Function at 0x4018e0
Capabilities:
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x18c]
sub esp, 0x260
mov eax, dword [0x4070a4]
xor eax, ebp
mov dword [ebp + 0x188], eax
push ebx
push esi
push edi
mov edx, dword [section..data]
xor eax, eax
mov dword [ebp + 0x20], edx
mov edx, dword [0x4070c0]
mov dword [ebp + 0x2c], edx
lea edx, [ebp + 0x40]
mov dword [ebp + 0x1c], edx
mov edx, dword [sym.imp.MSVCR90.dll___argc]
mov dword [ebp + 0x40], eax
mov edx, dword [edx]
mov dword [ebp + 0x70], edx
mov edx, dword [sym.imp.MSVCR90.dll___argv]
mov edx, dword [edx]
mov ecx, 1
mov dword [ebp + 0x80], eax
mov dword [ebp + 0x78], ecx
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x74], eax
mov dword [ebp + 0x38], eax
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x28], eax
push 0x407010
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x48], eax
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x30], eax
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x7c], eax
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x6c], edx
mov dword [0x407090], 0x401480
mov dword [0x407060], eax
mov dword [0x407094], ecx
call dword [sym.imp.php5.dll_sapi_startup]
mov eax, dword [sym.imp.MSVCR90.dll__fmode]
mov ebx, dword [sym.imp.MSVCR90.dll___iob_func]
add esp, 4
push 0x8000
mov dword [eax], 0x8000
call ebx
mov esi, dword [sym.imp.MSVCR90.dll__fileno]
push eax
call esi
mov edi, dword [sym.imp.MSVCR90.dll__setmode]
add esp, 4
push eax
call edi
add esp, 8
push 0x8000
call ebx
add eax, 0x20
push eax
call esi
add esp, 4
push eax
call edi
add esp, 8
push 0x8000
call ebx
add eax, 0x40
push eax
call esi
add esp, 4
push eax
call edi
mov ebx, 0x6e
push 0x70
mov dword [ebp + 0x14], ebx
call dword [sym.imp.MSVCR90.dll_malloc]
push 2
mov ecx, 0x1c
mov esi, str.html_errors0_nregister_argc_argv1_nimplicit_flush1_noutput_buffering0_nmax_execution_time0_nmax_input_time_1_n
mov edi, eax
push 0
mov dword [0x407098], eax
rep movsd dword es:[edi], dword [esi]
push section..data
mov ecx, dword [ebp + 0x6c]
mov edx, dword [ebp + 0x70]
push 0x4070c0
push 0x4044e0
push ecx
push edx
call dword [sym.imp.php5.dll_php_getopt]
add esp, 0x28
mov dword [ebp + 0x68], eax
cmp eax, 0xffffffff
je 0x401c28
sub eax, 0x63
je 0x401bce
sub eax, 1
je 0x401a5b
sub eax, 0xa
jne 0x401bf5
mov dword [0x407078], 1
jmp 0x401bf5
mov ecx, dword [0x4070c0]
mov esi, ecx
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x401a66
sub esi, edx
push 0x3d
push ecx
mov dword [ebp - 0x34], esi
call dword [sym.imp.MSVCR90.dll_strchr]
mov edi, eax
add esp, 8
mov dword [ebp + 0xc], edi
test edi, edi
je 0x401b84
movsx eax, byte [edi + 1]
inc edi
push eax
mov dword [ebp + 0xc], edi
call dword [sym.imp.MSVCR90.dll_isalnum]
add esp, 4
test eax, eax
jne 0x401b38
mov al, byte [edi]
cmp al, 0x22
je 0x401b38
cmp al, 0x27
je 0x401b38
test al, al
je 0x401b38
mov edx, dword [0x407098]
lea ecx, [esi + ebx + 5]
push ecx
push edx
call dword [sym.imp.MSVCR90.dll_realloc]
mov ecx, dword [0x4070c0]
mov edx, edi
sub edx, ecx
push edx
mov dword [0x407098], eax
push ecx
add eax, ebx
push eax
call sub.MSVCR90.dll_memcpy
mov ecx, dword [0x407098]
mov eax, edi
sub eax, dword [0x4070c0]
add ebx, eax
mov byte [ecx + ebx], 0x22
mov edx, dword [0x4070c0]
mov eax, dword [0x407098]
sub edx, edi
add edx, esi
push edx
inc ebx
add eax, ebx
push edi
push eax
call sub.MSVCR90.dll_memcpy
mov ecx, dword [0x4070c0]
mov edx, dword [0x407098]
sub ecx, edi
add ecx, esi
add ebx, ecx
add esp, 0x20
mov dword [edx + ebx], 0xa22
add ebx, 2
jmp 0x401bf5
mov ecx, dword [0x407098]
lea eax, [esi + ebx + 3]
push eax
push ecx
call dword [sym.imp.MSVCR90.dll_realloc]
