6[_dZddlmZdZdZdZgdZddlZddlZddl Z ddl Z ddl Z ddl Z ddlZeeureZ eZe jdj,d k(rdZnLe jd j,d k(rd Zn*e jd j,d k(rd Zned  ed Zej8ddkrdZndZej<dzfdZedZ dZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ)dZ*dZ+dZ,dZ-d Z.dZ/dZ0dZ1dZ2dZ3dZ4d Z5dZ6dZ7dZ8dZ9d Z:d!Z;d"Zd%Z?d&Z@d'ZAd(ZBd)ZCd*ZDd+ZEd,ZFd-ZGd.ZHd/ZId0ZJd1ZKd2ZLd3ZMd4ZNd5ZOd6ZPd7ZQd8ZRd9ZSd:ZTd;ZUdZXd?ZYd@ZZd!Z[d*Z\d4Z]dAZ^dBZ_dCZ`eeurdDZandEZadTdFZbdTdGZcdHZddIZeGdJdKZfGdLdMejZhGdNdOZiGdPdQZjdRZkeldSk(rekyy#eZYxYw#e$reZY&wxYw)Ua: olefile (formerly OleFileIO_PL) Module to read/write Microsoft OLE2 files (also called Structured Storage or Microsoft Compound Document File Format), such as Microsoft Office 97-2003 documents, Image Composer and FlashPix files, Outlook messages, ... This version is compatible with Python 2.7 and 3.4+ Project website: https://www.decalage.info/olefile olefile is copyright (c) 2005-2018 Philippe Lagadec (https://www.decalage.info) olefile is based on the OleFileIO module from the PIL library v1.1.7 See: http://www.pythonware.com/products/pil/index.htm and http://svn.effbot.org/public/tags/pil-1.1.7/PIL/OleFileIO.py The Python Imaging Library (PIL) is Copyright (c) 1997-2009 by Secret Labs AB Copyright (c) 1995-2009 by Fredrik Lundh See source code and LICENSE.txt for information on usage and redistribution. )print_functionz 2018-09-09z0.46zPhilippe Lagadec) isOleFile OleFileIO OleMetadataenable_loggingMAGIC STGTY_EMPTYKEEP_UNICODE_NAMES STGTY_STREAM STGTY_STORAGE STGTY_ROOTSTGTY_PROPERTYSTGTY_LOCKBYTESMINIMAL_OLEFILE_SIZE DEFECT_UNSUREDEFECT_POTENTIALDEFECT_INCORRECT DEFECT_FATALDEFAULT_PATH_ENCODING MAXREGSECTDIFSECTFATSECT ENDOFCHAINFREESECT MAXREGSIDNOSTREAM UNKNOWN_SIZE WORD_CLSIDNLIiz>Need to fix a bug with 32 bit arrays, please contact author...Tzutf-8c4|tjjjvr(tj|}|j ||Stj|}|j tj|j ||S)an Create a suitable logger object for this module. The goal is not to change settings of the root logger, to avoid getting other modules' logs on the screen. If a logger exists with same name, reuse it. (Else it would have duplicate handlers and messages would be doubled.) The level is set to CRITICAL+1 by default, to avoid any logging. )loggingLoggermanager loggerDict getLoggersetLevel addHandler NullHandler)namelevelloggers 1/usr/lib/python3/dist-packages/olefile/olefile.py get_loggerr2sy w~~%%000""4(   t $F g))+, OOE MolefilecJtjtjy)z Enable logging for this module (disabled by default). This will set the module-specific logger level to NOTSET, which means the main application controls the actual logging level. N)logr+r&NOTSETr3r1rrs LL r3sࡱlllli @ABCDEFGHz$00020900-0000-0000-C000-000000000046(icxt|dr0|jtt}|j dnht |t r%t|tk\r|dtt}n3t|d5}|jtt}dddtk(ryy#1swYxYw)aJ Test if a file is an OLE container (according to the magic bytes in its header). .. note:: This function only checks the first 8 bytes of the file, not the rest of the OLE structure. .. versionadded:: 0.16 :param filename: filename, contents or file-like object of the OLE file (string-like or file-like object) - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read and seek methods), it is parsed as-is. :type filename: bytes or str or unicode or file :returns: True if OLE, False otherwise. :rtype: bool readrNrbTF) hasattrralenrseek isinstancebytesropen)filenameheaderfps r1rrs0x s5z* a He $X:N)N+3u:&(D ! )RWWSZ(F )   ) )s >B00B9ct|SN)ordcs r1i8rq?s 1v r3c4|jtur|S|dSNr) __class__intros r1rqrqCsKK3&q0AaD0r3c@tjd|||dzdS)z Converts a 2-bytes (16 bits) string to an integer. :param c: string containing bytes to convert :param o: offset of bytes to convert in string z)rdstriprr|tuplemaprq)clsids r1_clsidr[sj u:   ;;u  4%mS]CqM : #b%"+& '( )*r3cntjdddddd}|tj|dzzS)zL convert FILETIME (64 bits int) to Python datetime.datetime Ar$rr@ microseconds)datetime timedelta)filetime_FILETIME_null_dates r1filetime2datetimerls9 '//aAq!D"X%7%7Xr\%RRRr3c2eZdZdZgdZgdZdZdZdZy)raT class to parse and store metadata from standard properties of OLE files. Available attributes: codepage, title, subject, author, keywords, comments, template, last_saved_by, revision_number, total_edit_time, last_printed, create_time, last_saved_time, num_pages, num_words, num_chars, thumbnail, creating_application, security, codepage_doc, category, presentation_target, bytes, lines, paragraphs, slides, notes, hidden_slides, mm_clips, scale_crop, heading_pairs, titles_of_parts, manager, company, links_dirty, chars_with_spaces, unused, shared_doc, link_base, hlinks, hlinks_changed, version, dig_sig, content_type, content_status, language, doc_version Note: an attribute is set to None when not present in the properties of the OLE file. References for SummaryInformation stream: - https://msdn.microsoft.com/en-us/library/dd942545.aspx - https://msdn.microsoft.com/en-us/library/dd925819%28v=office.12%29.aspx - https://msdn.microsoft.com/en-us/library/windows/desktop/aa380376%28v=vs.85%29.aspx - https://msdn.microsoft.com/en-us/library/aa372045.aspx - http://sedna-soft.de/articles/summary-information-stream/ - https://poi.apache.org/apidocs/org/apache/poi/hpsf/SummaryInformation.html References for DocumentSummaryInformation stream: - https://msdn.microsoft.com/en-us/library/dd945671%28v=office.12%29.aspx - https://msdn.microsoft.com/en-us/library/windows/desktop/aa380374%28v=vs.85%29.aspx - https://poi.apache.org/apidocs/org/apache/poi/hpsf/DocumentSummaryInformation.html new in version 0.25 )codepagetitlesubjectauthorkeywordscommentstemplate last_saved_byrevision_numbertotal_edit_time last_printed create_timelast_saved_time num_pages num_words num_chars thumbnailcreating_applicationsecurity) codepage_doccategorypresentation_targetrglines paragraphsslidesnotes hidden_slidesmm_clips scale_crop heading_pairstitles_of_partsr(company links_dirtychars_with_spacesunused shared_doc link_basehlinkshlinks_changedversiondig_sig content_typecontent_statuslanguage doc_versioncd|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_ d|_ d|_ d|_ d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_!d|_"d|_#d|_$d|_%d|_&d|_'d|_(d|_)d|_*d|_+d|_,d|_-d|_.y)z_ Constructor for OleMetadata All attributes are set to None by default N)/rrrrrrrrrrrrrrrrrrrrrrrgrrrrrrrrrr(rrrrrrrrrrrrrrselfs r1__init__zOleMetadata.__init__s_        !## #$(!   #'     ! !#  !%  "   " r3c8|j|jzD]}t||d|jdrg|j dddg}t t |jD]1}|j|dzd}t||j||3|jdrf|j dd}t t |jD]1}|j|dzd}t||j||3yy) a= Parse standard properties of an OLE file, from the streams ``\x05SummaryInformation`` and ``\x05DocumentSummaryInformation``, if present. Properties are converted to strings, integers or python datetime objects. If a property is not present, its value is set to None. NzSummaryInformationTr@) convert_time no_conversionr$zDocumentSummaryInformationr)SUMMARY_ATTRIBSDOCSUM_ATTRIBSsetattrexists getpropertiesrangerdget)rr4attribpropsr"values r1parse_propertieszOleMetadata.parse_propertiess%++d.A.AA (F D&$ ' ( >>2 3))*B!"*7E3t3345 > !A#t,d2215u= > >>: ;))*J!*#E3t2234 = !A#t,d11!4e< = |tk7r5tjd |jjtd t| D]} tjd | |fz|tk(rO| rtjdntjd|jjtd|d ks|t|k\r`tjd||t|fztjd| | fz|jjtdn |j|||zz|j|} t| |k7r|t|dz k7rtjd|t||||zz|t| fztjd|||zzt| zz|jjtd| j|  ||dz}dj#| } t| |k\r0tjdt| |fz| d|} ||_n| r2tjdt| zt| |_nStjdt| |fzt| |_|jjtdt&j(j+|| y#tjd||||zz|fz|jjtdY>xYw#t $r%|jjtdYnwxYw) a_ Constructor for OleStream class. :param fp: file object, the OLE container or the MiniFAT stream :param sect: sector index of first sector in the stream :param size: total size of the stream :param offset: offset in bytes for the first FAT or MiniFAT sector :param sectorsize: size of one sector :param fat: array/list of sector indexes (FAT or MiniFAT) :param filesize: size of OLE file (for debugging) :param olefileio: OleFileIO object containing this stream :returns: a BytesIO instance containing the OLE stream zOleStream.