Py Magic Numbers

Author: David Zimmer
Date: 05.29.25 - 7:22pm

this was slightly painful..

pycore_magic_number.h

char* ver[] = {"1.5","1.5.1","1.5.2","1.6","2.0","2.0.1","2.1","2.1.1","2.1.2","2.2","2.3a0","2.3a0","2.3a0","2.4a0","2.4a3","2.4b1","2.5a0","2.5a0","2.5a0","2.5a0","2.5b3","2.5b3","2.5c1","2.5c2","2.6a0","2.6a1","2.7a0","2.7a0","2.7a0","2.7a0","2.7a0","3000","3000","3000","3000","3000","3000","3000","3000","3000","3000","3000","3000","3000","3.0a4","3.0b1","3.1a1","3.1a1","3.2a1","3.2a2","3.2a3","3.3a1","3.3a1","3.3a1","3.3a2","3.3a4","3.4a1","3.4a1","3.4a1","3.4a1","3.4a4","3.4a4","3.4rc2","3.5a1","3.5b1","3.5b2","3.5b3","3.5.2","3.6a0","3.6a1","3.6a2","3.6a2","3.6a2","3.6b1","3.6b1","3.6b1","3.6b1","3.6b2","3.6rc1","3.7a1","3.7a2","3.7a4","3.7b1","3.7b5","3.8a1","3.8a1","3.8a1","3.8b2","3.8b2","3.8b4","3.9a0","3.9a0","3.9a0","3.9a2","3.9a2","3.9a2","3.10a1","3.10a1","3.10a2","3.10a2","3.10a6","3.10a7","3.10b1","3.10b1","3.10b1","3.10b1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a1","3.11a2","3.11a3","3.11a3","3.11a3","3.11a4","3.11a4","3.11a4","3.11a4","3.11a4","3.11a4","3.11a4","3.11a4","3.11a4","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a5","3.11a6","3.11a6","3.11a6","3.11a6","3.11a6","3.11a6","3.11a7","3.11a7","3.11a7","3.11b4","3.12a1","3.12a1","3.12a1","3.12a1","3.12a1","3.12a1","3.12a1","3.12a1","3.12a1","3.12a1","3.12a2","3.12a2","3.12a2","3.12a4","3.12a4","3.12a5","3.12a5","3.12a5","3.12a6","3.12a6","3.12a6","3.12a7","3.12a7","3.12a7","3.12a7","3.12b1","3.12b1","3.12b1","3.12b1","3.12b1","3.12b1","3.12b1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a1","3.13a5","3.13a6","3.13b1","3.14a1","3.14a1","3.14a1","3.14a1","3.14a1","3.14a1","3.14a1","3.14a1","3.14a1","3.14a2","3.14a4","3.14a4","3.14a4","3.14a4","3.14a5","3.14a5","3.14a5","3.14a6","3.14a6","3.14a6","3.14a6","3.14a7","3.14a7","3.14a7","3.14b1","3.15a0","3.15a1","3.15a1"};

short nver[] = {20121,20121,20121,50428,50823,50823,60202,60202,60202,60717,62011,62021,62011,62041,62051,62061,62071,62081,62091,62092,62101,62111,62121,62131,62151,62161,62171,62181,62191,62201,62211,3000,3010,3020,3030,3040,3050,3060,3061,3071,3081,3091,3101,3103,3111,3131,3141,3151,3160,3170,3180,3190,3200,3210,3220,3230,3250,3260,3270,3280,3290,3300,3310,3320,3330,3340,3350,3351,3360,3361,3370,3371,3372,3373,3375,3376,3377,3378,3379,3390,3391,3392,3393,3394,3400,3401,3410,3411,3412,3413,3420,3421,3422,3423,3424,3425,3430,3431,3432,3433,3434,3435,3436,3437,3438,3439,3450,3451,3452,3453,3454,3455,3456,3457,3458,3459,3460,3461,3462,3463,3464,3465,3466,3467,3468,3469,3470,3471,3472,3473,3474,3475,3476,3477,3478,3479,3480,3481,3482,3483,3484,3485,3486,3487,3488,3489,3490,3491,3492,3493,3494,3495,3500,3501,3502,3503,3504,3505,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,3516,3517,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3529,3530,3531,3550,3551,3552,3553,3554,3555,3556,3557,3558,3559,3560,3561,3562,3563,3564,3565,3566,3567,3568,3569,3570,3571,3600,3601,3602,3603,3604,3605,3606,3607,3608,3609,3610,3611,3612,3613,3614,3615,3616,3617,3618,3619,3620,3621,3622,3623,3624,3650,3651,3652};