mov edx, dword [0x4070c0]
push esi
mov dword [0x407098], eax
push edx
add eax, ebx
push eax
call sub.MSVCR90.dll_memcpy
mov eax, dword [0x407098]
mov cx, word [0x405240]
add eax, esi
add esp, 0x14
add eax, ebx
mov word [eax], cx
mov dl, byte [0x405242]
mov byte [eax + 2], dl
lea ebx, [esi + ebx + 1]
jmp 0x401bf5
mov ecx, dword [0x407098]
lea eax, [esi + ebx + 5]
push eax
push ecx
call dword [sym.imp.MSVCR90.dll_realloc]
mov edx, dword [0x4070c0]
push esi
mov dword [0x407098], eax
push edx
add eax, ebx
push eax
call sub.MSVCR90.dll_memcpy
mov eax, dword [0x407098]
mov ecx, dword [0x405238]
add eax, esi
add esp, 0x14
add eax, ebx
mov dword [eax], ecx
mov dl, byte [0x40523c]
mov byte [eax + 4], dl
lea ebx, [esi + ebx + 3]
jmp 0x401bf5
mov eax, dword [0x407060]
test eax, eax
je 0x401be1
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov eax, dword [0x4070c0]
push eax
call dword [sym.imp.MSVCR90.dll__strdup]
add esp, 4
mov dword [0x407060], eax
mov ecx, dword [ebp + 0x6c]
mov edx, dword [ebp + 0x70]
push 2
push 0
push section..data
push 0x4070c0
push 0x4044e0
push ecx
push edx
call dword [sym.imp.php5.dll_php_getopt]
add esp, 0x1c
mov dword [ebp + 0x68], eax
cmp eax, 0xffffffff
jne 0x401a35
mov dword [ebp + 0x14], ebx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x6c]
mov dword [section..data], eax
mov dword [0x4070c0], ecx
mov eax, dword [edx]
push 0x407010
mov dword [0x407074], eax
mov dword [0x40709c], 0x4046a8
call dword [0x407018]
add esp, 4
cmp eax, 0xffffffff
jne 0x401c6f
mov dword [ebp + 0x80], 1
jmp 0x402a83
mov ecx, dword [sym.imp.php5.dll_executor_globals]
mov dword [ecx + 0x128], 0
mov eax, dword [sym.imp.php5.dll_executor_globals]
mov edx, dword [eax + 0x128]
lea ecx, [ebp - 0xd4]
mov dword [ebp + 0x18], edx
mov edx, ecx
push 0
push edx
mov dword [ebp + 0x28], 1
mov dword [eax + 0x128], ecx
call sub.MSVCR90.dll__setjmp3
add esp, 8
test eax, eax
jne case.0x4023f4.3
mov eax, dword [sym.imp.php5.dll_compiler_globals]
mov edi, dword [ebp + 0x6c]
mov edx, dword [ebp + 0x70]
mov ebx, dword [sym.imp.php5.dll_php_getopt]
push 2
push 0
push section..data
push 0x4070c0
push 0x4044e0
mov byte [eax + 0xd8], 0
mov ecx, dword [sym.imp.php5.dll_executor_globals]
push edi
push edx
mov dword [ecx + 0x18], 0
call ebx
mov esi, eax
add esp, 0x1c
mov dword [ebp + 0x68], esi
cmp esi, 0xffffffff
je 0x401d3d
mov edi, edi
lea eax, [esi - 0x3f]
cmp eax, 0x37
ja case.0x401d0f.64
movzx eax, byte [eax + 0x402ae0]
jmp dword [eax*4 + 0x402acc]
mov ecx, dword [ebp + 0x70]
push 2
push 0
push section..data
push 0x4070c0
push 0x4044e0
push edi
push ecx
call ebx
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
jne 0x401d00
mov dword [ebp + 0x68], esi
mov eax, dword [sym.imp.php5.dll_sapi_globals]
or dword [eax + 0xc8], 1
mov ecx, dword [ebp + 0x70]
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x2c]
push 2
push 0
push section..data
push 0x4070c0
push 0x4044e0
push edi
push ecx
mov dword [section..data], edx
mov dword [0x4070c0], eax
call ebx
mov edi, dword [ebp + 0x78]
mov esi, dword [ebp + 0x7c]
add esp, 0x1c
mov dword [ebp + 0x68], eax
cmp eax, 0xffffffff
je 0x40217f
lea esp, [esp]
mov edx, dword [ebp + 0x44]
mov ecx, dword [ebp + 0x4c]
add eax, 0xfffffff6
cmp eax, 0x70
ja case.0x401da9.15
movzx eax, byte [eax + 0x402b64]
jmp dword [eax*4 + 0x402b18]
mov dword [ebp + 0x68], esi
call dword [sym.imp.php5.dll_php_request_startup]
cmp eax, 0xffffffff
je 0x402358
mov eax, dword [edi]
mov ebx, 1
mov dword [ebp + 0x58], ebx
call fcn.00401510
push ebx
call dword [sym.imp.php5.dll_php_end_ob_buffers]
add esp, 4
cmp esi, 0x3f
jne 0x401e04
