o 6[_@sdZddlmZdZdZdZgdZddlZddlZddl Z ddl Z ddl Z ddl Z ddlZeeur4eZzeZWneZYe djd krJdZne d jd krUd Zne d jd kr`d Zned zeWn eyseZYnwd ZejddkrdZndZejdfddZedZ ddZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ)dZ*dZ+dZ,dZ-d Z.dZ/dZ0dZ1dZ2dZ3dZ4d Z5dZ6dZ7d Z8d!Z9d"Z:d#Z;d$Zd'Z?d(Z@d)ZAd*ZBd+ZCd,ZDd-ZEd.ZFd/ZGd0ZHd1ZId2ZJd3ZKd4ZLd5ZMd6ZNd7ZOd8ZPd9ZQd:ZRd;ZSdZVd?ZWd@ZXdAZYdBZZd#Z[d,Z\d6Z]dCZ^dDZ_dEdFZ`eeurdGdHZandIdHZad]dJdKZbd]dLdMZcdNdOZddPdQZeGdRdSdSZfGdTdUdUejgZhGdVdWdWZiGdXdYdYZjdZd[Zkeld\kr_ekdSdS)^a: olefile (formerly OleFileIO_PL) Module to read/write Microsoft OLE2 files (also called Structured Storage or Microsoft Compound Document File Format), such as Microsoft Office 97-2003 documents, Image Composer and FlashPix files, Outlook messages, ... This version is compatible with Python 2.7 and 3.4+ Project website: https://www.decalage.info/olefile olefile is copyright (c) 2005-2018 Philippe Lagadec (https://www.decalage.info) olefile is based on the OleFileIO module from the PIL library v1.1.7 See: http://www.pythonware.com/products/pil/index.htm and http://svn.effbot.org/public/tags/pil-1.1.7/PIL/OleFileIO.py The Python Imaging Library (PIL) is Copyright (c) 1997-2009 by Secret Labs AB Copyright (c) 1995-2009 by Fredrik Lundh See source code and LICENSE.txt for information on usage and redistribution. )print_functionz 2018-09-09z0.46zPhilippe Lagadec) isOleFile OleFileIO OleMetadataenable_loggingMAGIC STGTY_EMPTYKEEP_UNICODE_NAMES STGTY_STREAM STGTY_STORAGE STGTY_ROOTSTGTY_PROPERTYSTGTY_LOCKBYTESMINIMAL_OLEFILE_SIZE DEFECT_UNSUREDEFECT_POTENTIALDEFECT_INCORRECT DEFECT_FATALDEFAULT_PATH_ENCODING MAXREGSECTDIFSECTFATSECT ENDOFCHAINFREESECT MAXREGSIDNOSTREAM UNKNOWN_SIZE WORD_CLSIDNLIiz>Need to fix a bug with 32 bit arrays, please contact author...Tzutf-8cCsL|tjjjvrt|}|||St|}|t|||S)an Create a suitable logger object for this module. The goal is not to change settings of the root logger, to avoid getting other modules' logs on the screen. If a logger exists with same name, reuse it. (Else it would have duplicate handlers and messages would be doubled.) The level is set to CRITICAL+1 by default, to avoid any logging. )loggingZLoggermanagerZ loggerDictZ getLoggersetLevelZ addHandlerZ NullHandler)namelevelloggerr*1/usr/lib/python3/dist-packages/olefile/olefile.py get_loggers    r,olefilecCsttjdS)z Enable logging for this module (disabled by default). This will set the module-specific logger level to NOTSET, which means the main application controls the actual logging level. N)logr&r$ZNOTSETr*r*r*r+rsrsࡱlllli @ABCDEFGHz$00020900-0000-0000-C000-000000000046(icCst|dr|tt}|dn0t|tr&t|tkr&|dtt}nt|d}|tt}Wdn1s=wY|tkrHdSdS)aJ Test if a file is an OLE container (according to the magic bytes in its header). .. note:: This function only checks the first 8 bytes of the file, not the rest of the OLE structure. .. versionadded:: 0.16 :param filename: filename, contents or file-like object of the OLE file (string-like or file-like object) - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read and seek methods), it is parsed as-is. :type filename: bytes or str or unicode or file :returns: True if OLE, False otherwise. :rtype: bool readrNrbTF) hasattrrVlenrseek isinstancebytesropen)filenameheaderfpr*r*r+rs   rcCst|SN)ordcr*r*r+i8?srecCs|jtur|S|dSNr) __class__intrcr*r*r+reCscCtd|||ddS)z Converts a 2-bytes (16 bits) string