extremecoders-re / nuitka-extractor

Tool to extract nuitka compiled executables
MIT License
71 stars 6 forks source link

Nuitka magic header mismatch #2

Closed CodingIsLife12345 closed 1 year ago

CodingIsLife12345 commented 1 year ago

I check the exe and it is packed with nuitka I hope there's other solution?

NUITKA_ONEFILE_PARENT

[+] Processing test.exe
[+] File type: PE
[+] Payload size: 0 bytes
[!] Nuitka magic header mismatch
extremecoders-re commented 1 year ago

The issue is due to the manifest. Until this is fixed you can delete the manifest in a hex editor.

For this specific file, delete the last 1648 (0x670) bytes and the extractor would work.

image

C:\>nuitka-extractor.exe test1.exe
[+] Processing test1.exe
[+] File type: PE
[+] Payload size: 11891432 bytes
[+] Payload compression: true
[+] Beginning extraction...
[+] Total files: 43
[+] Successfully extracted to test1.exe_extracted

image

CodingIsLife12345 commented 1 year ago

The issue is due to the manifest. Until this is fixed you can delete the manifest in a hex editor.

For this specific file, delete the last 1648 (0x670) bytes and the extractor would work.

image

C:\>nuitka-extractor.exe test1.exe
[+] Processing test1.exe
[+] File type: PE
[+] Payload size: 11891432 bytes
[+] Payload compression: true
[+] Beginning extraction...
[+] Total files: 43
[+] Successfully extracted to test1.exe_extracted

image

Thank you so much. This is a good feature/enhancement for next release. Looking forward to it.

alienmaster9 commented 8 months ago

telerising-v0.11.6_x86-64_linux.zip extract api file in this folder its not working at the moment

extremecoders-re commented 8 months ago

@alienmaster9 It is not a "onefile" executable. There is nothing to extract.

alienmaster9 commented 8 months ago

but its main file it compressed by nutika can it converted to source code ??? @extremecoders-re

extremecoders-re commented 8 months ago

@alienmaster9 Nope. Nuitka compiles python bytecode to native machine code. Recovering high level python source code from native code is extremely difficult.

alienmaster9 commented 8 months ago

do you have telegram or decord so i cant connect with you i got some binaries need fix something and make them run

extremecoders-re commented 8 months ago

@alienmaster9 Contact info is in my GitHub profile