cmp dword [ebp + 0x70], ebx
jle 0x401e04
mov edx, dword [edi + 4]
push esi
push edx
call dword [sym.imp.MSVCR90.dll_strchr]
add esp, 8
test eax, eax
jne 0x401e04
mov eax, ebx
mov dword [ebp + 0x80], eax
jmp 0x402a44
xor eax, eax
mov dword [ebp + 0x80], eax
jmp 0x402a44
mov dword [ebp + 0x68], esi
call dword [sym.imp.php5.dll_php_request_startup]
cmp eax, 0xffffffff
je 0x402358
mov dword [ebp + 0x58], 1
push 0xffffffffffffffff
call dword [sym.imp.php5.dll_php_print_info]
push 1
call dword [sym.imp.php5.dll_php_end_ob_buffers]
add esp, 8
mov dword [ebp + 0x80], 0
jmp 0x402a44
mov dword [ebp + 0x68], esi
call dword [sym.imp.php5.dll_php_request_startup]
cmp eax, 0xffffffff
je 0x402358
mov esi, dword [sym.imp.php5.dll_php_printf]
mov dword [ebp + 0x58], 1
push str._PHP_Modules__n
call esi
call fcn.00401070
push str._n_Zend_Modules__n
call esi
call fcn.00401150
push 0x405210
call esi
push 1
call dword [sym.imp.php5.dll_php_end_ob_buffers]
add esp, 0x10
mov dword [ebp + 0x80], 0
jmp 0x402a44
mov dword [ebp + 0x68], esi
call dword [sym.imp.php5.dll_php_request_startup]
cmp eax, 0xffffffff
je 0x402358
mov dword [ebp + 0x58], 1
call dword [sym.imp.php5.dll_get_zend_version]
push eax
mov eax, dword [sym.imp.php5.dll_sapi_module]
mov ecx, dword [eax]
push 0x4042fc
push str.19:03:18
push str.Aug_15_2014
push ecx
push 0x4051f0
push str.PHP__s___s___built:__s__s___s_nCopyright__c__1997_2014_The_PHP_Group_n_s
call dword [sym.imp.php5.dll_php_printf]
push 1
call dword [sym.imp.php5.dll_php_end_ob_buffers]
add esp, 0x20
mov dword [ebp + 0x80], 0
jmp 0x402a44
test ecx, ecx
jne case.0x401da9.15
cmp edi, 1
je 0x401f20
mov esi, dword [str.Either_execute_direct_code__process_stdin_or_use_a_file._n]
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
mov dword [ebp + 0x4c], 1
jmp case.0x401da9.15
mov eax, dword [sym.imp.php5.dll_compiler_globals]
or dword [eax + 0x14c], 1
jmp case.0x401da9.15
cmp edi, 7
jne 0x401f58
test edx, edx
jne 0x401f4b
cmp dword [ebp + 0x74], edx
je 0x401f6b
mov esi, str.You_can_use__R_or__F_only_once._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
cmp edi, 1
je 0x401f6b
mov esi, dword [str.Either_execute_direct_code__process_stdin_or_use_a_file._n]
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
mov ecx, dword [0x4070c0]
mov edi, 7
mov dword [ebp + 0x74], ecx
jmp 0x402150
cmp edi, 6
je 0x401f12
cmp edi, 7
je 0x401f12
cmp dword [ebp + 0x74], 0
je 0x401f9b
mov esi, str.You_can_use__f_only_once._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
mov edx, dword [0x4070c0]
mov dword [ebp + 0x74], edx
jmp case.0x401da9.15
cmp edi, 1
jne case.0x401da9.15
mov edi, 4
jmp 0x402150
cmp edi, 6
jne 0x401fda
cmp dword [ebp + 0x3c], 0
jne 0x401fcd
cmp dword [ebp + 0x74], 0
je 0x401feb
mov esi, str.You_can_use__r_only_once._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
cmp edi, 1
jne 0x401f12
test ecx, ecx
jne 0x401f12
mov eax, dword [0x4070c0]
mov edi, 6
mov dword [ebp + 0x3c], eax
jmp 0x402150
cmp edi, 7
jne 0x402018
test edx, edx
jne 0x40200b
cmp dword [ebp + 0x74], edx
je 0x40202b
mov esi, str.You_can_use__R_or__F_only_once._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
cmp edi, 1
je 0x40202b
mov esi, dword [str.Either_execute_direct_code__process_stdin_or_use_a_file._n]
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
mov ecx, dword [0x4070c0]
mov edi, 7
mov dword [ebp + 0x44], ecx
jmp 0x402150
cmp edi, 7
jne 0x402056
cmp dword [ebp + 0x30], 0
je 0x402067
mov esi, str.You_can_use__B_only_once._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
cmp edi, 1
jne 0x401f12
test ecx, ecx
jne 0x401f12
mov edx, dword [0x4070c0]
