Microsoft_IIS
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x402656
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402603
sub eax, edx
push eax
push edi
push ebx
call esi
add esp, 0xc
test eax, eax
jne 0x402656
push ebp
push ebx
mov ebx, str.ORIG_PATH_INFO
call fcn.00401760
mov ecx, edi
add esp, 8
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402630
sub ecx, esi
add eax, ecx
cmp byte [eax], dl
jne 0x402641
xor eax, eax
push ebp
push eax
mov ebx, str.PATH_INFO
call fcn.00401760
mov ebx, eax
add esp, 8
mov dword [esp + 0x60], ebx
mov eax, dword [ebp]
mov ecx, dword [0x40b124]
mov edx, dword [eax + ecx*4 - 4]
cmp byte [edx + 3], 0
je 0x402ce3
push ebp
push 0xc
push str.REDIRECT_URL
mov dword [esp + 0x20], 0
call fcn.00401710
push ebp
mov esi, eax
push 0xd
push str.DOCUMENT_ROOT
mov dword [esp + 0x4c], esi
call fcn.00401710
add esp, 0x18
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], edi
test eax, eax
jne 0x4026df
mov eax, dword [sym.imp.php5ts.dll_core_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov eax, dword [eax + 0x3c]
test eax, eax
je 0x4026df
push ebp
push eax
mov ebx, str.DOCUMENT_ROOT
call fcn.00401760
add esp, 8
cmp byte [eax], 0
mov dword [esp + 0x28], eax
je 0x4026df
cmp byte [eax], 0x5c
jne 0x4026d9
mov byte [eax], 0x2f
inc eax
cmp byte [eax], 0
jne 0x4026d1
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x40272c
test esi, esi
je 0x40272c
mov edi, dword [esp + 0x10]
cmp ebx, edi
je 0x402730
mov ecx, edi
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402717
test dl, dl
je 0x402713
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402717
add eax, 2
add ecx, 2
test dl, dl
jne 0x4026f7
xor eax, eax
jmp 0x40271c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x402730
mov edi, ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x20], esi
jmp 0x402730
mov edi, dword [esp + 0x10]
test edi, edi
je 0x402bc4
mov eax, edi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402740
sub eax, edx
mov edi, eax
test edi, edi
jle 0x402bc4
mov ecx, dword [esp + 0x10]
mov al, byte [edi + ecx - 1]
cmp al, 0x2f
je 0x402780
cmp al, 0x5c
je 0x402780
push ebp
push 0
push ecx
call dword [sym.imp.php5ts.dll_tsrm_realpath]
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
jne 0x402bc4
mov ecx, dword [esp + 0x10]
push edi
push ecx
call dword [sym.imp.php5ts.dll__estrndup]
mov esi, dword [sym.imp.MSVCR90.dll_strrchr]
mov ebx, dword [sym.imp.MSVCR90.dll__stat32]
add esp, 8
mov dword [esp + 0x14], eax
jmp 0x4027a0
mov ecx, dword [esp + 0x14]
push 0x2f
push ecx
call esi
add esp, 8
test eax, eax
jne 0x4027c4
mov edx, dword [esp + 0x14]
push 0x5c
push edx
call esi
add esp, 8
test eax, eax
je 0x402ad3
mov ecx, dword [esp + 0x14]
mov byte [eax], 0
lea eax, [esp + 0x38]
push eax
push ecx
call ebx
add esp, 8
test eax, eax
jne 0x4027a0
mov edx, dword [esp + 0x3e]
and edx, 0xf000
cmp edx, 0x8000
jne 0x4027a0
mov eax, dword [esp + 0x14]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4027f3
sub eax, edx
sub edi, eax
mov edx, edi
mov edi, dword [esp + 0x60]
test edi, edi
je 0x4028d6
mov eax, edi
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402811
sub eax, esi
sub eax, edx
add eax, edi
mov esi, eax
cmp edi, esi
je 0x4028d6
mov edi, dword [esp + 0x60]
push ebp
push edi
