JOSHWI~1.PDF

1、#BHUSA BlackHatEventsPyLingualPyLingual:A Python:A Python DecompilationDecompilation Framework for Framework for Evolving Python VersionsEvolving Python VersionsJosh Wiedemeier#BHUSA BlackHatEventsHello!AWS Logo PNG Transparent Images-PNG AllSang Kil ChaMuhyun KimElliot TarbetSimon LiuJessica Ouyang

2、Kangkook JeeJosh WiedemeierJerry TengMax Zheng#BHUSA BlackHatEventsPython is PopularSource:PYPL#BHUSA BlackHatEventsPeople Use It to Make Malware#BHUSA BlackHatEventsHeres One6 LOAD_GLOBAL 1(getpass)8 LOAD_METHOD 2(getuser)10 CALL_METHOD 0(0 positional arguments)12 STORE_FAST 0(username)14 LOAD_GLOB

3、AL 3(os)16 LOAD_ATTR 4(path)18 LOAD_METHOD 5(join)20 LOAD_GLOBAL 6(tempfile)22 LOAD_METHOD 7(gettempdir)24 CALL_METHOD 0(0 positional arguments)26 LOAD_CONST 1(yh)28 CALL_METHOD 2(2 positional arguments)30 STORE_FAST 1(temp_dir)32 LOAD_GLOBAL 3(os)34 LOAD_ATTR 4(path)36 LOAD_METHOD 8(exists)38 LOAD_

4、FAST 1(temp_dir)40 CALL_METHOD 1(1 positional argument)42 POP_JUMP_IF_TRUE 27(to 54)44 LOAD_GLOBAL 3(os)46 LOAD_METHOD 9(makedirs)48 LOAD_FAST 1(temp_dir)50 CALL_METHOD 1(1 positional argument)52 POP_TOP54 LOAD_CONST 2(https:/ STORE_FAST 2(zip_url)58 LOAD_GLOBAL 3(os)60 LOAD_ATTR 4(path)62 LOAD_METH

5、OD 5(join)64 LOAD_FAST 1(temp_dir)66 LOAD_CONST 3(yh.zip)68 CALL_METHOD 2(2 positional arguments)70 STORE_FAST 3(zip_file)72 LOAD_GLOBAL 3(os)74 LOAD_ATTR 4(path)76 LOAD_METHOD 5(join)78 LOAD_FAST 1(temp_dir)80 LOAD_CONST 4(download)82 CALL_METHOD 2(2 positional arguments)84 STORE_FAST 4(download_di

6、r)86 LOAD_GLOBAL 3(os)88 LOAD_ATTR 4(path)90 LOAD_METHOD 8(exists)92 LOAD_FAST 4(download_dir)94 CALL_METHOD 1(1 positional argument)96 POP_JUMP_IF_TRUE 54(to 108)98 LOAD_GLOBAL 3(os)100 LOAD_METHOD 9(makedirs)102 LOAD_FAST 4(download_dir)104 CALL_METHOD 1(1 positional argument)106 POP_TOP108 SETUP_