mov edi, 7
mov dword [ebp + 0x30], edx
jmp 0x402150
cmp edi, 7
jne 0x402092
cmp dword [ebp + 0x34], 0
je 0x4020a3
mov esi, str.You_can_use__E_only_once._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
cmp edi, 1
jne 0x401f12
test ecx, ecx
jne 0x401f12
mov eax, dword [0x4070c0]
mov edi, 7
mov dword [ebp + 0x34], eax
jmp 0x402150
cmp edi, 6
je 0x4020c9
cmp edi, 7
je 0x4020c9
mov edi, 2
jmp 0x402150
mov esi, str.Source_highlighting_only_works_for_files._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
cmp edi, 6
je 0x4020e7
cmp edi, 7
je 0x4020e7
mov edi, 5
jmp 0x402150
mov esi, str.Source_stripping_only_works_for_files._n
mov dword [ebp + 0x7c], esi
jmp case.0x401da9.15
mov ecx, dword [0x4070c0]
push ecx
call dword [sym.imp.php5.dll_zend_load_extension]
add esp, 4
jmp case.0x401da9.15
mov dword [ebp + 0x24], 1
jmp case.0x401da9.15
mov edx, dword [0x4070c0]
mov edi, 8
mov dword [ebp + 0x64], edx
jmp 0x402150
mov eax, dword [0x4070c0]
mov edi, 9
mov dword [ebp + 0x64], eax
jmp 0x402150
mov ecx, dword [0x4070c0]
mov edi, 0xa
mov dword [ebp + 0x64], ecx
jmp 0x402150
mov edx, dword [0x4070c0]
mov edi, 0xb
mov dword [ebp + 0x64], edx
jmp 0x402150
mov edi, 0xc
mov dword [ebp + 0x78], edi
mov eax, dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x70]
push 2
push 0
push section..data
push 0x4070c0
push 0x4044e0
push eax
push ecx
call ebx
add esp, 0x1c
cmp eax, 0xffffffff
jne 0x401d90
mov dword [ebp + 0x68], eax
test esi, esi
je 0x4021a8
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402188
sub eax, edx
push eax
push esi
call dword [sym.imp.php5.dll_php_body_write]
mov dword [ebp + 0x80], 1
jmp 0x402355
mov esi, dword [ebp + 0x4c]
test esi, esi
je 0x4021cd
push str.Interactive_mode_enabled_n_n
call dword [sym.imp.MSVCR90.dll_printf]
call dword [sym.imp.MSVCR90.dll___iob_func]
add eax, 0x20
push eax
call dword [sym.imp.MSVCR90.dll_fflush]
add esp, 8
mov edx, dword [sym.imp.php5.dll_compiler_globals]
mov dword [edx + 0x118], esi
mov esi, dword [section..data]
cmp dword [ebp + 0x70], esi
jle 0x402238
cmp dword [ebp + 0x74], 0
jne 0x402238
cmp edi, 6
je 0x402238
cmp edi, 7
je 0x402238
mov ebx, dword [ebp + 0x6c]
mov eax, dword [ebx + esi*4 - 4]
mov ecx, 0x40509c
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402220
test dl, dl
je 0x40221c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402220
add eax, 2
add ecx, 2
test dl, dl
jne 0x402200
xor eax, eax
jmp 0x402225
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40223b
mov eax, dword [ebx + esi*4]
inc esi
mov dword [ebp + 0x74], eax
mov dword [section..data], esi
jmp 0x40223b
mov ebx, dword [ebp + 0x6c]
cmp dword [ebp + 0x74], 0
je 0x402291
mov eax, dword [ebp + 0x74]
lea ecx, [ebp + 0x48]
push ecx
lea esi, [ebp - 0x30]
call fcn.00401800
add esp, 4
test eax, eax
jne 0x402358
mov esi, dword [ebp + 0x74]
lea edx, [ebp + 0x84]
push edx
push esi
call dword [sym.imp.php5.dll_tsrm_realpath]
add esp, 8
test eax, eax
je 0x402286
lea eax, [ebp + 0x84]
push eax
call dword [sym.imp.MSVCR90.dll__strdup]
add esp, 4
mov dword [ebp + 0x38], eax
mov ebx, dword [ebp + 0x6c]
mov dword [0x407008], esi
jmp 0x4022a1
mov dword [ebp - 0x2c], 0x405098
call dword [sym.imp.MSVCR90.dll___iob_func]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp + 0x70]
sub edx, dword [section..data]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [sym.imp.php5.dll_sapi_globals]
inc edx
mov dword [0x407004], ecx
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x28], 0
mov byte [ebp + 8], 0
mov dword [eax + 0x54], edx
mov ecx, dword [section..data]
mov edx, dword [ebx + ecx*4 - 4]
lea eax, [ebx + ecx*4 - 4]
