pst.py 106 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278
  1. #! /usr/bin/env python
  2. #
  3. # Copyright (c) 2014, Dionach Ltd.
  4. # All rights reserved.
  5. #
  6. # Redistribution and use in source and binary forms, with or without
  7. # modification, are permitted provided that the following conditions are met:
  8. #
  9. # * Redistributions of source code must retain the above copyright notice, this
  10. # list of conditions and the following disclaimer.
  11. #
  12. # * Redistributions in binary form must reproduce the above copyright notice,
  13. # this list of conditions and the following disclaimer in the documentation
  14. # and/or other materials provided with the distribution.
  15. #
  16. # * Neither the name of Dionach Ltd nor the names of its
  17. # contributors may be used to endorse or promote products derived from
  18. # this software without specific prior written permission.
  19. #
  20. # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  21. # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22. # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  23. # DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
  24. # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25. # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
  26. # SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
  27. # CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  28. # OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  29. # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  30. #
  31. # By BB
  32. # based on MS-PST Microsoft specification for PST file format [MS-PST].pdf v2.1
  33. #
  34. import struct, binascii, datetime, math, os, sys, unicodedata, re, argparse, itertools, string, traceback
  35. #import colorama
  36. #import progressbar
  37. class PSTException(Exception):
  38. pass
  39. error_log_list = []
  40. ##############################################################################################################################
  41. # _ _ _ ____ _ _ ___ _ ____ ______ _
  42. # | \ | | ___ __| | ___ | _ \ __ _| |_ __ _| |__ __ _ ___ ___ / / \ | | _ \| __ ) \ | | __ _ _ _ ___ _ __
  43. # | \| |/ _ \ / _` |/ _ \ | | | |/ _` | __/ _` | '_ \ / _` / __|/ _ \ | || \| | | | | _ \| | | | / _` | | | |/ _ \ '__|
  44. # | |\ | (_) | (_| | __/ | |_| | (_| | || (_| | |_) | (_| \__ \ __/ | || |\ | |_| | |_) | | | |__| (_| | |_| | __/ |
  45. # |_| \_|\___/ \__,_|\___| |____/ \__,_|\__\__,_|_.__/ \__,_|___/\___| | ||_| \_|____/|____/| | |_____\__,_|\__, |\___|_|
  46. # \_\ /_/ |___/
  47. ##############################################################################################################################
  48. class NID:
  49. NID_TYPE_HID = 0x00
  50. NID_TYPE_INTERNAL = 0x01
  51. NID_TYPE_NORMAL_FOLDER = 0x02
  52. NID_TYPE_SEARCH_FOLDER = 0x03
  53. NID_TYPE_NORMAL_MESSAGE = 0x04
  54. NID_TYPE_ATTACHMENT = 0x05
  55. NID_TYPE_SEARCH_UPDATE_QUEUE = 0x06
  56. NID_TYPE_SEARCH_CRITERIA_OBJECT = 0x07
  57. NID_TYPE_ASSOC_MESSAGE = 0x08
  58. NID_TYPE_CONTENTS_TABLE_INDEX = 0x0a
  59. NID_TYPE_RECEIVE_FOLDER_TABLE = 0x0b
  60. NID_TYPE_OUTGOING_QUEUE_TABLE = 0x0c
  61. NID_TYPE_HIERARCHY_TABLE = 0x0d
  62. NID_TYPE_CONTENTS_TABLE = 0x0e
  63. NID_TYPE_ASSOC_CONTENTS_TABLE = 0x0f
  64. NID_TYPE_SEARCH_CONTENTS_TABLE = 0x10
  65. NID_TYPE_ATTACHMENT_TABLE = 0x11
  66. NID_TYPE_RECIPIENT_TABLE = 0x12
  67. NID_TYPE_SEARCH_TABLE_INDEX = 0x13
  68. NID_TYPE_LTP = 0x1f
  69. NID_MESSAGE_STORE = 0x21
  70. NID_NAME_TO_ID_MAP = 0x61
  71. NID_NORMAL_FOLDER_TEMPLATE = 0xA1
  72. NID_SEARCH_FOLDER_TEMPLATE = 0xC1
  73. NID_ROOT_FOLDER = 0x122
  74. NID_SEARCH_MANAGEMENT_QUEUE = 0x1E1
  75. NID_SEARCH_ACTIVITY_LIST = 0x201
  76. NID_RESERVED1 = 0x241
  77. NID_SEARCH_DOMAIN_OBJECT = 0x261
  78. NID_SEARCH_GATHERER_QUEUE = 0x281
  79. NID_SEARCH_GATHERER_DESCRIPTOR = 0x2A1
  80. NID_RESERVED2 = 0x2E1
  81. NID_RESERVED3 = 0x301
  82. NID_SEARCH_GATHERER_FOLDER_QUEUE = 0x321
  83. def __init__(self, bytes_or_nid):
  84. if isinstance(bytes_or_nid, (int,long)):
  85. self.nid = bytes_or_nid
  86. else:
  87. self.nid = struct.unpack('I', bytes_or_nid)[0]
  88. self.nidType = self.nid & 0x1f
  89. self.nidIndex = self.nid & 0xffffffe0
  90. self.is_hid = False
  91. self.is_nid = True
  92. def __repr__(self):
  93. return 'nid: %s, %s' % (hex(self.nid), hex(self.nidType))
  94. class BID:
  95. def __init__(self, bytes):
  96. if len(bytes) == 4: # ansi
  97. self.bid = struct.unpack('I', bytes)[0]
  98. else: #unicode (8)
  99. self.bid = struct.unpack('Q', bytes)[0]
  100. if self.bid % 2 == 1: # A
  101. self.bid -= 1
  102. self.is_internal = (self.bid & 2 == 2) # B
  103. def __repr__(self):
  104. if self.is_internal:
  105. int_ext = 'I'
  106. else:
  107. int_ext = 'E'
  108. return 'bid: %s %s' % (self.bid, int_ext)
  109. class BREF:
  110. def __init__(self, bytes):
  111. if len(bytes) == 8: # ansi
  112. self.bid, self.ib = struct.unpack('4sI', bytes)
  113. else: #unicode (16)
  114. self.bid, self.ib = struct.unpack('8sQ', bytes)
  115. self.bid = BID(self.bid)
  116. def __repr__(self):
  117. return '%s, ib: %s' % (self.bid, hex(self.ib))
  118. class Page:
  119. PAGE_SIZE = 512
  120. ptypeBBT = 0x80
  121. ptypeNBT = 0x81
  122. ptypeFMap = 0x82
  123. ptypePMap = 0x83
  124. ptypeAMap = 0x84
  125. ptypeFPMap = 0x85
  126. ptypeDL = 0x86
  127. def __init__(self, bytes, is_ansi):
  128. # fixed 512 bytes
  129. if len(bytes) != Page.PAGE_SIZE:
  130. raise PSTException('Invalid Page size')
  131. if is_ansi:
  132. self.ptype, self.ptypeRepeat, self.wSig, self.bid, self.dwCRC = struct.unpack('BBHII', bytes[-12:])
  133. else: # unicode
  134. self.ptype, self.ptypeRepeat, self.wSig, self.dwCRC, self.bid = struct.unpack('BBHIQ', bytes[-16:])
  135. if self.ptype < Page.ptypeBBT or self.ptype > Page.ptypeDL:
  136. raise PSTException('Invalid Page Type %s ' % hex(self.ptype))
  137. if self.ptype != self.ptypeRepeat:
  138. raise PSTException('Page Type does not match Page Type Repeat %s!=%s ' % (hex(self.ptype), hex(self.ptypeRepeat)))
  139. if self.ptype in (Page.ptypeBBT, Page.ptypeNBT):
  140. if is_ansi:
  141. self.cEnt, self.cEntMax, self.cbEnt, self.cLevel = struct.unpack('BBBB', bytes[-16:-12])
  142. # rgEntries 492 (cLevel>0) or 496 bytes (cLevel=0)
  143. entry_size = 12
  144. else: # unicode
  145. self.cEnt, self.cEntMax, self.cbEnt, self.cLevel = struct.unpack('BBBB', bytes[-24:-20])
  146. # rgEntries 488 bytes
  147. entry_size = 24
  148. if self.cLevel == 0:
  149. if self.ptype == Page.ptypeBBT:
  150. entry_type = BBTENTRY
  151. else: # ptypeNBT
  152. entry_type = NBTENTRY
  153. entry_size = entry_size + entry_size/3
  154. else: # BTENTRY
  155. entry_type = BTENTRY
  156. self.rgEntries = []
  157. for i in range(self.cEnt): # self.cbEnt is size of each entry which may be different to entry_size
  158. self.rgEntries.append(entry_type(bytes[i*self.cbEnt:i*self.cbEnt+entry_size]))
  159. def __repr__(self):
  160. return 'PageType: %s, Entries: %s, Level: %s' % (hex(self.ptype), self.cEnt, self.cLevel)
  161. class BTENTRY:
  162. def __init__(self, bytes):
  163. if len(bytes) == 12: # ansi
  164. self.btkey = struct.unpack('I',bytes[:4])[0]
  165. self.BREF = BREF(bytes[4:])
  166. else: # unicode 24
  167. self.btkey = struct.unpack('Q',bytes[:8])[0]
  168. self.BREF = BREF(bytes[8:])
  169. def __repr__(self):
  170. return '%s' % (self.BREF)
  171. class BBTENTRY:
  172. def __init__(self, bytes):
  173. if len(bytes) == 12: #ansi
  174. self.BREF = BREF(bytes[:8])
  175. self.cb, self.cRef = struct.unpack('HH',bytes[8:12])
  176. else: # unicode (24)
  177. self.BREF = BREF(bytes[:16])
  178. self.cb, self.cRef = struct.unpack('HH',bytes[16:20])
  179. self.key = self.BREF.bid.bid
  180. def __repr__(self):
  181. return '%s, data size: %s' % (self.BREF, self.cb)
  182. class NBTENTRY:
  183. def __init__(self, bytes):
  184. if len(bytes) == 16: #ansi
  185. self.nid, self.bidData, self.bidSub, self.nidParent = struct.unpack('4s4s4s4s',bytes)
  186. else: # unicode (32)
  187. self.nid, padding, self.bidData, self.bidSub, self.nidParent = struct.unpack('4s4s8s8s4s',bytes[:-4])
  188. self.nid = NID(self.nid)
  189. self.bidData = BID(self.bidData)
  190. self.bidSub = BID(self.bidSub)
  191. self.nidParent = NID(self.nidParent)
  192. self.key = self.nid.nid
  193. def __repr__(self):
  194. return '%s, bidData: %s, bidSub: %s' % (self.nid, self.bidData, self.bidSub)
  195. class SLENTRY:
  196. def __init__(self, bytes):
  197. if len(bytes) == 12: #ansi
  198. self.nid, self.bidData, self.bidSub = struct.unpack('4s4s4s',bytes)
  199. else: # unicode 24
  200. self.nid, padding, self.bidData, self.bidSub = struct.unpack('4s4s8s8s',bytes)
  201. self.nid = NID(self.nid)
  202. self.bidData = BID(self.bidData)
  203. self.bidSub = BID(self.bidSub)
  204. def __repr__(self):
  205. return '%s %s sub%s' % (self.nid, self.bidData, self.bidSub)
  206. class SIENTRY:
  207. def __init__(self, bytes):
  208. if len(bytes) == 8: #ansi
  209. self.nid, self.bid = struct.unpack('4s4s',bytes)
  210. else: # unicode 16
  211. self.nid, padding, self.bid = struct.unpack('4s4s8s',bytes)
  212. self.nid = NID(self.nid)
  213. self.bid = BID(self.bid)
  214. class Block:
  215. # this has the first 512 entries removed, as decoding only uses from 512 onwards
  216. mpbbCryptFrom512 = (71, 241, 180, 230, 11, 106, 114, 72, 133, 78, 158, 235, 226, 248, 148, 83, 224, 187, 160, 2, 232, 90, 9, 171, 219, 227, 186, 198, 124, 195, 16, 221,
  217. 57, 5, 150, 48, 245, 55, 96, 130, 140, 201, 19, 74, 107, 29, 243, 251, 143, 38, 151, 202, 145, 23, 1, 196, 50, 45, 110, 49, 149, 255, 217, 35,
  218. 209, 0, 94, 121, 220, 68, 59, 26, 40, 197, 97, 87, 32, 144, 61, 131, 185, 67, 190, 103, 210, 70, 66, 118, 192, 109, 91, 126, 178, 15, 22, 41,
  219. 60, 169, 3, 84, 13, 218, 93, 223, 246, 183, 199, 98, 205, 141, 6, 211, 105, 92, 134, 214, 20, 247, 165, 102, 117, 172, 177, 233, 69, 33, 112, 12,
  220. 135, 159, 116, 164, 34, 76, 111, 191, 31, 86, 170, 46, 179, 120, 51, 80, 176, 163, 146, 188, 207, 25, 28, 167, 99, 203, 30, 77, 62, 75, 27, 155,
  221. 79, 231, 240, 238, 173, 58, 181, 89, 4, 234, 64, 85, 37, 81, 229, 122, 137, 56, 104, 82, 123, 252, 39, 174, 215, 189, 250, 7, 244, 204, 142, 95,
  222. 239, 53, 156, 132, 43, 21, 213, 119, 52, 73, 182, 18, 10, 127, 113, 136, 253, 157, 24, 65, 125, 147, 216, 88, 44, 206, 254, 36, 175, 222, 184, 54,
  223. 200, 161, 128, 166, 153, 152, 168, 47, 14, 129, 101, 115, 228, 194, 162, 138, 212, 225, 17, 208, 8, 139, 42, 242, 237, 154, 100, 63, 193, 108, 249, 236)
  224. decrypt_table = string.maketrans(b''.join(map(chr, range(256))), b''.join(map(chr, mpbbCryptFrom512)))
  225. btypeData = 0
  226. btypeXBLOCK = 1
  227. btypeXXBLOCK = 2
  228. btypeSLBLOCK = 3
  229. btypeSIBLOCK = 4
  230. def __init__(self, bytes, offset, data_size, is_ansi, bid_check, bCryptMethod):
  231. self.is_ansi = is_ansi
  232. self.offset = offset # for debugging
  233. if self.is_ansi: # 12
  234. self.cb, self.wSig, self.bid, self.dwCRC = struct.unpack('HH4sI',bytes[-12:])
  235. bid_size = 4
  236. slentry_size = 12
  237. sientry_size = 8
  238. sl_si_entries_offset = 4 # [MS-PST] WRONG for SLBLOCK and SIBLOCK for ANSI: there is no 4 byte padding
  239. else: # unicode 16
  240. self.cb, self.wSig, self.dwCRC, self.bid = struct.unpack('HHI8s',bytes[-16:])
  241. bid_size = 8
  242. slentry_size = 24
  243. sientry_size = 16
  244. sl_si_entries_offset = 8
  245. self.bid = BID(self.bid)
  246. if self.bid.bid != bid_check.bid:
  247. raise PSTException('Block bid %s != ref bid %s' % (self.bid, bid_check))
  248. if data_size != self.cb:
  249. raise PSTException('BBT Entry data size %s != Block data size %s' % (data_size, self.cb) )
  250. if not self.bid.is_internal:
  251. self.block_type = Block.btypeData
  252. self.btype = 0
  253. self.cLevel = 0
  254. if bCryptMethod == 1: #NDB_CRYPT_PERMUTE
  255. self.data = bytes[:data_size].translate(Block.decrypt_table)
  256. else: # no data encoding
  257. self.data = bytes[:data_size] # data block
  258. else: # XBLOCK, XXBLOCK, SLBLOCK or SIBLOCK
  259. self.btype, self.cLevel, self.cEnt = struct.unpack('BBH',bytes[:4])
  260. if self.btype == 1: #XBLOCK, XXBLOCK
  261. self.lcbTotal = struct.unpack('I',bytes[4:8])[0]
  262. if self.cLevel == 1: #XBLOCK
  263. self.block_type = Block.btypeXBLOCK
  264. elif self.cLevel == 2: #XXBLOCK
  265. self.block_type = Block.btypeXXBLOCK
  266. else:
  267. raise PSTException('Invalid Block Level %s' % self.cLevel)
