o 6[_@sdZddlmZdZdZdZgdZddlZddlZddl Z ddl Z ddl Z ddl Z ddlZeeur4eZzeZWneZYe djd krJdZne d jd krUd Zne d jd kr`d Zned zeWn eyseZYnwd ZejddkrdZndZejdfddZedZ ddZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ)dZ*dZ+dZ,dZ-d Z.dZ/dZ0dZ1dZ2dZ3dZ4d Z5dZ6dZ7d Z8d!Z9d"Z:d#Z;d$Zd'Z?d(Z@d)ZAd*ZBd+ZCd,ZDd-ZEd.ZFd/ZGd0ZHd1ZId2ZJd3ZKd4ZLd5ZMd6ZNd7ZOd8ZPd9ZQd:ZRd;ZSdZVd?ZWd@ZXdAZYdBZZd#Z[d,Z\d6Z]dCZ^dDZ_dEdFZ`eeurdGdHZandIdHZad]dJdKZbd]dLdMZcdNdOZddPdQZeGdRdSdSZfGdTdUdUejgZhGdVdWdWZiGdXdYdYZjdZd[Zkeld\kr_ekdSdS)^a: olefile (formerly OleFileIO_PL) Module to read/write Microsoft OLE2 files (also called Structured Storage or Microsoft Compound Document File Format), such as Microsoft Office 97-2003 documents, Image Composer and FlashPix files, Outlook messages, ... This version is compatible with Python 2.7 and 3.4+ Project website: https://www.decalage.info/olefile olefile is copyright (c) 2005-2018 Philippe Lagadec (https://www.decalage.info) olefile is based on the OleFileIO module from the PIL library v1.1.7 See: http://www.pythonware.com/products/pil/index.htm and http://svn.effbot.org/public/tags/pil-1.1.7/PIL/OleFileIO.py The Python Imaging Library (PIL) is Copyright (c) 1997-2009 by Secret Labs AB Copyright (c) 1995-2009 by Fredrik Lundh See source code and LICENSE.txt for information on usage and redistribution. )print_functionz 2018-09-09z0.46zPhilippe Lagadec) isOleFile OleFileIO OleMetadataenable_loggingMAGIC STGTY_EMPTYKEEP_UNICODE_NAMES STGTY_STREAM STGTY_STORAGE STGTY_ROOTSTGTY_PROPERTYSTGTY_LOCKBYTESMINIMAL_OLEFILE_SIZE DEFECT_UNSUREDEFECT_POTENTIALDEFECT_INCORRECT DEFECT_FATALDEFAULT_PATH_ENCODING MAXREGSECTDIFSECTFATSECT ENDOFCHAINFREESECT MAXREGSIDNOSTREAM UNKNOWN_SIZE WORD_CLSIDNLIiz>Need to fix a bug with 32 bit arrays, please contact author...Tzutf-8cCsL|tjjjvrt|}|||St|}|t|||S)an Create a suitable logger object for this module. The goal is not to change settings of the root logger, to avoid getting other modules' logs on the screen. If a logger exists with same name, reuse it. (Else it would have duplicate handlers and messages would be doubled.) The level is set to CRITICAL+1 by default, to avoid any logging. )loggingLoggermanager loggerDict getLoggersetLevel addHandler NullHandler)namelevelloggerr/1/usr/lib/python3/dist-packages/olefile/olefile.py get_loggers    r1olefilecCsttjdS)z Enable logging for this module (disabled by default). This will set the module-specific logger level to NOTSET, which means the main application controls the actual logging level. N)logr)r$NOTSETr/r/r/r0rsrsࡱlllli @ABCDEFGHz$00020900-0000-0000-C000-000000000046(icCst|dr|tt}|dn0t|tr&t|tkr&|dtt}nt|d}|tt}Wdn1s=wY|tkrHdSdS)aJ Test if a file is an OLE container (according to the magic bytes in its header). .. note:: This function only checks the first 8 bytes of the file, not the rest of the OLE structure. .. versionadded:: 0.16 :param filename: filename, contents or file-like object of the OLE file (string-like or file-like object) - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read and seek methods), it is parsed as-is. :type filename: bytes or str or unicode or file :returns: True if OLE, False otherwise. :rtype: bool readrNrbTF) hasattrr\lenrseek isinstancebytesropen)filenameheaderfpr/r/r0rs   rcCst|SN)ordcr/r/r0i8?srkcCs|jtur|S|dSNr) __class__intrir/r/r0rkCscCtd|||ddS)z Converts a 2-bytes (16 