mov esi, eax
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x1c], esi
mov dword [ebp + 0x40], edx
test eax, eax
jne 0x4022ee
mov eax, dword [ebp - 0x2c]
mov ecx, dword [sym.imp.php5.dll_sapi_globals]
mov dword [ecx + 0x24], eax
mov edx, dword [section..data]
mov eax, dword [ebp - 0x2c]
mov dword [ebx + edx*4 - 4], eax
mov ecx, dword [section..data]
mov eax, dword [sym.imp.php5.dll_sapi_globals]
lea edx, [ebx + ecx*4 - 4]
mov dword [eax + 0x58], edx
call dword [sym.imp.php5.dll_php_request_startup]
cmp eax, 0xffffffff
jne 0x402373
mov ecx, dword [ebp + 0x40]
mov dword [esi], ecx
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVCR90.dll_fclose]
mov eax, str.Could_not_startup._n
add esp, 4
lea edx, [eax + 1]
jmp 0x402340
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402340
sub eax, edx
push eax
push str.Could_not_startup._n
call dword [sym.imp.php5.dll_php_body_write]
add esp, 8
call dword [sym.imp.php5.dll_sapi_deactivate]
call dword [sym.imp.php5.dll_zend_ini_deactivate]
mov dword [ebp + 0x80], 1
jmp 0x402a83
cmp dword [ebp + 0x24], 0
mov ecx, dword [sym.imp.php5.dll_compiler_globals]
mov eax, dword [ebp + 0x48]
mov dword [ecx + 0x11c], eax
mov edx, dword [ebp + 0x40]
mov dword [ebp + 0x58], 1
mov dword [esi], edx
je 0x4023cb
mov esi, 1
cmp dword [ebp + 0x70], esi
jle 0x4023cb
mov edi, edi
mov eax, dword [ebp + 0x6c]
mov ecx, dword [eax + esi*4]
mov eax, ecx
lea ebx, [eax + 1]
jmp 0x4023b0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4023b0
sub eax, ebx
push eax
push 0
push ecx
call sub.MSVCR90.dll_memset
inc esi
add esp, 0xc
cmp esi, dword [ebp + 0x70]
jl 0x4023a0
push 7
push str._SERVER
call dword [sym.imp.php5.dll_zend_is_auto_global]
mov ecx, dword [sym.imp.php5.dll_core_globals]
lea eax, [edi - 1]
add esp, 8
mov byte [ecx + 0xfa], 0
cmp eax, 0xb
ja case.0x4023f4.3
jmp dword [eax*4 + 0x402bd8]
mov eax, dword [ebp - 0x2c]
mov ecx, 0x405098
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402423
test dl, dl
je 0x40241f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402423
add eax, 2
add ecx, 2
test dl, dl
jne 0x402403
xor eax, eax
jmp 0x402428
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x402431
call fcn.00401540
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.php5.dll_php_execute_script]
mov eax, dword [sym.imp.php5.dll_executor_globals]
mov ecx, dword [eax + 0x134]
add esp, 4
mov dword [ebp + 0x80], ecx
jmp case.0x4023f4.3
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.php5.dll_php_lint_script]
mov dword [ebp + 0x80], eax
mov eax, dword [ebp + 0x80]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [sym.imp.php5.dll_zend_printf]
add esp, 4
test eax, eax
mov eax, dword [edx]
push ecx
jne 0x402487
push str.No_syntax_errors_detected_in__s_n
jmp 0x402a30
push str.Errors_parsing__s_n
jmp 0x402a30
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.php5.dll_open_file_for_scanning]
add esp, 4
test eax, eax
jne 0x402a44
call dword [sym.imp.php5.dll_zend_strip]
jmp 0x402a44
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.php5.dll_open_file_for_scanning]
add esp, 4
test eax, eax
jne 0x402a44
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.php5.dll_php_get_highlight_struct]
lea ecx, [ebp - 0x48]
push ecx
call dword [sym.imp.php5.dll_zend_highlight]
add esp, 8
jmp 0x402a44
call fcn.00401540
mov edx, dword [ebp + 0x3c]
push 1
push str.Command_line_code
push 0
push edx
call dword [sym.imp.php5.dll_zend_eval_string_ex]
add esp, 0x10
cmp eax, 0xffffffff
jne case.0x4023f4.3
mov dword [ebp + 0x80], 0xfe
jmp case.0x4023f4.3
xor ebx, ebx
call fcn.00401540
mov eax, dword [ebp + 0x30]
cmp eax, ebx
