Website : rimsha.abasa.com
backdoor
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
proc
/
self
/
root
/
lib
/
python3
/
dist-packages
/
olefile
/
__pycache__
/
Filename :
olefile.cpython-310.pyc
back
Copy
o 6��[_� � @ s� d Z ddlmZ dZdZdZg d�ZddlZddlZddl Z ddl Z ddl Z ddl Z ddlZeeur4eZzeZW n eZY e � d�jd krJdZne � d �jd krUd Zne � d �jd kr`d Zned ��ze W n eys eZY nw d Zej d dk r�dZ ndZ ej d fdd�Z e d�Z dd� Z!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ)dZ*dZ+d Z,dZ-d Z.d Z/d Z0dZ1dZ2d Z3dZ4d Z5d Z6d Z7d Z8d!Z9d"Z:d#Z;d$Z<d%Z=d&Z>d'Z?d(Z@d)ZAd*ZBd+ZCd,ZDd-ZEd.ZFd/ZGd0ZHd1ZId2ZJd3ZKd4ZLd5ZMd6ZNd7ZOd8ZPd9ZQd:ZRd;ZSd<ZTd=ZUd>ZVd?ZWd@ZXdAZYdBZZd#Z[d,Z\d6Z]dCZ^dDZ_dEdF� Z`eeu �r dGdH� ZandIdH� Zad]dJdK�Zbd]dLdM�ZcdNdO� ZddPdQ� ZeG dRdS� dS�ZfG dTdU� dUejg�ZhG dVdW� dW�ZiG dXdY� dY�ZjdZd[� Zkeld\k�r_ek� dS dS )^a: olefile (formerly OleFileIO_PL) Module to read/write Microsoft OLE2 files (also called Structured Storage or Microsoft Compound Document File Format), such as Microsoft Office 97-2003 documents, Image Composer and FlashPix files, Outlook messages, ... This version is compatible with Python 2.7 and 3.4+ Project website: https://www.decalage.info/olefile olefile is copyright (c) 2005-2018 Philippe Lagadec (https://www.decalage.info) olefile is based on the OleFileIO module from the PIL library v1.1.7 See: http://www.pythonware.com/products/pil/index.htm and http://svn.effbot.org/public/tags/pil-1.1.7/PIL/OleFileIO.py The Python Imaging Library (PIL) is Copyright (c) 1997-2009 by Secret Labs AB Copyright (c) 1995-2009 by Fredrik Lundh See source code and LICENSE.txt for information on usage and redistribution. � )�print_functionz 2018-09-09z0.46zPhilippe Lagadec)� isOleFile� OleFileIO� OleMetadata�enable_logging�MAGIC� STGTY_EMPTY�KEEP_UNICODE_NAMES� STGTY_STREAM� STGTY_STORAGE� STGTY_ROOT�STGTY_PROPERTY�STGTY_LOCKBYTES�MINIMAL_OLEFILE_SIZE� DEFECT_UNSURE�DEFECT_POTENTIAL�DEFECT_INCORRECT� DEFECT_FATAL�DEFAULT_PATH_ENCODING� MAXREGSECT�DIFSECT�FATSECT� ENDOFCHAIN�FREESECT� MAXREGSID�NOSTREAM� UNKNOWN_SIZE� WORD_CLSIDN�L� �I�iz>Need to fix a bug with 32 bit arrays, please contact author...T� zutf-8� c C sL | t jjjv rt �| �}|�|� |S t �| �}|�t �� � |�|� |S )an Create a suitable logger object for this module. The goal is not to change settings of the root logger, to avoid getting other modules' logs on the screen. If a logger exists with same name, reuse it. (Else it would have duplicate handlers and messages would be doubled.) The level is set to CRITICAL+1 by default, to avoid any logging. )�logging�Logger�manager� loggerDict� getLogger�setLevel� addHandler� NullHandler)�name�level�logger� r/ �1/usr/lib/python3/dist-packages/olefile/olefile.py� get_logger� s r1 �olefilec C s t �tj� dS )z� Enable logging for this module (disabled by default). This will set the module-specific logger level to NOTSET, which means the main application controls the actual logging level. N)�logr) r$ �NOTSETr/ r/ r/ r0 r � s r s ��ࡱ�l �� l �� l �� l �� � �� � � i���� � � � � � � � � � � � � � � � � � � � � � � � � �@ �A �B �C �D �E �F �G �H � z$00020900-0000-0000-C000-000000000046�( i c C s� t | d�r| �tt��}| �d� n0t| t�r&t| �tkr&| dtt�� }n t| d��}|�tt��}W d � n1 s=w Y |tkrHdS dS )aJ Test if a file is an OLE container (according to the magic bytes in its header). .. note:: This function only checks the first 8 bytes of the file, not the rest of the OLE structure. .. versionadded:: 0.16 :param filename: filename, contents or file-like object of the OLE file (string-like or file-like object) - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read and seek methods), it is parsed as-is. :type filename: bytes or str or unicode or file :returns: True if OLE, False otherwise. :rtype: bool �readr N�rbTF) �hasattrr\ �lenr �seek� isinstance�bytesr �open)�filename�header�fpr/ r/ r0 r s �r c C s t | �S �N)�ord��cr/ r/ r0 �i8? s rk c C s | j tu r| S | d S �Nr )� __class__�intri r/ r/ r0 rk C s c C � t �d| ||d � �d S )z� Converts a 2-bytes (16 bits) string to an integer. :param c: string containing bytes to convert :param o: offset of bytes to convert in string z<Hr6 r ��struct�unpack�rj �or/ r/ r0 �i16G � ru c C ro )z� Converts a 4-bytes (32 bits) string to an integer. :param c: string containing bytes to convert :param o: offset of bytes to convert in string z<Ir r rp rs r/ r/ r0 �i32Q rv rw c C sT t | �dksJ �| �d�sdS dt| d�t| d�t| d�fttt| dd� �� S ) z^ Converts a CLSID to a human-readable string. :param clsid: string of length 16. rA � � z0%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02Xr r r8 r: )r_ �striprw ru �tuple�maprk )�clsidr/ r/ r0 �_clsid[ s ��r~ c C s( t � dddddd�}|t j| d d� S )zL convert FILETIME (64 bits int) to Python datetime.datetime �A r# r r< �� microseconds)�datetime� timedelta)�filetime�_FILETIME_null_dater/ r/ r0 �filetime2datetimel s r� c @ s8 e Zd ZdZg d�Zg d�Zdd� Zdd� Zdd � Zd S ) r aT class to parse and store metadata from standard properties of OLE files. Available attributes: codepage, title, subject, author, keywords, comments, template, last_saved_by, revision_number, total_edit_time, last_printed, create_time, last_saved_time, num_pages, num_words, num_chars, thumbnail, creating_application, security, codepage_doc, category, presentation_target, bytes, lines, paragraphs, slides, notes, hidden_slides, mm_clips, scale_crop, heading_pairs, titles_of_parts, manager, company, links_dirty, chars_with_spaces, unused, shared_doc, link_base, hlinks, hlinks_changed, version, dig_sig, content_type, content_status, language, doc_version Note: an attribute is set to None when not present in the properties of the OLE file. References for SummaryInformation stream: - https://msdn.microsoft.com/en-us/library/dd942545.aspx - https://msdn.microsoft.com/en-us/library/dd925819%28v=office.12%29.aspx - https://msdn.microsoft.com/en-us/library/windows/desktop/aa380376%28v=vs.85%29.aspx - https://msdn.microsoft.com/en-us/library/aa372045.aspx - http://sedna-soft.de/articles/summary-information-stream/ - https://poi.apache.org/apidocs/org/apache/poi/hpsf/SummaryInformation.html References for DocumentSummaryInformation stream: - https://msdn.microsoft.com/en-us/library/dd945671%28v=office.12%29.aspx - https://msdn.microsoft.com/en-us/library/windows/desktop/aa380374%28v=vs.85%29.aspx - https://poi.apache.org/apidocs/org/apache/poi/hpsf/DocumentSummaryInformation.html new in version 0.25 )�codepage�title�subject�author�keywords�comments�template� last_saved_by�revision_number�total_edit_time� last_printed� create_time�last_saved_time� num_pages� num_words� num_chars� thumbnail�creating_application�security) � codepage_doc�category�presentation_targetrb �lines� paragraphs�slides�notes� hidden_slides�mm_clips� scale_crop� heading_pairs�titles_of_partsr& �company� links_dirty�chars_with_spaces�unused� shared_doc� link_base�hlinks�hlinks_changed�version�dig_sig� content_type�content_status�language� doc_versionc C s d| _ d| _d| _d| _d| _d| _d| _d| _d| _d| _ d| _ d| _ d| _ d| _ d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _ d| _ d| _ d| _ d| _ d| _!d| _"d| _#d| _$d| _%d| _&d| _'d| _(d| _)d| _*d| _+d| _,d| _-d| _.dS )z_ Constructor for OleMetadata All attributes are set to None by default N)/r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rb r� r� r� r� r� r� r� r� r� r& r� r� r� r� r� r� r� r� r� r� r� r� r� r� ��selfr/ r/ r0 �__init__� s^ zOleMetadata.__init__c C s� | j | j D ]}t| |d� q|�d�r8|jdddgd�}tt| j ��D ]}|�|d d�}t| | j | |� q$|�d�r_|jddd�}tt| j��D ]}|�|d d�}t| | j| |� qKdS dS ) a= Parse standard properties of an OLE file, from the streams ``\x05SummaryInformation`` and ``\x05DocumentSummaryInformation``, if present. Properties are converted to strings, integers or python datetime objects. If a property is not present, its value is set to None. NzSummaryInformationTr< )� convert_time� no_conversionr# zDocumentSummaryInformation�r� )�SUMMARY_ATTRIBS�DOCSUM_ATTRIBS�setattr�exists� getproperties�ranger_ �get)r� r2 �attrib�propsr! �valuer/ r/ r0 �parse_properties� s$ � ��z OleMetadata.parse_propertiesc C sh t d� | jD ]}t| |�}t d|t|�f � qt d� | jD ]}t| |�}t d|t|�f � q dS )z< Dump all metadata, for debugging purposes. z*Properties from SummaryInformation stream:�- %s: %sz2Properties from DocumentSummaryInformation stream:N)�printr� �getattr�reprr� )r� �propr� r/ r/ r0 �dump s �zOleMetadata.dumpN) �__name__� __module__� __qualname__�__doc__r� r� r� r� r� r/ r/ r/ r0 r z s $8 r c @ s e Zd ZdZdd� ZdS )� OleStreama� OLE2 Stream Returns a read-only file object which can be used to read the contents of a OLE stream (instance of the BytesIO class). To open a stream, use the openstream method in the OleFile class. This function can be used with either ordinary streams, or ministreams, depending on the offset, sectorsize, and fat table arguments. Attributes: - size: actual size of data stream, after it was opened. c C s" t �d� t �d|||||t|�t|�f � || _| jjjr#td��d} |tkr6t|�| }d} t �d� ||d | } t �d| � | t|�krR| j� t d � g } |d krh|t krht �d � | j� t d � t | �D ]�} t �d | |f � |t kr�| r�t �d� n�t �d� | j� t d� |d k s�|t|�kr�t �d||t|�f � t �d| | f � | j� t d� n�z |� ||| � W n t �d|||| |f � | j� t d� Y n_|�|�} t| �|k�r |t|�d k�r t �d|t|�||| |t| �f � t �d||| t| � � | j� t d� | �| � z|| d@ }W ql t�y= | j� t d� Y nw d�| �} t| �|k�r_t �dt| �|f � | d |� } || _n)| �rqt �d t| � � t| �| _nt �d t| �|f � t| �| _| j� t d � tj�| | � d S ) a_ Constructor for OleStream class. :param fp: file object, the OLE container or the MiniFAT stream :param sect: sector index of first sector in the stream :param size: total size of the stream :param offset: offset in bytes for the first FAT or MiniFAT sector :param sectorsize: size of one sector :param fat: array/list of sector indexes (FAT or MiniFAT) :param filesize: size of OLE file (for debugging) :param olefileio: OleFileIO object containing this stream :returns: a BytesIO instance containing the OLE stream zOleStream.