Hello,
I'm goin to write a decoder for a unknown encryption but i have .SO(loaders) that used for that... as far as i know docoders uses the a lib(eg.: ioncube_loader_win_5.2.dll) and as i said i have libs ".SO"
anyone could help me???
analyze the loaders and write decoder in c++
and what's the encoder name ?
I'm newbie on that friend i just opened that SOs in IDA Pro assembly codes appeared then what is my first job ???
The language is PERL, this is the module that loads the Shared objects...
Code:
package WSD::Filter;
use 5.006000;
#use strict;
#use warnings;
our $VERSION = '1.0';
require DynaLoader;
@ISA = qw(DynaLoader);
my $perlver = '508';
$perlver = '510' if($] >= 5.01);
#print $];
my @v = ('32_2', '32', '32_3', '32_4', '32_5', '64', '64_3', '64_4', '64_2');
my $libref = undef;
my $file_version;
while(@v && !$libref) {
my $bit = shift @v;
$file_version = $perlver.$bit;
$libref = DynaLoader::dl_load_file("Modules/WSD/Filter$file_version.so");
}
#print "$libref\n";
my $symref = DynaLoader::dl_find_symbol($libref, 'boot_WSD__Filter');
#print "$symref\n";
my $xs = DynaLoader::dl_install_xsub('WSD::Filter::bootstrap', $symref);
#print "$xs\n";
&$xs('WSD::Filter');
1;
this is a perl encoding i found it too in xfilesharing pro
Well... you can ever solve this ?? any idea my friend ???
not yet but i'll give it a try soon
so i think this is so simple than ioncube loaders....please make me aware of your research. im interested to write a decoder
