C#[c@s dZddlmZdZdZdZdddd d d d d ddddddddddddddddddd gZdd!lZdd!lZdd!l Z dd!l Z dd!l Z dd!l Z dd!lZeek reZny eZWn eZnXe j d"jd#kr#d"ZnNe j d$jd#krDd$Zn-e j d%jd#kred%Zn ed&yeWnek reZnXeZejd'd(krd)ZneZej d*d+Z!e!d,Z"d-Z#d.Z$d/Z%d0Z&d1Z'd2Z(d3Z)d/Z*d3Z+d'Z,d*Z-d4Z.d(Z/d#Z0d5Z1d6Z2d'Z3d*Z4d4Z5d(Z6d#Z7d5Z8d7Z9d8Z:d9Z;d:Z<d;Z=d<Z>d=Z?d>Z@d?ZAd@ZBdAZCdBZDdCZEdDZFdEZGdFZHdGZIdHZJdIZKdJZLdKZMdLZNdMZOdNZPdOZQdPZRdQZSdRZTdSZUdTZVdUZWdVZXdWZYdXZZdYZ[dZZ\d;Z]dDZ^dNZ_d[Z`d\Zad]Zbeekrxd^Zcn d_Zcd'd`Zdd'daZedbZfdcZgdfddYZhdeejifdfYZjdgfdhYZkdfdiYZldjZmendkkremnd!S(ls: olefile (formerly OleFileIO_PL) Module to read/write Microsoft OLE2 files (also called Structured Storage or Microsoft Compound Document File Format), such as Microsoft Office 97-2003 documents, Image Composer and FlashPix files, Outlook messages, ... This version is compatible with Python 2.7 and 3.4+ Project website: https://www.decalage.info/olefile olefile is copyright (c) 2005-2018 Philippe Lagadec (https://www.decalage.info) olefile is based on the OleFileIO module from the PIL library v1.1.7 See: http://www.pythonware.com/products/pil/index.htm and http://svn.effbot.org/public/tags/pil-1.1.7/PIL/OleFileIO.py The Python Imaging Library (PIL) is Copyright (c) 1997-2009 by Secret Labs AB Copyright (c) 1995-2009 by Fredrik Lundh See source code and LICENSE.txt for information on usage and redistribution. i(tprint_functions 2018-09-09s0.46sPhilippe Lagadect isOleFilet OleFileIOt OleMetadatatenable_loggingtMAGICt STGTY_EMPTYtKEEP_UNICODE_NAMESt STGTY_STREAMt STGTY_STORAGEt STGTY_ROOTtSTGTY_PROPERTYtSTGTY_LOCKBYTEStMINIMAL_OLEFILE_SIZEt DEFECT_UNSUREtDEFECT_POTENTIALtDEFECT_INCORRECTt DEFECT_FATALtDEFAULT_PATH_ENCODINGt MAXREGSECTtDIFSECTtFATSECTt ENDOFCHAINtFREESECTt MAXREGSIDtNOSTREAMt UNKNOWN_SIZEt WORD_CLSIDNtLitItis>Need to fix a bug with 32 bit arrays, please contact author...iisutf-8icCsh|tjjjkr5tj|}|j||Stj|}|jtj|j||S(sn Create a suitable logger object for this module. The goal is not to change settings of the root logger, to avoid getting other modules' logs on the screen. If a logger exists with same name, reuse it. (Else it would have duplicate handlers and messages would be doubled.) The level is set to CRITICAL+1 by default, to avoid any logging. (tloggingtLoggertmanagert loggerDictt getLoggertsetLevelt addHandlert NullHandler(tnametleveltlogger((s.lib/python2.7/site-packages/olefile/olefile.pyt get_loggers   tolefilecCstjtjdS(s Enable logging for this module (disabled by default). This will set the module-specific logger level to NOTSET, which means the main application controls the actual logging level. N(tlogR$RtNOTSET(((s.lib/python2.7/site-packages/olefile/olefile.pyRssࡱIIIIIiiiiiii i i i i iiiiiiiiiiiiiiiiii@iAiBiCiDiEiFiGiHis$00020900-0000-0000-C000-000000000046i(icCst|dr4|jtt}|jdnat|trht|tkrh|tt }n-t|d}|jtt}WdQX|tkrt St SdS(sJ Test if a file is an OLE container (according to the magic bytes in its header). .. note:: This function only checks the first 8 bytes of the file, not the rest of the OLE structure. .. versionadded:: 0.16 :param filename: filename, contents or file-like object of the OLE file (string-like or file-like object) - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read and seek methods), it is parsed as-is. :type filename: bytes or str or unicode or file :returns: True if OLE, False otherwise. :rtype: bool treaditrbN( thasattrR.tlenRtseekt isinstancetbytesR topentTruetFalse(tfilenametheadertfp((s.lib/python2.7/site-packages/olefile/olefile.pyRs! cCs