incorrect decode JMP'S

Тема в разделе "Как сделать...", создана пользователем th3Meka, 27 дек 2015.

Статус темы:
Закрыта.
  1. th3Meka

    th3Meka Создатель

    Регистр.:
    6 апр 2014
    Сообщения:
    17
    Симпатии:
    0
    hi all,
    my file is encrypted with ZG7, php 5.6 v
    i try to fix and update decompiler class for php 5.6 v. but i have multiply jpm's when i decode, how can i fix that. my code is obfuscate with yak pro then is encrypted with ZG7 (the encryption is done, but i have errors becuase of the obfuscation)
    Перейти по ссылке

    ***obfuscated code (correctly)
    Код:
    <?php
    goto baPpv; DwRCr: z0CgJ: goto V_fLh; nJZRv: $zLWmf = "\142\x65\141\x75\x74\x69\146\x75\x6c\x20"; goto JfuGk; qA751: echo $lo75I; goto GUp3t; TssTJ: echo PHP_EOL; goto gl8DN; APp79: echo $Jj2dI; goto TssTJ; P78_T: ++$z7mhf; goto BuXYd; iawWv: $lo75I = "\141\40"; goto nJZRv; JfKem: if (!($z7mhf <= 7)) { goto z0CgJ; } goto FY4Q_; OShPt: DxI0i: goto JfKem; eJrPt: $WErUx = "\167\x6f\162\154\144\x20"; goto jJ_eN; gl8DN: TOOzH: goto P78_T; SKZU2: echo $TDgU2; goto qA751; pPWSF: echo PHP_EOL; goto SKZU2; baPpv: $nQEnr = "\x68\145\154\x6c\x6f\40"; goto eJrPt; jJ_eN: $TDgU2 = "\x77\150\141\x74\x20"; goto iawWv; JfuGk: $Jj2dI = "\144\x61\171\x20"; goto Y5140; BBy2T: echo $WErUx; goto pPWSF; Y5140: $z7mhf = 0; goto OShPt; V_fLh: echo "\x74\x68\x61\164\47\163\40\x69\x74\41" . PHP_EOL; goto NLOAf; GUp3t: echo $zLWmf; goto APp79; FY4Q_: echo $nQEnr; goto BBy2T; BuXYd: goto DxI0i; goto DwRCr; NLOAf: ?>
    
    ***deobfuscated code(incorrectly)
    Код:
    <?php
    
    $zLWmf = "beautiful ";
    
    echo $lo75I;
    
    echo PHP_EOL;
    
    echo $Jj2dI;
    
    ++$z7mhf;
    
    $lo75I = "a ";
    
    if (!$z7mhf <= 7) {
    }
    
    $WErUx = "world ";
    
    echo $TDgU2;
    
    echo PHP_EOL;
    $nQEnr = "hello ";
    $TDgU2 = "what ";
    $Jj2dI = "day ";
    
    echo $WErUx;
    
    $z7mhf = 0;
    echo "that's it!" . PHP_EOL;
    
    goto label50;
    echo $zLWmf;
    echo $nQEnr;
    label50:
    
    ?>
    

    thank you and happy holidays
     
  2. stealthdebuger

    stealthdebuger Механик

    Administrator
    Регистр.:
    25 авг 2008
    Сообщения:
    634
    Симпатии:
    1.407
    PHP:
    <?php
    $nQEnr 
    "hello ";
    $WErUx "world ";
    $TDgU2 "what ";
    $lo75I "a ";
    $zLWmf "beautiful ";
    $Jj2dI "day ";
    $z7mhf 0;
    JfKem:
    if (!(
    $z7mhf <= 7))
    {
        echo 
    "that's it!" PHP_EOL;
        die();
    }

    echo 
    $nQEnr.$WErUx.PHP_EOL;
    echo 
    $TDgU2.$lo75I.$zLWmf.$Jj2dI.PHP_EOL;
    ++
    $z7mhf;
    goto 
    JfKem;
    ?>
    Идиотизм
     
  3. th3Meka

    th3Meka Создатель

    Регистр.:
    6 апр 2014
    Сообщения:
    17
    Симпатии:
    0
    Идиотизм - was a exemple ;)

    thank you,
    you did it manualy, i can do that by myself :(, but i have strong codes... i need a script to do that automatically...
    can you please help ? or help me to update my deco class in my decompiler ..

    happy holidays

    PHP:
    <?php
    /*--------------------------
      simple test program !
    ---------------------------*/
    $hello  "hello ";
    $world  "world ";
    $what  "what ";
    $a  "a ";
    $beautiful  "beautiful ";
    $day  "day ";

    for(
    $i=0;$i<=7;++$i)  // small loop!
    {
      echo 
    $hello;  echo $world;  echo PHP_EOL;
      echo 
    $what;  echo $a;  echo $beautiful;  echo $day;  echo PHP_EOL;
    }
    echo 
    "that's it!".PHP_EOL;
    ?>
     
Статус темы:
Закрыта.