binary-refinery 0.7.0__tar.gz → 0.7.2__tar.gz

{binary_refinery-0.7.0/binary_refinery.egg-info → binary_refinery-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: binary-refinery
-Version: 0.7.0
+Version: 0.7.2
 Summary: A toolkit to transform and refine (mostly) binary data.
 Home-page: https://github.com/binref/refinery/
 Author: Jesko Huettenhain
@@ -27,126 +27,126 @@ Requires-Dist: setuptools
 Requires-Dist: toml
 Requires-Dist: wheel
 Requires-Dist: python-magic
-Requires-Dist: pyperclip
 Requires-Dist: capstone
+Requires-Dist: pyperclip
 Provides-Extra: all
-Requires-Dist: asn1crypto; extra == "all"
-Requires-Dist: pycdlib; extra == "all"
-Requires-Dist: oletools; extra == "all"
-Requires-Dist: pyzstd; extra == "all"
-Requires-Dist: uncompyle6; extra == "all"
-Requires-Dist: openpyxl; extra == "all"
-Requires-Dist: py7zr; extra == "all"
-Requires-Dist: chardet; extra == "all"
-Requires-Dist: xdis; extra == "all"
-Requires-Dist: msoffcrypto-tool; extra == "all"
-Requires-Dist: pyonenote; extra == "all"
-Requires-Dist: colorama; extra == "all"
-Requires-Dist: angr; extra == "all"
-Requires-Dist: pyxlsb2; extra == "all"
-Requires-Dist: capstone; extra == "all"
-Requires-Dist: jsbeautifier; extra == "all"
-Requires-Dist: phpserialize; extra == "all"
-Requires-Dist: unicorn; extra == "all"
 Requires-Dist: k2l>=2.0; extra == "all"
-Requires-Dist: intervaltree; extra == "all"
+Requires-Dist: unicorn; extra == "all"
+Requires-Dist: cabarchive; extra == "all"
+Requires-Dist: Pillow; extra == "all"
+Requires-Dist: decompyle3; extra == "all"
 Requires-Dist: python-evtx; extra == "all"
-Requires-Dist: javaobj-py3>=0.4.0.1; extra == "all"
-Requires-Dist: LnkParse3>=1.4.0; extra == "all"
-Requires-Dist: pypdf>=3.1.0; extra == "all"
-Requires-Dist: olefile; extra == "all"
+Requires-Dist: oletools; extra == "all"
 Requires-Dist: xlrd2; extra == "all"
-Requires-Dist: Pillow; extra == "all"
+Requires-Dist: colorama; extra == "all"
+Requires-Dist: chardet; extra == "all"
+Requires-Dist: extract-msg<=0.41.0; extra == "all"
+Requires-Dist: pypcapkit[scapy]>=1.3; extra == "all"
 Requires-Dist: pyzipper; extra == "all"
+Requires-Dist: openpyxl; extra == "all"
+Requires-Dist: javaobj-py3>=0.4.0.1; extra == "all"
+Requires-Dist: asn1crypto; extra == "all"
+Requires-Dist: intervaltree; extra == "all"
 Requires-Dist: XLMMacroDeobfuscator; extra == "all"
-Requires-Dist: pypcapkit[scapy]>=1.3; extra == "all"
-Requires-Dist: cabarchive; extra == "all"
-Requires-Dist: decompyle3; extra == "all"
+Requires-Dist: LnkParse3>=1.4.0; extra == "all"
+Requires-Dist: pyxlsb2; extra == "all"
 Requires-Dist: mitmproxy; extra == "all"
-Requires-Dist: extract-msg<=0.41.0; extra == "all"
-Requires-Dist: numpy; extra == "all"
+Requires-Dist: py7zr; extra == "all"
+Requires-Dist: angr; extra == "all"
+Requires-Dist: pyzstd; extra == "all"
+Requires-Dist: uncompyle6; extra == "all"
 Requires-Dist: python-registry; extra == "all"
+Requires-Dist: olefile; extra == "all"
+Requires-Dist: phpserialize; extra == "all"
+Requires-Dist: msoffcrypto-tool; extra == "all"
