(py_pack_env) PSH:\TestRepo\py_pack\unpack_test> py .\pyinstxtractor.py .\notion_dump_client_no_key.exe [+] Processing .\notion_dump_client_no_key.exe [+] Pyinstaller version: 2.1+ [+] Python version: 309 [+] Length of package: 11041731 bytes [+] Found 994 files in CArchive [+] Beginning extraction...please standby [+] Possible entry point: pyiboot01_bootstrap.pyc [+] Possible entry point: pyi_rth_subprocess.pyc [+] Possible entry point: pyi_rth_pkgutil.pyc [+] Possible entry point: pyi_rth_multiprocessing.pyc [+] Possible entry point: pyi_rth_inspect.pyc [+] Possible entry point: pyi_rth__tkinter.pyc [+] Possible entry point: notion_dump_client.pyc [+] Found 395 files in PYZ archive [+] Successfully extracted pyinstaller archive: .\notion_dump_client_no_key.exe
You can now use a python decompiler on the pyc files within the extracted directory (py_pack_env) PSH:\TestRepo\py_pack\unpack_test>
2.1.2、如果是加密后的exe文件,输出会显示(类似的Extracting as is.)
1 2 3 4 5 6 7 8 9
[!] Error: Failed to decompress PYZ-00.pyz_extracted\xml\sax\expatreader.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\xml\sax\handler.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\xml\sax\saxutils.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\xml\sax\xmlreader.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\xmlrpc\__init__.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\xmlrpc\client.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\zipfile.pyc, probably encrypted. Extracting as is. [!] Error: Failed to decompress PYZ-00.pyz_extracted\zipimport.pyc, probably encrypted. Extracting as is. [+] Successfully extracted pyinstaller archive: .\notion_dump_client_key.exe