Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/eIW0Z
function name: (null)
number of ops: 11
compiled vars: !0 = $navicatPassword, !1 = $decode
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
130 0 E > NEW $2 'NavicatPassword'
1 SEND_VAL_EX 12
2 DO_FCALL 0
3 ASSIGN !0, $2
133 4 INIT_METHOD_CALL !0, 'decrypt'
5 SEND_VAL_EX '4137021BF94FD1A8E352B5F967A370A2'
6 DO_FCALL 0 $5
7 ASSIGN !1, $5
134 8 CONCAT ~7 !1, '%0A'
9 ECHO ~7
135 10 > RETURN 1
Class NavicatPassword:
Function __construct:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/eIW0Z
function name: __construct
number of ops: 15
compiled vars: !0 = $version
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
11 0 E > RECV_INIT !0 12
13 1 ASSIGN_OBJ 'version'
2 OP_DATA !0
14 3 INIT_FCALL 'sha1'
4 SEND_VAL '3DC5CA39'
5 SEND_VAL <true>
6 DO_ICALL $3
7 ASSIGN_OBJ 'blowKey'
8 OP_DATA $3
15 9 INIT_FCALL 'hex2bin'
10 SEND_VAL 'd9c7c3c8870d64bd'
11 DO_ICALL $5
12 ASSIGN_OBJ 'blowIv'
13 OP_DATA $5
16 14 > RETURN null
End of function __construct
Function encrypt:
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 44) Position 1 = 5, Position 2 = 8
Branch analysis from position: 5
2 jumps found. (Code = 44) Position 1 = 7, Position 2 = 13
Branch analysis from position: 7
1 jumps found. (Code = 42) Position 1 = 18
Branch analysis from position: 18
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 13
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
Branch analysis from position: 8
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
filename: /in/eIW0Z
function name: encrypt
number of ops: 22
compiled vars: !0 = $string, !1 = $result
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
18 0 E > RECV !0
20 1 ASSIGN !1, <false>
21 2 FETCH_OBJ_R ~3 'version'
22 3 CASE ~3, 11
4 > JMPNZ ~4, ->8
25 5 > CASE ~3, 12
6 > JMPNZ ~4, ->13
7 > > JMP ->18
23 8 > INIT_METHOD_CALL 'encryptEleven'
9 SEND_VAR_EX !0
10 DO_FCALL 0 $5
11 ASSIGN !1, $5
24 12 > JMP ->19
26 13 > INIT_METHOD_CALL 'encryptTwelve'
14 SEND_VAR_EX !0
15 DO_FCALL 0 $7
16 ASSIGN !1, $7
27 17 > JMP ->19
29 18 > > JMP ->19
19 > FREE ~3
32 20 > RETURN !1
33 21* > RETURN null
End of function encrypt
Function encrypteleven:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 37
Branch analysis from position: 37
2 jumps found. (Code = 44) Position 1 = 39, Position 2 = 16
Branch analysis from position: 39
2 jumps found. (Code = 43) Position 1 = 40, Position 2 = 55
Branch analysis from position: 40
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 55
Branch analysis from position: 16
2 jumps found. (Code = 44) Position 1 = 39, Position 2 = 16
Branch analysis from position: 39
Branch analysis from position: 16
filename: /in/eIW0Z
function name: encryptEleven
number of ops: 63
compiled vars: !0 = $string, !1 = $round, !2 = $leftLength, !3 = $result, !4 = $currentVector, !5 = $i, !6 = $temp