+Requires-Dist: numpy; extra == "all"
+Requires-Dist: pyonenote; extra == "all"
+Requires-Dist: pycdlib; extra == "all"
+Requires-Dist: capstone; extra == "all"
+Requires-Dist: xdis; extra == "all"
+Requires-Dist: pypdf>=3.1.0; extra == "all"
+Requires-Dist: jsbeautifier; extra == "all"
 Provides-Extra: speed
 Requires-Dist: numpy; extra == "speed"
 Provides-Extra: default
-Requires-Dist: asn1crypto; extra == "default"
-Requires-Dist: pycdlib; extra == "default"
 Requires-Dist: unicorn; extra == "default"
-Requires-Dist: intervaltree; extra == "default"
+Requires-Dist: cabarchive; extra == "default"
 Requires-Dist: LnkParse3>=1.4.0; extra == "default"
-Requires-Dist: pypdf>=3.1.0; extra == "default"
 Requires-Dist: py7zr; extra == "default"
-Requires-Dist: pyzipper; extra == "default"
-Requires-Dist: chardet; extra == "default"
+Requires-Dist: asn1crypto; extra == "default"
 Requires-Dist: colorama; extra == "default"
-Requires-Dist: cabarchive; extra == "default"
-Requires-Dist: extract-msg<=0.41.0; extra == "default"
+Requires-Dist: chardet; extra == "default"
 Requires-Dist: numpy; extra == "default"
+Requires-Dist: extract-msg<=0.41.0; extra == "default"
+Requires-Dist: pycdlib; extra == "default"
 Requires-Dist: capstone; extra == "default"
+Requires-Dist: pypdf>=3.1.0; extra == "default"
+Requires-Dist: pyzipper; extra == "default"
+Requires-Dist: intervaltree; extra == "default"
 Provides-Extra: extended
-Requires-Dist: asn1crypto; extra == "extended"
-Requires-Dist: pycdlib; extra == "extended"
+Requires-Dist: unicorn; extra == "extended"
+Requires-Dist: cabarchive; extra == "extended"
 Requires-Dist: oletools; extra == "extended"
-Requires-Dist: uncompyle6; extra == "extended"
-Requires-Dist: openpyxl; extra == "extended"
-Requires-Dist: py7zr; extra == "extended"
-Requires-Dist: chardet; extra == "extended"
-Requires-Dist: xdis; extra == "extended"
-Requires-Dist: pyonenote; extra == "extended"
+Requires-Dist: xlrd2; extra == "extended"
 Requires-Dist: colorama; extra == "extended"
-Requires-Dist: pyxlsb2; extra == "extended"
-Requires-Dist: capstone; extra == "extended"
-Requires-Dist: jsbeautifier; extra == "extended"
-Requires-Dist: unicorn; extra == "extended"
+Requires-Dist: chardet; extra == "extended"
+Requires-Dist: extract-msg<=0.41.0; extra == "extended"
+Requires-Dist: openpyxl; extra == "extended"
+Requires-Dist: pyzipper; extra == "extended"
+Requires-Dist: asn1crypto; extra == "extended"
 Requires-Dist: intervaltree; extra == "extended"
+Requires-Dist: pyxlsb2; extra == "extended"
 Requires-Dist: LnkParse3>=1.4.0; extra == "extended"
-Requires-Dist: pypdf>=3.1.0; extra == "extended"
+Requires-Dist: py7zr; extra == "extended"
+Requires-Dist: uncompyle6; extra == "extended"
 Requires-Dist: olefile; extra == "extended"
-Requires-Dist: xlrd2; extra == "extended"
-Requires-Dist: pyzipper; extra == "extended"
-Requires-Dist: cabarchive; extra == "extended"
-Requires-Dist: extract-msg<=0.41.0; extra == "extended"
+Requires-Dist: pyonenote; extra == "extended"