mov ebx, str.ORIG_PATH_INFO
call fcn.00401760
mov al, byte [esi]
mov ebx, dword [esp + 0x2c]
add esp, 8
mov byte [esp + 0x60], al
mov byte [esi], 0
test ebx, ebx
je 0x40289c
mov ecx, edi
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402870
test dl, dl
je 0x40286c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402870
add eax, 2
add ecx, 2
test dl, dl
jne 0x402850
xor eax, eax
jmp 0x402875
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40288d
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov eax, dword [ebp]
mov ecx, dword [eax + edx*4 - 4]
mov dword [ecx + 0x28], ebx
jmp 0x4028bd
push ebp
push ebx
mov ebx, str.ORIG_SCRIPT_NAME
call fcn.00401760
add esp, 8
push ebp
push edi
mov ebx, str.SCRIPT_NAME
call fcn.00401760
mov edx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [edx]
mov edx, dword [ebp]
mov ecx, dword [edx + ecx*4 - 4]
add esp, 8
mov dword [ecx + 0x28], eax
mov dl, byte [esp + 0x60]
push ebp
push esi
mov ebx, str.PATH_INFO
mov byte [esi], dl
call fcn.00401760
add esp, 8
mov dword [esp + 0x60], eax
cmp dword [esp + 0x1c], 0
je 0x402921
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402905
test dl, dl
je 0x402901
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402905
add eax, 2
add ecx, 2
test dl, dl
jne 0x4028e5
xor eax, eax
jmp 0x40290a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x402938
mov eax, dword [esp + 0x1c]
push ebp
push eax
mov ebx, str.ORIG_SCRIPT_FILENAME
call fcn.00401760
add esp, 8
mov ecx, dword [esp + 0x14]
push ebp
push ecx
mov ebx, str.SCRIPT_FILENAME
call fcn.00401760
add esp, 8
mov dword [esp + 0x10], eax
mov edi, dword [esp + 0x14]
cmp byte [edi], 0
mov eax, edi
je 0x402951
cmp byte [eax], 0x5c
jne 0x40294b
mov byte [eax], 0x2f
inc eax
cmp byte [eax], 0
jne 0x402943
mov eax, dword [esp + 0x28]
test eax, eax
je 0x402a05
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402960
sub eax, edx
mov ebx, eax
je 0x402979
mov edx, dword [esp + 0x28]
cmp byte [ebx + edx - 1], 0x2f
jne 0x402979
dec ebx
mov eax, dword [esp + 0x60]
test eax, eax
je 0x40298f
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402984
sub eax, edx
jmp 0x402991
xor eax, eax
lea esi, [eax + ebx]
lea eax, [esi + 1]
push eax
call dword [sym.imp.php5ts.dll__emalloc]
mov ecx, dword [esp + 0x2c]
push ebx
mov edi, eax
push ecx
push edi
call sub.MSVCR90.dll_memcpy
add esp, 0x10
cmp dword [esp + 0x60], 0
je 0x4029cc
mov eax, dword [esp + 0x60]
mov edx, esi
sub edx, ebx
push edx
push eax
lea ecx, [edi + ebx]
push ecx
call sub.MSVCR90.dll_memcpy
add esp, 0xc
cmp dword [esp + 0x18], 0
mov byte [edi + esi], 0
je 0x4029ea
mov edx, dword [esp + 0x18]
push ebp
push edx
mov ebx, str.ORIG_PATH_TRANSLATED
call fcn.00401760
add esp, 8
push ebp
push edi
mov ebx, str.PATH_TRANSLATED
call fcn.00401760
push edi
call dword [sym.imp.php5ts.dll__efree]
add esp, 0xc
jmp 0x402b14
mov esi, dword [esp + 0x20]
test esi, esi
je 0x402b14
push esi
push edi
call dword [sym.imp.MSVCR90.dll_strstr]
add esp, 8
test eax, eax
je 0x402b14
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402a30
sub eax, edx
mov ecx, eax
mov eax, esi
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402a40
sub eax, esi
sub ecx, eax
mov eax, dword [esp + 0x60]
mov esi, ecx
test eax, eax
je 0x402a63