  268. self.rgbid = []
  269. for i in range(self.cEnt):
  270. self.rgbid.append(BID(bytes[8+i*bid_size:8+(i+1)*bid_size]))
  271. elif self.btype == 2: # SLBLOCK, SIBLOCK
  272. self.rgentries = []
  273. if self.cLevel == 0: #SLBLOCK
  274. self.block_type = Block.btypeSLBLOCK
  275. for i in range(self.cEnt):
  276. self.rgentries.append(SLENTRY(bytes[sl_si_entries_offset + i*slentry_size:sl_si_entries_offset + (i+1)*slentry_size]))
  277. elif self.cLevel ==1: #SIBLOCK
  278. self.block_type = Block.btypeSIBLOCK
  279. for i in range(self.cEnt):
  280. self.rgentries.append(SIENTRY(bytes[sl_si_entries_offset + i*sientry_size:sl_si_entries_offset + (i+1)*sientry_size]))
  281. else:
  282. raise PSTException('Invalid Block Level %s' % self.cLevel)
  283. else:
  284. raise PSTException('Invalid Block Type %s' % self.btype)
  285. def __repr__(self):
  286. return 'Block %s %s %s' % (self.bid, self.btype, self.cLevel)
  287. class NBD:
  288. """Node Database Layer"""
  289. def __init__(self, fd, header):
  290. self.fd = fd
  291. self.header = header
  292. self.nbt_entries = self.get_page_leaf_entries(NBTENTRY, self.header.root.BREFNBT.ib)
  293. self.bbt_entries = self.get_page_leaf_entries(BBTENTRY, self.header.root.BREFBBT.ib)
  294. def fetch_page(self, offset):
  295. self.fd.seek(offset)
  296. return Page(self.fd.read(Page.PAGE_SIZE), self.header.is_ansi)
  297. def fetch_block(self, bid):
  298. try:
  299. bbt_entry = self.bbt_entries[bid.bid]
  300. except KeyError:
  301. raise PSTException('Invalid BBTEntry: %s' % bid)
  302. offset = bbt_entry.BREF.ib
  303. data_size = bbt_entry.cb
  304. if self.header.is_ansi:
  305. block_trailer_size = 12
  306. else: # unicode
  307. block_trailer_size = 16
  308. # block size must align on 64 bytes
  309. size_diff = (data_size + block_trailer_size) % 64
  310. if size_diff == 0:
  311. block_size = data_size + block_trailer_size
  312. else:
  313. block_size = data_size + block_trailer_size + 64 - size_diff
  314. self.fd.seek(offset)
  315. return Block(self.fd.read(block_size), offset, data_size, self.header.is_ansi, bid, self.header.bCryptMethod)
  316. def fetch_all_block_data(self, bid):
  317. """returns list of block datas"""
  318. datas = []
  319. block = self.fetch_block(bid)
  320. if block.block_type == Block.btypeData:
  321. datas.append(block.data)
  322. elif block.block_type == Block.btypeXBLOCK:
  323. for xbid in block.rgbid:
  324. xblock = self.fetch_block(xbid)
  325. if xblock.block_type != Block.btypeData:
  326. raise PSTException('Expecting data block, got block type %s' % xblock.block_type)
  327. datas.append(xblock.data)
  328. elif block.block_type == Block.btypeXXBLOCK:
  329. for xxbid in block.rgbid:
  330. xxblock = self.fetch_block(xxbid)
  331. if xxblock.block_type != Block.btypeXBLOCK:
  332. raise PSTException('Expecting XBLOCK, got block type %s' % xxblock.block_type)
  333. datas.extend(self.fetch_all_block_data(xxbid))
  334. else:
  335. raise PSTException('Invalid block type (not data/XBLOCK/XXBLOCK), got %s' % block.block_type)
  336. return datas
  337. def fetch_subnodes(self, bid):
  338. """ get dictionary of subnode SLENTRYs for subnode bid"""
  339. subnodes = {}
  340. block = self.fetch_block(bid)
  341. if block.block_type == Block.btypeSLBLOCK:
  342. for slentry in block.rgentries:
  343. if slentry.nid in subnodes.keys():
  344. raise PSTException('Duplicate subnode %s' % slentry.nid)
  345. subnodes[slentry.nid.nid] = slentry
  346. elif block.block_type == Block.btypeSIBLOCK:
  347. for sientry in block.rgentries:
  348. subnodes.update(self.fetch_subnodes(sientry.bid))
  349. else:
  350. raise PSTException('Invalid block type (not SLBLOCK/SIBLOCK), got %s' % block.block_type)
  351. return subnodes
  352. def get_page_leaf_entries(self, entry_type, page_offset):
  353. """ entry type is NBTENTRY or BBTENTRY"""
  354. leaf_entries = {}
  355. page = self.fetch_page(page_offset)
  356. for entry in page.rgEntries:
  357. if isinstance(entry, entry_type):
  358. if entry.key in leaf_entries.keys():
  359. raise PSTException('Invalid Leaf Key %s' % entry)
  360. leaf_entries[entry.key] = entry
  361. elif isinstance(entry, BTENTRY):
  362. leaf_entries.update(self.get_page_leaf_entries(entry_type, entry.BREF.ib))
  363. else:
  364. raise PSTException('Invalid Entry Type')
  365. return leaf_entries
  366. ################################################################################################################################################################################
  367. # _ _ _ _____ _ _ _ ____ _ _ ___ _____ ______ _
  368. # | | (_)___| |_ ___ |_ _|_ _| |__ | | ___ ___ __ _ _ __ __| | | _ \ _ __ ___ _ __ ___ _ __| |_(_) ___ ___ / / | |_ _| _ \ \ | | __ _ _ _ ___ _ __
  369. # | | | / __| __/ __| | |/ _` | '_ \| |/ _ \/ __| / _` | '_ \ / _` | | |_) | '__/ _ \| '_ \ / _ \ '__| __| |/ _ \/ __| | || | | | | |_) | | | | / _` | | | |/ _ \ '__|
  370. # | |___| \__ \ |_\__ \_ | | (_| | |_) | | __/\__ \_ | (_| | | | | (_| | | __/| | | (_) | |_) | __/ | | |_| | __/\__ \ | || |___| | | __/| | | |__| (_| | |_| | __/ |
  371. # |_____|_|___/\__|___( ) |_|\__,_|_.__/|_|\___||___( ) \__,_|_| |_|\__,_| |_| |_| \___/| .__/ \___|_| \__|_|\___||___/ | ||_____|_| |_| | | |_____\__,_|\__, |\___|_|
  372. # |/ |/ |_| \_\ /_/ |___/
  373. ################################################################################################################################################################################
  374. class HID:
  375. def __init__(self, bytes):
  376. # hidIndex cannot be zero, first 5 bits must be zero (hidType)
  377. self.hidIndex, self.hidBlockIndex = struct.unpack('HH', bytes)
  378. self.hidType = self.hidIndex & 0x1F
  379. self.hidIndex = (self.hidIndex >> 5) & 0x7FF
  380. self.is_hid = True
  381. self.is_nid = False
  382. class HNPAGEMAP:
  383. def __init__(self, bytes):
  384. self.cAlloc, self.cFree = struct.unpack('HH', bytes[:4])
  385. self.rgibAlloc = []
  386. for i in range(self.cAlloc+1): # cAlloc+1 is next free
  387. self.rgibAlloc.append(struct.unpack('H', bytes[4+i*2:4+(i+1)*2])[0])
  388. class HN:
  389. bTypeTC = 0x7C
  390. bTypeBTH = 0xB5
  391. bTypePC = 0xBC
  392. def __init__(self, nbt_entry, ltp, datas):
  393. """datas = list of data sections from blocks"""
  394. self.nbt_entry = nbt_entry
  395. self.datas = datas
  396. self.ltp = ltp
  397. self.hnpagemaps = []
  398. for i in range(len(datas)):
  399. bytes = datas[i]
  400. if i == 0: # HNHDR
  401. ibHnpm, self.bSig, self.bClientSig, self.hidUserRoot, self.rgbFillLevel = struct.unpack('HBB4sI', bytes[:12])
  402. self.hidUserRoot = HID(self.hidUserRoot)
  403. if self.bSig != 0xEC:
  404. raise PSTException('Invalid HN Signature %s' % self.bSig)
  405. else: # HNPAGEHDR or HNBITMAPHDR
  406. ibHnpm = struct.unpack('H', bytes[:2])[0]
  407. self.hnpagemaps.append(HNPAGEMAP(bytes[ibHnpm:]))
  408. # subnode SLENTRYs
  409. self.subnodes = None
  410. if self.nbt_entry.bidSub.bid != 0:
  411. self.subnodes = self.ltp.nbd.fetch_subnodes(self.nbt_entry.bidSub)
  412. def get_hid_data(self, hid):
  413. start_offset = self.hnpagemaps[hid.hidBlockIndex].rgibAlloc[hid.hidIndex-1]
  414. end_offset = self.hnpagemaps[hid.hidBlockIndex].rgibAlloc[hid.hidIndex]
  415. return self.datas[hid.hidBlockIndex][start_offset:end_offset]
  416. def __repr__(self):
  417. return 'HN: %s, Blocks: %s' % (self.nbt_entry, len(self.datas))
  418. class BTHData:
  419. def __init__(self, key, data):
  420. self.key = key
  421. self.data = data
  422. class BTHIntermediate:
  423. def __init__(self, key, hidNextLevel, bIdxLevel):
  424. self.key = key
  425. self.hidNextLevel = hidNextLevel
  426. self.bIdxLevel = bIdxLevel
  427. class BTH:
  428. def __init__(self, hn, bth_hid):
  429. """ hn = HN heapnode, bth_hid is hid of BTH header"""
  430. #BTHHEADER
  431. bth_header_bytes = hn.get_hid_data(bth_hid)
  432. self.bType, self.cbKey, self.cbEnt, self.bIdxLevels, self.hidRoot = struct.unpack('BBBB4s', bth_header_bytes)
  433. self.hidRoot = HID(self.hidRoot)
  434. if self.bType != HN.bTypeBTH:
  435. raise PSTException('Invalid BTH Type %s' % self.bType)
  436. self.bth_datas = []
  437. bth_working_stack = []
  438. if self.hidRoot != 0:
  439. bytes = hn.get_hid_data(self.hidRoot)
  440. bth_record_list = self.get_bth_records(bytes, self.bIdxLevels)
  441. if self.bIdxLevels == 0: # no intermediate levels
  442. self.bth_datas = bth_record_list
  443. else:
  444. bth_working_stack = bth_record_list
  445. while bth_working_stack:
  446. bth_intermediate = bth_working_stack.pop()
  447. bytes = hn.get_hid_data(bth_intermediate.hidNextLevel)
  448. bth_record_list = self.get_bth_records(bytes, bth_intermediate.bIdxLevel - 1)
  449. if bth_intermediate.bIdxLevel - 1 == 0: # leafs
  450. self.bth_datas.extend(bth_record_list)
  451. else:
  452. bth_working_stack.extend(bth_record_list)
  453. def get_bth_records(self, bytes, bIdxLevel):
  454. bth_record_list = []
  455. if bIdxLevel == 0: # leaf
  456. record_size = self.cbKey + self.cbEnt
  457. records = len(bytes) / record_size
  458. for i in range(records):
  459. key, data = struct.unpack('%ss%ss' % (self.cbKey, self.cbEnt) , bytes[i*record_size:(i+1)*record_size])
  460. bth_record_list.append(BTHData(key, data))
  461. else: # intermediate
  462. record_size = self.cbKey + 4
  463. records = len(bytes) / record_size
  464. for i in range(records):
  465. key, hidNextLevel = struct.unpack('%ss4s' % self.cbKey , bytes[i*record_size:(i+1)*record_size])
  466. hidNextLevel = HID(hidNextLevel)
  467. bth_record_list.append(BTHIntermediate(key, hidNextLevel, bIdxLevel))
  468. return bth_record_list
  469. class PCBTHData:
  470. def __init__(self, bth_data, hn):
  471. self.wPropId = struct.unpack('H', bth_data.key)[0]
  472. self.wPropType, self.dwValueHnid = struct.unpack('H4s', bth_data.data)
  473. ptype = hn.ltp.ptypes[self.wPropType]
  474. if not ptype.is_variable and not ptype.is_multi:
  475. if ptype.byte_count <= 4:
  476. self.value = ptype.value(self.dwValueHnid[:ptype.byte_count])
  477. else:
  478. self.hid = HID(self.dwValueHnid)
  479. self.value = ptype.value(hn.get_hid_data(self.hid))
  480. else:
  481. if NID(self.dwValueHnid).nidType == NID.NID_TYPE_HID:
  482. self.hid = HID(self.dwValueHnid)
  483. self.value = ptype.value(hn.get_hid_data(self.hid))
  484. else:
  485. self.subnode_nid = NID(self.dwValueHnid)
  486. if self.subnode_nid.nid in hn.subnodes.keys():
  487. subnode_nid_bid = hn.subnodes[self.subnode_nid.nid].bidData
  488. else:
  489. raise PSTException('Invalid NID subnode reference %s' % self.subnode_nid)
  490. datas = hn.ltp.nbd.fetch_all_block_data(subnode_nid_bid)
  491. self.value = ptype.value(''.join(datas))
  492. def __repr__(self):
  493. return '%s (%s) = %s' % (hex(self.wPropId), hex(self.wPropType), repr(self.value))
  494. class PTypeEnum:
  495. PtypInteger16 = 0x02
  496. PtypInteger32 = 0x03
  497. PtypFloating32 = 0x04
  498. PtypFloating64 = 0x05
  499. PtypCurrency = 0x06
  500. PtypFloatingTime = 0x07
  501. PtypErrorCode = 0x0A
  502. PtypBoolean = 0x0B
  503. PtypInteger64 = 0x14
  504. PtypString = 0x1F
  505. PtypString8 = 0x1E
  506. PtypTime = 0x40
  507. PtypGuid = 0x48
  508. PtypServerId = 0xFB
  509. PtypRestriction = 0xFD
  510. PtypRuleAction = 0xFE
  511. PtypBinary = 0x102
  512. PtypMultipleInteger16 = 0x1002
  513. PtypMultipleInteger32 = 0x1003
  514. PtypMultipleFloating32 = 0x1004
  515. PtypMultipleFloating64 = 0x1005
  516. PtypMultipleCurrency = 0x1006
  517. PtypMultipleFloatingTime = 0x1007
  518. PtypMultipleInteger64 = 0x1014
  519. PtypMultipleString = 0x101F
  520. PtypMultipleString8 = 0x101E
  521. PtypMultipleTime = 0x1040
  522. PtypMultipleGuid = 0x1048
  523. PtypMultipleBinary = 0x1102
  524. PtypUnspecified = 0x0
  525. PtypNull = 0x01
  526. PtypObject = 0x0D
  527. class PType:
  528. def __init__(self, ptype, byte_count, is_variable, is_multi):
  529. self.ptype, self.byte_count, self.is_variable, self.is_multi = ptype, byte_count, is_variable, is_multi
  530. def value(self, bytes):
  531. if self.ptype == PTypeEnum.PtypInteger16:
  532. return struct.unpack('h', bytes)[0]
  533. elif self.ptype == PTypeEnum.PtypInteger32:
  534. return struct.unpack('i', bytes)[0]
  535. elif self.ptype == PTypeEnum.PtypFloating32:
  536. return struct.unpack('f', bytes)[0]
  537. elif self.ptype == PTypeEnum.PtypFloating64:
  538. return struct.unpack('d', bytes)[0]
  539. elif self.ptype == PTypeEnum.PtypCurrency:
  540. return None