pyMagic = Array("1.5:20121", "1.5.1:20121", "1.5.2:20121", "1.6:50428", "2.0:50823", "2.0.1:50823", "2.1:60202", "2.1.1:60202", "2.1.2:60202", "2.2:60717", "2.3a0:62011", "2.3a0:62021", "2.3a0:62011", "2.4a0:62041", "2.4a3:62051", "2.4b1:62061", "2.5a0:62071", "2.5a0:62081", "2.5a0:62091", "2.5a0:62092", "2.5b3:62101", _
"2.5b3:62111", "2.5c1:62121", "2.5c2:62131", "2.6a0:62151", "2.6a1:62161", "2.7a0:62171", "2.7a0:62181", "2.7a0:62191", "2.7a0:62201", "2.7a0:62211", "3000:3000", "3000:3010", "3000:3020", "3000:3030", "3000:3040", "3000:3050", "3000:3060", "3000:3061", "3000:3071", "3000:3081", "3000:3091", "3000:3101", _
"3000:3103", "3.0a4:3111", "3.0b1:3131", "3.1a1:3141", "3.1a1:3151", "3.2a1:3160", "3.2a2:3170", "3.2a3:3180", "3.3a1:3190", "3.3a1:3200", "3.3a1:3210", "3.3a2:3220", "3.3a4:3230", "3.4a1:3250", "3.4a1:3260", "3.4a1:3270", "3.4a1:3280", "3.4a4:3290", "3.4a4:3300", "3.4rc2:3310", "3.5a1:3320", "3.5b1:3330", _
"3.5b2:3340", "3.5b3:3350", "3.5.2:3351", "3.6a0:3360", "3.6a1:3361", "3.6a2:3370", "3.6a2:3371", "3.6a2:3372", "3.6b1:3373", "3.6b1:3375", "3.6b1:3376", "3.6b1:3377", "3.6b2:3378", "3.6rc1:3379", "3.7a1:3390", "3.7a2:3391", "3.7a4:3392", "3.7b1:3393", "3.7b5:3394", "3.8a1:3400", "3.8a1:3401", "3.8a1:3410", _
"3.8b2:3411", "3.8b2:3412", "3.8b4:3413", "3.9a0:3420", "3.9a0:3421", "3.9a0:3422", "3.9a2:3423", "3.9a2:3424", "3.9a2:3425", "3.10a1:3430", "3.10a1:3431", "3.10a2:3432", "3.10a2:3433", "3.10a6:3434", "3.10a7:3435", "3.10b1:3436", "3.10b1:3437", "3.10b1:3438", "3.10b1:3439", "3.11a1:3450", "3.11a1:3451", _
"3.11a1:3452", "3.11a1:3453", "3.11a1:3454", "3.11a1:3455", "3.11a1:3456", "3.11a1:3457", "3.11a1:3458", "3.11a1:3459", "3.11a1:3460", "3.11a1:3461", "3.11a2:3462", "3.11a3:3463", "3.11a3:3464", "3.11a3:3465", "3.11a4:3466", "3.11a4:3467", "3.11a4:3468", "3.11a4:3469", "3.11a4:3470", "3.11a4:3471", "3.11a4:3472", _
"3.11a4:3473", "3.11a4:3474", "3.11a5:3475", "3.11a5:3476", "3.11a5:3477", "3.11a5:3478", "3.11a5:3479", "3.11a5:3480", "3.11a5:3481", "3.11a5:3482", "3.11a5:3483", "3.11a5:3484", "3.11a5:3485", "3.11a6:3486", "3.11a6:3487", "3.11a6:3488", "3.11a6:3489", "3.11a6:3490", "3.11a6:3491", "3.11a7:3492", "3.11a7:3493", _
"3.11a7:3494", "3.11b4:3495", "3.12a1:3500", "3.12a1:3501", "3.12a1:3502", "3.12a1:3503", "3.12a1:3504", "3.12a1:3505", "3.12a1:3506", "3.12a1:3507", "3.12a1:3508", "3.12a1:3509", "3.12a2:3510", "3.12a2:3511", "3.12a2:3512", "3.12a4:3513", "3.12a4:3514", "3.12a5:3515", "3.12a5:3516", "3.12a5:3517", "3.12a6:3518", _
"3.12a6:3519", "3.12a6:3520", "3.12a7:3521", "3.12a7:3522", "3.12a7:3523", "3.12a7:3524", "3.12b1:3525", "3.12b1:3526", "3.12b1:3527", "3.12b1:3528", "3.12b1:3529", "3.12b1:3530", "3.12b1:3531", "3.13a1:3550", "3.13a1:3551", "3.13a1:3552", "3.13a1:3553", "3.13a1:3554", "3.13a1:3555", "3.13a1:3556", "3.13a1:3557", _
"3.13a1:3558", "3.13a1:3559", "3.13a1:3560", "3.13a1:3561", "3.13a1:3562", "3.13a1:3563", "3.13a1:3564", "3.13a1:3565", "3.13a1:3566", "3.13a1:3567", "3.13a1:3568", "3.13a5:3569", "3.13a6:3570", "3.13b1:3571", "3.14a1:3600", "3.14a1:3601", "3.14a1:3602", "3.14a1:3603", "3.14a1:3604", "3.14a1:3605", "3.14a1:3606", _
"3.14a1:3607", "3.14a1:3608", "3.14a2:3609", "3.14a4:3610", "3.14a4:3611", "3.14a4:3612", "3.14a4:3613", "3.14a5:3614", "3.14a5:3615", "3.14a5:3616", "3.14a6:3617", "3.14a6:3618", "3.14a6:3619", "3.14a6:3620", "3.14a7:3621", "3.14a7:3622", "3.14a7:3623", "3.14b1:3624", "3.15a0:3650", "3.15a1:3651", "3.15a1:3652")

