Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 13, Position 2 = 15
Branch analysis from position: 13
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 15
filename: /in/XvZ22
function name: (null)
number of ops: 16
compiled vars: none
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
20 0 E > INIT_FCALL 'decrypt'
1 SEND_VAL 'pass'
2 DO_FCALL 0 $0
3 ECHO $0
29 4 INIT_FCALL 'define'
5 SEND_VAL '__FLAG__'
6 SEND_VAL 'flag%7Bhidden_flag%7D'
7 DO_ICALL
30 8 INIT_FCALL 'decrypt'
9 SEND_VAL 'pass'
10 DO_FCALL 0 $2
11 IS_EQUAL $2, 'pwning_the_phpreverse%21'
12 > JMPZ ~3, ->15
32 13 > FETCH_CONSTANT ~4 '__FLAG__'
14 FREE ~4
34 15 > > RETURN 1
Function decrypt:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 37
Branch analysis from position: 37
2 jumps found. (Code = 44) Position 1 = 40, Position 2 = 34
Branch analysis from position: 40
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 34
2 jumps found. (Code = 44) Position 1 = 40, Position 2 = 34
Branch analysis from position: 40
Branch analysis from position: 34
filename: /in/XvZ22
function name: decrypt
number of ops: 86
compiled vars: !0 = $a, !1 = $a1, !2 = $a2, !3 = $a3, !4 = $a4, !5 = $a5, !6 = $a6, !7 = $mul, !8 = $a7, !9 = $hexdec, !10 = $ans
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
2 0 E > RECV !0
4 1 INIT_FCALL 'strtolower'
2 INIT_FCALL 'strrev'
3 SEND_VAR !0
4 DO_ICALL $11
5 SEND_VAR $11
6 DO_ICALL $12
7 ASSIGN !1, $12
5 8 INIT_FCALL 'hexdec'
9 INIT_FCALL 'substr'
10 SEND_VAR !1
11 SEND_VAL 0
12 SEND_VAL 4
13 DO_ICALL $14
14 SEND_VAR $14
15 DO_ICALL $15
16 INIT_FCALL 'hexdec'
17 SEND_VAL 'BFF'
18 DO_ICALL $16
19 BW_XOR ~17 $15, $16
20 INIT_FCALL 'hexdec'
21 SEND_VAL 'D77D'
22 DO_ICALL $18
23 BW_XOR ~19 $18, ~17
24 ASSIGN !2, ~19
6 25 INIT_FCALL 'substr'
26 SEND_VAR !2
27 SEND_VAL 4
28 DO_ICALL $21
29 ASSIGN !3, $21
7 30 ASSIGN !4, ''
8 31 ASSIGN !5, 0
9 32 ASSIGN !5, 0
33 > JMP ->37
10 34 > PRE_INC ~26 !0
35 ASSIGN !6, ~26
9 36 ASSIGN_OP 1 !5, 6
37 > STRLEN ~29 !3
38 IS_SMALLER !5, ~29
39 > JMPNZ ~30, ->34
12 40 > MUL ~31 !6, !6
41 ASSIGN !7, ~31
13 42 INIT_DYNAMIC_CALL !9
43 SEND_VAL_EX '6E'
44 DO_FCALL 0 $33
45 BW_XOR ~34 !7, $33
46 ASSIGN !8, ~34
15 47 INIT_FCALL 'octdec'
48 INIT_FCALL 'hexdec'
49 INIT_FCALL 'substr'
50 SEND_VAR !3
51 SEND_VAL 0
52 SEND_VAL 6
53 DO_ICALL $36
54 SEND_VAR $36
55 DO_ICALL $37
56 SEND_VAR $37
57 DO_ICALL $38
58 INIT_FCALL 'hexdec'
59 SEND_VAL 'AFE43'
60 DO_ICALL $39
61 BW_XOR ~40 $38, $39
62 INIT_FCALL 'hexdec'
63 SEND_VAL '399AA3'
64 DO_ICALL $41
65 BW_XOR ~42 $41, ~40
66 BW_XOR ~43 !8, ~42
67 INIT_FCALL 'octdec'
68 INIT_FCALL 'hexdec'
69 INIT_FCALL 'substr'
70 SEND_VAR !3
71 SEND_VAL 0
72 SEND_VAL 6
73 DO_ICALL $44
74 SEND_VAR $44
75 DO_ICALL $45
76 SEND_VAR $45
77 DO_ICALL $46
78 BW_XOR ~47 $46, ~43
79 ASSIGN !10, ~47
16 80 INIT_FCALL 'chr'
81 SEND_VAR !10
82 DO_ICALL $49
83 CONCAT ~50 !4, $49
84 > RETURN ~50
17 85* > RETURN null
End of function decrypt
Generated using Vulcan Logic Dumper, using php 8.0.0