__init__:zE sect=%d (%X), size=%d, offset=%d, sectorsize=%d, len(fat)=%d, fp=%sz2Attempting to open a stream from a closed OLE FileFTz stream with UNKNOWN SIZEr# �nb_sectors = %dz(malformed OLE document, stream too larger z!size == 0 and sect != ENDOFCHAIN:z+incorrect OLE sector index for empty streamz Reading stream sector[%d] = %Xhz6Reached ENDOFCHAIN sector for stream with unknown sizez$sect=ENDOFCHAIN before expected sizezincomplete OLE streamzsect=%d (%X) / len(fat)=%dzi=%d / nb_sectors=%d�,incorrect OLE FAT, sector index out of rangez sect=%d, seek=%d, filesize=%d� OLE sector index out of rangez9sect=%d / len(fat)=%d, seek=%d / filesize=%d, len read=%dzseek+len(read)=%d�incomplete OLE sectorr5 � z3Read data of length %d, truncated to stream size %dNz3Read data of length %d, the stream size was unknownz9Read data of length %d, less than expected stream size %dz%OLE stream size is less than declared)r3 �debugr_ r� �olerf �closed�OSErrorr � _raise_defectr r r� r` r\ �append� IndexError�join�size�io�BytesIOr� )r� rf �sectr� �offset� sectorsize�fat�filesize� olefileio� unknown_size� nb_sectors�datar! � sector_datar/ r/ r0 r� * s� � � � � zOleStream.__init__N)r� r� r� r� r� r/ r/ r/ r0 r� s r� c @ s� e Zd ZdZdZdZe�e�eksJ �dd� Zdd� Z dd � Z d d � Z d d � Z dd� Z dd� Zdd� Zd dd�Zdd� Zdd� ZdS ) �OleDirectoryEntryz OLE2 Directory Entry z<64sHBBIII16sIQQIII� c C s` || _ || _g | _i | _d| _t�tj|�\| _ | _ | _ | _ | _ | _| _}| _| _| _| _| _| _| j ttttfvr@|�td� | j tkrO|dkrO|�td� |dkr^| j tkr^|�td� | j dkrl|�td� d| _ | j d| j d � | _ |� | j �| _ t � d | j t!| j �f � t � d | j � t � d | j � t � d | j | j| jf � |j"dkr�| jdkr�| jdkr�t � d|j"| j| j| jf � |�t#d� | j| _$n | jt%| j�d> | _$t � d| j$| j| jf � t&|�| _'| j tkr�| j$dkr�|�t(d� d| _)| j ttfv �r+| j$dk�r+| j$|j*k �r | j tk�r d| _)nd| _)|�+| j| j)� d| _,dS )aI Constructor for an OleDirectoryEntry object. Parses a 128-bytes entry from the OLE Directory stream. :param entry : string (must be 128 bytes long) :param sid : index of this directory entry in the OLE file directory :param olefile: OleFileIO containing this directory entry Fzunhandled OLE storage typer zduplicate OLE root entryzincorrect OLE root entryrQ z(incorrect DirEntry name length >64 bytesNr6 zDirEntry SID=%d: %sz - type: %dz - sect: %Xhz% - SID left: %d, right: %d, child: %d� r5 z+sectorsize=%d, sizeLow=%d, sizeHigh=%d (%X)zincorrect OLE stream size� z% - size: %d (sizeLow=%d, sizeHigh=%d)zOLE storage with size>0T)-�sidr2 �kids� kids_dict�usedrq rr r� �STRUCT_DIRENTRY�name_raw� namelength� entry_type�color�sid_left� sid_right� sid_child� dwUserFlags� createTime� modifyTime� isectStart�sizeLow�sizeHighr r r r r� r � name_utf16�_decode_utf16_strr, r3 r� r� r� r r� �longr~ r} r � is_minifat�minisectorcutoff�_check_duplicate_stream� sect_chain)r� �entryr� r2 r} r/ r/ r0 r� � st � � � zOleDirectoryEntry.__init__c C s� | j rd S | jttfvs| jdkrd S t� | _ | jr!|js!|�� | j }|t krB| j � |� | jr7|j| }n|j | }|t ks(d S d S rl ) r r� r r r� �listr �minifat� loadminifatr� r r� r� )r� r2 � next_sectr/ r/ r0 �build_sect_chain- s �z"OleDirectoryEntry.build_sect_chainc C sF t �d| jt| j�| jf � | jtkr!| �| j� | j� � dS dS )z� Read and build the red-black tree attached to this OleDirectoryEntry object, if it is a storage. Note that this method builds a tree of all subentries, so it should only be called for the root object once. z.build_storage_tree: SID=%d - %s - sid_child=%dN) r3 r� r� r� r, r� r � append_kidsr� �sortr� r/ r/ r0 �build_storage_tree@ s � �z$OleDirectoryEntry.build_storage_treec C s� t �d| � |tkr dS |dk s|t| jj�kr"| j�td� dS | j�|�}t �d|j t |j �|j |j |jf � |jrG| j�td� dS d|_| �|j � |j �� }|| jv ra| j�td� | j�|� || j|< | �|j � |�� dS ) a) Walk through red-black tree of children of this directory entry to add all of them to the kids list. (recursive method) :param child_sid: index of child directory entry to use, or None when called first time for the root. (only used during recursion) zappend_kids: child_sid=%dNr z OLE DirEntry index out of rangezHappend_kids: child_sid=%d - %s - sid_left=%d, sid_right=%d, sid_child=%dz#OLE Entry referenced more than onceTz!Duplicate filename in OLE storage)r3 r� r r_ r2 � direntriesr� r �_load_direntryr� r� r, r� r� r� r� r �lowerr� r� r� r )r� � child_sid�child� name_lowerr/ r/ r0 r X s2 �� � z OleDirectoryEntry.append_kidsc C s | j |j kS �zCompare entries by name�r, �r� �otherr/ r/ r0 �__eq__� � zOleDirectoryEntry.__eq__c C s | j |j k S r r r r/ r/ r0 �__lt__� r zOleDirectoryEntry.__lt__c C s | � |� S rg )r r r/ r/ r0 �__ne__� � zOleDirectoryEntry.__ne__c C s | � |�p | �|�S rg )r r r r/ r/ r0 �__le__� s zOleDirectoryEntry.