Lil-Ran/Pyarmor-Static-Unpack-1shot
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix: friendly message for upx (gh-12, gh-35)

Browse Source
This commit is contained in:
Lil-Ran
2026-02-23 21:03:20 +08:00
parent fc4e96a164
commit 8fba94269c
2 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/regtest.yml vendored
View File

@@ -3,7 +3,7 @@
name: Regression Test name: Regression Test
on: on:
push: push:
branches: [main] branches: [main, update-tests]
jobs: jobs:
regtest: regtest:

16
oneshot/runtime.py
View File

@@ -66,9 +66,21 @@ class RuntimeInfo:
""" """
with open(self.file_path, "rb") as f: with open(self.file_path, "rb") as f:
data = f.read(16 * 1024 * 1024) data = f.read(16 * 1024 * 1024)
cur = data.index(b"pyarmor-vax") cur = data.find(b"pyarmor-vax")
if cur == -1:
# Specially, check UPX (GH-12, GH-35)
if data.find(b"UPX!") != -1 and data.find(b"UPX0") != -1:
logger.error(
f"{self.file_path} seems to be packed by UPX. Before it can be processed, you need to unpack it first: Download UPX from https://github.com/upx/upx, and run `upx -d {self.file_path}` (you may need to escape the file path) in the command line."
)
else:
logger.error(
f"{self.file_path} does not contain 'pyarmor-vax'. Maybe it's packed, obfuscated, or generated by an unsupported version of Pyarmor."
)
raise ValueError(f"{self.file_path} does not contain 'pyarmor-vax'")
if data[cur + 11 : cur + 18] == b"\x00" * 7: if data[cur + 11 : cur + 18] == b"\x00" * 7:
# Do not log. Skip this file silently and find another.
raise ValueError(f"{self.file_path} is a runtime template") raise ValueError(f"{self.file_path} is a runtime template")
# Align with pyd file and executable address: # Align with pyd file and executable address:
@@ -78,7 +90,7 @@ class RuntimeInfo:
if data[0x5C] & 1 != 0: if data[0x5C] & 1 != 0:
logger.error( logger.error(
'External key file ".pyarmor.ikey" is not supported yet, but it will be supported once we get a sample (like this one). Please open an issue on https://github.com/Lil-House/Pyarmor-Static-Unpack-1shot/issues to make this tool stronger.' f'External key file ".pyarmor.ikey" is not supported yet, but it will be supported once we get a sample (like this one). Please open an issue on https://github.com/Lil-House/Pyarmor-Static-Unpack-1shot/issues to make this tool stronger. ({self.file_path})'
) )
raise NotImplementedError(f'{self.file_path} uses ".pyarmor.ikey"') raise NotImplementedError(f'{self.file_path} uses ".pyarmor.ikey"')