+Requires-Dist: pypdf>=3.1.0; extra == "extended"
 Requires-Dist: numpy; extra == "extended"
+Requires-Dist: pycdlib; extra == "extended"
+Requires-Dist: capstone; extra == "extended"
+Requires-Dist: xdis; extra == "extended"
+Requires-Dist: jsbeautifier; extra == "extended"
 Provides-Extra: arc
+Requires-Dist: cabarchive; extra == "arc"
+Requires-Dist: py7zr; extra == "arc"
 Requires-Dist: pyzstd; extra == "arc"
 Requires-Dist: uncompyle6; extra == "arc"
-Requires-Dist: py7zr; extra == "arc"
-Requires-Dist: pyzipper; extra == "arc"
-Requires-Dist: xdis; extra == "arc"
-Requires-Dist: cabarchive; extra == "arc"
 Requires-Dist: decompyle3; extra == "arc"
 Requires-Dist: pycdlib; extra == "arc"
+Requires-Dist: xdis; extra == "arc"
+Requires-Dist: pyzipper; extra == "arc"
 Provides-Extra: python
 Requires-Dist: uncompyle6; extra == "python"
 Requires-Dist: xdis; extra == "python"
 Requires-Dist: decompyle3; extra == "python"
 Provides-Extra: formats
-Requires-Dist: phpserialize; extra == "formats"
-Requires-Dist: oletools; extra == "formats"
+Requires-Dist: XLMMacroDeobfuscator; extra == "formats"
 Requires-Dist: LnkParse3>=1.4.0; extra == "formats"
+Requires-Dist: pyxlsb2; extra == "formats"
+Requires-Dist: Pillow; extra == "formats"
+Requires-Dist: python-registry; extra == "formats"
+Requires-Dist: oletools; extra == "formats"
 Requires-Dist: python-evtx; extra == "formats"
-Requires-Dist: javaobj-py3>=0.4.0.1; extra == "formats"
-Requires-Dist: openpyxl; extra == "formats"
-Requires-Dist: pypdf>=3.1.0; extra == "formats"
+Requires-Dist: msoffcrypto-tool; extra == "formats"
+Requires-Dist: phpserialize; extra == "formats"
+Requires-Dist: extract-msg<=0.41.0; extra == "formats"
 Requires-Dist: olefile; extra == "formats"
 Requires-Dist: xlrd2; extra == "formats"
-Requires-Dist: Pillow; extra == "formats"
-Requires-Dist: XLMMacroDeobfuscator; extra == "formats"
 Requires-Dist: pyonenote; extra == "formats"
-Requires-Dist: msoffcrypto-tool; extra == "formats"
-Requires-Dist: extract-msg<=0.41.0; extra == "formats"
-Requires-Dist: pyxlsb2; extra == "formats"
-Requires-Dist: python-registry; extra == "formats"
+Requires-Dist: pypdf>=3.1.0; extra == "formats"
+Requires-Dist: openpyxl; extra == "formats"
+Requires-Dist: javaobj-py3>=0.4.0.1; extra == "formats"
 Provides-Extra: office
+Requires-Dist: XLMMacroDeobfuscator; extra == "office"
+Requires-Dist: pyxlsb2; extra == "office"
+Requires-Dist: xlrd2; extra == "office"
 Requires-Dist: oletools; extra == "office"
-Requires-Dist: openpyxl; extra == "office"
 Requires-Dist: olefile; extra == "office"
-Requires-Dist: xlrd2; extra == "office"
-Requires-Dist: XLMMacroDeobfuscator; extra == "office"
-Requires-Dist: pyonenote; extra == "office"
 Requires-Dist: msoffcrypto-tool; extra == "office"
 Requires-Dist: extract-msg<=0.41.0; extra == "office"
-Requires-Dist: pyxlsb2; extra == "office"
+Requires-Dist: pyonenote; extra == "office"
+Requires-Dist: openpyxl; extra == "office"
 Provides-Extra: display
 Requires-Dist: colorama; extra == "display"
 Requires-Dist: jsbeautifier; extra == "display"

