[
{
"path": ".gitignore",
"content": "# Ignore E01, dd, and raw image files in the root directory\n/*.E01\n/*.dd\n/*.raw\n\n# Ignore IDE-specific folders and files\n.idea/\n\n# Ignore config files\n/config.ini\n\n# Ignore the carved_files directory\n/carved_files/\n\n# Ignore virtual environment folders\n/venv/\n\n# Ignore Python cache\n__pycache__\n\n# Ignore build artifacts\n/build/\n/dist/\n*.spec\nbuild_exe.py "
},
{
"path": "LICENSE",
"content": "MIT License\n\nCopyright (c) 2024 Radoslav Gadzhovski\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n"
},
{
"path": "README.md",
"content": "Toolkit for Retrieval and Analysis of Cyber Evidence (TRACE)
\n\n\n TRACE is a digital forensic tool I developed as my final year project. It provides an intuitive interface for analyzing disk images and includes a range of functionalities to assist forensic examiners in extracting and viewing the contents of various image file formats.\n
\n\n\n ![\"TRACE](\"Icons/logo_prev_ui.png\")
\n
\n\n## Navigation ๐งญ \n\n- [Preview ๐](#preview-)\n- [Features ๐](#features-)\n- [Screenshots ๐ธ](#screenshots-)\n- [Supported Image Formats ๐พ](#supported-image-formats-)\n- [Tested File Systems ๐๏ธ](#tested-file-systems-%EF%B8%8F)\n- [Cross-Platform Compatibility ๐ฅ๏ธ๐ป](#cross-platform-compatibility-%EF%B8%8F)\n- [Getting Started ๐](#getting-started-)\n - [Prerequisites ๐ ๏ธ](#prerequisites-)\n - [Configuration โ๏ธ](#configuration-%EF%B8%8F)\n - [Running the Tool โถ๏ธ](#running-the-tool-%EF%B8%8F)\n- [Built With ๐งฑ](#built-with-)\n- [Work in Progress ๐ ๏ธ](#work-in-progress-)\n- [Testing & Feedback ๐งช](#testing--feedback-)\n- [Contributing ๐ค](#contributing-)\n- [Socials ๐จโ๐ป](#socials-)\n\n\n## Preview ๐ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n\n
\n ![\"TRACE](\"Icons/readme/Preview_Dark.png\")
\n
\n
\n\n
\n\n## Features ๐ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\nโ
***Image Mounting**: Mount forensic disk images. (Windows only) \\\nโ
**Tree Viewer**: Navigate through the disk image structure, including partitions and files.\\\nโ
**Detailed File Analysis**: View file content in different formats, such as HEX, text, and application-specific views.\\\nโ
**EXIF Data Extraction**: Extract and display EXIF metadata from photos.\\\nโ
**Registry Viewer**: View and examine Windows registry files.\\\nโ
**Basic File Carving**: Recover deleted files from disk images.\\\nโ
**Virus Total API Integration**: Check files for malware using the Virus Total API.\\\nโ
**E01 Image Verification**: Verify the integrity of E01 disk images.\\\nโ
**Convert E01 to Raw**: Convert E01 disk images to raw format.\\\nโ
**Message Decoding**: Decode messages from base64, binary, and other encodings.\n\n
\n\n## Screenshots ๐ธ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n### Registry Browser ๐๏ธ\n\n\n
\n ![\"Registry](\"Icons/readme/registry.png\")
\n
\n
\n\n\n### File Carving ๐ช\n\n\n
\n ![\"File](\"Icons/readme/carving.png\")
\n
\n
\n\n### File Search ๐\n\n
\n ![\"Image](\"Icons/readme/file_search.png\")
\n
\n
\n\n### Image Verification โ
\n\n\n
\n ![\"Image](\"Icons/readme/trace_verify.png\")
\n
\n
\n\n
\n\n\n\n## Supported Image Formats ๐พ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n| Image Format | Extensions | Split | Unsplit |\n|------------------------------------------------|------------------------|---------|----------|\n| EnCaseยฎ Image File (EVF / Expert Witness Format)| `*.E01` `*.Ex01` | โ๏ธ | โ๏ธ |\n| SMART/Expert Witness Image File | `*.s01` | โ๏ธ | โ๏ธ |\n| Single Image Unix / Linux DD / Raw | `*.dd`, `*.img`, `*.raw` | โ๏ธ | โ๏ธ |\n| ISO Image File | `*.iso` | | โ๏ธ |\n| AccessData Image File | `*.ad1` | โ๏ธ | โ๏ธ |\n\n
\n\n## Tested File Systems ๐๏ธ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n| File System | Tested |\n|-------------|--------|\n| NTFS | โ๏ธ |\n| FAT32 | |\n| exFAT | |\n| HFS+ | |\n| APFS | |\n| EXT2,3,4 | |\n\n
\n\n\n## Cross-Platform Compatibility ๐๐ง๐ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n| Operating System | Screenshot |\n|------------------------------------|----------------------------------------------------------------------------------------------------------------------|\n| **macOS Sonoma** ๐ | ![\"macOS](\"Icons/readme/macos.png\")
|\n| **Kali Linux 2024** ๐ง | ![\"Kali](\"Icons/readme/kali.png\")
|\n| **\\*WSL2 - Ubuntu 22.04.3 LTS** ๐ง | ![\"Kali](\"Icons/readme/wsl3.png\")
|\n| **Windows 10** ๐ | ![\"Windows](\"Icons/readme/windows10.png\")
|\n\n\n\n## Getting Started ๐ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n### Installation โ๏ธ\n\n\n#### **Windows:**\n1. Install Python 3.11
\n (โ ๏ธ Python 3.12 is not supported)
\n [๐ Download from python.org](https://www.python.org/downloads/release/python-3110/)\n\n2. Install Microsoft C++ Build Tools
\n [๐ Download Build Tools](https://visualstudio.microsoft.com/visual-cpp-build-tools/)\n\n During setup, ensure the following workloads are selected:\n\n - โ
Desktop development with C++\n - โ
C++ build tools\n\n3. Create and activate a virtual environment\n\n ```bash\n python -m venv venv\n venv\\Scripts\\activate\n ```\n\n4. Install dependencies\n\n ```bash\n pip install -r requirements.txt\n ```\n\n5. Run the tool\n\n ```bash\n python main.py\n ```\n\n\n\n#### **macOS (Apple Silicon) & Linux (Ubuntu/WSL):**\n1. Make the installation script executable:\n\n ```bash\n chmod +x install_macos_linux_WSL.sh\n ```\n\n2. Run the installation script:\n\n ```bash\n ./install_macos_linux_WSL.sh\n ```\n\n The script will:\n - โ
Create and activate a Python 3.11 virtual environment\n - โ
Detect your system (macOS or Linux)\n - โ
Install required system dependencies (via Homebrew or apt)\n - โ
Install the appropriate Python packages:\n * `requirements_macos_silicon.txt` โ macOS\n * `requirements.txt` โ Linux\n - โ
After installation, it will automatically activate your virtual environment and notify you that itโs ready to use.\n\n3. Run the Tool\n\n Once the virtual environment is activated (youโll see `(venv)` in your terminal prompt):\n\n ```bash\n python main.py\n ```\n\n\n### Configuration โ๏ธ \n\n**API Keys Configuration**:The tool integrates with VirusTotal and Veriphone APIs, and you will need to provide your own API keys to use these features. To update the API keys, go to the Options menu and select API Keys submenu.\n\n\n\n\n## Built With ๐งฑ [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n- [pytsk3](https://pypi.org/project/pytsk3/) - Python bindings for the SleuthKit\n- [libewf-python](https://github.com/libyal/libewf) - Library to access the Expert Witness Compression Format (EWF)\n- [PySide6](https://pypi.org/project/PySide6/) - Used for the GUI components.\n- [Arsenal Image Mounter](https://arsenalrecon.com/products/image-mounter/) - For mounting forensic disk images.\n\n\n## Work in Progress ๐งโ๐ง [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n- **Cross-Platform Image Mounting**: Image mounting currently works only on Windows using the Arsenal Image Mounter executable. The aim is to make this feature work across all platforms without relying on external executables.\n- **File Carving**: The verification of carved files needs improvement, as it may carve data fragments that are not actual files.\n- **Color Issues in Dark Mode**: The software currently has some colour display issues on Linux and macOS systems when using dark mode. Certain UI elements may not be clearly visible or may appear incorrectly.\n\n\n## Contributing ๐ค [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\nI welcome contributions from the community to help improve TRACE! If you're interested in contributing, hereโs how you can get involved:\n\n\n1. **Report Issues**: If you find any bugs or have suggestions for improvements, please [open an issue](https://github.com/Gadzhovski/TRACE-Forensic-Toolkit/issues) on GitHub. Provide as much detail as possible to help address the issue effectively.\n2. **Submit a Pull Request**: If you have a fix or feature youโd like to contribute, please [fork the repository](https://github.com/Gadzhovski/TRACE-Forensic-Toolkit/fork), make your changes, and submit a pull request. Ensure your code adheres to the coding standards and includes tests where applicable.\n\n\n## Socials ๐จโ๐ป [โฌ๏ธ](#toolkit-for-retrieval-and-analysis-of-cyber-evidence-trace)\n\n\n[](https://linkedin.com/in/radoslav-gadzhovski)\n\n
\n\n\n\n\n\n"
},
{
"path": "install_macos_linux_WSL.sh",
"content": "#!/bin/bash\nset -e\n\n# === COLORS ===\nGREEN=\"\\033[1;32m\"\nLIGHT_GREEN=\"\\033[38;5;82m\"\nCYAN=\"\\033[1;36m\"\nMAGENTA=\"\\033[1;35m\"\nYELLOW=\"\\033[1;33m\"\nR=\"\\033[0m\"\n\nclear\n\n# === Animated intro ===\nanimate_intro() {\n local frames=(\"โฃพ\" \"โฃท\" \"โฃฏ\" \"โฃ\" \"โกฟ\" \"โขฟ\" \"โฃป\" \"โฃฝ\")\n echo -ne \"${MAGENTA}Launching TRACE Installer \"\n for i in {1..20}; do\n printf \"\\b%s\" \"${frames[$((i % 8))]}\"\n sleep 0.08\n done\n echo -e \"${R}\\n\"\n}\n\n# === Pulsing TRACE logo (with aligned borders) ===\nprint_banner() {\n local colors=(\"\\033[38;5;48m\" \"\\033[38;5;118m\" \"\\033[38;5;83m\" \"\\033[38;5;77m\")\n for i in {0..3}; do\n clear\n echo -e \"${CYAN}โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ${R}\"\n echo -e \"${CYAN}โ โ${R}\"\n echo -e \"${CYAN}โ${R} ${colors[$i]}โโโโโโโโโโโโโโโโ โโโโโโ โโโโโโโโโโโโโโโ${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ${R} ${colors[$i]}โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ${R} ${colors[$i]}โโโ โโโโโโโโโโโโโโโโโโโ โโโโโโ${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ${R} ${colors[$i]}โโโ โโโโโโโโโโโโโโโโโโโ โโโโโโ${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ${R} ${colors[$i]}โโโ โโโ โโโโโโ โโโโโโโโโโโโโโโโโโโ${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ${R} ${colors[$i]}โโโ โโโ โโโโโโ โโโ โโโโโโโโโโโโโโโ${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ โ${R}\" \n echo -e \"${CYAN}โ${R} ${MAGENTA}TRACE Forensic Toolkit Installer${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โ${R} ${YELLOW}Compatible with macOS โข Linux โข WSL${R} ${CYAN}โ${R}\"\n echo -e \"${CYAN}โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ${R}\\n\"\n sleep 0.12\n done\n}\n\n# === Run intro and banner ===\nanimate_intro\nprint_banner\n\n# === Detect OS type ===\nOS_TYPE=$(uname)\nif [[ \"$OS_TYPE\" == \"Darwin\" ]]; then\n DETECTED_OS=\"macOS\"\nelif [[ \"$OS_TYPE\" == \"Linux\" ]]; then\n if grep -qi \"microsoft\" /proc/version; then\n DETECTED_OS=\"WSL\"\n else\n DETECTED_OS=\"Linux\"\n fi\nelse\n echo -e \"${RED}โ Unsupported OS: $OS_TYPE${R}\"\n echo \"This installer supports macOS, Linux, and WSL only.\"\n exit 1\nfi\n\necho -e \"${CYAN}Detected operating system:${R} ${YELLOW}$DETECTED_OS${R}\\n\"\n\n# === Confirm OS or override ===\nread -p \"Proceed with $DETECTED_OS installation? (y/n or type 'macos'/'linux'/'wsl' to override): \" USER_INPUT\nUSER_INPUT=$(echo \"$USER_INPUT\" | tr '[:upper:]' '[:lower:]')\n\nif [[ \"$USER_INPUT\" == \"n\" ]]; then\n echo -e \"${RED}Installation cancelled.${R}\"\n exit 0\nelif [[ \"$USER_INPUT\" == \"macos\" ]]; then\n USER_OS=\"macOS\"\nelif [[ \"$USER_INPUT\" == \"linux\" ]]; then\n USER_OS=\"Linux\"\nelif [[ \"$USER_INPUT\" == \"wsl\" ]]; then\n USER_OS=\"WSL\"\nelse\n USER_OS=\"$DETECTED_OS\"\nfi\n\necho -e \"\\n${MAGENTA}โก Proceeding with installation for:${R} ${YELLOW}$USER_OS${R}\"\necho \"------------------------------------------------------------\"\necho \"\"\n\n# ------------------------------------------------------------------------------\n# macOS INSTALLATION\n# ------------------------------------------------------------------------------\nif [[ \"$USER_OS\" == \"macOS\" ]]; then\n echo -e \"${CYAN}๐ Installing macOS system dependencies...${R}\"\n\n if ! command -v brew &> /dev/null; then\n echo -e \"${YELLOW}Homebrew not found.${R}\"\n read -p \"Would you like to install Homebrew now? (y/n): \" install_brew\n if [[ \"$install_brew\" == \"y\" || \"$install_brew\" == \"Y\" ]]; then\n /bin/bash -c \"$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)\"\n echo -e \"${GREEN}โ
Homebrew installed successfully.${R}\"\n else\n echo -e \"${RED}โ Homebrew is required. Exiting.${R}\"\n exit 1\n fi\n fi\n\n brew update\n brew install ffmpeg poppler libmagic\n\n echo -e \"\\n${CYAN}๐ฆ Creating Python virtual environment...${R}\"\n python3 -m venv venv\n\n echo -e \"\\n${CYAN}๐ฅ Installing Python packages...${R}\"\n source venv/bin/activate\n pip install --upgrade pip setuptools wheel\n pip install --no-cache-dir -r requirements_macos_silicon.txt\n deactivate\n\n echo -e \"\\n${GREEN}โ
Installation complete!${R}\"\n echo -e \"\\nTo use ${MAGENTA}TRACE${R}, activate the environment first:\"\n echo -e \" ${YELLOW}source venv/bin/activate${R}\"\n echo -e \"Then start the tool with:\"\n echo -e \" ${YELLOW}python main.py${R}\\n\"\n echo \"When finished, type 'deactivate'.\"\n exit 0\nfi\n\n# ------------------------------------------------------------------------------\n# LINUX INSTALLATION\n# ------------------------------------------------------------------------------\nif [[ \"$USER_OS\" == \"Linux\" ]]; then\n echo -e \"${CYAN}๐ง Installing Linux system dependencies...${R}\"\n sudo apt update\n sudo apt install -y python3 python3-venv python3-pip libxcb-cursor0 libva-dev libva-drm2 ewf-tools\n\n echo -e \"\\n${CYAN}๐ฆ Creating Python virtual environment...${R}\"\n python3 -m venv venv\n\n echo -e \"\\n${CYAN}๐ฅ Installing Python packages...${R}\"\n source venv/bin/activate\n pip install --upgrade pip setuptools wheel\n pip install --no-cache-dir -r requirements_macos_silicon.txt\n deactivate\n\n echo -e \"\\n${GREEN}โ
Installation complete!${R}\"\n echo -e \"\\nTo use ${MAGENTA}TRACE${R}, activate the environment first:\"\n echo -e \" ${YELLOW}source venv/bin/activate${R}\"\n echo -e \"Then start the tool with:\"\n echo -e \" ${YELLOW}python main.py${R}\\n\"\n echo \"When finished, type 'deactivate'.\"\n exit 0\nfi\n\n# ------------------------------------------------------------------------------\n# WSL INSTALLATION\n# ------------------------------------------------------------------------------\nif [[ \"$USER_OS\" == \"WSL\" ]]; then\n echo -e \"${CYAN}๐ง Installing WSL (Ubuntu) dependencies...${R}\"\n sudo apt update\n sudo apt install -y git python3-pip python3-venv libgl1-mesa-glx libxkbcommon0 libxkbcommon-x11-0 libegl1 \\\n libxcb-xinerama0 qt5dxcb-plugin qt5-wayland \\\n libqt5dbus5 libqt5widgets5 libqt5network5 libqt5gui5 libqt5core5a libqt5svg5 qtwayland5 \\\n nvidia-cuda-toolkit pulseaudio\n\n echo -e \"\\n${CYAN}๐ฆ Creating Python virtual environment...${R}\"\n python3 -m venv venv\n\n echo -e \"\\n${CYAN}๐ฅ Installing Python packages...${R}\"\n source venv/bin/activate\n pip install --upgrade pip setuptools wheel\n pip install --no-cache-dir -r requirements_macos_silicon.txt\n deactivate\n\n echo -e \"\\n${GREEN}โ
Installation complete!${R}\"\n echo -e \"\\nTo use ${MAGENTA}TRACE${R}, activate the environment first:\"\n echo -e \" ${YELLOW}source venv/bin/activate${R}\"\n echo -e \"Then start the tool with:\"\n echo -e \" ${YELLOW}python main.py${R}\\n\"\n echo \"When finished, type 'deactivate'.\"\n exit 0\nfi"
},
{
"path": "main.py",
"content": "\nfrom PySide6.QtWidgets import QApplication\nfrom modules.mainwindow import MainWindow\n\n\nif __name__ == '__main__':\n app = QApplication([])\n\n window = MainWindow()\n window.show()\n app.exec()\n\n\n"
},
{
"path": "modules/about.py",
"content": "from PySide6.QtCore import Qt\nfrom PySide6.QtGui import QPixmap, QFont, QPalette, QColor\nfrom PySide6.QtWidgets import QDialog, QVBoxLayout, QLabel, QPushButton, QHBoxLayout\n\n\nclass AboutDialog(QDialog):\n def __init__(self, parent=None):\n super(AboutDialog, self).__init__(parent)\n\n self.setWindowTitle(\"About Trace\")\n layout = QVBoxLayout(self)\n\n # Load and scale the logo\n logo = QLabel(self)\n pixmap = QPixmap('Icons/logo.png') # Ensure 'Icons/logo.png' is the correct path\n # Adjust the logo size here\n scaled_pixmap = pixmap.scaled(400, 400, Qt.KeepAspectRatio, Qt.SmoothTransformation)\n logo.setPixmap(scaled_pixmap)\n logo.setAlignment(Qt.AlignCenter) # Center the logo\n layout.addWidget(logo)\n\n # Software information\n title_label = QLabel(\"Trace - Toolkit for Retrieval and Analysis of Cyber Evidence\")\n title_label.setAlignment(Qt.AlignCenter)\n title_label.setFont(QFont('Arial', 20, QFont.Bold)) # Set the font, size, and weight\n title_label.setPalette(QPalette(QColor('blue'))) # Set the text color\n layout.addWidget(title_label)\n\n version_label = QLabel(\"Version 1.0.0\")\n version_label.setAlignment(Qt.AlignCenter)\n layout.addWidget(version_label)\n\n author_label = QLabel(\"Author: Radoslav Gadzhovski\")\n author_label.setAlignment(Qt.AlignCenter)\n layout.addWidget(author_label)\n\n # Add a button to close the dialog\n button_layout = QHBoxLayout()\n button_layout.addStretch() # Add stretchable space on the left\n close_button = QPushButton(\"Close\")\n close_button.setFixedSize(100, 30) # Set the size of the button\n close_button.clicked.connect(self.close)\n button_layout.addWidget(close_button) # Add the button to the layout\n button_layout.addStretch() # Add stretchable space on the right\n\n # Add the QHBoxLayout to the main QVBoxLayout\n layout.addLayout(button_layout)\n\n self.setLayout(layout)\n # Set the size of the dialog\n self.setFixedSize(500, 700)\n"
},
{
"path": "modules/converter.py",
"content": "import os\nimport subprocess\n\nimport pyewf\nfrom PySide6.QtCore import Signal\nfrom PySide6.QtGui import QIcon\nfrom PySide6.QtWidgets import (\n QLabel, QFileDialog, QComboBox,\n QLineEdit, QHBoxLayout, QFormLayout\n)\nfrom PySide6.QtWidgets import (\n QMainWindow, QPushButton, QWidget, QRadioButton,\n QGroupBox, QVBoxLayout, QMessageBox, QStackedWidget\n)\n\n\n# Helper Function to List Drives (For Physical and Logical Drive Selection)\ndef list_drives():\n if os.name == \"nt\":\n # Using PowerShell command to list drives on Windows\n command = [\"powershell\", \"-NoProfile\", \"Get-WmiObject Win32_DiskDrive | Select-Object Model, DeviceID\"]\n elif os.name == \"darwin\":\n # Using diskutil to list drives on macOS\n command = [\"diskutil\", \"list\"]\n else:\n raise Exception(\"Unsupported OS\")\n\n result = subprocess.run(command, capture_output=True, text=True)\n if result.returncode != 0:\n raise Exception(\"Failed to list drives\")\n return result.stdout\n\n\nclass Main(QMainWindow):\n def __init__(self):\n super().__init__()\n self.setWindowTitle(\"Convert E01 to DD/RAW\")\n self.setGeometry(100, 100, 400, 400)\n # set logo\n self.setWindowIcon(QIcon('Icons/logo.png'))\n\n self.stacked_widget = QStackedWidget()\n self.setCentralWidget(self.stacked_widget)\n\n self.init_ui()\n\n def init_ui(self):\n self.select_source_dialog = SelectSourceDialog(self)\n self.stacked_widget.addWidget(self.select_source_dialog)\n\n self.conversion_widget = ConversionWidget(self)\n self.stacked_widget.addWidget(self.conversion_widget)\n\n self.drive_selection_widget = DriveSelectionWidget(self)\n self.stacked_widget.addWidget(self.drive_selection_widget)\n\n self.select_source_dialog.sourceSelected.connect(self.show_specific_widget)\n self.drive_selection_widget.backRequested.connect(self.show_select_source)\n\n def show_specific_widget(self, widget_name):\n if widget_name == \"conversion\":\n self.stacked_widget.setCurrentWidget(self.conversion_widget)\n elif widget_name == \"folder_contents\":\n # Handle folder contents selection\n pass # Placeholder for actual implementation\n elif widget_name == \"physical_drive\":\n self.stacked_widget.setCurrentWidget(self.drive_selection_widget)\n\n elif widget_name == \"logical_drive\":\n # Handle logical drive selection\n pass # Placeholder for actual implementation\n\n def show_select_source(self):\n self.stacked_widget.setCurrentWidget(self.select_source_dialog)\n\n\n# New Widget for Drive Selection\nclass DriveSelectionWidget(QWidget):\n backRequested = Signal()\n driveSelected = Signal(str)\n\n def __init__(self, parent=None):\n super().__init__(parent)\n self.init_ui()\n\n def init_ui(self):\n layout = QVBoxLayout(self)\n self.drive_combo = QComboBox()\n try:\n for drive in list_drives().split('\\n'):\n if drive.strip():\n self.drive_combo.addItem(drive.strip())\n except Exception as e:\n QMessageBox.critical(self, \"Error\", f\"Failed to list drives: {e}\")\n\n layout.addWidget(QLabel(\"Select Drive:\"))\n layout.addWidget(self.drive_combo)\n\n select_button = QPushButton(\"Select\")\n select_button.clicked.connect(self.on_select_clicked)\n layout.addWidget(select_button)\n\n back_button = QPushButton(\"Back\")\n back_button.clicked.connect(lambda: self.backRequested.emit())\n layout.addWidget(back_button)\n\n def on_select_clicked(self):\n selected_drive = self.drive_combo.currentText()\n self.driveSelected.emit(selected_drive.split()[-1]) # Assuming the device ID is the last part\n\n\nclass SelectSourceDialog(QWidget):\n sourceSelected = Signal(str)\n\n def __init__(self, parent=None):\n super().__init__(parent)\n self.layout = QVBoxLayout(self)\n\n self.group_box = QGroupBox(\"Select the Source Type\")\n self.layout.addWidget(self.group_box)\n\n self.radio_buttons_layout = QVBoxLayout()\n # Existing options\n self.image_file_radio = QRadioButton(\"Image File\")\n # New source options\n self.physical_drive_radio = QRadioButton(\"Physical Drive (not implemented)\")\n self.logical_drive_radio = QRadioButton(\"Logical Drive (not implemented)\")\n self.contents_of_folder_radio = QRadioButton(\"Contents of a Folder (not implemented)\")\n\n # Add the radio buttons to the layout\n self.radio_buttons_layout.addWidget(self.image_file_radio)\n self.radio_buttons_layout.addWidget(self.physical_drive_radio)\n self.radio_buttons_layout.addWidget(self.logical_drive_radio)\n self.radio_buttons_layout.addWidget(self.contents_of_folder_radio)\n self.group_box.setLayout(self.radio_buttons_layout)\n\n self.next_button = QPushButton(\"Next\")\n self.next_button.clicked.connect(self.on_next_clicked)\n self.layout.addWidget(self.next_button)\n\n self.close_button = QPushButton(\"Close\")\n self.close_button.clicked.connect(lambda: self.window().close())\n self.layout.addWidget(self.close_button)\n\n def on_next_clicked(self):\n if self.image_file_radio.isChecked():\n self.sourceSelected.emit(\"conversion\")\n elif self.contents_of_folder_radio.isChecked():\n self.sourceSelected.emit(\"folder_contents\")\n elif self.physical_drive_radio.isChecked():\n self.sourceSelected.emit(\"physical_drive\")\n elif self.logical_drive_radio.isChecked():\n self.sourceSelected.emit(\"logical_drive\")\n\n\nclass ConversionWidget(QWidget):\n backRequested = Signal() # Signal to request going back to the source selection\n\n def __init__(self, parent=None):\n super().__init__(parent)\n self.setGeometry(100, 100, 400, 400)\n self.setWindowTitle(\"Convert E01 to DD/RAW\")\n self.setWindowIcon(QIcon('Icons/logo.png'))\n self.init_ui()\n\n def init_ui(self):\n layout = QVBoxLayout(self)\n\n form_layout = QFormLayout()\n self.input_line_edit = QLineEdit()\n browse_button = QPushButton(\"Browse...\")\n browse_button.clicked.connect(self.browse_file)\n\n self.format_combo_box = QComboBox()\n self.format_combo_box.addItems([\"DD\", \"RAW\"])\n\n self.output_line_edit = QLineEdit()\n output_dir_button = QPushButton(\"Select Output Directory...\")\n output_dir_button.clicked.connect(self.select_output_dir)\n\n form_layout.addRow(QLabel(\"Select E01 File:\"), self.input_line_edit)\n form_layout.addRow(browse_button)\n form_layout.addRow(QLabel(\"Select Output Format:\"), self.format_combo_box)\n form_layout.addRow(QLabel(\"Select Output Directory:\"), self.output_line_edit)\n form_layout.addRow(output_dir_button)\n\n layout.addLayout(form_layout)\n\n # Buttons layout\n buttons_layout = QHBoxLayout()\n back_button = QPushButton(\"Back\")\n back_button.clicked.connect(self.on_back_clicked)\n\n convert_button = QPushButton(\"Convert\")\n convert_button.clicked.connect(self.convert)\n\n buttons_layout.addWidget(back_button)\n buttons_layout.addWidget(convert_button)\n\n layout.addLayout(buttons_layout)\n\n def on_back_clicked(self):\n main_window = self.parent().parent()\n main_window.show_select_source()\n\n def browse_file(self):\n filename, _ = QFileDialog.getOpenFileName(self, \"Select E01 File\", \"\", \"E01 Files (*.e01)\")\n if filename:\n self.input_line_edit.setText(filename)\n\n def select_output_dir(self):\n directory = QFileDialog.getExistingDirectory(self, \"Select Output Directory\")\n if directory:\n self.output_line_edit.setText(directory)\n\n def convert(self):\n input_path = self.input_line_edit.text()\n output_format = self.format_combo_box.currentText().lower() # 'dd' or 'raw'\n output_dir = self.output_line_edit.text()\n\n if not input_path or not os.path.isfile(input_path):\n QMessageBox.warning(self, \"Error\", \"The specified E01 file does not exist.\")\n return\n\n if not output_dir or not os.path.isdir(output_dir):\n QMessageBox.warning(self, \"Error\", \"The specified output directory does not exist.\")\n return\n\n output_filename = f\"{os.path.splitext(os.path.basename(input_path))[0]}.{output_format}\"\n output_path = os.path.join(output_dir, output_filename)\n\n try:\n self.perform_conversion(input_path, output_path)\n QMessageBox.information(self, \"Success\", f\"File has been successfully converted to {output_path}\")\n except Exception as e:\n QMessageBox.critical(self, \"Conversion Failed\", f\"An error occurred: {str(e)}\")\n\n def perform_conversion(self, input_path, output_path):\n normalized_input_path = os.path.normpath(input_path)\n filenames = pyewf.glob(normalized_input_path)\n\n ewf_handle = pyewf.handle()\n ewf_handle.open(filenames)\n\n with open(output_path, 'wb') as output_file:\n buffer_size = ewf_handle.bytes_per_sector\n while True:\n data = ewf_handle.read(buffer_size)\n if not data:\n break\n output_file.write(data)\n ewf_handle.close()\n"
},
{
"path": "modules/exif_tab.py",
"content": "from io import BytesIO as io_BytesIO\n\nfrom PIL import Image\nfrom PIL.ExifTags import TAGS\nfrom PySide6.QtWidgets import QWidget, QVBoxLayout, QTextEdit\n\n\nclass ExifViewerManager:\n def __init__(self):\n self.exif_data = None\n\n @staticmethod\n def get_exif_data_from_content(file_content):\n \"\"\"Extract EXIF data from the given file content.\"\"\"\n try:\n # Open the image from the given content\n image = Image.open(io_BytesIO(file_content))\n\n # Return None if the image format doesn't support EXIF\n if image.format != \"JPEG\":\n return None\n\n # Return the extracted EXIF data\n return image._getexif()\n except Exception as e:\n print(f\"Error extracting EXIF data: {e}\")\n return None\n\n def load_exif_data(self, file_content):\n \"\"\"Load and process the EXIF data from the file content.\"\"\"\n exif_data = self.get_exif_data_from_content(file_content)\n structured_data = []\n\n # If EXIF data is found, process it\n if exif_data:\n for key in exif_data.keys():\n if key in TAGS and isinstance(exif_data[key], (str, bytes)):\n try:\n tag_name = TAGS[key]\n tag_value = exif_data[key]\n structured_data.append((tag_name, tag_value))\n except Exception as e:\n print(f\"Error processing key {key}: {e}\")\n return structured_data\n else:\n return None\n\n\nclass ExifViewer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n # Initialize the manager to handle EXIF data\n self.manager = ExifViewerManager()\n self.init_ui()\n\n def init_ui(self):\n \"\"\"Initialize the user interface components.\"\"\"\n # Set up a read-only text edit for displaying the EXIF data\n self.text_edit = QTextEdit(self)\n self.text_edit.setStyleSheet(\"border: 0px;\")\n self.text_edit.setReadOnly(True)\n self.text_edit.setContentsMargins(0, 0, 0, 0)\n\n # Create the layout and add the text edit to it\n layout = QVBoxLayout()\n layout.setContentsMargins(0, 0, 0, 0)\n layout.addWidget(self.text_edit)\n\n # Set the layout for the widget\n self.setLayout(layout)\n\n def display_exif_data(self, exif_data):\n \"\"\"Display the provided EXIF data in the text edit.\"\"\"\n if exif_data:\n # Format the EXIF data as an HTML table with CSS styling\n exif_table = f\"\"\"\n \n \n \"\"\"\n for key, value in exif_data:\n exif_table += f\"| {key} | {value} |
\"\n exif_table += \"
\"\n self.text_edit.setHtml(exif_table)\n else:\n # Clear the text edit if there's no EXIF data to display\n self.text_edit.clear()\n\n def clear_content(self):\n \"\"\"Clear the displayed content.\"\"\"\n self.text_edit.clear()\n\n def load_and_display_exif_data(self, file_content):\n \"\"\"Load the EXIF data from the file content and display it.\"\"\"\n exif_data = self.manager.load_exif_data(file_content)\n self.display_exif_data(exif_data)\n"
},
{
"path": "modules/file_carving.py",
"content": "import datetime\nimport io\nimport os\nimport struct\nimport time\nimport zipfile\nfrom concurrent.futures import ThreadPoolExecutor\n\nimport cv2\nfrom PIL import Image, UnidentifiedImageError\nfrom PIL.ExifTags import TAGS\nfrom PyPDF2 import PdfReader\nfrom PyPDF2.errors import PdfReadError\nfrom PySide6.QtCore import QSize, QUrl, QRectF\nfrom PySide6.QtCore import Qt\nfrom PySide6.QtCore import Signal, Slot\nfrom PySide6.QtGui import QIcon, QAction, QDesktopServices, QPixmap, QPainter, QImage\nfrom PySide6.QtSvg import QSvgRenderer\nfrom PySide6.QtWidgets import QListWidget, QListWidgetItem, QToolBar, QSizePolicy, QHBoxLayout, \\\n QCheckBox, QHeaderView\nfrom PySide6.QtWidgets import QMenu\nfrom PySide6.QtWidgets import QWidget, QVBoxLayout, QTableWidget, QTableWidgetItem, QPushButton, QLabel, QTabWidget\nfrom moviepy.editor import VideoFileClip\nfrom pdf2image import convert_from_path\n\n\nclass NumericTableWidgetItem(QTableWidgetItem):\n def __lt__(self, other):\n self_value = self.text().split()[0] # Extract numeric part of the text\n other_value = other.text().split()[0] # Extract numeric part of the text\n self_unit = self.text().split()[1] # Extract unit part of the text\n other_unit = other.text().split()[1] # Extract unit part of the text\n units = {'B': 0, 'KB': 1, 'MB': 2, 'GB': 3, 'TB': 4}\n\n # Convert to bytes for comparison\n self_bytes = float(self_value) * (1024 ** units[self_unit])\n other_bytes = float(other_value) * (1024 ** units[other_unit])\n\n return self_bytes < other_bytes\n\n\nclass FileCarvingWidget(QWidget):\n file_carved = Signal(str, str, str, str, str) # Unified signal for file carving\n\n def __init__(self, parent=None):\n super().__init__(parent)\n self.main_window = parent # Store reference to MainWindow before it gets reparented by tab widget\n self.image_handler = None\n self.executor = ThreadPoolExecutor(max_workers=4) # ThreadPoolExecutor for background tasks\n self.carved_files = []\n self.carved_file_names = set() # Track carved file names to avoid duplicates\n self.allocation_map = [] # Map of allocated disk regions to skip during carving\n self.init_ui()\n\n def init_ui(self):\n self.layout = QVBoxLayout(self)\n self.layout.setContentsMargins(0, 0, 0, 0)\n self.layout.setSpacing(0) # Set the spacing to zero\n\n self.toolbar = QToolBar()\n self.toolbar.setContentsMargins(0, 0, 0, 0)\n self.layout.addWidget(self.toolbar)\n\n self.icon_label = QLabel()\n self.icon_label.setPixmap(QPixmap('Icons/icons8-carving-64.png'))\n self.icon_label.setFixedSize(48, 48)\n self.toolbar.addWidget(self.icon_label)\n\n self.title_label = QLabel(\"File Carving\")\n self.title_label.setStyleSheet(\"\"\"\n QLabel {\n font-size: 20px; /* Slightly larger size for the title */\n color: #37c6d0; /* Hex color for the text */\n font-weight: bold; /* Make the text bold */\n margin-left: 8px; /* Space between icon and label */\n }\n \"\"\")\n self.toolbar.addWidget(self.title_label)\n\n self.spacer = QLabel()\n self.spacer.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Preferred)\n self.toolbar.addWidget(self.spacer)\n\n self.table_widget = self.create_table_widget()\n self.table_widget.resizeEvent = self.handle_resize_event\n\n self.list_widget = self.create_list_widget()\n\n self.fileTypeLayout = QHBoxLayout()\n self.fileTypes = {\"All\": QCheckBox(\"All\"), \"PDF\": QCheckBox(\"PDF\"), \"JPG\": QCheckBox(\"JPG\"),\n \"PNG\": QCheckBox(\"PNG\"), \"GIF\": QCheckBox(\"GIF\"), \"WAV\": QCheckBox(\"WAV\"),\n \"MOV\": QCheckBox(\"MOV\"), \"WMV\": QCheckBox(\"WMV\"), \"ZIP\": QCheckBox(\"ZIP\"),\n 'BMP': QCheckBox(\"BMP\")}\n\n for fileType, checkBox in self.fileTypes.items():\n self.fileTypeLayout.addWidget(checkBox)\n\n # Adding a widget to contain the file type checkboxes\n self.fileTypeWidget = QWidget()\n self.fileTypeWidget.setLayout(self.fileTypeLayout)\n self.toolbar.addWidget(self.fileTypeWidget)\n\n self.start_button = QPushButton(\"Start\")\n self.start_button.clicked.connect(self.start_carving)\n\n self.toolbar.addWidget(self.start_button)\n\n self.stop_button = QPushButton(\"Stop\")\n self.stop_button.clicked.connect(self.stop_carving)\n self.stop_button.setEnabled(False)\n\n self.toolbar.addWidget(self.stop_button)\n self.layout.addWidget(self.tab_widget)\n\n self.file_carved.connect(self.display_carved_file)\n\n def create_table_widget(self):\n table_widget = QTableWidget()\n table_widget.setColumnCount(6) # Id, Name, Size, Type, Modification Date, File Path\n table_widget.setSelectionBehavior(QTableWidget.SelectRows)\n table_widget.setEditTriggers(QTableWidget.NoEditTriggers)\n table_widget.setSortingEnabled(True)\n table_widget.verticalHeader().setVisible(False)\n table_widget.setObjectName(\"fileCarvingTable\") # For CSS styling\n\n # Set size policy to expand with window\n table_widget.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Expanding)\n\n # Use alternate row colors (matching Listing tab)\n table_widget.setAlternatingRowColors(True)\n table_widget.setIconSize(QSize(24, 24))\n\n # Enable horizontal scrolling for smaller windows (matching Listing tab)\n table_widget.setHorizontalScrollMode(QTableWidget.ScrollPerPixel)\n table_widget.setHorizontalScrollBarPolicy(Qt.ScrollBarAsNeeded)\n\n # Configure header - all columns use Interactive mode for horizontal scrolling\n header = table_widget.horizontalHeader()\n header.setSectionResizeMode(0, QHeaderView.Interactive) # Id - fixed, manually resizable\n header.setSectionResizeMode(1, QHeaderView.Interactive) # Name - fixed, manually resizable\n header.setSectionResizeMode(2, QHeaderView.Interactive) # Size - fixed, manually resizable\n header.setSectionResizeMode(3, QHeaderView.Interactive) # Type - fixed, manually resizable\n header.setSectionResizeMode(4, QHeaderView.Interactive) # Modification Date - fixed, manually resizable\n header.setSectionResizeMode(5, QHeaderView.Interactive) # File Path - fixed, manually resizable\n\n # Set column widths (matching Listing tab style)\n table_widget.setColumnWidth(0, 100) # Id - compact\n table_widget.setColumnWidth(1, 400) # Name - widest (matching Listing tab)\n table_widget.setColumnWidth(2, 100) # Size - compact (matching Listing tab)\n table_widget.setColumnWidth(3, 100) # Type - compact (matching Listing tab)\n table_widget.setColumnWidth(4, 160) # Modification Date - matching timestamp columns in Listing\n table_widget.setColumnWidth(5, 1100) # File Path - wide (matching Listing tab)\n\n # Set header alignment (matching Listing tab)\n header.setDefaultAlignment(Qt.AlignLeft | Qt.AlignVCenter)\n\n # Set the header labels\n table_widget.setHorizontalHeaderLabels(['Id', 'Name', 'Size', 'Type', 'Modification Date', 'File Path'])\n\n # Context menu and click handlers\n table_widget.setContextMenuPolicy(Qt.CustomContextMenu)\n table_widget.customContextMenuRequested.connect(self.open_context_menu)\n table_widget.cellClicked.connect(self.on_carved_file_clicked)\n\n self.tab_widget = QTabWidget()\n self.tab_widget.addTab(table_widget, \"File List\")\n return table_widget\n\n def create_list_widget(self):\n list_widget = QListWidget()\n list_widget.setViewMode(QListWidget.IconMode)\n list_widget.setIconSize(QSize(120, 120))\n list_widget.setResizeMode(QListWidget.Adjust)\n list_widget.setUniformItemSizes(True)\n list_widget.setSpacing(5)\n list_widget.setContextMenuPolicy(Qt.CustomContextMenu)\n list_widget.customContextMenuRequested.connect(self.open_context_menu)\n # Connect click event to open file in internal viewer\n list_widget.itemClicked.connect(self.on_carved_file_clicked)\n\n toolbar = QToolBar()\n\n # Define actions\n action_small_size = (QAction(\"Small Size\", self))\n action_small_size.setIcon(QIcon('Icons/icons8-small-icons-50.png'))\n\n action_medium_size = (QAction(\"Medium Size\", self))\n action_medium_size.setIcon(QIcon('Icons/icons8-medium-icons-50.png'))\n\n action_large_size = (QAction(\"Large Size\", self))\n action_large_size.setIcon(QIcon('Icons/icons8-large-icons-50.png'))\n\n # Set icons\n\n # Connect actions to new slot methods\n action_small_size.triggered.connect(self.set_small_size)\n action_medium_size.triggered.connect(self.set_medium_size)\n action_large_size.triggered.connect(self.set_large_size)\n\n # Add actions to the toolbar\n toolbar.addAction(action_small_size)\n toolbar.addAction(action_medium_size)\n toolbar.addAction(action_large_size)\n\n # Create a layout and add the toolbar and the list widget to it\n layout = QVBoxLayout()\n layout.setContentsMargins(0, 0, 0, 0)\n layout.setSpacing(0)\n layout.addWidget(toolbar)\n layout.addWidget(list_widget)\n\n # Create a new widget, set its layout and add it to the tab widget\n widget = QWidget()\n widget.setLayout(layout)\n self.tab_widget.addTab(widget, \"Thumbnails\")\n return list_widget\n\n @staticmethod\n def center_crop_to_square(pixmap, target_size):\n \"\"\"Crop pixmap to center square and scale to target size for uniform thumbnails.\"\"\"\n if pixmap.isNull():\n return pixmap\n\n width = pixmap.width()\n height = pixmap.height()\n\n if width == height:\n # Already square, just scale\n return pixmap.scaled(target_size, target_size, Qt.IgnoreAspectRatio, Qt.SmoothTransformation)\n\n # Determine the crop size (smaller dimension)\n crop_size = min(width, height)\n\n # Calculate crop position to center the crop\n x = (width - crop_size) // 2\n y = (height - crop_size) // 2\n\n # Crop to square\n cropped = pixmap.copy(x, y, crop_size, crop_size)\n\n # Scale to target size\n return cropped.scaled(target_size, target_size, Qt.IgnoreAspectRatio, Qt.SmoothTransformation)\n\n @staticmethod\n def render_svg_to_pixmap(svg_path, target_size):\n \"\"\"Render SVG file at target resolution for crisp icons.\"\"\"\n renderer = QSvgRenderer(svg_path)\n if not renderer.isValid():\n return QPixmap()\n\n # Create QImage at target size with transparency\n image = QImage(target_size, target_size, QImage.Format_ARGB32)\n image.fill(Qt.transparent)\n\n # Render SVG onto the image\n painter = QPainter(image)\n renderer.render(painter, QRectF(0, 0, target_size, target_size))\n painter.end()\n\n # Convert QImage to QPixmap\n return QPixmap.fromImage(image)\n\n def set_icon_size(self, size):\n self.list_widget.setIconSize(QSize(size, size))\n for index in range(self.list_widget.count()):\n item = self.list_widget.item(index)\n item.setSizeHint(QSize(size + 10, size + 25)) # Compact padding with space for text\n\n def set_small_size(self):\n self.set_icon_size(80)\n\n def set_medium_size(self):\n self.set_icon_size(120)\n\n def set_large_size(self):\n self.set_icon_size(180)\n\n def start_carving(self):\n self.start_button.setEnabled(False)\n self.stop_button.setEnabled(True)\n self.clear_ui()\n self.carved_files.clear()\n self.carved_file_names.clear()\n\n # Ensure the 'carved_files' and 'thumbnails' directories exist\n if not os.path.exists(\"carved_files\"):\n os.makedirs(\"carved_files\")\n thumbnail_folder = os.path.join(\"carved_files\", \"thumbnails\")\n if not os.path.exists(thumbnail_folder):\n os.makedirs(thumbnail_folder)\n\n # Build allocation map for all partitions to skip allocated files\n print(\"Building allocation map for allocated files...\")\n self.allocation_map = []\n\n try:\n partitions = self.image_handler.get_partitions()\n\n if partitions:\n # Process each partition\n for partition_info in partitions:\n # partition_info is (addr, desc, start, len)\n start_offset = partition_info[2] # start offset in sectors\n\n # Build allocation map for this partition\n partition_map = self.image_handler.build_allocation_map(start_offset)\n self.allocation_map.extend(partition_map)\n print(f\" Partition at offset {start_offset}: {len(partition_map)} allocated regions\")\n else:\n # No partitions, try offset 0 (single filesystem)\n if self.image_handler.has_filesystem(0):\n partition_map = self.image_handler.build_allocation_map(0)\n self.allocation_map.extend(partition_map)\n print(f\" Single filesystem: {len(partition_map)} allocated regions\")\n\n # Sort the combined allocation map\n self.allocation_map.sort(key=lambda x: x[0])\n print(f\"Total allocated regions to skip: {len(self.allocation_map)}\")\n\n except Exception as e:\n print(f\"Warning: Could not build allocation map: {e}\")\n print(\"Will carve from entire disk (may include duplicates)\")\n self.allocation_map = []\n\n selected_file_types = [fileType.lower() for fileType, checkbox in self.fileTypes.items() if\n checkbox.isChecked()]\n self.executor.submit(self.carve_files, selected_file_types)\n\n def stop_carving(self):\n self.executor.shutdown(wait=True) # Properly shutdown the executor\n self.start_button.setEnabled(True) # Re-enable the start button\n self.stop_button.setEnabled(False) # Disable the stop button\n\n def set_image_handler(self, image_handler):\n self.image_handler = image_handler\n self.start_button.setEnabled(True)\n\n @staticmethod\n def is_offset_allocated(offset, chunk_size, allocation_map):\n \"\"\"\n Check if a given offset range overlaps with any allocated regions.\"\"\"\n if not allocation_map:\n return False\n\n chunk_end = offset + chunk_size\n\n # Binary search to find potential overlapping regions\n # We need to check if our chunk [offset, chunk_end) overlaps with any allocated region\n left, right = 0, len(allocation_map)\n\n while left < right:\n mid = (left + right) // 2\n alloc_start, alloc_end = allocation_map[mid]\n\n # Check for overlap: two ranges overlap if one starts before the other ends\n if offset < alloc_end and chunk_end > alloc_start:\n return True\n\n # If our chunk is entirely before this allocated region, search left half\n if chunk_end <= alloc_start:\n right = mid\n # If our chunk is entirely after this allocated region, search right half\n else:\n left = mid + 1\n\n return False\n\n def open_context_menu(self, position):\n menu = QMenu()\n\n open_location_action = QAction(\"Open File Location\")\n open_location_action.triggered.connect(self.open_file_location)\n\n open_image_action = QAction(\"Open Externally\")\n open_image_action.triggered.connect(self.open_image)\n\n menu.addAction(open_location_action)\n menu.addAction(open_image_action)\n menu.exec_(self.table_widget.viewport().mapToGlobal(position))\n\n def open_image(self):\n if self.tab_widget.currentIndex() == 0: # If the table tab is active\n current_item = self.table_widget.currentItem()\n else: # If the thumbnail tab is active\n current_item = self.list_widget.currentItem()\n\n if current_item:\n file_name = current_item.text()\n for file_info in self.carved_files:\n if file_info[0] == file_name:\n file_path = file_info[3] # The file path is now at index 3\n QDesktopServices.openUrl(QUrl.fromLocalFile(file_path))\n break\n\n def open_file_location(self):\n current_item = self.list_widget.currentItem()\n if current_item:\n file_name = current_item.text()\n for file_info in self.carved_files:\n if file_info[0] == file_name:\n file_path = file_info[3] # The file path is now at index 3\n QDesktopServices.openUrl(QUrl.fromLocalFile(os.path.dirname(file_path)))\n break\n\n def get_carved_timestamp(self, file_name):\n \"\"\"Get the preserved timestamp for a carved file.