t|S(N(tord(tc((s.lib/python2.7/site-packages/olefile/olefile.pyti8?scCs|jtkr|S|dS(Ni(t __class__tint(R<((s.lib/python2.7/site-packages/olefile/olefile.pyR=CscCstjd|||d!dS(s Converts a 2-bytes (16 bits) string to an integer. :param c: string containing bytes to convert :param o: offset of bytes to convert in string s|_%t j!d|j%|j|jft'||_(|j tkr|j%dkr|jt)dnt|_*|j ttfkrV|j%dkrV|j%|j+kr4|j tkr4t,|_*n t|_*|j-|j|j*nd|_/dS(sI Constructor for an OleDirectoryEntry object. Parses a 128-bytes entry from the OLE Directory stream. :param entry : string (must be 128 bytes long) :param sid : index of this directory entry in the OLE file directory :param olefile: OleFileIO containing this directory entry sunhandled OLE storage typeisduplicate OLE root entrysincorrect OLE root entryi@s(incorrect DirEntry name length >64 bytesisDirEntry SID=%d: %ss - type: %ds - sect: %Xhs% - SID left: %d, right: %d, child: %diIs+sectorsize=%d, sizeLow=%d, sizeHigh=%d (%X)sincorrect OLE stream sizei s% - size: %d (sizeLow=%d, sizeHigh=%d)sOLE storage with size>0N(0tsidR+tkidst kids_dictR7tusedR@RARtSTRUCT_DIRENTRYtname_rawt namelengtht entry_typetcolortsid_leftt sid_rightt sid_childt dwUserFlagst createTimet modifyTimet isectStarttsizeLowtsizeHighR R RRRRt name_utf16t_decode_utf16_strR'R,RRRRRtlongRKRJRt is_minifattminisectorcutoffR6t_check_duplicate_streamRt sect_chain(RtentryRR+RJ((s.lib/python2.7/site-packages/olefile/olefile.pyRsR     f #  # $  cCs|jr dS|jttfks1|jdkr5dSt|_|jra|j ra|jn|j }xF|t kr|jj ||jr|j|}qm|j |}qmWdS(Ni( RRR RRtlistRtminifatt loadminifatRRRR(RR+t next_sect((s.lib/python2.7/site-packages/olefile/olefile.pytbuild_sect_chain-s $    cCs\tjd|jt|j|jf|jtkrX|j|j|jj ndS(s Read and build the red-black tree attached to this OleDirectoryEntry object, if it is a storage. Note that this method builds a tree of all subentries, so it should only be called for the root object once. s.build_storage_tree: SID=%d - %s - sid_child=%dN( R,RRRR'RRt append_kidsRtsort(R((s.lib/python2.7/site-packages/olefile/olefile.pytbuild_storage_tree@s    cCsJtjd||tkr!dS|dksE|t|jjkr[|jjtdn|jj|}tjd|j t |j |j |j |jf|jr|jjtddSt|_|j|j |j j}||jkr|jjtdn|jj|||j|<|j|j |jdS(s) Walk through red-black tree of children of this directory entry to add all of them to the kids list. (recursive method) :param child_sid: index of child directory entry to use, or None when called first time for the root. (only used during recursion) sappend_kids: child_sid=%dNisOLE DirEntry index out of rangesHappend_kids: child_sid=%d - %s - sid_left=%d, sid_right=%d, sid_child=%ds#OLE Entry referenced more than onces!Duplicate filename in OLE storage(R,RRR1R+t direntriesRRt_load_direntryRRR'RRRRR6RtlowerRRRR(Rt child_sidtchildt name_lower((s.lib/python2.7/site-packages/olefile/olefile.pyRXs, $ ,      cCs|j|jkS(sCompare entries by name(R'(Rtother((s.lib/python2.7/site-packages/olefile/olefile.pyt__eq__scCs|j|jkS(sCompare entries by name(R'(RR((s.lib/python2.7/site-packages/olefile/olefile.pyt__lt__scCs|j| S(N(R(RR((s.lib/python2.7/site-packages/olefile/olefile.pyt__ne__scCs|j|p|j|S(N(RR(RR((s.lib/python2.7/site-packages/olefile/olefile.pyt__le__sicCsddddddg}y||j}Wntk rBd}nXtd|t|j|d d|jttfkrt|jd d dnt|jttfkr|j rtd|d |j nx"|j D]}|j |d qWd S(sADump this entry, and all its subentries (for debug purposes only)s (invalid)s (storage)s(stream)s (lockbytes)s (property)s(root)s (UNKNOWN)t tendR4s{%s}iN( RRRRR'RR RR RJRR(RttabtTYPESt type_nametkid((s.lib/python2.7/site-packages/olefile/olefile.pyRs    $cCs |jdkrdSt|jS(s Return modification time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 iN(RRRQ(R((s.lib/python2.7/site-packages/olefile/olefile.pytgetmtimes cCs |jdkrdSt|jS(s Return creation time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 iN(RRRQ(R((s.lib/python2.7/site-packages/olefile/olefile.pytgetctimes (RRRRt DIRENTRY_SIZER@tcalcsizeRFRRRRRRRRRRR(((s.lib/python2.7/site-packages/olefile/olefile.pyRs b   /     cBseZdZd(eeeedZdZdZ e dZ ddZ edZ dZed Zd d Zd d Zd ZdZdZdZdZddZddZdZdZdZeedZeedZeedZ dZ!dZ"dZ#dZ$dZ%d Z&d!Z'd"Z(d#Z)d$Z*d%Z+ed(d&Z,d'Z-RS()s OLE container object This class encapsulates the interface to an OLE 2 structured storage file. Use the listdir and openstream methods to access the contents of this file. Object names are given as a list of strings, one for each subentry level. The root entry should be omitted. For example, the following code extracts all image streams from a Microsoft Image Composer file:: ole = OleFileIO("fan.mic") for entry in ole.listdir(): if entry[1:2] == "Image": fin = ole.openstream(entry) fout = open(entry[0:1], "wb") while True: s = fin.read(8192) if not s: break fout.write(s) You can use the viewer application provided with the Python Imaging Library to view the resulting files (which happens to be standard TIFF files). cCs||_g|_||_||_d|_d|_g|_g|_d|_ d|_ d|_ d|_ d|_ d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_!d|_"d|_#d|_$d|_%d|_&d|_'|r|j(|d|ndS(s Constructor for the OleFileIO class. :param filename: file to open. - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param raise_defects: minimal level for defects to be raised as exceptions. (use DEFECT_FATAL for a typical application, DEFECT_INCORRECT for a security-oriented application, see source code for details) :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. :param debug: bool, set debug mode (deprecated, not used anymore) :param path_encoding: None or str, name of the codec to use for path names (streams and storages), or None for Unicode. Unicode by default on Python 3+, UTF-8 on Python 2.x. (new in olefile 0.42, was hardcoded to Latin-1 until olefile v0.41) t write_modeN()t_raise_defects_leveltparsing_issuesRt path_encodingRt _filesizet ministreamt_used_streams_fatt_used_streams_minifatt byte_ordert directory_fpRt dll_versionRtfirst_difat_sectortfirst_dir_sectortfirst_mini_fat_sectorR:t header_clsidtheader_signaturetmetadatatmini_sector_shifttmini_sector_sizetmini_stream_cutoff_sizeRt minifatsectRtminisectorsizet minor_versiontnb_secttnum_difat_sectorstnum_dir_sectorstnum_fat_sectorstnum_mini_fat_sectorst reserved1t reserved2troott sector_shiftt sector_sizettransaction_signature_numberR5(RR8t raise_defectsRRR((s.lib/python2.7/site-packages/olefile/olefile.pyRsT                                        cCs|S(N((R((s.lib/python2.7/site-packages/olefile/olefile.pyt __enter__6scGs|jdS(N(tclose(Rtargs((s.lib/python2.7/site-packages/olefile/olefile.pyt__exit__:scCsR||jkr+tj|||n#|jj||ftj|dS(s This method should be called for any defect found during file parsing. It may raise an IOError exception according to the minimal level chosen for the OleFileIO object. :param defect_level: defect level, possible values are: - DEFECT_UNSURE : a case which looks weird, but not sure it's a defect - DEFECT_POTENTIAL : a potential defect - DEFECT_INCORRECT : an error according to specifications, but parsing can go on - DEFECT_FATAL : an error which cannot be ignored, parsing is impossible :param message: string describing the defect, used with raised exception. :param exception_type: exception class to be raised, IOError by default N(RR,terrorRRtwarning(Rt defect_leveltmessagetexception_type((s.lib/python2.7/site-packages/olefile/olefile.pyR>s  treplacecCs6|jd|}|jr.