← All tools

PyArmor-Unpacker

https://github.com/Svenskithesource/PyArmor-Unpacker

Open Source

Categories

Reverse Engineering

Description

There are 3 different methods for unpacking PyArmor, in the methods folder in this repository you will find all the files needed for each method. Method 3 is the preferred method for Python 3.9. Below you will find a detailed write-up on how I started all the way to the end product. I hope more people actually understand how it works this way rather than just using the tool.

Keywords

deobfuscator pyarmor python reverse-engineering

Example Usage

wrap header:

        LOAD_GLOBALS    N (__armor_enter__)     N = length of co_consts
        CALL_FUNCTION   0
        POP_TOP
        SETUP_FINALLY   X (jump to wrap footer) X = size of original byte code

changed original byte code:

        Increase oparg of each absolute jump instruction by the size of wrap header

        Obfuscate original byte code

        ...

wrap footer:

        LOAD_GLOBALS    N + 1 (__armor_exit__)
        CALL_FUNCTION   0
        POP_TOP
        END_FINALLY