{binary_refinery-0.7.0 → binary_refinery-0.7.2/binary_refinery.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: binary-refinery
-Version: 0.7.0
+Version: 0.7.2
 Summary: A toolkit to transform and refine (mostly) binary data.
 Home-page: https://github.com/binref/refinery/
 Author: Jesko Huettenhain
@@ -27,126 +27,126 @@ Requires-Dist: setuptools
 Requires-Dist: toml
 Requires-Dist: wheel
 Requires-Dist: python-magic
-Requires-Dist: pyperclip
 Requires-Dist: capstone
+Requires-Dist: pyperclip
 Provides-Extra: all
-Requires-Dist: asn1crypto; extra == "all"
-Requires-Dist: pycdlib; extra == "all"
-Requires-Dist: oletools; extra == "all"
-Requires-Dist: pyzstd; extra == "all"
-Requires-Dist: uncompyle6; extra == "all"
-Requires-Dist: openpyxl; extra == "all"
-Requires-Dist: py7zr; extra == "all"
-Requires-Dist: chardet; extra == "all"
-Requires-Dist: xdis; extra == "all"
-Requires-Dist: msoffcrypto-tool; extra == "all"
-Requires-Dist: pyonenote; extra == "all"
-Requires-Dist: colorama; extra == "all"
-Requires-Dist: angr; extra == "all"
-Requires-Dist: pyxlsb2; extra == "all"
-Requires-Dist: capstone; extra == "all"
-Requires-Dist: jsbeautifier; extra == "all"
-Requires-Dist: phpserialize; extra == "all"
-Requires-Dist: unicorn; extra == "all"
 Requires-Dist: k2l>=2.0; extra == "all"
-Requires-Dist: intervaltree; extra == "all"
+Requires-Dist: unicorn; extra == "all"
+Requires-Dist: cabarchive; extra == "all"
+Requires-Dist: Pillow; extra == "all"
+Requires-Dist: decompyle3; extra == "all"
 Requires-Dist: python-evtx; extra == "all"
-Requires-Dist: javaobj-py3>=0.4.0.1; extra == "all"
-Requires-Dist: LnkParse3>=1.4.0; extra == "all"
-Requires-Dist: pypdf>=3.1.0; extra == "all"
-Requires-Dist: olefile; extra == "all"
+Requires-Dist: oletools; extra == "all"
 Requires-Dist: xlrd2; extra == "all"
-Requires-Dist: Pillow; extra == "all"
+Requires-Dist: colorama; extra == "all"
+Requires-Dist: chardet; extra == "all"
+Requires-Dist: extract-msg<=0.41.0; extra == "all"
+Requires-Dist: pypcapkit[scapy]>=1.3; extra == "all"
 Requires-Dist: pyzipper; extra == "all"
+Requires-Dist: openpyxl; extra == "all"
+Requires-Dist: javaobj-py3>=0.4.0.1; extra == "all"
+Requires-Dist: asn1crypto; extra == "all"
+Requires-Dist: intervaltree; extra == "all"
 Requires-Dist: XLMMacroDeobfuscator; extra == "all"
-Requires-Dist: pypcapkit[scapy]>=1.3; extra == "all"
-Requires-Dist: cabarchive; extra == "all"
-Requires-Dist: decompyle3; extra == "all"
+Requires-Dist: LnkParse3>=1.4.0; extra == "all"
+Requires-Dist: pyxlsb2; extra == "all"
 Requires-Dist: mitmproxy; extra == "all"
-Requires-Dist: extract-msg<=0.41.0; extra == "all"
-Requires-Dist: numpy; extra == "all"
+Requires-Dist: py7zr; extra == "all"
+Requires-Dist: angr; extra == "all"
+Requires-Dist: pyzstd; extra == "all"
+Requires-Dist: uncompyle6; extra == "all"
 Requires-Dist: python-registry; extra == "all"
+Requires-Dist: olefile; extra == "all"
+Requires-Dist: phpserialize; extra == "all"
+Requires-Dist: msoffcrypto-tool; extra == "all"
+Requires-Dist: numpy; extra == "all"