Comments: (2)

On 05.29.25 - 7:51pm Dave wrote:
chatgpt has really impressed me with some types of extraction/formatting, but just couldnt pull it off in this case even with the inputs standardized.

It also tends to be lazy and only show abbreviated results so make sure to specify full outputs in your try it.

On 05.29.25 - 8:07pm Dave wrote:
prompt: what is the release date and git tag for python 3.11a4

hopefully i never need to hunt down alpha/betas for an unmarshal );

maybe a more useful list:

pyMagic = Array("1.5:0x994e", "1.5.1:0x994e", "1.5.2:0x994e", "1.6:0xc4fc", "2.0:0xc687", "2.0.1:0xc687", "2.1:0xeb2a", "2.1.1:0xeb2a", "2.1.2:0xeb2a", "2.2:0xed2d", "2.3a0:0xf23b", "2.3a0:0xf245", "2.4a0:0xf259", "2.4a3:0xf263", "2.4b1:0xf26d", "2.5a0:0xf277", "2.5a0:0xf281", "2.5a0:0xf28b", "2.5a0:0xf28c", "2.5b3:0xf295", "2.5b3:0xf29f", "2.5c1:0xf2a9", "2.5c2:0xf2b3", "2.6a0:0xf2c7", "2.6a1:0xf2d1", "2.7a0:0xf2db", "2.7a0:0xf2e5", "2.7a0:0xf2ef", "2.7a0:0xf2f9", "2.7a0:0xf303", "3.0:0xf303", "3.1:0xf335", "3.2:0xf353", "3.3:0xf38f", "3.4:0xf3b3", "3.5:0xf3d1", "3.6:0x0d33", "3.7:0x0d3e", "3.8:0x0d55", "3.9:0x0d61", "3.10:0x0d6f", "3.11:0x0d7a", "3.12:0x0da7", "3.13:0x0db6")

cross map to some more friendly version numbers

2.1.1 = 2.1 = EB2A 2.1.2 = 2.1 = EB2A 3.6rc1 = 3.6 = D33 3.7a1 = 3.7 = D3E 3.8b4 = 3.8 = D55 3.9a2 = 3.9 = D61 3.10b1 = 3.10 = D6F 3.11a1 = 3.11 = D7A 3.11b4 = 3.12 = DA7 3.12a2 = 3.13 = DB6

Leave Comment:

Name:

Email: (not shown)

Message: (Required)

Math Question: 29 + 71 = ? followed by the letter: D

About Me
More Blogs
Main Site

Posts: (All)

2025 (4)
Py Magic Numbers
upside down pyramid
IDA Compare Updates
Bindiff Niceity
2024 (1)
MAP Update
2023 (4)
Yara Workbench Automation
VS linker versions
IDA decompiler comments
DispCallFunc
2022 (5)
VB6 Implements
VB6 Stubs BS
VB6 TypeInfo
VB6 VTable Layout
Yara isPCode rule
2021 (2)
rtcTypeName
VB6 Gosub
2020 ( 5 )
2019 ( 6 )
2017 ( 5 )
2016 ( 4 )
2015 ( 5 )
2014 ( 5 )
2013 ( 9 )
2012 ( 13 )
2011 ( 19 )
2010 ( 11 )
2009 ( 1 )