Contents
Is there a way to reverse pyarmor completely?
For those of you that are unaware of what pyarmor is, its a protection software that is to help obfuscate and protect your software. Heres an image of what pyarmor looks like. Its infuriating to reverse however I think I might be onto a method for completely reversing pyarmor.
How does a pyarmor plugin work in Python?
__pyarmor__(__name__, __file__, b’\\…’) In PyArmor, the plugin is used to inject python code into the obfuscted script before the script is obfuscated, thus the plugin code could be executed when the obfuscated script is running. For example, use a plugin to check internet time: Why not insert the plugin code into the script directly?
How does the command pack work in pyarmor?
PyArmor provides command pack to achieve this. But in some cases maybe it doesn’t work. This document describes what the command pack does, and also could be as a guide to bundle the obfuscated scripts by yourself. Then obfuscate scripts to dist/obf:
How to reverse engineer an EXE ” compiled ” with pyinstaller?
How do you reverse engineer an EXE “compiled” with PyInstaller Ask Question Asked8 years, 4 months ago Active2 years, 3 months ago Viewed88k times 33 17
How does decompilation reversing pyarmor discussion work?
It makes a simple computational check and decides whether it should end itself or to decrypt our file. Still playing around with the dll and seeing what each functions does. One last final thing I found that for sure is interesting is this:
How to change the entry script in pyarmor?
There are 2 extra changes for entry script: Before obfuscating, insert protection code to entry script. After obfuscated, insert bootstrap code to obfuscated script. Before obfuscating entry scipt, PyArmor will search the content line by line. If there is line like this: PyArmor will replace this line with protection code.
How is the DLL entry point in pyarmor?
Our dll entry point is pretty uneventful, its not packed or anything which makes our job a bit easier. It makes a simple computational check and decides whether it should end itself or to decrypt our file. Still playing around with the dll and seeing what each functions does.