pycdc icon indicating copy to clipboard operation
pycdc copied to clipboard

Unsupported opcode: JUMP_IF_NOT_EXC_MATCH

Open NiKoCZ89 opened this issue 2 years ago • 8 comments

Unsupported opcode: JUMP_IF_NOT_EXC_MATCH

any fix/update?

NiKoCZ89 avatar Mar 05 '22 14:03 NiKoCZ89

Same issue with me

abros1 avatar Mar 27 '22 23:03 abros1

I also had a similar error last night, when I tried to decompile the pyc file compiled with python 3.10, the message "Unsupported opcode: BLA_BLA_BLA" appears.

I think this is an error because the pyc file that will be decoded is a bytecode file compiled with python 3.9 and above, and the opcodes that are not supported by pycdc are opcodes that just appeared in python version 3.9 and above.

so I tried reading the ASTree.cpp file and studying it, then I realized that the opcode that was printed as an error was not in the "case block" of the ASTree.cpp file.

I tried to change it a little by adding the opcodes printed in the error message into the case block (on line 1166)

case Pyc::JUMP_IF_NOT_EXC_MATCH_A:
case Pyc::RERAISE_A:

then rebuild it. I don't know what happened but it solved my problem when trying to decompile python 3.9 and above bytecode. everything is done!

karjok avatar Jun 06 '22 02:06 karjok

i have the same error , how can i solve it ?

photo_2022-09-22_20-48-57

photo_2022-09-22_20-48-57 (2)

Screenshot from 2022-09-23 00-06-22

angelheart150 avatar Sep 22 '22 21:09 angelheart150

obfuscated_stealer.pyc.zip

I am trying to analyze malware, and I received this error when putting the above file into pycdc.

AngeloD2022 avatar Mar 04 '23 19:03 AngeloD2022

Same issue with me

sami-soft avatar Jun 09 '23 19:06 sami-soft

Same issue... how can i resolved it?

fernando535 avatar Sep 20 '23 12:09 fernando535

same

kzorin52 avatar Oct 28 '23 09:10 kzorin52

Temporary fix: I tried to comment out the line return new ASTNodeList(defblock->nodes()); in ASTree.cpp (this is the line that stops when it reaches an unknown opcode, in the default:) The output is not completely correct, I had places where the try-catch was not in place, but all the decompiled code is readable, and after minor corrections it worked perfectly.

meir555 avatar Nov 21 '23 08:11 meir555

Duplicate #450

zrax avatar Feb 21 '24 22:02 zrax