ps12exe

0.6.0

exe21sp.ps1

#Requires -Version 5.1
<#
.SYNOPSIS
    Restore equivalent ps1 from exe built by ps12exe (exe -> ps1).
 
.DESCRIPTION
    Uses AsmResolver to read script payload from exe:
    - For exe built with the standard program frame: reads the embedded .NET manifest resource "main.ps1" as UTF-8 to get the original script. Packed exes first unwrap the compressed "main" launcher payload and look inside it (gzip for Windows PowerShell builds, Brotli for Core builds).
      Brotli is not available on .NET Framework, so under Windows PowerShell a Core exe is handed off to pwsh (PowerShell 7); if pwsh is missing, an error is reported.
    - For minimal exe compiled with TinySharp: parses its CIL and PE image, restores the output string and exit code captured by TinySharp,
      and generates a minimal ps1 containing only that string (and optional exit statement) to equivalently reproduce the behavior.
 
.PARAMETER inputFile
    Path or URL to the .exe file to decompile.
 
.PARAMETER outputFile
    Optional path for the output ps1 file. If not specified, writes to stdout when redirected, otherwise writes to <exe>.ps1 in the same directory as the input.
 
.EXAMPLE
    exe21sp -inputFile .\myapp.exe
    exe21sp -inputFile .\myapp.exe -outputFile .\myapp.ps1
.EXAMPLE
    Get-ChildItem *.exe | exe21sp
    ".\app.exe" | exe21sp
#>
[CmdletBinding()]
param(
    [Parameter(ValueFromPipeline = $true)]
    [string[]]$inputFile,
    [string]$outputFile,
    #_if PSScript
        [ArgumentCompleter({
            Param($commandName, $parameterName, $wordToComplete, $commandAst, $fakeBoundParameters)
            . "$PSScriptRoot\src\LocaleArgCompleter.ps1" @PSBoundParameters
        })]
    #_endif
    [string]$Locale,
    [switch]$help
)

#_if PSScript
    $global:LastExitCode = 0
    $LocalizeData = . $PSScriptRoot\src\LocaleLoader.ps1 -Locale $Locale
    . $PSScriptRoot\src\WriteI18n.ps1
    Set-I18nData -I18nData $LocalizeData.exe21spI18nData
    function Show-exe21spHelp {
        . $PSScriptRoot\src\HelpShower.ps1 -HelpData $LocalizeData.exe21spHelpData | Write-Host
    }

    if ($help) {
        Show-exe21spHelp
        return
    }

    $inputItemsToProcess = @($inputFile) + @($input) | Where-Object { $_ }
    if ($outputFile -and ($outputFile = $outputFile.Trim()) -and $outputFile -notmatch '\.ps1$') {
        $outputFile = $outputFile + '.ps1'
    }
    if ($inputItemsToProcess.Count -eq 0) {
        Show-exe21spHelp
        Write-Host
        Write-I18n Error NoneInput -Category InvalidArgument
        if ([System.Console]::IsOutputRedirected -or [System.Console]::IsInputRedirected -or [System.Console]::IsErrorRedirected) {
            $global:LastExitCode = 2
            return
        }
        & $PSScriptRoot\src\Interact\exe21sp.ps1 -Locale $Locale
        return
    }

    function Resolve-ExeInputPath {
        param([string]$PathOrUrl)
        if ($PathOrUrl -match "^(https?|ftp)://") {
            $tempFile = [System.IO.Path]::GetTempFileName()
            try {
                Invoke-WebRequest -Uri $PathOrUrl -OutFile $tempFile -ErrorAction Stop
                return [PSCustomObject]@{ Path = $tempFile; IsTemp = $true }
            }
            catch {
                Remove-Item -LiteralPath $tempFile -Force -ErrorAction SilentlyContinue
                throw
            }
        }
        $resolved = $ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath($PathOrUrl)
        return [PSCustomObject]@{ Path = $resolved; IsTemp = $false }
    }

    # Windows PowerShell（.NET Framework）没有 BrotliStream：Core 产物的 Brotli 负载解压转交 pwsh 完成。主处理流程仅在脚本/模块模式运行（exe 版只是 #_require ps12exe 后转发），故直接用同目录脚本，无需模块导入。
    function Invoke-ExtractionInPwsh([string]$ExePath) {
        $pwsh = Get-Command pwsh -ErrorAction Ignore
        if (-not $pwsh) { throw 'pwsh not installed' }
        $tempOut = [System.IO.Path]::Combine([System.IO.Path]::GetTempPath(), [System.IO.Path]::GetRandomFileName() + '.ps1')
        try {
            & $pwsh.Source -NoProfile -File "$PSScriptRoot\exe21sp.ps1" -inputFile $ExePath -outputFile $tempOut | Out-Null
            if ($LASTEXITCODE -ne 0 -or -not (Test-Path -LiteralPath $tempOut)) { throw "pwsh extraction failed (exit $LASTEXITCODE)" }
            return [System.IO.File]::ReadAllText($tempOut, [System.Text.Encoding]::UTF8)
        }
        finally {
            Remove-Item -LiteralPath $tempOut -Force -ErrorAction Ignore
        }
    }