  541. # raise PSTException('PtypCurrency value not implemented')
  542. elif self.ptype == PTypeEnum.PtypFloatingTime:
  543. return self.get_floating_time(bytes)
  544. elif self.ptype == PTypeEnum.PtypErrorCode:
  545. return struct.unpack('I', bytes)[0]
  546. elif self.ptype == PTypeEnum.PtypBoolean:
  547. return (struct.unpack('B', bytes)[0] != 0)
  548. elif self.ptype == PTypeEnum.PtypInteger64:
  549. return struct.unpack('q', bytes)[0]
  550. elif self.ptype == PTypeEnum.PtypString:
  551. try:
  552. return bytes.decode('utf-16-le') # unicode
  553. except UnicodeDecodeError:
  554. log_error(PSTException('String property not correctly utf-16-le encoded, ignoring errors'))
  555. return bytes.decode('utf-16-le', errors='ignore') # unicode
  556. elif self.ptype == PTypeEnum.PtypString8:
  557. return bytes
  558. elif self.ptype == PTypeEnum.PtypTime:
  559. return self.get_time(bytes)
  560. elif self.ptype == PTypeEnum.PtypGuid:
  561. return bytes
  562. elif self.ptype == PTypeEnum.PtypServerId:
  563. return None
  564. # raise PSTException('PtypServerId value not implemented')
  565. elif self.ptype == PTypeEnum.PtypRestriction:
  566. return None
  567. # raise PSTException('PtypRestriction value not implemented')
  568. elif self.ptype == PTypeEnum.PtypRuleAction:
  569. return None
  570. # raise PSTException('PtypRuleAction value not implemented')
  571. elif self.ptype == PTypeEnum.PtypBinary:
  572. #count = struct.unpack('H', bytes[:2])[0]
  573. return bytes
  574. elif self.ptype == PTypeEnum.PtypMultipleInteger16:
  575. count = len(bytes) / 2
  576. return [struct.unpack('h', bytes[i*2:(i+1)*2])[0] for i in range(count)]
  577. elif self.ptype == PTypeEnum.PtypMultipleInteger32:
  578. count = len(bytes) / 4
  579. return [struct.unpack('i', bytes[i*4:(i+1)*4])[0] for i in range(count)]
  580. elif self.ptype == PTypeEnum.PtypMultipleFloating32:
  581. count = len(bytes) / 4
  582. return [struct.unpack('f', bytes[i*4:(i+1)*4])[0] for i in range(count)]
  583. elif self.ptype == PTypeEnum.PtypMultipleFloating64:
  584. ccount = len(bytes) / 8
  585. return [struct.unpack('d', bytes[i*8:(i+1)*8])[0] for i in range(count)]
  586. elif self.ptype == PTypeEnum.PtypMultipleCurrency:
  587. return None
  588. # raise PSTException('PtypMultipleCurrency value not implemented')
  589. elif self.ptype == PTypeEnum.PtypMultipleFloatingTime:
  590. count = len(bytes) / 8
  591. return [self.get_floating_time(bytes[i*8:(i+1)*8]) for i in range(count)]
  592. elif self.ptype == PTypeEnum.PtypMultipleInteger64:
  593. count = len(bytes) / 8
  594. return [struct.unpack('q', bytes[i*8:(i+1)*8])[0] for i in range(count)]
  595. elif self.ptype == PTypeEnum.PtypMultipleString:
  596. ulCount, rgulDataOffsets = self.get_multi_value_offsets(bytes)
  597. s = []
  598. for i in range(ulCount):
  599. s.append(bytes[rgulDataOffsets[i]:rgulDataOffsets[i+1]].decode('utf-16-le'))
  600. return s
  601. elif self.ptype == PTypeEnum.PtypMultipleString8:
  602. ulCount, rgulDataOffsets = self.get_multi_value_offsets(bytes)
  603. datas = []
  604. for i in range(ulCount):
  605. datas.append(bytes[rgulDataOffsets[i]:rgulDataOffsets[i+1]])
  606. return datas
  607. elif self.ptype == PTypeEnum.PtypMultipleTime:
  608. count = len(bytes) / 8
  609. return [self.get_time(bytes[i*8:(i+1)*8]) for i in range(count)]
  610. elif self.ptype == PTypeEnum.PtypMultipleGuid:
  611. count = len(bytes) / 16
  612. return [bytes[i*16:(i+1)*16] for i in range(count)]
  613. elif self.ptype == PTypeEnum.PtypMultipleBinary:
  614. ulCount, rgulDataOffsets = self.get_multi_value_offsets(bytes)
  615. datas = []
  616. for i in range(ulCount):
  617. datas.append(bytes[rgulDataOffsets[i]:rgulDataOffsets[i+1]])
  618. return datas
  619. elif self.ptype == PTypeEnum.PtypUnspecified:
  620. return bytes
  621. elif self.ptype == PTypeEnum.PtypNull:
  622. return None
  623. elif self.ptype == PTypeEnum.PtypObject:
  624. return bytes[:4]
  625. else:
  626. raise PSTException('Invalid PTypeEnum for value %s ' % self.ptype)
  627. def get_floating_time(self, bytes):
  628. return struct.unpack('d', bytes)[0]
  629. def get_time(self, bytes):
  630. return struct.unpack('q', bytes)[0]
  631. def get_multi_value_offsets(self, bytes):
  632. ulCount = struct.unpack('I', bytes[:4])[0]
  633. rgulDataOffsets = [struct.unpack('I', bytes[(i+1)*4:(i+2)*4])[0] for i in range(ulCount)]
  634. rgulDataOffsets.append(len(bytes))
  635. return ulCount, rgulDataOffsets
  636. class PropIdEnum:
  637. PidTagNameidBucketCount = 0x0001
  638. PidTagNameidStreamGuid = 0x0002
  639. PidTagNameidStreamEntry = 0x0003
  640. PidTagNameidStreamString = 0x0004
  641. PidTagNameidBucketBase = 0x1000
  642. PidTagItemTemporaryFlags = 0x1097
  643. PidTagPstBestBodyProptag = 0x661D
  644. PidTagPstIpmsubTreeDescendant = 0x6705
  645. PidTagPstSubTreeContainer = 0x6772
  646. PidTagLtpParentNid = 0x67F1
  647. PidTagLtpRowId = 0x67F2
  648. PidTagLtpRowVer = 0x67F3
  649. PidTagPstPassword = 0x67FF
  650. PidTagMapiFormComposeCommand = 0x682F
  651. PidTagRecordKey = 0x0FF9
  652. PidTagDisplayName = 0x3001
  653. PidTagIpmSubTreeEntryId = 0x35E0
  654. PidTagIpmWastebasketEntryId = 0x35E3
  655. PidTagFinderEntryId = 0x35E7
  656. PidTagContentCount = 0x3602
  657. PidTagContentUnreadCount = 0x3603
  658. PidTagSubfolders = 0x360A
  659. PidTagReplItemid = 0x0E30
  660. PidTagReplChangenum = 0x0E33
  661. PidTagReplVersionHistory = 0x0E34
  662. PidTagReplFlags = 0x0E38
  663. PidTagContainerClass = 0x3613
  664. PidTagPstHiddenCount = 0x6635
  665. PidTagPstHiddenUnread = 0x6636
  666. PidTagImportance = 0x0017
  667. PidTagMessageClassW = 0x001A
  668. PidTagSensitivity = 0x0036
  669. PidTagSubjectW = 0x0037
  670. PidTagClientSubmitTime = 0x0039
  671. PidTagSentRepresentingNameW = 0x0042
  672. PidTagMessageToMe = 0x0057
  673. PidTagMessageCcMe = 0x0058
  674. PidTagConversationTopicW = 0x0070
  675. PidTagConversationIndex = 0x0071
  676. PidTagDisplayCcW = 0x0E03
  677. PidTagDisplayToW = 0x0E04
  678. PidTagMessageDeliveryTime = 0x0E06
  679. PidTagMessageFlags = 0x0E07
  680. PidTagMessageSize = 0x0E08
  681. PidTagMessageStatus = 0x0E17
  682. PidTagReplCopiedfromVersionhistory = 0x0E3C
  683. PidTagReplCopiedfromItemid = 0x0E3D
  684. PidTagLastModificationTime = 0x3008
  685. PidTagSecureSubmitFlags = 0x65C6
  686. PidTagOfflineAddressBookName = 0x6800
  687. PidTagSendOutlookRecallReport = 0x6803
  688. PidTagOfflineAddressBookTruncatedProperties = 0x6805
  689. PidTagMapiFormComposeCommand = 0x682F
  690. PidTagViewDescriptorFlags = 0x7003
  691. PidTagViewDescriptorLinkTo = 0x7004
  692. PidTagViewDescriptorViewFolder = 0x7005
  693. PidTagViewDescriptorName = 0x7006
  694. PidTagViewDescriptorVersion = 0x7007
  695. PidTagCreationTime = 0x3007
  696. PidTagSearchKey = 0x300B
  697. PidTagRecipientType = 0x0c15
  698. PidTagResponsibility = 0x0E0F
  699. PidTagObjectType = 0x0FFE
  700. PidTagEntryID = 0x0FFF
  701. PidTagAddressType = 0x3002
  702. PidTagEmailAddress = 0x3003
  703. PidTagDisplayType = 0x3900
  704. PidTag7BitDisplayName = 0x39FF
  705. PidTagSendRichInfo = 0x3A40
  706. PidTagAttachmentSize = 0x0E20
  707. PidTagAttachFilename = 0x3704
  708. PidTagAttachMethod = 0x3705
  709. PidTagRenderingPosition = 0x370B
  710. PidTagSenderName = 0x0C1A
  711. PidTagRead = 0x0E69
  712. PidTagHasAttachments = 0x0E1B
  713. PidTagBody = 0x1000
  714. PidTagRtfCompressed = 0x1009
  715. PidTagAttachDataBinary = 0x3701
  716. PidTagAttachDataObject = 0x3701
  717. PidTagOriginalDisplayTo = 0x0074
  718. PidTagTransportMessageHeaders = 0x007D
  719. PidTagSenderSmtpAddress = 0x5D01
  720. PidTagSentRepresentingSmtpAddress = 0x5D02
  721. PidTagAttachMimeTag = 0x370E
  722. PidTagAttachExtension = 0x3703
  723. PidTagAttachLongFilename = 0x3707
  724. class PC: # Property Context
  725. def __init__(self, hn):
  726. self.hn = hn
  727. if hn.bClientSig != HN.bTypePC:
  728. raise PSTException('Invalid HN bClientSig, not bTypePC, is %s' % hn.bClientSig)
  729. self.bth = BTH(hn, hn.hidUserRoot)
  730. if self.bth.cbKey != 2:
  731. raise PSTException('Invalid PC BTH key size: %s' % self.bth.cbKey)
  732. if self.bth.cbEnt != 6:
  733. raise PSTException('Invalid PC BTH data size: %s' % self.bth.cbEnt)
  734. self.props = {}
  735. for bth_data in self.bth.bth_datas:
  736. pc_prop = PCBTHData(bth_data, hn)
  737. if pc_prop.wPropId in (PropIdEnum.PidTagFinderEntryId, PropIdEnum.PidTagIpmSubTreeEntryId, PropIdEnum.PidTagIpmWastebasketEntryId, PropIdEnum.PidTagEntryID):
  738. pc_prop.value = EntryID(pc_prop.value)
  739. self.props[pc_prop.wPropId] = pc_prop
  740. def getval(self, propid):
  741. if propid in self.props.keys():
  742. return self.props[propid].value
  743. else:
  744. return None
  745. def __repr__(self):
  746. s = 'PC %s\n' % self.hn
  747. s += '\n'.join(['Property %s' % self.props[wPropId] for wPropId in sorted(self.props.keys())])
  748. return s
  749. class TCOLDESC:
  750. def __init__(self, bytes):
  751. #self.tag is 4 byte (self.wPropId, self.wPropType): where is documentation MS?
  752. self.wPropType, self.wPropId, self.ibData, self.cbData, self.iBit = struct.unpack('HHHBB', bytes)
  753. def __repr__(self):
  754. return 'Tag: %s/%s, Offset+Size: %s+%s' % (hex(self.wPropId), hex(self.wPropType), self.ibData, self.cbData)
  755. class TCROWID:
  756. def __init__(self, bth_data):
  757. self.dwRowID = struct.unpack('I', bth_data.key)[0] # dwRowID
  758. self.nid = NID(bth_data.key) # for hierarchy TCs
  759. if len(bth_data.data) == 2: # ansi
  760. self.dwRowIndex = struct.unpack('H', bth_data.data)[0]
  761. else: # unicode (4)
  762. self.dwRowIndex = struct.unpack('I', bth_data.data)[0]
  763. class TC: # Table Context
  764. TCI_4b = 0
  765. TCI_2b = 1
  766. TCI_1b = 2
  767. TCI_bm = 3
  768. def __init__(self, hn):
  769. self.hn = hn
  770. if hn.bClientSig != HN.bTypeTC:
  771. raise PSTException('Invalid HN bClientSig, not bTypeTC, is %s' % hn.bClientSig)
  772. tcinfo_bytes = hn.get_hid_data(hn.hidUserRoot)
  773. self.bType, self.cCols = struct.unpack('BB', tcinfo_bytes[:2])
  774. if self.bType != HN.bTypeTC:
  775. raise PSTException('Invalid TCINFO bType, not bTypeTC, is %s' % self.bType)
  776. self.rgib = struct.unpack('HHHH', tcinfo_bytes[2:10])
  777. self.hidRowIndex, self.hnidRows, self.hidIndex = struct.unpack('4s4s4s', tcinfo_bytes[10:22])
  778. self.hidRowIndex = HID(self.hidRowIndex)
  779. if NID(self.hnidRows).nidType == NID.NID_TYPE_HID:
  780. self.hnidRows = HID(self.hnidRows)
  781. else:
  782. self.hnidRows = NID(self.hnidRows)
  783. self.rgTCOLDESC = []
  784. for i in range(self.cCols):
  785. self.rgTCOLDESC.append(TCOLDESC(tcinfo_bytes[22+i*8:22+(i+1)*8]))
  786. self.setup_row_index()
  787. self.setup_row_matrix()
  788. def setup_row_index(self):
  789. self.RowIndex = {} # key is dwRowID, value is dwRowIndex
  790. if not (self.hnidRows.is_hid and self.hnidRows.hidIndex == 0):
  791. row_index_bth = BTH(self.hn, self.hidRowIndex)
  792. if row_index_bth.cbKey != 4:
  793. raise PSTException('Invalid TC RowIndex key size %s' % row_index_bth.cbKey)
  794. for bth_data in row_index_bth.bth_datas:
  795. tcrowid = TCROWID(bth_data)
  796. self.RowIndex[tcrowid.dwRowIndex] = tcrowid
  797. def setup_row_matrix(self):
  798. self.RowMatrix = {}
  799. if self.RowIndex:
  800. if self.hn.ltp.nbd.header.is_ansi:
  801. size_BlockTrailer = 12
  802. else: # unicode
  803. size_BlockTrailer = 16
  804. row_size = self.rgib[TC.TCI_bm]
  805. RowsPerBlock = int(math.floor((8192.0 - size_BlockTrailer) / row_size))
  806. if self.hnidRows.is_hid:
  807. row_matrix_datas = [self.hn.get_hid_data(self.hnidRows)] # block data list
  808. else:
  809. if self.hnidRows.nid in self.hn.subnodes.keys():
  810. subnode_nid_bid = self.hn.subnodes[self.hnidRows.nid].bidData
  811. else:
  812. raise PSTException('Row Matrix HNID not in Subnodes: %s' % self.hnidRows.nid)
  813. row_matrix_datas = self.hn.ltp.nbd.fetch_all_block_data(subnode_nid_bid)
  814. for irow in range(len(self.RowIndex)):
  815. BlockIndex = irow / RowsPerBlock
  816. RowIndex = irow % RowsPerBlock
  817. row_bytes = row_matrix_datas[BlockIndex][RowIndex * row_size:(RowIndex+1) * row_size]
  818. dwRowID = struct.unpack('I', row_bytes[:4])[0]
  819. rgbCEB = row_bytes[self.rgib[TC.TCI_1b]:]
  820. #row_datas = []
  821. rowvals = {}
  822. for tcoldesc in self.rgTCOLDESC:
  823. is_fCEB = ((struct.unpack('B',rgbCEB[tcoldesc.iBit / 8])[0] & (1 << (7 - (tcoldesc.iBit % 8)))) != 0)
  824. if is_fCEB:
