pax_global_header00006660000000000000000000000064144221506670014521gustar00rootroot0000000000000052 comment=af6a293637c0f4bf2f4105f4b98ae4e0c56be73f quark-engine-23.4.1/000077500000000000000000000000001442215066700141765ustar00rootroot00000000000000quark-engine-23.4.1/.github/000077500000000000000000000000001442215066700155365ustar00rootroot00000000000000quark-engine-23.4.1/.github/ISSUE_TEMPLATE/000077500000000000000000000000001442215066700177215ustar00rootroot00000000000000quark-engine-23.4.1/.github/ISSUE_TEMPLATE/bug_report.md000066400000000000000000000015021442215066700224110ustar00rootroot00000000000000--- name: Bug report about: Create a report to help us improve title: '' labels: '' assignees: '' --- **Describe the bug** A clear and concise description of what the bug is. **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Desktop (please complete the following information):** - OS: [e.g. iOS] - Browser [e.g. chrome, safari] - Version [e.g. 22] **Smartphone (please complete the following information):** - Device: [e.g. iPhone6] - OS: [e.g. iOS8.1] - Browser [e.g. stock browser, safari] - Version [e.g. 22] **Additional context** Add any other context about the problem here. quark-engine-23.4.1/.github/ISSUE_TEMPLATE/custom.md000066400000000000000000000001761442215066700215610ustar00rootroot00000000000000--- name: Custom issue template about: Describe this issue template's purpose here. title: '' labels: '' assignees: '' --- quark-engine-23.4.1/.github/ISSUE_TEMPLATE/feature_request.md000066400000000000000000000011231442215066700234430ustar00rootroot00000000000000--- name: Feature request about: Suggest an idea for this project title: '' labels: '' assignees: '' --- **Is your feature request related to a problem? Please describe.** A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] **Describe the solution you'd like** A clear and concise description of what you want to happen. **Describe alternatives you've considered** A clear and concise description of any alternative solutions or features you've considered. **Additional context** Add any other context or screenshots about the feature request here. quark-engine-23.4.1/.github/workflows/000077500000000000000000000000001442215066700175735ustar00rootroot00000000000000quark-engine-23.4.1/.github/workflows/codeql-analysis.yml000066400000000000000000000044711442215066700234140ustar00rootroot00000000000000# For most projects, this workflow file will not need changing; you simply need # to commit it to your repository. # # You may wish to alter this file to override the set of languages analyzed, # or to provide custom queries or build logic. # # ******** NOTE ******** # We have attempted to detect the languages in your repository. Please check # the `language` matrix defined below to confirm you have the correct set of # supported CodeQL languages. # name: "CodeQL" on: push: branches: [ master ] pull_request: # The branches below must be a subset of the branches above branches: [ master ] schedule: - cron: '15 18 * * 2' jobs: analyze: name: Analyze runs-on: ubuntu-latest strategy: fail-fast: false matrix: language: [ 'python' ] # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] # Learn more: # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed steps: - name: Checkout repository uses: actions/checkout@v3 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. # Prefix the list here with "+" to use these queries and those in the config file. # queries: ./path/to/local/query, your-org/your-repo/queries@main # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild uses: github/codeql-action/autobuild@v2 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines # and modify them (or add more) to build your code if your project # uses a compiled language #- run: | # make bootstrap # make release - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 quark-engine-23.4.1/.github/workflows/docker-image.yml000066400000000000000000000004551442215066700226510ustar00rootroot00000000000000name: Docker Image CI on: push: branches: [ master ] pull_request: branches: [ master ] jobs: build: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - name: Build the Docker image run: docker build . --file Dockerfile --tag my-image-name:$(date +%s) quark-engine-23.4.1/.github/workflows/docker-publish.yml000066400000000000000000000037601442215066700232370ustar00rootroot00000000000000name: Docker on: push: # Publish `master` as Docker `latest` image. branches: - master # Publish `v1.2.3` tags as releases. tags: - v* # Run tests for any PRs. pull_request: env: # TODO: Change variable to your image's name. IMAGE_NAME: image jobs: # Run tests. # See also https://docs.docker.com/docker-hub/builds/automated-testing/ test: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - name: Run tests run: | if [ -f docker-compose.test.yml ]; then docker-compose --file docker-compose.test.yml build docker-compose --file docker-compose.test.yml run sut else docker build . --file Dockerfile fi # Push image to GitHub Packages. # See also https://docs.docker.com/docker-hub/builds/ push: # Ensure test job passes before pushing image. needs: test runs-on: ubuntu-latest if: github.event_name == 'push' steps: - uses: actions/checkout@v3 - name: Build image run: docker build . --file Dockerfile --tag $IMAGE_NAME - name: Log into registry run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login docker.pkg.github.com -u ${{ github.actor }} --password-stdin - name: Push image run: | IMAGE_ID=docker.pkg.github.com/${{ github.repository }}/$IMAGE_NAME # Change all uppercase to lowercase IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]') # Strip git ref prefix from version VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,') # Strip "v" prefix from tag name [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//') # Use Docker `latest` tag convention [ "$VERSION" == "master" ] && VERSION=latest echo IMAGE_ID=$IMAGE_ID echo VERSION=$VERSION docker tag $IMAGE_NAME $IMAGE_ID:$VERSION docker push $IMAGE_ID:$VERSION quark-engine-23.4.1/.github/workflows/pytest.yml000066400000000000000000000031401442215066700216440ustar00rootroot00000000000000# This workflow will install Python dependencies, run tests and lint with a single version of Python # For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions name: build on: push: branches: [ master ] pull_request: branches: [ master ] jobs: build: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - name: Set up Python 3.8 uses: actions/setup-python@v4 with: python-version: 3.8 cache: pip cache-dependency-path: setup.py - name: Install dependencies run: | python -m pip install --upgrade pip python -m pip install pytest rzpipe meson==0.62.0 ninja coverage ciphey frida objection # Install graphviz & ninja sudo apt-get -y install graphviz ninja-build # Install Rizin sudo git clone --branch v0.3.4 https://github.com/rizinorg/rizin /opt/rizin/ cd /opt/rizin/ meson build ninja -C build sudo ninja -C build install sudo ldconfig -v cd - # Install click >= 8.0.0 for CLI supports python -m pip install click==8.0.3 - name: Install Quark-Engine run: | python setup.py build python setup.py install - name: Test with pytest run: | python -m pip install black pytest sphinx sphinx-rtd-theme python -m pip install coveralls pytest-cov pytest --cov=./ - name: Upload coverage to Codecov uses: codecov/codecov-action@v3 with: flags: unittests fail_ci_if_error: true quark-engine-23.4.1/.github/workflows/pythonpublish.yml000066400000000000000000000011531442215066700232260ustar00rootroot00000000000000name: Upload Python Package on: release: types: [created] jobs: deploy: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - name: Set up Python uses: actions/setup-python@v4 with: python-version: '3.x' - name: Install dependencies run: | python -m pip install --upgrade pip pip install setuptools wheel twine - name: Build and publish env: TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }} TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }} run: | python setup.py sdist bdist_wheel twine upload dist/* quark-engine-23.4.1/.github/workflows/smoke_test.yml000066400000000000000000000072021442215066700224740ustar00rootroot00000000000000# This is the basic workflow of using quark-engine name: Smoke Test # Controls when the workflow will run on: # Triggers the workflow on push or pull request events but only for the master branch push: branches: [ master ] pull_request: branches: [ master ] # Allows you to run this workflow manually from the Actions tab workflow_dispatch: # A workflow run is made up of one or more jobs that can run sequentially or in parallel jobs: # This workflow contains a single job called "build" build: # The type of runner that the job will run on runs-on: ${{ matrix.os }} strategy: fail-fast: false matrix: os: [ubuntu-latest, macos-10.15, windows-latest] python-version: [3.8, 3.9] steps: - uses: actions/checkout@v3 - name: Set up Python uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} cache: pip cache-dependency-path: setup.py - name: Install dependencies run: | python -m pip install --upgrade pip python -m pip install ciphey frida objection python -m pip install black pytest sphinx sphinx-rtd-theme # Install click >= 8.0.0 for CLI supports python -m pip install click==8.0.3 - run: sudo apt-get -y install graphviz if: matrix.os == 'ubuntu-latest' - run: brew install graphviz if: matrix.os == 'macOS-10.15' - run: choco install graphviz if: matrix.os == 'windows-latest' - name: Install Quark-Engine run: | python setup.py build python setup.py install # Download the latest rule set - name: Download rule from https://github.com/quark-engine/quark-rules run: freshquark # Runs a set of commands using the quark-engine - name: Run a multi-line script run: | quark --help git clone https://github.com/quark-engine/apk-samples quark -a apk-samples/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s quark -a apk-samples/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -d quark -a apk-samples/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s -g quark -a apk-samples/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -d -g quark -a apk-samples/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s -c - name: Check Accuracy shell: bash run: | echo "Ahmyth_RESULT=$(quark -a apk-samples/malware-samples/Ahmyth.apk -s -t 100 | grep 100% | wc -l | awk '{print $1}')" >> $GITHUB_ENV echo "a4db_RESULT=$(quark -a apk-samples/malware-samples/13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk -s -t 100 | grep 100% | wc -l | awk '{print $1}')" >> $GITHUB_ENV echo "e273e_RESULT=$(quark -a apk-samples/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk -s -t 100 | grep 100% | wc -l | awk '{print $1}')" >> $GITHUB_ENV - name: Check Ahmyt Result shell: bash # This sample should have 16 behaviors with 100% confidence run: | if [ "${{ env.Ahmyth_RESULT }}" == "35" ]; then exit 0 else exit 1 fi - name: Check 13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk Result shell: bash # This sample should have 11 behaviors with 100% confidence run: | if [ "${{ env.a4db_RESULT }}" == "19" ]; then exit 0 else exit 1 fi - name: Check 14d9f1a92dd984d6040cc41ed06e273e.apk Result shell: bash # This sample should have 15 behaviors with 100% confidence run: | if [ "${{ env.e273e_RESULT }}" == "36" ]; then exit 0 else exit 1 fi quark-engine-23.4.1/.gitignore000066400000000000000000000023361442215066700161720ustar00rootroot00000000000000.DS_Store .vscode / .idea/ pyproject.toml # Byte-compiled / optimized / DLL files __pycache__/ *.py[cod] *$py.class # C extensions *.so # Distribution / packaging .Python build/ develop-eggs/ dist/ downloads/ eggs/ .eggs/ lib/ lib64/ parts/ sdist/ var/ wheels/ *.egg-info/ .installed.cfg *.egg MANIFEST # PyInstaller # Usually these files are written by a python script from a template # before PyInstaller builds the exe, so as to inject date/other infos into it. *.manifest *.spec # Installer logs pip-log.txt pip-delete-this-directory.txt # Unit test / coverage reports htmlcov/ .tox/ .coverage .coverage.* .cache nosetests.xml coverage.xml *.cover .hypothesis/ .pytest_cache/ # Translations *.mo *.pot # Django stuff: *.log local_settings.py db.sqlite3 # Flask stuff: instance/ .webassets-cache # Scrapy stuff: .scrapy # Sphinx documentation docs/_build/ # PyBuilder target/ # Jupyter Notebook .ipynb_checkpoints # pyenv .python-version # celery beat schedule file celerybeat-schedule # SageMath parsed files *.sage.py # Environments .env .venv env/ venv/ ENV/ env.bak/ venv.bak/ # Spyder project settings .spyderproject .spyproject # Rope project settings .ropeproject # mkdocs documentation /site # mypy .mypy_cache/ quark-engine-23.4.1/.pre-commit-config.yaml000066400000000000000000000015131442215066700204570ustar00rootroot00000000000000repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: v2.5.0 hooks: - id: check-docstring-first - id: check-yaml - id: debug-statements - id: end-of-file-fixer - id: requirements-txt-fixer - id: trailing-whitespace - repo: https://gitlab.com/pycqa/flake8 rev: 3.7.9 hooks: - id: flake8 additional_dependencies: [flake8-typing-imports==1.7.0] args: ['--ignore=E501,W503,F841,E712'] - repo: https://github.com/pre-commit/mirrors-autopep8 rev: v1.5 hooks: - id: autopep8 - repo: https://github.com/asottile/add-trailing-comma rev: v1.5.0 hooks: - id: add-trailing-comma args: [--py36-plus] - repo: https://github.com/asottile/pyupgrade rev: v2.2.0 hooks: - id: pyupgrade args: [--py37-plus] quark-engine-23.4.1/.travis.yml000066400000000000000000000013031442215066700163040ustar00rootroot00000000000000# Set the build language to Python language: python python: 3.8 before-install: - RIZIN_LATEST=https://github.com/rizinorg/rizin/releases/latest - DOWNLOAD_URL='https://github.com'`curl -sfL $RIZIN_LATEST | grep 'href=\"/rizinorg/rizin/releases/'| grep 'static-x86_64'| cut -d \" -f 2` - curl -sSfL --retry 5 -o rizin.tar.xz $DOWNLOAD_URL - sudo mkdir -p /opt/rizin - sudo tar -Jxf rizin.tar.xz --directory /opt/rizin - PATH="/opt/rizin/bin:$PATH" - export PATH - sudo apt-get -y install graphviz # Installation install: - pipenv install -e . --skip-lock - pipenv install coveralls pytest-cov --skip-lock # Run the unit test script: - pytest --cov=./ after_success: - coveralls quark-engine-23.4.1/Dockerfile000066400000000000000000000004411442215066700161670ustar00rootroot00000000000000FROM python:3.8-slim COPY . /app WORKDIR /app RUN apt-get update && apt-get install --no-install-recommends -y git graphviz \ && apt-get clean \ && rm -rf /var/lib/apt/lists/* RUN pip install pipenv && pipenv install --skip-lock WORKDIR /app/quark ENTRYPOINT ["pipenv", "run"] quark-engine-23.4.1/LICENSE000066400000000000000000001045151442215066700152110ustar00rootroot00000000000000 GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public License is a free, copyleft license for software and other kinds of works. The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others. For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it. For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions. Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users. Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS 0. Definitions. "This License" refers to version 3 of the GNU General Public License. "Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. "The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations. To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work. A "covered work" means either the unmodified Program or a work based on the Program. To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. 1. Source Code. The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work. A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. The Corresponding Source for a work in source code form is that same work. 2. Basic Permissions. All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. 3. Protecting Users' Legal Rights From Anti-Circumvention Law. No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. 4. Conveying Verbatim Copies. You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices". c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so. A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. 6. Conveying Non-Source Forms. You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b. d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d. A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. "Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. 7. Additional Terms. "Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors. All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. 8. Termination. You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. 9. Acceptance Not Required for Having Copies. You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. 10. Automatic Licensing of Downstream Recipients. Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. 11. Patents. A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version". A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. 13. Use with the GNU Affero General Public License. Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation. If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. 15. Disclaimer of Warranty. THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. Limitation of Liability. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 17. Interpretation of Sections 15 and 16. If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . Also add information on how to contact you by electronic and paper mail. If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode: Copyright (C) This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box". You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see . The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read . quark-engine-23.4.1/Pipfile000066400000000000000000000011071442215066700155100ustar00rootroot00000000000000[[source]] name = "pypi" url = "https://pypi.org/simple" verify_ssl = true [dev-packages] black = "*" pytest = "*" sphinx = "*" sphinx-rtd-theme = "*" [packages] prettytable = "<=2.4.0" tqdm = "<=4.62.3" colorama = "<=0.4.4" quark-engine = {editable = true,path = "."} click = "<=8.0.3" androguard = "==3.4.0a1" graphviz = "<=0.18.2" requests = "<=2.26.0" pandas = "<=1.3.4" plotly = "<=5.4.0" prompt-toolkit = "<=3.0.36" rzpipe = "<=0.1.2" objection = "<=1.11.0" frida = "<=15.2.2" ciphey = ">=5.0.0,<=5.14.0" [requires] python_version = "3.8" [pipenv] allow_prereleases = true quark-engine-23.4.1/Pipfile.lock000066400000000000000000001526361442215066700164550ustar00rootroot00000000000000{ "_meta": { "hash": { "sha256": "385bdc60153e55b370258ab3929444648224106716457ba250f24d99d95370f7" }, "pipfile-spec": 6, "requires": { "python_version": "3.8" }, "sources": [ { "name": "pypi", "url": "https://pypi.org/simple", "verify_ssl": true } ] }, "default": { "androguard": { "hashes": [ "sha256:1292b6631878ccd75c02426f68c159edee3d3716b212428397800b5b328537a2", "sha256:2bdd9583321b14bbc0c5bd92fd330f0efe7fb6abe1f334b658ded5f93849e898" ], "index": "pypi", "version": "==3.4.0a1" }, "asn1crypto": { "hashes": [ "sha256:13ae38502be632115abf8a24cbe5f4da52e3b5231990aff31123c805306ccb9c", "sha256:db4e40728b728508912cbb3d44f19ce188f218e9eba635821bb4b68564f8fd67" ], "version": "==1.5.1" }, "asttokens": { "hashes": [ "sha256:0844691e88552595a6f4a4281a9f7f79b8dd45ca4ccea82e5e05b4bbdb76705c", "sha256:9a54c114f02c7a9480d56550932546a3f1fe71d8a02f1bc7ccd0ee3ee35cf4d5" ], "version": "==2.0.5" }, "backcall": { "hashes": [ "sha256:5cbdbf27be5e7cfadb448baf0aa95508f91f2bbc6c6437cd9cd06e2a4c215e1e", "sha256:fbbce6a29f263178a1f7915c1940bde0ec2b2a967566fe1c65c1dfb7422bd255" ], "version": "==0.2.0" }, "certifi": { "hashes": [ "sha256:84c85a9078b11105f04f3036a9482ae10e4621616db313fe045dd24743a0820d", "sha256:fe86415d55e84719d75f8b69414f6438ac3547d2078ab91b67e779ef69378412" ], "markers": "python_version >= '3.6'", "version": "==2022.6.15" }, "charset-normalizer": { "hashes": [ "sha256:2857e29ff0d34db842cd7ca3230549d1a697f96ee6d3fb071cfa6c7393832597", "sha256:6881edbebdb17b39b4eaaa821b438bf6eddffb4468cf344f09f89def34a8b1df" ], "markers": "python_version >= '3'", "version": "==2.0.12" }, "click": { "hashes": [ "sha256:8c04c11192119b1ef78ea049e0a6f0463e4c48ef00a30160c704337586f3ad7a", "sha256:fba402a4a47334742d782209a7c79bc448911afe1149d07bdabdf480b3e2f4b6" ], "index": "pypi", "version": "==8.0.1" }, "colorama": { "hashes": [ "sha256:5941b2b48a20143d2267e95b1c2a7603ce057ee39fd88e7329b0c292aa16869b", "sha256:9f47eda37229f68eee03b24b9748937c7dc3868f906e8ba69fbcbdd3bc5dc3e2" ], "index": "pypi", "version": "==0.4.4" }, "cycler": { "hashes": [ "sha256:3a27e95f763a428a739d2add979fa7494c912a32c17c4c38c4d5f082cad165a3", "sha256:9c87405839a19696e837b3b818fed3f5f69f16f1eec1a1ad77e043dcea9c772f" ], "markers": "python_version >= '3.6'", "version": "==0.11.0" }, "decorator": { "hashes": [ "sha256:637996211036b6385ef91435e4fae22989472f9d571faba8927ba8253acbc330", "sha256:b8c3f85900b9dc423225913c5aace94729fe1fa9763b38939a95226f02d37186" ], "markers": "python_version >= '3.5'", "version": "==5.1.1" }, "executing": { "hashes": [ "sha256:c6554e21c6b060590a6d3be4b82fb78f8f0194d809de5ea7df1c093763311501", "sha256:d1eef132db1b83649a3905ca6dd8897f71ac6f8cac79a7e58a1a09cf137546c9" ], "version": "==0.8.3" }, "fonttools": { "hashes": [ "sha256:3fb3bef8e743dad8fe96e12a47a9ce9bd367ac0a24c089256615518c88309dbd", "sha256:c6c5a896c9760132614caa57b444ee5b4719c08f84b304bf8ce9295edfb7cbc3" ], "markers": "python_version >= '3.7'", "version": "==4.34.2" }, "graphviz": { "hashes": [ "sha256:5dadec94046d82adaae6019311a30e0487536d9d5a60d85451f0ba32f9fc6559", "sha256:ef6e2c5deb9cdcc0c7eece1d89625fd07b0f2208ea2bcb483520907ddf8b4e12" ], "index": "pypi", "version": "==0.17" }, "idna": { "hashes": [ "sha256:84d9dd047ffa80596e0f246e2eab0b391788b0503584e8945f2368256d2735ff", "sha256:9d643ff0a55b762d5cdb124b8eaa99c66322e2157b69160bc32796e824360e6d" ], "markers": "python_version >= '3'", "version": "==3.3" }, "ipython": { "hashes": [ "sha256:7ca74052a38fa25fe9bedf52da0be7d3fdd2fb027c3b778ea78dfe8c212937d1", "sha256:f2db3a10254241d9b447232cec8b424847f338d9d36f9a577a6192c332a46abd" ], "markers": "python_version >= '3.8'", "version": "==8.4.0" }, "jedi": { "hashes": [ "sha256:637c9635fcf47945ceb91cd7f320234a7be540ded6f3e99a50cb6febdfd1ba8d", "sha256:74137626a64a99c8eb6ae5832d99b3bdd7d29a3850fe2aa80a4126b2a7d949ab" ], "markers": "python_version >= '3.6'", "version": "==0.18.1" }, "kaleido": { "hashes": [ "sha256:4670985f28913c2d063c5734d125ecc28e40810141bdb0a46f15b76c1d45f23c", "sha256:845819844c8082c9469d9c17e42621fbf85c2b237ef8a86ec8a8527f98b6512a", "sha256:aa21cf1bf1c78f8fa50a9f7d45e1003c387bd3d6fe0a767cfbbf344b95bdc3a8", "sha256:bb9a5d1f710357d5d432ee240ef6658a6d124c3e610935817b4b42da9c787c05", "sha256:ca6f73e7ff00aaebf2843f73f1d3bacde1930ef5041093fe76b83a15785049a7", "sha256:ecc72635860be616c6b7161807a65c0dbd9b90c6437ac96965831e2e24066552" ], "version": "==0.2.1" }, "kiwisolver": { "hashes": [ "sha256:007799c7fa934646318fc128b033bb6e6baabe7fbad521bfb2279aac26225cd7", "sha256:130c6c35eded399d3967cf8a542c20b671f5ba85bd6f210f8b939f868360e9eb", "sha256:1858ad3cb686eccc7c6b7c5eac846a1cfd45aacb5811b2cf575e80b208f5622a", "sha256:1ae7aa0784aeadfbd693c27993727792fbe1455b84d49970bad5886b42976b18", "sha256:1d2c744aeedce22c122bb42d176b4aa6d063202a05a4abdacb3e413c214b3694", "sha256:21a3a98f0a21fc602663ca9bce2b12a4114891bdeba2dea1e9ad84db59892fca", "sha256:22ccba48abae827a0f952a78a7b1a7ff01866131e5bbe1f826ce9bda406bf051", "sha256:26b5a70bdab09e6a2f40babc4f8f992e3771751e144bda1938084c70d3001c09", "sha256:2d76780d9c65c7529cedd49fa4802d713e60798d8dc3b0d5b12a0a8f38cca51c", "sha256:325fa1b15098e44fe4590a6c5c09a212ca10c6ebb5d96f7447d675f6c8340e4e", "sha256:3a297d77b3d6979693f5948df02b89431ae3645ec95865e351fb45578031bdae", "sha256:3b1dcbc49923ac3c973184a82832e1f018dec643b1e054867d04a3a22255ec6a", "sha256:40240da438c0ebfe2aa76dd04b844effac6679423df61adbe3437d32f23468d9", "sha256:46c6e5018ba31d5ee7582f323d8661498a154dea1117486a571db4c244531f24", "sha256:46fb56fde006b7ef5f8eaa3698299b0ea47444238b869ff3ced1426aa9fedcb5", "sha256:4dc350cb65fe4e3f737d50f0465fa6ea0dcae0e5722b7edf5d5b0a0e3cd2c3c7", "sha256:51078855a16b7a4984ed2067b54e35803d18bca9861cb60c60f6234b50869a56", "sha256:547111ef7cf13d73546c2de97ce434935626c897bdec96a578ca100b5fcd694b", "sha256:5fb73cc8a34baba1dfa546ae83b9c248ef6150c238b06fc53d2773685b67ec67", "sha256:654280c5f41831ddcc5a331c0e3ce2e480bbc3d7c93c18ecf6236313aae2d61a", "sha256:6b3136eecf7e1b4a4d23e4b19d6c4e7a8e0b42d55f30444e3c529700cdacaa0d", "sha256:7118ca592d25b2957ff7b662bc0fe4f4c2b5d5b27814b9b1bc9f2fb249a970e7", "sha256:71af5b43e4fa286a35110fc5bb740fdeae2b36ca79fbcf0a54237485baeee8be", "sha256:747190fcdadc377263223f8f72b038381b3b549a8a3df5baf4d067da4749b046", "sha256:8395064d63b26947fa2c9faeea9c3eee35e52148c5339c37987e1d96fbf009b3", "sha256:84f85adfebd7d3c3db649efdf73659e1677a2cf3fa6e2556a3f373578af14bf7", "sha256:86bcf0009f2012847a688f2f4f9b16203ca4c835979a02549aa0595d9f457cc8", "sha256:ab8a15c2750ae8d53e31f77a94f846d0a00772240f1c12817411fa2344351f86", "sha256:af24b21c2283ca69c416a8a42cde9764dc36c63d3389645d28c69b0e93db3cd7", "sha256:afe173ac2646c2636305ab820cc0380b22a00a7bca4290452e7166b4f4fa49d0", "sha256:b9eb88593159a53a5ee0b0159daee531ff7dd9c87fa78f5d807ca059c7eb1b2b", "sha256:c16635f8dddbeb1b827977d0b00d07b644b040aeb9ff8607a9fc0997afa3e567", "sha256:ca3eefb02ef17257fae8b8555c85e7c1efdfd777f671384b0e4ef27409b02720", "sha256:caa59e2cae0e23b1e225447d7a9ddb0f982f42a6a22d497a484dfe62a06f7c0e", "sha256:cb55258931448d61e2d50187de4ee66fc9d9f34908b524949b8b2b93d0c57136", "sha256:d248c46c0aa406695bda2abf99632db991f8b3a6d46018721a2892312a99f069", "sha256:d2578e5149ff49878934debfacf5c743fab49eca5ecdb983d0b218e1e554c498", "sha256:dd22085446f3eca990d12a0878eeb5199dc9553b2e71716bfe7bed9915a472ab", "sha256:e7cf940af5fee00a92e281eb157abe8770227a5255207818ea9a34e54a29f5b2", "sha256:f70f3d028794e31cf9d1a822914efc935aadb2438ec4e8d4871d95eb1ce032d6", "sha256:fd2842a0faed9ab9aba0922c951906132d9384be89690570f0ed18cd4f20e658", "sha256:fd628e63ffdba0112e3ddf1b1e9f3db29dd8262345138e08f4938acbc6d0805a", "sha256:ffd7cf165ff71afb202b3f36daafbf298932bee325aac9f58e1c9cd55838bef0" ], "markers": "python_version >= '3.7'", "version": "==1.4.3" }, "lxml": { "hashes": [ "sha256:04da965dfebb5dac2619cb90fcf93efdb35b3c6994fea58a157a834f2f94b318", "sha256:0538747a9d7827ce3e16a8fdd201a99e661c7dee3c96c885d8ecba3c35d1032c", "sha256:0645e934e940107e2fdbe7c5b6fb8ec6232444260752598bc4d09511bd056c0b", "sha256:079b68f197c796e42aa80b1f739f058dcee796dc725cc9a1be0cdb08fc45b000", "sha256:0f3f0059891d3254c7b5fb935330d6db38d6519ecd238ca4fce93c234b4a0f73", "sha256:10d2017f9150248563bb579cd0d07c61c58da85c922b780060dcc9a3aa9f432d", "sha256:1355755b62c28950f9ce123c7a41460ed9743c699905cbe664a5bcc5c9c7c7fb", "sha256:13c90064b224e10c14dcdf8086688d3f0e612db53766e7478d7754703295c7c8", "sha256:1423631e3d51008871299525b541413c9b6c6423593e89f9c4cfbe8460afc0a2", "sha256:1436cf0063bba7888e43f1ba8d58824f085410ea2025befe81150aceb123e345", "sha256:1a7c59c6ffd6ef5db362b798f350e24ab2cfa5700d53ac6681918f314a4d3b94", "sha256:1e1cf47774373777936c5aabad489fef7b1c087dcd1f426b621fda9dcc12994e", "sha256:206a51077773c6c5d2ce1991327cda719063a47adc02bd703c56a662cdb6c58b", "sha256:21fb3d24ab430fc538a96e9fbb9b150029914805d551deeac7d7822f64631dfc", "sha256:27e590352c76156f50f538dbcebd1925317a0f70540f7dc8c97d2931c595783a", "sha256:287605bede6bd36e930577c5925fcea17cb30453d96a7b4c63c14a257118dbb9", "sha256:2aaf6a0a6465d39b5ca69688fce82d20088c1838534982996ec46633dc7ad6cc", "sha256:32a73c53783becdb7eaf75a2a1525ea8e49379fb7248c3eeefb9412123536387", "sha256:41fb58868b816c202e8881fd0f179a4644ce6e7cbbb248ef0283a34b73ec73bb", "sha256:4780677767dd52b99f0af1f123bc2c22873d30b474aa0e2fc3fe5e02217687c7", "sha256:4878e667ebabe9b65e785ac8da4d48886fe81193a84bbe49f12acff8f7a383a4", "sha256:487c8e61d7acc50b8be82bda8c8d21d20e133c3cbf41bd8ad7eb1aaeb3f07c97", "sha256:4beea0f31491bc086991b97517b9683e5cfb369205dac0148ef685ac12a20a67", "sha256:4cfbe42c686f33944e12f45a27d25a492cc0e43e1dc1da5d6a87cbcaf2e95627", "sha256:4d5bae0a37af799207140652a700f21a85946f107a199bcb06720b13a4f1f0b7", "sha256:4e285b5f2bf321fc0857b491b5028c5f276ec0c873b985d58d7748ece1d770dd", "sha256:57e4d637258703d14171b54203fd6822fda218c6c2658a7d30816b10995f29f3", "sha256:5974895115737a74a00b321e339b9c3f45c20275d226398ae79ac008d908bff7", "sha256:5ef87fca280fb15342726bd5f980f6faf8b84a5287fcc2d4962ea8af88b35130", "sha256:603a464c2e67d8a546ddaa206d98e3246e5db05594b97db844c2f0a1af37cf5b", "sha256:6653071f4f9bac46fbc30f3c7838b0e9063ee335908c5d61fb7a4a86c8fd2036", "sha256:6ca2264f341dd81e41f3fffecec6e446aa2121e0b8d026fb5130e02de1402785", "sha256:6d279033bf614953c3fc4a0aa9ac33a21e8044ca72d4fa8b9273fe75359d5cca", "sha256:6d949f53ad4fc7cf02c44d6678e7ff05ec5f5552b235b9e136bd52e9bf730b91", "sha256:6daa662aba22ef3258934105be2dd9afa5bb45748f4f702a3b39a5bf53a1f4dc", "sha256:6eafc048ea3f1b3c136c71a86db393be36b5b3d9c87b1c25204e7d397cee9536", "sha256:830c88747dce8a3e7525defa68afd742b4580df6aa2fdd6f0855481e3994d391", "sha256:86e92728ef3fc842c50a5cb1d5ba2bc66db7da08a7af53fb3da79e202d1b2cd3", "sha256:8caf4d16b31961e964c62194ea3e26a0e9561cdf72eecb1781458b67ec83423d", "sha256:8d1a92d8e90b286d491e5626af53afef2ba04da33e82e30744795c71880eaa21", "sha256:8f0a4d179c9a941eb80c3a63cdb495e539e064f8054230844dcf2fcb812b71d3", "sha256:9232b09f5efee6a495a99ae6824881940d6447debe272ea400c02e3b68aad85d", "sha256:927a9dd016d6033bc12e0bf5dee1dde140235fc8d0d51099353c76081c03dc29", "sha256:93e414e3206779ef41e5ff2448067213febf260ba747fc65389a3ddaa3fb8715", "sha256:98cafc618614d72b02185ac583c6f7796202062c41d2eeecdf07820bad3295ed", "sha256:9c3a88d20e4fe4a2a4a84bf439a5ac9c9aba400b85244c63a1ab7088f85d9d25", "sha256:9f36de4cd0c262dd9927886cc2305aa3f2210db437aa4fed3fb4940b8bf4592c", "sha256:a60f90bba4c37962cbf210f0188ecca87daafdf60271f4c6948606e4dabf8785", "sha256:a614e4afed58c14254e67862456d212c4dcceebab2eaa44d627c2ca04bf86837", "sha256:ae06c1e4bc60ee076292e582a7512f304abdf6c70db59b56745cca1684f875a4", "sha256:b122a188cd292c4d2fcd78d04f863b789ef43aa129b233d7c9004de08693728b", "sha256:b570da8cd0012f4af9fa76a5635cd31f707473e65a5a335b186069d5c7121ff2", "sha256:bcaa1c495ce623966d9fc8a187da80082334236a2a1c7e141763ffaf7a405067", "sha256:bd34f6d1810d9354dc7e35158aa6cc33456be7706df4420819af6ed966e85448", "sha256:be9eb06489bc975c38706902cbc6888f39e946b81383abc2838d186f0e8b6a9d", "sha256:c4b2e0559b68455c085fb0f6178e9752c4be3bba104d6e881eb5573b399d1eb2", "sha256:c62e8dd9754b7debda0c5ba59d34509c4688f853588d75b53c3791983faa96fc", "sha256:c852b1530083a620cb0de5f3cd6826f19862bafeaf77586f1aef326e49d95f0c", "sha256:d9fc0bf3ff86c17348dfc5d322f627d78273eba545db865c3cd14b3f19e57fa5", "sha256:dad7b164905d3e534883281c050180afcf1e230c3d4a54e8038aa5cfcf312b84", "sha256:e5f66bdf0976ec667fc4594d2812a00b07ed14d1b44259d19a41ae3fff99f2b8", "sha256:e8f0c9d65da595cfe91713bc1222af9ecabd37971762cb830dea2fc3b3bb2acf", "sha256:edffbe3c510d8f4bf8640e02ca019e48a9b72357318383ca60e3330c23aaffc7", "sha256:eea5d6443b093e1545ad0210e6cf27f920482bfcf5c77cdc8596aec73523bb7e", "sha256:ef72013e20dd5ba86a8ae1aed7f56f31d3374189aa8b433e7b12ad182c0d2dfb", "sha256:f05251bbc2145349b8d0b77c0d4e5f3b228418807b1ee27cefb11f69ed3d233b", "sha256:f1be258c4d3dc609e654a1dc59d37b17d7fef05df912c01fc2e15eb43a9735f3", "sha256:f9ced82717c7ec65a67667bb05865ffe38af0e835cdd78728f1209c8fffe0cad", "sha256:fe17d10b97fdf58155f858606bddb4e037b805a60ae023c009f760d8361a4eb8", "sha256:fe749b052bb7233fe5d072fcb549221a8cb1a16725c47c37e42b0b9cb3ff2c3f" ], "index": "pypi", "version": "==4.9.1" }, "matplotlib": { "hashes": [ "sha256:03bbb3f5f78836855e127b5dab228d99551ad0642918ccbf3067fcd52ac7ac5e", "sha256:24173c23d1bcbaed5bf47b8785d27933a1ac26a5d772200a0f3e0e38f471b001", "sha256:2a0967d4156adbd0d46db06bc1a877f0370bce28d10206a5071f9ecd6dc60b79", "sha256:2e8bda1088b941ead50caabd682601bece983cadb2283cafff56e8fcddbf7d7f", "sha256:31fbc2af27ebb820763f077ec7adc79b5a031c2f3f7af446bd7909674cd59460", "sha256:364e6bca34edc10a96aa3b1d7cd76eb2eea19a4097198c1b19e89bee47ed5781", "sha256:3d8e129af95b156b41cb3be0d9a7512cc6d73e2b2109f82108f566dbabdbf377", "sha256:44c6436868186564450df8fd2fc20ed9daaef5caad699aa04069e87099f9b5a8", "sha256:48cf850ce14fa18067f2d9e0d646763681948487a8080ec0af2686468b4607a2", "sha256:49a5938ed6ef9dda560f26ea930a2baae11ea99e1c2080c8714341ecfda72a89", "sha256:4a05f2b37222319753a5d43c0a4fd97ed4ff15ab502113e3f2625c26728040cf", "sha256:4a44cdfdb9d1b2f18b1e7d315eb3843abb097869cd1ef89cfce6a488cd1b5182", "sha256:4fa28ca76ac5c2b2d54bc058b3dad8e22ee85d26d1ee1b116a6fd4d2277b6a04", "sha256:5844cea45d804174bf0fac219b4ab50774e504bef477fc10f8f730ce2d623441", "sha256:5a32ea6e12e80dedaca2d4795d9ed40f97bfa56e6011e14f31502fdd528b9c89", "sha256:6c623b355d605a81c661546af7f24414165a8a2022cddbe7380a31a4170fa2e9", "sha256:751d3815b555dcd6187ad35b21736dc12ce6925fc3fa363bbc6dc0f86f16484f", "sha256:75c406c527a3aa07638689586343f4b344fcc7ab1f79c396699eb550cd2b91f7", "sha256:77157be0fc4469cbfb901270c205e7d8adb3607af23cef8bd11419600647ceed", "sha256:7d7705022df2c42bb02937a2a824f4ec3cca915700dd80dc23916af47ff05f1a", "sha256:7f409716119fa39b03da3d9602bd9b41142fab7a0568758cd136cd80b1bf36c8", "sha256:9480842d5aadb6e754f0b8f4ebeb73065ac8be1855baa93cd082e46e770591e9", "sha256:9776e1a10636ee5f06ca8efe0122c6de57ffe7e8c843e0fb6e001e9d9256ec95", "sha256:a91426ae910819383d337ba0dc7971c7cefdaa38599868476d94389a329e599b", "sha256:b4fedaa5a9aa9ce14001541812849ed1713112651295fdddd640ea6620e6cf98", "sha256:b6c63cd01cad0ea8704f1fd586e9dc5777ccedcd42f63cbbaa3eae8dd41172a1", "sha256:b8d3f4e71e26307e8c120b72c16671d70c5cd08ae412355c11254aa8254fb87f", "sha256:c4b82c2ae6d305fcbeb0eb9c93df2602ebd2f174f6e8c8a5d92f9445baa0c1d3", "sha256:c772264631e5ae61f0bd41313bbe48e1b9bcc95b974033e1118c9caa1a84d5c6", "sha256:c87973ddec10812bddc6c286b88fdd654a666080fbe846a1f7a3b4ba7b11ab78", "sha256:e2b696699386766ef171a259d72b203a3c75d99d03ec383b97fc2054f52e15cf", "sha256:ea75df8e567743207e2b479ba3d8843537be1c146d4b1e3e395319a4e1a77fe9", "sha256:ebc27ad11df3c1661f4677a7762e57a8a91dd41b466c3605e90717c9a5f90c82", "sha256:ee0b8e586ac07f83bb2950717e66cb305e2859baf6f00a9c39cc576e0ce9629c", "sha256:ee175a571e692fc8ae8e41ac353c0e07259113f4cb063b0ec769eff9717e84bb" ], "markers": "python_version >= '3.7'", "version": "==3.5.2" }, "matplotlib-inline": { "hashes": [ "sha256:a04bfba22e0d1395479f866853ec1ee28eea1485c1d69a6faf00dc3e24ff34ee", "sha256:aed605ba3b72462d64d475a21a9296f400a19c4f74a31b59103d2a99ffd5aa5c" ], "markers": "python_version >= '3.5'", "version": "==0.1.3" }, "networkx": { "hashes": [ "sha256:5e53f027c0d567cf1f884dbb283224df525644e43afd1145d64c9d88a3584762", "sha256:6933b9b3174a0bdf03c911bb4a1ee43a86ce3edeb813e37e1d4c553b3f4a2c4f" ], "markers": "python_version >= '3.8'", "version": "==2.8.4" }, "numpy": { "hashes": [ "sha256:092f5e6025813e64ad6d1b52b519165d08c730d099c114a9247c9bb635a2a450", "sha256:196cd074c3f97c4121601790955f915187736f9cf458d3ee1f1b46aff2b1ade0", "sha256:1c29b44905af288b3919803aceb6ec7fec77406d8b08aaa2e8b9e63d0fe2f160", "sha256:2b2da66582f3a69c8ce25ed7921dcd8010d05e59ac8d89d126a299be60421171", "sha256:5043bcd71fcc458dfb8a0fc5509bbc979da0131b9d08e3d5f50fb0bbb36f169a", "sha256:58bfd40eb478f54ff7a5710dd61c8097e169bc36cc68333d00a9bcd8def53b38", "sha256:79a506cacf2be3a74ead5467aee97b81fca00c9c4c8b3ba16dbab488cd99ba10", "sha256:94b170b4fa0168cd6be4becf37cb5b127bd12a795123984385b8cd4aca9857e5", "sha256:97a76604d9b0e79f59baeca16593c711fddb44936e40310f78bfef79ee9a835f", "sha256:98e8e0d8d69ff4d3fa63e6c61e8cfe2d03c29b16b58dbef1f9baa175bbed7860", "sha256:ac86f407873b952679f5f9e6c0612687e51547af0e14ddea1eedfcb22466babd", "sha256:ae8adff4172692ce56233db04b7ce5792186f179c415c37d539c25de7298d25d", "sha256:bd3fa4fe2e38533d5336e1272fc4e765cabbbde144309ccee8675509d5cd7b05", "sha256:d0d2094e8f4d760500394d77b383a1b06d3663e8892cdf5df3c592f55f3bff66", "sha256:d54b3b828d618a19779a84c3ad952e96e2c2311b16384e973e671aa5be1f6187", "sha256:d6ca8dabe696c2785d0c8c9b0d8a9b6e5fdbe4f922bde70d57fa1a2848134f95", "sha256:d8cc87bed09de55477dba9da370c1679bd534df9baa171dd01accbb09687dac3", "sha256:f0f18804df7370571fb65db9b98bf1378172bd4e962482b857e612d1fec0f53e", "sha256:f1d88ef79e0a7fa631bb2c3dda1ea46b32b1fe614e10fedd611d3d5398447f2f", "sha256:f9c3fc2adf67762c9fe1849c859942d23f8d3e0bee7b5ed3d4a9c3eeb50a2f07", "sha256:fc431493df245f3c627c0c05c2bd134535e7929dbe2e602b80e42bf52ff760bc", "sha256:fe8b9683eb26d2c4d5db32cd29b38fdcf8381324ab48313b5b69088e0e355379" ], "markers": "python_version >= '3.8'", "version": "==1.23.0" }, "packaging": { "hashes": [ "sha256:dd47c42927d89ab911e606518907cc2d3a1f38bbd026385970643f9c5b8ecfeb", "sha256:ef103e05f519cdc783ae24ea4e2e0f508a9c99b2d4969652eed6a2e1ea5bd522" ], "markers": "python_version >= '3.6'", "version": "==21.3" }, "pandas": { "hashes": [ "sha256:08eeff3da6a188e24db7f292b39a8ca9e073bf841fbbeadb946b3ad5c19d843e", "sha256:1ff13eed501e07e7fb26a4ea18a846b6e5d7de549b497025601fd9ccb7c1d123", "sha256:522bfea92f3ef6207cadc7428bda1e7605dae0383b8065030e7b5d0266717b48", "sha256:7897326cae660eee69d501cbfa950281a193fcf407393965e1bc07448e1cc35a", "sha256:798675317d0e4863a92a9a6bc5bd2490b5f6fef8c17b95f29e2e33f28bef9eca", "sha256:7d3cd2c99faa94d717ca00ea489264a291ad7209453dffbf059bfb7971fd3a61", "sha256:823737830364d0e2af8c3912a28ba971296181a07950873492ed94e12d28c405", "sha256:872aa91e0f9ca913046ab639d4181a899f5e592030d954d28c2529b88756a736", "sha256:88864c1e28353b958b1f30e4193818519624ad9a1776921622a6a2a016d5d807", "sha256:92835113a67cbd34747c198d41f09f4b63f6fe11ca5643baebc7ab1e30e89e95", "sha256:98efc2d4983d5bb47662fe2d97b2c81b91566cb08b266490918b9c7d74a5ef64", "sha256:b10d7910ae9d7920a5ff7816d794d99acbc361f7b16a0f017d4fa83ced8cb55e", "sha256:c554e6c9cf2d5ea1aba5979cc837b3649539ced0e18ece186f055450c86622e2", "sha256:c746876cdd8380be0c3e70966d4566855901ac9aaa5e4b9ccaa5ca5311457d11", "sha256:c81b8d91e9ae861eb4406b4e0f8d4dabbc105b9c479b3d1e921fba1d35b5b62a", "sha256:e6b75091fa54a53db3927b4d1bc997c23c5ba6f87acdfe1ee5a92c38c6b2ed6a", "sha256:ed4fc66f23fe17c93a5d439230ca2d6b5f8eac7154198d327dbe8a16d98f3f10", "sha256:f058c786e7b0a9e7fa5e0b9f4422e0ccdd3bf3aa3053c18d77ed2a459bd9a45a", "sha256:fe7a549d10ca534797095586883a5c17d140d606747591258869c56e14d1b457" ], "index": "pypi", "version": "==1.3.0" }, "parso": { "hashes": [ "sha256:8c07be290bb59f03588915921e29e8a50002acaf2cdc5fa0e0114f91709fafa0", "sha256:c001d4636cd3aecdaf33cbb40aebb59b094be2a74c556778ef5576c175e19e75" ], "markers": "python_version >= '3.6'", "version": "==0.8.3" }, "pexpect": { "hashes": [ "sha256:0b48a55dcb3c05f3329815901ea4fc1537514d6ba867a152b581d69ae3710937", "sha256:fc65a43959d153d0114afe13997d439c22823a27cefceb5ff35c2178c6784c0c" ], "markers": "sys_platform != 'win32'", "version": "==4.8.0" }, "pickleshare": { "hashes": [ "sha256:87683d47965c1da65cdacaf31c8441d12b8044cdec9aca500cd78fc2c683afca", "sha256:9649af414d74d4df115d5d718f82acb59c9d418196b7b4290ed47a12ce62df56" ], "version": "==0.7.5" }, "pillow": { "hashes": [ "sha256:0030fdbd926fb85844b8b92e2f9449ba89607231d3dd597a21ae72dc7fe26927", "sha256:030e3460861488e249731c3e7ab59b07c7853838ff3b8e16aac9561bb345da14", "sha256:0ed2c4ef2451de908c90436d6e8092e13a43992f1860275b4d8082667fbb2ffc", "sha256:136659638f61a251e8ed3b331fc6ccd124590eeff539de57c5f80ef3a9594e58", "sha256:13b725463f32df1bfeacbf3dd197fb358ae8ebcd8c5548faa75126ea425ccb60", "sha256:1536ad017a9f789430fb6b8be8bf99d2f214c76502becc196c6f2d9a75b01b76", "sha256:15928f824870535c85dbf949c09d6ae7d3d6ac2d6efec80f3227f73eefba741c", "sha256:17d4cafe22f050b46d983b71c707162d63d796a1235cdf8b9d7a112e97b15bac", "sha256:1802f34298f5ba11d55e5bb09c31997dc0c6aed919658dfdf0198a2fe75d5490", "sha256:1cc1d2451e8a3b4bfdb9caf745b58e6c7a77d2e469159b0d527a4554d73694d1", "sha256:1fd6f5e3c0e4697fa7eb45b6e93996299f3feee73a3175fa451f49a74d092b9f", "sha256:254164c57bab4b459f14c64e93df11eff5ded575192c294a0c49270f22c5d93d", "sha256:2ad0d4df0f5ef2247e27fc790d5c9b5a0af8ade9ba340db4a73bb1a4a3e5fb4f", "sha256:2c58b24e3a63efd22554c676d81b0e57f80e0a7d3a5874a7e14ce90ec40d3069", "sha256:2d33a11f601213dcd5718109c09a52c2a1c893e7461f0be2d6febc2879ec2402", "sha256:337a74fd2f291c607d220c793a8135273c4c2ab001b03e601c36766005f36885", "sha256:37ff6b522a26d0538b753f0b4e8e164fdada12db6c6f00f62145d732d8a3152e", "sha256:3d1f14f5f691f55e1b47f824ca4fdcb4b19b4323fe43cc7bb105988cad7496be", "sha256:408673ed75594933714482501fe97e055a42996087eeca7e5d06e33218d05aa8", "sha256:4134d3f1ba5f15027ff5c04296f13328fecd46921424084516bdb1b2548e66ff", "sha256:4ad2f835e0ad81d1689f1b7e3fbac7b01bb8777d5a985c8962bedee0cc6d43da", "sha256:50dff9cc21826d2977ef2d2a205504034e3a4563ca6f5db739b0d1026658e004", "sha256:510cef4a3f401c246cfd8227b300828715dd055463cdca6176c2e4036df8bd4f", "sha256:5aed7dde98403cd91d86a1115c78d8145c83078e864c1de1064f52e6feb61b20", "sha256:69bd1a15d7ba3694631e00df8de65a8cb031911ca11f44929c97fe05eb9b6c1d", "sha256:6bf088c1ce160f50ea40764f825ec9b72ed9da25346216b91361eef8ad1b8f8c", "sha256:6e8c66f70fb539301e064f6478d7453e820d8a2c631da948a23384865cd95544", "sha256:727dd1389bc5cb9827cbd1f9d40d2c2a1a0c9b32dd2261db522d22a604a6eec9", "sha256:74a04183e6e64930b667d321524e3c5361094bb4af9083db5c301db64cd341f3", "sha256:75e636fd3e0fb872693f23ccb8a5ff2cd578801251f3a4f6854c6a5d437d3c04", "sha256:7761afe0126d046974a01e030ae7529ed0ca6a196de3ec6937c11df0df1bc91c", "sha256:7888310f6214f19ab2b6df90f3f06afa3df7ef7355fc025e78a3044737fab1f5", "sha256:7b0554af24df2bf96618dac71ddada02420f946be943b181108cac55a7a2dcd4", "sha256:7c7b502bc34f6e32ba022b4a209638f9e097d7a9098104ae420eb8186217ebbb", "sha256:808add66ea764ed97d44dda1ac4f2cfec4c1867d9efb16a33d158be79f32b8a4", "sha256:831e648102c82f152e14c1a0938689dbb22480c548c8d4b8b248b3e50967b88c", "sha256:93689632949aff41199090eff5474f3990b6823404e45d66a5d44304e9cdc467", "sha256:96b5e6874431df16aee0c1ba237574cb6dff1dcb173798faa6a9d8b399a05d0e", "sha256:9a54614049a18a2d6fe156e68e188da02a046a4a93cf24f373bffd977e943421", "sha256:a138441e95562b3c078746a22f8fca8ff1c22c014f856278bdbdd89ca36cff1b", "sha256:a647c0d4478b995c5e54615a2e5360ccedd2f85e70ab57fbe817ca613d5e63b8", "sha256:a9c9bc489f8ab30906d7a85afac4b4944a572a7432e00698a7239f44a44e6efb", "sha256:ad2277b185ebce47a63f4dc6302e30f05762b688f8dc3de55dbae4651872cdf3", "sha256:b6d5e92df2b77665e07ddb2e4dbd6d644b78e4c0d2e9272a852627cdba0d75cf", "sha256:bc431b065722a5ad1dfb4df354fb9333b7a582a5ee39a90e6ffff688d72f27a1", "sha256:bdd0de2d64688ecae88dd8935012c4a72681e5df632af903a1dca8c5e7aa871a", "sha256:c79698d4cd9318d9481d89a77e2d3fcaeff5486be641e60a4b49f3d2ecca4e28", "sha256:cb6259196a589123d755380b65127ddc60f4c64b21fc3bb46ce3a6ea663659b0", "sha256:d5b87da55a08acb586bad5c3aa3b86505f559b84f39035b233d5bf844b0834b1", "sha256:dcd7b9c7139dc8258d164b55696ecd16c04607f1cc33ba7af86613881ffe4ac8", "sha256:dfe4c1fedfde4e2fbc009d5ad420647f7730d719786388b7de0999bf32c0d9fd", "sha256:ea98f633d45f7e815db648fd7ff0f19e328302ac36427343e4432c84432e7ff4", "sha256:ec52c351b35ca269cb1f8069d610fc45c5bd38c3e91f9ab4cbbf0aebc136d9c8", "sha256:eef7592281f7c174d3d6cbfbb7ee5984a671fcd77e3fc78e973d492e9bf0eb3f", "sha256:f07f1f00e22b231dd3d9b9208692042e29792d6bd4f6639415d2f23158a80013", "sha256:f3fac744f9b540148fa7715a435d2283b71f68bfb6d4aae24482a890aed18b59", "sha256:fa768eff5f9f958270b081bb33581b4b569faabf8774726b283edb06617101dc", "sha256:fac2d65901fb0fdf20363fbd345c01958a742f2dc62a8dd4495af66e3ff502a4" ], "markers": "python_version >= '3.7'", "version": "==9.2.0" }, "plotly": { "hashes": [ "sha256:71f6744acdc524c22236c226d7cf1072d1a58ebacaf749c640998298472c8c44", "sha256:d60412ee21d85102f67e5c7134d59feb5e42a5cbbfb1e580ad67cbdf7589d80c" ], "index": "pypi", "version": "==5.1.0" }, "prettytable": { "hashes": [ "sha256:5882ed9092b391bb8f6e91f59bcdbd748924ff556bb7c634089d5519be87baa0", "sha256:bb5abc72bdfae6f3cdadb04fb7726f6915af0ddb7c897a41d4ad7736d9bfd8fd" ], "index": "pypi", "version": "==2.1.0" }, "prompt-toolkit": { "hashes": [ "sha256:08360ee3a3148bdb5163621709ee322ec34fc4375099afa4bbf751e9b7b7fa4f", "sha256:7089d8d2938043508aa9420ec18ce0922885304cddae87fb96eebca942299f88" ], "index": "pypi", "version": "==3.0.19" }, "ptyprocess": { "hashes": [ "sha256:4b41f3967fce3af57cc7e94b888626c18bf37a083e3651ca8feeb66d492fef35", "sha256:5c5d0a3b48ceee0b48485e0c26037c0acd7d29765ca3fbb5cb3831d347423220" ], "version": "==0.7.0" }, "pure-eval": { "hashes": [ "sha256:01eaab343580944bc56080ebe0a674b39ec44a945e6d09ba7db3cb8cec289350", "sha256:2b45320af6dfaa1750f543d714b6d1c520a1688dec6fd24d339063ce0aaa9ac3" ], "version": "==0.2.2" }, "pydot": { "hashes": [ "sha256:248081a39bcb56784deb018977e428605c1c758f10897a339fce1dd728ff007d", "sha256:66c98190c65b8d2e2382a441b4c0edfdb4f4c025ef9cb9874de478fb0793a451" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'", "version": "==1.4.2" }, "pygments": { "hashes": [ "sha256:5eb116118f9612ff1ee89ac96437bb6b49e8f04d8a13b514ba26f620208e26eb", "sha256:dc9c10fb40944260f6ed4c688ece0cd2048414940f1cea51b8b226318411c519" ], "markers": "python_version >= '3.6'", "version": "==2.12.0" }, "pyparsing": { "hashes": [ "sha256:2b020ecf7d21b687f219b71ecad3631f644a47f01403fa1d1036b0c6416d70fb", "sha256:5026bae9a10eeaefb61dab2f09052b9f4307d44aee4eda64b309723d8d206bbc" ], "markers": "python_full_version >= '3.6.8'", "version": "==3.0.9" }, "python-dateutil": { "hashes": [ "sha256:0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86", "sha256:961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'", "version": "==2.8.2" }, "pytz": { "hashes": [ "sha256:1e760e2fe6a8163bc0b3d9a19c4f84342afa0a2affebfaa84b01b978a02ecaa7", "sha256:e68985985296d9a66a881eb3193b0906246245294a881e7c8afe623866ac6a5c" ], "version": "==2022.1" }, "quark-engine": { "editable": true, "path": "." }, "requests": { "hashes": [ "sha256:6c1246513ecd5ecd4528a0906f910e8f0f9c6b8ec72030dc9fd154dc1a6efd24", "sha256:b8aa58f8cf793ffd8782d3d8cb19e66ef36f7aba4353eec859e74678b01b07a7" ], "index": "pypi", "version": "==2.26.0" }, "rzpipe": { "hashes": [ "sha256:065bf7ed8040ce5d57ac02aab8ec62a7a9972af3f70787543562d8cba558c890", "sha256:571f4cd6001bc06cd4788e44184d7391d6c76f11697a5d21323bdfc479cc5ef0", "sha256:bdf2c970c3ff15a016a9ef30b353191fc7d8ef373fc7482afd8fe8d04d2a7cf8" ], "index": "pypi", "version": "==0.1.0" }, "sanitized-package": { "editable": true, "path": "." }, "setuptools": { "hashes": [ "sha256:16923d366ced322712c71ccb97164d07472abeecd13f3a6c283f6d5d26722793", "sha256:db3b8e2f922b2a910a29804776c643ea609badb6a32c4bcc226fd4fd902cce65" ], "markers": "python_version >= '3.7'", "version": "==63.1.0" }, "six": { "hashes": [ "sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926", "sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'", "version": "==1.16.0" }, "stack-data": { "hashes": [ "sha256:77bec1402dcd0987e9022326473fdbcc767304892a533ed8c29888dacb7dddbc", "sha256:aa1d52d14d09c7a9a12bb740e6bdfffe0f5e8f4f9218d85e7c73a8c37f7ae38d" ], "version": "==0.3.0" }, "tenacity": { "hashes": [ "sha256:43242a20e3e73291a28bcbcacfd6e000b02d3857a9a9fff56b297a27afdc932f", "sha256:f78f4ea81b0fabc06728c11dc2a8c01277bfc5181b321a4770471902e3eb844a" ], "markers": "python_version >= '3.6'", "version": "==8.0.1" }, "tqdm": { "hashes": [ "sha256:5aa445ea0ad8b16d82b15ab342de6b195a722d75fc1ef9934a46bba6feafbc64", "sha256:8bb94db0d4468fea27d004a0f1d1c02da3cdedc00fe491c0de986b76a04d6b0a" ], "index": "pypi", "version": "==4.61.2" }, "traitlets": { "hashes": [ "sha256:0bb9f1f9f017aa8ec187d8b1b2a7a6626a2a1d877116baba52a129bfa124f8e2", "sha256:65fa18961659635933100db8ca120ef6220555286949774b9cfc106f941d1c7a" ], "markers": "python_version >= '3.7'", "version": "==5.3.0" }, "urllib3": { "hashes": [ "sha256:44ece4d53fb1706f667c9bd1c648f5469a2ec925fcf3a776667042d645472c14", "sha256:aabaf16477806a5e1dd19aa41f8c2b7950dd3c746362d7e3223dbe6de6ac448e" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4' and python_version < '4'", "version": "==1.26.9" }, "wcwidth": { "hashes": [ "sha256:beb4802a9cebb9144e99086eff703a642a13d6a0052920003a230f3294bbe784", "sha256:c4d647b99872929fdb7bdcaa4fbe7f01413ed3d98077df798530e5b04f116c83" ], "version": "==0.2.5" } }, "develop": { "alabaster": { "hashes": [ "sha256:446438bdcca0e05bd45ea2de1668c1d9b032e1a9154c2c259092d77031ddd359", "sha256:a661d72d58e6ea8a57f7a86e37d86716863ee5e92788398526d58b26a4e4dc02" ], "version": "==0.7.12" }, "attrs": { "hashes": [ "sha256:2d27e3784d7a565d36ab851fe94887c5eccd6a463168875832a1be79c82828b4", "sha256:626ba8234211db98e869df76230a137c4c40a12d72445c45d5f5b716f076e2fd" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'", "version": "==21.4.0" }, "babel": { "hashes": [ "sha256:7614553711ee97490f732126dc077f8d0ae084ebc6a96e23db1482afabdb2c51", "sha256:ff56f4892c1c4bf0d814575ea23471c230d544203c7748e8c68f0089478d48eb" ], "markers": "python_version >= '3.6'", "version": "==2.10.3" }, "black": { "hashes": [ "sha256:77b80f693a569e2e527958459634f18df9b0ba2625ba4e0c2d5da5be42e6f2b3", "sha256:a615e69ae185e08fdd73e4715e260e2479c861b5740057fde6e8b4e3b7dd589f" ], "index": "pypi", "version": "==21.12b0" }, "certifi": { "hashes": [ "sha256:84c85a9078b11105f04f3036a9482ae10e4621616db313fe045dd24743a0820d", "sha256:fe86415d55e84719d75f8b69414f6438ac3547d2078ab91b67e779ef69378412" ], "markers": "python_version >= '3.6'", "version": "==2022.6.15" }, "charset-normalizer": { "hashes": [ "sha256:2857e29ff0d34db842cd7ca3230549d1a697f96ee6d3fb071cfa6c7393832597", "sha256:6881edbebdb17b39b4eaaa821b438bf6eddffb4468cf344f09f89def34a8b1df" ], "markers": "python_version >= '3'", "version": "==2.0.12" }, "click": { "hashes": [ "sha256:8c04c11192119b1ef78ea049e0a6f0463e4c48ef00a30160c704337586f3ad7a", "sha256:fba402a4a47334742d782209a7c79bc448911afe1149d07bdabdf480b3e2f4b6" ], "index": "pypi", "version": "==8.0.1" }, "docutils": { "hashes": [ "sha256:0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af", "sha256:c2de3a60e9e7d07be26b7f2b00ca0309c207e06c100f9cc2a94931fc75a478fc" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'", "version": "==0.16" }, "idna": { "hashes": [ "sha256:84d9dd047ffa80596e0f246e2eab0b391788b0503584e8945f2368256d2735ff", "sha256:9d643ff0a55b762d5cdb124b8eaa99c66322e2157b69160bc32796e824360e6d" ], "markers": "python_version >= '3'", "version": "==3.3" }, "imagesize": { "hashes": [ "sha256:0d8d18d08f840c19d0ee7ca1fd82490fdc3729b7ac93f49870406ddde8ef8d8b", "sha256:69150444affb9cb0d5cc5a92b3676f0b2fb7cd9ae39e947a5e11a36b4497cd4a" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'", "version": "==1.4.1" }, "iniconfig": { "hashes": [ "sha256:011e24c64b7f47f6ebd835bb12a743f2fbe9a26d4cecaa7f53bc4f35ee9da8b3", "sha256:bc3af051d7d14b2ee5ef9969666def0cd1a000e121eaea580d4a313df4b37f32" ], "version": "==1.1.1" }, "jinja2": { "hashes": [ "sha256:31351a702a408a9e7595a8fc6150fc3f43bb6bf7e319770cbc0db9df9437e852", "sha256:6088930bfe239f0e6710546ab9c19c9ef35e29792895fed6e6e31a023a182a61" ], "markers": "python_version >= '3.7'", "version": "==3.1.2" }, "markupsafe": { "hashes": [ "sha256:0212a68688482dc52b2d45013df70d169f542b7394fc744c02a57374a4207003", "sha256:089cf3dbf0cd6c100f02945abeb18484bd1ee57a079aefd52cffd17fba910b88", "sha256:10c1bfff05d95783da83491be968e8fe789263689c02724e0c691933c52994f5", "sha256:33b74d289bd2f5e527beadcaa3f401e0df0a89927c1559c8566c066fa4248ab7", "sha256:3799351e2336dc91ea70b034983ee71cf2f9533cdff7c14c90ea126bfd95d65a", "sha256:3ce11ee3f23f79dbd06fb3d63e2f6af7b12db1d46932fe7bd8afa259a5996603", "sha256:421be9fbf0ffe9ffd7a378aafebbf6f4602d564d34be190fc19a193232fd12b1", "sha256:43093fb83d8343aac0b1baa75516da6092f58f41200907ef92448ecab8825135", "sha256:46d00d6cfecdde84d40e572d63735ef81423ad31184100411e6e3388d405e247", "sha256:4a33dea2b688b3190ee12bd7cfa29d39c9ed176bda40bfa11099a3ce5d3a7ac6", "sha256:4b9fe39a2ccc108a4accc2676e77da025ce383c108593d65cc909add5c3bd601", "sha256:56442863ed2b06d19c37f94d999035e15ee982988920e12a5b4ba29b62ad1f77", "sha256:671cd1187ed5e62818414afe79ed29da836dde67166a9fac6d435873c44fdd02", "sha256:694deca8d702d5db21ec83983ce0bb4b26a578e71fbdbd4fdcd387daa90e4d5e", "sha256:6a074d34ee7a5ce3effbc526b7083ec9731bb3cbf921bbe1d3005d4d2bdb3a63", "sha256:6d0072fea50feec76a4c418096652f2c3238eaa014b2f94aeb1d56a66b41403f", "sha256:6fbf47b5d3728c6aea2abb0589b5d30459e369baa772e0f37a0320185e87c980", "sha256:7f91197cc9e48f989d12e4e6fbc46495c446636dfc81b9ccf50bb0ec74b91d4b", "sha256:86b1f75c4e7c2ac2ccdaec2b9022845dbb81880ca318bb7a0a01fbf7813e3812", "sha256:8dc1c72a69aa7e082593c4a203dcf94ddb74bb5c8a731e4e1eb68d031e8498ff", "sha256:8e3dcf21f367459434c18e71b2a9532d96547aef8a871872a5bd69a715c15f96", "sha256:8e576a51ad59e4bfaac456023a78f6b5e6e7651dcd383bcc3e18d06f9b55d6d1", "sha256:96e37a3dc86e80bf81758c152fe66dbf60ed5eca3d26305edf01892257049925", "sha256:97a68e6ada378df82bc9f16b800ab77cbf4b2fada0081794318520138c088e4a", "sha256:99a2a507ed3ac881b975a2976d59f38c19386d128e7a9a18b7df6fff1fd4c1d6", "sha256:a49907dd8420c5685cfa064a1335b6754b74541bbb3706c259c02ed65b644b3e", "sha256:b09bf97215625a311f669476f44b8b318b075847b49316d3e28c08e41a7a573f", "sha256:b7bd98b796e2b6553da7225aeb61f447f80a1ca64f41d83612e6139ca5213aa4", "sha256:b87db4360013327109564f0e591bd2a3b318547bcef31b468a92ee504d07ae4f", "sha256:bcb3ed405ed3222f9904899563d6fc492ff75cce56cba05e32eff40e6acbeaa3", "sha256:d4306c36ca495956b6d568d276ac11fdd9c30a36f1b6eb928070dc5360b22e1c", "sha256:d5ee4f386140395a2c818d149221149c54849dfcfcb9f1debfe07a8b8bd63f9a", "sha256:dda30ba7e87fbbb7eab1ec9f58678558fd9a6b8b853530e176eabd064da81417", "sha256:e04e26803c9c3851c931eac40c695602c6295b8d432cbe78609649ad9bd2da8a", "sha256:e1c0b87e09fa55a220f058d1d49d3fb8df88fbfab58558f1198e08c1e1de842a", "sha256:e72591e9ecd94d7feb70c1cbd7be7b3ebea3f548870aa91e2732960fa4d57a37", "sha256:e8c843bbcda3a2f1e3c2ab25913c80a3c5376cd00c6e8c4a86a89a28c8dc5452", "sha256:efc1913fd2ca4f334418481c7e595c00aad186563bbc1ec76067848c7ca0a933", "sha256:f121a1420d4e173a5d96e47e9a0c0dcff965afdf1626d28de1460815f7c4ee7a", "sha256:fc7b548b17d238737688817ab67deebb30e8073c95749d55538ed473130ec0c7" ], "markers": "python_version >= '3.7'", "version": "==2.1.1" }, "mypy-extensions": { "hashes": [ "sha256:090fedd75945a69ae91ce1303b5824f428daf5a028d2f6ab8a299250a846f15d", "sha256:2d82818f5bb3e369420cb3c4060a7970edba416647068eb4c5343488a6c604a8" ], "version": "==0.4.3" }, "packaging": { "hashes": [ "sha256:dd47c42927d89ab911e606518907cc2d3a1f38bbd026385970643f9c5b8ecfeb", "sha256:ef103e05f519cdc783ae24ea4e2e0f508a9c99b2d4969652eed6a2e1ea5bd522" ], "markers": "python_version >= '3.6'", "version": "==21.3" }, "pathspec": { "hashes": [ "sha256:7d15c4ddb0b5c802d161efc417ec1a2558ea2653c2e8ad9c19098201dc1c993a", "sha256:e564499435a2673d586f6b2130bb5b95f04a3ba06f81b8f895b651a3c76aabb1" ], "version": "==0.9.0" }, "platformdirs": { "hashes": [ "sha256:027d8e83a2d7de06bbac4e5ef7e023c02b863d7ea5d079477e722bb41ab25788", "sha256:58c8abb07dcb441e6ee4b11d8df0ac856038f944ab98b7be6b27b2a3c7feef19" ], "markers": "python_version >= '3.7'", "version": "==2.5.2" }, "pluggy": { "hashes": [ "sha256:265a94bf44ca13662f12fcd1b074c14d4b269a712f051b6f644ef7e705d6735f", "sha256:467f0219e89bb5061a8429c6fc5cf055fa3983a0e68e84a1d205046306b37d9e" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'", "version": "==1.0.0.dev0" }, "py": { "hashes": [ "sha256:51c75c4126074b472f746a24399ad32f6053d1b34b68d2fa41e558e6f4a98719", "sha256:607c53218732647dff4acdfcd50cb62615cedf612e72d1724fb1a0cc6405b378" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'", "version": "==1.11.0" }, "pygments": { "hashes": [ "sha256:5eb116118f9612ff1ee89ac96437bb6b49e8f04d8a13b514ba26f620208e26eb", "sha256:dc9c10fb40944260f6ed4c688ece0cd2048414940f1cea51b8b226318411c519" ], "markers": "python_version >= '3.6'", "version": "==2.12.0" }, "pyparsing": { "hashes": [ "sha256:2b020ecf7d21b687f219b71ecad3631f644a47f01403fa1d1036b0c6416d70fb", "sha256:5026bae9a10eeaefb61dab2f09052b9f4307d44aee4eda64b309723d8d206bbc" ], "markers": "python_full_version >= '3.6.8'", "version": "==3.0.9" }, "pytest": { "hashes": [ "sha256:50bcad0a0b9c5a72c8e4e7c9855a3ad496ca6a881a3641b4260605450772c54b", "sha256:91ef2131a9bd6be8f76f1f08eac5c5317221d6ad1e143ae03894b862e8976890" ], "index": "pypi", "version": "==6.2.4" }, "pytz": { "hashes": [ "sha256:1e760e2fe6a8163bc0b3d9a19c4f84342afa0a2affebfaa84b01b978a02ecaa7", "sha256:e68985985296d9a66a881eb3193b0906246245294a881e7c8afe623866ac6a5c" ], "version": "==2022.1" }, "requests": { "hashes": [ "sha256:6c1246513ecd5ecd4528a0906f910e8f0f9c6b8ec72030dc9fd154dc1a6efd24", "sha256:b8aa58f8cf793ffd8782d3d8cb19e66ef36f7aba4353eec859e74678b01b07a7" ], "index": "pypi", "version": "==2.26.0" }, "setuptools": { "hashes": [ "sha256:16923d366ced322712c71ccb97164d07472abeecd13f3a6c283f6d5d26722793", "sha256:db3b8e2f922b2a910a29804776c643ea609badb6a32c4bcc226fd4fd902cce65" ], "markers": "python_version >= '3.7'", "version": "==63.1.0" }, "snowballstemmer": { "hashes": [ "sha256:09b16deb8547d3412ad7b590689584cd0fe25ec8db3be37788be3810cbf19cb1", "sha256:c8e1716e83cc398ae16824e5572ae04e0d9fc2c6b985fb0f900f5f0c96ecba1a" ], "version": "==2.2.0" }, "sphinx": { "hashes": [ "sha256:23c846a1841af998cb736218539bb86d16f5eb95f5760b1966abcd2d584e62b8", "sha256:3d513088236eef51e5b0adb78b0492eb22cc3b8ccdb0b36dd021173b365d4454" ], "index": "pypi", "version": "==4.1.1" }, "sphinx-rtd-theme": { "hashes": [ "sha256:32bd3b5d13dc8186d7a42fc816a23d32e83a4827d7d9882948e7b837c232da5a", "sha256:4a05bdbe8b1446d77a01e20a23ebc6777c74f43237035e76be89699308987d6f" ], "index": "pypi", "version": "==0.5.2" }, "sphinxcontrib-applehelp": { "hashes": [ "sha256:806111e5e962be97c29ec4c1e7fe277bfd19e9652fb1a4392105b43e01af885a", "sha256:a072735ec80e7675e3f432fcae8610ecf509c5f1869d17e2eecff44389cdbc58" ], "markers": "python_version >= '3.5'", "version": "==1.0.2" }, "sphinxcontrib-devhelp": { "hashes": [ "sha256:8165223f9a335cc1af7ffe1ed31d2871f325254c0423bc0c4c7cd1c1e4734a2e", "sha256:ff7f1afa7b9642e7060379360a67e9c41e8f3121f2ce9164266f61b9f4b338e4" ], "markers": "python_version >= '3.5'", "version": "==1.0.2" }, "sphinxcontrib-htmlhelp": { "hashes": [ "sha256:d412243dfb797ae3ec2b59eca0e52dac12e75a241bf0e4eb861e450d06c6ed07", "sha256:f5f8bb2d0d629f398bf47d0d69c07bc13b65f75a81ad9e2f71a63d4b7a2f6db2" ], "markers": "python_version >= '3.6'", "version": "==2.0.0" }, "sphinxcontrib-jsmath": { "hashes": [ "sha256:2ec2eaebfb78f3f2078e73666b1415417a116cc848b72e5172e596c871103178", "sha256:a9925e4a4587247ed2191a22df5f6970656cb8ca2bd6284309578f2153e0c4b8" ], "markers": "python_version >= '3.5'", "version": "==1.0.1" }, "sphinxcontrib-qthelp": { "hashes": [ "sha256:4c33767ee058b70dba89a6fc5c1892c0d57a54be67ddd3e7875a18d14cba5a72", "sha256:bd9fc24bcb748a8d51fd4ecaade681350aa63009a347a8c14e637895444dfab6" ], "markers": "python_version >= '3.5'", "version": "==1.0.3" }, "sphinxcontrib-serializinghtml": { "hashes": [ "sha256:352a9a00ae864471d3a7ead8d7d79f5fc0b57e8b3f95e9867eb9eb28999b92fd", "sha256:aa5f6de5dfdf809ef505c4895e51ef5c9eac17d0f287933eb49ec495280b6952" ], "markers": "python_version >= '3.5'", "version": "==1.1.5" }, "toml": { "hashes": [ "sha256:806143ae5bfb6a3c6e736a764057db0e6a0e05e338b5630894a5f779cabb4f9b", "sha256:b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f" ], "markers": "python_version >= '2.6' and python_version not in '3.0, 3.1, 3.2, 3.3'", "version": "==0.10.2" }, "tomli": { "hashes": [ "sha256:05b6166bff487dc068d322585c7ea4ef78deed501cc124060e0f238e89a9231f", "sha256:e3069e4be3ead9668e21cb9b074cd948f7b3113fd9c8bba083f48247aab8b11c" ], "markers": "python_version >= '3.6'", "version": "==1.2.3" }, "typing-extensions": { "hashes": [ "sha256:25642c956049920a5aa49edcdd6ab1e06d7e5d467fc00e0506c44ac86fbfca02", "sha256:e6d2677a32f47fc7eb2795db1dd15c1f34eff616bcaf2cfb5e997f854fa1c4a6" ], "markers": "python_version >= '3.7'", "version": "==4.3.0" }, "urllib3": { "hashes": [ "sha256:44ece4d53fb1706f667c9bd1c648f5469a2ec925fcf3a776667042d645472c14", "sha256:aabaf16477806a5e1dd19aa41f8c2b7950dd3c746362d7e3223dbe6de6ac448e" ], "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4' and python_version < '4'", "version": "==1.26.9" } } } quark-engine-23.4.1/README.md000066400000000000000000000207041442215066700154600ustar00rootroot00000000000000

Black Hat Arsenal HITB rootcon defcon
build status codecov license python version PyPi Download
Twitter