bits) string to an integer. :param c: string containing bytes to convert :param o: offset of bytes to convert in string z|_$t d|j$|j|jft&||_'|j tkr|j$dkr|t(dd|_)|j ttfvr+|j$dkr+|j$|j*kr |j tkr d|_)nd|_)|+|j|j)d|_,dS)aI Constructor for an OleDirectoryEntry object. Parses a 128-bytes entry from the OLE Directory stream. :param entry : string (must be 128 bytes long) :param sid : index of this directory entry in the OLE file directory :param olefile: OleFileIO containing this directory entry Fzunhandled OLE storage typerzduplicate OLE root entryzincorrect OLE root entryrQz(incorrect DirEntry name length >64 bytesNr6zDirEntry SID=%d: %sz - type: %dz - sect: %Xhz% - SID left: %d, right: %d, child: %dr5z+sectorsize=%d, sizeLow=%d, sizeHigh=%d (%X)zincorrect OLE stream size z% - size: %d (sizeLow=%d, sizeHigh=%d)zOLE storage with size>0T)-sidr2kids kids_dictusedrqrrrSTRUCT_DIRENTRYname_raw namelength entry_typecolorsid_left sid_right sid_child dwUserFlags createTime modifyTime isectStartsizeLowsizeHighr r r rrr name_utf16_decode_utf16_strr,r3rrrrrlongr~r}r is_minifatminisectorcutoff_check_duplicate_stream sect_chain)rentryrr2r}r/r/r0rst               zOleDirectoryEntry.__init__cCs|jrdS|jttfvs|jdkrdSt|_|jr!|js!||j }|t krB|j ||jr7|j|}n|j |}|t ks(dSdSrl) rrr r rlistrminifat loadminifatrrrr)rr2 next_sectr/r/r0build_sect_chain-s    z"OleDirectoryEntry.build_sect_chaincCsFtd|jt|j|jf|jtkr!||j|j dSdS)z Read and build the red-black tree attached to this OleDirectoryEntry object, if it is a storage. Note that this method builds a tree of all subentries, so it should only be called for the root object once. z.build_storage_tree: SID=%d - %s - sid_child=%dN) r3rrrr,rr append_kidsrsortrr/r/r0build_storage_tree@s   z$OleDirectoryEntry.build_storage_treecCstd||tkr dS|dks|t|jjkr"|jtddS|j|}td|j t |j |j |j |jf|jrG|jtddSd|_||j |j }||jvra|jtd|j|||j|<||j |dS) a) Walk through red-black tree of children of this directory entry to add all of them to the kids list. (recursive method) :param child_sid: index of child directory entry to use, or None when called first time for the root. (only used during recursion) zappend_kids: child_sid=%dNrzOLE DirEntry index out of rangezHappend_kids: child_sid=%d - %s - sid_left=%d, sid_right=%d, sid_child=%dz#OLE Entry referenced more than onceTz!Duplicate filename in OLE storage)r3rrr_r2 direntriesrr_load_direntryrrr,rrrrr lowerrrrr)r child_sidchild name_lowerr/r/r0r Xs2        zOleDirectoryEntry.append_kidscCs |j|jkSzCompare entries by namer,rotherr/r/r0__eq__ zOleDirectoryEntry.__eq__cCs |j|jkSrrrr/r/r0__lt__rzOleDirectoryEntry.__lt__cCs || Srg)rrr/r/r0__ne__ zOleDirectoryEntry.__ne__cCs||p ||Srg)rrrr/r/r0__le__szOleDirectoryEntry.__le__rcCsgd}z||j}Wn tyd}Ynwtd|t|j|dd|jttfvr4t|jdddt|jttfvrL|j rLtd|d|j |j D] }| |dqOdS) zADump this entry, and all its subentries (for debug purposes only))z (invalid)z (storage)z(stream)z (lockbytes)z (property)z(root)z (UNKNOWN) endrbz{%s}r6N) rrrrr,r r rr r}rr)rtabTYPES type_namekidr/r/r0rs  zOleDirectoryEntry.dumpcC|jdkrdSt|jS)z Return modification time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 rN)rrrr/r/r0getmtime  zOleDirectoryEntry.getmtimecCr')z Return creation time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 rN)rrrr/r/r0getctimer)zOleDirectoryEntry.getctimeNr)rrrrr DIRENTRY_SIZErqcalcsizerr rr rrrrrr(r*r/r/r/r0rs b/  rc@sZeZdZdZdeddefddZddZdd