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402a58
sub eax, edx
jmp 0x402a65
xor eax, eax
lea ebx, [eax + esi]
lea eax, [ebx + 1]
push eax
call dword [sym.imp.php5ts.dll__emalloc]
mov ecx, dword [esp + 0x18]
push esi
mov edi, eax
push ecx
push edi
call sub.MSVCR90.dll_memcpy
add esp, 0x10
cmp dword [esp + 0x60], 0
je 0x402aa0
mov eax, dword [esp + 0x60]
mov edx, ebx
sub edx, esi
push edx
push eax
lea ecx, [edi + esi]
push ecx
call sub.MSVCR90.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x18]
mov byte [edi + ebx], 0
test eax, eax
je 0x402abb
push ebp
push eax
mov ebx, str.ORIG_PATH_TRANSLATED
call fcn.00401760
add esp, 8
push ebp
push edi
mov ebx, str.PATH_TRANSLATED
call fcn.00401760
push edi
call dword [sym.imp.php5ts.dll__efree]
add esp, 0xc
jmp 0x402b14
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x402aea
push ebp
push eax
mov ebx, str.ORIG_SCRIPT_FILENAME
call fcn.00401760
add esp, 8
push ebp
push 0
mov ebx, str.SCRIPT_FILENAME
call fcn.00401760
mov edx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [ebp]
mov dword [esp + 0x18], eax
mov eax, dword [edx]
mov edx, dword [ecx + eax*4 - 4]
add esp, 8
mov dword [edx + 0x7c], 0x194
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov esi, dword [edx + ecx*4 - 4]
cmp dword [esi + 0x28], 0
jne 0x402ba6
cmp dword [esp + 0x24], 0
je 0x402b81
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov eax, edi
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402b60
test dl, dl
je 0x402b5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402b60
add eax, 2
add ecx, 2
test dl, dl
jne 0x402b40
xor eax, eax
jmp 0x402b65
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x402b6e
mov dword [esi + 0x28], edi
jmp 0x402ba6
mov eax, dword [esp + 0x24]
push ebp
push eax
mov ebx, str.ORIG_SCRIPT_NAME
call fcn.00401760
add esp, 8
mov ecx, dword [esp + 0x20]
push ebp
push ecx
mov ebx, str.SCRIPT_NAME
call fcn.00401760
mov edx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [edx]
mov edx, dword [ebp]
mov ecx, dword [edx + ecx*4 - 4]
add esp, 8
mov dword [ecx + 0x28], eax
cmp dword [esp + 0x14], 0
je 0x402d26
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.php5ts.dll__efree]
add esp, 4
jmp 0x402d26
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
test edi, edi
je 0x402c10
cmp esi, edi
je 0x402c23
mov ecx, edi
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402bf8
test dl, dl
je 0x402bf4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402bf8
add eax, 2
add ecx, 2
test dl, dl
jne 0x402bd8
xor eax, eax
jmp 0x402bfd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x402c23
push ebp
push edi
mov ebx, str.ORIG_SCRIPT_FILENAME
call fcn.00401760
add esp, 8
push ebp
push esi
mov ebx, str.SCRIPT_FILENAME
call fcn.00401760
add esp, 8
mov dword [esp + 0x10], eax
cmp dword [esp + 0x34], 0
je 0x402c72
mov eax, dword [esp + 0x60]
test eax, eax
je 0x402c4e
push ebp
push eax
mov ebx, str.ORIG_PATH_INFO
call fcn.00401760
push ebp
push 0
mov ebx, str.PATH_INFO
call fcn.00401760
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x402c72
push ebp
push eax
mov ebx, str.ORIG_PATH_TRANSLATED
call fcn.00401760
push ebp
push 0
mov ebx, str.PATH_TRANSLATED
call fcn.00401760
add esp, 0x10
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
cmp edi, eax