# Quark Script - Dig Vulnerabilities in the BlackBox ### Innovative & Interactive * The goal of Quark Script aims to provide an innovative way for mobile security researchers to analyze or **pentest** the targets. * Based on Quark, we integrate decent tools as Quark Script APIs and make them exchange valuable intelligence to each other. This enables security researchers to **interact** with staged results and perform **creative** analysis with Quark Script. ### Dynamic & Static Analysis * In Quark script, we integrate not only static analysis tools (e.g. Quark itself) but also dynamic analysis tools (e.g. [objection](https://github.com/sensepost/objection)). ### Re-Usable & Sharable * Once the user creates a Quark script for specific analysis scenario. The script can be used in another targets. Also, the script can be shared to other security researchers. This enables the exchange of knowledges. ### More APIs to come * Quark Script is now in a beta version. We'll keep releasing practical APIs and analysis scenarios. * **See API document [here](https://quark-engine.readthedocs.io/en/latest/quark_script.html#introduce-of-quark-script-apis).** # CWE Showcases * [CWE-020](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-20-in-android-application-diva-apk) Improper Input Validation * [CWE-022](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-22-in-android-application-ovaa-apk-and-insecurebankv2-apk) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') * [CWE-023](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-23-in-android-application-ovaa-apk-and-insecurebankv2-apk) Relative Path Traversal * [CWE-089](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-89-in-android-application-androgoat-apk) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') * [CWE-094](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-94-in-android-application-ovaa-apk) Improper Control of Generation of Code ('Code Injection') * [CWE-295](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-295-in-android-application-insecureshop-apk) Improper Certificate Validation * [CWE-312](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-312-in-android-application-ovaa-apk) Cleartext Storage of Sensitive Information * [CWE-319](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-319-in-android-application-ovaa-apk) Cleartext Transmission of Sensitive Information * [CWE-327](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-327-in-android-application-injuredandroid-apk) Use of a Broken or Risky Cryptographic Algorithm * [CWE-328](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-328-in-android-application-allsafe-apk) Use of Weak Hash * [CWE-338](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-338-in-android-application-pivva-apk) Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) * [CWE-489](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-489-in-android-application-allsafe-apk-androgoat-apk-pivaa-apk) Active Debug Code * [CWE-532](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-532-in-android-application-dvba-apk) Insertion of Sensitive Information into Log File * [CWE-749](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-749-in-android-application-mstg-android-java-apk) Exposed Dangerous Method or Function * [CWE-780](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-780-in-android-application-mstg-android-java-apk) Use of RSA Algorithm without OAEP * [CWE-798](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-798-in-android-application-ovaa-apk) Use of Hard-coded Credentials * [CWE-921](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-921-in-android-application-ovaa-apk) Storage of Sensitive Data in a Mechanism without Access Control * [CWE-926](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-926-in-android-application-dvba-apk) Improper Export of Android Application Components # Quick Start In this section, we will show how to detect CWE-798 with Quark Script. ### Step 1: Environments Requirements * Quark requires Python 3.8 or above. ### Step 2: Install Quark Engine * Install Quark Engine by running: ```bash $ pip3 install -U quark-engine ``` ### Step 3: Prepare Quark Script, Detection Rule and the Sample File 1. Get the CWE-798 Quark Script and the detection rule [here](https://quark-engine.readthedocs.io/en/latest/quark_script.html#detect-cwe-798-in-android-application-ovaa-apk). 2. Get the sampe file (ovaa.apk) [here](https://github.com/dark-warlord14/ovaa/releases/tag/1.0). 3. Put the script, detection rule, and sample file in the same directory. 4. Edit accordingly to the file names: ```bash SAMPLE_PATH = "ovaa.apk" RULE_PATH = "findSecretKeySpec.json" # Now you are ready to run the script! ``` ### Step 4: Run the script ```bash $ python3 CWE-798.py # You should now see the detection result in the terminal. Found hard-coded AES key 49u5gh249gh24985ghf429gh4ch8f23f ``` * **Check the [document](https://quark-engine.readthedocs.io/en/latest/quark_script.html#quark-script) for more examples.** # Acknowledgments ### The Honeynet Project Honeynet.org logo ### Google Summer Of Code Quark-Engine has been participating in the GSoC under the Honeynet Project! * 2021: * [YuShiang Dang](https://twitter.com/YushianhD): [New Rule Generation Technique & Make Quark Everywhere Among Security Open Source Projects](https://quark-engine.github.io/2021/08/17/GSoC-2021-YuShiangDang/) * [Sheng-Feng Lu](https://twitter.com/haeter525): [Replace the core library of Quark-Engine](https://quark-engine.github.io/2021/08/17/GSoC-2021-ShengFengLu/) Stay tuned for the upcoming GSoC! Join the [Honeynet Slack chat](https://gsoc-slack.honeynet.org/) for more info. # Core Values of Quark Engine Team * We love **battle fields**. We embrace **uncertainties**. We challenge **impossibles**. We **rethink** everything. We change the way people think. And the most important of all, we benefit ourselves by benefit others **first**. quark-engine-23.4.1/bandit.yml000066400000000000000000000000171442215066700161600ustar00rootroot00000000000000skips: ['B101']quark-engine-23.4.1/codecov.yml000066400000000000000000000000321442215066700163360ustar00rootroot00000000000000ignore: - "*/tests/*” quark-engine-23.4.1/debian/000077500000000000000000000000001442215066700154205ustar00rootroot00000000000000quark-engine-23.4.1/debian/changelog000066400000000000000000000002251442215066700172710ustar00rootroot00000000000000quark-engine (21.4.3-0kali1) kali-dev; urgency=medium * Initial release -- JunWei Song Wed, 7 Apr 2021 04:46:49 +0800 quark-engine-23.4.1/debian/control000066400000000000000000000041371442215066700170300ustar00rootroot00000000000000Source: quark-engine Section: misc Priority: optional Maintainer: Kali Developers Uploaders: JunWei Song Build-Depends: debhelper-compat (= 12), dh-python, python3-all, androguard, python3-setuptools, python3-requests, python3-prettytable, python3-tqdm, python3-colorama, python3-click, python3-graphviz, python3-pandas, python3-prompt-toolkit Standards-Version: 21.4.3 Homepage: https://github.com/quark-engine/quark-engine Vcs-Browser: https://github.com/quark-engine/quark-engine Vcs-Git: https://github.com/quark-engine/quark-engine Package: quark-engine Architecture: all Depends: ${misc:Depends}, ${python3:Depends}, androguard, python3-requests, python3-prettytable, python3-tqdm, python3-colorama, python3-click, python3-graphviz, python3-pandas, python3-prompt-toolkit Description: Android Malware (Analysis | Scoring System) Quark-Engine is a full-featured Android analysis framework written in Python for hunting threat intelligence inside the APK, DEX files. Since it is rule-based, you can use the ones built-in or customize as needed. With ideas decoded from criminal law, Quark-Engine has its unique angles for Android analysis. We developed a Dalvik bytecode loader that has tainted analysis inside but also defeats the obfuscation techniques used against reverse engineering. And surprisingly, the loader matches perfectly the design of our malware scoring system. Quark-Engine is very easy to use and also provides flexible output formats. There are three types of output reports: detail report, call graph, and summary report. With these reports in mind, you can get an overview of the high-risk behavior inside Android within seconds. Also, by integrating with other Android analysis tools such as Ghidra, APKLAB, Jadx, Quark-Engine can greatly improve the efficiency of reverse engineers. . quark-engine-23.4.1/debian/copyright000066400000000000000000000031551442215066700173570ustar00rootroot00000000000000Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: quark-engine Upstream-Contact: JunWei Song Source: https://github.com/quark-engine/quark-engine Files: * Copyright: 2019-2021 quark-engine, JunWei Song License: GPL-3.0+ Files: debian/* Copyright: 2019-2021 quark-engine, JunWei Song License: GPL-3.0+ License: GPL-3.0+ This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. . This package is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this program. If not, see . . On Debian systems, the complete text of the GNU General Public License version 3 can be found in "/usr/share/common-licenses/GPL-3". # Please also look if there are files or directories which have a # different copyright/license attached and list them here. # Please avoid picking licenses with terms that are more restrictive than the # packaged work, as it may make Debian's contributions unacceptable upstream. # # If you need, there are some extra license texts available in two places: # /usr/share/debhelper/dh_make/licenses/ # /usr/share/common-licenses quark-engine-23.4.1/debian/helper-script/000077500000000000000000000000001442215066700202015ustar00rootroot00000000000000quark-engine-23.4.1/debian/helper-script/freshquark000066400000000000000000000001101442215066700222670ustar00rootroot00000000000000#!/bin/sh exec python3 /usr/share/quark-engine/quark/freshquark.py "$@" quark-engine-23.4.1/debian/helper-script/quark000066400000000000000000000001011442215066700212370ustar00rootroot00000000000000#!/bin/sh exec python3 /usr/share/quark-engine/quark/cli.py "$@" quark-engine-23.4.1/debian/quark-engine.install000066400000000000000000000000351442215066700213740ustar00rootroot00000000000000quark usr/share/quark-engine quark-engine-23.4.1/debian/rules000077500000000000000000000002311442215066700164740ustar00rootroot00000000000000#!/usr/bin/make -f #export DH_VERBOSE = 1 export PYBUILD_NAME=quark-engine export PYBUILD_DISABLE=test %: dh $@ --with python3 --buildsystem=pybuild quark-engine-23.4.1/debian/source/000077500000000000000000000000001442215066700167205ustar00rootroot00000000000000quark-engine-23.4.1/debian/source/format000066400000000000000000000000141442215066700201260ustar00rootroot000000000000003.0 (quilt) quark-engine-23.4.1/debian/watch000066400000000000000000000002351442215066700164510ustar00rootroot00000000000000version=4 opts=filenamemangle=s/.+\/v?(\d\S+)\.tar\.gz/quark-engine-$1\.tar\.gz/ \ https://github.com/quark-engine/quark-engine/tags .*/v?(\d\S+)\.tar\.gz quark-engine-23.4.1/docs/000077500000000000000000000000001442215066700151265ustar00rootroot00000000000000quark-engine-23.4.1/docs/Makefile000066400000000000000000000011761442215066700165730ustar00rootroot00000000000000# Minimal makefile for Sphinx documentation # # You can set these variables from the command line, and also # from the environment for the first two. SPHINXOPTS ?= SPHINXBUILD ?= sphinx-build SOURCEDIR = source BUILDDIR = build # Put it first so that "make" without argument is like "make help". help: @$(SPHINXBUILD) -M help "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O) .PHONY: help Makefile # Catch-all target: route all unknown targets to Sphinx using the new # "make mode" option. $(O) is meant as a shortcut for $(SPHINXOPTS). %: Makefile @$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O) quark-engine-23.4.1/docs/build/000077500000000000000000000000001442215066700162255ustar00rootroot00000000000000quark-engine-23.4.1/docs/build/doctrees/000077500000000000000000000000001442215066700200355ustar00rootroot00000000000000quark-engine-23.4.1/docs/build/doctrees/addRules.doctree000066400000000000000000000372251442215066700231600ustar00rootroot00000000000000€•Š>Œsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”Œdocutils.nodes”Œsection”“”)”}”(hhh]”(h Œtitle”“”)”}”(hŒ Add Rules”h]”h ŒText”“”Œ Add Rules”…””}”(Œparent”hŒ _document”hŒsource”NŒline”NubaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”uŒtagname”hhh hhhŒC/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/addRules.rst”hKubh Œ paragraph”“”)”}”(hŒčAndroid malware analysis engine is not a new story. Every antivirus company has their own secrets to build it. With curiosity, we develop a malware scoring system from the perspective of Taiwan Criminal Law in an easy but solid way.”h]”hŒčAndroid malware analysis engine is not a new story. Every antivirus company has their own secrets to build it. With curiosity, we develop a malware scoring system from the perspective of Taiwan Criminal Law in an easy but solid way.”…””}”(hh/hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh.)”}”(hXWe have an order theory of criminal which explains stages of committing a crime. For example, crime of murder consists of five stages, they are determined, conspiracy, preparation, start and practice. The latter the stage the more we’re sure that the crime is practiced.”h]”hXWe have an order theory of criminal which explains stages of committing a crime. For example, crime of murder consists of five stages, they are determined, conspiracy, preparation, start and practice. The latter the stage the more we’re sure that the crime is practiced.”…””}”(hh=hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK hh hhubh.)”}”(hŒ¨According to the above principle, we developed our order theory of android malware. We develop five stages to see if the malicious activity is being practiced. They are”h]”hŒ¨According to the above principle, we developed our order theory of android malware. We develop five stages to see if the malicious activity is being practiced. They are”…””}”(hhKhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh Œ block_quote”“”)”}”(hŒ1. Permission requested. 2. Native API call. 3. Certain combination of native API. 4. Calling sequence of native API. 5. APIs that handle the same register. ”h]”h Œenumerated_list”“”)”}”(hhh]”(h Œ list_item”“”)”}”(hŒPermission requested.”h]”h.)”}”(hhhh]”hŒPermission requested.”…””}”(hhjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhhfubah}”(h!]”h#]”h%]”h']”h)]”uh+hdhhaubhe)”}”(hŒNative API call.”h]”h.)”}”(hhh]”hŒNative API call.”…””}”(hhhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh}ubah}”(h!]”h#]”h%]”h']”h)]”uh+hdhhaubhe)”}”(hŒ"Certain combination of native API.”h]”h.)”}”(hh–h]”hŒ"Certain combination of native API.”…””}”(hh˜hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh”ubah}”(h!]”h#]”h%]”h']”h)]”uh+hdhhaubhe)”}”(hŒCalling sequence of native API.”h]”h.)”}”(hh­h]”hŒCalling sequence of native API.”…””}”(hh¯hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhhĢubah}”(h!]”h#]”h%]”h']”h)]”uh+hdhhaubhe)”}”(hŒ$APIs that handle the same register. ”h]”h.)”}”(hŒ#APIs that handle the same register.”h]”hŒ#APIs that handle the same register.”…””}”(hhÆhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhhÂubah}”(h!]”h#]”h%]”h']”h)]”uh+hdhhaubeh}”(h!]”h#]”h%]”h']”h)]”Œenumtype”Œarabic”Œprefix”hŒsuffix”Œ.”uh+h_hh[ubah}”(h!]”h#]”h%]”h']”h)]”uh+hYhh,hKhh hhubh.)”}”(hŒWe not only define malicious activities and their stages but also develop weights and thresholds for calculating the threat level of a malware.”h]”hŒWe not only define malicious activities and their stages but also develop weights and thresholds for calculating the threat level of a malware.”…””}”(hhëhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh.)”}”(hŒpBut before we explain how to set weights and thresholds, we need to define crimes and corresponding five stages.”h]”hŒpBut before we explain how to set weights and thresholds, we need to define crimes and corresponding five stages.”…””}”(hhųhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh.)”}”(hŒ{An example of defining crime "Send Location via SMS" is shown below. We use json format to construct the rule of the crime.”h]”hŒAn example of defining crime “Send Location via SMS” is shown below. We use json format to construct the rule of the crime.”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh Œ literal_block”“”)”}”(hXŸ{ "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "score": 4 }”h]”hXŸ{ "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "score": 4 }”…””}”hjsbah}”(h!]”h#]”h%]”h']”h)]”Œ xml:space”Œpreserve”Œlinenos”ˆŒforce”‰Œlanguage”Œpython”Œhighlight_args”}”uh+jhh,hK!hh hhubh.)”}”(hŒ)So let me walk you through the json file.”h]”hŒ)So let me walk you through the json file.”…””}”(hj-hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK>hh hhubj)”}”(hŒ "crime": "Send Location via SMS"”h]”hŒ "crime": "Send Location via SMS"”…””}”hj;sbah}”(h!]”h#]”h%]”h']”h)]”j%j&j(‰j)Œpython”j+}”uh+jhh,hK@hh hhubh.)”}”(hŒķFirst, we define the crime. Our principle of constructing a crime is ``Action + Target``. In this example, the action is "Send SMS" and the target is Location info. Therefore, the crime of our first rule is defined as: "Send Location via SMS".”h]”(hŒEFirst, we define the crime. Our principle of constructing a crime is ”…””}”(hjKhhhNhNubh Œliteral”“”)”}”(hŒ``Action + Target``”h]”hŒAction + Target”…””}”(hjUhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShjKubhŒŖ. In this example, the action is “Send SMS” and the target is Location info. Therefore, the crime of our first rule is defined as: “Send Location via SMS”.”…””}”(hjKhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKDhh hhubj)”}”(hŒ™"permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ]”h]”hŒ™"permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ]”…””}”hjmsbah}”(h!]”h#]”h%]”h']”h)]”j%j&j(‰j)Œpython”j+}”uh+jhh,hKJhh hhubh.)”}”(hXH``permission`` is where we fill in permission requested by the apk to practice the crime. For instance, we need permission ``android.permission.SEND_SMS`` to send information through SMS. We also need permission ``android.permission.ACCESS_COARSE_LOCATION`` and ``android.permission.ACCESS_FINE_LOCATION`` to practice the crime.”h]”(jT)”}”(hŒ``permission``”h]”hŒ permission”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShj}ubhŒm is where we fill in permission requested by the apk to practice the crime. For instance, we need permission ”…””}”(hj}hhhNhNubjT)”}”(hŒ``android.permission.SEND_SMS``”h]”hŒandroid.permission.SEND_SMS”…””}”(hj“hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShj}ubhŒ: to send information through SMS. We also need permission ”…””}”(hj}hhhNhNubjT)”}”(hŒ-``android.permission.ACCESS_COARSE_LOCATION``”h]”hŒ)android.permission.ACCESS_COARSE_LOCATION”…””}”(hjĨhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShj}ubhŒ and ”…””}”(hj}hhhNhNubjT)”}”(hŒ+``android.permission.ACCESS_FINE_LOCATION``”h]”hŒ'android.permission.ACCESS_FINE_LOCATION”…””}”(hjˇhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShj}ubhŒ to practice the crime.”…””}”(hj}hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKRhh hhubj)”}”(hXž"api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ]”h]”hXž"api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ]”…””}”hjĪsbah}”(h!]”h#]”h%]”h']”h)]”j%j&j(‰j)Œpython”j+}”uh+jhh,hKXhh hhubh.)”}”(hŒR``api`` means this field can be used to practice analysis from stage 2 to stage 4.”h]”(jT)”}”(hŒ``api``”h]”hŒapi”…””}”(hjãhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShjßubhŒK means this field can be used to practice analysis from stage 2 to stage 4.”…””}”(hjßhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKghh hhubh.)”}”(hŒåIn stage 2, we need to find key native APIs that do the ``Action`` and ``Target``. And since the API method name can be used by self-defined class. We need to fill in information of both the native API class name and method name.”h]”(hŒ8In stage 2, we need to find key native APIs that do the ”…””}”(hjûhhhNhNubjT)”}”(hŒ ``Action``”h]”hŒAction”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShjûubhŒ and ”…””}”(hjûhhhNhNubjT)”}”(hŒ ``Target``”h]”hŒTarget”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShjûubhŒ”. And since the API method name can be used by self-defined class. We need to fill in information of both the native API class name and method name.”…””}”(hjûhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKjhh hhubh Œnote”“”)”}”(hŒQWe like to keep our crime/rule simple. So do not fill in more than 2 native APIs.”h]”h.)”}”(hj1h]”hŒQWe like to keep our crime/rule simple. So do not fill in more than 2 native APIs.”…””}”(hj3hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKohj/ubah}”(h!]”h#]”h%]”h']”h)]”uh+j-hh hhhh,hNubh.)”}”(hX In stage 3, we will find the combination of the native APIs we define in stage 2. Further, we will check whether they're called in the same method. If so, we will say that the combination of crime is caught! And we don't need to do anything to adjust the ``api`` field.”h]”(hXIn stage 3, we will find the combination of the native APIs we define in stage 2. Further, we will check whether they’re called in the same method. If so, we will say that the combination of crime is caught! And we don’t need to do anything to adjust the ”…””}”(hjFhhhNhNubjT)”}”(hŒ``api``”h]”hŒapi”…””}”(hjNhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShjFubhŒ field.”…””}”(hjFhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKqhh hhubj.)”}”(hŒaWe know that the native API might be wrapped in other methods. We use XREF to solve this problem.”h]”h.)”}”(hjhh]”hŒaWe know that the native API might be wrapped in other methods. We use XREF to solve this problem.”…””}”(hjjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKvhjfubah}”(h!]”h#]”h%]”h']”h)]”uh+j-hh hhhh,hNubh.)”}”(hŒŒIn stage 4, we will find whether the native APIs are called in a right sequence. If so, we have more confidence that the crime is practiced.”h]”hŒŒIn stage 4, we will find whether the native APIs are called in a right sequence. If so, we have more confidence that the crime is practiced.”…””}”(hj}hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKxhh hhubj.)”}”(hŒCPlease place the APIs in the order as the crime is being committed.”h]”h.)”}”(hjh]”hŒCPlease place the APIs in the order as the crime is being committed.”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK{hj‹ubah}”(h!]”h#]”h%]”h']”h)]”uh+j-hh hhhh,hNubh.)”}”(hŒˆIn stage 5, we will check whether the native APIs are operating the same parameter. If so, we are 100% sure that the crime is practiced.”h]”hŒˆIn stage 5, we will check whether the native APIs are operating the same parameter. If so, we are 100% sure that the crime is practiced.”…””}”(hjĸhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK}hh hhubh.)”}”(hŒpAs for the field ``score``, we will be updating our principles of weight defining. please check that part later.”h]”(hŒAs for the field ”…””}”(hj°hhhNhNubjT)”}”(hŒ ``score``”h]”hŒscore”…””}”(hj¸hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jShj°ubhŒV, we will be updating our principles of weight defining. please check that part later.”…””}”(hj°hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK€hh hhubeh}”(h!]”Œ add-rules”ah#]”h%]”Œ add rules”ah']”h)]”uh+h hhhhhh,hKubah}”(h!]”h#]”h%]”h']”h)]”Œsource”h,uh+hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jûŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h,Œ _destination”NŒ _config_files”]”Œfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”jÕjŌsŒ nametypes”}”jÕ‰sh!}”jŌh sŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nhhub.quark-engine-23.4.1/docs/build/doctrees/coding_style.doctree000066400000000000000000000511201442215066700240660ustar00rootroot00000000000000€•ERŒsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”Œdocutils.nodes”Œsection”“”)”}”(hhh]”(h Œtitle”“”)”}”(hŒ Coding Style”h]”h ŒText”“”Œ Coding Style”…””}”(Œparent”hŒ _document”hŒsource”NŒline”NubaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”uŒtagname”hhh hhhŒG/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/coding_style.rst”hKubh Œ paragraph”“”)”}”(hŒîHaving a clean and structured code is very important for the sustainable development of this project. `Cuckoo Sandbox `_ is a good example. So we follow most of their style for maintaining the code base.”h]”(hŒfHaving a clean and structured code is very important for the sustainable development of this project. ”…””}”(hh/hhhNhNubh Œ reference”“”)”}”(hŒ5`Cuckoo Sandbox `_”h]”hŒCuckoo Sandbox”…””}”(hh9hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”ŒCuckoo Sandbox”Œrefuri”Œ!https://cuckoo.sh/docs/index.html”uh+h7hh/ubh Œtarget”“”)”}”(hŒ$ ”h]”h}”(h!]”Œcuckoo-sandbox”ah#]”h%]”Œcuckoo sandbox”ah']”h)]”Œrefuri”hJuh+hKŒ referenced”Khh/ubhŒS is a good example. So we follow most of their style for maintaining the code base.”…””}”(hh/hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh.)”}”(hŒjWe do help out with code refactoring where required, but please try to do as much as possible on your own.”h]”hŒjWe do help out with code refactoring where required, but please try to do as much as possible on your own.”…””}”(hhehhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK hh hhubh.)”}”(hŒĐEssentially Quark's code style is based on `PEP 8 - Style Guide for Python Code `_ and `PEP 257 -- Docstring Conventions `_.”h]”(hŒ-Essentially Quark’s code style is based on ”…””}”(hhshhhNhNubh8)”}”(hŒQ`PEP 8 - Style Guide for Python Code `_”h]”hŒ#PEP 8 - Style Guide for Python Code”…””}”(hh{hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œ#PEP 8 - Style Guide for Python Code”hIŒ(http://www.python.org/dev/peps/pep-0008/”uh+h7hhsubhL)”}”(hŒ+ ”h]”h}”(h!]”Œ!pep-8-style-guide-for-python-code”ah#]”h%]”Œ#pep 8 - style guide for python code”ah']”h)]”Œrefuri”h‹uh+hKhZKhhsubhŒ and ”…””}”(hhshhhNhNubh8)”}”(hŒN`PEP 257 -- Docstring Conventions `_”h]”hŒ!PEP 257 – Docstring Conventions”…””}”(hhhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œ PEP 257 -- Docstring Conventions”hIŒ(http://www.python.org/dev/peps/pep-0257/”uh+h7hhsubhL)”}”(hŒ+ ”h]”h}”(h!]”Œpep-257-docstring-conventions”ah#]”h%]”Œ pep 257 -- docstring conventions”ah']”h)]”Œrefuri”h­uh+hKhZKhhsubhŒ.”…””}”(hhshhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK hh hhubh )”}”(hhh]”(h)”}”(hŒ Formatting”h]”hŒ Formatting”…””}”(hhČhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhhÅhhhh,hKubh )”}”(hhh]”(h)”}”(hŒFile and folder naming”h]”hŒFile and folder naming”…””}”(hhŲhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhhÖhhhh,hKubh.)”}”(hŒLAll characters in the filenames or folder names should be lowercase letters.”h]”hŒLAll characters in the filenames or folder names should be lowercase letters.”…””}”(hhįhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhhÖhhubeh}”(h!]”Œfile-and-folder-naming”ah#]”h%]”Œfile and folder naming”ah']”h)]”uh+h hhÅhhhh,hKubh )”}”(hhh]”(h)”}”(hŒCopyright header”h]”hŒCopyright header”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhhũhhhh,hKubh.)”}”(hŒJAll existing source code files start with the following copyright header::”h]”hŒIAll existing source code files start with the following copyright header:”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhhũhhubh Œ literal_block”“”)”}”(hŒf# This file is part of Quark Engine - https://quark-engine.rtfd.io # See GPLv3 for copying permission.”h]”hŒf# This file is part of Quark Engine - https://quark-engine.rtfd.io # See GPLv3 for copying permission.”…””}”hjsbah}”(h!]”h#]”h%]”h']”h)]”Œ xml:space”Œpreserve”uh+jhh,hKhhũhhubeh}”(h!]”Œcopyright-header”ah#]”h%]”Œcopyright header”ah']”h)]”uh+h hhÅhhhh,hKubh )”}”(hhh]”(h)”}”(hŒ Indentation”h]”hŒ Indentation”…””}”(hj9hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj6hhhh,hK"ubh.)”}”(hŒĒThe code must have a 4-spaces-tabs indentation. Since Python enforce the indentation, make sure to configure your editor properly or your code might cause malfunctioning.”h]”hŒĒThe code must have a 4-spaces-tabs indentation. Since Python enforce the indentation, make sure to configure your editor properly or your code might cause malfunctioning.”…””}”(hjGhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK$hj6hhubeh}”(h!]”Œ indentation”ah#]”h%]”Œ indentation”ah']”h)]”uh+h hhÅhhhh,hK"ubh )”}”(hhh]”(h)”}”(hŒMaximum Line Length”h]”hŒMaximum Line Length”…””}”(hj`hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj]hhhh,hK)ubh.)”}”(hŒ.Limit all lines to a maximum of 79 characters.”h]”hŒ.Limit all lines to a maximum of 79 characters.”…””}”(hjnhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK+hj]hhubeh}”(h!]”Œmaximum-line-length”ah#]”h%]”Œmaximum line length”ah']”h)]”uh+h hhÅhhhh,hK)ubh )”}”(hhh]”(h)”}”(hŒ Blank Lines”h]”hŒ Blank Lines”…””}”(hj‡hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj„hhhh,hK.ubh.)”}”(hŒ—Separate the class definition and the top level function with one blank line. Methods definitions inside a class are separated by a single blank line::”h]”hŒ–Separate the class definition and the top level function with one blank line. Methods definitions inside a class are separated by a single blank line:”…””}”(hj•hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK0hj„hhubj)”}”(hŒÍclass MyClass: """Doing something.""" def __init__(self): """Initialize""" pass def do_it(self, what): """Do it. @param what: do what. """ pass”h]”hŒÍclass MyClass: """Doing something.""" def __init__(self): """Initialize""" pass def do_it(self, what): """Do it. @param what: do what. """ pass”…””}”hjŖsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hK3hj„hhubh.)”}”(hŒŗUse blank lines in functions, sparingly, to isolate logic sections. Import blocks are separated by a single blank line, import blocks are separated from classes by one blank line.”h]”hŒŗUse blank lines in functions, sparingly, to isolate logic sections. Import blocks are separated by a single blank line, import blocks are separated from classes by one blank line.”…””}”(hjąhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK@hj„hhubeh}”(h!]”Œ blank-lines”ah#]”h%]”Œ blank lines”ah']”h)]”uh+h hhÅhhhh,hK.ubh )”}”(hhh]”(h)”}”(hŒImports”h]”hŒImports”…””}”(hjĘhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjĮhhhh,hKEubh.)”}”(hŒkImports must be on separate lines. If you're importing multiple objects from a package, use a single line::”h]”hŒlImports must be on separate lines. If you’re importing multiple objects from a package, use a single line:”…””}”(hjØhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKGhjĮhhubj)”}”(hŒfrom lib import a, b, c”h]”hŒfrom lib import a, b, c”…””}”hjæsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKJhjĮhhubh.)”}”(hŒ **NOT**::”h]”(h Œstrong”“”)”}”(hŒ**NOT**”h]”hŒNOT”…””}”(hjúhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jøhjôubhŒ:”…””}”(hjôhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKLhjĮhhubj)”}”(hŒ5from lib import a from lib import b from lib import c”h]”hŒ5from lib import a from lib import b from lib import c”…””}”hjsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKNhjĮhhubh.)”}”(hŒ1Always specify explicitly the objects to import::”h]”hŒ0Always specify explicitly the objects to import:”…””}”(hj hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKRhjĮhhubj)”}”(hŒfrom lib import a, b, c”h]”hŒfrom lib import a, b, c”…””}”hj.sbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKThjĮhhubh.)”}”(hŒ **NOT**::”h]”(jų)”}”(hŒ**NOT**”h]”hŒNOT”…””}”(hj@hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jøhj<ubhŒ:”…””}”(hj<hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKVhjĮhhubj)”}”(hŒfrom lib import *”h]”hŒfrom lib import *”…””}”hjXsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKXhjĮhhubeh}”(h!]”Œimports”ah#]”h%]”Œimports”ah']”h)]”uh+h hhÅhhhh,hKEubh )”}”(hhh]”(h)”}”(hŒStrings”h]”hŒStrings”…””}”(hjqhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjnhhhh,hK[ubh.)”}”(hŒ/Strings must be delimited by double quotes (").”h]”hŒ1Strings must be delimited by double quotes (“).”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK]hjnhhubeh}”(h!]”Œstrings”ah#]”h%]”Œstrings”ah']”h)]”uh+h hhÅhhhh,hK[ubh )”}”(hhh]”(h)”}”(hŒPrinting and Logging”h]”hŒPrinting and Logging”…””}”(hj˜hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj•hhhh,hK`ubh.)”}”(hŒˆWe discourage the use of ``print()``: if you need to log an event please use Python's ``logging`` which is already initialized by Quark.”h]”(hŒWe discourage the use of ”…””}”(hjĻhhhNhNubh Œliteral”“”)”}”(hŒ ``print()``”h]”hŒprint()”…””}”(hj°hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jŽhjĻubhŒ4: if you need to log an event please use Python’s ”…””}”(hjĻhhhNhNubj¯)”}”(hŒ ``logging``”h]”hŒlogging”…””}”(hjÂhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jŽhjĻubhŒ' which is already initialized by Quark.”…””}”(hjĻhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKbhj•hhubh.)”}”(hŒIn your module add::”h]”hŒIn your module add:”…””}”(hjÚhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKehj•hhubj)”}”(hŒ0import logging log = logging.getLogger(__name__)”h]”hŒ0import logging log = logging.getLogger(__name__)”…””}”hjčsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKghj•hhubh.)”}”(hŒqAnd use the ``log`` handle. More details can be found in the Python documentation, but as follows is an example::”h]”(hŒ And use the ”…””}”(hjöhhhNhNubj¯)”}”(hŒ``log``”h]”hŒlog”…””}”(hjūhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jŽhjöubhŒ] handle. More details can be found in the Python documentation, but as follows is an example:”…””}”(hjöhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKjhj•hhubj)”}”(hŒlog.info("Log message")”h]”hŒlog.info("Log message")”…””}”hjsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKmhj•hhubeh}”(h!]”Œprinting-and-logging”ah#]”h%]”Œprinting and logging”ah']”h)]”uh+h hhÅhhhh,hK`ubeh}”(h!]”Œ formatting”ah#]”h%]”Œ formatting”ah']”h)]”uh+h hh hhhh,hKubh )”}”(hhh]”(h)”}”(hŒ Exceptions”h]”hŒ Exceptions”…””}”(hj7hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj4hhhh,hKpubh.)”}”(hŒLCustom exceptions will be defined in the ``quark/utils/exceptions.py`` file.”h]”(hŒ)Custom exceptions will be defined in the ”…””}”(hjEhhhNhNubj¯)”}”(hŒ``quark/utils/exceptions.py``”h]”hŒquark/utils/exceptions.py”…””}”(hjMhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jŽhjEubhŒ file.”…””}”(hjEhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKrhj4hhubh )”}”(hhh]”(h)”}”(hŒNaming”h]”hŒNaming”…””}”(hjhhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjehhhh,hKuubh.)”}”(hŒoCustom exception names must start with "Quark" and end with "Error" if it represents an unexpected malfunction.”h]”hŒwCustom exception names must start with “Quark” and end with “Error” if it represents an unexpected malfunction.”…””}”(hjvhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKwhjehhubeh}”(h!]”Œnaming”ah#]”h%]”Œnaming”ah']”h)]”uh+h hj4hhhh,hKuubh )”}”(hhh]”(h)”}”(hŒException handling”h]”hŒException handling”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjŒhhhh,hK{ubh.)”}”(hŒCWhen catching an exception and accessing its handle, use ``as e``::”h]”(hŒ9When catching an exception and accessing its handle, use ”…””}”(hjhhhNhNubj¯)”}”(hŒ``as e``”h]”hŒas e”…””}”(hjĨhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jŽhjubhŒ:”…””}”(hjhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK}hjŒhhubj)”}”(hŒ/try: foo() except Exception as e: bar()”h]”hŒ/try: foo() except Exception as e: bar()”…””}”hjŊsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hKhjŒhhubh.)”}”(hŒ **NOT**::”h]”(jų)”}”(hŒ**NOT**”h]”hŒNOT”…””}”(hjĪhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jøhjËubhŒ:”…””}”(hjËhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK„hjŒhhubj)”}”(hŒ5try: foo() except Exception, something: bar()”h]”hŒ5try: foo() except Exception, something: bar()”…””}”hjįsbah}”(h!]”h#]”h%]”h']”h)]”j,j-uh+jhh,hK†hjŒhhubh.)”}”(hŒ4It's a good practice use "e" instead of "e.message".”h]”hŒ>It’s a good practice use “e” instead of “e.message”.”…””}”(hjõhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK‹hjŒhhubeh}”(h!]”Œexception-handling”ah#]”h%]”Œexception handling”ah']”h)]”uh+h hj4hhhh,hK{ubeh}”(h!]”Œ exceptions”ah#]”h%]”Œ exceptions”ah']”h)]”uh+h hh hhhh,hKpubh )”}”(hhh]”(h)”}”(hŒ Documentation”h]”hŒ Documentation”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjhhhh,hKŽubh.)”}”(hŒŪAll code must be documented in docstring format, see `PEP 257 -- Docstring Conventions `_. Additional comments may be added in logical blocks to make the code easier to understand.”h]”(hŒ5All code must be documented in docstring format, see ”…””}”(hj$hhhNhNubh8)”}”(hŒN`PEP 257 -- Docstring Conventions `_”h]”hŒ!PEP 257 – Docstring Conventions”…””}”(hj,hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œ PEP 257 -- Docstring Conventions”hIŒ(http://www.python.org/dev/peps/pep-0257/”uh+h7hj$ubhL)”}”(hŒ+ ”h]”h}”(h!]”Œid1”ah#]”h%]”h']”Œ pep 257 -- docstring conventions”ah)]”Œrefuri”j<uh+hKhZKhj$ubhŒ[. Additional comments may be added in logical blocks to make the code easier to understand.”…””}”(hj$hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhjhhubh.)”}”(hŒĘAs for the contribution to `quark rtdf `_. Please use ``make html`` to build the html files. And commit with rst files altogether. So that users can read docs when offline.”h]”(hŒAs for the contribution to ”…””}”(hjThhhNhNubh8)”}”(hŒ,`quark rtdf `_”h]”hŒ quark rtdf”…””}”(hj\hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œ quark rtdf”hIŒhttps://quark-engine.rtfd.io”uh+h7hjTubhL)”}”(hŒ ”h]”h}”(h!]”Œ quark-rtdf”ah#]”h%]”Œ quark rtdf”ah']”h)]”Œrefuri”jluh+hKhZKhjTubhŒ . Please use ”…””}”(hjThhhNhNubj¯)”}”(hŒ ``make html``”h]”hŒ make html”…””}”(hj~hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+jŽhjTubhŒi to build the html files. And commit with rst files altogether. So that users can read docs when offline.”…””}”(hjThhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK”hjhhubeh}”(h!]”Œ documentation”ah#]”h%]”Œ documentation”ah']”h)]”uh+h hh hhhh,hKŽubh )”}”(hhh]”(h)”}”(hŒAutomated testing”h]”hŒAutomated testing”…””}”(hjĄhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjžhhhh,hK™ubh.)”}”(hŒbWe believe in automated testing to provide high quality code and avoid easily overlooked mistakes.”h]”hŒbWe believe in automated testing to provide high quality code and avoid easily overlooked mistakes.”…””}”(hj¯hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK›hjžhhubh.)”}”(hX When possible, all code must be committed with proper unit tests. Particular attention must be placed when fixing bugs: it's good practice to write unit tests to reproduce the bug. All unit tests and fixtures are placed in the tests folder in the quark-engine/tests.”h]”hX When possible, all code must be committed with proper unit tests. Particular attention must be placed when fixing bugs: it’s good practice to write unit tests to reproduce the bug. All unit tests and fixtures are placed in the tests folder in the quark-engine/tests.”…””}”(hjŊhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKžhjžhhubh.)”}”(hŒ­We have adopted `Pytest `_ as unit testing framework. Also we adopted `travis ci `_ for the continuous integration.”h]”(hŒWe have adopted ”…””}”(hjËhhhNhNubh8)”}”(hŒ,`Pytest `_”h]”hŒPytest”…””}”(hjĶhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”ŒPytest”hIŒ http://doc.pytest.org/en/latest/”uh+h7hjËubhL)”}”(hŒ# ”h]”h}”(h!]”Œpytest”ah#]”h%]”Œpytest”ah']”h)]”Œrefuri”jãuh+hKhZKhjËubhŒ, as unit testing framework. Also we adopted ”…””}”(hjËhhhNhNubh8)”}”(hŒ%`travis ci `_”h]”hŒ travis ci”…””}”(hjõhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œ travis ci”hIŒhttps://travis-ci.org/”uh+h7hjËubhL)”}”(hŒ ”h]”h}”(h!]”Œ travis-ci”ah#]”h%]”Œ travis ci”ah']”h)]”Œrefuri”juh+hKhZKhjËubhŒ for the continuous integration.”…””}”(hjËhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK¤hjžhhubeh}”(h!]”Œautomated-testing”ah#]”h%]”Œautomated testing”ah']”h)]”uh+h hh hhhh,hK™ubeh}”(h!]”Œ coding-style”ah#]”h%]”Œ coding style”ah']”h)]”uh+h hhhhhh,hKubah}”(h!]”h#]”h%]”h']”h)]”Œsource”h,uh+hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jPŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h,Œ _destination”NŒ _config_files”]”Œfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(j*j'hVhSh•h’hˇh´j1j.húh÷j3j0jZjWjj~jÄjÁjkjhj’jj)j&jj j‰j†jjj›j˜jvjsj"jjíjęjj uŒ nametypes”}”(j*‰hVˆh•ˆhˇˆj1‰hú‰j3‰jZ‰j‰jĉjk‰j’‰j)‰j‰j‰‰j‰j›‰jvˆj"‰jíˆjˆuh!}”(j'h hShMh’hŒh´hŽj.hÅh÷hÖj0hũjWj6j~j]jÁj„jhjĮjjnj&j•j j4j†jejjŒj˜jjCj=jsjmjjžjęjäj juŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”j^Ks…”R”Œparse_messages”]”h Œsystem_message”“”)”}”(hhh]”h.)”}”(hŒCDuplicate explicit target name: "pep 257 -- docstring conventions".”h]”hŒHDuplicate explicit target name: “pep 257 – docstring conventions”.”…””}”(hjļhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hjŗubah}”(h!]”h#]”h%]”h']”h)]”jCaŒlevel”KŒtype”ŒINFO”Œsource”h,Œline”Kuh+jąhjhhhh,hK’ubaŒtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nhhub.quark-engine-23.4.1/docs/build/doctrees/contribution.doctree000066400000000000000000000370501442215066700241300ustar00rootroot00000000000000€•>Œsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”Œdocutils.nodes”Œsection”“”)”}”(hhh]”(h Œtitle”“”)”}”(hŒ Contribution”h]”h ŒText”“”Œ Contribution”…””}”(Œparent”hŒ _document”hŒsource”NŒline”NubaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”uŒtagname”hhh hhhŒG/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/contribution.rst”hKubh )”}”(hhh]”(h)”}”(hŒ Different stages of core members”h]”hŒ Different stages of core members”…””}”(hh0hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhh-hhhh,hKubh Œ bullet_list”“”)”}”(hhh]”(h Œ list_item”“”)”}”(hŒ†``Contributor``: As soon as you post a comment, fix a typo, ask a question or report a bug etc. , you become an active contributor. ”h]”h Œ paragraph”“”)”}”(hŒƒ``Contributor``: As soon as you post a comment, fix a typo, ask a question or report a bug etc. , you become an active contributor.”h]”(h Œliteral”“”)”}”(hŒ``Contributor``”h]”hŒ Contributor”…””}”(hhQhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhhKubhŒt: As soon as you post a comment, fix a typo, ask a question or report a bug etc. , you become an active contributor.”…””}”(hhKhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhhEubah}”(h!]”h#]”h%]”h']”h)]”uh+hChh@hhhh,hNubhD)”}”(hŒ‹``Contributor followed by a mentor``: Spotted active contributors can be asked to get a mentor to speedup their learning of this project. ”h]”hJ)”}”(hŒ‰``Contributor followed by a mentor``: Spotted active contributors can be asked to get a mentor to speedup their learning of this project.”h]”(hP)”}”(hŒ$``Contributor followed by a mentor``”h]”hŒ Contributor followed by a mentor”…””}”(hhwhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhhsubhŒe: Spotted active contributors can be asked to get a mentor to speedup their learning of this project.”…””}”(hhshhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhhoubah}”(h!]”h#]”h%]”h']”h)]”uh+hChh@hhhh,hNubhD)”}”(hŒ•``Core member``: Once other core members consider that a contributor is ready to be promoted, a core member opens a private vote for the candidate. ”h]”hJ)”}”(hŒ“``Core member``: Once other core members consider that a contributor is ready to be promoted, a core member opens a private vote for the candidate.”h]”(hP)”}”(hŒ``Core member``”h]”hŒ Core member”…””}”(hhhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhh™ubhŒ„: Once other core members consider that a contributor is ready to be promoted, a core member opens a private vote for the candidate.”…””}”(hh™hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhh•ubah}”(h!]”h#]”h%]”h']”h)]”uh+hChh@hhhh,hNubeh}”(h!]”h#]”h%]”h']”h)]”Œbullet”Œ*”uh+h>hh,hKhh-hhubeh}”(h!]”Œ different-stages-of-core-members”ah#]”h%]”Œ different stages of core members”ah']”h)]”uh+h hh hhhh,hKubh )”}”(hhh]”(h)”}”(hŒ Core members”h]”hŒ Core members”…””}”(hhÎhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhhËhhhh,hKubh Œtable”“”)”}”(hhh]”h Œtgroup”“”)”}”(hhh]”(h Œcolspec”“”)”}”(hhh]”h}”(h!]”h#]”h%]”h']”h)]”Œcolwidth”Kuh+hæhhãubhį)”}”(hhh]”h}”(h!]”h#]”h%]”h']”h)]”Œcolwidth”K[uh+hæhhãubh Œthead”“”)”}”(hhh]”h Œrow”“”)”}”(hhh]”(h Œentry”“”)”}”(hhh]”hJ)”}”(hŒName”h]”hŒName”…””}”(hj hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubj)”}”(hhh]”hJ)”}”(hŒ Contribution”h]”hŒ Contribution”…””}”(hj"hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhhūubah}”(h!]”h#]”h%]”h']”h)]”uh+hühhãubh Œtbody”“”)”}”(hhh]”(j)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ KunYu Chen”h]”hŒ KunYu Chen”…””}”(hjMhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhjJubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjGubj)”}”(hhh]”hJ)”}”(hŒ4``BDFL, Project Founder, The man who runs the show``”h]”hP)”}”(hjfh]”hŒ0BDFL, Project Founder, The man who runs the show”…””}”(hjhhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhjdubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKhjaubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjGubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjDubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ YuShiang Dang”h]”hŒ YuShiang Dang”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK hjŠubah}”(h!]”h#]”h%]”h']”h)]”uh+jhj‡ubj)”}”(hhh]”hJ)”}”(hŒL``UI/UX Team Lead, Core Developer, Rule generation system, Malware Analyst``”h]”hP)”}”(hjĻh]”hŒHUI/UX Team Lead, Core Developer, Rule generation system, Malware Analyst”…””}”(hj¨hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhj¤ubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK hjĄubah}”(h!]”h#]”h%]”h']”h)]”uh+jhj‡ubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjDubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ ShengFone Lu”h]”hŒ ShengFone Lu”…””}”(hjÍhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK"hjĘubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjĮubj)”}”(hhh]”hJ)”}”(hŒA``Core Developer, Triage Team Lead, Rizin Engine Implementation``”h]”hP)”}”(hjæh]”hŒ=Core Developer, Triage Team Lead, Rizin Engine Implementation”…””}”(hjčhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhjäubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK"hjáubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjĮubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjDubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ AnWei Kung”h]”hŒ AnWei Kung”…””}”(hj hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK$hj ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubj)”}”(hhh]”hJ)”}”(hŒT``Core Developer, Triage Team Member, Backend (database, downloader, API), Testing``”h]”hP)”}”(hj&h]”hŒPCore Developer, Triage Team Member, Backend (database, downloader, API), Testing”…””}”(hj(hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhj$ubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK$hj!ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjDubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒZin Wong”h]”hŒZin Wong”…””}”(hjMhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK&hjJubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjGubj)”}”(hhh]”hJ)”}”(hŒ``Triage Team Member``”h]”hP)”}”(hjfh]”hŒTriage Team Member”…””}”(hjhhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhjdubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK&hjaubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjGubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjDubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒZee”h]”hŒZee”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK(hjŠubah}”(h!]”h#]”h%]”h']”h)]”uh+jhj‡ubj)”}”(hhh]”hJ)”}”(hŒ``UI/UX Team Member``”h]”hP)”}”(hjĻh]”hŒUI/UX Team Member”…””}”(hj¨hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhj¤ubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK(hjĄubah}”(h!]”h#]”h%]”h']”h)]”uh+jhj‡ubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjDubeh}”(h!]”h#]”h%]”h']”h)]”uh+jBhhãubeh}”(h!]”h#]”h%]”h']”h)]”Œcols”Kuh+háhhŪubah}”(h!]”h#]”h%]”h']”h)]”uh+hÜhhËhhhh,hNubeh}”(h!]”Œ core-members”ah#]”h%]”Œ core members”ah']”h)]”uh+h hh hhhh,hKubh )”}”(hhh]”(h)”}”(hŒAlumni”h]”hŒAlumni”…””}”(hjåhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjâhhhh,hK-ubhŨ)”}”(hhh]”hâ)”}”(hhh]”(hį)”}”(hhh]”h}”(h!]”h#]”h%]”h']”h)]”Œcolwidth”Kuh+hæhjöubhį)”}”(hhh]”h}”(h!]”h#]”h%]”h']”h)]”Œcolwidth”K[uh+hæhjöubhũ)”}”(hhh]”j)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒName”h]”hŒName”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK/hjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubj)”}”(hhh]”hJ)”}”(hŒ Contribution”h]”hŒ Contribution”…””}”(hj-hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK/hj*ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhj ubah}”(h!]”h#]”h%]”h']”h)]”uh+hühjöubjC)”}”(hhh]”(j)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ JunWei Song”h]”hŒ JunWei Song”…””}”(hjVhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK1hjSubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjPubj)”}”(hhh]”hJ)”}”(hŒY``Project Co-Founder, Engine Implementation (Malware Scoring System), Frontend, Testing``”h]”hP)”}”(hjoh]”hŒUProject Co-Founder, Engine Implementation (Malware Scoring System), Frontend, Testing”…””}”(hjqhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhjmubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK1hjjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjPubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjMubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ ShunTe Lin”h]”hŒ ShunTe Lin”…””}”(hj–hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK3hj“ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubj)”}”(hhh]”hJ)”}”(hŒ&``Core Developer, Triage Team Member``”h]”hP)”}”(hj¯h]”hŒ"Core Developer, Triage Team Member”…””}”(hjąhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhj­ubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK3hjĒubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjMubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ ChaoWen Li”h]”hŒ ChaoWen Li”…””}”(hjÖhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK5hjĶubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjĐubj)”}”(hhh]”hJ)”}”(hŒ``Quark Community Development``”h]”hP)”}”(hjīh]”hŒQuark Community Development”…””}”(hjņhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhjíubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK5hjęubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjĐubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjMubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒSin”h]”hŒSin”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK7hjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubj)”}”(hhh]”hJ)”}”(hŒT``Malware Analyst, Detection Rules, Engine Implementation (Malware Anti-Detection)``”h]”hP)”}”(hj/h]”hŒPMalware Analyst, Detection Rules, Engine Implementation (Malware Anti-Detection)”…””}”(hj1hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhj-ubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK7hj*ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjMubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ IokJin Sih”h]”hŒ IokJin Sih”…””}”(hjVhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK9hjSubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjPubj)”}”(hhh]”hJ)”}”(hŒ``Malware Analyst``”h]”hP)”}”(hjoh]”hŒMalware Analyst”…””}”(hjqhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhjmubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK9hjjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjPubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjMubj)”}”(hhh]”(j)”}”(hhh]”hJ)”}”(hŒ YunChen Liu”h]”hŒ YunChen Liu”…””}”(hj–hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK;hj“ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubj)”}”(hhh]”hJ)”}”(hŒ``Artwork Design, Frontend``”h]”hP)”}”(hj¯h]”hŒArtwork Design, Frontend”…””}”(hjąhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hOhj­ubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hK;hjĒubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubeh}”(h!]”h#]”h%]”h']”h)]”uh+jhjMubeh}”(h!]”h#]”h%]”h']”h)]”uh+jBhjöubeh}”(h!]”h#]”h%]”h']”h)]”Œcols”Kuh+háhjķubah}”(h!]”h#]”h%]”h']”h)]”uh+hÜhjâhhhh,hNubeh}”(h!]”Œalumni”ah#]”h%]”Œalumni”ah']”h)]”uh+h hh hhhh,hK-ubh )”}”(hhh]”(h)”}”(hŒ Consultants”h]”hŒ Consultants”…””}”(hjîhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjëhhhh,hK?ubhJ)”}”(hŒ]Consultant is the one who is important to this project and shows great support to our engine.”h]”hŒ]Consultant is the one who is important to this project and shows great support to our engine.”…””}”(hjühhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKAhjëhhubhŨ)”}”(hhh]”hâ)”}”(hhh]”(hį)”}”(hhh]”h}”(h!]”h#]”h%]”h']”h)]”Œcolwidth”Kuh+hæhj ubhũ)”}”(hhh]”j)”}”(hhh]”j)”}”(hhh]”hJ)”}”(hŒ Consultant”h]”hŒ Consultant”…””}”(hj#hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKEhj ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjubah}”(h!]”h#]”h%]”h']”h)]”uh+hühj ubjC)”}”(hhh]”(j)”}”(hhh]”j)”}”(hhh]”hJ)”}”(hŒ Chun-I Fan”h]”hŒ Chun-I Fan”…””}”(hjLhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKGhjIubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjFubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjCubj)”}”(hhh]”j)”}”(hhh]”hJ)”}”(hŒHY Lin”h]”hŒHY Lin”…””}”(hjlhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKIhjiubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjfubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjCubj)”}”(hhh]”j)”}”(hhh]”hJ)”}”(hŒJheng-Jia Huang”h]”hŒJheng-Jia Huang”…””}”(hjŒhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKKhj‰ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhj†ubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjCubj)”}”(hhh]”j)”}”(hhh]”hJ)”}”(hŒ Lin Gao-Yu”h]”hŒ Lin Gao-Yu”…””}”(hjŦhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKMhjŠubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjĻubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjCubj)”}”(hhh]”j)”}”(hhh]”hJ)”}”(hŒ Pippen Wang”h]”hŒ Pippen Wang”…””}”(hjĖhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hIhh,hKOhjÉubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjÆubah}”(h!]”h#]”h%]”h']”h)]”uh+jhjCubeh}”(h!]”h#]”h%]”h']”h)]”uh+jBhj ubeh}”(h!]”h#]”h%]”h']”h)]”Œcols”Kuh+háhj ubah}”(h!]”h#]”h%]”h']”h)]”uh+hÜhjëhhhh,hNubeh}”(h!]”Œ consultants”ah#]”h%]”Œ consultants”ah']”h)]”uh+h hh hhhh,hK?ubeh}”(h!]”Œ contribution”ah#]”h%]”Œ contribution”ah']”h)]”uh+h hhhhhh,hKubah}”(h!]”h#]”h%]”h']”h)]”Œsource”h,uh+hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”jŒfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”j+Œerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h,Œ _destination”NŒ _config_files”]”Œfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(jjhČhÅjßjÜjčjåjūjûuŒ nametypes”}”(j‰hȉj߉jč‰jū‰uh!}”(jh hÅh-jÜhËjåjâjûjëuŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nhhub.quark-engine-23.4.1/docs/build/doctrees/dev.doctree000066400000000000000000000352731442215066700221740ustar00rootroot00000000000000€•°:Œsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”Œdocutils.nodes”Œsection”“”)”}”(hhh]”(h Œtitle”“”)”}”(hŒDevelopment Notes”h]”h ŒText”“”ŒDevelopment Notes”…””}”(Œparent”hŒ _document”hŒsource”NŒline”NubaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”uŒtagname”hhh hhhŒ>/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/dev.rst”hKubh )”}”(hhh]”(h)”}”(hŒGit Branching Model”h]”hŒGit Branching Model”…””}”(hh0hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhh-hhhh,hKubh Œ paragraph”“”)”}”(hŒHQuark-engine source code is available in our `official Git repository`_.”h]”(hŒ-Quark-engine source code is available in our ”…””}”(hh@hhhNhNubh Œ reference”“”)”}”(hŒ`official Git repository`_”h]”hŒofficial Git repository”…””}”(hhJhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œofficial Git repository”Œrefuri”Œ,https://github.com/quark-engine/quark-engine”uh+hHhh@Œresolved”KubhŒ.”…””}”(hh@hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhh-hhubh Œtarget”“”)”}”(hŒK.. _`official Git repository`: https://github.com/quark-engine/quark-engine”h]”h}”(h!]”Œofficial-git-repository”ah#]”h%]”Œofficial git repository”ah']”h)]”hZh[uh+hghK hh-hhhh,Œ referenced”Kubh?)”}”(hŒWe have 6 branches.”h]”hŒWe have 6 branches.”…””}”(hhvhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK hh-hhubh Œ block_quote”“”)”}”(hXŲ* **master**: - This is the stable and releasing branch. * **dev**: - This is where we commit our beta version. - When all the features are fully tested, it will be merged to ``master`` branch. * **feature**: - This is where we develop new features for the project. - Once it's done, it will be merged to ``dev`` branch. * **testing**: - This is where we write tests for the codebase and new feature. - When it's done, it will be merged to ``dev`` branch. * **hotfix**: - This branch is used to fix bugs. - Will be merged to ``dev`` and ``master`` * **doc**: - This is where we update our documentation. - Just like hotfix branch, will be merged to ``dev`` and ``master``. ”h]”h Œ bullet_list”“”)”}”(hhh]”(h Œ list_item”“”)”}”(hŒ:**master**: - This is the stable and releasing branch. ”h]”(h?)”}”(hŒ **master**:”h]”(h Œstrong”“”)”}”(hŒ **master**”h]”hŒmaster”…””}”(hh›hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h™hh•ubhŒ:”…””}”(hh•hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhh‘ubh…)”}”(hŒ+- This is the stable and releasing branch. ”h]”h‹)”}”(hhh]”h)”}”(hŒ)This is the stable and releasing branch. ”h]”h?)”}”(hŒ(This is the stable and releasing branch.”h]”hŒ(This is the stable and releasing branch.”…””}”(hhžhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhhēubah}”(h!]”h#]”h%]”h']”h)]”uh+hhhˇubah}”(h!]”h#]”h%]”h']”h)]”Œbullet”Œ-”uh+hŠhh,hKhhŗubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hKhh‘ubeh}”(h!]”h#]”h%]”h']”h)]”uh+hhhŒubh)”}”(hŒŒ**dev**: - This is where we commit our beta version. - When all the features are fully tested, it will be merged to ``master`` branch. ”h]”(h?)”}”(hŒ**dev**:”h]”(hš)”}”(hŒ**dev**”h]”hŒdev”…””}”(hhîhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h™hhęubhŒ:”…””}”(hhęhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhhæubh…)”}”(hŒ~- This is where we commit our beta version. - When all the features are fully tested, it will be merged to ``master`` branch. ”h]”h‹)”}”(hhh]”(h)”}”(hŒ)This is where we commit our beta version.”h]”h?)”}”(hjh]”hŒ)This is where we commit our beta version.”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhj ubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj ubh)”}”(hŒPWhen all the features are fully tested, it will be merged to ``master`` branch. ”h]”h?)”}”(hŒOWhen all the features are fully tested, it will be merged to ``master`` branch.”h]”(hŒ=When all the features are fully tested, it will be merged to ”…””}”(hj(hhhNhNubh Œliteral”“”)”}”(hŒ ``master``”h]”hŒmaster”…””}”(hj2hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hj(ubhŒ branch.”…””}”(hj(hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhj$ubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj ubeh}”(h!]”h#]”h%]”h']”h)]”hØhŲuh+hŠhh,hKhjubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hKhhæubeh}”(h!]”h#]”h%]”h']”h)]”uh+hhhŒubh)”}”(hŒƒ**feature**: - This is where we develop new features for the project. - Once it's done, it will be merged to ``dev`` branch. ”h]”(h?)”}”(hŒ **feature**:”h]”(hš)”}”(hŒ **feature**”h]”hŒfeature”…””}”(hjjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h™hjfubhŒ:”…””}”(hjfhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhjbubh…)”}”(hŒq- This is where we develop new features for the project. - Once it's done, it will be merged to ``dev`` branch. ”h]”h‹)”}”(hhh]”(h)”}”(hŒ6This is where we develop new features for the project.”h]”h?)”}”(hj‹h]”hŒ6This is where we develop new features for the project.”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhj‰ubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj†ubh)”}”(hŒ6Once it's done, it will be merged to ``dev`` branch. ”h]”h?)”}”(hŒ4Once it's done, it will be merged to ``dev`` branch.”h]”(hŒ'Once it’s done, it will be merged to ”…””}”(hj¤hhhNhNubj1)”}”(hŒ``dev``”h]”hŒdev”…””}”(hjŦhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hj¤ubhŒ branch.”…””}”(hj¤hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhj ubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj†ubeh}”(h!]”h#]”h%]”h']”h)]”hØhŲuh+hŠhh,hKhj‚ubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hKhjbubeh}”(h!]”h#]”h%]”h']”h)]”uh+hhhŒubh)”}”(hŒŠ**testing**: - This is where we write tests for the codebase and new feature. - When it's done, it will be merged to ``dev`` branch. ”h]”(h?)”}”(hŒ **testing**:”h]”(hš)”}”(hŒ **testing**”h]”hŒtesting”…””}”(hjähhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h™hjāubhŒ:”…””}”(hjāhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhjÜubh…)”}”(hŒx- This is where we write tests for the codebase and new feature. - When it's done, it will be merged to ``dev`` branch. ”h]”h‹)”}”(hhh]”(h)”}”(hŒ>This is where we write tests for the codebase and new feature.”h]”h?)”}”(hjh]”hŒ>This is where we write tests for the codebase and new feature.”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hKhjubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjubh)”}”(hŒ5When it's done, it will be merged to ``dev`` branch. ”h]”h?)”}”(hŒ4When it's done, it will be merged to ``dev`` branch.”h]”(hŒ'When it’s done, it will be merged to ”…””}”(hjhhhNhNubj1)”}”(hŒ``dev``”h]”hŒdev”…””}”(hj&hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hjubhŒ branch.”…””}”(hjhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK hjubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjubeh}”(h!]”h#]”h%]”h']”h)]”hØhŲuh+hŠhh,hKhjüubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hKhjÜubeh}”(h!]”h#]”h%]”h']”h)]”uh+hhhŒubh)”}”(hŒ_**hotfix**: - This branch is used to fix bugs. - Will be merged to ``dev`` and ``master`` ”h]”(h?)”}”(hŒ **hotfix**:”h]”(hš)”}”(hŒ **hotfix**”h]”hŒhotfix”…””}”(hj^hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h™hjZubhŒ:”…””}”(hjZhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK"hjVubh…)”}”(hŒN- This branch is used to fix bugs. - Will be merged to ``dev`` and ``master`` ”h]”h‹)”}”(hhh]”(h)”}”(hŒ This branch is used to fix bugs.”h]”h?)”}”(hjh]”hŒ This branch is used to fix bugs.”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK$hj}ubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjzubh)”}”(hŒ)Will be merged to ``dev`` and ``master`` ”h]”h?)”}”(hŒ(Will be merged to ``dev`` and ``master``”h]”(hŒWill be merged to ”…””}”(hj˜hhhNhNubj1)”}”(hŒ``dev``”h]”hŒdev”…””}”(hj hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hj˜ubhŒ and ”…””}”(hj˜hhhNhNubj1)”}”(hŒ ``master``”h]”hŒmaster”…””}”(hj˛hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hj˜ubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK%hj”ubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjzubeh}”(h!]”h#]”h%]”h']”h)]”hØhŲuh+hŠhh,hK$hjvubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hK$hjVubeh}”(h!]”h#]”h%]”h']”h)]”uh+hhhŒubh)”}”(hŒ€**doc**: - This is where we update our documentation. - Just like hotfix branch, will be merged to ``dev`` and ``master``. ”h]”(h?)”}”(hŒ**doc**:”h]”(hš)”}”(hŒ**doc**”h]”hŒdoc”…””}”(hjæhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h™hjâubhŒ:”…””}”(hjâhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK'hjŪubh…)”}”(hŒr- This is where we update our documentation. - Just like hotfix branch, will be merged to ``dev`` and ``master``. ”h]”h‹)”}”(hhh]”(h)”}”(hŒ*This is where we update our documentation.”h]”h?)”}”(hjh]”hŒ*This is where we update our documentation.”…””}”(hj hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK)hjubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjubh)”}”(hŒCJust like hotfix branch, will be merged to ``dev`` and ``master``. ”h]”h?)”}”(hŒBJust like hotfix branch, will be merged to ``dev`` and ``master``.”h]”(hŒ+Just like hotfix branch, will be merged to ”…””}”(hj hhhNhNubj1)”}”(hŒ``dev``”h]”hŒdev”…””}”(hj(hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hj ubhŒ and ”…””}”(hj hhhNhNubj1)”}”(hŒ ``master``”h]”hŒmaster”…””}”(hj:hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hj ubhŒ.”…””}”(hj hhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK*hjubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjubeh}”(h!]”h#]”h%]”h']”h)]”hØhŲuh+hŠhh,hK)hjūubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hK)hjŪubeh}”(h!]”h#]”h%]”h']”h)]”uh+hhhŒubeh}”(h!]”h#]”h%]”h']”h)]”h،*”uh+hŠhh,hKhh†ubah}”(h!]”h#]”h%]”h']”h)]”uh+h„hh,hKhh-hhubeh}”(h!]”Œgit-branching-model”ah#]”h%]”Œgit branching model”ah']”h)]”uh+h hh hhhh,hKubh )”}”(hhh]”(h)”}”(hŒRelease Versioning”h]”hŒRelease Versioning”…””}”(hj‚hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjhhhh,hK-ubh?)”}”(hŒšOur versioning logic is quite simple. We use the year and month of the release as a version number. ``v19.10`` means we release this version in Oct. 2019.”h]”(hŒdOur versioning logic is quite simple. We use the year and month of the release as a version number. ”…””}”(hjhhhNhNubj1)”}”(hŒ ``v19.10``”h]”hŒv19.10”…””}”(hj˜hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+j0hjubhŒ, means we release this version in Oct. 2019.”…””}”(hjhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK/hjhhubeh}”(h!]”Œrelease-versioning”ah#]”h%]”Œrelease versioning”ah']”h)]”uh+h hh hhhh,hK-ubh )”}”(hhh]”(h)”}”(hŒTicketing System”h]”hŒTicketing System”…””}”(hjģhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhj¸hhhh,hK3ubh?)”}”(hŒTTo submit reports or feature requests, please use GitHub's `Issue`_ tracking system.”h]”(hŒ=To submit reports or feature requests, please use GitHub’s ”…””}”(hjÉhhhNhNubhI)”}”(hŒ`Issue`_”h]”hŒIssue”…””}”(hjŅhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”ŒIssue”hZŒ3https://github.com/quark-engine/quark-engine/issues”uh+hHhjÉh\KubhŒ tracking system.”…””}”(hjÉhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK5hj¸hhubhh)”}”(hŒ@.. _`Issue`: https://github.com/quark-engine/quark-engine/issues”h]”h}”(h!]”Œissue”ah#]”h%]”Œissue”ah']”h)]”hZjáuh+hghK7hj¸hhhh,huKubeh}”(h!]”Œticketing-system”ah#]”h%]”Œticketing system”ah']”h)]”uh+h hh hhhh,hK3ubh )”}”(hhh]”(h)”}”(hŒ Contribute”h]”hŒ Contribute”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+hhjhhhh,hK:ubh?)”}”(hŒ•To submit your patch, just create a Pull Request from your GitHub fork. If you don't know how to create a Pull Request take a look to `GitHub help`_.”h]”(hŒˆTo submit your patch, just create a Pull Request from your GitHub fork. If you don’t know how to create a Pull Request take a look to ”…””}”(hjhhhNhNubhI)”}”(hŒ`GitHub help`_”h]”hŒ GitHub help”…””}”(hjhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”Œname”Œ GitHub help”hZŒ5https://help.github.com/articles/using-pull-requests/”uh+hHhjh\KubhŒ.”…””}”(hjhhhNhNubeh}”(h!]”h#]”h%]”h']”h)]”uh+h>hh,hK/home/zin/stuffs/lab/quark_pg/quark-engine/docs/build/doctrees”Œsrcdir”Œ6/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source”Œconfig”Œ sphinx.config”ŒConfig”“”)”}”(Œ overrides”}”Œsetup”NŒ extensions”]”(Œsphinx.ext.autodoc”Œsphinx.ext.githubpages”eŒproject”Œ quark-engine”Œ copyright”ŒQuark-Engine Team”Œauthor”Œ\KunYu Chen, JunWei Song, YuShiang Dang, ShengFone Lu, AnWei Kung, ShunTe Lin, Vivek, Krishna”Œrelease”Œv22.10.3”Œtemplates_path”]”Œ _templates”aŒexclude_patterns”]”Œ html_theme”Œsphinx_rtd_theme”Œ master_doc”Œindex”Œ html_logo”Œquark-logo.png”Œepub_css_files”]”Œhtml_css_files”]”Œ html_js_files”]”Œ source_suffix”Œ collections”Œ OrderedDict”“”)R”Œ.rst”Œrestructuredtext”sŒ numfig_format”}”(Œsection”Œ Section %s”Œfigure”ŒFig. %s”Œtable”ŒTable %s”Œ code-block”Œ Listing %s”uŒhtml_permalinks_icon”Œīƒ”Œautodoc_inherit_docstrings”ˆŒvalues”}”(hhŒenv”N‡”hhhFN‡”Œproject_copyright”Œ”Œhtml”N‡”hhhKN‡”Œversion”hJhFN‡”hhhFN‡”Œtoday”hJhFN‡”Œ today_fmt”NhFN‡”Œlanguage”Œen”hFN‡”Œ locale_dirs”]”Œlocales”ahFN‡”Œfigure_language_filename”Œ{root}.{language}{ext}”hFN‡”Œ gettext_allow_fuzzy_translations”‰Œgettext”N‡”h&h'hFN‡”Œroot_doc”h'hFN‡”h0h4hFN‡”Œsource_encoding”Œ utf-8-sig”hFN‡”h"h#hFN‡”Œinclude_patterns”]”Œ**”ahFN‡”Œ default_role”NhFN‡”Œadd_function_parentheses”ˆhFN‡”Œadd_module_names”ˆhFN‡”Œtoc_object_entries”ˆhFN‡”Œtoc_object_entries_show_parents”Œdomain”hFN‡”Œtrim_footnote_reference_space”‰hFN‡”Œ show_authors”‰hFN‡”Œpygments_style”NhKN‡”Œhighlight_language”Œdefault”hFN‡”Œhighlight_options”}”hFN‡”hh hKN‡”Œtemplate_bridge”NhKN‡”Œ keep_warnings”‰hFN‡”Œsuppress_warnings”]”hFN‡”Œmodindex_common_prefix”]”hKN‡”Œ rst_epilog”NhFN‡”Œ rst_prolog”NhFN‡”Œtrim_doctest_flags”ˆhFN‡”Œprimary_domain”Œpy”hFN‡”Œ needs_sphinx”NNN‡”Œneeds_extensions”}”NN‡”Œ manpages_url”NhFN‡”Œnitpicky”‰NN‡”Œnitpick_ignore”]”NN‡”Œnitpick_ignore_regex”]”NN‡”Œnumfig”‰hFN‡”Œnumfig_secnum_depth”KhFN‡”h7h8hFN‡”Œmath_number_all”‰hFN‡”Œmath_eqref_format”NhFN‡”Œ math_numfig”ˆhFN‡”Œ tls_verify”ˆhFN‡”Œ tls_cacerts”NhFN‡”Œ user_agent”NhFN‡”Œ smartquotes”ˆhFN‡”Œsmartquotes_action”ŒqDe”hFN‡”Œsmartquotes_excludes”}”(Œ languages”]”Œja”aŒbuilders”]”(Œman”Œtext”euhFN‡”Œoption_emphasise_placeholders”‰hFN‡”Œ epub_basename”hhJN‡”Œ epub_version”G@Œepub”N‡”Œ epub_theme”hÍhÍN‡”Œepub_theme_options”}”hÍN‡”Œ epub_title”hhÍN‡”Œ epub_author”hhÍN‡”Œ epub_language”hVhÍN‡”Œepub_publisher”hhÍN‡”Œepub_copyright”hhÍN‡”Œepub_identifier”Œunknown”hÍN‡”Œ epub_scheme”hßhÍN‡”Œepub_uid”hßhFN‡”Œ epub_cover”)hFN‡”Œ epub_guide”)hFN‡”Œepub_pre_files”]”hFN‡”Œepub_post_files”]”hFN‡”h*h+hÍN‡”Œepub_exclude_files”]”hFN‡”Œ epub_tocdepth”KhFN‡”Œ epub_tocdup”ˆhFN‡”Œ epub_tocscope”h€hFN‡”Œepub_fix_images”‰hFN‡”Œepub_max_image_width”KhFN‡”Œepub_show_urls”Œinline”hÍN‡”Œepub_use_index”ˆhÍN‡”Œepub_description”hßhÍN‡”Œepub_contributor”hßhÍN‡”Œepub_writing_mode”Œ horizontal”hÍN‡”h$h%hKN‡”Œhtml_theme_path”]”hKN‡”Œhtml_theme_options”}”hKN‡”Œ html_title”Œ#quark-engine v22.10.3 documentation”hKN‡”Œhtml_short_title”Œ#quark-engine v22.10.3 documentation”hKN‡”Œ html_style”NhKN‡”h(h)hKN‡”Œ html_favicon”NhKN‡”h,h-hKN‡”h.h/hKN‡”Œhtml_static_path”]”hKN‡”Œhtml_extra_path”]”hKN‡”Œhtml_last_updated_fmt”NhKN‡”Œ html_sidebars”}”hKN‡”Œhtml_additional_pages”}”hKN‡”Œhtml_domain_indices”ˆhKN‡”Œhtml_add_permalinks”Œsphinx.builders.html”Œ_stable_repr_object”“”)”hKN‡”Œhtml_permalinks”ˆhKN‡”hAhBhKN‡”Œhtml_use_index”ˆhKN‡”Œhtml_split_index”‰hKN‡”Œhtml_copy_source”ˆhKN‡”Œhtml_show_sourcelink”ˆhKN‡”Œhtml_sourcelink_suffix”Œ.txt”hKN‡”Œhtml_use_opensearch”hJhKN‡”Œhtml_file_suffix”NhKN‡”Œhtml_link_suffix”NhKN‡”Œhtml_show_copyright”ˆhKN‡”Œhtml_show_search_summary”ˆhKN‡”Œhtml_show_sphinx”ˆhKN‡”Œ html_context”}”hKN‡”Œhtml_output_encoding”Œutf-8”hKN‡”Œhtml_compact_lists”ˆhKN‡”Œhtml_secnumber_suffix”Œ. ”hKN‡”Œhtml_search_language”NhKN‡”Œhtml_search_options”}”hKN‡”Œhtml_search_scorer”hJNN‡”Œhtml_scaled_image_link”ˆhKN‡”Œ html_baseurl”hJhKN‡”Œhtml_codeblock_linenos_style”hūhKN‡”Œhtml_math_renderer”NhFN‡”Œ html4_writer”‰hKN‡”Œ mathjax_path”Œ;https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-mml-chtml.js”hKN‡”Œmathjax_options”}”hKN‡”Œmathjax_inline”]”(Œ\(”Œ\)”ehKN‡”Œmathjax_display”]”(Œ\[”Œ\]”ehKN‡”Œmathjax_config”NhKN‡”Œmathjax2_config”NhKN‡”Œmathjax3_config”NhKN‡”Œgettext_compact”ˆh`N‡”Œgettext_location”ˆh`N‡”Œ gettext_uuid”‰h`N‡”Œgettext_auto_build”ˆhFN‡”Œgettext_additional_targets”]”hFN‡”Œgettext_last_translator”ŒFULL NAME ”h`N‡”Œgettext_language_team”ŒLANGUAGE ”h`N‡”Œ latex_engine”Œpdflatex”hJN‡”Œlatex_documents”]”(h'Œquark-engine.tex”Œ quark-engine”Œ\KunYu Chen, JunWei Song, YuShiang Dang, ShengFone Lu, AnWei Kung, ShunTe Lin, Vivek, Krishna”Œmanual”t”ahJN‡”Œ latex_logo”NhJN‡”Œlatex_appendices”]”hJN‡”Œlatex_use_latex_multicolumn”‰hJN‡”Œlatex_use_xindy”‰hJN‡”Œlatex_toplevel_sectioning”NhJN‡”Œlatex_domain_indices”ˆhJN‡”Œlatex_show_urls”Œno”hJN‡”Œlatex_show_pagerefs”‰hJN‡”Œlatex_elements”}”hJN‡”Œlatex_additional_files”]”hJN‡”Œlatex_table_style”]”hJN‡”Œ latex_theme”j˜hJN‡”Œlatex_theme_options”}”hJN‡”Œlatex_theme_path”]”hJN‡”Œlatex_docclass”}”hJN‡”Œlinkcheck_ignore”]”hJN‡”Œlinkcheck_exclude_documents”]”hJN‡”Œlinkcheck_allowed_redirects”}”hJN‡”Œlinkcheck_auth”]”hJN‡”Œlinkcheck_request_headers”}”hJN‡”Œlinkcheck_retries”KhJN‡”Œlinkcheck_timeout”NhJN‡”Œlinkcheck_workers”KhJN‡”Œlinkcheck_anchors”ˆhJN‡”Œlinkcheck_anchors_ignore”]”Œ^!”ahJN‡”Œlinkcheck_rate_limit_timeout”G@rĀhJN‡”Œ man_pages”]”(h'Œ quark-engine”Œquark-engine v22.10.3”]”haKt”ahJN‡”Œ man_show_urls”‰hJN‡”Œman_make_section_directory”‰hJN‡”Œsinglehtml_sidebars”j&hKN‡”Œtexinfo_documents”]”(h'Œ quark-engine”hhjíŒOne line description of project”Œ Miscellaneous”t”ahJN‡”Œtexinfo_appendices”]”hJN‡”Œtexinfo_elements”}”hJN‡”Œtexinfo_domain_indices”ˆhJN‡”Œtexinfo_show_urls”Œfootnote”hJN‡”Œtexinfo_no_detailmenu”‰hJN‡”Œtexinfo_cross_references”ˆhJN‡”Œtext_sectionchars”Œ*=-~"+`”hFN‡”Œ text_newlines”Œunix”hFN‡”Œtext_add_secnumbers”ˆhFN‡”Œtext_secnumber_suffix”Œ. ”hFN‡”Œ xml_pretty”ˆhFN‡”Œc_id_attributes”]”hFN‡”Œc_paren_attributes”]”hFN‡”Œc_extra_keywords”]”(Œalignas”Œalignof”Œbool”Œcomplex”Œ imaginary”Œnoreturn”Œ static_assert”Œ thread_local”ehFN‡”Œc_allow_pre_v3”‰hFN‡”Œc_warn_on_allowed_pre_v3”ˆhFN‡”Œcpp_index_common_prefix”]”hFN‡”Œcpp_id_attributes”]”hFN‡”Œcpp_paren_attributes”]”hFN‡”Œcpp_debug_lookup”‰hJN‡”Œcpp_debug_show_tree”‰hJN‡”Œstrip_signature_backslash”‰hFN‡”Œ!python_use_unqualified_type_names”‰hFN‡”Œapplehelp_bundle_name”hŒ applehelp”N‡”Œapplehelp_bundle_id”Nj5N‡”Œapplehelp_dev_region”Œen-us”j5N‡”Œapplehelp_bundle_version”Œ1”j5N‡”Œapplehelp_icon”Nj5N‡”Œapplehelp_kb_product”Œquark-engine-v22.10.3”j5N‡”Œapplehelp_kb_url”Nj5N‡”Œapplehelp_remote_url”Nj5N‡”Œapplehelp_index_anchors”‰j5N‡”Œapplehelp_min_term_length”Nj5N‡”Œapplehelp_stopwords”hVj5N‡”Œapplehelp_locale”hVj5N‡”Œapplehelp_title”Œquark-engine Help”j5N‡”Œapplehelp_codesign_identity”Nj5N‡”Œapplehelp_codesign_flags”]”j5N‡”Œapplehelp_indexer_path”Œ/usr/bin/hiutil”j5N‡”Œapplehelp_codesign_path”Œ/usr/bin/codesign”j5N‡”Œ applehelp_disable_external_tools”‰j5N‡”Œdevhelp_basename”hŒdevhelp”N‡”Œhtmlhelp_basename”Œquark-enginedoc”hJN‡”Œhtmlhelp_file_suffix”NhKN‡”Œhtmlhelp_link_suffix”NhKN‡”Œqthelp_basename”hhKN‡”Œqthelp_namespace”NhKN‡”Œ qthelp_theme”Œnonav”hKN‡”Œqthelp_theme_options”}”hKN‡”Œautoclass_content”Œclass”hFN‡”Œautodoc_member_order”Œ alphabetical”hFN‡”Œautodoc_class_signature”Œmixed”hFN‡”Œautodoc_default_options”}”hFN‡”Œautodoc_docstring_signature”ˆhFN‡”Œautodoc_mock_imports”]”hFN‡”Œautodoc_typehints”Œ signature”hFN‡”Œ$autodoc_typehints_description_target”Œall”hFN‡”Œautodoc_type_aliases”}”hFN‡”Œautodoc_typehints_format”Œshort”hFN‡”Œautodoc_warningiserror”ˆhFN‡”hCˆhFN‡”Œautodoc_preserve_defaults”‰hFN‡”uubŒ config_status”KŒconfig_status_extra”hJŒevents”NhŒsphinx.project”ŒProject”“”)”}”(hh h0h4Œdocnames””(Œtesting”Œfaq”Œ integration”Œ dev_index”Œdoc”Œ install_index”Œquark_inside_objects”Œdev”Œ coding_style”Œquark.core.struct”Œ organization”Œquark.core.axmlreader”Œmodules”Œ contribution”Œquark.forensic”Œ quark.script”Œrule_generation”Œquark.evaluator”Œquark”Œquark.webreport”Œquark_inside_workflow”Œ quark_script”Œquark.core.interface”Œ quark.utils”Œ quark_reports”Œquark.script.frida”Œindex”Œ quark.core”Œquark_mit_program”Œquark_inside_index”Œinstall”Œquark_inside_overview”ŒaddRules”ubhN}”(Œsphinx.domains.c”KŒsphinx.domains.changeset”KŒsphinx.domains.citation”KŒsphinx.domains.cpp”KŒsphinx.domains.index”KŒsphinx.domains.javascript”KŒsphinx.domains.math”KŒsphinx.domains.python”KŒsphinx.domains.rst”KŒsphinx.domains.std”KŒsphinx”K9uŒversioning_condition”‰Œversioning_compare”‰Œdomains”}”Œsettings”}”(Œauto_id_prefix”Œid”Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒ pep_base_url”Œhttps://peps.python.org/”Œpep_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œrfc_references”NŒinput_encoding”hgŒdoctitle_xform”‰Œsectsubtitle_xform”‰Œsection_self_link”‰Œ halt_level”KŒfile_insertion_enabled”ˆŒsmartquotes_locales”]”hFhhy‰Œ language_code”hVŒ smart_quotes”ˆuŒall_docs”}”(jĀGAØčšåžû6j¨GAØčšå 5Ĩj­GAØčšåĄ\¯j§GAØčšåĸœjŖGAØčšåĸ՞j¤GAØčšåŖ)ƒjĄGAØčšåŖäRjēGAØčšå¤‡ųjžGAØčšå¤Á„jĨGAØčšå¤÷ajĸGAØčšåĨŊãjŦGAØčšåĨôƒjĒGAØčšå§,Oj˛GAØčšåöŨ°jģGAØčšæ@ŠOjĢGAØčšæOÄjjļGAØčšæVR jŠGAØčšæ`ĄvjąGAØčšærįhjŽGAØčšæyxNj¯GAØčšæĸķujšGAØčšæŦąljˇGAØčšæģˆũjŗGAØčšæŋü*jŊGAØčšæĀyšjĻGAØčšæĘRjŋGAØčšæËæj´GAØčšæĖ\jŧGAØčšæÍ<]j¸GAØčšæ΅+jĩGAØčšæŲrĒj°GAØčšæÚĒj GAØčšæÛ=vuŒ dependencies”h1Œ defaultdict”“”Œbuiltins”Œset”“”…”R”(j˛”(Œh../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/tqdm/std.py”Œ!../../quark/webreport/generate.py”Œ../../quark/utils/pprint.py”Œ../../quark/config.py”Œ../../quark/utils/colors.py”Œ../../quark/report.py”Œ../../quark/freshquark.py”Œ../../quark/logo.py”Œ../../quark/radiocontrast.py”Œ../../quark/cli.py”Œ../../quark/__init__.py”Œ../../quark/utils/graph.py”Œ../../quark/rulegeneration.py”Œ../../quark/core/quark.py”Œ%../../quark/core/struct/ruleobject.py”Œ../../quark/utils/weight.py”Œ/usr/lib/python3.8/pathlib.py”Œ!../../quark/core/parallelquark.py”Œ../../quark/utils/tools.py”jģ”(Œ'../../quark/core/struct/methodobject.py”Œ-/usr/lib/python3.8/multiprocessing/context.py”Œ../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/androguard/core/analysis/analysis.py”Œ../../quark/utils/pprint.py”Œ*/usr/lib/python3.8/collections/__init__.py”Œ+/usr/lib/python3.8/xml/etree/ElementTree.py”Œƒ../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/androguard/core/bytecodes/dvm_types.py”Œ'../../quark/core/axmlreader/__init__.py”Œ../../quark/core/apkinfo.py”Œ*/usr/lib/python3.8/multiprocessing/pool.py”Œ)../../quark/core/interface/baseapkinfo.py”Œ../../quark/core/analysis.py”Œ../../quark/utils/colors.py”Œo../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/androguard/misc.py”Œ../../quark/evaluator/pyeval.py”Œ../../quark/utils/graph.py”Œ)../../quark/core/struct/bytecodeobject.py”Œw../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/prettytable/prettytable.py”Œ../../quark/core/quark.py”Œ../../quark/utils/weight.py”Œ../../quark/utils/output.py”Œ/usr/lib/python3.8/os.py”Œ!../../quark/core/parallelquark.py”Œ../../quark/core/__init__.py”Œ../../quark/utils/tools.py”Œ../../quark/core/rzapkinfo.py”jĢ”(Œ*/usr/lib/python3.8/collections/__init__.py”Œ+/usr/lib/python3.8/xml/etree/ElementTree.py”Œ'../../quark/core/axmlreader/__init__.py”jļ”(Œ+/usr/lib/python3.8/xml/etree/ElementTree.py”Œ&../../quark/core/interface/__init__.py”Œ'../../quark/core/struct/methodobject.py”Œ/usr/lib/python3.8/os.py”Œ)../../quark/core/interface/baseapkinfo.py”Œ)../../quark/core/struct/bytecodeobject.py”Œ/usr/lib/python3.8/abc.py”jŠ”(Œ#../../quark/core/struct/__init__.py”Œ&../../quark/core/struct/tableobject.py”Œ)../../quark/core/struct/registerobject.py”Œ'../../quark/core/struct/methodobject.py”Œ)../../quark/core/struct/bytecodeobject.py”Œ!/usr/lib/python3.8/dataclasses.py”Œ../../quark/utils/tools.py”Œ%../../quark/core/struct/ruleobject.py”ją”(Œ/usr/lib/python3.8/datetime.py”Œ)../../quark/core/struct/registerobject.py”Œ!../../quark/evaluator/__init__.py”Œ../../quark/evaluator/pyeval.py”Œ&../../quark/core/struct/tableobject.py”jŽ”(Œ ../../quark/forensic/__init__.py”Œ../../quark/utils/regex.py”Œ../../quark/core/apkinfo.py”Œh../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/tqdm/std.py”Œ ../../quark/forensic/forensic.py”Œ../../quark/utils/colors.py”Œ../../quark/core/rzapkinfo.py”Œ#../../quark/forensic/vt_analysis.py”j¯”(Œ/usr/lib/python3.8/posixpath.py”Œ+/usr/lib/python3.8/xml/etree/ElementTree.py”Œ../../quark/script/ciphey.py”Œ!/usr/lib/python3.8/genericpath.py”Œ../../quark/script/__init__.py”Œm../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/ciphey/ciphey.py”Œ../../quark/script/utils.py”Œ'../../quark/core/struct/methodobject.py”Œ/usr/lib/python3.8/os.py”Œt../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/ciphey/iface/_config.py”Œ../../quark/core/analysis.py”Œ../../quark/core/quark.py”Œ../../quark/evaluator/pyeval.py”Œ../../quark/utils/tools.py”Œ%../../quark/core/struct/ruleobject.py”Œ../../quark/script/objection.py”jš”(Œj../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/frida/core.py”Œ!/usr/lib/python3.8/dataclasses.py”Œ$../../quark/script/frida/__init__.py”jˇ”(Œ../../quark/utils/weight.py”Œ../../quark/utils/graph.py”Œ../../quark/utils/output.py”Œ../../quark/utils/regex.py”Œ../../quark/utils/__init__.py”Œ€../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/prompt_toolkit/shortcuts/dialogs.py”Œ../../quark/utils/colors.py”Œ../../quark/utils/pprint.py”Œw../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/prettytable/prettytable.py”Œ*/usr/lib/python3.8/collections/__init__.py”Œo../../../../../../.local/share/virtualenvs/quark-engine-YjsYo19j/lib/python3.8/site-packages/graphviz/graphs.py”Œ../../quark/utils/tools.py”Œ/usr/lib/python3.8/enum.py”jŗ”(Œ!../../quark/webreport/generate.py”Œ!../../quark/webreport/__init__.py”uŒincluded”jíjđ…”R”Œ reread_always””Œmetadata”jíjîŒdict”“”…”R”Œtitles”}”(jĀŒdocutils.nodes”Œtitle”“”)”}”(Œ rawsource”hJŒchildren”]”jxŒText”“”Œ Add Rules”…””}”Œparent”j{sbaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”uŒtagname”jyubj¨jz)”}”(j}hJj~]”jŒ Coding Style”…””}”j†j”sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj­jz)”}”(j}hJj~]”jŒ Contribution”…””}”j†jĄsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj§jz)”}”(j}hJj~]”jŒDevelopment Notes”…””}”j†jŽsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŖjz)”}”(j}hJj~]”jŒ Development”…””}”j†jģsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj¤jz)”}”(j}hJj~]”jŒUpdating Documentation”…””}”j†jČsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĄjz)”}”(j}hJj~]”jŒFAQ”…””}”j†jÕsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjējz)”}”(j}hJj~]”jŒQuark-Engine Book”…””}”j†jâsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjžjz)”}”(j}hJj~]”jŒInstalling Quark-Engine”…””}”j†jīsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĨjz)”}”(j}hJj~]”jŒ Installation”…””}”j†jüsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĸjz)”}”(j}hJj~]”jŒ Integration”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŦjz)”}”(j}hJj~]”jŒquark”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĒjz)”}”(j}hJj~]”jŒ Organization”…””}”j†j#sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj˛jz)”}”(j}hJj~]”jŒ quark package”…””}”j†j0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjģjz)”}”(j}hJj~]”jŒquark.core package”…””}”j†j=sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĢjz)”}”(j}hJj~]”jŒquark.core.axmlreader package”…””}”j†jJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjļjz)”}”(j}hJj~]”jŒquark.core.interface package”…””}”j†jWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŠjz)”}”(j}hJj~]”jŒquark.core.struct package”…””}”j†jdsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjąjz)”}”(j}hJj~]”jŒquark.evaluator package”…””}”j†jqsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŽjz)”}”(j}hJj~]”jŒquark.forensic package”…””}”j†j~sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj¯jz)”}”(j}hJj~]”jŒquark.script package”…””}”j†j‹sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjšjz)”}”(j}hJj~]”jŒquark.script.frida package”…””}”j†j˜sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjˇjz)”}”(j}hJj~]”jŒquark.utils package”…””}”j†jĨsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŗjz)”}”(j}hJj~]”jŒquark.webreport package”…””}”j†j˛sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŊjz)”}”(j}hJj~]”jŒQuark-Engine Inside”…””}”j†jŋsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĻjz)”}”(j}hJj~]”jŒ!Quark-Engine Objects Introduction”…””}”j†jĖsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŋjz)”}”(j}hJj~]”jŒQuark-Engine Project Overview”…””}”j†jŲsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj´jz)”}”(j}hJj~]”jŒQuark-Engine Workflow”…””}”j†jæsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjŧjz)”}”(j}hJj~]”jŒQuark MIT Program”…””}”j†jķsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj¸jz)”}”(j}hJj~]”jŒ Quark Report”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubjĩjz)”}”(j}hJj~]”jŒ Quark Script”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj°jz)”}”(j}hJj~]”jŒRule Generation”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubj jz)”}”(j}hJj~]”jŒTesting Quark-Engine”…””}”j†j'sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jyubuŒ longtitles”}”(jĀj{j¨j”j­jĄj§jŽjŖjģj¤jČjĄjÕjējâjžjījĨjüjĸj jŦjjĒj#j˛j0jģj=jĢjJjļjWjŠjdjąjqjŽj~j¯j‹jšj˜jˇjĨjŗj˛jŊjŋjĻjĖjŋjŲj´jæjŧjķj¸jjĩj j°jj j'uŒtocs”}”(jĀjxŒ bullet_list”“”)”}”(j}hJj~]”jxŒ list_item”“”)”}”(j}hJj~]”Œsphinx.addnodes”Œcompact_paragraph”“”)”}”(j}hJj~]”jxŒ reference”“”)”}”(j}hJj~]”jŒ Add Rules”…””}”j†jJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĀŒ anchorname”hJuj“jHj†jEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj¨j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Coding Style”…””}”j†jusbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”hJuj“jHj†jrubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†joubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Formatting”…””}”j†j”sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ #formatting”uj“jHj†j‘ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŽubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒFile and folder naming”…””}”j†j´sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#file-and-folder-naming”uj“jHj†jąubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŽubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒCopyright header”…””}”j†j×sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#copyright-header”uj“jHj†jÔubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŅubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Indentation”…””}”j†júsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ #indentation”uj“jHj†j÷ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jôubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒMaximum Line Length”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#maximum-line-length”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Blank Lines”…””}”j†j@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ #blank-lines”uj“jHj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒImports”…””}”j†jcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#imports”uj“jHj†j`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒStrings”…””}”j†j†sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#strings”uj“jHj†jƒubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j€ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒPrinting and Logging”…””}”j†jŠsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#printing-and-logging”uj“jHj†jĻubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŖubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŽubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j‹ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Exceptions”…””}”j†jØsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ #exceptions”uj“jHj†jÕubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŌubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒNaming”…””}”j†jøsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#naming”uj“jHj†jõubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jōubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jīubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒException handling”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#exception-handling”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jīubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŌubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j‹ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Documentation”…””}”j†jJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#documentation”uj“jHj†jGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j‹ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒAutomated testing”…””}”j†jmsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¨Œ anchorname”Œ#automated-testing”uj“jHj†jjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j‹ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†joubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jlubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj­j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Contribution”…””}”j†jĨsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j­Œ anchorname”hJuj“jHj†jĸubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŸubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Different stages of core members”…””}”j†jÄsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j­Œ anchorname”Œ!#different-stages-of-core-members”uj“jHj†jÁubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jžubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Core members”…””}”j†jįsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j­Œ anchorname”Œ #core-members”uj“jHj†jäubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jáubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒAlumni”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j­Œ anchorname”Œ#alumni”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Consultants”…””}”j†j-sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j­Œ anchorname”Œ #consultants”uj“jHj†j*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŸubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jœubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj§j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒDevelopment Notes”…””}”j†jesbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j§Œ anchorname”hJuj“jHj†jbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j_ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒGit Branching Model”…””}”j†j„sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j§Œ anchorname”Œ#git-branching-model”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j~ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j{ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRelease Versioning”…””}”j†j§sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j§Œ anchorname”Œ#release-versioning”uj“jHj†j¤ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĄubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j{ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒTicketing System”…””}”j†jĘsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j§Œ anchorname”Œ#ticketing-system”uj“jHj†jĮubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÄubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j{ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Contribute”…””}”j†jísbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j§Œ anchorname”Œ #contribute”uj“jHj†jęubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jįubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j{ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j_ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŖj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Development”…””}”j†j% sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŖŒ anchorname”hJuj“jHj†j" ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubj9)”}”(j}hJj~]”jBŒtoctree”“”)”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”jŖŒentries”]”(NŒdev”†”NŒ coding_style”†”eŒ includefiles”]”(jL jN eŒmaxdepth”J˙˙˙˙Œcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> Œsource”ŒD/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/dev_index.rst”Œline”Kj†j; ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj¤j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒUpdating Documentation”…””}”j†jy sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¤Œ anchorname”hJuj“jHj†jv ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†js ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jp ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĄj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒFAQ”…””}”j†j¤ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”hJuj“jHj†jĄ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jž ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'I have some questions. Where can I ask?”…””}”j†jà sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”Œ&#i-have-some-questions-where-can-i-ask”uj“jHj†jĀ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŊ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jē ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ7I got an error while using Quark-Engine. What can I do?”…””}”j†jæ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”Œ6#i-got-an-error-while-using-quark-engine-what-can-i-do”uj“jHj†jã ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jā ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jē ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ3Why do scores keeping the same in all the analyses?”…””}”j†j, sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”Œ3#why-do-scores-keeping-the-same-in-all-the-analyses”uj“jHj†j) ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j& ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jē ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒHow can I write a rule?”…””}”j†jO sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”Œ#how-can-i-write-a-rule”uj“jHj†jL ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jI ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jē ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒHow can I contribute my rules?”…””}”j†jr sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”Œ#how-can-i-contribute-my-rules”uj“jHj†jo ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jl ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jē ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ(Can I take part and contribute to Quark?”…””}”j†j• sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĄŒ anchorname”Œ(#can-i-take-part-and-contribute-to-quark”uj“jHj†j’ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jē ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jž ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j› ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjēj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark-Engine Book”…””}”j†jÍ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jēŒ anchorname”hJuj“jHj†jĘ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĮ ubj9)”}”(j}hJj~]”(j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”jēŒentries”]”(NŒ install_index”†”NŒ quark_script”†”NŒquark_mit_program”†”NŒ quark_reports”†”NŒaddRules”†”NŒrule_generation”†”NŒ integration”†”NŒ dev_index”†”NŒ contribution”†”NŒ organization”†”NŒdoc”†”NŒquark_inside_index”†”NŒmodules”†”NŒfaq”†”eŒ includefiles”]”(jō jô jö jø jú jü jū j j j j j j j eŒmaxdepth”KŒcaption”Œ Contents:”Œglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”Œ rawcaption”j uj“j> j[ Œ@/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/index.rst”j] Kj†jã ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒIndices and tables”…””}”j†j" sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jēŒ anchorname”Œ#indices-and-tables”uj“jHj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jã ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĮ ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÄ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjžj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒInstalling Quark-Engine”…””}”j†jZ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jžŒ anchorname”hJuj“jHj†jW ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jT ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jQ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĨj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Installation”…””}”j†j… sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĨŒ anchorname”hJuj“jHj†j‚ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubj9)”}”(j}hJj~]”j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”jĨŒentries”]”(NŒinstall”†”NŒtesting”†”eŒ includefiles”]”(jĒ jŦ eŒmaxdepth”J˙˙˙˙Œcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> j[ ŒH/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/install_index.rst”j] Kj†j› ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j| ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĸj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Integration”…””}”j†jÕ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĸŒ anchorname”hJuj“jHj†jŌ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĪ ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒFirst Step: Installation”…””}”j†jô sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĸŒ anchorname”Œ#first-step-installation”uj“jHj†jņ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jî ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ#Second Step: Code Snippet As You Go”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĸŒ anchorname”Œ##second-step-code-snippet-as-you-go”uj“jHj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒDirectory Scanning”…””}”j†j: sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĸŒ anchorname”Œ#directory-scanning”uj“jHj†j7 ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j4 ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Radiocontrast”…””}”j†j] sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĸŒ anchorname”Œ#radiocontrast”uj“jHj†jZ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jW ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĪ ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĖ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŦj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark”…””}”j†j• sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŦŒ anchorname”hJuj“jHj†j’ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubj9)”}”(j}hJj~]”j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”jŦŒentries”]”NŒquark”†”aŒ includefiles”]”jē aŒmaxdepth”KŒcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> j[ ŒB/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/modules.rst”j] Kj†jĢ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŒ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĒj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Organization”…””}”j†jã sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĒŒ anchorname”hJuj“jHj†jā ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŨ ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark triage team”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĒŒ anchorname”Œ#quark-triage-team”uj“jHj†j˙ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jü ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒResponsibilities”…””}”j†j" sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĒŒ anchorname”Œ#responsibilities”uj“jHj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒTriage process”…””}”j†jE sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĒŒ anchorname”Œ#triage-process”uj“jHj†jB ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j? ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRelease process”…””}”j†jh sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĒŒ anchorname”Œ#release-process”uj“jHj†je ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jb ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jü ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jų ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŨ ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj˛j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ quark package”…””}”j†jŦ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”hJuj“jHj†jŠ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĻ ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Subpackages”…””}”j†jË sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ #subpackages”uj“jHj†jČ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÅ ubj9)”}”(j}hJj~]”j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”j˛Œentries”]”(NŒ quark.core”†”NŒquark.evaluator”†”NŒquark.forensic”†”NŒ quark.script”†”NŒ quark.utils”†”NŒquark.webreport”†”eŒ includefiles”]”(jņ jķ jõ j÷ jų jû eŒmaxdepth”KŒcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> j[ Œ@/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/quark.rst”j] Kj†jâ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jÅ ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ #submodules”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.cli module”…””}”j†j>sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.cli”uj“jHj†j;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j8ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jxŒliteral”“”)”}”(j}hJj~]”jŒupdate_rule_buffer()”…””}”j†jcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.cli.update_rule_buffer”uj“jHj†j[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j8ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.config module”…””}”j†j™sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.config”uj“jHj†j–ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j“ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.freshquark module”…””}”j†jŧsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.freshquark”uj“jHj†jšubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jļubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ download()”…””}”j†jßsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÜubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.freshquark.download”uj“jHj†jŲubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÖubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĶubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ entry_point()”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.freshquark.entry_point”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĶubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jļubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.logo module”…””}”j†jBsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.logo”uj“jHj†j?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j<ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒlogo()”…””}”j†jesbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.logo.logo”uj“jHj†j_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j<ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.radiocontrast module”…””}”j†j›sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.radiocontrast”uj“jHj†j˜ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j•ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ RadioContrast”…””}”j†jžsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jģubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ"#quark.radiocontrast.RadioContrast”uj“jHj†j¸ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĩubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRadioContrast.generate_rule()”…””}”j†jčsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jåubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ0#quark.radiocontrast.RadioContrast.generate_rule”uj“jHj†jâubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jßubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÜubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ'RadioContrast.method_recursive_search()”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ:#quark.radiocontrast.RadioContrast.method_recursive_search”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÜubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĩubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˛ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j•ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.report module”…””}”j†jWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.report”uj“jHj†jTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jQubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒReport”…””}”j†jzsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jwubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.report.Report”uj“jHj†jtubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jqubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒReport.analysis()”…””}”j†j¤sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĄubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.report.Report.analysis”uj“jHj†jžubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j›ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˜ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒReport.get_report()”…””}”j†jŅsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÎubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#quark.report.Report.get_report”uj“jHj†jËubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jČubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˜ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jqubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jnubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jQubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.rulegeneration module”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ#module-quark.rulegeneration”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleGeneration”…””}”j†j6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ$#quark.rulegeneration.RuleGeneration”uj“jHj†j0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j-ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleGeneration.generate_rule()”…””}”j†j`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ2#quark.rulegeneration.RuleGeneration.generate_rule”uj“jHj†jZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j-ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jĸsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j˛Œ anchorname”Œ #module-quark”uj“jHj†jŸubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jœubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĻ ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŖ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjģj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core package”…””}”j†jÚsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”hJuj“jHj†j×ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÔubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Subpackages”…””}”j†jųsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ #subpackages”uj“jHj†jöubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jķubj9)”}”(j}hJj~]”j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”jģŒentries”]”(NŒquark.core.axmlreader”†”NŒquark.core.interface”†”NŒquark.core.struct”†”eŒ includefiles”]”(jj!j#eŒmaxdepth”KŒcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> j[ ŒE/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/quark.core.rst”j] Kj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jķubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†jCsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ #submodules”uj“jHj†j@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.analysis module”…””}”j†jfsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#module-quark.core.analysis”uj“jHj†jcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j`ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ QuarkAnalysis”…””}”j†j‰sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j†ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ"#quark.core.analysis.QuarkAnalysis”uj“jHj†jƒubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j€ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ&QuarkAnalysis.call_graph_analysis_list”…””}”j†jŗsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j°ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ;#quark.core.analysis.QuarkAnalysis.call_graph_analysis_list”uj“jHj†j­ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĒubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.clean_result()”…””}”j†jāsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŨubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ/#quark.core.analysis.QuarkAnalysis.clean_result”uj“jHj†jÚubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j×ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.crime_description”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ4#quark.core.analysis.QuarkAnalysis.crime_description”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.first_api”…””}”j†j:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ,#quark.core.analysis.QuarkAnalysis.first_api”uj“jHj†j4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.json_report”…””}”j†jgsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ.#quark.core.analysis.QuarkAnalysis.json_report”uj“jHj†jaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ QuarkAnalysis.label_report_table”…””}”j†j”sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‘ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ5#quark.core.analysis.QuarkAnalysis.label_report_table”uj“jHj†jŽubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‹ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.level_1_result”…””}”j†jÁsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jžubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ1#quark.core.analysis.QuarkAnalysis.level_1_result”uj“jHj†jģubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j¸ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.level_2_result”…””}”j†jîsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jëubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ1#quark.core.analysis.QuarkAnalysis.level_2_result”uj“jHj†jčubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jåubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.level_3_result”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ1#quark.core.analysis.QuarkAnalysis.level_3_result”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.level_4_result”…””}”j†jHsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ1#quark.core.analysis.QuarkAnalysis.level_4_result”uj“jHj†jBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.level_5_result”…””}”j†jusbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jrubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ1#quark.core.analysis.QuarkAnalysis.level_5_result”uj“jHj†joubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jlubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ$QuarkAnalysis.parent_wrapper_mapping”…””}”j†jĸsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŸubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ9#quark.core.analysis.QuarkAnalysis.parent_wrapper_mapping”uj“jHj†jœubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j™ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.score_sum”…””}”j†jĪsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĖubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ,#quark.core.analysis.QuarkAnalysis.score_sum”uj“jHj†jÉubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÆubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.second_api”…””}”j†jüsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jųubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.analysis.QuarkAnalysis.second_api”uj“jHj†jöubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jķubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ"QuarkAnalysis.summary_report_table”…””}”j†j)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ7#quark.core.analysis.QuarkAnalysis.summary_report_table”uj“jHj†j#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubj>)”•}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkAnalysis.weight_sum”…””}”j†jVsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.analysis.QuarkAnalysis.weight_sum”uj“jHj†jPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j§ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j€ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j}ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒinit_label_report_table()”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŒubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ,#quark.core.analysis.init_label_report_table”uj“jHj†j‰ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j†ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j}ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒinit_pretty_table()”…””}”j†jŧsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jšubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ&#quark.core.analysis.init_pretty_table”uj“jHj†jļubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŗubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j}ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j`ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.apkinfo module”…””}”j†jōsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#module-quark.core.apkinfo”uj“jHj†jīubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jėubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ AndroguardImp”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ!#quark.core.apkinfo.AndroguardImp”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.activities”…””}”j†j?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ,#quark.core.apkinfo.AndroguardImp.activities”uj“jHj†j9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.all_methods”…””}”j†jlsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.apkinfo.AndroguardImp.all_methods”uj“jHj†jfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.analysis”…””}”j†j™sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j–ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ*#quark.core.apkinfo.AndroguardImp.analysis”uj“jHj†j“ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.android_apis”…””}”j†jÆsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÃubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ.#quark.core.apkinfo.AndroguardImp.android_apis”uj“jHj†jĀubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŊubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.apk”…””}”j†jķsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jđubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ%#quark.core.apkinfo.AndroguardImp.apk”uj“jHj†jíubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jęubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.custom_methods”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ0#quark.core.apkinfo.AndroguardImp.custom_methods”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.dalvikvmformat”…””}”j†jMsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ0#quark.core.apkinfo.AndroguardImp.dalvikvmformat”uj“jHj†jGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.find_method()”…””}”j†jzsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jwubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.apkinfo.AndroguardImp.find_method”uj“jHj†jtubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jqubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ#AndroguardImp.get_method_bytecode()”…””}”j†j§sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j¤ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ5#quark.core.apkinfo.AndroguardImp.get_method_bytecode”uj“jHj†jĄubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jžubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.get_strings()”…””}”j†jÔsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŅubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.apkinfo.AndroguardImp.get_strings”uj“jHj†jÎubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jËubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ!AndroguardImp.get_wrapper_smali()”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jūubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ3#quark.core.apkinfo.AndroguardImp.get_wrapper_smali”uj“jHj†jûubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jøubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.lowerfunc()”…””}”j†j.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.apkinfo.AndroguardImp.lowerfunc”uj“jHj†j(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.permissions”…””}”j†j[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.apkinfo.AndroguardImp.permissions”uj“jHj†jUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ$AndroguardImp.subclass_relationships”…””}”j†jˆsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j…ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ8#quark.core.apkinfo.AndroguardImp.subclass_relationships”uj“jHj†j‚ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ&AndroguardImp.superclass_relationships”…””}”j†jĩsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j˛ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ:#quark.core.apkinfo.AndroguardImp.superclass_relationships”uj“jHj†j¯ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŦubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAndroguardImp.upperfunc()”…””}”j†jâsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jßubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.apkinfo.AndroguardImp.upperfunc”uj“jHj†jÜubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŲubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j3ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jėubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.parallelquark module”…””}”j†j$sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ #module-quark.core.parallelquark”uj“jHj†j!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ ParallelQuark”…””}”j†jGsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ'#quark.core.parallelquark.ParallelQuark”uj“jHj†jAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j>ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒParallelQuark.apply_rules()”…””}”j†jqsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jnubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ3#quark.core.parallelquark.ParallelQuark.apply_rules”uj“jHj†jkubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jeubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒParallelQuark.close()”…””}”j†jžsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j›ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.parallelquark.ParallelQuark.close”uj“jHj†j˜ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j•ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jeubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒParallelQuark.run()”…””}”j†jËsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jČubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.parallelquark.ParallelQuark.run”uj“jHj†jÅubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÂubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jeubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j>ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.quark module”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#module-quark.core.quark”uj“jHj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark”…””}”j†j0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#quark.core.quark.Quark”uj“jHj†j*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j'ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.add_table_row()”…””}”j†jZsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ%#quark.core.quark.Quark.add_table_row”uj“jHj†jTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.check_parameter()”…””}”j†j‡sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j„ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ'#quark.core.quark.Quark.check_parameter”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j~ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ(Quark.check_parameter_on_single_method()”…””}”j†j´sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jąubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ8#quark.core.quark.Quark.check_parameter_on_single_method”uj“jHj†jŽubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĢubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.check_parameter_values()”…””}”j†jásbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŪubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ.#quark.core.quark.Quark.check_parameter_values”uj“jHj†jÛubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jØubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.check_sequence()”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ&#quark.core.quark.Quark.check_sequence”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.find_api_usage()”…””}”j†j;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ&#quark.core.quark.Quark.find_api_usage”uj“jHj†j5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.find_intersection()”…””}”j†jhsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ)#quark.core.quark.Quark.find_intersection”uj“jHj†jbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.find_previous_method()”…””}”j†j•sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j’ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ,#quark.core.quark.Quark.find_previous_method”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŒubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.generate_json_report()”…””}”j†jÂsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŋubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ,#quark.core.quark.Quark.generate_json_report”uj“jHj†jŧubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jšubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.get_json_report()”…””}”j†jīsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jėubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ'#quark.core.quark.Quark.get_json_report”uj“jHj†jéubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jæubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.method_recursive_search()”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ/#quark.core.quark.Quark.method_recursive_search”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ Quark.run()”…””}”j†jIsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#quark.core.quark.Quark.run”uj“jHj†jCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.show_call_graph()”…””}”j†jvsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jsubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ'#quark.core.quark.Quark.show_call_graph”uj“jHj†jpubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jmubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.show_detail_report()”…””}”j†jŖsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ*#quark.core.quark.Quark.show_detail_report”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jšubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.show_label_report()”…””}”j†jĐsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÍubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ)#quark.core.quark.Quark.show_label_report”uj“jHj†jĘubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĮubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ Quark.show_rule_classification()”…””}”j†jũsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†júubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ0#quark.core.quark.Quark.show_rule_classification”uj“jHj†j÷ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jôubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuark.show_summary_report()”…””}”j†j*sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.quark.Quark.show_summary_report”uj“jHj†j$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jNubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j'ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.rzapkinfo module”…””}”j†jlsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#module-quark.core.rzapkinfo”uj“jHj†jiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jfubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ RizinCache”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŒubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ #quark.core.rzapkinfo.RizinCache”uj“jHj†j‰ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j†ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jƒubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp”…””}”j†jŧsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jšubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#quark.core.rzapkinfo.RizinImp”uj“jHj†jļubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŗubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.activities”…””}”j†jæsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jãubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ)#quark.core.rzapkinfo.RizinImp.activities”uj“jHj†jāubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŨubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.all_methods”…””}”j†jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ*#quark.core.rzapkinfo.RizinImp.all_methods”uj“jHj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.android_apis”…””}”j†j@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.rzapkinfo.RizinImp.android_apis”uj“jHj†j:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.apk_filename”…””}”j†jmsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.rzapkinfo.RizinImp.apk_filename”uj“jHj†jgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.apk_filepath”…””}”j†jšsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j—ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.rzapkinfo.RizinImp.apk_filepath”uj“jHj†j”ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‘ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.core_library”…””}”j†jĮsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÄubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ+#quark.core.rzapkinfo.RizinImp.core_library”uj“jHj†jÁubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jžubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.custom_methods”…””}”j†jôsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jņubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ-#quark.core.rzapkinfo.RizinImp.custom_methods”uj“jHj†jîubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jëubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.find_method()”…””}”j†j!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ*#quark.core.rzapkinfo.RizinImp.find_method”uj“jHj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.get_method_bytecode()”…””}”j†jNsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ2#quark.core.rzapkinfo.RizinImp.get_method_bytecode”uj“jHj†jHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.get_strings()”…””}”j†j{sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jxubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ*#quark.core.rzapkinfo.RizinImp.get_strings”uj“jHj†juubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jrubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.get_wrapper_smali()”…””}”j†j¨sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĨubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ0#quark.core.rzapkinfo.RizinImp.get_wrapper_smali”uj“jHj†jĸubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŸubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.lowerfunc()”…””}”j†jÕsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŌubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ(#quark.core.rzapkinfo.RizinImp.lowerfunc”uj“jHj†jĪubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĖubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.permissions”…””}”j†j sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j˙ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ*#quark.core.rzapkinfo.RizinImp.permissions”uj“jHj†jüubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jųubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.ret_type”…””}”j†j/ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j, ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ'#quark.core.rzapkinfo.RizinImp.ret_type”uj“jHj†j) ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j& ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.subclass_relationships”…””}”j†j\ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jY ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ5#quark.core.rzapkinfo.RizinImp.subclass_relationships”uj“jHj†jV ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jS ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ!RizinImp.superclass_relationships”…””}”j†j‰ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j† ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ7#quark.core.rzapkinfo.RizinImp.superclass_relationships”uj“jHj†jƒ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j€ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRizinImp.upperfunc()”…””}”j†jļ sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŗ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ(#quark.core.rzapkinfo.RizinImp.upperfunc”uj“jHj†j° ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j­ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÚubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŗubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jƒubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jfubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jø sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jģŒ anchorname”Œ#module-quark.core”uj“jHj†jõ ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jō ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jđubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jÔubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŅubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĢj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.axmlreader package”…””}”j†j0!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”hJuj“jHj†j-!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j*!ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jO!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ#module-quark.core.axmlreader”uj“jHj†jL!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jI!ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ AxmlException”…””}”j†jr!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jo!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ$#quark.core.axmlreader.AxmlException”uj“jHj†jl!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†ji!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jf!ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ AxmlReader”…””}”j†jŸ!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jœ!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ!#quark.core.axmlreader.AxmlReader”uj“jHj†j™!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j–!ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAxmlReader.axml_size”…””}”j†jÉ!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÆ!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ+#quark.core.axmlreader.AxmlReader.axml_size”uj“jHj†jÃ!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĀ!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊ!ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAxmlReader.file_size”…””}”j†jö!sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jķ!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ+#quark.core.axmlreader.AxmlReader.file_size”uj“jHj†jđ!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jí!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊ!ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAxmlReader.get_attributes()”…””}”j†j#"sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j "ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ0#quark.core.axmlreader.AxmlReader.get_attributes”uj“jHj†j"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊ!ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAxmlReader.get_string()”…””}”j†jP"sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jM"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ,#quark.core.axmlreader.AxmlReader.get_string”uj“jHj†jJ"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jG"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊ!ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒAxmlReader.get_xml_tree()”…””}”j†j}"sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jz"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ.#quark.core.axmlreader.AxmlReader.get_xml_tree”uj“jHj†jw"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jt"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊ!ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j–!ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jf!ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒResValue”…””}”j†jļ"sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŗ"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ#quark.core.axmlreader.ResValue”uj“jHj†j°"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j­"ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ ResValue.data”…””}”j†jā"sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŨ"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ$#quark.core.axmlreader.ResValue.data”uj“jHj†jÚ"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j×"ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÔ"ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ ResValue.name”…””}”j†j #sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j #ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ$#quark.core.axmlreader.ResValue.name”uj“jHj†j#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÔ"ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒResValue.namespace”…””}”j†j:#sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j7#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ)#quark.core.axmlreader.ResValue.namespace”uj“jHj†j4#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j1#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÔ"ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ ResValue.type”…””}”j†jg#sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jd#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ$#quark.core.axmlreader.ResValue.type”uj“jHj†ja#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j^#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÔ"ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒResValue.value”…””}”j†j”#sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‘#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ%#quark.core.axmlreader.ResValue.value”uj“jHj†jŽ#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‹#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÔ"ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j­"ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jf!ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type”…””}”j†jÍ#sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĘ#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ%#quark.core.axmlreader.Res_value_type”uj“jHj†jĮ#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÄ#ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_ATTRIBUTE”…””}”j†j÷#sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jô#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ4#quark.core.axmlreader.Res_value_type.TYPE_ATTRIBUTE”uj“jHj†jņ#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jî#ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_DIMENSION”…””}”j†j$$sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j!$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ4#quark.core.axmlreader.Res_value_type.TYPE_DIMENSION”uj“jHj†j$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ%Res_value_type.TYPE_DYNAMIC_ATTRIBUTE”…””}”j†jQ$sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jN$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ<#quark.core.axmlreader.Res_value_type.TYPE_DYNAMIC_ATTRIBUTE”uj“jHj†jK$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jH$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ%Res_value_type.TYPE_DYNAMIC_REFERENCE”…””}”j†j~$sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j{$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ<#quark.core.axmlreader.Res_value_type.TYPE_DYNAMIC_REFERENCE”uj“jHj†jx$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†ju$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ#Res_value_type.TYPE_FIRST_COLOR_INT”…””}”j†jĢ$sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j¨$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ:#quark.core.axmlreader.Res_value_type.TYPE_FIRST_COLOR_INT”uj“jHj†jĨ$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĸ$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_FIRST_INT”…””}”j†jØ$sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÕ$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ4#quark.core.axmlreader.Res_value_type.TYPE_FIRST_INT”uj“jHj†jŌ$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĪ$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_FLOAT”…””}”j†j%sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ0#quark.core.axmlreader.Res_value_type.TYPE_FLOAT”uj“jHj†j˙$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jü$ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_FRACTION”…””}”j†j2%sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j/%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ3#quark.core.axmlreader.Res_value_type.TYPE_FRACTION”uj“jHj†j,%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j)%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_INT_BOOLEAN”…””}”j†j_%sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j\%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ6#quark.core.axmlreader.Res_value_type.TYPE_INT_BOOLEAN”uj“jHj†jY%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jV%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ#Res_value_type.TYPE_INT_COLOR_ARGB4”…””}”j†jŒ%sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‰%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ:#quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB4”uj“jHj†j†%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jƒ%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ#Res_value_type.TYPE_INT_COLOR_ARGB8”…””}”j†jš%sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jļ%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ:#quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB8”uj“jHj†jŗ%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j°%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ"Res_value_type.TYPE_INT_COLOR_RGB4”…””}”j†jæ%sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jã%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ9#quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB4”uj“jHj†jā%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŨ%ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ"Res_value_type.TYPE_INT_COLOR_RGB8”…””}”j†j&sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ9#quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB8”uj“jHj†j &ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j &ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_INT_DEC”…””}”j†j@&sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j=&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ2#quark.core.axmlreader.Res_value_type.TYPE_INT_DEC”uj“jHj†j:&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j7&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_INT_HEX”…””}”j†jm&sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jj&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ2#quark.core.axmlreader.Res_value_type.TYPE_INT_HEX”uj“jHj†jg&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jd&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ"Res_value_type.TYPE_LAST_COLOR_INT”…””}”j†jš&sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j—&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ9#quark.core.axmlreader.Res_value_type.TYPE_LAST_COLOR_INT”uj“jHj†j”&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‘&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_LAST_INT”…””}”j†jĮ&sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÄ&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ3#quark.core.axmlreader.Res_value_type.TYPE_LAST_INT”uj“jHj†jÁ&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jž&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_NULL”…””}”j†jô&sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jņ&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ/#quark.core.axmlreader.Res_value_type.TYPE_NULL”uj“jHj†jî&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jë&ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_REFERENCE”…””}”j†j!'sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ4#quark.core.axmlreader.Res_value_type.TYPE_REFERENCE”uj“jHj†j'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRes_value_type.TYPE_STRING”…””}”j†jN'sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jK'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĢŒ anchorname”Œ1#quark.core.axmlreader.Res_value_type.TYPE_STRING”uj“jHj†jH'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jE'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jë#ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jÄ#ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jf!ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jI!ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jF!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j*!ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'!ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjļj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.interface package”…””}”j†jĨ'sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”hJuj“jHj†jĸ'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŸ'ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†jÄ'sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ #submodules”uj“jHj†jÁ'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jž'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģ'ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'quark.core.interface.baseapkinfo module”…””}”j†jį'sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ(#module-quark.core.interface.baseapkinfo”uj“jHj†jä'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†já'ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ BaseApkinfo”…””}”j†j (sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ-#quark.core.interface.baseapkinfo.BaseApkinfo”uj“jHj†j(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j(ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.activities”…””}”j†j4(sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j1(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ8#quark.core.interface.baseapkinfo.BaseApkinfo.activities”uj“jHj†j.(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j+(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.all_methods”…””}”j†ja(sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j^(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ9#quark.core.interface.baseapkinfo.BaseApkinfo.all_methods”uj“jHj†j[(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jX(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.android_apis”…””}”j†jŽ(sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‹(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ:#quark.core.interface.baseapkinfo.BaseApkinfo.android_apis”uj“jHj†jˆ(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j…(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.apk_filename”…””}”j†jģ(sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j¸(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ:#quark.core.interface.baseapkinfo.BaseApkinfo.apk_filename”uj“jHj†jĩ(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j˛(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.apk_filepath”…””}”j†jč(sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jå(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ:#quark.core.interface.baseapkinfo.BaseApkinfo.apk_filepath”uj“jHj†jâ(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jß(ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.core_library”…””}”j†j)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ:#quark.core.interface.baseapkinfo.BaseApkinfo.core_library”uj“jHj†j)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j )ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.custom_methods”…””}”j†jB)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j?)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ<#quark.core.interface.baseapkinfo.BaseApkinfo.custom_methods”uj“jHj†j<)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j9)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.filename”…””}”j†jo)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jl)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ6#quark.core.interface.baseapkinfo.BaseApkinfo.filename”uj“jHj†ji)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jf)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.filesize”…””}”j†jœ)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j™)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ6#quark.core.interface.baseapkinfo.BaseApkinfo.filesize”uj“jHj†j–)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j“)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.find_method()”…””}”j†jÉ)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÆ)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ9#quark.core.interface.baseapkinfo.BaseApkinfo.find_method”uj“jHj†jÃ)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĀ)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ!BaseApkinfo.get_method_bytecode()”…””}”j†jö)sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jķ)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”ŒA#quark.core.interface.baseapkinfo.BaseApkinfo.get_method_bytecode”uj“jHj†jđ)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jí)ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.get_strings()”…””}”j†j#*sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j *ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ9#quark.core.interface.baseapkinfo.BaseApkinfo.get_strings”uj“jHj†j*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.get_subclasses”…””}”j†jP*sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jM*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ<#quark.core.interface.baseapkinfo.BaseApkinfo.get_subclasses”uj“jHj†jJ*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jG*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.get_wrapper_smali()”…””}”j†j}*sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jz*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ?#quark.core.interface.baseapkinfo.BaseApkinfo.get_wrapper_smali”uj“jHj†jw*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jt*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.lowerfunc()”…””}”j†jĒ*sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j§*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ7#quark.core.interface.baseapkinfo.BaseApkinfo.lowerfunc”uj“jHj†j¤*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĄ*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.md5”…””}”j†j×*sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÔ*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ1#quark.core.interface.baseapkinfo.BaseApkinfo.md5”uj“jHj†jŅ*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÎ*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.permissions”…””}”j†j+sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ9#quark.core.interface.baseapkinfo.BaseApkinfo.permissions”uj“jHj†jū*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jû*ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.ret_type”…””• }”j†j1+sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j.+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ6#quark.core.interface.baseapkinfo.BaseApkinfo.ret_type”uj“jHj†j++ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j(+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ$BaseApkinfo.superclass_relationships”…””}”j†j^+sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j[+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”ŒF#quark.core.interface.baseapkinfo.BaseApkinfo.superclass_relationships”uj“jHj†jX+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jU+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBaseApkinfo.upperfunc()”…””}”j†j‹+sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jˆ+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ7#quark.core.interface.baseapkinfo.BaseApkinfo.upperfunc”uj“jHj†j…+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‚+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j((ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j(ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jū'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†já'ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģ'ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jÍ+sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jļŒ anchorname”Œ#module-quark.core.interface”uj“jHj†jĘ+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĮ+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jģ'ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŸ'ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jœ'ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŠj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.core.struct package”…””}”j†j,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”hJuj“jHj†j,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j˙+ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†j$,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ #submodules”uj“jHj†j!,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'quark.core.struct.bytecodeobject module”…””}”j†jG,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ(#module-quark.core.struct.bytecodeobject”uj“jHj†jD,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jA,ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBytecodeObject”…””}”j†jj,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jg,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ0#quark.core.struct.bytecodeobject.BytecodeObject”uj“jHj†jd,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†ja,ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBytecodeObject.mnemonic”…””}”j†j”,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‘,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ9#quark.core.struct.bytecodeobject.BytecodeObject.mnemonic”uj“jHj†jŽ,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‹,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jˆ,ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBytecodeObject.parameter”…””}”j†jÁ,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jž,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ:#quark.core.struct.bytecodeobject.BytecodeObject.parameter”uj“jHj†jģ,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j¸,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jˆ,ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBytecodeObject.registers”…””}”j†jî,sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jë,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ:#quark.core.struct.bytecodeobject.BytecodeObject.registers”uj“jHj†jč,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jå,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jˆ,ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†ja,ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j^,ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jA,ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ%quark.core.struct.methodobject module”…””}”j†j0-sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ&#module-quark.core.struct.methodobject”uj“jHj†j--ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j*-ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ MethodObject”…””}”j†jS-sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jP-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ,#quark.core.struct.methodobject.MethodObject”uj“jHj†jM-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jJ-ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.access_flags”…””}”j†j}-sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jz-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ9#quark.core.struct.methodobject.MethodObject.access_flags”uj“jHj†jw-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jt-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.cache”…””}”j†jĒ-sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j§-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ2#quark.core.struct.methodobject.MethodObject.cache”uj“jHj†j¤-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĄ-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.class_name”…””}”j†j×-sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÔ-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ7#quark.core.struct.methodobject.MethodObject.class_name”uj“jHj†jŅ-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÎ-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.descriptor”…””}”j†j.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ7#quark.core.struct.methodobject.MethodObject.descriptor”uj“jHj†jū-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jû-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.full_name”…””}”j†j1.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j..ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ6#quark.core.struct.methodobject.MethodObject.full_name”uj“jHj†j+.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j(.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.is_android_api()”…””}”j†j^.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j[.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ;#quark.core.struct.methodobject.MethodObject.is_android_api”uj“jHj†jX.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jU.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodObject.name”…””}”j†j‹.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jˆ.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ1#quark.core.struct.methodobject.MethodObject.name”uj“jHj†j….ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‚.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jq-ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jJ-ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jG-ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j*-ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'quark.core.struct.registerobject module”…””}”j†jÍ.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ(#module-quark.core.struct.registerobject”uj“jHj†jĘ.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĮ.ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject”…””}”j†jđ.sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jí.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ0#quark.core.struct.registerobject.RegisterObject”uj“jHj†ję.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jį.ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject.called_by_func”…””}”j†j/sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ?#quark.core.struct.registerobject.RegisterObject.called_by_func”uj“jHj†j/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j/ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject.current_type”…””}”j†jG/sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jD/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ=#quark.core.struct.registerobject.RegisterObject.current_type”uj“jHj†jA/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j>/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j/ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject.hash_index”…””}”j†jt/sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jq/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ;#quark.core.struct.registerobject.RegisterObject.hash_index”uj“jHj†jn/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jk/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j/ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject.register_name”…””}”j†jĄ/sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jž/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ>#quark.core.struct.registerobject.RegisterObject.register_name”uj“jHj†j›/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j˜/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j/ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject.type_histroy”…””}”j†jÎ/sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jË/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ=#quark.core.struct.registerobject.RegisterObject.type_histroy”uj“jHj†jČ/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÅ/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j/ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRegisterObject.value”…””}”j†jû/sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jø/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ6#quark.core.struct.registerobject.RegisterObject.value”uj“jHj†jõ/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jō/ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j/ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jį.ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jä.ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĮ.ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ#quark.core.struct.ruleobject module”…””}”j†j=0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ$#module-quark.core.struct.ruleobject”uj“jHj†j:0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j70ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ RuleObject”…””}”j†j`0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j]0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ(#quark.core.struct.ruleobject.RuleObject”uj“jHj†jZ0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jW0ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.api”…””}”j†jŠ0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‡0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ,#quark.core.struct.ruleobject.RuleObject.api”uj“jHj†j„0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.check_item”…””}”j†jˇ0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j´0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ3#quark.core.struct.ruleobject.RuleObject.check_item”uj“jHj†ją0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŽ0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.crime”…””}”j†jä0sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†já0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ.#quark.core.struct.ruleobject.RuleObject.crime”uj“jHj†jŪ0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÛ0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.get_score()”…””}”j†j1sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ2#quark.core.struct.ruleobject.RuleObject.get_score”uj“jHj†j 1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.label”…””}”j†j>1sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j;1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ.#quark.core.struct.ruleobject.RuleObject.label”uj“jHj†j81ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j51ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.permission”…””}”j†jk1sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jh1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ3#quark.core.struct.ruleobject.RuleObject.permission”uj“jHj†je1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jb1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.rule_filename”…””}”j†j˜1sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j•1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ6#quark.core.struct.ruleobject.RuleObject.rule_filename”uj“jHj†j’1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleObject.score”…””}”j†jÅ1sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÂ1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ.#quark.core.struct.ruleobject.RuleObject.score”uj“jHj†jŋ1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŧ1ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~0ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jW0ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jT0ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j70ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ$quark.core.struct.tableobject module”…””}”j†j2sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ%#module-quark.core.struct.tableobject”uj“jHj†j2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j2ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ TableObject”…””}”j†j*2sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j'2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ*#quark.core.struct.tableobject.TableObject”uj“jHj†j$2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j!2ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒTableObject.get_obj_list()”…””}”j†jT2sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jQ2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ7#quark.core.struct.tableobject.TableObject.get_obj_list”uj“jHj†jN2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jK2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jH2ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒTableObject.get_table()”…””}”j†j2sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j~2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ4#quark.core.struct.tableobject.TableObject.get_table”uj“jHj†j{2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jx2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jH2ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒTableObject.hash_table”…””}”j†jŽ2sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĢ2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ5#quark.core.struct.tableobject.TableObject.hash_table”uj“jHj†j¨2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĨ2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jH2ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒTableObject.insert()”…””}”j†jÛ2sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jØ2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ1#quark.core.struct.tableobject.TableObject.insert”uj“jHj†jÕ2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŌ2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jH2ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒTableObject.pop()”…””}”j†j3sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ.#quark.core.struct.tableobject.TableObject.pop”uj“jHj†j3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j˙2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jH2ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j!2ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j2ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j2ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jJ3sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŠŒ anchorname”Œ#module-quark.core.struct”uj“jHj†jG3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jD3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j,ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j˙+ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jü+ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjąj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.evaluator package”…””}”j†j‚3sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”hJuj“jHj†j3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j|3ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†jĄ3sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ #submodules”uj“jHj†jž3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j›3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˜3ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.evaluator.pyeval module”…””}”j†jÄ3sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ#module-quark.evaluator.pyeval”uj“jHj†jÁ3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jž3ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval”…””}”j†jį3sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jä3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ#quark.evaluator.pyeval.PyEval”uj“jHj†já3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŪ3ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.AGET_KIND()”…””}”j†j4sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ(#quark.evaluator.pyeval.PyEval.AGET_KIND”uj“jHj†j 4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.AGET_WIDE_KIND()”…””}”j†j>4sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j;4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ-#quark.evaluator.pyeval.PyEval.AGET_WIDE_KIND”uj“jHj†j84ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j54ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.APUT_KIND()”…””}”j†jk4sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jh4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ(#quark.evaluator.pyeval.PyEval.APUT_KIND”uj“jHj†je4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jb4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.APUT_WIDE_KIND()”…””}”j†j˜4sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j•4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ-#quark.evaluator.pyeval.PyEval.APUT_WIDE_KIND”uj“jHj†j’4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.BINOP_KIND()”…””}”j†jÅ4sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÂ4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ)#quark.evaluator.pyeval.PyEval.BINOP_KIND”uj“jHj†jŋ4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŧ4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CAST_TYPE()”…””}”j†jō4sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jī4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ(#quark.evaluator.pyeval.PyEval.CAST_TYPE”uj“jHj†jė4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jé4ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST()”…””}”j†j5sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ$#quark.evaluator.pyeval.PyEval.CONST”uj“jHj†j5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_CLASS()”…””}”j†jL5sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jI5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ*#quark.evaluator.pyeval.PyEval.CONST_CLASS”uj“jHj†jF5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jC5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_FOUR()”…””}”j†jy5sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jv5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ)#quark.evaluator.pyeval.PyEval.CONST_FOUR”uj“jHj†js5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jp5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_HIGHSIXTEEN()”…””}”j†jĻ5sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŖ5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ0#quark.evaluator.pyeval.PyEval.CONST_HIGHSIXTEEN”uj“jHj†j 5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_SIXTEEN()”…””}”j†jĶ5sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĐ5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ,#quark.evaluator.pyeval.PyEval.CONST_SIXTEEN”uj“jHj†jÍ5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĘ5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_STRING()”…””}”j†j6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jũ5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ+#quark.evaluator.pyeval.PyEval.CONST_STRING”uj“jHj†jú5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j÷5ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_WIDE()”…””}”j†j-6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j*6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ)#quark.evaluator.pyeval.PyEval.CONST_WIDE”uj“jHj†j'6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j$6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_WIDE_HIGHSIXTEEN()”…””}”j†jZ6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jW6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ5#quark.evaluator.pyeval.PyEval.CONST_WIDE_HIGHSIXTEEN”uj“jHj†jT6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jQ6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_WIDE_SIXTEEN()”…””}”j†j‡6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j„6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ1#quark.evaluator.pyeval.PyEval.CONST_WIDE_SIXTEEN”uj“jHj†j6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j~6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.CONST_WIDE_THIRTY_TWO()”…””}”j†j´6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†ją6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ4#quark.evaluator.pyeval.PyEval.CONST_WIDE_THIRTY_TWO”uj“jHj†jŽ6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĢ6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.FILLED_NEW_ARRAY_KIND()”…””}”j†já6sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŪ6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ4#quark.evaluator.pyeval.PyEval.FILLED_NEW_ARRAY_KIND”uj“jHj†jÛ6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jØ6ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_CUSTOM()”…””}”j†j7sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j 7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ,#quark.evaluator.pyeval.PyEval.INVOKE_CUSTOM”uj“jHj†j7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_DIRECT()”…””}”j†j;7sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j87ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ,#quark.evaluator.pyeval.PyEval.INVOKE_DIRECT”uj“jHj†j57ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j27ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_INTERFACE()”…””}”j†jh7sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†je7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ/#quark.evaluator.pyeval.PyEval.INVOKE_INTERFACE”uj“jHj†jb7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j_7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_POLYMORPHIC()”…””}”j†j•7sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j’7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ1#quark.evaluator.pyeval.PyEval.INVOKE_POLYMORPHIC”uj“jHj†j7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŒ7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_STATIC()”…””}”j†jÂ7sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŋ7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ,#quark.evaluator.pyeval.PyEval.INVOKE_STATIC”uj“jHj†jŧ7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jš7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_SUPER()”…””}”j†jī7sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jė7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ+#quark.evaluator.pyeval.PyEval.INVOKE_SUPER”uj“jHj†jé7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jæ7ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_VIRTUAL()”…””}”j†j8sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ-#quark.evaluator.pyeval.PyEval.INVOKE_VIRTUAL”uj“jHj†j8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.INVOKE_VIRTUAL_RANGE()”…””}”j†jI8sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jF8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ3#quark.evaluator.pyeval.PyEval.INVOKE_VIRTUAL_RANGE”uj“jHj†jC8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j@8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.MOVE_KIND()”…””}”j†jv8sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†js8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ(#quark.evaluator.pyeval.PyEval.MOVE_KIND”uj“jHj†jp8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jm8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.MOVE_RESULT()”…””}”j†jŖ8sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j 8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ*#quark.evaluator.pyeval.PyEval.MOVE_RESULT”uj“jHj†j8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jš8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.MOVE_RESULT_OBJECT()”…””}”j†jĐ8sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÍ8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ1#quark.evaluator.pyeval.PyEval.MOVE_RESULT_OBJECT”uj“jHj†jĘ8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĮ8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.MOVE_RESULT_WIDE()”…””}”j†jũ8sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jú8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ/#quark.evaluator.pyeval.PyEval.MOVE_RESULT_WIDE”uj“jHj†j÷8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jô8ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.NEG_AND_NOT_KIND()”…””}”j†j*9sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j'9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ/#quark.evaluator.pyeval.PyEval.NEG_AND_NOT_KIND”uj“jHj†j$9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j!9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.NEW_ARRAY()”…””}”j†jW9sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jT9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ(#quark.evaluator.pyeval.PyEval.NEW_ARRAY”uj“jHj†jQ9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jN9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.NEW_INSTANCE()”…””}”j†j„9sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ+#quark.evaluator.pyeval.PyEval.NEW_INSTANCE”uj“jHj†j~9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j{9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.get_method_pattern()”…””}”j†ją9sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŽ9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ1#quark.evaluator.pyeval.PyEval.get_method_pattern”uj“jHj†jĢ9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j¨9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒPyEval.show_table()”…””}”j†jŪ9sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÛ9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ)#quark.evaluator.pyeval.PyEval.show_table”uj“jHj†jØ9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÕ9ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j4ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŪ3ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÛ3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒlogger()”…””}”j†j:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ#quark.evaluator.pyeval.logger”uj“jHj†j:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÛ3ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jž3ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˜3ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jM:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jąŒ anchorname”Œ#module-quark.evaluator”uj“jHj†jJ:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jG:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˜3ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j|3ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jy3ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŽj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.forensic package”…””}”j†j…:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”hJuj“jHj†j‚:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j:ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†j¤:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ #submodules”uj“jHj†jĄ:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jž:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›:ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.forensic.forensic module”…””}”j†jĮ:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ#module-quark.forensic.forensic”uj“jHj†jÄ:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÁ:ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic”…””}”j†ję:sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jį:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ!#quark.forensic.forensic.Forensic”uj“jHj†jä:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†já:ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.all_strings”…””}”j†j;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ-#quark.forensic.forensic.Forensic.all_strings”uj“jHj†j;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j ;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ Forensic.apk”…””}”j†jA;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j>;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ%#quark.forensic.forensic.Forensic.apk”uj“jHj†j;;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j8;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_all_strings()”…””}”j†jn;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jk;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ1#quark.forensic.forensic.Forensic.get_all_strings”uj“jHj†jh;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†je;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_android_api()”…””}”j†j›;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j˜;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ1#quark.forensic.forensic.Forensic.get_android_api”uj“jHj†j•;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j’;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_base64()”…””}”j†jČ;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÅ;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ,#quark.forensic.forensic.Forensic.get_base64”uj“jHj†jÂ;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŋ;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_content()”…””}”j†jõ;sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jō;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ-#quark.forensic.forensic.Forensic.get_content”uj“jHj†jī;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jė;ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_file()”…””}”j†j"<sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ*#quark.forensic.forensic.Forensic.get_file”uj“jHj†j<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_ip()”…””}”j†jO<sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jL<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ(#quark.forensic.forensic.Forensic.get_ip”uj“jHj†jI<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jF<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒForensic.get_url()”…””}”j†j|<sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jy<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ)#quark.forensic.forensic.Forensic.get_url”uj“jHj†jv<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†js<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†já:ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŪ:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jÁ:ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›:ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ"quark.forensic.vt_analysis module”…””}”j†jž<sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ"#module-quark.forensic.vt_analysis”uj“jHj†jģ<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j¸<ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ VTAnalysis”…””}”j†já<sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŪ<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ&#quark.forensic.vt_analysis.VTAnalysis”uj“jHj†jÛ<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jØ<ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.analyze_multi_file()”…””}”j†j =sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ9#quark.forensic.vt_analysis.VTAnalysis.analyze_multi_file”uj“jHj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ VTAnalysis.analyze_single_file()”…””}”j†j8=sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j5=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ:#quark.forensic.vt_analysis.VTAnalysis.analyze_single_file”uj“jHj†j2=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j/=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.change_api_key()”…””}”j†je=sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jb=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ5#quark.forensic.vt_analysis.VTAnalysis.change_api_key”uj“jHj†j_=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j\=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ$VTAnalysis.check_api_key_available()”…””}”j†j’=sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ>#quark.forensic.vt_analysis.VTAnalysis.check_api_key_available”uj“jHj†jŒ=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‰=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.get_api_keys_list()”…””}”j†jŋ=sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŧ=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ8#quark.forensic.vt_analysis.VTAnalysis.get_api_keys_list”uj“jHj†jš=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jļ=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.get_file_md5()”…””}”j†jė=sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jé=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ3#quark.forensic.vt_analysis.VTAnalysis.get_file_md5”uj“jHj†jæ=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jã=ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.get_reports()”…””}”j†j>sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ2#quark.forensic.vt_analysis.VTAnalysis.get_reports”uj“jHj†j>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.retreive_report()”…””}”j†jF>sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jC>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ6#quark.forensic.vt_analysis.VTAnalysis.retreive_report”uj“jHj†j@>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j=>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.scan_file()”…””}”j†js>sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jp>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ0#quark.forensic.vt_analysis.VTAnalysis.scan_file”uj“jHj†jm>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jj>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒVTAnalysis.set_progress()”…””}”j†j >sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ3#quark.forensic.vt_analysis.VTAnalysis.set_progress”uj“jHj†jš>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j—>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j˙<ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jØ<ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÕ<ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j¸<ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›:ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jâ>sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŽŒ anchorname”Œ#module-quark.forensic”uj“jHj†jß>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÜ>ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›:ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j:ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j|:ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj¯j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.script package”…””}”j†j?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”hJuj“jHj†j?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j?ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Subpackages”…””}”j†j9?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ #subpackages”uj“jHj†j6?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j3?ubj9)”}”(j}hJj~]”j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”j¯Œentries”]”NŒquark.script.frida”†”aŒ includefiles”]”j_?aŒmaxdepth”KŒcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> j[ ŒG/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/quark.script.rst”j] Kj†jP?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j3?ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j0?ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†j?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ #submodules”uj“jHj†j|?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jy?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j0?ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.script.ciphey module”…””}”j†jĸ?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#module-quark.script.ciphey”uj“jHj†jŸ?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jœ?ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒcheckClearText()”…””}”j†jÅ?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÂ?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ##quark.script.ciphey.checkClearText”uj“jHj†jŋ?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŧ?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jš?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jœ?ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j0?ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.script.objection module”…””}”j†jû?sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#module-quark.script.objection”uj“jHj†jø?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jõ?ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ Objection”…””}”j†j@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ!#quark.script.objection.Objection”uj“jHj†j@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j@ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒObjection.hookMethod()”…””}”j†jH@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jE@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ,#quark.script.objection.Objection.hookMethod”uj“jHj†jB@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j?@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j<@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j@ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j@ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒconvertMethodToString()”…””}”j†j@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j~@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ-#quark.script.objection.convertMethodToString”uj“jHj†j{@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jx@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j@ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jõ?ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j0?ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.script.utils module”…””}”j†jˇ@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#module-quark.script.utils”uj“jHj†j´@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†ją@ubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒisArgumentTrue()”…””}”j†jÚ@sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j×@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ"#quark.script.utils.isArgumentTrue”uj“jHj†jÔ@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŅ@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÎ@ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†ją@ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j0?ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jAsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#module-quark.script”uj“jHj†j Aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j Aubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒActivity”…””}”j†j3Asbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j0Aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Activity”uj“jHj†j-Aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”•!ˆuj“jCj†j*Aubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒActivity.hasIntentFilter()”…””}”j†j]Asbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jZAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ&#quark.script.Activity.hasIntentFilter”uj“jHj†jWAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jTAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jQAubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒActivity.isExported()”…””}”j†jŠAsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‡Aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ!#quark.script.Activity.isExported”uj“jHj†j„Aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jQAubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j*Aubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior”…””}”j†jÃAsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĀAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Behavior”uj“jHj†jŊAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jēAubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.getMethodsInArgs()”…””}”j†jíAsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jęAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ'#quark.script.Behavior.getMethodsInArgs”uj“jHj†jįAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jäAubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáAubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.getParamValues()”…””}”j†jBsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ%#quark.script.Behavior.getParamValues”uj“jHj†jBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáAubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.hasString()”…””}”j†jGBsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jDBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ #quark.script.Behavior.hasString”uj“jHj†jABubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j>Bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáAubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.hasUrl()”…””}”j†jtBsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jqBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Behavior.hasUrl”uj“jHj†jnBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jkBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáAubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.isArgFromMethod()”…””}”j†jĄBsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jžBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ&#quark.script.Behavior.isArgFromMethod”uj“jHj†j›Bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j˜Bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáAubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jēAubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒDefaultRuleset”…””}”j†jÚBsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j×Bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.DefaultRuleset”uj“jHj†jÔBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŅBubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod”…””}”j†jCsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Method”uj“jHj†jCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jūBubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.className”…””}”j†j1Csbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j.Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Method.className”uj“jHj†j+Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j(Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j%Cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.descriptor”…””}”j†j^Csbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j[Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Method.descriptor”uj“jHj†jXCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jUCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j%Cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.fullName”…””}”j†j‹Csbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jˆCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Method.fullName”uj“jHj†j…Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‚Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j%Cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.getArguments()”…””}”j†j¸Csbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĩCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ!#quark.script.Method.getArguments”uj“jHj†j˛Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j¯Cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j%Cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.getXrefFrom()”…””}”j†jåCsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jâCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ #quark.script.Method.getXrefFrom”uj“jHj†jßCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÜCubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j%Cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.getXrefTo()”…””}”j†jDsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Method.getXrefTo”uj“jHj†j Dubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j Dubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j%Cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethod.methodName”…””}”j†j?Dsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ QuarkResult”…””}”j†jxDsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†juDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.QuarkResult”uj“jHj†jrDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†joDubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkResult.behaviorOccurList”…””}”j†jĸDsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŸDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ+#quark.script.QuarkResult.behaviorOccurList”uj“jHj†jœDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j™Dubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j–Dubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ QuarkResult.findMethodInCaller()”…””}”j†jĪDsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĖDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ,#quark.script.QuarkResult.findMethodInCaller”uj“jHj†jÉDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÆDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j–Dubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkResult.getAllStrings()”…””}”j†jüDsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jųDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ'#quark.script.QuarkResult.getAllStrings”uj“jHj†jöDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jķDubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j–Dubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkResult.getMethodXrefFrom()”…””}”j†j)Esbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j&Eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ+#quark.script.QuarkResult.getMethodXrefFrom”uj“jHj†j#Eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j Eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j–Dubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒQuarkResult.getMethodXrefTo()”…””}”j†jVEsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jSEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ)#quark.script.QuarkResult.getMethodXrefTo”uj“jHj†jPEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jMEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j–Dubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†joDubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒRuleset”…””}”j†jEsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŒEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.Ruleset”uj“jHj†j‰Eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j†Eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒfindMethodInAPK()”…””}”j†jŧEsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jšEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.findMethodInAPK”uj“jHj†jļEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŗEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒgetActivities()”…””}”j†jéEsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jæEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.getActivities”uj“jHj†jãEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jāEubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒrunQuarkAnalysis()”…””}”j†jFsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¯Œ anchorname”Œ#quark.script.runQuarkAnalysis”uj“jHj†jFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j Fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Aubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j Aubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j0?ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j?ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j?ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjšj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.script.frida package”…””}”j†jaFsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”hJuj“jHj†j^Fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j[Fubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†j€Fsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ#module-quark.script.frida”uj“jHj†j}Fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jzFubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior”…””}”j†jŖFsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j Fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ#quark.script.frida.Behavior”uj“jHj†jFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jšFubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.getParamValues()”…””}”j†jÍFsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĘFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ+#quark.script.frida.Behavior.getParamValues”uj“jHj†jĮFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÄFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÁFubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.hasString()”…””}”j†júFsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j÷Fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ&#quark.script.frida.Behavior.hasString”uj“jHj†jôFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jņFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÁFubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒBehavior.hasUrl()”…””}”j†j'Gsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j$Gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ##quark.script.frida.Behavior.hasUrl”uj“jHj†j!Gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÁFubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jšFubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j—Fubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ FridaResult”…””}”j†j`Gsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j]Gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ#quark.script.frida.FridaResult”uj“jHj†jZGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jWGubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒFridaResult.behaviorOccurList”…””}”j†jŠGsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‡Gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ1#quark.script.frida.FridaResult.behaviorOccurList”uj“jHj†j„Gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~Gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jWGubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j—Fubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒMethodCallEventDispatcher”…””}”j†jÃGsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĀGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ-#quark.script.frida.MethodCallEventDispatcher”uj“jHj†jŊGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jēGubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ/MethodCallEventDispatcher.handleCapturedEvent()”…””}”j†jíGsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jęGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”ŒA#quark.script.frida.MethodCallEventDispatcher.handleCapturedEvent”uj“jHj†jįGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jäGubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáGubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ3MethodCallEventDispatcher.startWatchingMethodCall()”…””}”j†jHsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”ŒE#quark.script.frida.MethodCallEventDispatcher.startWatchingMethodCall”uj“jHj†jHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáGubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ2MethodCallEventDispatcher.stopWatchingMethodCall()”…””}”j†jGHsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jDHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”ŒD#quark.script.frida.MethodCallEventDispatcher.stopWatchingMethodCall”uj“jHj†jAHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j>Hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáGubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jēGubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j—Fubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒrunFridaHook()”…””}”j†j€Hsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j}Hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jšŒ anchorname”Œ #quark.script.frida.runFridaHook”uj“jHj†jzHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jwHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j—Fubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jzFubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jwFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j[Fubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jXFubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjˇj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils package”…””}”j†jËHsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”hJuj“jHj†jČHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÅHubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†jęHsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ #submodules”uj“jHj†jįHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jäHubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.colors module”…””}”j†j Isbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.colors”uj“jHj†j Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jIubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒblack()”…””}”j†j0Isbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j-Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.black”uj“jHj†j*Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j'Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒblue()”…””}”j†j]Isbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jZIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.blue”uj“jHj†jWIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jTIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒbold()”…””}”j†jŠIsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‡Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.bold”uj“jHj†j„Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒcolor()”…””}”j†jˇIsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j´Iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.color”uj“jHj†jąIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŽIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒcolorful_report()”…””}”j†jäIsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jáIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ##quark.utils.colors.colorful_report”uj“jHj†jŪIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÛIubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒcyan()”…””}”j†jJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.cyan”uj“jHj†j Jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒgreen()”…””}”j†j>Jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j;Jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.green”uj“jHj†j8Jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j5Jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ lightblue()”…””}”j†jkJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jhJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.lightblue”uj“jHj†jeJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jbJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ lightyellow()”…””}”j†j˜Jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j•Jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.lightyellow”uj“jHj†j’Jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ magenta()”…””}”j†jÅJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÂJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.magenta”uj“jHj†jŋJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŧJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒred()”…””}”j†jōJsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jīJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.red”uj“jHj†jėJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jéJubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒwhite()”…””}”j†jKsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.white”uj“jHj†jKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒyellow()”…””}”j†jLKsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jIKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.colors.yellow”uj“jHj†jFKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jCKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j$Iubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jIubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.graph module”…””}”j†j‚Ksbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.graph”uj“jHj†jKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j|Kubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ call_graph()”…””}”j†jĨKsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĸKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.graph.call_graph”uj“jHj†jŸKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jœKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j™Kubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒselect_label_menu()”…””}”j†jŌKsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĪKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ$#quark.utils.graph.select_label_menu”uj“jHj†jĖKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÉKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j™Kubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒshow_comparison_graph()”…””}”j†j˙Ksbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jüKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ(#quark.utils.graph.show_comparison_graph”uj“jHj†jųKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jöKubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j™Kubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒwrapper_lookup()”…””}”j†j,Lsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j)Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ!#quark.utils.graph.wrapper_lookup”uj“jHj†j&Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j#Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j™Kubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j|Kubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.output module”…””}”j†jbLsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.output”uj“jHj†j_Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j\Lubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒget_rule_classification_data()”…””}”j†j…Lsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‚Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ0#quark.utils.output.get_rule_classification_data”uj“jHj†jLubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j|Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jyLubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒoutput_parent_function_graph()”…””}”j†j˛Lsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j¯Lubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ0#quark.utils.output.output_parent_function_graph”uj“jHj†jŦLubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŠLubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jyLubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒoutput_parent_function_json()”…””}”j†jßLsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÜLubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ/#quark.utils.output.output_parent_function_json”uj“jHj†jŲLubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÖLubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jyLubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒoutput_parent_function_table()”…””}”j†j Msbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j Mubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ0#quark.utils.output.output_parent_function_table”uj“jHj†jMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jyLubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j\Lubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.pprint module”…””}”j†jBMsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.pprint”uj“jHj†j?Mubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ print_error()”…””}”j†jeMsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jbMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.pprint.print_error”uj“jHj†j_Mubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j\Mubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYMubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ print_info()”…””}”j†j’Msbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.pprint.print_info”uj“jHj†jŒMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j‰Mubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYMubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒprint_success()”…””}”j†jŋMsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŧMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ!#quark.utils.pprint.print_success”uj“jHj†jšMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jļMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYMubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒprint_warning()”…””}”j†jėMsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jéMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ!#quark.utils.pprint.print_warning”uj“jHj†jæMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jãMubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYMubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒtable()”…””}”j†jNsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.pprint.table”uj“jHj†jNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYMubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.regex module”…””}”j†jONsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.regex”uj“jHj†jLNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jINubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒextract_content()”…””}”j†jrNsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†joNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ"#quark.utils.regex.extract_content”uj“jHj†jlNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jiNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒextract_file()”…””}”j†jŸNsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jœNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.regex.extract_file”uj“jHj†j™Nubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j–Nubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ extract_ip()”…””}”j†jĖNsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÉNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.regex.extract_ip”uj“jHj†jÆNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÃNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ extract_url()”…””}”j†jųNsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jöNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.regex.extract_url”uj“jHj†jķNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jđNubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒvalidate_base64()”…””}”j†j&Osbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j#Oubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ"#quark.utils.regex.validate_base64”uj“jHj†j Oubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒvalidate_ip_address()”…””}”j†jSOsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jPOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ&#quark.utils.regex.validate_ip_address”uj“jHj†jMOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jJOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒvalidate_url()”…””}”j†j€Osbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j}Oubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.regex.validate_url”uj“jHj†jzOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jwOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfNubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jINubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.tools module”…””}”j†jļOsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.tools”uj“jHj†jŗOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j°Oubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ contains()”…””}”j†jŲOsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÖOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.tools.contains”uj“jHj†jĶOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĐOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍOubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ!descriptor_to_androguard_format()”…””}”j†jPsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ2#quark.utils.tools.descriptor_to_androguard_format”uj“jHj†jPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jũOubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍOubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒfilter_api_by_usage_count()”…””}”j†j3Psbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j0Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ,#quark.utils.tools.filter_api_by_usage_count”uj“jHj†j-Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j*Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍOubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ!get_arguments_from_argument_str()”…””}”j†j`Psbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j]Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ2#quark.utils.tools.get_arguments_from_argument_str”uj“jHj†jZPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jWPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍOubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒget_parenthetic_contents()”…””}”j†jPsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jŠPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ+#quark.utils.tools.get_parenthetic_contents”uj“jHj†j‡Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j„Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍOubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒremove_dup_list()”…””}”j†jēPsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jˇPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ"#quark.utils.tools.remove_dup_list”uj“jHj†j´Pubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jąPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍOubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j°Oubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.utils.weight module”…””}”j†jđPsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#module-quark.utils.weight”uj“jHj†jíPubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jęPubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ LEVEL_INFO”…””}”j†jQsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.weight.LEVEL_INFO”uj“jHj†j Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j Qubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒLEVEL_INFO.High”…””}”j†j=Qsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j:Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ##quark.utils.weight.LEVEL_INFO.High”uj“jHj†j7Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j4Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j1Qubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒLEVEL_INFO.LOW”…””}”j†jjQsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jgQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ"#quark.utils.weight.LEVEL_INFO.LOW”uj“jHj†jdQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jaQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j1Qubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒLEVEL_INFO.Moderate”…””}”j†j—Qsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j”Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ'#quark.utils.weight.LEVEL_INFO.Moderate”uj“jHj†j‘Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŽQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j1Qubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j Qubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jQubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒWeight”…””}”j†jĐQsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÍQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ#quark.utils.weight.Weight”uj“jHj†jĘQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĮQubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒWeight.calculate()”…””}”j†júQsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j÷Qubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jˇŒ anchorname”Œ$#quark.utils.weight.Weight.calculate”uj“jHj†jôQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jņQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jîQubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĮQubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jQubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jęPubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jáHubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†j)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.webreport package”…””}”j†jtRsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”hJuj“jHj†jqRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jnRubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Submodules”…””}”j†j“Rsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ #submodules”uj“jHj†jRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŠRubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒquark.webreport.generate module”…””}”j†jļRsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ #module-quark.webreport.generate”uj“jHj†jŗRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j°Rubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒReportGenerator”…””}”j†jŲRsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jÖRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ)#quark.webreport.generate.ReportGenerator”uj“jHj†jĶRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jĐRubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ*ReportGenerator.get_analysis_report_html()”…””}”j†jSsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”ŒB#quark.webreport.generate.ReportGenerator.get_analysis_report_html”uj“jHj†jũRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†júRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Rubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ/ReportGenerator.get_rule_generate_editor_html()”…””}”j†j0Ssbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j-Subaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”ŒG#quark.webreport.generate.ReportGenerator.get_rule_generate_editor_html”uj“jHj†j*Subaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j'Subaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Rubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ,ReportGenerator.insert_genrule_report_html()”…””}”j†j]Ssbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jZSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”ŒD#quark.webreport.generate.ReportGenerator.insert_genrule_report_html”uj“jHj†jWSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jTSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Rubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ(ReportGenerator.insert_radarchart_html()”…””}”j†jŠSsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j‡Subaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ@#quark.webreport.generate.ReportGenerator.insert_radarchart_html”uj“jHj†j„Subaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Rubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ$ReportGenerator.insert_report_html()”…””}”j†jˇSsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†j´Subaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ<#quark.webreport.generate.ReportGenerator.insert_report_html”uj“jHj†jąSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jŽSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Rubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒ0ReportGenerator.insert_sample_information_html()”…””}”j†jäSsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jáSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”ŒH#quark.webreport.generate.ReportGenerator.insert_sample_information_html”uj“jHj†jŪSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jÛSubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Rubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĐRubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍRubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒcount_confidence_rule_number()”…””}”j†jTsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ6#quark.webreport.generate.count_confidence_rule_number”uj“jHj†jTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍRubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒget_all_labels()”…””}”j†jJTsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jGTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ(#quark.webreport.generate.get_all_labels”uj“jHj†jDTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jATubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍRubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒget_five_stages_labels()”…””}”j†jwTsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jtTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ0#quark.webreport.generate.get_five_stages_labels”uj“jHj†jqTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†jnTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍRubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jb)”}”(j}hJj~]”jŒget_json_report_html()”…””}”j†j¤Tsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jaj†jĄTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ.#quark.webreport.generate.get_json_report_html”uj“jHj†jžTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œskip_section_number”ˆuj“jCj†j›Tubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÍRubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j°Rubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŠRubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒModule contents”…””}”j†jÚTsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŗŒ anchorname”Œ#module-quark.webreport”uj“jHj†j×Tubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÔTubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŠRubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jnRubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jkRubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŊj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark-Engine Inside”…””}”j†jUsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŊŒ anchorname”hJuj“jHj†jUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j Uubj9)”}”(j}hJj~]”j? )”}”(j}hJj~]”j‡}”(j‰]”j‹]”j]”j]”j‘]”Œparent”jŊŒentries”]”(NŒquark_inside_workflow”†”NŒquark_inside_overview”†”NŒquark_inside_objects”†”eŒ includefiles”]”(j7Uj9Uj;UeŒmaxdepth”J˙˙˙˙Œcaption”NŒglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”uj“j> j[ ŒM/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/quark_inside_index.rst”j] Kj†j(Uubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j Uubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j Uubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĻj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!Quark-Engine Objects Introduction”…””}”j†jdUsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”hJuj“jHj†jaUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j^Uubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ.Dalvik Bytecode Loader(quark.Evaluator.pyeval)”…””}”j†jƒUsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ.#dalvik-bytecode-loader-quark-evaluator-pyeval”uj“jHj†j€Uubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j}Uubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jzUubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒXRule(quark.Objects.XRule)”…””}”j†jĻUsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#xrule-quark-objects-xrule”uj“jHj†jŖUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j Uubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒExplanation of each function”…””}”j†jÆUsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#explanation-of-each-function”uj“jHj†jÃUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĀUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊUubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒFive-stage inspection”…””}”j†jéUsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#five-stage-inspection”uj“jHj†jæUubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jãUubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒLevel 1”…””}”j†j Vsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#level-1”uj“jHj†jVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jVubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒLevel 2”…””}”j†j,Vsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#level-2”uj“jHj†j)Vubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j&Vubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jVubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒLevel 3”…””}”j†jOVsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#level-3”uj“jHj†jLVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jIVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jVubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒLevel 4”…””}”j†jrVsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#level-4”uj“jHj†joVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jlVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jVubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒLevel 5”…””}”j†j•Vsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#level-5”uj“jHj†j’Vubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jVubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jãUubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŊUubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j Uubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jzUubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒApkinfo(quark.Objects.Apkinfo)”…””}”j†jĐVsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#apkinfo-quark-objects-apkinfo”uj“jHj†jÍVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĘVubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒExplanation of each function”…””}”j†jđVsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#id1”uj“jHj†jíVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jęVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jįVubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jĘVubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jzUubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ,BytecodeObject(quark.Objects.bytecodeObject)”…””}”j†jWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ,#bytecodeobject-quark-objects-bytecodeobject”uj“jHj†jWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jzUubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ$RuleObject(quark.Objects.ruleobject)”…””}”j†jBWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ$#ruleobject-quark-objects-ruleobject”uj“jHj†j?Wubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒExplanation of each function”…””}”j†jbWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#id2”uj“jHj†j_Wubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j\Wubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jYWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ&TableObject(quark.Objects.tableobject)”…””}”j†j‘Wsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ&#tableobject-quark-objects-tableobject”uj“jHj†jŽWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j‹Wubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒExplanation of each function”…””}”j†jąWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#id3”uj“jHj†jŽWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĢWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j¨Wubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j‹Wubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jzUubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ,RegisterObject(quark.Objects.registerobject)”…””•}”j†jāWsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ,#registerobject-quark-objects-registerobject”uj“jHj†jŨWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÚWubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒExplanation of each function”…””}”j†jXsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĻŒ anchorname”Œ#id4”uj“jHj†jũWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†júWubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j÷Wubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jÚWubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jzUubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j^Uubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j[Uubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŋj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark-Engine Project Overview”…””}”j†jDXsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŋŒ anchorname”hJuj“jHj†jAXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j>Xubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark-Engine Map”…””}”j†jcXsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŋŒ anchorname”Œ#quark-engine-map”uj“jHj†j`Xubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j]Xubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZXubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!Quark module architecture diagram”…””}”j†j†Xsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŋŒ anchorname”Œ"#quark-module-architecture-diagram”uj“jHj†jƒXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j€Xubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒObjects”…””}”j†jĻXsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŋŒ anchorname”Œ#objects”uj“jHj†jŖXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j Xubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jXubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Evaluator”…””}”j†jÉXsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŋŒ anchorname”Œ #evaluator”uj“jHj†jÆXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÃXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jXubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒutils”…””}”j†jėXsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŋŒ anchorname”Œ#utils”uj“jHj†jéXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jæXubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jXubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j€Xubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZXubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j>Xubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j;Xubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj´j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark-Engine Workflow”…””}”j†j0Ysbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”hJuj“jHj†j-Yubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j*Yubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!Quark-Engine Step 1(Command Line)”…””}”j†jOYsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ!#quark-engine-step-1-command-line”uj“jHj†jLYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jIYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jFYubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ-Quark-Engine Step 2 (APK Information Extract)”…””}”j†jrYsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ,#quark-engine-step-2-apk-information-extract”uj“jHj†joYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jlYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jFYubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ$Quark-Engine Step 3 (Load JSON Rule)”…””}”j†j•Ysbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ##quark-engine-step-3-load-json-rule”uj“jHj†j’Yubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jFYubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ%Quark-Engine Step 4 (Level 1-5 Check)”…””}”j†j¸Ysbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ$#quark-engine-step-4-level-1-5-check”uj“jHj†jĩYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j˛Yubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jFYubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Quark-Engine Step 5 (Weighted Score Calculation)”…””}”j†jÛYsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ/#quark-engine-step-5-weighted-score-calculation”uj“jHj†jØYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÕYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jFYubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark-Engine Step 6 (Report)”…””}”j†jūYsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ#quark-engine-step-6-report”uj“jHj†jûYubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jøYubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒSummary Report”…””}”j†jZsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ#summary-report”uj“jHj†jZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Detail Report”…””}”j†jAZsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j´Œ anchorname”Œ#detail-report”uj“jHj†j>Zubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j;Zubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jøYubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jFYubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j*Yubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j'Yubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjŧj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark MIT Program”…””}”j†j…Zsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŧŒ anchorname”hJuj“jHj†j‚Zubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jZubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Quark to You”…””}”j†j¤Zsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŧŒ anchorname”Œ #quark-to-you”uj“jHj†jĄZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jžZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›Zubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ You to Quark”…””}”j†jĮZsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŧŒ anchorname”Œ #you-to-quark”uj“jHj†jÄZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÁZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›Zubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒBetter Community”…””}”j†jęZsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŧŒ anchorname”Œ#better-community”uj“jHj†jįZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jäZubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›Zubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒMinumum Requirements”…””}”j†j [sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŧŒ anchorname”Œ#minumum-requirements”uj“jHj†j [ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›Zubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Contact us”…””}”j†j0[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jŧŒ anchorname”Œ #contact-us”uj“jHj†j-[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j*[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j›Zubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jZubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j|Zubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj¸j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Quark Report”…””}”j†jh[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”hJuj“jHj†je[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jb[ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Easy to Use and Intuitive Report”…””}”j†j‡[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ!#easy-to-use-and-intuitive-report”uj“jHj†j„[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒSummary Report”…””}”j†jĒ[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ#summary-report”uj“jHj†j§[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j¤[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Detail Report”…””}”j†jÍ[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ#detail-report”uj“jHj†jĘ[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĮ[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Web Report”…””}”j†jđ[sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ #web-report”uj“jHj†jí[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†ję[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒLabel-based Report”…””}”j†j\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ#label-based-report”uj“jHj†j\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j \ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Behaviors Comparison Radar Chart”…””}”j†j6\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ!#behaviors-comparison-radar-chart”uj“jHj†j3\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j0\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Call Graph”…””}”j†jY\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ #call-graph”uj“jHj†jV\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jS\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRule Classification”…””}”j†j|\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j¸Œ anchorname”Œ#rule-classification”uj“jHj†jy\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jv\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j~[ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jb[ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j_[ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubjĩj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Quark Script”…””}”j†j´\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”hJuj“jHj†ją\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŽ\ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ#Ecosystem for Mobile Security Tools”…””}”j†jĶ\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ$#ecosystem-for-mobile-security-tools”uj“jHj†jĐ\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÍ\ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒInnovative & Interactive”…””}”j†jķ\sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#innovative-interactive”uj“jHj†jđ\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jí\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†ję\ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒDynamic & Static Analysis”…””}”j†j]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#dynamic-static-analysis”uj“jHj†j]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†ję\ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRe-Usable & Sharable”…””}”j†j9]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#re-usable-sharable”uj“jHj†j6]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j3]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†ję\ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒMore APIs to come”…””}”j†j\]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#more-apis-to-come”uj“jHj†jY]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jV]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†ję\ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jÍ\ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Quickstart”…””}”j†j‹]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ #quickstart”uj“jHj†jˆ]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j…]ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!Step 1: Environments Requirements”…””}”j†jĢ]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ!#step-1-environments-requirements”uj“jHj†j¨]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĨ]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĸ]ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒStep 2: Install Quark Engine”…””}”j†jÎ]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#step-2-install-quark-engine”uj“jHj†jË]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jČ]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĸ]ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ@Step 3: Prepare Quark Script, Detection Rule and the Sample File”…””}”j†jņ]sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ?#step-3-prepare-quark-script-detection-rule-and-the-sample-file”uj“jHj†jî]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jë]ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĸ]ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒStep 4: Run the script”…””}”j†j^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#step-4-run-the-script”uj“jHj†j^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĸ]ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j…]ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒIntroduce of Quark Script APIs”…””}”j†jC^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#introduce-of-quark-script-apis”uj“jHj†j@^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j=^ubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ)findMethodInAPK(samplePath, targetMethod)”…””}”j†jc^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ(#findmethodinapk-samplepath-targetmethod”uj“jHj†j`^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j]^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRule(rule.json)”…””}”j†j†^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#rule-rule-json”uj“jHj†jƒ^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j€^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ+runQuarkAnalysis(SAMPLE_PATH, ruleInstance)”…””}”j†jŠ^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ*#runquarkanalysis-sample-path-ruleinstance”uj“jHj†jĻ^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŖ^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ%quarkResultInstance.behaviorOccurList”…””}”j†jĖ^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ&#quarkresultinstance-behavioroccurlist”uj“jHj†jÉ^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÆ^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'quarkResultInstance.getAllStrings(none)”…””}”j†jī^sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ'#quarkresultinstance-getallstrings-none”uj“jHj†jė^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jé^ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒBquarkResultInstance.findMethodInCaller(callerMethod, targetMethod)”…””}”j†j_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”ŒA#quarkresultinstance-findmethodincaller-callermethod-targetmethod”uj“jHj†j_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j _ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ"behaviorInstance.firstAPI.fullName”…””}”j†j5_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ##behaviorinstance-firstapi-fullname”uj“jHj†j2_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j/_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ#behaviorInstance.secondAPI.fullName”…””}”j†jX_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ$#behaviorinstance-secondapi-fullname”uj“jHj†jU_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jR_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ,behaviorInstance.hasString(pattern, isRegex)”…””}”j†j{_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ+#behaviorinstance-hasstring-pattern-isregex”uj“jHj†jx_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†ju_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒbehaviorInstance.hasUrl(none)”…””}”j†jž_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#behaviorinstance-hasurl-none”uj“jHj†j›_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j˜_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒbehaviorInstance.methodCaller”…””}”j†jÁ_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#behaviorinstance-methodcaller”uj“jHj†jž_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jģ_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ%behaviorInstance.getParamValues(none)”…””}”j†jä_sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ%#behaviorinstance-getparamvalues-none”uj“jHj†já_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŪ_ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ.behaviorInstance.isArgFromMethod(targetMethod)”…””}”j†j`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ.#behaviorinstance-isargfrommethod-targetmethod”uj“jHj†j`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'behaviorInstance.getMethodsInArgs(none)”…””}”j†j*`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ'#behaviorinstance-getmethodsinargs-none”uj“jHj†j'`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j$`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ methodInstance.getXrefFrom(none)”…””}”j†jM`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ #methodinstance-getxreffrom-none”uj“jHj†jJ`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jG`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒmethodInstance.getXrefTo(none)”…””}”j†jp`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#methodinstance-getxrefto-none”uj“jHj†jm`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jj`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!methodInstance.getArguments(none)”…””}”j†j“`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ!#methodinstance-getarguments-none”uj“jHj†j`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒObjection(host)”…””}”j†jļ`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#objection-host”uj“jHj†jŗ`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j°`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒCobjInstance.hookMethod(method, watchArgs, watchBacktrace, watchRet)”…””}”j†jŲ`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ@#objinstance-hookmethod-method-watchargs-watchbacktrace-watchret”uj“jHj†jÖ`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĶ`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒJrunFridaHook(apkPackageName, targetMethod, methodParamTypes, secondToWait)”…””}”j†jü`sbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”ŒG#runfridahook-apkpackagename-targetmethod-methodparamtypes-secondtowait”uj“jHj†jų`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jö`ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒcheckClearText(inputString)”…””}”j†jasbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#checkcleartext-inputstring”uj“jHj†jaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒgetActivities(samplePath)”…””}”j†jBasbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#getactivities-samplepath”uj“jHj†j?aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ&activityInstance.hasIntentFilter(none)”…””}”j†jeasbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ&#activityinstance-hasintentfilter-none”uj“jHj†jbaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j_aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!activityInstance.isExported(none)”…””}”j†jˆasbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ!#activityinstance-isexported-none”uj“jHj†j…aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j‚aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jZ^ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j=^ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ5Analyzing real case (InstaStealer) using Quark Script”…””}”j†jˇasbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ4#analyzing-real-case-instastealer-using-quark-script”uj“jHj†j´aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jąaubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ:Quark Script that dynamic hooks the method containing urls”…””}”j†j×asbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ;#quark-script-that-dynamic-hooks-the-method-containing-urls”uj“jHj†jÔaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŅaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÎaubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†júasbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-result”uj“jHj†j÷aubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jôaubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÎaubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ(Logs on the Objection terminal (hooking)”…””}”j†jbsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ'#logs-on-the-objection-terminal-hooking”uj“jHj†jbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÎaubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ=Method (callComponentMethod) with urls is detected triggered!”…””}”j†j@bsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ;#method-callcomponentmethod-with-urls-is-detected-triggered”uj“jHj†j=bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j:bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jÎaubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jąaubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Detect CWE-798 in Android Application (ovaa.apk)”…””}”j†jobsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ/#detect-cwe-798-in-android-application-ovaa-apk”uj“jHj†jlbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jibubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Scipt: CWE-798.py”…””}”j†jbsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-scipt-cwe-798-py”uj“jHj†jŒbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j‰bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j†bubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ"Quark Rule: findSecretKeySpec.json”…””}”j†j˛bsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ"#quark-rule-findsecretkeyspec-json”uj“jHj†j¯bubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŦbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j†bubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jÕbsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id5”uj“jHj†jŌbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jĪbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j†bubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ"Hard-Coded AES key in the APK file”…””}”j†jøbsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ##hard-coded-aes-key-in-the-apk-file”uj“jHj†jõbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jōbubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j†bubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jibubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ/Detect CWE-94 in Android Application (ovaa.apk)”…””}”j†j'csbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ.#detect-cwe-94-in-android-application-ovaa-apk”uj“jHj†j$cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j!cubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Scipt: CWE-94.py”…””}”j†jGcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-scipt-cwe-94-py”uj“jHj†jDcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jAcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j>cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ!Quark Rule: loadExternalCode.json”…””}”j†jjcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ!#quark-rule-loadexternalcode-json”uj“jHj†jgcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jdcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j>cubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id7”uj“jHj†jŠcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j‡cubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j>cubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j!cubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Detect CWE-921 in Android Application (ovaa.apk)”…””}”j†jŧcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ/#detect-cwe-921-in-android-application-ovaa-apk”uj“jHj†jšcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jļcubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-921.py”…””}”j†jÜcsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-921-py”uj“jHj†jŲcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÖcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĶcubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ#Quark Rule: checkFileExistence.json”…””}”j†j˙csbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ##quark-rule-checkfileexistence-json”uj“jHj†jücubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jųcubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĶcubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†j"dsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id9”uj“jHj†jdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĶcubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jļcubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Detect CWE-312 in Android Application (ovaa.apk)”…””}”j†jQdsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ/#detect-cwe-312-in-android-application-ovaa-apk”uj“jHj†jNdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jKdubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-312.py”…””}”j†jqdsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-312-py”uj“jHj†jndubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jkdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jhdubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒFrida Script: agent.js”…””}”j†j”dsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#frida-script-agent-js”uj“jHj†j‘dubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŽdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jhdubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jˇdsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id11”uj“jHj†j´dubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jądubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jhdubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jKdubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ4Detect CWE-89 in Android Application (AndroGoat.apk)”…””}”j†jædsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ3#detect-cwe-89-in-android-application-androgoat-apk”uj“jHj†jãdubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jādubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-89.py”…””}”j†jesbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-89-py”uj“jHj†jeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jũdubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ"Quark Rule: executeSQLCommand.json”…””}”j†j)esbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ"#quark-rule-executesqlcommand-json”uj“jHj†j&eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j#eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jũdubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jLesbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id13”uj“jHj†jIeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jFeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jũdubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jādubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Detect CWE-926 in Android Application (dvba.apk)”…””}”j†j{esbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ/#detect-cwe-926-in-android-application-dvba-apk”uj“jHj†jxeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jueubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-926.py”…””}”j†j›esbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-926-py”uj“jHj†j˜eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j•eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j’eubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jžesbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id15”uj“jHj†jģeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j¸eubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j’eubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jueubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ=Detect CWE-749 in Android Application (MSTG-Android-Java.apk)”…””}”j†jíesbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ<#detect-cwe-749-in-android-application-mstg-android-java-apk”uj“jHj†jęeubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jįeubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-749.py”…””}”j†j fsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-749-py”uj“jHj†j fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ%Quark Rule: configureJsExecution.json”…””}”j†j0fsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ%#quark-rule-configurejsexecution-json”uj“jHj†j-fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j*fubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jSfsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id17”uj“jHj†jPfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jMfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jfubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jįeubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Detect CWE-532 in Android Application (dvba.apk)”…””}”j†j‚fsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ/#detect-cwe-532-in-android-application-dvba-apk”uj“jHj†jfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j|fubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-532.py”…””}”j†jĸfsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-532-py”uj“jHj†jŸfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jœfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j™fubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jÅfsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id19”uj“jHj†jÂfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŋfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j™fubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j|fubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ=Detect CWE-780 in Android Application (MSTG-Android-Java.apk)”…””}”j†jôfsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ<#detect-cwe-780-in-android-application-mstg-android-java-apk”uj“jHj†jņfubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jîfubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-780.py”…””}”j†jgsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-780-py”uj“jHj†jgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j gubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'Quark Rule: useOfCryptographicAlgo.json”…””}”j†j7gsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ'#quark-rule-useofcryptographicalgo-json”uj“jHj†j4gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j1gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j gubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jZgsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id21”uj“jHj†jWgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jTgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j gubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jîfubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ0Detect CWE-319 in Android Application (ovaa.apk)”…””}”j†j‰gsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ/#detect-cwe-319-in-android-application-ovaa-apk”uj“jHj†j†gubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jƒgubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-319.py”…””}”j†jŠgsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-319-py”uj“jHj†jĻgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŖgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j gubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ#Quark Rule: setRetrofitBaseUrl.json”…””}”j†jĖgsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ##quark-rule-setretrofitbaseurl-json”uj“jHj†jÉgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÆgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j gubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jīgsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id23”uj“jHj†jėgubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jégubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j gubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jƒgubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ:Detect CWE-327 in Android Application (InjuredAndroid.apk)”…””}”j†jhsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ9#detect-cwe-327-in-android-application-injuredandroid-apk”uj“jHj†jhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jhubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-327.py”…””}”j†j>hsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-327-py”uj“jHj†j;hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j8hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j5hubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ'Quark Rule: useOfCryptographicAlgo.json”…””}”j†jahsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id25”uj“jHj†j^hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j[hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j5hubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†j„hsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id26”uj“jHj†jhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j~hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j5hubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jhubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ/Detect CWE-20 in Android Application (diva.apk)”…””}”j†jŗhsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ.#detect-cwe-20-in-android-application-diva-apk”uj“jHj†j°hubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j­hubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-20.py”…””}”j†jĶhsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-20-py”uj“jHj†jĐhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jÍhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘhubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Rule: inputWebUrl.json”…””}”j†jöhsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-rule-inputweburl-json”uj“jHj†jķhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jđhubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘhubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jisbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id28”uj“jHj†jiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘhubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†j­hubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubj>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ3Detect CWE-79 in Android Application (Vuldroid.apk)”…””}”j†jHisbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ2#detect-cwe-79-in-android-application-vuldroid-apk”uj“jHj†jEiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jBiubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script CWE-79.py”…””}”j†jhisbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#quark-script-cwe-79-py”uj“jHj†jeiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jbiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j_iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ"Quark Rule: loadUrlFromIntent.json”…””}”j†j‹isbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ"#quark-rule-loadurlfromintent-json”uj“jHj†jˆiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j…iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j_iubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒQuark Script Result”…””}”j†jŽisbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”jĩŒ anchorname”Œ#id30”uj“jHj†jĢiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j¨iubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†j_iubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jBiubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĘ\ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŽ\ubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jĢ\ubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj°j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRule Generation”…””}”j†jōisbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j°Œ anchorname”hJuj“jHj†jīiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jėiubj9)”}”(j}hJj~]”(j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ CLI Usage”…””}”j†jjsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j°Œ anchorname”Œ #cli-usage”uj“jHj†jjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jjubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ API Usage”…””}”j†j4jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j°Œ anchorname”Œ #api-usage”uj“jHj†j1jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†j.jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jjubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒWeb Editor Tutorial”…””}”j†jWjsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j°Œ anchorname”Œ#web-editor-tutorial”uj“jHj†jTjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jQjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jjubj>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒ Radiocontrast”…””}”j†jzjsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j°Œ anchorname”Œ#radiocontrast”uj“jHj†jwjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jtjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jjubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jėiubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jéiubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubj j9)”}”(j}hJj~]”j>)”}”(j}hJj~]”(jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒTesting Quark-Engine”…””}”j†j˛jsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j Œ anchorname”hJuj“jHj†j¯jubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jŦjubj9)”}”(j}hJj~]”j>)”}”(j}hJj~]”jD)”}”(j}hJj~]”jI)”}”(j}hJj~]”jŒRunning in Docker”…””}”j†jŅjsbaj‡}”(j‰]”j‹]”j]”j]”j‘]”Œinternal”ˆŒrefuri”j Œ anchorname”Œ#running-in-docker”uj“jHj†jÎjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“jCj†jËjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jČjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8j†jŦjubej‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j=j†jŠjubaj‡}”(j‰]”j‹]”j]”j]”j‘]”uj“j8ubuŒtoc_num_entries”}”(jĀKj¨Kj­Kj§KjŖKj¤KjĄKjēKjžKjĨKjĸKjŦKjĒKj˛KjģKVjĢK$jļKjŠK*jąK(jŽKj¯K(jšK jˇK7jŗKjŊKjĻKjŋKj´K jŧKj¸K jĩK\j°Kj KuŒtoc_secnumbers”}”Œtoc_fignumbers”}”Œtoctree_includes”}”(jŖ]”(jL jN ejē]”(jō jô jö jø jú jü jū j j j j j j j ejĨ]”(jĒ jŦ ejŦ]”jē aj˛]”(jņ jķ jõ j÷ jų jû ejģ]”(jj!j#ej¯]”j_?ajŊ]”(j7Uj9Uj;UeuŒfiles_to_rebuild”}”(jL ”(jŖjN ”(jŖjō ”(jējô ”(jējö ”(jējø ”(jējú ”(jējü ”(jējū ”(jēj ”(jēj ”(jēj ”(jēj ”(jēj ”(jēj ”(jēj ”(jējĒ ”(jĨjŦ ”(jĨjē ”(jŦjņ ”(j˛jķ ”(j˛jõ ”(j˛j÷ ”(j˛jų ”(j˛jû ”(j˛j”(jģj!”(jģj#”(jģj_?”(j¯j7U”(jŊj9U”(jŊj;U”(jŊuŒ glob_toctrees””Œnumbered_toctrees””Œ domaindata”}”(Œc”}”(Œ root_symbol”jÂŒSymbol”“”)”}”(j†NŒ siblingAbove”NŒ siblingBelow”NŒident”NŒ declaration”NŒdocname”Nj] NŒisRedeclaration”‰Œ _children”]”Œ _anonChildren”]”ubŒobjects”}”hNKuŒ changeset”}”(Œchanges”}”hNKuŒcitation”}”(hNKŒ citations”}”Œ citation_refs”}”uŒcpp”}”(j:kjÅj;k“”)”}”(j†Nj?kNj@kNŒ identOrOp”NŒtemplateParams”NŒ templateArgs”NjBkNjCkNj] NjDk‰jEk]”jGk]”ubj}”hNKuh'}”(hNKŒentries”}”(jĀ]”j¨]”j­]”j§]”jŖ]”j¤]”jĄ]”jē]”jž]”jĨ]”jĸ]”jŦ]”jĒ]”j˛]”((Œpair”Œmodule; quark.cli”Œmodule-quark.cli”hJNt”(Œsingle”Œ*update_rule_buffer() (in module quark.cli)”Œquark.cli.update_rule_buffer”hJNt”(jqkŒmodule; quark.config”Œmodule-quark.config”hJNt”(jqkŒmodule; quark.freshquark”Œmodule-quark.freshquark”hJNt”(jukŒ'download() (in module quark.freshquark)”Œquark.freshquark.download”hJNt”(jukŒ*entry_point() (in module quark.freshquark)”Œquark.freshquark.entry_point”hJNt”(jqkŒmodule; quark.logo”Œmodule-quark.logo”hJNt”(jukŒlogo() (in module quark.logo)”Œquark.logo.logo”hJNt”(jqkŒmodule; quark.radiocontrast”Œmodule-quark.radiocontrast”hJNt”(jukŒ,RadioContrast (class in quark.radiocontrast)”Œ!quark.radiocontrast.RadioContrast”hJNt”(jukŒ:generate_rule() (quark.radiocontrast.RadioContrast method)”Œ/quark.radiocontrast.RadioContrast.generate_rule”hJNt”(jukŒDmethod_recursive_search() (quark.radiocontrast.RadioContrast method)”Œ9quark.radiocontrast.RadioContrast.method_recursive_search”hJNt”(jqkŒmodule; quark.report”Œmodule-quark.report”hJNt”(jukŒReport (class in quark.report)”Œquark.report.Report”hJNt”(jukŒ'analysis() (quark.report.Report method)”Œquark.report.Report.analysis”hJNt”(jukŒ)get_report() (quark.report.Report method)”Œquark.report.Report.get_report”hJNt”(jqkŒmodule; quark.rulegeneration”Œmodule-quark.rulegeneration”hJNt”(jukŒ.RuleGeneration (class in quark.rulegeneration)”Œ#quark.rulegeneration.RuleGeneration”hJNt”(jukŒTYPE_FRACTION (quark.core.axmlreader.Res_value_type attribute)”Œ2quark.core.axmlreader.Res_value_type.TYPE_FRACTION”hJNt”(jukŒATYPE_INT_BOOLEAN (quark.core.axmlreader.Res_value_type attribute)”Œ5quark.core.axmlreader.Res_value_type.TYPE_INT_BOOLEAN”hJNt”(jukŒETYPE_INT_COLOR_ARGB4 (quark.core.axmlreader.Res_value_type attribute)”Œ9quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB4”hJNt”(jukŒETYPE_INT_COLOR_ARGB8 (quark.core.axmlreader.Res_value_type attribute)”Œ9quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB8”hJNt”(jukŒDTYPE_INT_COLOR_RGB4 (quark.core.axmlreader.Res_value_type attribute)”Œ8quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB4”hJNt”(jukŒDTYPE_INT_COLOR_RGB8 (quark.core.axmlreader.Res_value_type attribute)”Œ8quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB8”hJNt”(jukŒ=TYPE_INT_DEC (quark.core.axmlreader.Res_value_type attribute)”Œ1quark.core.axmlreader.Res_value_type.TYPE_INT_DEC”hJNt”(jukŒ=TYPE_INT_HEX (quark.core.axmlreader.Res_value_type attribute)”Œ1quark.core.axmlreader.Res_value_type.TYPE_INT_HEX”hJNt”(jukŒDTYPE_LAST_COLOR_INT (quark.core.axmlreader.Res_value_type attribute)”Œ8quark.core.axmlreader.Res_value_type.TYPE_LAST_COLOR_INT”hJNt”(jukŒ>TYPE_LAST_INT (quark.core.axmlreader.Res_value_type attribute)”Œ2quark.core.axmlreader.Res_value_type.TYPE_LAST_INT”hJNt”(jukŒ:TYPE_NULL (quark.core.axmlreader.Res_value_type attribute)”Œ.quark.core.axmlreader.Res_value_type.TYPE_NULL”hJNt”(jukŒ?TYPE_REFERENCE (quark.core.axmlreader.Res_value_type attribute)”Œ3quark.core.axmlreader.Res_value_type.TYPE_REFERENCE”hJNt”(jukŒquark.core.interface.baseapkinfo.BaseApkinfo.get_wrapper_smali”hJNt”(jukŒAlowerfunc() (quark.core.interface.baseapkinfo.BaseApkinfo method)”Œ6quark.core.interface.baseapkinfo.BaseApkinfo.lowerfunc”hJNt”(jukŒ;md5 (quark.core.interface.baseapkinfo.BaseApkinfo property)”Œ0quark.core.interface.baseapkinfo.BaseApkinfo.md5”hJNt”(jukŒCpermissions (quark.core.interface.baseapkinfo.BaseApkinfo property)”Œ8quark.core.interface.baseapkinfo.BaseApkinfo.permissions”hJNt”(jukŒAret_type (quark.core.interface.baseapkinfo.BaseApkinfo attribute)”Œ5quark.core.interface.baseapkinfo.BaseApkinfo.ret_type”hJNt”(jukŒPsuperclass_relationships (quark.core.interface.baseapkinfo.BaseApkinfo property)”ŒEquark.core.interface.baseapkinfo.BaseApkinfo.superclass_relationships”hJNt”(jukŒAupperfunc() (quark.core.interface.baseapkinfo.BaseApkinfo method)”Œ6quark.core.interface.baseapkinfo.BaseApkinfo.upperfunc”hJNt”(jqkŒmodule; quark.core.interface”Œmodule-quark.core.interface”hJNt”ejŠ]”((jqkŒ(module; quark.core.struct.bytecodeobject”Œ'module-quark.core.struct.bytecodeobject”hJNt”(jukŒ:BytecodeObject (class in quark.core.struct.bytecodeobject)”Œ/quark.core.struct.bytecodeobject.BytecodeObject”hJNt”(jukŒCmnemonic (quark.core.struct.bytecodeobject.BytecodeObject property)”Œ8quark.core.struct.bytecodeobject.BytecodeObject.mnemonic”hJNt”(jukŒDparameter (quark.core.struct.bytecodeobject.BytecodeObject property)”Œ9quark.core.struct.bytecodeobject.BytecodeObject.parameter”hJNt”(jukŒDregisters (quark.core.struct.bytecodeobject.BytecodeObject property)”Œ9quark.core.struct.bytecodeobject.BytecodeObject.registers”hJNt”(jqkŒ&module; quark.core.struct.methodobject”Œ%module-quark.core.struct.methodobject”hJNt”(jukŒ6MethodObject (class in quark.core.struct.methodobject)”Œ+quark.core.struct.methodobject.MethodObject”hJNt”(jukŒDaccess_flags (quark.core.struct.methodobject.MethodObject attribute)”Œ8quark.core.struct.methodobject.MethodObject.access_flags”hJNt”(jukŒ=cache (quark.core.struct.methodobject.MethodObject attribute)”Œ1quark.core.struct.methodobject.MethodObject.cache”hJNt”(jukŒBclass_name (quark.core.struct.methodobject.MethodObject attribute)”Œ6quark.core.struct.methodobject.MethodObject.class_name”hJNt”(jukŒBdescriptor (quark.core.struct.methodobject.MethodObject attribute)”Œ6quark.core.struct.methodobject.MethodObject.descriptor”hJNt”(jukŒ@full_name (quark.core.struct.methodobject.MethodObject property)”Œ5quark.core.struct.methodobject.MethodObject.full_name”hJNt”(jukŒEis_android_api() (quark.core.struct.methodobject.MethodObject method)”Œ:quark.core.struct.methodobject.MethodObject.is_android_api”hJNt”(jukŒquark.core.struct.registerobject.RegisterObject.called_by_func”hJNt”(jukŒGcurrent_type (quark.core.struct.registerobject.RegisterObject property)”Œcheck_item (quark.core.struct.ruleobject.RuleObject attribute)”Œ2quark.core.struct.ruleobject.RuleObject.check_item”hJNt”(jukŒ8crime (quark.core.struct.ruleobject.RuleObject property)”Œ-quark.core.struct.ruleobject.RuleObject.crime”hJNt”(jukŒget_table() (quark.core.struct.tableobject.TableObject method)”Œ3quark.core.struct.tableobject.TableObject.get_table”hJNt”(jukŒ@hash_table (quark.core.struct.tableobject.TableObject attribute)”Œ4quark.core.struct.tableobject.TableObject.hash_table”hJNt”(jukŒ;insert() (quark.core.struct.tableobject.TableObject method)”Œ0quark.core.struct.tableobject.TableObject.insert”hJNt”(jukŒ8pop() (quark.core.struct.tableobject.TableObject method)”Œ-quark.core.struct.tableobject.TableObject.pop”hJNt”(jqkŒmodule; quark.core.struct”Œmodule-quark.core.struct”hJNt”eją]”((jqkŒmodule; quark.evaluator.pyeval”Œmodule-quark.evaluator.pyeval”hJNt”(jukŒ(PyEval (class in quark.evaluator.pyeval)”Œquark.evaluator.pyeval.PyEval”hJNt”(jukŒ2AGET_KIND() (quark.evaluator.pyeval.PyEval method)”Œ'quark.evaluator.pyeval.PyEval.AGET_KIND”hJNt”(jukŒ7AGET_WIDE_KIND() (quark.evaluator.pyeval.PyEval method)”Œ,quark.evaluator.pyeval.PyEval.AGET_WIDE_KIND”hJNt”(jukŒ2APUT_KIND() (quark.evaluator.pyeval.PyEval method)”Œ'quark.evaluator.pyeval.PyEval.APUT_KIND”hJNt”(jukŒ7APUT_WIDE_KIND() (quark.evaluator.pyeval.PyEval method)”Œ,quark.evaluator.pyeval.PyEval.APUT_WIDE_KIND”hJNt”(jukŒ3BINOP_KIND() (quark.evaluator.pyeval.PyEval method)”Œ(quark.evaluator.pyeval.PyEval.BINOP_KIND”hJNt”(jukŒ2CAST_TYPE() (quark.evaluator.pyeval.PyEval method)”Œ'quark.evaluator.pyeval.PyEval.CAST_TYPE”hJNt”(jukŒ.CONST() (quark.evaluator.pyeval.PyEval method)”Œ#quark.evaluator.pyeval.PyEval.CONST”hJNt”(jukŒ4CONST_CLASS() (quark.evaluator.pyeval.PyEval method)”Œ)quark.evaluator.pyeval.PyEval.CONST_CLASS”hJNt”(jukŒ3CONST_FOUR() (quark.evaluator.pyeval.PyEval method)”Œ(quark.evaluator.pyeval.PyEval.CONST_FOUR”hJNt”(jukŒ:CONST_HIGHSIXTEEN() (quark.evaluator.pyeval.PyEval method)”Œ/quark.evaluator.pyeval.PyEval.CONST_HIGHSIXTEEN”hJNt”(jukŒ6CONST_SIXTEEN() (quark.evaluator.pyeval.PyEval method)”Œ+quark.evaluator.pyeval.PyEval.CONST_SIXTEEN”hJNt”(jukŒ5CONST_STRING() (quark.evaluator.pyeval.PyEval method)”Œ*quark.evaluator.pyeval.PyEval.CONST_STRING”hJNt”(jukŒ3CONST_WIDE() (quark.evaluator.pyeval.PyEval method)”Œ(quark.evaluator.pyeval.PyEval.CONST_WIDE”hJNt”(jukŒ?CONST_WIDE_HIGHSIXTEEN() (quark.evaluator.pyeval.PyEval method)”Œ4quark.evaluator.pyeval.PyEval.CONST_WIDE_HIGHSIXTEEN”hJNt”(jukŒ;CONST_WIDE_SIXTEEN() (quark.evaluator.pyeval.PyEval method)”Œ0quark.evaluator.pyeval.PyEval.CONST_WIDE_SIXTEEN”hJNt”(jukŒ>CONST_WIDE_THIRTY_TWO() (quark.evaluator.pyeval.PyEval method)”Œ3quark.evaluator.pyeval.PyEval.CONST_WIDE_THIRTY_TWO”hJNt”(jukŒ>FILLED_NEW_ARRAY_KIND() (quark.evaluator.pyeval.PyEval method)”Œ3quark.evaluator.pyeval.PyEval.FILLED_NEW_ARRAY_KIND”hJNt”(jukŒ6INVOKE_CUSTOM() (quark.evaluator.pyeval.PyEval method)”Œ+quark.evaluator.pyeval.PyEval.INVOKE_CUSTOM”hJNt”(jukŒ6INVOKE_DIRECT() (quark.evaluator.pyeval.PyEval method)”Œ+quark.evaluator.pyeval.PyEval.INVOKE_DIRECT”hJNt”(jukŒ9INVOKE_INTERFACE() (quark.evaluator.pyeval.PyEval method)”Œ.quark.evaluator.pyeval.PyEval.INVOKE_INTERFACE”hJNt”(jukŒ;INVOKE_POLYMORPHIC() (quark.evaluator.pyeval.PyEval method)”Œ0quark.evaluator.pyeval.PyEval.INVOKE_POLYMORPHIC”hJNt”(jukŒ6INVOKE_STATIC() (quark.evaluator.pyeval.PyEval method)”Œ+quark.evaluator.pyeval.PyEval.INVOKE_STATIC”hJNt”(jukŒ5INVOKE_SUPER() (quark.evaluator.pyeval.PyEval method)”Œ*quark.evaluator.pyeval.PyEval.INVOKE_SUPER”hJNt”(jukŒ7INVOKE_VIRTUAL() (quark.evaluator.pyeval.PyEval method)”Œ,quark.evaluator.pyeval.PyEval.INVOKE_VIRTUAL”hJNt”(jukŒ=INVOKE_VIRTUAL_RANGE() (quark.evaluator.pyeval.PyEval method)”Œ2quark.evaluator.pyeval.PyEval.INVOKE_VIRTUAL_RANGE”hJNt”(jukŒ2MOVE_KIND() (quark.evaluator.pyeval.PyEval method)”Œ'quark.evaluator.pyeval.PyEval.MOVE_KIND”hJNt”(jukŒ4MOVE_RESULT() (quark.evaluator.pyeval.PyEval method)”Œ)quark.evaluator.pyeval.PyEval.MOVE_RESULT”hJNt”(jukŒ;MOVE_RESULT_OBJECT() (quark.evaluator.pyeval.PyEval method)”Œ0quark.evaluator.pyeval.PyEval.MOVE_RESULT_OBJECT”hJNt”(jukŒ9MOVE_RESULT_WIDE() (quark.evaluator.pyeval.PyEval method)”Œ.quark.evaluator.pyeval.PyEval.MOVE_RESULT_WIDE”hJNt”(jukŒ9NEG_AND_NOT_KIND() (quark.evaluator.pyeval.PyEval method)”Œ.quark.evaluator.pyeval.PyEval.NEG_AND_NOT_KIND”hJNt”(jukŒ2NEW_ARRAY() (quark.evaluator.pyeval.PyEval method)”Œ'quark.evaluator.pyeval.PyEval.NEW_ARRAY”hJNt”(jukŒ5NEW_INSTANCE() (quark.evaluator.pyeval.PyEval method)”Œ*quark.evaluator.pyeval.PyEval.NEW_INSTANCE”hJNt”(jukŒBget_method_pattern() (quark.evaluator.pyeval.PyEval static method)”Œ0quark.evaluator.pyeval.PyEval.get_method_pattern”hJNt”(jukŒ3show_table() (quark.evaluator.pyeval.PyEval method)”Œ(quark.evaluator.pyeval.PyEval.show_table”hJNt”(jukŒ+logger() (in module quark.evaluator.pyeval)”Œquark.evaluator.pyeval.logger”hJNt”(jqkŒmodule; quark.evaluator”Œmodule-quark.evaluator”hJNt”ejŽ]”((jqkŒmodule; quark.forensic.forensic”Œmodule-quark.forensic.forensic”hJNt”(jukŒ+Forensic (class in quark.forensic.forensic)”Œ quark.forensic.forensic.Forensic”hJNt”(jukŒ8all_strings (quark.forensic.forensic.Forensic attribute)”Œ,quark.forensic.forensic.Forensic.all_strings”hJNt”(jukŒ0apk (quark.forensic.forensic.Forensic attribute)”Œ$quark.forensic.forensic.Forensic.apk”hJNt”(jukŒ;get_all_strings() (quark.forensic.forensic.Forensic method)”Œ0quark.forensic.forensic.Forensic.get_all_strings”hJNt”(jukŒ;get_android_api() (quark.forensic.forensic.Forensic method)”Œ0quark.forensic.forensic.Forensic.get_android_api”hJNt”(jukŒ6get_base64() (quark.forensic.forensic.Forensic method)”Œ+quark.forensic.forensic.Forensic.get_base64”hJNt”(jukŒ7get_content() (quark.forensic.forensic.Forensic method)”Œ,quark.forensic.forensic.Forensic.get_content”hJNt”(jukŒ4get_file() (quark.forensic.forensic.Forensic method)”Œ)quark.forensic.forensic.Forensic.get_file”hJNt”(jukŒ2get_ip() (quark.forensic.forensic.Forensic method)”Œ'quark.forensic.forensic.Forensic.get_ip”hJNt”(jukŒ3get_url() (quark.forensic.forensic.Forensic method)”Œ(quark.forensic.forensic.Forensic.get_url”hJNt”(jqkŒ"module; quark.forensic.vt_analysis”Œ!module-quark.forensic.vt_analysis”hJNt”(jukŒ0VTAnalysis (class in quark.forensic.vt_analysis)”Œ%quark.forensic.vt_analysis.VTAnalysis”hJNt”(jukŒCanalyze_multi_file() (quark.forensic.vt_analysis.VTAnalysis method)”Œ8quark.forensic.vt_analysis.VTAnalysis.analyze_multi_file”hJNt”(jukŒDanalyze_single_file() (quark.forensic.vt_analysis.VTAnalysis method)”Œ9quark.forensic.vt_analysis.VTAnalysis.analyze_single_file”hJNt”(jukŒ?change_api_key() (quark.forensic.vt_analysis.VTAnalysis method)”Œ4quark.forensic.vt_analysis.VTAnalysis.change_api_key”hJNt”(jukŒHcheck_api_key_available() (quark.forensic.vt_analysis.VTAnalysis method)”Œ=quark.forensic.vt_analysis.VTAnalysis.check_api_key_available”hJNt”(jukŒBget_api_keys_list() (quark.forensic.vt_analysis.VTAnalysis method)”Œ7quark.forensic.vt_analysis.VTAnalysis.get_api_keys_list”hJNt”(jukŒ=get_file_md5() (quark.forensic.vt_analysis.VTAnalysis method)”Œ2quark.forensic.vt_analysis.VTAnalysis.get_file_md5”hJNt”(jukŒlŒmethod”‰t””Œ-quark.core.quark.Quark.check_parameter_values”jp(jģjAlŒmethod”‰t””Œ%quark.core.quark.Quark.check_sequence”jp(jģjDlŒmethod”‰t””Œ%quark.core.quark.Quark.find_api_usage”jp(jģjGlŒmethod”‰t””Œ(quark.core.quark.Quark.find_intersection”jp(jģjJlŒmethod”‰t””Œ+quark.core.quark.Quark.find_previous_method”jp(jģjMlŒmethod”‰t””Œ+quark.core.quark.Quark.generate_json_report”jp(jģjPlŒmethod”‰t””Œ&quark.core.quark.Quark.get_json_report”jp(jģjSlŒmethod”‰t””Œ.quark.core.quark.Quark.method_recursive_search”jp(jģjVlŒmethod”‰t””Œquark.core.quark.Quark.run”jp(jģjYlŒmethod”‰t””Œ&quark.core.quark.Quark.show_call_graph”jp(jģj\lŒmethod”‰t””Œ)quark.core.quark.Quark.show_detail_report”jp(jģj_lŒmethod”‰t””Œ(quark.core.quark.Quark.show_label_report”jp(jģjblŒmethod”‰t””Œ/quark.core.quark.Quark.show_rule_classification”jp(jģjelŒmethod”‰t””Œ*quark.core.quark.Quark.show_summary_report”jp(jģjhlŒmethod”‰t””Œquark.core.rzapkinfo”jp(jģjkljp‰t””Œquark.core.rzapkinfo.RizinCache”jp(jģjnlŒ attribute”‰t””Œquark.core.rzapkinfo.RizinImp”jp(jģjqlŒclass”‰t””Œ(quark.core.rzapkinfo.RizinImp.activities”jp(jģjtlŒproperty”‰t””Œ)quark.core.rzapkinfo.RizinImp.all_methods”jp(jģjwlŒproperty”‰t””Œ*quark.core.rzapkinfo.RizinImp.android_apis”jp(jģjzlŒproperty”‰t””Œ*quark.core.rzapkinfo.RizinImp.apk_filename”jp(jģj}lŒ attribute”‰t””Œ*quark.core.rzapkinfo.RizinImp.apk_filepath”jp(jģj€lŒ attribute”‰t””Œ*quark.core.rzapkinfo.RizinImp.core_library”jp(jģjƒlŒ attribute”‰t””Œ,quark.core.rzapkinfo.RizinImp.custom_methods”jp(jģj†lŒproperty”‰t””Œ)quark.core.rzapkinfo.RizinImp.find_method”jp(jģj‰lŒmethod”‰t””Œ1quark.core.rzapkinfo.RizinImp.get_method_bytecode”jp(jģjŒlŒmethod”‰t””Œ)quark.core.rzapkinfo.RizinImp.get_strings”jp(jģjlŒmethod”‰t””Œ/quark.core.rzapkinfo.RizinImp.get_wrapper_smali”jp(jģj’lŒmethod”‰t””Œ'quark.core.rzapkinfo.RizinImp.lowerfunc”jp(jģj•lŒmethod”‰t””Œ)quark.core.rzapkinfo.RizinImp.permissions”jp(jģj˜lŒproperty”‰t””Œ&quark.core.rzapkinfo.RizinImp.ret_type”jp(jģj›lŒ attribute”‰t””Œ4quark.core.rzapkinfo.RizinImp.subclass_relationships”jp(jģjžlŒproperty”‰t””Œ6quark.core.rzapkinfo.RizinImp.superclass_relationships”jp(jģjĄlŒproperty”‰t””Œ'quark.core.rzapkinfo.RizinImp.upperfunc”jp(jģj¤lŒmethod”‰t””Œ quark.core”jp(jģj§ljp‰t””Œquark.core.axmlreader”jp(jĢjĢljp‰t””Œ#quark.core.axmlreader.AxmlException”jp(jĢjŽlŒ exception”‰t””Œ quark.core.axmlreader.AxmlReader”jp(jĢjąlŒclass”‰t””Œ*quark.core.axmlreader.AxmlReader.axml_size”jp(jĢj´lŒproperty”‰t””Œ*quark.core.axmlreader.AxmlReader.file_size”jp(jĢjˇlŒproperty”‰t””Œ/quark.core.axmlreader.AxmlReader.get_attributes”jp(jĢjēlŒmethod”‰t””Œ+quark.core.axmlreader.AxmlReader.get_string”jp(jĢjŊlŒmethod”‰t””Œ-quark.core.axmlreader.AxmlReader.get_xml_tree”jp(jĢjĀlŒmethod”‰t””Œquark.core.axmlreader.ResValue”jp(jĢjÃlŒclass”‰t””Œ#quark.core.axmlreader.ResValue.data”jp(jĢjÆlŒ attribute”‰t””Œ#quark.core.axmlreader.ResValue.name”jp(jĢjÉlŒ attribute”‰t””Œ(quark.core.axmlreader.ResValue.namespace”jp(jĢjĖlŒ attribute”‰t””Œ#quark.core.axmlreader.ResValue.type”jp(jĢjĪlŒ attribute”‰t””Œ$quark.core.axmlreader.ResValue.value”jp(jĢjŌlŒ attribute”‰t””Œ$quark.core.axmlreader.Res_value_type”jp(jĢjÕlŒclass”‰t””Œ3quark.core.axmlreader.Res_value_type.TYPE_ATTRIBUTE”jp(jĢjØlŒ attribute”‰t””Œ3quark.core.axmlreader.Res_value_type.TYPE_DIMENSION”jp(jĢjÛlŒ attribute”‰t””Œ;quark.core.axmlreader.Res_value_type.TYPE_DYNAMIC_ATTRIBUTE”jp(jĢjŪlŒ attribute”‰t””Œ;quark.core.axmlreader.Res_value_type.TYPE_DYNAMIC_REFERENCE”jp(jĢjálŒ attribute”‰t””Œ9quark.core.axmlreader.Res_value_type.TYPE_FIRST_COLOR_INT”jp(jĢjälŒ attribute”‰t””Œ3quark.core.axmlreader.Res_value_type.TYPE_FIRST_INT”jp(jĢjįlŒ attribute”‰t””Œ/quark.core.axmlreader.Res_value_type.TYPE_FLOAT”jp(jĢjęlŒ attribute”‰t””Œ2quark.core.axmlreader.Res_value_type.TYPE_FRACTION”jp(jĢjílŒ attribute”‰t””Œ5quark.core.axmlreader.Res_value_type.TYPE_INT_BOOLEAN”jp(jĢjđlŒ attribute”‰t””Œ9quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB4”jp(jĢjķlŒ attribute”‰t””Œ9quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB8”jp(jĢjölŒ attribute”‰t””Œ8quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB4”jp(jĢjųlŒ attribute”‰t””Œ8quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB8”jp(jĢjülŒ attribute”‰t””Œ1quark.core.axmlreader.Res_value_type.TYPE_INT_DEC”jp(jĢj˙lŒ attribute”‰t””Œ1quark.core.axmlreader.Res_value_type.TYPE_INT_HEX”jp(jĢjmŒ attribute”‰t””Œ8quark.core.axmlreader.Res_value_type.TYPE_LAST_COLOR_INT”jp(jĢjmŒ attribute”‰t””Œ2quark.core.axmlreader.Res_value_type.TYPE_LAST_INT”jp(jĢjmŒ attribute”‰t””Œ.quark.core.axmlreader.Res_value_type.TYPE_NULL”jp(jĢj mŒ attribute”‰t””Œ3quark.core.axmlreader.Res_value_type.TYPE_REFERENCE”jp(jĢjmŒ attribute”‰t””Œ0quark.core.axmlreader.Res_value_type.TYPE_STRING”jp(jĢjmŒ attribute”‰t””Œ quark.core.interface.baseapkinfo”jp(jļjmjp‰t””Œ,quark.core.interface.baseapkinfo.BaseApkinfo”jp(jļjmŒclass”‰t””Œ7quark.core.interface.baseapkinfo.BaseApkinfo.activities”jp(jļjmŒproperty”‰t””Œ8quark.core.interface.baseapkinfo.BaseApkinfo.all_methods”jp(jļjmŒproperty”‰t””Œ9quark.core.interface.baseapkinfo.BaseApkinfo.android_apis”jp(jļj!mŒproperty”‰t””Œ9quark.core.interface.baseapkinfo.BaseApkinfo.apk_filename”jp(jļj$mŒ attribute”‰t””Œ9quark.core.interface.baseapkinfo.BaseApkinfo.apk_filepath”jp(jļj'mŒ attribute”‰t””Œ9quark.core.interface.baseapkinfo.BaseApkinfo.core_library”jp(jļj*mŒ attribute”‰t””Œ;quark.core.interface.baseapkinfo.BaseApkinfo.custom_methods”jp(jļj-mŒproperty”‰t””Œ5quark.core.interface.baseapkinfo.BaseApkinfo.filename”jp(jļj0mŒproperty”‰t””Œ5quark.core.interface.baseapkinfo.BaseApkinfo.filesize”jp(jļj3mŒproperty”‰t””Œ8quark.core.interface.baseapkinfo.BaseApkinfo.find_method”jp(jļj6mŒmethod”‰t””Œ@quark.core.interface.baseapkinfo.BaseApkinfo.get_method_bytecode”jp(jļj9mŒmethod”‰t””Œ8quark.core.interface.baseapkinfo.BaseApkinfo.get_strings”jp(jļjquark.core.interface.baseapkinfo.BaseApkinfo.get_wrapper_smali”jp(jļjBmŒmethod”‰t””Œ6quark.core.interface.baseapkinfo.BaseApkinfo.lowerfunc”jp(jļjEmŒmethod”‰t””Œ0quark.core.interface.baseapkinfo.BaseApkinfo.md5”jp(jļjHmŒproperty”‰t””Œ8quark.core.interface.baseapkinfo.BaseApkinfo.permissions”jp(jļjKmŒproperty”‰t””Œ5quark.core.interface.baseapkinfo.BaseApkinfo.ret_type”jp(jļjNmŒ attribute”‰t””ŒEquark.core.interface.baseapkinfo.BaseApkinfo.superclass_relationships”jp(jļjQmŒproperty”‰t””Œ6quark.core.interface.baseapkinfo.BaseApkinfo.upperfunc”jp(jļjTmŒmethod”‰t””Œquark.core.interface”jp(jļjWmjp‰t””Œ quark.core.struct.bytecodeobject”jp(jŠj[mjp‰t””Œ/quark.core.struct.bytecodeobject.BytecodeObject”jp(jŠj^mŒclass”‰t””Œ8quark.core.struct.bytecodeobject.BytecodeObject.mnemonic”jp(jŠjamŒproperty”‰t””Œ9quark.core.struct.bytecodeobject.BytecodeObject.parameter”jp(jŠjdmŒproperty”‰t””Œ9quark.core.struct.bytecodeobject.BytecodeObject.registers”jp(jŠjgmŒproperty”‰t””Œquark.core.struct.methodobject”jp(jŠjjmjp‰t””Œ+quark.core.struct.methodobject.MethodObject”jp(jŠjmmŒclass”‰t””Œ8quark.core.struct.methodobject.MethodObject.access_flags”jp(jŠjpmŒ attribute”‰t””Œ1quark.core.struct.methodobject.MethodObject.cache”jp(jŠjsmŒ attribute”‰t””Œ6quark.core.struct.methodobject.MethodObject.class_name”jp(jŠjvmŒ attribute”‰t””Œ6quark.core.struct.methodobject.MethodObject.descriptor”jp(jŠjymŒ attribute”‰t””Œ5quark.core.struct.methodobject.MethodObject.full_name”jp(jŠj|mŒproperty”‰t””Œ:quark.core.struct.methodobject.MethodObject.is_android_api”jp(jŠjmŒmethod”‰t””Œ0quark.core.struct.methodobject.MethodObject.name”jp(jŠj‚mŒ attribute”‰t””Œ quark.core.struct.registerobject”jp(jŠj…mjp‰t””Œ/quark.core.struct.registerobject.RegisterObject”jp(jŠjˆmŒclass”‰t””Œ>quark.core.struct.registerobject.RegisterObject.called_by_func”jp(jŠj‹mŒproperty”‰t””ŒpjÃu(j˛j¤khJhJ‰t””jIpjÃu(j˛j­khJhJ‰t””jLpjÃu(jģjąkhJhJ‰t””j›pjÃu(jģjíkhJhJ‰t””jâpjÃu(jģj#lhJhJ‰t””jõpjÃu(jģj2lhJhJ‰t””j@qjÃu(jģjklhJhJ‰t””jqjÃu(jģj§lhJhJ‰t””j’qjÃu(jĢjĢlhJhJ‰t””jrjÃu(jļjmhJhJ‰t””jtrjÃu(jļjWmhJhJ‰t””jwrjÃu(jŠj[mhJhJ‰t””jŠrjÃu(jŠjjmhJhJ‰t””j­rjÃu(jŠj…mhJhJ‰t””jĖrjÃu(jŠjmhJhJ‰t””jķrjÃu(jŠjģmhJhJ‰t””jsjÃu(jŠjĐmhJhJ‰t””jsjÃu(jąjÔmhJhJ‰t””j¤sjÃu(jąjCnhJhJ‰t””j§sjÃu(jŽjGnhJhJ‰t””jŌsjÃu(jŽjhnhJhJ‰t””jtjÃu(jŽjŒnhJhJ‰t””jtjÃu(j¯jnhJhJ‰t””j tjÃu(j¯j–nhJhJ‰t””jtjÃu(j¯jĸnhJhJ‰t””j!tjÃu(j¯j¨nhJhJ‰t””j”tjÃu(jšjohJhJ‰t””jÃtjÃu(jˇj%ohJhJ‰t””jútjÃu(jˇjOohJhJ‰t””j ujÃu(jˇj^ohJhJ‰t””j ujÃu(jˇjmohJhJ‰t””j7ujÃu(jˇjohJhJ‰t””jVujÃu(jˇj—ohJhJ‰t””jqujÃu(jˇjŦohJhJ‰t””jŒujÃu(jˇjÁohJhJ‰t””jujÃu(jŗjÅohJhJ‰t””jžujÃu(jŗjéohJhJ‰t””uhNKuŒrst”}”(jIk}”hNKuŒstd”}”(Œ progoptions”}”jIk}”Œlabels”}”(Œgenindex”j$vhJŒ sphinx.locale”Œ_TranslationProxy”“”(j%vŒ_lazy_translate”“”jĖŒgeneral”ŒIndex”t””j)vjĖj*vj+v‡”†”b‡”Œmodindex”Œ py-modindex”hJj'v(j)vjĖj*vŒ Module Index”t””j)vjĖj*vj3v‡”†”b‡”Œsearch”j9vhJj'v(j)vjĖj*vŒ Search Page”t””j)vjĖj*vj:v‡”†”b‡”Œ py-modindex”j@vhJŒPython Module Index”‡”Œdir_scan”jĸŒdir-scan”ŒDirectory Scanning”‡”uŒ anonlabels”}”(j$vj$vhJ†”j1vj2vhJ†”j9vj9vhJ†”j@vj@vhJ†”jCvjĸjDv†”uhNKŒterms”}”uuŒimages”Œ sphinx.util”ŒFilenameUniqDict”“”)””bŒdlfiles”jQvŒ DownloadFiles”“”)”Œoriginal_image_uri”}”Œ temp_data”}”Œ ref_context”}”ub.quark-engine-23.4.1/docs/build/doctrees/index.doctree000066400000000000000000000140501442215066700225130ustar00rootroot00000000000000€•Œsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”(Œdocutils.nodes”Œcomment”“”)”}”(hŒŅquick-engine documentation master file, created by sphinx-quickstart on Mon Nov 4 09:49:14 2019. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive.”h]”h ŒText”“”ŒŅquick-engine documentation master file, created by sphinx-quickstart on Mon Nov 4 09:49:14 2019. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive.”…””}”Œparent”h sbaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ xml:space”Œpreserve”uŒtagname”h hhŒ _document”hŒsource”Œ@/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/index.rst”Œline”Kubh Œsection”“”)”}”(hhh]”(h Œtitle”“”)”}”(hŒQuark-Engine Book”h]”hŒQuark-Engine Book”…””}”(hh1h&hh'Nh)Nubah}”(h]”h]”h]”h]”h!]”uh%h/hh,h&hh'h(h)Kubh Œ paragraph”“”)”}”(hXQuark Engine is an *open source* software for automating analysis of suspicious Android application. To do so it makes use of custom Dalvik Bytecode Loader and unique scoring system that detect malicious behaviors and calculate threat level within seconds.”h]”(hŒQuark Engine is an ”…””}”(hhAh&hh'Nh)Nubh Œemphasis”“”)”}”(hŒ *open source*”h]”hŒ open source”…””}”(hhKh&hh'Nh)Nubah}”(h]”h]”h]”h]”h!]”uh%hIhhAubhŒā software for automating analysis of suspicious Android application. To do so it makes use of custom Dalvik Bytecode Loader and unique scoring system that detect malicious behaviors and calculate threat level within seconds.”…””}”(hhAh&hh'Nh)Nubeh}”(h]”h]”h]”h]”h!]”uh%h?h'h(h)K hh,h&hubh@)”}”(hŒFThis guide will explain how to set up Quark, use it, and customize it.”h]”hŒFThis guide will explain how to set up Quark, use it, and customize it.”…””}”(hhch&hh'Nh)Nubah}”(h]”h]”h]”h]”h!]”uh%h?h'h(h)Khh,h&hubh Œcompound”“”)”}”(hhh]”hŒtoctree”“”)”}”(hhh]”h}”(h]”h]”h]”h]”h!]”hŒindex”Œentries”]”(NŒ install_index”†”NŒ quark_script”†”NŒquark_mit_program”†”NŒ quark_reports”†”NŒaddRules”†”NŒrule_generation”†”NŒ integration”†”NŒ dev_index”†”NŒ contribution”†”NŒ organization”†”NŒdoc”†”NŒquark_inside_index”†”NŒmodules”†”NŒfaq”†”eŒ includefiles”]”(h„h†hˆhŠhŒhŽhh’h”h–h˜hšhœhžeŒmaxdepth”KŒcaption”Œ Contents:”Œglob”‰Œhidden”‰Œ includehidden”‰Œnumbered”KŒ titlesonly”‰Œ rawentries”]”Œ rawcaption”h¤uh%hvh'h(h)Khhsubah}”(h]”h]”Œtoctree-wrapper”ah]”h]”h!]”uh%hqhh,h&hh'h(h)Nubh+)”}”(hhh]”(h0)”}”(hŒIndices and tables”h]”hŒIndices and tables”…””}”(hhˇh&hh'Nh)Nubah}”(h]”h]”h]”h]”h!]”uh%h/hh´h&hh'h(h)K%ubh Œ bullet_list”“”)”}”(hhh]”(h Œ list_item”“”)”}”(hŒ:ref:`genindex`”h]”h@)”}”(hhÎh]”hŒ pending_xref”“”)”}”(hhÎh]”h Œinline”“”)”}”(hhÎh]”hŒgenindex”…””}”(hhÚh&hh'Nh)Nubah}”(h]”h]”(Œxref”Œstd”Œstd-ref”eh]”h]”h!]”uh%hØhhÕubah}”(h]”h]”h]”h]”h!]”Œrefdoc”hŒ refdomain”håŒreftype”Œref”Œ refexplicit”‰Œrefwarn”ˆŒ reftarget”Œgenindex”uh%hĶh'h(h)K'hhĐubah}”(h]”h]”h]”h]”h!]”uh%h?h'h(h)K'hhĖubah}”(h]”h]”h]”h]”h!]”uh%hĘhhĮh&hh'h(h)NubhË)”}”(hŒ:ref:`modindex`”h]”h@)”}”(hjh]”hÔ)”}”(hjh]”hŲ)”}”(hjh]”hŒmodindex”…””}”(hjh&hh'Nh)Nubah}”(h]”h]”(häŒstd”Œstd-ref”eh]”h]”h!]”uh%hØhj ubah}”(h]”h]”h]”h]”h!]”Œrefdoc”hŒ refdomain”jŒreftype”Œref”Œ refexplicit”‰Œrefwarn”ˆhöŒmodindex”uh%hĶh'h(h)K(hjubah}”(h]”h]”h]”h]”h!]”uh%h?h'h(h)K(hjubah}”(h]”h]”h]”h]”h!]”uh%hĘhhĮh&hh'h(h)NubhË)”}”(hŒ :ref:`search`”h]”h@)”}”(hj8h]”hÔ)”}”(hj8h]”hŲ)”}”(hj8h]”hŒsearch”…””}”(hj@h&hh'Nh)Nubah}”(h]”h]”(häŒstd”Œstd-ref”eh]”h]”h!]”uh%hØhj=ubah}”(h]”h]”h]”h]”h!]”Œrefdoc”hŒ refdomain”jJŒreftype”Œref”Œ refexplicit”‰Œrefwarn”ˆhöŒsearch”uh%hĶh'h(h)K)hj:ubah}”(h]”h]”h]”h]”h!]”uh%h?h'h(h)K)hj6ubah}”(h]”h]”h]”h]”h!]”uh%hĘhhĮh&hh'h(h)Nubeh}”(h]”h]”h]”h]”h!]”Œbullet”Œ*”uh%hÅh'h(h)K'hh´h&hubeh}”(h]”Œindices-and-tables”ah]”h]”Œindices and tables”ah]”h!]”uh%h*hh,h&hh'h(h)K%ubeh}”(h]”Œquark-engine-book”ah]”h]”Œquark-engine book”ah]”h!]”uh%h*hhh&hh'h(h)Kubeh}”(h]”h]”h]”h]”h!]”Œsource”h(uh%hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(h/NŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jŖŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h(Œ _destination”NŒ _config_files”]”Œfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(j}jzjujruŒ nametypes”}”(j}‰ju‰uh}”(jzh,jrh´uŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nh&hub.quark-engine-23.4.1/docs/build/doctrees/install.doctree000066400000000000000000000173551442215066700230650ustar00rootroot00000000000000€•âŒsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”Œdocutils.nodes”Œsection”“”)”}”(hhh]”(h Œtitle”“”)”}”(hŒInstalling Quark-Engine”h]”h ŒText”“”ŒInstalling Quark-Engine”…””}”(Œparent”hŒ _document”hŒsource”NŒline”NubaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”uŒtagname”hhh hhhŒB/home/zin/stuffs/lab/quark_pg/quark-engine/docs/source/install.rst”hKubh Œ paragraph”“”)”}”(hŒPyPi::”h]”hŒPyPi:”…””}”(hh/hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh Œ literal_block”“”)”}”(hŒ$ pip3 install -U quark-engine”h]”hŒ$ pip3 install -U quark-engine”…””}”hh?sbah}”(h!]”h#]”h%]”h']”h)]”Œ xml:space”Œpreserve”uh+h=hh,hKhh hhubh.)”}”(hŒInstall from Source::”h]”hŒInstall from Source:”…””}”(hhOhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK hh hhubh>)”}”(hŒ{$ git clone https://github.com/quark-engine/quark-engine.git $ cd quark-engine/ $ pipenv install --skip-lock $ pipenv shell”h]”hŒ{$ git clone https://github.com/quark-engine/quark-engine.git $ cd quark-engine/ $ pipenv install --skip-lock $ pipenv shell”…””}”hh]sbah}”(h!]”h#]”h%]”h']”h)]”hMhNuh+h=hh,hK hh hhubh.)”}”(hŒRun the help cmd of quark::”h]”hŒRun the help cmd of quark:”…””}”(hhkhhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh>)”}”(hŒ$ quark --help”h]”hŒ$ quark --help”…””}”hhysbah}”(h!]”h#]”h%]”h']”h)]”hMhNuh+h=hh,hKhh hhubh.)”}”(hŒ5Once you see the following msg, then you're all set::”h]”hŒ6Once you see the following msg, then you’re all set:”…””}”(hh‡hhhNhNubah}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hKhh hhubh>)”}”(hXãUsage: quark [OPTIONS] Quark is an Obfuscation-Neglect Android Malware Scoring System Options: -s, --summary TEXT Show summary report. Optionally specify the name of a rule/label -d, --detail TEXT Show detail report. Optionally specify the name of a rule/label -o, --output FILE Output report in JSON -a, --apk FILE APK file [required] -r, --rule PATH Rules directory [default: /Users/$USER/.quark-engine/quark-rules] -g, --graph Create call graph to call_graph_image directory -c, --classification Show rules classification -t, --threshold [100|80|60|40|20] Set the lower limit of the confidence threshold -i, --list [all|native|custom] List classes, methods and descriptors -p, --permission List Android permissions -l, --label [max|detailed] Show report based on label of rules -C, --comparison Behaviors comparison based on max confidence of rule labels --core-library [androguard|rizin] Specify the core library used to analyze an APK --multi-process INTEGER RANGE Allow analyzing APK with N processes, where N doesn't exceeds the number of usable CPUs - 1 to avoid memory exhaustion. --version Show the version and exit. --help Show this message and exit.”h]”hXãUsage: quark [OPTIONS] Quark is an Obfuscation-Neglect Android Malware Scoring System Options: -s, --summary TEXT Show summary report. Optionally specify the name of a rule/label -d, --detail TEXT Show detail report. Optionally specify the name of a rule/label -o, --output FILE Output report in JSON -a, --apk FILE APK file [required] -r, --rule PATH Rules directory [default: /Users/$USER/.quark-engine/quark-rules] -g, --graph Create call graph to call_graph_image directory -c, --classification Show rules classification -t, --threshold [100|80|60|40|20] Set the lower limit of the confidence threshold -i, --list [all|native|custom] List classes, methods and descriptors -p, --permission List Android permissions -l, --label [max|detailed] Show report based on label of rules -C, --comparison Behaviors comparison based on max confidence of rule labels --core-library [androguard|rizin] Specify the core library used to analyze an APK --multi-process INTEGER RANGE Allow analyzing APK with N processes, where N doesn't exceeds the number of usable CPUs - 1 to avoid memory exhaustion. --version Show the version and exit. --help Show this message and exit.”…””}”hh•sbah}”(h!]”h#]”h%]”h']”h)]”hMhNuh+h=hh,hKhh hhubh.)”}”(hŒpTo learn how to scan multiple samples in a directory, please have a look at :ref:`Directory Scanning `”h]”(hŒLTo learn how to scan multiple samples in a directory, please have a look at ”…””}”(hhŖhhhNhNubhŒ pending_xref”“”)”}”(hŒ$:ref:`Directory Scanning `”h]”h Œinline”“”)”}”(hh¯h]”hŒDirectory Scanning”…””}”(hhŗhhhNhNubah}”(h!]”h#]”(Œxref”Œstd”Œstd-ref”eh%]”h']”h)]”uh+hąhh­ubah}”(h!]”h#]”h%]”h']”h)]”Œrefdoc”Œinstall”Œ refdomain”hžŒreftype”Œref”Œ refexplicit”ˆŒrefwarn”ˆŒ reftarget”Œdir_scan”uh+hĢhh,hK7hhŖubeh}”(h!]”h#]”h%]”h']”h)]”uh+h-hh,hK7hh hhubeh}”(h!]”Œinstalling-quark-engine”ah#]”h%]”Œinstalling quark-engine”ah']”h)]”uh+h hhhhhh,hKubah}”(h!]”h#]”h%]”h']”h)]”Œsource”h,uh+hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h,Œ _destination”NŒ _config_files”]”Œfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”hŨhÚsŒ nametypes”}”hŨ‰sh!