__init__:zE sect=%d (%X), size=%d, offset=%d, sectorsize=%d, len(fat)=%d, fp=%sz2Attempting to open a stream from a closed OLE FileFTz stream with UNKNOWN SIZEr$nb_sectors = %dz(malformed OLE document, stream too largerz!size == 0 and sect != ENDOFCHAIN:z+incorrect OLE sector index for empty streamzReading stream sector[%d] = %Xhz6Reached ENDOFCHAIN sector for stream with unknown sizez$sect=ENDOFCHAIN before expected sizezincomplete OLE streamzsect=%d (%X) / len(fat)=%dzi=%d / nb_sectors=%d,incorrect OLE FAT, sector index out of rangezsect=%d, seek=%d, filesize=%dOLE sector index out of rangez9sect=%d / len(fat)=%d, seek=%d / filesize=%d, len read=%dzseek+len(read)=%dincomplete OLE sectorr9r3z3Read data of length %d, truncated to stream size %dNz3Read data of length %d, the stream size was unknownz9Read data of length %d, less than expected stream size %dz%OLE stream size is less than declared)r6debugrdrolerkclosedOSErrorr _raise_defectrrrreraappend IndexErrorjoinsizeioBytesIOr)rrksectroffset sectorsizefatfilesize olefileio unknown_size nb_sectorsdatar" sector_datas r1rzOleStream.__init__*s '( Y4VJs3xb BC D 88;;  NO O < s8J&DL II2 3jl+ :  #j01 C HH " "#35_ ` 19+ II9 : HH " "#35b cz"3 A II71d)C Dz!IIVWIIDEHH**+;=TUAvs3x 6$c#h9OOP 01j/AB &&'79gh d!223''*-K ;+s3xz0B U3s8VJtO%;Xs;GWXYZ - 41GKHX1XYZ&&'79PQ KK $ 4y:-]3 nxx~ t9  IIKsSWyZ^N__ `;DDI  IIKcRViW XD DI IIQUXY]U^`dTee fD DI HH " "#35\ ] D$'_  96*T/18<=>&&'79XY &&'79gh  s4P QAQ)RRN)rrrrrr8r3r1rrs &|(r3rceZdZdZdZdZejeek(sJdZdZ dZ dZ dZ d Z d Zd Zdd Zd ZdZy)OleDirectoryEntryz OLE2 Directory Entry z<64sHBBIII16sIQQIIIcP||_||_g|_i|_d|_t j tj|\|_ |_ |_ |_ |_ |_|_}|_|_|_|_|_|_|jt,t.t0t2fvr|j5t6d|jt,k(r|dk7r|j5t6d|dk(r)|jt,k7r|j5t6d|jdkDr|j5t6dd|_ |jd|jd z |_|j;|j8|_t>jAd |jtC|j<fzt>jAd |jzt>jAd |j&zt>jAd |j|j|jfz|jDdk(r|j*dk7ri|j*dk7rZt>jAd|jD|j(|j*|j*fz|j5tFd|j(|_$n*|j(tK|j*dzz|_$t>jAd|jH|j(|j*fztM||_'|jt.k(r%|jHdk7r|j5tPdd|_)|jt,t0fvrp|jHdkDra|jH|jTkr|jt0k(rd|_)nd|_)|jW|j&|jRd|_,y)aI Constructor for an OleDirectoryEntry object. Parses a 128-bytes entry from the OLE Directory stream. :param entry : string (must be 128 bytes long) :param sid : index of this directory entry in the OLE file directory :param olefile: OleFileIO containing this directory entry Fzunhandled OLE storage typerzduplicate OLE root entryzincorrect OLE root entryrUz(incorrect DirEntry name length >64 bytesNr:zDirEntry SID=%d: %sz - type: %dz - sect: %Xhz% - SID left: %d, right: %d, child: %dr9z+sectorsize=%d, sizeLow=%d, sizeHigh=%d (%X)zincorrect OLE stream size z% - size: %d (sizeLow=%d, sizeHigh=%d)zOLE storage with size>0T)-sidr4kids kids_dictusedrxryrSTRUCT_DIRENTRYname_raw namelength entry_typecolorsid_left sid_right sid_child dwUserFlags createTime modifyTime isectStartsizeLowsizeHighr r r r rr name_utf16_decode_utf16_strr.r6rrrrrlongrrr is_minifatminisectorcutoff_check_duplicate_stream sect_chain)rentryrr4rs r1rzOleDirectoryEntry.__init__s0   " MM+;;U C M O O J M N N    O O O L M ??:}lK"X X  ! !"24P Q ??j (SAX  ! !"24N O !8:5  ! !"24N O ??2   ! !"24^ _ DO--(<$//!*;= --doo>  '488T$))_*EEF -$//12 .4??23 9T]] NNDNN=,, -    $}}!dmmz&A G''t}}dmmTUV%%m5PQ DI T]](;R(?@DI 9TYY VZVcVc>X %   T^^ , IINN  &r3ctjd|z|tk(ry|dks"|t|jj k\r!|jj tdy|jj|}tjd|jt|j|j|j|jfz|jr!|jj tdyd|_|j!|j|jj#}||j$vr |jj td|j&j)|||j$|<|j!|j|j+y) a) Walk through red-black tree of children of this directory entry to add all of them to the kids list. (recursive method) :param child_sid: index of child directory entry to use, or None when called first time for the root. (only used during recursion) zappend_kids: child_sid=%dNrzOLE DirEntry index out of rangezHappend_kids: child_sid=%d - %s - sid_left=%d, sid_right=%d, sid_child=%dz#OLE Entry referenced more than onceTz!Duplicate filename in OLE storage)r6rrrdr4 direntriesrr_load_direntryrrr.r r r rr!lowerrrrr#)r child_sidchild name_lowers r1r!zOleDirectoryEntry.append_kidsXsa - 9:   Q;)S)@)@%AA LL & &'79Z [LL// :E II`99d5::.QVQ`Q`ab czz **+;9;EJ   U^^ ,))+JT^^+ **+;79 II  U #).DNN: &   U__ -  $ $ &r3c4|j|jk(SzCompare entries by namer.rothers r1__eq__zOleDirectoryEntry.__eq__syyEJJ&&r3c4|j|jkSr,r-r.s r1__lt__zOleDirectoryEntry.__lt__syy5::%%r3c&|j| Srm)r0r.s r1__ne__zOleDirectoryEntry.