ErezAmihud / dearmor

This is a repo to deobfuscate pyarmor files
Apache License 2.0
25 stars 7 forks source link

[Guide Needed] Add Guide for keeping main files #7

Closed MikeAndarsons closed 1 year ago

MikeAndarsons commented 2 years ago

Add Guide for keeping main files after decompilation using python-exe-unpacker ,i mean which files are necessary to deobfuscate script

ErezAmihud commented 2 years ago

@MikeAndarsons

I dont have time to do it, but you actually dont need to unpack, only run the obfuscated python exe and inject the dll to it. Download the git content, go to dearmor/main.py and edit line 18 remove sys.executable (and the "," that comes after that)

Then install and run

In the -i option just put your exe instead

MikeAndarsons commented 2 years ago

@ErezAmihud Thanks for answering,I changed main.py as you said and installed. Now i am using command like: dearmor -i "App.exe"(App.exe is compiled by Py Version 3.9) That App is opening but in CMD i got error:


Traceback (most recent call last):
  File "C:\Users\WINDOWS10\AppData\Local\Programs\Python\Python37\Scripts\dearmor-script.py", line 11, in <module>
    load_entry_point('dearmor==0.1', 'console_scripts', 'dearmor')()
  File "C:\Users\WINDOWS10\AppData\Local\Programs\Python\Python37\lib\site-packages\dearmor-0.1-py3.7-win-amd64.egg\dearmor\__main__.py", line 35, in main_cli
    main(print_user_messages=True, **parser.parse_args().__dict__)
  File "C:\Users\WINDOWS10\AppData\Local\Programs\Python\Python37\lib\site-packages\dearmor-0.1-py3.7-win-amd64.egg\dearmor\__main__.py", line 22, in main
    inject(child[0].pid, str(Path(__file__).parent.parent / "dearmor-library" / "lib" / "dearmor.dll"))
IndexError: list index out of range
MikeAndarsons commented 2 years ago

@ErezAmihud Any Solution? or can you suggest other methods to deobfuscate Or suggest any Repo ?

ErezAmihud commented 1 year ago

@MikeAndarsons Hi, I uploaded the package to the pypi artifactory at https://pypi.org/project/dearmor/0.2/ I think it will solve your problems.

ShuRaymond commented 1 year ago

Hello, why is there no response after I type dearmor -i xxx.exe

ErezAmihud commented 1 year ago

Hello, why is there no response after I type dearmor -i xxx.exe

I edited to comment above, decompile the exe first to something you can run python <file>. Also install all the dependencies packages