to an integer. :param c: string containing bytes to convert :param o: offset of bytes to convert in string z|_$t d|j$|j|jft&||_'|j tkr|j$dkr|t(dd|_)|j ttfvr+|j$dkr+|j$|j*kr |j tkr d|_)nd|_)|+|j|j)d|_,dS)aI Constructor for an OleDirectoryEntry object. Parses a 128-bytes entry from the OLE Directory stream. :param entry : string (must be 128 bytes long) :param sid : index of this directory entry in the OLE file directory :param olefile: OleFileIO containing this directory entry Fzunhandled OLE storage typerzduplicate OLE root entryzincorrect OLE root entryrKz(incorrect DirEntry name length >64 bytesNr0zDirEntry SID=%d: %sz - type: %dz - sect: %Xhz% - SID left: %d, right: %d, child: %dr/z+sectorsize=%d, sizeLow=%d, sizeHigh=%d (%X)zincorrect OLE stream size z% - size: %d (sizeLow=%d, sizeHigh=%d)zOLE storage with size>0T)-sidr-kids kids_dictusedrkrlrSTRUCT_DIRENTRYZname_rawZ namelength entry_typeZcolorsid_left sid_right sid_childZ dwUserFlags createTime modifyTime isectStartZsizeLowZsizeHighr r r rrrZ name_utf16_decode_utf16_strr'r.rrrrrlongrxrwr is_minifatminisectorcutoff_check_duplicate_stream sect_chain)rentryrr-rwr*r*r+rsv              zOleDirectoryEntry.__init__cCs|jrdS|jttfvs|jdkrdSt|_|jr!|js!||j }|t krB|j ||jr7|j|}n|j |}|t ks(dSdSrf) rrr r rlistrminifat loadminifatrrrr)rr-Z next_sectr*r*r+build_sect_chain-s    z"OleDirectoryEntry.build_sect_chaincCsFtd|jt|j|jf|jtkr!||j|j dSdS)z Read and build the red-black tree attached to this OleDirectoryEntry object, if it is a storage. Note that this method builds a tree of all subentries, so it should only be called for the root object once. z.build_storage_tree: SID=%d - %s - sid_child=%dN) r.rrrr'rr append_kidsrsortrr*r*r+build_storage_tree@s   z$OleDirectoryEntry.build_storage_treecCstd||tkr dS|dks|t|jjkr"|jtddS|j|}td|j t |j |j |j |jf|jrG|jtddSd|_||j |j }||jvra|jtd|j|||j|<||j |dS) a) Walk through red-black tree of children of this directory entry to add all of them to the kids list. (recursive method) :param child_sid: index of child directory entry to use, or None when called first time for the root. (only used during recursion) zappend_kids: child_sid=%dNrzOLE DirEntry index out of rangezHappend_kids: child_sid=%d - %s - sid_left=%d, sid_right=%d, sid_child=%dz#OLE Entry referenced more than onceTz!Duplicate filename in OLE storage)r.rrrYr- direntriesrr_load_direntryrrr'rrrrrlowerrrrr)rZ child_sidchildZ name_lowerr*r*r+rXs2        zOleDirectoryEntry.append_kidscCs |j|jkSzCompare entries by namer'rotherr*r*r+__eq__ zOleDirectoryEntry.__eq__cCs |j|jkSrrrr*r*r+__lt__rzOleDirectoryEntry.__lt__cCs || Sra)rrr*r*r+__ne__ zOleDirectoryEntry.__ne__cCs||p ||Sra)rrrr*r*r+__le__szOleDirectoryEntry.__le__rcCsgd}z||j}Wn tyd}Ynwtd|t|j|dd|jttfvr4t|jdddt|jttfvrL|j rLtd|d|j |j D] }| |dqOdS) zADump this entry, and all its subentries (for debug purposes only))z (invalid)z (storage)z(stream)z (lockbytes)z (property)z(root)z (UNKNOWN) endr\z{%s}r0N) rrrrr'r r rr rwrr)rtabZTYPES type_namekidr*r*r+rs  zOleDirectoryEntry.dumpcC|jdkrdSt|jS)z Return modification time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 rN)rr~rr*r*r+getmtime  zOleDirectoryEntry.getmtimecCr)z Return creation time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 rN)rr~rr*r*r+getctimerzOleDirectoryEntry.getctimeNr)rrrrrZ DIRENTRY_SIZErkcalcsizerrrrrrrr rrrr*r*r*r+rs b/  rc@sZeZdZdZdeddefddZddZdd Ze fd