[BETA] Ioncube Decoder

[desiboy]

Nice ..

[DaRth]

I get this when i try ur Test decoder out

<?
/* Unknown opcode: 59 (ZEND_INIT_FCALL_BY_NAME) */
/* Unknown opcode: 11 (ZEND_BW_XOR) */
/* Unknown opcode: 11 (ZEND_BW_XOR) */
/* Unknown opcode: 65 (ZEND_SEND_VAL) */
/* Unknown opcode: 61 (ZEND_DO_FCALL_BY_NAME) */
/* Unknown opcode: 84 (ZEND_FETCH_DIM_W) */
/* TMP 7 */ = 'odbc';
/* Unknown opcode: 84 (ZEND_FETCH_DIM_W) */
/* TMP 10 */ = '127.0.0.1';
/* Unknown opcode: 84 (ZEND_FETCH_DIM_W) */
/* TMP 13 */ = 'MuOnline';
/* Unknown opcode: 84 (ZEND_FETCH_DIM_W) */
/* TMP 16 */ = 'sa';
/* Unknown opcode: 84 (ZEND_FETCH_DIM_W) */
/* TMP 19 */ = '121991';
/* Unknown opcode: 73 (ZEND_INCLUDE_OR_EVAL) */
return 1;
?>

[SplitIce]

OK they are unimplemented opcodes Ill take a look now, pm me or post via pastebin the script for me.

[DaRth]

Here u go bro i uploaded it on a website here is the Link

all php. files

http://www.sendspace.com/file/odni9x

Alternate Link

http://www.megaupload.com/?d=ZW0GLNPM

[SplitIce]

ok added support for include statements (and eval statements).
Ill do ZEND_FETCH_DIM_W now

[SplitIce]

Which file was decoded as the above snippet?

NVM config.php decodes to:

<?
/* Unknown opcode: 59 (ZEND_INIT_FCALL_BY_NAME) */
/* Unknown opcode: 11 (ZEND_BW_XOR) */
/* Unknown opcode: 11 (ZEND_BW_XOR) */
/* Unknown opcode: 65 (ZEND_SEND_VAL) */
/* Unknown opcode: 61 (ZEND_DO_FCALL_BY_NAME) */
$muweb['connection'] = 'odbc';
$muweb['dbhost'] = '127.0.0.1';
$muweb['database'] = 'MuOnline';
$muweb['dbuser'] = 'sa';
$muweb['dbpassword'] = '121991';
include('includes/forestweb.php');
return 1;
?>

I had done some updates and not updated the online version.

[DaRth]

I decoded the config.php files but i tryied decoding all the files with this and all same

All these files are ioncube encoded.

[SplitIce]

Ill do ZEND_INIT_FCALL_BY_NAME now

[DaRth]

Thanks dude.

[SplitIce]

Ill have something with more support in a hour or so.

EDIT: Almost ready to upload basic support for INIT_FCALL