blocks|key|5444722|text|将.pyo文件转换为.py，然后编辑.py，然后在.py文件上运行python。Python将重新生成.pyo文件请勿编辑pyo|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5444723|我不知道python字节码，但我怀疑字符串==或1=是否会出现在.pyo文件中|5444724|尽管更好的方法是获取原始的.py文件并使用它们。如果他们给出了错误的程序，就像想要将!=更改为==所暗示的那样，那么您可以要求供应商修复错误。|5444725|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Convert the .pyo files to .py and then edit the .py and then run python on the .py files. Python will regenerate the .pyo files Don't edit the pyo

I don't know the python bytecode but I would doubt that the strings == or 1= would appear in the .pyo file 

Although a much better way is get the original .py files and use them. If they give the wrong program as implied by wanting to change != to == then you could ask the supplier to fix the bug.

blocks|key|5444763|text|这是布莱恩，提问者。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5444764|我已经完成了我需要做的事情，只是试错和十六进制编辑，十六进制edit...then转换source...see什么我changed..until我终于缩小了我正在寻找的。常量(管理员ID)在十六进制文件中转换为十六进制(显然)，但向后。|5444765|我仍然不知道如何或在哪里可以找到!=|5444766|我听说IDA+Pro最新版本支持python，但我还没有学会如何让python在上面工作。|5444767|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

This is Brian, the question asker.

I have completed what I needed to do by just trial and error and hex editing, hex edit...then convert the source...see what I changed..until I finally narrowed down what I was looking for. The constants (Admin IDs) were in the hex file as converted hex (obviously) but backwards.

I still have no idea how or where I'd find the != 

I heard IDA Pro newest version supports python, but I havent learned how to get python to work on it.

blocks|key|2286397|text|直到6.0版本的IDA都没有.pyc反编译模块。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2286398|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

IDA up to 6.0 doesn't have a .pyc decompilation module.

blocks|key|5444837|text|我不知道这是否对你有直接的帮助，但是Python+already+has+a+bytecode+disassembler。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|5444838|对于相反的操作，也就是生成字节码，有两种选择。一方面你有the+standard+compiler+package，然后还有BytecodeAssembler+library，它可能更适合你的需求。|5444839|entityMap|0|LINK|mutability|MUTABLE|url|http://docs.python.org/release/2.7.3/library/dis.html|1|http://docs.python.org/release/2.7.3/library/compiler.html|2|http://pypi.python.org/pypi/BytecodeAssembler^0|P|Z|0|0|S|T|1|1Q|P|2|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]|$A|Z|B|10|1|11]]|C|$]]|$1|F|3|-4|5|6|7|12|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]|P|$5|I|J|K|C|$L|Q]]]]

I don't know if this directly helps you, but Python <a href="http://docs.python.org/release/2.7.3/library/dis.html" rel="nofollow">already has a bytecode disassembler</a>.

For the opposite operation, i.e., generating bytecode, there are a couple of alternatives. On one hand you have <a href="http://docs.python.org/release/2.7.3/library/compiler.html" rel="nofollow">the standard compiler package</a> and then there is also the <a href="http://pypi.python.org/pypi/BytecodeAssembler" rel="nofollow">BytecodeAssembler library</a>, which may be more suited to your needs.