  825. data_bytes = row_bytes[tcoldesc.ibData:tcoldesc.ibData+tcoldesc.cbData]
  826. else:
  827. data_bytes = None
  828. #row_datas.append(self.get_row_cell_value(data_bytes, tcoldesc))
  829. if tcoldesc.wPropId in rowvals.keys():
  830. raise PSTException('Property ID %s already in row data' % hex(tcoldesc.wPropId))
  831. rowvals[tcoldesc.wPropId] = self.get_row_cell_value(data_bytes, tcoldesc)
  832. self.RowMatrix[dwRowID] = rowvals #row_datas
  833. def get_row_cell_value(self, data_bytes, tcoldesc):
  834. if data_bytes is None:
  835. return None
  836. else:
  837. ptype = self.hn.ltp.ptypes[tcoldesc.wPropType]
  838. if not ptype.is_variable and not ptype.is_multi:
  839. if ptype.byte_count <= 8:
  840. return ptype.value(data_bytes)
  841. else:
  842. hid = HID(data_bytes)
  843. return ptype.value(self.hn.get_hid_data(hid))
  844. else:
  845. if NID(data_bytes).nidType == NID.NID_TYPE_HID:
  846. hid = HID(data_bytes)
  847. return ptype.value(self.hn.get_hid_data(hid))
  848. else:
  849. subnode_nid = NID(data_bytes)
  850. if subnode_nid.nid in self.hn.subnodes.keys():
  851. subnode_nid_bid = self.hn.subnodes[subnode_nid.nid].bidData
  852. else:
  853. raise PSTException('Row Matrix Value HNID Subnode invalid: %s' % subnode_nid)
  854. datas = self.hn.ltp.nbd.fetch_all_block_data(subnode_nid_bid)
  855. return ptype.value(''.join(datas))
  856. def get_row_ID(self, RowIndex):
  857. return self.RowIndex[RowIndex].dwRowID
  858. def getval(self, RowIndex, wPropId):
  859. dwRowID = self.get_row_ID(RowIndex)
  860. rowvals = self.RowMatrix[dwRowID]
  861. if wPropId in rowvals.keys():
  862. return rowvals[wPropId]
  863. else:
  864. return None
  865. def __repr__(self):
  866. s = 'TC Rows: %s, %s\n' % (len(self.RowIndex), self.hn)
  867. s += 'Columns: ' + ''.join([' %s' % tcoldesc for tcoldesc in self.rgTCOLDESC])
  868. s += '\nData:\n' + '\n'.join(['%s: %s' % (hex(dwRowID), rowvals) for dwRowID,rowvals in self.RowMatrix.items()])
  869. return s
  870. class LTP:
  871. """LTP layer"""
  872. def __init__(self, nbd):
  873. self.nbd = nbd
  874. self.ptypes = {
  875. PTypeEnum.PtypInteger16:PType(PTypeEnum.PtypInteger16, 2, False, False),
  876. PTypeEnum.PtypInteger32:PType(PTypeEnum.PtypInteger32, 4, False, False),
  877. PTypeEnum.PtypFloating32:PType(PTypeEnum.PtypFloating32, 4, False, False),
  878. PTypeEnum.PtypFloating64:PType(PTypeEnum.PtypFloating64, 8, False, False),
  879. PTypeEnum.PtypCurrency:PType(PTypeEnum.PtypCurrency, 8, False, False),
  880. PTypeEnum.PtypFloatingTime:PType(PTypeEnum.PtypFloatingTime, 8, False, False),
  881. PTypeEnum.PtypErrorCode:PType(PTypeEnum.PtypErrorCode, 4, False, False),
  882. PTypeEnum.PtypBoolean:PType(PTypeEnum.PtypBoolean, 1, False, False),
  883. PTypeEnum.PtypInteger64:PType(PTypeEnum.PtypInteger64, 8, False, False),
  884. PTypeEnum.PtypString:PType(PTypeEnum.PtypString, 0, True, False),
  885. PTypeEnum.PtypString8:PType(PTypeEnum.PtypString8, 0, True, False),
  886. PTypeEnum.PtypTime:PType(PTypeEnum.PtypTime, 8, False, False),
  887. PTypeEnum.PtypGuid:PType(PTypeEnum.PtypGuid, 16, False, False),
  888. PTypeEnum.PtypServerId:PType(PTypeEnum.PtypServerId, 2, False, True),
  889. PTypeEnum.PtypRestriction:PType(PTypeEnum.PtypRestriction, 0, True, False),
  890. PTypeEnum.PtypRuleAction:PType(PTypeEnum.PtypRuleAction, 2, False, True),
  891. PTypeEnum.PtypBinary:PType(PTypeEnum.PtypBinary, 2, False, True),
  892. PTypeEnum.PtypMultipleInteger16:PType(PTypeEnum.PtypMultipleInteger16, 2, False, True),
  893. PTypeEnum.PtypMultipleInteger32:PType(PTypeEnum.PtypMultipleInteger32, 2, False, True),
  894. PTypeEnum.PtypMultipleFloating32:PType(PTypeEnum.PtypMultipleFloating32, 2, False, True),
  895. PTypeEnum.PtypMultipleFloating64:PType(PTypeEnum.PtypMultipleFloating64, 2, False, True),
  896. PTypeEnum.PtypMultipleCurrency:PType(PTypeEnum.PtypMultipleCurrency, 2, False, True),
  897. PTypeEnum.PtypMultipleFloatingTime:PType(PTypeEnum.PtypMultipleFloatingTime, 2, False, True),
  898. PTypeEnum.PtypMultipleInteger64:PType(PTypeEnum.PtypMultipleInteger64, 2, False, True),
  899. PTypeEnum.PtypMultipleString:PType(PTypeEnum.PtypMultipleString, 2, True, True),
  900. PTypeEnum.PtypMultipleString8:PType(PTypeEnum.PtypMultipleString8, 2, True, True),
  901. PTypeEnum.PtypMultipleTime:PType(PTypeEnum.PtypMultipleTime, 2, False, True),
  902. PTypeEnum.PtypMultipleGuid:PType(PTypeEnum.PtypMultipleGuid, 2, False, True),
  903. PTypeEnum.PtypMultipleBinary:PType(PTypeEnum.PtypMultipleBinary, 2, False, True),
  904. PTypeEnum.PtypUnspecified:PType(PTypeEnum.PtypUnspecified, 0, False, False),
  905. PTypeEnum.PtypNull:PType(PTypeEnum.PtypNull, 0, False, False),
  906. PTypeEnum.PtypObject:PType(PTypeEnum.PtypObject, 4, False, True)
  907. }
  908. def get_pc_by_nid(self, nid):
  909. nbt_entry = self.nbd.nbt_entries[nid.nid]
  910. datas = self.nbd.fetch_all_block_data(nbt_entry.bidData)
  911. hn = HN(nbt_entry, self, datas)
  912. return PC(hn)
  913. def get_pc_by_slentry(self, slentry):
  914. datas = self.nbd.fetch_all_block_data(slentry.bidData)
  915. hn = HN(slentry, self, datas)
  916. return PC(hn)
  917. def get_tc_by_nid(self, nid):
  918. nbt_entry = self.nbd.nbt_entries[nid.nid]
  919. datas = self.nbd.fetch_all_block_data(nbt_entry.bidData)
  920. hn = HN(nbt_entry, self, datas)
  921. return TC(hn)
  922. def get_tc_by_slentry(self, slentry):
  923. datas = self.nbd.fetch_all_block_data(slentry.bidData)
  924. hn = HN(slentry, self, datas)
  925. return TC(hn)
  926. def strip_SubjectPrefix(self, Subject):
  927. if Subject and ord(Subject[:1]) == 0x01:
  928. #prefix_length = ord(Subject[1:2])
  929. #return Subject[prefix_length+1:]
  930. return Subject[2:]
  931. else:
  932. return Subject
  933. #############################################################################################################################
  934. # __ __ _ _
  935. # | \/ | ___ ___ ___ __ _ __ _(_)_ __ __ _ | | __ _ _ _ ___ _ __
  936. # | |\/| |/ _ \/ __/ __|/ _` |/ _` | | '_ \ / _` | | | / _` | | | |/ _ \ '__|
  937. # | | | | __/\__ \__ \ (_| | (_| | | | | | (_| | | |__| (_| | |_| | __/ |
  938. # |_| |_|\___||___/___/\__,_|\__, |_|_| |_|\__, | |_____\__,_|\__, |\___|_|
  939. # |___/ |___/ |___/
  940. #############################################################################################################################
  941. class EntryID:
  942. def __init__(self, bytes):
  943. self.rgbFlags, self.uid, self.nid = struct.unpack('4s16s4s', bytes)
  944. self.nid = NID(self.nid)
  945. def __repr__(self):
  946. return 'EntryID %s' % self.nid
  947. class SubFolder:
  948. def __init__(self, nid, name, parent_path):
  949. self.nid = nid
  950. self.name = name
  951. self.parent_path = parent_path
  952. def __repr__(self):
  953. return '%s (%s)' % (self.name, self.nid)
  954. class SubMessage:
  955. def __init__(self, nid, SentRepresentingName, Subject, ClientSubmitTime):
  956. self.nid = nid
  957. self.SentRepresentingName = SentRepresentingName
  958. self.Subject = Subject
  959. self.ClientSubmitTime = ClientSubmitTime
  960. def __repr__(self):
  961. return '%s (%s)' % (self.Subject, self.nid)
  962. class Folder:
  963. def __init__(self, nid, ltp, parent_path=''):
  964. if nid.nidType != NID.NID_TYPE_NORMAL_FOLDER:
  965. raise PSTException('Invalid Folder NID Type: %s' % nid.nidType)
  966. self.pc = ltp.get_pc_by_nid(nid)
  967. self.DisplayName = self.pc.getval(PropIdEnum.PidTagDisplayName)
  968. self.path = parent_path+'/'+self.DisplayName.replace('/', '\\/')
  969. #print 'FOLDER DEBUG', self.DisplayName, self.pc
  970. self.ContentCount = self.pc.getval(PropIdEnum.PidTagContentCount)
  971. self.ContainerClass = self.pc.getval(PropIdEnum.PidTagContainerClass)
  972. self.HasSubfolders = self.pc.getval(PropIdEnum.PidTagSubfolders)
  973. nid_hierachy = NID(nid.nidIndex | NID.NID_TYPE_HIERARCHY_TABLE)
  974. nid_contents = NID(nid.nidIndex | NID.NID_TYPE_CONTENTS_TABLE)
  975. nid_fai = NID(nid.nidIndex | NID.NID_TYPE_ASSOC_CONTENTS_TABLE) # FAI = Folder Associated Information
  976. try:
  977. self.tc_hierachy = None
  978. self.subfolders = []
  979. self.tc_hierachy = ltp.get_tc_by_nid(nid_hierachy)
  980. self.subfolders = [SubFolder(self.tc_hierachy.RowIndex[RowIndex].nid, self.tc_hierachy.getval(RowIndex,PropIdEnum.PidTagDisplayName), self.path) for RowIndex in range(len(self.tc_hierachy.RowIndex))]
  981. except PSTException as e:
  982. log_error(e)
  983. try:
  984. self.tc_contents = None
  985. self.submessages = []
  986. self.tc_contents = ltp.get_tc_by_nid(nid_contents)
  987. self.submessages = [SubMessage(self.tc_contents.RowIndex[RowIndex].nid, \
  988. self.tc_contents.getval(RowIndex,PropIdEnum.PidTagSentRepresentingNameW), ltp.strip_SubjectPrefix(self.tc_contents.getval(RowIndex,PropIdEnum.PidTagSubjectW)), \
  989. self.tc_contents.getval(RowIndex,PropIdEnum.PidTagClientSubmitTime)) \
  990. for RowIndex in range(len(self.tc_contents.RowIndex)) if RowIndex in self.tc_contents.RowIndex.keys()]
  991. except PSTException as e:
  992. log_error(e)
  993. try:
  994. self.tc_fai = None
  995. self.tc_fai = ltp.get_tc_by_nid(nid_fai)
  996. except PSTException as e:
  997. log_error(e)
  998. def __repr__(self):
  999. return 'Folder: %s, %s items, messages: %s, subfolders: %s' % (self.DisplayName, len(self.submessages), self.subfolders)
  1000. class SubAttachment:
  1001. def __init__(self, nid, AttachmentSize, AttachFilename, AttachLongFilename):
  1002. self.nid, self.AttachmentSize, self.AttachFilename, self.AttachLongFilename = nid, AttachmentSize, AttachFilename, AttachLongFilename
  1003. if self.AttachLongFilename:
  1004. self.Filename = self.AttachLongFilename
  1005. else:
  1006. self.Filename = self.AttachFilename
  1007. if self.Filename:
  1008. self.Filename = os.path.basename(self.Filename)
  1009. else:
  1010. self.Filename = '[None]'
  1011. def __repr__(self):
  1012. return '%s (%s)' % (self.Filename, size_friendly(self.AttachmentSize))
  1013. class SubRecipient:
  1014. def __init__(self, RecipientType, DisplayName, ObjectType, AddressType, EmailAddress, DisplayType):
  1015. self.RecipientType, self.DisplayName, self.ObjectType, self.AddressType, self.EmailAddress, self.DisplayType = RecipientType, DisplayName, ObjectType, AddressType, EmailAddress, DisplayType
  1016. def __repr__(self):
  1017. return '%s (%s)' % (self.DisplayName, self.EmailAddress)
  1018. class Message:
  1019. mfRead = 0x01
  1020. mfUnsent = 0x08
  1021. mfUnmodified = 0x02
  1022. mfHasAttach = 0x10
  1023. mfFromMe = 0x20
  1024. mfFAI = 0x40
  1025. mfNotifyRead = 0x100
  1026. mfNotifyUnread = 0x200
  1027. mfInternet = 0x2000
  1028. afByValue = 0x01
  1029. afEmbeddedMessage = 0x05
  1030. afStorage = 0x06
  1031. def __init__(self, nid, ltp, nbd=None, parent_message=None):
  1032. self.ltp = ltp
  1033. if parent_message:
  1034. subnode = parent_message.pc.hn.subnodes[nid]
  1035. datas = nbd.fetch_all_block_data(subnode.bidData)
  1036. hn = HN(subnode, ltp, datas)
  1037. self.pc = PC(hn)
  1038. else:
  1039. if nid.nidType != NID.NID_TYPE_NORMAL_MESSAGE:
  1040. raise PSTException('Invalid Message NID Type: %s' % nid_pc.nidType)
  1041. self.pc = ltp.get_pc_by_nid(nid)
  1042. self.MessageClass = self.pc.getval(PropIdEnum.PidTagMessageClassW)
  1043. self.Subject = ltp.strip_SubjectPrefix(self.pc.getval(PropIdEnum.PidTagSubjectW))
  1044. self.ClientSubmitTime = self.pc.getval(PropIdEnum.PidTagClientSubmitTime)
  1045. self.SentRepresentingName = self.pc.getval(PropIdEnum.PidTagSentRepresentingNameW)
  1046. self.SenderName = self.pc.getval(PropIdEnum.PidTagSenderName)
  1047. self.SenderSmtpAddress = self.pc.getval(PropIdEnum.PidTagSenderSmtpAddress)
  1048. self.MessageDeliveryTime = self.pc.getval(PropIdEnum.PidTagMessageDeliveryTime)
  1049. self.MessageFlags = self.pc.getval(PropIdEnum.PidTagMessageFlags)
  1050. self.MessageStatus = self.pc.getval(PropIdEnum.PidTagMessageStatus)
  1051. self.HasAttachments = (self.MessageFlags & Message.mfHasAttach == Message.mfHasAttach)
  1052. self.MessageSize = self.pc.getval(PropIdEnum.PidTagMessageSize)
  1053. self.Body = self.pc.getval(PropIdEnum.PidTagBody)
  1054. self.Read = (self.MessageFlags & Message.mfRead == Message.mfRead)
  1055. self.TransportMessageHeaders = self.pc.getval(PropIdEnum.PidTagTransportMessageHeaders)
  1056. self.DisplayTo = self.pc.getval(PropIdEnum.PidTagDisplayToW)
  1057. self.XOriginatingIP = self.pc.getval(0x8028) # x-originating-ip
  1058. self.tc_attachments = None
  1059. self.tc_recipients = None
  1060. if self.pc.hn.subnodes:
