Finding entry points Branch analysis from position: 0 1 jumps found. (Code = 62) Position 1 = -2 filename: /in/EvtKB function name: (null) number of ops: 19 compiled vars: !0 = $dec, !1 = $enc line #* E I O op fetch ext return operands ------------------------------------------------------------------------------------- 3 0 E > INIT_FCALL_BY_NAME 'Decrypt' 1 SEND_VAL_EX 'wpdPVWejqNRYqDTeUJ2Iw06%2FrnfHAoy5jtgTojiilD0%3D' 2 SEND_VAL_EX 'ICS2015' 3 SEND_VAL_EX '7' 4 DO_FCALL 0 $2 5 ASSIGN !0, $2 4 6 CONCAT ~4 'Dec%3A+', !0 7 CONCAT ~5 ~4, '%0D%0A' 8 ECHO ~5 5 9 INIT_FCALL_BY_NAME 'Encrypt' 10 SEND_VAL_EX 'boy10%40naver.com' 11 SEND_VAL_EX 'ICS2015' 12 SEND_VAL_EX '7' 13 DO_FCALL 0 $6 14 ASSIGN !1, $6 6 15 CONCAT ~8 'Enc%3A+', !1 16 CONCAT ~9 ~8, '%0D%0A' 17 ECHO ~9 184 18 > RETURN 1 Function decrypt: Finding entry points Branch analysis from position: 0 1 jumps found. (Code = 62) Position 1 = -2 filename: /in/EvtKB function name: Decrypt number of ops: 49 compiled vars: !0 = $ciphertext, !1 = $password, !2 = $salt, !3 = $key, !4 = $iv, !5 = $decpad, !6 = $pad, !7 = $len, !8 = $dec line #* E I O op fetch ext return operands ------------------------------------------------------------------------------------- 9 0 E > RECV !0 1 RECV !1 2 RECV !2 11 3 INIT_FCALL 'base64_decode' 4 SEND_VAR !0 5 DO_ICALL $9 6 ASSIGN !0, $9 12 7 INIT_FCALL_BY_NAME 'PBKDF1' 8 SEND_VAR_EX !1 9 SEND_VAR_EX !2 10 SEND_VAL_EX 100 11 SEND_VAL_EX 32 12 DO_FCALL 0 $11 13 ASSIGN !3, $11 13 14 INIT_FCALL_BY_NAME 'PBKDF1' 15 SEND_VAR_EX !1 16 SEND_VAR_EX !2 17 SEND_VAL_EX 100 18 SEND_VAL_EX 16 19 DO_FCALL 0 $13 20 ASSIGN !4, $13 17 21 INIT_FCALL_BY_NAME 'mcrypt_decrypt' 22 FETCH_CONSTANT ~15 'MCRYPT_RIJNDAEL_128' 23 SEND_VAL_EX ~15 24 SEND_VAR_EX !3 25 SEND_VAR_EX !0 26 FETCH_CONSTANT ~16 'MCRYPT_MODE_CBC' 27 SEND_VAL_EX ~16 28 SEND_VAR_EX !4 29 DO_FCALL 0 $17 30 ASSIGN !5, $17 19 31 INIT_FCALL 'ord' 32 STRLEN ~19 !5 33 ASSIGN ~20 !7, ~19 34 SUB ~21 ~20, 1 35 FETCH_DIM_R ~22 !5, ~21 36 SEND_VAL ~22 37 DO_ICALL $23 38 ASSIGN !6, $23 20 39 INIT_FCALL 'substr' 40 SEND_VAR !5 41 SEND_VAL 0 42 STRLEN ~25 !5 43 SUB ~26 ~25, !6 44 SEND_VAL ~26 45 DO_ICALL $27 46 ASSIGN !8, $27 22 47 > RETURN !8 23 48* > RETURN null End of function decrypt Function encrypt: Finding entry points Branch analysis from position: 0 1 jumps found. (Code = 62) Position 1 = -2 filename: /in/EvtKB function name: Encrypt number of ops: 36 compiled vars: !0 = $ciphertext, !1 = $password, !2 = $salt, !3 = $key, !4 = $iv line #* E I O op fetch ext return operands ------------------------------------------------------------------------------------- 27 0 E > RECV !0 1 RECV !1 2 RECV !2 29 3 INIT_FCALL 'mb_convert_encoding' 4 SEND_VAR !0 5 SEND_VAL 'UTF-16LE' 6 DO_ICALL $5 7 ASSIGN !0, $5 30 8 INIT_FCALL_BY_NAME 'PBKDF1' 9 SEND_VAR_EX !1 10 SEND_VAR_EX !2 11 SEND_VAL_EX 100 12 SEND_VAL_EX 32 13 DO_FCALL 0 $7 14 ASSIGN !3, $7 31 15 INIT_FCALL_BY_NAME 'PBKDF1' 16 SEND_VAR_EX !1 17 SEND_VAR_EX !2 18 SEND_VAL_EX 100 19 SEND_VAL_EX 16 20 DO_FCALL 0 $9 21 ASSIGN !4, $9 32 22 INIT_FCALL 'base64_encode' 23 INIT_FCALL_BY_NAME 'mcrypt_encrypt' 24 FETCH_CONSTANT ~11 