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
35 0 E > RECV !0
37 1 INIT_FCALL 'floor'
2 STRLEN ~7 !0
3 DIV ~8 ~7, 8
4 SEND_VAL ~8
5 DO_ICALL $9
6 CAST 4 ~10 $9
7 ASSIGN !1, ~10
38 8 STRLEN ~12 !0
9 MOD ~13 ~12, 8
10 ASSIGN !2, ~13
39 11 ASSIGN !3, ''
40 12 FETCH_OBJ_R ~16 'blowIv'
13 ASSIGN !4, ~16
42 14 ASSIGN !5, 0
15 > JMP ->37
43 16 > INIT_METHOD_CALL 'encryptBlock'
17 INIT_METHOD_CALL 'xorBytes'
18 INIT_FCALL 'substr'
19 SEND_VAR !0
20 MUL ~19 !5, 8
21 SEND_VAL ~19
22 SEND_VAL 8
23 DO_ICALL $20
24 SEND_VAR_NO_REF_EX $20
25 SEND_VAR_EX !4
26 DO_FCALL 0 $21
27 SEND_VAR_NO_REF_EX $21
28 DO_FCALL 0 $22
29 ASSIGN !6, $22
44 30 INIT_METHOD_CALL 'xorBytes'
31 SEND_VAR_EX !4
32 SEND_VAR_EX !6
33 DO_FCALL 0 $24
34 ASSIGN !4, $24
45 35 ASSIGN_OP 8 !3, !6
42 36 PRE_INC !5
37 > IS_SMALLER !5, !1
38 > JMPNZ ~28, ->16
48 39 > > JMPZ !2, ->55
49 40 > INIT_METHOD_CALL 'encryptBlock'
41 SEND_VAR_EX !4
42 DO_FCALL 0 $29
43 ASSIGN !4, $29
50 44 INIT_METHOD_CALL 'xorBytes'
45 INIT_FCALL 'substr'
46 SEND_VAR !0
47 MUL ~31 !5, 8
48 SEND_VAL ~31
49 SEND_VAR !2
50 DO_ICALL $32
51 SEND_VAR_NO_REF_EX $32
52 SEND_VAR_EX !4
53 DO_FCALL 0 $33
54 ASSIGN_OP 8 !3, $33
53 55 > INIT_FCALL 'strtoupper'
56 INIT_FCALL 'bin2hex'
57 SEND_VAR !3
58 DO_ICALL $35
59 SEND_VAR $35
60 DO_ICALL $36
61 > RETURN $36
54 62* > RETURN null
End of function encrypteleven
Function encryptblock:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/eIW0Z
function name: encryptBlock
number of ops: 14
compiled vars: !0 = $block
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
56 0 E > RECV !0
58 1 INIT_FCALL_BY_NAME 'openssl_encrypt'
2 SEND_VAR_EX !0
3 SEND_VAL_EX 'BF-ECB'
4 CHECK_FUNC_ARG
5 FETCH_OBJ_FUNC_ARG $1 'blowKey'
6 SEND_FUNC_ARG $1
7 FETCH_CONSTANT ~2 'OPENSSL_RAW_DATA'
8 FETCH_CONSTANT ~3 'OPENSSL_NO_PADDING'
9 BW_OR ~4 ~2, ~3
10 SEND_VAL_EX ~4
11 DO_FCALL 0 $5
12 > RETURN $5
59 13* > RETURN null
End of function encryptblock
Function decryptblock:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/eIW0Z
function name: decryptBlock
number of ops: 14
compiled vars: !0 = $block
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
61 0 E > RECV !0
63 1 INIT_FCALL_BY_NAME 'openssl_decrypt'
2 SEND_VAR_EX !0
3 SEND_VAL_EX 'BF-ECB'
4 CHECK_FUNC_ARG
5 FETCH_OBJ_FUNC_ARG $1 'blowKey'
6 SEND_FUNC_ARG $1
7 FETCH_CONSTANT ~2 'OPENSSL_RAW_DATA'
8 FETCH_CONSTANT ~3 'OPENSSL_NO_PADDING'
9 BW_OR ~4 ~2, ~3
10 SEND_VAL_EX ~4
11 DO_FCALL 0 $5
12 > RETURN $5
64 13* > RETURN null
End of function decryptblock
Function xorbytes:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
2 jumps found. (Code = 44) Position 1 = 22, Position 2 = 5
Branch analysis from position: 22
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 5
2 jumps found. (Code = 44) Position 1 = 22, Position 2 = 5