d Z dPd dZ dQddZ ddZ dQddZdRddZdRddZddZddZddZd d!Zd"d#ZdSd%d&ZdSd'd(Zd)d*Zd+d,Zd-d.Zedfd/d0ZdTd2d3ZdTd4d5Zd6d7Zd8d9Z d:d;Z!dd?Z#d@dAZ$dBdCZ%dDdEZ&dFdGZ'dHdIZ(dJdKZ)dUdLdMZ*dNdOZ+dS)Vra OLE container object This class encapsulates the interface to an OLE 2 structured storage file. Use the listdir and openstream methods to access the contents of this file. Object names are given as a list of strings, one for each subentry level. The root entry should be omitted. For example, the following code extracts all image streams from a Microsoft Image Composer file:: ole = OleFileIO("fan.mic") for entry in ole.listdir(): if entry[1:2] == "Image": fin = ole.openstream(entry) fout = open(entry[0:1], "wb") while True: s = fin.read(8192) if not s: break fout.write(s) You can use the viewer application provided with the Python Imaging Library to view the resulting files (which happens to be standard TIFF files). NFcCs ||_g|_||_||_d|_d|_g|_g|_d|_d|_ d|_ d|_ d|_ d|_ d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_!d|_"d|_#d|_$d|_%d|_&|r|j'||ddSdS)a Constructor for the OleFileIO class. :param filename: file to open. - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param raise_defects: minimal level for defects to be raised as exceptions. (use DEFECT_FATAL for a typical application, DEFECT_INCORRECT for a security-oriented application, see source code for details) :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. :param debug: bool, set debug mode (deprecated, not used anymore) :param path_encoding: None or str, name of the codec to use for path names (streams and storages), or None for Unicode. Unicode by default on Python 3+, UTF-8 on Python 2.x. (new in olefile 0.42, was hardcoded to Latin-1 until olefile v0.41) N) write_mode)(_raise_defects_levelparsing_issuesr path_encoding _filesize ministream_used_streams_fat_used_streams_minifat byte_order directory_fpr dll_versionrfirst_difat_sectorfirst_dir_sectorfirst_mini_fat_sectorr` header_clsidheader_signaturemetadatamini_sector_shiftmini_sector_sizemini_stream_cutoff_sizer minifatsectrminisectorsize minor_versionnb_sectnum_difat_sectorsnum_dir_sectorsnum_fat_sectorsnum_mini_fat_sectors reserved1 reserved2root sector_shift sector_sizetransaction_signature_numberr])rr^Z raise_defectsrrrr*r*r+rsVzOleFileIO.__init__cCs|Srar*rr*r*r+ __enter__6szOleFileIO.__enter__cGs |dSra)close)rargsr*r*r+__exit__:rzOleFileIO.__exit__cCs:||jkrt||||j||ft|dS)a This method should be called for any defect found during file parsing. It may raise an IOError exception according to the minimal level chosen for the OleFileIO object. :param defect_level: defect level, possible values are: - DEFECT_UNSURE : a case which looks weird, but not sure it's a defect - DEFECT_POTENTIAL : a potential defect - DEFECT_INCORRECT : an error according to specifications, but parsing can go on - DEFECT_FATAL : an error which cannot be ignored, parsing is impossible :param message: string describing the defect, used with raised exception. :param exception_type: exception class to be raised, IOError by default N)rr.errorrrwarning)rZ defect_levelmessageZexception_typer*r*r+r>s  zOleFileIO._raise_defectreplacecCs$|d|}|jr||j|S|S)a Decode a string encoded in UTF-16 LE format, as found in the OLE directory or in property streams. Return a string encoded according to the path_encoding specified for the OleFileIO object. :param utf16_str: bytes string encoded in UTF-16 LE format :param errors: str, see python documentation for str.decode() :return: str, encoded according to path_encoding zUTF-16LE)decoderencode)rZ utf16_strerrorsZ unicode_strr*r*r+rXs zOleFileIO._decode_utf16_strc Cs||_t|dr ||_n t|trt|tkrt||_n|jr$d}nd}t |||_d}|j dt j z |j }W|j dn|j dw||_td|j|jfg|_g|_|jd}t|dkss|ddtkrtd |ddtf|td d }t|}td ||d f|d|}t||\|_|_|_|_|_|_|_ |_!