• ImportError: Unknown magic number 3495 in test.pyc

    在进行pyc文件反编译时遇到如下报错：

    这个问题是我们生成的pyc文件本身存在的问题 

    pyc文件生成时，头部的magic number被清理，需要我们另外补上。

    我们先观察对比一下正确的pyc文件头与报错的pyc文件头：

    正常的pyc文件

    丢头部的magic number的pyc文件

    可以看到，头部确实是不一样的

    33 0D 0D 0A 0E 58 1D 65 C2 01 00 00

    尝试直接将正常的pyc文件头复制给丢头部的magic number的pyc文件：

    还是报错，查看生成的py文件也是空

    在Python3.7及以上版本的编译后二进制文件中，头部除了四字节Magic Number，还有四个字节的空位和八个字节的时间戳+大小信息，后者对文件反编译没有影响，全部填充0即可；
    Python3.3 - Python3.7（包含3.3）版本中，只需要Magic Number和八位时间戳+大小信息
    Python3.3 以下的版本中，只有Magic Number和四位时间戳。

    但是我没找到这个（我的是Python3.11 ╮(╯▽╰)╭ ）

    只能给大家附上一些早期版本的Magic Number的对照表：

    1. Known values:
    2. #  Python 1.5:   20121
    3. #  Python 1.5.1: 20121
    4. #     Python 1.5.2: 20121
    5. #     Python 1.6:   50428
    6. #     Python 2.0:   50823
    7. #     Python 2.0.1: 50823
    8. #     Python 2.1:   60202
    9. #     Python 2.1.1: 60202
    10. #     Python 2.1.2: 60202
    11. #     Python 2.2:   60717
    12. #     Python 2.3a0: 62011
    13. #     Python 2.3a0: 62021
    14. #     Python 2.3a0: 62011 (!)
    15. #     Python 2.4a0: 62041
    16. #     Python 2.4a3: 62051
    17. #     Python 2.4b1: 62061
    18. #     Python 2.5a0: 62071
    19. #     Python 2.5a0: 62081 (ast-branch)
    20. #     Python 2.5a0: 62091 (with)
    21. #     Python 2.5a0: 62092 (changed WITH_CLEANUP opcode)
    22. #     Python 2.5b3: 62101 (fix wrong code: for x, in ...)
    23. #     Python 2.5b3: 62111 (fix wrong code: x += yield)
    24. #     Python 2.5c1: 62121 (fix wrong lnotab with for loops and
    25. #                          storing constants that should have been removed)
    26. #     Python 2.5c2: 62131 (fix wrong code: for x, in ... in listcomp/genexp)
    27. #     Python 2.6a0: 62151 (peephole optimizations and STORE_MAP opcode)
    28. #     Python 2.6a1: 62161 (WITH_CLEANUP optimization)
    29. #     Python 2.7a0: 62171 (optimize list comprehensions/change LIST_APPEND)
    30. #     Python 2.7a0: 62181 (optimize conditional branches:
    31. #                          introduce POP_JUMP_IF_FALSE and POP_JUMP_IF_TRUE)
    32. #     Python 2.7a0  62191 (introduce SETUP_WITH)
    33. #     Python 2.7a0  62201 (introduce BUILD_SET)
    34. #     Python 2.7a0  62211 (introduce MAP_ADD and SET_ADD)
    35. #     Python 3000:   3000
    36. #                    3010 (removed UNARY_CONVERT)
    37. #                    3020 (added BUILD_SET)
    38. #                    3030 (added keyword-only parameters)
    39. #                    3040 (added signature annotations)
    40. #                    3050 (print becomes a function)
    41. #                    3060 (PEP 3115 metaclass syntax)
    42. #                    3061 (string literals become unicode)
    43. #                    3071 (PEP 3109 raise changes)
    44. #                    3081 (PEP 3137 make __file__ and __name__ unicode)
    45. #                    3091 (kill str8 interning)
    46. #                    3101 (merge from 2.6a0, see 62151)
    47. #                    3103 (__file__ points to source file)
    48. #     Python 3.0a4: 3111 (WITH_CLEANUP optimization).
    49. #     Python 3.0b1: 3131 (lexical exception stacking, including POP_EXCEPT
    50.                           #3021)
    51. #     Python 3.1a1: 3141 (optimize list, set and dict comprehensions:
    52. #                         change LIST_APPEND and SET_ADD, add MAP_ADD #2183)
    53. #     Python 3.1a1: 3151 (optimize conditional branches:
    54. #                         introduce POP_JUMP_IF_FALSE and POP_JUMP_IF_TRUE
    55.                           #4715)
    56. #     Python 3.2a1: 3160 (add SETUP_WITH #6101)