    # 源码里已有的 #_pragma 名称（小写）集合：只补回源码中没有的编译选项，避免重复。
    function Get-ExistingPragmaNames([string]$Script) {
        $Names = @{}
        foreach ($Line in ($Script -split '\r?\n')) {
            if ($Line -match '^\s*#_pragma\s+(?<name>[a-zA-Z_][a-zA-Z_0-9]*(?:\.[a-zA-Z_][a-zA-Z_0-9]*)*)') {
                $Names[$Matches['name'].ToLowerInvariant()] = $true
            }
        }
        $Names
    }

    # 把值转成 #_pragma 用的单引号字面量：去掉换行，单引号双写。
    function ConvertTo-PragmaValue([string]$Value) {
        ($Value -replace '\r?\n', ' ').Replace("'", "''")
    }

    # 还原 #_require 预处理生成的头代码。ps12exe 编译时把 #_require <模块> 展开成模块安装引导写入脚本，
    # 反编译时若某行与该展开结果逐字符一致（完全匹配），则还原为原来的 #_require 行；否则原样保留。
    function Restore-RequiredModulePragma([string]$Script) {
        if ([string]::IsNullOrEmpty($Script)) { return $Script }
        # 与 src/ReadScriptFile.ps1 里的 $NuGetIniter 保持一致；两处任一改动都会让完全匹配失效（安全地不还原）。
        $NuGetIniter = 'try{Import-PackageProvider NuGet}catch{Install-PackageProvider NuGet -Scope CurrentUser -Force -ea Ignore;Import-PackageProvider NuGet -ea Ignore}'
        $Nu = [regex]::Escape($NuGetIniter)

        # 单模块：#_require <模块> 展开为 if(!(gmo <模块> -ListAvailable -ea SilentlyContinue)){<NuGet>;Install-Module <模块> -Scope CurrentUser -Force -ea Stop}
        $SinglePattern = "(?m)^if\(!\(gmo (?<a>[^\r\n]+?) -ListAvailable -ea SilentlyContinue\)\)\{$Nu;Install-Module (?<b>[^\r\n]+?) -Scope CurrentUser -Force -ea Stop\}\r?$"
        $Script = [regex]::Replace($Script, $SinglePattern, {
                param($m)
                if ($m.Groups['a'].Value.Length -gt 0 -and $m.Groups['a'].Value -ceq $m.Groups['b'].Value) {
                    "#_require $($m.Groups['a'].Value)"
                }
                else { $m.Value }
            })

        # 多模块（来自多行 #_require）：展开为 @('m1', 'm2')|%{if(!(gmo $_ -ListAvailable -ea SilentlyContinue)){<NuGet>;Install-Module $_ -Scope CurrentUser -Force -ea Stop}}
        $MultiPattern = '(?m)^(?<list>@\(.*?\))\|%\{if\(!\(gmo \$_ -ListAvailable -ea SilentlyContinue\)\)\{' + $Nu + ';Install-Module \$_ -Scope CurrentUser -Force -ea Stop\}\}\r?$'
        $Script = [regex]::Replace($Script, $MultiPattern, {
                param($m)
                $Names = @([regex]::Matches($m.Groups['list'].Value, "'(?<v>(?:[^']|'')*)'") | ForEach-Object { $_.Groups['v'].Value.Replace("''", "'") })
                if ($Names.Count -eq 0) { return $m.Value }
                # 重新拼出规范形式，要求与原文本逐字符一致，确保是 ps12exe 的原始展开而非用户手写。
                $Canonical = '@(' + (($Names | ForEach-Object { "'" + $_.Replace("'", "''") + "'" }) -join ', ') + ')'
                if ($Canonical -cne $m.Groups['list'].Value) { return $m.Value }
                ($Names | ForEach-Object { "#_require $_" }) -join "`n"
            })