\"\"\"\n for file_info in self.carved_files:\n if file_info[0] == file_name:\n return file_info[4] # Modification date at index 4\n return None\n\n def on_carved_file_clicked(self, *args):\n \"\"\"Handle click on carved file to display in internal viewer.\n\n Reads file content directly from disk image (forensically sound) instead of\n from the carved file on disk. This ensures we're analyzing the original data.\n \"\"\"\n # Get clicked file name (works for both table cellClicked and list itemClicked)\n if len(args) == 2: # cellClicked(row, column) from table\n row = args[0]\n # Get file name from column 1 (Name column, column 0 is Id)\n file_name_item = self.table_widget.item(row, 1)\n if not file_name_item:\n return\n file_name = file_name_item.text()\n elif len(args) == 1: # itemClicked(item) from list\n item = args[0]\n file_name = item.text()\n else:\n return\n\n # Find file info in carved_files list\n for file_info in self.carved_files:\n if file_info[0] == file_name:\n file_size_str = file_info[1] # Size at index 1\n file_type = file_info[2] # Type at index 2\n file_size = int(file_size_str)\n\n try:\n # Extract disk offset from filename (hex format without extension)\n offset_hex = os.path.splitext(file_name)[0]\n offset = int(offset_hex, 16)\n\n # Read file content directly from disk image (forensically sound!)\n if not self.image_handler:\n print(\"No image handler available\")\n return\n\n file_content = self.image_handler.read(offset, file_size)\n if not file_content:\n print(f\"Unable to read content from offset {hex(offset)}\")\n return\n\n # Create data dict for viewer (matches mainwindow's format)\n data = {\n 'name': file_name,\n 'size': file_size,\n 'type': file_type,\n 'offset': offset,\n 'is_carved': True, # Flag indicating this is a carved file\n 'source': 'carved_file',\n 'file_content': file_content, # Include content so metadata viewer doesn't re-read\n 'carved_timestamp': self.get_carved_timestamp(file_name) # Get original timestamp if available\n }\n\n # Get MainWindow and call update_viewer_with_file_content\n if self.main_window and hasattr(self.main_window, 'update_viewer_with_file_content'):\n self.main_window.update_viewer_with_file_content(file_content, data)\n else:\n print(\"MainWindow not found or missing update_viewer_with_file_content method\")\n\n except Exception as e:\n print(f\"Error opening carved file in viewer: {e}\")\n import traceback\n traceback.print_exc()\n\n break\n\n def setup_buttons(self):\n self.start_button.setEnabled(False)\n self.start_button.clicked.connect(self.start_carving_thread)\n self.stop_button.setEnabled(False)\n self.stop_button.clicked.connect(self.stop_carving_thread)\n\n def start_carving_thread(self):\n self.start_button.setEnabled(False)\n self.stop_button.setEnabled(True)\n # Launch carving in a background thread\n self.executor.submit(self.carve_files)\n\n def stop_carving_thread(self):\n self.executor.shutdown(wait=False)\n self.start_button.setEnabled(True)\n self.stop_button.setEnabled(False)\n\n def is_valid_file(self, data, file_type):\n try:\n if file_type == 'pdf':\n # Validate PDF by trying to read it with PyPDF2\n PdfReader(io.BytesIO(data))\n elif file_type in ['jpg', 'jpeg', 'png', 'gif']:\n # Validate images by attempting to open them with PIL\n image = Image.open(io.BytesIO(data))\n image.verify() # This will not load the image but only parse it\n elif file_type == 'bmp':\n return True\n elif file_type == 'wav':\n # Basic WAV validation could check for the RIFF header, file size, etc.\n if not data.startswith(b'RIFF') or not b'WAVE' in data[:12]:\n return False\n # Additional WAV format checks could be implemented here\n elif file_type == 'mov':\n return True # For now, we'll assume all MOV files are valid\n else:\n return True\n return True\n except (IOError, UnidentifiedImageError, PdfReadError, ValueError) as e:\n print(f\"Error validating file of type {file_type}: {str(e)}\")\n return False\n\n def carve_pdf_files(self, chunk, global_offset):\n pdf_start_signature = b'%PDF-'\n pdf_linearization_signature = b'/Linearized'\n pdf_end_signature = b'%%EOF'\n offset = 0\n while offset < len(chunk):\n start_index = chunk.find(pdf_start_signature, offset)\n if start_index == -1:\n break\n linearization_index = chunk.find(pdf_linearization_signature, start_index, start_index + 1024)\n if linearization_index != -1:\n file_size_start = chunk.find(b'/L ', linearization_index, linearization_index + 1024) + 3\n file_size_end = chunk.find(b'/', file_size_start)\n if file_size_end == -1:\n file_size_end = chunk.find(b' ', file_size_start)\n if file_size_end != -1:\n try:\n file_size = int(chunk[file_size_start:file_size_end].split()[0])\n pdf_content = chunk[start_index:start_index + file_size]\n if self.is_valid_file(pdf_content, 'pdf'):\n self.save_file(pdf_content, 'pdf', global_offset + start_index, file_size)\n offset = start_index + file_size\n continue\n except ValueError:\n pass\n end_index = chunk.find(pdf_end_signature, start_index)\n if end_index != -1:\n end_index += len(pdf_end_signature)\n pdf_content = chunk[start_index:end_index]\n if self.is_valid_file(pdf_content, 'pdf'):\n self.save_file(pdf_content, 'pdf', global_offset + start_index, end_index - start_index)\n offset = end_index\n else:\n offset = start_index + 1\n\n def carve_wav_files(self, chunk, offset):\n wav_start_signature = b'RIFF'\n offset = 0\n while offset < len(chunk):\n start_index = chunk.find(wav_start_signature, offset)\n if start_index == -1:\n break\n\n if chunk[start_index + 8:start_index + 12] != b'WAVE':\n offset = start_index + 4\n continue\n\n file_size_bytes = chunk[start_index + 4:start_index + 8]\n file_size = int.from_bytes(file_size_bytes, byteorder='little') + 8\n\n if start_index + file_size > len(chunk):\n wav_content = chunk[start_index:]\n offset = len(chunk)\n else:\n wav_content = chunk[start_index:start_index + file_size]\n offset = start_index + file_size\n\n if self.is_valid_file(wav_content, 'wav'):\n self.save_file(wav_content, 'wav', 'carved_files', start_index)\n\n def carve_mov_files(self, chunk, offset):\n mov_signatures = [\n # b'ftyp', b'moov', b'mdat', #b'pnot', b'udta', #b'uuid',\n # b'moof', b'free', b'skip', b'jP2 ', b'wide', b'load',\n # b'ctab', b'imap', b'matt', b'kmat', b'clip', b'crgn',\n # b'sync', b'chap', b'tmcd', b'scpt', b'ssrc', b'PICT'\n b'moov', b'mdat', b'free', b'wide'\n ]\n\n mov_file_found = False\n mov_data = b''\n mov_file_offset = offset\n mov_file_size = 0\n\n while offset < len(chunk):\n if offset + 8 > len(chunk):\n # Not enough data for an atom header\n break\n\n atom_size = int.from_bytes(chunk[offset:offset + 4], 'big')\n atom_type = chunk[offset + 4:offset + 8]\n\n if atom_type not in mov_signatures:\n if mov_file_found:\n # End of MOV file\n break\n else:\n # Not a MOV file or just a stray header, skip ahead\n offset += 4\n continue\n\n mov_file_found = True\n mov_file_size += atom_size\n\n if offset + atom_size > len(chunk):\n # Atom extends beyond this chunk, store what we have and wait for more data\n mov_data += chunk[offset:]\n break\n else:\n # We have the whole atom, store it\n mov_data += chunk[offset:offset + atom_size]\n\n offset += atom_size\n\n if mov_file_found and mov_data:\n # file_name = f\"carved_{mov_file_offset}.mov\"\n # file_path = os.path.join(\"carved_files\", file_name)\n # self.save_file(mov_data, 'mov', file_path)\n self.save_file(mov_data, 'mov', 'carved_files', mov_file_offset)\n\n def carve_jpg_files(self, chunk, offset):\n jpg_start_signature = b'\\xFF\\xD8\\xFF'\n jpg_end_signature = b'\\xFF\\xD9'\n offset = 0\n while offset < len(chunk):\n start_index = chunk.find(jpg_start_signature, offset)\n if start_index == -1:\n break\n\n end_index = chunk.find(jpg_end_signature, start_index)\n if end_index != -1:\n jpg_content = chunk[start_index:end_index + len(jpg_end_signature)]\n\n # Check if it's a valid JPG file\n if self.is_valid_file(jpg_content, 'jpg'):\n self.save_file(jpg_content, 'jpg', 'carved_files', start_index)\n\n offset = end_index + len(jpg_end_signature)\n else:\n offset = start_index + 1 # Continue searching\n\n def carve_gif_files(self, chunk, offset):\n gif_start_signature = b'\\x47\\x49\\x46\\x38'\n gif_end_signature = b'\\x00\\x3B'\n offset = 0\n while offset < len(chunk):\n start_index = chunk.find(gif_start_signature, offset)\n if start_index == -1:\n break\n\n end_index = chunk.find(gif_end_signature, start_index)\n if end_index != -1:\n gif_content = chunk[start_index:end_index + len(gif_end_signature)]\n\n # Check if it's a valid GIF file\n if self.is_valid_file(gif_content, 'gif'):\n self.save_file(gif_content, 'gif', 'carved_files', start_index)\n\n offset = end_index + len(gif_end_signature)\n else:\n offset = start_index + 1\n\n def carve_png_files(self, chunk, offset):\n png_start_signature = b'\\x89\\x50\\x4E\\x47\\x0D\\x0A\\x1A\\x0A'\n png_end_signature = b'\\x49\\x45\\x4E\\x44\\xAE\\x42\\x60\\x82'\n offset = 0\n while offset < len(chunk):\n start_index = chunk.find(png_start_signature, offset)\n if start_index == -1:\n break\n\n end_index = chunk.find(png_end_signature, start_index)\n if end_index != -1:\n png_content = chunk[start_index:end_index + len(png_end_signature)]\n\n # Check if it's a valid PNG file\n if self.is_valid_file(png_content, 'png'):\n self.save_file(png_content, 'png', 'carved_files', start_index)\n\n offset = end_index + len(png_end_signature)\n else:\n offset = start_index + 1\n\n def carve_wmv_files(self, chunk, offset):\n # Define ASF header signature\n asf_header_signature = b'\\x30\\x26\\xB2\\x75\\x8E\\x66\\xCF\\x11\\xA6\\xD9\\x00\\xAA\\x00\\x62\\xCE\\x6C'\n\n current_offset = 0\n\n while current_offset < len(chunk):\n # Search for ASF header\n start_index = chunk.find(asf_header_signature, current_offset)\n if start_index == -1:\n break\n\n # Find the file properties object header within the first 512 bytes of the file\n max_search_size = min(start_index + 512, len(chunk))\n file_properties_header = b'\\xA1\\xDC\\xAB\\x8C\\x47\\xA9\\xCF\\x11\\x8E\\xE4\\x00\\xC0\\x0C\\x20\\x53\\x65'\n file_properties_index = chunk.find(file_properties_header, start_index, max_search_size)\n if file_properties_index == -1:\n current_offset = start_index + 1\n continue\n\n # Extract the file size located at offset 40 within the object\n file_size_offset = file_properties_index + 40\n file_size_bytes = chunk[file_size_offset:file_size_offset + 8]\n file_size = int.from_bytes(file_size_bytes, byteorder='little')\n\n # Calculate end index based on file size\n end_index = start_index + file_size\n\n # Extract WMV content\n wmv_content = chunk[start_index:end_index]\n\n # Save the WMV content directly into the carved_files directory\n self.save_file(wmv_content, 'wmv', 'carved_files', start_index + offset)\n current_offset = end_index\n\n def carve_zip_files(self, chunk, global_offset):\n # Define ZIP header signatures\n local_file_header_signature = b'\\x50\\x4b\\x03\\x04'\n end_of_central_dir_signature = b'\\x50\\x4b\\x05\\x06'\n\n current_pos = 0\n zip_file_parts = [] # List to hold all parts of the ZIP file\n\n while current_pos < len(chunk):\n # Search for local file header\n local_header_index = chunk.find(local_file_header_signature, current_pos)\n if local_header_index == -1:\n break\n\n # Extract compressed size from local file header\n compressed_size = struct.unpack(\" len(chunk) - 4:\n break # Not enough data for size\n\n # Read file size directly from header\n bmp_file_size = int.from_bytes(chunk[start_index + 2:start_index + 6], byteorder='little')\n\n # Sanity check for BMP size (adjust max and min size as per your need)\n if bmp_file_size < 100 or bmp_file_size > 5000000:\n current_offset = start_index + 2\n continue # Not a valid BMP size, skip to next possible start\n\n # Read and check dimensions for further validation\n bmp_width = int.from_bytes(chunk[start_index + 18:start_index + 22], byteorder='little')\n bmp_height = int.from_bytes(chunk[start_index + 22:start_index + 26], byteorder='little')\n\n # Reasonable dimensions check (adjust max width/height as per your need)\n if bmp_width <= 0 or bmp_width > 10000 or bmp_height <= 0 or bmp_height > 10000:\n current_offset = start_index + 2\n continue # Unreasonable dimensions, likely not a BMP\n\n # Extract the BMP file if it's entirely within the chunk\n if start_index + bmp_file_size <= len(chunk):\n bmp_content = chunk[start_index:start_index + bmp_file_size]\n self.save_file(bmp_content, 'bmp', 'carved_files', start_index + offset)\n current_offset = start_index + bmp_file_size # Move past this BMP file\n else:\n break # The BMP file exceeds the chunk boundary, stop processing\n\n # Return if more data is needed or if processing is complete\n return None\n\n def carve_files(self, selected_file_types):\n try:\n self.stop_carving = False\n chunk_size = 1024 * 1024 * 100\n offset = 0\n chunks_processed = 0\n chunks_skipped = 0\n\n while offset < self.image_handler.get_size():\n # Check if this chunk overlaps with allocated space\n if self.is_offset_allocated(offset, chunk_size, self.allocation_map):\n # Skip this chunk - it's in allocated space (existing files)\n chunks_skipped += 1\n offset += chunk_size\n continue\n\n chunks_processed += 1\n\n chunk = self.image_handler.read(offset, chunk_size)\n if not chunk:\n break\n\n if self.stop_carving:\n self.stop_carving = False\n self.start_button.setEnabled(True)\n self.stop_button.setEnabled(False)\n print(f\"Carving stopped. Processed {chunks_processed} unallocated chunks, skipped {chunks_skipped} allocated chunks\")\n return\n\n # Call the carve function for each selected file type\n for file_type in selected_file_types:\n if file_type == 'all':\n self.carve_wav_files(chunk, offset)\n self.carve_mov_files(chunk, offset)\n self.carve_pdf_files(chunk, offset)\n self.carve_jpg_files(chunk, offset)\n self.carve_gif_files(chunk, offset)\n self.carve_png_files(chunk, offset)\n self.carve_wmv_files(chunk, offset)\n self.carve_zip_files(chunk, offset)\n self.carve_bmp_files(chunk, offset)\n elif file_type == 'wav':\n self.carve_wav_files(chunk, offset)\n elif file_type == 'mov':\n self.carve_mov_files(chunk, offset)\n elif file_type == 'pdf':\n self.carve_pdf_files(chunk, offset)\n elif file_type == 'jpg':\n self.carve_jpg_files(chunk, offset)\n elif file_type == 'gif':\n self.carve_gif_files(chunk, offset)\n elif file_type == 'png':\n self.carve_png_files(chunk, offset)\n elif file_type == 'wmv':\n self.carve_wmv_files(chunk, offset)\n elif file_type == 'zip':\n self.carve_zip_files(chunk, offset)\n elif file_type == 'bmp':\n self.carve_bmp_files(chunk, offset)\n\n offset += chunk_size\n\n print(f\"Carving complete. Processed {chunks_processed} unallocated chunks, skipped {chunks_skipped} allocated chunks\")\n finally:\n self.start_button.setEnabled(True)\n self.stop_button.setEnabled(False)\n\n @staticmethod\n def extract_original_timestamp(file_content, file_type):\n \"\"\"Extract original file timestamp from file headers/metadata.\n\n Returns:\n datetime object if timestamp found, None otherwise\n \"\"\"\n try:\n if file_type.lower() in ['jpg', 'jpeg', 'png']:\n # Extract EXIF DateTimeOriginal from images\n try:\n img = Image.open(io.BytesIO(file_content))\n exif_data = img._getexif()\n if exif_data:\n # Look for DateTimeOriginal (tag 36867) or DateTime (tag 306)\n for tag_id, value in exif_data.items():\n tag_name = TAGS.get(tag_id, tag_id)\n if tag_name in ['DateTimeOriginal', 'DateTime']:\n # Parse format: \"2024:01:15 14:30:00\"\n return datetime.datetime.strptime(str(value), '%Y:%m:%d %H:%M:%S')\n except Exception:\n pass\n\n elif file_type.lower() == 'pdf':\n # Extract CreationDate from PDF metadata\n try:\n pdf = PdfReader(io.BytesIO(file_content))\n if pdf.metadata and '/CreationDate' in pdf.metadata:\n date_str = pdf.metadata['/CreationDate']\n # PDF date format: \"D:20240115143000\"\n if date_str.startswith('D:'):\n date_str = date_str[2:16] # Extract YYYYMMDDHHmmss\n return datetime.datetime.strptime(date_str, '%Y%m%d%H%M%S')\n except Exception:\n pass\n\n elif file_type.lower() == 'zip':\n # Extract timestamp from ZIP central directory\n try:\n with zipfile.ZipFile(io.BytesIO(file_content)) as zf:\n if zf.namelist():\n # Get timestamp of first file in archive\n first_file_info = zf.getinfo(zf.namelist()[0])\n return datetime.datetime(*first_file_info.date_time)\n except Exception:\n pass\n\n except Exception as e:\n print(f\"Error extracting timestamp for {file_type}: {e}\")\n\n return None\n\n def save_file(self, file_content, file_type, file_path, offset):\n # Ensure the 'carved_files' directory exists\n if not os.path.exists(\"carved_files\"):\n os.makedirs(\"carved_files\")\n\n offset_hex = format(offset, 'x')\n file_name = f\"{offset_hex}.{file_type}\"\n file_path = os.path.join(\"carved_files\", file_name)\n\n # Write file content to disk\n with open(file_path, \"wb\") as f:\n f.write(file_content)\n\n # Try to extract original timestamp from file metadata\n original_timestamp = self.extract_original_timestamp(file_content, file_type)\n\n if original_timestamp:\n # Convert datetime to timestamp (seconds since epoch)\n timestamp = time.mktime(original_timestamp.timetuple())\n # Set both access time and modification time to preserve original timestamp\n os.utime(file_path, (timestamp, timestamp))\n modification_date = original_timestamp.strftime(\"%Y-%m-%d %H:%M:%S\")\n else:\n # Fall back to carving time if no original timestamp found\n modification_date = datetime.datetime.now().strftime(\"%Y-%m-%d %H:%M:%S\")\n\n file_size = str(len(file_content))\n self.carved_files.append((file_name, file_size, file_type, file_path, modification_date))\n self.file_carved.emit(file_name, file_size, file_type, modification_date, file_path)\n self.carved_file_names.add(file_name)\n\n @Slot(str, str, str, str, str)\n def display_carved_file(self, name, size, type_, modification_date, file_path):\n row = self.table_widget.rowCount()\n readable_size = self.image_handler.get_readable_size(int(size))\n self.table_widget.insertRow(row)\n\n # Get file icon based on type/extension\n extension = type_.lower() if type_ else 'unknown'\n icon_path = self.main_window.db_manager.get_icon_path('file', extension)\n\n # Set Id column\n self.table_widget.setItem(row, 0, QTableWidgetItem(str(row + 1)))\n\n # Set Name column with icon\n name_item = QTableWidgetItem(name)\n name_item.setIcon(QIcon(icon_path))\n self.table_widget.setItem(row, 1, name_item)\n\n # Set other columns\n self.table_widget.setItem(row, 2, NumericTableWidgetItem(readable_size))\n self.table_widget.setItem(row, 3, QTableWidgetItem(type_))\n self.table_widget.setItem(row, 4, QTableWidgetItem(modification_date))\n self.table_widget.setItem(row, 5, QTableWidgetItem(file_path))\n\n # Only proceed if the file type is one of the supported formats\n if type_.lower() in ['jpg', 'jpeg', 'png', 'gif', 'mov', 'pdf', 'wmv', 'bmp', 'zip', 'wav']:\n file_full_path = os.path.join(\"carved_files\", name)\n thumbnail_folder = os.path.join(\"carved_files\", \"thumbnails\") # Folder to save thumbnails\n\n if not os.path.exists(thumbnail_folder):\n os.makedirs(thumbnail_folder) # Create the thumbnail folder if it doesn't exist\n\n if type_.lower() == 'mov':\n thumbnail_path = os.path.join(thumbnail_folder, name.replace('.mov', '.png'))\n with VideoFileClip(file_full_path) as clip:\n clip.save_frame(thumbnail_path, t=0.5) # save frame at 0.5 seconds\n pixmap = QPixmap(thumbnail_path)\n\n elif type_.lower() == 'pdf':\n # Convert the first page of the PDF to a thumbnail\n images = convert_from_path(file_full_path)\n thumbnail_path = os.path.join(thumbnail_folder, name.replace('.pdf', '.png'))\n images[0].save(thumbnail_path, 'PNG')\n # Create the QPixmap from the full path\n pixmap = QPixmap(thumbnail_path)\n\n elif type_.lower() == 'wmv':\n capture = cv2.VideoCapture(file_full_path)\n success, image = capture.read()\n capture.release() # Release the capture object explicitly\n if success:\n thumbnail_path = os.path.join(thumbnail_folder, name.replace('.wmv', '.png'))\n cv2.imwrite(thumbnail_path, image)\n pixmap = QPixmap(thumbnail_path)\n else:\n print(\"Failed to extract thumbnail from WMV file\")\n\n elif type_.lower() == 'zip':\n # Render ZIP icon at target size for crisp display\n pixmap = self.render_svg_to_pixmap('Icons/mimetypes/application-zip.svg', 120)\n\n elif type_.lower() == 'wav':\n # Render audio icon at target size for crisp display\n pixmap = self.render_svg_to_pixmap('Icons/mimetypes/audio-x-generic.svg', 120)\n\n else:\n # For image files, use the original file path\n thumbnail_path = file_full_path\n pixmap = QPixmap(thumbnail_path)\n\n # Center-crop to perfect square for modern uniform gallery look (skip for SVG icons)\n if type_.lower() not in ['zip', 'wav']:\n pixmap = self.center_crop_to_square(pixmap, 120)\n icon = QIcon(pixmap)\n\n # Create a QListWidgetItem, set its icon, and provide a size hint to ensure the text is visible\n item = QListWidgetItem(icon, name)\n # Set a compact size for the QListWidgetItem with minimal padding for text\n item.setSizeHint(QSize(130, 145))\n\n # Set the item flags to not be movable and to be selectable\n item.setFlags(item.flags() & ~Qt.ItemIsDragEnabled & ~Qt.ItemIsDropEnabled)\n\n # Add the QListWidgetItem to the list widget\n self.list_widget.addItem(item)\n\n def clear(self):\n self.table_widget.setRowCount(0)\n self.list_widget.clear()\n self.carved_files.clear()\n self.start_button.setEnabled(True)\n self.stop_button.setEnabled(False)\n\n def clear_ui(self):\n self.table_widget.setRowCount(0)\n self.list_widget.clear()\n\n def handle_resize_event(self, event):\n # Calculate total width of the table\n total_width = self.table_widget.width()\n\n # Fixed columns: Id, Size, Type, Modification Date\n fixed_width = (self.table_widget.columnWidth(0) + # Id\n self.table_widget.columnWidth(2) + # Size\n self.table_widget.columnWidth(3) + # Type\n self.table_widget.columnWidth(4)) # Modification Date\n\n # Remaining space for dynamic columns\n remaining_width = total_width - fixed_width\n\n # Allocate remaining space proportionally\n self.table_widget.setColumnWidth(1, remaining_width // 2) # Name column\n self.table_widget.setColumnWidth(5, remaining_width // 2) # File Path column\n\n super(QTableWidget, self.table_widget).resizeEvent(event)\n"
},
{
"path": "modules/hex_tab.py",
"content": "import os\nfrom functools import lru_cache\n\nfrom PySide6.QtCore import Qt, QObject, Signal, QThread, QSize\nfrom PySide6.QtGui import QAction, QIcon, QFont, QResizeEvent\nfrom PySide6.QtWidgets import (QToolBar, QLabel, QMessageBox, QWidget, QVBoxLayout,\n QLineEdit, QTableWidget, QHeaderView, QTableWidgetItem, QListWidget,\n QSizePolicy, QFrame, QApplication, QMenu, QAbstractItemView, QFileDialog,\n QToolButton, QComboBox, QSplitter)\n\n\nclass SearchWorker(QObject):\n search_finished = Signal(list)\n\n def __init__(self, hex_viewer_manager, query):\n super().__init__()\n self.hex_viewer_manager = hex_viewer_manager\n self.query = query\n\n def run(self):\n matches = self.hex_viewer_manager.search(self.query)\n self.search_finished.emit(matches)\n\n\nclass HexViewerManager:\n LINES_PER_PAGE = 1024\n\n def __init__(self, hex_content, byte_content):\n self.hex_content = hex_content\n self.byte_content = byte_content\n self.num_total_pages = (len(hex_content) // 32) // self.LINES_PER_PAGE\n if (len(hex_content) // 32) % self.LINES_PER_PAGE:\n self.num_total_pages += 1\n\n @lru_cache(maxsize=None)\n def format_hex(self, page=0):\n start_index = page * self.LINES_PER_PAGE * 32\n end_index = start_index + (self.LINES_PER_PAGE * 32)\n lines = []\n chunk_starts = range(start_index, end_index, 32)\n for start in chunk_starts:\n if start >= len(self.hex_content):\n break\n lines.append(self.format_hex_chunk(start))\n return '\\n'.join(lines)\n\n def format_hex_chunk(self, start):\n hex_part = []\n ascii_repr = []\n for j in range(start, start + 32, 2):\n chunk = self.hex_content[j:j + 2]\n if not chunk:\n break\n chunk_int = int(chunk, 16)\n hex_part.append(chunk.upper())\n ascii_repr.append(chr(chunk_int) if 32 <= chunk_int <= 126 else '.')\n hex_line = ' '.join(hex_part)\n padding = ' ' * (48 - len(hex_line))\n ascii_line = ''.join(ascii_repr)\n line = f'0x{start // 2:08x}: {hex_line}{padding} {ascii_line}'\n return line\n\n def total_pages(self):\n return self.num_total_pages\n\n def search(self, query):\n if all(part.isalnum() or part.isspace() for part in query.split()):\n try:\n query_bytes = bytes.fromhex(query.replace(\" \", \"\"))\n return self.search_by_hex(query_bytes)\n except ValueError:\n pass # Invalid hex value\n\n if query.startswith(\"0x\"):\n return self.search_by_address(query)\n else:\n return self.search_by_string(query)\n\n def search_by_address(self, address):\n \"\"\"Searches for the line that contains the given address (offset)\"\"\"\n try:\n address_int = int(address, 16)\n line_number = address_int // 16\n if 0 <= line_number < len(self.byte_content) // 16:\n return [line_number]\n else:\n return []\n except ValueError:\n return []\n\n def search_by_string(self, query):\n # Implementation for searching by string\n matches = []\n query_bytes = query.encode('utf-8')\n\n start = 0\n while start < len(self.byte_content):\n position = self.byte_content.find(query_bytes, start)\n if position == -1:\n break\n start = position + 1 # Move the start to the next character\n line_number = position // 16 # Calculate line number\n matches.append(line_number)\n\n return matches\n\n def search_by_hex(self, hex_query):\n if all(part.isalnum() for part in hex_query.split()):\n try:\n query_bytes = bytes.fromhex(hex_query.replace(\" \", \"\"))\n except ValueError:\n return [] # Invalid hex value\n else:\n return [] # Non-alphanumeric characters in the query\n\n matches = []\n start = 0\n while start < len(self.byte_content):\n position = self.byte_content[start:].find(query_bytes)\n if position == -1:\n break\n start += position # Adjust the start to the found position\n line_number = start // 16 # Calculate line number\n matches.append(line_number)\n start += len(query_bytes) # Move past the current match\n return matches\n\n\nclass HexViewer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n self.hex_viewer_manager = None\n self.current_page = 0\n\n self.context_menu = QMenu(self)\n self.copy_action = QAction(\"Copy\", self)\n self.copy_action.triggered.connect(self.copy_to_clipboard)\n self.context_menu.addAction(self.copy_action)\n\n # Set up a context menu event handler\n self.setContextMenuPolicy(Qt.CustomContextMenu)\n self.customContextMenuRequested.connect(self.show_context_menu)\n\n self.initialize_ui()\n\n def show_context_menu(self, pos):\n # Show the context menu at the cursor position\n self.context_menu.exec_(self.mapToGlobal(pos))\n\n def copy_to_clipboard(self):\n selected_text = \"\"\n\n # Check if any cells in the hex_table are selected\n selected_indexes = self.hex_table.selectedIndexes()\n if selected_indexes:\n # Sort the selected indexes by row\n selected_indexes.sort(key=lambda index: index.row())\n\n for i, index in enumerate(selected_indexes):\n selected_text += index.data(Qt.DisplayRole)\n\n if index.column() == 16: # The last column (ASCII), add a newline\n selected_text += \"\\n\"\n else:\n next_index = selected_indexes[i + 1] if i + 1 < len(selected_indexes) else None\n\n # Add a space if the next cell is in the same row\n if next_index and next_index.row() == index.row():\n selected_text += \" \"\n\n # Copy the selected text to the clipboard\n if selected_text:\n clipboard = QApplication.clipboard()\n clipboard.setText(selected_text)\n\n def initialize_ui(self):\n self.layout = QVBoxLayout()\n self.layout.setContentsMargins(0, 0, 0, 0)\n self.layout.setSpacing(0)\n self.layout.setAlignment(Qt.AlignCenter)\n\n self.setup_toolbar()\n self.layout.addWidget(self.toolbar)\n\n # Create a QSplitter for dynamic resizing\n self.splitter = QSplitter(Qt.Horizontal, self) # Horizontal splitter for hex_table and search_results_frame\n\n # Setup Hex Table\n self.setup_hex_table()\n self.hex_table.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Expanding) # Make hex table expandable\n\n # Add the hex table to the splitter\n self.splitter.addWidget(self.hex_table)\n\n # Create a QVBoxLayout for the search results and its title\n self.search_results_layout = QVBoxLayout()\n self.search_results_layout.setContentsMargins(2, 2, 2, 2)\n self.search_results_layout.setSpacing(2)\n\n self.search_results_frame = QFrame(self) # This frame will contain the title and the search results\n self.search_results_frame.setMaximumWidth(180) # Make it narrower\n self.search_results_frame.setObjectName(\"search_results_frame\") # Set object name for stylesheet targeting\n self.search_results_frame.setSizePolicy(QSizePolicy.Fixed,\n QSizePolicy.Expanding) # Fixed width, expandable height\n\n self.search_results_title = QLabel(\"Search Results\", self.search_results_frame)\n self.search_results_title.setAlignment(Qt.AlignCenter)\n self.search_results_title.setFixedHeight(22)\n self.search_results_title.setObjectName(\"search_results_title\") # Set object name for stylesheet targeting\n self.search_results_layout.addWidget(self.search_results_title)\n\n self.search_results_widget = QListWidget(self.search_results_frame)\n self.search_results_widget.setObjectName(\"search_results_widget\") # Set object name for stylesheet targeting\n self.search_results_widget.setVerticalScrollBarPolicy(Qt.ScrollBarAsNeeded) # Show scroll bar when needed\n self.search_results_widget.itemClicked.connect(self.search_result_clicked)\n self.search_results_widget.setFont(QFont(\"Courier\", 9)) # Smaller font\n self.search_results_layout.addWidget(self.search_results_widget)\n\n self.search_results_frame.setLayout(self.search_results_layout)\n\n # Add the search results frame to the splitter\n self.splitter.addWidget(self.search_results_frame)\n\n # Set both widgets to expand in both directions\n self.splitter.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Expanding)\n\n # Add the splitter to the main layout\n self.layout.addWidget(self.splitter)\n\n # Set the main layout\n self.setLayout(self.layout)\n\n def resizeEvent(self, event: QResizeEvent):\n \"\"\"Handle window resizing to update layout.\"\"\"\n # Adjust splitter sizes dynamically based on new window dimensions\n total_width = event.size().width()\n total_height = event.size().height()\n\n # Set sizes for horizontal splitter: 75% for hex_table and 25% for search_results_frame\n self.splitter.setSizes([int(total_width * 0.75), int(total_width * 0.25)])\n\n super().resizeEvent(event)\n\n def setup_toolbar(self):\n self.toolbar = QToolBar(self)\n self.toolbar.setContentsMargins(0, 0, 0, 0)\n self.toolbar.setMovable(False)\n self.toolbar.setIconSize(QSize(16, 16)) # Reduce icon size\n self.toolbar.setFixedHeight(32) # Reduce toolbar height\n self.toolbar.setStyleSheet(\"\"\"\n QToolBar {\n spacing: 2px;\n padding: 1px;\n }\n QToolButton {\n padding: 2px;\n margin: 1px;\n }\n \"\"\")\n # disable right click\n self.toolbar.setContextMenuPolicy(Qt.PreventContextMenu)\n\n # Navigation buttons\n self.first_action = QAction(QIcon(\"Icons/icons8-thick-arrow-pointing-up-50.png\"), \"First\", self)\n self.first_action.triggered.connect(self.load_first_page)\n self.toolbar.addAction(self.first_action)\n\n self.prev_action = QAction(QIcon(\"Icons/icons8-left-arrow-50.png\"), \"Previous\", self)\n self.prev_action.triggered.connect(self.previous_page)\n self.toolbar.addAction(self.prev_action)\n\n # Page entry\n self.page_entry = QLineEdit(self)\n self.page_entry.setMaximumWidth(40)\n self.page_entry.setFixedHeight(25) # Set fixed height for input\n self.page_entry.setPlaceholderText(\"1\")\n self.page_entry.returnPressed.connect(self.go_to_page_by_entry)\n self.toolbar.addWidget(self.page_entry)\n\n # Total pages label\n self.total_pages_label = QLabel(\" of \")\n self.total_pages_label.setFixedHeight(25) # Set fixed height for label\n self.toolbar.addWidget(self.total_pages_label)\n\n self.next_action = QAction(QIcon(\"Icons/icons8-right-arrow-50.png\"), \"Next\", self)\n self.next_action.triggered.connect(self.next_page)\n self.toolbar.addAction(self.next_action)\n\n self.last_action = QAction(QIcon(\"Icons/icons8-down-50.png\"), \"Last\", self)\n self.last_action.triggered.connect(self.load_last_page)\n self.toolbar.addAction(self.last_action)\n\n # Add a small spacer\n spacer = QWidget(self)\n spacer.setFixedSize(20, 0)\n self.toolbar.addWidget(spacer)\n\n # Add a QLabel and a QComboBox for font size to the toolbar\n font_label = QLabel(\"Font Size: \")\n font_label.setFixedHeight(25) # Set fixed height for label\n self.toolbar.addWidget(font_label)\n\n self.font_size_combobox = QComboBox(self)\n self.font_size_combobox.setFixedHeight(25) # Set fixed height for combobox\n self.font_size_combobox.setFixedWidth(60) # Increase width to show full numbers\n self.font_size_combobox.addItems([\"8\", \"10\", \"12\", \"14\", \"16\", \"18\", \"20\", \"24\", \"28\", \"32\", \"36\"])\n self.font_size_combobox.currentTextChanged.connect(self.update_font_size)\n self.toolbar.addWidget(self.font_size_combobox)\n\n # Add small spacer\n spacer = QWidget(self)\n spacer.setFixedSize(20, 0)\n self.toolbar.addWidget(spacer)\n\n self.export_button = QToolButton(self)\n self.export_button.setObjectName(\"exportButton\") # Assign a unique object name\n self.export_button.setText(\"Export\")\n self.export_button.setToolButtonStyle(Qt.ToolButtonTextOnly) # Change to text only since no icon is used\n self.export_button.setFixedHeight(25) # Set fixed height\n self.export_button.setFixedWidth(100) # Set fixed width to show full text\n self.export_button.setPopupMode(QToolButton.MenuButtonPopup) # Set the popup mode\n\n # Add format options to the menu\n self.export_menu = QMenu(self)\n\n self.text_format_action = QAction(\"Text (.txt)\", self)\n self.text_format_action.triggered.connect(lambda: self.export_content(\"txt\"))\n self.export_menu.addAction(self.text_format_action)\n\n self.html_format_action = QAction(\"HTML (.html)\", self)\n self.html_format_action.triggered.connect(lambda: self.export_content(\"html\"))\n self.export_menu.addAction(self.html_format_action)\n\n self.export_button.setMenu(self.export_menu)\n self.toolbar.addWidget(self.export_button)\n\n # Add a spacer to push the following widgets to the right\n spacer = QWidget(self)\n spacer.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Preferred)\n self.toolbar.addWidget(spacer)\n\n # Search bar components\n self.search_bar = QLineEdit(self)\n self.search_bar.setMaximumWidth(180) # Reduce width to save space\n self.search_bar.setFixedHeight(25) # Reduce height\n self.search_bar.setContentsMargins(5, 0, 5, 0) # Reduce margins\n self.search_bar.setPlaceholderText(\"Search...\")\n self.search_bar.returnPressed.connect(self.trigger_search)\n self.toolbar.addWidget(self.search_bar)\n\n def update_font_size(self):\n # Get the current font size from the combobox\n selected_size = int(self.font_size_combobox.currentText())\n\n # Set the new font size to the hex_table\n current_font = self.hex_table.font()\n current_font.setPointSize(selected_size)\n self.hex_table.setFont(current_font)\n\n # Dynamically adjust column widths based on the font size\n address_width = selected_size * 10 # Proportional width for Address column\n byte_width = selected_size * 3 # Proportional width for each byte column\n ascii_width = selected_size * 8 # Proportional width for ASCII column\n\n # Set column widths dynamically\n self.hex_table.setColumnWidth(0, address_width) # Address column\n for i in range(1, 17): # Set uniform width for each byte column\n self.hex_table.setColumnWidth(i, byte_width)\n self.hex_table.setColumnWidth(17, ascii_width) # ASCII column\n\n # Update the font size for the headers as well\n header_font = self.hex_table.horizontalHeader().font()\n header_font.setPointSize(selected_size)\n self.hex_table.horizontalHeader().setFont(header_font)\n\n # Apply the font to all existing data cells\n for row in range(self.hex_table.rowCount()):\n for col in range(self.hex_table.columnCount()):\n item = self.hex_table.item(row, col)\n if item:\n item_font = item.font()\n # Ensure we have a valid font size before setting it\n if selected_size > 0:\n item_font.setPointSize(selected_size)\n item.setFont(item_font)\n\n # Adjust the horizontal scrollbar policy if needed\n if self.hex_table.horizontalHeader().length() > self.hex_table.viewport().width():\n self.hex_table.setHorizontalScrollBarPolicy(Qt.ScrollBarAsNeeded)\n else:\n self.hex_table.setHorizontalScrollBarPolicy(Qt.ScrollBarAlwaysOff)\n\n def setup_hex_table(self):\n self.hex_table = QTableWidget()\n self.hex_table.verticalHeader().setDefaultSectionSize(20) # Smaller row height\n\n # Set the font of the hex_table\n font = QFont(\"Courier\")\n font.setPointSize(10) # Default smaller font size\n font.setLetterSpacing(QFont.AbsoluteSpacing, 1) # Reduce letter spacing\n self.hex_table.setFont(font)\n\n # Configure the columns and headers\n self.hex_table.setColumnCount(18) # 16 bytes + 1 address + 1 ASCII\n self.hex_table.setHorizontalHeaderLabels(['Address'] + [f'{i:02X}' for i in range(16)] + ['ASCII'])\n self.hex_table.verticalHeader().setVisible(False)\n\n # Set resizing policies for the header\n header = self.hex_table.horizontalHeader()\n header.setStyleSheet(\"QHeaderView::section { padding: 2px; }\") # Reduce header padding\n header.setDefaultSectionSize(25) # Set a smaller default size\n\n # Address column - Resize based on content\n header.setSectionResizeMode(0, QHeaderView.ResizeToContents)\n\n # Byte columns - Fixed width for each byte column\n for i in range(1, 17): # 00 to 0F columns\n header.setSectionResizeMode(i, QHeaderView.Fixed)\n self.hex_table.setColumnWidth(i, 25) # Smaller byte column width\n\n # ASCII column - Stretch to fill remaining space\n header.setSectionResizeMode(17, QHeaderView.Stretch)\n\n # Adjust for remaining space in the ASCII column\n header.setStretchLastSection(True)\n\n # Set the initial column widths\n self.hex_table.setColumnWidth(0, 120) # Address column initial width\n self.hex_table.setColumnWidth(17, 200) # ASCII column initial width\n\n self.hex_table.setStyleSheet(\"\"\"\n QTableWidget {\n gridline-color: transparent;\n border: 1px solid #d3d3d3;\n }\n QTableWidget::item {\n padding: 0px;\n border: none;\n }\n \"\"\")\n self.hex_table.setShowGrid(False)\n self.hex_table.setAlternatingRowColors(True)\n self.hex_table.setEditTriggers(QAbstractItemView.NoEditTriggers)\n\n def display_hex_content(self, file_content):\n hex_content = file_content.hex()\n self.search_results_widget.clear()\n # self.search_results_frame.setVisible(False)\n\n # Clear the search bar text\n self.search_bar.setText(\"\")\n self.hex_viewer_manager = HexViewerManager(hex_content, file_content)\n self.update_navigation_states()\n self.display_current_page()\n # clear the page number entry\n self.page_entry.setText(\"\")\n\n def export_content(self, selected_format):\n if not self.hex_viewer_manager:\n QMessageBox.warning(self, \"No Content\", \"No content available to export.\")\n return\n\n options = QFileDialog.Options()\n options |= QFileDialog.ReadOnly # Allow read-only access to the selected file\n\n if selected_format == \"txt\":\n file_name, _ = QFileDialog.getSaveFileName(\n self, \"Export Hex Content\", \"\", \"Text Files (*.txt)\", options=options\n )\n self.export_as_text(file_name)\n elif selected_format == \"html\":\n file_name, _ = QFileDialog.getSaveFileName(\n self, \"Export Hex Content\", \"\", \"HTML Files (*.html)\", options=options\n )\n self.export_as_html(file_name)\n else:\n QMessageBox.warning(self, \"Unsupported Format\", \"Unsupported export format selected.\")\n\n def export_as_text(self, file_name):\n with open(file_name, \"w\") as text_file:\n # Add the header line with green color using ANSI escape codes\n header_line = \"Address 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F ASCII\"\n text_file.write(header_line + \"\\n\")\n\n # Add an empty line\n text_file.write(\"\\n\")\n\n # Write the formatted hex content\n formatted_hex = self.hex_viewer_manager.format_hex(self.current_page)\n text_file.write(formatted_hex)\n\n def export_as_html(self, file_name):\n html_content = \"\\n\"\n html_content += \"\\n\"\n\n # Add a smaller and less prominent header with the original text\n header_line = 'Generated by Trace
'\n html_content += header_line + \"
\\n\"\n\n # Add directory and file name information\n directory, filename = os.path.split(file_name)\n html_content += f'Directory: {directory}
\\n'\n html_content += f'File Name: {filename}
\\n'\n\n # Add the green header line\n header_line = ('Address 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F '\n 'ASCII')\n html_content += header_line + \"
\\n\"\n\n html_content += self.hex_viewer_manager.format_hex(self.current_page).replace(\"\\n\", \"
\")\n html_content += \"