'MCRYPT_RIJNDAEL_128' 25 SEND_VAL_EX ~11 26 SEND_VAR_EX !3 27 SEND_VAR_EX !0 28 FETCH_CONSTANT ~12 'MCRYPT_MODE_CBC' 29 SEND_VAL_EX ~12 30 SEND_VAR_EX !4 31 DO_FCALL 0 $13 32 SEND_VAR $13 33 DO_ICALL $14 34 > RETURN $14 33 35* > RETURN null End of function encrypt Function pbkdf2: Finding entry points Branch analysis from position: 0 2 jumps found. (Code = 43) Position 1 = 11, Position 2 = 30 Branch analysis from position: 11 1 jumps found. (Code = 42) Position 1 = 28 Branch analysis from position: 28 2 jumps found. (Code = 44) Position 1 = 30, Position 2 = 22 Branch analysis from position: 30 2 jumps found. (Code = 43) Position 1 = 33, Position 2 = 57 Branch analysis from position: 33 2 jumps found. (Code = 43) Position 1 = 38, Position 2 = 51 Branch analysis from position: 38 2 jumps found. (Code = 43) Position 1 = 46, Position 2 = 48 Branch analysis from position: 46 1 jumps found. (Code = 42) Position 1 = 50 Branch analysis from position: 50 1 jumps found. (Code = 62) Position 1 = -2 Branch analysis from position: 48 1 jumps found. (Code = 62) Position 1 = -2 Branch analysis from position: 51 1 jumps found. (Code = 42) Position 1 = 88 Branch analysis from position: 88 2 jumps found. (Code = 44) Position 1 = 90, Position 2 = 63 Branch analysis from position: 90 2 jumps found. (Code = 43) Position 1 = 98, Position 2 = 100 Branch analysis from position: 98 1 jumps found. (Code = 62) Position 1 = -2 Branch analysis from position: 100 Branch analysis from position: 63 2 jumps found. (Code = 43) Position 1 = 65, Position 2 = 71 Branch analysis from position: 65 1 jumps found. (Code = 42) Position 1 = 85 Branch analysis from position: 85 2 jumps found. (Code = 44) Position 1 = 90, Position 2 = 63 Branch analysis from position: 90 Branch analysis from position: 63 Branch analysis from position: 71 2 jumps found. (Code = 43) Position 1 = 73, Position 2 = 85 Branch analysis from position: 73 2 jumps found. (Code = 44) Position 1 = 90, Position 2 = 63 Branch analysis from position: 90 Branch analysis from position: 63 Branch analysis from position: 85 Branch analysis from position: 57 Branch analysis from position: 22 2 jumps found. (Code = 44) Position 1 = 30, Position 2 = 22 Branch analysis from position: 30 Branch analysis from position: 22 Branch analysis from position: 30 filename: /in/EvtKB function name: PBKDF2 number of ops: 102 compiled vars: !0 = $pass, !1 = $salt, !2 = $count, !3 = $cb, !4 = $base, !5 = $extra, !6 = $extracount, !7 = $hashno, !8 = $state, !9 = $key, !10 = $i, !11 = $result, !12 = $rlen, !13 = $current, !14 = $clen, !15 = $remain, !16 = $n, !17 = $tmp line #* E I O op fetch ext return operands ------------------------------------------------------------------------------------- 35 0 E > RECV !0 1 RECV !1 2 RECV !2 3 RECV !3 37 4 BIND_STATIC !4 38 5 BIND_STATIC !5 39 6 BIND_STATIC !6 40 7 BIND_STATIC !7 41 8 BIND_STATIC !8 43 9 IS_EQUAL !8, 0 10 > JMPZ ~18, ->30 45 11 > ASSIGN !7, 0 46 12 ASSIGN !8, 1 48 13 CONCAT ~21 !0, !1 14 ASSIGN !9, ~21 49 15 INIT_FCALL 'sha1' 16 SEND_VAR !9 17 SEND_VAL <true> 18 DO_ICALL $23 19 ASSIGN !4, $23 50 20 ASSIGN !10, 2 21 > JMP ->28 52 22 > INIT_FCALL 'sha1' 23 SEND_VAR !4 24 SEND_VAL <true> 25 DO_ICALL $26 26 ASSIGN !4, $26 50 27 PRE_INC !10 28 > IS_SMALLER !10, !2 29 > JMPNZ ~29, ->22 56 30 > ASSIGN !11, '' 58 31 IS_SMALLER 0, !6 32 > JMPZ ~31, ->57 60 33 > STRLEN ~32 !5 34 SUB ~33 ~32, !6 35 ASSIGN !12, ~33 61 36 IS_SMALLER_OR_EQUAL !3, !12 37 > JMPZ ~35, ->51 63 38 > INIT_FCALL 'substr' 39 SEND_VAR !5 40 SEND_VAR !6 41 SEND_VAR !3 42 DO_ICALL $36 43 ASSIGN !11, $36 64 44 IS_SMALLER !3, !12 45 > JMPZ ~38, ->48 66 46 > ASSIGN_OP 1 !6, !3 47 > JMP ->50 70 48 > ASSIGN !5, null 71 49 ASSIGN !6, 0 73 50 > > RETURN !11 75 51 > INIT_FCALL 'substr' 52 SEND_VAR !5 53 SEND_VAR !12 54 SEND_VAR !12 55 DO_ICALL $42 56 ASSIGN !11, $42 78 57 > ASSIGN !13, '' 79 58 ASSIGN !14, 0 80 59 STRLEN ~46 !11 60 SUB ~47 !3, ~46 61 ASSIGN !15, ~47 81 62 > JMP ->88 83 63 > IS_EQUAL !7, 0 64 > JMPZ ~49, ->71 85 65 > INIT_FCALL 'sha1' 66 SEND_VAR !4 67 SEND_VAL <true> 68 DO_ICALL $50 69 ASSIGN !13, $50 70 > JMP ->85 87 71 > IS_SMALLER !7, 1000 72 > JMPZ ~52, ->85 89 73 > INIT_FCALL 'sprintf' 74 SEND_VAL '%25d' 75 SEND_VAR !7 76 DO_ICALL $53 77 ASSIGN !16, $53 90 78 CONCAT ~55 !16, !4 79 ASSIGN !17, ~55 91 80 INIT_FCALL 'sha1' 81 SEND_VAR !17 82 SEND_VAL <true> 83 DO_ICALL $57 84 ASSIGN_OP 8 !13, $57 93 85 > PRE_INC !7 94 86 STRLEN ~60 !13 87 ASSIGN !14, ~60 81 88 > IS_SMALLER !14, !15 89 > JMPNZ ~62, ->63 98 90 > INIT_FCALL 'substr' 91 SEND_VAR !13 92 SEND_VAL 0 93 SEND_VAR !15 94 DO_ICALL $63 95 ASSIGN_OP 8 !11, $63 101 96 IS_SMALLER !15, !14 97 > JMPZ ~65, ->100 103 98 > ASSIGN !5, !13 104 99 ASSIGN !6, !15 107 100 > > RETURN !11 108 101* > RETURN null End of function pbkdf2 Function pbkdf1: Finding entry points Branch analysis from position: 0 2 jumps found. (Code = 43) Position 1 = 11, Position 2 = 30 Branch analysis from position: 11 1 jumps found. (Code = 42) Position 1 = 28 Branch analysis from position: 28 2 jumps found. (Code = 44) Position 1 = 30, Position 2 = 22 Branch analysis from position: 30 2 jumps found. (Code = 43) Position 1 = 33, Position 2 = 57 Branch analysis from position: 33 2 jumps found. (Code = 43) Position 1 = 38, Position 2 = 51 Branch analysis from position: 38 2 jumps found. (Code = 43) Position 1 = 46, Position 2 = 48 Branch analysis from position: 46 1 jumps found. (Code = 42) Position 1 = 50 Branch analysis from position: 50 1 jumps found. (Code = 62) Position 1 = -2 Branch analysis from position: 48 1 jumps found. (Code = 62) Position 1 = -2 Branch analysis from position: 51 1 jumps found. (Code = 42) Position 1 = 88 Branch analysis from position: 88 2 jumps found. (Code = 44) Position 1 = 90, Position 2 = 63 Branch analysis from position: 90 2 jumps found. (Code = 43) Position 1 = 98, Position 2 = 100 Branch analysis from position: 98 1 jumps found. (Code = 62) Position 1 = -2 Branch analysis from position: 100 Branch analysis from position: 63 2 jumps found. (Code = 43) Position 1 = 65, Position 2 = 71 Branch analysis from position: 65 1 jumps found. (Code = 42) Position 1 = 85 Branch analysis from position: 85 2 jumps found. (Code = 44) Position 1 = 90, Position 2 = 63 Branch analysis from