Ze fd d Z dPd dZ dQddZ ddZ dQddZdRddZdRddZddZddZddZd d!Zd"d#ZdSd%d&ZdSd'd(Zd)d*Zd+d,Zd-d.Zedfd/d0ZdTd2d3ZdTd4d5Zd6d7Zd8d9Z d:d;Z!dd?Z#d@dAZ$dBdCZ%dDdEZ&dFdGZ'dHdIZ(dJdKZ)dUdLdMZ*dNdOZ+dS)Vra OLE container object This class encapsulates the interface to an OLE 2 structured storage file. Use the listdir and openstream methods to access the contents of this file. Object names are given as a list of strings, one for each subentry level. The root entry should be omitted. For example, the following code extracts all image streams from a Microsoft Image Composer file:: ole = OleFileIO("fan.mic") for entry in ole.listdir(): if entry[1:2] == "Image": fin = ole.openstream(entry) fout = open(entry[0:1], "wb") while True: s = fin.read(8192) if not s: break fout.write(s) You can use the viewer application provided with the Python Imaging Library to view the resulting files (which happens to be standard TIFF files). NFcCs ||_g|_||_||_d|_d|_g|_g|_d|_d|_ d|_ d|_ d|_ d|_ d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_!d|_"d|_#d|_$d|_%d|_&|r|j'||ddSdS)a Constructor for the OleFileIO class. :param filename: file to open. - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param raise_defects: minimal level for defects to be raised as exceptions. (use DEFECT_FATAL for a typical application, DEFECT_INCORRECT for a security-oriented application, see source code for details) :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. :param debug: bool, set debug mode (deprecated, not used anymore) :param path_encoding: None or str, name of the codec to use for path names (streams and storages), or None for Unicode. Unicode by default on Python 3+, UTF-8 on Python 2.x. (new in olefile 0.42, was hardcoded to Latin-1 until olefile v0.41) N) write_mode)(_raise_defects_levelparsing_issuesr. path_encoding _filesize ministream_used_streams_fat_used_streams_minifat byte_order directory_fpr dll_versionrfirst_difat_sectorfirst_dir_sectorfirst_mini_fat_sectorrf header_clsidheader_signaturemetadatamini_sector_shiftmini_sector_sizemini_stream_cutoff_sizer  minifatsectrminisectorsize minor_versionnb_sectnum_difat_sectorsnum_dir_sectorsnum_fat_sectorsnum_mini_fat_sectors reserved1 reserved2root sector_shift sector_sizetransaction_signature_numberrc)rrd raise_defectsr.rr1r/r/r0rsVzOleFileIO.__init__cCs|Srgr/rr/r/r0 __enter__6szOleFileIO.__enter__cGs |dSrg)close)rargsr/r/r0__exit__:rzOleFileIO.__exit__cCs:||jkrt||||j||ft|dS)a This method should be called for any defect found during file parsing. It may raise an IOError exception according to the minimal level chosen for the OleFileIO object. :param defect_level: defect level, possible values are: - DEFECT_UNSURE : a case which looks weird, but not sure it's a defect - DEFECT_POTENTIAL : a potential defect - DEFECT_INCORRECT : an error according to specifications, but parsing can go on - DEFECT_FATAL : an error which cannot be ignored, parsing is impossible :param message: string describing the defect, used with raised exception. :param exception_type: exception class to be raised, IOError by default N)r/r3errorr0rwarning)r defect_levelmessageexception_typer/r/r0r>s  zOleFileIO._raise_defectreplacecCs$|d|}|jr||j|S|S)a Decode a string encoded in UTF-16 LE format, as found in the OLE directory or in property streams. Return a string encoded according to the path_encoding specified for the OleFileIO object. :param utf16_str: bytes string encoded in UTF-16 LE format :param errors: str, see python documentation for str.decode() :return: str, encoded according to path_encoding zUTF-16LE)decoder1encode)r utf16_strerrors unicode_strr/r/r0rXs zOleFileIO._decode_utf16_strc Cs||_t|dr ||_n t|trt|tkrt||_n|jr$d}nd}t |||_d}|j dt j z |j }W|j dn|j dw||_td|j|jfg|_g|_|jd}t|dkss|ddtkrtd |ddtf|td d }t|}td ||d f|d|}t||\|_|_|_|_|_|_|_ |_!