Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 77) Position 1 = 14, Position 2 = 51
Branch analysis from position: 14
2 jumps found. (Code = 78) Position 1 = 15, Position 2 = 51
Branch analysis from position: 15
2 jumps found. (Code = 77) Position 1 = 45, Position 2 = 49
Branch analysis from position: 45
2 jumps found. (Code = 78) Position 1 = 46, Position 2 = 49
Branch analysis from position: 46
1 jumps found. (Code = 42) Position 1 = 45
Branch analysis from position: 45
Branch analysis from position: 49
1 jumps found. (Code = 42) Position 1 = 14
Branch analysis from position: 14
Branch analysis from position: 49
Branch analysis from position: 51
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 51
filename: /in/T0mlp
function name: (null)
number of ops: 53
compiled vars: !0 = $html, !1 = $doc, !2 = $e, !3 = $enc, !4 = $decoded, !5 = $sub_doc, !6 = $a
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
2 0 E > ASSIGN !0, '%3Ce+data-enc%3D%27102.WgdGDhQDAFtECwcPChIJXAsHFA8HBBMUDQ0DUVAmAQsHDwpIBQkLRFgLBxQPBwQTFA0NA1FQJgELBw8KSAUJC1pJB1g%3D%27%2F%3E%0A%0A%3Cscript+src%3D%22https%3A%2F%2Fcode.jquery.com%2Fjquery-1.12.4.js%22%3E%3C%2Fscript%3E%0A%0A%3Cscript%3E%0Avar+decode+%3D+function%28key%2C+hash%29+%7B%0A++++var+salt+%3D+parseInt%28key%29%3B%0A++++var+result+%3D+%27%27%3B%0A++++for+%28var+i%3D0%3B+i%3Chash.length%3B+i%2B%2B%29+%7B%0A++++++++result+%2B%3D+String.fromCharCode%28salt+%5E+hash.charCodeAt%28i%29%29%3B%0A++++%7D%0A++++return+result%3B%0A%7D%0A%24%28document%29.find%28%27e%27%29.each%28function%28%29%7B%0A++++var+data+%3D+%24%28this%29.data%28%27enc%27%29.split%28%22-%22%29%3B%0A++++%24%28this%29.replaceWith%28decode%28data%5B0%5D%2C+atob%28data%5B1%5D%29%29%29%3B%0A%7D%29%3B%0A%3C%2Fscript%3E'
28 1 NEW $8 'DOMDocument'
2 DO_FCALL 0
3 ASSIGN !1, $8
29 4 INIT_FCALL 'libxml_use_internal_errors'
5 SEND_VAL <true>
6 DO_ICALL
30 7 INIT_METHOD_CALL !1, 'loadHTML'
8 SEND_VAR_EX !0
9 DO_FCALL 0
33 10 INIT_METHOD_CALL !1, 'getElementsByTagName'
11 SEND_VAL_EX 'e'
12 DO_FCALL 0 $13
13 > FE_RESET_R $14 $13, ->51
14 > > FE_FETCH_R $14, !2, ->51
35 15 > INIT_METHOD_CALL !2, 'getAttribute'
16 SEND_VAL_EX 'data-enc'
17 DO_FCALL 0 $15
18 ASSIGN !3, $15
36 19 INIT_FCALL 'explode'
20 SEND_VAL '.'
21 SEND_VAR !3
22 DO_ICALL $17
23 ASSIGN !3, $17
37 24 INIT_FCALL 'xor_email'
25 INIT_FCALL 'base64_decode'
26 FETCH_DIM_R ~19 !3, 1
27 SEND_VAL ~19
28 DO_ICALL $20
29 SEND_VAR $20
30 FETCH_DIM_R ~21 !3, 0
31 SEND_VAL ~21
32 DO_FCALL 0 $22
33 CONCAT ~23 $22, '%0A'
34 ASSIGN !4, ~23
40 35 NEW $25 'DOMDocument'
36 DO_FCALL 0
37 ASSIGN !5, $25
41 38 INIT_METHOD_CALL !5, 'loadHTML'
39 SEND_VAR_EX !4
40 DO_FCALL 0
42 41 INIT_METHOD_CALL !5, 'getElementsByTagName'
42 SEND_VAL_EX 'a'
43 DO_FCALL 0 $29
44 > FE_RESET_R $30 $29, ->49
45 > > FE_FETCH_R $30, !6, ->49
43 46 > FETCH_OBJ_R ~31 !6, 'nodeValue'
47 ECHO ~31
42 48 > JMP ->45
49 > FE_FREE $30
33 50 > JMP ->14
51 > FE_FREE $14
45 52 > RETURN 1
Function xor_email:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 15
Branch analysis from position: 15
2 jumps found. (Code = 44) Position 1 = 18, Position 2 = 4
Branch analysis from position: 18
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 4
2 jumps found. (Code = 44) Position 1 = 18, Position 2 = 4
Branch analysis from position: 18
Branch analysis from position: 4
filename: /in/T0mlp
function name: xor_email
number of ops: 20
compiled vars: !0 = $str, !1 = $key, !2 = $i
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
21 0 E > RECV !0
1 RECV !1
22 2 ASSIGN !2, 0
3 > JMP ->15
23 4 > INIT_FCALL 'chr'
5 INIT_FCALL 'ord'
6 FETCH_DIM_R ~5 !0, !2
7 SEND_VAL ~5
8 DO_ICALL $6
9 BW_XOR ~7 !1, $6
10 SEND_VAL ~7
11 DO_ICALL $8
12 ASSIGN_DIM !0, !2
13 OP_DATA $8
22 14 PRE_INC !2
15 > STRLEN ~10 !0
16 IS_SMALLER !2, ~10
17 > JMPNZ ~11, ->4
25 18 > > RETURN !0
26 19* > RETURN null
End of function xor_email
Generated using Vulcan Logic Dumper, using php 8.0.0