\\n\"\n html_content += \"\"\n\n with open(file_name, \"w\") as html_file:\n html_file.write(html_content)\n\n def parse_hex_line(self, line):\n if \":\" not in line:\n return None, None, None\n address, rest = line.split(\":\", maxsplit=1)\n hex_chunk, ascii_repr = rest.split(\" \", maxsplit=1)\n return address.strip(), hex_chunk.strip(), ascii_repr.strip()\n\n def clear_content(self):\n self.hex_table.clear()\n\n def load_first_page(self):\n try:\n self.current_page = 0\n self.display_current_page()\n except (AttributeError, IndexError) as e:\n print(f\"Error occurred: {e}\")\n\n def load_last_page(self):\n try:\n self.current_page = self.hex_viewer_manager.total_pages() - 1\n self.display_current_page()\n except (AttributeError, IndexError) as e:\n print(f\"Error occurred: {e}\")\n\n def next_page(self):\n try:\n if self.current_page < self.hex_viewer_manager.total_pages() - 1:\n self.current_page += 1\n self.display_current_page()\n except (AttributeError, IndexError) as e:\n print(f\"Error occurred: {e}\")\n\n def previous_page(self):\n try:\n if self.current_page > 0:\n self.current_page -= 1\n self.display_current_page()\n except (AttributeError, IndexError) as e:\n print(f\"Error occurred: {e}\")\n\n def search_result_clicked(self, item):\n address = item.text().split(\":\")[1].strip()\n self.navigate_to_address(address)\n\n def display_current_page(self):\n formatted_hex = self.hex_viewer_manager.format_hex(self.current_page)\n\n # Clear the table first\n self.hex_table.setRowCount(0)\n self.hex_table.setHorizontalHeaderLabels(['Address'] + [f'{i:02X}' for i in range(16)] + ['ASCII'])\n\n hex_lines = formatted_hex.split('\\n')\n\n # Ensure we set the correct row count\n self.hex_table.setRowCount(len(hex_lines))\n\n # Get the current font size with fallback to default\n current_font = self.hex_table.font()\n current_font_size = current_font.pointSize()\n if current_font_size <= 0: # Use default if invalid\n current_font_size = 10 # Default font size\n\n for row, line in enumerate(hex_lines):\n address, hex_chunk, ascii_repr = self.parse_hex_line(line)\n if not address or not hex_chunk: # Skip if there's an error in parsing\n continue\n\n # Set address and center-align\n address_item = QTableWidgetItem(address + \":\") # Add a colon after the address\n address_item.setTextAlignment(Qt.AlignCenter)\n item_font = address_item.font()\n item_font.setPointSize(current_font_size)\n address_item.setFont(item_font)\n self.hex_table.setItem(row, 0, address_item)\n\n # Set hex values and center-align\n for col, byte in enumerate(hex_chunk.split()):\n byte_item = QTableWidgetItem(byte)\n byte_item.setTextAlignment(Qt.AlignCenter)\n byte_item.setBackground(Qt.white) # Clear any previous highlight\n item_font = byte_item.font()\n item_font.setPointSize(current_font_size)\n byte_item.setFont(item_font)\n self.hex_table.setItem(row, col + 1, byte_item)\n\n # Set ASCII representation and center-align\n ascii_item = QTableWidgetItem(ascii_repr)\n ascii_item.setTextAlignment(Qt.AlignCenter)\n item_font = ascii_item.font()\n item_font.setPointSize(current_font_size)\n ascii_item.setFont(item_font)\n self.hex_table.setItem(row, 17, ascii_item)\n\n self.update_navigation_states()\n\n def go_to_page_by_entry(self):\n try:\n page_num = int(self.page_entry.text()) - 1\n if 0 <= page_num < self.hex_viewer_manager.total_pages():\n self.current_page = page_num\n self.display_current_page()\n self.update_navigation_states()\n else:\n QMessageBox.warning(self, \"Invalid Page\", \"Page number out of range.\")\n except ValueError:\n QMessageBox.warning(self, \"Invalid Page\", \"Please enter a valid page number.\")\n\n def update_navigation_states(self):\n if not self.hex_viewer_manager:\n self.prev_action.setEnabled(False)\n self.next_action.setEnabled(False)\n return\n\n self.prev_action.setEnabled(self.current_page > 0)\n self.next_action.setEnabled(self.current_page < self.hex_viewer_manager.total_pages() - 1)\n self.page_entry.setText(str(self.current_page + 1))\n self.total_pages_label.setText(f\"of {self.hex_viewer_manager.total_pages()}\")\n\n def update_total_pages_label(self):\n total_pages = self.hex_viewer_manager.total_pages()\n current_page = self.current_page + 1\n self.total_pages_label.setText(f\"{current_page} of {total_pages}\")\n\n def trigger_search(self):\n query = self.search_bar.text()\n if not query:\n QMessageBox.warning(self, \"Search Error\", \"Please enter a search query.\")\n return\n\n # Check if a search is already ongoing. If so, stop it before starting a new one.\n if hasattr(self, 'search_thread') and self.search_thread.isRunning():\n self.search_thread.quit()\n self.search_thread.wait()\n\n # Start the search in a new thread\n self.search_thread = QThread()\n self.search_worker = SearchWorker(self.hex_viewer_manager, query)\n self.search_worker.moveToThread(self.search_thread)\n\n # Connect signals and slots\n self.search_worker.search_finished.connect(self.handle_search_results)\n self.search_thread.started.connect(self.search_worker.run)\n self.search_thread.finished.connect(self.cleanup_thread_resources)\n\n # Start the thread\n self.search_thread.start()\n\n def cleanup_thread_resources(self):\n # Ensure safe cleanup by checking the existence of resources before deleting\n if hasattr(self, 'search_worker'):\n self.search_worker.deleteLater()\n del self.search_worker\n if hasattr(self, 'search_thread'):\n self.search_thread.deleteLater()\n del self.search_thread\n\n def closeEvent(self, event):\n if hasattr(self, 'search_thread') and self.search_thread.isRunning():\n self.search_thread.quit()\n self.search_thread.wait()\n super().closeEvent(event)\n\n def handle_search_results(self, matches):\n self.search_results_widget.clear() # Clear previous results\n if matches:\n for match in matches:\n address = f\"0x{match * 16:08x}\" # Calculate the address from line number\n self.search_results_widget.addItem(f\"Address: {address}\")\n\n # Show the search results frame and resize the splitter to allocate more space to results\n self.search_results_frame.setVisible(True)\n self.splitter.setSizes([self.width() * 0.6, self.width() * 0.4]) # Adjust sizes dynamically\n\n else:\n QMessageBox.warning(self, \"Search Result\", \"No matches found.\")\n # Even if no matches are found, the search results frame will still be shown\n self.splitter.setSizes([self.width() * 0.75, self.width() * 0.25])\n\n def navigate_to_address(self, address):\n try:\n # Convert the address string back to an integer\n address_int = int(address, 16)\n\n # Determine the line number from the address\n line = address_int // 16\n\n # The rest of the logic remains the same\n self.current_page = line // self.hex_viewer_manager.LINES_PER_PAGE\n self.display_current_page()\n\n # Navigate to the specific row on that page and highlight it\n row_in_page = line % self.hex_viewer_manager.LINES_PER_PAGE\n self.hex_table.selectRow(row_in_page)\n for col in range(1, 17):\n item = self.hex_table.item(row_in_page, col)\n if item:\n item.setBackground(Qt.yellow)\n self.update_navigation_states()\n except ValueError:\n QMessageBox.warning(self, \"Navigation Error\", \"Invalid address.\")\n"
},
{
"path": "modules/mainwindow.py",
"content": "import configparser\nimport hashlib\nimport os\nimport datetime\nimport pyewf\nimport pytsk3\nimport tempfile\nimport gc\nimport time\nimport logging\nimport re\nfrom typing import Optional, Dict, Any, List, Tuple\nfrom Registry import Registry\nfrom sqlite3 import connect as sqlite3_connect\nimport subprocess\nimport platform\nfrom contextlib import contextmanager\nfrom functools import lru_cache\nfrom PySide6.QtCore import Qt, QSize, QThread, Signal, QTimer, QMargins\nfrom PySide6.QtGui import QIcon, QFont, QPalette, QBrush, QAction, QActionGroup, QPixmap, QPainter, QColor\nfrom PySide6.QtCharts import QChart, QChartView, QPieSeries, QPieSlice\nfrom PySide6.QtWidgets import (QMainWindow, QMenuBar, QMenu, QToolBar, QDockWidget, QTreeWidget, QTabWidget,\n QFileDialog, QTreeWidgetItem, QTableWidget, QMessageBox, QTableWidgetItem,\n QDialog, QVBoxLayout, QHBoxLayout, QInputDialog, QDialogButtonBox, QHeaderView, QLabel, QLineEdit,\n QFormLayout, QApplication, QWidget, QProgressDialog, QSizePolicy, QGroupBox,\n QCheckBox, QGridLayout, QScrollArea, QPushButton, QToolButton)\n\nfrom modules.about import AboutDialog\nfrom modules.converter import Main\nfrom modules.exif_tab import ExifViewer\nfrom modules.file_carving import FileCarvingWidget\nfrom modules.hex_tab import HexViewer\nfrom modules.metadata_tab import MetadataViewer\nfrom modules.registry import RegistryExtractor\nfrom modules.text_tab import TextViewer\nfrom modules.unified_application_manager import UnifiedViewer\nfrom modules.verification import VerificationWidget\nfrom modules.veriphone_api import VeriphoneWidget\nfrom modules.virus_total_tab import VirusTotal\n\nSECTOR_SIZE = 512\nCHUNK_SIZE = 4 * 1024 * 1024 # 4MB chunks for processing\nFILE_BUFFER_SIZE = 4096 # 4KB for file operations\n\n# ==================== CONFIGURATION CONSTANTS ====================\n# Logger setup\nlogger = logging.getLogger('TRACE.MainWindow')\n\n# Window dimensions\nDEFAULT_WINDOW_WIDTH = 1200\nDEFAULT_WINDOW_HEIGHT = 800\nDEFAULT_WINDOW_X = 100\nDEFAULT_WINDOW_Y = 100\n\n# Dock sizes\nVIEWER_DOCK_MIN_HEIGHT = 222\nVIEWER_DOCK_MAX_WIDTH = 1200\nVIEWER_DOCK_MAX_SIZE = 16777215 # Qt maximum size value\n\n# Column widths for listing table\nCOLUMN_WIDTHS = {\n 'name': 400, # Widest - file names can be long\n 'inode': 50, # Compact - numbers don't vary much\n 'type': 50, # Compact - short text like \"File\", \"Dir\"\n 'size': 100, # Compact - formatted sizes\n 'created': 160, # Narrower - timestamps are consistent length\n 'accessed': 160, # Narrower - timestamps are consistent length\n 'modified': 160, # Narrower - timestamps are consistent length\n 'changed': 160, # Narrower - timestamps are consistent length\n 'path': 1100 # Wide - paths can be long\n}\n\n# Progress dialog settings\nPROGRESS_DIALOG_WIDTH = 300\n\n# Timeouts (in seconds)\nMOUNT_TIMEOUT = 30\nINFO_TIMEOUT = 10\nPROCESS_TIMEOUT = 30\nTHREAD_SLEEP_MS = 1000 # milliseconds\n\n# Minimum duration for progress dialog (milliseconds)\nPROGRESS_MIN_DURATION = 1500\n\n# Icon size\nTREE_ICON_SIZE = 16\nTABLE_ICON_SIZE = 24\nTOOLBAR_ICON_SIZE = 16\n\n# Table settings\nTABLE_COLUMN_COUNT = 9\nTABLE_BATCH_SIZE = 200 # Number of rows to process before updating UI\n\n# Input field settings\nINPUT_FIELD_MIN_WIDTH = 400\nAPI_DIALOG_WIDTH = 600\n\n# Qt maximum size constant\nQT_MAX_SIZE = 16777215\n# ================================================================\n\n\n# Define a utility function for safe datetime conversion\ndef safe_datetime(timestamp):\n if timestamp is None or timestamp == 0:\n return \"N/A\"\n try:\n return datetime.datetime.utcfromtimestamp(timestamp).strftime('%Y-%m-%d %H:%M:%S') + \" UTC\"\n except Exception:\n return \"N/A\"\n\n\n# Utility class for common operations\nclass FileSystemUtils:\n @staticmethod\n def get_readable_size(size_in_bytes):\n \"\"\"Convert bytes to a human-readable string (e.g., KB, MB, GB, TB).\"\"\"\n if size_in_bytes is None:\n return \"0 B\"\n\n for unit in ['B', 'KB', 'MB', 'GB', 'TB']:\n if size_in_bytes < 1024.0:\n return f\"{size_in_bytes:.2f} {unit}\"\n size_in_bytes /= 1024.0\n return f\"{size_in_bytes:.2f} PB\"\n\n @staticmethod\n @contextmanager\n def temp_file():\n \"\"\"Context manager for temporary files, ensuring cleanup.\"\"\"\n temp_path = None\n try:\n with tempfile.NamedTemporaryFile(delete=False) as temp:\n temp_path = temp.name\n yield temp_path\n finally:\n if temp_path and os.path.exists(temp_path):\n os.remove(temp_path)\n\n\n# Class to handle EWF images\nclass EWFImgInfo(pytsk3.Img_Info):\n def __init__(self, ewf_handle):\n self._ewf_handle = ewf_handle\n super(EWFImgInfo, self).__init__(url=\"\", type=pytsk3.TSK_IMG_TYPE_EXTERNAL)\n\n def close(self):\n self._ewf_handle.close()\n\n def read(self, offset, size):\n self._ewf_handle.seek(offset)\n return self._ewf_handle.read(size)\n\n def get_size(self):\n return self._ewf_handle.get_media_size()\n\n\n# ImageHandler class with optimizations\nclass ImageHandler:\n def __init__(self, image_path):\n self.image_path = image_path\n self.img_info = None\n self.volume_info = None\n self.fs_info_cache = {}\n self.fs_info = None\n self.is_wiped_image = False\n self._directory_cache = {} # Cache for directory contents\n self._partition_cache = None # Cache for partitions\n\n # Load the image with progress tracking\n self.load_image()\n\n def __del__(self):\n \"\"\"Cleanup resources when the object is destroyed.\"\"\"\n self.close_resources()\n\n def close_resources(self):\n \"\"\"Explicitly close all open resources.\"\"\"\n # Close filesystem objects\n for fs_info in self.fs_info_cache.values():\n if hasattr(fs_info, 'close'):\n try:\n fs_info.close()\n except:\n pass\n\n # Close the image\n if self.img_info:\n if hasattr(self.img_info, 'close'):\n try:\n self.img_info.close()\n except:\n pass\n self.img_info = None\n\n # Clear caches\n self.fs_info_cache.clear()\n self._directory_cache.clear()\n\n def get_size(self):\n \"\"\"Returns the size of the disk image.\"\"\"\n if self.img_info:\n return self.img_info.get_size()\n else:\n raise AttributeError(\"Image not loaded or unsupported format.\")\n\n def read(self, offset, size):\n \"\"\"Reads data from the image starting at `offset` for `size` bytes.\"\"\"\n if self.img_info and hasattr(self.img_info, 'read'):\n return self.img_info.read(offset, size)\n else:\n raise NotImplementedError(\"The image format does not support direct reading.\")\n\n def build_allocation_map(self, start_offset):\n \"\"\"Build a map of allocated disk regions by traversing the filesystem.\"\"\"\n allocation_map = []\n\n try:\n fs_info = self.get_fs_info(start_offset)\n if not fs_info:\n logger.warning(f\"Unable to get filesystem info for offset {start_offset}\")\n return allocation_map\n\n # Get block size for this filesystem\n block_size = fs_info.info.block_size\n\n # Recursively walk filesystem to find all allocated files\n def walk_directory(directory, path=\"/\"):\n \"\"\"Recursively walk directory and collect allocated file ranges.\"\"\"\n try:\n for entry in directory:\n # Skip current and parent directory entries\n if not hasattr(entry, 'info') or not hasattr(entry.info, 'name'):\n continue\n\n name = entry.info.name.name.decode('utf-8', errors='ignore')\n if name in [\".\", \"..\"]:\n continue\n\n # Check if this is an allocated file\n if not hasattr(entry.info, 'meta') or entry.info.meta is None:\n continue\n\n # Only process allocated files (skip deleted files)\n is_allocated = bool(int(entry.info.meta.flags) & pytsk3.TSK_FS_META_FLAG_ALLOC)\n if not is_allocated:\n continue\n\n # Get file size and inode\n file_size = entry.info.meta.size\n\n # Only process files with actual data\n if file_size > 0:\n try:\n # Open the file to access its data runs\n file_obj = fs_info.open_meta(inode=entry.info.meta.addr)\n\n # Calculate byte offsets for the file's data\n # This is approximate - we use the file's logical position\n # For a more accurate map, we'd need to walk data runs\n # but this is a reasonable approximation for most filesystems\n\n # Get partition offset in bytes\n partition_offset_bytes = start_offset * 512\n\n # For simplicity, we'll mark regions based on inode metadata\n # A more sophisticated approach would walk TSK_FS_BLOCK structures\n # but pytsk3 doesn't expose block_walk easily\n\n # Estimate file location based on inode number and size\n # This is a simplified approach - actual blocks may be fragmented\n inode_addr = entry.info.meta.addr\n estimated_start = partition_offset_bytes + (inode_addr * block_size)\n estimated_end = estimated_start + file_size\n\n allocation_map.append((estimated_start, estimated_end))\n\n except Exception as e:\n # Skip files we can't open\n logger.debug(f\"Could not process file {path}{name}: {e}\")\n pass\n\n # Recursively process directories\n if entry.info.meta.type == pytsk3.TSK_FS_META_TYPE_DIR:\n try:\n sub_directory = fs_info.open_dir(inode=entry.info.meta.addr)\n walk_directory(sub_directory, f\"{path}{name}/\")\n except Exception as e:\n logger.debug(f\"Could not open directory {path}{name}: {e}\")\n pass\n\n except Exception as e:\n logger.debug(f\"Error walking directory {path}: {e}\")\n pass\n\n # Start walking from root directory\n try:\n root_dir = fs_info.open_dir(path=\"/\")\n walk_directory(root_dir)\n except Exception as e:\n logger.error(f\"Error accessing root directory: {e}\")\n\n # Sort allocation map by start offset for efficient searching\n allocation_map.sort(key=lambda x: x[0])\n\n logger.info(f\"Built allocation map with {len(allocation_map)} allocated file regions\")\n\n except Exception as e:\n logger.error(f\"Error building allocation map: {e}\")\n\n return allocation_map\n\n def get_image_type(self):\n \"\"\"Determine the type of the image based on its extension.\"\"\"\n _, extension = os.path.splitext(self.image_path)\n extension = extension.lower()\n\n ewf = [\".e01\", \".s01\", \".l01\", \".ex01\"]\n raw = [\".raw\", \".img\", \".dd\", \".iso\",\n \".ad1\", \".001\", \".dmg\", \".sparse\",\n \".sparseimage\"]\n\n if extension in ewf:\n return \"ewf\"\n elif extension in raw:\n return \"raw\"\n else:\n raise ValueError(f\"Unsupported image type: {extension}\")\n\n def calculate_hashes(self, progress_callback=None):\n \"\"\"Calculate the MD5, SHA1, and SHA256 hashes for the image with progress reporting.\"\"\"\n hash_md5 = hashlib.md5()\n hash_sha1 = hashlib.sha1()\n hash_sha256 = hashlib.sha256()\n size = 0\n total_size = 0\n stored_md5, stored_sha1 = None, None\n\n image_type = self.get_image_type()\n\n try:\n # First get total size for progress reporting\n if image_type == \"ewf\":\n filenames = pyewf.glob(self.image_path)\n ewf_handle = pyewf.handle()\n try:\n ewf_handle.open(filenames)\n total_size = ewf_handle.get_media_size()\n\n try:\n # Attempt to retrieve the stored hash values\n stored_md5 = ewf_handle.get_hash_value(\"MD5\")\n stored_sha1 = ewf_handle.get_hash_value(\"SHA1\")\n except Exception as e:\n logger.warning(f\"Unable to retrieve stored hash values: {e}\")\n\n # Calculate hashes in chunks\n while True:\n chunk = ewf_handle.read(CHUNK_SIZE)\n if not chunk:\n break\n\n hash_md5.update(chunk)\n hash_sha1.update(chunk)\n hash_sha256.update(chunk)\n size += len(chunk)\n\n # Report progress safely\n if progress_callback and total_size > 0:\n try:\n progress_callback(size, total_size)\n except Exception as e:\n logger.error(f\"Progress callback error: {e}\")\n finally:\n ewf_handle.close()\n\n elif image_type == \"raw\":\n try:\n total_size = os.path.getsize(self.image_path)\n with open(self.image_path, \"rb\") as f:\n while True:\n chunk = f.read(CHUNK_SIZE)\n if not chunk:\n break\n\n hash_md5.update(chunk)\n hash_sha1.update(chunk)\n hash_sha256.update(chunk)\n size += len(chunk)\n\n # Report progress safely\n if progress_callback and total_size > 0:\n try:\n progress_callback(size, total_size)\n except Exception as e:\n logger.error(f\"Progress callback error: {e}\")\n except Exception as e:\n logger.error(f\"Error reading raw image: {e}\")\n\n # Compile the computed and stored hashes in a dictionary\n hashes = {\n 'computed_md5': hash_md5.hexdigest(),\n 'computed_sha1': hash_sha1.hexdigest(),\n 'computed_sha256': hash_sha256.hexdigest(),\n 'size': size,\n 'path': self.image_path,\n 'stored_md5': stored_md5,\n 'stored_sha1': stored_sha1\n }\n\n return hashes\n except Exception as e:\n logger.error(f\"Error calculating hashes: {e}\")\n return {\n 'computed_md5': 'Error',\n 'computed_sha1': 'Error',\n 'computed_sha256': 'Error',\n 'size': 0,\n 'path': self.image_path,\n 'stored_md5': None,\n 'stored_sha1': None,\n 'error': str(e)\n }\n\n def load_image(self):\n \"\"\"Load the image and retrieve volume and filesystem information.\"\"\"\n image_type = self.get_image_type()\n\n try:\n if image_type == \"ewf\":\n filenames = pyewf.glob(self.image_path)\n ewf_handle = pyewf.handle()\n ewf_handle.open(filenames)\n self.img_info = EWFImgInfo(ewf_handle)\n elif image_type == \"raw\":\n self.img_info = pytsk3.Img_Info(self.image_path)\n else:\n raise ValueError(f\"Unsupported image type: {image_type}\")\n\n try:\n self.volume_info = pytsk3.Volume_Info(self.img_info)\n except Exception:\n self.volume_info = None\n # Attempt to detect a filesystem directly if no volume info\n try:\n self.fs_info = pytsk3.FS_Info(self.img_info)\n except Exception:\n self.fs_info = None\n # If no volume info and no filesystem, mark as wiped\n self.is_wiped_image = True\n except Exception as e:\n logger.error(f\"Error loading image: {e}\")\n self.img_info = None\n self.volume_info = None\n self.fs_info = None\n self.is_wiped_image = True\n\n def has_filesystem(self, start_offset):\n fs_info = self.get_fs_info(start_offset)\n return fs_info is not None\n\n def is_wiped(self):\n # Image is considered wiped if no volume info, no filesystem detected\n return self.is_wiped_image\n\n @property\n def partitions(self):\n \"\"\"Get partitions with caching.\"\"\"\n if self._partition_cache is None:\n self._partition_cache = self._get_partitions()\n return self._partition_cache\n\n def get_partitions(self):\n \"\"\"Retrieve partitions from the loaded image, or indicate unpartitioned space.\"\"\"\n return self.partitions\n\n def _get_partitions(self):\n \"\"\"Internal method to actually retrieve partitions.\"\"\"\n partitions = []\n if self.volume_info:\n for partition in self.volume_info:\n if not partition.desc:\n continue\n partitions.append((partition.addr, partition.desc, partition.start, partition.len))\n return partitions\n\n @lru_cache(maxsize=32)\n def get_fs_info(self, start_offset):\n \"\"\"Retrieve the FS_Info for a partition, initializing it if necessary.\"\"\"\n if start_offset not in self.fs_info_cache:\n try:\n fs_info = pytsk3.FS_Info(self.img_info, offset=start_offset * 512)\n self.fs_info_cache[start_offset] = fs_info\n except Exception as e:\n return None\n return self.fs_info_cache[start_offset]\n\n @lru_cache(maxsize=32)\n def get_fs_type(self, start_offset):\n \"\"\"Retrieve the file system type for a partition.\"\"\"\n try:\n fs_type = self.get_fs_info(start_offset).info.ftype\n\n # Map the file system type to its name\n fs_type_map = {\n pytsk3.TSK_FS_TYPE_NTFS: \"NTFS\",\n pytsk3.TSK_FS_TYPE_FAT12: \"FAT12\",\n pytsk3.TSK_FS_TYPE_FAT16: \"FAT16\",\n pytsk3.TSK_FS_TYPE_FAT32: \"FAT32\",\n pytsk3.TSK_FS_TYPE_EXFAT: \"ExFAT\",\n pytsk3.TSK_FS_TYPE_EXT2: \"Ext2\",\n pytsk3.TSK_FS_TYPE_EXT3: \"Ext3\",\n pytsk3.TSK_FS_TYPE_EXT4: \"Ext4\",\n pytsk3.TSK_FS_TYPE_ISO9660: \"ISO9660\",\n pytsk3.TSK_FS_TYPE_HFS: \"HFS\",\n pytsk3.TSK_FS_TYPE_APFS: \"APFS\"\n }\n\n return fs_type_map.get(fs_type, \"Unknown\")\n except Exception as e:\n return \"N/A\"\n\n def check_partition_contents(self, partition_start_offset):\n \"\"\"Check if a partition has any files or folders.\"\"\"\n fs = self.get_fs_info(partition_start_offset)\n if fs:\n try:\n root_dir = fs.open_dir(path=\"/\")\n for _ in root_dir:\n return True\n return False\n except:\n return False\n return False\n\n def get_directory_contents(self, start_offset, inode_number=None):\n \"\"\"Get directory contents with caching for performance.\"\"\"\n cache_key = f\"{start_offset}_{inode_number}\"\n\n # Check if we have this directory in our cache\n if cache_key in self._directory_cache:\n return self._directory_cache[cache_key]\n\n fs = self.get_fs_info(start_offset)\n if fs:\n try:\n directory = fs.open_dir(inode=inode_number) if inode_number else fs.open_dir(path=\"/\")\n entries = []\n\n for entry in directory:\n if entry.info.name.name in [b\".\", b\"..\"]:\n continue\n\n is_directory = False\n if entry.info.meta and entry.info.meta.type == pytsk3.TSK_FS_META_TYPE_DIR:\n is_directory = True\n\n entries.append({\n \"name\": entry.info.name.name.decode('utf-8', errors='replace') if hasattr(entry.info.name,\n 'name') else None,\n \"is_directory\": is_directory,\n \"inode_number\": entry.info.meta.addr if entry.info.meta else None,\n \"size\": entry.info.meta.size if entry.info.meta and entry.info.meta.size is not None else 0,\n \"accessed\": safe_datetime(entry.info.meta.atime) if hasattr(entry.info.meta,\n 'atime') else \"N/A\",\n \"modified\": safe_datetime(entry.info.meta.mtime) if hasattr(entry.info.meta,\n 'mtime') else \"N/A\",\n \"created\": safe_datetime(entry.info.meta.crtime) if hasattr(entry.info.meta,\n 'crtime') else \"N/A\",\n \"changed\": safe_datetime(entry.info.meta.ctime) if hasattr(entry.info.meta, 'ctime') else \"N/A\",\n })\n\n # Cache results\n self._directory_cache[cache_key] = entries\n return entries\n\n except Exception as e:\n # Log the exception for debugging purposes\n logger.error(f\"Error in get_directory_contents: {e}\")\n return []\n return []\n\n def get_registry_hive(self, fs_info, hive_path):\n \"\"\"Extract a registry hive from the given filesystem.\"\"\"\n try:\n registry_file = fs_info.open(hive_path)\n hive_data = registry_file.read_random(0, registry_file.info.meta.size)\n return hive_data\n except Exception as e:\n logger.error(f\"Error reading registry hive: {e}\")\n return None\n\n def get_windows_version(self, start_offset):\n \"\"\"Get the Windows version from the SOFTWARE registry hive.\"\"\"\n fs_info = self.get_fs_info(start_offset)\n if not fs_info:\n return None\n\n # if file system is not ntfs, return unknown OS and exit the function\n if self.get_fs_type(start_offset) != \"NTFS\":\n return None\n\n software_hive_data = self.get_registry_hive(fs_info, \"/Windows/System32/config/SOFTWARE\")\n\n if not software_hive_data:\n return None\n\n # Use a context manager to handle the temporary file\n with FileSystemUtils.temp_file() as temp_hive_path:\n try:\n with open(temp_hive_path, 'wb') as temp_hive:\n temp_hive.write(software_hive_data)\n\n reg = Registry.Registry(temp_hive_path)\n key = reg.open(\"Microsoft\\\\Windows NT\\\\CurrentVersion\")\n\n # Helper function to safely get registry values\n def get_reg_value(reg_key, value_name):\n try:\n return reg_key.value(value_name).value()\n except Registry.RegistryValueNotFoundException:\n return \"N/A\"\n\n # Fetching registry values\n product_name = get_reg_value(key, \"ProductName\")\n current_version = get_reg_value(key, \"CurrentVersion\")\n current_build = get_reg_value(key, \"CurrentBuild\")\n registered_owner = get_reg_value(key, \"RegisteredOwner\")\n csd_version = get_reg_value(key, \"CSDVersion\")\n product_id = get_reg_value(key, \"ProductId\")\n\n return f\"{product_name} Version {current_version}\\nBuild {current_build} {csd_version}\\nOwner: {registered_owner}\\nProduct ID: {product_id}\"\n\n except Exception as e:\n logger.error(f\"Error parsing SOFTWARE hive: {e}\")\n return \"Error in parsing OS version\"\n\n def read_unallocated_space(self, start_offset, end_offset):\n try:\n start_byte_offset = start_offset * SECTOR_SIZE\n end_byte_offset = max(end_offset * SECTOR_SIZE, start_byte_offset + SECTOR_SIZE - 1)\n size_in_bytes = end_byte_offset - start_byte_offset + 1 # Ensuring at least some data is read\n\n if size_in_bytes <= 0:\n logger.warning(\"Invalid size for unallocated space, adjusting to read at least one sector.\")\n size_in_bytes = SECTOR_SIZE # Adjust to read at least one sector\n\n # For large blocks, read in chunks instead of all at once\n if size_in_bytes > CHUNK_SIZE:\n chunks = []\n for offset in range(start_byte_offset, end_byte_offset, CHUNK_SIZE):\n remaining = min(CHUNK_SIZE, end_byte_offset - offset + 1)\n chunk = self.img_info.read(offset, remaining)\n if not chunk:\n break\n chunks.append(chunk)\n\n if not chunks:\n return None\n\n return b''.join(chunks)\n else:\n unallocated_space = self.img_info.read(start_byte_offset, size_in_bytes)\n if unallocated_space is None or len(unallocated_space) == 0:\n logger.error(f\"Failed to read unallocated space from offset {start_byte_offset} to {end_byte_offset}\")\n return None\n return unallocated_space\n\n except Exception as e:\n logger.error(f\"Error reading unallocated space: {e}\")\n return None\n\n def open_image(self):\n if self.get_image_type() == \"ewf\":\n filenames = pyewf.glob(self.image_path)\n ewf_handle = pyewf.handle()\n ewf_handle.open(filenames)\n return EWFImgInfo(ewf_handle)\n else:\n return pytsk3.Img_Info(self.image_path)\n\n def list_files(self, extensions=None):\n \"\"\"Get a list of all files with given extensions.\"\"\"\n files_list = []\n img_info = self.open_image()\n\n try:\n volume_info = pytsk3.Volume_Info(img_info)\n for partition in volume_info:\n if partition.flags == pytsk3.TSK_VS_PART_FLAG_ALLOC:\n # Store offset in SECTORS (not bytes)\n self.process_partition(img_info, partition.start, files_list, extensions)\n except IOError:\n self.process_partition(img_info, 0, files_list, extensions)\n\n return files_list\n\n def process_partition(self, img_info, offset_sectors, files_list, extensions):\n \"\"\"Process partition listing - offset_sectors is in sectors, not bytes.\"\"\"\n try:\n fs_info = pytsk3.FS_Info(img_info, offset=offset_sectors * SECTOR_SIZE)\n self._recursive_file_search(fs_info, fs_info.open_dir(path=\"/\"), \"/\", files_list, extensions, None, offset_sectors)\n except IOError as e:\n logger.error(f\"Unable to open filesystem at offset {offset_sectors}: {e}\")\n\n def _recursive_file_search(self, fs_info, directory, parent_path, files_list, extensions, search_query=None, start_offset=0):\n \"\"\"Recursively search for files in a directory.\"\"\"\n for entry in directory:\n if entry.info.name.name in [b\".\", b\"..\"]:\n continue\n\n try:\n file_name = entry.info.name.name.decode(\"utf-8\", errors='replace')\n file_extension = os.path.splitext(file_name)[1].lower()\n\n # Determine if this entry should be included in results\n is_directory = entry.info.meta and entry.info.meta.type == pytsk3.TSK_FS_META_TYPE_DIR\n\n if search_query:\n # If there's a search query, check if the file name contains the query\n if search_query.startswith('.'):\n # If the search query is an extension (e.g., '.jpg')\n query_matches = file_extension == search_query.lower()\n match_reason = f\"extension matches '{search_query}'\" if query_matches else \"\"\n else:\n # If the search query is a file name or part of it (SUBSTRING MATCH)\n query_matches = search_query.lower() in file_name.lower()\n match_reason = f\"filename contains '{search_query}'\" if query_matches else \"\"\n else:\n # If no search query, handle based on extensions\n if is_directory:\n # Always include directories when no search query (for navigation)\n query_matches = True\n match_reason = \"directory (no filter)\"\n else:\n # For files, apply extension filter\n query_matches = extensions is None or file_extension in extensions or '' in extensions\n match_reason = \"extension filter\"\n\n if is_directory:\n # If directory matches search query, add it to results\n if query_matches:\n dir_info = self._get_directory_metadata(entry, parent_path, start_offset)\n files_list.append(dir_info)\n if logger.isEnabledFor(logging.DEBUG):\n logger.debug(f\"MATCH (DIR): '{file_name}' - {match_reason}\")\n\n # Recursively search subdirectory\n try:\n sub_directory = fs_info.open_dir(inode=entry.info.meta.addr)\n self._recursive_file_search(fs_info, sub_directory, os.path.join(parent_path, file_name),\n files_list,\n extensions, search_query, start_offset)\n except IOError as e:\n logger.error(f\"Unable to open directory: {e}\")\n\n elif entry.info.meta and entry.info.meta.type == pytsk3.TSK_FS_META_TYPE_REG and query_matches:\n file_info = self._get_file_metadata(entry, parent_path, start_offset)\n files_list.append(file_info)\n if logger.isEnabledFor(logging.DEBUG):\n logger.debug(f\"MATCH (FILE): '{file_name}' - {match_reason}\")\n except UnicodeDecodeError:\n continue # Skip entries with encoding issues\n\n def _get_directory_metadata(self, entry, parent_path, start_offset=0):\n \"\"\"Get directory metadata for search results.\"\"\"\n try:\n dir_name = entry.info.name.name.decode(\"utf-8\", errors='replace')\n inode_number = entry.info.meta.addr if entry.info.meta else 0\n\n # Get volume name for this offset\n volume_name = self._get_volume_name_for_offset(start_offset)\n # Create full path with volume information\n full_path = f\"{volume_name}:{os.path.join(parent_path, dir_name)}\"\n\n return {\n \"name\": dir_name,\n \"path\": full_path,\n \"size\": 0, # Directories don't have a size in this context\n \"accessed\": safe_datetime(entry.info.meta.atime if entry.info.meta else None),\n \"modified\": safe_datetime(entry.info.meta.mtime if entry.info.meta else None),\n \"created\": safe_datetime(entry.info.meta.crtime if hasattr(entry.info.meta, 'crtime') else None),\n \"changed\": safe_datetime(entry.info.meta.ctime if entry.info.meta else None),\n \"inode_item\": str(inode_number),\n \"inode_number\": inode_number,\n \"start_offset\": start_offset,\n \"is_directory\": True, # Mark as directory\n \"type\": \"directory\"\n }\n except Exception as e:\n logger.error(f\"Error getting directory metadata: {e}\")\n return {\n \"name\": \"Error reading directory\",\n \"path\": parent_path + \"/unknown\",\n \"size\": 0,\n \"accessed\": \"N/A\",\n \"modified\": \"N/A\",\n \"created\": \"N/A\",\n \"changed\": \"N/A\",\n \"inode_item\": \"0\",\n \"inode_number\": 0,\n \"start_offset\": start_offset,\n \"is_directory\": True,\n \"type\": \"directory\"\n }\n\n def _get_volume_name_for_offset(self, start_offset):\n \"\"\"Get the volume name (e.g., 'vol0', 'vol1') for a given partition offset.\"\"\"\n try:\n partitions = self.get_partitions()\n for addr, desc, start, length in partitions:\n if start == start_offset:\n return f\"vol{addr}\"\n # If not found in partitions, it might be a single filesystem image\n return \"vol0\"\n except Exception as e:\n logger.warning(f\"Could not determine volume name for offset {start_offset}: {e}\")\n return \"vol0\"\n\n def _get_file_metadata(self, entry, parent_path, start_offset=0):\n \"\"\"Get file metadata including all fields needed for viewing.\"\"\"\n try:\n file_name = entry.info.name.name.decode(\"utf-8\", errors='replace')\n inode_number = entry.info.meta.addr if entry.info.meta else 0\n\n # Get volume name for this offset\n volume_name = self._get_volume_name_for_offset(start_offset)\n # Create full path with volume information\n full_path = f\"{volume_name}:{os.path.join(parent_path, file_name)}\"\n\n return {\n \"name\": file_name,\n \"path\": full_path, # Now includes volume information\n \"size\": entry.info.meta.size if entry.info.meta else 0,\n \"accessed\": safe_datetime(entry.info.meta.atime if entry.info.meta else None),\n \"modified\": safe_datetime(entry.info.meta.mtime if entry.info.meta else None),\n \"created\": safe_datetime(entry.info.meta.crtime if hasattr(entry.info.meta, 'crtime') else None),\n \"changed\": safe_datetime(entry.info.meta.ctime if entry.info.meta else None),\n \"inode_item\": str(inode_number), # For display compatibility\n \"inode_number\": inode_number, # For file content retrieval\n \"start_offset\": start_offset, # Partition offset needed for retrieval\n \"is_directory\": False, # This method only called for files\n \"type\": \"file\" # For compatibility with viewer logic\n }\n except Exception as e:\n logger.error(f\"Error getting file metadata: {e}\")\n # Return basic info when we encounter errors\n return {\n \"name\": \"Error reading file\",\n \"path\": parent_path + \"/unknown\",\n \"size\": 0,\n \"accessed\": \"N/A\",\n \"modified\": \"N/A\",\n \"created\": \"N/A\",\n \"changed\": \"N/A\",\n \"inode_item\": \"0\",\n \"inode_number\": 0,\n \"start_offset\": start_offset,\n \"is_directory\": False,\n \"type\": \"file\"\n }\n\n def search_files(self, search_query=None):\n logger.info(f\"ImageHandler.search_files called with query: '{search_query}'\")\n files_list = []\n img_info = self.open_image()\n\n try:\n volume_info = pytsk3.Volume_Info(img_info)\n partition_count = 0\n for partition in volume_info:\n if partition.flags == pytsk3.TSK_VS_PART_FLAG_ALLOC:\n partition_count += 1\n logger.info(f\"Searching partition {partition_count} (offset: {partition.start} sectors)\")\n # Store offset in SECTORS (not bytes) - get_fs_info will multiply by 512\n self.process_partition_search(img_info, partition.start, files_list, search_query)\n logger.info(f\"Searched {partition_count} allocated partitions\")\n except IOError as e:\n # No volume information, attempt to read as a single filesystem\n logger.info(f\"No volume info, reading as single filesystem: {e}\")\n self.process_partition_search(img_info, 0, files_list, search_query)\n\n logger.info(f\"Total files found: {len(files_list)}\")\n return files_list\n\n def process_partition_search(self, img_info, offset_sectors, files_list, search_query):\n \"\"\"Process partition search - offset_sectors is in sectors, not bytes.\"\"\"\n try:\n logger.info(f\"Opening filesystem at offset {offset_sectors} sectors ({offset_sectors * SECTOR_SIZE} bytes)\")\n fs_info = pytsk3.FS_Info(img_info, offset=offset_sectors * SECTOR_SIZE)\n logger.info(f\"Starting recursive search with query: '{search_query}'\")\n initial_count = len(files_list)\n self._recursive_file_search(fs_info, fs_info.open_dir(path=\"/\"), \"/\", files_list, None, search_query, offset_sectors)\n logger.info(f\"Recursive search complete. Found {len(files_list) - initial_count} files in this partition\")\n except IOError as e:\n logger.error(f\"Unable to open file system for search: {e}\")\n\n def get_file_content(self, inode_number, offset):\n fs = self.get_fs_info(offset)\n if not fs:\n return None, None\n\n try:\n file_obj = fs.open_meta(inode=inode_number)\n if file_obj.info.meta.size == 0:\n logger.info(\"File has no content or is a special metafile!\")\n return None, None\n\n # For large files, read in chunks\n file_size = file_obj.info.meta.size\n if file_size > CHUNK_SIZE:\n chunks = []\n for chunk_offset in range(0, file_size, CHUNK_SIZE):\n chunk_size = min(CHUNK_SIZE, file_size - chunk_offset)\n chunk = file_obj.read_random(chunk_offset, chunk_size)\n if not chunk:\n break\n chunks.append(chunk)\n content = b''.join(chunks)\n else:\n # Small file, read all at once\n content = file_obj.read_random(0, file_size)\n\n metadata = file_obj.info.meta # Collect the metadata\n return content, metadata\n\n except Exception as e:\n logger.error(f\"Error reading file: {e}\")\n return None, None\n\n # Replace static method assignment with an actual instance method\n def get_readable_size(self, size_in_bytes):\n \"\"\"Convert bytes to a human-readable string, wrapper for the static utility method.\"\"\"\n return FileSystemUtils.get_readable_size(size_in_bytes)\n\n\n# DatabaseManager class with optimization\nclass DatabaseManager:\n def __init__(self, db_path):\n self.db_path = db_path\n self.db_conn = None\n self._icon_cache = {} # Cache for icon paths\n self._connect()\n\n def _connect(self):\n \"\"\"Establish a connection to the database with proper error handling.\"\"\"\n try:\n self.db_conn = sqlite3_connect(self.db_path)\n # Enable foreign keys\n self.db_conn.execute(\"PRAGMA foreign_keys = ON\")\n except Exception as e:\n logger.error(f\"Error connecting to database: {e}\")\n self.db_conn = None\n\n def __del__(self):\n \"\"\"Ensure connection is closed when object is destroyed.\"\"\"\n self.close()\n\n def close(self):\n \"\"\"Explicitly close the database connection.\"\"\"\n if self.db_conn:\n try:\n self.db_conn.close()\n self.db_conn = None\n except Exception as e:\n logger.error(f\"Error closing database connection: {e}\")\n\n def get_icon_path(self, icon_type, identifier):\n \"\"\"Get icon path with caching for performance.\"\"\"\n # Check cache first\n cache_key = f\"{icon_type}_{identifier}\"\n if cache_key in self._icon_cache:\n return self._icon_cache[cache_key]\n\n if not self.db_conn:\n self._connect()\n if not self.db_conn:\n return 'Icons/mimetypes/application-x-zerosize.svg'\n\n try:\n c = self.db_conn.cursor()\n # First, try to get the icon for the specific identifier\n c.execute(\"SELECT path FROM icons WHERE type = ? AND extention = ?\", (icon_type, identifier))\n result = c.fetchone()\n\n # If a specific icon exists for the identifier, cache and return it\n if result:\n self._icon_cache[cache_key] = result[0]\n return result[0]\n\n # If no specific icon exists, check for default icons\n if icon_type == 'folder':\n c.execute(\"SELECT path FROM icons WHERE type = ? AND extention = 'folder'\", (icon_type,))\n result = c.fetchone()\n default_path = result[0] if result else 'Icons/mimetypes/application-x-zerosize.svg'\n else:\n # Try to find a generic icon for the file type first\n generic_key = f\"{icon_type}_generic\"\n if generic_key not in self._icon_cache:\n c.execute(\"SELECT path FROM icons WHERE type = ? AND extention = 'generic'\", (icon_type,))\n result = c.fetchone()\n self._icon_cache[generic_key] = result[\n 0] if result else 'Icons/mimetypes/application-x-zerosize.svg'\n\n default_path = self._icon_cache[generic_key]\n\n # Cache the result before returning\n self._icon_cache[cache_key] = default_path\n return default_path\n\n except Exception as e:\n logger.error(f\"Error fetching icon: {e}\")\n return 'Icons/mimetypes/application-x-zerosize.svg'\n finally:\n if 'c' in locals():\n c.close()\n\n\n# ImageManager class with optimizations\nclass ImageManager(QThread):\n operationCompleted = Signal(bool, str) # Signal to indicate operation completion\n showMessage = Signal(str, str) # Signal to show a message (Title, Content)\n progressUpdated = Signal(int) # Signal for progress updates\n\n def __init__(self):\n super().__init__()\n self.operation = None\n self.image_path = None\n self.file_name = None\n self.is_running = False\n self._process = None\n\n def __del__(self):\n self.cleanup_resources()\n\n def cleanup_resources(self):\n \"\"\"Clean up any resources used by the image mounting process.\"\"\"\n if self._process and hasattr(self._process, 'poll') and self._process.poll() is None:\n try:\n self._process.terminate()\n self._process = None\n except:\n pass\n\n def run(self):\n self.is_running = True\n system = platform.system()\n\n try:\n if self.operation == 'mount' and self.image_path:\n if system == 'Darwin': # macOS\n self._mount_image_macos()\n elif system == 'Linux': # Linux (including Kali)\n self._mount_image_linux()\n elif system == 'Windows': # Windows\n self._mount_image_windows()\n else:\n raise Exception(\"Unsupported Operating System\")\n elif self.operation == 'dismount':\n if system == 'Darwin':\n self._dismount_image_macos()\n elif system == 'Linux':\n self._dismount_image_linux()\n elif system == 'Windows':\n self._dismount_image_windows()\n else:\n raise Exception(\"Unsupported Operating System\")\n except Exception as e:\n self.operationCompleted.emit(False, f\"Failed to {self.operation} the image. Error: {e}\")\n finally:\n self.is_running = False\n\n def _mount_image_windows(self):\n \"\"\"Mount image on Windows using Arsenal Image Mounter.\"\"\"\n try:\n aim_path = 'tools/Arsenal-Image-Mounter-v3.10.257/aim_cli.exe'\n if not os.path.exists(aim_path):\n self.operationCompleted.emit(False, \"Arsenal Image Mounter not found. Please install it.\")\n return\n\n cmd = [\n aim_path,\n '--mount',\n '--readonly',\n f'--filename={self.image_path}'\n ]\n\n # Use subprocess.Popen with proper parameter checking\n self._process = subprocess.Popen(\n cmd,\n stdout=subprocess.PIPE,\n stderr=subprocess.PIPE,\n creationflags=subprocess.CREATE_NO_WINDOW if hasattr(subprocess, 'CREATE_NO_WINDOW') else 0\n )\n\n # Wait for the process to complete or timeout after 30 seconds\n try:\n stdout, stderr = self._process.communicate(timeout=MOUNT_TIMEOUT)\n if self._process.returncode != 0:\n error_msg = stderr.decode('utf-8', errors='replace')\n self.operationCompleted.emit(False, f\"Failed to mount the image: {error_msg}\")\n return\n self.operationCompleted.emit(True, f\"Image {self.file_name} mounted successfully.