}”hÚh sŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nhhub.quark-engine-23.4.1/docs/build/html/000077500000000000000000000000001442215066700171715ustar00rootroot00000000000000quark-engine-23.4.1/docs/build/html/.buildinfo000066400000000000000000000003461442215066700211500ustar00rootroot00000000000000# Sphinx build info version 1 # This file hashes the configuration used when building these files. When it is not found, a full rebuild will be done. config: 3d71f6476d75660fe7e4de6c4539ed9b tags: 645f666f9bcd5a90fca523b33c5a78b7 quark-engine-23.4.1/docs/build/html/_sources/000077500000000000000000000000001442215066700210135ustar00rootroot00000000000000quark-engine-23.4.1/docs/build/html/_sources/addRules.rst.txt000066400000000000000000000110661442215066700241320ustar00rootroot00000000000000+++++++++ Add Rules +++++++++ Android malware analysis engine is not a new story. Every antivirus company has their own secrets to build it. With curiosity, we develop a malware scoring system from the perspective of Taiwan Criminal Law in an easy but solid way. We have an order theory of criminal which explains stages of committing a crime. For example, crime of murder consists of five stages, they are determined, conspiracy, preparation, start and practice. The latter the stage the more we’re sure that the crime is practiced. According to the above principle, we developed our order theory of android malware. We develop five stages to see if the malicious activity is being practiced. They are 1. Permission requested. 2. Native API call. 3. Certain combination of native API. 4. Calling sequence of native API. 5. APIs that handle the same register. We not only define malicious activities and their stages but also develop weights and thresholds for calculating the threat level of a malware. But before we explain how to set weights and thresholds, we need to define crimes and corresponding five stages. An example of defining crime "Send Location via SMS" is shown below. We use json format to construct the rule of the crime. .. code-block:: python :linenos: { "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "score": 4 } So let me walk you through the json file. .. code-block:: python "crime": "Send Location via SMS" First, we define the crime. Our principle of constructing a crime is ``Action + Target``. In this example, the action is "Send SMS" and the target is Location info. Therefore, the crime of our first rule is defined as: "Send Location via SMS". .. code-block:: python "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ] ``permission`` is where we fill in permission requested by the apk to practice the crime. For instance, we need permission ``android.permission.SEND_SMS`` to send information through SMS. We also need permission ``android.permission.ACCESS_COARSE_LOCATION`` and ``android.permission.ACCESS_FINE_LOCATION`` to practice the crime. .. code-block:: python "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ] ``api`` means this field can be used to practice analysis from stage 2 to stage 4. In stage 2, we need to find key native APIs that do the ``Action`` and ``Target``. And since the API method name can be used by self-defined class. We need to fill in information of both the native API class name and method name. .. note:: We like to keep our crime/rule simple. So do not fill in more than 2 native APIs. In stage 3, we will find the combination of the native APIs we define in stage 2. Further, we will check whether they're called in the same method. If so, we will say that the combination of crime is caught! And we don't need to do anything to adjust the ``api`` field. .. note:: We know that the native API might be wrapped in other methods. We use XREF to solve this problem. In stage 4, we will find whether the native APIs are called in a right sequence. If so, we have more confidence that the crime is practiced. .. note:: Please place the APIs in the order as the crime is being committed. In stage 5, we will check whether the native APIs are operating the same parameter. If so, we are 100% sure that the crime is practiced. As for the field ``score``, we will be updating our principles of weight defining. please check that part later. quark-engine-23.4.1/docs/build/html/_sources/coding_style.rst.txt000066400000000000000000000102351442215066700250470ustar00rootroot00000000000000============ Coding Style ============ Having a clean and structured code is very important for the sustainable development of this project. `Cuckoo Sandbox `_ is a good example. So we follow most of their style for maintaining the code base. We do help out with code refactoring where required, but please try to do as much as possible on your own. Essentially Quark's code style is based on `PEP 8 - Style Guide for Python Code `_ and `PEP 257 -- Docstring Conventions `_. Formatting ========== File and folder naming ---------------------- All characters in the filenames or folder names should be lowercase letters. Copyright header ---------------- All existing source code files start with the following copyright header:: # This file is part of Quark Engine - https://quark-engine.rtfd.io # See GPLv3 for copying permission. Indentation ----------- The code must have a 4-spaces-tabs indentation. Since Python enforce the indentation, make sure to configure your editor properly or your code might cause malfunctioning. Maximum Line Length ------------------- Limit all lines to a maximum of 79 characters. Blank Lines ----------- Separate the class definition and the top level function with one blank line. Methods definitions inside a class are separated by a single blank line:: class MyClass: """Doing something.""" def __init__(self): """Initialize""" pass def do_it(self, what): """Do it. @param what: do what. """ pass Use blank lines in functions, sparingly, to isolate logic sections. Import blocks are separated by a single blank line, import blocks are separated from classes by one blank line. Imports ------- Imports must be on separate lines. If you're importing multiple objects from a package, use a single line:: from lib import a, b, c **NOT**:: from lib import a from lib import b from lib import c Always specify explicitly the objects to import:: from lib import a, b, c **NOT**:: from lib import * Strings ------- Strings must be delimited by double quotes ("). Printing and Logging -------------------- We discourage the use of ``print()``: if you need to log an event please use Python's ``logging`` which is already initialized by Quark. In your module add:: import logging log = logging.getLogger(__name__) And use the ``log`` handle. More details can be found in the Python documentation, but as follows is an example:: log.info("Log message") Exceptions ========== Custom exceptions will be defined in the ``quark/utils/exceptions.py`` file. Naming ------ Custom exception names must start with "Quark" and end with "Error" if it represents an unexpected malfunction. Exception handling ------------------ When catching an exception and accessing its handle, use ``as e``:: try: foo() except Exception as e: bar() **NOT**:: try: foo() except Exception, something: bar() It's a good practice use "e" instead of "e.message". Documentation ============= All code must be documented in docstring format, see `PEP 257 -- Docstring Conventions `_. Additional comments may be added in logical blocks to make the code easier to understand. As for the contribution to `quark rtdf `_. Please use ``make html`` to build the html files. And commit with rst files altogether. So that users can read docs when offline. Automated testing ================= We believe in automated testing to provide high quality code and avoid easily overlooked mistakes. When possible, all code must be committed with proper unit tests. Particular attention must be placed when fixing bugs: it's good practice to write unit tests to reproduce the bug. All unit tests and fixtures are placed in the tests folder in the quark-engine/tests. We have adopted `Pytest `_ as unit testing framework. Also we adopted `travis ci `_ for the continuous integration. quark-engine-23.4.1/docs/build/html/_sources/contribution.rst.txt000066400000000000000000000102621442215066700251030ustar00rootroot00000000000000++++++++++++ Contribution ++++++++++++ Different stages of core members ================================ * ``Contributor``: As soon as you post a comment, fix a typo, ask a question or report a bug etc. , you become an active contributor. * ``Contributor followed by a mentor``: Spotted active contributors can be asked to get a mentor to speedup their learning of this project. * ``Core member``: Once other core members consider that a contributor is ready to be promoted, a core member opens a private vote for the candidate. Core members ============ +---------------+-------------------------------------------------------------------------------------------+ | Name | Contribution | +===============+===========================================================================================+ | KunYu Chen | ``BDFL, Project Founder, The man who runs the show`` | +---------------+-------------------------------------------------------------------------------------------+ | YuShiang Dang | ``UI/UX Team Lead, Core Developer, Rule generation system, Malware Analyst`` | +---------------+-------------------------------------------------------------------------------------------+ | ShengFone Lu | ``Core Developer, Triage Team Lead, Rizin Engine Implementation`` | +---------------+-------------------------------------------------------------------------------------------+ | AnWei Kung | ``Core Developer, Triage Team Member, Backend (database, downloader, API), Testing`` | +---------------+-------------------------------------------------------------------------------------------+ | Zin Wong | ``Triage Team Member`` | +---------------+-------------------------------------------------------------------------------------------+ | Zee | ``UI/UX Team Member`` | +---------------+-------------------------------------------------------------------------------------------+ Alumni ====== +---------------+-------------------------------------------------------------------------------------------+ | Name | Contribution | +===============+===========================================================================================+ | JunWei Song | ``Project Co-Founder, Engine Implementation (Malware Scoring System), Frontend, Testing`` | +---------------+-------------------------------------------------------------------------------------------+ | ShunTe Lin | ``Core Developer, Triage Team Member`` | +---------------+-------------------------------------------------------------------------------------------+ | ChaoWen Li | ``Quark Community Development`` | +---------------+-------------------------------------------------------------------------------------------+ | Sin | ``Malware Analyst, Detection Rules, Engine Implementation (Malware Anti-Detection)`` | +---------------+-------------------------------------------------------------------------------------------+ | IokJin Sih | ``Malware Analyst`` | +---------------+-------------------------------------------------------------------------------------------+ | YunChen Liu | ``Artwork Design, Frontend`` | +---------------+-------------------------------------------------------------------------------------------+ Consultants =========== Consultant is the one who is important to this project and shows great support to our engine. +-----------------+ | Consultant | +=================+ | Chun-I Fan | +-----------------+ | HY Lin | +-----------------+ | Jheng-Jia Huang | +-----------------+ | Lin Gao-Yu | +-----------------+ | Pippen Wang | +-----------------+ quark-engine-23.4.1/docs/build/html/_sources/dev.rst.txt000066400000000000000000000032371442215066700231460ustar00rootroot00000000000000================= Development Notes ================= Git Branching Model =================== Quark-engine source code is available in our `official Git repository`_. .. _`official Git repository`: https://github.com/quark-engine/quark-engine We have 6 branches. * **master**: - This is the stable and releasing branch. * **dev**: - This is where we commit our beta version. - When all the features are fully tested, it will be merged to ``master`` branch. * **feature**: - This is where we develop new features for the project. - Once it's done, it will be merged to ``dev`` branch. * **testing**: - This is where we write tests for the codebase and new feature. - When it's done, it will be merged to ``dev`` branch. * **hotfix**: - This branch is used to fix bugs. - Will be merged to ``dev`` and ``master`` * **doc**: - This is where we update our documentation. - Just like hotfix branch, will be merged to ``dev`` and ``master``. Release Versioning ================== Our versioning logic is quite simple. We use the year and month of the release as a version number. ``v19.10`` means we release this version in Oct. 2019. Ticketing System ================ To submit reports or feature requests, please use GitHub's `Issue`_ tracking system. .. _`Issue`: https://github.com/quark-engine/quark-engine/issues Contribute ========== To submit your patch, just create a Pull Request from your GitHub fork. If you don't know how to create a Pull Request take a look to `GitHub help`_. .. _`GitHub help`: https://help.github.com/articles/using-pull-requests/ quark-engine-23.4.1/docs/build/html/_sources/dev_index.rst.txt000066400000000000000000000002521442215066700243270ustar00rootroot00000000000000.. Development chapter frontpage Development =========== This chapter explains how to write Quark's code and how to contribute. .. toctree:: dev coding_style quark-engine-23.4.1/docs/build/html/_sources/index.rst.txt000066400000000000000000000017021442215066700234720ustar00rootroot00000000000000.. quick-engine documentation master file, created by sphinx-quickstart on Mon Nov 4 09:49:14 2019. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive. ================= Quark-Engine Book ================= Quark Engine is an *open source* software for automating analysis of suspicious Android application. To do so it makes use of custom Dalvik Bytecode Loader and unique scoring system that detect malicious behaviors and calculate threat level within seconds. This guide will explain how to set up Quark, use it, and customize it. .. toctree:: :maxdepth: 2 :caption: Contents: install_index quark_script quark_mit_program quark_reports addRules rule_generation integration dev_index contribution organization doc quark_inside_index modules faq Indices and tables ================== * :ref:`genindex` * :ref:`modindex` * :ref:`search` quark-engine-23.4.1/docs/build/html/_sources/install.rst.txt000066400000000000000000000045211442215066700240330ustar00rootroot00000000000000+++++++++++++++++++++++ Installing Quark-Engine +++++++++++++++++++++++ PyPi:: $ pip3 install -U quark-engine Install from Source:: $ git clone https://github.com/quark-engine/quark-engine.git $ cd quark-engine/ $ pipenv install --skip-lock $ pipenv shell Run the help cmd of quark:: $ quark --help Once you see the following msg, then you're all set:: Usage: quark [OPTIONS] Quark is an Obfuscation-Neglect Android Malware Scoring System Options: -s, --summary TEXT Show summary report. Optionally specify the name of a rule/label -d, --detail TEXT Show detail report. Optionally specify the name of a rule/label -o, --output FILE Output report in JSON -a, --apk FILE APK file [required] -r, --rule PATH Rules directory [default: /Users/$USER/.quark-engine/quark-rules] -g, --graph Create call graph to call_graph_image directory -c, --classification Show rules classification -t, --threshold [100|80|60|40|20] Set the lower limit of the confidence threshold -i, --list [all|native|custom] List classes, methods and descriptors -p, --permission List Android permissions -l, --label [max|detailed] Show report based on label of rules -C, --comparison Behaviors comparison based on max confidence of rule labels --core-library [androguard|rizin] Specify the core library used to analyze an APK --multi-process INTEGER RANGE Allow analyzing APK with N processes, where N doesn't exceeds the number of usable CPUs - 1 to avoid memory exhaustion. --version Show the version and exit. --help Show this message and exit. To learn how to scan multiple samples in a directory, please have a look at :ref:`Directory Scanning ` quark-engine-23.4.1/docs/build/html/_static/000077500000000000000000000000001442215066700206175ustar00rootroot00000000000000quark-engine-23.4.1/docs/build/html/_static/basic.css000066400000000000000000000347321442215066700224230ustar00rootroot00000000000000/* * basic.css * ~~~~~~~~~ * * Sphinx stylesheet -- basic theme. * * :copyright: Copyright 2007-2022 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ /* -- main layout ----------------------------------------------------------- */ div.clearer { clear: both; } div.section::after { display: block; content: ''; clear: left; } /* -- relbar ---------------------------------------------------------------- */ div.related { width: 100%; font-size: 90%; } div.related h3 { display: none; } div.related ul { margin: 0; padding: 0 0 0 10px; list-style: none; } div.related li { display: inline; } div.related li.right { float: right; margin-right: 5px; } /* -- sidebar --------------------------------------------------------------- */ div.sphinxsidebarwrapper { padding: 10px 5px 0 10px; } div.sphinxsidebar { float: left; width: 230px; margin-left: -100%; font-size: 90%; word-wrap: break-word; overflow-wrap : break-word; } div.sphinxsidebar ul { list-style: none; } div.sphinxsidebar ul ul, div.sphinxsidebar ul.want-points { margin-left: 20px; list-style: square; } div.sphinxsidebar ul ul { margin-top: 0; margin-bottom: 0; } div.sphinxsidebar form { margin-top: 10px; } div.sphinxsidebar input { border: 1px solid #98dbcc; font-family: sans-serif; font-size: 1em; } div.sphinxsidebar #searchbox form.search { overflow: hidden; } div.sphinxsidebar #searchbox input[type="text"] { float: left; width: 80%; padding: 0.25em; box-sizing: border-box; } div.sphinxsidebar #searchbox input[type="submit"] { float: left; width: 20%; border-left: none; padding: 0.25em; box-sizing: border-box; } img { border: 0; max-width: 100%; } /* -- search page ----------------------------------------------------------- */ ul.search { margin: 10px 0 0 20px; padding: 0; } ul.search li { padding: 5px 0 5px 20px; background-image: url(file.png); background-repeat: no-repeat; background-position: 0 7px; } ul.search li a { font-weight: bold; } ul.search li p.context { color: #888; margin: 2px 0 0 30px; text-align: left; } ul.keywordmatches li.goodmatch a { font-weight: bold; } /* -- index page ------------------------------------------------------------ */ table.contentstable { width: 90%; margin-left: auto; margin-right: auto; } table.contentstable p.biglink { line-height: 150%; } a.biglink { font-size: 1.3em; } span.linkdescr { font-style: italic; padding-top: 5px; font-size: 90%; } /* -- general index --------------------------------------------------------- */ table.indextable { width: 100%; } table.indextable td { text-align: left; vertical-align: top; } table.indextable ul { margin-top: 0; margin-bottom: 0; list-style-type: none; } table.indextable > tbody > tr > td > ul { padding-left: 0em; } table.indextable tr.pcap { height: 10px; } table.indextable tr.cap { margin-top: 10px; background-color: #f2f2f2; } img.toggler { margin-right: 3px; margin-top: 3px; cursor: pointer; } div.modindex-jumpbox { border-top: 1px solid #ddd; border-bottom: 1px solid #ddd; margin: 1em 0 1em 0; padding: 0.4em; } div.genindex-jumpbox { border-top: 1px solid #ddd; border-bottom: 1px solid #ddd; margin: 1em 0 1em 0; padding: 0.4em; } /* -- domain module index --------------------------------------------------- */ table.modindextable td { padding: 2px; border-collapse: collapse; } /* -- general body styles --------------------------------------------------- */ div.body { min-width: 360px; max-width: 800px; } div.body p, div.body dd, div.body li, div.body blockquote { -moz-hyphens: auto; -ms-hyphens: auto; -webkit-hyphens: auto; hyphens: auto; } a.headerlink { visibility: hidden; } h1:hover > a.headerlink, h2:hover > a.headerlink, h3:hover > a.headerlink, h4:hover > a.headerlink, h5:hover > a.headerlink, h6:hover > a.headerlink, dt:hover > a.headerlink, caption:hover > a.headerlink, p.caption:hover > a.headerlink, div.code-block-caption:hover > a.headerlink { visibility: visible; } div.body p.caption { text-align: inherit; } div.body td { text-align: left; } .first { margin-top: 0 !important; } p.rubric { margin-top: 30px; font-weight: bold; } img.align-left, figure.align-left, .figure.align-left, object.align-left { clear: left; float: left; margin-right: 1em; } img.align-right, figure.align-right, .figure.align-right, object.align-right { clear: right; float: right; margin-left: 1em; } img.align-center, figure.align-center, .figure.align-center, object.align-center { display: block; margin-left: auto; margin-right: auto; } img.align-default, figure.align-default, .figure.align-default { display: block; margin-left: auto; margin-right: auto; } .align-left { text-align: left; } .align-center { text-align: center; } .align-default { text-align: center; } .align-right { text-align: right; } /* -- sidebars -------------------------------------------------------------- */ div.sidebar, aside.sidebar { margin: 0 0 0.5em 1em; border: 1px solid #ddb; padding: 7px; background-color: #ffe; width: 40%; float: right; clear: right; overflow-x: auto; } p.sidebar-title { font-weight: bold; } nav.contents, aside.topic, div.admonition, div.topic, blockquote { clear: left; } /* -- topics ---------------------------------------------------------------- */ nav.contents, aside.topic, div.topic { border: 1px solid #ccc; padding: 7px; margin: 10px 0 10px 0; } p.topic-title { font-size: 1.1em; font-weight: bold; margin-top: 10px; } /* -- admonitions ----------------------------------------------------------- */ div.admonition { margin-top: 10px; margin-bottom: 10px; padding: 7px; } div.admonition dt { font-weight: bold; } p.admonition-title { margin: 0px 10px 5px 0px; font-weight: bold; } div.body p.centered { text-align: center; margin-top: 25px; } /* -- content of sidebars/topics/admonitions -------------------------------- */ div.sidebar > :last-child, aside.sidebar > :last-child, nav.contents > :last-child, aside.topic > :last-child, div.topic > :last-child, div.admonition > :last-child { margin-bottom: 0; } div.sidebar::after, aside.sidebar::after, nav.contents::after, aside.topic::after, div.topic::after, div.admonition::after, blockquote::after { display: block; content: ''; clear: both; } /* -- tables ---------------------------------------------------------------- */ table.docutils { margin-top: 10px; margin-bottom: 10px; border: 0; border-collapse: collapse; } table.align-center { margin-left: auto; margin-right: auto; } table.align-default { margin-left: auto; margin-right: auto; } table caption span.caption-number { font-style: italic; } table caption span.caption-text { } table.docutils td, table.docutils th { padding: 1px 8px 1px 5px; border-top: 0; border-left: 0; border-right: 0; border-bottom: 1px solid #aaa; } th { text-align: left; padding-right: 5px; } table.citation { border-left: solid 1px gray; margin-left: 1px; } table.citation td { border-bottom: none; } th > :first-child, td > :first-child { margin-top: 0px; } th > :last-child, td > :last-child { margin-bottom: 0px; } /* -- figures --------------------------------------------------------------- */ div.figure, figure { margin: 0.5em; padding: 0.5em; } div.figure p.caption, figcaption { padding: 0.3em; } div.figure p.caption span.caption-number, figcaption span.caption-number { font-style: italic; } div.figure p.caption span.caption-text, figcaption span.caption-text { } /* -- field list styles ----------------------------------------------------- */ table.field-list td, table.field-list th { border: 0 !important; } .field-list ul { margin: 0; padding-left: 1em; } .field-list p { margin: 0; } .field-name { -moz-hyphens: manual; -ms-hyphens: manual; -webkit-hyphens: manual; hyphens: manual; } /* -- hlist styles ---------------------------------------------------------- */ table.hlist { margin: 1em 0; } table.hlist td { vertical-align: top; } /* -- object description styles --------------------------------------------- */ .sig { font-family: 'Consolas', 'Menlo', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; } .sig-name, code.descname { background-color: transparent; font-weight: bold; } .sig-name { font-size: 1.1em; } code.descname { font-size: 1.2em; } .sig-prename, code.descclassname { background-color: transparent; } .optional { font-size: 1.3em; } .sig-paren { font-size: larger; } .sig-param.n { font-style: italic; } /* C++ specific styling */ .sig-inline.c-texpr, .sig-inline.cpp-texpr { font-family: unset; } .sig.c .k, .sig.c .kt, .sig.cpp .k, .sig.cpp .kt { color: #0033B3; } .sig.c .m, .sig.cpp .m { color: #1750EB; } .sig.c .s, .sig.c .sc, .sig.cpp .s, .sig.cpp .sc { color: #067D17; } /* -- other body styles ----------------------------------------------------- */ ol.arabic { list-style: decimal; } ol.loweralpha { list-style: lower-alpha; } ol.upperalpha { list-style: upper-alpha; } ol.lowerroman { list-style: lower-roman; } ol.upperroman { list-style: upper-roman; } :not(li) > ol > li:first-child > :first-child, :not(li) > ul > li:first-child > :first-child { margin-top: 0px; } :not(li) > ol > li:last-child > :last-child, :not(li) > ul > li:last-child > :last-child { margin-bottom: 0px; } ol.simple ol p, ol.simple ul p, ul.simple ol p, ul.simple ul p { margin-top: 0; } ol.simple > li:not(:first-child) > p, ul.simple > li:not(:first-child) > p { margin-top: 0; } ol.simple p, ul.simple p { margin-bottom: 0; } aside.footnote > span, div.citation > span { float: left; } aside.footnote > span:last-of-type, div.citation > span:last-of-type { padding-right: 0.5em; } aside.footnote > p { margin-left: 2em; } div.citation > p { margin-left: 4em; } aside.footnote > p:last-of-type, div.citation > p:last-of-type { margin-bottom: 0em; } aside.footnote > p:last-of-type:after, div.citation > p:last-of-type:after { content: ""; clear: both; } dl.field-list { display: grid; grid-template-columns: fit-content(30%) auto; } dl.field-list > dt { font-weight: bold; word-break: break-word; padding-left: 0.5em; padding-right: 5px; } dl.field-list > dd { padding-left: 0.5em; margin-top: 0em; margin-left: 0em; margin-bottom: 0em; } dl { margin-bottom: 15px; } dd > :first-child { margin-top: 0px; } dd ul, dd table { margin-bottom: 10px; } dd { margin-top: 3px; margin-bottom: 10px; margin-left: 30px; } dl > dd:last-child, dl > dd:last-child > :last-child { margin-bottom: 0; } dt:target, span.highlighted { background-color: #fbe54e; } rect.highlighted { fill: #fbe54e; } dl.glossary dt { font-weight: bold; font-size: 1.1em; } .versionmodified { font-style: italic; } .system-message { background-color: #fda; padding: 5px; border: 3px solid red; } .footnote:target { background-color: #ffa; } .line-block { display: block; margin-top: 1em; margin-bottom: 1em; } .line-block .line-block { margin-top: 0; margin-bottom: 0; margin-left: 1.5em; } .guilabel, .menuselection { font-family: sans-serif; } .accelerator { text-decoration: underline; } .classifier { font-style: oblique; } .classifier:before { font-style: normal; margin: 0 0.5em; content: ":"; display: inline-block; } abbr, acronym { border-bottom: dotted 1px; cursor: help; } /* -- code displays --------------------------------------------------------- */ pre { overflow: auto; overflow-y: hidden; /* fixes display issues on Chrome browsers */ } pre, div[class*="highlight-"] { clear: both; } span.pre { -moz-hyphens: none; -ms-hyphens: none; -webkit-hyphens: none; hyphens: none; white-space: nowrap; } div[class*="highlight-"] { margin: 1em 0; } td.linenos pre { border: 0; background-color: transparent; color: #aaa; } table.highlighttable { display: block; } table.highlighttable tbody { display: block; } table.highlighttable tr { display: flex; } table.highlighttable td { margin: 0; padding: 0; } table.highlighttable td.linenos { padding-right: 0.5em; } table.highlighttable td.code { flex: 1; overflow: hidden; } .highlight .hll { display: block; } div.highlight pre, table.highlighttable pre { margin: 0; } div.code-block-caption + div { margin-top: 0; } div.code-block-caption { margin-top: 1em; padding: 2px 5px; font-size: small; } div.code-block-caption code { background-color: transparent; } table.highlighttable td.linenos, span.linenos, div.highlight span.gp { /* gp: Generic.Prompt */ user-select: none; -webkit-user-select: text; /* Safari fallback only */ -webkit-user-select: none; /* Chrome/Safari */ -moz-user-select: none; /* Firefox */ -ms-user-select: none; /* IE10+ */ } div.code-block-caption span.caption-number { padding: 0.1em 0.3em; font-style: italic; } div.code-block-caption span.caption-text { } div.literal-block-wrapper { margin: 1em 0; } code.xref, a code { background-color: transparent; font-weight: bold; } h1 code, h2 code, h3 code, h4 code, h5 code, h6 code { background-color: transparent; } .viewcode-link { float: right; } .viewcode-back { float: right; font-family: sans-serif; } div.viewcode-block:target { margin: -1px -10px; padding: 0 10px; } /* -- math display ---------------------------------------------------------- */ img.math { vertical-align: middle; } div.body div.math p { text-align: center; } span.eqno { float: right; } span.eqno a.headerlink { position: absolute; z-index: 1; } div.math:hover a.headerlink { visibility: visible; } /* -- printout stylesheet --------------------------------------------------- */ @media print { div.document, div.documentwrapper, div.bodywrapper { margin: 0 !important; width: 100%; } div.sphinxsidebar, div.related, div.footer, #top-link { display: none; } }quark-engine-23.4.1/docs/build/html/_static/css/000077500000000000000000000000001442215066700214075ustar00rootroot00000000000000quark-engine-23.4.1/docs/build/html/_static/css/badge_only.css000066400000000000000000000063131442215066700242270ustar00rootroot00000000000000.fa:before{-webkit-font-smoothing:antialiased}.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}@font-face{font-family:FontAwesome;font-style:normal;font-weight:400;src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713?#iefix) format("embedded-opentype"),url(fonts/fontawesome-webfont.woff2?af7ae505a9eed503f8b8e6982036873e) format("woff2"),url(fonts/fontawesome-webfont.woff?fee66e712a8a08eef5805a46892932ad) format("woff"),url(fonts/fontawesome-webfont.ttf?b06871f281fee6b241d60582ae9369b9) format("truetype"),url(fonts/fontawesome-webfont.svg?912ec66d7572ff821749319396470bde#FontAwesome) format("svg")}.fa:before{font-family:FontAwesome;font-style:normal;font-weight:400;line-height:1}.fa:before,a .fa{text-decoration:inherit}.fa:before,a .fa,li .fa{display:inline-block}li .fa-large:before{width:1.875em}ul.fas{list-style-type:none;margin-left:2em;text-indent:-.8em}ul.fas li .fa{width:.8em}ul.fas li .fa-large:before{vertical-align:baseline}.fa-book:before,.icon-book:before{content:"\f02d"}.fa-caret-down:before,.icon-caret-down:before{content:"\f0d7"}.fa-caret-up:before,.icon-caret-up:before{content:"\f0d8"}.fa-caret-left:before,.icon-caret-left:before{content:"\f0d9"}.fa-caret-right:before,.icon-caret-right:before{content:"\f0da"}.rst-versions{position:fixed;bottom:0;left:0;width:300px;color:#fcfcfc;background:#1f1d1d;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;z-index:400}.rst-versions a{color:#2980b9;text-decoration:none}.rst-versions .rst-badge-small{display:none}.rst-versions .rst-current-version{padding:12px;background-color:#272525;display:block;text-align:right;font-size:90%;cursor:pointer;color:#27ae60}.rst-versions .rst-current-version:after{clear:both;content:"";display:block}.rst-versions .rst-current-version .fa{color:#fcfcfc}.rst-versions .rst-current-version .fa-book,.rst-versions .rst-current-version .icon-book{float:left}.rst-versions .rst-current-version.rst-out-of-date{background-color:#e74c3c;color:#fff}.rst-versions .rst-current-version.rst-active-old-version{background-color:#f1c40f;color:#000}.rst-versions.shift-up{height:auto;max-height:100%;overflow-y:scroll}.rst-versions.shift-up .rst-other-versions{display:block}.rst-versions .rst-other-versions{font-size:90%;padding:12px;color:grey;display:none}.rst-versions .rst-other-versions hr{display:block;height:1px;border:0;margin:20px 0;padding:0;border-top:1px solid #413d3d}.rst-versions .rst-other-versions dd{display:inline-block;margin:0}.rst-versions .rst-other-versions dd a{display:inline-block;padding:6px;color:#fcfcfc}.rst-versions.rst-badge{width:auto;bottom:20px;right:20px;left:auto;border:none;max-width:300px;max-height:90%}.rst-versions.rst-badge .fa-book,.rst-versions.rst-badge .icon-book{float:none;line-height:30px}.rst-versions.rst-badge.shift-up .rst-current-version{text-align:right}.rst-versions.rst-badge.shift-up .rst-current-version .fa-book,.rst-versions.rst-badge.shift-up .rst-current-version .icon-book{float:left}.rst-versions.rst-badge>.rst-current-version{width:auto;height:30px;line-height:30px;padding:0 6px;display:block;text-align:center}@media screen and (max-width:768px){.rst-versions{width:85%;display:none}.rst-versions.shift{display:block}}quark-engine-23.4.1/docs/build/html/_static/css/theme.css000066400000000000000000003752121442215066700232350ustar00rootroot00000000000000html{box-sizing:border-box}*,:after,:before{box-sizing:inherit}article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block}audio,canvas,video{display:inline-block;*display:inline;*zoom:1}[hidden],audio:not([controls]){display:none}*{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}blockquote{margin:0}dfn{font-style:italic}ins{background:#ff9;text-decoration:none}ins,mark{color:#000}mark{background:#ff0;font-style:italic;font-weight:700}.rst-content code,.rst-content tt,code,kbd,pre,samp{font-family:monospace,serif;_font-family:courier new,monospace;font-size:1em}pre{white-space:pre}q{quotes:none}q:after,q:before{content:"";content:none}small{font-size:85%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}dl,ol,ul{margin:0;padding:0;list-style:none;list-style-image:none}li{list-style:none}dd{margin:0}img{border:0;-ms-interpolation-mode:bicubic;vertical-align:middle;max-width:100%}svg:not(:root){overflow:hidden}figure,form{margin:0}label{cursor:pointer}button,input,select,textarea{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle}button,input{line-height:normal}button,input[type=button],input[type=reset],input[type=submit]{cursor:pointer;-webkit-appearance:button;*overflow:visible}button[disabled],input[disabled]{cursor:default}input[type=search]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}textarea{resize:vertical}table{border-collapse:collapse;border-spacing:0}td{vertical-align:top}.chromeframe{margin:.2em 0;background:#ccc;color:#000;padding:.2em 0}.ir{display:block;border:0;text-indent:-999em;overflow:hidden;background-color:transparent;background-repeat:no-repeat;text-align:left;direction:ltr;*line-height:0}.ir br{display:none}.hidden{display:none!important;visibility:hidden}.visuallyhidden{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.visuallyhidden.focusable:active,.visuallyhidden.focusable:focus{clip:auto;height:auto;margin:0;overflow:visible;position:static;width:auto}.invisible{visibility:hidden}.relative{position:relative}big,small{font-size:100%}@media print{body,html,section{background:none!important}*{box-shadow:none!important;text-shadow:none!important;filter:none!important;-ms-filter:none!important}a,a:visited{text-decoration:underline}.ir a:after,a[href^="#"]:after,a[href^="javascript:"]:after{content:""}blockquote,pre{page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}img{max-width:100%!important}@page{margin:.5cm}.rst-content .toctree-wrapper>p.caption,h2,h3,p{orphans:3;widows:3}.rst-content .toctree-wrapper>p.caption,h2,h3{page-break-after:avoid}}.btn,.fa:before,.icon:before,.rst-content .admonition,.rst-content .admonition-title:before,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .code-block-caption .headerlink:before,.rst-content .danger,.rst-content .eqno .headerlink:before,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning,.rst-content code.download span:first-child:before,.rst-content dl dt .headerlink:before,.rst-content h1 .headerlink:before,.rst-content h2 .headerlink:before,.rst-content h3 .headerlink:before,.rst-content h4 .headerlink:before,.rst-content h5 .headerlink:before,.rst-content h6 .headerlink:before,.rst-content p.caption .headerlink:before,.rst-content p .headerlink:before,.rst-content table>caption .headerlink:before,.rst-content tt.download span:first-child:before,.wy-alert,.wy-dropdown .caret:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before,.wy-menu-vertical li.current>a,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a,.wy-menu-vertical li.on a button.toctree-expand:before,.wy-menu-vertical li button.toctree-expand:before,.wy-nav-top a,.wy-side-nav-search .wy-dropdown>a,.wy-side-nav-search>a,input[type=color],input[type=date],input[type=datetime-local],input[type=datetime],input[type=email],input[type=month],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=time],input[type=url],input[type=week],select,textarea{-webkit-font-smoothing:antialiased}.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}/*! * Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:FontAwesome;src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713);src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713?#iefix&v=4.7.0) format("embedded-opentype"),url(fonts/fontawesome-webfont.woff2?af7ae505a9eed503f8b8e6982036873e) format("woff2"),url(fonts/fontawesome-webfont.woff?fee66e712a8a08eef5805a46892932ad) format("woff"),url(fonts/fontawesome-webfont.ttf?b06871f281fee6b241d60582ae9369b9) format("truetype"),url(fonts/fontawesome-webfont.svg?912ec66d7572ff821749319396470bde#fontawesomeregular) format("svg");font-weight:400;font-style:normal}.fa,.icon,.rst-content .admonition-title,.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content code.download span:first-child,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink,.rst-content tt.download span:first-child,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li button.toctree-expand{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14286em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14286em;width:2.14286em;top:.14286em;text-align:center}.fa-li.fa-lg{left:-1.85714em}.fa-border{padding:.2em .25em .15em;border:.08em solid #eee;border-radius:.1em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa-pull-left.icon,.fa.fa-pull-left,.rst-content .code-block-caption .fa-pull-left.headerlink,.rst-content .eqno .fa-pull-left.headerlink,.rst-content .fa-pull-left.admonition-title,.rst-content code.download span.fa-pull-left:first-child,.rst-content dl dt .fa-pull-left.headerlink,.rst-content h1 .fa-pull-left.headerlink,.rst-content h2 .fa-pull-left.headerlink,.rst-content h3 .fa-pull-left.headerlink,.rst-content h4 .fa-pull-left.headerlink,.rst-content h5 .fa-pull-left.headerlink,.rst-content h6 .fa-pull-left.headerlink,.rst-content p .fa-pull-left.headerlink,.rst-content table>caption .fa-pull-left.headerlink,.rst-content tt.download span.fa-pull-left:first-child,.wy-menu-vertical li.current>a button.fa-pull-left.toctree-expand,.wy-menu-vertical li.on a button.fa-pull-left.toctree-expand,.wy-menu-vertical li button.fa-pull-left.toctree-expand{margin-right:.3em}.fa-pull-right.icon,.fa.fa-pull-right,.rst-content .code-block-caption .fa-pull-right.headerlink,.rst-content .eqno .fa-pull-right.headerlink,.rst-content .fa-pull-right.admonition-title,.rst-content code.download span.fa-pull-right:first-child,.rst-content dl dt .fa-pull-right.headerlink,.rst-content h1 .fa-pull-right.headerlink,.rst-content h2 .fa-pull-right.headerlink,.rst-content h3 .fa-pull-right.headerlink,.rst-content h4 .fa-pull-right.headerlink,.rst-content h5 .fa-pull-right.headerlink,.rst-content h6 .fa-pull-right.headerlink,.rst-content p .fa-pull-right.headerlink,.rst-content table>caption .fa-pull-right.headerlink,.rst-content tt.download span.fa-pull-right:first-child,.wy-menu-vertical li.current>a button.fa-pull-right.toctree-expand,.wy-menu-vertical li.on a button.fa-pull-right.toctree-expand,.wy-menu-vertical li button.fa-pull-right.toctree-expand{margin-left:.3em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left,.pull-left.icon,.rst-content .code-block-caption .pull-left.headerlink,.rst-content .eqno .pull-left.headerlink,.rst-content .pull-left.admonition-title,.rst-content code.download span.pull-left:first-child,.rst-content dl dt .pull-left.headerlink,.rst-content h1 .pull-left.headerlink,.rst-content h2 .pull-left.headerlink,.rst-content h3 .pull-left.headerlink,.rst-content h4 .pull-left.headerlink,.rst-content h5 .pull-left.headerlink,.rst-content h6 .pull-left.headerlink,.rst-content p .pull-left.headerlink,.rst-content table>caption .pull-left.headerlink,.rst-content tt.download span.pull-left:first-child,.wy-menu-vertical li.current>a button.pull-left.toctree-expand,.wy-menu-vertical li.on a button.pull-left.toctree-expand,.wy-menu-vertical li button.pull-left.toctree-expand{margin-right:.3em}.fa.pull-right,.pull-right.icon,.rst-content .code-block-caption .pull-right.headerlink,.rst-content .eqno .pull-right.headerlink,.rst-content .pull-right.admonition-title,.rst-content code.download span.pull-right:first-child,.rst-content dl dt .pull-right.headerlink,.rst-content h1 .pull-right.headerlink,.rst-content h2 .pull-right.headerlink,.rst-content h3 .pull-right.headerlink,.rst-content h4 .pull-right.headerlink,.rst-content h5 .pull-right.headerlink,.rst-content h6 .pull-right.headerlink,.rst-content p .pull-right.headerlink,.rst-content table>caption .pull-right.headerlink,.rst-content tt.download span.pull-right:first-child,.wy-menu-vertical li.current>a button.pull-right.toctree-expand,.wy-menu-vertical li.on a button.pull-right.toctree-expand,.wy-menu-vertical li button.pull-right.toctree-expand{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s linear infinite}.fa-pulse{-webkit-animation:fa-spin 1s steps(8) infinite;animation:fa-spin 1s steps(8) infinite}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);-ms-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);-ms-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)";-webkit-transform:rotate(270deg);-ms-transform:rotate(270deg);transform:rotate(270deg)}.fa-flip-horizontal{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=0, mirror=1)";-webkit-transform:scaleX(-1);-ms-transform:scaleX(-1);transform:scaleX(-1)}.fa-flip-vertical{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)";-webkit-transform:scaleY(-1);-ms-transform:scaleY(-1);transform:scaleY(-1)}:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{filter:none}.fa-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:middle}.fa-stack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"ī€€"}.fa-music:before{content:"ī€"}.fa-search:before,.icon-search:before{content:"ī€‚"}.fa-envelope-o:before{content:"ī€ƒ"}.fa-heart:before{content:"ī€„"}.fa-star:before{content:"ī€…"}.fa-star-o:before{content:"ī€†"}.fa-user:before{content:"ī€‡"}.fa-film:before{content:"ī€ˆ"}.fa-th-large:before{content:"ī€‰"}.fa-th:before{content:"ī€Š"}.fa-th-list:before{content:"ī€‹"}.fa-check:before{content:"ī€Œ"}.fa-close:before,.fa-remove:before,.fa-times:before{content:"ī€"}.fa-search-plus:before{content:"ī€Ž"}.fa-search-minus:before{content:"ī€"}.fa-power-off:before{content:"ī€‘"}.fa-signal:before{content:"ī€’"}.fa-cog:before,.fa-gear:before{content:"ī€“"}.fa-trash-o:before{content:"ī€”"}.fa-home:before,.icon-home:before{content:"ī€•"}.fa-file-o:before{content:"ī€–"}.fa-clock-o:before{content:"ī€—"}.fa-road:before{content:"ī€˜"}.fa-download:before,.rst-content code.download span:first-child:before,.rst-content tt.download span:first-child:before{content:"ī€™"}.fa-arrow-circle-o-down:before{content:"ī€š"}.fa-arrow-circle-o-up:before{content:"ī€›"}.fa-inbox:before{content:"ī€œ"}.fa-play-circle-o:before{content:"ī€"}.fa-repeat:before,.fa-rotate-right:before{content:"ī€ž"}.fa-refresh:before{content:"ī€Ą"}.fa-list-alt:before{content:"ī€ĸ"}.fa-lock:before{content:"ī€Ŗ"}.fa-flag:before{content:"ī€¤"}.fa-headphones:before{content:"ī€Ĩ"}.fa-volume-off:before{content:"ī€Ļ"}.fa-volume-down:before{content:"ī€§"}.fa-volume-up:before{content:"ī€¨"}.fa-qrcode:before{content:"ī€Š"}.fa-barcode:before{content:"ī€Ē"}.fa-tag:before{content:"ī€Ģ"}.fa-tags:before{content:"ī€Ŧ"}.fa-book:before,.icon-book:before{content:"ī€­"}.fa-bookmark:before{content:"ī€Ž"}.fa-print:before{content:"ī€¯"}.fa-camera:before{content:"ī€°"}.fa-font:before{content:"ī€ą"}.fa-bold:before{content:"ī€˛"}.fa-italic:before{content:"ī€ŗ"}.fa-text-height:before{content:"ī€´"}.fa-text-width:before{content:"ī€ĩ"}.fa-align-left:before{content:"ī€ļ"}.fa-align-center:before{content:"ī€ˇ"}.fa-align-right:before{content:"ī€¸"}.fa-align-justify:before{content:"ī€š"}.fa-list:before{content:"ī€ē"}.fa-dedent:before,.fa-outdent:before{content:"ī€ģ"}.fa-indent:before{content:"ī€ŧ"}.fa-video-camera:before{content:"ī€Ŋ"}.fa-image:before,.fa-photo:before,.fa-picture-o:before{content:"ī€ž"}.fa-pencil:before{content:"ī€"}.fa-map-marker:before{content:"ī"}.fa-adjust:before{content:"ī‚"}.fa-tint:before{content:"īƒ"}.fa-edit:before,.fa-pencil-square-o:before{content:"ī„"}.fa-share-square-o:before{content:"ī…"}.fa-check-square-o:before{content:"ī†"}.fa-arrows:before{content:"ī‡"}.fa-step-backward:before{content:"īˆ"}.fa-fast-backward:before{content:"ī‰"}.fa-backward:before{content:"īŠ"}.fa-play:before{content:"ī‹"}.fa-pause:before{content:"īŒ"}.fa-stop:before{content:"ī"}.fa-forward:before{content:"īŽ"}.fa-fast-forward:before{content:"ī"}.fa-step-forward:before{content:"ī‘"}.fa-eject:before{content:"ī’"}.fa-chevron-left:before{content:"ī“"}.fa-chevron-right:before{content:"ī”"}.fa-plus-circle:before{content:"ī•"}.fa-minus-circle:before{content:"ī–"}.fa-times-circle:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before{content:"ī—"}.fa-check-circle:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before{content:"ī˜"}.fa-question-circle:before{content:"ī™"}.fa-info-circle:before{content:"īš"}.fa-crosshairs:before{content:"ī›"}.fa-times-circle-o:before{content:"īœ"}.fa-check-circle-o:before{content:"ī"}.fa-ban:before{content:"īž"}.fa-arrow-left:before{content:"ī "}.fa-arrow-right:before{content:"īĄ"}.fa-arrow-up:before{content:"īĸ"}.fa-arrow-down:before{content:"īŖ"}.fa-mail-forward:before,.fa-share:before{content:"ī¤"}.fa-expand:before{content:"īĨ"}.fa-compress:before{content:"īĻ"}.fa-plus:before{content:"ī§"}.fa-minus:before{content:"ī¨"}.fa-asterisk:before{content:"īŠ"}.fa-exclamation-circle:before,.rst-content .admonition-title:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before{content:"īĒ"}.fa-gift:before{content:"īĢ"}.fa-leaf:before{content:"īŦ"}.fa-fire:before,.icon-fire:before{content:"ī­"}.fa-eye:before{content:"īŽ"}.fa-eye-slash:before{content:"ī°"}.fa-exclamation-triangle:before,.fa-warning:before{content:"īą"}.fa-plane:before{content:"ī˛"}.fa-calendar:before{content:"īŗ"}.fa-random:before{content:"ī´"}.fa-comment:before{content:"īĩ"}.fa-magnet:before{content:"īļ"}.fa-chevron-up:before{content:"īˇ"}.fa-chevron-down:before{content:"ī¸"}.fa-retweet:before{content:"īš"}.fa-shopping-cart:before{content:"īē"}.fa-folder:before{content:"īģ"}.fa-folder-open:before{content:"īŧ"}.fa-arrows-v:before{content:"īŊ"}.fa-arrows-h:before{content:"īž"}.fa-bar-chart-o:before,.fa-bar-chart:before{content:"ī‚€"}.fa-twitter-square:before{content:"ī‚"}.fa-facebook-square:before{content:"ī‚‚"}.fa-camera-retro:before{content:"ī‚ƒ"}.fa-key:before{content:"ī‚„"}.fa-cogs:before,.fa-gears:before{content:"ī‚…"}.fa-comments:before{content:"ī‚†"}.fa-thumbs-o-up:before{content:"ī‚‡"}.fa-thumbs-o-down:before{content:"ī‚ˆ"}.fa-star-half:before{content:"ī‚‰"}.fa-heart-o:before{content:"ī‚Š"}.fa-sign-out:before{content:"ī‚‹"}.fa-linkedin-square:before{content:"ī‚Œ"}.fa-thumb-tack:before{content:"ī‚"}.fa-external-link:before{content:"ī‚Ž"}.fa-sign-in:before{content:"ī‚"}.fa-trophy:before{content:"ī‚‘"}.fa-github-square:before{content:"ī‚’"}.fa-upload:before{content:"ī‚“"}.fa-lemon-o:before{content:"ī‚”"}.fa-phone:before{content:"ī‚•"}.fa-square-o:before{content:"ī‚–"}.fa-bookmark-o:before{content:"ī‚—"}.fa-phone-square:before{content:"ī‚˜"}.fa-twitter:before{content:"ī‚™"}.fa-facebook-f:before,.fa-facebook:before{content:"ī‚š"}.fa-github:before,.icon-github:before{content:"ī‚›"}.fa-unlock:before{content:"ī‚œ"}.fa-credit-card:before{content:"ī‚"}.fa-feed:before,.fa-rss:before{content:"ī‚ž"}.fa-hdd-o:before{content:"ī‚ "}.fa-bullhorn:before{content:"ī‚Ą"}.fa-bell:before{content:"īƒŗ"}.fa-certificate:before{content:"ī‚Ŗ"}.fa-hand-o-right:before{content:"ī‚¤"}.fa-hand-o-left:before{content:"ī‚Ĩ"}.fa-hand-o-up:before{content:"ī‚Ļ"}.fa-hand-o-down:before{content:"ī‚§"}.fa-arrow-circle-left:before,.icon-circle-arrow-left:before{content:"ī‚¨"}.fa-arrow-circle-right:before,.icon-circle-arrow-right:before{content:"ī‚Š"}.fa-arrow-circle-up:before{content:"ī‚Ē"}.fa-arrow-circle-down:before{content:"ī‚Ģ"}.fa-globe:before{content:"ī‚Ŧ"}.fa-wrench:before{content:"ī‚­"}.fa-tasks:before{content:"ī‚Ž"}.fa-filter:before{content:"ī‚°"}.fa-briefcase:before{content:"ī‚ą"}.fa-arrows-alt:before{content:"ī‚˛"}.fa-group:before,.fa-users:before{content:"īƒ€"}.fa-chain:before,.fa-link:before,.icon-link:before{content:"īƒ"}.fa-cloud:before{content:"īƒ‚"}.fa-flask:before{content:"īƒƒ"}.fa-cut:before,.fa-scissors:before{content:"īƒ„"}.fa-copy:before,.fa-files-o:before{content:"īƒ…"}.fa-paperclip:before{content:"īƒ†"}.fa-floppy-o:before,.fa-save:before{content:"īƒ‡"}.fa-square:before{content:"īƒˆ"}.fa-bars:before,.fa-navicon:before,.fa-reorder:before{content:"īƒ‰"}.fa-list-ul:before{content:"īƒŠ"}.fa-list-ol:before{content:"īƒ‹"}.fa-strikethrough:before{content:"īƒŒ"}.fa-underline:before{content:"īƒ"}.fa-table:before{content:"īƒŽ"}.fa-magic:before{content:"īƒ"}.fa-truck:before{content:"īƒ‘"}.fa-pinterest:before{content:"īƒ’"}.fa-pinterest-square:before{content:"īƒ“"}.fa-google-plus-square:before{content:"īƒ”"}.fa-google-plus:before{content:"īƒ•"}.fa-money:before{content:"īƒ–"}.fa-caret-down:before,.icon-caret-down:before,.wy-dropdown .caret:before{content:"īƒ—"}.fa-caret-up:before{content:"īƒ˜"}.fa-caret-left:before{content:"īƒ™"}.fa-caret-right:before{content:"īƒš"}.fa-columns:before{content:"īƒ›"}.fa-sort:before,.fa-unsorted:before{content:"īƒœ"}.fa-sort-desc:before,.fa-sort-down:before{content:"īƒ"}.fa-sort-asc:before,.fa-sort-up:before{content:"īƒž"}.fa-envelope:before{content:"īƒ "}.fa-linkedin:before{content:"īƒĄ"}.fa-rotate-left:before,.fa-undo:before{content:"īƒĸ"}.fa-gavel:before,.fa-legal:before{content:"īƒŖ"}.fa-dashboard:before,.fa-tachometer:before{content:"īƒ¤"}.fa-comment-o:before{content:"īƒĨ"}.fa-comments-o:before{content:"īƒĻ"}.fa-bolt:before,.fa-flash:before{content:"īƒ§"}.fa-sitemap:before{content:"īƒ¨"}.fa-umbrella:before{content:"īƒŠ"}.fa-clipboard:before,.fa-paste:before{content:"īƒĒ"}.fa-lightbulb-o:before{content:"īƒĢ"}.fa-exchange:before{content:"īƒŦ"}.fa-cloud-download:before{content:"īƒ­"}.fa-cloud-upload:before{content:"īƒŽ"}.fa-user-md:before{content:"īƒ°"}.fa-stethoscope:before{content:"īƒą"}.fa-suitcase:before{content:"īƒ˛"}.fa-bell-o:before{content:"ī‚ĸ"}.fa-coffee:before{content:"īƒ´"}.fa-cutlery:before{content:"īƒĩ"}.fa-file-text-o:before{content:"īƒļ"}.fa-building-o:before{content:"īƒˇ"}.fa-hospital-o:before{content:"īƒ¸"}.fa-ambulance:before{content:"īƒš"}.fa-medkit:before{content:"īƒē"}.fa-fighter-jet:before{content:"īƒģ"}.fa-beer:before{content:"īƒŧ"}.fa-h-square:before{content:"īƒŊ"}.fa-plus-square:before{content:"īƒž"}.fa-angle-double-left:before{content:"ī„€"}.fa-angle-double-right:before{content:"ī„"}.fa-angle-double-up:before{content:"ī„‚"}.fa-angle-double-down:before{content:"ī„ƒ"}.fa-angle-left:before{content:"ī„„"}.fa-angle-right:before{content:"ī„…"}.fa-angle-up:before{content:"ī„†"}.fa-angle-down:before{content:"ī„‡"}.fa-desktop:before{content:"ī„ˆ"}.fa-laptop:before{content:"ī„‰"}.fa-tablet:before{content:"ī„Š"}.fa-mobile-phone:before,.fa-mobile:before{content:"ī„‹"}.fa-circle-o:before{content:"ī„Œ"}.fa-quote-left:before{content:"ī„"}.fa-quote-right:before{content:"ī„Ž"}.fa-spinner:before{content:"ī„"}.fa-circle:before{content:"ī„‘"}.fa-mail-reply:before,.fa-reply:before{content:"ī„’"}.fa-github-alt:before{content:"ī„“"}.fa-folder-o:before{content:"ī„”"}.fa-folder-open-o:before{content:"ī„•"}.fa-smile-o:before{content:"ī„˜"}.fa-frown-o:before{content:"ī„™"}.fa-meh-o:before{content:"ī„š"}.fa-gamepad:before{content:"ī„›"}.fa-keyboard-o:before{content:"ī„œ"}.fa-flag-o:before{content:"ī„"}.fa-flag-checkered:before{content:"ī„ž"}.fa-terminal:before{content:"ī„ "}.fa-code:before{content:"ī„Ą"}.fa-mail-reply-all:before,.fa-reply-all:before{content:"ī„ĸ"}.fa-star-half-empty:before,.fa-star-half-full:before,.fa-star-half-o:before{content:"ī„Ŗ"}.fa-location-arrow:before{content:"ī„¤"}.fa-crop:before{content:"ī„Ĩ"}.fa-code-fork:before{content:"ī„Ļ"}.fa-chain-broken:before,.fa-unlink:before{content:"ī„§"}.fa-question:before{content:"ī„¨"}.fa-info:before{content:"ī„Š"}.fa-exclamation:before{content:"ī„Ē"}.fa-superscript:before{content:"ī„Ģ"}.fa-subscript:before{content:"ī„Ŧ"}.fa-eraser:before{content:"ī„­"}.fa-puzzle-piece:before{content:"ī„Ž"}.fa-microphone:before{content:"ī„°"}.fa-microphone-slash:before{content:"ī„ą"}.fa-shield:before{content:"ī„˛"}.fa-calendar-o:before{content:"ī„ŗ"}.fa-fire-extinguisher:before{content:"ī„´"}.fa-rocket:before{content:"ī„ĩ"}.fa-maxcdn:before{content:"ī„ļ"}.fa-chevron-circle-left:before{content:"ī„ˇ"}.fa-chevron-circle-right:before{content:"ī„¸"}.fa-chevron-circle-up:before{content:"ī„š"}.fa-chevron-circle-down:before{content:"ī„ē"}.fa-html5:before{content:"ī„ģ"}.fa-css3:before{content:"ī„ŧ"}.fa-anchor:before{content:"ī„Ŋ"}.fa-unlock-alt:before{content:"ī„ž"}.fa-bullseye:before{content:"ī…€"}.fa-ellipsis-h:before{content:"ī…"}.fa-ellipsis-v:before{content:"ī…‚"}.fa-rss-square:before{content:"ī…ƒ"}.fa-play-circle:before{content:"ī…„"}.fa-ticket:before{content:"ī……"}.fa-minus-square:before{content:"ī…†"}.fa-minus-square-o:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before{content:"ī…‡"}.fa-level-up:before{content:"ī…ˆ"}.fa-level-down:before{content:"ī…‰"}.fa-check-square:before{content:"ī…Š"}.fa-pencil-square:before{content:"ī…‹"}.fa-external-link-square:before{content:"ī…Œ"}.fa-share-square:before{content:"ī…"}.fa-compass:before{content:"ī…Ž"}.fa-caret-square-o-down:before,.fa-toggle-down:before{content:"ī…"}.fa-caret-square-o-up:before,.fa-toggle-up:before{content:"ī…‘"}.fa-caret-square-o-right:before,.fa-toggle-right:before{content:"ī…’"}.fa-eur:before,.fa-euro:before{content:"ī…“"}.fa-gbp:before{content:"ī…”"}.fa-dollar:before,.fa-usd:before{content:"ī…•"}.fa-inr:before,.fa-rupee:before{content:"ī…–"}.fa-cny:before,.fa-jpy:before,.fa-rmb:before,.fa-yen:before{content:"ī…—"}.fa-rouble:before,.fa-rub:before,.fa-ruble:before{content:"ī…˜"}.fa-krw:before,.fa-won:before{content:"ī…™"}.fa-bitcoin:before,.fa-btc:before{content:"ī…š"}.fa-file:before{content:"ī…›"}.fa-file-text:before{content:"ī…œ"}.fa-sort-alpha-asc:before{content:"ī…"}.fa-sort-alpha-desc:before{content:"ī…ž"}.fa-sort-amount-asc:before{content:"ī… "}.fa-sort-amount-desc:before{content:"ī…Ą"}.fa-sort-numeric-asc:before{content:"ī…ĸ"}.fa-sort-numeric-desc:before{content:"ī…Ŗ"}.fa-thumbs-up:before{content:"ī…¤"}.fa-thumbs-down:before{content:"ī…Ĩ"}.fa-youtube-square:before{content:"ī…Ļ"}.fa-youtube:before{content:"ī…§"}.fa-xing:before{content:"ī…¨"}.fa-xing-square:before{content:"ī…Š"}.fa-youtube-play:before{content:"ī…Ē"}.fa-dropbox:before{content:"ī…Ģ"}.fa-stack-overflow:before{content:"ī…Ŧ"}.fa-instagram:before{content:"ī…­"}.fa-flickr:before{content:"ī…Ž"}.fa-adn:before{content:"ī…°"}.fa-bitbucket:before,.icon-bitbucket:before{content:"ī…ą"}.fa-bitbucket-square:before{content:"ī…˛"}.fa-tumblr:before{content:"ī…ŗ"}.fa-tumblr-square:before{content:"ī…´"}.fa-long-arrow-down:before{content:"ī…ĩ"}.fa-long-arrow-up:before{content:"ī…ļ"}.fa-long-arrow-left:before{content:"ī…ˇ"}.fa-long-arrow-right:before{content:"ī…¸"}.fa-apple:before{content:"ī…š"}.fa-windows:before{content:"ī…ē"}.fa-android:before{content:"ī…ģ"}.fa-linux:before{content:"ī…ŧ"}.fa-dribbble:before{content:"ī…Ŋ"}.fa-skype:before{content:"ī…ž"}.fa-foursquare:before{content:"ī†€"}.fa-trello:before{content:"ī†"}.fa-female:before{content:"ī†‚"}.fa-male:before{content:"ī†ƒ"}.fa-gittip:before,.fa-gratipay:before{content:"ī†„"}.fa-sun-o:before{content:"ī†…"}.fa-moon-o:before{content:"ī††"}.fa-archive:before{content:"ī†‡"}.fa-bug:before{content:"ī†ˆ"}.fa-vk:before{content:"ī†‰"}.fa-weibo:before{content:"ī†Š"}.fa-renren:before{content:"ī†‹"}.fa-pagelines:before{content:"ī†Œ"}.fa-stack-exchange:before{content:"ī†"}.fa-arrow-circle-o-right:before{content:"ī†Ž"}.fa-arrow-circle-o-left:before{content:"ī†"}.fa-caret-square-o-left:before,.fa-toggle-left:before{content:"ī†‘"}.fa-dot-circle-o:before{content:"ī†’"}.fa-wheelchair:before{content:"ī†“"}.fa-vimeo-square:before{content:"ī†”"}.fa-try:before,.fa-turkish-lira:before{content:"ī†•"}.fa-plus-square-o:before,.wy-menu-vertical li button.toctree-expand:before{content:"ī†–"}.fa-space-shuttle:before{content:"ī†—"}.fa-slack:before{content:"ī†˜"}.fa-envelope-square:before{content:"ī†™"}.fa-wordpress:before{content:"ī†š"}.fa-openid:before{content:"ī†›"}.fa-bank:before,.fa-institution:before,.fa-university:before{content:"ī†œ"}.fa-graduation-cap:before,.fa-mortar-board:before{content:"ī†"}.fa-yahoo:before{content:"ī†ž"}.fa-google:before{content:"ī† "}.fa-reddit:before{content:"ī†Ą"}.fa-reddit-square:before{content:"ī†ĸ"}.fa-stumbleupon-circle:before{content:"ī†Ŗ"}.fa-stumbleupon:before{content:"ī†¤"}.fa-delicious:before{content:"ī†Ĩ"}.fa-digg:before{content:"ī†Ļ"}.fa-pied-piper-pp:before{content:"ī†§"}.fa-pied-piper-alt:before{content:"ī†¨"}.fa-drupal:before{content:"ī†Š"}.fa-joomla:before{content:"ī†Ē"}.fa-language:before{content:"ī†Ģ"}.fa-fax:before{content:"ī†Ŧ"}.fa-building:before{content:"ī†­"}.fa-child:before{content:"ī†Ž"}.fa-paw:before{content:"ī†°"}.fa-spoon:before{content:"ī†ą"}.fa-cube:before{content:"ī†˛"}.fa-cubes:before{content:"ī†ŗ"}.fa-behance:before{content:"ī†´"}.fa-behance-square:before{content:"ī†ĩ"}.fa-steam:before{content:"ī†ļ"}.fa-steam-square:before{content:"ī†ˇ"}.fa-recycle:before{content:"ī†¸"}.fa-automobile:before,.fa-car:before{content:"ī†š"}.fa-cab:before,.fa-taxi:before{content:"ī†ē"}.fa-tree:before{content:"ī†ģ"}.fa-spotify:before{content:"ī†ŧ"}.fa-deviantart:before{content:"ī†Ŋ"}.fa-soundcloud:before{content:"ī†ž"}.fa-database:before{content:"ī‡€"}.fa-file-pdf-o:before{content:"ī‡"}.fa-file-word-o:before{content:"ī‡‚"}.fa-file-excel-o:before{content:"ī‡ƒ"}.fa-file-powerpoint-o:before{content:"ī‡„"}.fa-file-image-o:before,.fa-file-photo-o:before,.fa-file-picture-o:before{content:"ī‡…"}.fa-file-archive-o:before,.fa-file-zip-o:before{content:"ī‡†"}.fa-file-audio-o:before,.fa-file-sound-o:before{content:"ī‡‡"}.fa-file-movie-o:before,.fa-file-video-o:before{content:"ī‡ˆ"}.fa-file-code-o:before{content:"ī‡‰"}.fa-vine:before{content:"ī‡Š"}.fa-codepen:before{content:"ī‡‹"}.fa-jsfiddle:before{content:"ī‡Œ"}.fa-life-bouy:before,.fa-life-buoy:before,.fa-life-ring:before,.fa-life-saver:before,.fa-support:before{content:"ī‡"}.fa-circle-o-notch:before{content:"ī‡Ž"}.fa-ra:before,.fa-rebel:before,.fa-resistance:before{content:"ī‡"}.fa-empire:before,.fa-ge:before{content:"ī‡‘"}.fa-git-square:before{content:"ī‡’"}.fa-git:before{content:"ī‡“"}.fa-hacker-news:before,.fa-y-combinator-square:before,.fa-yc-square:before{content:"ī‡”"}.fa-tencent-weibo:before{content:"ī‡•"}.fa-qq:before{content:"ī‡–"}.fa-wechat:before,.fa-weixin:before{content:"ī‡—"}.fa-paper-plane:before,.fa-send:before{content:"ī‡˜"}.fa-paper-plane-o:before,.fa-send-o:before{content:"ī‡™"}.fa-history:before{content:"ī‡š"}.fa-circle-thin:before{content:"ī‡›"}.fa-header:before{content:"ī‡œ"}.fa-paragraph:before{content:"ī‡"}.fa-sliders:before{content:"ī‡ž"}.fa-share-alt:before{content:"ī‡ "}.fa-share-alt-square:before{content:"ī‡Ą"}.fa-bomb:before{content:"ī‡ĸ"}.fa-futbol-o:before,.fa-soccer-ball-o:before{content:"ī‡Ŗ"}.fa-tty:before{content:"ī‡¤"}.fa-binoculars:before{content:"ī‡Ĩ"}.fa-plug:before{content:"ī‡Ļ"}.fa-slideshare:before{content:"ī‡§"}.fa-twitch:before{content:"ī‡¨"}.fa-yelp:before{content:"ī‡Š"}.fa-newspaper-o:before{content:"ī‡Ē"}.fa-wifi:before{content:"ī‡Ģ"}.fa-calculator:before{content:"ī‡Ŧ"}.fa-paypal:before{content:"ī‡­"}.fa-google-wallet:before{content:"ī‡Ž"}.fa-cc-visa:before{content:"ī‡°"}.fa-cc-mastercard:before{content:"ī‡ą"}.fa-cc-discover:before{content:"ī‡˛"}.fa-cc-amex:before{content:"ī‡ŗ"}.fa-cc-paypal:before{content:"ī‡´"}.fa-cc-stripe:before{content:"ī‡ĩ"}.fa-bell-slash:before{content:"ī‡ļ"}.fa-bell-slash-o:before{content:"ī‡ˇ"}.fa-trash:before{content:"ī‡¸"}.fa-copyright:before{content:"ī‡š"}.fa-at:before{content:"ī‡ē"}.fa-eyedropper:before{content:"ī‡ģ"}.fa-paint-brush:before{content:"ī‡ŧ"}.fa-birthday-cake:before{content:"ī‡Ŋ"}.fa-area-chart:before{content:"ī‡ž"}.fa-pie-chart:before{content:"īˆ€"}.fa-line-chart:before{content:"īˆ"}.fa-lastfm:before{content:"īˆ‚"}.fa-lastfm-square:before{content:"īˆƒ"}.fa-toggle-off:before{content:"īˆ„"}.fa-toggle-on:before{content:"īˆ…"}.fa-bicycle:before{content:"īˆ†"}.fa-bus:before{content:"īˆ‡"}.fa-ioxhost:before{content:"īˆˆ"}.fa-angellist:before{content:"īˆ‰"}.fa-cc:before{content:"īˆŠ"}.fa-ils:before,.fa-shekel:before,.fa-sheqel:before{content:"īˆ‹"}.fa-meanpath:before{content:"īˆŒ"}.fa-buysellads:before{content:"īˆ"}.fa-connectdevelop:before{content:"īˆŽ"}.fa-dashcube:before{content:"īˆ"}.fa-forumbee:before{content:"īˆ‘"}.fa-leanpub:before{content:"īˆ’"}.fa-sellsy:before{content:"īˆ“"}.fa-shirtsinbulk:before{content:"īˆ”"}.fa-simplybuilt:before{content:"īˆ•"}.fa-skyatlas:before{content:"īˆ–"}.fa-cart-plus:before{content:"īˆ—"}.fa-cart-arrow-down:before{content:"īˆ˜"}.fa-diamond:before{content:"īˆ™"}.fa-ship:before{content:"īˆš"}.fa-user-secret:before{content:"īˆ›"}.fa-motorcycle:before{content:"īˆœ"}.fa-street-view:before{content:"īˆ"}.fa-heartbeat:before{content:"īˆž"}.fa-venus:before{content:"īˆĄ"}.fa-mars:before{content:"īˆĸ"}.fa-mercury:before{content:"īˆŖ"}.fa-intersex:before,.fa-transgender:before{content:"īˆ¤"}.fa-transgender-alt:before{content:"īˆĨ"}.fa-venus-double:before{content:"īˆĻ"}.fa-mars-double:before{content:"īˆ§"}.fa-venus-mars:before{content:"īˆ¨"}.fa-mars-stroke:before{content:"īˆŠ"}.fa-mars-stroke-v:before{content:"īˆĒ"}.fa-mars-stroke-h:before{content:"īˆĢ"}.fa-neuter:before{content:"īˆŦ"}.fa-genderless:before{content:"īˆ­"}.fa-facebook-official:before{content:"īˆ°"}.fa-pinterest-p:before{content:"īˆą"}.fa-whatsapp:before{content:"īˆ˛"}.fa-server:before{content:"īˆŗ"}.fa-user-plus:before{content:"īˆ´"}.fa-user-times:before{content:"īˆĩ"}.fa-bed:before,.fa-hotel:before{content:"īˆļ"}.fa-viacoin:before{content:"īˆˇ"}.fa-train:before{content:"īˆ¸"}.fa-subway:before{content:"īˆš"}.fa-medium:before{content:"īˆē"}.fa-y-combinator:before,.fa-yc:before{content:"īˆģ"}.fa-optin-monster:before{content:"īˆŧ"}.fa-opencart:before{content:"īˆŊ"}.fa-expeditedssl:before{content:"īˆž"}.fa-battery-4:before,.fa-battery-full:before,.fa-battery:before{content:"ī‰€"}.fa-battery-3:before,.fa-battery-three-quarters:before{content:"ī‰"}.fa-battery-2:before,.fa-battery-half:before{content:"ī‰‚"}.fa-battery-1:before,.fa-battery-quarter:before{content:"ī‰ƒ"}.fa-battery-0:before,.fa-battery-empty:before{content:"ī‰„"}.fa-mouse-pointer:before{content:"ī‰…"}.fa-i-cursor:before{content:"ī‰†"}.fa-object-group:before{content:"ī‰‡"}.fa-object-ungroup:before{content:"ī‰ˆ"}.fa-sticky-note:before{content:"ī‰‰"}.fa-sticky-note-o:before{content:"ī‰Š"}.fa-cc-jcb:before{content:"ī‰‹"}.fa-cc-diners-club:before{content:"ī‰Œ"}.fa-clone:before{content:"ī‰"}.fa-balance-scale:before{content:"ī‰Ž"}.fa-hourglass-o:before{content:"ī‰"}.fa-hourglass-1:before,.fa-hourglass-start:before{content:"ī‰‘"}.fa-hourglass-2:before,.fa-hourglass-half:before{content:"ī‰’"}.fa-hourglass-3:before,.fa-hourglass-end:before{content:"ī‰“"}.fa-hourglass:before{content:"ī‰”"}.fa-hand-grab-o:before,.fa-hand-rock-o:before{content:"ī‰•"}.fa-hand-paper-o:before,.fa-hand-stop-o:before{content:"ī‰–"}.fa-hand-scissors-o:before{content:"ī‰—"}.fa-hand-lizard-o:before{content:"ī‰˜"}.fa-hand-spock-o:before{content:"ī‰™"}.fa-hand-pointer-o:before{content:"ī‰š"}.fa-hand-peace-o:before{content:"ī‰›"}.fa-trademark:before{content:"ī‰œ"}.fa-registered:before{content:"ī‰"}.fa-creative-commons:before{content:"ī‰ž"}.fa-gg:before{content:"ī‰ "}.fa-gg-circle:before{content:"ī‰Ą"}.fa-tripadvisor:before{content:"ī‰ĸ"}.fa-odnoklassniki:before{content:"ī‰Ŗ"}.fa-odnoklassniki-square:before{content:"ī‰¤"}.fa-get-pocket:before{content:"ī‰Ĩ"}.fa-wikipedia-w:before{content:"ī‰Ļ"}.fa-safari:before{content:"ī‰§"}.fa-chrome:before{content:"ī‰¨"}.fa-firefox:before{content:"ī‰Š"}.fa-opera:before{content:"ī‰Ē"}.fa-internet-explorer:before{content:"ī‰Ģ"}.fa-television:before,.fa-tv:before{content:"ī‰Ŧ"}.fa-contao:before{content:"ī‰­"}.fa-500px:before{content:"ī‰Ž"}.fa-amazon:before{content:"ī‰°"}.fa-calendar-plus-o:before{content:"ī‰ą"}.fa-calendar-minus-o:before{content:"ī‰˛"}.fa-calendar-times-o:before{content:"ī‰ŗ"}.fa-calendar-check-o:before{content:"ī‰´"}.fa-industry:before{content:"ī‰ĩ"}.fa-map-pin:before{content:"ī‰ļ"}.fa-map-signs:before{content:"ī‰ˇ"}.fa-map-o:before{content:"ī‰¸"}.fa-map:before{content:"ī‰š"}.fa-commenting:before{content:"ī‰ē"}.fa-commenting-o:before{content:"ī‰ģ"}.fa-houzz:before{content:"ī‰ŧ"}.fa-vimeo:before{content:"ī‰Ŋ"}.fa-black-tie:before{content:"ī‰ž"}.fa-fonticons:before{content:"īŠ€"}.fa-reddit-alien:before{content:"īŠ"}.fa-edge:before{content:"īŠ‚"}.fa-credit-card-alt:before{content:"īŠƒ"}.fa-codiepie:before{content:"īŠ„"}.fa-modx:before{content:"īŠ…"}.fa-fort-awesome:before{content:"īŠ†"}.fa-usb:before{content:"īŠ‡"}.fa-product-hunt:before{content:"īŠˆ"}.fa-mixcloud:before{content:"īŠ‰"}.fa-scribd:before{content:"īŠŠ"}.fa-pause-circle:before{content:"īŠ‹"}.fa-pause-circle-o:before{content:"īŠŒ"}.fa-stop-circle:before{content:"īŠ"}.fa-stop-circle-o:before{content:"īŠŽ"}.fa-shopping-bag:before{content:"īŠ"}.fa-shopping-basket:before{content:"īŠ‘"}.fa-hashtag:before{content:"īŠ’"}.fa-bluetooth:before{content:"īŠ“"}.fa-bluetooth-b:before{content:"īŠ”"}.fa-percent:before{content:"īŠ•"}.fa-gitlab:before,.icon-gitlab:before{content:"īŠ–"}.fa-wpbeginner:before{content:"īŠ—"}.fa-wpforms:before{content:"īŠ˜"}.fa-envira:before{content:"īŠ™"}.fa-universal-access:before{content:"īŠš"}.fa-wheelchair-alt:before{content:"īŠ›"}.fa-question-circle-o:before{content:"īŠœ"}.fa-blind:before{content:"īŠ"}.fa-audio-description:before{content:"īŠž"}.fa-volume-control-phone:before{content:"īŠ "}.fa-braille:before{content:"īŠĄ"}.fa-assistive-listening-systems:before{content:"īŠĸ"}.fa-american-sign-language-interpreting:before,.fa-asl-interpreting:before{content:"īŠŖ"}.fa-deaf:before,.fa-deafness:before,.fa-hard-of-hearing:before{content:"īŠ¤"}.fa-glide:before{content:"īŠĨ"}.fa-glide-g:before{content:"īŠĻ"}.fa-sign-language:before,.fa-signing:before{content:"īŠ§"}.fa-low-vision:before{content:"īŠ¨"}.fa-viadeo:before{content:"īŠŠ"}.fa-viadeo-square:before{content:"īŠĒ"}.fa-snapchat:before{content:"īŠĢ"}.fa-snapchat-ghost:before{content:"īŠŦ"}.fa-snapchat-square:before{content:"īŠ­"}.fa-pied-piper:before{content:"īŠŽ"}.fa-first-order:before{content:"īŠ°"}.fa-yoast:before{content:"īŠą"}.fa-themeisle:before{content:"īŠ˛"}.fa-google-plus-circle:before,.fa-google-plus-official:before{content:"īŠŗ"}.fa-fa:before,.fa-font-awesome:before{content:"īŠ´"}.fa-handshake-o:before{content:"īŠĩ"}.fa-envelope-open:before{content:"īŠļ"}.fa-envelope-open-o:before{content:"īŠˇ"}.fa-linode:before{content:"īŠ¸"}.fa-address-book:before{content:"īŠš"}.fa-address-book-o:before{content:"īŠē"}.fa-address-card:before,.fa-vcard:before{content:"īŠģ"}.fa-address-card-o:before,.fa-vcard-o:before{content:"īŠŧ"}.fa-user-circle:before{content:"īŠŊ"}.fa-user-circle-o:before{content:"īŠž"}.fa-user-o:before{content:"ī‹€"}.fa-id-badge:before{content:"ī‹"}.fa-drivers-license:before,.fa-id-card:before{content:"ī‹‚"}.fa-drivers-license-o:before,.fa-id-card-o:before{content:"ī‹ƒ"}.fa-quora:before{content:"ī‹„"}.fa-free-code-camp:before{content:"ī‹…"}.fa-telegram:before{content:"ī‹†"}.fa-thermometer-4:before,.fa-thermometer-full:before,.fa-thermometer:before{content:"ī‹‡"}.fa-thermometer-3:before,.fa-thermometer-three-quarters:before{content:"ī‹ˆ"}.fa-thermometer-2:before,.fa-thermometer-half:before{content:"ī‹‰"}.fa-thermometer-1:before,.fa-thermometer-quarter:before{content:"ī‹Š"}.fa-thermometer-0:before,.fa-thermometer-empty:before{content:"ī‹‹"}.fa-shower:before{content:"ī‹Œ"}.fa-bath:before,.fa-bathtub:before,.fa-s15:before{content:"ī‹"}.fa-podcast:before{content:"ī‹Ž"}.fa-window-maximize:before{content:"ī‹"}.fa-window-minimize:before{content:"ī‹‘"}.fa-window-restore:before{content:"ī‹’"}.fa-times-rectangle:before,.fa-window-close:before{content:"ī‹“"}.fa-times-rectangle-o:before,.fa-window-close-o:before{content:"ī‹”"}.fa-bandcamp:before{content:"ī‹•"}.fa-grav:before{content:"ī‹–"}.fa-etsy:before{content:"ī‹—"}.fa-imdb:before{content:"ī‹˜"}.fa-ravelry:before{content:"ī‹™"}.fa-eercast:before{content:"ī‹š"}.fa-microchip:before{content:"ī‹›"}.fa-snowflake-o:before{content:"ī‹œ"}.fa-superpowers:before{content:"ī‹"}.fa-wpexplorer:before{content:"ī‹ž"}.fa-meetup:before{content:"ī‹ "}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:auto;margin:0;overflow:visible;clip:auto}.fa,.icon,.rst-content .admonition-title,.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content code.download span:first-child,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink,.rst-content tt.download span:first-child,.wy-dropdown .caret,.wy-inline-validate.wy-inline-validate-danger .wy-input-context,.wy-inline-validate.wy-inline-validate-info .wy-input-context,.wy-inline-validate.wy-inline-validate-success .wy-input-context,.wy-inline-validate.wy-inline-validate-warning .wy-input-context,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li button.toctree-expand{font-family:inherit}.fa:before,.icon:before,.rst-content .admonition-title:before,.rst-content .code-block-caption .headerlink:before,.rst-content .eqno .headerlink:before,.rst-content code.download span:first-child:before,.rst-content dl dt .headerlink:before,.rst-content h1 .headerlink:before,.rst-content h2 .headerlink:before,.rst-content h3 .headerlink:before,.rst-content h4 .headerlink:before,.rst-content h5 .headerlink:before,.rst-content h6 .headerlink:before,.rst-content p.caption .headerlink:before,.rst-content p .headerlink:before,.rst-content table>caption .headerlink:before,.rst-content tt.download span:first-child:before,.wy-dropdown .caret:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before,.wy-menu-vertical li button.toctree-expand:before{font-family:FontAwesome;display:inline-block;font-style:normal;font-weight:400;line-height:1;text-decoration:inherit}.rst-content .code-block-caption a .headerlink,.rst-content .eqno a .headerlink,.rst-content a .admonition-title,.rst-content code.download a span:first-child,.rst-content dl dt a .headerlink,.rst-content h1 a .headerlink,.rst-content h2 a .headerlink,.rst-content h3 a .headerlink,.rst-content h4 a .headerlink,.rst-content h5 a .headerlink,.rst-content h6 a .headerlink,.rst-content p.caption a .headerlink,.rst-content p a .headerlink,.rst-content table>caption a .headerlink,.rst-content tt.download a span:first-child,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li a button.toctree-expand,a .fa,a .icon,a .rst-content .admonition-title,a .rst-content .code-block-caption .headerlink,a .rst-content .eqno .headerlink,a .rst-content code.download span:first-child,a .rst-content dl dt .headerlink,a .rst-content h1 .headerlink,a .rst-content h2 .headerlink,a .rst-content h3 .headerlink,a .rst-content h4 .headerlink,a .rst-content h5 .headerlink,a .rst-content h6 .headerlink,a .rst-content p.caption .headerlink,a .rst-content p .headerlink,a .rst-content table>caption .headerlink,a .rst-content tt.download span:first-child,a .wy-menu-vertical li button.toctree-expand{display:inline-block;text-decoration:inherit}.btn .fa,.btn .icon,.btn .rst-content .admonition-title,.btn .rst-content .code-block-caption .headerlink,.btn .rst-content .eqno .headerlink,.btn .rst-content code.download span:first-child,.btn .rst-content dl dt .headerlink,.btn .rst-content h1 .headerlink,.btn .rst-content h2 .headerlink,.btn .rst-content h3 .headerlink,.btn .rst-content h4 .headerlink,.btn .rst-content h5 .headerlink,.btn .rst-content h6 .headerlink,.btn .rst-content p .headerlink,.btn .rst-content table>caption .headerlink,.btn .rst-content tt.download span:first-child,.btn .wy-menu-vertical li.current>a button.toctree-expand,.btn .wy-menu-vertical li.on a button.toctree-expand,.btn .wy-menu-vertical li button.toctree-expand,.nav .fa,.nav .icon,.nav .rst-content .admonition-title,.nav .rst-content .code-block-caption .headerlink,.nav .rst-content .eqno .headerlink,.nav .rst-content code.download span:first-child,.nav .rst-content dl dt .headerlink,.nav .rst-content h1 .headerlink,.nav .rst-content h2 .headerlink,.nav .rst-content h3 .headerlink,.nav .rst-content h4 .headerlink,.nav .rst-content h5 .headerlink,.nav .rst-content h6 .headerlink,.nav .rst-content p .headerlink,.nav .rst-content table>caption .headerlink,.nav .rst-content tt.download span:first-child,.nav .wy-menu-vertical li.current>a button.toctree-expand,.nav .wy-menu-vertical li.on a button.toctree-expand,.nav .wy-menu-vertical li button.toctree-expand,.rst-content .btn .admonition-title,.rst-content .code-block-caption .btn .headerlink,.rst-content .code-block-caption .nav .headerlink,.rst-content .eqno .btn .headerlink,.rst-content .eqno .nav .headerlink,.rst-content .nav .admonition-title,.rst-content code.download .btn span:first-child,.rst-content code.download .nav span:first-child,.rst-content dl dt .btn .headerlink,.rst-content dl dt .nav .headerlink,.rst-content h1 .btn .headerlink,.rst-content h1 .nav .headerlink,.rst-content h2 .btn .headerlink,.rst-content h2 .nav .headerlink,.rst-content h3 .btn .headerlink,.rst-content h3 .nav .headerlink,.rst-content h4 .btn .headerlink,.rst-content h4 .nav .headerlink,.rst-content h5 .btn .headerlink,.rst-content h5 .nav .headerlink,.rst-content h6 .btn .headerlink,.rst-content h6 .nav .headerlink,.rst-content p .btn .headerlink,.rst-content p .nav .headerlink,.rst-content table>caption .btn .headerlink,.rst-content table>caption .nav .headerlink,.rst-content tt.download .btn span:first-child,.rst-content tt.download .nav span:first-child,.wy-menu-vertical li .btn button.toctree-expand,.wy-menu-vertical li.current>a .btn button.toctree-expand,.wy-menu-vertical li.current>a .nav button.toctree-expand,.wy-menu-vertical li .nav button.toctree-expand,.wy-menu-vertical li.on a .btn button.toctree-expand,.wy-menu-vertical li.on a .nav button.toctree-expand{display:inline}.btn .fa-large.icon,.btn .fa.fa-large,.btn .rst-content .code-block-caption .fa-large.headerlink,.btn .rst-content .eqno .fa-large.headerlink,.btn .rst-content .fa-large.admonition-title,.btn .rst-content code.download span.fa-large:first-child,.btn .rst-content dl dt .fa-large.headerlink,.btn .rst-content h1 .fa-large.headerlink,.btn .rst-content h2 .fa-large.headerlink,.btn .rst-content h3 .fa-large.headerlink,.btn .rst-content h4 .fa-large.headerlink,.btn .rst-content h5 .fa-large.headerlink,.btn .rst-content h6 .fa-large.headerlink,.btn .rst-content p .fa-large.headerlink,.btn .rst-content table>caption .fa-large.headerlink,.btn .rst-content tt.download span.fa-large:first-child,.btn .wy-menu-vertical li button.fa-large.toctree-expand,.nav .fa-large.icon,.nav .fa.fa-large,.nav .rst-content .code-block-caption .fa-large.headerlink,.nav .rst-content .eqno .fa-large.headerlink,.nav .rst-content .fa-large.admonition-title,.nav .rst-content code.download span.fa-large:first-child,.nav .rst-content dl dt .fa-large.headerlink,.nav .rst-content h1 .fa-large.headerlink,.nav .rst-content h2 .fa-large.headerlink,.nav .rst-content h3 .fa-large.headerlink,.nav .rst-content h4 .fa-large.headerlink,.nav .rst-content h5 .fa-large.headerlink,.nav .rst-content h6 .fa-large.headerlink,.nav .rst-content p .fa-large.headerlink,.nav .rst-content table>caption .fa-large.headerlink,.nav .rst-content tt.download span.fa-large:first-child,.nav .wy-menu-vertical li button.fa-large.toctree-expand,.rst-content .btn .fa-large.admonition-title,.rst-content .code-block-caption .btn .fa-large.headerlink,.rst-content .code-block-caption .nav .fa-large.headerlink,.rst-content .eqno .btn .fa-large.headerlink,.rst-content .eqno .nav .fa-large.headerlink,.rst-content .nav .fa-large.admonition-title,.rst-content code.download .btn span.fa-large:first-child,.rst-content code.download .nav span.fa-large:first-child,.rst-content dl dt .btn .fa-large.headerlink,.rst-content dl dt .nav .fa-large.headerlink,.rst-content h1 .btn .fa-large.headerlink,.rst-content h1 .nav .fa-large.headerlink,.rst-content h2 .btn .fa-large.headerlink,.rst-content h2 .nav .fa-large.headerlink,.rst-content h3 .btn .fa-large.headerlink,.rst-content h3 .nav .fa-large.headerlink,.rst-content h4 .btn .fa-large.headerlink,.rst-content h4 .nav .fa-large.headerlink,.rst-content h5 .btn .fa-large.headerlink,.rst-content h5 .nav .fa-large.headerlink,.rst-content h6 .btn .fa-large.headerlink,.rst-content h6 .nav .fa-large.headerlink,.rst-content p .btn .fa-large.headerlink,.rst-content p .nav .fa-large.headerlink,.rst-content table>caption .btn .fa-large.headerlink,.rst-content table>caption .nav .fa-large.headerlink,.rst-content tt.download .btn span.fa-large:first-child,.rst-content tt.download .nav span.fa-large:first-child,.wy-menu-vertical li .btn button.fa-large.toctree-expand,.wy-menu-vertical li .nav button.fa-large.toctree-expand{line-height:.9em}.btn .fa-spin.icon,.btn .fa.fa-spin,.btn .rst-content .code-block-caption .fa-spin.headerlink,.btn .rst-content .eqno .fa-spin.headerlink,.btn .rst-content .fa-spin.admonition-title,.btn .rst-content code.download span.fa-spin:first-child,.btn .rst-content dl dt .fa-spin.headerlink,.btn .rst-content h1 .fa-spin.headerlink,.btn .rst-content h2 .fa-spin.headerlink,.btn .rst-content h3 .fa-spin.headerlink,.btn .rst-content h4 .fa-spin.headerlink,.btn .rst-content h5 .fa-spin.headerlink,.btn .rst-content h6 .fa-spin.headerlink,.btn .rst-content p .fa-spin.headerlink,.btn .rst-content table>caption .fa-spin.headerlink,.btn .rst-content tt.download span.fa-spin:first-child,.btn .wy-menu-vertical li button.fa-spin.toctree-expand,.nav .fa-spin.icon,.nav .fa.fa-spin,.nav .rst-content .code-block-caption .fa-spin.headerlink,.nav .rst-content .eqno .fa-spin.headerlink,.nav .rst-content .fa-spin.admonition-title,.nav .rst-content code.download span.fa-spin:first-child,.nav .rst-content dl dt .fa-spin.headerlink,.nav .rst-content h1 .fa-spin.headerlink,.nav .rst-content h2 .fa-spin.headerlink,.nav .rst-content h3 .fa-spin.headerlink,.nav .rst-content h4 .fa-spin.headerlink,.nav .rst-content h5 .fa-spin.headerlink,.nav .rst-content h6 .fa-spin.headerlink,.nav .rst-content p .fa-spin.headerlink,.nav .rst-content table>caption .fa-spin.headerlink,.nav .rst-content tt.download span.fa-spin:first-child,.nav .wy-menu-vertical li button.fa-spin.toctree-expand,.rst-content .btn .fa-spin.admonition-title,.rst-content .code-block-caption .btn .fa-spin.headerlink,.rst-content .code-block-caption .nav .fa-spin.headerlink,.rst-content .eqno .btn .fa-spin.headerlink,.rst-content .eqno .nav .fa-spin.headerlink,.rst-content .nav .fa-spin.admonition-title,.rst-content code.download .btn span.fa-spin:first-child,.rst-content code.download .nav span.fa-spin:first-child,.rst-content dl dt .btn .fa-spin.headerlink,.rst-content dl dt .nav .fa-spin.headerlink,.rst-content h1 .btn .fa-spin.headerlink,.rst-content h1 .nav .fa-spin.headerlink,.rst-content h2 .btn .fa-spin.headerlink,.rst-content h2 .nav .fa-spin.headerlink,.rst-content h3 .btn .fa-spin.headerlink,.rst-content h3 .nav .fa-spin.headerlink,.rst-content h4 .btn .fa-spin.headerlink,.rst-content h4 .nav .fa-spin.headerlink,.rst-content h5 .btn .fa-spin.headerlink,.rst-content h5 .nav .fa-spin.headerlink,.rst-content h6 .btn .fa-spin.headerlink,.rst-content h6 .nav .fa-spin.headerlink,.rst-content p .btn .fa-spin.headerlink,.rst-content p .nav .fa-spin.headerlink,.rst-content table>caption .btn .fa-spin.headerlink,.rst-content table>caption .nav .fa-spin.headerlink,.rst-content tt.download .btn span.fa-spin:first-child,.rst-content tt.download .nav span.fa-spin:first-child,.wy-menu-vertical li .btn button.fa-spin.toctree-expand,.wy-menu-vertical li .nav button.fa-spin.toctree-expand{display:inline-block}.btn.fa:before,.btn.icon:before,.rst-content .btn.admonition-title:before,.rst-content .code-block-caption .btn.headerlink:before,.rst-content .eqno .btn.headerlink:before,.rst-content code.download span.btn:first-child:before,.rst-content dl dt .btn.headerlink:before,.rst-content h1 .btn.headerlink:before,.rst-content h2 .btn.headerlink:before,.rst-content h3 .btn.headerlink:before,.rst-content h4 .btn.headerlink:before,.rst-content h5 .btn.headerlink:before,.rst-content h6 .btn.headerlink:before,.rst-content p .btn.headerlink:before,.rst-content table>caption .btn.headerlink:before,.rst-content tt.download span.btn:first-child:before,.wy-menu-vertical li button.btn.toctree-expand:before{opacity:.5;-webkit-transition:opacity .05s ease-in;-moz-transition:opacity .05s ease-in;transition:opacity .05s ease-in}.btn.fa:hover:before,.btn.icon:hover:before,.rst-content .btn.admonition-title:hover:before,.rst-content .code-block-caption .btn.headerlink:hover:before,.rst-content .eqno .btn.headerlink:hover:before,.rst-content code.download span.btn:first-child:hover:before,.rst-content dl dt .btn.headerlink:hover:before,.rst-content h1 .btn.headerlink:hover:before,.rst-content h2 .btn.headerlink:hover:before,.rst-content h3 .btn.headerlink:hover:before,.rst-content h4 .btn.headerlink:hover:before,.rst-content h5 .btn.headerlink:hover:before,.rst-content h6 .btn.headerlink:hover:before,.rst-content p .btn.headerlink:hover:before,.rst-content table>caption .btn.headerlink:hover:before,.rst-content tt.download span.btn:first-child:hover:before,.wy-menu-vertical li button.btn.toctree-expand:hover:before{opacity:1}.btn-mini .fa:before,.btn-mini .icon:before,.btn-mini .rst-content .admonition-title:before,.btn-mini .rst-content .code-block-caption .headerlink:before,.btn-mini .rst-content .eqno .headerlink:before,.btn-mini .rst-content code.download span:first-child:before,.btn-mini .rst-content dl dt .headerlink:before,.btn-mini .rst-content h1 .headerlink:before,.btn-mini .rst-content h2 .headerlink:before,.btn-mini .rst-content h3 .headerlink:before,.btn-mini .rst-content h4 .headerlink:before,.btn-mini .rst-content h5 .headerlink:before,.btn-mini .rst-content h6 .headerlink:before,.btn-mini .rst-content p .headerlink:before,.btn-mini .rst-content table>caption .headerlink:before,.btn-mini .rst-content tt.download span:first-child:before,.btn-mini .wy-menu-vertical li button.toctree-expand:before,.rst-content .btn-mini .admonition-title:before,.rst-content .code-block-caption .btn-mini .headerlink:before,.rst-content .eqno .btn-mini .headerlink:before,.rst-content code.download .btn-mini span:first-child:before,.rst-content dl dt .btn-mini .headerlink:before,.rst-content h1 .btn-mini .headerlink:before,.rst-content h2 .btn-mini .headerlink:before,.rst-content h3 .btn-mini .headerlink:before,.rst-content h4 .btn-mini .headerlink:before,.rst-content h5 .btn-mini .headerlink:before,.rst-content h6 .btn-mini .headerlink:before,.rst-content p .btn-mini .headerlink:before,.rst-content table>caption .btn-mini .headerlink:before,.rst-content tt.download .btn-mini span:first-child:before,.wy-menu-vertical li .btn-mini button.toctree-expand:before{font-size:14px;vertical-align:-15%}.rst-content .admonition,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .danger,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning,.wy-alert{padding:12px;line-height:24px;margin-bottom:24px;background:#e7f2fa}.rst-content .admonition-title,.wy-alert-title{font-weight:700;display:block;color:#fff;background:#6ab0de;padding:6px 12px;margin:-12px -12px 12px}.rst-content .danger,.rst-content .error,.rst-content .wy-alert-danger.admonition,.rst-content .wy-alert-danger.admonition-todo,.rst-content .wy-alert-danger.attention,.rst-content .wy-alert-danger.caution,.rst-content .wy-alert-danger.hint,.rst-content .wy-alert-danger.important,.rst-content .wy-alert-danger.note,.rst-content .wy-alert-danger.seealso,.rst-content .wy-alert-danger.tip,.rst-content .wy-alert-danger.warning,.wy-alert.wy-alert-danger{background:#fdf3f2}.rst-content .danger .admonition-title,.rst-content .danger .wy-alert-title,.rst-content .error .admonition-title,.rst-content .error .wy-alert-title,.rst-content .wy-alert-danger.admonition-todo .admonition-title,.rst-content .wy-alert-danger.admonition-todo .wy-alert-title,.rst-content .wy-alert-danger.admonition .admonition-title,.rst-content .wy-alert-danger.admonition .wy-alert-title,.rst-content .wy-alert-danger.attention .admonition-title,.rst-content .wy-alert-danger.attention .wy-alert-title,.rst-content .wy-alert-danger.caution .admonition-title,.rst-content .wy-alert-danger.caution .wy-alert-title,.rst-content .wy-alert-danger.hint .admonition-title,.rst-content .wy-alert-danger.hint .wy-alert-title,.rst-content .wy-alert-danger.important .admonition-title,.rst-content .wy-alert-danger.important .wy-alert-title,.rst-content .wy-alert-danger.note .admonition-title,.rst-content .wy-alert-danger.note .wy-alert-title,.rst-content .wy-alert-danger.seealso .admonition-title,.rst-content .wy-alert-danger.seealso .wy-alert-title,.rst-content .wy-alert-danger.tip .admonition-title,.rst-content .wy-alert-danger.tip .wy-alert-title,.rst-content .wy-alert-danger.warning .admonition-title,.rst-content .wy-alert-danger.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-danger .admonition-title,.wy-alert.wy-alert-danger .rst-content .admonition-title,.wy-alert.wy-alert-danger .wy-alert-title{background:#f29f97}.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .warning,.rst-content .wy-alert-warning.admonition,.rst-content .wy-alert-warning.danger,.rst-content .wy-alert-warning.error,.rst-content .wy-alert-warning.hint,.rst-content .wy-alert-warning.important,.rst-content .wy-alert-warning.note,.rst-content .wy-alert-warning.seealso,.rst-content .wy-alert-warning.tip,.wy-alert.wy-alert-warning{background:#ffedcc}.rst-content .admonition-todo .admonition-title,.rst-content .admonition-todo .wy-alert-title,.rst-content .attention .admonition-title,.rst-content .attention .wy-alert-title,.rst-content .caution .admonition-title,.rst-content .caution .wy-alert-title,.rst-content .warning .admonition-title,.rst-content .warning .wy-alert-title,.rst-content .wy-alert-warning.admonition .admonition-title,.rst-content .wy-alert-warning.admonition .wy-alert-title,.rst-content .wy-alert-warning.danger .admonition-title,.rst-content .wy-alert-warning.danger .wy-alert-title,.rst-content .wy-alert-warning.error .admonition-title,.rst-content .wy-alert-warning.error .wy-alert-title,.rst-content .wy-alert-warning.hint .admonition-title,.rst-content .wy-alert-warning.hint .wy-alert-title,.rst-content .wy-alert-warning.important .admonition-title,.rst-content .wy-alert-warning.important .wy-alert-title,.rst-content .wy-alert-warning.note .admonition-title,.rst-content .wy-alert-warning.note .wy-alert-title,.rst-content .wy-alert-warning.seealso .admonition-title,.rst-content .wy-alert-warning.seealso .wy-alert-title,.rst-content .wy-alert-warning.tip .admonition-title,.rst-content .wy-alert-warning.tip .wy-alert-title,.rst-content .wy-alert.wy-alert-warning .admonition-title,.wy-alert.wy-alert-warning .rst-content .admonition-title,.wy-alert.wy-alert-warning .wy-alert-title{background:#f0b37e}.rst-content .note,.rst-content .seealso,.rst-content .wy-alert-info.admonition,.rst-content .wy-alert-info.admonition-todo,.rst-content .wy-alert-info.attention,.rst-content .wy-alert-info.caution,.rst-content .wy-alert-info.danger,.rst-content .wy-alert-info.error,.rst-content .wy-alert-info.hint,.rst-content .wy-alert-info.important,.rst-content .wy-alert-info.tip,.rst-content .wy-alert-info.warning,.wy-alert.wy-alert-info{background:#e7f2fa}.rst-content .note .admonition-title,.rst-content .note .wy-alert-title,.rst-content .seealso .admonition-title,.rst-content .seealso .wy-alert-title,.rst-content .wy-alert-info.admonition-todo .admonition-title,.rst-content .wy-alert-info.admonition-todo .wy-alert-title,.rst-content .wy-alert-info.admonition .admonition-title,.rst-content .wy-alert-info.admonition .wy-alert-title,.rst-content .wy-alert-info.attention .admonition-title,.rst-content .wy-alert-info.attention .wy-alert-title,.rst-content .wy-alert-info.caution .admonition-title,.rst-content .wy-alert-info.caution .wy-alert-title,.rst-content .wy-alert-info.danger .admonition-title,.rst-content .wy-alert-info.danger .wy-alert-title,.rst-content .wy-alert-info.error .admonition-title,.rst-content .wy-alert-info.error .wy-alert-title,.rst-content .wy-alert-info.hint .admonition-title,.rst-content .wy-alert-info.hint .wy-alert-title,.rst-content .wy-alert-info.important .admonition-title,.rst-content .wy-alert-info.important .wy-alert-title,.rst-content .wy-alert-info.tip .admonition-title,.rst-content .wy-alert-info.tip .wy-alert-title,.rst-content .wy-alert-info.warning .admonition-title,.rst-content .wy-alert-info.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-info .admonition-title,.wy-alert.wy-alert-info .rst-content .admonition-title,.wy-alert.wy-alert-info .wy-alert-title{background:#6ab0de}.rst-content .hint,.rst-content .important,.rst-content .tip,.rst-content .wy-alert-success.admonition,.rst-content .wy-alert-success.admonition-todo,.rst-content .wy-alert-success.attention,.rst-content .wy-alert-success.caution,.rst-content .wy-alert-success.danger,.rst-content .wy-alert-success.error,.rst-content .wy-alert-success.note,.rst-content .wy-alert-success.seealso,.rst-content .wy-alert-success.warning,.wy-alert.wy-alert-success{background:#dbfaf4}.rst-content .hint .admonition-title,.rst-content .hint .wy-alert-title,.rst-content .important .admonition-title,.rst-content .important .wy-alert-title,.rst-content .tip .admonition-title,.rst-content .tip .wy-alert-title,.rst-content .wy-alert-success.admonition-todo .admonition-title,.rst-content .wy-alert-success.admonition-todo .wy-alert-title,.rst-content .wy-alert-success.admonition .admonition-title,.rst-content .wy-alert-success.admonition .wy-alert-title,.rst-content .wy-alert-success.attention .admonition-title,.rst-content .wy-alert-success.attention .wy-alert-title,.rst-content .wy-alert-success.caution .admonition-title,.rst-content .wy-alert-success.caution .wy-alert-title,.rst-content .wy-alert-success.danger .admonition-title,.rst-content .wy-alert-success.danger .wy-alert-title,.rst-content .wy-alert-success.error .admonition-title,.rst-content .wy-alert-success.error .wy-alert-title,.rst-content .wy-alert-success.note .admonition-title,.rst-content .wy-alert-success.note .wy-alert-title,.rst-content .wy-alert-success.seealso .admonition-title,.rst-content .wy-alert-success.seealso .wy-alert-title,.rst-content .wy-alert-success.warning .admonition-title,.rst-content .wy-alert-success.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-success .admonition-title,.wy-alert.wy-alert-success .rst-content .admonition-title,.wy-alert.wy-alert-success .wy-alert-title{background:#1abc9c}.rst-content .wy-alert-neutral.admonition,.rst-content .wy-alert-neutral.admonition-todo,.rst-content .wy-alert-neutral.attention,.rst-content .wy-alert-neutral.caution,.rst-content .wy-alert-neutral.danger,.rst-content .wy-alert-neutral.error,.rst-content .wy-alert-neutral.hint,.rst-content .wy-alert-neutral.important,.rst-content .wy-alert-neutral.note,.rst-content .wy-alert-neutral.seealso,.rst-content .wy-alert-neutral.tip,.rst-content .wy-alert-neutral.warning,.wy-alert.wy-alert-neutral{background:#f3f6f6}.rst-content .wy-alert-neutral.admonition-todo .admonition-title,.rst-content .wy-alert-neutral.admonition-todo .wy-alert-title,.rst-content .wy-alert-neutral.admonition .admonition-title,.rst-content .wy-alert-neutral.admonition .wy-alert-title,.rst-content .wy-alert-neutral.attention .admonition-title,.rst-content .wy-alert-neutral.attention .wy-alert-title,.rst-content .wy-alert-neutral.caution .admonition-title,.rst-content .wy-alert-neutral.caution .wy-alert-title,.rst-content .wy-alert-neutral.danger .admonition-title,.rst-content .wy-alert-neutral.danger .wy-alert-title,.rst-content .wy-alert-neutral.error .admonition-title,.rst-content .wy-alert-neutral.error .wy-alert-title,.rst-content .wy-alert-neutral.hint .admonition-title,.rst-content .wy-alert-neutral.hint .wy-alert-title,.rst-content .wy-alert-neutral.important .admonition-title,.rst-content .wy-alert-neutral.important .wy-alert-title,.rst-content .wy-alert-neutral.note .admonition-title,.rst-content .wy-alert-neutral.note .wy-alert-title,.rst-content .wy-alert-neutral.seealso .admonition-title,.rst-content .wy-alert-neutral.seealso .wy-alert-title,.rst-content .wy-alert-neutral.tip .admonition-title,.rst-content .wy-alert-neutral.tip .wy-alert-title,.rst-content .wy-alert-neutral.warning .admonition-title,.rst-content .wy-alert-neutral.