ntdsextract2 1.4.13

use std::path::Path;
use std::str::FromStr;

use anyhow::Result;
use clap::Parser;
use libesedb::EseDb;
use libntdsextract2::cli::{Args, Commands, EntrySearchField, OutputOptions, SdDisplayOption};
use libntdsextract2::{
    use_member_of_attribute, CDatabase, CsvSerialization, EntryId, EsedbInfo, Guid,
    JsonSerialization,
};
use sddl::{AccessMaskFlag, Contains};
use simplelog::{Config, TermLogger};

mod progress_bar;

use cap::Cap;
use std::alloc;

macro_rules! do_with_serialization {
    ($cmd: expr, $db: expr, $function: ident, $options: expr) => {
        if $cmd.flat_serialization() {
            $db.$function::<CsvSerialization>($options)
        } else {
            $db.$function::<JsonSerialization>($options)
        }
    };
}

#[global_allocator]
static ALLOCATOR: Cap<alloc::System> = Cap::new(alloc::System, usize::MAX);

fn main() -> Result<()> {
    ALLOCATOR.set_limit(4096 * 1024 * 1024).unwrap();

    let cli = Args::parse();
    let _ = TermLogger::init(
        cli.verbose().log_level_filter(),
        Config::default(),
        simplelog::TerminalMode::Stderr,
        simplelog::ColorChoice::Auto,
    );

    let ntds_path = Path::new(cli.ntds_file());
    if !(ntds_path.exists() && ntds_path.is_file()) {
        eprintln!("unable to open '{}'", cli.ntds_file());
        std::process::exit(-1);
    }

    let esedb = EseDb::open(cli.ntds_file())?;

    if matches!(cli.command(), Commands::Info {}) {
        EsedbInfo::print_metainfo(&esedb)?;
        return Ok(());
    }

    let info = EsedbInfo::try_from(&esedb)?;
    let database = CDatabase::new(
        &info,
        cli.command().show_security_descriptor() != SdDisplayOption::Hide
            || matches!(cli.command(), Commands::GA { .. }),
    )?;

    let mut options = OutputOptions::default();
    options.set_display_all_attributes(cli.command().display_all_attributes());
    options.set_flat_serialization(cli.command().flat_serialization());
    options.set_format(cli.command().format());
    options.set_include_dn(cli.command().include_dn());
    options.set_show_security_descriptor(cli.command().show_security_descriptor());

    use_member_of_attribute(cli.command().member_of_attribute());

    match cli.command() {
        Commands::Group { .. } => {
            do_with_serialization!(cli.command(), database, show_groups, &options)
        }
        Commands::User { .. } => {
            do_with_serialization!(cli.command(), database, show_users, &options)
        }
        Commands::Computer { .. } => {
            do_with_serialization!(cli.command(), database, show_computers, &options)
        }
        Commands::Types { .. } => {
            do_with_serialization!(cli.command(), database, show_type_names, &options)
        }
        Commands::Timeline {
            all_objects,
            include_deleted,
            format,
        } => {
            options.set_show_all_objects(*all_objects);
            database.show_timeline(&options, *include_deleted, format)
        }
        Commands::Tree { max_depth } => Ok(database.show_tree(*max_depth)?),
        Commands::Entry {
            search_field,
            id,
            entry_format,
        } => {
            let entry_id = match search_field {
                EntrySearchField::EntryId => EntryId::Id(id.parse::<i32>()?.into()),
                EntrySearchField::Sid => EntryId::Rid(id.parse::<u32>()?),
                EntrySearchField::Guid => EntryId::Guid(Guid::from_str(id)?),
            };
            Ok(database.show_entry(entry_id, *entry_format)?)
        }
        Commands::Search { regex, ignore_case } => {
            let regex = if *ignore_case {
                format!("(?i:{regex})")
            } else {
                regex.to_owned()
            };
            database.search_entries(&regex)
        }
        Commands::GA { format, include_dn } => {
            database.show_objects_by_permission(*include_dn, format, |ace| {
                if ace.header().mask().contains(AccessMaskFlag::GENERIC_ALL)
                //
                // the following flags are set by AD
                // when you grant GA to some user
                    | ace.header().mask().contains(
                        AccessMaskFlag::WRITE_OWNER
                            | AccessMaskFlag::WRITE_DACL
                            | AccessMaskFlag::READ_CONTROL
                            | AccessMaskFlag::STANDARD_DELETE
                            | AccessMaskFlag::CONTROL_ACCESS
                            | AccessMaskFlag::LIST_OBJECT
                            | AccessMaskFlag::DELETE_TREE
                            | AccessMaskFlag::WRITE_PROPERTY
                            | AccessMaskFlag::READ_PROPERTY
                            | AccessMaskFlag::SELF_WRITE
                            | AccessMaskFlag::LIST_CHILDREN
                            | AccessMaskFlag::DELETE_CHILD
                            | AccessMaskFlag::CREATE_CHILD,
                    )
                {
                    Some(ace.sid())
                } else {
                    None
                }
            })
        }
        Commands::Info {} => Ok(()),
    }
}