je 0x402cc2
test eax, eax
je 0x402c91
push ebp
push eax
mov ebx, str.ORIG_SCRIPT_NAME
call fcn.00401760
add esp, 8
push ebp
push edi
mov ebx, str.SCRIPT_NAME
call fcn.00401760
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov ecx, dword [ebp]
mov edx, dword [ecx + edx*4 - 4]
mov ecx, dword [esp + 0x1c]
add esp, 8
push ecx
mov dword [edx + 0x28], eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
jmp 0x402d26
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov ecx, dword [esp + 0x14]
push ecx
mov dword [eax + 0x28], edi
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
jmp 0x402d26
test ebx, ebx
je 0x402cf8
mov edx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [edx]
mov edx, dword [eax + ecx*4 - 4]
mov dword [edx + 0x28], ebx
jmp 0x402d07
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov eax, dword [eax + edx*4 - 4]
mov dword [eax + 0x28], edi
mov ecx, dword [ebp]
mov edx, dword [0x40b124]
mov eax, dword [ecx + edx*4 - 4]
cmp byte [eax + 5], 0
jne 0x402d26
mov eax, dword [esp + 0x18]
test eax, eax
je 0x402d26
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0x10]
call fcn.004022e0
pop ebx
test eax, eax
je 0x402d50
push esi
call dword [sym.imp.php5ts.dll__estrdup]
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov ecx, dword [ebp]
mov edx, dword [ecx + edx*4 - 4]
add esp, 4
mov dword [edx + 0x24], eax
call fcn.00406420
test eax, eax
je 0x402d81
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov eax, dword [eax]
push 0xe
push str.REQUEST_METHOD
push eax
call fcn.00406180
mov esi, dword [sym.imp.MSVCR90.dll_getenv]
add esp, 0xc
jmp 0x402d91
mov esi, dword [sym.imp.MSVCR90.dll_getenv]
push str.REQUEST_METHOD
call esi
add esp, 4
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov ecx, dword [ebp]
mov edx, dword [ecx + edx*4 - 4]
mov dword [edx + 4], eax
call fcn.00406420
test eax, eax
je 0x402dce
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov eax, dword [eax]
push 0xc
push str.QUERY_STRING
push eax
call fcn.00406180
add esp, 0xc
jmp 0x402dd8
push str.QUERY_STRING
call esi
add esp, 4
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov ecx, dword [ebp]
mov edx, dword [ecx + edx*4 - 4]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x402df7
mov eax, 0x408d75
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov ecx, dword [ebp]
mov edx, dword [ecx + edx*4 - 4]
mov dword [edx + 0x2c], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x402e1d
push eax
call dword [sym.imp.MSVCR90.dll_atol]
add esp, 4
jmp 0x402e1f
xor eax, eax
mov ecx, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov edx, dword [ecx]
mov ecx, dword [ebp]
mov edx, dword [ecx + edx*4 - 4]
mov dword [edx + 0x18], eax
call fcn.00406420
test eax, eax
je 0x402e6c
mov eax, dword [sym.imp.php5ts.dll_sapi_globals_id]
mov ecx, dword [eax]
mov edx, dword [ebp]
mov eax, dword [edx + ecx*4 - 4]
mov eax, dword [eax]
push 0x12
push str.HTTP_AUTHORIZATION
push eax
call fcn.00406180
add esp, 0xc
push ebp
push eax
call dword [sym.imp.php5ts.dll_php_handle_auth_data]
add esp, 8
pop edi
pop esi
pop ebp
add esp, 0x4c
ret
push str.HTTP_AUTHORIZATION
call esi
add esp, 4
push ebp
push eax
call dword [sym.imp.php5ts.dll_php_handle_auth_data]
add esp, 8
pop edi
pop esi
pop ebp
add esp, 0x4c
ret