|
1 | | -from __future__ import annotations |
2 | | -import ast |
3 | | -from pathlib import Path |
4 | | -from .lazy import encrypt_user_functions |
5 | | -from .loader import build_loader |
6 | | -from .packer import pack |
7 | | -from .transforms import IdentifierRenamer, NumberObfuscator, OpaquePredicateInjector, StringEncryptor, build_decrypt_helper, collect_skip_names |
8 | | -from .transforms.junk import JunkBranchInjector |
9 | | -from .transforms.mba import MBATransformer |
10 | | -from .transforms.opaque import build_seed_stmt |
11 | | -from .util import make_rng |
12 | | -_SEED_NAME = '_pw_seed_value' |
13 | | -_DEC_S_NAME = '_pw_dec_str' |
14 | | -_DEC_B_NAME = '_pw_dec_bytes' |
15 | | -_RESOLVE_NAME = '__pw_resolve_lazy__' |
16 | | - |
17 | | -class Obfuscator: |
18 | | - |
19 | | - def __init__(self, *, seed: int | None=None, rename: bool=True, encrypt_strings: bool=True, obfuscate_numbers: bool=True, opaque_predicates: bool=True, mba: bool=True, junk_branches: bool=True, lazy_funcs: bool=True, anti_debug: bool=True, layers: int=3, stage2_layers: int=3, keep: set[str] | None=None): |
20 | | - self.rng, self.seed = make_rng(seed) |
21 | | - self.rename = rename |
22 | | - self.encrypt_strings = encrypt_strings |
23 | | - self.obfuscate_numbers = obfuscate_numbers |
24 | | - self.opaque_predicates = opaque_predicates |
25 | | - self.mba = mba |
26 | | - self.junk_branches = junk_branches |
27 | | - self.lazy_funcs = lazy_funcs |
28 | | - self.anti_debug = anti_debug |
29 | | - self.layers = max(1, int(layers)) |
30 | | - self.stage2_layers = max(1, int(stage2_layers)) |
31 | | - self.keep_extra = set(keep or ()) |
32 | | - |
33 | | - def obfuscate(self, source: str) -> str: |
34 | | - tree = ast.parse(source) |
35 | | - skip = collect_skip_names(tree) |
36 | | - seed_used = False |
37 | | - if self.opaque_predicates: |
38 | | - opi = OpaquePredicateInjector(self.rng, _SEED_NAME) |
39 | | - tree = opi.visit(tree) |
40 | | - seed_used = seed_used or opi.injected |
41 | | - if self.junk_branches: |
42 | | - jbi = JunkBranchInjector(self.rng, _SEED_NAME) |
43 | | - tree = jbi.visit(tree) |
44 | | - seed_used = seed_used or jbi.injected |
45 | | - if seed_used: |
46 | | - tree.body.insert(0, build_seed_stmt(_SEED_NAME)) |
47 | | - if self.mba: |
48 | | - tree = MBATransformer(self.rng).visit(tree) |
49 | | - if self.obfuscate_numbers: |
50 | | - tree = NumberObfuscator(self.rng).visit(tree) |
51 | | - if self.encrypt_strings: |
52 | | - enc = StringEncryptor(self.rng, _DEC_S_NAME, _DEC_B_NAME) |
53 | | - tree = enc.visit(tree) |
54 | | - tree.body[:0] = build_decrypt_helper(_DEC_S_NAME, _DEC_B_NAME) |
55 | | - if self.rename: |
56 | | - renamer = IdentifierRenamer(self.rng, keep=skip | self.keep_extra | {_RESOLVE_NAME}) |
57 | | - tree = renamer.visit(tree) |
58 | | - ast.fix_missing_locations(tree) |
59 | | - user_code = compile(tree, '<patchwork>', 'exec') |
60 | | - if self.lazy_funcs: |
61 | | - user_code, lazy_blobs = encrypt_user_functions(user_code, self.rng, _RESOLVE_NAME) |
62 | | - else: |
63 | | - lazy_blobs = [] |
64 | | - user_payload, user_keys = pack(user_code, self.rng, layers=self.layers) |
65 | | - return build_loader(user_payload, user_keys, lazy_blobs, resolver_name=_RESOLVE_NAME, rng=self.rng, anti_debug=self.anti_debug, stage2_layers=self.stage2_layers) |
66 | | - |
67 | | -def obfuscate(source: str, **kwargs) -> str: |
68 | | - return Obfuscator(**kwargs).obfuscate(source) |
69 | | - |
70 | | -def obfuscate_file(input_path: str | Path, output_path: str | Path | None=None, **kwargs) -> Path: |
71 | | - inp = Path(input_path) |
72 | | - src = inp.read_text(encoding='utf-8') |
73 | | - out = obfuscate(src, **kwargs) |
74 | | - if output_path is None: |
75 | | - outp = inp.with_name(inp.stem + '_obf.py') |
76 | | - else: |
77 | | - outp = Path(output_path) |
78 | | - outp.write_text(out, encoding='utf-8') |
79 | | - return outp |
| 1 | +from __future__ import annotations |
| 2 | +import ast |
| 3 | +from pathlib import Path |
| 4 | +from .lazy import encrypt_user_functions |
| 5 | +from .loader import build_loader |
| 6 | +from .packer import pack |
| 7 | +from .transforms import IdentifierRenamer, NumberObfuscator, OpaquePredicateInjector, StringEncryptor, build_decrypt_helper, collect_skip_names |