\")\n except subprocess.TimeoutExpired:\n # Process is taking too long, but this is sometimes normal for mounting\n # We'll assume it's working in the background\n self.operationCompleted.emit(True,\n f\"Image {self.file_name} mount initiated. Check Windows Disk Management.\")\n\n except Exception as e:\n self.operationCompleted.emit(False, f\"Failed to mount the image on Windows. Error: {e}\")\n\n def _mount_image_macos(self):\n \"\"\"Mount image on macOS using hdiutil.\"\"\"\n try:\n # Step 1: Attach the image without mounting it\n attach_cmd = [\n 'hdiutil', 'attach',\n '-imagekey', 'diskimage-class=CRawDiskImage',\n '-nomount', self.image_path\n ]\n\n attach_process = subprocess.Popen(\n attach_cmd,\n stdout=subprocess.PIPE,\n stderr=subprocess.STDOUT\n )\n\n # Wait with timeout\n try:\n attach_output, _ = attach_process.communicate(timeout=MOUNT_TIMEOUT)\n if attach_process.returncode != 0:\n self.operationCompleted.emit(False, f\"Failed to attach image: {attach_output.decode()}\")\n return\n except subprocess.TimeoutExpired:\n attach_process.kill()\n self.operationCompleted.emit(False, \"Attaching image timed out\")\n return\n\n attach_output = attach_output.decode().strip()\n\n # Step 2: Add a short delay to ensure the system has time to process the attachment\n QThread.msleep(THREAD_SLEEP_MS) # More reliable than time.sleep in a QThread\n\n # Step 3: Extract the disk identifier from the output\n lines = attach_output.splitlines()\n disk_identifier = None\n\n for line in lines:\n if line.startswith('/dev/disk'):\n disk_identifier = line.split()[0]\n break\n\n if not disk_identifier:\n self.operationCompleted.emit(False, \"Failed to find disk identifier after attaching the image.\")\n return\n\n # Step 4: Mount the disk using the identifier\n mount_cmd = ['hdiutil', 'mount', disk_identifier]\n mount_process = subprocess.Popen(\n mount_cmd,\n stdout=subprocess.PIPE,\n stderr=subprocess.STDOUT\n )\n\n try:\n mount_output, _ = mount_process.communicate(timeout=MOUNT_TIMEOUT)\n if mount_process.returncode != 0:\n self.operationCompleted.emit(False, f\"Failed to mount disk: {mount_output.decode()}\")\n return\n except subprocess.TimeoutExpired:\n mount_process.kill()\n self.operationCompleted.emit(False, \"Mounting timed out\")\n return\n\n mount_output = mount_output.decode().strip()\n\n # Step 5: Extract the mount point (e.g., /Volumes/LABEL2)\n lines = mount_output.splitlines()\n mount_point = None\n\n for line in lines:\n if line.startswith('/dev/') and '\\t' in line:\n mount_point = line.split('\\t')[1]\n break\n\n if mount_point:\n # Emit success with the mount point\n self.operationCompleted.emit(True, f\"Image {self.file_name} mounted successfully at {mount_point}.\")\n else:\n self.operationCompleted.emit(False, f\"Image {self.file_name} mounted, but no volumes were detected.\")\n\n except subprocess.CalledProcessError as e:\n self.operationCompleted.emit(False, f\"Failed to mount the image on macOS. Error: {e.output.decode()}\")\n except Exception as e:\n self.operationCompleted.emit(False, f\"Unexpected error mounting image: {str(e)}\")\n\n def _mount_image_linux(self):\n \"\"\"Mount image on Linux using appropriate tools.\"\"\"\n try:\n if self.image_path.lower().endswith('.e01'):\n # Use ewfmount for .e01 images\n ewf_mount_dir = '/mnt/ewf'\n\n # Create mount directory if it doesn't exist\n if not os.path.exists(ewf_mount_dir):\n os.makedirs(ewf_mount_dir, exist_ok=True)\n\n # Run ewfmount with proper error handling\n ewf_cmd = ['sudo', 'ewfmount', self.image_path, ewf_mount_dir]\n ewf_process = subprocess.run(ewf_cmd, check=True, capture_output=True, text=True)\n\n # Get the partition table info using fdisk\n fdisk_cmd = ['fdisk', '-l', os.path.join(ewf_mount_dir, 'ewf1')]\n fdisk_output = subprocess.check_output(fdisk_cmd, text=True)\n\n # Find the partition start sector\n partition_start_sector = None\n for line in fdisk_output.splitlines():\n if '/dev/' in line and not line.startswith('Disk '):\n # Assuming you want the first partition listed\n parts = line.split()\n if len(parts) > 1:\n try:\n partition_start_sector = int(parts[1])\n break\n except (ValueError, IndexError):\n continue\n\n if partition_start_sector is None:\n raise Exception(\"Failed to find partition start sector in the EWF image.\")\n\n # Calculate the byte offset\n byte_offset = partition_start_sector * 512\n\n # Mount the partition using the calculated offset\n mount_dir = '/mnt/disk_image'\n os.makedirs(mount_dir, exist_ok=True)\n\n mount_cmd = [\n 'sudo', 'mount', '-o',\n f'ro,loop,offset={byte_offset}',\n os.path.join(ewf_mount_dir, 'ewf1'),\n mount_dir\n ]\n\n mount_process = subprocess.run(mount_cmd, check=True, capture_output=True, text=True)\n\n else:\n # Use mount for .dd images and other raw formats\n mount_dir = '/mnt/disk_image'\n os.makedirs(mount_dir, exist_ok=True)\n\n mount_cmd = [\n 'sudo', 'mount', '-o', 'loop,ro',\n self.image_path, mount_dir\n ]\n\n mount_process = subprocess.run(mount_cmd, check=True, capture_output=True, text=True)\n\n self.operationCompleted.emit(True, f\"Image {self.file_name} mounted successfully.\")\n except subprocess.CalledProcessError as e:\n self.operationCompleted.emit(False, f\"Failed to mount the image on Linux. Error: {e.stderr}\")\n except Exception as e:\n self.operationCompleted.emit(False, f\"An unexpected error occurred: {str(e)}\")\n\n def _dismount_image_linux(self):\n \"\"\"Dismount image on Linux.\"\"\"\n try:\n # Attempt to unmount the disk image\n disk_cmd = ['sudo', 'umount', '/mnt/disk_image']\n ewf_cmd = ['sudo', 'umount', '/mnt/ewf']\n\n try:\n # Try to unmount disk image\n subprocess.run(disk_cmd, check=True, capture_output=True, text=True)\n except subprocess.CalledProcessError as e:\n logger.warning(f\"Could not unmount disk image: {e.stderr}\")\n\n try:\n # Try to unmount EWF\n subprocess.run(ewf_cmd, check=True, capture_output=True, text=True)\n except subprocess.CalledProcessError as e:\n logger.warning(f\"Could not unmount EWF: {e.stderr}\")\n\n self.operationCompleted.emit(True, \"Image was dismounted successfully.\")\n except Exception as e:\n self.operationCompleted.emit(False, f\"Failed to dismount the image on Linux. Error: {str(e)}\")\n\n def _dismount_image_macos(self):\n \"\"\"Dismount image on macOS using hdiutil.\"\"\"\n try:\n # Get the list of currently mounted disk images\n info_cmd = ['hdiutil', 'info']\n info_process = subprocess.Popen(\n info_cmd,\n stdout=subprocess.PIPE,\n stderr=subprocess.STDOUT\n )\n\n try:\n info_output, _ = info_process.communicate(timeout=INFO_TIMEOUT)\n if info_process.returncode != 0:\n self.operationCompleted.emit(False, f\"Failed to get mounted disks: {info_output.decode()}\")\n return\n except subprocess.TimeoutExpired:\n info_process.kill()\n self.operationCompleted.emit(False, \"Getting disk info timed out\")\n return\n\n info_output = info_output.decode()\n\n lines = info_output.splitlines()\n mounted_disks = []\n current_image_path = None\n\n # Parse the output to find the disk identifier for the given image path\n for line in lines:\n if 'image-path' in line:\n current_image_path = line.split(': ')[1].strip()\n elif line.startswith('/dev/disk') and current_image_path == self.image_path:\n disk_identifier = line.split()[0]\n mounted_disks.append(disk_identifier)\n current_image_path = None # Reset after finding the corresponding disk\n\n if not mounted_disks:\n # If we're not targeting a specific image, try to unmount all mounted disks\n if not self.image_path:\n for line in lines:\n if line.startswith('/dev/disk'):\n disk_identifier = line.split()[0]\n mounted_disks.append(disk_identifier)\n\n if not mounted_disks:\n self.operationCompleted.emit(False, \"No mounted images found.\")\n return\n\n # Attempt to dismount all found disk identifiers\n success = False\n errors = []\n\n for disk_identifier in mounted_disks:\n try:\n detach_cmd = ['hdiutil', 'detach', disk_identifier]\n detach_process = subprocess.run(detach_cmd, check=True, capture_output=True, text=True)\n success = True\n except subprocess.CalledProcessError:\n try:\n # If normal detach fails, attempt a forced detach\n force_detach_cmd = ['hdiutil', 'detach', '-force', disk_identifier]\n force_process = subprocess.run(force_detach_cmd, check=True, capture_output=True, text=True)\n success = True\n except subprocess.CalledProcessError as e:\n errors.append(f\"Failed to detach {disk_identifier}: {e.stderr}\")\n\n if success:\n self.operationCompleted.emit(True, \"Image was dismounted successfully.\")\n else:\n self.operationCompleted.emit(False, \"Failed to dismount all images: \" + \"; \".join(errors))\n\n except Exception as e:\n self.operationCompleted.emit(False, f\"Failed to dismount the image on macOS: {str(e)}\")\n\n def _dismount_image_windows(self):\n \"\"\"Dismount image on Windows using Arsenal Image Mounter.\"\"\"\n try:\n aim_path = 'tools/Arsenal-Image-Mounter-v3.10.257/aim_cli.exe'\n if not os.path.exists(aim_path):\n self.operationCompleted.emit(False, \"Arsenal Image Mounter not found. Please install it.\")\n return\n\n cmd = [aim_path, '--dismount']\n\n # Use subprocess.run with proper error handling\n process = subprocess.run(\n cmd,\n check=True,\n capture_output=True,\n text=True,\n creationflags=subprocess.CREATE_NO_WINDOW if hasattr(subprocess, 'CREATE_NO_WINDOW') else 0\n )\n\n self.operationCompleted.emit(True, \"Image was dismounted successfully.\")\n except subprocess.CalledProcessError as e:\n self.operationCompleted.emit(False, f\"Failed to dismount the image on Windows. Error: {e.stderr}\")\n except Exception as e:\n self.operationCompleted.emit(False, f\"Unexpected error dismounting image: {str(e)}\")\n\n def dismount_image(self):\n \"\"\"Attempt to dismount the currently mounted image.\"\"\"\n if self.is_running:\n self.showMessage.emit(\"Operation in Progress\", \"Please wait for the current operation to complete.\")\n return\n\n self.operation = 'dismount'\n self.start()\n\n def mount_image(self):\n \"\"\"Attempt to mount an image after prompting the user to select one.\"\"\"\n if self.is_running:\n self.showMessage.emit(\"Operation in Progress\", \"Please wait for the current operation to complete.\")\n return\n\n system = platform.system()\n\n if system == 'Darwin': # macOS\n # Only allow .raw and .dd files on macOS\n supported_formats = \"Raw Files (*.raw *.dd);;All Files (*)\"\n valid_extensions = ['.raw', '.dd']\n else:\n # Original behavior for other operating systems\n supported_formats = (\n \"EWF Files (*.E01);;Raw Files (*.dd);;AFF4 Files (*.aff4);;\"\n \"VHD Files (*.vhd);;VDI Files (*.vdi);;XVA Files (*.xva);;\"\n \"VMDK Files (*.vmdk);;OVA Files (*.ova);;QCOW Files (*.qcow *.qcow2);;All Files (*)\"\n )\n valid_extensions = ['.e01', '.dd', '.aff4', '.vhd', '.vdi', '.xva', '.vmdk', '.ova', '.qcow', '.qcow2']\n\n while True:\n image_path, _ = QFileDialog.getOpenFileName(QWidget(None), \"Select Disk Image\", \"\", supported_formats)\n\n if not image_path:\n return # No image was selected, so just exit the function\n\n file_extension = os.path.splitext(image_path)[1].lower()\n if file_extension in valid_extensions:\n break # Exit the loop if a valid image was selected\n else:\n # Show an error message for an invalid file\n QMessageBox.warning(QWidget(None), \"Invalid File Type\", \"The selected file is not a valid disk image.\")\n\n # Normalize the path\n self.image_path = os.path.normpath(image_path)\n self.file_name = os.path.basename(self.image_path)\n self.operation = 'mount'\n self.start()\n\n\n# ==================== FILE SEARCH WIDGET CLASSES ====================\nclass SizeTableWidgetItem(QTableWidgetItem):\n \"\"\"Custom table widget item for proper size sorting.\"\"\"\n def __lt__(self, other):\n return int(self.data(Qt.UserRole)) < int(other.data(Qt.UserRole))\n\n\n\n\nclass MainWindow(QMainWindow):\n # Class variable for icon caching\n _icon_cache = {}\n\n def __init__(self):\n super().__init__()\n\n # Create a database manager for icon lookup\n self.db_manager = DatabaseManager('tools/new_database_mappings.db')\n\n # Initialize variables for tracking\n self.current_selected_data = None\n self.current_offset = None\n self.current_path = \"/\" # Initialize current path\n self.image_handler = None\n self._directory_cache = {}\n\n # Search/Browse mode state management\n self._search_mode = False # False = Browse mode, True = Search mode\n self._search_query = \"\" # Current search query\n self._last_browsed_state = {} # Store last directory state for restoration\n\n # Search debounce timer - wait for user to stop typing before searching\n self._search_timer = QTimer()\n self._search_timer.setSingleShot(True)\n self._search_timer.setInterval(500) # 500ms delay after last keystroke\n self._search_timer.timeout.connect(self._execute_search)\n\n # Directory navigation history (for Back/Forward buttons like Windows 11)\n self._directory_history = [] # List of visited directories: [(offset, inode, path), ...]\n self._history_index = -1 # Current position in history (-1 = no history)\n self._navigating_history = False # Flag to prevent adding to history during Back/Forward\n\n # Load configuration\n self.api_keys = configparser.ConfigParser()\n try:\n self.api_keys.read('config.ini')\n except Exception as e:\n logger.error(f\"Error loading configuration: {e}\")\n\n # Initialize instance attributes\n self.image_mounted = False\n self.current_offset = None\n self.current_image_path = None\n self.image_manager = ImageManager()\n self.current_selected_data = None\n\n self.evidence_files = []\n\n # Connect to named method instead of complex lambda\n self.image_manager.operationCompleted.connect(self._handle_mount_operation_complete)\n\n self.initialize_ui()\n\n # ==================== HELPER METHODS ====================\n\n def _handle_mount_operation_complete(self, success: bool, message: str) -> None:\n \"\"\"Handle completion of mount/dismount operation.\"\"\"\n if success:\n QMessageBox.information(self, \"Image Operation\", message)\n self.image_mounted = not self.image_mounted\n else:\n QMessageBox.critical(self, \"Image Operation\", message)\n\n def _get_file_icon(self, file_extension: str) -> QIcon:\n \"\"\"Get icon for file extension with caching.\"\"\"\n if file_extension not in self._icon_cache:\n icon_path = self.db_manager.get_icon_path('file', file_extension)\n self._icon_cache[file_extension] = QIcon(icon_path)\n return self._icon_cache[file_extension]\n\n def _format_partition_text(self, addr: int, desc: bytes, start: int, end: int, length: int, fs_type: str) -> str:\n \"\"\"Format partition display text.\"\"\"\n size_in_bytes = length * SECTOR_SIZE\n readable_size = self.image_handler.get_readable_size(size_in_bytes)\n desc_str = desc.decode('utf-8') if isinstance(desc, bytes) else desc\n return f\"vol{addr} ({desc_str}: {start}-{end}, Size: {readable_size}, FS: {fs_type})\"\n\n def _confirm_exit(self) -> bool:\n \"\"\"Ask user to confirm exit.\"\"\"\n reply = QMessageBox.question(\n self, 'Exit Confirmation',\n 'Are you sure you want to exit?',\n QMessageBox.StandardButton.Yes | QMessageBox.StandardButton.No,\n QMessageBox.StandardButton.No\n )\n return reply == QMessageBox.StandardButton.Yes\n\n def _handle_dismount_if_needed(self) -> None:\n \"\"\"Dismount image if mounted and user confirms.\"\"\"\n if not self.image_mounted:\n return\n\n reply = QMessageBox.question(\n self, 'Dismount Image',\n 'Do you want to dismount the mounted image before exiting?',\n QMessageBox.StandardButton.Yes | QMessageBox.StandardButton.No,\n QMessageBox.StandardButton.Yes\n )\n\n if reply == QMessageBox.StandardButton.Yes:\n self.image_manager.dismount_image()\n\n\n def _create_tree_item_for_entry(self, parent_item: QTreeWidgetItem, entry: Dict[str, Any],\n start_offset: int) -> QTreeWidgetItem:\n \"\"\"Create tree item for a directory entry.\"\"\"\n child_item = QTreeWidgetItem(parent_item)\n child_item.setText(0, entry[\"name\"])\n\n if entry[\"is_directory\"]:\n self._setup_directory_tree_item(child_item, entry, start_offset)\n else:\n self._setup_file_tree_item(child_item, entry, start_offset)\n\n return child_item\n\n def _setup_directory_tree_item(self, item: QTreeWidgetItem, entry: Dict[str, Any],\n start_offset: int) -> None:\n \"\"\"Configure tree item for a directory entry.\"\"\"\n # Check if directory has children\n sub_entries = self.image_handler.get_directory_contents(start_offset, entry[\"inode_number\"])\n has_sub_entries = bool(sub_entries)\n\n # Set directory icon and data\n icon_path = self.db_manager.get_icon_path('folder', 'folder')\n item.setIcon(0, QIcon(icon_path))\n item.setData(0, Qt.UserRole, {\n \"inode_number\": entry[\"inode_number\"],\n \"type\": 'directory',\n \"start_offset\": start_offset,\n \"name\": entry[\"name\"]\n })\n\n # Set child indicator\n item.setChildIndicatorPolicy(\n QTreeWidgetItem.ShowIndicator if has_sub_entries\n else QTreeWidgetItem.DontShowIndicatorWhenChildless\n )\n\n def _setup_file_tree_item(self, item: QTreeWidgetItem, entry: Dict[str, Any],\n start_offset: int) -> None:\n \"\"\"Configure tree item for a file entry.\"\"\"\n # Get file extension for icon\n file_extension = entry[\"name\"].split('.')[-1].lower() if '.' in entry[\"name\"] else 'unknown'\n\n # Use cached icon lookup\n icon = self._get_file_icon(file_extension)\n item.setIcon(0, icon)\n item.setData(0, Qt.UserRole, {\n \"inode_number\": entry[\"inode_number\"],\n \"type\": 'file',\n \"start_offset\": start_offset,\n \"name\": entry[\"name\"]\n })\n\n def _populate_table_entry(self, row_position: int, entry: Dict[str, Any], offset: int) -> None:\n \"\"\"Populate a single table row with entry data.\"\"\"\n entry_name = entry.get(\"name\", \"\")\n inode_number = entry.get(\"inode_number\", 0)\n is_directory = entry.get(\"is_directory\", False)\n description = \"Dir\" if is_directory else \"File\"\n size_in_bytes = entry.get(\"size\", 0)\n readable_size = self.image_handler.get_readable_size(size_in_bytes)\n created = entry.get(\"created\", \"N/A\")\n accessed = entry.get(\"accessed\", \"N/A\")\n modified = entry.get(\"modified\", \"N/A\")\n changed = entry.get(\"changed\", \"N/A\")\n\n icon_type = 'folder' if is_directory else 'file'\n icon_name = 'folder' if is_directory else (\n entry_name.split('.')[-1].lower() if '.' in entry_name else 'unknown')\n\n parent_inode = self.current_selected_data.get(\"inode_number\") if self.current_selected_data else None\n\n self.listing_table.insertRow(row_position)\n self.insert_row_into_listing_table(entry_name, inode_number, description,\n icon_name, icon_type, offset,\n readable_size, created, accessed,\n modified, changed, parent_inode)\n\n # ==================== END HELPER METHODS ====================\n\n def initialize_ui(self):\n self.setWindowTitle('Trace 1.2.0')\n\n # Set application icon for all platforms\n app_icon = QIcon('Icons/logo_prev_ui.png')\n self.setWindowIcon(app_icon)\n\n # Set taskbar/dock icon for different platforms\n if os.name == 'nt': # Windows\n import ctypes\n myappid = 'Trace'\n ctypes.windll.shell32.SetCurrentProcessExplicitAppUserModelID(myappid)\n else: # macOS and Linux\n # For macOS and Linux, setting the app icon at application level\n QApplication.instance().setWindowIcon(app_icon)\n\n self.setGeometry(DEFAULT_WINDOW_X, DEFAULT_WINDOW_Y, DEFAULT_WINDOW_WIDTH, DEFAULT_WINDOW_HEIGHT)\n\n menu_bar = QMenuBar(self)\n file_actions = {\n 'Add Evidence File': self.load_image_evidence,\n 'Remove Evidence File': self.remove_image_evidence,\n 'Image Mounting': self.image_manager.mount_image,\n 'Image Unmounting': self.image_manager.dismount_image,\n 'separator': None, # This will add a separator\n 'Exit': self.close\n }\n\n self.create_menu(menu_bar, 'File', file_actions)\n\n view_menu = QMenu('View', self)\n\n # Create the \"Full Screen\" action and connect it to the showFullScreen slot\n full_screen_action = QAction(\"Full Screen\", self)\n full_screen_action.triggered.connect(self.showFullScreen)\n view_menu.addAction(full_screen_action)\n\n # Create the \"Normal Screen\" action and connect it to the showNormal slot\n normal_screen_action = QAction(\"Normal Screen\", self)\n normal_screen_action.triggered.connect(self.showNormal)\n view_menu.addAction(normal_screen_action)\n\n # Add a separator\n view_menu.addSeparator()\n\n # **Add Theme Selection Actions**\n # Create an action group for themes\n theme_group = QActionGroup(self)\n theme_group.setExclusive(True) # Only one theme can be selected at a time\n\n # Light Theme Action\n light_theme_action = QAction(\"Light Mode\", self)\n light_theme_action.setCheckable(True)\n light_theme_action.setChecked(True) # Set Light Theme as default\n light_theme_action.triggered.connect(lambda: self.apply_stylesheet('light'))\n theme_group.addAction(light_theme_action)\n view_menu.addAction(light_theme_action)\n\n # Dark Theme Action\n dark_theme_action = QAction(\"Dark Mode\", self)\n dark_theme_action.setCheckable(True)\n dark_theme_action.triggered.connect(lambda: self.apply_stylesheet('dark'))\n theme_group.addAction(dark_theme_action)\n view_menu.addAction(dark_theme_action)\n\n # Add the view menu to the menu bar\n menu_bar.addMenu(view_menu)\n\n # **Apply the default stylesheet**\n self.apply_stylesheet('light')\n\n tools_menu = QMenu('Tools', self)\n\n verify_image_action = QAction(\"Verify Image\", self)\n verify_image_action.triggered.connect(self.verify_image)\n tools_menu.addAction(verify_image_action)\n\n conversion_action = QAction(\"Convert E01 to DD/RAW\", self)\n conversion_action.triggered.connect(self.show_conversion_widget)\n tools_menu.addAction(conversion_action)\n\n veriphone_api_action = QAction(\"Veriphone API\", self)\n veriphone_api_action.triggered.connect(self.show_veriphone_widget)\n tools_menu.addAction(veriphone_api_action)\n\n # Add \"Options\" menu for API key configuration\n options_menu = QMenu('Options', self)\n api_key_action = QAction(\"API Keys\", self)\n api_key_action.triggered.connect(self.show_api_key_dialog)\n options_menu.addAction(api_key_action)\n\n help_menu = QMenu('Help', self)\n help_menu.addAction(\"About\")\n help_menu.triggered.connect(lambda: AboutDialog(self).exec_())\n\n menu_bar.addMenu(view_menu)\n menu_bar.addMenu(tools_menu)\n menu_bar.addMenu(options_menu)\n menu_bar.addMenu(help_menu)\n\n self.setMenuBar(menu_bar)\n\n self.main_toolbar = QToolBar()\n self.main_toolbar.setMovable(False)\n self.main_toolbar.setFloatable(False)\n self.main_toolbar.addAction(\n self.create_action('Icons/icons8-evidence-48.png', \"Load Image\", self.load_image_evidence))\n self.main_toolbar.addAction(\n self.create_action('Icons/icons8-evidence-96.png', \"Remove Image\", self.remove_image_evidence))\n self.main_toolbar.addSeparator()\n\n # Create verify_image_button as an attribute of MainWindow\n self.verify_image_button = self.create_action('Icons/icons8-verify-blue.png', \"Verify Image\", self.verify_image)\n self.main_toolbar.addAction(self.verify_image_button)\n\n self.main_toolbar.addSeparator()\n self.main_toolbar.addAction(\n self.create_action('Icons/devices/icons8-hard-disk-48.png', \"Mount Image\", self.image_manager.mount_image))\n self.main_toolbar.addAction(self.create_action('Icons/devices/icons8-hard-disk-48_red.png', \"Unmount Image\",\n self.image_manager.dismount_image))\n\n # Navigation buttons (Back, Forward, Up) will be added to the listing search toolbar\n # Created later in the UI setup\n\n self.addToolBar(Qt.TopToolBarArea, self.main_toolbar)\n\n self.tree_viewer = QTreeWidget(self)\n self.tree_viewer.setIconSize(QSize(16, 16))\n self.tree_viewer.setHeaderHidden(True)\n self.tree_viewer.itemExpanded.connect(self.on_item_expanded)\n self.tree_viewer.itemClicked.connect(self.on_item_clicked)\n self.tree_viewer.setContextMenuPolicy(Qt.CustomContextMenu)\n self.tree_viewer.customContextMenuRequested.connect(self.open_tree_context_menu)\n\n tree_dock = QDockWidget('Tree View', self)\n\n tree_dock.setWidget(self.tree_viewer)\n self.addDockWidget(Qt.LeftDockWidgetArea, tree_dock)\n\n self.result_viewer = QTabWidget(self)\n self.setCentralWidget(self.result_viewer)\n\n self.listing_table = QTableWidget()\n self.listing_table.setSortingEnabled(True)\n self.listing_table.verticalHeader().setVisible(False)\n self.listing_table.setObjectName(\"listingTable\") # Set object name for specific CSS styling\n\n # Set size policy to expand with window\n self.listing_table.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Expanding)\n\n # Use alternate row colors\n self.listing_table.setAlternatingRowColors(True)\n self.listing_table.setEditTriggers(QTableWidget.NoEditTriggers)\n self.listing_table.setIconSize(QSize(24, 24))\n self.listing_table.setColumnCount(10) # 10 columns: Name, Inode, Type, Size, 4 timestamps, Path, Info\n\n # Enable horizontal scrolling for smaller windows\n self.listing_table.setHorizontalScrollMode(QTableWidget.ScrollPerPixel)\n self.listing_table.setHorizontalScrollBarPolicy(Qt.ScrollBarAsNeeded)\n\n # Connect click event to handle navigation in search mode\n self.listing_table.itemClicked.connect(self.on_listing_table_item_clicked)\n\n # Create a QVBoxLayout for the listing tab\n self.listing_layout = QVBoxLayout()\n self.listing_layout.setContentsMargins(0, 0, 0, 0) # Set to zero to remove margins\n self.listing_layout.setSpacing(0) # Remove spacing between widgets\n\n # ==================== CREATE UNIFIED TOOLBAR (like File Carving tab) ====================\n self.listing_toolbar = QToolBar()\n self.listing_toolbar.setContentsMargins(0, 0, 0, 0)\n self.listing_toolbar.setMovable(False)\n\n # LEFT SIDE: Icon and Title\n self.listing_icon_label = QLabel()\n self.listing_icon_label.setPixmap(QPixmap('Icons/icons8-search-in-browser-50.png'))\n self.listing_icon_label.setFixedSize(48, 48)\n self.listing_toolbar.addWidget(self.listing_icon_label)\n\n self.listing_title_label = QLabel(\"File System Browser\")\n self.listing_title_label.setStyleSheet(\"\"\"\n QLabel {\n font-size: 20px;\n color: #37c6d0;\n font-weight: bold;\n margin-left: 8px;\n }\n \"\"\")\n self.listing_toolbar.addWidget(self.listing_title_label)\n\n # Add spacer after title\n title_spacer = QLabel()\n title_spacer.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Preferred)\n self.listing_toolbar.addWidget(title_spacer)\n\n # MIDDLE: Navigation buttons (Back, Forward, Up) - next to title\n self.back_action = QAction(QIcon(\"Icons/icons8-left-arrow-50.png\"), \"Back\", self)\n self.back_action.triggered.connect(self.navigate_back)\n self.back_action.setEnabled(False)\n self.listing_toolbar.addAction(self.back_action)\n\n self.forward_action = QAction(QIcon(\"Icons/icons8-right-arrow-50.png\"), \"Forward\", self)\n self.forward_action.triggered.connect(self.navigate_forward)\n self.forward_action.setEnabled(False)\n self.listing_toolbar.addAction(self.forward_action)\n\n self.go_up_action = QAction(QIcon(\"Icons/icons8-thick-arrow-pointing-up-50.png\"), \"Go Up Directory\", self)\n self.go_up_action.triggered.connect(self.navigate_up_directory)\n self.go_up_action.setEnabled(False)\n self.listing_toolbar.addAction(self.go_up_action)\n\n # Add vertical separator after navigation buttons\n self.listing_toolbar.addSeparator()\n\n # RIGHT SIDE: Search functionality\n # Add search bar\n self.listing_search_bar = QLineEdit()\n self.listing_search_bar.setObjectName(\"listingSearchBar\")\n self.listing_search_bar.setPlaceholderText(\"Search files (press Enter, supports wildcards: *.pdf, name.*)\")\n self.listing_search_bar.setFixedHeight(35)\n self.listing_search_bar.setFixedWidth(450)\n # Only search when user presses Enter\n self.listing_search_bar.returnPressed.connect(self.trigger_listing_search)\n # Monitor text changes for auto-clearing results\n self.listing_search_bar.textChanged.connect(self.on_listing_search_text_changed)\n self.listing_toolbar.addWidget(self.listing_search_bar)\n\n # Add small end spacer\n end_spacer = QWidget()\n end_spacer.setFixedWidth(10)\n self.listing_toolbar.addWidget(end_spacer)\n\n # Add the single toolbar and listing table to the layout\n self.listing_layout.addWidget(self.listing_toolbar) # Single unified toolbar\n self.listing_layout.addWidget(self.listing_table) # Table below toolbar\n\n # Create a widget to hold the layout\n self.listing_widget = QWidget()\n self.listing_widget.setLayout(self.listing_layout)\n\n # Set the horizontal header with hybrid resizing approach\n header = self.listing_table.horizontalHeader()\n\n # All columns use Interactive mode (fixed width, manually resizable)\n # This enables horizontal scrolling on smaller windows\n header.setSectionResizeMode(0, QHeaderView.Interactive) # Name - fixed, manually resizable\n header.setSectionResizeMode(1, QHeaderView.Interactive) # Inode - fixed, manually resizable\n header.setSectionResizeMode(2, QHeaderView.Interactive) # Type - fixed, manually resizable\n header.setSectionResizeMode(3, QHeaderView.Interactive) # Size - fixed, manually resizable\n header.setSectionResizeMode(4, QHeaderView.Interactive) # Created - fixed, manually resizable\n header.setSectionResizeMode(5, QHeaderView.Interactive) # Accessed - fixed, manually resizable\n header.setSectionResizeMode(6, QHeaderView.Interactive) # Modified - fixed, manually resizable\n header.setSectionResizeMode(7, QHeaderView.Interactive) # Changed - fixed, manually resizable\n header.setSectionResizeMode(8, QHeaderView.Interactive) # Path - fixed, manually resizable\n header.setSectionResizeMode(9, QHeaderView.Interactive) # Info - fixed, manually resizable\n\n # Set initial column widths\n self.listing_table.setColumnWidth(0, COLUMN_WIDTHS['name']) # Name - 400px (widest)\n self.listing_table.setColumnWidth(1, COLUMN_WIDTHS['inode']) # Inode - 45px\n self.listing_table.setColumnWidth(2, COLUMN_WIDTHS['type']) # Type - 50px\n self.listing_table.setColumnWidth(3, COLUMN_WIDTHS['size']) # Size - 70px\n self.listing_table.setColumnWidth(4, COLUMN_WIDTHS['created']) # Created - 90px (narrower)\n self.listing_table.setColumnWidth(5, COLUMN_WIDTHS['accessed']) # Accessed - 90px (narrower)\n self.listing_table.setColumnWidth(6, COLUMN_WIDTHS['modified']) # Modified - 90px (narrower)\n self.listing_table.setColumnWidth(7, COLUMN_WIDTHS['changed']) # Changed - 90px (narrower)\n self.listing_table.setColumnWidth(8, COLUMN_WIDTHS['path']) # Path - 300px (wide)\n self.listing_table.setColumnWidth(9, 250) # Info - 250px (for volumes)\n\n # Remove any extra space in the header\n header.setStyleSheet(\"QHeaderView::section { margin-top: 0px; padding-top: 2px; }\")\n header.setDefaultAlignment(Qt.AlignLeft | Qt.AlignVCenter)\n\n # Set the header labels\n self.listing_table.setHorizontalHeaderLabels(\n ['Name', 'Inode', 'Type', 'Size', 'Created Date', 'Accessed Date', 'Modified Date', 'Changed Date', 'Path', 'Info']\n )\n\n self.listing_table.itemDoubleClicked.connect(self.on_listing_table_item_clicked)\n self.listing_table.setContextMenuPolicy(Qt.CustomContextMenu)\n self.listing_table.customContextMenuRequested.connect(self.open_listing_context_menu)\n self.listing_table.setSelectionBehavior(QTableWidget.SelectRows)\n\n # Set the color of the selected row\n palette = self.listing_table.palette()\n palette.setBrush(QPalette.Highlight, QBrush(Qt.lightGray)) # Change Qt.lightGray to your preferred color\n self.listing_table.setPalette(palette)\n\n header = self.listing_table.horizontalHeader()\n header.setDefaultAlignment(Qt.AlignLeft)\n\n self.result_viewer.addTab(self.listing_widget, 'Listing')\n\n self.deleted_files_widget = FileCarvingWidget(self)\n self.result_viewer.addTab(self.deleted_files_widget, 'Deleted Files')\n\n self.registry_extractor_widget = RegistryExtractor(self.image_handler)\n self.result_viewer.addTab(self.registry_extractor_widget, 'Registry')\n\n self.viewer_tab = QTabWidget(self)\n\n self.hex_viewer = HexViewer(self)\n self.viewer_tab.addTab(self.hex_viewer, 'Hex')\n\n self.text_viewer = TextViewer(self)\n self.viewer_tab.addTab(self.text_viewer, 'Text')\n\n self.application_viewer = UnifiedViewer(self)\n self.application_viewer.layout.setContentsMargins(0, 0, 0, 0)\n self.application_viewer.layout.setSpacing(0)\n self.viewer_tab.addTab(self.application_viewer, 'Application')\n\n self.metadata_viewer = MetadataViewer(self.image_handler)\n self.viewer_tab.addTab(self.metadata_viewer, 'File Metadata')\n\n self.exif_viewer = ExifViewer(self)\n self.viewer_tab.addTab(self.exif_viewer, 'Exif Data')\n\n self.virus_total_api = VirusTotal()\n self.viewer_tab.addTab(self.virus_total_api, 'Virus Total API')\n\n # Set the API key if it exists\n virus_total_key = self.api_keys.get('API_KEYS', 'virustotal', fallback='')\n self.virus_total_api.set_api_key(virus_total_key)\n\n self.viewer_dock = QDockWidget('Utils', self)\n self.viewer_dock.setWidget(self.viewer_tab)\n self.addDockWidget(Qt.BottomDockWidgetArea, self.viewer_dock)\n\n self.viewer_dock.setMinimumSize(VIEWER_DOCK_MAX_WIDTH, VIEWER_DOCK_MIN_HEIGHT)\n self.viewer_dock.setMaximumSize(VIEWER_DOCK_MAX_WIDTH, VIEWER_DOCK_MIN_HEIGHT)\n self.viewer_dock.visibilityChanged.connect(self.on_viewer_dock_focus)\n self.viewer_tab.currentChanged.connect(self.display_content_for_active_tab)\n\n # disable all tabs before loading an image file\n self.enable_tabs(False)\n\n def apply_stylesheet(self, theme='light'):\n if theme == 'dark':\n qss_file = 'styles/dark_theme.qss'\n else:\n qss_file = 'styles/light_theme.qss' # Ensure your existing QSS file is named 'light_theme.qss'\n\n try:\n with open(qss_file, 'r') as f:\n stylesheet = f.read()\n QApplication.instance().setStyleSheet(stylesheet)\n except Exception as e:\n logger.error(f\"Error loading stylesheet {qss_file}: {e}\")\n\n def show_api_key_dialog(self):\n # Create a dialog to get API keys from the user\n dialog = QDialog(self)\n dialog.setWindowTitle(\"API Key Configuration\")\n dialog.setFixedWidth(API_DIALOG_WIDTH) # Set a fixed width to accommodate longer API keys\n\n # Set layout as a form layout for better presentation\n layout = QFormLayout()\n layout.setSpacing(10) # Add some spacing between fields\n layout.setContentsMargins(15, 15, 15, 15) # Set content margins for better visual aesthetics\n\n # VirusTotal API Key\n virus_total_label = QLabel(\"VirusTotal API Key:\")\n virus_total_input = QLineEdit()\n virus_total_input.setText(self.api_keys.get('API_KEYS', 'virustotal', fallback=''))\n virus_total_input.setMinimumWidth(INPUT_FIELD_MIN_WIDTH) # Set a minimum width for the input field\n layout.addRow(virus_total_label, virus_total_input)\n\n # Veriphone API Key\n veriphone_label = QLabel(\"Veriphone API Key:\")\n veriphone_input = QLineEdit()\n veriphone_input.setText(self.api_keys.get('API_KEYS', 'veriphone', fallback=''))\n veriphone_input.setMinimumWidth(INPUT_FIELD_MIN_WIDTH) # Set a minimum width for the input field\n layout.addRow(veriphone_label, veriphone_input)\n\n # Buttons\n button_box = QDialogButtonBox(QDialogButtonBox.Ok | QDialogButtonBox.Cancel)\n button_box.accepted.connect(\n lambda: self.save_api_keys(virus_total_input.text(), veriphone_input.text(), dialog))\n button_box.rejected.connect(dialog.reject)\n layout.addRow(button_box)\n\n # Set layout and execute dialog\n dialog.setLayout(layout)\n dialog.exec_()\n\n def save_api_keys(self, virus_total_key, veriphone_key, dialog):\n # Save the API keys in a configuration file\n if not self.api_keys.has_section('API_KEYS'):\n self.api_keys.add_section('API_KEYS')\n\n self.api_keys.set('API_KEYS', 'virustotal', virus_total_key)\n self.api_keys.set('API_KEYS', 'veriphone', veriphone_key)\n\n with open('config.ini', 'w') as config_file:\n self.api_keys.write(config_file)\n\n dialog.accept()\n\n # Pass the updated API keys to the appropriate modules\n self.virus_total_api.set_api_key(virus_total_key)\n\n # Set Veriphone API key only if the widget is created\n if hasattr(self, 'veriphone_widget'):\n self.veriphone_widget.set_api_key(veriphone_key)\n\n def show_conversion_widget(self):\n \"\"\"Show the conversion widget.\"\"\"\n self.select_dialog = Main()\n self.select_dialog.show()\n\n def show_veriphone_widget(self):\n \"\"\"Create the VeriphoneWidget only if it hasn't been created yet.\"\"\"\n if not hasattr(self, 'veriphone_widget'):\n self.veriphone_widget = VeriphoneWidget()\n # Set the API key after creating the widget\n veriphone_key = self.api_keys.get('API_KEYS', 'veriphone', fallback='')\n self.veriphone_widget.set_api_key(veriphone_key)\n self.veriphone_widget.show()\n\n def verify_image(self):\n if self.image_handler is None:\n QMessageBox.warning(self, \"Verify Image\", \"No image is currently loaded.\")\n return\n\n # Show the verification widget\n self.verification_widget = VerificationWidget(self.image_handler)\n\n # Connect a signal when the verification widget is closed to update the icon\n self.verification_widget.closeEvent = lambda event: self.on_verification_closed(event)\n\n # Show the widget\n self.verification_widget.show()\n\n def on_verification_closed(self, event):\n \"\"\"Handle the verification widget being closed.\"\"\"\n # Make sure verify_image_button exists before trying to change its icon\n if hasattr(self, 'verify_image_button'):\n if hasattr(self.verification_widget, 'is_verified') and self.verification_widget.is_verified:\n self.verify_image_button.setIcon(QIcon('Icons/icons8-verify-48_gren.png'))\n else:\n self.verify_image_button.setIcon(QIcon('Icons/icons8-verify-blue.png'))\n\n # Call the original closeEvent to close the widget\n QWidget.closeEvent(self.verification_widget, event)\n\n def enable_tabs(self, state):\n self.result_viewer.setEnabled(state)\n self.viewer_tab.setEnabled(state)\n self.listing_table.setEnabled(state)\n self.deleted_files_widget.setEnabled(state)\n self.registry_extractor_widget.setEnabled(state)\n\n def create_menu(self, menu_bar, menu_name, actions):\n menu = QMenu(menu_name, self)\n for action_name, action_function in actions.items():\n if action_name == 'separator':\n menu.addSeparator()\n else:\n action = menu.addAction(action_name)\n action.triggered.connect(action_function)\n menu_bar.addMenu(menu)\n return menu\n\n @staticmethod\n def create_tree_item(parent, text, icon_path, data):\n item = QTreeWidgetItem(parent)\n item.setText(0, text)\n item.setIcon(0, QIcon(icon_path))\n item.setData(0, Qt.UserRole, data)\n return item\n\n def on_viewer_dock_focus(self, visible):\n if visible: # If the QDockWidget is focused/visible\n self.viewer_dock.setMaximumSize(QT_MAX_SIZE, QT_MAX_SIZE) # Remove size constraints\n else: # If the QDockWidget loses focus\n current_height = self.viewer_dock.size().height() # Get the current height\n self.viewer_dock.setMinimumSize(VIEWER_DOCK_MAX_WIDTH, current_height)\n self.viewer_dock.setMaximumSize(VIEWER_DOCK_MAX_WIDTH, current_height)\n\n def clear_ui(self):\n self.listing_table.clearContents()\n self.listing_table.setRowCount(0)\n self.clear_viewers()\n self.current_image_path = None\n self.current_offset = None\n self.image_mounted = False\n self.evidence_files.clear()\n self.deleted_files_widget.clear()\n\n # Clear search bar and reset filters\n self.listing_search_bar.clear()\n\n # Clear navigation history\n self._directory_history = []\n self._history_index = -1\n self._update_navigation_buttons()\n\n # Disable directory up button\n self.go_up_action.setEnabled(False)\n\n def clear_viewers(self):\n self.hex_viewer.clear_content()\n self.text_viewer.clear_content()\n self.application_viewer.clear()\n self.metadata_viewer.clear()\n self.exif_viewer.clear_content()\n self.registry_extractor_widget.clear()\n\n def closeEvent(self, event):\n \"\"\"Handle application close event.\"\"\"\n if not self._confirm_exit():\n event.ignore()\n return\n\n self._handle_dismount_if_needed()\n\n # Cleanup resources\n self.cleanup_resources()\n event.accept()\n\n def cleanup_resources(self):\n \"\"\"Clean up all resources when closing the application.\"\"\"\n # Clean up application viewer first to ensure media players are properly shut down\n try:\n if hasattr(self, 'application_viewer'):\n if hasattr(self.application_viewer, 'shutdown'):\n self.application_viewer.shutdown()\n else:\n self.application_viewer.clear()\n except Exception as e:\n logger.error(f\"Error shutting down application viewer: {e}\")\n\n # Stop any running background operations\n for attr_name in dir(self):\n attr = getattr(self, attr_name)\n # Check if it's a thread and running\n if isinstance(attr, QThread) and hasattr(attr, 'isRunning') and attr.isRunning():\n try:\n # Try to stop it gracefully\n attr.quit()\n attr.wait(1000) # Wait up to 1 second\n\n # If still running, terminate it\n if attr.isRunning():\n attr.terminate()\n except Exception as e:\n logger.error(f\"Error stopping thread {attr_name}: {str(e)}\")\n\n # Clean up image handler resources\n if self.image_handler:\n try:\n self.image_handler.close_resources()\n except Exception as e:\n logger.error(f\"Error closing image handler: {str(e)}\")\n\n # Close database connection\n if hasattr(self, 'db_manager') and self.db_manager:\n try:\n self.db_manager.close()\n except Exception as e:\n logger.error(f\"Error closing database connection: {str(e)}\")\n\n # Clean up temp files\n temp_dir = tempfile.gettempdir()\n pattern = \"trace_temp_*\"\n try:\n for item in os.listdir(temp_dir):\n if item.startswith(\"trace_temp_\"):\n item_path = os.path.join(temp_dir, item)\n try:\n if os.path.isfile(item_path):\n os.remove(item_path)\n elif os.path.isdir(item_path):\n import shutil\n shutil.rmtree(item_path)\n except Exception as e:\n logger.error(f\"Error removing temp file {item_path}: {str(e)}\")\n except Exception as e:\n logger.error(f\"Error cleaning up temp files: {str(e)}\")\n\n # Release any other resources\n gc.collect() # Encourage garbage collection\n\n def load_image_evidence(self):\n \"\"\"Open an image with a specific filter on Kali Linux.\"\"\"\n # Define the supported image file extensions, including both lowercase and uppercase variants\n supported_image_extensions = [\"*.e01\", \"*.E01\", \"*.s01\", \"*.S01\",\n \"*.l01\", \"*.L01\", \"*.raw\", \"*.RAW\",\n \"*.img\", \"*.IMG\", \"*.dd\", \"*.DD\",\n \"*.iso\", \"*.ISO\", \"*.ad1\", \"*.AD1\",\n \"*.001\", \"*.s01\", \"*.ex01\", \"*.dmg\",\n \"*.sparse\", \"*.sparseimage\"]\n\n # Construct the file filter string with both uppercase and lowercase extensions\n file_filter = \"Supported Image Files ({})\".format(\" \".join(supported_image_extensions))\n\n # Open file dialog with the specified file filter\n image_path, _ = QFileDialog.getOpenFileName(self, \"Select Image\", \"\", file_filter)\n\n if image_path:\n try:\n image_path = os.path.normpath(image_path)\n\n # Create a progress dialog to show loading status\n progress = QProgressDialog(\"Loading image...