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-neutral .admonition-title,.wy-alert.wy-alert-neutral .rst-content .admonition-title,.wy-alert.wy-alert-neutral .wy-alert-title{color:#404040;background:#e1e4e5}.rst-content .wy-alert-neutral.admonition-todo a,.rst-content .wy-alert-neutral.admonition a,.rst-content .wy-alert-neutral.attention a,.rst-content .wy-alert-neutral.caution a,.rst-content .wy-alert-neutral.danger a,.rst-content .wy-alert-neutral.error a,.rst-content .wy-alert-neutral.hint a,.rst-content .wy-alert-neutral.important a,.rst-content .wy-alert-neutral.note a,.rst-content .wy-alert-neutral.seealso a,.rst-content .wy-alert-neutral.tip a,.rst-content .wy-alert-neutral.warning a,.wy-alert.wy-alert-neutral a{color:#2980b9}.rst-content .admonition-todo p:last-child,.rst-content .admonition p:last-child,.rst-content .attention p:last-child,.rst-content .caution p:last-child,.rst-content .danger p:last-child,.rst-content .error p:last-child,.rst-content .hint p:last-child,.rst-content .important p:last-child,.rst-content .note p:last-child,.rst-content .seealso p:last-child,.rst-content .tip p:last-child,.rst-content .warning p:last-child,.wy-alert p:last-child{margin-bottom:0}.wy-tray-container{position:fixed;bottom:0;left:0;z-index:600}.wy-tray-container li{display:block;width:300px;background:transparent;color:#fff;text-align:center;box-shadow:0 5px 5px 0 rgba(0,0,0,.1);padding:0 24px;min-width:20%;opacity:0;height:0;line-height:56px;overflow:hidden;-webkit-transition:all .3s ease-in;-moz-transition:all .3s ease-in;transition:all .3s ease-in}.wy-tray-container li.wy-tray-item-success{background:#27ae60}.wy-tray-container li.wy-tray-item-info{background:#2980b9}.wy-tray-container li.wy-tray-item-warning{background:#e67e22}.wy-tray-container li.wy-tray-item-danger{background:#e74c3c}.wy-tray-container li.on{opacity:1;height:56px}@media screen and (max-width:768px){.wy-tray-container{bottom:auto;top:0;width:100%}.wy-tray-container li{width:100%}}button{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle;cursor:pointer;line-height:normal;-webkit-appearance:button;*overflow:visible}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}button[disabled]{cursor:default}.btn{display:inline-block;border-radius:2px;line-height:normal;white-space:nowrap;text-align:center;cursor:pointer;font-size:100%;padding:6px 12px 8px;color:#fff;border:1px solid rgba(0,0,0,.1);background-color:#27ae60;text-decoration:none;font-weight:400;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;box-shadow:inset 0 1px 2px -1px hsla(0,0%,100%,.5),inset 0 -2px 0 0 rgba(0,0,0,.1);outline-none:false;vertical-align:middle;*display:inline;zoom:1;-webkit-user-drag:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-transition:all .1s linear;-moz-transition:all .1s linear;transition:all .1s linear}.btn-hover{background:#2e8ece;color:#fff}.btn:hover{background:#2cc36b;color:#fff}.btn:focus{background:#2cc36b;outline:0}.btn:active{box-shadow:inset 0 -1px 0 0 rgba(0,0,0,.05),inset 0 2px 0 0 rgba(0,0,0,.1);padding:8px 12px 6px}.btn:visited{color:#fff}.btn-disabled,.btn-disabled:active,.btn-disabled:focus,.btn-disabled:hover,.btn:disabled{background-image:none;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);filter:alpha(opacity=40);opacity:.4;cursor:not-allowed;box-shadow:none}.btn::-moz-focus-inner{padding:0;border:0}.btn-small{font-size:80%}.btn-info{background-color:#2980b9!important}.btn-info:hover{background-color:#2e8ece!important}.btn-neutral{background-color:#f3f6f6!important;color:#404040!important}.btn-neutral:hover{background-color:#e5ebeb!important;color:#404040}.btn-neutral:visited{color:#404040!important}.btn-success{background-color:#27ae60!important}.btn-success:hover{background-color:#295!important}.btn-danger{background-color:#e74c3c!important}.btn-danger:hover{background-color:#ea6153!important}.btn-warning{background-color:#e67e22!important}.btn-warning:hover{background-color:#e98b39!important}.btn-invert{background-color:#222}.btn-invert:hover{background-color:#2f2f2f!important}.btn-link{background-color:transparent!important;color:#2980b9;box-shadow:none;border-color:transparent!important}.btn-link:active,.btn-link:hover{background-color:transparent!important;color:#409ad5!important;box-shadow:none}.btn-link:visited{color:#9b59b6}.wy-btn-group .btn,.wy-control .btn{vertical-align:middle}.wy-btn-group{margin-bottom:24px;*zoom:1}.wy-btn-group:after,.wy-btn-group:before{display:table;content:""}.wy-btn-group:after{clear:both}.wy-dropdown{position:relative;display:inline-block}.wy-dropdown-active .wy-dropdown-menu{display:block}.wy-dropdown-menu{position:absolute;left:0;display:none;float:left;top:100%;min-width:100%;background:#fcfcfc;z-index:100;border:1px solid #cfd7dd;box-shadow:0 2px 2px 0 rgba(0,0,0,.1);padding:12px}.wy-dropdown-menu>dd>a{display:block;clear:both;color:#404040;white-space:nowrap;font-size:90%;padding:0 12px;cursor:pointer}.wy-dropdown-menu>dd>a:hover{background:#2980b9;color:#fff}.wy-dropdown-menu>dd.divider{border-top:1px solid #cfd7dd;margin:6px 0}.wy-dropdown-menu>dd.search{padding-bottom:12px}.wy-dropdown-menu>dd.search input[type=search]{width:100%}.wy-dropdown-menu>dd.call-to-action{background:#e3e3e3;text-transform:uppercase;font-weight:500;font-size:80%}.wy-dropdown-menu>dd.call-to-action:hover{background:#e3e3e3}.wy-dropdown-menu>dd.call-to-action .btn{color:#fff}.wy-dropdown.wy-dropdown-up .wy-dropdown-menu{bottom:100%;top:auto;left:auto;right:0}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu{background:#fcfcfc;margin-top:2px}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu a{padding:6px 12px}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu a:hover{background:#2980b9;color:#fff}.wy-dropdown.wy-dropdown-left .wy-dropdown-menu{right:0;left:auto;text-align:right}.wy-dropdown-arrow:before{content:" ";border-bottom:5px solid #f5f5f5;border-left:5px solid transparent;border-right:5px solid transparent;position:absolute;display:block;top:-4px;left:50%;margin-left:-3px}.wy-dropdown-arrow.wy-dropdown-arrow-left:before{left:11px}.wy-form-stacked select{display:block}.wy-form-aligned .wy-help-inline,.wy-form-aligned input,.wy-form-aligned label,.wy-form-aligned select,.wy-form-aligned textarea{display:inline-block;*display:inline;*zoom:1;vertical-align:middle}.wy-form-aligned .wy-control-group>label{display:inline-block;vertical-align:middle;width:10em;margin:6px 12px 0 0;float:left}.wy-form-aligned .wy-control{float:left}.wy-form-aligned .wy-control label{display:block}.wy-form-aligned .wy-control select{margin-top:6px}fieldset{margin:0}fieldset,legend{border:0;padding:0}legend{width:100%;white-space:normal;margin-bottom:24px;font-size:150%;*margin-left:-7px}label,legend{display:block}label{margin:0 0 .3125em;color:#333;font-size:90%}input,select,textarea{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle}.wy-control-group{margin-bottom:24px;max-width:1200px;margin-left:auto;margin-right:auto;*zoom:1}.wy-control-group:after,.wy-control-group:before{display:table;content:""}.wy-control-group:after{clear:both}.wy-control-group.wy-control-group-required>label:after{content:" *";color:#e74c3c}.wy-control-group .wy-form-full,.wy-control-group .wy-form-halves,.wy-control-group .wy-form-thirds{padding-bottom:12px}.wy-control-group .wy-form-full input[type=color],.wy-control-group .wy-form-full input[type=date],.wy-control-group .wy-form-full input[type=datetime-local],.wy-control-group .wy-form-full input[type=datetime],.wy-control-group .wy-form-full input[type=email],.wy-control-group .wy-form-full input[type=month],.wy-control-group .wy-form-full input[type=number],.wy-control-group .wy-form-full input[type=password],.wy-control-group .wy-form-full input[type=search],.wy-control-group .wy-form-full input[type=tel],.wy-control-group .wy-form-full input[type=text],.wy-control-group .wy-form-full input[type=time],.wy-control-group .wy-form-full input[type=url],.wy-control-group .wy-form-full input[type=week],.wy-control-group .wy-form-full select,.wy-control-group .wy-form-halves input[type=color],.wy-control-group .wy-form-halves input[type=date],.wy-control-group .wy-form-halves input[type=datetime-local],.wy-control-group .wy-form-halves input[type=datetime],.wy-control-group .wy-form-halves input[type=email],.wy-control-group .wy-form-halves input[type=month],.wy-control-group .wy-form-halves input[type=number],.wy-control-group .wy-form-halves input[type=password],.wy-control-group .wy-form-halves input[type=search],.wy-control-group .wy-form-halves input[type=tel],.wy-control-group .wy-form-halves input[type=text],.wy-control-group .wy-form-halves input[type=time],.wy-control-group .wy-form-halves input[type=url],.wy-control-group .wy-form-halves input[type=week],.wy-control-group .wy-form-halves select,.wy-control-group .wy-form-thirds input[type=color],.wy-control-group .wy-form-thirds input[type=date],.wy-control-group .wy-form-thirds input[type=datetime-local],.wy-control-group .wy-form-thirds input[type=datetime],.wy-control-group .wy-form-thirds input[type=email],.wy-control-group .wy-form-thirds input[type=month],.wy-control-group .wy-form-thirds input[type=number],.wy-control-group .wy-form-thirds input[type=password],.wy-control-group .wy-form-thirds input[type=search],.wy-control-group .wy-form-thirds input[type=tel],.wy-control-group .wy-form-thirds input[type=text],.wy-control-group .wy-form-thirds input[type=time],.wy-control-group .wy-form-thirds input[type=url],.wy-control-group .wy-form-thirds input[type=week],.wy-control-group .wy-form-thirds select{width:100%}.wy-control-group .wy-form-full{float:left;display:block;width:100%;margin-right:0}.wy-control-group .wy-form-full:last-child{margin-right:0}.wy-control-group .wy-form-halves{float:left;display:block;margin-right:2.35765%;width:48.82117%}.wy-control-group .wy-form-halves:last-child,.wy-control-group .wy-form-halves:nth-of-type(2n){margin-right:0}.wy-control-group .wy-form-halves:nth-of-type(odd){clear:left}.wy-control-group .wy-form-thirds{float:left;display:block;margin-right:2.35765%;width:31.76157%}.wy-control-group .wy-form-thirds:last-child,.wy-control-group .wy-form-thirds:nth-of-type(3n){margin-right:0}.wy-control-group .wy-form-thirds:nth-of-type(3n+1){clear:left}.wy-control-group.wy-control-group-no-input .wy-control,.wy-control-no-input{margin:6px 0 0;font-size:90%}.wy-control-no-input{display:inline-block}.wy-control-group.fluid-input input[type=color],.wy-control-group.fluid-input input[type=date],.wy-control-group.fluid-input input[type=datetime-local],.wy-control-group.fluid-input input[type=datetime],.wy-control-group.fluid-input input[type=email],.wy-control-group.fluid-input input[type=month],.wy-control-group.fluid-input input[type=number],.wy-control-group.fluid-input input[type=password],.wy-control-group.fluid-input input[type=search],.wy-control-group.fluid-input input[type=tel],.wy-control-group.fluid-input input[type=text],.wy-control-group.fluid-input input[type=time],.wy-control-group.fluid-input input[type=url],.wy-control-group.fluid-input input[type=week]{width:100%}.wy-form-message-inline{padding-left:.3em;color:#666;font-size:90%}.wy-form-message{display:block;color:#999;font-size:70%;margin-top:.3125em;font-style:italic}.wy-form-message p{font-size:inherit;font-style:italic;margin-bottom:6px}.wy-form-message p:last-child{margin-bottom:0}input{line-height:normal}input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;*overflow:visible}input[type=color],input[type=date],input[type=datetime-local],input[type=datetime],input[type=email],input[type=month],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=time],input[type=url],input[type=week]{-webkit-appearance:none;padding:6px;display:inline-block;border:1px solid #ccc;font-size:80%;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;box-shadow:inset 0 1px 3px #ddd;border-radius:0;-webkit-transition:border .3s linear;-moz-transition:border .3s linear;transition:border .3s linear}input[type=datetime-local]{padding:.34375em .625em}input[disabled]{cursor:default}input[type=checkbox],input[type=radio]{padding:0;margin-right:.3125em;*height:13px;*width:13px}input[type=checkbox],input[type=radio],input[type=search]{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}input[type=color]:focus,input[type=date]:focus,input[type=datetime-local]:focus,input[type=datetime]:focus,input[type=email]:focus,input[type=month]:focus,input[type=number]:focus,input[type=password]:focus,input[type=search]:focus,input[type=tel]:focus,input[type=text]:focus,input[type=time]:focus,input[type=url]:focus,input[type=week]:focus{outline:0;outline:thin dotted\9;border-color:#333}input.no-focus:focus{border-color:#ccc!important}input[type=checkbox]:focus,input[type=file]:focus,input[type=radio]:focus{outline:thin dotted #333;outline:1px auto #129fea}input[type=color][disabled],input[type=date][disabled],input[type=datetime-local][disabled],input[type=datetime][disabled],input[type=email][disabled],input[type=month][disabled],input[type=number][disabled],input[type=password][disabled],input[type=search][disabled],input[type=tel][disabled],input[type=text][disabled],input[type=time][disabled],input[type=url][disabled],input[type=week][disabled]{cursor:not-allowed;background-color:#fafafa}input:focus:invalid,select:focus:invalid,textarea:focus:invalid{color:#e74c3c;border:1px solid #e74c3c}input:focus:invalid:focus,select:focus:invalid:focus,textarea:focus:invalid:focus{border-color:#e74c3c}input[type=checkbox]:focus:invalid:focus,input[type=file]:focus:invalid:focus,input[type=radio]:focus:invalid:focus{outline-color:#e74c3c}input.wy-input-large{padding:12px;font-size:100%}textarea{overflow:auto;vertical-align:top;width:100%;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif}select,textarea{padding:.5em .625em;display:inline-block;border:1px solid #ccc;font-size:80%;box-shadow:inset 0 1px 3px #ddd;-webkit-transition:border .3s linear;-moz-transition:border .3s linear;transition:border .3s linear}select{border:1px solid #ccc;background-color:#fff}select[multiple]{height:auto}select:focus,textarea:focus{outline:0}input[readonly],select[disabled],select[readonly],textarea[disabled],textarea[readonly]{cursor:not-allowed;background-color:#fafafa}input[type=checkbox][disabled],input[type=radio][disabled]{cursor:not-allowed}.wy-checkbox,.wy-radio{margin:6px 0;color:#404040;display:block}.wy-checkbox input,.wy-radio input{vertical-align:baseline}.wy-form-message-inline{display:inline-block;*display:inline;*zoom:1;vertical-align:middle}.wy-input-prefix,.wy-input-suffix{white-space:nowrap;padding:6px}.wy-input-prefix .wy-input-context,.wy-input-suffix .wy-input-context{line-height:27px;padding:0 8px;display:inline-block;font-size:80%;background-color:#f3f6f6;border:1px solid #ccc;color:#999}.wy-input-suffix .wy-input-context{border-left:0}.wy-input-prefix .wy-input-context{border-right:0}.wy-switch{position:relative;display:block;height:24px;margin-top:12px;cursor:pointer}.wy-switch:before{left:0;top:0;width:36px;height:12px;background:#ccc}.wy-switch:after,.wy-switch:before{position:absolute;content:"";display:block;border-radius:4px;-webkit-transition:all .2s ease-in-out;-moz-transition:all .2s ease-in-out;transition:all .2s ease-in-out}.wy-switch:after{width:18px;height:18px;background:#999;left:-3px;top:-3px}.wy-switch span{position:absolute;left:48px;display:block;font-size:12px;color:#ccc;line-height:1}.wy-switch.active:before{background:#1e8449}.wy-switch.active:after{left:24px;background:#27ae60}.wy-switch.disabled{cursor:not-allowed;opacity:.8}.wy-control-group.wy-control-group-error .wy-form-message,.wy-control-group.wy-control-group-error>label{color:#e74c3c}.wy-control-group.wy-control-group-error input[type=color],.wy-control-group.wy-control-group-error input[type=date],.wy-control-group.wy-control-group-error input[type=datetime-local],.wy-control-group.wy-control-group-error input[type=datetime],.wy-control-group.wy-control-group-error input[type=email],.wy-control-group.wy-control-group-error input[type=month],.wy-control-group.wy-control-group-error input[type=number],.wy-control-group.wy-control-group-error input[type=password],.wy-control-group.wy-control-group-error input[type=search],.wy-control-group.wy-control-group-error input[type=tel],.wy-control-group.wy-control-group-error input[type=text],.wy-control-group.wy-control-group-error input[type=time],.wy-control-group.wy-control-group-error input[type=url],.wy-control-group.wy-control-group-error input[type=week],.wy-control-group.wy-control-group-error textarea{border:1px solid #e74c3c}.wy-inline-validate{white-space:nowrap}.wy-inline-validate .wy-input-context{padding:.5em .625em;display:inline-block;font-size:80%}.wy-inline-validate.wy-inline-validate-success .wy-input-context{color:#27ae60}.wy-inline-validate.wy-inline-validate-danger .wy-input-context{color:#e74c3c}.wy-inline-validate.wy-inline-validate-warning .wy-input-context{color:#e67e22}.wy-inline-validate.wy-inline-validate-info .wy-input-context{color:#2980b9}.rotate-90{-webkit-transform:rotate(90deg);-moz-transform:rotate(90deg);-ms-transform:rotate(90deg);-o-transform:rotate(90deg);transform:rotate(90deg)}.rotate-180{-webkit-transform:rotate(180deg);-moz-transform:rotate(180deg);-ms-transform:rotate(180deg);-o-transform:rotate(180deg);transform:rotate(180deg)}.rotate-270{-webkit-transform:rotate(270deg);-moz-transform:rotate(270deg);-ms-transform:rotate(270deg);-o-transform:rotate(270deg);transform:rotate(270deg)}.mirror{-webkit-transform:scaleX(-1);-moz-transform:scaleX(-1);-ms-transform:scaleX(-1);-o-transform:scaleX(-1);transform:scaleX(-1)}.mirror.rotate-90{-webkit-transform:scaleX(-1) rotate(90deg);-moz-transform:scaleX(-1) rotate(90deg);-ms-transform:scaleX(-1) rotate(90deg);-o-transform:scaleX(-1) rotate(90deg);transform:scaleX(-1) rotate(90deg)}.mirror.rotate-180{-webkit-transform:scaleX(-1) rotate(180deg);-moz-transform:scaleX(-1) rotate(180deg);-ms-transform:scaleX(-1) rotate(180deg);-o-transform:scaleX(-1) rotate(180deg);transform:scaleX(-1) rotate(180deg)}.mirror.rotate-270{-webkit-transform:scaleX(-1) rotate(270deg);-moz-transform:scaleX(-1) rotate(270deg);-ms-transform:scaleX(-1) rotate(270deg);-o-transform:scaleX(-1) rotate(270deg);transform:scaleX(-1) rotate(270deg)}@media only screen and (max-width:480px){.wy-form button[type=submit]{margin:.7em 0 0}.wy-form input[type=color],.wy-form input[type=date],.wy-form input[type=datetime-local],.wy-form input[type=datetime],.wy-form input[type=email],.wy-form input[type=month],.wy-form input[type=number],.wy-form input[type=password],.wy-form input[type=search],.wy-form input[type=tel],.wy-form input[type=text],.wy-form input[type=time],.wy-form input[type=url],.wy-form input[type=week],.wy-form label{margin-bottom:.3em;display:block}.wy-form input[type=color],.wy-form input[type=date],.wy-form input[type=datetime-local],.wy-form input[type=datetime],.wy-form input[type=email],.wy-form input[type=month],.wy-form input[type=number],.wy-form input[type=password],.wy-form input[type=search],.wy-form input[type=tel],.wy-form input[type=time],.wy-form input[type=url],.wy-form input[type=week]{margin-bottom:0}.wy-form-aligned .wy-control-group label{margin-bottom:.3em;text-align:left;display:block;width:100%}.wy-form-aligned .wy-control{margin:1.5em 0 0}.wy-form-message,.wy-form-message-inline,.wy-form .wy-help-inline{display:block;font-size:80%;padding:6px 0}}@media screen and (max-width:768px){.tablet-hide{display:none}}@media screen and (max-width:480px){.mobile-hide{display:none}}.float-left{float:left}.float-right{float:right}.full-width{width:100%}.rst-content table.docutils,.rst-content table.field-list,.wy-table{border-collapse:collapse;border-spacing:0;empty-cells:show;margin-bottom:24px}.rst-content table.docutils caption,.rst-content table.field-list caption,.wy-table caption{color:#000;font:italic 85%/1 arial,sans-serif;padding:1em 0;text-align:center}.rst-content table.docutils td,.rst-content table.docutils th,.rst-content table.field-list td,.rst-content table.field-list th,.wy-table td,.wy-table th{font-size:90%;margin:0;overflow:visible;padding:8px 16px}.rst-content table.docutils td:first-child,.rst-content table.docutils th:first-child,.rst-content table.field-list td:first-child,.rst-content table.field-list th:first-child,.wy-table td:first-child,.wy-table th:first-child{border-left-width:0}.rst-content table.docutils thead,.rst-content table.field-list thead,.wy-table thead{color:#000;text-align:left;vertical-align:bottom;white-space:nowrap}.rst-content table.docutils thead th,.rst-content table.field-list thead th,.wy-table thead th{font-weight:700;border-bottom:2px solid #e1e4e5}.rst-content table.docutils td,.rst-content table.field-list td,.wy-table td{background-color:transparent;vertical-align:middle}.rst-content table.docutils td p,.rst-content table.field-list td p,.wy-table td p{line-height:18px}.rst-content table.docutils td p:last-child,.rst-content table.field-list td p:last-child,.wy-table td p:last-child{margin-bottom:0}.rst-content table.docutils .wy-table-cell-min,.rst-content table.field-list .wy-table-cell-min,.wy-table .wy-table-cell-min{width:1%;padding-right:0}.rst-content table.docutils .wy-table-cell-min input[type=checkbox],.rst-content table.field-list .wy-table-cell-min input[type=checkbox],.wy-table .wy-table-cell-min input[type=checkbox]{margin:0}.wy-table-secondary{color:grey;font-size:90%}.wy-table-tertiary{color:grey;font-size:80%}.rst-content table.docutils:not(.field-list) tr:nth-child(2n-1) td,.wy-table-backed,.wy-table-odd td,.wy-table-striped tr:nth-child(2n-1) td{background-color:#f3f6f6}.rst-content table.docutils,.wy-table-bordered-all{border:1px solid #e1e4e5}.rst-content table.docutils td,.wy-table-bordered-all td{border-bottom:1px solid #e1e4e5;border-left:1px solid #e1e4e5}.rst-content table.docutils tbody>tr:last-child td,.wy-table-bordered-all tbody>tr:last-child td{border-bottom-width:0}.wy-table-bordered{border:1px solid #e1e4e5}.wy-table-bordered-rows td{border-bottom:1px solid #e1e4e5}.wy-table-bordered-rows tbody>tr:last-child td{border-bottom-width:0}.wy-table-horizontal td,.wy-table-horizontal th{border-width:0 0 1px;border-bottom:1px solid #e1e4e5}.wy-table-horizontal tbody>tr:last-child td{border-bottom-width:0}.wy-table-responsive{margin-bottom:24px;max-width:100%;overflow:auto}.wy-table-responsive table{margin-bottom:0!important}.wy-table-responsive table td,.wy-table-responsive table th{white-space:nowrap}a{color:#2980b9;text-decoration:none;cursor:pointer}a:hover{color:#3091d1}a:visited{color:#9b59b6}html{height:100%}body,html{overflow-x:hidden}body{font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;font-weight:400;color:#404040;min-height:100%;background:#edf0f2}.wy-text-left{text-align:left}.wy-text-center{text-align:center}.wy-text-right{text-align:right}.wy-text-large{font-size:120%}.wy-text-normal{font-size:100%}.wy-text-small,small{font-size:80%}.wy-text-strike{text-decoration:line-through}.wy-text-warning{color:#e67e22!important}a.wy-text-warning:hover{color:#eb9950!important}.wy-text-info{color:#2980b9!important}a.wy-text-info:hover{color:#409ad5!important}.wy-text-success{color:#27ae60!important}a.wy-text-success:hover{color:#36d278!important}.wy-text-danger{color:#e74c3c!important}a.wy-text-danger:hover{color:#ed7669!important}.wy-text-neutral{color:#404040!important}a.wy-text-neutral:hover{color:#595959!important}.rst-content .toctree-wrapper>p.caption,h1,h2,h3,h4,h5,h6,legend{margin-top:0;font-weight:700;font-family:Roboto Slab,ff-tisa-web-pro,Georgia,Arial,sans-serif}p{line-height:24px;font-size:16px;margin:0 0 24px}h1{font-size:175%}.rst-content .toctree-wrapper>p.caption,h2{font-size:150%}h3{font-size:125%}h4{font-size:115%}h5{font-size:110%}h6{font-size:100%}hr{display:block;height:1px;border:0;border-top:1px solid #e1e4e5;margin:24px 0;padding:0}.rst-content code,.rst-content tt,code{white-space:nowrap;max-width:100%;background:#fff;border:1px solid #e1e4e5;font-size:75%;padding:0 5px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;color:#e74c3c;overflow-x:auto}.rst-content tt.code-large,code.code-large{font-size:90%}.rst-content .section ul,.rst-content .toctree-wrapper ul,.rst-content section ul,.wy-plain-list-disc,article ul{list-style:disc;line-height:24px;margin-bottom:24px}.rst-content .section ul li,.rst-content .toctree-wrapper ul li,.rst-content section ul li,.wy-plain-list-disc li,article ul li{list-style:disc;margin-left:24px}.rst-content .section ul li p:last-child,.rst-content .section ul li ul,.rst-content .toctree-wrapper ul li p:last-child,.rst-content .toctree-wrapper ul li ul,.rst-content section ul li p:last-child,.rst-content section ul li ul,.wy-plain-list-disc li p:last-child,.wy-plain-list-disc li ul,article ul li p:last-child,article ul li ul{margin-bottom:0}.rst-content .section ul li li,.rst-content .toctree-wrapper ul li li,.rst-content section ul li li,.wy-plain-list-disc li li,article ul li li{list-style:circle}.rst-content .section ul li li li,.rst-content .toctree-wrapper ul li li li,.rst-content section ul li li li,.wy-plain-list-disc li li li,article ul li li li{list-style:square}.rst-content .section ul li ol li,.rst-content .toctree-wrapper ul li ol li,.rst-content section ul li ol li,.wy-plain-list-disc li ol li,article ul li ol li{list-style:decimal}.rst-content .section ol,.rst-content .section ol.arabic,.rst-content .toctree-wrapper ol,.rst-content .toctree-wrapper ol.arabic,.rst-content section ol,.rst-content section ol.arabic,.wy-plain-list-decimal,article ol{list-style:decimal;line-height:24px;margin-bottom:24px}.rst-content .section ol.arabic li,.rst-content .section ol li,.rst-content .toctree-wrapper ol.arabic li,.rst-content .toctree-wrapper ol li,.rst-content section ol.arabic li,.rst-content section ol li,.wy-plain-list-decimal li,article ol li{list-style:decimal;margin-left:24px}.rst-content .section ol.arabic li ul,.rst-content .section ol li p:last-child,.rst-content .section ol li ul,.rst-content .toctree-wrapper ol.arabic li ul,.rst-content .toctree-wrapper ol li p:last-child,.rst-content .toctree-wrapper ol li ul,.rst-content section ol.arabic li ul,.rst-content section ol li p:last-child,.rst-content section ol li ul,.wy-plain-list-decimal li p:last-child,.wy-plain-list-decimal li ul,article ol li p:last-child,article ol li ul{margin-bottom:0}.rst-content .section ol.arabic li ul li,.rst-content .section ol li ul li,.rst-content .toctree-wrapper ol.arabic li ul li,.rst-content .toctree-wrapper ol li ul li,.rst-content section ol.arabic li ul li,.rst-content section ol li ul li,.wy-plain-list-decimal li ul li,article ol li ul li{list-style:disc}.wy-breadcrumbs{*zoom:1}.wy-breadcrumbs:after,.wy-breadcrumbs:before{display:table;content:""}.wy-breadcrumbs:after{clear:both}.wy-breadcrumbs li{display:inline-block}.wy-breadcrumbs li.wy-breadcrumbs-aside{float:right}.wy-breadcrumbs li a{display:inline-block;padding:5px}.wy-breadcrumbs li a:first-child{padding-left:0}.rst-content .wy-breadcrumbs li tt,.wy-breadcrumbs li .rst-content tt,.wy-breadcrumbs li code{padding:5px;border:none;background:none}.rst-content .wy-breadcrumbs li tt.literal,.wy-breadcrumbs li .rst-content tt.literal,.wy-breadcrumbs li code.literal{color:#404040}.wy-breadcrumbs-extra{margin-bottom:0;color:#b3b3b3;font-size:80%;display:inline-block}@media screen and (max-width:480px){.wy-breadcrumbs-extra,.wy-breadcrumbs li.wy-breadcrumbs-aside{display:none}}@media print{.wy-breadcrumbs li.wy-breadcrumbs-aside{display:none}}html{font-size:16px}.wy-affix{position:fixed;top:1.618em}.wy-menu a:hover{text-decoration:none}.wy-menu-horiz{*zoom:1}.wy-menu-horiz:after,.wy-menu-horiz:before{display:table;content:""}.wy-menu-horiz:after{clear:both}.wy-menu-horiz li,.wy-menu-horiz ul{display:inline-block}.wy-menu-horiz li:hover{background:hsla(0,0%,100%,.1)}.wy-menu-horiz li.divide-left{border-left:1px solid #404040}.wy-menu-horiz li.divide-right{border-right:1px solid #404040}.wy-menu-horiz a{height:32px;display:inline-block;line-height:32px;padding:0 16px}.wy-menu-vertical{width:300px}.wy-menu-vertical header,.wy-menu-vertical p.caption{color:#55a5d9;height:32px;line-height:32px;padding:0 1.618em;margin:12px 0 0;display:block;font-weight:700;text-transform:uppercase;font-size:85%;white-space:nowrap}.wy-menu-vertical ul{margin-bottom:0}.wy-menu-vertical li.divide-top{border-top:1px solid #404040}.wy-menu-vertical li.divide-bottom{border-bottom:1px solid #404040}.wy-menu-vertical li.current{background:#e3e3e3}.wy-menu-vertical li.current a{color:grey;border-right:1px solid #c9c9c9;padding:.4045em 2.427em}.wy-menu-vertical li.current a:hover{background:#d6d6d6}.rst-content .wy-menu-vertical li tt,.wy-menu-vertical li .rst-content tt,.wy-menu-vertical li code{border:none;background:inherit;color:inherit;padding-left:0;padding-right:0}.wy-menu-vertical li button.toctree-expand{display:block;float:left;margin-left:-1.2em;line-height:18px;color:#4d4d4d;border:none;background:none;padding:0}.wy-menu-vertical li.current>a,.wy-menu-vertical li.on a{color:#404040;font-weight:700;position:relative;background:#fcfcfc;border:none;padding:.4045em 1.618em}.wy-menu-vertical li.current>a:hover,.wy-menu-vertical li.on a:hover{background:#fcfcfc}.wy-menu-vertical li.current>a:hover button.toctree-expand,.wy-menu-vertical li.on a:hover button.toctree-expand{color:grey}.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand{display:block;line-height:18px;color:#333}.wy-menu-vertical li.toctree-l1.current>a{border-bottom:1px solid #c9c9c9;border-top:1px solid #c9c9c9}.wy-menu-vertical .toctree-l1.current .toctree-l2>ul,.wy-menu-vertical .toctree-l2.current .toctree-l3>ul,.wy-menu-vertical .toctree-l3.current .toctree-l4>ul,.wy-menu-vertical .toctree-l4.current .toctree-l5>ul,.wy-menu-vertical .toctree-l5.current .toctree-l6>ul,.wy-menu-vertical .toctree-l6.current .toctree-l7>ul,.wy-menu-vertical .toctree-l7.current .toctree-l8>ul,.wy-menu-vertical .toctree-l8.current .toctree-l9>ul,.wy-menu-vertical .toctree-l9.current .toctree-l10>ul,.wy-menu-vertical .toctree-l10.current .toctree-l11>ul{display:none}.wy-menu-vertical .toctree-l1.current .current.toctree-l2>ul,.wy-menu-vertical .toctree-l2.current .current.toctree-l3>ul,.wy-menu-vertical .toctree-l3.current .current.toctree-l4>ul,.wy-menu-vertical .toctree-l4.current .current.toctree-l5>ul,.wy-menu-vertical .toctree-l5.current .current.toctree-l6>ul,.wy-menu-vertical .toctree-l6.current .current.toctree-l7>ul,.wy-menu-vertical .toctree-l7.current .current.toctree-l8>ul,.wy-menu-vertical .toctree-l8.current .current.toctree-l9>ul,.wy-menu-vertical .toctree-l9.current .current.toctree-l10>ul,.wy-menu-vertical .toctree-l10.current .current.toctree-l11>ul{display:block}.wy-menu-vertical li.toctree-l3,.wy-menu-vertical li.toctree-l4{font-size:.9em}.wy-menu-vertical li.toctree-l2 a,.wy-menu-vertical li.toctree-l3 a,.wy-menu-vertical li.toctree-l4 a,.wy-menu-vertical li.toctree-l5 a,.wy-menu-vertical li.toctree-l6 a,.wy-menu-vertical li.toctree-l7 a,.wy-menu-vertical li.toctree-l8 a,.wy-menu-vertical li.toctree-l9 a,.wy-menu-vertical li.toctree-l10 a{color:#404040}.wy-menu-vertical li.toctree-l2 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l3 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l4 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l5 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l6 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l7 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l8 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l9 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l10 a:hover button.toctree-expand{color:grey}.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a,.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a,.wy-menu-vertical li.toctree-l4.current li.toctree-l5>a,.wy-menu-vertical li.toctree-l5.current li.toctree-l6>a,.wy-menu-vertical li.toctree-l6.current li.toctree-l7>a,.wy-menu-vertical li.toctree-l7.current li.toctree-l8>a,.wy-menu-vertical li.toctree-l8.current li.toctree-l9>a,.wy-menu-vertical li.toctree-l9.current li.toctree-l10>a,.wy-menu-vertical li.toctree-l10.current li.toctree-l11>a{display:block}.wy-menu-vertical li.toctree-l2.current>a{padding:.4045em 2.427em}.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a{padding:.4045em 1.618em .4045em 4.045em}.wy-menu-vertical li.toctree-l3.current>a{padding:.4045em 4.045em}.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a{padding:.4045em 1.618em .4045em 5.663em}.wy-menu-vertical li.toctree-l4.current>a{padding:.4045em 5.663em}.wy-menu-vertical li.toctree-l4.current li.toctree-l5>a{padding:.4045em 1.618em .4045em 7.281em}.wy-menu-vertical li.toctree-l5.current>a{padding:.4045em 7.281em}.wy-menu-vertical li.toctree-l5.current li.toctree-l6>a{padding:.4045em 1.618em .4045em 8.899em}.wy-menu-vertical li.toctree-l6.current>a{padding:.4045em 8.899em}.wy-menu-vertical li.toctree-l6.current li.toctree-l7>a{padding:.4045em 1.618em .4045em 10.517em}.wy-menu-vertical li.toctree-l7.current>a{padding:.4045em 10.517em}.wy-menu-vertical li.toctree-l7.current li.toctree-l8>a{padding:.4045em 1.618em .4045em 12.135em}.wy-menu-vertical li.toctree-l8.current>a{padding:.4045em 12.135em}.wy-menu-vertical li.toctree-l8.current li.toctree-l9>a{padding:.4045em 1.618em .4045em 13.753em}.wy-menu-vertical li.toctree-l9.current>a{padding:.4045em 13.753em}.wy-menu-vertical li.toctree-l9.current li.toctree-l10>a{padding:.4045em 1.618em .4045em 15.371em}.wy-menu-vertical li.toctree-l10.current>a{padding:.4045em 15.371em}.wy-menu-vertical li.toctree-l10.current li.toctree-l11>a{padding:.4045em 1.618em .4045em 16.989em}.wy-menu-vertical li.toctree-l2.current>a,.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a{background:#c9c9c9}.wy-menu-vertical li.toctree-l2 button.toctree-expand{color:#a3a3a3}.wy-menu-vertical li.toctree-l3.current>a,.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a{background:#bdbdbd}.wy-menu-vertical li.toctree-l3 button.toctree-expand{color:#969696}.wy-menu-vertical li.current ul{display:block}.wy-menu-vertical li ul{margin-bottom:0;display:none}.wy-menu-vertical li ul li a{margin-bottom:0;color:#d9d9d9;font-weight:400}.wy-menu-vertical a{line-height:18px;padding:.4045em 1.618em;display:block;position:relative;font-size:90%;color:#d9d9d9}.wy-menu-vertical a:hover{background-color:#4e4a4a;cursor:pointer}.wy-menu-vertical a:hover button.toctree-expand{color:#d9d9d9}.wy-menu-vertical a:active{background-color:#2980b9;cursor:pointer;color:#fff}.wy-menu-vertical a:active button.toctree-expand{color:#fff}.wy-side-nav-search{display:block;width:300px;padding:.809em;margin-bottom:.809em;z-index:200;background-color:#2980b9;text-align:center;color:#fcfcfc}.wy-side-nav-search input[type=text]{width:100%;border-radius:50px;padding:6px 12px;border-color:#2472a4}.wy-side-nav-search img{display:block;margin:auto auto .809em;height:45px;width:45px;background-color:#2980b9;padding:5px;border-radius:100%}.wy-side-nav-search .wy-dropdown>a,.wy-side-nav-search>a{color:#fcfcfc;font-size:100%;font-weight:700;display:inline-block;padding:4px 6px;margin-bottom:.809em;max-width:100%}.wy-side-nav-search .wy-dropdown>a:hover,.wy-side-nav-search>a:hover{background:hsla(0,0%,100%,.1)}.wy-side-nav-search .wy-dropdown>a img.logo,.wy-side-nav-search>a img.logo{display:block;margin:0 auto;height:auto;width:auto;border-radius:0;max-width:100%;background:transparent}.wy-side-nav-search .wy-dropdown>a.icon img.logo,.wy-side-nav-search>a.icon img.logo{margin-top:.85em}.wy-side-nav-search>div.version{margin-top:-.4045em;margin-bottom:.809em;font-weight:400;color:hsla(0,0%,100%,.3)}.wy-nav .wy-menu-vertical header{color:#2980b9}.wy-nav .wy-menu-vertical a{color:#b3b3b3}.wy-nav .wy-menu-vertical a:hover{background-color:#2980b9;color:#fff}[data-menu-wrap]{-webkit-transition:all .2s ease-in;-moz-transition:all .2s ease-in;transition:all .2s ease-in;position:absolute;opacity:1;width:100%;opacity:0}[data-menu-wrap].move-center{left:0;right:auto;opacity:1}[data-menu-wrap].move-left{right:auto;left:-100%;opacity:0}[data-menu-wrap].move-right{right:-100%;left:auto;opacity:0}.wy-body-for-nav{background:#fcfcfc}.wy-grid-for-nav{position:absolute;width:100%;height:100%}.wy-nav-side{position:fixed;top:0;bottom:0;left:0;padding-bottom:2em;width:300px;overflow-x:hidden;overflow-y:hidden;min-height:100%;color:#9b9b9b;background:#343131;z-index:200}.wy-side-scroll{width:320px;position:relative;overflow-x:hidden;overflow-y:scroll;height:100%}.wy-nav-top{display:none;background:#2980b9;color:#fff;padding:.4045em .809em;position:relative;line-height:50px;text-align:center;font-size:100%;*zoom:1}.wy-nav-top:after,.wy-nav-top:before{display:table;content:""}.wy-nav-top:after{clear:both}.wy-nav-top a{color:#fff;font-weight:700}.wy-nav-top img{margin-right:12px;height:45px;width:45px;background-color:#2980b9;padding:5px;border-radius:100%}.wy-nav-top i{font-size:30px;float:left;cursor:pointer;padding-top:inherit}.wy-nav-content-wrap{margin-left:300px;background:#fcfcfc;min-height:100%}.wy-nav-content{padding:1.618em 3.236em;height:100%;max-width:800px;margin:auto}.wy-body-mask{position:fixed;width:100%;height:100%;background:rgba(0,0,0,.2);display:none;z-index:499}.wy-body-mask.on{display:block}footer{color:grey}footer p{margin-bottom:12px}.rst-content footer span.commit tt,footer span.commit .rst-content tt,footer span.commit code{padding:0;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;font-size:1em;background:none;border:none;color:grey}.rst-footer-buttons{*zoom:1}.rst-footer-buttons:after,.rst-footer-buttons:before{width:100%;display:table;content:""}.rst-footer-buttons:after{clear:both}.rst-breadcrumbs-buttons{margin-top:12px;*zoom:1}.rst-breadcrumbs-buttons:after,.rst-breadcrumbs-buttons:before{display:table;content:""}.rst-breadcrumbs-buttons:after{clear:both}#search-results .search li{margin-bottom:24px;border-bottom:1px solid #e1e4e5;padding-bottom:24px}#search-results .search li:first-child{border-top:1px solid #e1e4e5;padding-top:24px}#search-results .search li a{font-size:120%;margin-bottom:12px;display:inline-block}#search-results .context{color:grey;font-size:90%}.genindextable li>ul{margin-left:24px}@media screen and (max-width:768px){.wy-body-for-nav{background:#fcfcfc}.wy-nav-top{display:block}.wy-nav-side{left:-300px}.wy-nav-side.shift{width:85%;left:0}.wy-menu.wy-menu-vertical,.wy-side-nav-search,.wy-side-scroll{width:auto}.wy-nav-content-wrap{margin-left:0}.wy-nav-content-wrap .wy-nav-content{padding:1.618em}.wy-nav-content-wrap.shift{position:fixed;min-width:100%;left:85%;top:0;height:100%;overflow:hidden}}@media screen and (min-width:1100px){.wy-nav-content-wrap{background:rgba(0,0,0,.05)}.wy-nav-content{margin:0;background:#fcfcfc}}@media print{.rst-versions,.wy-nav-side,footer{display:none}.wy-nav-content-wrap{margin-left:0}}.rst-versions{position:fixed;bottom:0;left:0;width:300px;color:#fcfcfc;background:#1f1d1d;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;z-index:400}.rst-versions a{color:#2980b9;text-decoration:none}.rst-versions .rst-badge-small{display:none}.rst-versions .rst-current-version{padding:12px;background-color:#272525;display:block;text-align:right;font-size:90%;cursor:pointer;color:#27ae60;*zoom:1}.rst-versions .rst-current-version:after,.rst-versions .rst-current-version:before{display:table;content:""}.rst-versions .rst-current-version:after{clear:both}.rst-content .code-block-caption .rst-versions .rst-current-version .headerlink,.rst-content .eqno .rst-versions .rst-current-version .headerlink,.rst-content .rst-versions .rst-current-version .admonition-title,.rst-content code.download .rst-versions .rst-current-version span:first-child,.rst-content dl dt .rst-versions .rst-current-version .headerlink,.rst-content h1 .rst-versions .rst-current-version .headerlink,.rst-content h2 .rst-versions .rst-current-version .headerlink,.rst-content h3 .rst-versions .rst-current-version .headerlink,.rst-content h4 .rst-versions .rst-current-version .headerlink,.rst-content h5 .rst-versions .rst-current-version .headerlink,.rst-content h6 .rst-versions .rst-current-version .headerlink,.rst-content p .rst-versions .rst-current-version .headerlink,.rst-content table>caption .rst-versions .rst-current-version .headerlink,.rst-content tt.download .rst-versions .rst-current-version span:first-child,.rst-versions .rst-current-version .fa,.rst-versions .rst-current-version .icon,.rst-versions .rst-current-version .rst-content .admonition-title,.rst-versions .rst-current-version .rst-content .code-block-caption .headerlink,.rst-versions .rst-current-version .rst-content .eqno .headerlink,.rst-versions .rst-current-version .rst-content code.download span:first-child,.rst-versions .rst-current-version .rst-content dl dt .headerlink,.rst-versions .rst-current-version .rst-content h1 .headerlink,.rst-versions .rst-current-version .rst-content h2 .headerlink,.rst-versions .rst-current-version .rst-content h3 .headerlink,.rst-versions .rst-current-version .rst-content h4 .headerlink,.rst-versions .rst-current-version .rst-content h5 .headerlink,.rst-versions .rst-current-version .rst-content h6 .headerlink,.rst-versions .rst-current-version .rst-content p .headerlink,.rst-versions .rst-current-version .rst-content table>caption .headerlink,.rst-versions .rst-current-version .rst-content tt.download span:first-child,.rst-versions .rst-current-version .wy-menu-vertical li button.toctree-expand,.wy-menu-vertical li .rst-versions .rst-current-version button.toctree-expand{color:#fcfcfc}.rst-versions .rst-current-version .fa-book,.rst-versions .rst-current-version .icon-book{float:left}.rst-versions .rst-current-version.rst-out-of-date{background-color:#e74c3c;color:#fff}.rst-versions .rst-current-version.rst-active-old-version{background-color:#f1c40f;color:#000}.rst-versions.shift-up{height:auto;max-height:100%;overflow-y:scroll}.rst-versions.shift-up .rst-other-versions{display:block}.rst-versions .rst-other-versions{font-size:90%;padding:12px;color:grey;display:none}.rst-versions .rst-other-versions hr{display:block;height:1px;border:0;margin:20px 0;padding:0;border-top:1px solid #413d3d}.rst-versions .rst-other-versions dd{display:inline-block;margin:0}.rst-versions .rst-other-versions dd a{display:inline-block;padding:6px;color:#fcfcfc}.rst-versions.rst-badge{width:auto;bottom:20px;right:20px;left:auto;border:none;max-width:300px;max-height:90%}.rst-versions.rst-badge .fa-book,.rst-versions.rst-badge .icon-book{float:none;line-height:30px}.rst-versions.rst-badge.shift-up .rst-current-version{text-align:right}.rst-versions.rst-badge.shift-up .rst-current-version .fa-book,.rst-versions.rst-badge.shift-up .rst-current-version .icon-book{float:left}.rst-versions.rst-badge>.rst-current-version{width:auto;height:30px;line-height:30px;padding:0 6px;display:block;text-align:center}@media screen and (max-width:768px){.rst-versions{width:85%;display:none}.rst-versions.shift{display:block}}.rst-content .toctree-wrapper>p.caption,.rst-content h1,.rst-content h2,.rst-content h3,.rst-content h4,.rst-content h5,.rst-content h6{margin-bottom:24px}.rst-content img{max-width:100%;height:auto}.rst-content div.figure,.rst-content figure{margin-bottom:24px}.rst-content div.figure .caption-text,.rst-content figure .caption-text{font-style:italic}.rst-content div.figure p:last-child.caption,.rst-content figure p:last-child.caption{margin-bottom:0}.rst-content div.figure.align-center,.rst-content figure.align-center{text-align:center}.rst-content .section>a>img,.rst-content .section>img,.rst-content section>a>img,.rst-content section>img{margin-bottom:24px}.rst-content abbr[title]{text-decoration:none}.rst-content.style-external-links a.reference.external:after{font-family:FontAwesome;content:"\f08e";color:#b3b3b3;vertical-align:super;font-size:60%;margin:0 .2em}.rst-content blockquote{margin-left:24px;line-height:24px;margin-bottom:24px}.rst-content pre.literal-block{white-space:pre;margin:0;padding:12px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;display:block;overflow:auto}.rst-content div[class^=highlight],.rst-content pre.literal-block{border:1px solid #e1e4e5;overflow-x:auto;margin:1px 0 24px}.rst-content div[class^=highlight] div[class^=highlight],.rst-content pre.literal-block div[class^=highlight]{padding:0;border:none;margin:0}.rst-content div[class^=highlight] td.code{width:100%}.rst-content .linenodiv pre{border-right:1px solid #e6e9ea;margin:0;padding:12px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;user-select:none;pointer-events:none}.rst-content div[class^=highlight] pre{white-space:pre;margin:0;padding:12px;display:block;overflow:auto}.rst-content div[class^=highlight] pre .hll{display:block;margin:0 -12px;padding:0 12px}.rst-content .linenodiv pre,.rst-content div[class^=highlight] pre,.rst-content pre.literal-block{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;font-size:12px;line-height:1.4}.rst-content div.highlight .gp,.rst-content div.highlight span.linenos{user-select:none;pointer-events:none}.rst-content div.highlight span.linenos{display:inline-block;padding-left:0;padding-right:12px;margin-right:12px;border-right:1px solid #e6e9ea}.rst-content .code-block-caption{font-style:italic;font-size:85%;line-height:1;padding:1em 0;text-align:center}@media print{.rst-content .codeblock,.rst-content div[class^=highlight],.rst-content div[class^=highlight] pre{white-space:pre-wrap}}.rst-content .admonition,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .danger,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning{clear:both}.rst-content .admonition-todo .last,.rst-content .admonition-todo>:last-child,.rst-content .admonition .last,.rst-content .admonition>:last-child,.rst-content .attention .last,.rst-content .attention>:last-child,.rst-content .caution .last,.rst-content .caution>:last-child,.rst-content .danger .last,.rst-content .danger>:last-child,.rst-content .error .last,.rst-content .error>:last-child,.rst-content .hint .last,.rst-content .hint>:last-child,.rst-content .important .last,.rst-content .important>:last-child,.rst-content .note .last,.rst-content .note>:last-child,.rst-content .seealso .last,.rst-content .seealso>:last-child,.rst-content .tip .last,.rst-content .tip>:last-child,.rst-content .warning .last,.rst-content .warning>:last-child{margin-bottom:0}.rst-content .admonition-title:before{margin-right:4px}.rst-content .admonition table{border-color:rgba(0,0,0,.1)}.rst-content .admonition table td,.rst-content .admonition table th{background:transparent!important;border-color:rgba(0,0,0,.1)!important}.rst-content .section ol.loweralpha,.rst-content .section ol.loweralpha>li,.rst-content .toctree-wrapper ol.loweralpha,.rst-content .toctree-wrapper ol.loweralpha>li,.rst-content section ol.loweralpha,.rst-content section ol.loweralpha>li{list-style:lower-alpha}.rst-content .section ol.upperalpha,.rst-content .section ol.upperalpha>li,.rst-content .toctree-wrapper ol.upperalpha,.rst-content .toctree-wrapper ol.upperalpha>li,.rst-content section ol.upperalpha,.rst-content section ol.upperalpha>li{list-style:upper-alpha}.rst-content .section ol li>*,.rst-content .section ul li>*,.rst-content .toctree-wrapper ol li>*,.rst-content .toctree-wrapper ul li>*,.rst-content section ol li>*,.rst-content section ul li>*{margin-top:12px;margin-bottom:12px}.rst-content .section ol li>:first-child,.rst-content .section ul li>:first-child,.rst-content .toctree-wrapper ol li>:first-child,.rst-content .toctree-wrapper ul li>:first-child,.rst-content section ol li>:first-child,.rst-content section ul li>:first-child{margin-top:0}.rst-content .section ol li>p,.rst-content .section ol li>p:last-child,.rst-content .section ul li>p,.rst-content .section ul li>p:last-child,.rst-content .toctree-wrapper ol li>p,.rst-content .toctree-wrapper ol li>p:last-child,.rst-content .toctree-wrapper ul li>p,.rst-content .toctree-wrapper ul li>p:last-child,.rst-content section ol li>p,.rst-content section ol li>p:last-child,.rst-content section ul li>p,.rst-content section ul li>p:last-child{margin-bottom:12px}.rst-content .section ol li>p:only-child,.rst-content .section ol li>p:only-child:last-child,.rst-content .section ul li>p:only-child,.rst-content .section ul li>p:only-child:last-child,.rst-content .toctree-wrapper ol li>p:only-child,.rst-content .toctree-wrapper ol li>p:only-child:last-child,.rst-content .toctree-wrapper ul li>p:only-child,.rst-content .toctree-wrapper ul li>p:only-child:last-child,.rst-content section ol li>p:only-child,.rst-content section ol li>p:only-child:last-child,.rst-content section ul li>p:only-child,.rst-content section ul li>p:only-child:last-child{margin-bottom:0}.rst-content .section ol li>ol,.rst-content .section ol li>ul,.rst-content .section ul li>ol,.rst-content .section ul li>ul,.rst-content .toctree-wrapper ol li>ol,.rst-content .toctree-wrapper ol li>ul,.rst-content .toctree-wrapper ul li>ol,.rst-content .toctree-wrapper ul li>ul,.rst-content section ol li>ol,.rst-content section ol li>ul,.rst-content section ul li>ol,.rst-content section ul li>ul{margin-bottom:12px}.rst-content .section ol.simple li>*,.rst-content .section ol.simple li ol,.rst-content .section ol.simple li ul,.rst-content .section ul.simple li>*,.rst-content .section ul.simple li ol,.rst-content .section ul.simple li ul,.rst-content .toctree-wrapper ol.simple li>*,.rst-content .toctree-wrapper ol.simple li ol,.rst-content .toctree-wrapper ol.simple li ul,.rst-content .toctree-wrapper ul.simple li>*,.rst-content .toctree-wrapper ul.simple li ol,.rst-content .toctree-wrapper ul.simple li ul,.rst-content section ol.simple li>*,.rst-content section ol.simple li ol,.rst-content section ol.simple li ul,.rst-content section ul.simple li>*,.rst-content section ul.simple li ol,.rst-content section ul.simple li ul{margin-top:0;margin-bottom:0}.rst-content .line-block{margin-left:0;margin-bottom:24px;line-height:24px}.rst-content .line-block .line-block{margin-left:24px;margin-bottom:0}.rst-content .topic-title{font-weight:700;margin-bottom:12px}.rst-content .toc-backref{color:#404040}.rst-content .align-right{float:right;margin:0 0 24px 24px}.rst-content .align-left{float:left;margin:0 24px 24px 0}.rst-content .align-center{margin:auto}.rst-content .align-center:not(table){display:block}.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content .toctree-wrapper>p.caption .headerlink,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink{opacity:0;font-size:14px;font-family:FontAwesome;margin-left:.5em}.rst-content .code-block-caption .headerlink:focus,.rst-content .code-block-caption:hover .headerlink,.rst-content .eqno .headerlink:focus,.rst-content .eqno:hover .headerlink,.rst-content .toctree-wrapper>p.caption .headerlink:focus,.rst-content .toctree-wrapper>p.caption:hover .headerlink,.rst-content dl dt .headerlink:focus,.rst-content dl dt:hover .headerlink,.rst-content h1 .headerlink:focus,.rst-content h1:hover .headerlink,.rst-content h2 .headerlink:focus,.rst-content h2:hover .headerlink,.rst-content h3 .headerlink:focus,.rst-content h3:hover .headerlink,.rst-content h4 .headerlink:focus,.rst-content h4:hover .headerlink,.rst-content h5 .headerlink:focus,.rst-content h5:hover .headerlink,.rst-content h6 .headerlink:focus,.rst-content h6:hover .headerlink,.rst-content p.caption .headerlink:focus,.rst-content p.caption:hover .headerlink,.rst-content p .headerlink:focus,.rst-content p:hover .headerlink,.rst-content table>caption .headerlink:focus,.rst-content table>caption:hover .headerlink{opacity:1}.rst-content .btn:focus{outline:2px solid}.rst-content table>caption .headerlink:after{font-size:12px}.rst-content .centered{text-align:center}.rst-content .sidebar{float:right;width:40%;display:block;margin:0 0 24px 24px;padding:24px;background:#f3f6f6;border:1px solid #e1e4e5}.rst-content .sidebar dl,.rst-content .sidebar p,.rst-content .sidebar ul{font-size:90%}.rst-content .sidebar .last,.rst-content .sidebar>:last-child{margin-bottom:0}.rst-content .sidebar .sidebar-title{display:block;font-family:Roboto Slab,ff-tisa-web-pro,Georgia,Arial,sans-serif;font-weight:700;background:#e1e4e5;padding:6px 12px;margin:-24px -24px 24px;font-size:100%}.rst-content .highlighted{background:#f1c40f;box-shadow:0 0 0 2px #f1c40f;display:inline;font-weight:700}.rst-content .citation-reference,.rst-content .footnote-reference{vertical-align:baseline;position:relative;top:-.4em;line-height:0;font-size:90%}.rst-content .hlist{width:100%}.rst-content dl dt span.classifier:before{content:" : "}.rst-content dl dt span.classifier-delimiter{display:none!important}html.writer-html4 .rst-content table.docutils.citation,html.writer-html4 .rst-content table.docutils.footnote{background:none;border:none}html.writer-html4 .rst-content table.docutils.citation td,html.writer-html4 .rst-content table.docutils.citation tr,html.writer-html4 .rst-content table.docutils.footnote td,html.writer-html4 .rst-content table.docutils.footnote tr{border:none;background-color:transparent!important;white-space:normal}html.writer-html4 .rst-content table.docutils.citation td.label,html.writer-html4 .rst-content table.docutils.footnote td.label{padding-left:0;padding-right:0;vertical-align:top}html.writer-html5 .rst-content dl.field-list,html.writer-html5 .rst-content dl.footnote{display:grid;grid-template-columns:max-content auto}html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dt{padding-left:1rem}html.writer-html5 .rst-content dl.field-list>dt:after,html.writer-html5 .rst-content dl.footnote>dt:after{content:":"}html.writer-html5 .rst-content dl.field-list>dd,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dd,html.writer-html5 .rst-content dl.footnote>dt{margin-bottom:0}html.writer-html5 .rst-content dl.footnote{font-size:.9rem}html.writer-html5 .rst-content dl.footnote>dt{margin:0 .5rem .5rem 0;line-height:1.2rem;word-break:break-all;font-weight:400}html.writer-html5 .rst-content dl.footnote>dt>span.brackets{margin-right:.5rem}html.writer-html5 .rst-content dl.footnote>dt>span.brackets:before{content:"["}html.writer-html5 .rst-content dl.footnote>dt>span.brackets:after{content:"]"}html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref{font-style:italic}html.writer-html5 .rst-content dl.footnote>dd{margin:0 0 .5rem;line-height:1.2rem}html.writer-html5 .rst-content dl.footnote>dd p,html.writer-html5 .rst-content dl.option-list kbd{font-size:.9rem}.rst-content table.docutils.footnote,html.writer-html4 .rst-content table.docutils.citation,html.writer-html5 .rst-content dl.footnote{color:grey}.rst-content table.docutils.footnote code,.rst-content table.docutils.footnote tt,html.writer-html4 .rst-content table.docutils.citation code,html.writer-html4 .rst-content table.docutils.citation tt,html.writer-html5 .rst-content dl.footnote code,html.writer-html5 .rst-content dl.footnote tt{color:#555}.rst-content .wy-table-responsive.citation,.rst-content .wy-table-responsive.footnote{margin-bottom:0}.rst-content .wy-table-responsive.citation+:not(.citation),.rst-content .wy-table-responsive.footnote+:not(.footnote){margin-top:24px}.rst-content .wy-table-responsive.citation:last-child,.rst-content .wy-table-responsive.footnote:last-child{margin-bottom:24px}.rst-content table.docutils th{border-color:#e1e4e5}html.writer-html5 .rst-content table.docutils th{border:1px solid #e1e4e5}html.writer-html5 .rst-content table.docutils td>p,html.writer-html5 .rst-content table.docutils th>p{line-height:1rem;margin-bottom:0;font-size:.9rem}.rst-content table.docutils td .last,.rst-content table.docutils td .last>:last-child{margin-bottom:0}.rst-content table.field-list,.rst-content table.field-list td{border:none}.rst-content table.field-list td p{font-size:inherit;line-height:inherit}.rst-content table.field-list td>strong{display:inline-block}.rst-content table.field-list .field-name{padding-right:10px;text-align:left;white-space:nowrap}.rst-content table.field-list .field-body{text-align:left}.rst-content code,.rst-content tt{color:#000;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;padding:2px 5px}.rst-content code big,.rst-content code em,.rst-content tt big,.rst-content tt em{font-size:100%!important;line-height:normal}.rst-content code.literal,.rst-content tt.literal{color:#e74c3c;white-space:normal}.rst-content code.xref,.rst-content tt.xref,a .rst-content code,a .rst-content tt{font-weight:700;color:#404040}.rst-content kbd,.rst-content pre,.rst-content samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace}.rst-content a code,.rst-content a tt{color:#2980b9}.rst-content dl{margin-bottom:24px}.rst-content dl dt{font-weight:700;margin-bottom:12px}.rst-content dl ol,.rst-content dl p,.rst-content dl table,.rst-content dl ul{margin-bottom:12px}.rst-content dl dd{margin:0 0 12px 24px;line-height:24px}html.writer-html4 .rst-content dl:not(.docutils),html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple){margin-bottom:24px}html.writer-html4 .rst-content dl:not(.docutils)>dt,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple)>dt{display:table;margin:6px 0;font-size:90%;line-height:normal;background:#e7f2fa;color:#2980b9;border-top:3px solid #6ab0de;padding:6px;position:relative}html.writer-html4 .rst-content dl:not(.docutils)>dt:before,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple)>dt:before{color:#6ab0de}html.writer-html4 .rst-content dl:not(.docutils)>dt .headerlink,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple)>dt .headerlink{color:#404040;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils) dl:not(.field-list)>dt,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) dl:not(.field-list)>dt{margin-bottom:6px;border:none;border-left:3px solid #ccc;background:#f0f0f0;color:#555}html.writer-html4 .rst-content dl:not(.docutils) dl:not(.field-list)>dt .headerlink,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) dl:not(.field-list)>dt .headerlink{color:#404040;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils)>dt:first-child,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple)>dt:first-child{margin-top:0}html.writer-html4 .rst-content dl:not(.docutils) code.descclassname,html.writer-html4 .rst-content dl:not(.docutils) code.descname,html.writer-html4 .rst-content dl:not(.docutils) tt.descclassname,html.writer-html4 .rst-content dl:not(.docutils) tt.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) code.descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) code.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) tt.descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) tt.descname{background-color:transparent;border:none;padding:0;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils) code.descname,html.writer-html4 .rst-content dl:not(.docutils) tt.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) code.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) tt.descname{font-weight:700}html.writer-html4 .rst-content dl:not(.docutils) .optional,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) .optional{display:inline-block;padding:0 4px;color:#000;font-weight:700}html.writer-html4 .rst-content dl:not(.docutils) .property,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) .property{display:inline-block;padding-right:8px;max-width:100%}html.writer-html4 .rst-content dl:not(.docutils) .k,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) .k{font-style:italic}html.writer-html4 .rst-content dl:not(.docutils) .descclassname,html.writer-html4 .rst-content dl:not(.docutils) .descname,html.writer-html4 .rst-content dl:not(.docutils) .sig-name,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) .descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) .descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.glossary):not(.simple) .sig-name{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;color:#000}.rst-content .viewcode-back,.rst-content .viewcode-link{display:inline-block;color:#27ae60;font-size:80%;padding-left:24px}.rst-content .viewcode-back{display:block;float:right}.rst-content p.rubric{margin-bottom:12px;font-weight:700}.rst-content code.download,.rst-content tt.download{background:inherit;padding:inherit;font-weight:400;font-family:inherit;font-size:inherit;color:inherit;border:inherit;white-space:inherit}.rst-content code.download span:first-child,.rst-content tt.download span:first-child{-webkit-font-smoothing:subpixel-antialiased}.rst-content code.download span:first-child:before,.rst-content tt.download span:first-child:before{margin-right:4px}.rst-content .guilabel{border:1px solid #7fbbe3;background:#e7f2fa;font-size:80%;font-weight:700;border-radius:4px;padding:2.4px 6px;margin:auto 2px}.rst-content .versionmodified{font-style:italic}@media screen and (max-width:480px){.rst-content .sidebar{width:100%}}span[id*=MathJax-Span]{color:#404040}.math{text-align:center}@font-face{font-family:Lato;src:url(fonts/lato-normal.woff2?bd03a2cc277bbbc338d464e679fe9942) format("woff2"),url(fonts/lato-normal.woff?27bd77b9162d388cb8d4c4217c7c5e2a) format("woff");font-weight:400;font-style:normal;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-bold.woff2?cccb897485813c7c256901dbca54ecf2) format("woff2"),url(fonts/lato-bold.woff?d878b6c29b10beca227e9eef4246111b) format("woff");font-weight:700;font-style:normal;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-bold-italic.woff2?0b6bb6725576b072c5d0b02ecdd1900d) format("woff2"),url(fonts/lato-bold-italic.woff?9c7e4e9eb485b4a121c760e61bc3707c) format("woff");font-weight:700;font-style:italic;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-normal-italic.woff2?4eb103b4d12be57cb1d040ed5e162e9d) format("woff2"),url(fonts/lato-normal-italic.woff?f28f2d6482446544ef1ea1ccc6dd5892) format("woff");font-weight:400;font-style:italic;font-display:block}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:400;src:url(fonts/Roboto-Slab-Regular.woff2?7abf5b8d04d26a2cafea937019bca958) format("woff2"),url(fonts/Roboto-Slab-Regular.woff?c1be9284088d487c5e3ff0a10a92e58c) format("woff");font-display:block}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:700;src:url(fonts/Roboto-Slab-Bold.woff2?9984f4a9bda09be08e83f2506954adbe) format("woff2"),url(fonts/Roboto-Slab-Bold.woff?bed5564a116b05148e3b3bea6fb1162a) format("woff");font-display:block}quark-engine-23.4.1/docs/build/html/_static/doctools.js000066400000000000000000000105701442215066700230060ustar00rootroot00000000000000/* * doctools.js * ~~~~~~~~~~~ * * Base JavaScript utilities for all Sphinx HTML documentation. * * :copyright: Copyright 2007-2022 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ "use strict"; const BLACKLISTED_KEY_CONTROL_ELEMENTS = new Set([ "TEXTAREA", "INPUT", "SELECT", "BUTTON", ]); const _ready = (callback) => { if (document.readyState !== "loading") { callback(); } else { document.addEventListener("DOMContentLoaded", callback); } }; /** * Small JavaScript module for the documentation. */ const Documentation = { init: () => { Documentation.initDomainIndexTable(); Documentation.initOnKeyListeners(); }, /** * i18n support */ TRANSLATIONS: {}, PLURAL_EXPR: (n) => (n === 1 ? 0 : 1), LOCALE: "unknown", // gettext and ngettext don't access this so that the functions // can safely bound to a different name (_ = Documentation.gettext) gettext: (string) => { const translated = Documentation.TRANSLATIONS[string]; switch (typeof translated) { case "undefined": return string; // no translation case "string": return translated; // translation exists default: return translated[0]; // (singular, plural) translation tuple exists } }, ngettext: (singular, plural, n) => { const translated = Documentation.TRANSLATIONS[singular]; if (typeof translated !== "undefined") return translated[Documentation.PLURAL_EXPR(n)]; return n === 1 ? singular : plural; }, addTranslations: (catalog) => { Object.assign(Documentation.TRANSLATIONS, catalog.messages); Documentation.PLURAL_EXPR = new Function( "n", `return (${catalog.plural_expr})` ); Documentation.LOCALE = catalog.locale; }, /** * helper function to focus on search bar */ focusSearchBar: () => { document.querySelectorAll("input[name=q]")[0]?.focus(); }, /** * Initialise the domain index toggle buttons */ initDomainIndexTable: () => { const toggler = (el) => { const idNumber = el.id.substr(7); const toggledRows = document.querySelectorAll(`tr.cg-${idNumber}`); if (el.src.substr(-9) === "minus.png") { el.src = `${el.src.substr(0, el.src.length - 9)}plus.png`; toggledRows.forEach((el) => (el.style.display = "none")); } else { el.src = `${el.src.substr(0, el.src.length - 8)}minus.png`; toggledRows.forEach((el) => (el.style.display = "")); } }; const togglerElements = document.querySelectorAll("img.toggler"); togglerElements.forEach((el) => el.addEventListener("click", (event) => toggler(event.currentTarget)) ); togglerElements.forEach((el) => (el.style.display = "")); if (DOCUMENTATION_OPTIONS.COLLAPSE_INDEX) togglerElements.forEach(toggler); }, initOnKeyListeners: () => { // only install a listener if it is really needed if ( !DOCUMENTATION_OPTIONS.NAVIGATION_WITH_KEYS && !DOCUMENTATION_OPTIONS.ENABLE_SEARCH_SHORTCUTS ) return; document.addEventListener("keydown", (event) => { // bail for input elements if (BLACKLISTED_KEY_CONTROL_ELEMENTS.has(document.activeElement.tagName)) return; // bail with special keys if (event.altKey || event.ctrlKey || event.metaKey) return; if (!event.shiftKey) { switch (event.key) { case "ArrowLeft": if (!DOCUMENTATION_OPTIONS.NAVIGATION_WITH_KEYS) break; const prevLink = document.querySelector('link[rel="prev"]'); if (prevLink && prevLink.href) { window.location.href = prevLink.href; event.preventDefault(); } break; case "ArrowRight": if (!DOCUMENTATION_OPTIONS.NAVIGATION_WITH_KEYS) break; const nextLink = document.querySelector('link[rel="next"]'); if (nextLink && nextLink.href) { window.location.href = nextLink.href; event.preventDefault(); } break; } } // some keyboard layouts may need Shift to get / switch (event.key) { case "/": if (!DOCUMENTATION_OPTIONS.ENABLE_SEARCH_SHORTCUTS) break; Documentation.focusSearchBar(); event.preventDefault(); } }); }, }; // quick alias for translations const _ = Documentation.gettext; _ready(Documentation.init); quark-engine-23.4.1/docs/build/html/_static/documentation_options.js000066400000000000000000000006471442215066700256100ustar00rootroot00000000000000var DOCUMENTATION_OPTIONS = { URL_ROOT: document.getElementById("documentation_options").getAttribute('data-url_root'), VERSION: 'v22.10.3', LANGUAGE: 'en', COLLAPSE_INDEX: false, BUILDER: 'html', FILE_SUFFIX: '.html', LINK_SUFFIX: '.html', HAS_SOURCE: true, SOURCELINK_SUFFIX: '.txt', NAVIGATION_WITH_KEYS: false, SHOW_SEARCH_SUMMARY: true, ENABLE_SEARCH_SHORTCUTS: true, };quark-engine-23.4.1/docs/build/html/_static/file.png000066400000000000000000000004361442215066700222470ustar00rootroot00000000000000‰PNG  IHDRķ˙aåIDATx­“ƒR…÷){…l× ÛļŲfÛ=@Žå œ:ŋšž3ßú~įŽ„ūūūšōōrX$AđX-öD ~ņũũ ōķķ€Į‰(ŠP%ž€8<<9:: ãøøØP•ęO&’$é ؝l~‚X÷ėãûæ&ČŊÖEWĀ^4ĩwQ}ÂÎÃļ^ü˜Ô÷ÍŖž ‹¨ięŠīš0/H/é@F)éDzq+’ķj”[žSU5ž€ĖčhšĻ/đŋoY– G&Lfs|ŖĄģģ{Íęßøß3%¸U+S°é`AFŌIENDŽB`‚quark-engine-23.4.1/docs/build/html/_static/jquery.js000066400000000000000000002566351442215066700225150ustar00rootroot00000000000000/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */ !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t||(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10|55296,1023&n|56320))},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!N[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&(U.test(t)||z.test(t))){(f=ee.test(t)&&ye(e.parentNode)||e)===e&&d.scope||((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName||!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length||v.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length||v.push("\\["+M+"*name"+M+"*="+M+"*(?:''|\"\")"),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length||v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)==(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C||e.ownerDocument==p&&y(p,e)?-1:t==C||t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if(T(e),d.matchesSelector&&E&&!N[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1)[^>]*|#([\w-]+))$/;(S.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||D,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:q.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof S?t[0]:t,S.merge(this,S.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),N.test(r[1])&&S.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents|prev(?:Until|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i;ce=E.createDocumentFragment().appendChild(E.createElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="",y.option=!!ce.lastChild;var ge={thead:[1,"","
"],col:[2,"","
"],tr:[2,"","
"],td:[3,"","
"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?S.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;n",""]);var me=/<|&#?\w+;/;function xe(e,t,n,r,i){for(var o,a,s,u,l,c,f=t.createDocumentFragment(),p=[],d=0,h=e.length;d\s*$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]||e}function De(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function qe(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Le(e,t){var n,r,i,o,a,s;if(1===t.nodeType){if(Y.hasData(e)&&(s=Y.get(e).events))for(i in Y.remove(t,"handle events"),s)for(n=0,r=s[i].length;n").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var _t,zt=[],Ut=/(=)\?(?=&|$)|\?\?/;S.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=zt.pop()||S.expando+"_"+wt.guid++;return this[e]=!0,e}}),S.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Ut.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Ut.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Ut,"$1"+r):!1!==e.jsonp&&(e.url+=(Tt.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||S.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?S(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,zt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((_t=E.implementation.createHTMLDocument("").body).innerHTML="
",2===_t.childNodes.length),S.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=N.exec(e))?[t.createElement(i[1])]:(i=xe([e],t,o),o&&o.length&&S(o).remove(),S.merge([],i.childNodes)));var r,i,o},S.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1").append(S.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},S.expr.pseudos.animated=function(t){return S.grep(S.timers,function(e){return t===e.elem}).length},S.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=S.css(e,"position"),c=S(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=S.css(e,"top"),u=S.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,S.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},S.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){S.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===S.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===S.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=S(e).offset()).top+=S.css(e,"borderTopWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"position"))e=e.offsetParent;return e||re})}}),S.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;S.fn[t]=function(e){return $(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),S.each(["top","left"],function(e,n){S.cssHooks[n]=Fe(y.pixelPosition,function(e,t){if(t)return t=We(e,n),Pe.test(t)?S(e).position()[n]+"px":t})}),S.each({Height:"height",Width:"width"},function(a,s){S.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){S.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return $(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?S.css(e,t,i):S.style(e,t,n,i)},s,n?e:void 0,n)}})}),S.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)},hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)}}),S.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){S.fn[n]=function(e,t){return 0"),n("table.docutils.footnote").wrap("
"),n("table.docutils.citation").wrap("
"),n(".wy-menu-vertical ul").not(".simple").siblings("a").each((function(){var t=n(this);expand=n(''),expand.on("click",(function(n){return e.toggleCurrent(t),n.stopPropagation(),!1})),t.prepend(expand)}))},reset:function(){var n=encodeURI(window.location.hash)||"#";try{var e=$(".wy-menu-vertical"),t=e.find('[href="'+n+'"]');if(0===t.length){var i=$('.document [id="'+n.substring(1)+'"]').closest("div.section");0===(t=e.find('[href="#'+i.attr("id")+'"]')).length&&(t=e.find('[href="#"]'))}if(t.length>0){$(".wy-menu-vertical .current").removeClass("current").attr("aria-expanded","false"),t.addClass("current").attr("aria-expanded","true"),t.closest("li.toctree-l1").parent().addClass("current").attr("aria-expanded","true");for(let n=1;n<=10;n++)t.closest("li.toctree-l"+n).addClass("current").attr("aria-expanded","true");t[0].scrollIntoView()}}catch(n){console.log("Error expanding nav for anchor",n)}},onScroll:function(){this.winScroll=!1;var n=this.win.scrollTop(),e=n+this.winHeight,t=this.navBar.scrollTop()+(n-this.winPosition);n<0||e>this.docHeight||(this.navBar.scrollTop(t),this.winPosition=n)},onResize:function(){this.winResize=!1,this.winHeight=this.win.height(),this.docHeight=$(document).height()},hashChange:function(){this.linkScroll=!0,this.win.one("hashchange",(function(){this.linkScroll=!1}))},toggleCurrent:function(n){var e=n.closest("li");e.siblings("li.current").removeClass("current").attr("aria-expanded","false"),e.siblings().find("li.current").removeClass("current").attr("aria-expanded","false");var t=e.find("> ul li");t.length&&(t.removeClass("current").attr("aria-expanded","false"),e.toggleClass("current").attr("aria-expanded",(function(n,e){return"true"==e?"false":"true"})))}},"undefined"!=typeof window&&(window.SphinxRtdTheme={Navigation:n.exports.ThemeNav,StickyNav:n.exports.ThemeNav}),function(){for(var n=0,e=["ms","moz","webkit","o"],t=0;t0 var meq1 = "^(" + C + ")?" + V + C + "(" + V + ")?$"; // [C]VC[V] is m=1 var mgr1 = "^(" + C + ")?" + V + C + V + C; // [C]VCVC... is m>1 var s_v = "^(" + C + ")?" + v; // vowel in stem this.stemWord = function (w) { var stem; var suffix; var firstch; var origword = w; if (w.length < 3) return w; var re; var re2; var re3; var re4; firstch = w.substr(0,1); if (firstch == "y") w = firstch.toUpperCase() + w.substr(1); // Step 1a re = /^(.+?)(ss|i)es$/; re2 = /^(.+?)([^s])s$/; if (re.test(w)) w = w.replace(re,"$1$2"); else if (re2.test(w)) w = w.replace(re2,"$1$2"); // Step 1b re = /^(.+?)eed$/; re2 = /^(.+?)(ed|ing)$/; if (re.test(w)) { var fp = re.exec(w); re = new RegExp(mgr0); if (re.test(fp[1])) { re = /.$/; w = w.replace(re,""); } } else if (re2.test(w)) { var fp = re2.exec(w); stem = fp[1]; re2 = new RegExp(s_v); if (re2.test(stem)) { w = stem; re2 = /(at|bl|iz)$/; re3 = new RegExp("([^aeiouylsz])\\1$"); re4 = new RegExp("^" + C + v + "[^aeiouwxy]$"); if (re2.test(w)) w = w + "e"; else if (re3.test(w)) { re = /.$/; w = w.replace(re,""); } else if (re4.test(w)) w = w + "e"; } } // Step 1c re = /^(.+?)y$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; re = new RegExp(s_v); if (re.test(stem)) w = stem + "i"; } // Step 2 re = /^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; suffix = fp[2]; re = new RegExp(mgr0); if (re.test(stem)) w = stem + step2list[suffix]; } // Step 3 re = /^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; suffix = fp[2]; re = new RegExp(mgr0); if (re.test(stem)) w = stem + step3list[suffix]; } // Step 4 re = /^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/; re2 = /^(.+?)(s|t)(ion)$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; re = new RegExp(mgr1); if (re.test(stem)) w = stem; } else if (re2.test(w)) { var fp = re2.exec(w); stem = fp[1] + fp[2]; re2 = new RegExp(mgr1); if (re2.test(stem)) w = stem; } // Step 5 re = /^(.+?)e$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; re = new RegExp(mgr1); re2 = new RegExp(meq1); re3 = new RegExp("^" + C + v + "[^aeiouwxy]$"); if (re.test(stem) || (re2.test(stem) && !(re3.test(stem)))) w = stem; } re = /ll$/; re2 = new RegExp(mgr1); if (re.test(w) && re2.test(w)) { re = /.$/; w = w.replace(re,""); } // and turn initial Y back to y if (firstch == "y") w = firstch.toLowerCase() + w.substr(1); return w; } } quark-engine-23.4.1/docs/build/html/_static/minus.png000066400000000000000000000001321442215066700224540ustar00rootroot00000000000000‰PNG  IHDR ŒĮ(ú!IDATxc8ƒ g>@Á;(û!ļ&Ģū€Ø]ėf2nüNIENDŽB`‚quark-engine-23.4.1/docs/build/html/_static/plus.png000066400000000000000000000001321442215066700223040ustar00rootroot00000000000000‰PNG  IHDR ŒĮ(ú!IDATxc8ƒ g>@Á;([“[ˆU˙ @l-!a”ķđ@IENDŽB`‚quark-engine-23.4.1/docs/build/html/_static/pygments.css000066400000000000000000000113231442215066700231770ustar00rootroot00000000000000pre { line-height: 125%; } td.linenos .normal { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; } span.linenos { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; } td.linenos .special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; } span.linenos.special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; } .highlight .hll { background-color: #ffffcc } .highlight { background: #f8f8f8; } .highlight .c { color: #3D7B7B; font-style: italic } /* Comment */ .highlight .err { border: 1px solid #FF0000 } /* Error */ .highlight .k { color: #008000; font-weight: bold } /* Keyword */ .highlight .o { color: #666666 } /* Operator */ .highlight .ch { color: #3D7B7B; font-style: italic } /* Comment.Hashbang */ .highlight .cm { color: #3D7B7B; font-style: italic } /* Comment.Multiline */ .highlight .cp { color: #9C6500 } /* Comment.Preproc */ .highlight .cpf { color: #3D7B7B; font-style: italic } /* Comment.PreprocFile */ .highlight .c1 { color: #3D7B7B; font-style: italic } /* Comment.Single */ .highlight .cs { color: #3D7B7B; font-style: italic } /* Comment.Special */ .highlight .gd { color: #A00000 } /* Generic.Deleted */ .highlight .ge { font-style: italic } /* Generic.Emph */ .highlight .gr { color: #E40000 } /* Generic.Error */ .highlight .gh { color: #000080; font-weight: bold } /* Generic.Heading */ .highlight .gi { color: #008400 } /* Generic.Inserted */ .highlight .go { color: #717171 } /* Generic.Output */ .highlight .gp { color: #000080; font-weight: bold } /* Generic.Prompt */ .highlight .gs { font-weight: bold } /* Generic.Strong */ .highlight .gu { color: #800080; font-weight: bold } /* Generic.Subheading */ .highlight .gt { color: #0044DD } /* Generic.Traceback */ .highlight .kc { color: #008000; font-weight: bold } /* Keyword.Constant */ .highlight .kd { color: #008000; font-weight: bold } /* Keyword.Declaration */ .highlight .kn { color: #008000; font-weight: bold } /* Keyword.Namespace */ .highlight .kp { color: #008000 } /* Keyword.Pseudo */ .highlight .kr { color: #008000; font-weight: bold } /* Keyword.Reserved */ .highlight .kt { color: #B00040 } /* Keyword.Type */ .highlight .m { color: #666666 } /* Literal.Number */ .highlight .s { color: #BA2121 } /* Literal.String */ .highlight .na { color: #687822 } /* Name.Attribute */ .highlight .nb { color: #008000 } /* Name.Builtin */ .highlight .nc { color: #0000FF; font-weight: bold } /* Name.Class */ .highlight .no { color: #880000 } /* Name.Constant */ .highlight .nd { color: #AA22FF } /* Name.Decorator */ .highlight .ni { color: #717171; font-weight: bold } /* Name.Entity */ .highlight .ne { color: #CB3F38; font-weight: bold } /* Name.Exception */ .highlight .nf { color: #0000FF } /* Name.Function */ .highlight .nl { color: #767600 } /* Name.Label */ .highlight .nn { color: #0000FF; font-weight: bold } /* Name.Namespace */ .highlight .nt { color: #008000; font-weight: bold } /* Name.Tag */ .highlight .nv { color: #19177C } /* Name.Variable */ .highlight .ow { color: #AA22FF; font-weight: bold } /* Operator.Word */ .highlight .w { color: #bbbbbb } /* Text.Whitespace */ .highlight .mb { color: #666666 } /* Literal.Number.Bin */ .highlight .mf { color: #666666 } /* Literal.Number.Float */ .highlight .mh { color: #666666 } /* Literal.Number.Hex */ .highlight .mi { color: #666666 } /* Literal.Number.Integer */ .highlight .mo { color: #666666 } /* Literal.Number.Oct */ .highlight .sa { color: #BA2121 } /* Literal.String.Affix */ .highlight .sb { color: #BA2121 } /* Literal.String.Backtick */ .highlight .sc { color: #BA2121 } /* Literal.String.Char */ .highlight .dl { color: #BA2121 } /* Literal.String.Delimiter */ .highlight .sd { color: #BA2121; font-style: italic } /* Literal.String.Doc */ .highlight .s2 { color: #BA2121 } /* Literal.String.Double */ .highlight .se { color: #AA5D1F; font-weight: bold } /* Literal.String.Escape */ .highlight .sh { color: #BA2121 } /* Literal.String.Heredoc */ .highlight .si { color: #A45A77; font-weight: bold } /* Literal.String.Interpol */ .highlight .sx { color: #008000 } /* Literal.String.Other */ .highlight .sr { color: #A45A77 } /* Literal.String.Regex */ .highlight .s1 { color: #BA2121 } /* Literal.String.Single */ .highlight .ss { color: #19177C } /* Literal.String.Symbol */ .highlight .bp { color: #008000 } /* Name.Builtin.Pseudo */ .highlight .fm { color: #0000FF } /* Name.Function.Magic */ .highlight .vc { color: #19177C } /* Name.Variable.Class */ .highlight .vg { color: #19177C } /* Name.Variable.Global */ .highlight .vi { color: #19177C } /* Name.Variable.Instance */ .highlight .vm { color: #19177C } /* Name.Variable.Magic */ .highlight .il { color: #666666 } /* Literal.Number.Integer.Long */quark-engine-23.4.1/docs/build/html/_static/searchtools.js000066400000000000000000000434471442215066700235170ustar00rootroot00000000000000/* * searchtools.js * ~~~~~~~~~~~~~~~~ * * Sphinx JavaScript utilities for the full-text search. * * :copyright: Copyright 2007-2022 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ "use strict"; /** * Simple result scoring code. */ if (typeof Scorer === "undefined") { var Scorer = { // Implement the following function to further tweak the score for each result // The function takes a result array [docname, title, anchor, descr, score, filename] // and returns the new score. /* score: result => { const [docname, title, anchor, descr, score, filename] = result return score }, */ // query matches the full name of an object objNameMatch: 11, // or matches in the last dotted part of the object name objPartialMatch: 6, // Additive scores depending on the priority of the object objPrio: { 0: 15, // used to be importantResults 1: 5, // used to be objectResults 2: -5, // used to be unimportantResults }, // Used when the priority is not in the mapping. objPrioDefault: 0, // query found in title title: 15, partialTitle: 7, // query found in terms term: 5, partialTerm: 2, }; } const _removeChildren = (element) => { while (element && element.lastChild) element.removeChild(element.lastChild); }; /** * See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Regular_Expressions#escaping */ const _escapeRegExp = (string) => string.replace(/[.*+\-?^${}()|[\]\\]/g, "\\$&"); // $& means the whole matched string const _displayItem = (item, searchTerms) => { const docBuilder = DOCUMENTATION_OPTIONS.BUILDER; const docUrlRoot = DOCUMENTATION_OPTIONS.URL_ROOT; const docFileSuffix = DOCUMENTATION_OPTIONS.FILE_SUFFIX; const docLinkSuffix = DOCUMENTATION_OPTIONS.LINK_SUFFIX; const showSearchSummary = DOCUMENTATION_OPTIONS.SHOW_SEARCH_SUMMARY; const [docName, title, anchor, descr, score, _filename] = item; let listItem = document.createElement("li"); let requestUrl; let linkUrl; if (docBuilder === "dirhtml") { // dirhtml builder let dirname = docName + "/"; if (dirname.match(/\/index\/$/)) dirname = dirname.substring(0, dirname.length - 6); else if (dirname === "index/") dirname = ""; requestUrl = docUrlRoot + dirname; linkUrl = requestUrl; } else { // normal html builders requestUrl = docUrlRoot + docName + docFileSuffix; linkUrl = docName + docLinkSuffix; } let linkEl = listItem.appendChild(document.createElement("a")); linkEl.href = linkUrl + anchor; linkEl.dataset.score = score; linkEl.innerHTML = title; if (descr) listItem.appendChild(document.createElement("span")).innerHTML = " (" + descr + ")"; else if (showSearchSummary) fetch(requestUrl) .then((responseData) => responseData.text()) .then((data) => { if (data) listItem.appendChild( Search.makeSearchSummary(data, searchTerms) ); }); Search.output.appendChild(listItem); }; const _finishSearch = (resultCount) => { Search.stopPulse(); Search.title.innerText = _("Search Results"); if (!resultCount) Search.status.innerText = Documentation.gettext( "Your search did not match any documents. Please make sure that all words are spelled correctly and that you've selected enough categories." ); else Search.status.innerText = _( `Search finished, found ${resultCount} page(s) matching the search query.` ); }; const _displayNextItem = ( results, resultCount, searchTerms ) => { // results left, load the summary and display it // this is intended to be dynamic (don't sub resultsCount) if (results.length) { _displayItem(results.pop(), searchTerms); setTimeout( () => _displayNextItem(results, resultCount, searchTerms), 5 ); } // search finished, update title and status message else _finishSearch(resultCount); }; /** * Default splitQuery function. Can be overridden in ``sphinx.search`` with a * custom function per language. * * The regular expression works by splitting the string on consecutive characters * that are not Unicode letters, numbers, underscores, or emoji characters. * This is the same as ``\W+`` in Python, preserving the surrogate pair area. */ if (typeof splitQuery === "undefined") { var splitQuery = (query) => query .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}]+/gu) .filter(term => term) // remove remaining empty strings } /** * Search Module */ const Search = { _index: null, _queued_query: null, _pulse_status: -1, htmlToText: (htmlString) => { const htmlElement = new DOMParser().parseFromString(htmlString, 'text/html'); htmlElement.querySelectorAll(".headerlink").forEach((el) => { el.remove() }); const docContent = htmlElement.querySelector('[role="main"]'); if (docContent !== undefined) return docContent.textContent; console.warn( "Content block not found. Sphinx search tries to obtain it via '[role=main]'. Could you check your theme or template." ); return ""; }, init: () => { const query = new URLSearchParams(window.location.search).get("q"); document .querySelectorAll('input[name="q"]') .forEach((el) => (el.value = query)); if (query) Search.performSearch(query); }, loadIndex: (url) => (document.body.appendChild(document.createElement("script")).src = url), setIndex: (index) => { Search._index = index; if (Search._queued_query !== null) { const query = Search._queued_query; Search._queued_query = null; Search.query(query); } }, hasIndex: () => Search._index !== null, deferQuery: (query) => (Search._queued_query = query), stopPulse: () => (Search._pulse_status = -1), startPulse: () => { if (Search._pulse_status >= 0) return; const pulse = () => { Search._pulse_status = (Search._pulse_status + 1) % 4; Search.dots.innerText = ".".repeat(Search._pulse_status); if (Search._pulse_status >= 0) window.setTimeout(pulse, 500); }; pulse(); }, /** * perform a search for something (or wait until index is loaded) */ performSearch: (query) => { // create the required interface elements const searchText = document.createElement("h2"); searchText.textContent = _("Searching"); const searchSummary = document.createElement("p"); searchSummary.classList.add("search-summary"); searchSummary.innerText = ""; const searchList = document.createElement("ul"); searchList.classList.add("search"); const out = document.getElementById("search-results"); Search.title = out.appendChild(searchText); Search.dots = Search.title.appendChild(document.createElement("span")); Search.status = out.appendChild(searchSummary); Search.output = out.appendChild(searchList); const searchProgress = document.getElementById("search-progress"); // Some themes don't use the search progress node if (searchProgress) { searchProgress.innerText = _("Preparing search..."); } Search.startPulse(); // index already loaded, the browser was quick! if (Search.hasIndex()) Search.query(query); else Search.deferQuery(query); }, /** * execute search (requires search index to be loaded) */ query: (query) => { const filenames = Search._index.filenames; const docNames = Search._index.docnames; const titles = Search._index.titles; const allTitles = Search._index.alltitles; const indexEntries = Search._index.indexentries; // stem the search terms and add them to the correct list const stemmer = new Stemmer(); const searchTerms = new Set(); const excludedTerms = new Set(); const highlightTerms = new Set(); const objectTerms = new Set(splitQuery(query.toLowerCase().trim())); splitQuery(query.trim()).forEach((queryTerm) => { const queryTermLower = queryTerm.toLowerCase(); // maybe skip this "word" // stopwords array is from language_data.js if ( stopwords.indexOf(queryTermLower) !== -1 || queryTerm.match(/^\d+$/) ) return; // stem the word let word = stemmer.stemWord(queryTermLower); // select the correct list if (word[0] === "-") excludedTerms.add(word.substr(1)); else { searchTerms.add(word); highlightTerms.add(queryTermLower); } }); if (SPHINX_HIGHLIGHT_ENABLED) { // set in sphinx_highlight.js localStorage.setItem("sphinx_highlight_terms", [...highlightTerms].join(" ")) } // console.debug("SEARCH: searching for:"); // console.info("required: ", [...searchTerms]); // console.info("excluded: ", [...excludedTerms]); // array of [docname, title, anchor, descr, score, filename] let results = []; _removeChildren(document.getElementById("search-progress")); const queryLower = query.toLowerCase(); for (const [title, foundTitles] of Object.entries(allTitles)) { if (title.toLowerCase().includes(queryLower) && (queryLower.length >= title.length/2)) { for (const [file, id] of foundTitles) { let score = Math.round(100 * queryLower.length / title.length) results.push([ docNames[file], titles[file] !== title ? `${titles[file]} > ${title}` : title, id !== null ? "#" + id : "", null, score, filenames[file], ]); } } } // search for explicit entries in index directives for (const [entry, foundEntries] of Object.entries(indexEntries)) { if (entry.includes(queryLower) && (queryLower.length >= entry.length/2)) { for (const [file, id] of foundEntries) { let score = Math.round(100 * queryLower.length / entry.length) results.push([ docNames[file], titles[file], id ? "#" + id : "", null, score, filenames[file], ]); } } } // lookup as object objectTerms.forEach((term) => results.push(...Search.performObjectSearch(term, objectTerms)) ); // lookup as search terms in fulltext results.push(...Search.performTermsSearch(searchTerms, excludedTerms)); // let the scorer override scores with a custom scoring function if (Scorer.score) results.forEach((item) => (item[4] = Scorer.score(item))); // now sort the results by score (in opposite order of appearance, since the // display function below uses pop() to retrieve items) and then // alphabetically results.sort((a, b) => { const leftScore = a[4]; const rightScore = b[4]; if (leftScore === rightScore) { // same score: sort alphabetically const leftTitle = a[1].toLowerCase(); const rightTitle = b[1].toLowerCase(); if (leftTitle === rightTitle) return 0; return leftTitle > rightTitle ? -1 : 1; // inverted is intentional } return leftScore > rightScore ? 1 : -1; }); // remove duplicate search results // note the reversing of results, so that in the case of duplicates, the highest-scoring entry is kept let seen = new Set(); results = results.reverse().reduce((acc, result) => { let resultStr = result.slice(0, 4).concat([result[5]]).map(v => String(v)).join(','); if (!seen.has(resultStr)) { acc.push(result); seen.add(resultStr); } return acc; }, []); results = results.reverse(); // for debugging //Search.lastresults = results.slice(); // a copy // console.info("search results:", Search.lastresults); // print the results _displayNextItem(results, results.length, searchTerms); }, /** * search for object names */ performObjectSearch: (object, objectTerms) => { const filenames = Search._index.filenames; const docNames = Search._index.docnames; const objects = Search._index.objects; const objNames = Search._index.objnames; const titles = Search._index.titles; const results = []; const objectSearchCallback = (prefix, match) => { const name = match[4] const fullname = (prefix ? prefix + "." : "") + name; const fullnameLower = fullname.toLowerCase(); if (fullnameLower.indexOf(object) < 0) return; let score = 0; const parts = fullnameLower.split("."); // check for different match types: exact matches of full name or // "last name" (i.e. last dotted part) if (fullnameLower === object || parts.slice(-1)[0] === object) score += Scorer.objNameMatch; else if (parts.slice(-1)[0].indexOf(object) > -1) score += Scorer.objPartialMatch; // matches in last name const objName = objNames[match[1]][2]; const title = titles[match[0]]; // If more than one term searched for, we require other words to be // found in the name/title/description const otherTerms = new Set(objectTerms); otherTerms.delete(object); if (otherTerms.size > 0) { const haystack = `${prefix} ${name} ${objName} ${title}`.toLowerCase(); if ( [...otherTerms].some((otherTerm) => haystack.indexOf(otherTerm) < 0) ) return; } let anchor = match[3]; if (anchor === "") anchor = fullname; else if (anchor === "-") anchor = objNames[match[1]][1] + "-" + fullname; const descr = objName + _(", in ") + title; // add custom score for some objects according to scorer if (Scorer.objPrio.hasOwnProperty(match[2])) score += Scorer.objPrio[match[2]]; else score += Scorer.objPrioDefault; results.push([ docNames[match[0]], fullname, "#" + anchor, descr, score, filenames[match[0]], ]); }; Object.keys(objects).forEach((prefix) => objects[prefix].forEach((array) => objectSearchCallback(prefix, array) ) ); return results; }, /** * search for full-text terms in the index */ performTermsSearch: (searchTerms, excludedTerms) => { // prepare search const terms = Search._index.terms; const titleTerms = Search._index.titleterms; const filenames = Search._index.filenames; const docNames = Search._index.docnames; const titles = Search._index.titles; const scoreMap = new Map(); const fileMap = new Map(); // perform the search on the required terms searchTerms.forEach((word) => { const files = []; const arr = [ { files: terms[word], score: Scorer.term }, { files: titleTerms[word], score: Scorer.title }, ]; // add support for partial matches if (word.length > 2) { const escapedWord = _escapeRegExp(word); Object.keys(terms).forEach((term) => { if (term.match(escapedWord) && !terms[word]) arr.push({ files: terms[term], score: Scorer.partialTerm }); }); Object.keys(titleTerms).forEach((term) => { if (term.match(escapedWord) && !titleTerms[word]) arr.push({ files: titleTerms[word], score: Scorer.partialTitle }); }); } // no match but word was a required one if (arr.every((record) => record.files === undefined)) return; // found search word in contents arr.forEach((record) => { if (record.files === undefined) return; let recordFiles = record.files; if (recordFiles.length === undefined) recordFiles = [recordFiles]; files.push(...recordFiles); // set score for the word in each file recordFiles.forEach((file) => { if (!scoreMap.has(file)) scoreMap.set(file, {}); scoreMap.get(file)[word] = record.score; }); }); // create the mapping files.forEach((file) => { if (fileMap.has(file) && fileMap.get(file).indexOf(word) === -1) fileMap.get(file).push(word); else fileMap.set(file, [word]); }); }); // now check if the files don't contain excluded terms const results = []; for (const [file, wordList] of fileMap) { // check if all requirements are matched // as search terms with length < 3 are discarded const filteredTermCount = [...searchTerms].filter( (term) => term.length > 2 ).length; if ( wordList.length !== searchTerms.size && wordList.length !== filteredTermCount ) continue; // ensure that none of the excluded terms is in the search result if ( [...excludedTerms].some( (term) => terms[term] === file || titleTerms[term] === file || (terms[term] || []).includes(file) || (titleTerms[term] || []).includes(file) ) ) break; // select one (max) score for the file. const score = Math.max(...wordList.map((w) => scoreMap.get(file)[w])); // add result to the result list results.push([ docNames[file], titles[file], "", null, score, filenames[file], ]); } return results; }, /** * helper function to return a node containing the * search summary for a given text. keywords is a list * of stemmed words. */ makeSearchSummary: (htmlText, keywords) => { const text = Search.htmlToText(htmlText); if (text === "") return null; const textLower = text.toLowerCase(); const actualStartPosition = [...keywords] .map((k) => textLower.indexOf(k.toLowerCase())) .filter((i) => i > -1) .slice(-1)[0]; const startWithContext = Math.max(actualStartPosition - 120, 0); const top = startWithContext === 0 ? "" : "..."; const tail = startWithContext + 240 < text.length ? "..." : ""; let summary = document.createElement("p"); summary.classList.add("context"); summary.textContent = top + text.substr(startWithContext, 240).trim() + tail; return summary; }, }; _ready(Search.init); quark-engine-23.4.1/docs/build/html/_static/underscore.js000066400000000000000000000461121442215066700233320ustar00rootroot00000000000000!function(n,r){"object"==typeof exports&&"undefined"!=typeof module?module.exports=r():"function"==typeof define&&define.amd?define("underscore",r):(n="undefined"!=typeof globalThis?globalThis:n||self,function(){var t=n._,e=n._=r();e.noConflict=function(){return n._=t,e}}())}(this,(function(){ // Underscore.js 1.13.1 // https://underscorejs.org // (c) 2009-2021 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors // Underscore may be freely distributed under the MIT license. var n="1.13.1",r="object"==typeof self&&self.self===self&&self||"object"==typeof global&&global.global===global&&global||Function("return this")()||{},t=Array.prototype,e=Object.prototype,u="undefined"!=typeof Symbol?Symbol.prototype:null,o=t.push,i=t.slice,a=e.toString,f=e.hasOwnProperty,c="undefined"!=typeof ArrayBuffer,l="undefined"!=typeof DataView,s=Array.isArray,p=Object.keys,v=Object.create,h=c&&ArrayBuffer.isView,y=isNaN,d=isFinite,g=!{toString:null}.propertyIsEnumerable("toString"),b=["valueOf","isPrototypeOf","toString","propertyIsEnumerable","hasOwnProperty","toLocaleString"],m=Math.pow(2,53)-1;function j(n,r){return r=null==r?n.length-1:+r,function(){for(var t=Math.max(arguments.length-r,0),e=Array(t),u=0;u=0&&t<=m}}function J(n){return function(r){return null==r?void 0:r[n]}}var G=J("byteLength"),H=K(G),Q=/\[object ((I|Ui)nt(8|16|32)|Float(32|64)|Uint8Clamped|Big(I|Ui)nt64)Array\]/;var X=c?function(n){return h?h(n)&&!q(n):H(n)&&Q.test(a.call(n))}:C(!1),Y=J("length");function Z(n,r){r=function(n){for(var r={},t=n.length,e=0;e":">",'"':""","'":"'","`":"`"},Cn=Ln($n),Kn=Ln(_n($n)),Jn=tn.templateSettings={evaluate:/<%([\s\S]+?)%>/g,interpolate:/<%=([\s\S]+?)%>/g,escape:/<%-([\s\S]+?)%>/g},Gn=/(.)^/,Hn={"'":"'","\\":"\\","\r":"r","\n":"n","\u2028":"u2028","\u2029":"u2029"},Qn=/\\|'|\r|\n|\u2028|\u2029/g;function Xn(n){return"\\"+Hn[n]}var Yn=/^\s*(\w|\$)+\s*$/;var Zn=0;function nr(n,r,t,e,u){if(!(e instanceof r))return n.apply(t,u);var o=Mn(n.prototype),i=n.apply(o,u);return _(i)?i:o}var rr=j((function(n,r){var t=rr.placeholder,e=function(){for(var u=0,o=r.length,i=Array(o),a=0;a1)ur(a,r-1,t,e),u=e.length;else for(var f=0,c=a.length;f0&&(t=r.apply(this,arguments)),n<=1&&(r=null),t}}var lr=rr(cr,2);function sr(n,r,t){r=qn(r,t);for(var e,u=nn(n),o=0,i=u.length;o0?0:u-1;o>=0&&o0?a=o>=0?o:Math.max(o+f,a):f=o>=0?Math.min(o+1,f):o+f+1;else if(t&&o&&f)return e[o=t(e,u)]===u?o:-1;if(u!=u)return(o=r(i.call(e,a,f),$))>=0?o+a:-1;for(o=n>0?a:f-1;o>=0&&o0?0:i-1;for(u||(e=r[o?o[a]:a],a+=n);a>=0&&a=3;return r(n,Fn(t,u,4),e,o)}}var Ar=wr(1),xr=wr(-1);function Sr(n,r,t){var e=[];return r=qn(r,t),jr(n,(function(n,t,u){r(n,t,u)&&e.push(n)})),e}function Or(n,r,t){r=qn(r,t);for(var e=!er(n)&&nn(n),u=(e||n).length,o=0;o=0}var Br=j((function(n,r,t){var e,u;return D(r)?u=r:(r=Nn(r),e=r.slice(0,-1),r=r[r.length-1]),_r(n,(function(n){var o=u;if(!o){if(e&&e.length&&(n=In(n,e)),null==n)return;o=n[r]}return null==o?o:o.apply(n,t)}))}));function Nr(n,r){return _r(n,Rn(r))}function Ir(n,r,t){var e,u,o=-1/0,i=-1/0;if(null==r||"number"==typeof r&&"object"!=typeof n[0]&&null!=n)for(var a=0,f=(n=er(n)?n:jn(n)).length;ao&&(o=e);else r=qn(r,t),jr(n,(function(n,t,e){((u=r(n,t,e))>i||u===-1/0&&o===-1/0)&&(o=n,i=u)}));return o}function Tr(n,r,t){if(null==r||t)return er(n)||(n=jn(n)),n[Wn(n.length-1)];var e=er(n)?En(n):jn(n),u=Y(e);r=Math.max(Math.min(r,u),0);for(var o=u-1,i=0;i1&&(e=Fn(e,r[1])),r=an(n)):(e=qr,r=ur(r,!1,!1),n=Object(n));for(var u=0,o=r.length;u1&&(t=r[1])):(r=_r(ur(r,!1,!1),String),e=function(n,t){return!Er(r,t)}),Ur(n,e,t)}));function zr(n,r,t){return i.call(n,0,Math.max(0,n.length-(null==r||t?1:r)))}function Lr(n,r,t){return null==n||n.length<1?null==r||t?void 0:[]:null==r||t?n[0]:zr(n,n.length-r)}function $r(n,r,t){return i.call(n,null==r||t?1:r)}var Cr=j((function(n,r){return r=ur(r,!0,!0),Sr(n,(function(n){return!Er(r,n)}))})),Kr=j((function(n,r){return Cr(n,r)}));function Jr(n,r,t,e){A(r)||(e=t,t=r,r=!1),null!=t&&(t=qn(t,e));for(var u=[],o=[],i=0,a=Y(n);ir?(e&&(clearTimeout(e),e=null),a=c,i=n.apply(u,o),e||(u=o=null)):e||!1===t.trailing||(e=setTimeout(f,l)),i};return c.cancel=function(){clearTimeout(e),a=0,e=u=o=null},c},debounce:function(n,r,t){var e,u,o,i,a,f=function(){var c=zn()-u;r>c?e=setTimeout(f,r-c):(e=null,t||(i=n.apply(a,o)),e||(o=a=null))},c=j((function(c){return a=this,o=c,u=zn(),e||(e=setTimeout(f,r),t&&(i=n.apply(a,o))),i}));return c.cancel=function(){clearTimeout(e),e=o=a=null},c},wrap:function(n,r){return rr(r,n)},negate:fr,compose:function(){var n=arguments,r=n.length-1;return function(){for(var t=r,e=n[r].apply(this,arguments);t--;)e=n[t].call(this,e);return e}},after:function(n,r){return function(){if(--n<1)return r.apply(this,arguments)}},before:cr,once:lr,findKey:sr,findIndex:vr,findLastIndex:hr,sortedIndex:yr,indexOf:gr,lastIndexOf:br,find:mr,detect:mr,findWhere:function(n,r){return mr(n,Dn(r))},each:jr,forEach:jr,map:_r,collect:_r,reduce:Ar,foldl:Ar,inject:Ar,reduceRight:xr,foldr:xr,filter:Sr,select:Sr,reject:function(n,r,t){return Sr(n,fr(qn(r)),t)},every:Or,all:Or,some:Mr,any:Mr,contains:Er,includes:Er,include:Er,invoke:Br,pluck:Nr,where:function(n,r){return Sr(n,Dn(r))},max:Ir,min:function(n,r,t){var e,u,o=1/0,i=1/0;if(null==r||"number"==typeof r&&"object"!=typeof n[0]&&null!=n)for(var a=0,f=(n=er(n)?n:jn(n)).length;ae||void 0===t)return 1;if(t Add Rules — quark-engine v22.10.3 documentation

