Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 11, Position 2 = 13
Branch analysis from position: 11
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 13
filename: /in/7djFs
function name: (null)
number of ops: 14
compiled vars: none
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
18 0 E > INIT_FCALL 'define'
1 SEND_VAL '__FLAG__'
2 SEND_VAL 'flag%7Bhidden_flag%7D'
3 DO_ICALL
19 4 INIT_FCALL 'decrypt'
5 FETCH_R global ~1 '_REQUEST'
6 FETCH_DIM_R ~2 ~1, 'pass'
7 SEND_VAL ~2
8 DO_FCALL 0 $3
9 IS_EQUAL $3, 'pwning_the_phpreverse%21'
10 > JMPZ ~4, ->13
21 11 > FETCH_CONSTANT ~5 '__FLAG__'
12 FREE ~5
23 13 > > RETURN 1
Function decrypt:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/7djFs
function name: decrypt
number of ops: 22
compiled vars: !0 = $a, !1 = $tmp, !2 = $tmps
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
2 0 E > RECV !0
4 1 INIT_FCALL 'strtolower'
2 INIT_FCALL 'strrev'
3 SEND_VAR !0
4 DO_ICALL $3
5 SEND_VAR $3
6 DO_ICALL $4
7 ASSIGN !1, $4
5 8 INIT_FCALL 'substr'
9 SEND_VAR !1
10 SEND_VAL 0.4
11 DO_ICALL $6
12 INIT_FCALL 'hexdec'
13 SEND_VAL 'BFF'
14 DO_ICALL $7
15 BW_XOR ~8 $6, $7
16 INIT_FCALL 'hexdec'
17 SEND_VAL 'D77D'
18 DO_ICALL $9
19 BW_XOR ~10 $9, ~8
20 ASSIGN !2, ~10
6 21 > RETURN null
End of function decrypt
Generated using Vulcan Logic Dumper, using php 8.0.0