Branch analysis from position: 22
Branch analysis from position: 5
filename: /in/eIW0Z
function name: xorBytes
number of ops: 24
compiled vars: !0 = $str1, !1 = $str2, !2 = $result, !3 = $i
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
66 0 E > RECV !0
1 RECV !1
68 2 ASSIGN !2, ''
69 3 ASSIGN !3, 0
4 > JMP ->19
70 5 > INIT_FCALL 'chr'
6 INIT_FCALL 'ord'
7 FETCH_DIM_R ~6 !0, !3
8 SEND_VAL ~6
9 DO_ICALL $7
10 INIT_FCALL 'ord'
11 FETCH_DIM_R ~8 !1, !3
12 SEND_VAL ~8
13 DO_ICALL $9
14 BW_XOR ~10 $7, $9
15 SEND_VAL ~10
16 DO_ICALL $11
17 ASSIGN_OP 8 !2, $11
69 18 PRE_INC !3
19 > STRLEN ~14 !0
20 IS_SMALLER !3, ~14
21 > JMPNZ ~15, ->5
73 22 > > RETURN !2
74 23* > RETURN null
End of function xorbytes
Function encrypttwelve:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/eIW0Z
function name: encryptTwelve
number of ops: 22
compiled vars: !0 = $string, !1 = $result
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
76 0 E > RECV !0
78 1 INIT_FCALL_BY_NAME 'openssl_encrypt'
2 SEND_VAR_EX !0
3 SEND_VAL_EX 'AES-128-CBC'
4 CHECK_FUNC_ARG
5 FETCH_OBJ_FUNC_ARG $2 'aesKey'
6 SEND_FUNC_ARG $2
7 FETCH_CONSTANT ~3 'OPENSSL_RAW_DATA'
8 SEND_VAL_EX ~3
9 CHECK_FUNC_ARG
10 FETCH_OBJ_FUNC_ARG $4 'aesIv'
11 SEND_FUNC_ARG $4
12 DO_FCALL 0 $5
13 ASSIGN !1, $5
79 14 INIT_FCALL 'strtoupper'
15 INIT_FCALL 'bin2hex'
16 SEND_VAR !1
17 DO_ICALL $7
18 SEND_VAR $7
19 DO_ICALL $8
20 > RETURN $8
80 21* > RETURN null
End of function encrypttwelve
Function decrypt:
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 44) Position 1 = 5, Position 2 = 8
Branch analysis from position: 5
2 jumps found. (Code = 44) Position 1 = 7, Position 2 = 13
Branch analysis from position: 7
1 jumps found. (Code = 42) Position 1 = 18
Branch analysis from position: 18
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 13
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
Branch analysis from position: 8
1 jumps found. (Code = 42) Position 1 = 19
Branch analysis from position: 19
filename: /in/eIW0Z
function name: decrypt
number of ops: 22
compiled vars: !0 = $string, !1 = $result
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
82 0 E > RECV !0
84 1 ASSIGN !1, <false>
85 2 FETCH_OBJ_R ~3 'version'
86 3 CASE ~3, 11
4 > JMPNZ ~4, ->8
89 5 > CASE ~3, 12
6 > JMPNZ ~4, ->13
7 > > JMP ->18
87 8 > INIT_METHOD_CALL 'decryptEleven'
9 SEND_VAR_EX !0
10 DO_FCALL 0 $5
11 ASSIGN !1, $5
88 12 > JMP ->19
90 13 > INIT_METHOD_CALL 'decryptTwelve'
14 SEND_VAR_EX !0
15 DO_FCALL 0 $7
16 ASSIGN !1, $7
91 17 > JMP ->19
93 18 > > JMP ->19
19 > FREE ~3
96 20 > RETURN !1
97 21* > RETURN null
End of function decrypt
Function decrypteleven:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 45
Branch analysis from position: 45
2 jumps found. (Code = 44) Position 1 = 47, Position 2 = 23
