Package modules :: Package processing :: Module static :: Class WindowsScriptFile
[hide private]
[frames] | no frames]

Class WindowsScriptFile

source code

object --+
         |
        WindowsScriptFile

Deobfuscates and interprets Windows Script Files.

Instance Methods [hide private]
 
__init__(self, filepath)
x.__init__(...) initializes x; see help(type(x)) for signature
source code
 
decode(self, source, start="#@~^", end="^#~@") source code
 
run(self) source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  encoding = [1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1,...
  lookup = [[0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x0...
  unescape = {"#": "\r", "&": "\n", "!": "<", "*": ">", "$": "@",}
  script_re = "<\\s*script\\s*.*>.*?<\\s*/\\s*script\\s*>"
Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

__init__(self, filepath)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__
(inherited documentation)

Class Variable Details [hide private]

encoding

Value:
[1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, \
0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0\
, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2,]

lookup

Value:
[[0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x7b, 0x0a, 0x\
0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, \
0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x32, 0x30, 0x21\
, 0x29, 0x5b, 0x38, 0x33, 0x3d, 0x58, 0x3a, 0x35, 0x65, 0x39, 0x5c, 0x\
56, 0x73, 0x66, 0x4e, 0x45, 0x6b, 0x62, 0x59, 0x78, 0x5e, 0x7d, 0x4a, \
0x6d, 0x71, 0x00, 0x60, 0x00, 0x53, 0x00, 0x42, 0x27, 0x48, 0x72, 0x75\
, 0x31, 0x37, 0x4d, 0x52, 0x22, 0x54, 0x6a, 0x47, 0x64, 0x2d, 0x20, 0x\
7f, 0x2e, 0x4c, 0x5d, 0x7e, 0x6c, 0x6f, 0x79, 0x74, 0x43, 0x26, 0x76, \
...