  1061. for subnode in self.pc.hn.subnodes.values(): #SLENTRYs
  1062. if subnode.nid.nidType == NID.NID_TYPE_ATTACHMENT_TABLE:
  1063. self.tc_attachments = self.ltp.get_tc_by_slentry(subnode)
  1064. elif subnode.nid.nidType == NID.NID_TYPE_RECIPIENT_TABLE:
  1065. self.tc_recipients = ltp.get_tc_by_slentry(subnode)
  1066. self.subattachments = []
  1067. if self.tc_attachments:
  1068. self.subattachments = [SubAttachment(self.tc_attachments.RowIndex[RowIndex].nid, self.tc_attachments.getval(RowIndex,PropIdEnum.PidTagAttachmentSize), \
  1069. self.tc_attachments.getval(RowIndex,PropIdEnum.PidTagAttachFilename), self.tc_attachments.getval(RowIndex,PropIdEnum.PidTagAttachLongFilename)) for RowIndex in range(len(self.tc_attachments.RowIndex))]
  1070. self.subrecipients = []
  1071. if self.tc_recipients:
  1072. self.subrecipients = [SubRecipient(self.tc_recipients.getval(RowIndex,PropIdEnum.PidTagRecipientType), self.tc_recipients.getval(RowIndex,PropIdEnum.PidTagDisplayName), \
  1073. self.tc_recipients.getval(RowIndex,PropIdEnum.PidTagObjectType), self.tc_recipients.getval(RowIndex,PropIdEnum.PidTagAddressType), \
  1074. self.tc_recipients.getval(RowIndex,PropIdEnum.PidTagEmailAddress), self.tc_recipients.getval(RowIndex,PropIdEnum.PidTagDisplayType)) for RowIndex in range(len(self.tc_recipients.RowIndex))]
  1075. def get_attachment(self, subattachment):
  1076. """ fetch attachment on demand, not when Message instanced"""
  1077. return Attachment(self.ltp, self.pc.hn.subnodes[subattachment.nid.nid])
  1078. def get_all_properties(self):
  1079. return self.pc.__repr__()
  1080. def __repr__(self):
  1081. attachments = ', '.join(['%s' % subattachment for subattachment in self.subattachments])
  1082. return 'Message: %s, From: %s, %s, Size: %s, Attachments: %s' % (repr(self.Subject), repr(self.SentRepresentingName), self.ClientSubmitTime, size_friendly(self.MessageSize), attachments)
  1083. class Attachment:
  1084. def __init__(self, ltp, slentry):
  1085. self.ltp = ltp
  1086. self.slentry = slentry
  1087. self.pc = self.ltp.get_pc_by_slentry(slentry)
  1088. self.DisplayName = self.pc.getval(PropIdEnum.PidTagDisplayName)
  1089. self.AttachMethod = self.pc.getval(PropIdEnum.PidTagAttachMethod)
  1090. self.AttachmentSize = self.pc.getval(PropIdEnum.PidTagAttachmentSize)
  1091. self.AttachFilename = self.pc.getval(PropIdEnum.PidTagAttachFilename) # 8.3 short name
  1092. self.AttachLongFilename = self.pc.getval(PropIdEnum.PidTagAttachLongFilename)
  1093. if self.AttachLongFilename:
  1094. self.Filename = self.AttachLongFilename
  1095. else:
  1096. self.Filename = self.AttachFilename
  1097. if self.Filename:
  1098. self.Filename = os.path.basename(self.Filename)
  1099. else:
  1100. self.Filename = '[NoFilename_Method%s]' % self.AttachMethod
  1101. if self.AttachMethod == Message.afByValue:
  1102. self.data = self.pc.getval(PropIdEnum.PidTagAttachDataBinary)
  1103. else:
  1104. self.data = self.pc.getval(PropIdEnum.PidTagAttachDataObject)
  1105. #raise PSTException('Unsupported Attachment Method %s' % self.AttachMethod)
  1106. self.AttachMimeTag = self.pc.getval(PropIdEnum.PidTagAttachMimeTag)
  1107. self.AttachExtension = self.pc.getval(PropIdEnum.PidTagAttachExtension)
  1108. def get_all_properties(self):
  1109. return self.pc.__repr__()
  1110. class NAMEID:
  1111. def __init__(self, bytes):
  1112. self.dwPropertyID, self.wGuid, self.wPropIdx = struct.unpack('IHH', bytes)
  1113. self.N = self.wGuid & 0x01
  1114. self.wGuid = self.wGuid >> 1
  1115. self.NPID = self.wPropIdx + 0x8000
  1116. class Messaging:
  1117. """Messaging Layer"""
  1118. def __init__(self, ltp):
  1119. self.ltp = ltp
  1120. self.set_message_store()
  1121. try:
  1122. self.set_name_to_id_map()
  1123. except PSTException as e:
  1124. log_error(e)
  1125. def set_message_store(self):
  1126. self.message_store = self.ltp.get_pc_by_nid(NID(NID.NID_MESSAGE_STORE))
  1127. if PropIdEnum.PidTagPstPassword in self.message_store.props.keys():
  1128. self.PasswordCRC32Hash = struct.unpack('I', struct.pack('i', self.message_store.getval(PropIdEnum.PidTagPstPassword)))[0]
  1129. else:
  1130. self.PasswordCRC32Hash = None
  1131. self.root_entryid = self.message_store.getval(PropIdEnum.PidTagIpmSubTreeEntryId)
  1132. self.deleted_items_entryid = self.message_store.getval(PropIdEnum.PidTagIpmWastebasketEntryId)
  1133. def set_name_to_id_map(self):
  1134. self.nameid_entries = []
  1135. self.pc_name_to_id_map = self.ltp.get_pc_by_nid(NID(NID.NID_NAME_TO_ID_MAP))
  1136. nameid_entrystream = self.pc_name_to_id_map.getval(PropIdEnum.PidTagNameidStreamEntry)
  1137. self.nameid_entries = [NAMEID(nameid_entrystream[i*8:(i+1)*8]) for i in range(len(nameid_entrystream)/8)]
  1138. nameid_stringstream = self.pc_name_to_id_map.getval(PropIdEnum.PidTagNameidStreamString)
  1139. nameid_guidstream = self.pc_name_to_id_map.getval(PropIdEnum.PidTagNameidStreamGuid)
  1140. for nameid in self.nameid_entries:
  1141. if nameid.N == 1:
  1142. name_len = struct.unpack('I', nameid_stringstream[nameid.dwPropertyID:nameid.dwPropertyID+4])[0]
  1143. nameid.name = nameid_stringstream[nameid.dwPropertyID+4:nameid.dwPropertyID+4+name_len].decode('utf-16-le') # unicode
  1144. if nameid.wGuid == 0:
  1145. nameid.guid = None
  1146. elif nameid.wGuid == 1: # PS_MAPI
  1147. nameid.guid = '(\x03\x02\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00F'
  1148. elif nameid.wGuid == 2: # PS_PUBLIC_STRINGS
  1149. nameid.guid = ')\x03\x02\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00F'
  1150. else:
  1151. nameid.guid = nameid_guidstream[16*(nameid.wGuid-3):16*(nameid.wGuid-2)]
  1152. def get_folder(self, entryid, parent_path=''):
  1153. return Folder(entryid.nid, self.ltp, parent_path)
  1154. def get_named_properties(self):
  1155. return '\n'.join(['%s = %s' % (hex(nameid.NPID), repr(nameid.name)) for nameid in self.nameid_entries if nameid.N==1])
  1156. #############################################################################################################################
  1157. # ____ ____ _____ _
  1158. # | _ \/ ___|_ _| | | __ _ _ _ ___ _ __
  1159. # | |_) \___ \ | | | | / _` | | | |/ _ \ '__|
  1160. # | __/ ___) || | | |__| (_| | |_| | __/ |
  1161. # |_| |____/ |_| |_____\__,_|\__, |\___|_|
  1162. # |___/
  1163. #############################################################################################################################
  1164. class CRC:
  1165. CrcTableOffset32 = (0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
  1166. 0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
  1167. 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE, 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
  1168. 0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
  1169. 0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
  1170. 0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
  1171. 0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
  1172. 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924, 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
  1173. 0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
  1174. 0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
  1175. 0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
  1176. 0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
  1177. 0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2, 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
  1178. 0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0, 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
  1179. 0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086, 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
  1180. 0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4, 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
  1181. 0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A, 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
  1182. 0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8, 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
  1183. 0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE, 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
  1184. 0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC, 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
  1185. 0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252, 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
  1186. 0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60, 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
  1187. 0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236, 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
  1188. 0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04, 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
  1189. 0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A, 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
  1190. 0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38, 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
  1191. 0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E, 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
  1192. 0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C, 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
  1193. 0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2, 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
  1194. 0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0, 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
  1195. 0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6, 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
  1196. 0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94, 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D)
  1197. CrcTableOffset40 = (0x00000000, 0x191B3141, 0x32366282, 0x2B2D53C3, 0x646CC504, 0x7D77F445, 0x565AA786, 0x4F4196C7,
  1198. 0xC8D98A08, 0xD1C2BB49, 0xFAEFE88A, 0xE3F4D9CB, 0xACB54F0C, 0xB5AE7E4D, 0x9E832D8E, 0x87981CCF,
  1199. 0x4AC21251, 0x53D92310, 0x78F470D3, 0x61EF4192, 0x2EAED755, 0x37B5E614, 0x1C98B5D7, 0x05838496,
  1200. 0x821B9859, 0x9B00A918, 0xB02DFADB, 0xA936CB9A, 0xE6775D5D, 0xFF6C6C1C, 0xD4413FDF, 0xCD5A0E9E,
  1201. 0x958424A2, 0x8C9F15E3, 0xA7B24620, 0xBEA97761, 0xF1E8E1A6, 0xE8F3D0E7, 0xC3DE8324, 0xDAC5B265,
  1202. 0x5D5DAEAA, 0x44469FEB, 0x6F6BCC28, 0x7670FD69, 0x39316BAE, 0x202A5AEF, 0x0B07092C, 0x121C386D,
  1203. 0xDF4636F3, 0xC65D07B2, 0xED705471, 0xF46B6530, 0xBB2AF3F7, 0xA231C2B6, 0x891C9175, 0x9007A034,
  1204. 0x179FBCFB, 0x0E848DBA, 0x25A9DE79, 0x3CB2EF38, 0x73F379FF, 0x6AE848BE, 0x41C51B7D, 0x58DE2A3C,
  1205. 0xF0794F05, 0xE9627E44, 0xC24F2D87, 0xDB541CC6, 0x94158A01, 0x8D0EBB40, 0xA623E883, 0xBF38D9C2,
  1206. 0x38A0C50D, 0x21BBF44C, 0x0A96A78F, 0x138D96CE, 0x5CCC0009, 0x45D73148, 0x6EFA628B, 0x77E153CA,
  1207. 0xBABB5D54, 0xA3A06C15, 0x888D3FD6, 0x91960E97, 0xDED79850, 0xC7CCA911, 0xECE1FAD2, 0xF5FACB93,
  1208. 0x7262D75C, 0x6B79E61D, 0x4054B5DE, 0x594F849F, 0x160E1258, 0x0F152319, 0x243870DA, 0x3D23419B,
  1209. 0x65FD6BA7, 0x7CE65AE6, 0x57CB0925, 0x4ED03864, 0x0191AEA3, 0x188A9FE2, 0x33A7CC21, 0x2ABCFD60,
  1210. 0xAD24E1AF, 0xB43FD0EE, 0x9F12832D, 0x8609B26C, 0xC94824AB, 0xD05315EA, 0xFB7E4629, 0xE2657768,
  1211. 0x2F3F79F6, 0x362448B7, 0x1D091B74, 0x04122A35, 0x4B53BCF2, 0x52488DB3, 0x7965DE70, 0x607EEF31,
  1212. 0xE7E6F3FE, 0xFEFDC2BF, 0xD5D0917C, 0xCCCBA03D, 0x838A36FA, 0x9A9107BB, 0xB1BC5478, 0xA8A76539,
  1213. 0x3B83984B, 0x2298A90A, 0x09B5FAC9, 0x10AECB88, 0x5FEF5D4F, 0x46F46C0E, 0x6DD93FCD, 0x74C20E8C,
  1214. 0xF35A1243, 0xEA412302, 0xC16C70C1, 0xD8774180, 0x9736D747, 0x8E2DE606, 0xA500B5C5, 0xBC1B8484,
  1215. 0x71418A1A, 0x685ABB5B, 0x4377E898, 0x5A6CD9D9, 0x152D4F1E, 0x0C367E5F, 0x271B2D9C, 0x3E001CDD,
  1216. 0xB9980012, 0xA0833153, 0x8BAE6290, 0x92B553D1, 0xDDF4C516, 0xC4EFF457, 0xEFC2A794, 0xF6D996D5,
  1217. 0xAE07BCE9, 0xB71C8DA8, 0x9C31DE6B, 0x852AEF2A, 0xCA6B79ED, 0xD37048AC, 0xF85D1B6F, 0xE1462A2E,
  1218. 0x66DE36E1, 0x7FC507A0, 0x54E85463, 0x4DF36522, 0x02B2F3E5, 0x1BA9C2A4, 0x30849167, 0x299FA026,
  1219. 0xE4C5AEB8, 0xFDDE9FF9, 0xD6F3CC3A, 0xCFE8FD7B, 0x80A96BBC, 0x99B25AFD, 0xB29F093E, 0xAB84387F,
  1220. 0x2C1C24B0, 0x350715F1, 0x1E2A4632, 0x07317773, 0x4870E1B4, 0x516BD0F5, 0x7A468336, 0x635DB277,
  1221. 0xCBFAD74E, 0xD2E1E60F, 0xF9CCB5CC, 0xE0D7848D, 0xAF96124A, 0xB68D230B, 0x9DA070C8, 0x84BB4189,
  1222. 0x03235D46, 0x1A386C07, 0x31153FC4, 0x280E0E85, 0x674F9842, 0x7E54A903, 0x5579FAC0, 0x4C62CB81,
  1223. 0x8138C51F, 0x9823F45E, 0xB30EA79D, 0xAA1596DC, 0xE554001B, 0xFC4F315A, 0xD7626299, 0xCE7953D8,