|_"|_#|_$|_%|_&|_'|_(|_)|_*|_+tt|||jtkr|td|jt,dkr|t-dtd|jtd|j|jdvr|t-dtd|j|jdkr|t-dd|j|_.td|j.|j.dvr3|t-d|jdkr?|j.dksK|jdkrQ|j.dkrQ|t-dd|j |_/td |j/|j/d!vrk|t-d"|j!dksw|j"dkr}|t-d#td$|j#|j.dkr|j#dkr|t-d%td&|j$td'|j%td(|j&|j&dkr|t0d)td*|j'|j'dkr|t-d+t1d,|j'd|_'td-|j(td.|j)td/|j*td0|j+||j.d1|j.d1|_2td2|j2|j2ft3|dd3|_|j.|_4|j/|_5|j'|_6|7|j%|j)r7|7|j(|j+rA|7|j*|8||9|j%|j(|_:dS)4a Open an OLE2 file in read-only or read/write mode. Read and parse the header, FAT and directory. :param filename: string-like or file-like object, OLE file to parse - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. (ignored if filename is not a path) rVzr+brWrzFile size: %d bytes (%Xh)rNr4zMagic = %r instead of %rz#not an OLE2 structured storage filez<8s16sHHHHHHLLLLLLLLLLzfmt_header size = %d, +FAT = %dizincorrect OLE signaturer;zincorrect CLSID in OLE headerzMinor Version = %dz%DLL Version = %d (expected: 3 or 4))r"rz"incorrect DllVersion in OLE headerz#Byte Order = %X (expected: FFFE)iz!incorrect ByteOrder in OLE headerr0z0Sector Size = %d bytes (expected: 512 or 4096))rrTz#incorrect sector_size in OLE headerr"rrTz3sector_size does not match DllVersion in OLE headerz/MiniFAT Sector Size = %d bytes (expected: 64))rKz(incorrect mini_sector_size in OLE headerz.incorrect OLE header (non-null reserved bytes)z Number of Directory sectors = %dz3incorrect number of directory sectors in OLE headerzNumber of FAT sectors = %dzFirst Directory sector = %Xhz$Transaction Signature Number = %dz5incorrect OLE header (transaction_signature_number>0)z/Mini Stream cutoff size = %Xh (expected: 1000h)z/incorrect mini_stream_cutoff_size in OLE headerzJFixing the mini_stream_cutoff_size to 4096 (mandatory value) instead of %dzFirst MiniFAT sector = %XhzNumber of MiniFAT sectors = %dzFirst DIFAT sector = %XhzNumber of DIFAT sectors = %dr#z/Maximum number of sectors in the file: %d (%Xh)rC);rrXr`r[r\rYrrrr]rZosSEEK_ENDtellrr.rrrrVrrrrkrrlr%r$r,r rr5r'r2r3r/r0r"r7r)r#r1r!r. bytearrayrr6r(rr=r-rxrr+rrloadfat loaddirectoryr*) rr^rmoderr_Z fmt_header header_sizeZheader1r*r*r+r]ks     '                             zOleFileIO.opencC|jdS)z@ close the OLE file, to release the file object N)r`r9rr*r*r+r9KzOleFileIO.closecCsh|r td||j}ntd||ttttfvrdS|j}||vr-|t ddS| |dS)ag Checks if a stream has not been already referenced elsewhere. This method should only be called once for each known stream, and only if stream size is not null. :param first_sect: int, index of first sector of the stream in FAT :param minifat: bool, if True, stream is located in the MiniFAT, else in the FAT z,_check_duplicate_stream: sect=%Xh in MiniFATz(_check_duplicate_stream: sect=%Xh in FATNzStream referenced twice) r.rrrrrrrrrr)rZ first_sectrZ used_streamsr*r*r+rRs z!OleFileIO._check_duplicate_streamrc Csd}tdtdtdtdi}t|}||d|}tddd t|D] }td |dd q"tt|D]G}||} td || dd t| | |D],}||krSn%||} | d @} | |vrd|| } n | |dkrmd } nd | } t| dd qKtq4dS)zU Display a part of FAT in human-readable