        $Script
    }

    # 从产物的 Win32 版本资源里取回资源参数，转成源码里没有的 #_pragma 行。
    function Get-PS12ExeResourcePragmaLines {
        param(
            [string]$ExePath,
            [hashtable]$ExistingPragmaNames
        )
        $Lines = [System.Collections.Generic.List[string]]::new()
        try { $VersionInfo = [System.Diagnostics.FileVersionInfo]::GetVersionInfo($ExePath) }
        catch { return $Lines }
        $Map = [ordered]@{
            'Resources.Title'       = 'FileDescription'
            'Resources.Description' = 'Comments'
            'Resources.Company'     = 'CompanyName'
            'Resources.Product'     = 'ProductName'
            'Resources.Copyright'   = 'LegalCopyright'
            'Resources.Trademark'   = 'LegalTrademarks'
            'Resources.Version'     = 'FileVersion'
        }
        # .NET SDK（Core 目标）会把未指定的标题/公司/产品默认成程序集名、版本默认成 1.0.0.0，这些不是用户配置，别当成资源参数补回。
        $ExeBaseName = [System.IO.Path]::GetFileNameWithoutExtension($ExePath)
        $DefaultNames = @($ExeBaseName, ($ExeBaseName -replace '[^\w\.\-]', '_')) |
        Where-Object { $_ } | ForEach-Object { $_.ToLowerInvariant() }
        $DefaultVersions = @('1.0.0.0', '1.0.0', '0.0.0.0')
        foreach ($Key in $Map.Keys) {
            if ($ExistingPragmaNames.ContainsKey($Key.ToLowerInvariant())) { continue }
            $Value = $VersionInfo.($Map[$Key])
            if ([string]::IsNullOrWhiteSpace($Value)) { continue }
            if ($Key -in @('Resources.Title', 'Resources.Company', 'Resources.Product') -and $DefaultNames -contains $Value.ToLowerInvariant()) { continue }
            if ($Key -eq 'Resources.Version' -and $DefaultVersions -contains $Value) { continue }
            $Lines.Add("#_pragma $Key '$(ConvertTo-PragmaValue $Value)'")
        }
        $Lines
    }

    $Refs = @(
        'System',
        'System.Core',
        'System.IO.Compression',
        'netstandard, Version=2.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51'
    )
    Get-ChildItem -LiteralPath $PSScriptRoot\src\bin\AsmResolver -Recurse -Filter *.dll | ForEach-Object {
        $Refs += $_.FullName
        try {
            Add-Type -LiteralPath $_.FullName -ErrorVariable $null
        }
        catch {
            $_.Exception.LoaderExceptions | Out-String | Write-Verbose
            $Error.Remove($_)
        }
    }
    $ExtractorCode = Get-Content -LiteralPath $PSScriptRoot\src\programFrames\exe21sp.cs -Raw -Encoding UTF8
    Add-Type -TypeDefinition $ExtractorCode -ReferencedAssemblies $Refs -IgnoreWarnings

    . $PSScriptRoot\src\TaskbarProgress.ps1
    $total = $inputItemsToProcess.Count
    $currentIndex = 0
    foreach ($currentInput in $inputItemsToProcess) {
        Write-TaskbarProgress -Percent ([Math]::Min(100, [int](($currentIndex / $total) * 100)))
        $resolved = $null
        try {
            $resolved = Resolve-ExeInputPath -PathOrUrl $currentInput
        }
        catch {
            if ($currentInput -match "^(https?|ftp)://") {
                Write-I18n Error InputUrlFailed $currentInput
            }
            else {
                Write-I18n Error FileNotFound $currentInput
            }
            $global:LastExitCode = 3
            Write-TaskbarProgressError
            $currentIndex++
            continue
        }
        $currentExe = $resolved.Path
        if (-not (Test-Path -LiteralPath $currentExe -PathType Leaf)) {
            Write-I18n Error FileNotFound $currentInput
            $global:LastExitCode = 3
            Write-TaskbarProgressError
            if ($resolved.IsTemp) { Remove-Item -LiteralPath $currentExe -Force -ErrorAction SilentlyContinue }
            $currentIndex++
            continue
        }
        try {
            $script = [exe21sp.Extractor]::ExtractScriptFromExe($currentExe)
        }
        catch [exe21sp.BrotliUnavailableException] {
            # 当前是 Windows PowerShell，Core 的 Brotli 负载交给 pwsh 解压。
            try {
                $script = Invoke-ExtractionInPwsh -ExePath $currentExe
            }
            catch {
                Write-I18n Error CoreExtractNeedsPwsh
                $global:LastExitCode = 1
                Write-TaskbarProgressError
                if ($resolved.IsTemp) { Remove-Item -LiteralPath $currentExe -Force -ErrorAction SilentlyContinue }
                $currentIndex++
                continue
            }
        }
        catch {
            $msg = $_.Exception.Message
            if ($LocalizeData.exe21spI18nData.ContainsKey($msg)) {
                Write-I18n Error $msg
            }
            else {
                Write-Error $msg
            }
            $global:LastExitCode = 1
            Write-TaskbarProgressError
            if ($resolved.IsTemp) { Remove-Item -LiteralPath $currentExe -Force -ErrorAction SilentlyContinue }
            $currentIndex++
            continue
        }
        if ($null -eq $script) {
            Write-I18n Error NoEmbeddedScript $currentInput
            $global:LastExitCode = 1
            Write-TaskbarProgressError
            if ($resolved.IsTemp) { Remove-Item -LiteralPath $currentExe -Force -ErrorAction SilentlyContinue }
            $currentIndex++
            continue
        }