|_"|_#|_$|_%|_&|_'|_(|_)|_*|_+tt|||jtkr|td|jt,dkr|t-dtd|jtd|j|jdvr|t-dtd|j|jdkr|t-dd|j|_.td|j.|j.dvr3|t-d|jdkr?|j.dksK|jdkrQ|j.dkrQ|t-dd|j |_/td |j/|j/d!vrk|t-d"|j!dksw|j"dkr}|t-d#td$|j#|j.dkr|j#dkr|t-d%td&|j$td'|j%td(|j&|j&dkr|t0d)td*|j'|j'dkr|t-d+t1d,|j'd|_'td-|j(td.|j)td/|j*td0|j+||j.d1|j.d1|_2td2|j2|j2ft3|dd3|_|j.|_4|j/|_5|j'|_6|7|j%|j)r7|7|j(|j+rA|7|j*|8||9|j%|j(|_:dS)4a Open an OLE2 file in read-only or read/write mode. Read and parse the header, FAT and directory. :param filename: string-like or file-like object, OLE file to parse - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. (ignored if filename is not a path) r\zr+br]rzFile size: %d bytes (%Xh)rNr:zMagic = %r instead of %rz#not an OLE2 structured storage filez<8s16sHHHHHHLLLLLLLLLLzfmt_header size = %d, +FAT = %dizincorrect OLE signaturerAzincorrect CLSID in OLE headerzMinor Version = %dz%DLL Version = %d (expected: 3 or 4))r"rz"incorrect DllVersion in OLE headerz#Byte Order = %X (expected: FFFE)iz!incorrect ByteOrder in OLE headerr6z0Sector Size = %d bytes (expected: 512 or 4096))rrZz#incorrect sector_size in OLE headerr"rrZz3sector_size does not match DllVersion in OLE headerz/MiniFAT Sector Size = %d bytes (expected: 64))rQz(incorrect mini_sector_size in OLE headerz.incorrect OLE header (non-null reserved bytes)z Number of Directory sectors = %dz3incorrect number of directory sectors in OLE headerzNumber of FAT sectors = %dzFirst Directory sector = %Xhz$Transaction Signature Number = %dz5incorrect OLE header (transaction_signature_number>0)z/Mini Stream cutoff size = %Xh (expected: 1000h)z/incorrect mini_stream_cutoff_size in OLE headerzJFixing the mini_stream_cutoff_size to 4096 (mandatory value) instead of %dzFirst MiniFAT sector = %XhzNumber of MiniFAT sectors = %dzFirst DIFAT sector = %XhzNumber of DIFAT sectors = %dr#z/Maximum number of sectors in the file: %d (%Xh)rI);r.r^rfrarbr_rrrrcr`osSEEK_ENDtellr2r3rr4r5r\rrrrqr-rrr=r<rDr8r6rMr?rJrKrGrHr:rOrAr;rIr9rF bytearrayrrNr@rrVrEr~rrCrrloadfat loaddirectoryrB) rrdr.moderre fmt_header header_sizeheader1r/r/r0rcks     '                             zOleFileIO.opencC|jdS)z@ close the OLE file, to release the file object N)rfrRrr/r/r0rRKzOleFileIO.closecCsh|r td||j}ntd||ttttfvrdS|j}||vr-|t ddS| |dS)ag Checks if a stream has not been already referenced elsewhere. This method should only be called once for each known stream, and only if stream size is not null. :param first_sect: int, index of first sector of the stream in FAT :param minifat: bool, if True, stream is located in the MiniFAT, else in the FAT z,_check_duplicate_stream: sect=%Xh in MiniFATz(_check_duplicate_stream: sect=%Xh in FATNzStream referenced twice) r3rr5rrrrr4rrr)r first_sectr  used_streamsr/r/r0rRs z!OleFileIO._check_duplicate_streamrc Csd}tdtdtdtdi}t|}||d|}tddd t|D] }td |dd q"tt|D]G}||} td || dd t| | |D],}||krSn%||} | d @} | |vrd|| } n | |dkrmd } nd | } t| dd qKtq4dS)zU Display a part of FAT in human-readable form for debugging purposes r:z..free..z[ END. ]zFATSECT zDIFSECT r#indexr r!