__ne__s;;u%%%r3cJ|j|xs|j|Srm)r0r2r.s r1__le__zOleDirectoryEntry.__le__s{{5!7T[[%77r3cgd} ||j}td|zt|jz|d|jt t fvrt|jddt|jtt fvr*|jrtd|zd|jzz|jD]}|j|dzy#t$rd}YwxYw) zADump this entry, and all its subentries (for debug purposes only))z (invalid)z (storage)z(stream)z (lockbytes)z (property)z(root)z (UNKNOWN) endrgz{%s}r:N) rrrrr.r r rr rrr)rtabTYPES type_namekids r1rzOleDirectoryEntry.dumps) $doo.I c#gTYY'< ??|Z8 8 $))W# .  ??}j9 9djj #c'FTZZ// 099 C HHS1W   $#I $sC C,+C,cL|jdk(ryt|jS)z Return modification time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 rN)rrrs r1getmtimezOleDirectoryEntry.getmtime" ??a  11r3cL|jdk(ryt|jS)z Return creation time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 rN)r rrs r1getctimezOleDirectoryEntry.getctimerAr3Nr)rrrrr DIRENTRY_SIZErxcalcsizerrr#r!r0r2r4r6rr@rCr8r3r1rrsf.,OM 6??? +} << <_D3&0,'^'&&8& 2 2r3rceZdZdZdeddefdZdZdZe fdZ d(dZ d)d Z d Z d)d Zd*d Zd*d ZdZdZdZdZdZd+dZd+dZdZdZdZedfdZd,dZd,dZdZdZ dZ!dZ"dZ#d Z$d!Z%d"Z&d#Z'd$Z(d%Z)d-d&Z*d'Z+y).ra OLE container object This class encapsulates the interface to an OLE 2 structured storage file. Use the listdir and openstream methods to access the contents of this file. Object names are given as a list of strings, one for each subentry level. The root entry should be omitted. For example, the following code extracts all image streams from a Microsoft Image Composer file:: ole = OleFileIO("fan.mic") for entry in ole.listdir(): if entry[1:2] == "Image": fin = ole.openstream(entry) fout = open(entry[0:1], "wb") while True: s = fin.read(8192) if not s: break fout.write(s) You can use the viewer application provided with the Python Imaging Library to view the resulting files (which happens to be standard TIFF files). NFc`||_g|_||_||_d|_d|_g|_g|_d|_d|_ d|_ d|_ d|_ d|_ d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_!d|_"d|_#d|_$d|_%d|_&|r|jO||yy)a Constructor for the OleFileIO class. :param filename: file to open. - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param raise_defects: minimal level for defects to be raised as exceptions. (use DEFECT_FATAL for a typical application, DEFECT_INCORRECT for a security-oriented application, see source code for details) :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. :param debug: bool, set debug mode (deprecated, not used anymore) :param path_encoding: None or str, name of the codec to use for path names (streams and storages), or None for Unicode. Unicode by default on Python 3+, UTF-8 on Python 2.x. (new in olefile 0.42, was hardcoded to Latin-1 until olefile v0.41) N) write_mode)(_raise_defects_levelparsing_issuesrI path_encoding _filesize ministream_used_streams_fat_used_streams_minifat byte_order directory_fpr% dll_versionrfirst_difat_sectorfirst_dir_sectorfirst_mini_fat_sectorrk header_clsidheader_signaturemetadatamini_sector_shiftmini_sector_sizemini_stream_cutoff_sizer minifatsectrminisectorsize minor_versionnb_sectnum_difat_sectorsnum_dir_sectorsnum_fat_sectorsnum_mini_fat_sectors reserved1 reserved2root sector_shift sector_sizetransaction_signature_numberrh)rri raise_defectsrIrrLs r1rzOleFileIO.__init__sP:%2!!$*!#%'" "& $%)"  $ !% $'+$  $"! !%##$(!  ,0)  IIh:I 6 r3c|Srmr8rs r1 __enter__zOleFileIO.__enter__6s r3c$|jyrm)close)rargss r1__exit__zOleFileIO.__exit__:s  r3c||jk\rtj||||jj ||ftj |y)a This method should be called for any defect found during file parsing. It may raise an IOError exception according to the minimal level chosen for the OleFileIO object. :param defect_level: defect level, possible values are: - DEFECT_UNSURE : a case which looks weird, but not sure it's a defect - DEFECT_POTENTIAL : a potential defect - DEFECT_INCORRECT : an error according to specifications, but parsing can go on - DEFECT_FATAL : an error which cannot be ignored, parsing is impossible :param message: string describing the defect, used with raised exception. :param exception_type: exception class to be raised, IOError by default N)rJr6errorrKrwarning)r defect_levelmessageexception_types