PyInstaller Extractor can extract the resource content of Windows executable files created by PyInstaller.
Introduction to PyInstaller: PyInstaller installation and usage
The default icon of the exe made with PyInstaller is as follows:
Or use strings to output the strings in the exe, where you can see a lot of PyImport_strings
——————————————————————
0x01 install
project address:
https://sourceforge.net/projects/pyinstallerextractor/
After entering, click "Download" to download pyinstxtractor.py.
0x02 How to use
Put pyinstxtractor.py and the exe file in the same directory
python pyinstxtractor.py xx.exe
After running, the xx.exe_extracted folder is generated, and there are various files after entering.
Aim at some suffix-free files (as for which ones are up to you to try), in fact, it is a pyc file without a pyc header
You can try to add the pyc header 03f30d0a21f8eb5a in front, and then add the suffix .pyc to the file name
After that, you can try to decompile the pyc file with uncompyle2.
Uncompyle2 windows installation and use method
0x03 other
Wait until pcat is free to study it...