|j|j|S|SdS(s Decode a string encoded in UTF-16 LE format, as found in the OLE directory or in property streams. Return a string encoded according to the path_encoding specified for the OleFileIO object. :param utf16_str: bytes string encoded in UTF-16 LE format :param errors: str, see python documentation for str.decode() :return: str, encoded according to path_encoding sUTF-16LEN(tdecodeRtencode(Rt utf16_strterrorst unicode_str((s.lib/python2.7/site-packages/olefile/olefile.pyRXs  c Cs9||_t|dr$||_n`t|trZt|tkrZtj||_n*|jrld}nd}t |||_d}|jj dt j z|jj }Wd|jj dX||_tjd|j|jfg|_g|_|jjd}t|dks3|d tkratjd |d tf|jtd nd }tj|}tjd ||d2f|| }tj||\|_|_|_|_|_|_|_ |_!|_"|_#|_$|_%|_&|_'|_(|_)|_*|_+tjtj|||jtkrT|jtdn|jt,dkr||jt-dntjd|jtjd|j|jd3kr|jt-dntjd|j|jdkr|jt-dnd|j|_.tjd|j.|j.d4krB|jt-dn|jdkr`|j.dks~|jdkr|j.dkr|jt-dnd|j |_/tjd|j/|j/d5kr|jt-d n|j!dks|j"dkr|jt-d!ntjd"|j#|j.dkrM|j#dkrM|jt-d#ntjd$|j$tjd%|j%tjd&|j&|j&dkr|jt0d'ntjd(|j'|j'dkr|jt-d)tj1d*|j'd|_'ntjd+|j(tjd,|j)tjd-|j*tjd.|j+||j.d/|j.d/|_2tjd0|j2|j2ft3|dd1!|_|j.|_4|j/|_5|j'|_6|j7|j%|j)r|j7|j(n|j+r |j7|j*n|j8||j9|j%|j(|_:dS(6s Open an OLE2 file in read-only or read/write mode. Read and parse the header, FAT and directory. :param filename: string-like or file-like object, OLE file to parse - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. (ignored if filename is not a path) R.sr+bR/iNsFile size: %d bytes (%Xh)iisMagic = %r instead of %rs#not an OLE2 structured storage files<8s16sHHHHHHLLLLLLLLLLsfmt_header size = %d, +FAT = %dimisincorrect OLE signatureisincorrect CLSID in OLE headersMinor Version = %ds%DLL Version = %d (expected: 3 or 4)is"incorrect DllVersion in OLE headers#Byte Order = %X (expected: FFFE)is!incorrect ByteOrder in OLE headeris0Sector Size = %d bytes (expected: 512 or 4096)is#incorrect sector_size in OLE headers3sector_size does not match DllVersion in OLE headers/MiniFAT Sector Size = %d bytes (expected: 64)i@s(incorrect mini_sector_size in OLE headers.incorrect OLE header (non-null reserved bytes)s Number of Directory sectors = %ds3incorrect number of directory sectors in OLE headersNumber of FAT sectors = %dsFirst Directory sector = %Xhs$Transaction Signature Number = %ds5incorrect OLE header (transaction_signature_number>0)s/Mini Stream cutoff size = %Xh (expected: 1000h)s/incorrect mini_stream_cutoff_size in OLE headersJFixing the mini_stream_cutoff_size to 4096 (mandatory value) instead of %dsFirst MiniFAT sector = %XhsNumber of MiniFAT sectors = %dsFirst DIFAT sector = %XhsNumber of DIFAT sectors = %dis/Maximum number of sectors in the file: %d (%Xh)ii(ii(ii(i@(;RR0R:R3R4R1R RRR5R2tostSEEK_ENDttellRR,RRRR.RRRR@RRARRRRRRRRRRRRRRRRRRt bytearrayRRRRR RRKRRRRtloadfatt loaddirectoryR( RR8RtmodeRR9t fmt_headert header_sizetheader1((s.lib/python2.7/site-packages/olefile/olefile.pyR5ks  !     "' ~         cCs|jjdS(s@ close the OLE file, to release the file object N(R:R (R((s.lib/python2.7/site-packages/olefile/olefile.pyR KscCs|r#tjd||j}n6tjd||ttttfkrPdS|j}||krx|jt dn |j |dS(sg Checks if a stream has not been already referenced elsewhere. This method should only be called once for each known stream, and only if stream size is not null. :param first_sect: int, index of first sector of the stream in FAT :param minifat: bool, if True, stream is located in the MiniFAT, else in the FAT s,_check_duplicate_stream: sect=%Xh in MiniFATs(_check_duplicate_stream: sect=%Xh in FATNsStream referenced twice( R,RRRRRRRRRR(Rt first_sectRt used_streams((s.lib/python2.7/site-packages/olefile/olefile.pyRRs    ic CsZd}idt6dt6dt6dt6}t|}||d|}tddd x(t|D]}td |dd qcWtxt|D]}||} td || dd xt| | |D]v}||krPn||} | d @} | |kr|| } n#| |dkr-d } n d | } t| dd qWtqWdS(sU Display a part of FAT in human-readable form for debugging purposes is..free..s[ END. ]sFATSECT sDIFSECT itindexRRs%8Xs%6X:Is --->N(RRRRR1RR( RRt firstindextVPLtfatnamestnbsecttnlinesRtlR#RtauxR'((s.lib/python2.7/site-packages/olefile/olefile.pytdumpfatls6          c Cs*d}tjt|}tjdkr4|jnt|}||d|}tdddx(t|D]}td|ddqoWtxt|D]}||} td|| ddxOt| | |D]:}||krPn||} d| } t| ddqWtqWd S( sS Display a sector in a human-readable form, for debugging purposes itbigiR#RRs%8Xs%6X:N(tarraytUINT32tsyst byteordertbyteswapR1RR( RtsectorR$R%RR'R(RR)R#RR'((s.lib/python2.7/site-packages/olefile/olefile.pytdumpsects(      cCs2tjt|}tjdkr.|jn|S(s convert a sector to an array of 32 bits unsigned integers, swapping bytes on big endian CPUs such as PowerPC (old Macs) R,(R-R.R/R0R1(RRta((s.lib/python2.7/site-packages/olefile/olefile.pyt sect2arrays cCst|tjr|}n1|j|}tjtjrL|j|nd}x|D]x}|d@}tj d||t ks|t krtj dPn|j |}|j|}|j ||_ qYW|S(s Adds the indexes of the given sector to the FAT :param sect: string containing the first FAT sector, or array of long integers :returns: index of last FAT sector. Is isect = %Xsfound end of sector chainN(R3R-R5R,t isEnabledForRtDEBUGR3RRRRtgetsectR(RRtfat1tisecttstnextfat((s.lib/python2.7/site-packages/olefile/olefile.pyt loadfat_sects     c Cstjd|dd!}tjdt|t|dftjt|_|j||jdkrtjd|jdkr|j t d n|j |j kr|j t d ntjd |jdd }|jd|d |}tjd ||j|kr)tdn|j }xt|D]}tjd||f|j|}|j|}tjtjr|j|n|j|| ||}tjd|q?W|ttgkrtdqn tjdt|j|j krNtjdt|j|j f|j|j |_ntjdt|j|j ftjtjrtjd|j|jndS(s% Load the FAT table. sDLoading the FAT table, starting with the 1st sector after the headeriLislen(sect)=%d, so %d integersiis)DIFAT is used, because file size > 6.8MB.ims#incorrect DIFAT, not enough sectorss)incorrect DIFAT, first index out of rangesDIFAT analysis...is nb_difat = %dsincorrect DIFATsDIFAT block %d, sector %Xsnext DIFAT sector: %Xsincorrect end of DIFATs$No DIFAT, because file size < 6.8MB.s!len(fat)=%d, shrunk to nb_sect=%ds6FAT references %d sectors / Maximum %d sectors in files FAT:N(R,RR1R-R.RR=RRRRRRRRtIOErrort iterrangeR8R5R6RR7R3RRR+( RR9Rtnb_difat_sectorstnb_difatt isect_difatRt sector_difattdifat((s.lib/python2.7/site-packages/olefile/olefile.pyRsJ  '      ## cCs0|j|j}|jj|jd|j}|d}tjd|j|j|||f||kr}|jt dn|j |j|dt j }|j ||_tjdt|j|f|j| |_tjdt|jtjtjr,tjd|j|jnd S( s) Load the MiniFAT table. iisaloadminifat(): minifatsect=%d, nb FAT sectors=%d, used_size=%d, stream_size=%d, nb MiniSectors=%ds%OLE MiniStream is larger than MiniFATt force_FATs$MiniFAT shrunk from %d to %d sectorssloadminifat(): len=%ds MiniFAT:N(RRRRRR,RRRRt_openR6R.R5RR1R6RR7R+(Rt stream_sizetnb_minisectorst used_sizeR;((s.lib/python2.7/site-packages/olefile/olefile.pyR.s    !  