\", \"Cancel\", 0, 100, self)\n progress.setWindowTitle(\"Loading Evidence\")\n progress.setWindowModality(Qt.WindowModal)\n progress.setMinimumDuration(PROGRESS_MIN_DURATION) # Show dialog only if operation takes more than threshold\n progress.setValue(10)\n\n # Clean up any existing ImageHandler resources\n if self.image_handler:\n self.image_handler.close_resources()\n\n # Create or update the ImageHandler instance with progress updates\n progress.setValue(20)\n\n # Process events to update UI\n QApplication.processEvents()\n\n # Create a new ImageHandler with the selected image\n self.image_handler = ImageHandler(image_path)\n progress.setValue(50)\n\n # Add the image to evidence files list\n if image_path not in self.evidence_files:\n self.evidence_files.append(image_path)\n\n self.current_image_path = image_path\n progress.setValue(70)\n\n # Pass the image handler to widgets that need it\n self.deleted_files_widget.set_image_handler(self.image_handler)\n self.registry_extractor_widget.image_handler = self.image_handler\n self.metadata_viewer.image_handler = self.image_handler\n progress.setValue(80)\n\n # Load partitions into tree view\n QApplication.processEvents()\n self.load_partitions_into_tree(image_path)\n progress.setValue(100)\n\n # Enable all tabs since we have a valid image\n self.enable_tabs(True)\n\n except Exception as e:\n QMessageBox.critical(self, \"Error Loading Image\", f\"Failed to load image: {str(e)}\")\n # Remove the image from evidence files if it was added but failed to load\n if image_path in self.evidence_files:\n self.evidence_files.remove(image_path)\n\n def remove_image_evidence(self):\n if not self.evidence_files:\n QMessageBox.warning(self, \"Remove Evidence\", \"No evidence is currently loaded.\")\n return\n\n # Prepare the options for the dialog\n options = self.evidence_files + [\"Remove All\"]\n selected_option, ok = QInputDialog.getItem(self, \"Remove Evidence File\",\n \"Select an evidence file to remove or 'Remove All':\",\n options, 0, False)\n\n if ok:\n if selected_option == \"Remove All\":\n # Remove all evidence files\n self.tree_viewer.invisibleRootItem().takeChildren() # Remove all children from the tree viewer\n self.clear_ui() # Clear the UI\n QMessageBox.information(self, \"Remove Evidence\", \"All evidence files have been removed.\")\n else:\n # Remove the selected evidence file\n self.evidence_files.remove(selected_option)\n self.remove_from_tree_viewer(selected_option)\n self.clear_ui()\n QMessageBox.information(self, \"Remove Evidence\", f\"{selected_option} has been removed.\")\n # clear all tabs if there are no evidence files loaded\n if not self.evidence_files:\n self.clear_ui()\n # disable all tabs\n self.enable_tabs(False)\n # set the icon back to the original - only if verify_image_button exists\n if hasattr(self, 'verify_image_button'):\n self.verify_image_button.setIcon(QIcon('Icons/icons8-verify-blue.png'))\n\n def remove_from_tree_viewer(self, evidence_name):\n root = self.tree_viewer.invisibleRootItem()\n for i in range(root.childCount()):\n item = root.child(i)\n if item.text(0) == evidence_name:\n root.removeChild(item)\n break\n\n def load_partitions_into_tree(self, image_path):\n \"\"\"Load partitions from an image into the tree viewer.\"\"\"\n root_item_tree = self.create_tree_item(self.tree_viewer, image_path,\n self.db_manager.get_icon_path('device', 'media-optical'),\n {\"start_offset\": 0})\n\n partitions = self.image_handler.get_partitions()\n\n # Check if the image has partitions or a recognizable file system\n if not partitions:\n if self.image_handler.has_filesystem(0):\n # The image has a filesystem but no partitions, populate root directory\n self.populate_contents(root_item_tree, {\"start_offset\": 0})\n else:\n # Entire image is considered as unallocated space\n size_in_bytes = self.image_handler.get_size()\n readable_size = self.image_handler.get_readable_size(size_in_bytes)\n unallocated_item_text = f\"Unallocated Space: Size: {readable_size}\"\n self.create_tree_item(root_item_tree, unallocated_item_text,\n self.db_manager.get_icon_path('file', 'unknown'),\n {\"is_unallocated\": True, \"start_offset\": 0,\n \"end_offset\": size_in_bytes // SECTOR_SIZE})\n return\n\n for addr, desc, start, length in partitions:\n end = start + length - 1\n size_in_bytes = length * SECTOR_SIZE\n readable_size = self.image_handler.get_readable_size(size_in_bytes)\n fs_type = self.image_handler.get_fs_type(start)\n desc_str = desc.decode('utf-8') if isinstance(desc, bytes) else desc\n item_text = f\"vol{addr} ({desc_str}: {start}-{end}, Size: {readable_size}, FS: {fs_type})\"\n icon_path = self.db_manager.get_icon_path('device', 'drive-harddisk')\n data = {\"inode_number\": None, \"start_offset\": start, \"end_offset\": end}\n item = self.create_tree_item(root_item_tree, item_text, icon_path, data)\n\n # Determine if the partition is special or contains unallocated space\n special_partitions = [\"Primary Table\", \"Safety Table\", \"GPT Header\"]\n is_special = any(special_case in desc_str for special_case in special_partitions)\n is_unallocated = \"Unallocated\" in desc_str or \"Microsoft reserved\" in desc_str\n\n if is_special:\n item.setChildIndicatorPolicy(QTreeWidgetItem.DontShowIndicator)\n elif is_unallocated:\n item.setChildIndicatorPolicy(QTreeWidgetItem.ShowIndicator)\n # Directly add unallocated space under the partition\n self.create_tree_item(item, f\"Unallocated Space: Size: {readable_size}\",\n self.db_manager.get_icon_path('file', 'unknown'),\n {\"is_unallocated\": True, \"start_offset\": start, \"end_offset\": end})\n else:\n if self.image_handler.check_partition_contents(start):\n item.setChildIndicatorPolicy(QTreeWidgetItem.ShowIndicator)\n else:\n item.setChildIndicatorPolicy(QTreeWidgetItem.DontShowIndicator)\n\n def populate_contents(self, item: QTreeWidgetItem, data: Dict[str, Any], inode: Optional[int] = None) -> None:\n \"\"\"Populate tree widget item with directory contents.\"\"\"\n if self.current_image_path is None:\n return\n\n entries = self.image_handler.get_directory_contents(data[\"start_offset\"], inode)\n\n for entry in entries:\n self._create_tree_item_for_entry(item, entry, data[\"start_offset\"])\n\n def on_item_expanded(self, item):\n # Check if the item already has children; if so, don't repopulate\n if item.childCount() > 0:\n return\n\n data = item.data(0, Qt.UserRole)\n if data is None:\n return\n\n if data.get(\"inode_number\") is None: # It's a partition\n self.populate_contents(item, data)\n else: # It's a directory\n self.populate_contents(item, data, data.get(\"inode_number\"))\n\n class FileContentWorker(QThread):\n \"\"\"Worker thread class for handling file operations in the background.\"\"\"\n completed = Signal(bytes, object)\n error = Signal(str)\n\n def __init__(self, image_handler, inode_number, offset):\n super().__init__()\n self.image_handler = image_handler\n self.inode_number = inode_number\n self.offset = offset\n\n def run(self):\n try:\n file_content, metadata = self.image_handler.get_file_content(self.inode_number, self.offset)\n if file_content:\n self.completed.emit(file_content, metadata)\n else:\n self.error.emit(\"Unable to read file content.\")\n except Exception as e:\n self.error.emit(f\"Error reading file: {str(e)}\")\n\n # Worker thread for opening media files for streaming (doesn't load content into memory)\n class MediaStreamWorker(QThread):\n completed = Signal(object, int, object) # file_obj, file_size, metadata\n error = Signal(str)\n\n def __init__(self, image_handler, inode_number, offset):\n super().__init__()\n self.image_handler = image_handler\n self.inode_number = inode_number\n self.offset = offset\n\n def run(self):\n try:\n # Get filesystem info\n fs = self.image_handler.get_fs_info(self.offset)\n if not fs:\n self.error.emit(\"Unable to get filesystem info.\")\n return\n\n # Open the file object (don't read content)\n file_obj = fs.open_meta(inode=self.inode_number)\n if not file_obj:\n self.error.emit(\"Unable to open file.\")\n return\n\n file_size = file_obj.info.meta.size\n metadata = file_obj.info.meta\n\n if file_size == 0:\n self.error.emit(\"File has no content or is a special metafile!\")\n return\n\n # Return the file object for streaming (don't read content)\n self.completed.emit(file_obj, file_size, metadata)\n\n except Exception as e:\n self.error.emit(f\"Error opening file for streaming: {str(e)}\")\n\n # Create a worker thread class for handling unallocated space operations in the background\n class UnallocatedSpaceWorker(QThread):\n completed = Signal(bytes)\n error = Signal(str)\n\n def __init__(self, image_handler, start_offset, end_offset):\n super().__init__()\n self.image_handler = image_handler\n self.start_offset = start_offset\n self.end_offset = end_offset\n\n def run(self):\n try:\n unallocated_space = self.image_handler.read_unallocated_space(self.start_offset, self.end_offset)\n if unallocated_space:\n self.completed.emit(unallocated_space)\n else:\n self.error.emit(\"Unable to read unallocated space.\")\n except Exception as e:\n self.error.emit(f\"Error reading unallocated space: {str(e)}\")\n\n def on_item_clicked(self, item, column):\n self.clear_viewers()\n\n data = item.data(0, Qt.UserRole)\n if not data:\n return\n\n # Store the current selection data\n self.current_selected_data = data\n\n # Show a status message in the UI to indicate loading\n statusbar = self.statusBar()\n statusbar.showMessage(\"Loading content...\")\n\n # Use a background worker thread if processing large files or unallocated space\n try:\n # Check if this is the root disk image item (has start_offset but no type/inode)\n if (data.get(\"start_offset\") == 0 and\n not data.get(\"type\") and\n not data.get(\"inode_number\") and\n not data.get(\"is_unallocated\")):\n # This is the root disk image - display all volumes/partitions\n self.display_volumes_in_listing()\n statusbar.clearMessage()\n return\n\n if data.get(\"is_unallocated\"):\n # Handle unallocated space in background\n self.unallocated_worker = self.UnallocatedSpaceWorker(\n self.image_handler, data[\"start_offset\"], data[\"end_offset\"])\n self.unallocated_worker.completed.connect(\n lambda content: self.update_viewer_with_file_content(content, data))\n self.unallocated_worker.error.connect(\n lambda msg: (self.log_error(msg), statusbar.clearMessage()))\n self.unallocated_worker.start()\n\n elif data.get(\"type\") == \"directory\":\n # For directories, find parent inode to enable up navigation\n if \"parent_inode\" not in data and data.get(\"inode_number\"):\n parent_inode = self.find_parent_inode(data[\"start_offset\"], data[\"inode_number\"])\n if parent_inode:\n data[\"parent_inode\"] = parent_inode\n # Update the stored data with parent information\n self.current_selected_data = data\n\n # Handle directories - populate the listing synchronously\n entries = self.image_handler.get_directory_contents(data[\"start_offset\"], data.get(\"inode_number\"))\n\n # Update current path for directory navigation\n if data.get(\"name\"):\n if data.get(\"inode_number\") == 5: # Root directory\n self.current_path = \"/\"\n else:\n # If it's a regular directory, update the path\n self.current_path = data.get(\"path\", os.path.join(self.current_path, data.get(\"name\", \"\")))\n\n # Update directory up button state\n self.update_directory_up_button()\n\n # Populate the listing table with directory contents\n self.populate_listing_table(entries, data[\"start_offset\"])\n\n # Add to navigation history\n self._add_to_history(data)\n\n statusbar.clearMessage()\n\n elif data.get(\"inode_number\") is not None:\n # Handle files in background\n self.file_worker = self.FileContentWorker(\n self.image_handler, data[\"inode_number\"], data[\"start_offset\"])\n self.file_worker.completed.connect(\n lambda content, _: self.update_viewer_with_file_content(content, data))\n self.file_worker.error.connect(\n lambda msg: (self.log_error(msg), statusbar.clearMessage()))\n self.file_worker.start()\n\n elif data.get(\"start_offset\") is not None:\n # Handle partitions\n entries = self.image_handler.get_directory_contents(data[\"start_offset\"],\n 5) # 5 is the root inode for NTFS\n\n # Reset path to root when viewing partitions\n self.current_path = \"/\"\n\n # Treat partition as a volume for history\n if \"type\" not in data:\n data[\"type\"] = \"volume\"\n if \"inode_number\" not in data:\n data[\"inode_number\"] = 5\n\n self.populate_listing_table(entries, data[\"start_offset\"])\n\n # Add to navigation history\n self._add_to_history(data)\n\n statusbar.clearMessage()\n\n else:\n self.log_error(\"Clicked item is not a file, directory, or unallocated space.\")\n statusbar.clearMessage()\n\n except Exception as e:\n self.log_error(f\"Error processing item: {str(e)}\")\n statusbar.clearMessage()\n\n def update_directory_up_button(self):\n \"\"\"Update the state of the directory up button based on current selection\"\"\"\n if not self.current_selected_data:\n self.go_up_action.setEnabled(False)\n return\n\n # Check if this is a directory\n if self.current_selected_data.get(\"type\") == \"directory\":\n inode_number = self.current_selected_data.get(\"inode_number\")\n start_offset = self.current_selected_data.get(\"start_offset\")\n\n # Check if this is root directory (inode 5 in NTFS)\n is_root = inode_number == 5\n\n # If parent_inode isn't set yet, try to find it\n if \"parent_inode\" not in self.current_selected_data and not is_root and inode_number is not None:\n parent_inode = self.find_parent_inode(start_offset, inode_number)\n if parent_inode:\n # Update the dictionary in place\n self.current_selected_data[\"parent_inode\"] = parent_inode\n\n has_parent = self.current_selected_data.get(\"parent_inode\") is not None\n self.go_up_action.setEnabled(not is_root and has_parent)\n else:\n self.go_up_action.setEnabled(False)\n\n def find_parent_inode(self, start_offset, inode_number):\n \"\"\"Helper method to find the parent inode for a directory from tree view\"\"\"\n try:\n # Root directory (5 is typically root in NTFS) has no parent\n if inode_number == 5:\n return None\n\n # Get directory entries for the directory\n entries = self.image_handler.get_directory_contents(start_offset, inode_number)\n\n # Look for parent directory entry (..)\n for entry in entries:\n if entry.get(\"name\") == \"..\":\n return entry.get(\"inode_number\")\n\n # If we can't find the proper parent, return None\n return None\n\n except Exception as e:\n self.log_error(f\"Error finding parent inode: {str(e)}\")\n return None\n\n def navigate_up_directory(self):\n \"\"\"Navigate to the parent directory\"\"\"\n if not self.current_selected_data:\n return\n\n # Ensure we have valid information\n start_offset = self.current_selected_data.get(\"start_offset\")\n inode_number = self.current_selected_data.get(\"inode_number\")\n\n if not start_offset or not inode_number:\n return\n\n # If parent_inode isn't already set, try to find it\n if \"parent_inode\" not in self.current_selected_data and self.current_selected_data.get(\"type\") == \"directory\":\n parent_inode = self.find_parent_inode(start_offset, inode_number)\n if parent_inode:\n self.current_selected_data[\"parent_inode\"] = parent_inode\n\n # Make sure we have a parent to navigate to\n parent_inode = self.current_selected_data.get(\"parent_inode\")\n if not parent_inode:\n return\n\n statusbar = self.statusBar()\n statusbar.showMessage(\"Loading parent directory...\")\n\n try:\n # Create data for parent directory\n parent_data = {\n \"inode_number\": parent_inode,\n \"start_offset\": start_offset,\n \"type\": \"directory\",\n # Get the grandparent inode if available (for consecutive up navigation)\n \"parent_inode\": self.get_grandparent_inode(parent_inode, start_offset)\n }\n\n # Update current path (navigate to parent directory)\n self.current_path = os.path.dirname(self.current_path)\n if self.current_path == \"\":\n self.current_path = \"/\"\n\n # Load the parent directory\n entries = self.image_handler.get_directory_contents(\n parent_data[\"start_offset\"],\n parent_data[\"inode_number\"]\n )\n\n self.current_selected_data = parent_data\n\n # Update directory up button state\n self.update_directory_up_button()\n\n # Update both the tree view selection and listing table\n self.populate_listing_table(entries, parent_data[\"start_offset\"])\n\n # Add to navigation history\n self._add_to_history(parent_data)\n\n # Find and select the corresponding item in the tree view if possible\n self.select_tree_item_by_inode(parent_data[\"inode_number\"], parent_data[\"start_offset\"])\n\n statusbar.clearMessage()\n\n except Exception as e:\n self.log_error(f\"Error navigating to parent directory: {str(e)}\")\n statusbar.clearMessage()\n\n def _add_to_history(self, directory_data):\n \"\"\"Add a directory to the navigation history.\"\"\"\n # Skip if we're navigating through history\n if self._navigating_history:\n return\n\n # Only add directories to history (not files)\n if directory_data.get(\"type\") != \"directory\" and directory_data.get(\"type\") != \"volume\":\n return\n\n # Create a history entry with essential data\n history_entry = {\n \"inode_number\": directory_data.get(\"inode_number\"),\n \"start_offset\": directory_data.get(\"start_offset\"),\n \"type\": directory_data.get(\"type\"),\n \"name\": directory_data.get(\"name\"),\n \"path\": self.current_path,\n \"parent_inode\": directory_data.get(\"parent_inode\")\n }\n\n # If we're in the middle of history (not at the end), remove everything after current position\n if self._history_index < len(self._directory_history) - 1:\n self._directory_history = self._directory_history[:self._history_index + 1]\n\n # Add new entry to history\n self._directory_history.append(history_entry)\n self._history_index = len(self._directory_history) - 1\n\n # Update navigation buttons\n self._update_navigation_buttons()\n\n def _update_navigation_buttons(self):\n \"\"\"Update the enabled state of Back/Forward navigation buttons.\"\"\"\n # Enable Back button if we can go back\n can_go_back = self._history_index > 0\n self.back_action.setEnabled(can_go_back)\n\n # Enable Forward button if we can go forward\n can_go_forward = self._history_index < len(self._directory_history) - 1\n self.forward_action.setEnabled(can_go_forward)\n\n def navigate_back(self):\n \"\"\"Navigate to the previous directory in history.\"\"\"\n if self._history_index <= 0:\n return\n\n try:\n # Set flag to prevent adding to history\n self._navigating_history = True\n\n # Move back in history\n self._history_index -= 1\n history_entry = self._directory_history[self._history_index]\n\n # Navigate to the directory\n self._navigate_to_history_entry(history_entry)\n\n finally:\n # Always clear the flag\n self._navigating_history = False\n self._update_navigation_buttons()\n\n def navigate_forward(self):\n \"\"\"Navigate to the next directory in history.\"\"\"\n if self._history_index >= len(self._directory_history) - 1:\n return\n\n try:\n # Set flag to prevent adding to history\n self._navigating_history = True\n\n # Move forward in history\n self._history_index += 1\n history_entry = self._directory_history[self._history_index]\n\n # Navigate to the directory\n self._navigate_to_history_entry(history_entry)\n\n finally:\n # Always clear the flag\n self._navigating_history = False\n self._update_navigation_buttons()\n\n def _navigate_to_history_entry(self, history_entry):\n \"\"\"Navigate to a specific directory from history.\"\"\"\n statusbar = self.statusBar()\n statusbar.showMessage(\"Navigating...\")\n\n try:\n # Restore the path\n self.current_path = history_entry.get(\"path\", \"/\")\n\n # Get directory contents\n inode_number = history_entry.get(\"inode_number\")\n start_offset = history_entry.get(\"start_offset\")\n\n if history_entry.get(\"type\") == \"volume\":\n # For volumes, get root directory (inode 5)\n entries = self.image_handler.get_directory_contents(start_offset, 5)\n else:\n # For regular directories, use stored inode\n entries = self.image_handler.get_directory_contents(start_offset, inode_number)\n\n # Update current selected data\n self.current_selected_data = history_entry.copy()\n\n # Update directory up button state\n self.update_directory_up_button()\n\n # Populate the listing table\n self.populate_listing_table(entries, start_offset)\n\n # Find and select the corresponding item in the tree view if possible\n if inode_number:\n self.select_tree_item_by_inode(inode_number, start_offset)\n\n statusbar.clearMessage()\n\n except Exception as e:\n self.log_error(f\"Error navigating from history: {str(e)}\")\n statusbar.clearMessage()\n\n def select_tree_item_by_inode(self, inode_number, start_offset):\n \"\"\"Attempt to find and select the item in the tree view that matches the given inode\"\"\"\n try:\n # Skip if inode_number is None\n if inode_number is None:\n return\n\n # Get the root items\n root_item = self.tree_viewer.invisibleRootItem()\n\n # Find the item with matching inode and start_offset (recursive search)\n found_item = self.find_tree_item_recursive(root_item, inode_number, start_offset)\n\n if found_item:\n # Temporarily disconnect the item clicked signal to prevent loops\n self.tree_viewer.itemClicked.disconnect(self.on_item_clicked)\n\n # Select the item and make it visible\n self.tree_viewer.setCurrentItem(found_item)\n self.tree_viewer.scrollToItem(found_item)\n\n # Reconnect the signal\n self.tree_viewer.itemClicked.connect(self.on_item_clicked)\n except Exception as e:\n self.log_error(f\"Error selecting tree item: {str(e)}\")\n\n def find_tree_item_recursive(self, parent_item, inode_number, start_offset):\n \"\"\"Recursively search for a tree item with matching inode and start_offset\"\"\"\n # Check all children of the parent item\n for i in range(parent_item.childCount()):\n item = parent_item.child(i)\n data = item.data(0, Qt.UserRole)\n\n # Check if this item matches (allow matching based on inode only)\n if data and data.get(\"inode_number\") == inode_number:\n # If start_offset is also provided and doesn't match, continue searching\n if start_offset is not None and data.get(\"start_offset\") != start_offset:\n continue\n return item\n\n # If it has children, search recursively\n if item.childCount() > 0:\n found = self.find_tree_item_recursive(item, inode_number, start_offset)\n if found:\n return found\n\n # Not found\n return None\n\n def display_volumes_in_listing(self) -> None:\n \"\"\"Display all volumes/partitions in the listing table when disk image root is clicked.\"\"\"\n # Clear existing content\n self.listing_table.setRowCount(0)\n self.listing_table.setSortingEnabled(False)\n\n # Show columns with volume information, hide file-specific columns\n self.listing_table.setColumnHidden(1, False) # Show Inode (for Volume #)\n self.listing_table.setColumnHidden(4, False) # Show Created (for Start Offset)\n self.listing_table.setColumnHidden(5, False) # Show Accessed (for End Offset)\n self.listing_table.setColumnHidden(6, False) # Show Modified (for Length)\n self.listing_table.setColumnHidden(7, False) # Show Changed (for Block Size)\n self.listing_table.setColumnHidden(8, True) # Hide Path (not relevant for volumes)\n self.listing_table.setColumnHidden(9, False) # Show Info (for additional details)\n\n # Update column headers for volume context\n self.listing_table.setHorizontalHeaderLabels([\n 'Name', 'Volume #', 'Type', 'Size', 'Start Offset', 'End Offset',\n 'Length', 'Block Size', 'Path', 'Details'\n ])\n\n # Make Info column much wider for detailed information\n self.listing_table.setColumnWidth(9, 1200)\n\n # Reset path to root\n self.current_path = \"/\"\n\n # Clear navigation history when returning to disk image root\n self._directory_history = []\n self._history_index = -1\n self._update_navigation_buttons()\n\n # Disable the up button since we're at the disk image root\n self.go_up_action.setEnabled(False)\n\n # Get all partitions\n partitions = self.image_handler.get_partitions()\n\n if not partitions:\n # No partitions found\n self.listing_table.setSortingEnabled(True)\n return\n\n try:\n for addr, desc, start, length in partitions:\n row_position = self.listing_table.rowCount()\n self.listing_table.insertRow(row_position)\n\n # Calculate volume information\n end = start + length - 1\n size_in_bytes = length * SECTOR_SIZE\n readable_size = self.image_handler.get_readable_size(size_in_bytes)\n fs_type = self.image_handler.get_fs_type(start)\n desc_str = desc.decode('utf-8') if isinstance(desc, bytes) else desc\n\n # Get additional filesystem details\n try:\n fs_info = self.image_handler.get_fs_info(start)\n if fs_info and hasattr(fs_info.info, 'block_size'):\n block_size = f\"{fs_info.info.block_size:,} bytes\"\n else:\n block_size = \"N/A\"\n except:\n block_size = \"N/A\"\n\n # Volume name\n volume_name = f\"vol{addr}\"\n name_item = QTableWidgetItem(volume_name)\n icon_path = self.db_manager.get_icon_path('device', 'drive-harddisk')\n name_item.setIcon(QIcon(icon_path))\n\n # Store volume data for potential future use\n volume_data = {\n \"name\": volume_name,\n \"type\": \"volume\",\n \"start_offset\": start,\n \"end_offset\": end,\n \"addr\": addr,\n \"description\": desc_str,\n \"filesystem\": fs_type\n }\n name_item.setData(Qt.UserRole, volume_data)\n\n # Create table items with detailed information\n inode_item = QTableWidgetItem(str(addr)) # Volume number in Inode column\n type_item = QTableWidgetItem(fs_type)\n size_item = QTableWidgetItem(readable_size)\n\n # Use timestamp columns for partition geometry\n start_offset_item = QTableWidgetItem(f\"{start:,} sectors\")\n end_offset_item = QTableWidgetItem(f\"{end:,} sectors\")\n length_item = QTableWidgetItem(f\"{length:,} sectors\")\n block_size_item = QTableWidgetItem(block_size)\n\n # Build comprehensive info string\n info_parts = []\n # Add description first without label if it exists\n if desc_str and desc_str.strip():\n info_parts.append(desc_str)\n # Add detailed partition information\n info_parts.append(f\"Start: {start:,} sectors ({start * SECTOR_SIZE:,} bytes)\")\n info_parts.append(f\"End: {end:,} sectors ({end * SECTOR_SIZE:,} bytes)\")\n info_parts.append(f\"Length: {length:,} sectors ({size_in_bytes:,} bytes)\")\n if block_size != \"N/A\":\n info_parts.append(f\"Block Size: {block_size}\")\n info_parts.append(f\"Filesystem: {fs_type}\")\n\n info_item = QTableWidgetItem(\" | \".join(info_parts))\n\n # Set items in table\n self.listing_table.setItem(row_position, 0, name_item)\n self.listing_table.setItem(row_position, 1, inode_item)\n self.listing_table.setItem(row_position, 2, type_item)\n self.listing_table.setItem(row_position, 3, size_item)\n self.listing_table.setItem(row_position, 4, start_offset_item)\n self.listing_table.setItem(row_position, 5, end_offset_item)\n self.listing_table.setItem(row_position, 6, length_item)\n self.listing_table.setItem(row_position, 7, block_size_item)\n self.listing_table.setItem(row_position, 9, info_item)\n\n finally:\n self.listing_table.setSortingEnabled(True)\n\n def populate_listing_table(self, entries: List[Dict[str, Any]], offset: int) -> None:\n \"\"\"Populate the listing table with directory entries in batches for better performance.\"\"\"\n # Clear existing content\n self.listing_table.setRowCount(0)\n\n # Restore original column headers for file/folder view\n self.listing_table.setHorizontalHeaderLabels([\n 'Name', 'Inode', 'Type', 'Size', 'Created Date', 'Accessed Date',\n 'Modified Date', 'Changed Date', 'Path', 'Info'\n ])\n\n # Show columns relevant for files/folders, hide Info column\n self.listing_table.setColumnHidden(1, False) # Show Inode\n self.listing_table.setColumnHidden(4, False) # Show Created\n self.listing_table.setColumnHidden(5, False) # Show Accessed\n self.listing_table.setColumnHidden(6, False) # Show Modified\n self.listing_table.setColumnHidden(7, False) # Show Changed\n self.listing_table.setColumnHidden(8, False) # Show Path\n self.listing_table.setColumnHidden(9, True) # Hide Info\n\n if not entries:\n return\n\n # Enable/disable the up button based on whether we're in the root directory\n self.update_directory_up_button()\n\n # Disable sorting and updates for better performance during bulk population\n self.listing_table.setSortingEnabled(False)\n self.listing_table.setUpdatesEnabled(False)\n\n try:\n total_entries = len(entries)\n\n # Process in batches to keep UI responsive\n for batch_start in range(0, total_entries, TABLE_BATCH_SIZE):\n batch_end = min(batch_start + TABLE_BATCH_SIZE, total_entries)\n batch = entries[batch_start:batch_end]\n\n # Populate the batch\n for entry in batch:\n row_position = self.listing_table.rowCount()\n self._populate_table_entry(row_position, entry, offset)\n\n # Process events periodically to keep UI responsive\n if batch_end < total_entries:\n QApplication.processEvents()\n\n finally:\n # Re-enable updates and sorting\n self.listing_table.setUpdatesEnabled(True)\n self.listing_table.setSortingEnabled(True)\n\n def insert_row_into_listing_table(self, entry_name, entry_inode, description, icon_name, icon_type, offset, size,\n created, accessed, modified, changed, parent_inode=None):\n \"\"\"Insert a row into the listing table with proper caching and error handling.\"\"\"\n try:\n icon_path = self.db_manager.get_icon_path(icon_type, icon_name)\n icon = QIcon(icon_path)\n row_position = self.listing_table.rowCount() - 1 # Current row (rows are 0-indexed)\n\n # Calculate the full path for this item\n file_path = os.path.join(self.current_path, entry_name) if entry_name != \"..\" else os.path.dirname(\n self.current_path)\n\n name_item = QTableWidgetItem(entry_name)\n name_item.setIcon(icon)\n name_item.setData(Qt.UserRole, {\n \"inode_number\": entry_inode,\n \"start_offset\": offset,\n \"type\": \"directory\" if icon_type == 'folder' else 'file',\n \"name\": entry_name,\n \"size\": size,\n \"parent_inode\": parent_inode, # Store parent directory inode for \"Go Up\" functionality\n \"path\": file_path # Store the full path\n })\n\n self.listing_table.setItem(row_position, 0, name_item)\n self.listing_table.setItem(row_position, 1, QTableWidgetItem(str(entry_inode)))\n self.listing_table.setItem(row_position, 2, QTableWidgetItem(description))\n self.listing_table.setItem(row_position, 3, QTableWidgetItem(str(size)))\n self.listing_table.setItem(row_position, 4, QTableWidgetItem(str(created)))\n self.listing_table.setItem(row_position, 5, QTableWidgetItem(str(accessed)))\n self.listing_table.setItem(row_position, 6, QTableWidgetItem(str(modified)))\n self.listing_table.setItem(row_position, 7, QTableWidgetItem(str(changed)))\n self.listing_table.setItem(row_position, 8, QTableWidgetItem(file_path))\n self.listing_table.setItem(row_position, 9, QTableWidgetItem(\"\")) # Empty Info column for files/folders\n\n except Exception as e:\n self.log_error(f\"Error adding row to listing table: {str(e)}\")\n # Try to recover by removing the incomplete row\n try:\n if row_position >= 0:\n self.listing_table.removeRow(row_position)\n except:\n pass\n\n def update_viewer_with_file_content(self, file_content, data):\n \"\"\"Update the active viewer tab with the file content.\n\n This method is called after file content is loaded, either directly\n or from a background thread.\n \"\"\"\n # Clear the status message if it exists\n statusbar = self.statusBar()\n statusbar.clearMessage()\n\n # Get the active tab index\n index = self.viewer_tab.currentIndex()\n\n if not file_content:\n self.log_error(\"No content available to display\")\n return\n\n # Use optimized display methods for each viewer type\n try:\n if index == 0: # Hex tab\n self.hex_viewer.display_hex_content(file_content)\n elif index == 1: # Text tab\n self.text_viewer.display_text_content(file_content)\n elif index == 2: # Application tab\n full_file_path = data.get(\"name\", \"\") # Retrieve the name from the data dictionary\n self.application_viewer.display_application_content(file_content, full_file_path)\n elif index == 3: # File Metadata tab\n self.metadata_viewer.display_metadata(data)\n elif index == 4: # Exif Data tab\n self.exif_viewer.load_and_display_exif_data(file_content)\n elif index == 5: # Assuming VirusTotal tab is the 6th tab (0-based index)\n file_hash = hashlib.md5(file_content).hexdigest()\n self.virus_total_api.set_file_hash(file_hash)\n self.virus_total_api.set_file_content(file_content, data.get(\"name\", \"\"))\n except Exception as e:\n self.log_error(f\"Error displaying content in viewer: {str(e)}\")\n\n def update_viewer_with_media_stream(self, file_obj, file_size, metadata, data):\n \"\"\"Update the application viewer with a media stream for playback.\"\"\"\n # Clear the status message if it exists\n statusbar = self.statusBar()\n statusbar.clearMessage()\n\n try:\n # Determine MIME type from file extension\n full_file_path = data.get(\"name\", \"\")\n file_extension = os.path.splitext(full_file_path)[-1].lower()\n\n # Map extension to MIME type\n mime_type = None\n if file_extension in ['.mp3', '.wav', '.ogg', '.aac', '.m4a']:\n mime_type = f'audio/{file_extension[1:]}'\n elif file_extension in ['.mp4', '.mkv', '.flv', '.avi', '.mov', '.webm', '.wmv', '.m4v']:\n mime_type = 'video/mp4'\n else:\n mime_type = 'application/octet-stream'\n\n # Call the load method with streaming parameters\n self.application_viewer.load(\n mime_type=mime_type,\n path=full_file_path,\n file_obj=file_obj,\n file_size=file_size\n )\n\n except Exception as e:\n self.log_error(f\"Error setting up media stream: {str(e)}\")\n\n def display_content_for_active_tab(self):\n \"\"\"Display content appropriate for the currently active tab.\"\"\"\n if not self.current_selected_data:\n return\n\n statusbar = self.statusBar()\n statusbar.showMessage(\"Updating view...\")\n\n try:\n # IMPORTANT: Cancel any running workers before starting new ones\n # This prevents race conditions when switching between files\n if hasattr(self, 'media_worker') and self.media_worker and self.media_worker.isRunning():\n try:\n # Disconnect signals to prevent callbacks\n self.media_worker.completed.disconnect()\n self.media_worker.error.disconnect()\n # Request interruption (graceful)\n self.media_worker.requestInterruption()\n # Don't wait - let it finish naturally\n except Exception as e:\n print(f\"Error cancelling media worker: {e}\")\n\n if hasattr(self, 'file_worker') and self.file_worker and self.file_worker.isRunning():\n try:\n # Disconnect signals to prevent callbacks\n self.file_worker.completed.disconnect()\n self.file_worker.error.disconnect()\n # Request interruption (graceful)\n self.file_worker.requestInterruption()\n # Don't wait - let it finish naturally\n except Exception as e:\n print(f\"Error cancelling file worker: {e}\")\n\n inode_number = self.current_selected_data.get(\"inode_number\")\n offset = self.current_selected_data.get(\"start_offset\", self.current_offset)\n\n if inode_number:\n # Check if the active tab is Application tab (index 2) and file is audio/video\n current_tab_index = self.viewer_tab.currentIndex()\n file_name = self.current_selected_data.get(\"name\", \"\")\n file_extension = os.path.splitext(file_name)[-1].lower()\n\n # Media file extensions\n media_extensions = ['.mp3', '.wav', '.ogg', '.aac', '.m4a', '.mp4', '.mkv',\n '.flv', '.avi', '.mov', '.webm', '.wmv', '.m4v']\n\n # Use streaming for media files on Application tab\n if current_tab_index == 2 and file_extension in media_extensions:\n # Use MediaStreamWorker for streaming playback (doesn't load content)\n self.media_worker = self.MediaStreamWorker(self.image_handler, inode_number, offset)\n self.media_worker.completed.connect(\n lambda file_obj, file_size, metadata: self.update_viewer_with_media_stream(\n file_obj, file_size, metadata, self.current_selected_data))\n self.media_worker.error.connect(\n lambda msg: (self.log_error(msg), statusbar.clearMessage()))\n self.media_worker.start()\n else:\n # For non-media files or other tabs, use FileContentWorker (loads content)\n self.file_worker = self.FileContentWorker(self.image_handler, inode_number, offset)\n self.file_worker.completed.connect(\n lambda content, _: self.update_viewer_with_file_content(content, self.current_selected_data))\n self.file_worker.error.connect(\n lambda msg: (self.log_error(msg), statusbar.clearMessage()))\n self.file_worker.start()\n else:\n statusbar.clearMessage()\n except Exception as e:\n self.log_error(f\"Error updating active tab: {str(e)}\")\n statusbar.clearMessage()\n\n def open_listing_context_menu(self, position):\n # Get the selected item\n indexes = self.listing_table.selectedIndexes()\n if indexes:\n selected_item = self.listing_table.item(indexes[0].row(),\n 0) # Assuming the first column contains the item data\n data = selected_item.data(Qt.UserRole)\n menu = QMenu()\n\n # If in search mode and item is a file, add \"Open File\" and \"Show in Directory\"\n if self._search_mode and data.get('type') == 'file':\n # Open File action\n open_action = menu.addAction(\"Open File\")\n open_action.triggered.connect(lambda: self.open_search_result_file(data))\n\n # Show in Directory action\n show_in_dir_action = menu.addAction(\"Show in Directory\")\n show_in_dir_action.triggered.connect(lambda: self.show_file_in_directory(data))\n\n # Add separator\n menu.addSeparator()\n\n # Add the 'Export' option for any file or folder\n export_action = menu.addAction(\"Export\")\n export_action.triggered.connect(lambda: self.handle_export(data, QFileDialog.getExistingDirectory(self,\n \"Select Destination Directory\")))\n\n menu.exec_(self.listing_table.viewport().mapToGlobal(position))\n\n def handle_export(self, data, dest_dir):\n \"\"\"Export the selected item in a background thread with progress display.\"\"\"\n if not dest_dir:\n return\n\n try:\n # Create a progress dialog\n progress_dialog = QProgressDialog(\"Preparing to export...\", \"Cancel\", 0, 100, self)\n progress_dialog.setWindowTitle(\"Exporting Files\")\n progress_dialog.setWindowModality(Qt.WindowModal)\n progress_dialog.setMinimumDuration(0)\n progress_dialog.setValue(0)\n progress_dialog.show()\n\n # Create and configure the worker\n self.export_worker = ExportWorker(\n self.image_handler,\n data[\"inode_number\"],\n data[\"start_offset\"],\n dest_dir,\n data[\"name\"],\n data[\"type\"] == \"directory\"\n )\n\n # Connect worker signals\n self.export_worker.progress.connect(\n lambda current, total: progress_dialog.setValue(int(current * 100 / total) if total > 0 else 0)\n )\n self.export_worker.status_update.connect(progress_dialog.setLabelText)\n self.export_worker.error.connect(lambda msg: QMessageBox.warning(self, \"Export Error\", msg))\n self.export_worker.finished.connect(progress_dialog.close)\n\n # Connect the cancel button\n progress_dialog.canceled.connect(self.export_worker.terminate)\n\n # Start the worker\n self.export_worker.start()\n\n except Exception as e:\n QMessageBox.critical(self, \"Export Error\", f\"Error starting export: {str(e)}\")\n\n def log_error(self, message):\n \"\"\"Log an error message to the console and potentially to a log file.\"\"\"\n logger.error(f\"Error: {message}\")\n # Could also log to a file or status bar here\n\n def open_tree_context_menu(self, position):\n # Get the selected item\n indexes = self.tree_viewer.selectedIndexes()\n if indexes:\n selected_item = self.tree_viewer.itemFromIndex(indexes[0])\n menu = QMenu()\n data = selected_item.data(0, Qt.UserRole)\n\n # Check if the selected item is a root item (disk image)\n if selected_item and selected_item.parent() is None:\n view_os_info_action = menu.addAction(\"View Image Information\")\n view_os_info_action.triggered.connect(lambda: self.view_os_information(indexes[0]))\n\n # Add the 'Export' option for any file or folder\n export_action = menu.addAction(\"Export\")\n export_action.triggered.connect(\n lambda: self.handle_export(self.tree_viewer.itemFromIndex(indexes[0]).data(0, Qt.UserRole),\n QFileDialog.getExistingDirectory(self, \"Select Destination Directory\")))\n\n menu.exec_(self.tree_viewer.viewport().mapToGlobal(position))\n\n def view_os_information(self, index):\n \"\"\"Display comprehensive disk image information with space allocation pie chart.