    57. #                   tag: cpython-32
    58. #     Python 3.2a2: 3170 (add DUP_TOP_TWO, remove DUP_TOPX and ROT_FOUR #9225)
    59. #                   tag: cpython-32
    60. #     Python 3.2a3  3180 (add DELETE_DEREF #4617)
    61. #     Python 3.3a1  3190 (__class__ super closure changed)
    62. #     Python 3.3a1  3200 (PEP 3155 __qualname__ added #13448)
    63. #     Python 3.3a1  3210 (added size modulo 2**32 to the pyc header #13645)
    64. #     Python 3.3a2  3220 (changed PEP 380 implementation #14230)
    65. #     Python 3.3a4  3230 (revert changes to implicit __class__ closure #14857)
    66. #     Python 3.4a1  3250 (evaluate positional default arguments before
    67. #                        keyword-only defaults #16967)
    68. #     Python 3.4a1  3260 (add LOAD_CLASSDEREF; allow locals of class to override
    69. #                        free vars #17853)
    70. #     Python 3.4a1  3270 (various tweaks to the __class__ closure #12370)
    71. #     Python 3.4a1  3280 (remove implicit class argument)
    72. #     Python 3.4a4  3290 (changes to __qualname__ computation #19301)
    73. #     Python 3.4a4  3300 (more changes to __qualname__ computation #19301)
    74. #     Python 3.4rc2 3310 (alter __qualname__ computation #20625)
    75. #     Python 3.5a1  3320 (PEP 465: Matrix multiplication operator #21176)
    76. #     Python 3.5b1  3330 (PEP 448: Additional Unpacking Generalizations #2292)
    77. #     Python 3.5b2  3340 (fix dictionary display evaluation order #11205)
    78. #     Python 3.5b3  3350 (add GET_YIELD_FROM_ITER opcode #24400)
    79. #     Python 3.5.2  3351 (fix BUILD_MAP_UNPACK_WITH_CALL opcode #27286)
    80. #     Python 3.6a0  3360 (add FORMAT_VALUE opcode #25483)
    81. #     Python 3.6a1  3361 (lineno delta of code.co_lnotab becomes signed #26107)
    82. #     Python 3.6a2  3370 (16 bit wordcode #26647)
    83. #     Python 3.6a2  3371 (add BUILD_CONST_KEY_MAP opcode #27140)
    84. #     Python 3.6a2  3372 (MAKE_FUNCTION simplification, remove MAKE_CLOSURE
    85. #                         #27095)
    86. #     Python 3.6b1  3373 (add BUILD_STRING opcode #27078)
    87. #     Python 3.6b1  3375 (add SETUP_ANNOTATIONS and STORE_ANNOTATION opcodes
    88. #                         #27985)
    89. #     Python 3.6b1  3376 (simplify CALL_FUNCTIONs & BUILD_MAP_UNPACK_WITH_CALL
    90.                           #27213)
    91. #     Python 3.6b1  3377 (set __class__ cell from type.__new__ #23722)
    92. #     Python 3.6b2  3378 (add BUILD_TUPLE_UNPACK_WITH_CALL #28257)
    93. #     Python 3.6rc1 3379 (more thorough __class__ validation #23722)
    94. #     Python 3.7a1  3390 (add LOAD_METHOD and CALL_METHOD opcodes #26110)
    95. #     Python 3.7a2  3391 (update GET_AITER #31709)
    96. #     Python 3.7a4  3392 (PEP 552: Deterministic pycs #31650)
    97. #     Python 3.7b1  3393 (remove STORE_ANNOTATION opcode #32550)
    98. #     Python 3.7b5  3394 (restored docstring as the first stmt in the body;
    99. #                         this might affected the first line number #32911)
    100. #     Python 3.8a1  3400 (move frame block handling to compiler #17611)
    101. #     Python 3.8a1  3401 (add END_ASYNC_FOR #33041)
    102. #     Python 3.8a1  3410 (PEP570 Python Positional-Only Parameters #36540)
    103. #     Python 3.8b2  3411 (Reverse evaluation order of key: value in dict
    104. #                         comprehensions #35224)
    105. #     Python 3.8b2  3412 (Swap the position of positional args and positional
    106. #                         only args in ast.arguments #37593)
    107. #     Python 3.8b4  3413 (Fix "break" and "continue" in "finally" #37830)