je 0x402544
push 1
push str.Command_line_begin_code
push ebx
push eax
call dword [sym.imp.php5.dll_zend_eval_string_ex]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x402544
mov dword [ebp + 0x80], 0xfe
push 0x18
call dword [sym.imp.php5.dll__emalloc]
mov dword [ebp + 0x54], eax
mov dword [eax + 0x10], ebx
mov eax, dword [ebp + 0x54]
mov byte [eax + 0xc], 1
mov ecx, dword [ebp + 0x54]
mov dword [ecx], ebx
mov edx, dword [ebp + 0x54]
push 1
push ebx
mov dword [edx + 8], 1
mov eax, dword [ebp + 0x54]
push 4
lea ecx, [ebp + 0x54]
push ecx
mov byte [eax + 0xd], 0
mov edx, dword [sym.imp.php5.dll_executor_globals]
push 5
add edx, 0xd8
push str.argi
push edx
call dword [sym.imp.php5.dll__zend_hash_add_or_update]
mov eax, dword [ebp + 0x80]
add esp, 0x20
test eax, eax
jne 0x4026ea
mov ecx, dword [0x4070c4]
push 0
push 0
push 0
push ecx
call dword [sym.imp.php5.dll__php_stream_get_line]
mov edi, eax
add esp, 0x10
test edi, edi
je 0x4026ea
mov esi, edi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x4025c8
sub esi, ecx
je 0x4025e8
mov al, byte [esi + edi - 1]
dec esi
cmp al, 0xa
je 0x4025e0
cmp al, 0xd
jne 0x4025e9
mov byte [esi + edi], 0
test esi, esi
jne 0x4025d3
dec esi
push 0x18
call dword [sym.imp.php5.dll__emalloc]
mov dword [ebp + 0x50], eax
mov dword [eax + 0x10], 0
mov edx, dword [ebp + 0x50]
inc esi
mov byte [edx + 0xc], 6
mov eax, dword [ebp + 0x50]
push esi
push edi
mov dword [eax + 4], esi
call dword [sym.imp.php5.dll__estrndup]
mov ecx, dword [ebp + 0x50]
mov dword [ecx], eax
mov edx, dword [ebp + 0x50]
push 1
push 0
mov dword [edx + 8], 1
mov eax, dword [ebp + 0x50]
push 4
lea ecx, [ebp + 0x50]
push ecx
mov byte [eax + 0xd], 0
mov edx, dword [sym.imp.php5.dll_executor_globals]
push 5
add edx, 0xd8
push str.argn
push edx
call dword [sym.imp.php5.dll__zend_hash_add_or_update]
mov eax, dword [ebp + 0x54]
inc ebx
mov dword [eax], ebx
mov eax, dword [ebp + 0x44]
add esp, 0x28
test eax, eax
je 0x40267f
push 1
push str.Command_line_run_code
push 0
push eax
call dword [sym.imp.php5.dll_zend_eval_string_ex]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4026d2
mov dword [ebp + 0x80], 0xfe
jmp 0x4026d2
mov eax, dword [ebp + 0x74]
test eax, eax
je 0x4026d2
lea ecx, [ebp + 0x48]
push ecx
lea esi, [ebp - 0x30]
call fcn.00401800
add esp, 4
test eax, eax
je 0x4026a5
mov dword [ebp + 0x80], 1
jmp 0x4026d2
mov edx, dword [ebp + 0x48]
mov eax, dword [sym.imp.php5.dll_compiler_globals]
lea ecx, [ebp - 0x30]
push ecx
mov dword [eax + 0x11c], edx
call dword [sym.imp.php5.dll_php_execute_script]
mov edx, dword [sym.imp.php5.dll_executor_globals]
mov eax, dword [edx + 0x134]
add esp, 4
mov dword [ebp + 0x80], eax
push edi
call dword [sym.imp.php5.dll__efree]
mov ecx, dword [ebp + 0x80]
add esp, 4
test ecx, ecx
je 0x4025a3
mov eax, dword [ebp + 0x34]
test eax, eax
je case.0x4023f4.3
push 1
push str.Command_line_end_code
push 0
push eax
jmp 0x4024f4
xor ebx, ebx
xor esi, esi
sub edi, 8
je 0x402728
sub edi, 1
je 0x402721
sub edi, 1
jne 0x40274f
mov edx, dword [sym.imp.php5.dll_reflection_extension_ptr]
mov esi, dword [edx]
jmp 0x40274f
mov eax, dword [sym.imp.php5.dll_reflection_class_ptr]
jmp 0x40274d
mov ecx, dword [ebp + 0x64]
push 0x404fd4
push ecx
call dword [sym.imp.MSVCR90.dll_strstr]
add esp, 8
test eax, eax
je 0x402748
mov edx, dword [sym.imp.php5.dll_reflection_method_ptr]
mov esi, dword [edx]
jmp 0x40274f
mov eax, dword [sym.imp.php5.dll_reflection_function_ptr]
mov esi, dword [eax]
mov edi, dword [sym.imp.php5.dll__emalloc]
push 0x18
call edi
mov dword [ebp + 0x60], eax
mov dword [eax + 0x10], ebx
mov ecx, dword [ebp + 0x60]
mov eax, dword [ebp + 0x64]