\"\"\"\n item = self.tree_viewer.itemFromIndex(index)\n if item is None or item.parent() is not None:\n # Ensure that only the root item triggers the information display\n return\n\n # Create modern dialog\n dialog = QDialog(self)\n dialog.setWindowTitle(\"Disk Image Information\")\n dialog.resize(1200, 800)\n\n # Main vertical layout\n main_layout = QVBoxLayout(dialog)\n main_layout.setContentsMargins(0, 0, 0, 0)\n main_layout.setSpacing(0)\n\n # === TOP SECTION: Image Overview with Chart ===\n top_widget = QWidget()\n top_widget.setStyleSheet(\"background-color: #f8f9fa; border-bottom: 2px solid #dee2e6;\")\n top_layout = QHBoxLayout(top_widget)\n top_layout.setContentsMargins(20, 20, 20, 20)\n top_layout.setSpacing(30)\n\n # Left: Image Summary Card\n summary_card = QWidget()\n summary_card.setStyleSheet(\"\"\"\n QWidget {\n background-color: white;\n border-radius: 8px;\n border: 1px solid #dee2e6;\n }\n \"\"\")\n summary_layout = QVBoxLayout(summary_card)\n summary_layout.setContentsMargins(20, 20, 20, 20)\n summary_layout.setSpacing(12)\n\n # Title\n title_label = QLabel(\"Disk Image Overview\")\n title_label.setStyleSheet(\"font-size: 16pt; font-weight: bold; color: #212529; border: none;\")\n summary_layout.addWidget(title_label)\n\n # Key info\n image_info = self._get_image_info()\n key_fields = [\"Image Path\", \"Image Type\", \"Total Size\", \"Partition Scheme\", \"Number of Partitions\", \"Status\"]\n\n for field in key_fields:\n if field in image_info:\n info_row = QWidget()\n info_row.setStyleSheet(\"border: none;\")\n info_row_layout = QHBoxLayout(info_row)\n info_row_layout.setContentsMargins(0, 0, 0, 0)\n info_row_layout.setSpacing(10)\n\n label = QLabel(f\"{field}:\")\n label.setStyleSheet(\"font-weight: bold; color: #495057; font-size: 10pt; border: none;\")\n label.setMinimumWidth(140)\n\n value = QLabel(str(image_info[field]))\n value.setStyleSheet(\"color: #212529; font-size: 10pt; border: none;\")\n value.setTextInteractionFlags(Qt.TextSelectableByMouse)\n value.setWordWrap(True)\n\n info_row_layout.addWidget(label)\n info_row_layout.addWidget(value, 1)\n\n summary_layout.addWidget(info_row)\n\n summary_layout.addStretch()\n summary_card.setFixedWidth(450)\n\n # Right: Pie Chart with Legend\n chart_widget = QWidget()\n chart_widget.setStyleSheet(\"\"\"\n QWidget {\n background-color: white;\n border-radius: 8px;\n border: 1px solid #dee2e6;\n }\n \"\"\")\n chart_outer_layout = QVBoxLayout(chart_widget)\n chart_outer_layout.setContentsMargins(15, 15, 15, 15)\n chart_outer_layout.setSpacing(10)\n\n chart_title = QLabel(\"Space Allocation\")\n chart_title.setStyleSheet(\"font-size: 14pt; font-weight: bold; color: #212529; border: none;\")\n chart_title.setAlignment(Qt.AlignCenter)\n chart_outer_layout.addWidget(chart_title)\n\n # Create horizontal layout for legend (left) and chart (right)\n chart_content_layout = QHBoxLayout()\n chart_content_layout.setSpacing(15)\n\n # Create chart\n chart_view, partition_info_list = self._create_space_allocation_chart()\n\n # Compact legend on the left\n if partition_info_list:\n legend_widget = QWidget()\n legend_widget.setStyleSheet(\"border: none;\")\n legend_layout = QVBoxLayout(legend_widget)\n legend_layout.setContentsMargins(5, 5, 5, 5)\n legend_layout.setSpacing(6)\n\n for label_text, color in partition_info_list:\n legend_row = QWidget()\n legend_row.setStyleSheet(\"border: none;\")\n legend_row_layout = QHBoxLayout(legend_row)\n legend_row_layout.setContentsMargins(0, 0, 0, 0)\n legend_row_layout.setSpacing(8)\n\n color_indicator = QLabel()\n color_indicator.setFixedSize(16, 16)\n color_indicator.setStyleSheet(f\"\"\"\n background-color: rgb({color.red()}, {color.green()}, {color.blue()});\n border: 1px solid #adb5bd;\n border-radius: 3px;\n \"\"\")\n\n text_label = QLabel(label_text)\n text_label.setStyleSheet(\"color: #495057; font-size: 9pt; border: none;\")\n text_label.setWordWrap(True)\n\n legend_row_layout.addWidget(color_indicator)\n legend_row_layout.addWidget(text_label, 1)\n\n legend_layout.addWidget(legend_row)\n\n legend_layout.addStretch()\n legend_widget.setMaximumWidth(300)\n chart_content_layout.addWidget(legend_widget)\n\n chart_content_layout.addWidget(chart_view, 1)\n chart_outer_layout.addLayout(chart_content_layout, 1)\n\n top_layout.addWidget(summary_card)\n top_layout.addWidget(chart_widget, 1)\n\n main_layout.addWidget(top_widget)\n\n # === BOTTOM SECTION: Detailed Partition Information ===\n bottom_widget = QWidget()\n bottom_layout = QVBoxLayout(bottom_widget)\n bottom_layout.setContentsMargins(20, 20, 20, 20)\n bottom_layout.setSpacing(15)\n\n # Section title\n details_title = QLabel(\"Volume Details\")\n details_title.setStyleSheet(\"font-size: 14pt; font-weight: bold; color: #212529; padding-bottom: 10px;\")\n bottom_layout.addWidget(details_title)\n\n # Professional table view for volume information\n volume_table = QTableWidget()\n volume_table.setSortingEnabled(True)\n volume_table.verticalHeader().setVisible(False)\n volume_table.setObjectName(\"volumeInfoTable\")\n volume_table.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Expanding)\n volume_table.setAlternatingRowColors(True)\n volume_table.setEditTriggers(QTableWidget.NoEditTriggers)\n volume_table.setIconSize(QSize(24, 24))\n volume_table.setSelectionBehavior(QTableWidget.SelectRows)\n\n # Enable horizontal scrolling for smaller windows\n volume_table.setHorizontalScrollMode(QTableWidget.ScrollPerPixel)\n volume_table.setHorizontalScrollBarPolicy(Qt.ScrollBarAsNeeded)\n\n # Set column count and headers\n volume_table.setColumnCount(10)\n volume_table.setHorizontalHeaderLabels([\n 'Volume', 'Filesystem', 'Offset (Sectors)', 'Block Size', 'Volume Size',\n 'Total Blocks', 'First Block', 'Last Block', 'Inode Count', 'Root Inode'\n ])\n\n # Configure header - all columns use Interactive mode for horizontal scrolling\n header = volume_table.horizontalHeader()\n for i in range(10):\n header.setSectionResizeMode(i, QHeaderView.Interactive)\n\n # Set column widths\n volume_table.setColumnWidth(0, 100) # Volume\n volume_table.setColumnWidth(1, 120) # Filesystem\n volume_table.setColumnWidth(2, 140) # Offset\n volume_table.setColumnWidth(3, 100) # Block Size\n volume_table.setColumnWidth(4, 120) # Volume Size\n volume_table.setColumnWidth(5, 120) # Total Blocks\n volume_table.setColumnWidth(6, 120) # First Block\n volume_table.setColumnWidth(7, 120) # Last Block\n volume_table.setColumnWidth(8, 120) # Inode Count\n volume_table.setColumnWidth(9, 100) # Root Inode\n\n # Set header alignment\n header.setDefaultAlignment(Qt.AlignLeft | Qt.AlignVCenter)\n\n # Populate table with partition data\n partitions = self.image_handler.get_partitions()\n\n if partitions:\n self._populate_volume_table(volume_table, partitions)\n else:\n # Show message in table if no partitions\n volume_table.setRowCount(1)\n no_part_item = QTableWidgetItem(\"No partitions detected or single filesystem image\")\n no_part_item.setForeground(QBrush(QColor(108, 117, 125)))\n font = no_part_item.font()\n font.setItalic(True)\n no_part_item.setFont(font)\n volume_table.setItem(0, 0, no_part_item)\n volume_table.setSpan(0, 0, 1, 10)\n\n bottom_layout.addWidget(volume_table, 1)\n\n # Close button at bottom right\n button_layout = QHBoxLayout()\n button_layout.addStretch()\n\n close_button = QPushButton(\"Close\")\n close_button.clicked.connect(dialog.accept)\n close_button.setMinimumWidth(100)\n\n button_layout.addWidget(close_button)\n bottom_layout.addLayout(button_layout)\n\n main_layout.addWidget(bottom_widget, 1)\n\n dialog.exec_()\n\n def _populate_volume_table(self, table, partitions):\n \"\"\"Populate the volume table with partition information.\"\"\"\n table.setRowCount(len(partitions))\n table.setSortingEnabled(False) # Disable sorting while populating\n\n for idx, partition in enumerate(partitions):\n addr, desc, start, length = partition\n\n # Get volume information\n volume_info = self._extract_comprehensive_volume_info(start)\n\n # Combine all info\n all_info = {}\n all_info.update(volume_info[\"basic\"])\n all_info.update(volume_info[\"filesystem\"])\n\n # Get filesystem type for icon\n fs_type = all_info.get(\"Filesystem Type\", \"Unknown\")\n icon_path = self.db_manager.get_icon_path('device', 'drive-harddisk')\n\n # Column 0: Volume (with icon)\n desc_str = desc.decode('utf-8') if isinstance(desc, bytes) else desc\n volume_text = f\"vol{addr}\"\n if desc_str and desc_str.strip():\n volume_text += f\" ({desc_str})\"\n\n volume_item = QTableWidgetItem(volume_text)\n volume_item.setIcon(QIcon(icon_path))\n table.setItem(idx, 0, volume_item)\n\n # Column 1: Filesystem\n fs_item = QTableWidgetItem(fs_type)\n table.setItem(idx, 1, fs_item)\n\n # Column 2: Offset (Sectors)\n offset_value = all_info.get(\"Partition Offset\", \"N/A\")\n # Extract just the sector count\n if \"sectors\" in offset_value:\n offset_value = offset_value.split(\"sectors\")[0].strip()\n offset_item = QTableWidgetItem(offset_value)\n table.setItem(idx, 2, offset_item)\n\n # Column 3: Block Size\n block_size = all_info.get(\"Block Size\", \"N/A\")\n block_size_item = QTableWidgetItem(block_size)\n table.setItem(idx, 3, block_size_item)\n\n # Column 4: Volume Size\n volume_size = all_info.get(\"Volume Size\", \"N/A\")\n volume_size_item = QTableWidgetItem(volume_size)\n table.setItem(idx, 4, volume_size_item)\n\n # Column 5: Total Blocks\n total_blocks = all_info.get(\"Total Blocks\", \"N/A\")\n total_blocks_item = QTableWidgetItem(total_blocks)\n table.setItem(idx, 5, total_blocks_item)\n\n # Column 6: First Block\n first_block = all_info.get(\"First Block\", \"N/A\")\n first_block_item = QTableWidgetItem(first_block)\n table.setItem(idx, 6, first_block_item)\n\n # Column 7: Last Block\n last_block = all_info.get(\"Last Block\", \"N/A\")\n last_block_item = QTableWidgetItem(last_block)\n table.setItem(idx, 7, last_block_item)\n\n # Column 8: Inode Count\n inode_count = all_info.get(\"Inode Count\", \"N/A\")\n inode_count_item = QTableWidgetItem(inode_count)\n table.setItem(idx, 8, inode_count_item)\n\n # Column 9: Root Inode\n root_inode = all_info.get(\"Root Inode\", \"N/A\")\n root_inode_item = QTableWidgetItem(root_inode)\n table.setItem(idx, 9, root_inode_item)\n\n table.setSortingEnabled(True) # Re-enable sorting after populating\n\n def _extract_comprehensive_volume_info(self, start_offset):\n \"\"\"Extract basic pytsk3 information from a volume.\"\"\"\n info = {\n \"basic\": {},\n \"filesystem\": {}\n }\n\n try:\n # Get filesystem info\n fs_info = self.image_handler.get_fs_info(start_offset)\n if not fs_info:\n info[\"basic\"][\"Status\"] = \"Unable to access filesystem\"\n return info\n\n fs_type = self.image_handler.get_fs_type(start_offset)\n\n # === BASIC INFO ===\n info[\"basic\"][\"Partition Offset\"] = f\"{start_offset:,} sectors ({start_offset * 512:,} bytes)\"\n info[\"basic\"][\"Filesystem Type\"] = fs_type or \"Unknown\"\n\n if hasattr(fs_info.info, 'block_size'):\n info[\"basic\"][\"Block Size\"] = f\"{fs_info.info.block_size:,} bytes\"\n if hasattr(fs_info.info, 'block_count'):\n total_blocks = fs_info.info.block_count\n total_size = total_blocks * fs_info.info.block_size\n info[\"basic\"][\"Total Blocks\"] = f\"{total_blocks:,}\"\n info[\"basic\"][\"Volume Size\"] = FileSystemUtils.get_readable_size(total_size)\n\n # === FILESYSTEM DETAILS ===\n if hasattr(fs_info.info, 'first_block'):\n info[\"filesystem\"][\"First Block\"] = f\"{fs_info.info.first_block:,}\"\n if hasattr(fs_info.info, 'last_block'):\n info[\"filesystem\"][\"Last Block\"] = f\"{fs_info.info.last_block:,}\"\n if hasattr(fs_info.info, 'inum_count'):\n info[\"filesystem\"][\"Inode Count\"] = f\"{fs_info.info.inum_count:,}\"\n if hasattr(fs_info.info, 'root_inum'):\n info[\"filesystem\"][\"Root Inode\"] = f\"{fs_info.info.root_inum}\"\n\n except Exception as e:\n logger.error(f\"Error extracting volume info: {e}\")\n info[\"basic\"][\"Error\"] = str(e)\n\n return info\n\n def _get_image_info(self):\n \"\"\"Extract comprehensive disk image information.\"\"\"\n info = {}\n\n try:\n # Basic image info\n info[\"Image Path\"] = self.image_handler.image_path\n info[\"Image Type\"] = self.image_handler.get_image_type().upper()\n\n # Image size\n total_size = self.image_handler.get_size()\n info[\"Total Size\"] = FileSystemUtils.get_readable_size(total_size)\n info[\"Total Size (Bytes)\"] = f\"{total_size:,}\"\n\n # Sector information\n sector_count = total_size // 512\n info[\"Total Sectors\"] = f\"{sector_count:,}\"\n info[\"Bytes per Sector\"] = \"512\"\n\n # Volume information\n if self.image_handler.volume_info:\n try:\n vol_type = self.image_handler.volume_info.info.vstype\n volume_types = {\n pytsk3.TSK_VS_TYPE_DOS: \"DOS/MBR\",\n pytsk3.TSK_VS_TYPE_GPT: \"GPT (GUID Partition Table)\",\n pytsk3.TSK_VS_TYPE_MAC: \"Mac Partition Map\",\n pytsk3.TSK_VS_TYPE_BSD: \"BSD Disk Label\",\n pytsk3.TSK_VS_TYPE_SUN: \"Sun VTOC\",\n }\n info[\"Partition Scheme\"] = volume_types.get(vol_type, f\"Unknown ({vol_type})\")\n info[\"Number of Partitions\"] = len(self.image_handler.get_partitions())\n except Exception as e:\n logger.debug(f\"Could not get volume type: {e}\")\n else:\n info[\"Partition Scheme\"] = \"No partition table detected\"\n\n # Check if wiped\n if self.image_handler.is_wiped():\n info[\"Status\"] = \"โ ๏ธ Wiped/Empty Image\"\n else:\n info[\"Status\"] = \"โ Valid Image\"\n\n # File modification time\n if os.path.exists(self.image_handler.image_path):\n mod_time = os.path.getmtime(self.image_handler.image_path)\n info[\"File Modified\"] = datetime.datetime.fromtimestamp(mod_time).strftime(\"%Y-%m-%d %H:%M:%S\")\n\n except Exception as e:\n logger.error(f\"Error getting image info: {e}\")\n info[\"Error\"] = str(e)\n\n return info\n\n def _get_partition_info(self, partition):\n \"\"\"Extract detailed partition information.\"\"\"\n info = {}\n\n try:\n addr, desc, start, length = partition\n\n # Basic partition info (skip description as it's in the group box title)\n info[\"Start Offset (Sectors)\"] = f\"{start:,}\"\n info[\"Start Offset (Bytes)\"] = f\"{start * 512:,}\"\n info[\"Length (Sectors)\"] = f\"{length:,}\"\n info[\"Length (Bytes)\"] = f\"{length * 512:,}\"\n info[\"Size\"] = FileSystemUtils.get_readable_size(length * 512)\n\n # Filesystem information\n try:\n fs_info = self.image_handler.get_fs_info(start)\n if fs_info:\n fs_type = self.image_handler.get_fs_type(start)\n info[\"File System\"] = fs_type or \"Unknown\"\n\n # Block/cluster information\n if hasattr(fs_info.info, 'block_size'):\n info[\"Block Size\"] = f\"{fs_info.info.block_size:,} bytes\"\n if hasattr(fs_info.info, 'block_count'):\n info[\"Block Count\"] = f\"{fs_info.info.block_count:,}\"\n\n # First and last block\n if hasattr(fs_info.info, 'first_block'):\n info[\"First Block\"] = f\"{fs_info.info.first_block:,}\"\n if hasattr(fs_info.info, 'last_block'):\n info[\"Last Block\"] = f\"{fs_info.info.last_block:,}\"\n\n # Inode information\n if hasattr(fs_info.info, 'inum_count'):\n info[\"Inode Count\"] = f\"{fs_info.info.inum_count:,}\"\n if hasattr(fs_info.info, 'root_inum'):\n info[\"Root Inode\"] = f\"{fs_info.info.root_inum}\"\n\n # OS detection for NTFS\n if fs_type == \"NTFS\":\n os_version = self.image_handler.get_windows_version(start)\n if os_version:\n info[\"Operating System\"] = os_version\n\n # Try to get volume label\n try:\n root_dir = fs_info.open_dir(path=\"/\")\n for entry in root_dir:\n if hasattr(entry, 'info') and hasattr(entry.info, 'name'):\n name = entry.info.name.name.decode('utf-8', errors='ignore')\n if name in [\"$VOLUME\", \"volume\", \".volume\"]:\n # Found volume label\n break\n except:\n pass\n\n else:\n info[\"File System\"] = \"Could not open filesystem\"\n\n except Exception as e:\n info[\"File System\"] = f\"Error: {str(e)}\"\n logger.debug(f\"Error getting filesystem info for partition: {e}\")\n\n except Exception as e:\n logger.error(f\"Error getting partition info: {e}\")\n info[\"Error\"] = str(e)\n\n return info\n\n def _get_filesystem_colors(self):\n \"\"\"Return consistent color mapping for filesystem types.\"\"\"\n return {\n \"NTFS\": QColor(41, 128, 185), # Blue\n \"FAT32\": QColor(46, 204, 113), # Green\n \"FAT16\": QColor(26, 188, 156), # Turquoise\n \"FAT12\": QColor(22, 160, 133), # Dark Turquoise\n \"exFAT\": QColor(52, 152, 219), # Light Blue\n \"EXT4\": QColor(231, 76, 60), # Red\n \"EXT3\": QColor(192, 57, 43), # Dark Red\n \"EXT2\": QColor(155, 89, 182), # Purple\n \"HFS+\": QColor(241, 196, 15), # Yellow\n \"APFS\": QColor(243, 156, 18), # Orange\n \"ISO9660\": QColor(230, 126, 34), # Dark Orange\n \"Unallocated\": QColor(149, 165, 166), # Gray\n \"Unknown\": QColor(127, 140, 141), # Dark Gray\n }\n\n def _create_space_allocation_chart(self):\n \"\"\"Create a pie chart showing allocated vs unallocated space.\"\"\"\n # Create pie series\n series = QPieSeries()\n legend_items = [] # Track items for legend\n\n try:\n total_size = self.image_handler.get_size()\n partitions = self.image_handler.get_partitions()\n\n # Get filesystem color mapping\n fs_colors = self._get_filesystem_colors()\n\n # Calculate allocated space (partitions)\n allocated_space = 0\n partition_details = []\n\n if partitions:\n for part in partitions:\n addr, desc, start, length = part\n size = length * 512\n allocated_space += size\n\n # Get filesystem type\n fs_type = self.image_handler.get_fs_type(start)\n if not fs_type:\n fs_type = \"Unknown\"\n\n partition_details.append((fs_type, size, part[0]))\n\n # Calculate unallocated space\n unallocated_space = total_size - allocated_space\n\n # Add partition slices with consistent colors\n for idx, (fs_type, size, part_num) in enumerate(partition_details):\n percentage = (size / total_size) * 100\n\n # Don't show label on slice - use legend instead\n slice = series.append(\"\", size)\n\n # Use consistent color based on filesystem type\n color = fs_colors.get(fs_type, fs_colors[\"Unknown\"])\n slice.setColor(color)\n slice.setLabelVisible(False) # Hide labels on pie\n\n # Add border between slices for clear separation\n slice.setBorderColor(QColor(255, 255, 255))\n slice.setBorderWidth(3)\n\n # Add to legend with full details\n legend_label = f\"{fs_type} - Partition {part_num} ({FileSystemUtils.get_readable_size(size)}, {percentage:.1f}%)\"\n legend_items.append((legend_label, color))\n\n # Add unallocated space\n if unallocated_space > 0:\n percentage = (unallocated_space / total_size) * 100\n unalloc_slice = series.append(\"\", unallocated_space)\n unalloc_slice.setColor(fs_colors[\"Unallocated\"])\n unalloc_slice.setLabelVisible(False)\n unalloc_slice.setBorderColor(QColor(255, 255, 255))\n unalloc_slice.setBorderWidth(3)\n\n # Add to legend\n legend_label = f\"Unallocated Space ({FileSystemUtils.get_readable_size(unallocated_space)}, {percentage:.1f}%)\"\n legend_items.append((legend_label, fs_colors[\"Unallocated\"]))\n\n # If no partitions, show entire disk as unallocated\n if not partitions:\n slice = series.append(\"\", total_size)\n slice.setColor(fs_colors[\"Unallocated\"])\n slice.setLabelVisible(False)\n\n # Add to legend\n legend_label = f\"Entire Disk ({FileSystemUtils.get_readable_size(total_size)}, 100%)\"\n legend_items.append((legend_label, fs_colors[\"Unallocated\"]))\n\n except Exception as e:\n logger.error(f\"Error creating allocation chart: {e}\")\n # Add error slice\n series.append(\"Error Loading Data\", 1)\n\n # Create chart\n chart = QChart()\n chart.addSeries(series)\n chart.setTitle(\"\")\n chart.setAnimationOptions(QChart.SeriesAnimations)\n chart.legend().setVisible(False) # Use custom legend instead\n\n # Minimal margins for maximum chart size\n chart.setMargins(QMargins(0, 0, 0, 0))\n chart.setBackgroundVisible(False)\n\n # Create chart view\n chart_view = QChartView(chart)\n chart_view.setRenderHint(QPainter.Antialiasing)\n chart_view.setMinimumSize(350, 350)\n chart_view.setStyleSheet(\"border: none; background: transparent;\")\n\n return chart_view, legend_items\n\n def create_action(self, icon_path, text, callback):\n action = QAction(QIcon(icon_path), text, self)\n action.triggered.connect(callback)\n return action\n\n def get_grandparent_inode(self, parent_inode, start_offset):\n \"\"\"Helper method to determine the grandparent inode\"\"\"\n # Root directory (5 is typically root in NTFS) has no parent\n if parent_inode == 5:\n return None\n\n try:\n # Get directory entries for parent\n parent_entries = self.image_handler.get_directory_contents(start_offset, parent_inode)\n\n # Look for parent directory entry (..)\n for entry in parent_entries:\n if entry.get(\"name\") == \"..\":\n return entry.get(\"inode_number\")\n\n # If we can't find the proper parent, try filesystem-specific approach\n # For NTFS, parent of non-root directories is often inode 5\n return 5\n\n except Exception as e:\n logger.error(f\"Error finding grandparent inode: {str(e)}\")\n return None\n\n # ==================== SEARCH AND FILTER HANDLERS ====================\n\n def on_listing_table_item_clicked(self, item):\n \"\"\"Handle clicks on listing table items - navigate tree view in search mode.\"\"\"\n # Only handle navigation if we're in search mode\n if not self._search_mode:\n return\n\n # Get the file data from the clicked item\n row = item.row()\n name_item = self.listing_table.item(row, 0) # Name column\n if not name_item:\n return\n\n file_data = name_item.data(Qt.UserRole)\n if not file_data:\n return\n\n # Get the path from the file data\n file_path = file_data.get('path', '')\n if not file_path:\n return\n\n # Navigate the tree view to show this file's location\n self.navigate_tree_to_path(file_path, file_data)\n\n def navigate_tree_to_path(self, path, file_data):\n \"\"\"Navigate and expand the tree view to show the specified path.\"\"\"\n if not path or not self.tree_viewer:\n return\n\n # Split the path into components (e.g., \"/folder1/folder2/file.txt\" -> [\"folder1\", \"folder2\", \"file.txt\"])\n # Remove leading/trailing slashes and split\n path_parts = [p for p in path.split('/') if p]\n\n if not path_parts:\n return\n\n # Start from the root - find the partition/volume first\n root = self.tree_viewer.invisibleRootItem()\n current_item = None\n\n # Find the correct partition by matching the start_offset from file_data\n start_offset = file_data.get('start_offset')\n if start_offset is not None:\n for i in range(root.childCount()):\n child = root.child(i)\n child_data = child.data(0, Qt.UserRole)\n if child_data and child_data.get('start_offset') == start_offset:\n current_item = child\n current_item.setExpanded(True)\n break\n\n if not current_item:\n return\n\n # Now traverse the path, expanding each folder\n for part_index, part_name in enumerate(path_parts):\n found = False\n\n # Expand current item to load its children\n if not current_item.isExpanded():\n current_item.setExpanded(True)\n # Give Qt time to process the expansion and load children\n QApplication.processEvents()\n\n # Search through children for the next part\n for i in range(current_item.childCount()):\n child = current_item.child(i)\n child_text = child.text(0)\n\n if child_text == part_name:\n current_item = child\n found = True\n\n # If this is not the last part, expand it\n if part_index < len(path_parts) - 1:\n current_item.setExpanded(True)\n QApplication.processEvents()\n break\n\n if not found:\n # Path component not found, stop navigation\n break\n\n # Select and highlight the final item\n if current_item:\n self.tree_viewer.setCurrentItem(current_item)\n self.tree_viewer.scrollToItem(current_item)\n\n # Set a special background color to highlight the search result\n # Store the original background to restore later\n if not hasattr(self, '_original_tree_item_background'):\n self._original_tree_item_background = None\n\n # Clear previous highlight\n if hasattr(self, '_highlighted_tree_item') and self._highlighted_tree_item:\n if self._original_tree_item_background:\n self._highlighted_tree_item.setBackground(0, self._original_tree_item_background)\n\n # Save current item and its background\n self._highlighted_tree_item = current_item\n self._original_tree_item_background = current_item.background(0)\n\n # Set red highlight for the found item\n from PySide6.QtGui import QBrush, QColor\n current_item.setBackground(0, QBrush(QColor(255, 100, 100, 100))) # Semi-transparent red\n\n def on_listing_search_text_changed(self):\n \"\"\"Handle text changes in search bar - auto-clear results if empty.\"\"\"\n search_query = self.listing_search_bar.text().strip()\n\n # Auto-clear results when user manually empties the search bar\n if not search_query and self._search_mode:\n self.switch_to_browse_mode()\n\n def trigger_listing_search(self):\n \"\"\"Trigger search when Enter is pressed.\"\"\"\n search_query = self.listing_search_bar.text().strip()\n\n if not search_query:\n # If empty, just return to browse mode\n self.switch_to_browse_mode()\n return\n\n # Store the query\n self._search_query = search_query\n\n # Switch to search mode if not already\n if not self._search_mode:\n self.switch_to_search_mode()\n\n # Perform the search\n self.perform_search(search_query)\n\n def _execute_search(self):\n \"\"\"Execute the search after debounce delay.\"\"\"\n if self._search_query:\n # Switch to search mode and perform search\n self.switch_to_search_mode()\n\n def clear_listing_search(self):\n \"\"\"Clear the search bar and return to browse mode.\"\"\"\n self.listing_search_bar.clear() # This will trigger on_listing_search_text_changed\n # Return to browse mode\n if self._search_mode:\n self.switch_to_browse_mode()\n\n def switch_to_search_mode(self):\n \"\"\"Switch from Browse mode to Search mode.\"\"\"\n if self._search_mode:\n return # Already in search mode\n\n # Save current browse state\n self._last_browsed_state = {\n 'offset': self.current_offset,\n 'path': self.current_path,\n 'directory_data': self.current_selected_data\n }\n\n # Switch to search mode\n self._search_mode = True\n\n # Keep tree view enabled - user can still navigate while searching\n # (removed: self.tree_viewer.setEnabled(False))\n\n # Show Path column (critical for search results)\n self.listing_table.setColumnHidden(8, False) # Path column\n\n # Update status bar\n statusbar = self.statusBar()\n statusbar.showMessage(f\"Searching for '{self._search_query}'...\")\n\n # Perform the search\n self.perform_search(self._search_query)\n\n def switch_to_browse_mode(self):\n \"\"\"Switch from Search mode to Browse mode.\"\"\"\n if not self._search_mode:\n return # Already in browse mode\n\n # Switch to browse mode\n self._search_mode = False\n self._search_query = \"\"\n\n # Clear any tree view highlights from search results\n if hasattr(self, '_highlighted_tree_item') and self._highlighted_tree_item:\n if hasattr(self, '_original_tree_item_background') and self._original_tree_item_background:\n self._highlighted_tree_item.setBackground(0, self._original_tree_item_background)\n self._highlighted_tree_item = None\n self._original_tree_item_background = None\n\n # Tree view stays enabled (removed: self.tree_viewer.setEnabled(True))\n\n # Hide Path column in browse mode (tree shows location)\n self.listing_table.setColumnHidden(8, True)\n\n # Restore previous browse state\n if self._last_browsed_state:\n directory_data = self._last_browsed_state.get('directory_data')\n path = self._last_browsed_state.get('path')\n\n if directory_data and path:\n try:\n # Navigate the tree view back to this location\n # This will also update the listing table via on_item_clicked\n self._restore_tree_selection(path, directory_data)\n except Exception as e:\n self.statusBar().showMessage(f\"Error restoring directory view: {str(e)}\")\n\n # Clear status bar\n self.statusBar().clearMessage()\n\n def _restore_tree_selection(self, path, directory_data):\n \"\"\"Restore tree view selection to a previous location.\"\"\"\n if not path or not self.tree_viewer:\n return\n\n # Reuse the navigate_tree_to_path logic but without the red highlight\n path_parts = [p for p in path.split('/') if p]\n if not path_parts:\n # Root path, select the partition\n root = self.tree_viewer.invisibleRootItem()\n start_offset = directory_data.get('start_offset')\n if start_offset is not None:\n for i in range(root.childCount()):\n child = root.child(i)\n child_data = child.data(0, Qt.UserRole)\n if child_data and child_data.get('start_offset') == start_offset:\n self.tree_viewer.setCurrentItem(child)\n self.tree_viewer.scrollToItem(child)\n # Manually trigger the item clicked event to update the listing table\n self.on_item_clicked(child, 0)\n break\n return\n\n # Full path restoration\n root = self.tree_viewer.invisibleRootItem()\n current_item = None\n\n # Find the correct partition\n start_offset = directory_data.get('start_offset')\n if start_offset is not None:\n for i in range(root.childCount()):\n child = root.child(i)\n child_data = child.data(0, Qt.UserRole)\n if child_data and child_data.get('start_offset') == start_offset:\n current_item = child\n current_item.setExpanded(True)\n break\n\n if not current_item:\n return\n\n # Traverse the path\n for part_index, part_name in enumerate(path_parts):\n found = False\n if not current_item.isExpanded():\n current_item.setExpanded(True)\n QApplication.processEvents()\n\n for i in range(current_item.childCount()):\n child = current_item.child(i)\n if child.text(0) == part_name:\n current_item = child\n found = True\n if part_index < len(path_parts) - 1:\n current_item.setExpanded(True)\n QApplication.processEvents()\n break\n\n if not found:\n break\n\n # Select the final item and trigger the click to update listing table\n if current_item:\n self.tree_viewer.setCurrentItem(current_item)\n self.tree_viewer.scrollToItem(current_item)\n # Manually trigger the item clicked event to update the listing table\n self.on_item_clicked(current_item, 0)\n\n def _wildcard_to_regex(self, pattern):\n \"\"\"Convert wildcard pattern (*.pdf, name.*) to regex pattern.\"\"\"\n # Escape special regex characters except * and ?\n pattern = re.escape(pattern)\n # Replace escaped wildcards with regex equivalents\n pattern = pattern.replace(r'\\*', '.*') # * matches any characters\n pattern = pattern.replace(r'\\?', '.') # ? matches single character\n return f\"^{pattern}$\" # Match entire string\n\n def _matches_wildcard(self, filename, pattern):\n \"\"\"Check if filename matches wildcard pattern.\"\"\"\n regex_pattern = self._wildcard_to_regex(pattern)\n return re.match(regex_pattern, filename, re.IGNORECASE) is not None\n\n def perform_search(self, search_query):\n \"\"\"Execute file search with wildcard support.\"\"\"\n if not self.image_handler:\n return\n\n statusbar = self.statusBar()\n statusbar.showMessage(f\"Searching for '{search_query}'...\")\n\n try:\n # Check if search query contains wildcards\n has_wildcards = '*' in search_query or '?' in search_query\n\n if has_wildcards:\n # For wildcard searches, get all files and filter locally\n files = self.image_handler.search_files(None)\n # Filter by wildcard pattern\n files = [f for f in files if self._matches_wildcard(f['name'], search_query)]\n else:\n # Regular substring search\n files = self.image_handler.search_files(search_query)\n\n # Clear and populate table\n self.listing_table.setRowCount(0)\n self.listing_table.setSortingEnabled(False)\n\n # Show columns relevant for search results\n self.listing_table.setColumnHidden(1, False) # Show Inode\n self.listing_table.setColumnHidden(2, False) # Show Type (can be files or folders)\n self.listing_table.setColumnHidden(4, False) # Show Created\n self.listing_table.setColumnHidden(5, False) # Show Accessed\n self.listing_table.setColumnHidden(6, False) # Show Modified\n self.listing_table.setColumnHidden(7, False) # Show Changed\n self.listing_table.setColumnHidden(8, False) # Show Path (critical for search)\n self.listing_table.setColumnHidden(9, True) # Hide Info\n\n # Populate with search results\n for file in files:\n self.insert_search_result_row(file)\n\n self.listing_table.setSortingEnabled(True)\n\n # Update status bar with result count\n statusbar.showMessage(f\"{len(files)} result(s) for '{search_query}'\")\n\n except Exception as e:\n statusbar.showMessage(f\"Search error: {str(e)}\")\n\n def insert_search_result_row(self, file_data):\n \"\"\"Insert a search result into the listing table.\"\"\"\n row_position = self.listing_table.rowCount()\n self.listing_table.insertRow(row_position)\n\n # Get file icon based on type\n file_name = file_data.get('name', '')\n is_directory = file_data.get('is_directory', False)\n\n if is_directory:\n # Directory icon\n icon_path = self.db_manager.get_icon_path('folder', 'folder')\n else:\n # File icon based on extension\n extension = os.path.splitext(file_name)[1].lower()\n # Remove the dot from extension for icon lookup (e.g., '.pdf' -> 'pdf')\n ext_without_dot = extension[1:] if extension else 'txt'\n icon_path = self.db_manager.get_icon_path('file', ext_without_dot)\n\n # Create name item with icon\n name_item = QTableWidgetItem(file_name)\n name_item.setIcon(QIcon(icon_path))\n name_item.setData(Qt.UserRole, file_data)\n\n # Create other items\n inode_item = QTableWidgetItem(str(file_data.get('inode_number', '')))\n type_item = QTableWidgetItem(\"Folder\" if is_directory else \"File\")\n size_item = SizeTableWidgetItem(self.image_handler.get_readable_size(file_data.get('size', 0)))\n size_item.setData(Qt.UserRole, file_data.get('size', 0))\n\n created_item = QTableWidgetItem(file_data.get('created', ''))\n accessed_item = QTableWidgetItem(file_data.get('accessed', ''))\n modified_item = QTableWidgetItem(file_data.get('modified', ''))\n changed_item = QTableWidgetItem(file_data.get('changed', ''))\n path_item = QTableWidgetItem(file_data.get('path', ''))\n\n # Set items in table\n self.listing_table.setItem(row_position, 0, name_item)\n self.listing_table.setItem(row_position, 1, inode_item)\n self.listing_table.setItem(row_position, 2, type_item) # Type column\n self.listing_table.setItem(row_position, 3, size_item)\n self.listing_table.setItem(row_position, 4, created_item)\n self.listing_table.setItem(row_position, 5, accessed_item)\n self.listing_table.setItem(row_position, 6, modified_item)\n self.listing_table.setItem(row_position, 7, changed_item)\n self.listing_table.setItem(row_position, 8, path_item)\n\n def apply_browse_filter(self, extensions):\n \"\"\"Apply file type filter to current directory in browse mode.\"\"\"\n if not self.image_handler or self.current_offset is None:\n return\n\n try:\n statusbar = self.statusBar()\n statusbar.showMessage(\"Applying filter...\")\n\n if extensions is None:\n # No filter - show all files in current directory (need to get current inode)\n # For simplicity, refresh the current view\n # This requires tracking current inode - for now, we'll just clear the message\n statusbar.showMessage(\"Show all files in current directory\")\n # TODO: Implement proper directory refresh\n else:\n # Get all files from current directory and filter by extension\n # This requires getting the current inode and filtering results\n # For now, we'll use the list_files method from ImageHandler\n files = self.image_handler.list_files(extensions)\n\n # Clear and populate table with filtered results\n self.listing_table.setRowCount(0)\n self.listing_table.setSortingEnabled(False)\n\n for file in files:\n self.insert_search_result_row(file)\n\n self.listing_table.setSortingEnabled(True)\n statusbar.showMessage(f\"{len(files)} file(s) matching selected types\")\n\n except Exception as e:\n logger.error(f\"Filter error: {str(e)}\")\n self.statusBar().showMessage(f\"Filter error: {str(e)}\")\n\n def open_search_result_file(self, file_data):\n \"\"\"Open a file from search results in the viewer tabs.\"\"\"\n # This is the same as double-clicking - open in viewer\n # Use the existing file opening logic\n self.load_file_content(file_data)\n\n def show_file_in_directory(self, file_data):\n \"\"\"Navigate to the file's directory in browse mode and select the file.\"\"\"\n try:\n # Clear search and switch to browse mode\n self.listing_search_bar.clear() # This triggers switch_to_browse_mode\n\n # Get file's location details\n start_offset = file_data.get('start_offset')\n file_path = file_data.get('path', '')\n file_inode = file_data.get('inode_number')\n\n if start_offset is None or not file_path:\n self.statusBar().showMessage(\"Cannot determine file location\")\n return\n\n # Parse the path to get parent directory\n # file_path format: \"/path/to/file.txt\"\n path_parts = file_path.split('/')\n if len(path_parts) < 2:\n # File is in root\n parent_inode = 5\n self.current_path = \"/\"\n else:\n # Need to navigate to parent directory\n # For simplicity, navigate to root for now\n # TODO: Implement proper path-to-inode resolution for deep directories\n parent_inode = 5\n self.current_path = \"/\"\n\n # Load the parent directory contents\n entries = self.image_handler.get_directory_contents(start_offset, parent_inode)\n self.current_offset = start_offset\n self.populate_listing_table(entries, start_offset)\n\n # Find and select the file in the table\n for row in range(self.listing_table.rowCount()):\n item = self.listing_table.item(row, 0)\n if item:\n item_data = item.data(Qt.UserRole)\n if item_data and item_data.get('inode_number') == file_inode:\n # Select this row\n self.listing_table.selectRow(row)\n # Scroll to make it visible\n self.listing_table.scrollToItem(item)\n break\n\n # Update status bar\n self.statusBar().showMessage(f\"Showing {file_data.get('name', 'file')} in directory\")\n\n # TODO: Expand tree view to show this location\n # This would require traversing the tree to find and expand the correct nodes\n\n except Exception as e:\n logger.error(f\"Error showing file in directory: {str(e)}\")\n self.statusBar().showMessage(f\"Error navigating to file location: {str(e)}\")\n\n # ==================== END SEARCH AND FILTER HANDLERS ====================\n\n def on_listing_table_item_clicked(self, item):\n \"\"\"Handle click events on the listing table.\"\"\"\n row = item.row()\n\n # Get data from the name column (column 0)\n data = self.listing_table.item(row, 0).data(Qt.UserRole)\n if not data:\n return\n\n self.current_selected_data = data\n\n statusbar = self.statusBar()\n statusbar.showMessage(\"Loading content...\")\n\n try:\n if data.get(\"type\") == \"volume\":\n # Handle volume/partition - navigate into its root directory\n start_offset = data.get(\"start_offset\", 0)\n\n # Reset path to root of this volume\n self.current_path = \"/\"\n\n # Get root directory contents of the volume (inode 5 is typically root for NTFS)\n entries = self.image_handler.get_directory_contents(start_offset, 5)\n\n # Update directory up button - should be disabled since we're at volume root\n self.update_directory_up_button()\n\n # Populate listing table with volume contents\n self.populate_listing_table(entries, start_offset)\n\n # Add to navigation history\n self._add_to_history(data)\n\n statusbar.clearMessage()\n\n elif data.get(\"type\") == \"directory\":\n inode_number = data.get(\"inode_number\", 0)\n\n # Find and select the corresponding item in the tree view if possible\n self.select_tree_item_by_inode(inode_number, data[\"start_offset\"])\n\n # Update current path for directory navigation\n if data.get(\"name\") == \"..\":\n # Go to parent directory\n self.current_path = os.path.dirname(self.current_path)\n if self.current_path == \"\":\n self.current_path = \"/\"\n elif data.get(\"inode_number\") == 5: # Root directory\n self.current_path = \"/\"\n else:\n # Navigate into directory\n self.current_path = os.path.join(self.current_path, data.get(\"name\", \"\"))\n\n # Directories are processed synchronously\n entries = self.image_handler.get_directory_contents(data[\"start_offset\"], inode_number)\n\n # Update directory up button state\n self.update_directory_up_button()\n\n self.populate_listing_table(entries, data[\"start_offset\"])\n\n # Add to navigation history\n self._add_to_history(data)\n\n statusbar.clearMessage()\n else:\n # Find and select the corresponding file in the tree view if possible\n self.select_tree_item_by_inode(data.get(\"inode_number\"), data[\"start_offset\"])\n\n # Files are processed in a background thread\n inode_number = data.get(\"inode_number\", 0)\n self.file_worker = self.FileContentWorker(self.image_handler, inode_number, data[\"start_offset\"])\n self.file_worker.completed.connect(\n lambda content, _: self.update_viewer_with_file_content(content, data))\n self.file_worker.error.connect(\n lambda msg: (self.log_error(msg), statusbar.clearMessage()))\n self.file_worker.start()\n\n except Exception as e:\n self.log_error(f\"Error processing listing table click: {str(e)}\")\n statusbar.clearMessage()\n\n\n\n# Add a worker thread for exporting files and directories\nclass ExportWorker(QThread):\n progress = Signal(int, int) # current, total\n finished = Signal()\n error = Signal(str)\n status_update = Signal(str)\n\n def __init__(self, image_handler, inode_number, offset, dest_dir, name, is_directory):\n super().__init__()\n self.image_handler = image_handler\n self.inode_number = inode_number\n self.offset = offset\n self.dest_dir = dest_dir\n self.name = name\n self.is_directory = is_directory\n self.total_items = 0\n self.processed_items = 0\n\n def run(self):\n try:\n if self.dest_dir:\n if self.is_directory:\n self._export_directory(self.inode_number, self.offset, self.dest_dir, self.name)\n else:\n self._export_file(self.inode_number, self.offset, self.dest_dir, self.name)\n self.finished.emit()\n except Exception as e:\n self.error.emit(f\"Export error: {str(e)}\")\n\n def _export_directory(self, inode_number, offset, dest_dir, name):\n \"\"\"Export a directory with progress reporting.\"\"\"\n try:\n # Create the directory in the destination\n new_dest_dir = os.path.join(dest_dir, name)\n os.makedirs(new_dest_dir, exist_ok=True)\n\n # Get directory contents\n entries = self.image_handler.get_directory_contents(offset, inode_number)\n\n # Count total items for progress reporting\n self._count_items_recursive(entries, offset)\n\n # Export each entry\n for entry in entries:\n try:\n self._export_item(\n entry[\"inode_number\"],\n offset,\n new_dest_dir,\n entry[\"name\"],\n entry[\"is_directory\"]\n )\n except Exception as e:\n self.error.emit(f\"Error exporting {entry['name']}: {str(e)}\")\n\n except Exception as e:\n self.error.emit(f\"Error exporting directory {name}: {str(e)}\")\n\n def _count_items_recursive(self, entries, offset):\n \"\"\"Count total items in a directory and subdirectories.\"\"\"\n self.total_items += len(entries)\n\n # Count items in subdirectories\n for entry in entries:\n if entry[\"is_directory\"]:\n sub_entries = self.image_handler.get_directory_contents(offset, entry[\"inode_number\"])\n self._count_items_recursive(sub_entries, offset)\n\n def _export_item(self, inode_number, offset, dest_dir, name, is_directory):\n \"\"\"Export a single item (file or directory).\"\"\"\n self.status_update.emit(f\"Exporting {name}\")\n\n if is_directory:\n sub_dest_dir = os.path.join(dest_dir, name)\n os.makedirs(sub_dest_dir, exist_ok=True)\n\n # Get subdirectory contents\n entries = self.image_handler.get_directory_contents(offset, inode_number)\n\n # Export each entry in the subdirectory\n for entry in entries:\n self._export_item(\n entry[\"inode_number\"],\n offset,\n sub_dest_dir,\n entry[\"name\"],\n entry[\"is_directory\"]\n )\n else:\n self._export_file(inode_number, offset, dest_dir, name)\n\n # Update progress\n self.processed_items += 1\n self.progress.emit(self.processed_items, self.total_items)\n\n def _export_file(self, inode_number, offset, dest_dir, name):\n \"\"\"Export a single file with chunked processing.\"\"\"\n try:\n file_content, _ = self.image_handler.get_file_content(inode_number, offset)\n if file_content:\n file_path = os.path.join(dest_dir, name)\n with open(file_path, 'wb') as f:\n f.write(file_content)\n self.processed_items += 1\n self.progress.emit(self.processed_items, self.total_items)\n except Exception as e:\n self.error.emit(f\"Error exporting file {name}: {str(e)}\")\n"
},
{
"path": "modules/metadata_tab.py",
