Some C code to repair corrupt p_info header on UPX! packed malware. It fixes two variants I found that were pretty common. There are many other variants that have UPX headers either stripped, or null bytes injected to change offsets that this code does not work on.
$ make
make upx_dec
make[1]: Entering directory '/home/larry/code/UPX'
gcc -Wall -ggdb -O2 -D DEBUG=0 -c -o upx_dec.o upx_dec.c
gcc -O2 -o upx_dec upx_dec.o
make[1]: Leaving directory '/home/larry/code/UPX'