Branch analysis from position: 47
2 jumps found. (Code = 43) Position 1 = 48, Position 2 = 63
Branch analysis from position: 48
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 63
Branch analysis from position: 23
2 jumps found. (Code = 44) Position 1 = 47, Position 2 = 23
Branch analysis from position: 47
Branch analysis from position: 23
filename: /in/eIW0Z
function name: decryptEleven
number of ops: 65
compiled vars: !0 = $upperString, !1 = $string, !2 = $round, !3 = $leftLength, !4 = $result, !5 = $currentVector, !6 = $i, !7 = $encryptedBlock, !8 = $temp
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
99 0 E > RECV !0
101 1 INIT_FCALL 'hex2bin'
2 INIT_FCALL 'strtolower'
3 SEND_VAR !0
4 DO_ICALL $9
5 SEND_VAR $9
6 DO_ICALL $10
7 ASSIGN !1, $10
103 8 INIT_FCALL 'floor'
9 STRLEN ~12 !1
10 DIV ~13 ~12, 8
11 SEND_VAL ~13
12 DO_ICALL $14
13 CAST 4 ~15 $14
14 ASSIGN !2, ~15
104 15 STRLEN ~17 !1
16 MOD ~18 ~17, 8
17 ASSIGN !3, ~18
105 18 ASSIGN !4, ''
106 19 FETCH_OBJ_R ~21 'blowIv'
20 ASSIGN !5, ~21
108 21 ASSIGN !6, 0
22 > JMP ->45
109 23 > INIT_FCALL 'substr'
24 SEND_VAR !1
25 MUL ~24 !6, 8
26 SEND_VAL ~24
27 SEND_VAL 8
28 DO_ICALL $25
29 ASSIGN !7, $25
110 30 INIT_METHOD_CALL 'xorBytes'
31 INIT_METHOD_CALL 'decryptBlock'
32 SEND_VAR_EX !7
33 DO_FCALL 0 $27
34 SEND_VAR_NO_REF_EX $27
35 SEND_VAR_EX !5
36 DO_FCALL 0 $28
37 ASSIGN !8, $28
111 38 INIT_METHOD_CALL 'xorBytes'
39 SEND_VAR_EX !5
40 SEND_VAR_EX !7
41 DO_FCALL 0 $30
42 ASSIGN !5, $30
112 43 ASSIGN_OP 8 !4, !8
108 44 PRE_INC !6
45 > IS_SMALLER !6, !2
46 > JMPNZ ~34, ->23
115 47 > > JMPZ !3, ->63
116 48 > INIT_METHOD_CALL 'encryptBlock'
49 SEND_VAR_EX !5
50 DO_FCALL 0 $35
51 ASSIGN !5, $35
117 52 INIT_METHOD_CALL 'xorBytes'
53 INIT_FCALL 'substr'
54 SEND_VAR !1
55 MUL ~37 !6, 8
56 SEND_VAL ~37
57 SEND_VAR !3
58 DO_ICALL $38
59 SEND_VAR_NO_REF_EX $38
60 SEND_VAR_EX !5
61 DO_FCALL 0 $39
62 ASSIGN_OP 8 !4, $39
120 63 > > RETURN !4
121 64* > RETURN null
End of function decrypteleven
Function decrypttwelve:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename: /in/eIW0Z
function name: decryptTwelve
number of ops: 22
compiled vars: !0 = $upperString, !1 = $string
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
123 0 E > RECV !0
125 1 INIT_FCALL 'hex2bin'
2 INIT_FCALL 'strtolower'
3 SEND_VAR !0
4 DO_ICALL $2
5 SEND_VAR $2
6 DO_ICALL $3
7 ASSIGN !1, $3
126 8 INIT_FCALL_BY_NAME 'openssl_decrypt'
9 SEND_VAR_EX !1
10 SEND_VAL_EX 'AES-128-CBC'
11 CHECK_FUNC_ARG
12 FETCH_OBJ_FUNC_ARG $5 'aesKey'
13 SEND_FUNC_ARG $5
14 FETCH_CONSTANT ~6 'OPENSSL_RAW_DATA'
15 SEND_VAL_EX ~6
16 CHECK_FUNC_ARG
17 FETCH_OBJ_FUNC_ARG $7 'aesIv'
18 SEND_FUNC_ARG $7
19 DO_FCALL 0 $8
20 > RETURN $8
127 21* > RETURN null
End of function decrypttwelve
End of class NavicatPassword.
Generated using Vulcan Logic Dumper, using php 8.0.0