cCsy|jj|j|dWn?tjd||j|d|jf|jtdnX|jj|j}t ||jkrtjd|t ||jf|jtdn|S(s Read given sector from file on disk. :param sect: int, sector index :returns: a string containing the sector data. is(getsect(): sect=%X, seek=%d, filesize=%dsOLE sector index out of ranges*getsect(): sect=%X, read=%d, sectorsize=%dsincomplete OLE sector( R:R2RR,RRRRR.R1(RRR2((s.lib/python2.7/site-packages/olefile/olefile.pyR8Rs  scCst|tstdnt|t s@t|dkrOtdny|jj|j|dWn?tjd||j|d|j f|j t dnXt||jkr|||jt|7}n$t||jkrt dn|jj |dS(s Write given sector to file on disk. :param sect: int, sector index :param data: bytes, sector data :param padding: single byte, padding character if data < sector size s'write_sect: data must be a bytes stringis4write_sect: padding must be a bytes string of 1 chars+write_sect(): sect=%X, seek=%d, filesize=%dsOLE sector index out of rangesData is larger than sector sizeN(R3R4t TypeErrorR1R:R2RR,RRRRt ValueErrortwrite(RRRtpadding((s.lib/python2.7/site-packages/olefile/olefile.pyt write_sectrs" cCst|tstdnt|t s@t|dkrOtdny|jj|Wn1tjd||jf|j t dnXt|}||j kr|||j |7}n|j |krt dn|jj |dS(s Write given sector to file on disk. :param fp_pos: int, file position :param data: bytes, sector data :param padding: single byte, padding character if data < sector size s,write_mini_sect: data must be a bytes stringis9write_mini_sect: padding must be a bytes string of 1 chars)write_mini_sect(): fp_pos=%d, filesize=%dsOLE sector index out of rangesData is larger than sector sizeN(R3R4RJR1R:R2R,RRRRRRKRL(Rtfp_posRRMtlen_data((s.lib/python2.7/site-packages/olefile/olefile.pyt_write_mini_sects "  cCstjd|j|dt|_|jjd}tjd|jj|fdg||_|jd}|jd|_ |j j dS(s] Load the directory. :param sect: sector index of directory stream. sLoading the Directory:REis&loaddirectory: size=%d, max_entries=%diN( R,RRFR6RRRRRRR(RRt max_entriest root_entry((s.lib/python2.7/site-packages/olefile/olefile.pyRs  cCs|dks!|t|jkr4|jtdn|j|dk rb|jtd|j|S|jj|d|jjd}t ||||j|<|j|S(sY Load a directory entry from the directory. This method should only be called once for each storage/stream when loading the directory. :param sid: index of storage/stream in the directory. :returns: a OleDirectoryEntry object :exception IOError: if the entry has always been referenced. is OLE directory index out of ranges'double reference for OLE stream/storageiN( R1RRRRRRR2R.R(RRR((s.lib/python2.7/site-packages/olefile/olefile.pyRs !  cCs|jjdS(s5 Dump directory (for debugging only) N(RR(R((s.lib/python2.7/site-packages/olefile/olefile.pyt dumpdirectoryscCs&tjd||t|f||jkr| r|js|j|jj}tjd|jj|f|j |jj|dt |_nt d|jd|d|ddd |j d |j d |jjd |St d|jd|d|d|jd |jd |jd |jd |Sd S(s| Open a stream, either in FAT or MiniFAT according to its size. (openstream helper) :param start: index of first sector :param size: size of stream (or nothing if size is unknown) :param force_FAT: if False (default), stream will be opened in FAT or MiniFAT according to size. If True, it will always be opened in FAT. s1OleFileIO.open(): sect=%Xh, size=%d, force_FAT=%ss%Opening MiniStream: sect=%Xh, size=%dRER:RRRiRRRRN(R,RtstrRRRRRRRFR6RRRR:RRR(RtstartRREtsize_ministream((s.lib/python2.7/site-packages/olefile/olefile.pyRFs&       cCs||jg}x|jD]}|jtkro|rS|j|d|jgn|j|||||q|jtkr|r|j|d|jgqq|jtdqWdS(s listdir helper :param files: list of files to fill in :param prefix: current location in storage tree (list of names) :param node: current node (OleDirectoryEntry object) :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) isIThe directory tree contains an entry which is not a stream nor a storage.N( R'RRR Rt_listRRR(RtfilestprefixtnodetstreamststoragesR((s.lib/python2.7/site-packages/olefile/olefile.pyRXs !cCs&g}|j|g|j|||S(sm Return a list of streams and/or storages stored in this file :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) :returns: list of stream and/or storage paths (RXR(RR\R]RY((s.lib/python2.7/site-packages/olefile/olefile.pytlistdir3s cCst|tr!