Is there a way to decrypt/deobfuscate pyarmor scripts?

Question

I am trying to decompile a python exe and I got the .py but it is obfuscated with pyarmor. I was wondering if there was a way to decrypt/deobfuscate this?

pyarmor_runtime()
__pyarmor__(__name__, __file__, b'PYARMOR\x00\x00\x03\x07\x00B\r\r\n\x02\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00@\x00\x0 ...etc```

Answer 1

There is no easy, known way to decrypt Pyarmor as it has been designed so to protect the source code. All the "hacking tools" you will find on the web are most likely scams, so please don't download them.

If you just want to decompile Python bytecode, you can use uncompyle6 or pyinstxtractor to extract files from Pyinstaller.

You might also find this Medium article about how to use memory dump technique to reverse engineer obfuscated code useful.

Generally, Pyarmor is in place to protect the IP of the program and I wouldn't recommend trying to decrypt it unless you have the right legal permissions.