  1224. 0x49E14F17, 0x50FA7E56, 0x7BD72D95, 0x62CC1CD4, 0x2D8D8A13, 0x3496BB52, 0x1FBBE891, 0x06A0D9D0,
  1225. 0x5E7EF3EC, 0x4765C2AD, 0x6C48916E, 0x7553A02F, 0x3A1236E8, 0x230907A9, 0x0824546A, 0x113F652B,
  1226. 0x96A779E4, 0x8FBC48A5, 0xA4911B66, 0xBD8A2A27, 0xF2CBBCE0, 0xEBD08DA1, 0xC0FDDE62, 0xD9E6EF23,
  1227. 0x14BCE1BD, 0x0DA7D0FC, 0x268A833F, 0x3F91B27E, 0x70D024B9, 0x69CB15F8, 0x42E6463B, 0x5BFD777A,
  1228. 0xDC656BB5, 0xC57E5AF4, 0xEE530937, 0xF7483876, 0xB809AEB1, 0xA1129FF0, 0x8A3FCC33, 0x9324FD72)
  1229. CrcTableOffset48 = (0x00000000, 0x01C26A37, 0x0384D46E, 0x0246BE59, 0x0709A8DC, 0x06CBC2EB, 0x048D7CB2, 0x054F1685,
  1230. 0x0E1351B8, 0x0FD13B8F, 0x0D9785D6, 0x0C55EFE1, 0x091AF964, 0x08D89353, 0x0A9E2D0A, 0x0B5C473D,
  1231. 0x1C26A370, 0x1DE4C947, 0x1FA2771E, 0x1E601D29, 0x1B2F0BAC, 0x1AED619B, 0x18ABDFC2, 0x1969B5F5,
  1232. 0x1235F2C8, 0x13F798FF, 0x11B126A6, 0x10734C91, 0x153C5A14, 0x14FE3023, 0x16B88E7A, 0x177AE44D,
  1233. 0x384D46E0, 0x398F2CD7, 0x3BC9928E, 0x3A0BF8B9, 0x3F44EE3C, 0x3E86840B, 0x3CC03A52, 0x3D025065,
  1234. 0x365E1758, 0x379C7D6F, 0x35DAC336, 0x3418A901, 0x3157BF84, 0x3095D5B3, 0x32D36BEA, 0x331101DD,
  1235. 0x246BE590, 0x25A98FA7, 0x27EF31FE, 0x262D5BC9, 0x23624D4C, 0x22A0277B, 0x20E69922, 0x2124F315,
  1236. 0x2A78B428, 0x2BBADE1F, 0x29FC6046, 0x283E0A71, 0x2D711CF4, 0x2CB376C3, 0x2EF5C89A, 0x2F37A2AD,
  1237. 0x709A8DC0, 0x7158E7F7, 0x731E59AE, 0x72DC3399, 0x7793251C, 0x76514F2B, 0x7417F172, 0x75D59B45,
  1238. 0x7E89DC78, 0x7F4BB64F, 0x7D0D0816, 0x7CCF6221, 0x798074A4, 0x78421E93, 0x7A04A0CA, 0x7BC6CAFD,
  1239. 0x6CBC2EB0, 0x6D7E4487, 0x6F38FADE, 0x6EFA90E9, 0x6BB5866C, 0x6A77EC5B, 0x68315202, 0x69F33835,
  1240. 0x62AF7F08, 0x636D153F, 0x612BAB66, 0x60E9C151, 0x65A6D7D4, 0x6464BDE3, 0x662203BA, 0x67E0698D,
  1241. 0x48D7CB20, 0x4915A117, 0x4B531F4E, 0x4A917579, 0x4FDE63FC, 0x4E1C09CB, 0x4C5AB792, 0x4D98DDA5,
  1242. 0x46C49A98, 0x4706F0AF, 0x45404EF6, 0x448224C1, 0x41CD3244, 0x400F5873, 0x4249E62A, 0x438B8C1D,
  1243. 0x54F16850, 0x55330267, 0x5775BC3E, 0x56B7D609, 0x53F8C08C, 0x523AAABB, 0x507C14E2, 0x51BE7ED5,
  1244. 0x5AE239E8, 0x5B2053DF, 0x5966ED86, 0x58A487B1, 0x5DEB9134, 0x5C29FB03, 0x5E6F455A, 0x5FAD2F6D,
  1245. 0xE1351B80, 0xE0F771B7, 0xE2B1CFEE, 0xE373A5D9, 0xE63CB35C, 0xE7FED96B, 0xE5B86732, 0xE47A0D05,
  1246. 0xEF264A38, 0xEEE4200F, 0xECA29E56, 0xED60F461, 0xE82FE2E4, 0xE9ED88D3, 0xEBAB368A, 0xEA695CBD,
  1247. 0xFD13B8F0, 0xFCD1D2C7, 0xFE976C9E, 0xFF5506A9, 0xFA1A102C, 0xFBD87A1B, 0xF99EC442, 0xF85CAE75,
  1248. 0xF300E948, 0xF2C2837F, 0xF0843D26, 0xF1465711, 0xF4094194, 0xF5CB2BA3, 0xF78D95FA, 0xF64FFFCD,
  1249. 0xD9785D60, 0xD8BA3757, 0xDAFC890E, 0xDB3EE339, 0xDE71F5BC, 0xDFB39F8B, 0xDDF521D2, 0xDC374BE5,
  1250. 0xD76B0CD8, 0xD6A966EF, 0xD4EFD8B6, 0xD52DB281, 0xD062A404, 0xD1A0CE33, 0xD3E6706A, 0xD2241A5D,
  1251. 0xC55EFE10, 0xC49C9427, 0xC6DA2A7E, 0xC7184049, 0xC25756CC, 0xC3953CFB, 0xC1D382A2, 0xC011E895,
  1252. 0xCB4DAFA8, 0xCA8FC59F, 0xC8C97BC6, 0xC90B11F1, 0xCC440774, 0xCD866D43, 0xCFC0D31A, 0xCE02B92D,
  1253. 0x91AF9640, 0x906DFC77, 0x922B422E, 0x93E92819, 0x96A63E9C, 0x976454AB, 0x9522EAF2, 0x94E080C5,
  1254. 0x9FBCC7F8, 0x9E7EADCF, 0x9C381396, 0x9DFA79A1, 0x98B56F24, 0x99770513, 0x9B31BB4A, 0x9AF3D17D,
  1255. 0x8D893530, 0x8C4B5F07, 0x8E0DE15E, 0x8FCF8B69, 0x8A809DEC, 0x8B42F7DB, 0x89044982, 0x88C623B5,
  1256. 0x839A6488, 0x82580EBF, 0x801EB0E6, 0x81DCDAD1, 0x8493CC54, 0x8551A663, 0x8717183A, 0x86D5720D,
  1257. 0xA9E2D0A0, 0xA820BA97, 0xAA6604CE, 0xABA46EF9, 0xAEEB787C, 0xAF29124B, 0xAD6FAC12, 0xACADC625,
  1258. 0xA7F18118, 0xA633EB2F, 0xA4755576, 0xA5B73F41, 0xA0F829C4, 0xA13A43F3, 0xA37CFDAA, 0xA2BE979D,
  1259. 0xB5C473D0, 0xB40619E7, 0xB640A7BE, 0xB782CD89, 0xB2CDDB0C, 0xB30FB13B, 0xB1490F62, 0xB08B6555,
  1260. 0xBBD72268, 0xBA15485F, 0xB853F606, 0xB9919C31, 0xBCDE8AB4, 0xBD1CE083, 0xBF5A5EDA, 0xBE9834ED)
  1261. CrcTableOffset56 = (0x00000000, 0xB8BC6765, 0xAA09C88B, 0x12B5AFEE, 0x8F629757, 0x37DEF032, 0x256B5FDC, 0x9DD738B9,
  1262. 0xC5B428EF, 0x7D084F8A, 0x6FBDE064, 0xD7018701, 0x4AD6BFB8, 0xF26AD8DD, 0xE0DF7733, 0x58631056,
  1263. 0x5019579F, 0xE8A530FA, 0xFA109F14, 0x42ACF871, 0xDF7BC0C8, 0x67C7A7AD, 0x75720843, 0xCDCE6F26,
  1264. 0x95AD7F70, 0x2D111815, 0x3FA4B7FB, 0x8718D09E, 0x1ACFE827, 0xA2738F42, 0xB0C620AC, 0x087A47C9,
  1265. 0xA032AF3E, 0x188EC85B, 0x0A3B67B5, 0xB28700D0, 0x2F503869, 0x97EC5F0C, 0x8559F0E2, 0x3DE59787,
  1266. 0x658687D1, 0xDD3AE0B4, 0xCF8F4F5A, 0x7733283F, 0xEAE41086, 0x525877E3, 0x40EDD80D, 0xF851BF68,
  1267. 0xF02BF8A1, 0x48979FC4, 0x5A22302A, 0xE29E574F, 0x7F496FF6, 0xC7F50893, 0xD540A77D, 0x6DFCC018,
  1268. 0x359FD04E, 0x8D23B72B, 0x9F9618C5, 0x272A7FA0, 0xBAFD4719, 0x0241207C, 0x10F48F92, 0xA848E8F7,
  1269. 0x9B14583D, 0x23A83F58, 0x311D90B6, 0x89A1F7D3, 0x1476CF6A, 0xACCAA80F, 0xBE7F07E1, 0x06C36084,
  1270. 0x5EA070D2, 0xE61C17B7, 0xF4A9B859, 0x4C15DF3C, 0xD1C2E785, 0x697E80E0, 0x7BCB2F0E, 0xC377486B,
  1271. 0xCB0D0FA2, 0x73B168C7, 0x6104C729, 0xD9B8A04C, 0x446F98F5, 0xFCD3FF90, 0xEE66507E, 0x56DA371B,
  1272. 0x0EB9274D, 0xB6054028, 0xA4B0EFC6, 0x1C0C88A3, 0x81DBB01A, 0x3967D77F, 0x2BD27891, 0x936E1FF4,
  1273. 0x3B26F703, 0x839A9066, 0x912F3F88, 0x299358ED, 0xB4446054, 0x0CF80731, 0x1E4DA8DF, 0xA6F1CFBA,
  1274. 0xFE92DFEC, 0x462EB889, 0x549B1767, 0xEC277002, 0x71F048BB, 0xC94C2FDE, 0xDBF98030, 0x6345E755,
  1275. 0x6B3FA09C, 0xD383C7F9, 0xC1366817, 0x798A0F72, 0xE45D37CB, 0x5CE150AE, 0x4E54FF40, 0xF6E89825,
  1276. 0xAE8B8873, 0x1637EF16, 0x048240F8, 0xBC3E279D, 0x21E91F24, 0x99557841, 0x8BE0D7AF, 0x335CB0CA,
  1277. 0xED59B63B, 0x55E5D15E, 0x47507EB0, 0xFFEC19D5, 0x623B216C, 0xDA874609, 0xC832E9E7, 0x708E8E82,
  1278. 0x28ED9ED4, 0x9051F9B1, 0x82E4565F, 0x3A58313A, 0xA78F0983, 0x1F336EE6, 0x0D86C108, 0xB53AA66D,
  1279. 0xBD40E1A4, 0x05FC86C1, 0x1749292F, 0xAFF54E4A, 0x322276F3, 0x8A9E1196, 0x982BBE78, 0x2097D91D,
  1280. 0x78F4C94B, 0xC048AE2E, 0xD2FD01C0, 0x6A4166A5, 0xF7965E1C, 0x4F2A3979, 0x5D9F9697, 0xE523F1F2,
  1281. 0x4D6B1905, 0xF5D77E60, 0xE762D18E, 0x5FDEB6EB, 0xC2098E52, 0x7AB5E937, 0x680046D9, 0xD0BC21BC,
  1282. 0x88DF31EA, 0x3063568F, 0x22D6F961, 0x9A6A9E04, 0x07BDA6BD, 0xBF01C1D8, 0xADB46E36, 0x15080953,
  1283. 0x1D724E9A, 0xA5CE29FF, 0xB77B8611, 0x0FC7E174, 0x9210D9CD, 0x2AACBEA8, 0x38191146, 0x80A57623,
  1284. 0xD8C66675, 0x607A0110, 0x72CFAEFE, 0xCA73C99B, 0x57A4F122, 0xEF189647, 0xFDAD39A9, 0x45115ECC,
  1285. 0x764DEE06, 0xCEF18963, 0xDC44268D, 0x64F841E8, 0xF92F7951, 0x41931E34, 0x5326B1DA, 0xEB9AD6BF,
  1286. 0xB3F9C6E9, 0x0B45A18C, 0x19F00E62, 0xA14C6907, 0x3C9B51BE, 0x842736DB, 0x96929935, 0x2E2EFE50,
  1287. 0x2654B999, 0x9EE8DEFC, 0x8C5D7112, 0x34E11677, 0xA9362ECE, 0x118A49AB, 0x033FE645, 0xBB838120,
  1288. 0xE3E09176, 0x5B5CF613, 0x49E959FD, 0xF1553E98, 0x6C820621, 0xD43E6144, 0xC68BCEAA, 0x7E37A9CF,
  1289. 0xD67F4138, 0x6EC3265D, 0x7C7689B3, 0xC4CAEED6, 0x591DD66F, 0xE1A1B10A, 0xF3141EE4, 0x4BA87981,
  1290. 0x13CB69D7, 0xAB770EB2, 0xB9C2A15C, 0x017EC639, 0x9CA9FE80, 0x241599E5, 0x36A0360B, 0x8E1C516E,
  1291. 0x866616A7, 0x3EDA71C2, 0x2C6FDE2C, 0x94D3B949, 0x090481F0, 0xB1B8E695, 0xA30D497B, 0x1BB12E1E,
  1292. 0x43D23E48, 0xFB6E592D, 0xE9DBF6C3, 0x516791A6, 0xCCB0A91F, 0x740CCE7A, 0x66B96194, 0xDE0506F1)
  1293. CrcTableOffset64 = (0x00000000, 0x3D6029B0, 0x7AC05360, 0x47A07AD0, 0xF580A6C0, 0xC8E08F70, 0x8F40F5A0, 0xB220DC10,
  1294. 0x30704BC1, 0x0D106271, 0x4AB018A1, 0x77D03111, 0xC5F0ED01, 0xF890C4B1, 0xBF30BE61, 0x825097D1,
  1295. 0x60E09782, 0x5D80BE32, 0x1A20C4E2, 0x2740ED52, 0x95603142, 0xA80018F2, 0xEFA06222, 0xD2C04B92,
  1296. 0x5090DC43, 0x6DF0F5F3, 0x2A508F23, 0x1730A693, 0xA5107A83, 0x98705333, 0xDFD029E3, 0xE2B00053,
  1297. 0xC1C12F04, 0xFCA106B4, 0xBB017C64, 0x866155D4, 0x344189C4, 0x0921A074, 0x4E81DAA4, 0x73E1F314,
  1298. 0xF1B164C5, 0xCCD14D75, 0x8B7137A5, 0xB6111E15, 0x0431C205, 0x3951EBB5, 0x7EF19165, 0x4391B8D5,
  1299. 0xA121B886, 0x9C419136, 0xDBE1EBE6, 0xE681C256, 0x54A11E46, 0x69C137F6, 0x2E614D26, 0x13016496,
  1300. 0x9151F347, 0xAC31DAF7, 0xEB91A027, 0xD6F18997, 0x64D15587, 0x59B17C37, 0x1E1106E7, 0x23712F57,
  1301. 0x58F35849, 0x659371F9, 0x22330B29, 0x1F532299, 0xAD73FE89, 0x9013D739, 0xD7B3ADE9, 0xEAD38459,
  1302. 0x68831388, 0x55E33A38, 0x124340E8, 0x2F236958, 0x9D03B548, 0xA0639CF8, 0xE7C3E628, 0xDAA3CF98,
  1303. 0x3813CFCB, 0x0573E67B, 0x42D39CAB, 0x7FB3B51B, 0xCD93690B, 0xF0F340BB, 0xB7533A6B, 0x8A3313DB,
  1304. 0x0863840A, 0x3503ADBA, 0x72A3D76A, 0x4FC3FEDA, 0xFDE322CA, 0xC0830B7A, 0x872371AA, 0xBA43581A,
  1305. 0x9932774D, 0xA4525EFD, 0xE3F2242D, 0xDE920D9D, 0x6CB2D18D, 0x51D2F83D, 0x167282ED, 0x2B12AB5D,
  1306. 0xA9423C8C, 0x9422153C, 0xD3826FEC, 0xEEE2465C, 0x5CC29A4C, 0x61A2B3FC, 0x2602C92C, 0x1B62E09C,
  1307. 0xF9D2E0CF, 0xC4B2C97F, 0x8312B3AF, 0xBE729A1F, 0x0C52460F, 0x31326FBF, 0x7692156F, 0x4BF23CDF,
  1308. 0xC9A2AB0E, 0xF4C282BE, 0xB362F86E, 0x8E02D1DE, 0x3C220DCE, 0x0142247E, 0x46E25EAE, 0x7B82771E,
  1309. 0xB1E6B092, 0x8C869922, 0xCB26E3F2, 0xF646CA42, 0x44661652, 0x79063FE2, 0x3EA64532, 0x03C66C82,
  1310. 0x8196FB53, 0xBCF6D2E3, 0xFB56A833, 0xC6368183, 0x74165D93, 0x49767423, 0x0ED60EF3, 0x33B62743,
  1311. 0xD1062710, 0xEC660EA0, 0xABC67470, 0x96A65DC0, 0x248681D0, 0x19E6A860, 0x5E46D2B0, 0x6326FB00,
  1312. 0xE1766CD1, 0xDC164561, 0x9BB63FB1, 0xA6D61601, 0x14F6CA11, 0x2996E3A1, 0x6E369971, 0x5356B0C1,
  1313. 0x70279F96, 0x4D47B626, 0x0AE7CCF6, 0x3787E546, 0x85A73956, 0xB8C710E6, 0xFF676A36, 0xC2074386,
  1314. 0x4057D457, 0x7D37FDE7, 0x3A978737, 0x07F7AE87, 0xB5D77297, 0x88B75B27, 0xCF1721F7, 0xF2770847,
  1315. 0x10C70814, 0x2DA721A4, 0x6A075B74, 0x576772C4, 0xE547AED4, 0xD8278764, 0x9F87FDB4, 0xA2E7D404,
  1316. 0x20B743D5, 0x1DD76A65, 0x5A7710B5, 0x67173905, 0xD537E515, 0xE857CCA5, 0xAFF7B675, 0x92979FC5,
  1317. 0xE915E8DB, 0xD475C16B, 0x93D5BBBB, 0xAEB5920B, 0x1C954E1B, 0x21F567AB, 0x66551D7B, 0x5B3534CB,
  1318. 0xD965A31A, 0xE4058AAA, 0xA3A5F07A, 0x9EC5D9CA, 0x2CE505DA, 0x11852C6A, 0x562556BA, 0x6B457F0A,
  1319. 0x89F57F59, 0xB49556E9, 0xF3352C39, 0xCE550589, 0x7C75D999, 0x4115F029, 0x06B58AF9, 0x3BD5A349,
  1320. 0xB9853498, 0x84E51D28, 0xC34567F8, 0xFE254E48, 0x4C059258, 0x7165BBE8, 0x36C5C138, 0x0BA5E888,
  1321. 0x28D4C7DF, 0x15B4EE6F, 0x521494BF, 0x6F74BD0F, 0xDD54611F, 0xE03448AF, 0xA794327F, 0x9AF41BCF,
  1322. 0x18A48C1E, 0x25C4A5AE, 0x6264DF7E, 0x5F04F6CE, 0xED242ADE, 0xD044036E, 0x97E479BE, 0xAA84500E,
  1323. 0x4834505D, 0x755479ED, 0x32F4033D, 0x0F942A8D, 0xBDB4F69D, 0x80D4DF2D, 0xC774A5FD, 0xFA148C4D,
  1324. 0x78441B9C, 0x4524322C, 0x028448FC, 0x3FE4614C, 0x8DC4BD5C, 0xB0A494EC, 0xF704EE3C, 0xCA64C78C)
  1325. CrcTableOffset72 = (0x00000000, 0xCB5CD3A5, 0x4DC8A10B, 0x869472AE, 0x9B914216, 0x50CD91B3, 0xD659E31D, 0x1D0530B8,
  1326. 0xEC53826D, 0x270F51C8, 0xA19B2366, 0x6AC7F0C3, 0x77C2C07B, 0xBC9E13DE, 0x3A0A6170, 0xF156B2D5,
  1327. 0x03D6029B, 0xC88AD13E, 0x4E1EA390, 0x85427035, 0x9847408D, 0x531B9328, 0xD58FE186, 0x1ED33223,
  1328. 0xEF8580F6, 0x24D95353, 0xA24D21FD, 0x6911F258, 0x7414C2E0, 0xBF481145, 0x39DC63EB, 0xF280B04E,
  1329. 0x07AC0536, 0xCCF0D693, 0x4A64A43D, 0x81387798, 0x9C3D4720, 0x57619485, 0xD1F5E62B, 0x1AA9358E,
  1330. 0xEBFF875B, 0x20A354FE, 0xA6372650, 0x6D6BF5F5, 0x706EC54D, 0xBB3216E8, 0x3DA66446, 0xF6FAB7E3,
  1331. 0x047A07AD, 0xCF26D408, 0x49B2A6A6, 0x82EE7503, 0x9FEB45BB, 0x54B7961E, 0xD223E4B0, 0x197F3715,
  1332. 0xE82985C0, 0x23755665, 0xA5E124CB, 0x6EBDF76E, 0x73B8C7D6, 0xB8E41473, 0x3E7066DD, 0xF52CB578,
  1333. 0x0F580A6C, 0xC404D9C9, 0x4290AB67, 0x89CC78C2, 0x94C9487A, 0x5F959BDF, 0xD901E971, 0x125D3AD4,
  1334. 0xE30B8801, 0x28575BA4, 0xAEC3290A, 0x659FFAAF, 0x789ACA17, 0xB3C619B2, 0x35526B1C, 0xFE0EB8B9,
  1335. 0x0C8E08F7, 0xC7D2DB52, 0x4146A9FC, 0x8A1A7A59, 0x971F4AE1, 0x5C439944, 0xDAD7EBEA, 0x118B384F,
  1336. 0xE0DD8A9A, 0x2B81593F, 0xAD152B91, 0x6649F834, 0x7B4CC88C, 0xB0101B29, 0x36846987, 0xFDD8BA22,
  1337. 0x08F40F5A, 0xC3A8DCFF, 0x453CAE51, 0x8E607DF4, 0x93654D4C, 0x58399EE9, 0xDEADEC47, 0x15F13FE2,
  1338. 0xE4A78D37, 0x2FFB5E92, 0xA96F2C3C, 0x6233FF99, 0x7F36CF21, 0xB46A1C84, 0x32FE6E2A, 0xF9A2BD8F,
  1339. 0x0B220DC1, 0xC07EDE64, 0x46EAACCA, 0x8DB67F6F, 0x90B34FD7, 0x5BEF9C72, 0xDD7BEEDC, 0x16273D79,
  1340. 0xE7718FAC, 0x2C2D5C09, 0xAAB92EA7, 0x61E5FD02, 0x7CE0CDBA, 0xB7BC1E1F, 0x31286CB1, 0xFA74BF14,
  1341. 0x1EB014D8, 0xD5ECC77D, 0x5378B5D3, 0x98246676, 0x852156CE, 0x4E7D856B, 0xC8E9F7C5, 0x03B52460,
  1342. 0xF2E396B5, 0x39BF4510, 0xBF2B37BE, 0x7477E41B, 0x6972D4A3, 0xA22E0706, 0x24BA75A8, 0xEFE6A60D,
  1343. 0x1D661643, 0xD63AC5E6, 0x50AEB748, 0x9BF264ED, 0x86F75455, 0x4DAB87F0, 0xCB3FF55E, 0x006326FB,
  1344. 0xF135942E, 0x3A69478B, 0xBCFD3525, 0x77A1E680, 0x6AA4D638, 0xA1F8059D, 0x276C7733, 0xEC30A496,