__le__r c C s� g d�}z|| j }W n ty d}Y nw td| t| j� |dd� | j ttfv r4t| jddd� t� | j ttfv rL| j rLtd| d| j � | j D ] }|� |d � qOdS ) zADump this entry, and all its subentries (for debug purposes only))z (invalid)z (storage)z(stream)z (lockbytes)z (property)z(root)z (UNKNOWN)� ��endrb z{%s}r6 N) r� r� r� r� r, r r r� r r} r� r� )r� �tab�TYPES� type_name�kidr/ r/ r0 r� � s � �zOleDirectoryEntry.dumpc C � | j dkrdS t| j �S )z� Return modification time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 r N)r� r� r� r/ r/ r0 �getmtime� � zOleDirectoryEntry.getmtimec C r' )z� Return creation time of a directory entry. :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 r N)r� r� r� r/ r/ r0 �getctime� r) zOleDirectoryEntry.getctimeN�r )r� r� r� r� r� � DIRENTRY_SIZErq �calcsizer� r r r r r r r r� r( r* r/ r/ r/ r0 r� � s b/ r� c @ sZ e Zd ZdZdeddefdd�Zdd� Zdd � Ze fd d �Z dPd d�Z dQdd�Z dd� Z dQdd�ZdRdd�ZdRdd�Zdd� Zd d � Zd d � Zd d!� Zd"d#� ZdSd%d&�ZdSd'd(�Zd)d*� Zd+d,� Zd-d.� Zedfd/d0�Z dTd2d3�Z dTd4d5�Z d6d7� Z d8d9� Z d:d;� Z!d<d=� Z"d>d?� Z#d@dA� Z$dBdC� Z%dDdE� Z&dFdG� Z'dHdI� Z(dJdK� Z)dUdLdM�Z*dNdO� Z+dS )Vr a� OLE container object This class encapsulates the interface to an OLE 2 structured storage file. Use the listdir and openstream methods to access the contents of this file. Object names are given as a list of strings, one for each subentry level. The root entry should be omitted. For example, the following code extracts all image streams from a Microsoft Image Composer file:: ole = OleFileIO("fan.mic") for entry in ole.listdir(): if entry[1:2] == "Image": fin = ole.openstream(entry) fout = open(entry[0:1], "wb") while True: s = fin.read(8192) if not s: break fout.write(s) You can use the viewer application provided with the Python Imaging Library to view the resulting files (which happens to be standard TIFF files). NFc C s || _ g | _|| _|| _d| _d| _g | _g | _d| _d| _ d| _ d| _ d| _ d| _ d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _ d| _ d| _ d| _ d| _ d| _!d| _"d| _#d| _$d| _%d| _&|r�| j'||d� dS dS )a� Constructor for the OleFileIO class. :param filename: file to open. - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param raise_defects: minimal level for defects to be raised as exceptions. (use DEFECT_FATAL for a typical application, DEFECT_INCORRECT for a security-oriented application, see source code for details) :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. :param debug: bool, set debug mode (deprecated, not used anymore) :param path_encoding: None or str, name of the codec to use for path names (streams and storages), or None for Unicode. Unicode by default on Python 3+, UTF-8 on Python 2.x. (new in olefile 0.42, was hardcoded to Latin-1 until olefile v0.41) N)� write_mode)(�_raise_defects_level�parsing_issuesr. � path_encoding� _filesize� ministream�_used_streams_fat�_used_streams_minifat� byte_order� directory_fpr � dll_versionr� �first_difat_sector�first_dir_sector�first_mini_fat_sectorrf � header_clsid�header_signature�metadata�mini_sector_shift�mini_sector_size�mini_stream_cutoff_sizer � minifatsectr �minisectorsize� minor_version�nb_sect�num_difat_sectors�num_dir_sectors�num_fat_sectors�num_mini_fat_sectors� reserved1� reserved2�root� sector_shift� sector_size� transaction_signature_numberrc )r� rd � raise_defectsr. r� r1 r/ r/ r0 r� � sV �zOleFileIO.__init__c C s | S rg r/ r� r/ r/ r0 � __enter__6 s zOleFileIO.__enter__c G s | � � d S rg )�close)r� �argsr/ r/ r0 �__exit__: r zOleFileIO.__exit__c C s: || j krt�|� ||��| j�||f� t�|� dS )a� This method should be called for any defect found during file parsing. It may raise an IOError exception according to the minimal level chosen for the OleFileIO object. :param defect_level: defect level, possible values are: - DEFECT_UNSURE : a case which looks weird, but not sure it's a defect - DEFECT_POTENTIAL : a potential defect - DEFECT_INCORRECT : an error according to specifications, but parsing can go on - DEFECT_FATAL : an error which cannot be ignored, parsing is impossible :param message: string describing the defect, used with raised exception. :param exception_type: exception class to be raised, IOError by default N)r/ r3 �errorr0 r� �warning)r� � defect_level�message�exception_typer/ r/ r0 r� > s zOleFileIO._raise_defect�replacec C s$ |� d|�}| jr|�| j|�S |S )a� Decode a string encoded in UTF-16 LE format, as found in the OLE directory or in property streams. Return a string encoded according to the path_encoding specified for the OleFileIO object. :param utf16_str: bytes string encoded in UTF-16 LE format :param errors: str, see python documentation for str.decode() :return: str, encoded according to path_encoding zUTF-16LE)�decoder1 �encode)r� � utf16_str�errors� unicode_strr/ r/ r0 r X s zOleFileIO._decode_utf16_strc C s� || _ t|d�r || _n t|t�r t|�tkr t�|�| _n| j r$d}nd}t ||�| _d}| j� dt j � z | j� � }W | j� d� n| j� d� w || _t�d| j| jf � g | _g | _| j�d�}t|�dkss|dd� tkr�t�d |dd� tf � | �td � d }t�|�}t�d ||d f � |d|� }t�||�\| _| _| _ | _ | _ | _ | _ | _!| _"| _#| _$| _%| _&| _'| _(| _)| _*| _+t�t�||�� | jtkr�| �td� | jt,d�kr�| �t-d� t�d| j � t�d| j � | j dv�r| �t-d� t�d| j � | j dk�r| �t-d� d| j | _.t�d| j. � | j.dv�r3| �t-d� | j d k�r?