6.5 IonCube Decoder Question

[xavx]

The file is encoded with ioncube 6.5

The tools i found works great but the file is partly decoded.
As you can see some variables or code is not decoded. And this happens all over the file. Any idea?

Code:

echo $new_release_version;
if ( !_obfuscate_DSkPJgE5AjYXASY7ECszATAkBgYUEyIÿ( "../includes/config.php" ) )
{

My guess is that im using the 5.2 loader dll patched by Nulled.ws

Is there a different loader out there?

Here is the file can somebody try to decode it and let me know if you are seeing the same thing I am. maybe im doing something wrong.

Thank you

[Cw2kfan]

echo $new_release_version;
if (!isset( "../includes/config.php" ) )
{

[xavx]

(11-20-2012 07:26 PM)Cw2kfan Wrote:  echo $new_release_version;
if (!isset( "../includes/config.php" ) )
{

How did you decode that? i thought the obfuscate is generated by the license key? What am I missing? Is there a list of these obfuscate for 6.5 or is this just a simple base64 or MD5 encryption?

---

just a quick correction isset is used to check if a variable is set, file_exists is used for this scenario. So i think the decoding is incorrect.

[Qarizma]

You could try using this deobfuscator:
https://dl.dropbox.com/u/78065528/deobs.zip

Don't know if it includes your obs.

[flywin]

(11-21-2012 10:10 AM)Qarizma Wrote:  You could try using this deobfuscator:
https://dl.dropbox.com/u/78065528/deobs.zip

Don't know if it includes your obs.

Qarizma, The link is failure now, Could you sent me the 'deobs.zip' to my mail (flywin808#gmail.com)?
THX!

[gerard]

(11-21-2012 10:10 AM)Qarizma Wrote:  You could try using this deobfuscator:
https://dl.dropbox.com/u/78065528/deobs.zip

Don't know if it includes your obs.

wrong this is only for zend guard not ioncube
about ioncube you need to find the passphrase and try to build your own library

[flywin]

(12-26-2012 05:17 PM)gerard Wrote:  wrong this is only for zend guard not ioncube
about ioncube you need to find the passphrase and try to build your own library

Ye. I think that zend_op is dumpped out after ioncube_loader called by PHP, you will have to try to repair it using an obfuscation dictionary if they obfuscated, and deobs.zip maybe the way to generated the dictionary.