mov dword [ecx + 8], 1
mov edx, dword [ebp + 0x60]
add esp, 4
mov byte [edx + 0xd], 0
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402780
sub eax, ecx
mov ecx, dword [ebp + 0x60]
mov dword [ecx + 4], eax
mov edx, dword [ebp + 0x60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 0x64]
push eax
push ecx
call dword [sym.imp.php5.dll__estrndup]
mov edx, dword [ebp + 0x60]
mov dword [edx], eax
mov eax, dword [ebp + 0x60]
push 0x18
mov byte [eax + 0xc], 6
call edi
mov dword [ebp + 0x5c], eax
mov dword [eax + 0x10], ebx
mov ecx, dword [ebp + 0x5c]
push esi
push ecx
call dword [sym.imp.php5.dll__object_init_ex]
mov edx, dword [ebp + 0x5c]
push 0x4c
mov dword [edx + 8], 1
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp - 0x94]
push ebx
push ecx
mov byte [eax + 0xd], 0
call sub.MSVCR90.dll_memset
mov eax, dword [sym.imp.php5.dll_executor_globals]
push ebx
lea edx, [ebp - 0x94]
mov dword [eax + 0x3f0], edx
mov edx, dword [ebp + 0x60]
mov ecx, dword [esi + 0xec]
push edx
push 1
push ebx
push 0xb
lea eax, [esi + 0xec]
push str.__construct
push eax
push esi
mov esi, dword [sym.imp.php5.dll_zend_call_method]
lea eax, [ebp + 0x5c]
push eax
mov dword [ebp - 0x90], ecx
call esi
mov ecx, dword [sym.imp.php5.dll_executor_globals]
mov eax, dword [ecx + 0x2c4]
mov edi, dword [sym.imp.php5.dll__zval_ptr_dtor]
add esp, 0x44
push ebx
cmp eax, ebx
je 0x40288f
push 7
push str.message
push eax
call dword [sym.imp.php5.dll_zend_exception_get_default]
push eax
call dword [sym.imp.php5.dll_zend_read_property]
mov edx, dword [eax]
mov eax, dword [sym.imp.php5.dll_zend_printf]
mov ecx, dword [eax]
push edx
push str.Exception:__s_n
call ecx
mov edx, dword [sym.imp.php5.dll_executor_globals]
add edx, 0x2c4
push edx
call edi
mov eax, dword [sym.imp.php5.dll_executor_globals]
lea ecx, [ebp + 0x5c]
add esp, 0x20
push ecx
mov dword [eax + 0x2c4], ebx
call edi
lea edx, [ebp + 0x60]
push edx
call edi
jmp 0x402a32
mov ecx, dword [ebp + 0x5c]
mov edx, dword [sym.imp.php5.dll_reflection_ptr]
mov eax, dword [edx]
push ecx
push 1
push ebx
push 6
push str.export
push ebx
push eax
push ebx
call esi
lea ecx, [ebp + 0x5c]
add esp, 0x24
push ecx
call edi
lea edx, [ebp + 0x60]
push edx
call edi
jmp 0x402a32
mov edi, dword [ebp + 0x64]
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4028c6
sub eax, edx
mov esi, eax
push esi
push edi
call dword [sym.imp.php5.dll_zend_str_tolower_dup]
mov ecx, dword [sym.imp.php5.dll_module_registry]
mov ebx, eax
lea eax, [ebp + 0x10]
push eax
inc esi
push esi
push ebx
push ecx
call dword [sym.imp.php5.dll_zend_hash_find]
add esp, 0x18
cmp eax, 0xffffffff
jne 0x402970
mov ecx, str.main
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402922
test dl, dl
je 0x40291e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402922
add eax, 2
add ecx, 2
test dl, dl
jne 0x402902
xor eax, eax
jmp 0x402927
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x402944
push eax
call dword [sym.imp.php5.dll_display_ini_entries]
add esp, 4
push ebx
call dword [sym.imp.php5.dll__efree]
add esp, 4
jmp case.0x4023f4.3
mov edx, dword [sym.imp.php5.dll_zend_printf]
mov eax, dword [edx]
push edi
push str.Extension__s_not_present._n
call eax
add esp, 8
push ebx
mov dword [ebp + 0x80], 1
call dword [sym.imp.php5.dll__efree]
add esp, 4
jmp case.0x4023f4.3
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.php5.dll_php_info_print_module]
add esp, 4
push ebx
call dword [sym.imp.php5.dll__efree]
add esp, 4
jmp case.0x4023f4.3
mov esi, dword [sym.imp.MSVCR90.dll_getenv]
push str.SystemRoot
call esi
add esp, 4
test eax, eax
je 0x4029ac
push str.SystemRoot