+Requires-Dist: pyonenote; extra == "all"
+Requires-Dist: pycdlib; extra == "all"
+Requires-Dist: capstone; extra == "all"
+Requires-Dist: xdis; extra == "all"
+Requires-Dist: pypdf>=3.1.0; extra == "all"
+Requires-Dist: jsbeautifier; extra == "all"
 Provides-Extra: speed
 Requires-Dist: numpy; extra == "speed"
 Provides-Extra: default
-Requires-Dist: asn1crypto; extra == "default"
-Requires-Dist: pycdlib; extra == "default"
 Requires-Dist: unicorn; extra == "default"
-Requires-Dist: intervaltree; extra == "default"
+Requires-Dist: cabarchive; extra == "default"
 Requires-Dist: LnkParse3>=1.4.0; extra == "default"
-Requires-Dist: pypdf>=3.1.0; extra == "default"
 Requires-Dist: py7zr; extra == "default"
-Requires-Dist: pyzipper; extra == "default"
-Requires-Dist: chardet; extra == "default"
+Requires-Dist: asn1crypto; extra == "default"
 Requires-Dist: colorama; extra == "default"
-Requires-Dist: cabarchive; extra == "default"
-Requires-Dist: extract-msg<=0.41.0; extra == "default"
+Requires-Dist: chardet; extra == "default"
 Requires-Dist: numpy; extra == "default"
+Requires-Dist: extract-msg<=0.41.0; extra == "default"
+Requires-Dist: pycdlib; extra == "default"
 Requires-Dist: capstone; extra == "default"
+Requires-Dist: pypdf>=3.1.0; extra == "default"
+Requires-Dist: pyzipper; extra == "default"
+Requires-Dist: intervaltree; extra == "default"
 Provides-Extra: extended
-Requires-Dist: asn1crypto; extra == "extended"
-Requires-Dist: pycdlib; extra == "extended"
+Requires-Dist: unicorn; extra == "extended"
+Requires-Dist: cabarchive; extra == "extended"
 Requires-Dist: oletools; extra == "extended"
-Requires-Dist: uncompyle6; extra == "extended"
-Requires-Dist: openpyxl; extra == "extended"
-Requires-Dist: py7zr; extra == "extended"
-Requires-Dist: chardet; extra == "extended"
-Requires-Dist: xdis; extra == "extended"
-Requires-Dist: pyonenote; extra == "extended"
+Requires-Dist: xlrd2; extra == "extended"
 Requires-Dist: colorama; extra == "extended"
-Requires-Dist: pyxlsb2; extra == "extended"
-Requires-Dist: capstone; extra == "extended"
-Requires-Dist: jsbeautifier; extra == "extended"
-Requires-Dist: unicorn; extra == "extended"
+Requires-Dist: chardet; extra == "extended"
+Requires-Dist: extract-msg<=0.41.0; extra == "extended"
+Requires-Dist: openpyxl; extra == "extended"
+Requires-Dist: pyzipper; extra == "extended"
+Requires-Dist: asn1crypto; extra == "extended"
 Requires-Dist: intervaltree; extra == "extended"
+Requires-Dist: pyxlsb2; extra == "extended"
 Requires-Dist: LnkParse3>=1.4.0; extra == "extended"
-Requires-Dist: pypdf>=3.1.0; extra == "extended"
+Requires-Dist: py7zr; extra == "extended"
+Requires-Dist: uncompyle6; extra == "extended"
 Requires-Dist: olefile; extra == "extended"
-Requires-Dist: xlrd2; extra == "extended"
-Requires-Dist: pyzipper; extra == "extended"
-Requires-Dist: cabarchive; extra == "extended"
-Requires-Dist: extract-msg<=0.41.0; extra == "extended"
+Requires-Dist: pyonenote; extra == "extended"
+Requires-Dist: pypdf>=3.1.0; extra == "extended"