| j.dk�sK| j d k�rQ| j.d k�rQ| �t-d � d| j | _/t�d | j/ � | j/d!v�rk| �t-d"� | j!dk�sw| j"dk�r}| �t-d#� t�d$| j# � | j.dk�r�| j#dk�r�| �t-d%� t�d&| j$ � t�d'| j% � t�d(| j& � | j&dk�r�| �t0d)� t�d*| j' � | j'd k�r�| �t-d+� t�1d,| j' � d | _'t�d-| j( � t�d.| j) � t�d/| j* � t�d0| j+ � || j. d1 | j. d1 | _2t�d2| j2| j2f � t3|dd3� �| _| j.| _4| j/| _5| j'| _6| �7| j%� | j)�r7| �7| j(� | j+�rA| �7| j*� | �8|� | �9| j%� | j(| _:dS )4a� Open an OLE2 file in read-only or read/write mode. Read and parse the header, FAT and directory. :param filename: string-like or file-like object, OLE file to parse - if filename is a string smaller than 1536 bytes, it is the path of the file to open. (bytes or unicode string) - if filename is a string longer than 1535 bytes, it is parsed as the content of an OLE file in memory. (bytes type only) - if filename is a file-like object (with read, seek and tell methods), it is parsed as-is. :param write_mode: bool, if True the file is opened in read/write mode instead of read-only by default. (ignored if filename is not a path) r\ zr+br] r zFile size: %d bytes (%Xh)r� Nr: zMagic = %r instead of %rz#not an OLE2 structured storage filez<8s16sHHHHHHLLLLLLLLLLz fmt_header size = %d, +FAT = %di� zincorrect OLE signaturerA z incorrect CLSID in OLE headerzMinor Version = %dz%DLL Version = %d (expected: 3 or 4))r" r z"incorrect DllVersion in OLE headerz#Byte Order = %X (expected: FFFE)i�� z!incorrect ByteOrder in OLE headerr6 z0Sector Size = %d bytes (expected: 512 or 4096))r� rZ z#incorrect sector_size in OLE headerr" r rZ z3sector_size does not match DllVersion in OLE headerz/MiniFAT Sector Size = %d bytes (expected: 64))rQ z(incorrect mini_sector_size in OLE headerz.incorrect OLE header (non-null reserved bytes)z Number of Directory sectors = %dz3incorrect number of directory sectors in OLE headerzNumber of FAT sectors = %dz First Directory sector = %Xhz$Transaction Signature Number = %dz5incorrect OLE header (transaction_signature_number>0)z/Mini Stream cutoff size = %Xh (expected: 1000h)z/incorrect mini_stream_cutoff_size in OLE headerzJFixing the mini_stream_cutoff_size to 4096 (mandatory value) instead of %dz First MiniFAT sector = %Xhz Number of MiniFAT sectors = %dz First DIFAT sector = %Xhz Number of DIFAT sectors = %dr# z/Maximum number of sectors in the file: %d (%Xh)rI );r. r^ rf ra rb r_ r r� r� rc r` �os�SEEK_END�tellr2 r3 r� r4 r5 r\ r r� r rq r- rr r= r< rD r8 r6 rM r? rJ rK rG rH r: rO rA r; rI r9 rF � bytearrayr rN r@ r rV rE r~ r� rC r r �loadfat� loaddirectoryrB ) r� rd r. �moder� re � fmt_header� header_size�header1r/ r/ r0 rc k s� ' � � zOleFileIO.openc C � | j �� dS )z@ close the OLE file, to release the file object N)rf rR r� r/ r/ r0 rR K � zOleFileIO.closec C sh |r t �d| � | j}nt �d| � |ttttfv r dS | j}||v r-| �t d� dS |� |� dS )ag Checks if a stream has not been already referenced elsewhere. This method should only be called once for each known stream, and only if stream size is not null. :param first_sect: int, index of first sector of the stream in FAT :param minifat: bool, if True, stream is located in the MiniFAT, else in the FAT z,_check_duplicate_stream: sect=%Xh in MiniFATz(_check_duplicate_stream: sect=%Xh in FATNzStream referenced twice) r3 r� r5 r r r r r4 r� r r� )r� � first_sectr � used_streamsr/ r/ r0 r R s z!OleFileIO._check_duplicate_streamr c C s� d}t dtdtdtdi}t|�}|| d | }tddd � t|�D ] }td | dd � q"t� t|�D ]G}|| } td || dd � t| | | �D ],}||krS n%|| } | d @ } | |v rd|| } n | |d krmd } nd | } t| dd � qKt� q4dS )zU Display a part of FAT in human-readable form for debugging purposes r: z..free..z[ END. ]zFATSECT zDIFSECT r# �indexr r! �%8X�%6X:r5 z --->N)r r r r r_ r� r� ) r� r� � firstindex�VPL�fatnames�nbsect�nlinesr! �lrn r� �auxr, r/ r/ r0 �dumpfatl s8 � �zOleFileIO.dumpfatc C s� d}t � t|�}tjdkr|�� t|�}|| d | }tddd� t|�D ] }td| dd� q't� t|�D ]1}|| } td|| dd� t| | | �D ]}||krX n|| } d| } t| dd� qPt� q9d S ) zS Display a sector in a human-readable form, for debugging purposes r: �bigr# rn r r! ro rp N)�array�UINT32�sys� byteorder�byteswapr_ r� r� ) r� �sectorrq rr r# rt ru r! rv rn r� r, r/ r/ r0 �dumpsect� s* �zOleFileIO.dumpsectc C s" t � t|�}tjdkr|�� |S )z� convert a sector to an array of 32 bits unsigned integers, swapping bytes on big endian CPUs such as PowerPC (old Macs) ry )rz r{ r| r} r~ )r� r� �ar/ r/ r0 � sect2array� s zOleFileIO.sect2arrayc C s� t |tj�r |}n| �|�}t�tj�r| �|� d}|D ]-}|d@ }t�d| � |t ks2|t kr:t�d� |S | � |�}| �|�}| j | | _ q |S )z� Adds the indexes of the given sector to the FAT :param sect: string containing the first FAT sector, or array of long integers :returns: index of last FAT sector. Nr5 z isect = %Xzfound end of sector chain) ra rz r� r3 � isEnabledForr$ �DEBUGr� r� r r �getsectr� )r� r� �fat1�isect�s�nextfatr/ r/ r0 � loadfat_sect� s" � zOleFileIO.loadfat_sectc C s� t �d� |dd� }t �dt|�t|�d f � t�t�| _| �|� | jdkr�t �d� | jdkr:| � t d � | j | j krF| � t d � t �d � | jd d }| jd | d | }t �d | � | j|krmtd��| j }t|�D ]4}t �d||f � | �|�}| �|�}t �tj�r�| �|� | �|d|� � || }t �d| � qt|ttfvr�td��nt �d� t| j�| j kr�t �dt| j�| j f � | jd| j � | _t �dt| j�| j f � t �tj�r�t �d� | �| j� dS dS )z% Load the FAT table. zDLoading the FAT table, starting with the 1st sector after the header�L r� z len(sect)=%d, so %d integersr r z)DIFAT is used, because file size > 6.8MB.