blocks|key|374526|text|最近，我开发了一些工具来帮助解决这类问题。其中一些东西仍然是非常alpha的，但是通过一些工作，你可以在这里使用它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|374527|有几个反汇编程序，它们通常出现在反编译器中。当然，我偏爱的是我编写的名为xdis的文件，因为它提供了有关字节码文件中内容的最多信息。还有一个用C%2B%2B编写的名为pycdas的包，它在包含pycdc反编译器的项目中。所以这部分并不新鲜。|offset|length|374528|另外，正如你所说的，你使用了一个反编译器，但它并不完美。希望在后来的称为uncompyle6的版本中，这些bug已经得到了解决。但如果没有，请提交github问题。|374529|好的。现在让我们来看看最新的内容。最近，我修改了反汇编程序，使其易于修改，并编写了一个Python汇编程序，将其存储回pyc字节码格式。这个东西还在alpha中；在http://github.com/rocky/python-xasm上找到它。|374530|因此，您可以对常量和条件测试进行简单的更改。|374531|现在让我进入条件测试，因为你特别问了这个问题，但在这里还没有完全回答。|374532|考虑下面这段简单的Python代码：|374533|++___file__+==+'__main'|code-block|syntax|javascript|374534|让我们用pydisasm来拆解它：|374535|...
#+Constants:
#++++0:+'__main'
#++++1:+None
#+Names:
#++++0:+___file__
++1:+++++++++++0+LOAD_NAME+++++++++++++++++0+(___file__)
+++++++++++++++3+LOAD_CONST++++++++++++++++0+('__main')
+++++++++++++++6+COMPARE_OP++++++++++++++++2+(==)
+++++++++++++++9+POP_TOP
++++++++++++++10+LOAD_CONST++++++++++++++++1+(None)
++++++++++++++13+RETURN_VALUE|374536|好的。因此，我们可以看到==是COMPARE_OP指令的操作数，编码为2。|style|CODE|374537|看一下这个https://docs.python.org/3.6/library/dis.html#opcode-COMPARE_OP的文档(这是针对Python3.6的，但它在几乎所有Python版本中都是一样的)，有一个稍微有帮助的解释：|374538|The+operation+name+can+be+found+in+cmp_op[opname].|374539|但是对于秘密的解码器环信息，您必须转到opcode.py的Python源代码，它可能在您的磁盘上的某个地方，但这里有一个链接：https://github.com/python/cpython/blob/master/Lib/opcode.py#L24，我们在这里有|374540|+cmp_op+=+('<',+'<=',+'==',+'!=',+'>',+'>=',+'in',+'not+in',+'is',+...|374541|您将看到，当==为2时，!=为3。|374542|至于更改我的反汇编程序中的常量[116901,+141,+349244,+39,+1159488]，在名为Constants的部分，您基本上需要更改那里的数字，然后运行汇编程序。|374543|entityMap|0|LINK|mutability|MUTABLE|url|https://pypi.python.org/pypi/xdis/|1|https://pypi.python.org/pypi/uncompyle6|2|http://github.com/rocky/python-xasm|3|https://docs.python.org/3.6/library/dis.html#opcode-COMPARE_OP|4|https://github.com/python/cpython/blob/master/Lib/opcode.py#L24^0|0|10|4|0|0|10|A|1|0|2A|Z|2|0|0|0|0|0|0|0|C|2|F|A|0|5|1Q|3|0|0|1R|1R|4|0|0|6|2|C|2|0|F|Y|1H|9|0^^$0|@$1|2|3|4|5|6|7|1U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1V|8|@]|9|@$D|1W|E|1X|1|1Y]]|A|$]]|$1|F|3|G|5|6|7|1Z|8|@]|9|@$D|20|E|21|1|22]]|A|$]]|$1|H|3|I|5|6|7|23|8|@]|9|@$D|24|E|25|1|26]]|A|$]]|$1|J|3|K|5|6|7|27|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|28|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|29|8|@]|9|@]|A|$]]|$1|P|3|Q|5|R|7|2A|8|@]|9|@]|A|$S|T]]|$1|U|3|V|5|6|7|2B|8|@]|9|@]|A|$]]|$1|W|3|X|5|R|7|2C|8|@]|9|@]|A|$S|T]]|$1|Y|3|Z|5|6|7|2D|8|@$D|2E|E|2F|10|11]|$D|2G|E|2H|10|11]]|9|@]|A|$]]|$1|12|3|13|5|6|7|2I|8|@]|9|@$D|2J|E|2K|1|2L]]|A|$]]|$1|14|3|15|5|R|7|2M|8|@]|9|@]|A|$S|T]]|$1|16|3|17|5|6|7|2N|8|@]|9|@$D|2O|E|2P|1|2Q]]|A|$]]|$1|18|3|19|5|R|7|2R|8|@]|9|@]|A|$S|T]]|$1|1A|3|1B|5|6|7|2S|8|@$D|2T|E|2U|10|11]|$D|2V|E|2W|10|11]]|9|@]|A|$]]|$1|1C|3|1D|5|6|7|2X|8|@$D|2Y|E|2Z|10|11]|$D|30|E|31|10|11]]|9|@]|A|$]]|$1|1E|3|-4|5|6|7|32|8|@]|9|@]|A|$]]]|1F|$1G|$5|1H|1I|1J|A|$1K|1L]]|1M|$5|1H|1I|1J|A|$1K|1N]]|1O|$5|1H|1I|1J|A|$1K|1P]]|1Q|$5|1H|1I|1J|A|$1K|1R]]|1S|$5|1H|1I|1J|A|$1K|1T]]]]

Very recently I've developed tools that should help with this sort of thing. Some of the stuff is still very much alpha, but with some work you could have used it here.