 Requires-Dist: numpy; extra == "extended"
+Requires-Dist: pycdlib; extra == "extended"
+Requires-Dist: capstone; extra == "extended"
+Requires-Dist: xdis; extra == "extended"
+Requires-Dist: jsbeautifier; extra == "extended"
 Provides-Extra: arc
+Requires-Dist: cabarchive; extra == "arc"
+Requires-Dist: py7zr; extra == "arc"
 Requires-Dist: pyzstd; extra == "arc"
 Requires-Dist: uncompyle6; extra == "arc"
-Requires-Dist: py7zr; extra == "arc"
-Requires-Dist: pyzipper; extra == "arc"
-Requires-Dist: xdis; extra == "arc"
-Requires-Dist: cabarchive; extra == "arc"
 Requires-Dist: decompyle3; extra == "arc"
 Requires-Dist: pycdlib; extra == "arc"
+Requires-Dist: xdis; extra == "arc"
+Requires-Dist: pyzipper; extra == "arc"
 Provides-Extra: python
 Requires-Dist: uncompyle6; extra == "python"
 Requires-Dist: xdis; extra == "python"
 Requires-Dist: decompyle3; extra == "python"
 Provides-Extra: formats
-Requires-Dist: phpserialize; extra == "formats"
-Requires-Dist: oletools; extra == "formats"
+Requires-Dist: XLMMacroDeobfuscator; extra == "formats"
 Requires-Dist: LnkParse3>=1.4.0; extra == "formats"
+Requires-Dist: pyxlsb2; extra == "formats"
+Requires-Dist: Pillow; extra == "formats"
+Requires-Dist: python-registry; extra == "formats"
+Requires-Dist: oletools; extra == "formats"
 Requires-Dist: python-evtx; extra == "formats"
-Requires-Dist: javaobj-py3>=0.4.0.1; extra == "formats"
-Requires-Dist: openpyxl; extra == "formats"
-Requires-Dist: pypdf>=3.1.0; extra == "formats"
+Requires-Dist: msoffcrypto-tool; extra == "formats"
+Requires-Dist: phpserialize; extra == "formats"
+Requires-Dist: extract-msg<=0.41.0; extra == "formats"
 Requires-Dist: olefile; extra == "formats"
 Requires-Dist: xlrd2; extra == "formats"
-Requires-Dist: Pillow; extra == "formats"
-Requires-Dist: XLMMacroDeobfuscator; extra == "formats"
 Requires-Dist: pyonenote; extra == "formats"
-Requires-Dist: msoffcrypto-tool; extra == "formats"
-Requires-Dist: extract-msg<=0.41.0; extra == "formats"
-Requires-Dist: pyxlsb2; extra == "formats"
-Requires-Dist: python-registry; extra == "formats"
+Requires-Dist: pypdf>=3.1.0; extra == "formats"
+Requires-Dist: openpyxl; extra == "formats"
+Requires-Dist: javaobj-py3>=0.4.0.1; extra == "formats"
 Provides-Extra: office
+Requires-Dist: XLMMacroDeobfuscator; extra == "office"
+Requires-Dist: pyxlsb2; extra == "office"
+Requires-Dist: xlrd2; extra == "office"
 Requires-Dist: oletools; extra == "office"
-Requires-Dist: openpyxl; extra == "office"
 Requires-Dist: olefile; extra == "office"
-Requires-Dist: xlrd2; extra == "office"
-Requires-Dist: XLMMacroDeobfuscator; extra == "office"
-Requires-Dist: pyonenote; extra == "office"
 Requires-Dist: msoffcrypto-tool; extra == "office"
 Requires-Dist: extract-msg<=0.41.0; extra == "office"
-Requires-Dist: pyxlsb2; extra == "office"
+Requires-Dist: pyonenote; extra == "office"
+Requires-Dist: openpyxl; extra == "office"
 Provides-Extra: display
 Requires-Dist: colorama; extra == "display"
 Requires-Dist: jsbeautifier; extra == "display"