  1345. 0x191C11EE, 0xD240C24B, 0x54D4B0E5, 0x9F886340, 0x828D53F8, 0x49D1805D, 0xCF45F2F3, 0x04192156,
  1346. 0xF54F9383, 0x3E134026, 0xB8873288, 0x73DBE12D, 0x6EDED195, 0xA5820230, 0x2316709E, 0xE84AA33B,
  1347. 0x1ACA1375, 0xD196C0D0, 0x5702B27E, 0x9C5E61DB, 0x815B5163, 0x4A0782C6, 0xCC93F068, 0x07CF23CD,
  1348. 0xF6999118, 0x3DC542BD, 0xBB513013, 0x700DE3B6, 0x6D08D30E, 0xA65400AB, 0x20C07205, 0xEB9CA1A0,
  1349. 0x11E81EB4, 0xDAB4CD11, 0x5C20BFBF, 0x977C6C1A, 0x8A795CA2, 0x41258F07, 0xC7B1FDA9, 0x0CED2E0C,
  1350. 0xFDBB9CD9, 0x36E74F7C, 0xB0733DD2, 0x7B2FEE77, 0x662ADECF, 0xAD760D6A, 0x2BE27FC4, 0xE0BEAC61,
  1351. 0x123E1C2F, 0xD962CF8A, 0x5FF6BD24, 0x94AA6E81, 0x89AF5E39, 0x42F38D9C, 0xC467FF32, 0x0F3B2C97,
  1352. 0xFE6D9E42, 0x35314DE7, 0xB3A53F49, 0x78F9ECEC, 0x65FCDC54, 0xAEA00FF1, 0x28347D5F, 0xE368AEFA,
  1353. 0x16441B82, 0xDD18C827, 0x5B8CBA89, 0x90D0692C, 0x8DD55994, 0x46898A31, 0xC01DF89F, 0x0B412B3A,
  1354. 0xFA1799EF, 0x314B4A4A, 0xB7DF38E4, 0x7C83EB41, 0x6186DBF9, 0xAADA085C, 0x2C4E7AF2, 0xE712A957,
  1355. 0x15921919, 0xDECECABC, 0x585AB812, 0x93066BB7, 0x8E035B0F, 0x455F88AA, 0xC3CBFA04, 0x089729A1,
  1356. 0xF9C19B74, 0x329D48D1, 0xB4093A7F, 0x7F55E9DA, 0x6250D962, 0xA90C0AC7, 0x2F987869, 0xE4C4ABCC)
  1357. CrcTableOffset80 = (0x00000000, 0xA6770BB4, 0x979F1129, 0x31E81A9D, 0xF44F2413, 0x52382FA7, 0x63D0353A, 0xC5A73E8E,
  1358. 0x33EF4E67, 0x959845D3, 0xA4705F4E, 0x020754FA, 0xC7A06A74, 0x61D761C0, 0x503F7B5D, 0xF64870E9,
  1359. 0x67DE9CCE, 0xC1A9977A, 0xF0418DE7, 0x56368653, 0x9391B8DD, 0x35E6B369, 0x040EA9F4, 0xA279A240,
  1360. 0x5431D2A9, 0xF246D91D, 0xC3AEC380, 0x65D9C834, 0xA07EF6BA, 0x0609FD0E, 0x37E1E793, 0x9196EC27,
  1361. 0xCFBD399C, 0x69CA3228, 0x582228B5, 0xFE552301, 0x3BF21D8F, 0x9D85163B, 0xAC6D0CA6, 0x0A1A0712,
  1362. 0xFC5277FB, 0x5A257C4F, 0x6BCD66D2, 0xCDBA6D66, 0x081D53E8, 0xAE6A585C, 0x9F8242C1, 0x39F54975,
  1363. 0xA863A552, 0x0E14AEE6, 0x3FFCB47B, 0x998BBFCF, 0x5C2C8141, 0xFA5B8AF5, 0xCBB39068, 0x6DC49BDC,
  1364. 0x9B8CEB35, 0x3DFBE081, 0x0C13FA1C, 0xAA64F1A8, 0x6FC3CF26, 0xC9B4C492, 0xF85CDE0F, 0x5E2BD5BB,
  1365. 0x440B7579, 0xE27C7ECD, 0xD3946450, 0x75E36FE4, 0xB044516A, 0x16335ADE, 0x27DB4043, 0x81AC4BF7,
  1366. 0x77E43B1E, 0xD19330AA, 0xE07B2A37, 0x460C2183, 0x83AB1F0D, 0x25DC14B9, 0x14340E24, 0xB2430590,
  1367. 0x23D5E9B7, 0x85A2E203, 0xB44AF89E, 0x123DF32A, 0xD79ACDA4, 0x71EDC610, 0x4005DC8D, 0xE672D739,
  1368. 0x103AA7D0, 0xB64DAC64, 0x87A5B6F9, 0x21D2BD4D, 0xE47583C3, 0x42028877, 0x73EA92EA, 0xD59D995E,
  1369. 0x8BB64CE5, 0x2DC14751, 0x1C295DCC, 0xBA5E5678, 0x7FF968F6, 0xD98E6342, 0xE86679DF, 0x4E11726B,
  1370. 0xB8590282, 0x1E2E0936, 0x2FC613AB, 0x89B1181F, 0x4C162691, 0xEA612D25, 0xDB8937B8, 0x7DFE3C0C,
  1371. 0xEC68D02B, 0x4A1FDB9F, 0x7BF7C102, 0xDD80CAB6, 0x1827F438, 0xBE50FF8C, 0x8FB8E511, 0x29CFEEA5,
  1372. 0xDF879E4C, 0x79F095F8, 0x48188F65, 0xEE6F84D1, 0x2BC8BA5F, 0x8DBFB1EB, 0xBC57AB76, 0x1A20A0C2,
  1373. 0x8816EAF2, 0x2E61E146, 0x1F89FBDB, 0xB9FEF06F, 0x7C59CEE1, 0xDA2EC555, 0xEBC6DFC8, 0x4DB1D47C,
  1374. 0xBBF9A495, 0x1D8EAF21, 0x2C66B5BC, 0x8A11BE08, 0x4FB68086, 0xE9C18B32, 0xD82991AF, 0x7E5E9A1B,
  1375. 0xEFC8763C, 0x49BF7D88, 0x78576715, 0xDE206CA1, 0x1B87522F, 0xBDF0599B, 0x8C184306, 0x2A6F48B2,
  1376. 0xDC27385B, 0x7A5033EF, 0x4BB82972, 0xEDCF22C6, 0x28681C48, 0x8E1F17FC, 0xBFF70D61, 0x198006D5,
  1377. 0x47ABD36E, 0xE1DCD8DA, 0xD034C247, 0x7643C9F3, 0xB3E4F77D, 0x1593FCC9, 0x247BE654, 0x820CEDE0,
  1378. 0x74449D09, 0xD23396BD, 0xE3DB8C20, 0x45AC8794, 0x800BB91A, 0x267CB2AE, 0x1794A833, 0xB1E3A387,
  1379. 0x20754FA0, 0x86024414, 0xB7EA5E89, 0x119D553D, 0xD43A6BB3, 0x724D6007, 0x43A57A9A, 0xE5D2712E,
  1380. 0x139A01C7, 0xB5ED0A73, 0x840510EE, 0x22721B5A, 0xE7D525D4, 0x41A22E60, 0x704A34FD, 0xD63D3F49,
  1381. 0xCC1D9F8B, 0x6A6A943F, 0x5B828EA2, 0xFDF58516, 0x3852BB98, 0x9E25B02C, 0xAFCDAAB1, 0x09BAA105,
  1382. 0xFFF2D1EC, 0x5985DA58, 0x686DC0C5, 0xCE1ACB71, 0x0BBDF5FF, 0xADCAFE4B, 0x9C22E4D6, 0x3A55EF62,
  1383. 0xABC30345, 0x0DB408F1, 0x3C5C126C, 0x9A2B19D8, 0x5F8C2756, 0xF9FB2CE2, 0xC813367F, 0x6E643DCB,
  1384. 0x982C4D22, 0x3E5B4696, 0x0FB35C0B, 0xA9C457BF, 0x6C636931, 0xCA146285, 0xFBFC7818, 0x5D8B73AC,
  1385. 0x03A0A617, 0xA5D7ADA3, 0x943FB73E, 0x3248BC8A, 0xF7EF8204, 0x519889B0, 0x6070932D, 0xC6079899,
  1386. 0x304FE870, 0x9638E3C4, 0xA7D0F959, 0x01A7F2ED, 0xC400CC63, 0x6277C7D7, 0x539FDD4A, 0xF5E8D6FE,
  1387. 0x647E3AD9, 0xC209316D, 0xF3E12BF0, 0x55962044, 0x90311ECA, 0x3646157E, 0x07AE0FE3, 0xA1D90457,
  1388. 0x579174BE, 0xF1E67F0A, 0xC00E6597, 0x66796E23, 0xA3DE50AD, 0x05A95B19, 0x34414184, 0x92364A30)
  1389. CrcTableOffset88 = (0x00000000, 0xCCAA009E, 0x4225077D, 0x8E8F07E3, 0x844A0EFA, 0x48E00E64, 0xC66F0987, 0x0AC50919,
  1390. 0xD3E51BB5, 0x1F4F1B2B, 0x91C01CC8, 0x5D6A1C56, 0x57AF154F, 0x9B0515D1, 0x158A1232, 0xD92012AC,
  1391. 0x7CBB312B, 0xB01131B5, 0x3E9E3656, 0xF23436C8, 0xF8F13FD1, 0x345B3F4F, 0xBAD438AC, 0x767E3832,
  1392. 0xAF5E2A9E, 0x63F42A00, 0xED7B2DE3, 0x21D12D7D, 0x2B142464, 0xE7BE24FA, 0x69312319, 0xA59B2387,
  1393. 0xF9766256, 0x35DC62C8, 0xBB53652B, 0x77F965B5, 0x7D3C6CAC, 0xB1966C32, 0x3F196BD1, 0xF3B36B4F,
  1394. 0x2A9379E3, 0xE639797D, 0x68B67E9E, 0xA41C7E00, 0xAED97719, 0x62737787, 0xECFC7064, 0x205670FA,
  1395. 0x85CD537D, 0x496753E3, 0xC7E85400, 0x0B42549E, 0x01875D87, 0xCD2D5D19, 0x43A25AFA, 0x8F085A64,
  1396. 0x562848C8, 0x9A824856, 0x140D4FB5, 0xD8A74F2B, 0xD2624632, 0x1EC846AC, 0x9047414F, 0x5CED41D1,
  1397. 0x299DC2ED, 0xE537C273, 0x6BB8C590, 0xA712C50E, 0xADD7CC17, 0x617DCC89, 0xEFF2CB6A, 0x2358CBF4,
  1398. 0xFA78D958, 0x36D2D9C6, 0xB85DDE25, 0x74F7DEBB, 0x7E32D7A2, 0xB298D73C, 0x3C17D0DF, 0xF0BDD041,
  1399. 0x5526F3C6, 0x998CF358, 0x1703F4BB, 0xDBA9F425, 0xD16CFD3C, 0x1DC6FDA2, 0x9349FA41, 0x5FE3FADF,
  1400. 0x86C3E873, 0x4A69E8ED, 0xC4E6EF0E, 0x084CEF90, 0x0289E689, 0xCE23E617, 0x40ACE1F4, 0x8C06E16A,
  1401. 0xD0EBA0BB, 0x1C41A025, 0x92CEA7C6, 0x5E64A758, 0x54A1AE41, 0x980BAEDF, 0x1684A93C, 0xDA2EA9A2,
  1402. 0x030EBB0E, 0xCFA4BB90, 0x412BBC73, 0x8D81BCED, 0x8744B5F4, 0x4BEEB56A, 0xC561B289, 0x09CBB217,
  1403. 0xAC509190, 0x60FA910E, 0xEE7596ED, 0x22DF9673, 0x281A9F6A, 0xE4B09FF4, 0x6A3F9817, 0xA6959889,
  1404. 0x7FB58A25, 0xB31F8ABB, 0x3D908D58, 0xF13A8DC6, 0xFBFF84DF, 0x37558441, 0xB9DA83A2, 0x7570833C,
  1405. 0x533B85DA, 0x9F918544, 0x111E82A7, 0xDDB48239, 0xD7718B20, 0x1BDB8BBE, 0x95548C5D, 0x59FE8CC3,
  1406. 0x80DE9E6F, 0x4C749EF1, 0xC2FB9912, 0x0E51998C, 0x04949095, 0xC83E900B, 0x46B197E8, 0x8A1B9776,
  1407. 0x2F80B4F1, 0xE32AB46F, 0x6DA5B38C, 0xA10FB312, 0xABCABA0B, 0x6760BA95, 0xE9EFBD76, 0x2545BDE8,
  1408. 0xFC65AF44, 0x30CFAFDA, 0xBE40A839, 0x72EAA8A7, 0x782FA1BE, 0xB485A120, 0x3A0AA6C3, 0xF6A0A65D,
  1409. 0xAA4DE78C, 0x66E7E712, 0xE868E0F1, 0x24C2E06F, 0x2E07E976, 0xE2ADE9E8, 0x6C22EE0B, 0xA088EE95,
  1410. 0x79A8FC39, 0xB502FCA7, 0x3B8DFB44, 0xF727FBDA, 0xFDE2F2C3, 0x3148F25D, 0xBFC7F5BE, 0x736DF520,
  1411. 0xD6F6D6A7, 0x1A5CD639, 0x94D3D1DA, 0x5879D144, 0x52BCD85D, 0x9E16D8C3, 0x1099DF20, 0xDC33DFBE,
  1412. 0x0513CD12, 0xC9B9CD8C, 0x4736CA6F, 0x8B9CCAF1, 0x8159C3E8, 0x4DF3C376, 0xC37CC495, 0x0FD6C40B,
  1413. 0x7AA64737, 0xB60C47A9, 0x3883404A, 0xF42940D4, 0xFEEC49CD, 0x32464953, 0xBCC94EB0, 0x70634E2E,
  1414. 0xA9435C82, 0x65E95C1C, 0xEB665BFF, 0x27CC5B61, 0x2D095278, 0xE1A352E6, 0x6F2C5505, 0xA386559B,
  1415. 0x061D761C, 0xCAB77682, 0x44387161, 0x889271FF, 0x825778E6, 0x4EFD7878, 0xC0727F9B, 0x0CD87F05,
  1416. 0xD5F86DA9, 0x19526D37, 0x97DD6AD4, 0x5B776A4A, 0x51B26353, 0x9D1863CD, 0x1397642E, 0xDF3D64B0,
  1417. 0x83D02561, 0x4F7A25FF, 0xC1F5221C, 0x0D5F2282, 0x079A2B9B, 0xCB302B05, 0x45BF2CE6, 0x89152C78,
  1418. 0x50353ED4, 0x9C9F3E4A, 0x121039A9, 0xDEBA3937, 0xD47F302E, 0x18D530B0, 0x965A3753, 0x5AF037CD,
  1419. 0xFF6B144A, 0x33C114D4, 0xBD4E1337, 0x71E413A9, 0x7B211AB0, 0xB78B1A2E, 0x39041DCD, 0xF5AE1D53,
  1420. 0x2C8E0FFF, 0xE0240F61, 0x6EAB0882, 0xA201081C, 0xA8C40105, 0x646E019B, 0xEAE10678, 0x264B06E6)
  1421. @staticmethod
  1422. def ComputeCRC(pv):
  1423. """ from [MS-PST]. dwCRC is zero. pv is bytes to CRC. cbLength is length of pv """
  1424. dwCRC = 0
  1425. cbLength = len(pv)
  1426. if cbLength < 4:
  1427. cbRunningLength = 0
  1428. else:
  1429. cbRunningLength = (cbLength/8)*8
  1430. cbEndUnalignedBytes = cbLength - cbRunningLength
  1431. index = 0
  1432. for i in range(1, (cbRunningLength/8) + 1):
  1433. dwCRC ^= struct.unpack('I',pv[index:index+4])[0]
  1434. dwCRC = CRC.CrcTableOffset88[dwCRC & 0x000000FF] ^ CRC.CrcTableOffset80[(dwCRC >> 8) & 0x000000FF] ^ CRC.CrcTableOffset72[(dwCRC >> 16) & 0x000000FF] ^ CRC.CrcTableOffset64[(dwCRC >> 24) & 0x000000FF]
  1435. index += 4
  1436. dw2nd32 = struct.unpack('I',pv[index:index+4])[0]
  1437. dwCRC = dwCRC ^ CRC.CrcTableOffset56[dw2nd32 & 0x000000FF] ^ CRC.CrcTableOffset48[(dw2nd32 >> 8) & 0x000000FF] ^ CRC.CrcTableOffset40[(dw2nd32 >> 16) & 0x000000FF] ^ CRC.CrcTableOffset32[(dw2nd32 >> 24) & 0x000000FF]
  1438. index += 4
  1439. for i in range(1, cbEndUnalignedBytes + 1):
  1440. dwCRC = CRC.CrcTableOffset32[(dwCRC ^ struct.unpack('B',pv[index:index+1])[0]) & 0x000000FF] ^ (dwCRC >> 8)
  1441. index += 1
  1442. return dwCRC
  1443. class FieldSize:
  1444. BYTE = 1
  1445. WORD = 2
  1446. DWORD = 4
  1447. ANSIDWORD = 8
  1448. class Header:
  1449. def __init__(self, fd):
  1450. # common ansi/unicode fields
  1451. fd.seek(0)
  1452. self.dwMagic = fd.read(FieldSize.DWORD)
  1453. self.dwCRCPartial = fd.read(FieldSize.DWORD) # ignore
  1454. self.wMagicClient = fd.read(FieldSize.WORD)
  1455. try:
  1456. self.wVer, self.wVerClient, self.bPlatformCreate, self.bPlatformAccess = struct.unpack('HHBB',fd.read(FieldSize.WORD+FieldSize.WORD+FieldSize.BYTE+FieldSize.BYTE))
  1457. except struct.error:
  1458. self.validPST = False
  1459. return
  1460. self.dwReserved1 = fd.read(FieldSize.DWORD) # ignore
  1461. self.dwReserved2 = fd.read(FieldSize.DWORD) # ignore
  1462. self.validPST = (self.dwMagic == '!BDN' and self.wMagicClient == 'SM')
  1463. if not self.validPST:
  1464. return
  1465. self.is_ansi = (self.wVer in (14, 15))
  1466. self.is_unicode = (self.wVer == 23)
  1467. if not (self.is_ansi or self.is_unicode):
  1468. self.validPST = False
  1469. return
  1470. if self.is_ansi:
  1471. self.bidNextB = BID(fd.read(FieldSize.DWORD))
  1472. self.bidNextP = BID(fd.read(FieldSize.DWORD))
  1473. self.dwUnique = fd.read(FieldSize.DWORD)
  1474. self.rgnid = struct.unpack('IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII', fd.read(128))
  1475. self.root = Root(fd.read(40), True)
  1476. self.rgbFM = fd.read(128) # unused
  1477. self.rgbFP = fd.read(128) # unused
  1478. self.bSentinel, self.bCryptMethod = struct.unpack('BB', fd.read(FieldSize.BYTE+FieldSize.BYTE))
  1479. self.rgbReserved = fd.read(FieldSize.WORD) # unused
  1480. self.ullReserved = fd.read(8) # unused
  1481. self.dwReserved = fd.read(FieldSize.DWORD) # unused
  1482. self.rgbReserved2 = fd.read(3) # unused
  1483. self.bReserved = fd.read(1) # unused
  1484. self.rgbReserved3 = fd.read(32) # unused
  1485. if self.is_unicode:
  1486. self.bidUnused = fd.read(FieldSize.ANSIDWORD) # unused
  1487. self.bidNextP = BID(fd.read(FieldSize.ANSIDWORD))
  1488. #self.bidNextB = fd.read(FieldSize.ANSIDWORD) # the spec is wrong, example in appendix is correct
  1489. self.dwUnique = fd.read(FieldSize.DWORD) # ignore
  1490. self.rgnid = struct.unpack('IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII', fd.read(128))
  1491. self.qwUnused = fd.read(FieldSize.ANSIDWORD) # unused
  1492. self.root = Root(fd.read(72), False)
  1493. self.dwAlign = fd.read(FieldSize.DWORD) # unused
  1494. self.rgbFM = fd.read(128) # unused
  1495. self.rgbFP = fd.read(128) # unused
  1496. self.bSentinel, self.bCryptMethod = struct.unpack('BB', fd.read(FieldSize.BYTE+FieldSize.BYTE))
  1497. self.rgbReserved = fd.read(FieldSize.WORD) # unused
  1498. self.bidNextB = BID(fd.read(FieldSize.ANSIDWORD)) # repeated from above in spec
  1499. self.dwCRCFull = fd.read(FieldSize.DWORD) # ignored
  1500. self.rgbReserved2 = fd.read(3) # unused
  1501. self.bReserved = fd.read(1) # unused
  1502. self.rgbReserved3 = fd.read(32) # unused
  1503. class Root:
  1504. def __init__(self, bytes, is_ansi):
  1505. if is_ansi: # 40
  1506. self.ibFileEof, self.ibAMapLast, self.cbAMapFree, self.cbPMapFree, self.BREFNBT, self.BREFBBT, self.fAMapValid = \
  1507. struct.unpack('IIII8s8sB', bytes[4:-3])
  1508. else: #unicode #72
  1509. self.ibFileEof, self.ibAMapLast, self.cbAMapFree, self.cbPMapFree, self.BREFNBT, self.BREFBBT, self.fAMapValid = \
  1510. struct.unpack('QQQQ16s16sB', bytes[4:-3])