r1rzOleFileIO._raise_defect>sP" 444 4 IIg  ) )    & &'@ A KK r3cz|jd|}|jr|j|j|S|S)a Decode a string encoded in UTF-16 LE format, as found in the OLE directory or in property streams. Return a string encoded according to the path_encoding specified for the OleFileIO object. :param utf16_str: bytes string encoded in UTF-16 LE format :param errors: str, see python documentation for str.decode() :return: str, encoded according to path_encoding zUTF-16LE)decoderLencode)r utf16_strerrors unicode_strs r1rzOleFileIO._decode_utf16_strXs@ &&z6:   %%d&8&8&A A r3c||_t|dr||_n_t|tr-t |t k\rtj||_n"|jrd}nd}t|||_d}|jjdtj |jj}|jjd||_tj!d|j|jfzg|_g|_|jj'd}t |dk7s |ddt(k7r8tj!d |ddd t(|j+t,d d }t/j0|}tj!d ||dzfz|d|}t/j2||\|_|_|_|_|_|_|_ |_!|_"|_#|_$|_%|_&|_'|_(|_)|_*|_+tj!t/j2|||j4t(k7r|j+t,d|j6tYdk7r|j+tZdtj!d|j8ztj!d|j:z|j:dvr|j+tZdtj!d|j<z|j<dk7r|j+tZdd|j>z|_.tj!d|j\z|j\dvr|j+tZd|j:dk(r|j\dk7s|j:dk(r%|j\dk7r|j+tZd d|j@z|_/tj!d!|j^z|j^d"vr|j+tZd#|jBdk7s|jDdk7r|j+tZd$tj!d%|jFz|j\dk(r%|jFdk7r|j+tZd&tj!d'|jHztj!d(|jJztj!d)|jLz|jLdk7r|j+t`d*tj!d+|jNz|jNdk7r?|j+tZd,tjcd-|jNzd|_'tj!d.|jPztj!d/|jRztj!d0|jTztj!d1|jVz||j\zd2z |j\zd2z |_2tj!d3|jd|jdfztg|dd4|_|j\|_4|j^|_5|jN|_6|jo|jJ|jRr|jo|jP|jVr|jo|jT|jq||js|jJ|jP|_:y#|jjdwxYw)5a Open an OLE2 file in read-only or read/write mode. Read and parse the header, FAT and directory. :param filename: string-like or file-like object, OLE file to parse - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. (ignored if filename is not a path) razr+brbrzFile size: %d bytes (%Xh)rNr>zMagic = z instead of z#not an OLE2 structured storage filez<8s16sHHHHHHLLLLLLLLLLzfmt_header size = %d, +FAT = %dizincorrect OLE signaturerEzincorrect CLSID in OLE headerzMinor Version = %dz%DLL Version = %d (expected: 3 or 4))r#r z"incorrect DllVersion in OLE headerz#Byte Order = %X (expected: FFFE)iz!incorrect ByteOrder in OLE headerr:z0Sector Size = %d bytes (expected: 512 or 4096))rr^z#incorrect sector_size in OLE headerr#r r^z3sector_size does not match DllVersion in OLE headerz/MiniFAT Sector Size = %d bytes (expected: 64))rUz(incorrect mini_sector_size in OLE headerz.incorrect OLE header (non-null reserved bytes)z Number of Directory sectors = %dz3incorrect number of directory sectors in OLE headerzNumber of FAT sectors = %dzFirst Directory sector = %Xhz$Transaction Signature Number = %dz5incorrect OLE header (transaction_signature_number>0)z/Mini Stream cutoff size = %Xh (expected: 1000h)z/incorrect mini_stream_cutoff_size in OLE headerzJFixing the mini_stream_cutoff_size to 4096 (mandatory value) instead of %dzFirst MiniFAT sector = %XhzNumber of MiniFAT sectors = %dzFirst DIFAT sector = %XhzNumber of DIFAT sectors = %dr$z/Maximum number of sectors in the file: %d (%Xh)rM);rIrcrkrfrgrdrrrrhreosSEEK_ENDtellrMr6rrOrPrarrrrxrFryrXrWr_rSrQrhrZrerfrbrcrUrjr\rVrdrTra bytearrayrrir[rrtr`rrr^rrloadfat loaddirectoryr]) rrirImoderrj fmt_header header_sizeheader1s r1rhzOleFileIO.openksn"% 8V $DG % (S]>R-Rjj*DG8T*DG   Q $ ww||~H GGLLO! -0PPQ"$%'"c" v;# u!4 IIF2AJF G   |-R SN. ooj1  4 [SXEX7YY[+&( MM*g .'  !       O    " N N    !  -  (  &  %  #  " 6==89  E )   |-F G    " -   /1P Q '$*<*<<> :T=M=MMO   6 )   /1U V 84??JL ??f $   /1T Ud/// EHXHXXZ   ; .   /1V W   a D$4$4c$9   a D$4$4d$:   /1f g !4#9#9 9 DtG\G\\^   ,   /1[ \ >>Q $..A"5   /1a b 58L8LLN   S T%9%91%<   /1f g /$2F2FFH 2T5J5JJL 9D<]<]]_  , , 1   /1h i DtGcGcce  ' '6 1   /1b c KKd445 6+1D ( 4t7Q7QQS 3d6O6OOQ 4t7N7NNP 3d6L6LLN#T%5%55a7Dz..free..z[ END. ]zFATSECT zDIFSECT r$indexr8r9%8X%6X:r9z --->N)rrrrrdrr) rr firstindexVPLfatnamesnbsectnlinesr"lrrauxr.s r1dumpfatzOleFileIO.dumpfatls       S*Q,$ g3s &A %!) % & v AcEE &Ju,-3 75%), %f91vZ'(?