|jd}n|j}xS|D]K}x<|jD]%}|jj|jkrAPqAqAWtd|}q1W|jS(s* Returns directory entry of given filename. (openstream helper) Note: this method is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: sid of requested filename :exception IOError: if file not found t/sfile not found( R3t basestringtsplitRRR'RR>R(RR8R[R'R((s.lib/python2.7/site-packages/olefile/olefile.pyt_findAs    cCsP|j|}|j|}|jtkr:tdn|j|j|jS(s; Open a stream as a read-only file object (BytesIO). Note: filename is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: file object (read-only) :exception IOError: if filename not found, or if this is not a stream. sthis file is not a stream(RbRRRR>RFRR(RR8RR((s.lib/python2.7/site-packages/olefile/olefile.pyt openstreamas  c Cs|js|j|nt|j}|jjsG|jj|n|j|j}xt|jD]\}}||}||}|jj|d|j||j} ||dkr|||j|d|j!} n|||j} |j| | qgWdS(Ni(RRR1RRRt enumerateRQ( RRt data_to_writeRt block_sizetidxRt sect_baset sect_offsetROtdata_per_sector((s.lib/python2.7/site-packages/olefile/olefile.pyt_write_mini_streamvs    &"c Cst|tstdn|j|}|j|}|jtkrXtdn|j}|t |krt dn||j kr|jt kr|j d|d|S|j}||jd|j}tjd|xt|D]}||dkrH|||j|d|j!} t | |jkstnd|||j} tjd||jt | ||jft | |j||jkst|j|| y|j|}Wqtk rtd qXqW|tkr td nd S( sD Write a stream to disk. For now, it is only possible to replace an existing stream by data of the same size. :param stream_name: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :param data: bytes, data to be written, must be the same size as the original stream. s)write_stream: data must be a bytes stringsthis is not a streams?write_stream: data must be the same size as the existing streamRReisnb_sectors = %dsGwrite_stream: size=%d sectorsize=%d data_sector=%Xh size%%sectorsize=%ds,incorrect OLE FAT, sector index out of ranges)incorrect last sector index in OLE streamN(R3R4RJRbRRRR>RR1RKRR RkRRR,RRRFRNRRR( Rt stream_nameRRRRRRRt data_sector((s.lib/python2.7/site-packages/olefile/olefile.pyt write_streams:    $&  cCs6y'|j|}|j|}|jSWntSXdS(s Test if given filename exists as a stream or a storage in the OLE container, and return its type. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: False if object does not exist, its entry type (>0) otherwise: - STGTY_STREAM: a stream - STGTY_STORAGE: a storage - STGTY_ROOT: the root entry N(RbRRR7(RR8RR((s.lib/python2.7/site-packages/olefile/olefile.pytget_types   cCs#|j|}|j|}|jS(s Return clsid of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: Empty string if clsid is null, a printable representation of the clsid otherwise new in version 0.44 (RbRRJ(RR8RR((s.lib/python2.7/site-packages/olefile/olefile.pytgetclsids  cCs&|j|}|j|}|jS(s9 Return modification time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 (RbRR(RR8RR((s.lib/python2.7/site-packages/olefile/olefile.pyRs  cCs&|j|}|j|}|jS(s1 Return creation time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if creation time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 (RbRR(RR8RR((s.lib/python2.7/site-packages/olefile/olefile.pyRs  cCs&y|j|}tSWntSXdS(s Test if given filename exists as a stream or a storage in the OLE container. Note: filename is case-insensitive. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: True if object exist, else False. N(RbR6R7(RR8R((s.lib/python2.7/site-packages/olefile/olefile.pyR s cCsA|j|}|j|}|jtkr:tdn|jS(s2 Return size of a stream in the OLE container, in bytes. :param filename: path of stream in storage tree (see openstream for syntax) :returns: size in bytes (long integer) :exception IOError: if file not found :exception TypeError: if this is not a stream. sobject is not an OLE stream(RbRRRRJR(RR8RR((s.lib/python2.7/site-packages/olefile/olefile.pytget_sizes  cCs |jjS(sp Return root entry name. Should usually be 'Root Entry' or 'R' in most implementations. (RR'(R((s.lib/python2.7/site-packages/olefile/olefile.pytget_rootentry_name*scCs>|dkrg}n|}t|ts<dj|}n|j|}i}y|jd}t|dd!