form for debugging purposes r4z..free..z[ END. ]zFATSECT zDIFSECT r#indexr r %8X%6X:r/z --->N)rrrrrYrr) rr firstindexVPLZfatnamesnbsectnlinesr!lrMrZauxr'r*r*r+dumpfatls8     zOleFileIO.dumpfatc Csd}tt|}tjdkr|t|}||d|}tdddt|D] }td|ddq'tt|D]1}||} td|| ddt| | |D]}||krXn||} d| } t| ddqPtq9d S) zS Display a sector in a human-readable form, for debugging purposes r4bigr#rMr r rNrON)arrayUINT32sys byteorderbyteswaprYrr) rsectorrPrQr rRrSr!rTrMrr'r*r*r+dumpsects*     zOleFileIO.dumpsectcCs"tt|}tjdkr||S)z convert a sector to an array of 32 bits unsigned integers, swapping bytes on big endian CPUs such as PowerPC (old Macs) rV)rWrXrYrZr[)rrar*r*r+ sect2arrays  zOleFileIO.sect2arraycCst|tjr |}n||}ttjr||d}|D]-}|d@}td||t ks2|t kr:td|S| |}||}|j ||_ q|S)z Adds the indexes of the given sector to the FAT :param sect: string containing the first FAT sector, or array of long integers :returns: index of last FAT sector. Nr/z isect = %Xzfound end of sector chain) r[rWr_r. isEnabledForr$DEBUGr]rrrgetsectr)rrZfat1ZisectsZnextfatr*r*r+ loadfat_sects"      zOleFileIO.loadfat_sectc Cstd|dd}tdt|t|dftt|_|||jdkrtd|jdkr:| t d |j |j krF| t d td |jdd }|jd|d |}td ||j|krmtd|j }t|D]4}td||f||}||}ttjr||||d|||}td|qt|ttfvrtdntdt|j|j krtdt|j|j f|jd|j |_tdt|j|j fttjrtd||jdSdS)z% Load the FAT table. zDLoading the FAT table, starting with the 1st sector after the headerLrzlen(sect)=%d, so %d integersrrz)DIFAT is used, because file size > 6.8MB.mz#incorrect DIFAT, not enough sectorsz)incorrect DIFAT, first index out of rangezDIFAT analysis...r#z nb_difat = %dzincorrect DIFATzDIFAT block %d, sector %XNznext DIFAT sector: %Xzincorrect end of DIFATz$No DIFAT, because file size < 6.8MB.z!len(fat)=%d, shrunk to nb_sect=%dz6FAT references %d sectors / Maximum %d sectors in filez FAT:)r.rrYrWrXrrdr.r0rrr!r-rrIOError iterrangerbr_r`r$rar]rrrU) rr_rZnb_difat_sectorsZnb_difatZ isect_difatr!Z sector_difatZdifatr*r*r+rGsN                   zOleFileIO.loadfatcCs|j|j}|jj|jd|j}|d}td|j|j|||f||kr.|t d|j |j|dd }| ||_ tdt|j |f|j d||_ td t|j ttjrptd ||j dSdS) z) Load the MiniFAT table. r#rzaloadminifat(): minifatsect=%d, nb FAT sectors=%d, used_size=%d, stream_size=%d, nb MiniSectors=%dz%OLE MiniStream is larger than MiniFATT force_FATz$MiniFAT shrunk from %d to %d sectorsNzloadminifat(): len=%dz MiniFAT:)r1r6r4rr(r.rr*rr_openrVr_rrYr`r$rarU)rZ stream_sizeZnb_minisectorsZ used_sizercr*r*r+r.s"     zOleFileIO.loadminifatc Csz |j|j|dWntd||j|d|jf|tdY|j|j}t ||jkrItd|t ||jf|td|S)z Read given sector from file on disk. :param sect: int, sector index :returns: a string containing the sector data. r#z(getsect(): sect=%X, seek=%d, filesize=%drz*getsect(): sect=%X, read=%d, sectorsize=%dr) r`rZrr.rrrrrVrY)rrr\r*r*r+rbRs zOleFileIO.getsectrrc Cst|ts tdt|trt|dkrtdz |j|j|dWntd||j|d|j f| t dYt||jkrS|||jt|7}n t||jkr^t d|j |dS)z Write given sector to file on disk. :param sect: int, sector index :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z'write_sect: data must be a bytes stringr#z4write_sect: padding must be a bytes string of 1 charz+write_sect(): sect=%X, seek=%d, filesize=%drData is larger than sector sizeN)r[r\ TypeErrorrYr`rZrr.rrrr ValueErrorwrite)rrrpaddingr*r*r+ write_sectrs zOleFileIO.write_sectcCst|ts tdt|trt|dkrtdz|j|Wntd||jf| t dYt|}||j krG|||j |7}|j |krPt d|j |dS)z Write given sector to file on disk. :param fp_pos: int, file position :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z,write_mini_sect: data must be a bytes stringr#z9write_mini_sect: padding must be a bytes string of 1 charz)write_mini_sect(): fp_pos=%d, filesize=%drrlN)r[r\rmrYr`rZr.rrrrr(rnro)rfp_posrrpZlen_datar*r*r+_write_mini_sects"   zOleFileIO._write_mini_sectcCsltd|j|dd|_|jjd}td|jj|fdg||_|d}|jd|_|jdS)z] Load the directory. :param sect: sector index of directory stream. zLoading the Directory:Trirz&loaddirectory: size=%d, max_entries=%dNr) r.rrkrrrrr4r)rrZ max_entriesZ root_entryr*r*r+rHs      zOleFileIO.loaddirectorycCs~|dks |t|jkr|td|j|dur#|td|j|S|j|d|jd}t||||j|<|j|S)aY Load a directory entry from the directory. This method should only be called once for each storage/stream when loading the directory. :param sid: index of storage/stream in the directory. :returns: a OleDirectoryEntry object :exception IOError: if the entry has always been referenced. rz OLE directory index out of rangeNz'double reference for OLE stream/storager) rYrrrrrrZrVr)rrrr*r*r+rs    zOleFileIO._load_direntrycCrK)z5 Dump directory (for debugging only) N)r4rrr*r*r+ dumpdirectoryrLzOleFileIO.dumpdirectoryc Cstd||t|f||jkrE|sE|js4||jj}td|jj|f|j |jj|dd|_t |j||d|j |j |jj|dSt |j |||j|j|j|j|dS)a| Open a stream, either in FAT or MiniFAT according to its size. (openstream helper) :param start: index of first sector :param size: size of stream (or nothing if size is unknown) :param force_FAT: if False (default), stream will be opened in FAT or MiniFAT according to size. If True, it will always be opened in FAT. z1OleFileIO.open(): sect=%Xh, size=%d, force_FAT=%sz%Opening MiniStream: sect=%Xh, size=%dTrir)r`rrrrrrr)r.rstrrrrr4rrrkrr+rr`rrr)rstartrrjZsize_ministreamr*r*r+rks0      zOleFileIO._openTcCs||jg}|jD];}|jtkr)|r||dd|jg||||||q |jtkr>|r=||dd|jgq |tdq dS)a listdir helper :param files: list of files to fill in :param prefix: current location in storage tree (list of names) :param node: current node (OleDirectoryEntry object) :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) r#NzIThe directory tree contains an entry which is not a stream nor a storage.) r'rrr r_listr rr)rfilesprefixnodestreamsstoragesrr*r*r+rws   zOleFileIO._listcCsg}||g|j|||S)am Return a list of streams and/or storages stored in this file :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) :returns: list of stream and/or storage paths )rwr4)rr{r|rxr*r*r+listdir3s zOleFileIO.listdircCsXt|tr |d}|j}|D]}|jD] }|j|kr!nqtd|}q|jS)a* Returns directory entry of given filename. (openstream helper) Note: this method is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: sid of requested filename :exception IOError: if file not found /zfile not found) r[ basestringsplitr4rr'rrgr)rr^rzr'rr*r*r+_findAs   zOleFileIO._findcCs6||}|j|}|jtkrtd||j|jS)a; Open a stream as a read-only file object (BytesIO). Note: filename is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: file object (read-only) :exception IOError: if filename not found, or if this is not a stream. zthis file is not a stream)rrrr rgrkrrrr^rrr*r*r+ openstreamas   zOleFileIO.openstreamc Cs|js||t|j}|jjs|j||j|j}t|jD]@\}}||}||}|jj|d|j||j} ||dkrS|||j|d|j} n |||jd} || | q"dS)Nr#)rrrYr4r6r( enumeraters) rr data_to_writerZ block_sizeidxrZ sect_baseZ sect_offsetrrZdata_per_sectorr*r*r+_write_mini_streamvs      zOleFileIO._write_mini_streamc Cszt|ts td||}|j|}|jtkrtd|j}|t |kr)t d||j kr:|jt kr:|j ||dS|j}||jd|j}td|t|D]`}||dkrr|||j|d|j} t | |jksqJn(|||jd} td||jt | ||jft | |j||jksJ||| z|j|}WqRtytd w|tkrtd dS) aD Write a stream to disk. For now, it is only possible to replace an existing stream by data of the same size. :param stream_name: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :param data: bytes, data to be written, must be the same size as the original stream. z)write_stream: data must be a bytes stringzthis is not a streamz?write_stream: data must be the same size as the existing stream)rrr#rNzGwrite_stream: size=%d sectorsize=%d data_sector=%Xh size%%sectorsize=%drz)incorrect last sector index in OLE stream)r[r\rmrrrr rgrrYrnrr rrrr.rrrqrrr) rZ stream_namerrrrrrr!Z data_sectorr*r*r+ write_streams@         zOleFileIO.write_streamcCs*z||}|j|}|jWSYdS)a Test if given filename exists as a stream or a storage in the OLE container, and return its type. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: False if object does not exist, its entry type (>0) otherwise: - STGTY_STREAM: a stream - STGTY_STORAGE: a storage - STGTY_ROOT: the root entry F)rrrrr*r*r+get_types   zOleFileIO.get_typecCs||}|j|}|jS)a Return clsid of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: Empty string if clsid is null, a printable representation of the clsid otherwise new in version 0.44 )rrrwrr*r*r+getclsids zOleFileIO.getclsidcC||}|j|}|S)a9 Return modification time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )rrrrr*r*r+r zOleFileIO.getmtimecCr)a1 Return creation time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if creation time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )rrrrr*r*r+rrzOleFileIO.getctimecCsz||}WdSYdS)a Test if given filename exists as a stream or a storage in the OLE container. Note: filename is case-insensitive. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: True if object exist, else False. TF)r)rr^rr*r*r+r s  zOleFileIO.existscCs,||}|j|}|jtkrtd|jS)a2 Return size of a stream in the OLE container, in bytes. :param filename: path of stream in storage tree (see openstream for syntax) :returns: size in bytes (long integer) :exception IOError: if file not found :exception TypeError: if this is not a stream. zobject is not an OLE stream)rrrr rmrrr*r*r+get_sizes  zOleFileIO.get_sizecCs|jjS)zp Return root entry name. Should usually be 'Root Entry' or 'R' in most implementations. )r4r'rr*r*r+get_rootentry_name*szOleFileIO.get_rootentry_namec Cs2|dkrg}|}t|tsd|}||}i}z7|d}t|dd}|d}t|dd} |t|dd|t|d d }t|d } Wn%tyu} zd t || f} | t | t | |WYd} ~ Sd} ~ wwt | tt|d} t| D]} d }zft|d| d}t|d | d}t||}td |||f|tkrt||d }|dkr|d}n*|tkrt||d }n|tttfvrt||d }n |ttfvrt||d }n|ttfvrt||d }||d|d|d}|dd}n|tkr)t||d }||d|d|}n|tkrGt||d }| ||d|d|d}n|t!krt"t||d t"t||dd>}|r||vrtd||t#|dft$$dddd d d }td|d|t$j%|dd}nX|d}nS|t&krt'||d }nE|t(krt||d |d}n3|t)krt||d }||d|d|}n|t*krt+t||d }n d}td||f|||<Wqty} zd|t || f} | t | t | WYd} ~ qd} ~ ww|S)a Return properties described in substream. :param filename: path of stream in storage tree (see openstream for syntax) :param convert_time: bool, if True timestamps will be converted to Python datetime :param no_conversion: None or list of int, timestamps not to be converted (for example total editing time is not a real timestamp) :returns: a dictionary of values indexed by id (integer) Nr~rGr4rCr?r;s****rz6Error while parsing properties header in stream %s: %srr8z!property id=%d: type=%d