| 8 | +from .transforms.junk import JunkBranchInjector |
| 9 | +from .transforms.mba import MBATransformer |
| 10 | +from .transforms.opaque import build_seed_stmt |
| 11 | +from .util import make_rng |
| 12 | +_SEED_NAME = '_pw_seed_value' |
| 13 | +_DEC_S_NAME = '_pw_dec_str' |
| 14 | +_DEC_B_NAME = '_pw_dec_bytes' |
| 15 | +_RESOLVE_NAME = '__pw_resolve_lazy__' |
| 16 | + |
| 17 | +def _insert_runtime_stmts(tree: ast.Module, stmts: list[ast.stmt]) -> None: |
| 18 | + if not stmts: |
| 19 | + return |
| 20 | + insert_at = 0 |
| 21 | + if ( |
| 22 | + tree.body |
| 23 | + and isinstance(tree.body[0], ast.Expr) |
| 24 | + and isinstance(tree.body[0].value, ast.Constant) |
| 25 | + and isinstance(tree.body[0].value.value, str) |
| 26 | + ): |
| 27 | + insert_at = 1 |
| 28 | + while ( |
| 29 | + insert_at < len(tree.body) |
| 30 | + and isinstance(tree.body[insert_at], ast.ImportFrom) |
| 31 | + and tree.body[insert_at].module == '__future__' |
| 32 | + ): |
| 33 | + insert_at += 1 |
| 34 | + tree.body[insert_at:insert_at] = stmts |
| 35 | + |
| 36 | +class Obfuscator: |
| 37 | + |
| 38 | + def __init__(self, *, seed: int | None=None, rename: bool=True, encrypt_strings: bool=True, obfuscate_numbers: bool=True, opaque_predicates: bool=True, mba: bool=True, junk_branches: bool=True, lazy_funcs: bool=True, anti_debug: bool=True, layers: int=3, stage2_layers: int=3, keep: set[str] | None=None): |
| 39 | + self.rng, self.seed = make_rng(seed) |
| 40 | + self.rename = rename |
| 41 | + self.encrypt_strings = encrypt_strings |
| 42 | + self.obfuscate_numbers = obfuscate_numbers |
| 43 | + self.opaque_predicates = opaque_predicates |
| 44 | + self.mba = mba |
| 45 | + self.junk_branches = junk_branches |
| 46 | + self.lazy_funcs = lazy_funcs |
| 47 | + self.anti_debug = anti_debug |
| 48 | + self.layers = max(1, int(layers)) |
| 49 | + self.stage2_layers = max(1, int(stage2_layers)) |
| 50 | + self.keep_extra = set(keep or ()) |
| 51 | + |
| 52 | + def obfuscate(self, source: str) -> str: |
| 53 | + tree = ast.parse(source) |
| 54 | + skip = collect_skip_names(tree) |
| 55 | + seed_used = False |
| 56 | + if self.opaque_predicates: |
| 57 | + opi = OpaquePredicateInjector(self.rng, _SEED_NAME) |
| 58 | + tree = opi.visit(tree) |
| 59 | + seed_used = seed_used or opi.injected |
| 60 | + if self.junk_branches: |
| 61 | + jbi = JunkBranchInjector(self.rng, _SEED_NAME) |
| 62 | + tree = jbi.visit(tree) |
| 63 | + seed_used = seed_used or jbi.injected |
| 64 | + if seed_used: |
| 65 | + _insert_runtime_stmts(tree, [build_seed_stmt(_SEED_NAME)]) |
| 66 | + if self.mba: |
| 67 | + tree = MBATransformer(self.rng).visit(tree) |
| 68 | + if self.obfuscate_numbers: |
| 69 | + tree = NumberObfuscator(self.rng).visit(tree) |
| 70 | + if self.encrypt_strings: |
| 71 | + enc = StringEncryptor(self.rng, _DEC_S_NAME, _DEC_B_NAME) |
| 72 | + tree = enc.visit(tree) |
| 73 | + _insert_runtime_stmts(tree, build_decrypt_helper(_DEC_S_NAME, _DEC_B_NAME)) |
| 74 | + if self.rename: |
| 75 | + renamer = IdentifierRenamer(self.rng, keep=skip | self.keep_extra | {_RESOLVE_NAME}) |
| 76 | + tree = renamer.visit(tree) |
| 77 | + ast.fix_missing_locations(tree) |
| 78 | + user_code = compile(tree, '<patchwork>', 'exec') |
| 79 | + if self.lazy_funcs: |
| 80 | + user_code, lazy_blobs = encrypt_user_functions(user_code, self.rng, _RESOLVE_NAME) |
| 81 | + else: |
| 82 | + lazy_blobs = [] |
| 83 | + user_payload, user_keys = pack(user_code, self.rng, layers=self.layers) |
| 84 | + return build_loader(user_payload, user_keys, lazy_blobs, resolver_name=_RESOLVE_NAME, rng=self.rng, anti_debug=self.anti_debug, stage2_layers=self.stage2_layers) |
| 85 | + |
| 86 | +def obfuscate(source: str, **kwargs) -> str: |
| 87 | + return Obfuscator(**kwargs).obfuscate(source) |
| 88 | + |
| 89 | +def obfuscate_file(input_path: str | Path, output_path: str | Path | None=None, **kwargs) -> Path: |
| 90 | + inp = Path(input_path) |
| 91 | + src = inp.read_text(encoding='utf-8') |
| 92 | + out = obfuscate(src, **kwargs) |
| 93 | + if output_path is None: |
| 94 | + outp = inp.with_name(inp.stem + '_obf.py') |
| 95 | + else: |
| 96 | + outp = Path(output_path) |
| 97 | + outp.write_text(out, encoding='utf-8') |
| 98 | + return outp |
0 commit comments