Add Rulesīƒ

Android malware analysis engine is not a new story. Every antivirus company has their own secrets to build it. With curiosity, we develop a malware scoring system from the perspective of Taiwan Criminal Law in an easy but solid way.

We have an order theory of criminal which explains stages of committing a crime. For example, crime of murder consists of five stages, they are determined, conspiracy, preparation, start and practice. The latter the stage the more we’re sure that the crime is practiced.

According to the above principle, we developed our order theory of android malware. We develop five stages to see if the malicious activity is being practiced. They are

  1. Permission requested.

  2. Native API call.

  3. Certain combination of native API.

  4. Calling sequence of native API.

  5. APIs that handle the same register.

We not only define malicious activities and their stages but also develop weights and thresholds for calculating the threat level of a malware.

But before we explain how to set weights and thresholds, we need to define crimes and corresponding five stages.

An example of defining crime “Send Location via SMS” is shown below. We use json format to construct the rule of the crime.

 1{
 2     "crime": "Send Location via SMS",
 3
 4     "permission": [
 5         "android.permission.SEND_SMS",
 6         "android.permission.ACCESS_COARSE_LOCATION",
 7         "android.permission.ACCESS_FINE_LOCATION"
 8     ],
 9
10     "api": [
11     {
12         "class": "Landroid/telephony/TelephonyManager",
13         "method": "getCellLocation",
14         "descriptor": "()Landroid/telephony/CellLocation;"
15     },
16     {
17         "class": "Landroid/telephony/SmsManager",
18         "method": "sendTextMessage",
19         "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V"
20     }
21     ],
22
23     "score": 4
24}

So let me walk you through the json file.

"crime": "Send Location via SMS"

First, we define the crime. Our principle of constructing a crime is Action + Target. In this example, the action is “Send SMS” and the target is Location info. Therefore, the crime of our first rule is defined as: “Send Location via SMS”.

"permission": [
      "android.permission.SEND_SMS",
      "android.permission.ACCESS_COARSE_LOCATION",
      "android.permission.ACCESS_FINE_LOCATION"
]

permission is where we fill in permission requested by the apk to practice the crime. For instance, we need permission android.permission.SEND_SMS to send information through SMS. We also need permission android.permission.ACCESS_COARSE_LOCATION and android.permission.ACCESS_FINE_LOCATION to practice the crime.

"api": [
    {
        "class": "Landroid/telephony/TelephonyManager",
        "method": "getCellLocation",
        "descriptor": "()Landroid/telephony/CellLocation;"
    },
    {
        "class": "Landroid/telephony/SmsManager",
        "method": "sendTextMessage",
        "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V"
    }
]

api means this field can be used to practice analysis from stage 2 to stage 4.

In stage 2, we need to find key native APIs that do the Action and Target. And since the API method name can be used by self-defined class. We need to fill in information of both the native API class name and method name.

Note

We like to keep our crime/rule simple. So do not fill in more than 2 native APIs.

In stage 3, we will find the combination of the native APIs we define in stage 2. Further, we will check whether they’re called in the same method. If so, we will say that the combination of crime is caught! And we don’t need to do anything to adjust the api field.

Note

We know that the native API might be wrapped in other methods. We use XREF to solve this problem.

In stage 4, we will find whether the native APIs are called in a right sequence. If so, we have more confidence that the crime is practiced.

Note

Please place the APIs in the order as the crime is being committed.

In stage 5, we will check whether the native APIs are operating the same parameter. If so, we are 100% sure that the crime is practiced.

As for the field score, we will be updating our principles of weight defining. please check that part later.

quark-engine-23.4.1/docs/build/html/coding_style.html000066400000000000000000000417401442215066700225500ustar00rootroot00000000000000 Coding Style — quark-engine v22.10.3 documentation

Coding Styleīƒ

Having a clean and structured code is very important for the sustainable development of this project. Cuckoo Sandbox is a good example. So we follow most of their style for maintaining the code base.

We do help out with code refactoring where required, but please try to do as much as possible on your own.

Essentially Quark’s code style is based on PEP 8 - Style Guide for Python Code and PEP 257 – Docstring Conventions.

Formattingīƒ

File and folder namingīƒ

All characters in the filenames or folder names should be lowercase letters.

Indentationīƒ

The code must have a 4-spaces-tabs indentation. Since Python enforce the indentation, make sure to configure your editor properly or your code might cause malfunctioning.

Maximum Line Lengthīƒ

Limit all lines to a maximum of 79 characters.

Blank Linesīƒ

Separate the class definition and the top level function with one blank line. Methods definitions inside a class are separated by a single blank line:

class MyClass:
    """Doing something."""

    def __init__(self):
        """Initialize"""
        pass

    def do_it(self, what):
        """Do it.
        @param what: do what.
        """
        pass

Use blank lines in functions, sparingly, to isolate logic sections. Import blocks are separated by a single blank line, import blocks are separated from classes by one blank line.

Importsīƒ

Imports must be on separate lines. If you’re importing multiple objects from a package, use a single line:

from lib import a, b, c

NOT:

from lib import a
from lib import b
from lib import c

Always specify explicitly the objects to import:

from lib import a, b, c

NOT:

from lib import *

Stringsīƒ

Strings must be delimited by double quotes (“).

Printing and Loggingīƒ

We discourage the use of print(): if you need to log an event please use Python’s logging which is already initialized by Quark.

In your module add:

import logging
log = logging.getLogger(__name__)

And use the log handle. More details can be found in the Python documentation, but as follows is an example:

log.info("Log message")

Exceptionsīƒ

Custom exceptions will be defined in the quark/utils/exceptions.py file.

Namingīƒ

Custom exception names must start with “Quark” and end with “Error” if it represents an unexpected malfunction.

Exception handlingīƒ

When catching an exception and accessing its handle, use as e:

try:
    foo()
except Exception as e:
    bar()

NOT:

try:
    foo()
except Exception, something:
    bar()

It’s a good practice use “e” instead of “e.message”.

Documentationīƒ

All code must be documented in docstring format, see PEP 257 – Docstring Conventions. Additional comments may be added in logical blocks to make the code easier to understand.

As for the contribution to quark rtdf. Please use make html to build the html files. And commit with rst files altogether. So that users can read docs when offline.

Automated testingīƒ

We believe in automated testing to provide high quality code and avoid easily overlooked mistakes.

When possible, all code must be committed with proper unit tests. Particular attention must be placed when fixing bugs: it’s good practice to write unit tests to reproduce the bug. All unit tests and fixtures are placed in the tests folder in the quark-engine/tests.

We have adopted Pytest as unit testing framework. Also we adopted travis ci for the continuous integration.

quark-engine-23.4.1/docs/build/html/contribution.html000066400000000000000000000276541442215066700226140ustar00rootroot00000000000000 Contribution — quark-engine v22.10.3 documentation

Contributionīƒ

Different stages of core membersīƒ

  • Contributor: As soon as you post a comment, fix a typo, ask a question or report a bug etc. , you become an active contributor.

  • Contributor followed by a mentor: Spotted active contributors can be asked to get a mentor to speedup their learning of this project.

  • Core member: Once other core members consider that a contributor is ready to be promoted, a core member opens a private vote for the candidate.

Core membersīƒ

Name

Contribution

KunYu Chen

BDFL, Project Founder, The man who runs the show

YuShiang Dang

UI/UX Team Lead, Core Developer, Rule generation system, Malware Analyst

ShengFone Lu

Core Developer, Triage Team Lead, Rizin Engine Implementation

AnWei Kung

Core Developer, Triage Team Member, Backend (database, downloader, API), Testing

Zin Wong

Triage Team Member

Zee

UI/UX Team Member

Alumniīƒ

Name

Contribution

JunWei Song

Project Co-Founder, Engine Implementation (Malware Scoring System), Frontend, Testing

ShunTe Lin

Core Developer, Triage Team Member

ChaoWen Li

Quark Community Development

Sin

Malware Analyst, Detection Rules, Engine Implementation (Malware Anti-Detection)

IokJin Sih

Malware Analyst

YunChen Liu

Artwork Design, Frontend

Consultantsīƒ

Consultant is the one who is important to this project and shows great support to our engine.

Consultant

Chun-I Fan

HY Lin

Jheng-Jia Huang

Lin Gao-Yu

Pippen Wang
quark-engine-23.4.1/docs/build/html/dev.html000066400000000000000000000230611442215066700206370ustar00rootroot00000000000000 Development Notes — quark-engine v22.10.3 documentation

Development Notesīƒ

Git Branching Modelīƒ

Quark-engine source code is available in our official Git repository.

We have 6 branches.

  • master:

    • This is the stable and releasing branch.

  • dev:

    • This is where we commit our beta version.

    • When all the features are fully tested, it will be merged to master branch.

  • feature:

    • This is where we develop new features for the project.

    • Once it’s done, it will be merged to dev branch.

  • testing:

    • This is where we write tests for the codebase and new feature.

    • When it’s done, it will be merged to dev branch.

  • hotfix:

    • This branch is used to fix bugs.

    • Will be merged to dev and master

  • doc:

    • This is where we update our documentation.

    • Just like hotfix branch, will be merged to dev and master.

Release Versioningīƒ

Our versioning logic is quite simple. We use the year and month of the release as a version number. v19.10 means we release this version in Oct. 2019.

Ticketing Systemīƒ

To submit reports or feature requests, please use GitHub’s Issue tracking system.

Contributeīƒ

To submit your patch, just create a Pull Request from your GitHub fork. If you don’t know how to create a Pull Request take a look to GitHub help.

quark-engine-23.4.1/docs/build/html/dev_index.html000066400000000000000000000201011442215066700220160ustar00rootroot00000000000000 Development — quark-engine v22.10.3 documentation
quark-engine-23.4.1/docs/build/html/genindex.html000066400000000000000000002134161442215066700216670ustar00rootroot00000000000000 Index — quark-engine v22.10.3 documentation
  • »
  • Index

Index

A | B | C | D | E | F | G | H | I | J | L | M | N | O | P | Q | R | S | T | U | V | W | Y

A

B

C

D

E

F

G

H

I

J

L

M

N

O

P

Q

R

S

T

U

V

W

Y

quark-engine-23.4.1/docs/build/html/index.html000066400000000000000000000374771442215066700212100ustar00rootroot00000000000000 Quark-Engine Book — quark-engine v22.10.3 documentation

Quark-Engine Bookīƒ

Quark Engine is an open source software for automating analysis of suspicious Android application. To do so it makes use of custom Dalvik Bytecode Loader and unique scoring system that detect malicious behaviors and calculate threat level within seconds.

This guide will explain how to set up Quark, use it, and customize it.

Contents:

Indices and tablesīƒ

quark-engine-23.4.1/docs/build/html/install.html000066400000000000000000000207711442215066700215340ustar00rootroot00000000000000 Installing Quark-Engine — quark-engine v22.10.3 documentation

Installing Quark-Engineīƒ

PyPi:

$ pip3 install -U quark-engine

Install from Source:

$ git clone https://github.com/quark-engine/quark-engine.git
$ cd quark-engine/
$ pipenv install --skip-lock
$ pipenv shell

Run the help cmd of quark:

$ quark --help

Once you see the following msg, then you’re all set:

Usage: quark [OPTIONS]

  Quark is an Obfuscation-Neglect Android Malware Scoring System

Options:
  -s, --summary TEXT              Show summary report. Optionally specify the
                                  name of a rule/label
  -d, --detail TEXT               Show detail report. Optionally specify the
                                  name of a rule/label
  -o, --output FILE               Output report in JSON
  -a, --apk FILE                  APK file  [required]
  -r, --rule PATH                 Rules directory  [default:
                                  /Users/$USER/.quark-engine/quark-rules]
  -g, --graph                     Create call graph to call_graph_image
                                  directory
  -c, --classification            Show rules classification
  -t, --threshold [100|80|60|40|20]
                                  Set the lower limit of the confidence
                                  threshold
  -i, --list [all|native|custom]  List classes, methods and descriptors
  -p, --permission                List Android permissions
  -l, --label [max|detailed]      Show report based on label of rules
  -C, --comparison                Behaviors comparison based on max confidence
                                  of rule labels
  --core-library [androguard|rizin]
                                  Specify the core library used to analyze an
                                  APK
  --multi-process INTEGER RANGE   Allow analyzing APK with N processes,
                                  where N doesn't exceeds the number of usable CPUs - 1
                                  to avoid memory exhaustion.
  --version                       Show the version and exit.
  --help                          Show this message and exit.

To learn how to scan multiple samples in a directory, please have a look at Directory Scanning