position: 90 Branch analysis from position: 63 Branch analysis from position: 71 2 jumps found. (Code = 43) Position 1 = 73, Position 2 = 85 Branch analysis from position: 73 2 jumps found. (Code = 44) Position 1 = 90, Position 2 = 63 Branch analysis from position: 90 Branch analysis from position: 63 Branch analysis from position: 85 Branch analysis from position: 57 Branch analysis from position: 22 2 jumps found. (Code = 44) Position 1 = 30, Position 2 = 22 Branch analysis from position: 30 Branch analysis from position: 22 Branch analysis from position: 30 filename: /in/EvtKB function name: PBKDF1 number of ops: 102 compiled vars: !0 = $pass, !1 = $salt, !2 = $count, !3 = $cb, !4 = $base, !5 = $extra, !6 = $extracount, !7 = $hashno, !8 = $state, !9 = $key, !10 = $i, !11 = $result, !12 = $rlen, !13 = $current, !14 = $clen, !15 = $remain, !16 = $n, !17 = $tmp line #* E I O op fetch ext return operands ------------------------------------------------------------------------------------- 110 0 E > RECV !0 1 RECV !1 2 RECV !2 3 RECV !3 112 4 BIND_STATIC !4 113 5 BIND_STATIC !5 114 6 BIND_STATIC !6 115 7 BIND_STATIC !7 116 8 BIND_STATIC !8 118 9 IS_EQUAL !8, 0 10 > JMPZ ~18, ->30 120 11 > ASSIGN !7, 0 121 12 ASSIGN !8, 1 123 13 CONCAT ~21 !0, !1 14 ASSIGN !9, ~21 124 15 INIT_FCALL 'sha1' 16 SEND_VAR !9 17 SEND_VAL <true> 18 DO_ICALL $23 19 ASSIGN !4, $23 125 20 ASSIGN !10, 2 21 > JMP ->28 127 22 > INIT_FCALL 'sha1' 23 SEND_VAR !4 24 SEND_VAL <true> 25 DO_ICALL $26 26 ASSIGN !4, $26 125 27 PRE_INC !10 28 > IS_SMALLER !10, !2 29 > JMPNZ ~29, ->22 131 30 > ASSIGN !11, '' 133 31 IS_SMALLER 0, !6 32 > JMPZ ~31, ->57 135 33 > STRLEN ~32 !5 34 SUB ~33 ~32, !6 35 ASSIGN !12, ~33 136 36 IS_SMALLER_OR_EQUAL !3, !12 37 > JMPZ ~35, ->51 138 38 > INIT_FCALL 'substr' 39 SEND_VAR !5 40 SEND_VAR !6 41 SEND_VAR !3 42 DO_ICALL $36 43 ASSIGN !11, $36 139 44 IS_SMALLER !3, !12 45 > JMPZ ~38, ->48 141 46 > ASSIGN_OP 1 !6, !3 47 > JMP ->50 145 48 > ASSIGN !5, null 146 49 ASSIGN !6, 0 148 50 > > RETURN !11 150 51 > INIT_FCALL 'substr' 52 SEND_VAR !5 53 SEND_VAR !12 54 SEND_VAR !12 55 DO_ICALL $42 56 ASSIGN !11, $42 153 57 > ASSIGN !13, '' 154 58 ASSIGN !14, 0 155 59 STRLEN ~46 !11 60 SUB ~47 !3, ~46 61 ASSIGN !15, ~47 156 62 > JMP ->88 158 63 > IS_EQUAL !7, 0 64 > JMPZ ~49, ->71 160 65 > INIT_FCALL 'sha1' 66 SEND_VAR !4 67 SEND_VAL <true> 68 DO_ICALL $50 69 ASSIGN !13, $50 70 > JMP ->85 162 71 > IS_SMALLER !7, 1000 72 > JMPZ ~52, ->85 164 73 > INIT_FCALL 'sprintf' 74 SEND_VAL '%25d' 75 SEND_VAR !7 76 DO_ICALL $53 77 ASSIGN !16, $53 165 78 CONCAT ~55 !16, !4 79 ASSIGN !17, ~55 166 80 INIT_FCALL 'sha1' 81 SEND_VAR !17 82 SEND_VAL <true> 83 DO_ICALL $57 84 ASSIGN_OP 8 !13, $57 168 85 > PRE_INC !7 169 86 STRLEN ~60 !13 87 ASSIGN !14, ~60 156 88 > IS_SMALLER !14, !15 89 > JMPNZ ~62, ->63 173 90 > INIT_FCALL 'substr' 91 SEND_VAR !13 92 SEND_VAL 0 93 SEND_VAR !15 94 DO_ICALL $63 95 ASSIGN_OP 8 !11, $63 176 96 IS_SMALLER !15, !14 97 > JMPZ ~65, ->100 178 98 > ASSIGN !5, !13 179 99 ASSIGN !6, !15 182 100 > > RETURN !11 183 101* > RETURN null End of function pbkdf1
Generated using Vulcan Logic Dumper, using php 8.0.0