{binary_refinery-0.7.0 → binary_refinery-0.7.2}/binary_refinery.egg-info/SOURCES.txt

@@ -260,11 +260,11 @@ refinery/units/formats/pe/dotnet/dnrc.py
 refinery/units/formats/pe/dotnet/dnsfx.py
 refinery/units/formats/pe/dotnet/dnstr.py
 refinery/units/malware/__init__.py
+refinery/units/malware/kramer.py
 refinery/units/malware/n40.py
 refinery/units/meta/__init__.py
 refinery/units/meta/chop.py
 refinery/units/meta/cm.py
-refinery/units/meta/cull.py
 refinery/units/meta/dedup.py
 refinery/units/meta/eat.py
 refinery/units/meta/ef.py
@@ -275,6 +275,7 @@ refinery/units/meta/iff.py
 refinery/units/meta/iffp.py
 refinery/units/meta/iffs.py
 refinery/units/meta/iffx.py
+refinery/units/meta/loop.py
 refinery/units/meta/max.py
 refinery/units/meta/min.py
 refinery/units/meta/mvg.py

{binary_refinery-0.7.0 → binary_refinery-0.7.2}/binary_refinery.egg-info/entry_points.txt

@@ -51,9 +51,10 @@ cm = refinery.units.meta.cm:cm.run
 couple = refinery.units.misc.couple:couple.run
 cp1252 = refinery.units.encoding.cp1252:cp1252.run
 crc32 = refinery.units.crypto.hash.checksums:crc32.run
+csb = refinery.units.pattern.carve:csb.run
+csd = refinery.units.pattern.carve:csd.run
 csv = refinery.units.formats.csv:csv.run
 cswap = refinery.units.strings.cswap:cswap.run
-cull = refinery.units.meta.cull:cull.run
 cupper = refinery.units.strings.cupper:cupper.run
 datefix = refinery.units.misc.datefix:datefix.run
 decompress = refinery.units.compression.decompress:decompress.run
@@ -135,7 +136,9 @@ jvdasm = refinery.units.formats.java.jvdasm:jvdasm.run
 jvstr = refinery.units.formats.java.jvstr:jvstr.run
 kblob = refinery.units.crypto.keyderive.kblob:kblob.run
 keccak256 = refinery.units.crypto.hash.cryptographic:keccak256.run
+kramer = refinery.units.malware.kramer:kramer.run
 lnk = refinery.units.formats.lnk:lnk.run
+loop = refinery.units.meta.loop:loop.run
 lz4 = refinery.units.compression.lz4:lz4.run
 lzf = refinery.units.compression.lzf:lzf.run
 lzg = refinery.units.compression.lzg:lzg.run
@@ -172,6 +175,9 @@ nrv2e = refinery.units.compression.nrv:nrv2e.run
 ntlm = refinery.units.crypto.hash.password_hashes:ntlm.run
 officecrypt = refinery.units.formats.office.officecrypt:officecrypt.run
 opc = refinery.units.formats.exe.opc:opc.run
+p1 = refinery.units.meta.pick:p1.run
+p2 = refinery.units.meta.pick:p2.run
+p3 = refinery.units.meta.pick:p3.run
 pack = refinery.units.blockwise.pack:pack.run
 pad = refinery.units.meta.pad:pad.run
 pbkdf1 = refinery.units.crypto.keyderive.pbkdf1:pbkdf1.run

{binary_refinery-0.7.0 → binary_refinery-0.7.2}/refinery/__init__.py

@@ -34,7 +34,7 @@ various `refinery.units.Unit`s can be combined.
 4. `refinery.units`: writing custom units, add command-line arguments, and how to use refinery
    units within Python code.
 """
-__version__ = '0.7.0'
+__version__ = '0.7.2'
 __distribution__ = 'binary-refinery'
 
 from typing import Dict, List, Optional, Type, TypeVar, Iterable

{binary_refinery-0.7.0 → binary_refinery-0.7.2}/refinery/lib/argformats.py

@@ -127,6 +127,7 @@ DelayedType = Callable[[ByteString], FinalType]
 MaybeDelayedType = Union[DelayedType[FinalType], FinalType]
 
 _DEFAULT_BITS = 64
+_REVERSE_SIGN = '!'
 
 
 class ParserError(ArgumentTypeError):
@@ -430,36 +431,45 @@ class DelayedArgumentDispatch:
         self.final = {}
         self.units = {}
 
-    def _get_unit(self, name: str, *args) -> Unit:
-        name = normalize_to_identifier(name)
+    def _get_unit(self, name: str, *args) -> Optional[Unit]:
+        name, rev, empty = normalize_to_identifier(name).partition(_REVERSE_SIGN)
+        if empty:
+            return None
         uhash = hash((name,) + args)
         if uhash in self.units:
             return self.units[uhash]
         from refinery import load
         unit = load(name)
         unit = unit and unit.assemble(*args).log_detach()
+        if rev == _REVERSE_SIGN:
+            unit = -unit
         self.units[uhash] = unit
         return unit
 
     def __get__(self, instance, t=None):
         return self.Wrapper(self, instance)
 