    Magic Number是4字节的二进制数据，找到对应的十进制数据后，需要通过以下代码得到相应的二进制数据：

    1. MAGIC_NUMBER = (3413).to_bytes(2, 'little') + b'\r\n'
    2. _RAW_MAGIC_NUMBER = int.from_bytes(MAGIC_NUMBER, 'little')  # For import.c

    即：

    1. enum PycMagic {
    2.     MAGIC_1_0 = 0x00999902,
    3.     MAGIC_1_1 = 0x00999903, /* Also covers 1.2 */
    4.     MAGIC_1_3 = 0x0A0D2E89,
    5.     MAGIC_1_4 = 0x0A0D1704,
    6.     MAGIC_1_5 = 0x0A0D4E99,
    7.     MAGIC_1_6 = 0x0A0DC4FC,
    8.  
    9.     MAGIC_2_0 = 0x0A0DC687,
    10.     MAGIC_2_1 = 0x0A0DEB2A,
    11.     MAGIC_2_2 = 0x0A0DED2D,
    12.     MAGIC_2_3 = 0x0A0DF23B,
    13.     MAGIC_2_4 = 0x0A0DF26D,
    14.     MAGIC_2_5 = 0x0A0DF2B3,
    15.     MAGIC_2_6 = 0x0A0DF2D1,
    16.     MAGIC_2_7 = 0x0A0DF303,
    17.  
    18.     MAGIC_3_0 = 0x0A0D0C3A,
    19.     MAGIC_3_1 = 0x0A0D0C4E,
    20.     MAGIC_3_2 = 0x0A0D0C6C,
    21.     MAGIC_3_3 = 0x0A0D0C9E,
    22.     MAGIC_3_4 = 0x0A0D0CEE,
    23.     MAGIC_3_5 = 0x0A0D0D16,
    24.     MAGIC_3_5_3 = 0x0A0D0D17,
    25.     MAGIC_3_6 = 0x0A0D0D33,
    26.     MAGIC_3_7 = 0x0A0D0D42,
    27.     MAGIC_3_8 = 0x0A0D0D55,
    28.     MAGIC_3_9 = 0x0A0D0D61,
    29. };

    将版本对应的二进制码添加到pyc文件头部即可正常进行反编译。

  • 相关阅读:
    讯飞星火认知大模型V2.0：迈向认知计算的全新时代
    react中hooks闭包
    ArcGIS不同图斑设置不同的透明度
    HashMap在JDK1.7和JDK1.8中有哪些不同？HashMap的底层实现
    DNS基础之通过dig命令理解DNS域名解析中的A记录，AAAA记录，CNAME记录，MX记录，NS记录
    vue 中 ‘\“ 替换成 “/“
    46.drf过滤、搜索、排序
    第十一章 将对象映射到 XML - 控制流属性的映射形式
    jsp+sql毕业生招聘系统免费系统+论文
    Koa学习1：初始化项目
  • 原文地址：https://blog.csdn.net/Myon5/article/details/134538103