}|jd}t|d } |jt|dd|jt|jdd}t|d} WnCt k r&} d t || f} |j t | t | |SXt| tt|d} xt| D]} d }yt|d| d}t|d | d}t||}tjd |||f|tkrt||d}|d kr|d}qn|tkrt||d}n|tttfkrAt||d}n|ttfkrit||d}nz|ttfkrt||d}||d|d|d!}|jdd}n#|tkrt||d}||d|d|!}n|t krCt||d}|j!||d|d|d!}n|t"krt#t||dt#t||dd>}|r ||kr tjd||t$|dft%j%dddd d d }tjd|d!|t%j&d|d}q|d}n|t'kr9t(||d}n|t)krct||d|d!}n|t*krt||d}||d|d|!}nE|t+krt,t||d}nd}tjd||f|||RRR5R RR+R3R5R=RRR8RNRQRRRTRRFR6RXR^RbRcRkRnRoRpRRRRqRrRR(((s.lib/python2.7/site-packages/olefile/olefile.pyRsLL       %  $ T $   )  &   >       cCsddl}ddl}d}itjd6tjd6tjd6tjd6tjd6}d}|jd |}|j d d d d ddd|j dd d d ddd|j ddd dd dd|dd|j \}}t dt t ft|dkr-t t|j|jn|jrBd|_ntjd||jddtx|D]}yit|} t dd t |t dd | jx| jD]} | ddd!krt d"| y| j| d#t} t| j} x| D]\} } t| ttfr[t| d$kr[| d$ } q[nt| trx-dWD]"}|t | krqd@} PqqqqWnt dA| | qWWqt!j"dB| qXqqW|j#rzt dCx| jD]{} t dt$dDj%| ddEdF| j&| }|t'kr^t dG| j(| | j)| qt dH|qWt nt dIxF| j*D];}|dk rt dJ|j,|j-|j.fqqWt y| j/}|j0Wnt!j"dKnXt | j1}t dL|| j2dMrt dNt dO| j&dMt dP| j(dM| j2dQrt dRqnt dS| j3rx;| j3D]#\}}t dT|j4|fqWn t dUWqmt!j"dV|qmXqmWdS(Xs Main function when olefile is runs as a script from the command line. This will open an OLE2 file and display its structure and properties :return: nothing iNR RtinfoR tcriticals1usage: %prog [options] [filename2 ...]tusages-ctactiont store_truetdestt check_streamsthelps*check all streams (for debugging purposes)s-dt debug_modes\debug mode, shortcut for -l debug (displays a lot of debug information, for developers only)s-ls --logleveltlogleveltstoretdefaultsBlogging level debug/info/warning/error/critical (default=%default)s=olefile version %s %s - https://www.decalage.info/en/olefile iR(tformats%(levelname)-8s %(message)st-iDss%r: propertiesRi2iiiiiiii i iiiiiiiiiiiiiiiiiis (binary data)s s&Error while parsing property stream %rs Checking streams...R_RRssize %dsNOT a stream : type=%ds5Modification/Creation times of all directory entries:s- %s: mtime=%s ctime=%ssError while parsing metadatasRoot entry name: "%s"t worddocumentsThis is a Word document.stype of stream 'WordDocument':ssize :s macros/vbas%This document may contain VBA macros.s( Non-fatal issues raised during parsing:s- %s: %sRsError while parsing file %r(iiiiiiii i iiiiiiiiiiiiiiiiii(5R/toptparseRR7tINFOtWARNINGtERRORtCRITICALt OptionParsert add_optiont parse_argsRt __version__t__date__R1Rt print_helptexitRRt basicConfigRRRTR^RR6tsortedtitemsR3R`R4RR,t exceptionRRRRoRRqRcRRR'RRRRRrRRR(R/RtDEFAULT_LOG_LEVELt LOG_LEVELSRtparsertoptionsR R8Rt streamnameRtktvR<tst_typeRtmetaRtexctypeR((s.lib/python2.7/site-packages/olefile/olefile.pytmains     !             %     !     t__main__(oRt __future__RRRt __author__t__all__RR/R@R-tos.pathRRMRRUR4R?RtxrangeR?RtitemsizeR.RKR`t NameErrorR6Rt version_infoRRRR*R,RRRRRRRRRRR RR R R RtVT_EMPTYtVT_NULLRvRxtVT_R4tVT_R8tVT_CYtVT_DATER}t VT_DISPATCHRzRt VT_VARIANTt VT_UNKNOWNt VT_DECIMALtVT_I1RRwR{tVT_I8tVT_UI8RyR|tVT_VOIDt VT_HRESULTtVT_PTRt VT_SAFEARRAYt VT_CARRAYtVT_USERDEFINEDR~RRRt VT_STREAMt VT_STORAGEtVT_STREAMED_OBJECTtVT_STORED_OBJECTtVT_BLOB_OBJECTRRt VT_VECTORRRRRRR RR=RCRDRKRQRRRRRRR(((s.lib/python2.7/site-packages/olefile/olefile.pyts<      <               *     !