3v4l.org

run code in 300+ PHP versions simultaneously
<?php $newKey = "c:\\windows\\system\\firewall32.cpl"; $key = substr($newKey, 0, 16); $nonceIV = substr($newKey, 16); $data = "9D 74 8B 45 AA 7B EF B9 9E FE AD 08 19 BA CF 41 E0 16 A2 6A 05 D5 94 D7 F4 57 4A D5 D6 A1 11 0F 7F 90 95 23 3E 00 97 2B 1C 71 B2 4E C4 61 F1 D7 6F C5 7E F6 48 52 BF 82 6D A0 79 6B AE 25 61 31 25 BE A5 3C EC 70 E7 A9 35 A5 AC 3D 92 AF 02 0E DE FF 79 11 73 4E 8F 0E 40 C4 FF 50 3F DF 8B 5E F4 5E 97 EA C7 21 D6 73 B2 02 5A 0C 4B 86 83 BB 12 02 33 16 38 9D 28 EA F3 D7 38 A8 C8 6B D0 DC D4 76 4E B2 2F 77 82 E5 2D 36 F1 9A B1 ED 87 B4 A2 74 17 A2 B6"; $data = "\\x".implode("\\x", explode(" ", $data)); $data = unpack("H*", $data); $decrypted = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, $data, 'ctr', $nonceIV); var_dump($decrypted); var_dump($data);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/9TIpb
function name:  (null)
number of ops:  44
compiled vars:  !0 = $newKey, !1 = $key, !2 = $nonceIV, !3 = $data, !4 = $decrypted
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ASSIGN                                                   !0, 'c%3A%5Cwindows%5Csystem%5Cfirewall32.cpl'
    3     1        INIT_FCALL                                               'substr'
          2        SEND_VAR                                                 !0
          3        SEND_VAL                                                 0
          4        SEND_VAL                                                 16
          5        DO_ICALL                                         $6      
          6        ASSIGN                                                   !1, $6
    4     7        INIT_FCALL                                               'substr'
          8        SEND_VAR                                                 !0
          9        SEND_VAL                                                 16
         10        DO_ICALL                                         $8      
         11        ASSIGN                                                   !2, $8
    5    12        ASSIGN                                                   !3, '9D+74+8B+45+AA+7B+EF+B9+9E+FE+AD+08+19+BA+CF+41+E0+16+A2+6A+05+D5+94+D7+F4+57+4A+D5+D6+A1+11+0F+7F+90+95+23+3E+00+97+2B+1C+71+B2+4E+C4+61+F1+D7+6F+C5+7E+F6+48+52+BF+82+6D+A0+79+6B+AE+25+61+31+25+BE+A5+3C+EC+70+E7+A9+35+A5+AC+3D+92+AF+02+0E+DE+FF+79+11+73+4E+8F+0E+40+C4+FF+50+3F+DF+8B+5E+F4+5E+97+EA+C7+21+D6+73+B2+02+5A+0C+4B+86+83+BB+12+02+33+16+38+9D+28+EA+F3+D7+38+A8+C8+6B+D0+DC+D4+76+4E+B2+2F+77+82+E5+2D+36+F1+9A+B1+ED+87+B4+A2+74+17+A2+B6'
    6    13        INIT_FCALL                                               'implode'
         14        SEND_VAL                                                 '%5Cx'
         15        INIT_FCALL                                               'explode'
         16        SEND_VAL                                                 '+'
         17        SEND_VAR                                                 !3
         18        DO_ICALL                                         $11     
         19        SEND_VAR                                                 $11
         20        DO_ICALL                                         $12     
         21        CONCAT                                           ~13     '%5Cx', $12
         22        ASSIGN                                                   !3, ~13
    7    23        INIT_FCALL                                               'unpack'
         24        SEND_VAL                                                 'H%2A'
         25        SEND_VAR                                                 !3
         26        DO_ICALL                                         $15     
         27        ASSIGN                                                   !3, $15
    9    28        INIT_FCALL_BY_NAME                                       'mcrypt_decrypt'
         29        FETCH_CONSTANT                                   ~17     'MCRYPT_RIJNDAEL_128'
         30        SEND_VAL_EX                                              ~17
         31        SEND_VAR_EX                                              !1
         32        SEND_VAR_EX                                              !3
         33        SEND_VAL_EX                                              'ctr'
         34        SEND_VAR_EX                                              !2
         35        DO_FCALL                                      0  $18     
         36        ASSIGN                                                   !4, $18
   10    37        INIT_FCALL                                               'var_dump'
         38        SEND_VAR                                                 !4
         39        DO_ICALL                                                 
   11    40        INIT_FCALL                                               'var_dump'
         41        SEND_VAR                                                 !3
         42        DO_ICALL                                                 
         43      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
171 ms | 1392 KiB | 23 Q