�m z#incorrect DIFAT, not enough sectorsz)incorrect DIFAT, first index out of rangezDIFAT analysis...r# z nb_difat = %dzincorrect DIFATzDIFAT block %d, sector %XNznext DIFAT sector: %Xzincorrect end of DIFATz$No DIFAT, because file size < 6.8MB.z!len(fat)=%d, shrunk to nb_sect=%dz6FAT references %d sectors / Maximum %d sectors in filez FAT:)r3 r� r_ rz r{ r� r� rF rH r� r r9 rE r r� �IOError� iterranger� r� r� r$ r� r� r r rx ) r� re r� �nb_difat_sectors�nb_difat� isect_difatr! � sector_difat�difatr/ r/ r0 rd � sN � �zOleFileIO.loadfatc C s� | j | j }| jj| j d | j }|d }t�d| j| j |||f � ||kr.| �t d� | j | j|dd�� � }| � |�| _ t�dt| j �|f � | j d|� | _ t�d t| j � � t�tj�rpt�d � | �| j � dS dS ) z) Load the MiniFAT table. r# r zaloadminifat(): minifatsect=%d, nb FAT sectors=%d, used_size=%d, stream_size=%d, nb MiniSectors=%dz%OLE MiniStream is larger than MiniFATT�� force_FATz$MiniFAT shrunk from %d to %d sectorsNzloadminifat(): len=%dz MiniFAT:)rI rN rL r� r@ r3 r� rB r� r �_openr\ r� r r_ r� r$ r� rx )r� � stream_size�nb_minisectors� used_sizer� r/ r/ r0 r . s" � �zOleFileIO.loadminifatc C s� z | j �| j|d � W n t�d|| j|d | jf � | �td� Y | j �| j�}t |�| jkrIt�d|t |�| jf � | �td� |S )z� Read given sector from file on disk. :param sect: int, sector index :returns: a string containing the sector data. r# z(getsect(): sect=%X, seek=%d, filesize=%dr� z*getsect(): sect=%X, read=%d, sectorsize=%dr� ) rf r` r� r3 r� r2 r� r r\ r_ )r� r� r r/ r/ r0 r� R s �� zOleFileIO.getsectrx c C s� t |t�s td��t |t�rt|�dkrtd��z | j�| j|d � W n t�d|| j|d | j f � | � t d� Y t|�| jk rS||| jt|� 7 }n t|�| jk r^t d��| j� |� dS )z� Write given sector to file on disk. :param sect: int, sector index :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z'write_sect: data must be a bytes stringr# z4write_sect: padding must be a bytes string of 1 charz+write_sect(): sect=%X, seek=%d, filesize=%dr� � Data is larger than sector sizeN)ra rb � TypeErrorr_ rf r` r� r3 r� r2 r� r � ValueError�write)r� r� r� �paddingr/ r/ r0 � write_sectr s �zOleFileIO.write_sectc C s� t |t�s td��t |t�rt|�dkrtd��z| j�|� W n t�d|| jf � | � t d� Y t|�}|| j k rG||| j | 7 }| j |k rPt d��| j� |� dS )z� Write given sector to file on disk. :param fp_pos: int, file position :param data: bytes, sector data :param padding: single byte, padding character if data < sector size z,write_mini_sect: data must be a bytes stringr# z9write_mini_sect: padding must be a bytes string of 1 charz)write_mini_sect(): fp_pos=%d, filesize=%dr� r� N)ra rb r� r_ rf r` r3 r� r2 r� r r@ r� r� )r� �fp_posr� r� �len_datar/ r/ r0 �_write_mini_sect� s" � zOleFileIO._write_mini_sectc C sl t �d� | j|dd�| _| jjd }t �d| jj|f � dg| | _| �d�}| jd | _| j�� dS )z] Load the directory. :param sect: sector index of directory stream. zLoading the Directory:Tr� r� z&loaddirectory: size=%d, max_entries=%dNr ) r3 r� r� r7 r� r r rL r )r� r� � max_entries� root_entryr/ r/ r0 re � s � zOleFileIO.loaddirectoryc C s~ |dk s |t | j�kr| �td� | j| dur#| �td� | j| S | j�|d � | j�d�}t||| �| j|< | j| S )aY Load a directory entry from the directory. This method should only be called once for each storage/stream when loading the directory. :param sid: index of storage/stream in the directory. :returns: a OleDirectoryEntry object :exception IOError: if the entry has always been referenced. r z OLE directory index out of rangeNz'double reference for OLE stream/storager� ) r_ r r� r r r7 r` r\ r� )r� r� r r/ r/ r0 r � s � zOleFileIO._load_direntryc C rj )z5 Dump directory (for debugging only) N)rL r� r� r/ r/ r0 � dumpdirectory� rk zOleFileIO.dumpdirectoryc C s� t �d||t|�f � || jk rE|sE| js4| �� | jj}t �d| jj|f � | j | jj|dd�| _t | j||d| j | j | jj| d�S t | j ||| j| j| j| j| d�S )a| Open a stream, either in FAT or MiniFAT according to its size. (openstream helper) :param start: index of first sector :param size: size of stream (or nothing if size is unknown) :param force_FAT: if False (default), stream will be opened in FAT or MiniFAT according to size. If True, it will always be opened in FAT. z1OleFileIO.open(): sect=%Xh, size=%d, force_FAT=%sz%Opening MiniStream: sect=%Xh, size=%dTr� r )rf r� r� r� r� r� r� r� )r3 r� �strr r3 r rL r� r� r� r� rC r rf r� r� r2 )r� �startr� r� �size_ministreamr/ r/ r0 r� � s0 � � � � �zOleFileIO._openTc C s� ||j g }|jD ];}|jtkr)|r |�|dd� |j g � | �|||||� q |jtkr>|r=|�|dd� |j g � q | �td� q dS )a� listdir helper :param files: list of files to fill in :param prefix: current location in storage tree (list of names) :param node: current node (OleDirectoryEntry object) :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) r# NzIThe directory tree contains an entry which is not a stream nor a storage.) r, r� r� r r� �_listr r� r )r� �files�prefix�node�streams�storagesr r/ r/ r0 r� s ��zOleFileIO._listc C s g }| � |g | j||� |S )am Return a list of streams and/or storages stored in this file :param streams: bool, include streams if True (True by default) - new in v0.26 :param storages: bool, include storages if True (False by default) - new in v0.26 (note: the root storage is never included) :returns: list of stream and/or storage paths )r� rL )r� r� r� r� r/ r/ r0 �listdir3 s zOleFileIO.listdirc C sX t |t�r |�d�}| j}|D ]}|jD ] }|j�� |�� kr! nqtd��|}q|jS )a* Returns directory entry of given filename. (openstream helper) Note: this method is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: sid of requested filename :exception IOError: if file not found �/zfile not found) ra � basestring�splitrL r� r, r r� r� )r� rd r� r, r& r/ r/ r0 �_findA s �zOleFileIO._findc C s6 | � |�}| j| }|jtkrtd��| �|j|j�S )a; Open a stream as a read-only file object (BytesIO). Note: filename is case-insensitive. :param filename: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :returns: file object (read-only) :exception IOError: if filename not found, or if this is not a stream. zthis file is not a stream)r� r r� r r� r� r� r� �r� rd r� r r/ r/ r0 � openstreama s zOleFileIO.openstreamc C s� |j s|�| � t|j �}| jj s| j�| � | j| j }t|j �D ]@\}}|| }|| }| jj | d | j || j } ||d k rS||| j |d | j � } n ||| j d � } | �| | � q"d S )Nr# )r r r_ rL rN r@ � enumerater� ) r� r � data_to_writer� � block_size�idxr� � sect_base� sect_offsetr� �data_per_sectorr/ r/ r0 �_write_mini_streamv s �z OleFileIO._write_mini_streamc C sz t |t�s td��| �|�}| j| }|jtkr td��|j}|t |�kr)t d��|| j k r:|jt kr:| j ||d�S |j}|| jd | j }t�d| � t|�D ]`}||d k rr||| j |d | j � } t | �| jksqJ �n(||| j d� } t�d|| jt | �|| j f � t | �| j || j ks�J �| �|| � z| j| }W qR ty� td ��w |tkr�td ��dS ) aD Write a stream to disk. For now, it is only possible to replace an existing stream by data of the same size. :param stream_name: path of stream in storage tree (except root entry), either: - a string using Unix path syntax, for example: 'storage_1/storage_1.2/stream' - or a list of storage filenames, path to the desired stream/storage. Example: ['storage_1', 'storage_1.2', 'stream'] :param data: bytes, data to be written, must be the same size as the original stream. z)write_stream: data must be a bytes stringzthis is not a streamz?write_stream: data must be the same size as the existing stream)r r� r# r� NzGwrite_stream: size=%d sectorsize=%d data_sector=%Xh size%%sectorsize=%dr� z)incorrect last sector index in OLE stream)ra rb r� r� r r� r r� r� r_ r� r r r� r� r� r3 r� r� r� r� r� r ) r� � stream_namer� r� r r� r� r� r! � data_sectorr/ r/ r0 � write_stream� s@ � ��zOleFileIO.write_streamc C s* z| � |�}| j| }|jW S Y dS )a� Test if given filename exists as a stream or a storage in the OLE container, and return its type. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: False if object does not exist, its entry type (>0) otherwise: - STGTY_STREAM: a stream - STGTY_STORAGE: a storage - STGTY_ROOT: the root entry F)r� r r� r� r/ r/ r0 �get_type� s zOleFileIO.get_typec C s | � |�}| j| }|jS )a Return clsid of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: Empty string if clsid is null, a printable representation of the clsid otherwise new in version 0.44 )r� r r} r� r/ r/ r0 �getclsid� s zOleFileIO.getclsidc C � | � |�}| j| }|�� S )a9 Return modification time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if modification time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )r� r r( r� r/ r/ r0 r( � � zOleFileIO.getmtimec C r� )a1 Return creation time of a stream/storage. :param filename: path of stream/storage in storage tree. (see openstream for syntax) :returns: None if creation time is null, a python datetime object otherwise (UTC timezone) new in version 0.26 )r� r r* r� r/ r/ r0 r* � r� zOleFileIO.getctimec C s z| � |�}W dS Y dS )a Test if given filename exists as a stream or a storage in the OLE container. Note: filename is case-insensitive. :param filename: path of stream in storage tree. (see openstream for syntax) :returns: True if object exist, else False. TF)r� )r� rd r� r/ r/ r0 r� s zOleFileIO.existsc C s, | � |�}| j| }|jtkrtd��|jS )a2 Return size of a stream in the OLE container, in bytes. :param filename: path of stream in storage tree (see openstream for syntax) :returns: size in bytes (long integer) :exception IOError: if file not found :exception TypeError: if this is not a stream. zobject is not an OLE stream)r� r r� r r� r� r� r/ r/ r0 �get_size s zOleFileIO.get_sizec C s | j jS )zp Return root entry name. Should usually be 'Root Entry' or 'R' in most implementations. )rL r, r� r/ r/ r0 �get_rootentry_name* s z OleFileIO.get_rootentry_namec C s2 |dkrg }|}t |t�sd�|�}| �|�}i }z7|�d�}t|dd� �}|�d�}t|dd� �} |�t|d�� d|�t|�d ��d � }t|d �} W n% tyu } zd t |�| f } | � t | t | �� |W Y d} ~ S d} ~ ww t | tt|�d ��} t| �D �]�} d }�zft|d| d �}t|d | d �}t||�}t�d |||f � |tkr�t||d �}|dkr�|d }�n*|tkr�t||d �}�n |tttfv r�t||d �}�n |ttfv r�t||d �}n�|tt fv �rt||d �}||d |d | d � }|� dd�}n�|t k�r)t||d �}||d |d | � }n�|t k�rGt||d �}| � ||d |d |d � �}n�|t!k�r�t"t||d ��t"t||d ��d> }|�r�||v�r�t�d||t#|�d f � t$�$dddd d d �}t�d|d � |t$j%|d d� }nX|d }nS|t&k�r�t'||d �}nE|t(k�r�t||d |d � �}n3|t)k�r�t||d �}||d |d | � }n|t*k�r�t+t||d ��}n d}t�d ||f � |||< W q� t�y } zd |t |�| f } | � t | t | �� W Y d} ~ q�d} ~ ww |S ) a� Return properties described in substream. :param filename: path of stream in storage tree (see openstream for syntax) :param convert_time: bool, if True timestamps will be converted to Python datetime :param no_conversion: None or list of int, timestamps not to be converted (for example total editing time is not a real timestamp) :returns: a dictionary of values indexed by id (integer) Nr� rM r: rI rE rA s ****r z6Error while parsing properties header in stream %s: %sr r> z!property id=%d: type=%d offset=%Xi � i r# rx r� r6 r� z8Converting property #%d to python datetime, value=%d=%fsi��� r ztimedelta days=%dl @�T$r< r� z5property id=%d: type=%d not implemented in parser yetz3Error while parsing property id %d in stream %s: %s),ra r� r� r� r\ r~ r` rw � BaseExceptionr� r� r �type�minrn r_ r� r3 r� �VT_I2ru �VT_UI2�VT_I4�VT_INT�VT_ERROR�VT_UI4�VT_UINT�VT_BSTR�VT_LPSTRrZ �VT_BLOB� VT_LPWSTRr � VT_FILETIMEr �floatr� r� �VT_UI1rk �VT_CLSID�VT_CF�VT_BOOL�bool)r� rd r� r� � streampathrf r� r� r} �fmtid� num_props�exc�msgr! � property_idr� � property_typer� �countr� r/ r/ r0 r� 2 s� ��� � $ (� � ��zOleFileIO.getpropertiesc C s t � | _| j�| � | jS )z� Parse standard properties streams, return an OleMetadata object containing all the available metadata. (also stored in the metadata attribute of the OleFileIO object) new in version 0.25 )r r> r� r� r/ r/ r0 � get_metadata� s zOleFileIO.get_metadata)rZ )Fr+ )rx )TF)FN),r� r� r� r� r r r� rQ rT r� r� r rc rR r rx r� r� r� rd r r� r� r� re r r� r r� r� r� r� r� r� r� r� r� r( r* r� r� r� r� r� r/ r/ r/ r0 r � sT �M a % $T$ ) & > r c C s� ddl } ddl}d}tjtjtjtjtjd�}d}|j|d�}|j ddd d d � |j d dd dd � |j dddd|dd� |� � \}}t dt t f � t|�dkr\t t� |�� | �� |jrbd|_tj||j dd� t� |D �]M}�z>t|�} t d� t |� t d� | �� | �� D ]`} | d d dkr�t d | � zC| j| d d �} t| �� �} | D ]1\} } t | t t f�r�t| �d kr�| dd � } t | t �r�d D ] }|t | �v r�d!} nq�t d"| | � q�W q� t �!d#| � Y q�q�|j"�r-t d$� | �� D ].} t d%t#d&�$| ��d%d'd(� | �%| �}|t&k�r#t d)| �'| � � | �(| � q�t d*| � q�t � t d+� | j)D ]}|du�rIt d,|j*|�+� |�,� f � �q4t � z | �-� }|�.� W n t �!d-� Y t � | �/� }t d.| � | �0d/��r�t d0� t d1| �%d/�� t d2| �'d/�� | �0d3��r�t d4� t d5� | j1�r�| j1D ]\}}t d6|j2|f � �q�nt d7� W qq t �!d8| � Y qqdS )9z� Main function when olefile is runs as a script from the command line. This will open an OLE2 file and display its structure and properties :return: nothing r NrV )r� �inforV rU �criticalz1usage: %prog [options] <filename> [filename2 ...])�usagez-c� store_true� check_streamsz*check all streams (for debugging purposes))�action�dest�helpz-d� debug_modez\debug mode, shortcut for -l debug (displays a lot of debug information, for developers only)z-lz --loglevel�loglevel�storezBlogging level debug/info/warning/error/critical (default=%default))r� r� �defaultr� z=olefile version %s %s - https://www.decalage.info/en/olefile r� z%(levelname)-8s %(message)s)r- �formatzD--------------------------------------------------------------------����z%r: propertiesTr� �2 )r# r6 r" r r7 r8 r9 r= r> r@ � rA rB rC rD rE rF rG rH rI rJ rK rL rM rN rO rP z (binary data)z z&Error while parsing property stream %rz Checking streams...�-r� r r! zsize %dzNOT a stream : type=%dz5Modification/Creation times of all directory entries:z- %s: mtime=%s ctime=%sz Error while parsing metadatazRoot entry name: "%s"� worddocumentzThis is a Word document.z type of stream 'WordDocument':zsize :z macros/vbaz%This document may contain VBA macros.z( Non-fatal issues raised during parsing:r� �NonezError while parsing file %r)3r| �optparser$ r� �INFO�WARNING�ERROR�CRITICAL� OptionParser� add_option� parse_argsr� � __version__�__date__r_ r� � print_help�exitr� r� � basicConfigr r r� r� r� �sorted�itemsra r� rb rc r3 � exceptionr� r� r� r� r r� r� r r, r( r* r� r� r� r� r0 r� )r| r� �DEFAULT_LOG_LEVEL� LOG_LEVELSr� �parser�optionsrS rd r� � streamnamer� �k�vrj �st_typer �metarL �exctyper� r/ r/ r0 �main� s� � � �� �� � �� ���r �__main__r+ )mr� � __future__r r r � __author__�__all__r� r| rq rz �os.pathr` r� r$ r� rb rn r �xranger� r� �itemsizer{ r� r� � NameErrorr � version_infor r� r1 r3 r r r r r r r r r r r r r r r r �VT_EMPTY�VT_NULLr� r� �VT_R4�VT_R8�VT_CY�VT_DATEr� � VT_DISPATCHr� r� � VT_VARIANT� VT_UNKNOWN� VT_DECIMAL�VT_I1r� r� r� �VT_I8�VT_UI8r� r� �VT_VOID� VT_HRESULT�VT_PTR� VT_SAFEARRAY� VT_CARRAY�VT_USERDEFINEDr� r� r� r� � VT_STREAM� VT_STORAGE�VT_STREAMED_OBJECT�VT_STORED_OBJECT�VT_BLOB_OBJECTr� r� � VT_VECTORr r r r r r r rk ru rw r~ r� r r� r� r� r r r� r/ r/ r/ r0 �<module> s� < ( � * " �