Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 13, Position 2 = 15
Branch analysis from position: 13
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 15
filename: /in/kFgst
function name: (null)
number of ops: 16
compiled vars: none
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
21 0 E > INIT_FCALL 'decrypt'
1 SEND_VAL '299BFD579BFD8B9BFDE9ABFD2EABFD84ABFD28ABFD07BBFDB9BBFDE1BBFD74BBFD97CBFDA4CBFD45CBFD36CBFDB0CBFD8EBBFD00CBFD0FBBFD41CBFDCFBBFDAFBBFD5DDD'
2 DO_FCALL 0 $0
3 ECHO $0
23 4 INIT_FCALL 'define'
5 SEND_VAL '__FLAG__'
6 SEND_VAL 'flag%7Bhidden_flag%7D'
7 DO_ICALL
24 8 INIT_FCALL 'decrypt'
9 SEND_VAL 'DEFBFD2EFBFDBCFBFD58FBFD56FBFD31FBFDDFEBFD3BEBFD48EBFD16EBFD83EBFD2DDBFDDFDBFDBCDBFDCBDBFD87DBFDB9DBFDB5DBFD76DBFDF6DBFDF5DBFDD5DBFD82ED'
10 DO_FCALL 0 $2
11 IS_EQUAL $2, 'pwning_the_phpreverse%21'
12 > JMPZ ~3, ->15
26 13 > FETCH_CONSTANT ~4 '__FLAG__'
14 ECHO ~4
28 15 > > RETURN 1
Function decrypt:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
2 jumps found. (Code = 44) Position 1 = 71, Position 2 = 33
Branch analysis from position: 71
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 33
2 jumps found. (Code = 44) Position 1 = 71, Position 2 = 33
Branch analysis from position: 71
Branch analysis from position: 33
filename: /in/kFgst
function name: decrypt
number of ops: 73
compiled vars: !0 = $a, !1 = $a1, !2 = $a2, !3 = $a3, !4 = $a5, !5 = $a6, !6 = $mul, !7 = $a7, !8 = $ans
line #* E I O op fetch ext return operands
-------------------------------------------------------------------------------------
2 0 E > RECV !0
4 1 INIT_FCALL 'strtolower'
2 INIT_FCALL 'strrev'
3 SEND_VAR !0
4 DO_ICALL $9
5 SEND_VAR $9
6 DO_ICALL $10
7 ASSIGN !1, $10
5 8 INIT_FCALL 'hexdec'
9 INIT_FCALL 'substr'
10 SEND_VAR !1
11 SEND_VAL 0
12 SEND_VAL 4
13 DO_ICALL $12
14 SEND_VAR $12
15 DO_ICALL $13
16 INIT_FCALL 'hexdec'
17 SEND_VAL 'BFF'
18 DO_ICALL $14
19 BW_XOR ~15 $13, $14
20 INIT_FCALL 'hexdec'
21 SEND_VAL 'D77D'
22 DO_ICALL $16
23 BW_XOR ~17 $16, ~15
24 ASSIGN !2, ~17
6 25 INIT_FCALL 'substr'
26 SEND_VAR !1
27 SEND_VAL 4
28 DO_ICALL $19
29 ASSIGN !3, $19
7 30 ASSIGN !4, 0
9 31 ASSIGN !4, 0
32 > JMP ->68
10 33 > PRE_INC !5
12 34 MUL ~24 !5, !5
35 ASSIGN !6, ~24
13 36 INIT_FCALL 'hexdec'
37 SEND_VAL '6E'
38 DO_ICALL $26
39 BW_XOR ~27 !6, $26
40 ASSIGN !7, ~27
15 41 INIT_FCALL 'chr'
42 INIT_FCALL 'octdec'
43 INIT_FCALL 'hexdec'
44 INIT_FCALL 'substr'
45 SEND_VAR !3
46 SEND_VAR !4
47 SEND_VAL 6
48 DO_ICALL $29
49 SEND_VAR $29
50 DO_ICALL $30
51 SEND_VAR $30
52 DO_ICALL $31
53 INIT_FCALL 'hexdec'
54 SEND_VAL 'AFE43'
55 DO_ICALL $32
56 BW_XOR ~33 $31, $32
57 INIT_FCALL 'hexdec'
58 SEND_VAL '399AA3'
59 DO_ICALL $34
60 BW_XOR ~35 $34, ~33
61 BW_XOR ~36 !7, ~35
62 BW_XOR ~37 !2, ~36
63 SEND_VAL ~37
64 DO_ICALL $38
65 CONCAT ~39 !8, $38
66 ASSIGN !8, ~39
9 67 ASSIGN_OP 1 !4, 6
68 > STRLEN ~42 !3
69 IS_SMALLER !4, ~42
70 > JMPNZ ~43, ->33
17 71 > > RETURN !8
19 72* > RETURN null
End of function decrypt
Generated using Vulcan Logic Dumper, using php 8.0.0