offset=%Xiir#rrrr0rz8Converting property #%d to python datetime, value=%d=%fsiryztimedelta days=%dl@T$r6rzz5property id=%d: type=%d not implemented in parser yetz3Error while parsing property id %d in stream %s: %s),r[rurrrVrxrZrq BaseExceptionrrrtypeminrhrYrhr.rVT_I2roVT_UI2VT_I4VT_INTVT_ERRORVT_UI4VT_UINTVT_BSTRVT_LPSTRr?VT_BLOB VT_LPWSTRr VT_FILETIMErfloatr{r|VT_UI1reVT_CLSIDVT_CFVT_BOOLbool)rr^rrZ streampathr`rrcrwZfmtidZ num_propsexcmsgr!Z property_idrZ property_typercountr}r*r*r+r2s           $ (       zOleFileIO.getpropertiescCst|_|j||jS)z Parse standard properties streams, return an OleMetadata object containing all the available metadata. (also stored in the metadata attribute of the OleFileIO object) new in version 0.25 )rr&rrr*r*r+ get_metadatas zOleFileIO.get_metadata)r?)Fr)rr)TF)FN),rrrrrrrr8r;rgrrr]r9rrUr]r_rdrGrrbrqrsrHrrtrrkrwr}rrrrrrrrrrrrrr*r*r*r+rsT M   a   % $T$ ) &  >  rc Csddl}ddl}d}tjtjtjtjtjd}d}|j|d}|j ddd d d |j d dd dd |j dddd|dd| \}}t dt t ft|dkr\t t|||jrbd|_tj||jddt|D]M}z>t|} t dt |t d| | D]`} | dddkrt d| zC| j| dd} t| } | D]1\} } t| ttfrt| dkr| dd} t| trd D] }|t| vrd!} nqt d"| | qWqt !d#| Yqq|j"r-t d$| D].} t d%t#d&$| d%d'd(| %| }|t&kr#t d)| '| | (| qt d*|qt t d+| j)D]}|durIt d,|j*|+|,fq4t z | -}|.Wn t !d-Yt | /}t d.|| 0d/rt d0t d1| %d/t d2| 'd/| 0d3rt d4t d5| j1r| j1D]\}}t d6|j2|fqnt d7Wqqt !d8|YqqdS)9z Main function when olefile is runs as a script from the command line. This will open an OLE2 file and display its structure and properties :return: nothing rNr=)rinfor=r<Zcriticalz1usage: %prog [options] [filename2 ...])usagez-c store_true check_streamsz*check all streams (for debugging purposes))actiondesthelpz-d debug_modez\debug mode, shortcut for -l debug (displays a lot of debug information, for developers only)z-lz --loglevelloglevelstorezBlogging level debug/info/warning/error/critical (default=%default))rrdefaultrz=olefile version %s %s - https://www.decalage.info/en/olefile rz%(levelname)-8s %(message)s)r(formatzD--------------------------------------------------------------------z%r: propertiesTr2)r#r0r"rr1r2r3r7r8r:r;r<r=r>r?r@rArBrCrDrErFrGrHrIrJz (binary data)z z&Error while parsing property stream %rz Checking streams...-r~r r zsize %dzNOT a stream : type=%dz5Modification/Creation times of all directory entries:z- %s: mtime=%s ctime=%szError while parsing metadatazRoot entry name: "%s"Z worddocumentzThis is a Word document.ztype of stream 'WordDocument':zsize :z macros/vbaz%This document may contain VBA macros.z( Non-fatal issues raised during parsing:rNonezError while parsing file %r)3rYoptparser$raINFOZWARNINGZERRORCRITICALZ OptionParserZ add_option parse_argsr __version____date__rYr print_helpexitrrZ basicConfigrrrtr}rsorteditemsr[rr\rFr.Z exceptionrrrrr rrrr'rrrrrrrr)rYrZDEFAULT_LOG_LEVELZ LOG_LEVELSrparseroptionsr:r^rZ streamnamerkvrdZst_typermetar4exctyperr*r*r+mains                           r__main__r)mrZ __future__rrr __author____all__rrYrkrWos.pathrCr{r$rur\rhrZxrangerhritemsizerXrnr NameErrorr version_inforrr,r.rrrrrrrrrrr r rr r rZVT_EMPTYZVT_NULLrrZVT_R4ZVT_R8ZVT_CYZVT_DATErZ VT_DISPATCHrrZ VT_VARIANTZ VT_UNKNOWNZ VT_DECIMALZVT_I1rrrZVT_I8ZVT_UI8rrZVT_VOIDZ VT_HRESULTZVT_PTRZ VT_SAFEARRAYZ VT_CARRAYZVT_USERDEFINEDrrrrZ VT_STREAMZ VT_STORAGEZVT_STREAMED_OBJECTZVT_STORED_OBJECTZVT_BLOB_OBJECTrrZ VT_VECTORrrrrrrrrerorqrxr~rrrrrrrr*r*r*r+s < (     *    "