There are several disassemblers around and they generally appear in the decompiler. The one I am partial to of course is the one I wrote called <a href="https://pypi.python.org/pypi/xdis/" rel="nofollow noreferrer">xdis</a> because it gives the most information about what is in the bytecode file. There is also one called pycdas written in C++ and is in the project that has the pycdc decompiler. So that part is not new.

Also, as you indicate you used a decompiler but it wasn't perfect. Hopefully in later versions called <a href="https://pypi.python.org/pypi/uncompyle6" rel="nofollow noreferrer">uncompyle6</a> these bugs have been addressed. But if not, file a github issue.

Ok. So now onto what is new. Recently I've modified the disassembler to make it amenable to modification and have written an Python assembler to store it back into the pyc bytecode format. This stuff is still in alpha; find it at <a href="http://github.com/rocky/python-xasm" rel="nofollow noreferrer">http://github.com/rocky/python-xasm</a> . 

So with that you could make the simple changes to the constants and the condition tests.

So now let me go into the condition test since you asked about that specifically and it hasn't been fully answered here.

Consider this simple Python code:

<pre><code> ___file__ == '__main'
</code></pre>

Let's disassemble that with pydisasm:

<pre><code>...
# Constants:
# 0: '__main'
# 1: None
# Names:
# 0: ___file__
 1: 0 LOAD_NAME 0 (___file__)
 3 LOAD_CONST 0 ('__main')
 6 COMPARE_OP 2 (==)
 9 POP_TOP
 10 LOAD_CONST 1 (None)
 13 RETURN_VALUE
</code></pre>

Ok. so we see that the <code>==</code> is the operand of a <code>COMPARE_OP</code>
instructions which is encoded as 2.

Looking at the doc for this <a href="https://docs.python.org/3.6/library/dis.html#opcode-COMPARE_OP" rel="nofollow noreferrer">https://docs.python.org/3.6/library/dis.html#opcode-COMPARE_OP</a> (this is for Python 3.6, but it's the same across pretty much all Python versions) there is the marginally helpful explanation:

<pre><code>The operation name can be found in cmp_op[opname].
</code></pre>

But for the secret decoder ring information you'll have to go to the
Python source code for opcode.py which you probably have on your disk somewhere, but here's a link: <a href="https://github.com/python/cpython/blob/master/Lib/opcode.py#L24" rel="nofollow noreferrer">https://github.com/python/cpython/blob/master/Lib/opcode.py#L24</a> where we have

<pre><code> cmp_op = ('&lt;', '&lt;=', '==', '!=', '&gt;', '&gt;=', 'in', 'not in', 'is', ...
</code></pre>

And you'll see that while <code>==</code> is 2, <code>!=</code> is 3.

As for changing the constant <code>[116901, 141, 349244, 39, 1159488]</code> that would appear in my disassembler in the section called <code>Constants</code> and you'd basically change the numbers there and then run the assembler.

I have 2 .pyo python files that I can convert to .py source files, but they don't compile perfectly as hinted by decompyle's verify.

Therefore looking at the source code, I can tell that config.pyo simply had variables in in an array:

ADMIN_USERIDS = [116901,
 141,
 349244,
 39,
 1159488]

I would like to take the original .pyo and disassembly or whatever I need to do inorder to change one of these IDs.

Or....

in model.pyo the source indicates a 

if (productsDeveloperId != self.getUserId()):

All I would want to do is hex edit the != to be a == .....Simple with a windows exe program but I can't find a good python disassembler anywhere.

Any suggestions are welcomed...I am new to reading bytecode and new to python as well.

Reverse Engineer a .pyo python file

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我有两个可以转换成.py源文件的.pyo python文件，但它们不能像解压缩的验证所暗示的那样完美地编译。因此，查看源代码，我可以断定config.pyo只是在一个数组中包含了变量：ADMIN_USERIDS = 116901,141,349244，39,1159488我想要使用原始的.pyo并进行反汇编，或者做任何我需要做的事情来更改其中一个ID。或者...在model.pyo中，源指示一个如

问对.pyo python文件进行逆向工程
EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问对.pyo python文件进行逆向工程EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问对.pyo python文件进行逆向工程
EN