%8X%6X:r5z --->N)rrrrr_rr) rr firstindexVPLfatnamesnbsectnlinesr!lrnrauxr,r/r/r0dumpfatls8     zOleFileIO.dumpfatc Csd}tt|}tjdkr|t|}||d|}tdddt|D] }td|ddq'tt|D]1}||} td|| ddt| | |D]}||krXn||} d| } t| ddqPtq9d S) zS Display a sector in a human-readable form, for debugging purposes r:bigr#rnr r!rorpN)arrayUINT32sys byteorderbyteswapr_rr) rsectorrqrrr#rtrur!rvrnrr,r/r/r0dumpsects*     zOleFileIO.dumpsectcCs"tt|}tjdkr||S)z convert a sector to an array of 32 bits unsigned integers, swapping bytes on big endian CPUs such as PowerPC (old Macs) ry)rzr{r|r}r~)rrar/r/r0 sect2arrays  zOleFileIO.sect2arraycCst|tjr |}n||}ttjr||d}|D]-}|d@}td||t ks2|t kr:td|S| |}||}|j ||_ q|S)z Adds the indexes of the given sector to the FAT :param sect: string containing the first FAT sector, or array of long integers :returns: index of last FAT sector. Nr5z isect = %Xzfound end of sector chain) rarzrr3 isEnabledForr$DEBUGrrrrgetsectr)rrfat1isectsnextfatr/r/r0 loadfat_sects"      zOleFileIO.loadfat_sectc Cstd|dd}tdt|t|dftt|_|||jdkrtd|jdkr:| t d |j |j krF| t d td |jdd }|jd|d |}td ||j|krmtd|j }t|D]4}td||f||}||}ttjr||||d|||}td|qt|ttfvrtdntdt|j|j krtdt|j|j f|jd|j |_tdt|j|j fttjrtd||jdSdS)z% Load the FAT table. zDLoading the FAT table, starting with the 1st sector after the headerLrzlen(sect)=%d, so %d integersrrz)DIFAT is used, because file size > 6.8MB.mz#incorrect DIFAT, not enough sectorsz)incorrect DIFAT, first index out of rangezDIFAT analysis...r#z nb_difat = %dzincorrect DIFATzDIFAT block %d, sector %XNznext DIFAT sector: %Xzincorrect end of DIFATz$No DIFAT, because file size < 6.8MB.z!len(fat)=%d, shrunk to nb_sect=%dz6FAT references %d sectors / Maximum %d sectors in filez FAT:)r3rr_rzr{rrrFrHrrr9rErrIOError iterrangerrrr$rrrrrx) rrernb_difat_sectorsnb_difat isect_difatr! sector_difatdifatr/r/r0rdsN                   zOleFileIO.loadfatcCs|j|j}|jj|jd|j}|d}td|j|j|||f||kr.|t d|j |j|dd }| ||_ tdt|j |f|j d||_ td t|j ttjrptd ||j dSdS) z) Load the MiniFAT table. r#rzaloadminifat(): minifatsect=%d, nb FAT sectors=%d, used_size=%d, stream_size=%d, nb MiniSectors=%dz%OLE MiniStream is larger than MiniFATT force_FATz$MiniFAT shrunk from %d to %d sectorsNzloadminifat(): len=%dz MiniFAT:)rIrNrLrr@r3rrBrr_openr\rr r_rr$rrx)r stream_sizenb_minisectors used_sizerr/r/r0r .s"     zOleFileIO.loadminifatc Csz |j|j|dWntd||j|d|jf|tdY|j|j}t ||jkrItd|t ||jf|td|S)z Read given sector from file on disk. :param sect: int, sector index :returns: a string containing the sector data. r#z(getsect(): sect=%X, seek=%d, filesize=%drz*getsect(): sect=%X, read=%d, sectorsize=%dr) rfr`rr3rr2rrr\r_)rrrr/r/r0rRs zOleFileIO.getsectrxc Cst|ts tdt|trt|dkrtdz |j|j|dWntd||j|d|j f| t dYt||jkrS|||jt|7}n t||jkr^t d|j |dS)z Write given sector to file on disk. :param sect: int, sector index :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z'write_sect: data must be a bytes stringr#z4write_sect: padding must be a bytes string of 1 charz+write_sect(): sect=%X, seek=%d, filesize=%drData is larger than sector sizeN)rarb TypeErrorr_rfr`rr3rr2rr ValueErrorwrite)rrrpaddingr/r/r0 write_sectrs zOleFileIO.write_sectcCst|ts tdt|trt|dkrtdz|j|Wntd||jf| t dYt|}||j krG|||j |7}|j |krPt d|j |dS)z Write given sector to file on disk. :param fp_pos: int, file position :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z,write_mini_sect: data must be a bytes stringr#z9write_mini_sect: padding must be a bytes string of 1 charz)write_mini_sect(): fp_pos=%d, filesize=%drrN)rarbrr_rfr`r3rr2rrr@rr)rfp_posrrlen_datar/r/r0_write_mini_sects"   zOleFileIO._write_mini_sectcCsltd|j|dd|_|jjd}td|jj|fdg||_|d}|jd|_|jdS)z] Load the directory. :param sect: sector index of directory stream. zLoading the Directory:Trrz&loaddirectory: size=%d, max_entries=%dNr) r3rrr7rrrrLr)rr max_entries root_entryr/r/r0res      zOleFileIO.loaddirectorycCs~|dks |t|jkr|td|j|dur#|td|j|S|j|d|jd}t||||j|<|j|S)aY Load a directory entry from the directory. This method should only be called once for each storage/stream when loading the directory. :param sid: index of storage/stream in the directory. :returns: a OleDirectoryEntry object :exception IOError: if the entry has always been referenced. rz OLE directory index out of rangeNz'double reference for OLE stream/storager) r_rrrrr7r`r\r)rrrr/r/r0rs    zOleFileIO._load_direntrycCrj)z5 Dump directory (for debugging only) N)rLrrr/r/r0 dumpdirectoryrkzOleFileIO.dumpdirectoryc Cstd||t|f||jkrE|sE|js4||jj}td|jj|f|j |jj|dd|_t |j||d|j |j |jj|dSt |j |||j|j|j|j|dS)a| Open a stream, either in FAT or MiniFAT according to its size. (openstream helper) :param start: index of first sector :param size: size of stream (or nothing if size is unknown) :param force_FAT: if False (default), stream will be opened in FAT or MiniFAT according to size. If True, it will always be opened in FAT. z1OleFileIO.open(): sect=%Xh, size=%d, force_FAT=%sz%Opening MiniStream: sect=%Xh, size=%dTrr)rfrrrrrrr)r3rstrrr3r rLrrrrrCr rfrrr2)rstartrrsize_ministreamr/r/r0rs0      zOleFileIO._openTcCs||jg}|jD];}|jtkr)|r||dd|jg||||||q |jtkr>|r=||dd|jgq |tdq dS)a listdir helper :param files: list of files to fill in :param prefix: current location in storage tree (list of names) :param node: current node (OleDirectoryEntry object) :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) r#NzIThe directory tree contains an entry which is not a stream nor a storage.) r,rrr r_listr rr)rfilesprefixnodestreamsstoragesrr/r/r0rs   zOleFileIO._listcCsg}||g|j|||S)am Return a list of streams and/or storages stored in this file :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) :returns: list of stream and/or storage paths )rrL)rrrrr/r/r0listdir3s zOleFileIO.listdircCsXt|tr |d}|j}|D]}|jD] }|j|kr!nqtd|}q|jS)a* Returns directory entry of given filename. (openstream helper) Note: this method is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: sid of requested filename :exception IOError: if file not found /zfile not found) ra basestringsplitrLrr,rrr)rrdrr,r&r/r/r0_findAs   zOleFileIO._findcCs6||}|j|}|jtkrtd||j|jS)a; Open a stream as a read-only file object (BytesIO). Note: filename is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: file object (read-only) :exception IOError: if filename not found, or if this is not a stream. zthis file is not a stream)rrrr rrrrrrdrrr/r/r0 openstreamas   zOleFileIO.openstreamc Cs|js||t|j}|jjs|j||j|j}t|jD]@\}}||}||}|jj|d|j||j} ||dkrS|||j|d|j} n |||jd} || | q"dS)Nr#)rr r_rLrNr@ enumerater) rr data_to_writer block_sizeidxr sect_base sect_offsetrdata_per_sectorr/r/r0_write_mini_streamvs      zOleFileIO._write_mini_streamc Cszt|ts td||}|j|}|jtkrtd|j}|t |kr)t d||j kr:|jt kr:|j ||dS|j}||jd|j}td|t|D]`}||dkrr|||j|d|j} t | |jksqJn(|||jd} td||jt | ||jft | |j||jksJ||| z|j|}WqRtytd w|tkrtd dS) aD Write a stream to disk. For now, it is only possible to replace an existing stream by data of the same size. :param stream_name: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :param data: bytes, data to be written, must be the same size as the original stream. z)write_stream: data must be a bytes stringzthis is not a streamz?write_stream: data must be the same size as the existing stream)rrr#rNzGwrite_stream: size=%d sectorsize=%d data_sector=%Xh size%%sectorsize=%drz)incorrect last sector index in OLE stream)rarbrrrrr rrr_rrr rrrr3rrrrrr) r stream_namerrrrrrr! data_sectorr/r/r0 write_streams@         zOleFileIO.write_streamcCs*z||}|j|}|jWSYdS)a Test if given filename exists as a stream or a storage in the OLE container, and return its type. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: False if object does not exist, its entry type (>0) otherwise: - STGTY_STREAM: a stream - STGTY_STORAGE: a storage - STGTY_ROOT: the root entry F)rrrrr/r/r0get_types   zOleFileIO.get_typecCs||}|j|}|jS)a Return clsid of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: Empty string if clsid is null, a printable representation of the clsid otherwise new in version 0.44 )rrr}rr/r/r0getclsids zOleFileIO.getclsidcC||}|j|}|S)a9 Return modification time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )rrr(rr/r/r0r( zOleFileIO.getmtimecCr)a1 Return creation time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if creation time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )rrr*rr/r/r0r*rzOleFileIO.getctimecCsz||}WdSYdS)a Test if given filename exists as a stream or a storage in the OLE container. Note: filename is case-insensitive. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: True if object exist, else False. TF)r)rrdrr/r/r0r s  zOleFileIO.existscCs,||}|j|}|jtkrtd|jS)a2 Return size of a stream in the OLE container, in bytes. :param filename: path of stream in storage tree (see openstream for syntax) :returns: size in bytes (long integer) :exception IOError: if file not found :exception TypeError: if this is not a stream. zobject is not an OLE stream)rrrr rrrr/r/r0get_sizes  zOleFileIO.get_sizecCs|jjS)zp Return root entry name. Should usually be 'Root Entry' or 'R' in most implementations. )rLr,rr/r/r0get_rootentry_name*szOleFileIO.get_rootentry_namec Cs2|dkrg}|}t|tsd|}||}i}z7|d}t|dd}|d}t|dd} |t|dd|t|d d }t|d } Wn%tyu} zd t || f} | t | t | |WYd} ~ Sd} ~ wwt | tt|d} t| D]} d }zft|d| d}t|d | d}t||}td |||f|tkrt||d }|dkr|d}n*|tkrt||d }n|tttfvrt||d }n |ttfvrt||d }n|ttfvrt||d }||d|d|d}|dd}n|tkr)t||d }||d|d|}n|tkrGt||d }| ||d|d|d}n|t!krt"t||d t"t||dd>}|r||vrtd||t#|dft$$dddd d d }td|d|t$j%|dd}nX|d}nS|t&krt'||d }nE|t(krt||d |d}n3|t)krt||d }||d|d|}n|t*krt+t||d }n d}td||f|||<Wqty} zd|t || f} | t | t | WYd} ~ qd} ~ ww|S)a Return properties described in substream. :param filename: path of stream in storage tree (see openstream for syntax) :param convert_time: bool, if True timestamps will be converted to Python datetime :param no_conversion: None or list of int, timestamps not to be converted (for example total editing time is not a real timestamp) :returns: a dictionary of values indexed by id (integer) NrrMr:rIrErAs****rz6Error while parsing properties