"content": "import os\nimport datetime\nfrom PySide6.QtWidgets import QTextEdit, QSizePolicy, QWidget, QVBoxLayout\nimport hashlib\nfrom magic import Magic\nimport re\n\n\nclass MetadataViewer(QWidget):\n def __init__(self, image_handler):\n super(MetadataViewer, self).__init__()\n self.image_handler = image_handler\n self.init_ui()\n\n def init_ui(self):\n # Add the text edit to the layout\n layout = QVBoxLayout(self)\n layout.setContentsMargins(0, 0, 0, 0)\n layout.setSpacing(0)\n\n self.metadata_text_edit = QTextEdit()\n self.metadata_text_edit.setReadOnly(True)\n self.metadata_text_edit.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Expanding)\n\n layout.addWidget(self.metadata_text_edit)\n\n def display_metadata(self, data):\n # Check if this is a carved file with content already provided\n is_carved = data.get('is_carved', False)\n file_content = data.get('file_content')\n\n if is_carved and file_content:\n # Carved file - use provided content, no filesystem metadata available\n metadata = None\n else:\n # Regular file - read from filesystem\n inode_number = data.get('inode_number')\n offset = data.get('start_offset')\n file_content, metadata = self.image_handler.get_file_content(inode_number, offset)\n\n if metadata is None:\n self.metadata_text_edit.setHtml(\"No metadata available.\")\n return\n\n def format_time(timestamp):\n if timestamp is None or timestamp == 0:\n return \"N/A\"\n try:\n return datetime.datetime.utcfromtimestamp(timestamp).strftime('%Y-%m-%d %H:%M:%S') + \" UTC\"\n except Exception:\n return \"N/A\"\n\n # Handle timestamps - use filesystem metadata if available, otherwise use carved timestamp\n if is_carved:\n # For carved files, use the extracted/preserved timestamp\n carved_timestamp = data.get('carved_timestamp', 'N/A')\n created_time = 'N/A (carved file)'\n modified_time = carved_timestamp if carved_timestamp != 'N/A' else 'N/A (carved file)'\n accessed_time = 'N/A (carved file)'\n changed_time = 'N/A (carved file)'\n else:\n # For regular files, use filesystem metadata\n created_time = format_time(metadata.crtime) if hasattr(metadata, 'crtime') else 'N/A'\n modified_time = format_time(metadata.mtime) if hasattr(metadata, 'mtime') else 'N/A'\n accessed_time = format_time(metadata.atime) if hasattr(metadata, 'atime') else 'N/A'\n changed_time = format_time(metadata.ctime) if hasattr(metadata, 'ctime') else 'N/A'\n\n md5_hash = hashlib.md5(file_content).hexdigest() if file_content else \"N/A\"\n sha256_hash = hashlib.sha256(file_content).hexdigest() if file_content else \"N/A\"\n mime_type = Magic().from_buffer(file_content) if file_content else \"N/A\"\n\n # Ensure size is an integer before passing to get_readable_size\n if is_carved:\n # For carved files, use size from data dict\n size = data.get('size', 0)\n size = self.image_handler.get_readable_size(size)\n else:\n # For regular files, use filesystem metadata\n size = metadata.size if metadata.size else 'N/A'\n if isinstance(size, str):\n try:\n size = int(size) # Convert size to int if it's a string\n except ValueError:\n size = 'N/A' # Keep as 'N/A' if conversion fails\n else:\n size = self.image_handler.get_readable_size(size) # Convert size to a readable format\n\n # extended_metadata = f\"Metadata\"\n extended_metadata = f\"Metadata\"\n\n # Add carved file indicator if applicable\n if is_carved:\n extended_metadata += f\"โ Carved File (recovered from unallocated space)
\"\n\n extended_metadata += f\"\"\n extended_metadata += f\"| Name: | {data.get('name', 'N/A')} |
|---|
\"\n extended_metadata += f\"| Type: | {data.get('type')} |
|---|
\"\n extended_metadata += f\"| MIME Type: | {mime_type} |
|---|
\"\n extended_metadata += f\"| Size: | {size} |
|---|
\"\n\n # Add disk offset for carved files\n if is_carved:\n offset_value = data.get('offset', 0)\n extended_metadata += f\"| Disk Offset: | {hex(offset_value)} ({offset_value} bytes) |
|---|
\"\n\n extended_metadata += f\"| Modified: | {modified_time} |
|---|
\"\n extended_metadata += f\"| Accessed: | {accessed_time} |
|---|
\"\n extended_metadata += f\"| Created: | {created_time} |
|---|
\"\n extended_metadata += f\"| Changed: | {changed_time} |
|---|
\"\n extended_metadata += f\"| MD5: | {md5_hash} |
|---|
\"\n extended_metadata += f\"| SHA-256: | {sha256_hash} |
|---|
\"\n extended_metadata += f\"
\"\n extended_metadata += f\"
\"\n extended_metadata += f\"
\"\n\n # Skip istat for carved files (no inode available)\n if not is_carved and os.name == 'nt':\n istat_output = self.run_istat(data.get('start_offset'), data.get('inode_number'), self.image_handler.image_path)\n extended_metadata += (\n f\"From The Sleuth Kit istat Tool\")\n extended_metadata += (f\"\")\n extended_metadata += (f\"
{istat_output}\")\n extended_metadata += (f\"
Metadata Information
'\n\n for key, value in metadata.items():\n details += f'{key}: {value}
'\n\n details += ''\n\n self.metadataPanel.setHtml(details)\n\n def setup_table(self, values):\n # Reset and set up table\n self.tableWidget.clear()\n self.tableWidget.setRowCount(len(values))\n self.tableWidget.setColumnCount(3)\n self.tableWidget.setHorizontalHeaderLabels([\"Name\", \"Type\", \"Value\"])\n\n # Set initial widths to balance out based on common sizes\n self.tableWidget.setColumnWidth(0, 150) # Name\n self.tableWidget.setColumnWidth(1, 150) # Type\n self.tableWidget.setColumnWidth(2, 450) # Value\n\n # Set dynamic resizing behavior\n header = self.tableWidget.horizontalHeader()\n header.setSectionResizeMode(0, QHeaderView.Stretch) # Name column to stretch based on content\n header.setSectionResizeMode(1, QHeaderView.ResizeToContents) # Type column adjusts to fit the content\n header.setSectionResizeMode(2, QHeaderView.Stretch) # Value column stretches with window resize\n\n # Populate table rows\n for i, value in enumerate(values):\n self.tableWidget.setItem(i, 0, QTableWidgetItem(value.name()))\n self.tableWidget.setItem(i, 1, QTableWidgetItem(str(value.value_type_str())))\n self.tableWidget.setItem(i, 2, QTableWidgetItem(str(value.value())))\n\n def display_values_in_table(self, values):\n self.setup_table(values)\n\n def on_item_clicked(self, item, column):\n registry_object = item.data(0, Qt.UserRole)\n\n if isinstance(registry_object, RegistryKey):\n self.display_metadata(registry_object)\n self.display_values_in_table(registry_object.values())\n\n elif isinstance(registry_object, RegistryValue):\n self.setup_table([registry_object])\n\n # clear the window\n def clear(self):\n self.treeWidget.clear()\n self.metadataPanel.clear()\n self.tableWidget.clear()\n"
},
{
"path": "modules/text_tab.py",
"content": "import base64\nimport html\nimport re\nimport sqlite3\nimport urllib\nimport urllib.parse\nfrom enum import Enum\nfrom functools import partial\n\nimport chardet\nfrom PySide6.QtCore import Qt, QSize\nfrom PySide6.QtGui import QAction, QIcon, QTextCursor, QTextCharFormat, QColor\nfrom PySide6.QtWidgets import QWidget, QVBoxLayout, QTextEdit, QToolBar, QLineEdit, QSizePolicy, QComboBox, QLabel, \\\n QMessageBox, QToolTip, QToolButton, QMenu\n\n\nclass SearchDirection(Enum):\n NEXT = 1\n PREVIOUS = 2\n\n\nclass TextViewerManager:\n PAGE_SIZE = 2000\n\n def __init__(self):\n self.file_content = b\"\" # Store raw byte content\n self.text_content = \"\" # This will store the extracted strings\n self.current_page = 0\n self.encoding = 'utf-8'\n self.last_search_str = \"\"\n self.current_match_index = -1\n self.page_changed_callback = None\n\n self.matches = []\n\n def get_total_pages(self):\n return (len(self.text_content) - 1) // self.PAGE_SIZE + 1\n\n @staticmethod\n def detect_encoding(file_content_chunk):\n detector = chardet.detect(file_content_chunk)\n encoding = detector.get('encoding')\n return encoding if encoding else 'utf-8'\n\n def extract_strings_from_content(self):\n encoding = self.detect_encoding(self.file_content[:1024]) # Detect encoding based on the first 1024 bytes\n try:\n text = self.file_content.decode(encoding)\n except UnicodeDecodeError:\n text = self.file_content.decode('ISO-8859-1') # Fallback to ISO-8859-1 if decoding fails\n\n # Use regex to extract sequences of printable characters (length >= 4)\n strings = re.findall(r\"[ -~]{4,}\", text)\n\n # Join the strings with newlines to store them\n self.text_content = \"\\n\".join(strings)\n\n def load_text_content(self, file_content):\n self.file_content = file_content\n self.extract_strings_from_content() # Extract printable strings\n self.current_page = 0\n\n def get_text_content_for_current_page(self):\n start_idx = self.current_page * self.PAGE_SIZE\n end_idx = (self.current_page + 1) * self.PAGE_SIZE\n return self.text_content[start_idx:end_idx]\n\n def change_page(self, delta):\n new_page = self.current_page + delta\n if 0 <= new_page * self.PAGE_SIZE < len(self.text_content):\n self.current_page = new_page\n if self.page_changed_callback:\n self.page_changed_callback()\n\n def jump_to_start(self):\n self.current_page = 0\n if self.page_changed_callback:\n self.page_changed_callback()\n\n def jump_to_end(self):\n self.current_page = len(self.text_content) // self.PAGE_SIZE\n if self.page_changed_callback:\n self.page_changed_callback()\n\n def search_for_string(self, search_str, direction=SearchDirection.NEXT):\n if not search_str: # If search string is empty, do nothing\n return\n\n # Only find all occurrences of the search string if the search string has changed\n if self.last_search_str != search_str:\n self.matches = []\n self.current_match_index = -1\n\n # Find all occurrences of the search string in the text content\n start_idx = 0\n while start_idx < len(self.text_content):\n idx = self.text_content.find(search_str, start_idx)\n if idx == -1:\n break\n self.matches.append(idx)\n start_idx = idx + len(search_str) # Update the start index to the end of the current match\n\n self.last_search_str = search_str\n\n # If no matches were found, return\n if not self.matches:\n return\n\n # Update the current match index based on the search direction\n if direction == SearchDirection.NEXT:\n self.current_match_index = (self.current_match_index + 1) % len(self.matches)\n else:\n self.current_match_index = (self.current_match_index - 1) % len(self.matches)\n\n # Update the current page to the page containing the current match\n match_position = self.matches[self.current_match_index]\n self.current_page = match_position // self.PAGE_SIZE\n\n def clear_content(self):\n self.file_content = b\"\"\n self.current_page = 0\n self.last_search_str = \"\"\n self.current_match_index = -1\n self.matches = []\n\n\nclass TextViewer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n self.manager = TextViewerManager()\n self.manager.page_changed_callback = self.refresh_content\n\n self.init_ui()\n\n def init_ui(self):\n self.layout = QVBoxLayout(self)\n self.layout.setContentsMargins(0, 0, 0, 0)\n self.layout.setSpacing(0)\n\n self.setup_toolbar()\n self.setup_text_edit()\n\n self.setLayout(self.layout)\n\n def setup_toolbar(self):\n self.toolbar = QToolBar(self)\n self.toolbar.setContentsMargins(0, 0, 0, 0)\n self.toolbar.setMovable(False)\n self.toolbar.setIconSize(QSize(16, 16)) # Reduce icon size\n self.toolbar.setFixedHeight(32) # Reduce toolbar height\n self.toolbar.setStyleSheet(\"\"\"\n QToolBar {\n spacing: 2px;\n padding: 1px;\n }\n QToolButton {\n padding: 2px;\n margin: 1px;\n }\n \"\"\")\n # disable right click\n self.toolbar.setContextMenuPolicy(Qt.PreventContextMenu)\n\n # Navigation buttons\n self.first_action = QAction(QIcon(\"Icons/icons8-thick-arrow-pointing-up-50.png\"), \"Jump to Start\", self)\n self.first_action.triggered.connect(self.manager.jump_to_start)\n self.toolbar.addAction(self.first_action)\n\n self.prev_action = QAction(QIcon(\"Icons/icons8-left-arrow-50.png\"), \"Previous Page\", self)\n self.prev_action.triggered.connect(lambda: self.manager.change_page(-1))\n self.toolbar.addAction(self.prev_action)\n\n # Page entry\n self.page_entry = QLineEdit(self)\n self.page_entry.setMaximumWidth(40)\n self.page_entry.setFixedHeight(25) # Set fixed height for input\n self.page_entry.setPlaceholderText(\"1\")\n self.page_entry.returnPressed.connect(self.go_to_page_by_entry)\n self.toolbar.addWidget(self.page_entry)\n\n # Total pages label\n self.total_pages_label = QLabel(\" of \")\n self.total_pages_label.setFixedHeight(25) # Set fixed height for label\n self.toolbar.addWidget(self.total_pages_label)\n\n self.next_action = QAction(QIcon(\"Icons/icons8-right-arrow-50.png\"), \"Next Page\", self)\n self.next_action.triggered.connect(lambda: self.manager.change_page(1))\n self.toolbar.addAction(self.next_action)\n\n self.last_action = QAction(QIcon(\"Icons/icons8-down-50.png\"), \"Jump to End\", self)\n self.last_action.triggered.connect(self.manager.jump_to_end)\n self.toolbar.addAction(self.last_action)\n\n # Add a small spacer\n spacer = QWidget(self)\n spacer.setFixedSize(20, 0)\n self.toolbar.addWidget(spacer)\n\n # Font size controls\n font_label = QLabel(\"Font Size: \")\n font_label.setFixedHeight(25) # Set fixed height for label\n self.toolbar.addWidget(font_label)\n\n self.font_size_combobox = QComboBox(self)\n self.font_size_combobox.setFixedHeight(25) # Set fixed height for combobox\n self.font_size_combobox.setFixedWidth(60) # Set fixed width to show full numbers\n self.font_size_combobox.addItems([\"8\", \"10\", \"12\", \"14\", \"16\", \"18\", \"20\", \"24\", \"28\", \"32\", \"36\"])\n self.font_size_combobox.currentTextChanged.connect(self.update_font_size)\n self.toolbar.addWidget(self.font_size_combobox)\n\n # Add a spacer to push the search bar to the right\n spacer = QWidget(self)\n spacer.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Preferred)\n self.toolbar.addWidget(spacer)\n\n # Search controls\n self.search_input = QLineEdit(self)\n self.search_input.setPlaceholderText(\"Search...\")\n self.search_input.setMaximumWidth(180) # Reduce width to save space\n self.search_input.setFixedHeight(25) # Reduce height\n self.search_input.setContentsMargins(5, 0, 5, 0) # Reduce margins\n self.search_input.returnPressed.connect(self.search_next)\n self.toolbar.addWidget(self.search_input)\n\n self.layout.addWidget(self.toolbar)\n\n def setup_text_edit(self):\n self.text_edit = CustomTextEdit(self)\n self.text_edit.setReadOnly(True)\n self.layout.addWidget(self.text_edit)\n\n def display_text_content(self, file_content):\n self.manager.load_text_content(file_content)\n self.refresh_content()\n\n def clear_content(self):\n self.text_edit.clear()\n self.manager.clear_content()\n\n def search_next(self):\n # Call the search_for_string method with the updated match index\n self.manager.search_for_string(self.search_input.text(), SearchDirection.NEXT)\n\n # Update the highlighted text to highlight the current match\n self.update_highlighted_text()\n\n def update_highlighted_text(self):\n if not self.manager.matches or not (0 <= self.manager.current_match_index < len(self.manager.matches)):\n return\n\n cursor = self.text_edit.textCursor()\n cursor.clearSelection()\n\n start_pos = self.manager.matches[self.manager.current_match_index] % self.manager.PAGE_SIZE\n end_pos = start_pos + len(self.search_input.text())\n\n highlight_format = QTextCharFormat()\n highlight_format.setBackground(QColor(\"yellow\"))\n\n cursor.setPosition(start_pos, QTextCursor.MoveAnchor)\n cursor.setPosition(end_pos, QTextCursor.KeepAnchor)\n cursor.setCharFormat(highlight_format)\n\n def update_font_size(self):\n selected_size = int(self.font_size_combobox.currentText())\n current_font = self.text_edit.font()\n current_font.setPointSize(selected_size)\n self.text_edit.setFont(current_font)\n\n def go_to_page_by_entry(self):\n try:\n page_num = int(self.page_entry.text()) - 1\n if 0 <= page_num < self.manager.get_total_pages():\n self.manager.current_page = page_num\n self.refresh_content()\n else:\n QMessageBox.warning(self, \"Invalid Page\", \"Page number out of range.\")\n except ValueError:\n QMessageBox.warning(self, \"Invalid Page\", \"Please enter a valid page number.\")\n\n def refresh_content(self):\n text_content = self.manager.get_text_content_for_current_page()\n self.text_edit.setPlainText(text_content)\n current_page = self.manager.current_page + 1 # Pages start from 1\n total_pages = self.manager.get_total_pages()\n self.page_entry.setText(str(current_page))\n self.total_pages_label.setText(f\" of {total_pages}\")\n\n\nclass CustomTextEdit(QTextEdit):\n def __init__(self, *args, **kwargs):\n super(CustomTextEdit, self).__init__(*args, **kwargs)\n self.setMouseTracking(True)\n\n def contextMenuEvent(self, event):\n menu = self.createStandardContextMenu()\n menu.addSeparator()\n\n # Define all decoding actions\n decoding_actions = {\n \"Decode Base64\": self.decodeBase64,\n \"Decode Hex\": self.decodeHex,\n \"Decode URL\": self.decodeURL,\n \"Decode HTML\": self.decodeHTML,\n \"Decode Octal\": self.decodeOctal,\n \"Decode Binary\": self.decodeBinary,\n }\n\n for action_text, method in decoding_actions.items():\n action = menu.addAction(action_text)\n action.triggered.connect(partial(method))\n\n menu.exec(event.globalPos())\n\n def decodeBase64(self):\n self.decodeSelectedText('base64')\n\n def decodeHex(self):\n self.decodeSelectedText('hex')\n\n def decodeURL(self):\n self.decodeSelectedText('url')\n\n def decodeHTML(self):\n self.decodeSelectedText('html')\n\n def decodeOctal(self):\n self.decodeSelectedText('octal')\n\n def decodeBinary(self):\n self.decodeSelectedText('binary')\n\n def decodeSelectedText(self, encoding_type):\n selected_text = self.textCursor().selectedText()\n try:\n if encoding_type == 'base64':\n decoded_bytes = base64.b64decode(selected_text)\n elif encoding_type == 'hex':\n decoded_bytes = bytes.fromhex(selected_text)\n elif encoding_type == 'url':\n decoded_text = urllib.parse.unquote_plus(selected_text)\n QToolTip.showText(self.mapToGlobal(self.cursorRect().topLeft()), decoded_text)\n return\n elif encoding_type == 'html':\n decoded_text = html.unescape(selected_text)\n QToolTip.showText(self.mapToGlobal(self.cursorRect().topLeft()), decoded_text)\n return\n elif encoding_type == 'octal':\n decoded_text = ''.join(chr(int(octal, 8)) for octal in selected_text.split())\n QToolTip.showText(self.mapToGlobal(self.cursorRect().topLeft()), decoded_text)\n return\n elif encoding_type == 'binary':\n decoded_text = ''.join(chr(int(i, 2)) for i in selected_text.split())\n QToolTip.showText(self.mapToGlobal(self.cursorRect().topLeft()), decoded_text)\n return\n\n if encoding_type in ['base64', 'hex']:\n decoded_text = decoded_bytes.decode('utf-8')\n QToolTip.showText(self.mapToGlobal(self.cursorRect().topLeft()), decoded_text)\n\n\n\n except Exception as e:\n QToolTip.showText(self.mapToGlobal(self.cursorRect().topLeft()), f\"Invalid {encoding_type.upper()}\")\n\n def getDecodedText(self, selected_text):\n # Attempt decoding in various formats\n decoders = [\n self.tryDecodeBinary,\n self.tryDecodeOctal,\n self.tryDecodeBase64,\n self.tryDecodeHex,\n self.tryDecodeURL,\n self.tryDecodeHTML\n ]\n for decoder in decoders:\n decoded_text = decoder(selected_text)\n if decoded_text:\n return decoded_text\n return None\n\n def tryDecodeBase64(self, text):\n try:\n decoded_bytes = base64.b64decode(text, validate=True)\n return decoded_bytes.decode('utf-8')\n except Exception:\n return None\n\n def tryDecodeHex(self, text):\n try:\n decoded_bytes = bytes.fromhex(text)\n return decoded_bytes.decode('utf-8')\n except Exception:\n return None\n\n def tryDecodeURL(self, text):\n try:\n return urllib.parse.unquote_plus(text)\n except Exception:\n return None\n\n def tryDecodeHTML(self, text):\n try:\n return html.unescape(text)\n except Exception:\n return None\n\n def tryDecodeOctal(self, text):\n try:\n return ''.join(chr(int(octal, 8)) for octal in text.split())\n except Exception:\n return None\n\n def tryDecodeBinary(self, text):\n try:\n decoded_text = ''.join(chr(int(i, 2)) for i in text.split())\n\n return decoded_text\n except Exception:\n return None\n\n def mouseMoveEvent(self, event):\n super(CustomTextEdit, self).mouseMoveEvent(event)\n # Check if there's selected text\n selected_text = self.textCursor().selectedText()\n if selected_text:\n tooltip_text = self.getDecodedText(selected_text)\n if tooltip_text:\n QToolTip.showText(event.globalPos(), tooltip_text)\n else:\n QToolTip.hideText() # Hide any existing tooltip if there's no selection\n\n"
},
{
"path": "modules/unified_application_manager.py",
"content": "import os\nfrom ctypes import cast, POINTER\nfrom weakref import WeakValueDictionary\nimport mimetypes\nimport platform\nimport time\n\nfrom PySide6.QtCore import Qt, QUrl, Slot, QSize, QTimer, QPoint, QBuffer, QByteArray, QIODevice\nfrom PySide6.QtGui import QIcon, QPixmap, QImage, QAction, QPageLayout, QPainter, QColor, QPen, QTransform\nfrom PySide6.QtMultimedia import QMediaPlayer, QAudioOutput\nfrom PySide6.QtMultimediaWidgets import QVideoWidget\nfrom PySide6.QtPrintSupport import QPrinter, QPrintDialog\nfrom PySide6.QtWidgets import (QToolBar, QMessageBox, QScrollArea, QLineEdit, QFileDialog, QApplication)\nfrom PySide6.QtWidgets import QWidget, QVBoxLayout, QPushButton, QSlider, QLabel, QHBoxLayout, QComboBox, \\\n QSpacerItem, QSizePolicy\n\nfrom fitz import open as fitz_open, Matrix\n\nif os.name == \"nt\": # Windows\n from pycaw.pycaw import AudioUtilities, IAudioEndpointVolume\n from comtypes import CLSCTX_ALL\n\n\nclass PyTsk3StreamDevice(QIODevice):\n \"\"\"Custom QIODevice that streams data directly from pytsk3 file objects. \"\"\"\n\n def __init__(self, file_obj, file_size, parent=None):\n \"\"\"Initialize the stream device. \"\"\"\n super().__init__(parent)\n self.file_obj = file_obj\n self.file_size = file_size\n self.current_position = 0\n self._is_closed = False # Track if device has been closed\n\n def size(self):\n \"\"\"Return the total size of the media file.\"\"\"\n return self.file_size\n\n def isSequential(self):\n \"\"\"Return False to indicate this device supports seeking.\"\"\"\n return False\n\n def seek(self, pos):\n \"\"\"Seek to a specific position in the file.\"\"\"\n if 0 <= pos <= self.file_size:\n self.current_position = pos\n # Call parent seek to update internal state\n return super().seek(pos)\n return False\n\n def pos(self):\n \"\"\"Return the current position in the file.\"\"\"\n return self.current_position\n\n def atEnd(self):\n \"\"\"Return True if at end of file.\"\"\"\n return self.current_position >= self.file_size\n\n def readData(self, maxSize):\n \"\"\"Read data from the pytsk3 file object.\"\"\"\n # Safety check: Don't read if device is closed\n if self._is_closed:\n return b''\n\n if self.current_position >= self.file_size:\n return b''\n\n # Safety check: Make sure file_obj still exists\n if not self.file_obj:\n return b''\n\n try:\n # Calculate how much to read\n bytes_to_read = min(maxSize, self.file_size - self.current_position)\n\n # Read from pytsk3 file object\n data = self.file_obj.read_random(self.current_position, bytes_to_read)\n\n # Update position\n self.current_position += len(data)\n\n return data\n except Exception as e:\n # This is expected if the device was closed while reading\n if not self._is_closed:\n print(f\"Error reading from pytsk3 file object: {e}\")\n return b''\n\n def writeData(self, data):\n \"\"\"Write data (not supported for read-only device).\"\"\"\n return -1\n\n def close(self):\n \"\"\"Close the device and mark it as closed.\"\"\"\n self._is_closed = True\n self.file_obj = None # Release reference to file object\n super().close()\n\n\nclass UnifiedViewer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n self.current_path = None\n self.main_app = None\n self.layout = QVBoxLayout(self)\n self.layout.setContentsMargins(0, 0, 0, 0)\n\n # Check if Icons directory exists and create it if needed\n self.ensure_icons_directory()\n\n # Create placeholder widget to show when nothing is loaded\n self.placeholder = QLabel(\"No content loaded\")\n self.placeholder.setObjectName(\"placeholderLabel\") # For stylesheet targeting\n self.placeholder.setAlignment(Qt.AlignCenter)\n self.layout.addWidget(self.placeholder)\n\n # Initialize viewers as None for lazy loading\n self._pdf_viewer = None\n self._picture_viewer = None\n self._audio_video_player = None\n\n # Store media buffer for in-memory playback (keeps buffer alive during playback)\n self._media_buffer = None\n\n # Store stream device and file object for streaming playback from disk images\n self._media_stream_device = None\n self._media_file_obj = None\n\n def ensure_icons_directory(self):\n \"\"\"Check if Icons directory exists and create it if needed\"\"\"\n icons_dir = \"Icons\"\n if not os.path.exists(icons_dir):\n try:\n os.makedirs(icons_dir)\n print(f\"Created missing Icons directory: {icons_dir}\")\n\n # Create missing default icons\n self.create_default_icon(os.path.join(icons_dir, \"play.png\"), (50, 50), (0, 255, 0))\n self.create_default_icon(os.path.join(icons_dir, \"pause.png\"), (50, 50), (255, 165, 0))\n self.create_default_icon(os.path.join(icons_dir, \"stop.png\"), (50, 50), (255, 0, 0))\n self.create_default_icon(os.path.join(icons_dir, \"volume.png\"), (50, 50), (0, 0, 255))\n self.create_default_icon(os.path.join(icons_dir, \"mute.png\"), (50, 50), (128, 128, 128))\n except Exception as e:\n print(f\"Error creating Icons directory: {e}\")\n\n def create_default_icon(self, path, size, color):\n \"\"\"Create a simple colored square icon at the specified path\"\"\"\n try:\n image = QImage(size[0], size[1], QImage.Format_ARGB32)\n # Use literal transparent color instead of Qt.transparent\n image.fill(QColor(0, 0, 0, 0))\n\n painter = QPainter(image)\n painter.setPen(QPen(QColor(*color)))\n # Create a QColor with proper alpha channel\n brush_color = QColor(*color)\n brush_color.setAlpha(128) # Semi-transparent\n painter.setBrush(brush_color)\n\n if \"play\" in path:\n # Draw play triangle\n points = [\n QPoint(10, 10),\n QPoint(10, 40),\n QPoint(40, 25)\n ]\n painter.drawPolygon(points)\n elif \"pause\" in path:\n # Draw pause symbol\n painter.drawRect(15, 10, 8, 30)\n painter.drawRect(27, 10, 8, 30)\n elif \"stop\" in path:\n # Draw stop symbol\n painter.drawRect(15, 15, 20, 20)\n elif \"volume\" in path:\n # Draw volume symbol\n painter.drawRect(10, 20, 10, 10)\n painter.drawArc(20, 10, 20, 30, -45 * 16, 90 * 16)\n elif \"mute\" in path:\n # Draw mute symbol\n painter.drawRect(10, 20, 10, 10)\n painter.drawLine(25, 15, 35, 35)\n painter.drawLine(35, 15, 25, 35)\n\n painter.end()\n image.save(path)\n except Exception as e:\n print(f\"Error creating default icon {path}: {e}\")\n\n\n def get_pdf_viewer(self):\n \"\"\"Lazy initialization of PDF viewer\"\"\"\n if self._pdf_viewer is None:\n self._pdf_viewer = PDFViewer(self)\n self._pdf_viewer.setVisible(False)\n self.layout.addWidget(self._pdf_viewer)\n return self._pdf_viewer\n\n def get_picture_viewer(self):\n \"\"\"Lazy initialization of picture viewer\"\"\"\n if self._picture_viewer is None:\n self._picture_viewer = PictureViewer(self)\n self._picture_viewer.setVisible(False)\n self.layout.addWidget(self._picture_viewer)\n return self._picture_viewer\n\n def get_audio_video_player(self):\n \"\"\"Lazy initialization of audio/video player\"\"\"\n if self._audio_video_player is None:\n self._audio_video_player = AudioVideoPlayer(self)\n self._audio_video_player.setVisible(False)\n self.layout.addWidget(self._audio_video_player)\n return self._audio_video_player\n\n def load(self, content=None, mime_type=None, path=None, file_obj=None, file_size=None):\n \"\"\"Load content into the appropriate viewer.\"\"\"\n # Clear any previous content\n self.clear()\n self.current_path = path\n\n # Check if we have either content or file_obj\n if not content and not file_obj:\n self.placeholder.setVisible(True)\n return\n\n try:\n # Process PDF files\n if mime_type.startswith('application/pdf'):\n viewer = self.get_pdf_viewer()\n viewer.display(content)\n viewer.setVisible(True)\n self.placeholder.setVisible(False)\n return True\n\n # Process images\n elif mime_type.startswith('image/'):\n viewer = self.get_picture_viewer()\n viewer.display(content)\n viewer.setVisible(True)\n self.placeholder.setVisible(False)\n return True\n\n # Process audio and video - use streaming if file_obj provided, otherwise QBuffer\n elif mime_type.startswith(('audio/', 'video/')):\n player = self.get_audio_video_player()\n\n # Create a hint URL with the mime type to help the media backend\n # identify the format correctly\n hint_url = QUrl()\n hint_url.setScheme(\"memory\")\n suffix = mimetypes.guess_extension(mime_type) or '.tmp'\n hint_url.setPath(f\"media{suffix}\")\n\n # OPTION 1: Stream from pytsk3 file object (for large files from disk images)\n if file_obj is not None and file_size is not None:\n print(f\"Using streaming playback for {file_size} byte media file\")\n\n # Create custom stream device\n self._media_stream_device = PyTsk3StreamDevice(file_obj, file_size, self)\n\n # Open the stream device for reading\n if not self._media_stream_device.open(QIODevice.ReadOnly):\n print(\"Failed to open stream device for reading\")\n self.placeholder.setText(\"Error: Could not open stream device\")\n self.placeholder.setVisible(True)\n return False\n\n # Keep file_obj reference alive\n self._media_file_obj = file_obj\n\n # Set the media source from stream device\n player.media_player.setSourceDevice(self._media_stream_device, hint_url)\n\n # OPTION 2: Use QBuffer for in-memory playback (small files or pre-loaded content)\n elif content is not None:\n # Determine if we should use QBuffer based on size\n file_size_mb = len(content) / (1024 * 1024)\n print(f\"Using in-memory playback for {file_size_mb:.2f} MB media file\")\n\n # Create QBuffer for in-memory playback\n # QBuffer needs to stay alive during playback, so we store it as instance variable\n self._media_buffer = QBuffer()\n\n # Wrap content in QByteArray and set it to the buffer\n byte_array = QByteArray(content)\n self._media_buffer.setData(byte_array)\n\n # Open buffer for reading\n if not self._media_buffer.open(QIODevice.ReadOnly):\n print(\"Failed to open media buffer for reading\")\n self.placeholder.setText(\"Error: Could not open media buffer\")\n self.placeholder.setVisible(True)\n return False\n\n # Set the media source from buffer\n player.media_player.setSourceDevice(self._media_buffer, hint_url)\n\n else:\n self.placeholder.setText(\"Error: No content or stream source provided\")\n self.placeholder.setVisible(True)\n return False\n\n player.setVisible(True)\n self.placeholder.setVisible(False)\n\n # For audio files, configure for audio-only mode\n if mime_type.startswith('audio/'):\n try:\n player.set_audio_only_mode(True)\n except Exception as e:\n print(f\"Warning: Could not set audio-only mode: {e}\")\n\n return True\n\n # Unsupported file type\n else:\n self.placeholder.setText(f\"Unsupported file type: {mime_type}\")\n self.placeholder.setVisible(True)\n return False\n\n except Exception as e:\n self.placeholder.setText(f\"Error loading content: {str(e)}\")\n self.placeholder.setVisible(True)\n return False\n\n def clear(self):\n \"\"\"Clear all viewers and free up resources.\"\"\"\n # Hide all viewers\n if self._pdf_viewer:\n self._pdf_viewer.clear()\n self._pdf_viewer.setVisible(False)\n\n if self._picture_viewer:\n self._picture_viewer.clear()\n self._picture_viewer.setVisible(False)\n\n # Clean up media player\n if self._audio_video_player:\n try:\n # Stop playback\n self._audio_video_player.stop()\n except Exception as e:\n print(f\"Error stopping media player: {e}\")\n self._audio_video_player.setVisible(False)\n\n # Clean up media buffer\n if self._media_buffer:\n try:\n if self._media_buffer.isOpen():\n self._media_buffer.close()\n self._media_buffer = None\n except Exception as e:\n print(f\"Error closing media buffer: {e}\")\n\n # Clean up stream device - with safety delay\n if self._media_stream_device:\n # Store reference for delayed cleanup\n old_stream_device = self._media_stream_device\n old_file_obj = self._media_file_obj\n\n # Clear references immediately\n self._media_stream_device = None\n self._media_file_obj = None\n\n # Close the device after a short delay to let background threads finish\n # This is non-blocking and happens asynchronously\n def delayed_cleanup():\n try:\n if old_stream_device and old_stream_device.isOpen():\n old_stream_device.close()\n except Exception as e:\n print(f\"Error in delayed stream device cleanup: {e}\")\n\n # Schedule cleanup after 100ms (non-blocking)\n QTimer.singleShot(100, delayed_cleanup)\n else:\n # No stream device, just clear file object\n self._media_file_obj = None\n\n # Show the placeholder\n self.placeholder.setText(\"No content loaded\")\n self.placeholder.setVisible(True)\n self.current_path = None\n\n def display_application_content(self, file_content, full_file_path):\n \"\"\"Wrapper for backward compatibility - converts file extension to MIME type.\"\"\"\n file_extension = os.path.splitext(full_file_path)[-1].lower()\n mime_type = None\n\n # Map common extensions to MIME types\n if file_extension in ['.pdf']:\n mime_type = 'application/pdf'\n elif file_extension in ['.jpg', '.jpeg', '.png', '.bmp', '.gif']:\n mime_type = f'image/{file_extension[1:]}'\n elif file_extension in ['.mp3', '.wav', '.ogg', '.aac', '.m4a']:\n mime_type = f'audio/{file_extension[1:]}'\n elif file_extension in ['.mp4', '.mkv', '.flv', '.avi', '.mov', '.wmv']:\n mime_type = 'video/mp4'\n else:\n # Default to binary data\n mime_type = 'application/octet-stream'\n\n # Call the new load method with the determined MIME type\n return self.load(file_content, mime_type, full_file_path)\n\n def closeEvent(self, event):\n \"\"\"Handle proper cleanup when the widget is closed\"\"\"\n # Make sure to stop any media playback\n if self._audio_video_player:\n try:\n self._audio_video_player.stop()\n except:\n pass\n\n # Clean up media buffer\n if self._media_buffer:\n try:\n if self._media_buffer.isOpen():\n self._media_buffer.close()\n self._media_buffer = None\n except:\n pass\n\n # Clean up stream device (immediate, not delayed)\n if self._media_stream_device:\n try:\n if self._media_stream_device.isOpen():\n self._media_stream_device.close()\n self._media_stream_device = None\n except:\n pass\n\n # Release file object\n self._media_file_obj = None\n\n # Accept the close event\n super().closeEvent(event)\n\n def __del__(self):\n \"\"\"Ensure proper cleanup when the object is garbage collected\"\"\"\n # Clean up media resources\n try:\n if self._media_buffer and self._media_buffer.isOpen():\n self._media_buffer.close()\n if self._media_stream_device and self._media_stream_device.isOpen():\n self._media_stream_device.close()\n self._media_file_obj = None\n except:\n pass # Ignore errors during cleanup in destructor\n\n def shutdown(self):\n \"\"\"Properly shut down all resources, especially media players.\n Call this method before the application exits.\"\"\"\n try:\n # Force close any open viewers first\n if self._pdf_viewer:\n self._pdf_viewer.clear()\n\n if self._picture_viewer:\n self._picture_viewer.clear()\n\n # Explicit shutdown of audio/video player\n if self._audio_video_player:\n try:\n # Stop media playback and remove references\n self._audio_video_player.safe_stop()\n QApplication.processEvents()\n\n # Release reference\n player = self._audio_video_player\n self._audio_video_player = None\n except Exception as e:\n print(f\"Error during audio/video player shutdown: {e}\")\n\n # Clean up media buffer\n if self._media_buffer:\n try:\n if self._media_buffer.isOpen():\n self._media_buffer.close()\n self._media_buffer = None\n except Exception as e:\n print(f\"Error closing media buffer during shutdown: {e}\")\n\n # Clean up stream device\n if self._media_stream_device:\n try:\n if self._media_stream_device.isOpen():\n self._media_stream_device.close()\n self._media_stream_device = None\n except Exception as e:\n print(f\"Error closing stream device during shutdown: {e}\")\n\n # Release file object reference\n self._media_file_obj = None\n\n # Process any pending events\n QApplication.processEvents()\n\n except Exception as e:\n print(f\"Error during UnifiedViewer shutdown: {e}\")\n\n\nclass PictureViewer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n self.original_pixmap = None # Store the original QPixmap\n self.original_image_bytes = None # Store the original image bytes\n self.initialize_ui()\n\n def initialize_ui(self):\n self.layout = QVBoxLayout()\n self.layout.setContentsMargins(0, 0, 0, 0)\n self.layout.setSpacing(0)\n self.layout.setAlignment(Qt.AlignCenter)\n\n # Create a container for the toolbar and the application viewer\n container_widget = QWidget(self)\n\n container_layout = QVBoxLayout()\n container_layout.setContentsMargins(0, 0, 0, 0) # Remove any margins\n container_layout.setSpacing(0) # Remove spacing between toolbar and viewer\n\n # Create and set up the toolbar\n self.setup_toolbar()\n\n # Add the toolbar to the container layout\n container_layout.addWidget(self.toolbar)\n\n self.image_label = QLabel(self)\n self.image_label.setContentsMargins(0, 0, 0, 0)\n self.image_label.setAlignment(Qt.AlignCenter)\n\n self.scroll_area = QScrollArea(self)\n self.scroll_area.setContentsMargins(0, 0, 0, 0)\n self.scroll_area.setWidget(self.image_label)\n self.scroll_area.setWidgetResizable(True)\n\n container_layout.addWidget(self.scroll_area)\n container_widget.setLayout(container_layout)\n self.layout.addWidget(container_widget)\n self.setLayout(self.layout)\n\n def setup_toolbar(self):\n self.toolbar = QToolBar(self)\n self.toolbar.setContentsMargins(0, 0, 0, 0)\n self.toolbar.setMovable(False)\n self.toolbar.setIconSize(QSize(16, 16)) # Reduce icon size\n self.toolbar.setFixedHeight(32) # Reduce toolbar height\n # Disable right click\n self.toolbar.setContextMenuPolicy(Qt.PreventContextMenu)\n\n zoom_in_icon = QIcon(\"Icons/icons8-zoom-in-50.png\")\n zoom_out_icon = QIcon(\"Icons/icons8-zoom-out-50.png\")\n rotate_left_icon = QIcon(\"Icons/icons8-rotate-left-50.png\")\n rotate_right_icon = QIcon(\"Icons/icons8-rotate-right-50.png\")\n reset_icon = QIcon(\"Icons/icons8-no-rotation-50.png\")\n export_icon = QIcon(\"Icons/icons8-save-as-50.png\")\n\n zoom_in_action = QAction(zoom_in_icon, 'Zoom In', self)\n zoom_out_action = QAction(zoom_out_icon, 'Zoom Out', self)\n rotate_left_action = QAction(rotate_left_icon, 'Rotate Left', self)\n rotate_right_action = QAction(rotate_right_icon, 'Rotate Right', self)\n reset_action = QAction(reset_icon, 'Reset', self)\n self.export_action = QAction(export_icon, 'Save Image', self)\n\n zoom_in_action.triggered.connect(self.zoom_in)\n zoom_out_action.triggered.connect(self.zoom_out)\n rotate_left_action.triggered.connect(self.rotate_left)\n rotate_right_action.triggered.connect(self.rotate_right)\n reset_action.triggered.connect(self.reset)\n self.export_action.triggered.connect(self.export_original_image)\n\n # Add actions to the toolbar\n self.toolbar.addAction(zoom_in_action)\n self.toolbar.addAction(zoom_out_action)\n self.toolbar.addAction(rotate_left_action)\n self.toolbar.addAction(rotate_right_action)\n self.toolbar.addAction(reset_action)\n self.toolbar.addAction(self.export_action)\n\n def display(self, content):\n self.original_image_bytes = content # Save the original image bytes\n # Convert byte data to QPixmap\n qt_image = QImage.fromData(content)\n pixmap = QPixmap.fromImage(qt_image)\n self.original_pixmap = pixmap.copy() # Save the original pixmap\n self.image_label.setPixmap(pixmap)\n\n def clear(self):\n self.image_label.clear()\n\n def zoom_in(self):\n self.image_label.setPixmap(self.image_label.pixmap().scaled(\n self.image_label.width() * 1.2, self.image_label.height() * 1.2, Qt.KeepAspectRatio,\n Qt.SmoothTransformation))\n\n def zoom_out(self):\n self.image_label.setPixmap(self.image_label.pixmap().scaled(\n self.image_label.width() * 0.8, self.image_label.height() * 0.8, Qt.KeepAspectRatio,\n Qt.SmoothTransformation))\n\n def rotate_left(self):\n transform = QTransform().rotate(-90)\n pixmap = self.image_label.pixmap().transformed(transform)\n self.image_label.setPixmap(pixmap)\n\n def rotate_right(self):\n transform = QTransform().rotate(90)\n pixmap = self.image_label.pixmap().transformed(transform)\n self.image_label.setPixmap(pixmap)\n\n def reset(self):\n if self.original_pixmap:\n self.image_label.setPixmap(self.original_pixmap)\n\n def export_original_image(self):\n # Ensure that an image is currently loaded\n if not self.original_image_bytes:\n QMessageBox.warning(self, \"Export Error\", \"No image is currently loaded.\")\n return\n\n # Ask the user where to save the exported image\n file_name, _ = QFileDialog.getSaveFileName(self, \"Export Image\", \"\",\n \"PNG (*.png);;JPEG (*.jpg *.jpeg);;All Files (*)\")\n\n # If a location is chosen, save the image\n if file_name:\n with open(file_name, 'wb') as f:\n f.write(self.original_image_bytes)\n QMessageBox.information(self, \"Export Success\", \"Image exported successfully!\")\n\n\nclass PDFViewer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n self.pdf = None\n self.current_page = 0\n self.zoom_factor = 1.0\n self.rotation_angle = 0\n self.is_panning = False\n self.pan_start_x = 0\n self.pan_start_y = 0\n self.pan_mode = False\n\n # Optimize performance with page caching\n self._page_cache = {} # Cache for rendered pages\n self._cache_size = 5 # Maximum number of pages to cache\n\n self.initialize_ui()\n\n def initialize_ui(self):\n # Set up the main layout\n self.layout = QVBoxLayout()\n self.layout.setContentsMargins(0, 0, 0, 0)\n self.layout.setSpacing(0)\n self.layout.setAlignment(Qt.AlignCenter)\n\n # Create a container for the toolbar and the application viewer\n container_widget = QWidget(self)\n container_layout = QVBoxLayout()\n container_layout.setContentsMargins(0, 0, 0, 0)\n container_layout.setSpacing(0)\n\n # Create and set up the toolbar\n self.setup_toolbar()\n\n # Add the toolbar to the container layout\n container_layout.addWidget(self.toolbar)\n\n # Set up the PDF display area\n self.setup_pdf_display_area()\n container_layout.addWidget(self.scroll_area)\n\n container_widget.setLayout(container_layout)\n self.layout.addWidget(container_widget)\n\n self.setLayout(self.layout)\n self.update_navigation_states()\n\n def setup_toolbar(self):\n self.toolbar = QToolBar(self)\n self.toolbar.setContentsMargins(0, 0, 0, 0)\n self.toolbar.setMovable(False)\n self.toolbar.setIconSize(QSize(16, 16)) # Reduce icon size\n self.toolbar.setFixedHeight(32) # Reduce toolbar height\n # Disable right click\n self.toolbar.setContextMenuPolicy(Qt.PreventContextMenu)\n\n # Navigation buttons\n self.first_action = QAction(QIcon(\"Icons/icons8-thick-arrow-pointing-up-50.png\"), \"First\", self)\n self.first_action.triggered.connect(self.show_first_page)\n self.toolbar.addAction(self.first_action)\n\n self.prev_action = QAction(QIcon(\"Icons/icons8-left-arrow-50.png\"), \"Previous\", self)\n self.prev_action.triggered.connect(self.show_previous_page)\n self.toolbar.addAction(self.prev_action)\n\n # Page entry\n self.page_entry = QLineEdit(self)\n self.page_entry.setMaximumWidth(40)\n self.page_entry.setFixedHeight(22) # Set fixed height\n self.page_entry.setAlignment(Qt.AlignRight)\n self.page_entry.returnPressed.connect(self.go_to_page)\n self.toolbar.addWidget(self.page_entry)\n\n # Total pages label\n self.total_pages_label = QLabel(f\"of {len(self.pdf)}\" if self.pdf else \"of 0\")\n self.total_pages_label.setFixedHeight(22) # Set fixed height\n self.toolbar.addWidget(self.total_pages_label)\n\n # Navigation buttons\n self.next_action = QAction(QIcon(\"Icons/icons8-right-arrow-50.png\"), \"Next\", self)\n self.next_action.triggered.connect(self.show_next_page)\n self.toolbar.addAction(self.next_action)\n\n self.last_action = QAction(QIcon(\"Icons/icons8-down-50.png\"), \"Last\", self)\n self.last_action.triggered.connect(self.show_last_page)\n self.toolbar.addAction(self.last_action)\n\n # Add small spacer\n spacer = QWidget(self)\n spacer.setFixedSize(20, 0)\n self.toolbar.addWidget(spacer)\n\n # Zoom actions\n self.zoom_in_action = QAction(QIcon(\"Icons/icons8-zoom-in-50.png\"), \"Zoom In\", self)\n self.zoom_in_action.triggered.connect(self.zoom_in)\n self.toolbar.addAction(self.zoom_in_action)\n\n # QLineEdit for zoom percentage\n self.zoom_percentage_entry = QLineEdit(self)\n self.zoom_percentage_entry.setFixedWidth(60) # Set a fixed width for consistency\n self.zoom_percentage_entry.setFixedHeight(22) # Set fixed height\n self.zoom_percentage_entry.setAlignment(Qt.AlignRight)\n self.zoom_percentage_entry.setPlaceholderText(\"100%\") # Default zoom is 100%\n self.zoom_percentage_entry.returnPressed.connect(self.set_zoom_from_entry)\n self.toolbar.addWidget(self.zoom_percentage_entry)\n\n self.zoom_out_action = QAction(QIcon(\"Icons/icons8-zoom-out-50.png\"), \"Zoom Out\", self)\n self.zoom_out_action.triggered.connect(self.zoom_out)\n self.toolbar.addAction(self.zoom_out_action)\n\n # Create a reset zoom button with its icon and add it to the toolbar\n reset_zoom_icon = QIcon(\"Icons/icons8-zoom-to-actual-size-50.png\")\n self.reset_zoom_action = QAction(reset_zoom_icon, \"Reset Zoom\", self)\n self.reset_zoom_action.triggered.connect(self.reset_zoom)\n self.toolbar.addAction(self.reset_zoom_action)\n\n # Add small spacer\n spacer = QWidget(self)\n spacer.setFixedSize(20, 0)\n self.toolbar.addWidget(spacer)\n\n # Fit in window\n fit_window_icon = QIcon(\"Icons/icons8-enlarge-50.png\")\n self.fit_window_action = QAction(fit_window_icon, \"Fit in Window\", self)\n self.fit_window_action.triggered.connect(self.fit_window)\n self.toolbar.addAction(self.fit_window_action)\n\n # Fit in width\n fit_width_icon = QIcon(\"Icons/icons8-resize-horizontal-50.png\")\n self.fit_width_action = QAction(fit_width_icon, \"Fit in Width\", self)\n self.fit_width_action.triggered.connect(self.fit_width)\n self.toolbar.addAction(self.fit_width_action)\n\n # Add small spacer\n spacer = QWidget(self)\n spacer.setFixedSize(20, 0)\n self.toolbar.addWidget(spacer)\n\n # Pan tool button\n self.pan_tool_icon = QIcon(\"Icons/icons8-drag-50.png\")\n self.pan_tool_action = QAction(self.pan_tool_icon, \"Pan Tool\", self)\n self.pan_tool_action.setCheckable(True)\n self.pan_tool_action.toggled.connect(self.toggle_pan_mode)\n self.toolbar.addAction(self.pan_tool_action)\n\n # Add a spacer to push the following buttons to the right\n spacer = QWidget(self)\n spacer.