        # 还原编译期由 #_require 展开的模块安装引导头代码（仅完全匹配时）。
        $script = Restore-RequiredModulePragma $script

        # 反编译时从产物的 Win32 资源取回资源参数：源码里已有对应 #_pragma 的跳过，缺失的在程序开头补回；图标释放到输出目录并用 #_pragma Resources.Icon 引用。
        $ExistingPragmaNames = Get-ExistingPragmaNames $script
        $PrefixLines = [System.Collections.Generic.List[string]]::new()
        # 产物是 windowed（GUI 子系统）说明编译时用了 App.Windowed；源码里已有对应 pragma 的跳过，缺失的在程序开头补回。
        if (-not $ExistingPragmaNames.ContainsKey('app.windowed') -and [exe21sp.Extractor]::IsWindowedExe($currentExe)) {
            $PrefixLines.Add('#_pragma App.Windowed')
        }
        foreach ($Line in (Get-PS12ExeResourcePragmaLines -ExePath $currentExe -ExistingPragmaNames $ExistingPragmaNames)) {
            $PrefixLines.Add($Line)
        }
        $IconBytes = $null
        if (-not $ExistingPragmaNames.ContainsKey('resources.icon')) {
            $IconBytes = [exe21sp.Extractor]::ExtractIconFromExe($currentExe)
        }

        $isRedirected = [System.Console]::IsOutputRedirected -or [System.Console]::IsInputRedirected -or [System.Console]::IsErrorRedirected
        $inputBaseName = if ($currentInput -match "^(https?|ftp)://") {
            [System.IO.Path]::GetFileNameWithoutExtension([System.Uri]::new($currentInput).Segments[-1])
        }
        else {
            [System.IO.Path]::GetFileNameWithoutExtension($ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath($currentInput))
        }
        $currentOutFile = $outputFile
        if (-not $currentOutFile -and -not $isRedirected) {
            $dir = if ($currentInput -match "^(https?|ftp)://") { $PWD.Path } else { [System.IO.Path]::GetDirectoryName($ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath($currentInput)) }
            $currentOutFile = [System.IO.Path]::Combine($dir, "$inputBaseName.ps1")
        }
        $releaseDir = $PWD.Path
        $releaseBaseName = $inputBaseName
        if ($currentOutFile) {
            $currentOutFile = $ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath($currentOutFile)
            $releaseDir = [System.IO.Path]::GetDirectoryName($currentOutFile)
            $releaseBaseName = [System.IO.Path]::GetFileNameWithoutExtension($currentOutFile)
        }

        if ($null -ne $IconBytes -and $IconBytes.Length -gt 0) {
            if (-not (Test-Path -LiteralPath $releaseDir)) { New-Item -ItemType Directory -Path $releaseDir -Force | Out-Null }
            $iconName = "$releaseBaseName.ico"
            $iconPath = [System.IO.Path]::Combine($releaseDir, $iconName)
            [System.IO.File]::WriteAllBytes($iconPath, $IconBytes)
            Write-Verbose "Released resource file to $iconPath"
            $PrefixLines.Add("#_pragma Resources.Icon `"`$PSScriptRoot/$iconName`"")
        }

        if ($PrefixLines.Count -gt 0) {
            $script = (($PrefixLines -join "`n") + "`n`n" + $script)
        }

        if ($resolved.IsTemp) { Remove-Item -LiteralPath $currentExe -Force -ErrorAction SilentlyContinue }

        if ($currentOutFile) {
            [System.IO.File]::WriteAllText($currentOutFile, $script, [System.Text.UTF8Encoding]::new($false))
            Write-Verbose "Written to $currentOutFile"
            if ($isRedirected) {
                Write-Output $currentOutFile
            }
        }
        else {
            Write-Output $script
        }
        $currentIndex++
    }
    Write-TaskbarProgress -Percent 100
    Write-TaskbarProgressClear
#_else
    #_require ps12exe
    #_!!exe21sp @PSBoundParameters
#_endif