  1511. self.BREFNBT = BREF(self.BREFNBT)
  1512. self.BREFBBT = BREF(self.BREFBBT)
  1513. class PST:
  1514. def __init__(self, pst_file):
  1515. self.fd = open(pst_file,'rb')
  1516. self.header = Header(self.fd)
  1517. if not self.header.validPST:
  1518. raise PSTException('PST file is not a valid PST')
  1519. if self.header.bCryptMethod not in (0,1): # unencoded or NDB_CRYPT_PERMUTE
  1520. raise PSTException('Unsupported encoding/crypt method %s' % self.header.bCryptMethod)
  1521. self.nbd = NBD(self.fd, self.header)
  1522. self.ltp = LTP(self.nbd)
  1523. self.messaging = Messaging(self.ltp)
  1524. def close(self):
  1525. self.fd.close()
  1526. def folder_generator(self):
  1527. root_folder = self.messaging.get_folder(self.messaging.root_entryid, '')
  1528. subfolder_stack = root_folder.subfolders
  1529. yield root_folder
  1530. #Deleted Items should also be in root folder, so don't need to get this one
  1531. #bin_folder = self.messaging.get_folder(self.messaging.deleted_items_entryid, '')
  1532. #subfolder_stack.extend(bin_folder.subfolders)
  1533. #yield bin_folder
  1534. while subfolder_stack:
  1535. subfolder = subfolder_stack.pop()
  1536. try:
  1537. folder = Folder(subfolder.nid, self.ltp, subfolder.parent_path)
  1538. subfolder_stack.extend(folder.subfolders)
  1539. yield folder
  1540. except PSTException as e:
  1541. log_error(e)
  1542. def message_generator(self, folder):
  1543. try:
  1544. for submessage in folder.submessages:
  1545. try:
  1546. message = Message(submessage.nid, self.ltp)
  1547. yield message
  1548. except PSTException as e:
  1549. log_error(e)
  1550. except GeneratorExit:
  1551. pass
  1552. finally:
  1553. pass
  1554. def export_all_attachments(self, path='', progressbar = None, total_attachments = 0, overwrite=True):
  1555. """dumps all attachments in the PST to a path"""
  1556. attachments_completed = 0
  1557. for folder in self.folder_generator():
  1558. for message in self.message_generator(folder):
  1559. if message.HasAttachments:
  1560. for subattachment in message.subattachments:
  1561. attachment = message.get_attachment(subattachment)
  1562. if len(attachment.data) !=0:
  1563. filepath = os.path.join(path, attachment.Filename)
  1564. if overwrite:
  1565. if os.path.exists(filepath):
  1566. os.remove(filepath)
  1567. else:
  1568. filepath = get_unused_filename(filepath)
  1569. write_file(filepath, attachment.data, 'wb')
  1570. attachments_completed += 1
  1571. if progressbar:
  1572. progressbar.update(attachments_completed * 100.0 / total_attachments)
  1573. def export_all_messages(self, path='', progressbar = None, total_messages = 0):
  1574. messages_completed = 0
  1575. for folder in self.folder_generator():
  1576. filepath = get_unused_filename(os.path.join(path, get_safe_filename(folder.path.replace('\\','_'))+'.txt'))
  1577. msg_txt = u''
  1578. for message in self.message_generator(folder):
  1579. msg_txt += u'Subject: %s\nFrom: %s (%s)\n' % (message.Subject, message.SenderName, message.SenderSmtpAddress)
  1580. msg_txt += u'To: %s\n' % ('; '.join([u'%s (%s)' % (subrecipient.DisplayName, subrecipient.EmailAddress) for subrecipient in message.subrecipients]))
  1581. msg_txt += u'Sent: %s\nDelivered: %s\n' % (message.ClientSubmitTime, message.MessageDeliveryTime)
  1582. msg_txt += u'MessageClass: %s\n' % (message.MessageClass)
  1583. if message.HasAttachments:
  1584. msg_txt += u'Attachments: %s\n' % (u', '.join([subattachment.__repr__() for subattachment in message.subattachments]))
  1585. msg_txt += u'\n%s\n\n\n' % message.Body
  1586. if msg_txt:
  1587. write_file(filepath, unicode2ascii(msg_txt), 'w')
  1588. messages_completed += 1
  1589. if progressbar:
  1590. progressbar.update(messages_completed * 100.0 / total_messages)
  1591. def get_total_message_count(self):
  1592. total_message_count = 0
  1593. for folder in self.folder_generator():
  1594. total_message_count += len(folder.submessages)
  1595. return total_message_count
  1596. def get_total_attachment_count(self):
  1597. total_attachment_count = 0
  1598. for folder in self.folder_generator():
  1599. for message in self.message_generator(folder):
  1600. if message.HasAttachments:
  1601. total_attachment_count += len(message.subattachments)
  1602. return total_attachment_count
  1603. def get_pst_status(self):
  1604. status = u'Valid PST: %s, Unicode: %s, CryptMethod: %s, Name: %s, Password: %s' % (self.header.validPST, self.header.is_unicode, self.header.bCryptMethod, self.messaging.message_store.getval(PropIdEnum.PidTagDisplayName), self.messaging.PasswordCRC32Hash)
  1605. return status
  1606. @staticmethod
  1607. def bruteforce(charset, maxlength):
  1608. return (''.join(candidate) for candidate in itertools.chain.from_iterable(itertools.product(charset, repeat=i) for i in range(1, maxlength + 1)))
  1609. @staticmethod
  1610. def crack_password(crc, dictionary_file=''):
  1611. """either does a dictionary attack against the PST password CRC hash, or does a brute force of up to 4 chars"""
  1612. if dictionary_file:
  1613. dic_entries = read_file(dictionary_file).split('\n')
  1614. for password_check in dic_entries:
  1615. crc_check = CRC.ComputeCRC(password_check.strip())
  1616. if crc == crc_check:
  1617. return password_check
  1618. else: # brute force
  1619. charset = string.ascii_lowercase + string.digits
  1620. for password_length in range(1,5):
  1621. for password_check in PST.bruteforce(charset, password_length):
  1622. crc_check = CRC.ComputeCRC(password_check)
  1623. if crc == crc_check:
  1624. return password_check
  1625. return ''
  1626. ###################################################################################################################################
  1627. # _ _ _ _ _ _ _ _____ _ _
  1628. # | | | | |_(_) (_) |_ _ _ | ___| _ _ __ ___| |_(_) ___ _ __ ___
  1629. # | | | | __| | | | __| | | | | |_ | | | | '_ \ / __| __| |/ _ \| '_ \/ __|
  1630. # | |_| | |_| | | | |_| |_| | | _|| |_| | | | | (__| |_| | (_) | | | \__ \
  1631. # \___/ \__|_|_|_|\__|\__, | |_| \__,_|_| |_|\___|\__|_|\___/|_| |_|___/
  1632. # |___/
  1633. ###################################################################################################################################
  1634. def hex(i):
  1635. return '0x%x' % i
  1636. def bin_bytes(bytes):
  1637. return ''.join([bin(ord(c)).lstrip('0b').zfill(8) for c in bytes])
  1638. def bit_shift_bytes_left(bytes, offset):
  1639. new_bytes = ''
  1640. for c in bytes:
  1641. new_bytes += chr( ord(c) << offset)
  1642. return new_bytes
  1643. def size_friendly(size):
  1644. if size < 1024:
  1645. return '%sB' % (size)
  1646. elif size < 1024*1024:
  1647. return '%sKB' % (size/1024)
  1648. elif size < 1024*1024*1024:
  1649. return '%sMB' % (size/(1024*1024))
  1650. else:
  1651. return '%sGB' % (size/(1024*1024*1024))
  1652. def unicode2ascii(unicode_str):
  1653. return unicodedata.normalize('NFKD', unicode_str).encode('ascii','ignore')
  1654. def write_file(fn, s, write_mode='w'):
  1655. f = open(fn,write_mode)
  1656. f.write(s)
  1657. f.close()
  1658. def read_file(fn, open_mode="r"):
  1659. f = open(fn, open_mode)
  1660. s = f.read()
  1661. f.close()
  1662. return s
  1663. def get_unused_filename(filepath):
  1664. """ adds numbered suffix to filepath if filename already exists"""
  1665. if os.path.exists(filepath):
  1666. suffix = 1
  1667. while os.path.exists('%s-%s%s' % (os.path.splitext(filepath)[0], suffix, os.path.splitext(filepath)[1])):
  1668. suffix += 1
  1669. filepath = '%s-%s%s' % (os.path.splitext(filepath)[0], suffix, os.path.splitext(filepath)[1])
  1670. return filepath
  1671. def get_safe_filename(filename):
  1672. return re.sub(r'[/\\;,><&\*:%=\+@!#\^\(\)|\?]', '', filename)
  1673. def set_log(log, stats):
  1674. global LOG, STATS
  1675. LOG, STATS = log, stats
  1676. def log_error(e):
  1677. global error_log_list
  1678. error_log_list.append(e.message)
  1679. LOG.error(e.message)
  1680. LOG.error(traceback.format_exc(e))
  1681. STATS['errors'] += 1
  1682. # sys.stderr.write(e.message+'\n')
  1683. ###############################################################################################################################
  1684. #
  1685. # _____ _ _____ _ _
  1686. # |_ _|__ ___| |_ | ___| _ _ __ ___| |_(_) ___ _ __ ___
  1687. # | |/ _ \/ __| __| | |_ | | | | '_ \ / __| __| |/ _ \| '_ \/ __|
  1688. # | | __/\__ \ |_ | _|| |_| | | | | (__| |_| | (_) | | | \__ \
  1689. # |_|\___||___/\__| |_| \__,_|_| |_|\___|\__|_|\___/|_| |_|___/
  1690. #
  1691. ###############################################################################################################################
  1692. def test_status_pst(pst_filepath):
  1693. pst = PST(pst_filepath)
  1694. print unicode2ascii(pst.get_pst_status())
  1695. print 'Total Messages: %s' % pst.get_total_message_count()
  1696. print 'Total Attachments: %s' % pst.get_total_attachment_count()
  1697. pst.close()
  1698. def get_simple_progressbar(title):
  1699. pbar_widgets = [title, progressbar.Percentage(), ' ', progressbar.Bar(marker = progressbar.RotatingMarker()), ' ', progressbar.ETA()]
  1700. pbar = progressbar.ProgressBar(widgets = pbar_widgets).start()
  1701. return pbar
  1702. def test_dump_pst(pst_filepath, output_path):
  1703. """ dump out all PST email attachments and emails (into text files) to output_path folder"""
  1704. pst = PST(pst_filepath)
  1705. print pst.get_pst_status()
  1706. pbar = get_simple_progressbar('Messages: ')
  1707. total_messages = pst.get_total_message_count()
  1708. pst.export_all_messages(output_path, pbar, total_messages)
  1709. pbar.finish()
  1710. pbar = get_simple_progressbar('Attachments: ')
  1711. total_attachments = pst.get_total_attachment_count()
  1712. pst.export_all_attachments(output_path, pbar, total_attachments)
  1713. pbar.finish()
  1714. pst.close()
  1715. def test_folder_psts(psts_folder):
  1716. global error_log_list
  1717. s = ''
  1718. for pst_filepath in [os.path.join(psts_folder, filename) for filename in os.listdir(psts_folder) if os.path.isfile(os.path.join(psts_folder, filename)) and os.path.splitext(filename.lower())[1] == '.pst']:
  1719. try:
  1720. s += 'Opening %s\n' % pst_filepath
  1721. error_log_list = []
  1722. pst = PST(pst_filepath)
  1723. status = unicode2ascii(pst.get_pst_status())
  1724. print status
  1725. password = ''
  1726. if pst.messaging.PasswordCRC32Hash:
  1727. password = pst.crack_password(pst.messaging.PasswordCRC32Hash)
  1728. if password:
  1729. password = ' (%s)' % password
  1730. s += status + password + '\n'
  1731. pst.close()
  1732. s += '\n'.join(error_log_list)
  1733. s += '\n\n\n'
  1734. except Exception as e:
  1735. s += 'ERROR: %s\n' % e
  1736. write_file(os.path.join(psts_folder, 'psts_test.txt'), s)
  1737. ###################################################################################################################################
  1738. # __ __ _
  1739. # | \/ | __ _(_)_ __
  1740. # | |\/| |/ _` | | '_ \
  1741. # | | | | (_| | | | | |
  1742. # |_| |_|\__,_|_|_| |_|
  1743. #
  1744. ###################################################################################################################################
  1745. if __name__=="__main__":
  1746. input_pst_file = ''
  1747. output_folder = 'dump'
  1748. arg_parser = argparse.ArgumentParser(prog='pst', description='PST: parses PST files. Can dump emails and attachments.', formatter_class=argparse.ArgumentDefaultsHelpFormatter)
  1749. arg_parser.add_argument('-i', dest='input_pst_file', default=input_pst_file, help='input PST file to dump')
  1750. arg_parser.add_argument('-o', dest='output_folder', default=output_folder, help='output folder')
  1751. arg_parser.add_argument('-t', dest='debug', help=argparse.SUPPRESS, action='store_true', default=False) # hidden argument
  1752. args = arg_parser.parse_args()
  1753. if not args.debug:
  1754. input_pst_file = args.input_pst_file
  1755. output_folder = args.output_folder
  1756. if not os.path.exists(input_pst_file):
  1757. print 'Input PST file does not exist'
  1758. sys.exit(1)
  1759. if not os.path.exists(output_folder):
  1760. print 'Output folder does not exist'
  1761. sys.exit(1)
  1762. test_dump_pst(input_pst_file,output_folder)
  1763. else: # debug
  1764. pass
  1765. #test_folder = 'D:\\'
  1766. #test_status_pst(test_folder+'sample.pst')
  1767. #test_dump_pst(test_folder+'sample.pst', test_folder+'dump')
  1768. #test_folder_psts(test_folder)