#C=Dqs{)$t|d$ % G! r3cd}tjt|}tjdk(r|j t |}||zdz |z}t ddt|D]}t d|zdt t|D]V}||z} t d|| zzdt| | |zD] }||k\rn||} d| z} t | d"t Xy ) zS Display a sector in a human-readable form, for debugging purposes r>bigr$rr8r9rrN)arrayUINT32sys byteorderbyteswaprdrr) rsectorrrr;rrr"rrrr.s r1dumpsectzOleFileIO.dumpsects kk&&) ==E ! LLNS*Q,$ g3s &A %!) % & v AcEE &Ju,-3 75%), %f91vt|d$  % G r3ctjt|}tjdk(r|j |S)z convert a sector to an array of 32 bits unsigned integers, swapping bytes on big endian CPUs such as PowerPC (old Macs) r)rrrrr)rras r1 sect2arrayzOleFileIO.sect2arrays. KK % ==E ! JJLr3ct|tjr|}nE|j|}tj t j r|j|d}|D]}|dz}tjd|z|tk(s |tk(rtjd|S|j|}|j|}|j|z|_ |S)z Adds the indexes of the given sector to the FAT :param sect: string containing the first FAT sector, or array of long integers :returns: index of last FAT sector. Nr9z isect = %Xzfound end of sector chain) rfrrr6 isEnabledForr&DEBUGrrrrgetsectr)rrfat1isectsnextfats r1 loadfat_sectzOleFileIO.loadfat_sects dEKK (D??4(D . d# *EJ&E IIlU* + "ex&7 56  U#Aooa(Gxx')DH * r3ctjd|dd}tjdt|t|dzfztjt|_|j ||jdk7rtjd|jdkr|jtd |j|jk\r|jtd tjd |jdzd z }|jdz |zd z |z}tjd |z|j|k7r td|j}t!|D]}tjd||fz|j#|}|j%|}tj't(j*r|j-||j |d|||}tjd|z|t.t0fvr tdtjdt|j |jkDrUtjdt|j |jfz|j d|j|_tjdt|j |jfztj't(j*r1tjd|j3|j yy)z% Load the FAT table. zDLoading the FAT table, starting with the 1st sector after the headerLrzlen(sect)=%d, so %d integersr rz)DIFAT is used, because file size > 6.8MB.mz#incorrect DIFAT, not enough sectorsz)incorrect DIFAT, first index out of rangezDIFAT analysis...r$z nb_difat = %dzincorrect DIFATzDIFAT block %d, sector %XNznext DIFAT sector: %Xzincorrect end of DIFATz$No DIFAT, because file size < 6.8MB.z!len(fat)=%d, shrunk to nb_sect=%dz6FAT references %d sectors / Maximum %d sectors in filez FAT:)r6rrdrrrrrarcrrrTr`rrIOError iterrangerrrr&rrrrr) rrjrnb_difat_sectorsnb_difat isect_difatr" sector_difatdifats r1rzOleFileIO.loadfats XYb~ 1SYD 1 4MMO ;;v& $  ! !Q & IIA B##s*""#35Z[&&$,,6""<1\] II* ,!% 2A5 ,,S03CCAEHXXH II1 3%%1/0011Kx( C 6![9IIK#||K8  5##GMM2MM,/!!%(9)9":;#$45  2[@B C:x"88677 II< = txx=4<< ' II9S]DLL   GMM * IIl # LL & +r3c |jj|j|dzz|jj|j}t||jk7rDtj d|t||jfz|j td|S#tj d||j|dzz|j fz|j tdYxYw)z Read given sector from file on disk. :param sect: int, sector index :returns: a string containing the sector data. r$z(getsect(): sect=%X, seek=%d, filesize=%drz*getsect(): sect=%X, read=%d, sectorsize=%dr) rkrerr6rrMrrrard)rrrs r1rzOleFileIO.getsectRs$ N GGLLDF3 4 doo. v;$// ) IIBs6{DOO45 6   |-D E  N II@tQ/@A B   |-L Ms +B00A C?crt|ts tdt|trt|dk7r td |jj |j |dzzt||j kr|||j t|z zz }n#t||j kr td|jj|y#tjd||j |dzz|jfz|jtdYxYw)z Write given sector to file on disk. :param sect: int, sector index :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z'write_sect: data must be a bytes stringr$z4write_sect: padding must be a bytes string of 1 charz+write_sect(): sect=%X, seek=%d, filesize=%drData is larger than sector sizeN)rfrg TypeErrorrdrkrerr6rrMrr ValueErrorwrite)rrrpaddings r1 write_sectzOleFileIO.write_sectrs$&EF F'5)S\1_RS S N GGLLDF3 4 t9t & GtT:; ;D Y (>? ?  d N IICtQ/@A B   |-L Ms +C''A D6ct|ts tdt|trt|dk7r td |jj |t|}||jkr|||j|z zz }|j|kr td|jj|y#t jd||jfz|jtdYxYw)z Write given sector to file on disk. :param fp_pos: int, file position :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z,write_mini_sect: data must be a bytes stringr$z9write_mini_sect: padding must be a bytes string of 1 charz)write_mini_sect(): fp_pos=%d, filesize=%drrN)rfrgrrdrkrer6rrMrrr[rr)rfp_posrrlen_datas r1_write_mini_sectzOleFileIO._write_mini_sects$&JK K'5)S\Q->WX X N GGLL t9 d++ + Gt44x?@ @D  8 +>? ?  d N IIAt~~./ 0   |-L Ms Cs r1_findzOleFileIO._findAs$ h +~~c*Hyy Dyy 088>>#tzz|3 0.//D  xxr3c|j|}|j|}|jtk7r t d|j |j |jS)a; Open a stream as a read-only file object (BytesIO). Note: filename is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: file object (read-only) :exception IOError: if filename not found, or if this is not a stream. zthis file is not a stream)rr%rr rrrrrrirrs r1 openstreamzOleFileIO.openstreamasUjj"$   | +56 6zz%**EJJ77r3cZ|js|j|t|j}|jjs|jj||j|j z}t |jD]\}}||z}||z}|jj|dz|jz||j zz} ||dz kr#|||j z|dz|j z} n|||j zd} |j| | y)Nr$)rrrdrgrir[ enumerater) rr data_to_writer block_sizeidxr sect_base sect_offsetrdata_per_sectors r1_write_mini_streamzOleFileIO._write_mini_streamvs!  " "4 ())* yy## II & &t ,%%)>)>> "5#3#34 ;IC *I+Kii**9594;K;KKkZ^ZoZoNooFj1n%"/d6K6K0KcTUgY]YnYnMn"o"/d6K6K0K0L"M  ! !&/ : ;r3c $t|ts td|j|}|j|}|j t k7r td|j}|t|k7r td||jkr&|j tk7r|j||S|j}||jdz z|jz}t j#d|zt%|D]}||dz kr<|||jz|dz|jz} t| |jk(szJ|||jzd} t j#d||jt| ||jzfzt| |jz||jzk(sJ|j'||  |j(|}|t,k7r td y#t*$r td wxYw) aD Write a stream to disk. For now, it is only possible to replace an existing stream by data of the same size. :param stream_name: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :param data: bytes, data to be written, must be the same size as the original stream. z)write_stream: data must be a bytes stringzthis is not a streamz?write_stream: data must be the same size as the existing stream)rrr$rNzGwrite_stream: size=%d sectorsize=%d data_sector=%Xh size%%sectorsize=%drz)incorrect last sector index in OLE stream)rfrgrrr%rr rrrdrrr rrrr6rrrrrr) r stream_namerrrrrrr" data_sectors r1 write_streamzOleFileIO.write_streams$&GH Hjj%$   | +01 1zz 3t9 ^_ _ $'' 'E,<,< ,J**5$*O Odooa/0T__D  #j01z" NA*Q,"Adoo$51doo8MN ;'898"Adoo$5$67  cT__c+.>t@VWXY;'$//94$//;QQRQ OOD+ . Nxx~- N6 : EF F   NLMM Ns G::Hcj |j|}|j|}|jS#YyxYw)a Test if given filename exists as a stream or a storage in the OLE container, and return its type. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: False if object does not exist, its entry type (>0) otherwise: - STGTY_STREAM: a stream - STGTY_STORAGE: a storage - STGTY_ROOT: the root entry F)rr%rrs r1get_typezOleFileIO.get_types9 **X&COOC(E## # s+.2cZ|j|}|j|}|jS)a Return clsid of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: Empty string if clsid is null, a printable representation of the clsid otherwise new in version 0.44 )rr%rrs r1getclsidzOleFileIO.getclsids*jj"${{r3cb|j|}|j|}|jS)a9 Return modification time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )rr%r@rs r1r@zOleFileIO.getmtime-jj"$~~r3cb|j|}|j|}|jS)a1 Return creation time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if creation time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )rr%rCrs r1rCzOleFileIO.getctimerr3c6 |j|}y#YyxYw)a Test if given filename exists as a stream or a storage in the OLE container. Note: filename is case-insensitive. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: True if object exist, else False. TF)r)rrirs r1rzOleFileIO.exists s" **X&C sc|j|}|j|}|jtk7r t d|j S)a2 Return size of a stream in the OLE container, in bytes. :param filename: path of stream in storage tree (see openstream for syntax) :returns: size in bytes (long integer) :exception IOError: if file not found :exception TypeError: if this is not a stream. zobject is not an OLE stream)rr%rr rrrs r1get_sizezOleFileIO.get_sizesDjj"$   | +9: :zzr3c.|jjS)zp Return root entry name. Should usually be 'Root Entry' or 'R' in most implementations. )rgr.rs r1get_rootentry_namezOleFileIO.get_rootentry_name*s yy~~r3c |dk(rg}|}t|tsdj|}|j|}i} |j d}t |dd}|j d}t |dd} |j t|dd|j t|j d d z z}t|d } t| tt|dz } t!| D]} d } t|d| dzz}t|d | dzz}t||}t"j%d|||fz|t&k(rt)||d z}|dk\rh|dz }na|t*k(rt)||d z}nG|t,t.t0fvrt||d z}n#|t2t4fvrt||d z}n|t6t8fvr4t||d z}||dz|dz|zdz }|j;dd}n|t<k(rt||d z}||dz|dz|z}n|t>k(r1t||d z}|jA||dz|dz|dzz}n`|tBk(rtEt||d ztEt||dzdzz}|r}||vryt"j%d||tG|dz fztIjHdddd d d }t"j%d|dzz|tIjJ|dzz}n|dz}n|tLk(rtO||d z}n|tPk(rt ||d z|dz}ne|tRk(rt||d z}||dz|dz|z}n>|tTk(rtWt)||d z}nd}t"j%d||fz|||<|S#t$r=} d t|d | } |jt| t| |cYd} ~ Sd} ~ wwxYw#t$r<} d|t|| fz} |jt| t| Yd} ~ kd} ~ wwxYw)a Return properties described in substream. :param filename: path of stream in storage tree (see openstream for syntax) :param convert_time: bool, if True timestamps will be converted to Python datetime :param no_conversion: None or list of int, timestamps not to be converted (for example total editing time is not a real timestamp) :returns: a dictionary of values indexed by id (integer) NrrQr>rMrIrEs****r z0Error while parsing properties header in stream rrrBz!property id=%d: type=%d offset=%Xiir$rr3r:rz8Converting property #%d to python datetime, value=%d=%fsirztimedelta days=%dl@T$r@rz5property id=%d: type=%d not implemented in parser yetz3Error while parsing property id %d in stream %s: %s),rfrrrrarrer BaseExceptionrrrtypeminrurdrr6rVT_I2r|VT_UI2VT_I4VT_INTVT_ERRORVT_UI4VT_UINTVT_BSTRVT_LPSTRreplaceVT_BLOB VT_LPWSTRr VT_FILETIMErfloatrrVT_UI1rqVT_CLSIDVT_CFVT_BOOLbool)rrirr streampathrkrrrfmtid num_propsexcmsgr" property_idr property_typercountrs r1rzOleFileIO.getproperties2s D M *c**-J __X &  A1Qr7OE A1Sb6NE GGC2J "''#bggaj/!"344AAq I 3s1vz?3 9%b EAK` E!!QqsUm Q1Q3 #Av  =m]c@dde !E)6!8,E~ % "f,6!8,E"ufh&?? 