-    def __call__(self, instance, data, modifier=None, *args):
+    def __call__(self, instance: DelayedArgument, data, modifier=None, *args):
         try:
             handler = self.default if modifier is None else self.handlers[modifier]
+        except KeyError:
+            unit = self._get_unit(modifier, *args)
+            if not unit:
+                raise ArgumentTypeError(F'failed to build unit {modifier}')
+            result = list(unit.act(data))
+            if not result:
+                return B''
+            return B''.join(result) if len(result) > 1 else result[0]
+        else:
             name = next(itertools.islice(inspect.signature(handler).parameters.values(), 1, None)).name
             hint = get_type_hints(handler).get(name, None)
             if hint == Iterable[type(data)]:
                 data = (data,)
             if hint == str and isbuffer(data):
+                if not isinstance(data, (bytes, bytearray)):
+                    data = bytes(data)
                 data = data.decode('utf8')
             return handler(instance, data, *args)
-        except KeyError:
-            unit = self._get_unit(modifier, *args)
-            if not unit:
-                raise ArgumentTypeError(F'failed to build unit {modifier}')
-            result = unit.act(data)
-            return result if isbuffer(result) else B''.join(result)
 
     def can_handle(self, modifier, *args):
         return modifier in self.handlers or bool(self._get_unit(modifier, *args))
@@ -1390,6 +1400,21 @@ class DelayedRegexpArgument(DelayedArgument):
 
         return expression.encode('latin-1')
 
+    @handler.register('f', final=True)
+    def format(self, name: str) -> bytes:
+        """
+        The handler `f:[name]` returns a regular expression for to one of the format types
+        supported by `refinery.carve` unit.
+        """
+        from refinery.lib.patterns import formats
+        try:
+            return formats[name]
+        except LookupError:
+            raise ArgumentTypeError(
+                F'Based on the prefix "f:", the parser looked for a carve format named "{name}".'
+                U' No such format is known; prefix the entire expression with "s:" if this was '
+                U'unintended, otherwise correct the format name spelling.')
+
     @handler.register('yara', 'Y')
     def yara(self, pattern: bytes) -> bytes:
         """

{binary_refinery-0.7.0 → binary_refinery-0.7.2}/refinery/lib/argparser.py

@@ -6,7 +6,7 @@ Provides a customized argument parser that is used by all refinery `refinery.uni
 from __future__ import annotations
 
 from typing import IO, Optional, List, Dict, Any
-from argparse import ArgumentParser, ArgumentError, Action, RawDescriptionHelpFormatter
+from argparse import ArgumentParser, ArgumentError, ArgumentTypeError, Action, RawDescriptionHelpFormatter
 
 import sys
 
@@ -136,10 +136,10 @@ class ArgumentParserWithKeywordHooks(ArgumentParser):
         self.set_defaults(**self.keywords)
         try:
             parsed = self.parse_args(args=args, namespace=namespace)
-        except ArgumentError as e:
+        except (ArgumentError, ArgumentTypeError, ArgparseError) as e:
             self.error(str(e))
-        except Exception:
-            self.error(F'Failed to parse arguments: {args!r}')
+        except Exception as e:
+            self.error(F'Failed to parse arguments: {args!r}, {e}, {type(e).__name__}')
         for name in keywords:
             param = getattr(parsed, name, None)
             if param != keywords[name]:

{binary_refinery-0.7.0 → binary_refinery-0.7.2}/refinery/lib/frame.py

@@ -120,6 +120,7 @@ import json
 import base64
 import itertools
 import zlib
+import uuid
 
 from typing import Generator, Iterable, BinaryIO, Callable, Optional, List, Dict, ByteString, Any
 from typing import TYPE_CHECKING
@@ -175,6 +176,7 @@ class Chunk(bytearray):
     """
     temp: Any = None
     meta: LazyMetaOracle
+    uuid: uuid.UUID
 
     def __init__(
         self,
@@ -191,6 +193,8 @@ class Chunk(bytearray):
         else:
             bytearray.__init__(self, data)
 
+        self.uuid = uuid.uuid4()
+
         if path is None:
             path = []
         if view is None:
@@ -220,10 +224,6 @@ class Chunk(bytearray):
             return data
         return cls(data)
 
-    @property
-    def guid(self) -> int:
-        return hash((id(self), *(id(v) for v in self.meta.values())))
-
     def set_next_scope(self, visible: bool) -> None:
         self._fill_scope = visible