DY步,把exe的程序变异成pyc

 

D:Downloadspython-exe-unpacker-master>python pyinstxtractor.py 02-上传阿里云oss.exe    acted
D:Downloadspython-exe-unpacker-masterpyinstxtractor.py:95: DeprecationWarning: the imp module is deprecated in favour of importlib and slated for removal in Python 3.12; see the module's documentation for alternative uses
  import imp
[*] Processing 02-上传阿里云oss.exe
[*] Pyinstaller version: 2.1+
[*] Python version: 37
[*] Length of package: 14934525 bytes
[*] Found 127 files in CArchive
[*] Beginning extraction...please standby
[!] Warning: The script is running in a different python version than the one used to build the executable
    Run this script in Python37 to prevent extraction errors(if any) during unmarshalling
[*] Found 812 files in PYZ archive
[*] Successfully extracted pyinstaller archive: 02-上传阿里云oss.exe

You can now use a python decompiler on the pyc files within the extracted directory

D:Downloadspython-exe-unpacker-master>

 

第二部,吧解压的数据包里面程序添加一个文件头

1657709753-Snipaste_2022-07-13_18-55-27

添加一个文件头,直接找一个PYC文件吧DY行的16进制复制添加到这个没有后缀的文件上就行了

然后在吧这个文件修改成pyc结尾的

得到:上传阿里云oss.pyc

第三步,使用uncompyle6 吧这个pyc结尾的文件反编译成py文件就行了

操作:

 

>uncompyle6 -o . 上传阿里云oss.pyc     fest
上传阿里云oss.pyc --
# Successfully decompiled file