6!8,E"vw&776!8,E"w&99  6!8,EfQhvax~a'78E!MM'37E"g- 6!8,EfQhvax~6E"i/  6!8,E 221VAXfQhuQw>N3OPE"k1 Qq!12d3q&(;K6Lb6PQE$ =(H "\"-ueEl86K!L#MN/7.?.?aAqRS.T+ "5AS9T"UV 3h6H6HV[]_V_6` `!& 1"f,q{OE"h."1VAXfRi#89E"e+ 6!8,EfQhvax~6E"g-!Qq!12E EIIUYdfsXttu%*[!yb EH a  Z #'C   /d3i @K R! ELj!13O88""#3S$s)DD  Es7BO!KP*! P'*2P"P'"P'* Q/31Q**Q/cnt|_|jj||jS)z Parse standard properties streams, return an OleMetadata object containing all the available metadata. (also stored in the metadata attribute of the OleFileIO object) new in version 0.25 )rrYrrs r1 get_metadatazOleFileIO.get_metadatas)$   &&t,}}r3)r )FrD)r)TF)FN),rrrrrrrrmrqrrrrhrorrrrrrrrrrrr&rrrrrrrrrrrr@rCrrrrrr8r3r1rrs8!%L!>SJ7ZCJ!4&]6@,4"J2 !HQ#h"'H@44&'R$4#/%#-LB: @8*;$;G|(     "Vp r3rc  ddl}ddl}d}tjtjtj tj tjd}d}|j|}|jddd d |jd dd d |jdddd|d|j\}}tdtdtdt|dk(r0tt|j!|j"|j$rd|_tj(||j&dt+|D]$} t-|} tdt|td| j/| j1D]} | dddk(std| z | j3| d } t5| j7} | D]c\} } t9| t:t<frt| d!kDr| dd!} t9| t<rd"D]}|t?| vsd#} ntd$| | e|jDrtd&| j1D]} td'tGd(jI| d'd)| jK| }|tLk(r/td*| jO| z| jQ| std+|zttd,| jRD]?}|td-|jTd.|jWd/|jYAt | j[}|j]t| j_}td1|z| jad2r]td3td4| jKd2td5| jOd2| jad6r td7td8| jbr0| jbD] \}}td-|jdd9|"n td:'y#t@jCd%| zYxYw#t@jCd0Y&xYw#t@jCd;|zYxYw) [filename2 ...])usagez-c store_true check_streamsz*check all streams (for debugging purposes))actiondesthelpz-d debug_modez\debug mode, shortcut for -l debug (displays a lot of debug information, for developers only)z-lz --loglevelloglevelstorezBlogging level debug/info/warning/error/critical (default=%default))r'r&defaultr(zolefile version r8z( - https://www.decalage.info/en/olefile rz%(levelname)-8s %(message)s)r/formatzD--------------------------------------------------------------------z%r: propertiesTr2)r$r:r#r r;r<r=rArBrDrErFrGrHrIrJrKrLrMrNrOrPrQrRrSrTz (binary data)z z&Error while parsing property stream %rz Checking streams...-rr9zsize %dzNOT a stream : type=%dz5Modification/Creation times of all directory entries:rz: mtime=z ctime=zError while parsing metadatazRoot entry name: "%s" worddocumentzThis is a Word document.ztype of stream 'WordDocument':zsize :z macros/vbaz%This document may contain VBA macros.z( Non-fatal issues raised during parsing:rNonezError while parsing file %r)3roptparser&rINFOWARNINGERRORCRITICAL OptionParser add_option parse_argsr __version____date__rdr print_helpexitr)r* basicConfigrrrrrsorteditemsrfrrgrr6 exceptionr%rrrr rrr%r.r@rCrrrrrKr)rr5DEFAULT_LOG_LEVEL LOG_LEVELSr#parseroptionsrprir streamnamerkvrpst_typermetargexctypers r1mainrOsY !MMLLOOMM$$  J @E  " " " /F d!$.*Z78] # 1 1*4 1 P &u{{} 5$) /DAq)!j%-@A#&q6B;()#2A)!U3*F!.A'(IaL'8,;(- !. "%A. /  ],$$-."%++- BJ#tCHHZ$89#3G!ll:6G,.i#,,z*BBCz26@A B I J =$uzz(%..*:<= = G >'')  G))+D )D0 1zz.)016 ^8TUh ^ <=::l+AB = >!!$'$6$6@LGS(8(8#>?@f aRD4] &NQ[&[\D > <=& D MM7(B CsS!AS<S A?R RCS2AS9 R%C(SR"S%R?<SS__main__rD)mr __future__rr>r= __author____all__rrrxros.pathrrr&rrgrurxrangerritemsizerrr NameErrorr version_inforr9r2r6rrrrrrrrrr r r rrr rVT_EMPTYVT_NULLrrVT_R4VT_R8VT_CYVT_DATEr  VT_DISPATCHrr VT_VARIANT VT_UNKNOWN VT_DECIMALVT_I1rrrVT_I8VT_UI8rr VT_VOID VT_HRESULTVT_PTR VT_SAFEARRAY VT_CARRAYVT_USERDEFINEDr rrr  VT_STREAM VT_STORAGEVT_STREAMED_OBJECTVT_STORED_OBJECTVT_BLOB_OBJECTrr VT_VECTORrrrrrrrrqr|rrrrrrrrrOrr8r3r1rrs8&x    000 e DI 5;;s! FU[[!# FU[[!#F U VV  A#! #++A-8! ,          AGQuaq%5 17!kbX"' "zj2Ubv "6Ber"6bg rJ"62lyB8" "k bIR*B);B^b2(  4    'T C<1,, *"SW4W4xP( P(l[2[2@ HH^(DD zFQGI<JsF;'G;GGG