call esi
add esp, 4
jmp 0x4029b1
mov eax, 0x4042fc
mov edx, dword [sym.imp.php5.dll_zend_printf]
push eax
mov eax, dword [edx]
push str.Configuration_File__php.ini__Path:__s_n
call eax
mov eax, dword [sym.imp.php5.dll_php_ini_opened_path]
add esp, 8
cmp dword [eax], 0
je 0x4029d2
mov eax, dword [eax]
jmp 0x4029d7
mov eax, str._none_
mov ecx, dword [sym.imp.php5.dll_zend_printf]
mov edx, dword [ecx]
push eax
push str.Loaded_Configuration_File:__________s_n
call edx
mov eax, dword [sym.imp.php5.dll_php_ini_scanned_path]
add esp, 8
cmp dword [eax], 0
je 0x4029f8
mov eax, dword [eax]
jmp 0x4029fd
mov eax, str._none_
push eax
mov eax, dword [sym.imp.php5.dll_zend_printf]
mov ecx, dword [eax]
push str.Scan_for_additional_.ini_files_in:__s_n
call ecx
mov eax, dword [sym.imp.php5.dll_php_ini_scanned_files]
add esp, 8
cmp dword [eax], 0
je 0x402a1d
mov eax, dword [eax]
jmp 0x402a22
mov eax, str._none_
mov edx, dword [sym.imp.php5.dll_zend_printf]
push eax
mov eax, dword [edx]
push str.Additional_.ini_files_parsed:_______s_n
call eax
add esp, 8
mov ecx, dword [ebp + 0x18]
mov edx, dword [sym.imp.php5.dll_executor_globals]
mov dword [edx + 0x128], ecx
mov eax, dword [ebp + 0x58]
test eax, eax
je 0x402a56
push 0
call dword [sym.imp.php5.dll_php_request_shutdown]
add esp, 4
mov eax, dword [ebp + 0x38]
test eax, eax
je 0x402a67
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov ecx, dword [ebp + 0x80]
test ecx, ecx
jne 0x402a83
mov edx, dword [sym.imp.php5.dll_executor_globals]
mov eax, dword [edx + 0x134]
mov dword [ebp + 0x80], eax
mov eax, dword [0x407060]
test eax, eax
je 0x402a96
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov eax, dword [0x407098]
test eax, eax
je 0x402aa9
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov ecx, dword [ebp + 0x28]
test ecx, ecx
je 0x402ab6
call dword [sym.imp.php5.dll_php_module_shutdown]
call dword [sym.imp.php5.dll_sapi_shutdown]
mov edx, dword [ebp + 0x80]
push edx
call dword [sym.imp.MSVCR90.dll_exit]
lea ecx, [ecx]
mov al, 0x1d
inc eax
add byte [ecx], dl
push ds
inc eax
add byte [esi + ebx + 0x40], cl
add byte [esi + ebx + 0x1d160040], ah
inc eax
add byte [eax], al
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add byte [ecx], al
add al, 4
add al, 2
add al, 4
add al, 4
add al, 4
add al, 4
add ecx, dword [ecx]
inc eax
add byte [ecx], bl
inc eax
add byte [ebx], ch
and dword [eax], eax
cmp esp, dword [ecx]
inc eax
add byte [ebx + 0x21], cl
inc eax
add byte [esi], bh
and byte [eax], al
jp 0x402b52
inc eax
add byte [0x300401f], bh
and dword [eax], eax
std
pop ds
inc eax
add byte [0x2c00401f], al
pop ds
inc eax
add byte [esi + 0x1f], bh
inc eax
add byte [ecx - 0x43ffbfe1], ch
pop ds
inc eax
add byte [ebp - 0x29ffbfe0], dh
and byte [eax], al
int1
and byte [eax], al
push ebx
and dword [eax], eax
add byte [ecx], al
add al, byte [ebx]
add al, 18
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
add eax, 117838354
adc cl, byte [eax]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc cl, byte [ecx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
adc dl, byte [edx]
or dl, byte [edx]
adc dl, byte [edx]
or ecx, dword [edx + edx]
adc dl, byte [edx]
adc dl, byte [edx]
or eax, 303174162
adc cl, byte [esi]
movlps xmm2, qword [edx]
adc dl, byte [eax]
adc dl, byte [edx]
adc dword [ebp + 603652169], ecx
inc eax
add byte [ecx + 0x35004024], dh
sub al, byte [eax]
push esp
and al, 64
add byte [ecx - 0x1dffbfdc], dl
and al, 0x40
add byte [0x4004025], dl
daa
inc eax
add byte [edi], al
inc eax
add byte [edi], al
inc eax
add byte [esi - 0x73ffbfd8], bh
sub dword [eax], eax
jmp dword [sym.imp.php5.dll_zif_dl]