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Preferred)\n self.toolbar.addWidget(spacer)\n\n # Print button\n self.print_icon = QIcon(\"Icons/icons8-print-50.png\")\n self.print_action = QAction(self.print_icon, \"Print\", self)\n self.print_action.triggered.connect(self.print_pdf)\n self.toolbar.addAction(self.print_action)\n\n self.save_pdf_action = QAction(QIcon(\"Icons/icons8-save-as-50.png\"), \"Save PDF\", self)\n self.save_pdf_action.triggered.connect(self.save_pdf)\n self.toolbar.addAction(self.save_pdf_action)\n\n def setup_pdf_display_area(self):\n self.page_label = QLabel(self)\n self.page_label.setContentsMargins(0, 0, 0, 0)\n self.page_label.setAlignment(Qt.AlignCenter)\n\n self.scroll_area = QScrollArea(self)\n self.scroll_area.setContentsMargins(0, 0, 0, 0)\n self.scroll_area.setWidget(self.page_label)\n self.scroll_area.setWidgetResizable(True)\n\n def set_current_page(self, page_num):\n \"\"\"Set the current page and update the view.\"\"\"\n if not self.pdf:\n return\n\n max_pages = len(self.pdf)\n if 0 <= page_num < max_pages:\n self.current_page = page_num\n self.show_page(page_num)\n\n def go_to_page(self):\n \"\"\"Navigate to the page entered in the page entry field.\"\"\"\n try:\n page_num = int(self.page_entry.text()) - 1 # Minus 1 because pages start from 0\n self.set_current_page(page_num)\n except ValueError:\n QMessageBox.warning(self, \"Invalid Page Number\", \"Please enter a valid page number.\")\n\n def update_navigation_states(self):\n \"\"\"Update UI elements based on current PDF and page.\"\"\"\n if not self.pdf:\n self.prev_action.setEnabled(False)\n self.next_action.setEnabled(False)\n self.first_action.setEnabled(False)\n self.last_action.setEnabled(False)\n self.total_pages_label.setText(\"of 0\")\n self.page_entry.setText(\"\")\n return\n\n self.prev_action.setEnabled(self.current_page > 0)\n self.next_action.setEnabled(self.current_page < len(self.pdf) - 1)\n self.first_action.setEnabled(self.current_page > 0)\n self.last_action.setEnabled(self.current_page < len(self.pdf) - 1)\n self.total_pages_label.setText(f\"of {len(self.pdf)}\")\n self.page_entry.setText(str(self.current_page + 1))\n\n def show_previous_page(self):\n \"\"\"Navigate to the previous page.\"\"\"\n self.set_current_page(self.current_page - 1)\n self.update_navigation_states()\n\n def show_next_page(self):\n \"\"\"Navigate to the next page.\"\"\"\n self.set_current_page(self.current_page + 1)\n self.update_navigation_states()\n\n def show_page(self, page_num):\n \"\"\"Display the specified page with caching for better performance.\"\"\"\n if not self.pdf:\n return\n\n try:\n # Check if the page is in the cache\n cache_key = (page_num, self.zoom_factor, self.rotation_angle)\n if cache_key in self._page_cache:\n # Use cached pixmap\n self.page_label.setPixmap(self._page_cache[cache_key])\n else:\n # Render the page and cache it\n page = self.pdf[page_num]\n mat = Matrix(self.zoom_factor, self.zoom_factor).prerotate(self.rotation_angle)\n image = page.get_pixmap(matrix=mat)\n\n qt_image = QImage(image.samples, image.width, image.height, image.stride, QImage.Format_RGB888)\n pixmap = QPixmap.fromImage(qt_image)\n\n # Cache the pixmap\n self._page_cache[cache_key] = pixmap\n\n # Manage cache size\n if len(self._page_cache) > self._cache_size:\n # Remove oldest entry (first key)\n oldest_key = next(iter(self._page_cache))\n del self._page_cache[oldest_key]\n\n self.page_label.setPixmap(pixmap)\n\n self.update_navigation_states()\n except Exception as e:\n QMessageBox.critical(self, \"Error\", f\"Failed to render page: {e}\")\n\n def display(self, content):\n \"\"\"Load and display a PDF from content bytes.\"\"\"\n # Clear existing PDF and cache\n self.clear()\n\n if content:\n try:\n # Try to open PDF directly first\n self.pdf = fitz_open(stream=content, filetype=\"pdf\")\n self.current_page = 0\n self.zoom_factor = 1.0\n self.rotation_angle = 0\n self.show_page(self.current_page)\n self.update_navigation_states()\n except Exception as e:\n # If direct open fails, try to clean up the PDF (common with carved files)\n print(f\"Initial PDF load failed: {e}, attempting cleanup...\")\n try:\n cleaned_content = self.cleanup_pdf_content(content)\n self.pdf = fitz_open(stream=cleaned_content, filetype=\"pdf\")\n self.current_page = 0\n self.zoom_factor = 1.0\n self.rotation_angle = 0\n self.show_page(self.current_page)\n self.update_navigation_states()\n print(\"Successfully loaded PDF after cleanup\")\n except Exception as e2:\n print(f\"Failed to load PDF even after cleanup: {e2}\")\n else:\n self.page_label.clear()\n\n @staticmethod\n def cleanup_pdf_content(content):\n \"\"\"Clean up PDF content by removing trailing garbage after %%EOF.\n\n Common issue with carved PDFs - extra bytes after the EOF marker\n cause PyMuPDF to reject the file even though the PDF is valid.\n \"\"\"\n try:\n # Find the last occurrence of %%EOF\n eof_marker = b'%%EOF'\n last_eof = content.rfind(eof_marker)\n\n if last_eof != -1:\n # Include the EOF marker plus a small buffer for trailing whitespace\n # PDF spec allows whitespace/newlines after %%EOF, but not much else\n end_position = last_eof + len(eof_marker)\n\n # Look ahead a bit to include any trailing newlines (up to 10 bytes)\n max_end = min(end_position + 10, len(content))\n trailing_section = content[end_position:max_end]\n\n # Count how many whitespace bytes follow EOF\n whitespace_count = 0\n for byte in trailing_section:\n if byte in (0x0A, 0x0D, 0x20, 0x09): # \\n, \\r, space, tab\n whitespace_count += 1\n else:\n break\n\n # Truncate after EOF + whitespace\n cleaned_content = content[:end_position + whitespace_count]\n\n print(f\"PDF cleanup: Truncated {len(content) - len(cleaned_content)} trailing bytes\")\n return cleaned_content\n else:\n # No EOF marker found, return original\n print(\"PDF cleanup: No %%EOF marker found, returning original content\")\n return content\n\n except Exception as e:\n print(f\"Error during PDF cleanup: {e}\")\n return content\n\n def clear(self):\n \"\"\"Close the PDF and clear all resources.\"\"\"\n if self.pdf:\n self.pdf.close()\n self.pdf = None\n\n # Clear the cache\n self._page_cache.clear()\n self.page_label.clear()\n self.update_navigation_states()\n\n def show_first_page(self):\n \"\"\"Navigate to the first page.\"\"\"\n self.set_current_page(0)\n\n def show_last_page(self):\n \"\"\"Navigate to the last page.\"\"\"\n if self.pdf:\n self.set_current_page(len(self.pdf) - 1)\n\n def zoom_in(self):\n \"\"\"Increase zoom level.\"\"\"\n # Don't allow extreme zoom levels\n if self.zoom_factor < 5.0:\n self.zoom_factor *= 1.2\n # Clear cache on zoom change\n self._page_cache.clear()\n self.show_page(self.current_page)\n # Update zoom display\n self.zoom_percentage_entry.setText(f\"{int(self.zoom_factor * 100)}%\")\n\n def zoom_out(self):\n \"\"\"Decrease zoom level.\"\"\"\n # Don't allow extreme zoom levels\n if self.zoom_factor > 0.1:\n self.zoom_factor *= 0.8\n # Clear cache on zoom change\n self._page_cache.clear()\n self.show_page(self.current_page)\n # Update zoom display\n self.zoom_percentage_entry.setText(f\"{int(self.zoom_factor * 100)}%\")\n\n def set_zoom_from_entry(self):\n \"\"\"Set zoom level from the entry field.\"\"\"\n try:\n # Extract the percentage from the QLineEdit\n text = self.zoom_percentage_entry.text().strip('%')\n percentage = float(text) / 100\n\n if 0.1 <= percentage <= 5: # Enforce reasonable zoom limits\n self.zoom_factor = percentage\n # Clear cache on zoom change\n self._page_cache.clear()\n self.show_page(self.current_page)\n else:\n QMessageBox.warning(self, \"Invalid Zoom\", \"Please enter a zoom percentage between 10% and 500%.\")\n # Reset the entry to the current zoom\n self.zoom_percentage_entry.setText(f\"{int(self.zoom_factor * 100)}%\")\n except ValueError:\n QMessageBox.warning(self, \"Invalid Zoom\", \"Please enter a valid zoom percentage.\")\n # Reset the entry to the current zoom\n self.zoom_percentage_entry.setText(f\"{int(self.zoom_factor * 100)}%\")\n\n def reset_zoom(self):\n \"\"\"Reset zoom to original size.\"\"\"\n self.zoom_factor = 1.0\n # Clear cache on zoom change\n self._page_cache.clear()\n self.show_page(self.current_page)\n self.zoom_percentage_entry.setText(\"100%\")\n\n def fit_window(self):\n \"\"\"Adjust zoom to fit the entire page in the window.\"\"\"\n if not self.pdf or self.current_page >= len(self.pdf):\n return\n\n page = self.pdf[self.current_page]\n zoom_x = self.scroll_area.width() / page.rect.width\n zoom_y = self.scroll_area.height() / page.rect.height\n self.zoom_factor = min(zoom_x, zoom_y) * 0.95 # 95% to add a small margin\n # Clear cache on zoom change\n self._page_cache.clear()\n self.show_page(self.current_page)\n # Update zoom display\n self.zoom_percentage_entry.setText(f\"{int(self.zoom_factor * 100)}%\")\n\n def fit_width(self):\n \"\"\"Adjust zoom to fit the page width in the window.\"\"\"\n if not self.pdf or self.current_page >= len(self.pdf):\n return\n\n page = self.pdf[self.current_page]\n self.zoom_factor = self.scroll_area.width() / page.rect.width * 0.95 # 95% to add a small margin\n # Clear cache on zoom change\n self._page_cache.clear()\n self.show_page(self.current_page)\n # Update zoom display\n self.zoom_percentage_entry.setText(f\"{int(self.zoom_factor * 100)}%\")\n\n def rotate_left(self):\n \"\"\"Rotate the page 90 degrees counterclockwise.\"\"\"\n self.rotation_angle -= 90\n # Clear cache on rotation change\n self._page_cache.clear()\n self.show_page(self.current_page)\n\n def rotate_right(self):\n \"\"\"Rotate the page 90 degrees clockwise.\"\"\"\n self.rotation_angle += 90\n # Clear cache on rotation change\n self._page_cache.clear()\n self.show_page(self.current_page)\n\n def toggle_pan_mode(self, checked):\n \"\"\"Enable or disable panning mode.\"\"\"\n self.pan_mode = checked\n self.setCursor(Qt.OpenHandCursor if checked else Qt.ArrowCursor)\n\n def mousePressEvent(self, event):\n \"\"\"Handle mouse press events for panning.\"\"\"\n if event.button() == Qt.LeftButton and self.pan_mode:\n self.is_panning = True\n self.pan_start_x = event.x()\n self.pan_start_y = event.y()\n self.setCursor(Qt.ClosedHandCursor) # Change to closed hand cursor while panning\n event.accept()\n\n def mouseMoveEvent(self, event):\n \"\"\"Handle mouse move events for panning.\"\"\"\n if self.is_panning and self.pan_mode:\n # Calculate the distance moved\n dx = event.x() - self.pan_start_x\n dy = event.y() - self.pan_start_y\n\n # Update scroll position\n self.scroll_area.horizontalScrollBar().setValue(self.scroll_area.horizontalScrollBar().value() - dx)\n self.scroll_area.verticalScrollBar().setValue(self.scroll_area.verticalScrollBar().value() - dy)\n\n # Update the mouse position for the next move\n self.pan_start_x = event.x()\n self.pan_start_y = event.y()\n event.accept()\n\n def mouseReleaseEvent(self, event):\n \"\"\"Handle mouse release events for panning.\"\"\"\n if event.button() == Qt.LeftButton and self.is_panning and self.pan_mode:\n self.is_panning = False\n self.setCursor(Qt.OpenHandCursor) # Change back to open hand cursor\n event.accept()\n\n def print_pdf(self):\n \"\"\"Print the current PDF.\"\"\"\n if not self.pdf:\n QMessageBox.warning(self, \"No Document\", \"No document available to print.\")\n return\n\n printer = QPrinter()\n printer.setFullPage(True)\n printer.setPageOrientation(QPageLayout.Portrait)\n\n print_dialog = QPrintDialog(printer, self)\n if print_dialog.exec_() == QPrintDialog.Accepted:\n from PySide6.QtGui import QPainter\n\n try:\n painter = QPainter()\n if not painter.begin(printer):\n QMessageBox.critical(self, \"Error\", \"Failed to initialize printer.\")\n return\n\n num_pages = len(self.pdf)\n for i in range(num_pages):\n if i != 0: # start a new page after the first one\n printer.newPage()\n\n # Render the page at a higher resolution for printing\n page = self.pdf[i]\n image = page.get_pixmap(matrix=Matrix(2.0, 2.0)) # Higher resolution for print\n\n qt_image = QImage(image.samples, image.width, image.height, image.stride, QImage.Format_RGB888)\n pixmap = QPixmap.fromImage(qt_image)\n\n # Scale to printer page\n rect = painter.viewport()\n size = pixmap.size()\n size.scale(rect.size(), Qt.KeepAspectRatio)\n painter.setViewport(rect.x(), rect.y(), size.width(), size.height())\n painter.setWindow(pixmap.rect())\n painter.drawPixmap(0, 0, pixmap)\n\n painter.end()\n QMessageBox.information(self, \"Print Complete\", \"Document was sent to the printer.\")\n except Exception as e:\n QMessageBox.critical(self, \"Error\", f\"Failed to print document: {e}\")\n if painter.isActive():\n painter.end()\n\n def save_pdf(self):\n \"\"\"Save the current PDF to a file.\"\"\"\n if not self.pdf:\n QMessageBox.warning(self, \"No Document\", \"No document available to save.\")\n return\n\n options = QFileDialog.Options()\n filePath, _ = QFileDialog.getSaveFileName(self, \"Save PDF\", \"\", \"PDF Files (*.pdf);;All Files (*)\",\n options=options)\n\n if not filePath:\n return # user cancelled the dialog\n\n if not filePath.endswith(\".pdf\"):\n filePath += \".pdf\"\n\n try:\n self.pdf.save(filePath) # save the PDF to the specified path\n QMessageBox.information(self, \"Success\", \"PDF saved successfully!\")\n except Exception as e:\n QMessageBox.critical(self, \"Error\", f\"Failed to save PDF: {e}\")\n\n\nclass AudioVideoPlayer(QWidget):\n def __init__(self, parent=None):\n super().__init__(parent)\n self.parent = parent\n\n # Initialize attributes before calling methods that use them\n self._is_playing = False\n self._current_volume = 50 # Default volume level\n self._is_muted = False\n self._previous_volume = 50 # Store previous volume when muting\n self._audio_session = None\n self._volume_interface = None\n self._is_audio_only = False # Flag to track if we're playing audio-only content\n self._shutting_down = False # Flag to indicate shutdown in progress\n\n # Now initialize UI and connections\n self.initialize_ui()\n self.setup_connections()\n self._setup_os_volume()\n\n def initialize_ui(self):\n # Main layout\n self.layout = QVBoxLayout(self)\n self.layout.setContentsMargins(0, 0, 0, 0)\n self.layout.setSpacing(0)\n\n # Create video widget\n self.video_widget = QVideoWidget(self)\n self.video_widget.setMinimumSize(QSize(400, 300))\n\n # Create media player\n self.media_player = QMediaPlayer(self)\n self.audio_output = QAudioOutput(self)\n self.media_player.setVideoOutput(self.video_widget)\n self.media_player.setAudioOutput(self.audio_output)\n\n # Create label to display when playing audio-only content\n self.audio_label = QLabel(\"Playing Audio\", self)\n self.audio_label.setObjectName(\"audioOnlyLabel\") # For stylesheet targeting\n self.audio_label.setAlignment(Qt.AlignCenter)\n self.audio_label.setVisible(False)\n\n # Set default volume\n self.audio_output.setVolume(self._current_volume / 100.0)\n\n # Create controls\n self.create_controls()\n\n # Add widgets to layout\n self.layout.addWidget(self.video_widget)\n self.layout.addWidget(self.audio_label)\n self.layout.addWidget(self.control_widget)\n\n def set_audio_only_mode(self, is_audio_only=True):\n \"\"\"Configure the player for audio-only content\"\"\"\n self._is_audio_only = is_audio_only\n self.video_widget.setVisible(not is_audio_only)\n self.audio_label.setVisible(is_audio_only)\n\n # Set the media player flags accordingly\n try:\n if hasattr(self.media_player, 'setOption'):\n if is_audio_only:\n # For audio-only content, set flags that optimize for audio playback\n self.media_player.setOption(\"audio-only\", \"true\")\n self.media_player.setOption(\"skip-video\", \"true\")\n else:\n # Reset flags for video content\n self.media_player.setOption(\"audio-only\", \"false\")\n self.media_player.setOption(\"skip-video\", \"false\")\n except Exception as e:\n print(f\"Warning: Could not set audio-only mode options: {e}\")\n\n def handle_media_status_change(self, status):\n \"\"\"Handle media status changes\"\"\"\n # If this is an audio file and we see no video streams, switch to audio-only mode\n try:\n if status == QMediaPlayer.LoadedMedia:\n # Check if we can detect if this is audio-only content\n has_video = False\n\n if hasattr(self.media_player, 'hasVideo'):\n has_video = self.media_player.hasVideo()\n\n # Set the appropriate mode\n self.set_audio_only_mode(not has_video)\n except Exception as e:\n print(f\"Warning: Error detecting audio/video mode: {e}\")\n\n def setup_connections(self):\n # Media player signals (updated for newer API)\n self.media_player.errorOccurred.connect(self.handle_error)\n self.media_player.positionChanged.connect(self.update_position)\n self.media_player.durationChanged.connect(self.update_duration)\n self.media_player.playbackStateChanged.connect(self.update_play_state)\n\n # Media status signals - if available in this version\n if hasattr(self.media_player, 'mediaStatusChanged'):\n self.media_player.mediaStatusChanged.connect(self.handle_media_status_change)\n\n # Control signals\n self.play_button.clicked.connect(self.toggle_play)\n self.stop_button.clicked.connect(self.stop)\n self.position_slider.sliderMoved.connect(self.set_position)\n self.volume_button.clicked.connect(self.toggle_mute)\n self.volume_slider.valueChanged.connect(self.set_volume)\n\n def _setup_os_volume(self):\n \"\"\"Set up OS-specific volume control (Windows only)\"\"\"\n if platform.system() == \"Windows\":\n try:\n from comtypes import CLSCTX_ALL\n from pycaw.pycaw import AudioUtilities, IAudioEndpointVolume\n\n devices = AudioUtilities.GetSpeakers()\n self._audio_session = AudioUtilities.GetAllSessions()\n interface = devices.Activate(IAudioEndpointVolume._iid_, CLSCTX_ALL, None)\n self._volume_interface = cast(interface, POINTER(IAudioEndpointVolume))\n except Exception as e:\n print(f\"Could not initialize Windows audio integration: {e}\")\n\n def set_os_volume(self, volume_level):\n \"\"\"Set system volume (Windows only)\"\"\"\n if self._volume_interface and platform.system() == \"Windows\":\n try:\n # Convert from 0-100 to 0.0-1.0 range\n self._volume_interface.SetMasterVolumeLevelScalar(volume_level / 100.0, None)\n except Exception as e:\n print(f\"Error setting system volume: {e}\")\n\n def toggle_play(self):\n if self._is_playing:\n self.media_player.pause()\n else:\n self.media_player.play()\n\n def stop(self):\n \"\"\"Stop playback and reset position\"\"\"\n try:\n if hasattr(self, 'media_player') and self.media_player:\n self.media_player.stop()\n self._is_playing = False\n self.update_controls()\n except Exception as e:\n print(f\"Error stopping media playback: {e}\")\n\n def update_play_state(self, state):\n # Updated for newer API\n self._is_playing = (state == QMediaPlayer.PlayingState)\n self.update_controls()\n\n def update_controls(self):\n if self._is_playing:\n # Try different pause icon paths\n pause_icon_paths = [\n \"Icons/icons8-pause-50.png\",\n \"Icons/pause.png\",\n \"Icons/icons8-pause-button-50.png\"\n ]\n icon_set = False\n for path in pause_icon_paths:\n if os.path.exists(path):\n self.play_button.setIcon(QIcon(path))\n icon_set = True\n break\n\n if not icon_set:\n self.play_button.setText(\"Pause\")\n else:\n # Try different play icon paths\n play_icon_paths = [\n \"Icons/icons8-play-50.png\",\n \"Icons/play.png\",\n \"Icons/icons8-circled-play-50.png\"\n ]\n icon_set = False\n for path in play_icon_paths:\n if os.path.exists(path):\n self.play_button.setIcon(QIcon(path))\n icon_set = True\n break\n\n if not icon_set:\n self.play_button.setText(\"Play\")\n\n def set_position(self, position):\n self.media_player.setPosition(position)\n\n def update_position(self, position):\n # Block signals to prevent slider feedback loops\n self.position_slider.blockSignals(True)\n self.position_slider.setValue(position)\n self.position_slider.blockSignals(False)\n\n # Update time label\n self.current_time_label.setText(self.format_time(position))\n\n def update_duration(self, duration):\n self.position_slider.setRange(0, duration)\n self.total_time_label.setText(self.format_time(duration))\n\n def format_time(self, milliseconds):\n seconds = milliseconds // 1000\n minutes = seconds // 60\n seconds %= 60\n return f\"{minutes:02d}:{seconds:02d}\"\n\n def toggle_mute(self):\n self._is_muted = not self._is_muted\n if self._is_muted:\n self._previous_volume = self._current_volume\n self.set_volume(0)\n # Try different mute icon paths\n mute_icon_paths = [\n \"Icons/icons8-mute-50.png\",\n \"Icons/mute.png\"\n ]\n icon_set = False\n for path in mute_icon_paths:\n if os.path.exists(path):\n self.volume_button.setIcon(QIcon(path))\n icon_set = True\n break\n\n if not icon_set:\n self.volume_button.setText(\"Mute\")\n else:\n self.set_volume(self._previous_volume)\n # Try different volume icon paths\n volume_icon_paths = [\n \"Icons/icons8-audio-50.png\",\n \"Icons/volume.png\",\n \"Icons/audio.png\"\n ]\n icon_set = False\n for path in volume_icon_paths:\n if os.path.exists(path):\n self.volume_button.setIcon(QIcon(path))\n icon_set = True\n break\n\n if not icon_set:\n self.volume_button.setText(\"Vol\")\n\n # Update system volume if enabled\n self.set_os_volume(self._current_volume)\n\n def set_volume(self, volume):\n self._current_volume = volume\n self.audio_output.setVolume(volume / 100.0)\n\n # Update volume slider\n self.volume_slider.blockSignals(True)\n self.volume_slider.setValue(volume)\n self.volume_slider.blockSignals(False)\n\n # Update mute button icon based on volume\n if volume == 0:\n self._is_muted = True\n # Try different mute icon paths\n mute_icon_paths = [\n \"Icons/icons8-mute-50.png\",\n \"Icons/mute.png\"\n ]\n icon_set = False\n for path in mute_icon_paths:\n if os.path.exists(path):\n self.volume_button.setIcon(QIcon(path))\n icon_set = True\n break\n\n if not icon_set:\n self.volume_button.setText(\"Mute\")\n else:\n self._is_muted = False\n # Try different volume icon paths\n volume_icon_paths = [\n \"Icons/icons8-audio-50.png\",\n \"Icons/volume.png\",\n \"Icons/audio.png\"\n ]\n icon_set = False\n for path in volume_icon_paths:\n if os.path.exists(path):\n self.volume_button.setIcon(QIcon(path))\n icon_set = True\n break\n\n if not icon_set:\n self.volume_button.setText(\"Vol\")\n\n # Update system volume if enabled\n self.set_os_volume(volume)\n\n def handle_error(self, error, error_string):\n if error != QMediaPlayer.NoError:\n QMessageBox.warning(self, \"Media Error\", f\"Error: {error_string}\")\n\n def closeEvent(self, event):\n # Clean up resources\n try:\n if hasattr(self, 'media_player') and self.media_player:\n self.media_player.stop()\n except Exception as e:\n print(f\"Error stopping media player during close: {e}\")\n super().closeEvent(event)\n\n def __del__(self):\n # Clean up any lingering resources\n try:\n if not hasattr(self, '_shutting_down') or not self._shutting_down:\n self.safe_stop()\n except Exception:\n # Silently ignore errors during destruction\n pass\n\n def create_controls(self):\n # Control widget and layout\n self.control_widget = QWidget(self)\n self.control_layout = QHBoxLayout(self.control_widget)\n self.control_layout.setContentsMargins(2, 2, 2, 2)\n self.control_layout.setSpacing(2)\n\n # Play/Pause button with fallback icon paths\n self.play_button = QPushButton(self)\n # Try different icon paths\n play_icon_paths = [\n \"Icons/icons8-play-50.png\",\n \"Icons/play.png\",\n \"Icons/icons8-circled-play-50.png\"\n ]\n for path in play_icon_paths:\n if os.path.exists(path):\n self.play_button.setIcon(QIcon(path))\n break\n else:\n # Fallback - create a text button\n self.play_button.setText(\"Play\")\n\n self.play_button.setIconSize(QSize(16, 16))\n self.play_button.setFixedHeight(22)\n self.play_button.setFlat(True)\n self.play_button.setToolTip(\"Play/Pause\")\n\n # Stop button with fallback icon paths\n self.stop_button = QPushButton(self)\n # Try different icon paths\n stop_icon_paths = [\n \"Icons/icons8-stop-50.png\",\n \"Icons/stop.png\",\n \"Icons/icons8-stop-circled-50.png\"\n ]\n for path in stop_icon_paths:\n if os.path.exists(path):\n self.stop_button.setIcon(QIcon(path))\n break\n else:\n # Fallback - create a text button\n self.stop_button.setText(\"Stop\")\n\n self.stop_button.setIconSize(QSize(16, 16))\n self.stop_button.setFixedHeight(22)\n self.stop_button.setFlat(True)\n self.stop_button.setToolTip(\"Stop\")\n\n # Position slider\n self.position_slider = QSlider(Qt.Horizontal, self)\n self.position_slider.setFixedHeight(22)\n self.position_slider.setRange(0, 0) # Will be updated when media is loaded\n self.position_slider.setToolTip(\"Position\")\n\n # Time labels\n self.current_time_label = QLabel(\"00:00\", self)\n self.current_time_label.setFixedHeight(22)\n self.current_time_label.setMinimumWidth(40)\n self.total_time_label = QLabel(\"00:00\", self)\n self.total_time_label.setFixedHeight(22)\n self.total_time_label.setMinimumWidth(40)\n\n # Volume button with fallback icon paths\n self.volume_button = QPushButton(self)\n # Try different icon paths\n volume_icon_paths = [\n \"Icons/icons8-audio-50.png\",\n \"Icons/volume.png\",\n \"Icons/audio.png\"\n ]\n for path in volume_icon_paths:\n if os.path.exists(path):\n self.volume_button.setIcon(QIcon(path))\n break\n else:\n # Fallback - create a text button\n self.volume_button.setText(\"Vol\")\n\n self.volume_button.setIconSize(QSize(16, 16))\n self.volume_button.setFixedHeight(22)\n self.volume_button.setFlat(True)\n self.volume_button.setToolTip(\"Mute/Unmute\")\n\n self.volume_slider = QSlider(Qt.Horizontal, self)\n self.volume_slider.setFixedHeight(22)\n self.volume_slider.setRange(0, 100)\n self.volume_slider.setValue(self._current_volume)\n self.volume_slider.setMaximumWidth(80)\n self.volume_slider.setToolTip(\"Volume\")\n\n # Add controls to layout\n self.control_layout.addWidget(self.play_button)\n self.control_layout.addWidget(self.stop_button)\n self.control_layout.addWidget(self.current_time_label)\n self.control_layout.addWidget(self.position_slider)\n self.control_layout.addWidget(self.total_time_label)\n self.control_layout.addWidget(self.volume_button)\n self.control_layout.addWidget(self.volume_slider)\n\n def safe_stop(self):\n \"\"\"Safely stop playback even during shutdown.\"\"\"\n try:\n if hasattr(self, 'media_player') and self.media_player:\n # Set flag to indicate we're shutting down\n self._shutting_down = True\n\n # Stop playback\n self.media_player.stop()\n\n # Process events to ensure stop command is processed\n QApplication.processEvents()\n\n # Release audio output\n if hasattr(self, 'audio_output') and self.audio_output:\n # Remove it from the media player first\n if hasattr(self.media_player, 'setAudioOutput'):\n try:\n self.media_player.setAudioOutput(None)\n # Process events to ensure this is applied\n QApplication.processEvents()\n except Exception as e:\n print(f\"Error removing audio output: {e}\")\n\n # Set media to null/empty to release resources\n if hasattr(self.media_player, 'setSource'):\n try:\n self.media_player.setSource(QUrl())\n # Process events to ensure this is applied\n QApplication.processEvents()\n except Exception as e:\n print(f\"Error clearing media source: {e}\")\n\n # Wait a moment for resources to be released\n time.sleep(0.1)\n except Exception as e:\n print(f\"Error in safe_stop: {e}\")\n"
},
{
"path": "modules/verification.py",
"content": "from PySide6.QtGui import QIcon, QFont\nfrom PySide6.QtWidgets import (QWidget, QLabel, QVBoxLayout, QPushButton, QApplication, QProgressBar, QHBoxLayout,\n QFileDialog, QTextEdit)\nfrom PySide6.QtCore import QThread, Signal, Qt\n\n\nclass HashCalculationThread(QThread):\n hashCalculated = Signal(dict) # Signal for hash results\n progressUpdated = Signal(float) # Signal for progress updates (percentage 0-100)\n\n def __init__(self, image_handler):\n super().__init__()\n self.image_handler = image_handler\n self.isRunning = True\n\n def run(self):\n try:\n # Pass a progress callback to update the progress bar\n hash_results = self.image_handler.calculate_hashes(\n progress_callback=self.update_progress\n )\n if self.isRunning: # Check if we're still running before emitting the signal\n self.hashCalculated.emit(hash_results)\n except Exception as e:\n print(f\"Error in hash calculation thread: {e}\")\n if self.isRunning:\n self.hashCalculated.emit({}) # Empty dict indicates error\n\n def update_progress(self, current, total):\n \"\"\"Handle progress updates safely with large values.\"\"\"\n try:\n if total > 0 and self.isRunning:\n # Convert to float to avoid overflow and limit to 0-100 range\n percentage = min(100.0, (float(current) / float(total)) * 100.0)\n self.progressUpdated.emit(percentage)\n except Exception as e:\n print(f\"Progress update error: {e}\")\n\n def stop(self):\n \"\"\"Safely stop the thread.\"\"\"\n self.isRunning = False\n\n\nclass VerificationWidget(QWidget):\n def __init__(self, image_handler, parent=None):\n super().__init__(parent)\n self.image_handler = image_handler\n self.thread = None\n self.setWindowTitle(\"Trace - Image Verification\")\n self.setWindowIcon(QIcon('Icons/logo.png'))\n self.setGeometry(100, 100, 750, 400) # Adjust size for better layout\n self._verified = False # Track verification status\n\n layout = QVBoxLayout(self)\n layout.setContentsMargins(20, 20, 20, 20)\n\n self.software_info = QLabel(\"Trace - Forensic Analysis Tool\", self)\n self.software_info.setObjectName(\"softwareInfoLabel\")\n layout.addWidget(self.software_info)\n\n self.subtitle = QLabel(\"Image Hash Verification\", self)\n self.subtitle.setObjectName(\"subtitleLabel\")\n layout.addWidget(self.subtitle)\n\n self.hash_label = QTextEdit(\"Calculating hashes...\")\n self.hash_label.setReadOnly(True)\n self.hash_label.setFont(QFont(\"Courier\", 10))\n self.hash_label.setStyleSheet(\"\"\"\n QTextEdit {\n background-color: #f0f0f0;\n border: 1px solid #ccc;\n color: #333;\n font-family: 'Courier';\n }\n QTextEdit::indicator:checked {\n background: #b0b0b0;\n }\n \"\"\")\n layout.addWidget(self.hash_label)\n\n progress_bar_container = QHBoxLayout()\n progress_bar_container.addStretch()\n\n self.progress_bar = QProgressBar()\n self.progress_bar.setMinimum(0)\n self.progress_bar.setMaximum(100) # Set to 100 for percentage display\n self.progress_bar.setFixedWidth(400)\n self.progress_bar.setAlignment(Qt.AlignCenter)\n self.progress_bar.setStyleSheet(\"\"\"\n QProgressBar {\n border: 2px solid grey;\n border-radius: 5px;\n text-align: center;\n }\n QProgressBar::chunk {\n background-color: #05B8CC;\n width: 20px;\n }\n \"\"\")\n progress_bar_container.addWidget(self.progress_bar)\n progress_bar_container.addStretch()\n layout.addLayout(progress_bar_container)\n\n button_layout = QHBoxLayout()\n self.save_button = QPushButton(\"Save to Text File\", self)\n self.save_button.setFixedWidth(150)\n self.save_button.clicked.connect(self.save_hash)\n self.save_button.setEnabled(False)\n button_layout.addWidget(self.save_button)\n\n self.copy_button = QPushButton(\"Copy\", self)\n self.copy_button.setFixedWidth(150)\n self.copy_button.clicked.connect(self.copy_hash)\n self.copy_button.setEnabled(False)\n button_layout.addWidget(self.copy_button)\n\n self.close_button = QPushButton(\"Close\", self)\n self.close_button.setFixedWidth(150)\n self.close_button.clicked.connect(self.close)\n button_layout.addWidget(self.close_button)\n layout.addLayout(button_layout)\n\n # Start hash calculation with a slight delay to allow the UI to initialize\n QApplication.processEvents()\n self.start_hash_calculation()\n\n def closeEvent(self, event):\n \"\"\"Override closeEvent to properly clean up resources.\"\"\"\n if self.thread and self.thread.isRunning():\n self.thread.stop() # Tell thread to stop processing\n self.thread.wait(1000) # Wait up to 1 second\n\n # If thread is still running, terminate it\n if self.thread.isRunning():\n self.thread.terminate()\n self.thread.wait()\n\n super().closeEvent(event)\n\n def save_hash(self):\n file_name, _ = QFileDialog.getSaveFileName(self, \"Save Hash\", \"\", \"Text Files (*.txt)\")\n if file_name:\n with open(file_name, 'w') as file:\n file.write(self.hash_label.toPlainText())\n\n def start_hash_calculation(self):\n # Clean up any previous thread\n if self.thread and self.thread.isRunning():\n self.thread.stop()\n self.thread.wait()\n\n self.thread = HashCalculationThread(self.image_handler)\n self.thread.hashCalculated.connect(self.on_hash_calculated)\n self.thread.progressUpdated.connect(self.update_progress)\n self.thread.start()\n\n def update_progress(self, percentage):\n \"\"\"Update progress bar with the given percentage.\"\"\"\n try:\n self.progress_bar.setValue(int(percentage))\n QApplication.processEvents() # Keep UI responsive\n except Exception as e:\n print(f\"Error updating progress bar: {e}\")\n\n def on_hash_calculated(self, hash_results):\n \"\"\"Process hash results and update UI.\"\"\"\n try:\n # Set the progress bar to 100% complete\n self.progress_bar.setValue(100)\n\n if hash_results and 'computed_md5' in hash_results:\n verification_results = []\n\n computed_md5 = hash_results.get('computed_md5')\n computed_sha1 = hash_results.get('computed_sha1')\n computed_sha256 = hash_results.get('computed_sha256')\n\n # Check if the loaded image file is of E01 format\n if self.image_handler and self.image_handler.get_image_type() == \"ewf\":\n stored_md5 = hash_results.get('stored_md5')\n stored_sha1 = hash_results.get('stored_sha1')\n\n # Compare the computed MD5 and SHA1 hashes with the stored hashes\n md5_result = \"Match\" if computed_md5 == stored_md5 else \"Mismatch\"\n sha1_result = \"Match\" if computed_sha1 == stored_sha1 else \"Mismatch\"\n\n # Set verification status\n self._verified = md5_result == \"Match\" or sha1_result == \"Match\"\n\n verification_results.append(f\"Stored MD5: {stored_md5 or 'N/A'}\")\n verification_results.append(f\"Computed MD5: {computed_md5}\")\n verification_results.append(\n f\"MD5 Verify result: {md5_result}
\") # New line after MD5 verification result\n\n verification_results.append(f\"Stored SHA1: {stored_sha1 or 'N/A'}\")\n verification_results.append(f\"Computed SHA1: {computed_sha1}\")\n verification_results.append(\n f\"SHA1 Verify result: {sha1_result}
\") # New line after SHA1 verification result\n\n else: # For other image types, only display computed hashes\n verification_results.append(f\"Computed MD5: {computed_md5}\")\n verification_results.append(f\"Computed SHA1: {computed_sha1}\")\n\n # Display computed SHA256 hash for all image types\n verification_results.append(f\"Computed SHA256: {computed_sha256}\")\n\n # Convert size from bytes to megabytes\n size_bytes = hash_results.get('size')\n size_mb = size_bytes / (1024 * 1024)\n\n hash_info = \"
\".join(verification_results)\n hash_info += f\"
Size: {size_bytes} bytes ({size_mb:.2f} MB)
Path: {hash_results.get('path')}\"\n self.hash_label.setHtml(hash_info)\n self.save_button.setEnabled(True)\n self.copy_button.setEnabled(True)\n else:\n self.hash_label.setText(\"Error calculating hashes. Please ensure the image is accessible.\")\n except Exception as e:\n print(f\"Error processing hash results: {e}\")\n self.hash_label.setText(f\"Error processing results: {str(e)}\")\n\n def copy_hash(self):\n clipboard = QApplication.clipboard()\n clipboard.setText(self.hash_label.toPlainText())\n\n @property\n def is_verified(self):\n # Return the verification status property\n return self._verified\n"
},
{
"path": "modules/veriphone_api.py",
"content": "import requests\nfrom PySide6.QtCore import Qt\nfrom PySide6.QtGui import QPixmap, QIcon\nfrom PySide6.QtWidgets import (QWidget, QVBoxLayout, QPushButton, QTextBrowser, QLineEdit, QLabel, QToolBar,\n QSizePolicy, QMessageBox)\n\n\nclass VeriphoneWidget(QWidget):\n def __init__(self):\n super().__init__()\n self.api_key = None\n self.init_ui()\n\n def init_ui(self):\n self.layout = QVBoxLayout(self)\n self.layout.setSpacing(0)\n self.layout.setContentsMargins(0, 0, 0, 0)\n\n # set widget size but make it resizable\n self.setFixedSize(600, 400)\n\n # set window title\n self.setWindowTitle(\"Veriphone Phone Number Verification\")\n\n # add icon to the window\n self.setWindowIcon(QIcon('Icons/logo.png'))\n\n # Toolbar setup\n self.toolbar = QToolBar(\"Veriphone Toolbar\", self)\n self.toolbar.setContentsMargins(0, 0, 0, 0)\n self.toolbar.setToolButtonStyle(Qt.ToolButtonTextBesideIcon)\n self.layout.addWidget(self.toolbar)\n\n # Phone input field\n self.phone_input = QLineEdit(self)\n # size of the input field\n self.phone_input.setFixedSize(300, 30)\n self.phone_input.setPlaceholderText(\"Enter phone number with country code\")\n self.toolbar.addWidget(self.phone_input)\n # Connect returnPressed signal to verify_phone_number method\n self.phone_input.returnPressed.connect(self.verify_phone_number)\n\n # spacer\n spacer = QWidget(self)\n spacer.setFixedSize(10, 10)\n self.toolbar.addWidget(spacer)\n\n # Verify button in toolbar\n verify_button = QPushButton(\"Verify\", self)\n verify_button.clicked.connect(self.verify_phone_number)\n self.toolbar.addWidget(verify_button)\n\n # Spacer widget to push the logo to the far right\n spacer = QWidget(self)\n spacer.setSizePolicy(QSizePolicy.Expanding, QSizePolicy.Preferred)\n self.toolbar.addWidget(spacer)\n\n # Logo on the far right\n self.logo_label = QLabel(self)\n self.logo_pixmap = QPixmap(\"Icons/logo_veriphone.png\") # Make sure the path is correct\n self.logo_label.setPixmap(self.logo_pixmap.scaled(120, 70, Qt.KeepAspectRatio,\n Qt.SmoothTransformation)) # Adjust 100x50 to your desired size\n self.toolbar.addWidget(self.logo_label)\n\n # Text browser for showing the results\n self.info_text_edit = QTextBrowser(self)\n self.info_text_edit.setReadOnly(True)\n self.layout.addWidget(self.info_text_edit)\n\n def set_api_key(self, key):\n self.api_key = key\n\n def use_api_key(self):\n if not self.api_key:\n raise ValueError(\"API key not set\")\n\n def verify_phone_number(self):\n if not self.api_key:\n QMessageBox.warning(self, \"API Key Not Set\",\n \"Please set the API key in the Options menu before verifying a phone number.\")\n return\n\n phone_number = self.phone_input.text()\n if phone_number:\n self.update_veriphone_info(phone_number)\n else:\n QMessageBox.warning(self, \"Input Error\", \"Please enter a phone number to verify.\")\n\n def update_veriphone_info(self, phone_number):\n data = self.verify_phone_with_veriphone(phone_number)\n if data.get('status') == 'success':\n info_text = self.format_data_as_html(data)\n self.info_text_edit.setHtml(info_text)\n else:\n self.info_text_edit.setText(\"Failed to fetch data or phone number is invalid.\")\n\n def verify_phone_with_veriphone(self, phone_number):\n url = f\"https://api.veriphone.io/v2/verify?phone={phone_number}&key={self.api_key}\"\n response = requests.get(url)\n if response.status_code == 200:\n return response.json()\n else:\n return {\"status\": \"error\", \"message\": \"Failed to verify phone number.\"}\n\n def format_data_as_html(self, data):\n # Additional fields from the Veriphone API\n phone_region = data.get('phone_region', 'N/A')\n country = data.get('country', 'N/A')\n country_code = data.get('country_code', 'N/A')\n country_prefix = data.get('country_prefix', 'N/A')\n international_number = data.get('international_number', 'N/A')\n local_number = data.get('local_number', 'N/A')\n e164 = data.get('e164', 'N/A')\n carrier = data.get('carrier', 'N/A')\n\n html_content = f\"\"\"\n \n
Veriphone Information
\n
Phone Number: {data.get('phone', 'N/A')}
\n
Valid: {data.get('phone_valid', 'N/A')}
\n
Carrier: {carrier}
\n
Type: {data.get('phone_type', 'N/A')}
\n
Region: {phone_region}
\n
Country: {country}
\n
Country Code: {country_code}
\n
Country Prefix: {country_prefix}
\n
International Number: {international_number}
\n
Local Number: {local_number}
\n
E164 Format: {e164}
\n\n
'\n '
Rate Limit Exceeded
'\n '
Please wait a minute and try again.
'\n '
Or view in browser.
'\n '
\n | {antivirus} | \n {detected} | \n {version} | \n {last_update} | \n {scan_result} | \n
\n \"\"\"\n\n # Create the HTML content\n html_content = f\"\"\"\n \n
VirusTotal Information
\n
MD5: {md5}
\n
SHA1: {sha1}
\n
SHA256: {sha256}
\n
Last Scanned: {scan_date}
\n
Score: {positives}/{total}
\n
Permalink: {permalink}
\n\n
Scan Results:
\n
\n \n \n | Antivirus | \n Detected | \n Version | \n Last Update | \n Result | \n
\n \n \n {scan_rows}\n \n
\n