header in stream %s: %srr>z!property id=%d: type=%d offset=%Xiir#rxrr6rz8Converting property #%d to python datetime, value=%d=%fsirztimedelta days=%dl@T$r<rz5property id=%d: type=%d not implemented in parser yetz3Error while parsing property id %d in stream %s: %s),rarrrr\r~r`rw BaseExceptionrrrtypeminrnr_rr3rVT_I2ruVT_UI2VT_I4VT_INTVT_ERRORVT_UI4VT_UINTVT_BSTRVT_LPSTRrZVT_BLOB VT_LPWSTRr VT_FILETIMErfloatrrVT_UI1rkVT_CLSIDVT_CFVT_BOOLbool)rrdrr streampathrfrrr}fmtid num_propsexcmsgr! property_idr property_typercountrr/r/r0r2s           $ (       zOleFileIO.getpropertiescCst|_|j||jS)z Parse standard properties streams, return an OleMetadata object containing all the available metadata. (also stored in the metadata attribute of the OleFileIO object) new in version 0.25 )rr>rrr/r/r0 get_metadatas zOleFileIO.get_metadata)rZ)Fr+)rx)TF)FN),rrrrrrrrQrTrrrrcrRrrxrrrrdr rrrrerrrrrrrrrrrrr(r*rrrrrr/r/r/r0rsT M   a   % $T$ ) &  >  rc Csddl}ddl}d}tjtjtjtjtjd}d}|j|d}|j ddd d d |j d dd dd |j dddd|dd| \}}t dt t ft|dkr\t t|||jrbd|_tj||jddt|D]M}z>t|} t dt |t d| | D]`} | dddkrt d| zC| j| dd} t| } | D]1\} } t| ttfrt| dkr| dd} t| trd D] }|t| vrd!} nqt d"| | qWqt !d#| Yqq|j"r-t d$| D].} t d%t#d&$| d%d'd(| %| }|t&kr#t d)| '| | (| qt d*|qt t d+| j)D]}|durIt d,|j*|+|,fq4t z | -}|.Wn t !d-Yt | /}t d.|| 0d/rt d0t d1| %d/t d2| 'd/| 0d3rt d4t d5| j1r| j1D]\}}t d6|j2|fqnt d7Wqqt !d8|YqqdS)9z Main function when olefile is runs as a script from the command line. This will open an OLE2 file and display its structure and properties :return: nothing rNrV)rinforVrUcriticalz1usage: %prog [options] [filename2 ...])usagez-c store_true check_streamsz*check all streams (for debugging purposes))actiondesthelpz-d debug_modez\debug mode, shortcut for -l debug (displays a lot of debug information, for developers only)z-lz --loglevelloglevelstorezBlogging level debug/info/warning/error/critical (default=%default))rrdefaultrz=olefile version %s %s - https://www.decalage.info/en/olefile rz%(levelname)-8s %(message)s)r-formatzD--------------------------------------------------------------------z%r: propertiesTr2)r#r6r"rr7r8r9r=r>r@rArBrCrDrErFrGrHrIrJrKrLrMrNrOrPz (binary data)z z&Error while parsing property stream %rz Checking streams...-rr r!zsize %dzNOT a stream : type=%dz5Modification/Creation times of all directory entries:z- %s: mtime=%s ctime=%szError while parsing metadatazRoot entry name: "%s" worddocumentzThis is a Word document.ztype of stream 'WordDocument':zsize :z macros/vbaz%This document may contain VBA macros.z( Non-fatal issues raised during parsing:rNonezError while parsing file %r)3r|optparser$rINFOWARNINGERRORCRITICAL OptionParser add_option parse_argsr __version____date__r_r print_helpexitrr basicConfigrrrrrsorteditemsrarrbrcr3 exceptionrrrrr rrrr,r(r*rrrrr0r)r|rDEFAULT_LOG_LEVEL LOG_LEVELSrparseroptionsrSrdr streamnamerkvrjst_typermetarLexctyperr/r/r0mains                           r__main__r+)mr __future__rrr __author____all__rr|rqrzos.pathr`rr$rrbrnrxrangerritemsizer{rr NameErrorr version_inforrr1r3rrrrrrrrrrr r rr r rVT_EMPTYVT_NULLrrVT_R4VT_R8VT_CYVT_DATEr VT_DISPATCHrr VT_VARIANT VT_UNKNOWN VT_DECIMALVT_I1rrrVT_I8VT_UI8rrVT_VOID VT_HRESULTVT_PTR VT_SAFEARRAY VT_CARRAYVT_USERDEFINEDrrrr VT_STREAM VT_STORAGEVT_STREAMED_OBJECTVT_STORED_OBJECTVT_BLOB_OBJECTrr VT_VECTORrrrrrrrrkrurwr~rrrrrrrrr/r/r/r0s < (     *    "