quark-engine-23.4.1/docs/build/html/objects.inv000066400000000000000000000074711442215066700213510ustar00rootroot00000000000000# Sphinx inventory version 2 # Project: quark-engine # Version: # The remainder of this file is compressed using zlib. xÚŊ[sŖ8€ßķ+¨Ú}mjgwfkk߇t{Įą3ļĶ=ũ¤R@ļ5D pÚũëW7@؀Aˆ~I č|Gčrt;ßrHߜäü߈yˆœ8ßø÷˜EáßäŊw>ÜÉģ~ˆ‡„uķ$€”=¯ų~(ßįąŸa;ŋčM’Ä{|č¯ˆPÔ˜ßîpa ÃsŠĶĸîüŪLų!LĶōŊ*N/€ëÃ0 “#(B€§'Ã,Ŗø5Ī9=D0Ĩy(ˆʎ$0ĮQ! ”ũHDvZ‰åĶ40ÁvpĨ„ŋsB¨ĨT á+ dđ5D–¸čĸŋhųc‹ųĪ ˜˙š€ųëĖßŦ2HQœwVCDAÄūáø`‡ō‡ Í#K8ÄŦh`¯ąˆEž'(øīŽŲ˜7Į1Î@sŊŧjjzŌŠ˛ėlÄIŪpŧ'&­Š”tgq@ɁŨQ2¤Qi’w!‹÷ g‰ö)Ą„•ÜėlLc ”l7ėā´ĻsHΡĀØeŪNä’7+ņōķ4#‘Íd `xÂo§hOh3+‘Ücf-T`Hß v@™b×sÆ,Q€ė@Sö–ņ!ĩ+ĖxAÕ­… É;ĸÜNŒGąXE8M™ŊąR\ŌüU˜fCČ­Xzĉ%2ŸˆķĖœžßŖ"ȁF“ŽBtÚâ*Ԍũôžû¨ėãĸōâ—.p7qSF˛Áē› Ä]â¨=ņ¸{Ėopy,ÍVk•6FKSaË9ŖoPú†9] k2ØŅc!ûÄ4želvN,OEŪØ@AE,Įfˇ†sw_Ÿ=0Ûí6‹û—7A„Ĩ†‡Å“ˇÚ.ÖĢé4|]͞ķŸņ.JĶÆ{ô6Ūj>ĻĮÅfģķõrŊ‹Õnb=“jXŽgŌ7ŗųnĘÂŒܯ×Ko6­™ÕŗÍĮû_’ž˙ü=?éu&›o>)˙“÷įdüåė§XĄfJĢ—år2øô}˧ÕGs<Ž36ĒQũŸĻņI kxRz…)ē1ådNtīŲīYEočˇ\Ā‡R{MOÖŅgŌj´’^ŗOŖĩ$o€ČntĖmŠI`vœP˜ōņ+…ô<Ĩšžpcõč3†îĄøx 7įĮĒ0;hCՍ9C+*Ô۔FŦ÷ŒåXE7į1Į*ˆ‚ßĻKĻ^S§c•P–7fÆĒ>ŗ:VãÍųÖn ¤ŦEᡇ’[Ģ_5y÷Y]ũQĐzŽuPXŖ–„gá‹2hĄ é‡$Eļ`4‡ LZūš°š” ƒ@ŽŒJŪGYAü#ōßO&­ĻëĮc‰AĘĖ=‹ÛđÅŦ.Ž¤ãh)ú–ŖØGĻŅ6ŗū%ČSxGu9E~ąĻa J(:a’§#“û€bDšĢ؅ŋŽ+ŗQ]ŠüœĻø„XöAęMq&ĩ[‰ĻGō*ß°Q˜e‡#“Ft‡‹Q á(ĖŪcŽ)’‚WwU‚ĸ?ĖŊ7JYwƒāxY¸2æũq-lėúŅ„2õûhbûi4Áú ˆŌnŒ{{ŌzoûŌF¸‘4ā >H#Ŋ=ZˆŽ-$c?ž‘“GĮØÃŖÕc4Ō“dÃQ¤kÃK¤lä" Vîgm^>í2ô*DQÔÉë_Č:ÎŊW—ë’ŪĐ čpĒÅ("1öÛķaŦ†Z÷~pĘ;ŗcTȲc)+u˜û$.Ffc+‘5ņ>bÕjÂC—åūžĖ(ļ0 7Úî1 Ší „N¤`ŸŗžQ÷¤īŽâéčĸß­†'8˛;”œ§ĶRēzãYqļUüK”ģa?Įû&šĢ,ÉøˇÕĄrŠ g(gMšá|¯™ũ8‹qFš}ĐČ°6ƒÅ܈ũøVŖûl1 Ķc$mĘ/ĶŲ4ÚbÆŲR-ĶXîŽ˙YĪZxĸ€ąÛå&Nŗ2ÖE/w(ŲE‹6äÖ&/s<ŽSD'H‘„$àˆÛ~¨ē‡EĒ|ÖR Ēįə˙ļ€pŸĪž"ÕËáč&Á}ôvā÷ÅęĄ!=Ė`_ž=âķËÎ.ĖjôîĢõŗ5ڜûÔqī1+°õjģŗķålģĩ‡{\ŋlėŅ>->~Ú.ūÜyŪĘÔ>°t ´Ãã%Ų.mš„äi¨ģO‹Íî+Ø}YÛ?.–KīŦŧ/`ļŲĖžZĢ؋Õįõī˜ŋlwë'‹Ā‡Åƛī,ĢˇyœÍ=‹ĖįõōëĶzķüi1ˇHŨîf;ģĀ—goc‘÷™•Ė—ŲŌ>lfĢV2čiũŲ^S(`oû˛ÜYƁõũ˙,sjË|Žŧ`ļbfcm¯§Rš [°3™ŗ•z­­ã%ŦĮhlƒ*–äÛF)ũi!9ZNj…ėYŋ?NåúÆEĮŧxÔŌ//[D¸ĢŪģ¯Ŗú0ĂŧļDz=B3aļx`Āģ{ëqŧČ{Shįt¸!”ûDūûW{<ŸÄŠ3{@>1c†{Ŧœ†&°S:āę[ˇ4Šûy×~אčh y>Éĸ<Ė°q&܀+EËt˙ãî‚očlĖ'zĀÄa‹u7Õ Ēšä§mSgcØâDå…n+ũÍR‹TŠ2Š¸ëaĢ+›)9õalģÄĨˆŸ›DĨƒ…?~t a%âä= úœ+¨‰1ãLĪ !Xé[’Ŧ÷AzĮŽ.%n‘) 0áÍ…iÖ[EMĘŨđĢšÆ¨ŋ.uŲĘ —Īá7äáT÷ŲKhUÖ{%…înJŠî—×C׏€ėŠBŽĒí=$YtU˛Ž­Ŋ^Ģ&&R>Ö(Ũ¯Ų%=4—ĨECĖ僖PgŌõ|e]ēUŒ/D,D_ę‡ÍÛúqpę}į†‚Ąˆ{t„'LčĀ7(Äxa‘ėEf´ą+ÜÄ7ŒDŸÛļ"ôðŨļĶ›đŌØëë'ŽS– ”DOmŪ§œ´‡Ŧ;ÆË4kqæJĨr°tVZĩų;ô!ÔŊ‘ŒÜßhTX)bɟGŦJ .CâOŠö< ĮvÄP^Š˜ĨƒØ)°)OP4I÷U•æĩĪÚˇĨęŖGDxcËw[Äsî4ØŌé4žĮa¸mzÉX™æw+lx֛Ux'G5üŪxIa9♇Ŧ˙˛Cߛû‹qĐ3wöüģ€âļŋƒxÜũ&2ČÍĻL#Ũ@ôn {´LÃh­ÔmÔ#˙{ÃR ĸ ŗˇŅ˛Pq{᝘=Āi3VZĮdp+“%h„h“,§(OĮ¤nģĸ4ƒ4ûÂ/XY¨‚MĨŒ$vuŅ<yū‰ˇŽēŪEâŧļ{k˜ÁŽ1Íã>†¯”w×:i€Ũm ¸G– f}žŠÆF›'VY$fG*{1,X]Ũ?Œg8L “WČĘ~°čˆíhŽÄ MĩÄ6k–Ī|:FÔ} Ąß\Ē5DĢlËkö%a`(*ū‘e]nm´oB9ÃØPô@2• ųšę#Ō\ȟQĘMū„X醆Ō™fųûgĻomöÂÕÆėĄõJHēõŨŨƒ5ģ) ™T{˛™IÉ 1b§9‰H1ßA?"FŎːũ<Ę y–ä™Q‚JQ9GwŊŗ‡äúÔW €Y"u#ųņv‰í_2č@& UäƒsAŠēâ/@”7Á5Bą)ߐæb§Ü(Æ;¤q[oã6Ã((:Čm<ƒ3@HēlŧJĄ_[Ŧž„ëE朌“W‹ÍÃ'bņ)ĒjĨ'5(O ƒ÷É1ėü IŪÎ ŽS#ŊÚ &ȈôÅöƒęSÃĄ{1ĩ/–|_ĪōpV`ķØ'–‹)N°§$*/š;Š9TÚÔ#Ę°_T(Ãd¤("'‚<)ס‡@ä'sŒ u—Ūgo ĢĮõõ¸îĻbMÚũÄn4; Â,×_,PžH ļLQ_Ętš"R’wãü Search — quark-engine v22.10.3 documentation
  • »
  • Search
quark-engine-23.4.1/docs/build/html/searchindex.js000066400000000000000000003461451442215066700220410ustar00rootroot00000000000000Search.setIndex({"docnames": ["addRules", "coding_style", "contribution", "dev", "dev_index", "doc", "faq", "index", "install", "install_index", "integration", "modules", "organization", "quark", "quark.core", "quark.core.axmlreader", "quark.core.interface", "quark.core.struct", "quark.evaluator", "quark.forensic", "quark.script", "quark.script.frida", "quark.utils", "quark.webreport", "quark_inside_index", "quark_inside_objects", "quark_inside_overview", "quark_inside_workflow", "quark_mit_program", "quark_reports", "quark_script", "rule_generation", "testing"], "filenames": ["addRules.rst", "coding_style.rst", "contribution.rst", "dev.rst", "dev_index.rst", "doc.rst", "faq.rst", "index.rst", "install.rst", "install_index.rst", "integration.rst", "modules.rst", "organization.rst", "quark.rst", "quark.core.rst", "quark.core.axmlreader.rst", "quark.core.interface.rst", "quark.core.struct.rst", "quark.evaluator.rst", "quark.forensic.rst", "quark.script.rst", "quark.script.frida.rst", "quark.utils.rst", "quark.webreport.rst", "quark_inside_index.rst", "quark_inside_objects.rst", "quark_inside_overview.rst", "quark_inside_workflow.rst", "quark_mit_program.rst", "quark_reports.rst", "quark_script.rst", "rule_generation.rst", "testing.rst"], "titles": ["Add Rules", "Coding Style", "Contribution", "Development Notes", "Development", "Updating Documentation", "FAQ", "Quark-Engine Book", "Installing Quark-Engine", "Installation", "Integration", "quark", "Organization", "quark package", "quark.core package", "quark.core.axmlreader package", "quark.core.interface package", "quark.core.struct package", "quark.evaluator package", "quark.forensic package", "quark.script package", "quark.script.frida package", "quark.utils package", "quark.webreport package", "Quark-Engine Inside", "Quark-Engine Objects Introduction", "Quark-Engine Project Overview", "Quark-Engine Workflow", "Quark MIT Program", "Quark Report", "Quark Script", "Rule Generation", "Testing Quark-Engine"], "terms": {"android": [0, 7, 8, 10, 14, 15, 16, 19, 22, 25, 26, 27, 29], "malwar": [0, 2, 8, 10, 22, 27, 29, 30, 31, 32], "analysi": [0, 7, 10, 11, 13, 18, 27, 29], "engin": [0, 1, 2, 3, 5, 9, 10, 13, 17, 28, 29], "i": [0, 1, 2, 3, 7, 8, 10, 12, 13, 14, 16, 17, 20, 21, 23, 25, 26, 27, 28, 29, 31, 32], "new": [0, 3, 6, 28], "stori": 0, "everi": [0, 28], "antiviru": 0, "compani": 0, "ha": [0, 20, 27, 30], "own": [0, 1, 30], "secret": 0, "build": [0, 1, 5, 10, 28, 31, 32], "With": [0, 25, 29], "curios": 0, "we": [0, 1, 3, 5, 6, 10, 17, 25, 27, 28, 29, 30, 31, 32], "develop": [0, 1, 2, 6, 7], "score": [0, 2, 7, 8, 10, 14, 17, 24, 25, 26, 30, 31], "system": [0, 2, 4, 7, 8, 26], "from": [0, 1, 3, 8, 10, 13, 14, 16, 17, 20, 21, 22, 25, 26, 27, 30, 31], "perspect": 0, "taiwan": 0, "crimin": 0, "law": 0, "an": [0, 1, 2, 7, 8, 12, 17, 20, 22, 25, 27, 30, 31, 32], "easi": [0, 7, 30], "solid": 0, "wai": [0, 6, 10, 30, 31], "have": [0, 1, 3, 7, 8, 17, 25, 27, 30], "order": [0, 17, 25, 27, 31], "theori": [0, 14], "which": [0, 1, 14, 17, 19, 20, 25, 27, 29, 30], "explain": [0, 4, 6, 7, 9, 24], "stage": [0, 7, 13, 14, 17, 24, 26, 27, 30], "commit": [0, 1, 3], "crime": [0, 10, 14, 17, 23, 25, 27, 29, 30, 31], "For": [0, 10, 17, 27, 28, 31, 32], "exampl": [0, 1, 10, 17, 25, 27, 30, 31, 32], "murder": 0, "consist": 0, "five": [0, 14, 17, 24, 26, 27], "thei": [0, 12, 25], "ar": [0, 1, 3, 6, 12, 13, 20, 25, 27, 28, 30], "determin": [0, 12], "conspiraci": 0, "prepar": 0, "start": [0, 1, 21, 25, 27], "practic": [0, 1, 17, 30], "The": [0, 1, 2, 6, 10, 12, 13, 17, 25, 26, 27, 30, 31], "latter": 0, "more": [0, 1, 12, 22, 28, 29], "re": [0, 1, 6, 8], "sure": [0, 1, 30], "accord": [0, 13, 14, 16, 17, 25, 27, 31], "abov": [0, 23, 25, 27, 30], "principl": [0, 25, 27, 31], "our": [0, 2, 3, 6, 13, 25, 26, 27, 28, 29], "see": [0, 1, 8, 27, 29, 30], "malici": [0, 7, 25, 27], "activ": [0, 2, 13, 14, 16, 20, 30], "being": [0, 25], "permiss": [0, 1, 8, 10, 13, 14, 16, 17, 25, 27, 30], "request": [0, 3, 6, 17, 27, 30], "nativ": [0, 8, 10, 14, 16, 17, 22, 25, 27, 31], "api": [0, 2, 7, 10, 13, 14, 16, 17, 19, 20, 21, 22, 25, 27], "call": [0, 7, 8, 10, 14, 17, 18, 20, 21, 22, 25, 27, 30, 31], "certain": [0, 27], "combin": [0, 10, 27, 31], "sequenc": [0, 10, 27], "handl": [0, 4, 12, 27], "same": [0, 7, 14, 25, 27, 30], "regist": [0, 10, 14, 17, 20, 25, 27], "onli": [0, 14, 16, 29, 30], "defin": [0, 1, 6, 12, 14, 16, 17, 20, 25, 26, 27, 31], "also": [0, 1, 6, 27, 29, 30, 32], "weight": [0, 7, 10, 11, 13, 14, 17, 24, 25, 26], "threshold": [0, 7, 8, 14, 27], "calcul": [0, 7, 13, 17, 22, 24, 26], "threat": [0, 7], "level": [0, 1, 7, 14, 24], "But": 0, "befor": [0, 14, 30], "how": [0, 3, 4, 7, 8, 9, 24, 29, 30], "set": [0, 7, 8, 13, 14, 16, 17, 19, 22, 23, 27, 30, 31], "need": [0, 1, 6, 14, 28], "correspond": [0, 14, 15, 16, 17, 21, 25, 26, 32], "send": [0, 10, 21, 25, 27, 28, 30], "locat": [0, 10, 14, 16, 27, 30], "via": [0, 10, 27], "sm": [0, 10, 27], "shown": [0, 22], "below": [0, 12, 25, 27, 28, 29, 31], "us": [0, 1, 3, 7, 8, 10, 13, 14, 17, 21, 22, 25, 26, 27, 31, 32], "json": [0, 8, 10, 13, 14, 17, 23, 24, 25], "format": [0, 4, 13, 14, 25, 29], "construct": 0, "send_sm": [0, 10, 27], "access_coarse_loc": [0, 10, 27], "access_fine_loc": [0, 10, 27], "class": [0, 1, 8, 10, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 27, 30], "landroid": [0, 10, 25, 27, 30], "telephoni": [0, 10, 27], "telephonymanag": [0, 10, 27], "method": [0, 1, 8, 10, 13, 14, 16, 17, 18, 20, 21, 22, 25, 27, 31], "getcellloc": [0, 10, 22, 27], "descriptor": [0, 8, 10, 13, 14, 16, 17, 18, 20, 22, 30], "cellloc": [0, 10], "smsmanag": [0, 10, 27], "sendtextmessag": [0, 10, 22, 27], "ljava": [0, 10, 14, 16, 30], "lang": [0, 10, 14, 16, 30], "string": [0, 4, 10, 13, 14, 16, 17, 18, 19, 20, 21, 22, 23, 25, 30], "app": [0, 10, 21, 25, 30, 32], "pendingint": [0, 10, 25], "v": [0, 6, 10, 25, 30, 31, 32], "4": [0, 1, 10, 15, 17, 24], "so": [0, 1, 7, 26, 27], "let": [0, 10, 30, 31, 32], "me": 0, "walk": 0, "you": [0, 1, 2, 3, 5, 6, 7, 8, 13, 25, 27, 29, 30, 31, 32], "through": [0, 20, 27, 30], "file": [0, 4, 5, 6, 8, 10, 13, 14, 15, 16, 17, 19, 20, 21, 25, 26, 27, 31], "first": [0, 6, 7, 14, 16, 27, 29, 30], "action": [0, 17, 29], "target": [0, 10, 13, 17, 20, 21, 30, 31], "In": [0, 1, 10, 25, 27, 30], "thi": [0, 1, 2, 3, 4, 6, 7, 8, 9, 13, 14, 17, 20, 23, 24, 25, 27, 28, 29, 30, 31, 32], "info": [0, 1, 12], "therefor": [0, 25], "where": [0, 1, 3, 7, 8, 14], "fill": 0, "apk": [0, 7, 8, 10, 13, 14, 16, 17, 19, 20, 22, 24, 25, 26, 29, 31, 32], "instanc": [0, 14, 16, 17, 20, 21, 25, 30], "inform": [0, 6, 12, 14, 17, 20, 23, 24, 25, 26, 30, 31], "mean": [0, 3], "field": [0, 15, 27], "can": [0, 1, 2, 5, 7, 10, 25, 26, 27, 29, 30, 31], "2": [0, 10, 13, 15, 17, 22, 24, 31], "find": [0, 13, 14, 16, 20, 25, 27, 28, 30], "kei": [0, 17, 28], "do": [0, 1, 7, 10, 17], "And": [0, 1, 12, 28, 31], "sinc": [0, 1, 6, 25], "name": [0, 2, 4, 8, 14, 15, 16, 17, 18, 20, 21, 25, 26, 27, 30, 31], "self": [0, 1, 14, 16, 25, 26, 27], "both": [0, 25, 28, 30], "like": [0, 3, 5, 6, 10, 25, 27, 30, 31], "keep": [0, 7, 30, 31], "simpl": [0, 3, 10, 30], "than": [0, 12, 26], "3": [0, 13, 15, 17, 24], "further": [0, 27], "check": [0, 6, 13, 14, 20, 21, 24, 25, 29, 30], "whether": [0, 25, 27], "If": [0, 1, 3, 5, 6, 12, 27, 30], "sai": 0, "caught": 0, "don": [0, 3], "t": [0, 3, 8, 12, 25, 32], "anyth": 0, "adjust": [0, 6], "know": [0, 3, 10, 25, 27, 31], "might": [0, 1], "wrap": 0, "other": [0, 2, 12, 25, 30, 31], "xref": [0, 14, 16], "solv": 0, "problem": [0, 6, 12], "right": 0, "confid": [0, 8, 10, 14, 17, 22, 23, 27, 29], "pleas": [0, 1, 3, 6, 8, 27, 29, 30], "place": [0, 1], "5": [0, 15, 22, 24, 28, 31], "oper": [0, 25], "paramet": [0, 13, 14, 15, 16, 17, 18, 20, 21, 22, 23, 25, 30, 31], "100": [0, 8, 10, 23, 29, 31], "As": [0, 1, 2, 7, 25, 27], "updat": [0, 3, 6, 7], "part": [0, 1, 7, 20, 21, 26, 30], "later": 0, "clean": [1, 5], "structur": [1, 22, 26], "veri": [1, 30], "sustain": 1, "project": [1, 2, 3, 7, 24], "cuckoo": 1, "sandbox": 1, "good": 1, "follow": [1, 2, 5, 6, 8, 27, 29, 31], "most": [1, 12, 28], "maintain": 1, "base": [1, 7, 8, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 25, 27, 30, 31], "help": [1, 3, 5, 8, 27, 28], "out": [1, 6, 20, 25, 30], "refactor": 1, "requir": [1, 7, 8, 12, 14, 25], "try": [1, 6], "much": 1, "possibl": [1, 6, 15, 19, 29], "your": [1, 3, 6, 28, 29, 30], "essenti": 1, "quark": [1, 2, 3, 4, 5, 9, 10, 31], "": [1, 3, 4, 6, 8, 9, 12, 14, 25, 27, 29, 30, 31, 32], "pep": 1, "8": [1, 15, 30], "guid": [1, 7], "python": [1, 6, 10, 13, 15, 20, 21, 22, 25, 26, 30], "257": 1, "docstr": 1, "convent": 1, "all": [1, 3, 7, 8, 12, 13, 14, 15, 16, 17, 19, 20, 21, 22, 23, 25, 26, 27, 28, 30, 31], "charact": 1, "filenam": [1, 14, 16, 19, 23], "should": [1, 12, 30], "lowercas": 1, "letter": 1, "exist": [1, 6, 30], "sourc": [1, 3, 5, 7, 8], "http": [1, 6, 8, 13, 17, 30, 32], "rtfd": 1, "io": [1, 30], "gplv3": 1, "copi": [1, 30], "must": [1, 25], "space": 1, "tab": 1, "enforc": 1, "make": [1, 5, 6, 7, 30], "configur": [1, 30], "editor": [1, 7, 13], "properli": 1, "caus": [1, 6, 30], "malfunct": 1, "limit": [1, 8], "79": [1, 7], "separ": [1, 22, 31], "definit": 1, "top": [1, 14, 17, 25], "function": [1, 13, 14, 16, 17, 24, 26, 27, 29, 30], "one": [1, 2, 6, 12, 25, 29, 32], "insid": [1, 5, 7, 10, 19, 20, 30], "singl": [1, 13, 25, 29, 30], "myclass": 1, "someth": 1, "def": [1, 27], "__init__": 1, "initi": [1, 12, 25, 27], "pass": [1, 20, 25, 30], "do_it": 1, "what": [1, 7, 25, 27], "param": [1, 14, 16, 20, 22, 23, 27, 30], "sparingli": 1, "isol": 1, "logic": [1, 3], "section": 1, "block": 1, "multipl": [1, 8, 10, 22, 25], "object": [1, 7, 11, 13, 14, 15, 16, 17, 18, 19, 21, 22, 23, 24, 27], "packag": [1, 6, 7, 11, 30], "lib": 1, "b": [1, 10, 30], "c": [1, 8, 25, 29, 30], "NOT": 1, "alwai": 1, "specifi": [1, 6, 8, 10, 13, 21, 22, 27, 30, 31], "explicitli": 1, "delimit": 1, "doubl": 1, "quot": 1, "discourag": 1, "event": [1, 21, 25, 26], "alreadi": 1, "modul": [1, 7, 11, 24, 25, 27], "add": [1, 6, 7, 29], "getlogg": 1, "__name__": 1, "detail": [1, 6, 7, 8, 14, 24, 25, 28, 30], "found": [1, 6, 22, 27, 30], "messag": [1, 8, 15, 22, 28], "custom": [1, 7, 8, 14, 16, 25, 26, 27, 30], "util": [1, 11, 13, 24, 27, 30], "py": 1, "end": [1, 27], "error": [1, 7], "repres": [1, 14], "unexpect": 1, "when": [1, 3, 12, 25, 26, 30, 32], "catch": [1, 30], "access": 1, "its": [1, 30], "e": [1, 30], "foo": 1, "bar": 1, "It": [1, 10, 13, 25, 31], "instead": 1, "addit": 1, "comment": [1, 2], "mai": [1, 6, 14, 20, 25, 30, 32], "ad": [1, 6], "easier": 1, "understand": [1, 6], "contribut": [1, 4, 7, 9, 28], "rtdf": 1, "html": [1, 5, 13, 23, 29, 30, 31], "rst": 1, "altogeth": 1, "user": [1, 5, 6, 8, 13, 22, 30], "read": [1, 5, 25], "doc": [1, 3, 5], "offlin": [1, 5], "believ": [1, 28], "provid": [1, 13, 29, 30], "high": [1, 10, 13, 22, 27], "qualiti": 1, "avoid": [1, 8], "easili": [1, 10, 29, 31], "overlook": 1, "mistak": 1, "proper": 1, "unit": 1, "particular": 1, "attent": 1, "fix": [1, 2, 3], "bug": [1, 2, 3], "write": [1, 3, 4, 7, 9, 30], "reproduc": [1, 12], "fixtur": 1, "adopt": 1, "pytest": 1, "framework": 1, "travi": 1, "ci": 1, "continu": 1, "integr": [1, 7, 30], "contributor": 2, "soon": [2, 6], "post": [2, 6], "typo": [2, 12], "ask": [2, 7, 12], "question": [2, 7], "report": [2, 3, 7, 8, 10, 11, 14, 23, 24, 25, 31], "etc": 2, "becom": [2, 25], "mentor": 2, "spot": [2, 30], "get": [2, 10, 14, 15, 17, 20, 21, 22, 23, 25, 27, 28, 29, 30], "speedup": 2, "learn": [2, 8, 30], "onc": [2, 3, 8, 25, 30], "consid": [2, 20, 25, 27, 30], "readi": [2, 30, 32], "promot": 2, "open": [2, 7, 30], "privat": 2, "vote": 2, "candid": 2, "kunyu": 2, "chen": 2, "bdfl": 2, "founder": 2, "man": 2, "who": [2, 13, 20, 30], "run": [2, 8, 9, 10, 13, 14, 20, 25, 27], "show": [2, 8, 14, 20, 22, 25, 30], "yushiang": 2, "dang": 2, "ui": 2, "ux": 2, "team": [2, 7], "lead": 2, "rule": [2, 7, 8, 10, 13, 17, 20, 22, 23, 24, 25, 26, 32], "gener": [2, 5, 7, 10, 11, 12, 13, 14, 16, 22, 25, 29, 30], "analyst": 2, "shengfon": 2, "lu": 2, "triag": [2, 7], "rizin": [2, 8], "implement": [2, 25, 27, 30], "anwei": 2, "kung": 2, "backend": 2, "databas": [2, 30], "download": [2, 11, 13], "test": [2, 3, 4, 7, 9, 12, 14, 30], "zin": 2, "wong": 2, "zee": 2, "junwei": 2, "song": 2, "co": 2, "frontend": 2, "shunt": 2, "lin": 2, "chaowen": 2, "li": 2, "commun": [2, 7, 12], "sin": 2, "detect": [2, 7, 20, 21], "anti": 2, "iokjin": 2, "sih": 2, "yunchen": 2, "liu": 2, "artwork": 2, "design": [2, 25, 30], "import": [2, 4, 10, 12, 28, 30, 31], "great": 2, "support": 2, "chun": 2, "fan": 2, "hy": 2, "jheng": 2, "jia": 2, "huang": 2, "gao": 2, "yu": 2, "pippen": 2, "wang": 2, "code": [3, 4, 7, 9, 14, 16, 25, 26], "avail": 3, "offici": 3, "repositori": [3, 6], "6": [3, 15, 24, 28, 30], "master": [3, 17], "stabl": 3, "dev": 3, "beta": [3, 30], "featur": [3, 6, 10, 31], "fulli": 3, "merg": [3, 12], "done": [3, 10], "codebas": 3, "hotfix": 3, "Will": 3, "document": [3, 4, 6, 7], "just": [3, 10, 12, 28, 31], "quit": 3, "year": 3, "month": [3, 12, 28], "number": [3, 6, 8, 13, 14, 15, 16, 17, 22, 23, 25, 31], "v19": 3, "10": [3, 10, 21, 22, 30], "oct": 3, "2019": 3, "To": [3, 5, 7, 8, 10], "submit": 3, "github": [3, 6, 8, 12, 13, 17, 30, 32], "issu": [3, 6, 12], "track": [3, 14, 17, 21, 25, 26, 30], "patch": 3, "creat": [3, 8, 12, 25, 27, 28, 30], "pull": [3, 6], "fork": 3, "take": [3, 7, 25, 27, 31], "look": [3, 8, 25, 30], "chapter": [4, 9, 24], "note": [4, 7, 29], "git": [4, 8, 32], "branch": 4, "model": 4, "releas": [4, 30], "version": [4, 6, 8, 12, 30], "ticket": 4, "style": [4, 7], "folder": [4, 6, 26, 27], "copyright": 4, "header": [4, 15, 22], "indent": 4, "maximum": [4, 13, 14], "line": [4, 13, 24, 25], "length": 4, "blank": 4, "print": [4, 10, 26, 30], "log": 4, "except": [4, 15], "autom": [4, 7], "want": [5, 6, 10, 13, 25, 27, 29, 31], "refer": [5, 6, 27], "command": [5, 6, 13, 24, 25, 29, 30, 31, 32], "reserv": 5, "after": [5, 14, 25, 27], "edit": [5, 30, 31], "would": [5, 6, 17, 27], "modifi": 5, "type": [5, 6, 14, 15, 17, 21, 22, 30], "automat": 5, "directori": [5, 7, 8, 13, 26, 27, 30, 31], "auto": 5, "gen": 5, "sphinx": 5, "apidoc": 5, "o": [5, 8, 10, 30], "f": [5, 30], "welcom": 6, "telegram": 6, "ll": [6, 30], "best": 6, "answer": [6, 30], "instant": 6, "focus": 6, "about": [6, 12, 14, 17, 25], "person": 6, "them": [6, 13, 25, 30], "privaci": 6, "pip3": [6, 8, 10, 30], "instal": [6, 7], "upgrad": 6, "freshquark": [6, 11], "inspect": [6, 24], "misspel": 6, "here": [6, 10, 25, 29, 30, 31], "two": [6, 12, 14, 16, 17, 20, 25, 27, 30, 31], "common": 6, "occur": 6, "those": [6, 29], "happen": 6, "too": 6, "argument": [6, 13, 20, 22, 30], "239": 6, "usual": [6, 25], "outdat": 6, "relat": [6, 25], "still": 6, "237": 6, "path_to_the_rul": [6, 29], "input": [6, 20, 30, 31], "current": [6, 17, 25], "select": [6, 22, 29, 31], "default": [6, 8, 14, 16, 20, 21, 22, 29, 30], "path": [6, 8, 13, 14, 19, 29, 30, 31], "home": [6, 29], "video": 6, "youtub": 6, "www": 6, "com": [6, 8, 13, 17, 30, 32], "watch": 6, "soh4eqrv9_g": 6, "valu": [6, 14, 15, 17, 20, 21, 22, 23, 25, 30, 31], "themselv": 6, "experi": 6, "introduct": [6, 7, 24], "feel": 6, "free": 6, "appreci": 6, "That": [6, 30], "big": 6, "ye": [6, 30], "anyon": 6, "interest": 6, "join": [6, 28, 30], "softwar": 7, "suspici": 7, "applic": 7, "dalvik": [7, 17, 24, 26, 27], "bytecod": [7, 14, 16, 17, 24, 26, 27], "loader": [7, 24, 26], "uniqu": 7, "behavior": [7, 8, 10, 13, 20, 21, 25, 27, 30, 31], "within": [7, 12], "second": [7, 14, 16, 21, 27, 29, 30], "up": [7, 10, 14, 27, 31], "script": [7, 10, 11, 13, 23], "ecosystem": 7, "mobil": 7, "secur": 7, "tool": [7, 11, 13, 26], "quickstart": 7, "introduc": 7, "analyz": [7, 8, 29], "real": [7, 29], "case": 7, "instasteal": 7, "cwe": 7, "798": 7, "ovaa": 7, "94": 7, "921": 7, "312": 7, "89": 7, "androgoat": 7, "926": 7, "dvba": 7, "749": 7, "mstg": 7, "java": 7, "532": 7, "780": 7, "319": 7, "327": 7, "injuredandroid": 7, "20": [7, 8, 13, 22, 31], "diva": 7, "vuldroid": 7, "mit": 7, "program": [7, 25, 27], "better": 7, "minumum": 7, "contact": 7, "u": [7, 8, 10], "intuit": 7, "summari": [7, 8, 14, 23, 24, 25], "web": [7, 13, 23, 30], "label": [7, 8, 12, 14, 17, 22, 23, 30, 31], "comparison": [7, 8], "radar": [7, 22, 23], "chart": [7, 22, 23], "graph": [7, 8, 11, 13], "classif": [7, 8], "cli": [7, 11, 27], "usag": [7, 8, 10, 12, 13, 14, 17, 25], "tutori": [7, 30], "radiocontrast": [7, 11], "step": [7, 24, 28, 31], "snippet": 7, "go": 7, "scan": [7, 8], "differ": [7, 20, 21, 27, 29, 30, 31], "core": [7, 8, 11, 13], "member": [7, 12, 28], "alumni": 7, "consult": 7, "organ": 7, "workflow": [7, 24], "overview": [7, 24, 31], "faq": 7, "some": [7, 30, 32], "got": 7, "while": [7, 17, 25, 27], "work": [7, 24, 28], "why": 7, "analys": 7, "my": 7, "index": [7, 15, 17, 20, 22, 25, 30], "search": [7, 13, 14, 31], "page": [7, 30], "pypi": [8, 12], "clone": [8, 32], "cd": [8, 32], "pipenv": 8, "skip": 8, "lock": 8, "shell": 8, "cmd": 8, "msg": 8, "option": [8, 14, 16, 17, 20, 29], "obfusc": 8, "neglect": 8, "text": [8, 17, 22, 30], "d": [8, 10, 27, 29, 30], "output": [8, 10, 11, 13, 25, 26, 29, 31], "r": [8, 27, 30], "g": [8, 29, 30], "call_graph_imag": 8, "80": [8, 31], "60": 8, "40": 8, "lower": 8, "list": [8, 13, 14, 15, 16, 17, 19, 20, 21, 25, 27, 30], "p": [8, 31], "l": [8, 29], "max": [8, 14, 22, 29], "librari": [8, 13], "androguard": [8, 13, 14, 19, 25, 27], "multi": 8, "process": 8, "integ": [8, 17], "rang": [8, 10, 27], "allow": [8, 22], "n": [8, 30], "doesn": 8, "exce": 8, "usabl": 8, "cpu": [8, 25, 26], "1": [8, 12, 13, 14, 15, 17, 24, 28], "memori": 8, "exhaust": 8, "exit": 8, "sampl": [8, 10, 20, 23, 29, 31, 32], "docker": 9, "present": [10, 14, 27], "simplest": [10, 31], "apk_path": [10, 13, 31], "14d9f1a92dd984d6040cc41ed06e273": [10, 29], "rule_path": [10, 14, 30], "sendlocation_sm": [10, 25], "ex": 10, "json_report": [10, 13, 14, 23], "get_report": [10, 11, 13, 19], "Then": [10, 27, 30, 32], "md5": [10, 14, 16, 23], "apk_filenam": [10, 13, 14, 16], "size_byt": 10, "166917": 10, "threat_level": 10, "risk": [10, 22, 27], "total_scor": 10, "0": [10, 12, 13, 15, 22, 23, 27, 30, 31], "native_api": [10, 22], "lcom": [10, 14, 16, 17, 25, 30], "googl": [10, 14, 16, 17, 25, 30], "progress": [10, 14, 16, 17, 19, 25], "androidclientservic": 10, "sendmessag": 10, "invok": [10, 14, 16, 17, 25, 30], "virtual": [10, 14, 16, 17, 25, 26, 30], "v6": 10, "getloc": [10, 14, 16], "first_hex": 10, "6e": 10, "2f": 10, "02": 10, "06": 10, "00": 10, "v4": [10, 14, 16, 25], "v7": 10, "smshelper": [10, 14, 16], "sendsm": [10, 14, 16], "second_hex": 10, "30": [10, 15], "3e": 10, "64": 10, "07": 10, "dobyt": 10, "v35": 10, "74": 10, "01": 10, "23": 10, "v0": [10, 14, 16, 30], "v1": [10, 12, 30], "v2": [10, 25, 30], "v5": [10, 14, 16], "05": 10, "v3": [10, 14, 16, 17, 25], "03": 10, "04": 10, "entir": [10, 17, 25, 26], "bash": [10, 32], "bin": 10, "apkfil": 10, "_output": 10, "altern": 10, "well": 10, "usr": 10, "env": 10, "glob": 10, "00001": 10, "quickli": [10, 31], "match": [10, 20, 21, 25, 29, 30, 31], "expos": [10, 30, 31], "lahmyth": [10, 31], "mine": [10, 31], "king": [10, 31], "ahmyth": [10, 29, 31, 32], "cameramanag": [10, 31], "startup": [10, 31], "target_method": [10, 13, 30, 31], "generated_rule_dir": [10, 31], "generated_rul": [10, 31], "rule_gener": 10, "subpackag": 11, "submodul": 11, "apkinfo": [11, 13, 18, 22, 24], "parallelquark": [11, 13], "rzapkinfo": [11, 13], "content": [11, 12, 25, 30], "evalu": [11, 13, 24, 27], "pyeval": [11, 13, 24], "forens": [11, 13], "vt_analysi": [11, 13], "ciphei": [11, 13, 30], "color": [11, 13], "pprint": [11, 13], "regex": [11, 13, 14, 21], "webreport": [11, 13], "update_rule_buff": [11, 13], "config": 11, "entry_point": [11, 13], "logo": 11, "generate_rul": [11, 13, 31], "method_recursive_search": [11, 13, 14], "rulegener": [11, 31], "manag": [12, 31], "pr": 12, "includ": [12, 14, 16, 17, 26, 30], "review": [12, 31], "close": [12, 13, 14], "appli": [12, 25, 30], "appropri": 12, "resolv": 12, "minor": 12, "techniqu": [12, 31], "discuss": 12, "major": [12, 26], "chang": 12, "revis": 12, "kali": 12, "receiv": 12, "unabl": 12, "raiser": 12, "hasn": 12, "respond": 12, "over": 12, "assigne": 12, "invalid": 12, "axmlread": [13, 14], "interfac": [13, 14, 27], "baseapkinfo": [13, 14], "struct": [13, 14], "bytecodeobject": [13, 14, 16, 24], "methodobject": [13, 14, 16, 20], "registerobject": [13, 14, 24], "ruleobject": [13, 14, 20, 24, 27], "tableobject": [13, 14, 24], "quarkanalysi": [13, 14], "call_graph_analysis_list": [13, 14, 22], "clean_result": [13, 14], "crime_descript": [13, 14], "first_api": [13, 14], "label_report_t": [13, 14], "level_1_result": [13, 14], "level_2_result": [13, 14], "level_3_result": [13, 14], "level_4_result": [13, 14], "level_5_result": [13, 14], "parent_wrapper_map": [13, 14], "score_sum": [13, 14, 22, 27], "second_api": [13, 14], "summary_report_t": [13, 14], "weight_sum": [13, 14, 22], "init_label_report_t": [13, 14], "init_pretty_t": [13, 14], "androguardimp": [13, 14], "all_method": [13, 14, 16], "android_api": [13, 14, 16], "custom_method": [13, 14, 16], "dalvikvmformat": [13, 14], "find_method": [13, 14, 16, 25], "get_method_bytecod": [13, 14, 16, 25], "get_str": [13, 14, 15, 16], "get_wrapper_smali": [13, 14, 16], "lowerfunc": [13, 14, 16], "subclass_relationship": [13, 14], "superclass_relationship": [13, 14, 16], "upperfunc": [13, 14, 16, 25], "apply_rul": [13, 14], "add_table_row": [13, 14], "check_paramet": [13, 14, 25], "check_parameter_on_single_method": [13, 14], "check_parameter_valu": [13, 14], "check_sequ": [13, 14, 25], "find_api_usag": [13, 14], "find_intersect": [13, 14, 25], "find_previous_method": [13, 14, 25], "generate_json_report": [13, 14], "get_json_report": [13, 14], "show_call_graph": [13, 14], "show_detail_report": [13, 14, 25], "show_label_report": [13, 14], "show_rule_classif": [13, 14], "show_summary_report": [13, 14, 25], "rizincach": [13, 14], "rizinimp": [13, 14], "apk_filepath": [13, 14, 16], "core_librari": [13, 14, 16, 19], "ret_typ": [13, 14, 16], "aget_kind": [13, 18], "aget_wide_kind": [13, 18], "aput_kind": [13, 18], "aput_wide_kind": [13, 18], "binop_kind": [13, 18], "cast_typ": [13, 18], "const": [13, 18, 25, 30], "const_class": [13, 18], "const_four": [13, 18], "const_highsixteen": [13, 18], "const_sixteen": [13, 18], "const_str": [13, 18], "const_wid": [13, 18], "const_wide_highsixteen": [13, 18], "const_wide_sixteen": [13, 18], "const_wide_thirty_two": [13, 18], "filled_new_array_kind": [13, 18], "invoke_custom": [13, 18], "invoke_direct": [13, 18, 25], "invoke_interfac": [13, 18], "invoke_polymorph": [13, 18], "invoke_stat": [13, 18], "invoke_sup": [13, 18], "invoke_virtu": [13, 18], "invoke_virtual_rang": [13, 18], "move_kind": [13, 18], "move_result": [13, 18], "move_result_object": [13, 18], "move_result_wid": [13, 18], "neg_and_not_kind": [13, 18], "new_arrai": [13, 18], "new_inst": [13, 18], "get_method_pattern": [13, 18], "show_tabl": [13, 18], "logger": [13, 18], "all_str": [13, 19], "get_all_str": [13, 19], "get_android_api": [13, 19], "get_base64": [13, 19], "get_cont": [13, 19], "get_fil": [13, 19], "get_ip": [13, 19], "get_url": [13, 19], "vtanalysi": [13, 19], "analyze_multi_fil": [13, 19], "analyze_single_fil": [13, 19], "change_api_kei": [13, 19], "check_api_key_avail": [13, 19], "get_api_keys_list": [13, 19], "get_file_md5": [13, 19], "retreive_report": [13, 19], "scan_fil": [13, 19], "set_progress": [13, 19], "frida": [13, 20], "checkcleartext": [13, 20], "hookmethod": [13, 20], "convertmethodtostr": [13, 20], "isargumenttru": [13, 20], "hasintentfilt": [13, 20], "isexport": [13, 20], "getmethodsinarg": [13, 20], "getparamvalu": [13, 20, 21], "hasstr": [13, 20, 21], "hasurl": [13, 20, 21], "isargfrommethod": [13, 20], "defaultruleset": [13, 20], "classnam": [13, 20, 30], "fullnam": [13, 20], "getargu": [13, 20], "getxreffrom": [13, 20], "getxrefto": [13, 20], "methodnam": [13, 20, 30], "quarkresult": [13, 20, 30], "behavioroccurlist": [13, 20, 21], "findmethodincal": [13, 20], "getallstr": [13, 20], "getmethodxreffrom": [13, 20], "getmethodxrefto": [13, 20], "ruleset": [13, 20, 29], "findmethodinapk": [13, 20], "getact": [13, 20], "runquarkanalysi": [13, 20], "black": [13, 22], "blue": [13, 22], "bold": [13, 22], "colorful_report": [13, 22], "cyan": [13, 22], "green": [13, 22], "lightblu": [13, 22], "lightyellow": [13, 22], "magenta": [13, 22], "red": [13, 22], "white": [13, 22], "yellow": [13, 22], "call_graph": [13, 22], "select_label_menu": [13, 22], "show_comparison_graph": [13, 22], "wrapper_lookup": [13, 22], "get_rule_classification_data": [13, 22], "output_parent_function_graph": [13, 22], "output_parent_function_json": [13, 22], "output_parent_function_t": [13, 22], "print_error": [13, 22], "print_info": [13, 22], "print_success": [13, 22], "print_warn": [13, 22], "tabl": [13, 17, 22, 25, 26], "extract_cont": [13, 22], "extract_fil": [13, 22], "extract_ip": [13, 22], "extract_url": [13, 22], "validate_base64": [13, 22], "validate_ip_address": [13, 22], "validate_url": [13, 22], "contain": [13, 14, 17, 19, 20, 21, 22, 23, 25, 32], "descriptor_to_androguard_format": [13, 22], "filter_api_by_usage_count": [13, 22], "get_arguments_from_argument_str": [13, 22], "get_parenthetic_cont": [13, 22], "remove_dup_list": [13, 22], "level_info": [13, 22], "low": [13, 22, 27], "moder": [13, 22], "reportgener": [13, 23], "get_analysis_report_html": [13, 23], "get_rule_generate_editor_html": [13, 23], "insert_genrule_report_html": [13, 23], "insert_radarchart_html": [13, 23], "insert_report_html": [13, 23], "insert_sample_information_html": [13, 23], "count_confidence_rule_numb": [13, 23], "get_all_label": [13, 23], "get_five_stages_label": [13, 23], "get_json_report_html": [13, 23], "rule_buffer_list": 13, "rule_path_list": 13, "latest": 13, "return": [13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 25, 27, 30], "none": [13, 14, 15, 16, 17, 20, 21, 22], "entri": [13, 27], "point": [13, 17, 27], "amaz": 13, "output_dir": 13, "max_search_lay": 13, "specif": [13, 25, 28, 30], "percentile_rank": [13, 22, 31], "web_editor": [13, 31], "export": [13, 20, 30], "percentil": [13, 22, 31], "rank": [13, 22, 31], "filter": [13, 20, 29, 30, 31], "count": [13, 31], "method_set": 13, "depth": [13, 14], "each": [13, 14, 17, 23, 24, 27, 30, 31], "methodanalysi": [13, 14, 19], "recurs": [13, 14], "first_method_list": [13, 14], "second_method_list": [13, 14], "main": [13, 25, 26], "binari": [13, 15], "could": [13, 32], "report_typ": 13, "least": [13, 28, 31], "given": [13, 14, 16, 17, 20, 21, 22, 23, 25, 26, 27, 30], "int": [13, 16, 20, 21, 22, 23], "axmlexcept": [14, 15], "axml_siz": [14, 15], "file_s": [14, 15], "get_attribut": [14, 15], "get_xml_tre": [14, 15], "resvalu": [14, 15], "data": [14, 15, 17, 22, 23, 26, 30], "namespac": [14, 15], "res_value_typ": [14, 15], "type_attribut": [14, 15], "type_dimens": [14, 15], "type_dynamic_attribut": [14, 15], "type_dynamic_refer": [14, 15], "type_first_color_int": [14, 15], "type_first_int": [14, 15], "type_float": [14, 15], "type_fract": [14, 15], "type_int_boolean": [14, 15], "type_int_color_argb4": [14, 15], "type_int_color_argb8": [14, 15], "type_int_color_rgb4": [14, 15], "type_int_color_rgb8": [14, 15], "type_int_dec": [14, 15], "type_int_hex": [14, 15], "type_last_color_int": [14, 15], "type_last_int": [14, 15], "type_nul": [14, 15], "type_refer": [14, 15], "type_str": [14, 15], "files": [14, 16, 23], "get_subclass": [14, 16], "mnemon": [14, 17, 25], "access_flag": [14, 17], "cach": [14, 17], "class_nam": [14, 16, 17, 18], "full_nam": [14, 17], "is_android_api": [14, 17], "called_by_func": [14, 17, 25], "current_typ": [14, 17], "hash_index": [14, 17, 25], "register_nam": [14, 17, 25], "type_histroi": [14, 17], "check_item": [14, 17], "get_scor": [14, 17, 25, 27], "rule_filenam": [14, 17], "get_obj_list": [14, 17, 25], "get_tabl": [14, 17, 25], "hash_tabl": [14, 17], "insert": [14, 17, 25, 30], "pop": [14, 17, 25], "union": [14, 16, 20, 21], "str": [14, 15, 16, 17, 18, 20, 21, 22, 30], "pathlik": [14, 16, 17, 20], "properti": [14, 15, 16, 17, 20, 21], "element": [14, 16, 17, 20, 22, 25], "method_nam": [14, 16, 17, 18], "method_object": [14, 16], "instruct": [14, 16, 17, 18, 25, 26, 27], "parent_method": [14, 16], "first_method": [14, 16], "second_method": [14, 16], "dict": [14, 15, 16, 17, 21, 23], "smali": [14, 16, 17, 25], "method_analysi": [14, 16], "num_of_process": 14, "rule_obj_list": 14, "rule_obj": 14, "y_score": 14, "parent_funct": 14, "keyword_item_list": 14, "fals": [14, 19, 20, 21, 22, 30], "between": [14, 22], "time": [14, 31], "true": [14, 20, 21, 22, 30], "usage_t": 14, "tupl": [14, 15, 20, 30], "involv": 14, "keyword": [14, 30, 31], "treat": 14, "regular": [14, 20, 21, 30], "express": [14, 20, 21, 25, 30], "yield": 14, "_description_": [14, 20], "static": [14, 18], "source_str": 14, "pattern_list": 14, "mutual_par": 14, "appear": [14, 20, 25, 27, 30], "descriptor_nam": 14, "first_method_set": 14, "second_method_set": 14, "base_method": 14, "wrapper": 14, "visited_method": 14, "under": [14, 31], "parent": [14, 29], "append": [14, 30], "basic": [14, 20, 30], "output_format": [14, 22], "all_label": [14, 22, 23], "table_vers": 14, "last": 14, "column": [14, 25], "label_desc": [14, 17], "csv": [14, 17], "dictionari": [14, 22], "arrai": [14, 22], "associ": 14, "alia": [14, 15], "rizin_cach": 14, "tmp_dir": 14, "A": [15, 17, 30], "file_path": 15, "structure_path": 15, "pars": [15, 22, 30], "xml": [15, 20], "chunk": 15, "ani": [15, 20, 22, 30], "attribut": [15, 30], "resourc": 15, "hold": [15, 20, 21, 22, 30], "elementtre": 15, "androidmanifest": 15, "enum": [15, 22], "7": [15, 29], "28": 15, "16": [15, 19], "18": 15, "31": 15, "29": 15, "17": 15, "abstract": 16, "size": 16, "byte": 16, "checksum": 16, "store": [17, 20, 21, 25, 26, 30], "commonli": 17, "kind": 17, "apnoper": [17, 25], "deleteapn": [17, 25], "z": [17, 25, 30], "dex": [17, 26], "bool": [17, 20, 21], "value_typ": 17, "record": [17, 18, 25], "state": [17, 25, 27], "been": [17, 27], "plant": 17, "describ": [17, 25], "varabileobject": [17, 25], "individu": 17, "rulejson": 17, "jsondata": 17, "descript": [17, 28, 30], "exponenti": [17, 27], "growth": [17, 27], "captur": [17, 21, 27], "third": [17, 27], "float": [17, 27], "variou": 17, "lebel": [17, 23], "blob": 17, "count_reg": 17, "variabl": [17, 25, 26], "variableobject": 17, "hash": [17, 23, 25], "dimension": 17, "var_obj": 17, "nest": [17, 25], "hashtabl": [17, 25], "overrid": [17, 25], "built": [17, 25, 30], "stack": [17, 25], "delet": [17, 25], "kwarg": 18, "convert": [18, 23], "represent": 18, "dure": [18, 30], "taint": 18, "func": 18, "apkpath": 19, "base64": 19, "encod": [19, 30], "ip": [19, 22, 30], "address": 19, "url": [19, 20, 21, 22], "api_keys_list": 19, "waiting_tim": 19, "all_info": 19, "file_md5": 19, "fridaresult": [20, 21, 30], "methodcalleventdispatch": [20, 21], "handlecapturedev": [20, 21], "startwatchingmethodcal": [20, 21], "stopwatchingmethodcal": [20, 21], "runfridahook": [20, 21], "inputstr": 20, "decrypt": [20, 30], "host": 20, "overloadfilt": 20, "watcharg": 20, "watchbacktrac": 20, "watchret": 20, "hook": 20, "tagrget": [20, 30], "arg": [20, 30], "backtrac": [20, 30], "boolean": [20, 30], "intent": [20, 30], "quarkresultinst": 20, "methodcal": 20, "firstapi": 20, "secondapi": 20, "api2": [20, 30], "pattern": [20, 21], "isregex": 20, "targetmethod": [20, 21], "rulefold": 20, "methodobj": 20, "caller": [20, 30], "calle": [20, 30], "ruleinst": 20, "callermethod": 20, "samplepath": 20, "_callev": 21, "_eventbuff": 21, "session": 21, "eventwrapperfromfrida": 21, "_": [21, 30], "buffer": 21, "methodparamtyp": 21, "stop": 21, "apkpackagenam": 21, "secondtowait": 21, "wait": [21, 30], "color_cod": 22, "arg0": 22, "call_graph_analysi": 22, "png": 22, "min_label": 22, "max_label": 22, "min": 22, "titl": 22, "malware_confid": 22, "font_siz": 22, "22": 22, "sever": [22, 27], "displai": [22, 27], "malware_nam": 22, "search_depth": 22, "rule_classification_data_bundl": 22, "row": [22, 25], "sb": 22, "subset_to_check": 22, "target_list": 22, "put": [22, 30], "queri": [22, 25], "api_pool": 22, "sort": [22, 31], "split": 22, "p_set": 22, "less": [22, 31], "s_set": 22, "argument_str": 22, "comma": 22, "infer": 22, "start_index": 22, "pair": 22, "parenthes": 22, "parenthesi": 22, "remov": 22, "duplic": 22, "enumer": 22, "load": [23, 24, 30], "result": 23, "rule_numb": 23, "secton": 23, "five_stages_label": 23, "rules_number_set": 23, "layout": 23, "tag": 23, "extract": 24, "map": [24, 30], "architectur": 24, "diagram": 24, "xrule": [24, 27], "explan": 24, "inspir": 25, "ceval": 25, "cpython": [25, 26], "interpret": 25, "infinit": 25, "loop": [25, 30], "interact": [25, 26, 32], "languag": 25, "thu": 25, "fifth": [25, 27], "Of": 25, "cours": 25, "haven": 25, "condit": 25, "jump": 25, "now": [25, 30], "direct": [25, 28, 30], "enter": 25, "switch": [25, 26], "execut": [25, 26, 27, 30, 31], "_invok": 25, "anoth": [25, 30], "written": 25, "reus": 25, "becaus": 25, "mani": 25, "famili": 25, "respons": 25, "respect": 25, "previou": 25, "intersect": 25, "xrul": 25, "long": 25, "met": 25, "upper": 25, "human": 25, "readabl": 25, "form": [25, 27], "compar": [25, 29], "machin": [25, 26, 30], "difficult": 25, "often": 25, "compos": [25, 26], "gp": 25, "howev": [25, 26], "overwritten": 25, "futur": 25, "revers": 25, "tracker": 25, "encount": 25, "togeth": 25, "assum": [25, 27], "hello": 25, "v34": 25, "34": 25, "four": [26, 31], "divid": 26, "three": 26, "come": 26, "itself": [26, 30], "huge": 26, "doe": [26, 30], "faster": 26, "dynam": 26, "repetit": 26, "control": 26, "final": [27, 30], "No": [27, 30], "matter": 27, "choos": 27, "full": 27, "imag": [27, 32], "cross": [27, 30], "travers": 27, "sum": 27, "formula": 27, "medium": 27, "yscore": 27, "complet": [27, 28], "reach": 27, "_score": 27, "fourth": 27, "confirm": [27, 30], "qaurk": 27, "There": [27, 29], "level_one_threshold": 27, "level_two_threshold": 27, "level_three_threshold": 27, "level_four_threshold": 27, "level_five_threshold": 27, "total": 27, "fall": 27, "aim": [28, 30], "win": 28, "comer": 28, "stronger": 28, "resum": 28, "fit": 28, "job": 28, "dream": 28, "energi": 28, "grow": 28, "upon": 28, "aluni": 28, "expect": 28, "posit": 28, "feedback": 28, "contin": 28, "particip": 28, "mandatori": 28, "peopl": 28, "goal": [28, 30], "twitter": 28, "quarkengin": 28, "flexibl": 29, "boost": 29, "examin": 29, "network": 29, "candi": 29, "corn": 29, "demo": [29, 31], "w": [29, 31], "quark_report": 29, "topic": 29, "indic": 29, "aggress": 29, "mutual": 29, "research": 30, "pentest": 30, "decent": 30, "exchang": 30, "valuabl": 30, "intellig": 30, "enabl": 30, "perform": 30, "creativ": 30, "scenario": 30, "share": 30, "knowledg": 30, "samp": 30, "accordingli": 30, "python3": 30, "49u5gh249gh24985ghf429gh4ch8f23f": 30, "api1": 30, "monitor": 30, "port": 30, "manifest": 30, "6f032": 30, "00211": 30, "detectedurl": 30, "ndetect": 30, "nthe": 30, "wa": 30, "nattempt": 30, "obj": 30, "127": 30, "8888": 30, "thook": 30, "methodcalle": 30, "nsee": 30, "guidelin": 30, "Or": 30, "root": 30, "devic": 30, "pixel": 30, "seek": 30, "credenti": 30, "vulner": 30, "secretkeyspec": 30, "identifi": 30, "dump": 30, "bingo": 30, "allstr": 30, "firstparam": 30, "secondparam": 30, "aeskei": 30, "findal": 30, "getbyt": 30, "bljava": 30, "ljavax": 30, "crypto": 30, "spec": 30, "init": 30, "move": 30, "inject": 30, "createpackagecontext": 30, "checksignatur": 30, "verif": 30, "pm": 30, "packagemanag": 30, "ldexternalcod": 30, "nmethod": 30, "extern": 30, "context": 30, "classload": 30, "loadclass": 30, "unsecur": 30, "storag": 30, "mechan": 30, "sdcard": 30, "existingfil": 30, "filepath": 30, "cleartext": 30, "sensit": 30, "putstr": 30, "encrypt": 30, "app_package_nam": 30, "oversecur": 30, "sharedpreferencesimpl": 30, "editorimpl": 30, "method_param_typ": 30, "email": 30, "password": 30, "utf": 30, "licens": 30, "global": 30, "rpc": 30, "replacemethodimplement": 30, "classandmethodnam": 30, "returntyp": 30, "callev": 30, "callcaptur": 30, "paramvalu": 30, "push": 30, "tostr": 30, "stringifi": 30, "watchmethodcal": 30, "null": 30, "indexoflastsepar": 30, "lastindexof": 30, "classnamepattern": 30, "substr": 30, "methodnamepattern": 30, "classoftargetmethod": 30, "possiblemethod": 30, "typeof": 30, "undefin": 30, "failedtowatchev": 30, "failedtowatch": 30, "overload": 30, "paramtypesofpossiblemethod": 30, "argumenttyp": 30, "foreach": 30, "matchedmethod": 30, "rettyp": 30, "sql": 30, "gettext": 30, "widget": 30, "edittext": 30, "sqlcommandexecut": 30, "stringbuild": 30, "sqlite": 30, "sqlitedatabas": 30, "rawqueri": 30, "cursor": 30, "improp": 30, "compon": 30, "damnvulnerablebank": 30, "currencyr": 30, "splashscreen": 30, "setjavascripten": 30, "javascript": 30, "websit": 30, "addjavascriptinterfac": 30, "webkit": 30, "webview": 30, "enablej": 30, "exposeapi": 30, "getset": 30, "webset": 30, "lsg": 30, "vp": 30, "owasp_mobil": 30, "omtg_android": 30, "omtg_env_005_webview_remot": 30, "oncreat": 30, "bundl": 30, "omtg_env_005_webview_loc": 30, "token": 30, "leakag": 30, "credential_keyword": 30, "methodsfound": 30, "debuglogg": 30, "firebas": 30, "auth": 30, "firebaseauth": 30, "lc": 30, "h": 30, "rsa": 30, "algorithm": 30, "without": 30, "optim": 30, "asymmetr": 30, "pad": 30, "oaep": 30, "cryptograph": 30, "scheme": 30, "plaintext": 30, "predict": 30, "usecryptographicalgo": 30, "usecryptographicalgor": 30, "cipher": 30, "getinst": 30, "omtg_datast_001_keystor": 30, "encryptstr": 30, "transmiss": 30, "retrofit": 30, "protocol": 30, "protocol_keyword": 30, "smtp": 30, "ftp": 30, "regexrul": 30, "9a": 30, "za": 30, "cleartextprotocolurl": 30, "lretrofit2": 30, "builder": 30, "baseurl": 30, "broken": 30, "riski": 30, "exposur": 30, "weak_algorithm": 30, "de": 30, "arc4": 30, "blowfish": 30, "usecryptoalgo": 30, "algo": 30, "lb3nac": 30, "k": 30, "valid": 30, "openurlthatuserinput": 30, "loadurl": 30, "validate_method": 30, "indexof": 30, "replaceal": 30, "openurl": 30, "calledmethod": 30, "ljakhar": 30, "aseem": 30, "inputvalidation2urischemeact": 30, "view": 30, "neutral": 30, "site": 30, "next": 30, "famou": 30, "xss": 30, "NO": 30, "xss_filter": 30, "lorg": 30, "owasp": 30, "esapi": 30, "getvalidsafehtml": 30, "encodeforhtml": 30, "encodeforjavascript": 30, "policyfactori": 30, "sanit": 30, "setj": 30, "xssfiltersincal": 30, "filterapi": 30, "net": 30, "uri": 30, "getdata": 30, "forgetpassword": 30, "idea": 31, "group": 31, "pareto": 31, "phase": 31, "pxp": 31, "px": 31, "sxp": 31, "sx": 31, "earlier": 31, "higher": 31, "spent": 31, "manner": 31, "situat": 31, "constraint": 31, "save": 31, "firstli": 32, "fetch": 32, "pwd": 32, "tmp": 32}, "objects": {"": [[13, 0, 0, "-", "quark"]], "quark": [[13, 0, 0, "-", "cli"], [13, 0, 0, "-", "config"], [14, 0, 0, "-", "core"], [18, 0, 0, "-", "evaluator"], [19, 0, 0, "-", "forensic"], [13, 0, 0, "-", "freshquark"], [13, 0, 0, "-", "logo"], [13, 0, 0, "-", "radiocontrast"], [13, 0, 0, "-", "report"], [13, 0, 0, "-", "rulegeneration"], [20, 0, 0, "-", "script"], [22, 0, 0, "-", "utils"], [23, 0, 0, "-", "webreport"]], "quark.cli": [[13, 1, 1, "", "update_rule_buffer"]], "quark.core": [[14, 0, 0, "-", "analysis"], [14, 0, 0, "-", "apkinfo"], [15, 0, 0, "-", "axmlreader"], [16, 0, 0, "-", "interface"], [14, 0, 0, "-", "parallelquark"], [14, 0, 0, "-", "quark"], [14, 0, 0, "-", "rzapkinfo"], [17, 0, 0, "-", "struct"]], "quark.core.analysis": [[14, 2, 1, "", "QuarkAnalysis"], [14, 1, 1, "", "init_label_report_table"], [14, 1, 1, "", "init_pretty_table"]], "quark.core.analysis.QuarkAnalysis": [[14, 3, 1, "", "call_graph_analysis_list"], [14, 4, 1, "", "clean_result"], [14, 3, 1, "", "crime_description"], [14, 3, 1, "", "first_api"], [14, 3, 1, "", "json_report"], [14, 3, 1, "", "label_report_table"], [14, 3, 1, "", "level_1_result"], [14, 3, 1, "", "level_2_result"], [14, 3, 1, "", "level_3_result"], [14, 3, 1, "", "level_4_result"], [14, 3, 1, "", "level_5_result"], [14, 3, 1, "", "parent_wrapper_mapping"], [14, 3, 1, "", "score_sum"], [14, 3, 1, "", "second_api"], [14, 3, 1, "", "summary_report_table"], [14, 3, 1, "", "weight_sum"]], "quark.core.apkinfo": [[14, 2, 1, "", "AndroguardImp"]], "quark.core.apkinfo.AndroguardImp": [[14, 5, 1, "", "activities"], [14, 5, 1, "", "all_methods"], [14, 3, 1, "", "analysis"], [14, 5, 1, "", "android_apis"], [14, 3, 1, "", "apk"], [14, 5, 1, "", "custom_methods"], [14, 3, 1, "", "dalvikvmformat"], [14, 4, 1, "", "find_method"], [14, 4, 1, "", "get_method_bytecode"], [14, 4, 1, "", "get_strings"], [14, 4, 1, "", "get_wrapper_smali"], [14, 4, 1, "", "lowerfunc"], [14, 5, 1, "", "permissions"], [14, 5, 1, "", "subclass_relationships"], [14, 5, 1, "", "superclass_relationships"], [14, 4, 1, "", "upperfunc"]], "quark.core.axmlreader": [[15, 6, 1, "", "AxmlException"], [15, 2, 1, "", "AxmlReader"], [15, 2, 1, "", "ResValue"], [15, 2, 1, "", "Res_value_type"]], "quark.core.axmlreader.AxmlReader": [[15, 5, 1, "", "axml_size"], [15, 5, 1, "", "file_size"], [15, 4, 1, "", "get_attributes"], [15, 4, 1, "", "get_string"], [15, 4, 1, "", "get_xml_tree"]], "quark.core.axmlreader.ResValue": [[15, 3, 1, "", "data"], [15, 3, 1, "", "name"], [15, 3, 1, "", "namespace"], [15, 3, 1, "", "type"], [15, 3, 1, "", "value"]], "quark.core.axmlreader.Res_value_type": [[15, 3, 1, "", "TYPE_ATTRIBUTE"], [15, 3, 1, "", "TYPE_DIMENSION"], [15, 3, 1, "", "TYPE_DYNAMIC_ATTRIBUTE"], [15, 3, 1, "", "TYPE_DYNAMIC_REFERENCE"], [15, 3, 1, "", "TYPE_FIRST_COLOR_INT"], [15, 3, 1, "", "TYPE_FIRST_INT"], [15, 3, 1, "", "TYPE_FLOAT"], [15, 3, 1, "", "TYPE_FRACTION"], [15, 3, 1, "", "TYPE_INT_BOOLEAN"], [15, 3, 1, "", "TYPE_INT_COLOR_ARGB4"], [15, 3, 1, "", "TYPE_INT_COLOR_ARGB8"], [15, 3, 1, "", "TYPE_INT_COLOR_RGB4"], [15, 3, 1, "", "TYPE_INT_COLOR_RGB8"], [15, 3, 1, "", "TYPE_INT_DEC"], [15, 3, 1, "", "TYPE_INT_HEX"], [15, 3, 1, "", "TYPE_LAST_COLOR_INT"], [15, 3, 1, "", "TYPE_LAST_INT"], [15, 3, 1, "", "TYPE_NULL"], [15, 3, 1, "", "TYPE_REFERENCE"], [15, 3, 1, "", "TYPE_STRING"]], "quark.core.interface": [[16, 0, 0, "-", "baseapkinfo"]], "quark.core.interface.baseapkinfo": [[16, 2, 1, "", "BaseApkinfo"]], "quark.core.interface.baseapkinfo.BaseApkinfo": [[16, 5, 1, "", "activities"], [16, 5, 1, "", "all_methods"], [16, 5, 1, "", "android_apis"], [16, 3, 1, "", "apk_filename"], [16, 3, 1, "", "apk_filepath"], [16, 3, 1, "", "core_library"], [16, 5, 1, "", "custom_methods"], [16, 5, 1, "", "filename"], [16, 5, 1, "", "filesize"], [16, 4, 1, "", "find_method"], [16, 4, 1, "", "get_method_bytecode"], [16, 4, 1, "", "get_strings"], [16, 5, 1, "", "get_subclasses"], [16, 4, 1, "", "get_wrapper_smali"], [16, 4, 1, "", "lowerfunc"], [16, 5, 1, "", "md5"], [16, 5, 1, "", "permissions"], [16, 3, 1, "", "ret_type"], [16, 5, 1, "", "superclass_relationships"], [16, 4, 1, "", "upperfunc"]], "quark.core.parallelquark": [[14, 2, 1, "", "ParallelQuark"]], "quark.core.parallelquark.ParallelQuark": [[14, 4, 1, "", "apply_rules"], [14, 4, 1, "", "close"], [14, 4, 1, "", "run"]], "quark.core.quark": [[14, 2, 1, "", "Quark"]], "quark.core.quark.Quark": [[14, 4, 1, "", "add_table_row"], [14, 4, 1, "", "check_parameter"], [14, 4, 1, "", "check_parameter_on_single_method"], [14, 4, 1, "", "check_parameter_values"], [14, 4, 1, "", "check_sequence"], [14, 4, 1, "", "find_api_usage"], [14, 4, 1, "", "find_intersection"], [14, 4, 1, "", "find_previous_method"], [14, 4, 1, "", "generate_json_report"], [14, 4, 1, "", "get_json_report"], [14, 4, 1, "", "method_recursive_search"], [14, 4, 1, "", "run"], [14, 4, 1, "", "show_call_graph"], [14, 4, 1, "", "show_detail_report"], [14, 4, 1, "", "show_label_report"], [14, 4, 1, "", "show_rule_classification"], [14, 4, 1, "", "show_summary_report"]], "quark.core.rzapkinfo": [[14, 3, 1, "", "RizinCache"], [14, 2, 1, "", "RizinImp"]], "quark.core.rzapkinfo.RizinImp": [[14, 5, 1, "", "activities"], [14, 5, 1, "", "all_methods"], [14, 5, 1, "", "android_apis"], [14, 3, 1, "", "apk_filename"], [14, 3, 1, "", "apk_filepath"], [14, 3, 1, "", "core_library"], [14, 5, 1, "", "custom_methods"], [14, 4, 1, "", "find_method"], [14, 4, 1, "", "get_method_bytecode"], [14, 4, 1, "", "get_strings"], [14, 4, 1, "", "get_wrapper_smali"], [14, 4, 1, "", "lowerfunc"], [14, 5, 1, "", "permissions"], [14, 3, 1, "", "ret_type"], [14, 5, 1, "", "subclass_relationships"], [14, 5, 1, "", "superclass_relationships"], [14, 4, 1, "", "upperfunc"]], "quark.core.struct": [[17, 0, 0, "-", "bytecodeobject"], [17, 0, 0, "-", "methodobject"], [17, 0, 0, "-", "registerobject"], [17, 0, 0, "-", "ruleobject"], [17, 0, 0, "-", "tableobject"]], "quark.core.struct.bytecodeobject": [[17, 2, 1, "", "BytecodeObject"]], "quark.core.struct.bytecodeobject.BytecodeObject": [[17, 5, 1, "", "mnemonic"], [17, 5, 1, "", "parameter"], [17, 5, 1, "", "registers"]], "quark.core.struct.methodobject": [[17, 2, 1, "", "MethodObject"]], "quark.core.struct.methodobject.MethodObject": [[17, 3, 1, "", "access_flags"], [17, 3, 1, "", "cache"], [17, 3, 1, "", "class_name"], [17, 3, 1, "", "descriptor"], [17, 5, 1, "", "full_name"], [17, 4, 1, "", "is_android_api"], [17, 3, 1, "", "name"]], "quark.core.struct.registerobject": [[17, 2, 1, "", "RegisterObject"]], "quark.core.struct.registerobject.RegisterObject": [[17, 5, 1, "", "called_by_func"], [17, 5, 1, "", "current_type"], [17, 5, 1, "", "hash_index"], [17, 5, 1, "", "register_name"], [17, 5, 1, "", "type_histroy"], [17, 5, 1, "", "value"]], "quark.core.struct.ruleobject": [[17, 2, 1, "", "RuleObject"]], "quark.core.struct.ruleobject.RuleObject": [[17, 5, 1, "", "api"], [17, 3, 1, "", "check_item"], [17, 5, 1, "", "crime"], [17, 4, 1, "", "get_score"], [17, 5, 1, "", "label"], [17, 5, 1, "", "permission"], [17, 3, 1, "", "rule_filename"], [17, 5, 1, "", "score"]], "quark.core.struct.tableobject": [[17, 2, 1, "", "TableObject"]], "quark.core.struct.tableobject.TableObject": [[17, 4, 1, "", "get_obj_list"], [17, 4, 1, "", "get_table"], [17, 3, 1, "", "hash_table"], [17, 4, 1, "", "insert"], [17, 4, 1, "", "pop"]], "quark.evaluator": [[18, 0, 0, "-", "pyeval"]], "quark.evaluator.pyeval": [[18, 2, 1, "", "PyEval"], [18, 1, 1, "", "logger"]], "quark.evaluator.pyeval.PyEval": [[18, 4, 1, "", "AGET_KIND"], [18, 4, 1, "", "AGET_WIDE_KIND"], [18, 4, 1, "", "APUT_KIND"], [18, 4, 1, "", "APUT_WIDE_KIND"], [18, 4, 1, "", "BINOP_KIND"], [18, 4, 1, "", "CAST_TYPE"], [18, 4, 1, "", "CONST"], [18, 4, 1, "", "CONST_CLASS"], [18, 4, 1, "", "CONST_FOUR"], [18, 4, 1, "", "CONST_HIGHSIXTEEN"], [18, 4, 1, "", "CONST_SIXTEEN"], [18, 4, 1, "", "CONST_STRING"], [18, 4, 1, "", "CONST_WIDE"], [18, 4, 1, "", "CONST_WIDE_HIGHSIXTEEN"], [18, 4, 1, "", "CONST_WIDE_SIXTEEN"], [18, 4, 1, "", "CONST_WIDE_THIRTY_TWO"], [18, 4, 1, "", "FILLED_NEW_ARRAY_KIND"], [18, 4, 1, "", "INVOKE_CUSTOM"], [18, 4, 1, "", "INVOKE_DIRECT"], [18, 4, 1, "", "INVOKE_INTERFACE"], [18, 4, 1, "", "INVOKE_POLYMORPHIC"], [18, 4, 1, "", "INVOKE_STATIC"], [18, 4, 1, "", "INVOKE_SUPER"], [18, 4, 1, "", "INVOKE_VIRTUAL"], [18, 4, 1, "", "INVOKE_VIRTUAL_RANGE"], [18, 4, 1, "", "MOVE_KIND"], [18, 4, 1, "", "MOVE_RESULT"], [18, 4, 1, "", "MOVE_RESULT_OBJECT"], [18, 4, 1, "", "MOVE_RESULT_WIDE"], [18, 4, 1, "", "NEG_AND_NOT_KIND"], [18, 4, 1, "", "NEW_ARRAY"], [18, 4, 1, "", "NEW_INSTANCE"], [18, 4, 1, "", "get_method_pattern"], [18, 4, 1, "", "show_table"]], "quark.forensic": [[19, 0, 0, "-", "forensic"], [19, 0, 0, "-", "vt_analysis"]], "quark.forensic.forensic": [[19, 2, 1, "", "Forensic"]], "quark.forensic.forensic.Forensic": [[19, 3, 1, "", "all_strings"], [19, 3, 1, "", "apk"], [19, 4, 1, "", "get_all_strings"], [19, 4, 1, "", "get_android_api"], [19, 4, 1, "", "get_base64"], [19, 4, 1, "", "get_content"], [19, 4, 1, "", "get_file"], [19, 4, 1, "", "get_ip"], [19, 4, 1, "", "get_url"]], "quark.forensic.vt_analysis": [[19, 2, 1, "", "VTAnalysis"]], "quark.forensic.vt_analysis.VTAnalysis": [[19, 4, 1, "", "analyze_multi_file"], [19, 4, 1, "", "analyze_single_file"], [19, 4, 1, "", "change_api_key"], [19, 4, 1, "", "check_api_key_available"], [19, 4, 1, "", "get_api_keys_list"], [19, 4, 1, "", "get_file_md5"], [19, 4, 1, "", "get_reports"], [19, 4, 1, "", "retreive_report"], [19, 4, 1, "", "scan_file"], [19, 4, 1, "", "set_progress"]], "quark.freshquark": [[13, 1, 1, "", "download"], [13, 1, 1, "", "entry_point"]], "quark.logo": [[13, 1, 1, "", "logo"]], "quark.radiocontrast": [[13, 2, 1, "", "RadioContrast"]], "quark.radiocontrast.RadioContrast": [[13, 4, 1, "", "generate_rule"], [13, 4, 1, "", "method_recursive_search"]], "quark.report": [[13, 2, 1, "", "Report"]], "quark.report.Report": [[13, 4, 1, "", "analysis"], [13, 4, 1, "", "get_report"]], "quark.rulegeneration": [[13, 2, 1, "", "RuleGeneration"]], "quark.rulegeneration.RuleGeneration": [[13, 4, 1, "", "generate_rule"]], "quark.script": [[20, 2, 1, "", "Activity"], [20, 2, 1, "", "Behavior"], [20, 2, 1, "", "DefaultRuleset"], [20, 2, 1, "", "Method"], [20, 2, 1, "", "QuarkResult"], [20, 2, 1, "", "Ruleset"], [20, 0, 0, "-", "ciphey"], [20, 1, 1, "", "findMethodInAPK"], [21, 0, 0, "-", "frida"], [20, 1, 1, "", "getActivities"], [20, 0, 0, "-", "objection"], [20, 1, 1, "", "runQuarkAnalysis"], [20, 0, 0, "-", "utils"]], "quark.script.Activity": [[20, 4, 1, "", "hasIntentFilter"], [20, 4, 1, "", "isExported"]], "quark.script.Behavior": [[20, 4, 1, "", "getMethodsInArgs"], [20, 4, 1, "", "getParamValues"], [20, 4, 1, "", "hasString"], [20, 4, 1, "", "hasUrl"], [20, 4, 1, "", "isArgFromMethod"]], "quark.script.Method": [[20, 5, 1, "", "className"], [20, 5, 1, "", "descriptor"], [20, 5, 1, "", "fullName"], [20, 4, 1, "", "getArguments"], [20, 4, 1, "", "getXrefFrom"], [20, 4, 1, "", "getXrefTo"], [20, 5, 1, "", "methodName"]], "quark.script.QuarkResult": [[20, 5, 1, "", "behaviorOccurList"], [20, 4, 1, "", "findMethodInCaller"], [20, 4, 1, "", "getAllStrings"], [20, 4, 1, "", "getMethodXrefFrom"], [20, 4, 1, "", "getMethodXrefTo"]], "quark.script.ciphey": [[20, 1, 1, "", "checkClearText"]], "quark.script.frida": [[21, 2, 1, "", "Behavior"], [21, 2, 1, "", "FridaResult"], [21, 2, 1, "", "MethodCallEventDispatcher"], [21, 1, 1, "", "runFridaHook"]], "quark.script.frida.Behavior": [[21, 4, 1, "", "getParamValues"], [21, 4, 1, "", "hasString"], [21, 4, 1, "", "hasUrl"]], "quark.script.frida.FridaResult": [[21, 5, 1, "", "behaviorOccurList"]], "quark.script.frida.MethodCallEventDispatcher": [[21, 4, 1, "", "handleCapturedEvent"], [21, 4, 1, "", "startWatchingMethodCall"], [21, 4, 1, "", "stopWatchingMethodCall"]], "quark.script.objection": [[20, 2, 1, "", "Objection"], [20, 1, 1, "", "convertMethodToString"]], "quark.script.objection.Objection": [[20, 4, 1, "", "hookMethod"]], "quark.script.utils": [[20, 1, 1, "", "isArgumentTrue"]], "quark.utils": [[22, 0, 0, "-", "colors"], [22, 0, 0, "-", "graph"], [22, 0, 0, "-", "output"], [22, 0, 0, "-", "pprint"], [22, 0, 0, "-", "regex"], [22, 0, 0, "-", "tools"], [22, 0, 0, "-", "weight"]], "quark.utils.colors": [[22, 1, 1, "", "black"], [22, 1, 1, "", "blue"], [22, 1, 1, "", "bold"], [22, 1, 1, "", "color"], [22, 1, 1, "", "colorful_report"], [22, 1, 1, "", "cyan"], [22, 1, 1, "", "green"], [22, 1, 1, "", "lightblue"], [22, 1, 1, "", "lightyellow"], [22, 1, 1, "", "magenta"], [22, 1, 1, "", "red"], [22, 1, 1, "", "white"], [22, 1, 1, "", "yellow"]], "quark.utils.graph": [[22, 1, 1, "", "call_graph"], [22, 1, 1, "", "select_label_menu"], [22, 1, 1, "", "show_comparison_graph"], [22, 1, 1, "", "wrapper_lookup"]], "quark.utils.output": [[22, 1, 1, "", "get_rule_classification_data"], [22, 1, 1, "", "output_parent_function_graph"], [22, 1, 1, "", "output_parent_function_json"], [22, 1, 1, "", "output_parent_function_table"]], "quark.utils.pprint": [[22, 1, 1, "", "print_error"], [22, 1, 1, "", "print_info"], [22, 1, 1, "", "print_success"], [22, 1, 1, "", "print_warning"], [22, 1, 1, "", "table"]], "quark.utils.regex": [[22, 1, 1, "", "extract_content"], [22, 1, 1, "", "extract_file"], [22, 1, 1, "", "extract_ip"], [22, 1, 1, "", "extract_url"], [22, 1, 1, "", "validate_base64"], [22, 1, 1, "", "validate_ip_address"], [22, 1, 1, "", "validate_url"]], "quark.utils.tools": [[22, 1, 1, "", "contains"], [22, 1, 1, "", "descriptor_to_androguard_format"], [22, 1, 1, "", "filter_api_by_usage_count"], [22, 1, 1, "", "get_arguments_from_argument_str"], [22, 1, 1, "", "get_parenthetic_contents"], [22, 1, 1, "", "remove_dup_list"]], "quark.utils.weight": [[22, 2, 1, "", "LEVEL_INFO"], [22, 2, 1, "", "Weight"]], "quark.utils.weight.LEVEL_INFO": [[22, 3, 1, "", "High"], [22, 3, 1, "", "LOW"], [22, 3, 1, "", "Moderate"]], "quark.utils.weight.Weight": [[22, 4, 1, "", "calculate"]], "quark.webreport": [[23, 0, 0, "-", "generate"]], "quark.webreport.generate": [[23, 2, 1, "", "ReportGenerator"], [23, 1, 1, "", "count_confidence_rule_number"], [23, 1, 1, "", "get_all_labels"], [23, 1, 1, "", "get_five_stages_labels"], [23, 1, 1, "", "get_json_report_html"]], "quark.webreport.generate.ReportGenerator": [[23, 4, 1, "", "get_analysis_report_html"], [23, 4, 1, "", "get_rule_generate_editor_html"], [23, 4, 1, "", "insert_genrule_report_html"], [23, 4, 1, "", "insert_radarchart_html"], [23, 4, 1, "", "insert_report_html"], [23, 4, 1, "", "insert_sample_information_html"]]}, "objtypes": {"0": "py:module", "1": "py:function", "2": "py:class", "3": "py:attribute", "4": "py:method", "5": "py:property", "6": "py:exception"}, "objnames": {"0": ["py", "module", "Python module"], "1": ["py", "function", "Python function"], "2": ["py", "class", "Python class"], "3": ["py", "attribute", "Python attribute"], "4": ["py", "method", "Python method"], "5": ["py", "property", "Python property"], "6": ["py", "exception", "Python exception"]}, "titleterms": {"add": 0, "rule": [0, 6, 27, 29, 30, 31], "code": [1, 10, 30], "style": 1, "format": 1, "file": [1, 30], "folder": 1, "name": 1, "copyright": 1, "header": 1, "indent": 1, "maximum": 1, "line": [1, 27], "length": 1, "blank": 1, "import": 1, "string": 1, "print": 1, "log": [1, 30], "except": 1, "handl": 1, "document": [1, 5], "autom": 1, "test": [1, 32], "contribut": [2, 3, 6], "differ": 2, "stage": [2, 25], "core": [2, 14, 15, 16, 17], "member": 2, "alumni": 2, "consult": 2, "develop": [3, 4], "note": 3, "git": 3, "branch": 3, "model": 3, "releas": [3, 12], "version": 3, "ticket": 3, "system": 3, "updat": 5, "faq": 6, "i": [6, 30], "have": 6, "some": 6, "question": 6, "where": 6, "can": 6, "ask": 6, "got": 6, "an": 6, "error": 6, "while": 6, "us": [6, 29, 30], "quark": [6, 7, 8, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 32], "engin": [6, 7, 8, 24, 25, 26, 27, 30, 32], "what": 6, "do": 6, "how": 6, "threshold": 6, "score": [6, 27], "weight": [6, 22, 27], "work": 6, "why": 6, "keep": 6, "same": 6, "all": 6, "analys": 6, "write": 6, "my": 6, "take": 6, "part": 6, "book": 7, "content": [7, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23], "indic": 7, "tabl": 7, "instal": [8, 9, 10, 30], "integr": 10, "first": 10, "step": [10, 27, 30], "second": 10, "snippet": 10, "As": 10, "you": [10, 28], "go": 10, "directori": 10, "scan": 10, "radiocontrast": [10, 13, 31], "organ": 12, "triag": 12, "team": 12, "respons": 12, "process": 12, "packag": [13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23], "subpackag": [13, 14, 20], "submodul": [13, 14, 16, 17, 18, 19, 20, 22, 23], "cli": [13, 31], "modul": [13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 26], "config": 13, "freshquark": 13, "logo": 13, "report": [13, 27, 29], "rulegener": 13, "analysi": [14, 30], "apkinfo": [14, 25], "parallelquark": 14, "rzapkinfo": 14, "axmlread": 15, "interfac": 16, "baseapkinfo": 16, "struct": 17, "bytecodeobject": [17, 25], "methodobject": 17, "registerobject": [17, 25], "ruleobject": [17, 25], "tableobject": [17, 25], "evalu": [18, 25, 26], "pyeval": [18, 25], "forens": 19, "vt_analysi": 19, "script": [20, 21, 30], "ciphei": 20, "object": [20, 25, 26, 30], "util": [20, 22, 26], "frida": [21, 30], "color": 22, "graph": [22, 29], "output": 22, "pprint": 22, "regex": 22, "tool": [22, 30], "check": [22, 27], "sequenc": 22, "pattern": [22, 30], "within": 22, "two": 22, "list": 22, "webreport": 23, "gener": [23, 31], "insid": 24, "introduct": 25, "dalvik": 25, "bytecod": 25, "loader": 25, "xrule": 25, "explan": 25, "each": 25, "function": 25, "five": 25, "inspect": 25, "level": [25, 27], "1": [25, 27, 30], "2": [25, 27, 30], "3": [25, 27, 30], "4": [25, 27, 30], "5": [25, 27], "project": 26, "overview": 26, "map": 26, "architectur": 26, "diagram": 26, "workflow": 27, "command": 27, "apk": [27, 30], "inform": 27, "extract": 27, "load": 27, "json": [27, 30], "calcul": 27, "6": 27, "summari": [27, 29], "detail": [27, 29], "mit": 28, "program": 28, "better": 28, "commun": 28, "minumum": 28, "requir": [28, 30], "contact": 28, "u": 28, "easi": 29, "intuit": 29, "web": [29, 31], "label": 29, "base": 29, "behavior": 29, "comparison": 29, "radar": 29, "chart": 29, "call": 29, "classif": 29, "ecosystem": 30, "mobil": 30, "secur": 30, "innov": 30, "interact": 30, "dynam": 30, "static": 30, "re": 30, "usabl": 30, "sharabl": 30, "more": 30, "api": [30, 31], "come": 30, "quickstart": 30, "environ": 30, "prepar": 30, "detect": 30, "sampl": 30, "run": [30, 32], "introduc": 30, "findmethodinapk": 30, "samplepath": 30, "targetmethod": 30, "runquarkanalysi": 30, "sample_path": 30, "ruleinst": 30, "quarkresultinst": 30, "behavioroccurlist": 30, "getallstr": 30, "none": 30, "findmethodincal": 30, "callermethod": 30, "behaviorinst": 30, "firstapi": 30, "fullnam": 30, "secondapi": 30, "hasstr": 30, "isregex": 30, "hasurl": 30, "methodcal": 30, "getparamvalu": 30, "isargfrommethod": 30, "getmethodsinarg": 30, "methodinst": 30, "getxreffrom": 30, "getxrefto": 30, "getargu": 30, "host": 30, "objinst": 30, "hookmethod": 30, "method": 30, "watcharg": 30, "watchbacktrac": 30, "watchret": 30, "runfridahook": 30, "apkpackagenam": 30, "methodparamtyp": 30, "secondtowait": 30, "checkcleartext": 30, "inputstr": 30, "getact": 30, "activityinst": 30, "hasintentfilt": 30, "isexport": 30, "analyz": 30, "real": 30, "case": 30, "instasteal": 30, "hook": 30, "contain": 30, "url": 30, "result": 30, "termin": 30, "callcomponentmethod": 30, "trigger": 30, "cwe": 30, "798": 30, "android": 30, "applic": 30, "ovaa": 30, "scipt": 30, "py": 30, "findsecretkeyspec": 30, "hard": 30, "ae": 30, "kei": 30, "94": 30, "loadexternalcod": 30, "921": 30, "checkfileexist": 30, "312": 30, "agent": 30, "j": 30, "89": 30, "androgoat": 30, "executesqlcommand": 30, "926": 30, "dvba": 30, "749": 30, "mstg": 30, "java": 30, "configurejsexecut": 30, "532": 30, "780": 30, "useofcryptographicalgo": 30, "319": 30, "setretrofitbaseurl": 30, "327": 30, "injuredandroid": 30, "20": 30, "diva": 30, "inputweburl": 30, "79": 30, "vuldroid": 30, "loadurlfromint": 30, "usag": 31, "editor": 31, "tutori": 31, "docker": 32}, "envversion": {"sphinx.domains.c": 2, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 8, "sphinx.domains.index": 1, "sphinx.domains.javascript": 2, "sphinx.domains.math": 2, "sphinx.domains.python": 3, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx": 57}, "alltitles": {"Add Rules": [[0, "add-rules"]], "Coding Style": [[1, "coding-style"]], "Formatting": [[1, "formatting"]], "File and folder naming": [[1, "file-and-folder-naming"]], "Copyright header": [[1, "copyright-header"]], "Indentation": [[1, "indentation"]], "Maximum Line Length": [[1, "maximum-line-length"]], "Blank Lines": [[1, "blank-lines"]], "Imports": [[1, "imports"]], "Strings": [[1, "strings"]], "Printing and Logging": [[1, "printing-and-logging"]], "Exceptions": [[1, "exceptions"]], "Naming": [[1, "naming"]], "Exception handling": [[1, "exception-handling"]], "Documentation": [[1, "documentation"]], "Automated testing": [[1, "automated-testing"]], "Contribution": [[2, "contribution"]], "Different stages of core members": [[2, "different-stages-of-core-members"]], "Core members": [[2, "core-members"]], "Alumni": [[2, "alumni"]], "Consultants": [[2, "consultants"]], "Development Notes": [[3, "development-notes"]], "Git Branching Model": [[3, "git-branching-model"]], "Release Versioning": [[3, "release-versioning"]], "Ticketing System": [[3, "ticketing-system"]], "Contribute": [[3, "contribute"]], "Development": [[4, "development"]], "Updating Documentation": [[5, "updating-documentation"]], "FAQ": [[6, "faq"]], "I have some questions. Where can I ask?": [[6, "i-have-some-questions-where-can-i-ask"]], "I got an error while using Quark-Engine. What can I do?": [[6, "i-got-an-error-while-using-quark-engine-what-can-i-do"]], "How do threshold, score, and weight working in Quark Engine?": [[6, "how-do-threshold-score-and-weight-working-in-quark-engine"]], "Why do scores keeping the same in all the analyses?": [[6, "why-do-scores-keeping-the-same-in-all-the-analyses"]], "How can I write a rule?": [[6, "how-can-i-write-a-rule"]], "How can I contribute my rules?": [[6, "how-can-i-contribute-my-rules"]], "Can I take part and contribute to Quark?": [[6, "can-i-take-part-and-contribute-to-quark"]], "Quark-Engine Book": [[7, "quark-engine-book"]], "Contents:": [[7, null]], "Indices and tables": [[7, "indices-and-tables"]], "Installing Quark-Engine": [[8, "installing-quark-engine"]], "Installation": [[9, "installation"]], "Integration": [[10, "integration"]], "First Step: Installation": [[10, "first-step-installation"]], "Second Step: Code Snippet As You Go": [[10, "second-step-code-snippet-as-you-go"]], "Directory Scanning": [[10, "directory-scanning"]], "Radiocontrast": [[10, "radiocontrast"], [31, "radiocontrast"]], "quark": [[11, "quark"]], "Organization": [[12, "organization"]], "Quark triage team": [[12, "quark-triage-team"]], "Responsibilities": [[12, "responsibilities"]], "Triage process": [[12, "triage-process"]], "Release process": [[12, "release-process"]], "quark package": [[13, "quark-package"]], "Subpackages": [[13, "subpackages"], [14, "subpackages"], [20, "subpackages"]], "Submodules": [[13, "submodules"], [14, "submodules"], [16, "submodules"], [17, "submodules"], [18, "submodules"], [19, "submodules"], [20, "submodules"], [22, "submodules"], [23, "submodules"]], "quark.cli module": [[13, "module-quark.cli"]], "quark.config module": [[13, "module-quark.config"]], "quark.freshquark module": [[13, "module-quark.freshquark"]], "quark.logo module": [[13, "module-quark.logo"]], "quark.radiocontrast module": [[13, "module-quark.radiocontrast"]], "quark.report module": [[13, "module-quark.report"]], "quark.rulegeneration module": [[13, "module-quark.rulegeneration"]], "Module contents": [[13, "module-quark"], [14, "module-quark.core"], [15, "module-quark.core.axmlreader"], [16, "module-quark.core.interface"], [17, "module-quark.core.struct"], [18, "module-quark.evaluator"], [19, "module-quark.forensic"], [20, "module-quark.script"], [21, "module-quark.script.frida"], [22, "module-quark.utils"], [23, "module-quark.webreport"]], "quark.core package": [[14, "quark-core-package"]], "quark.core.analysis module": [[14, "module-quark.core.analysis"]], "quark.core.apkinfo module": [[14, "module-quark.core.apkinfo"]], "quark.core.parallelquark module": [[14, "module-quark.core.parallelquark"]], "quark.core.quark module": [[14, "module-quark.core.quark"]], "quark.core.rzapkinfo module": [[14, "module-quark.core.rzapkinfo"]], "quark.core.axmlreader package": [[15, "quark-core-axmlreader-package"]], "quark.core.interface package": [[16, "quark-core-interface-package"]], "quark.core.interface.baseapkinfo module": [[16, "module-quark.core.interface.baseapkinfo"]], "quark.core.struct package": [[17, "quark-core-struct-package"]], "quark.core.struct.bytecodeobject module": [[17, "module-quark.core.struct.bytecodeobject"]], "quark.core.struct.methodobject module": [[17, "module-quark.core.struct.methodobject"]], "quark.core.struct.registerobject module": [[17, "module-quark.core.struct.registerobject"]], "quark.core.struct.ruleobject module": [[17, "module-quark.core.struct.ruleobject"]], "quark.core.struct.tableobject module": [[17, "module-quark.core.struct.tableobject"]], "quark.evaluator package": [[18, "quark-evaluator-package"]], "quark.evaluator.pyeval module": [[18, "module-quark.evaluator.pyeval"]], "quark.forensic package": [[19, "quark-forensic-package"]], "quark.forensic.forensic module": [[19, "module-quark.forensic.forensic"]], "quark.forensic.vt_analysis module": [[19, "module-quark.forensic.vt_analysis"]], "quark.script package": [[20, "quark-script-package"]], "quark.script.ciphey module": [[20, "module-quark.script.ciphey"]], "quark.script.objection module": [[20, "module-quark.script.objection"]], "quark.script.utils module": [[20, "module-quark.script.utils"]], "quark.script.frida package": [[21, "quark-script-frida-package"]], "quark.utils package": [[22, "quark-utils-package"]], "quark.utils.colors module": [[22, "module-quark.utils.colors"]], "quark.utils.graph module": [[22, "module-quark.utils.graph"]], "quark.utils.output module": [[22, "module-quark.utils.output"]], "quark.utils.pprint module": [[22, "module-quark.utils.pprint"]], "quark.utils.regex module": [[22, "module-quark.utils.regex"]], "quark.utils.tools module": [[22, "module-quark.utils.tools"]], "Check the sequence pattern within two list.": [[22, "check-the-sequence-pattern-within-two-list"]], "quark.utils.weight module": [[22, "module-quark.utils.weight"]], "quark.webreport package": [[23, "quark-webreport-package"]], "quark.webreport.generate module": [[23, "module-quark.webreport.generate"]], "Quark-Engine Inside": [[24, "quark-engine-inside"]], "Quark-Engine Objects Introduction": [[25, "quark-engine-objects-introduction"]], "Dalvik Bytecode Loader(quark.Evaluator.pyeval)": [[25, "dalvik-bytecode-loader-quark-evaluator-pyeval"]], "XRule(quark.Objects.XRule)": [[25, "xrule-quark-objects-xrule"]], "Explanation of each function": [[25, "explanation-of-each-function"], [25, "id1"], [25, "id2"], [25, "id3"], [25, "id4"]], "Five-stage inspection": [[25, "five-stage-inspection"]], "Level 1": [[25, "level-1"]], "Level 2": [[25, "level-2"]], "Level 3": [[25, "level-3"]], "Level 4": [[25, "level-4"]], "Level 5": [[25, "level-5"]], "Apkinfo(quark.Objects.Apkinfo)": [[25, "apkinfo-quark-objects-apkinfo"]], "BytecodeObject(quark.Objects.bytecodeObject)": [[25, "bytecodeobject-quark-objects-bytecodeobject"]], "RuleObject(quark.Objects.ruleobject)": [[25, "ruleobject-quark-objects-ruleobject"]], "TableObject(quark.Objects.tableobject)": [[25, "tableobject-quark-objects-tableobject"]], "RegisterObject(quark.Objects.registerobject)": [[25, "registerobject-quark-objects-registerobject"]], "Quark-Engine Project Overview": [[26, "quark-engine-project-overview"]], "Quark-Engine Map": [[26, "quark-engine-map"]], "Quark module architecture diagram": [[26, "quark-module-architecture-diagram"]], "Objects": [[26, "objects"]], "Evaluator": [[26, "evaluator"]], "utils": [[26, "utils"]], "Quark-Engine Workflow": [[27, "quark-engine-workflow"]], "Quark-Engine Step 1(Command Line)": [[27, "quark-engine-step-1-command-line"]], "Quark-Engine Step 2 (APK Information Extract)": [[27, "quark-engine-step-2-apk-information-extract"]], "Quark-Engine Step 3 (Load JSON Rule)": [[27, "quark-engine-step-3-load-json-rule"]], "Quark-Engine Step 4 (Level 1-5 Check)": [[27, "quark-engine-step-4-level-1-5-check"]], "Quark-Engine Step 5 (Weighted Score Calculation)": [[27, "quark-engine-step-5-weighted-score-calculation"]], "Quark-Engine Step 6 (Report)": [[27, "quark-engine-step-6-report"]], "Summary Report": [[27, "summary-report"], [29, "summary-report"]], "Detail Report": [[27, "detail-report"], [29, "detail-report"]], "Quark MIT Program": [[28, "quark-mit-program"]], "Quark to You": [[28, "quark-to-you"]], "You to Quark": [[28, "you-to-quark"]], "Better Community": [[28, "better-community"]], "Minumum Requirements": [[28, "minumum-requirements"]], "Contact us": [[28, "contact-us"]], "Quark Report": [[29, "quark-report"]], "Easy to Use and Intuitive Report": [[29, "easy-to-use-and-intuitive-report"]], "Web Report": [[29, "web-report"]], "Label-based Report": [[29, "label-based-report"]], "Behaviors Comparison Radar Chart": [[29, "behaviors-comparison-radar-chart"]], "Call Graph": [[29, "call-graph"]], "Rule Classification": [[29, "rule-classification"]], "Quark Script": [[30, "quark-script"]], "Ecosystem for Mobile Security Tools": [[30, "ecosystem-for-mobile-security-tools"]], "Innovative & Interactive": [[30, "innovative-interactive"]], "Dynamic & Static Analysis": [[30, "dynamic-static-analysis"]], "Re-Usable & Sharable": [[30, "re-usable-sharable"]], "More APIs to come": [[30, "more-apis-to-come"]], "Quickstart": [[30, "quickstart"]], "Step 1: Environments Requirements": [[30, "step-1-environments-requirements"]], "Step 2: Install Quark Engine": [[30, "step-2-install-quark-engine"]], "Step 3: Prepare Quark Script, Detection Rule and the Sample File": [[30, "step-3-prepare-quark-script-detection-rule-and-the-sample-file"]], "Step 4: Run the script": [[30, "step-4-run-the-script"]], "Introduce of Quark Script APIs": [[30, "introduce-of-quark-script-apis"]], "findMethodInAPK(samplePath, targetMethod)": [[30, "findmethodinapk-samplepath-targetmethod"]], "Rule(rule.json)": [[30, "rule-rule-json"]], "runQuarkAnalysis(SAMPLE_PATH, ruleInstance)": [[30, "runquarkanalysis-sample-path-ruleinstance"]], "quarkResultInstance.behaviorOccurList": [[30, "quarkresultinstance-behavioroccurlist"]], "quarkResultInstance.getAllStrings(none)": [[30, "quarkresultinstance-getallstrings-none"]], "quarkResultInstance.findMethodInCaller(callerMethod, targetMethod)": [[30, "quarkresultinstance-findmethodincaller-callermethod-targetmethod"]], "behaviorInstance.firstAPI.fullName": [[30, "behaviorinstance-firstapi-fullname"]], "behaviorInstance.secondAPI.fullName": [[30, "behaviorinstance-secondapi-fullname"]], "behaviorInstance.hasString(pattern, isRegex)": [[30, "behaviorinstance-hasstring-pattern-isregex"]], "behaviorInstance.hasUrl(none)": [[30, "behaviorinstance-hasurl-none"]], "behaviorInstance.methodCaller": [[30, "behaviorinstance-methodcaller"]], "behaviorInstance.getParamValues(none)": [[30, "behaviorinstance-getparamvalues-none"]], "behaviorInstance.isArgFromMethod(targetMethod)": [[30, "behaviorinstance-isargfrommethod-targetmethod"]], "behaviorInstance.getMethodsInArgs(none)": [[30, "behaviorinstance-getmethodsinargs-none"]], "methodInstance.getXrefFrom(none)": [[30, "methodinstance-getxreffrom-none"]], "methodInstance.getXrefTo(none)": [[30, "methodinstance-getxrefto-none"]], "methodInstance.getArguments(none)": [[30, "methodinstance-getarguments-none"]], "Objection(host)": [[30, "objection-host"]], "objInstance.hookMethod(method, watchArgs, watchBacktrace, watchRet)": [[30, "objinstance-hookmethod-method-watchargs-watchbacktrace-watchret"]], "runFridaHook(apkPackageName, targetMethod, methodParamTypes, secondToWait)": [[30, "runfridahook-apkpackagename-targetmethod-methodparamtypes-secondtowait"]], "checkClearText(inputString)": [[30, "checkcleartext-inputstring"]], "getActivities(samplePath)": [[30, "getactivities-samplepath"]], "activityInstance.hasIntentFilter(none)": [[30, "activityinstance-hasintentfilter-none"]], "activityInstance.isExported(none)": [[30, "activityinstance-isexported-none"]], "Analyzing real case (InstaStealer) using Quark Script": [[30, "analyzing-real-case-instastealer-using-quark-script"]], "Quark Script that dynamic hooks the method containing urls": [[30, "quark-script-that-dynamic-hooks-the-method-containing-urls"]], "Quark Script Result": [[30, "quark-script-result"], [30, "id5"], [30, "id7"], [30, "id9"], [30, "id11"], [30, "id13"], [30, "id15"], [30, "id17"], [30, "id19"], [30, "id21"], [30, "id23"], [30, "id26"], [30, "id28"], [30, "id30"]], "Logs on the Objection terminal (hooking)": [[30, "logs-on-the-objection-terminal-hooking"]], "Method (callComponentMethod) with urls is detected triggered!": [[30, "method-callcomponentmethod-with-urls-is-detected-triggered"]], "Detect CWE-798 in Android Application (ovaa.apk)": [[30, "detect-cwe-798-in-android-application-ovaa-apk"]], "Quark Scipt: CWE-798.py": [[30, "quark-scipt-cwe-798-py"]], "Quark Rule: findSecretKeySpec.json": [[30, "quark-rule-findsecretkeyspec-json"]], "Hard-Coded AES key in the APK file": [[30, "hard-coded-aes-key-in-the-apk-file"]], "Detect CWE-94 in Android Application (ovaa.apk)": [[30, "detect-cwe-94-in-android-application-ovaa-apk"]], "Quark Scipt: CWE-94.py": [[30, "quark-scipt-cwe-94-py"]], "Quark Rule: loadExternalCode.json": [[30, "quark-rule-loadexternalcode-json"]], "Detect CWE-921 in Android Application (ovaa.apk)": [[30, "detect-cwe-921-in-android-application-ovaa-apk"]], "Quark Script CWE-921.py": [[30, "quark-script-cwe-921-py"]], "Quark Rule: checkFileExistence.json": [[30, "quark-rule-checkfileexistence-json"]], "Detect CWE-312 in Android Application (ovaa.apk)": [[30, "detect-cwe-312-in-android-application-ovaa-apk"]], "Quark Script CWE-312.py": [[30, "quark-script-cwe-312-py"]], "Frida Script: agent.js": [[30, "frida-script-agent-js"]], "Detect CWE-89 in Android Application (AndroGoat.apk)": [[30, "detect-cwe-89-in-android-application-androgoat-apk"]], "Quark Script CWE-89.py": [[30, "quark-script-cwe-89-py"]], "Quark Rule: executeSQLCommand.json": [[30, "quark-rule-executesqlcommand-json"]], "Detect CWE-926 in Android Application (dvba.apk)": [[30, "detect-cwe-926-in-android-application-dvba-apk"]], "Quark Script CWE-926.py": [[30, "quark-script-cwe-926-py"]], "Detect CWE-749 in Android Application (MSTG-Android-Java.apk)": [[30, "detect-cwe-749-in-android-application-mstg-android-java-apk"]], "Quark Script CWE-749.py": [[30, "quark-script-cwe-749-py"]], "Quark Rule: configureJsExecution.json": [[30, "quark-rule-configurejsexecution-json"]], "Detect CWE-532 in Android Application (dvba.apk)": [[30, "detect-cwe-532-in-android-application-dvba-apk"]], "Quark Script CWE-532.py": [[30, "quark-script-cwe-532-py"]], "Detect CWE-780 in Android Application (MSTG-Android-Java.apk)": [[30, "detect-cwe-780-in-android-application-mstg-android-java-apk"]], "Quark Script CWE-780.py": [[30, "quark-script-cwe-780-py"]], "Quark Rule: useOfCryptographicAlgo.json": [[30, "quark-rule-useofcryptographicalgo-json"], [30, "id25"]], "Detect CWE-319 in Android Application (ovaa.apk)": [[30, "detect-cwe-319-in-android-application-ovaa-apk"]], "Quark Script CWE-319.py": [[30, "quark-script-cwe-319-py"]], "Quark Rule: setRetrofitBaseUrl.json": [[30, "quark-rule-setretrofitbaseurl-json"]], "Detect CWE-327 in Android Application (InjuredAndroid.apk)": [[30, "detect-cwe-327-in-android-application-injuredandroid-apk"]], "Quark Script CWE-327.py": [[30, "quark-script-cwe-327-py"]], "Detect CWE-20 in Android Application (diva.apk)": [[30, "detect-cwe-20-in-android-application-diva-apk"]], "Quark Script CWE-20.py": [[30, "quark-script-cwe-20-py"]], "Quark Rule: inputWebUrl.json": [[30, "quark-rule-inputweburl-json"]], "Detect CWE-79 in Android Application (Vuldroid.apk)": [[30, "detect-cwe-79-in-android-application-vuldroid-apk"]], "Quark Script CWE-79.py": [[30, "quark-script-cwe-79-py"]], "Quark Rule: loadUrlFromIntent.json": [[30, "quark-rule-loadurlfromintent-json"]], "Rule Generation": [[31, "rule-generation"]], "CLI Usage": [[31, "cli-usage"]], "API Usage": [[31, "api-usage"]], "Web Editor Tutorial": [[31, "web-editor-tutorial"]], "Testing Quark-Engine": [[32, "testing-quark-engine"]], "Running in Docker": [[32, "running-in-docker"]]}, "indexentries": {"radiocontrast (class in quark.radiocontrast)": [[13, "quark.radiocontrast.RadioContrast"]], "report (class in quark.report)": [[13, "quark.report.Report"]], "rulegeneration (class in quark.rulegeneration)": [[13, "quark.rulegeneration.RuleGeneration"]], "analysis() (quark.report.report method)": [[13, "quark.report.Report.analysis"]], "download() (in module quark.freshquark)": [[13, "quark.freshquark.download"]], "entry_point() (in module quark.freshquark)": [[13, "quark.freshquark.entry_point"]], "generate_rule() (quark.radiocontrast.radiocontrast method)": [[13, "quark.radiocontrast.RadioContrast.generate_rule"]], "generate_rule() (quark.rulegeneration.rulegeneration method)": [[13, "quark.rulegeneration.RuleGeneration.generate_rule"]], "get_report() (quark.report.report method)": [[13, "quark.report.Report.get_report"]], "logo() (in module quark.logo)": [[13, "quark.logo.logo"]], "method_recursive_search() (quark.radiocontrast.radiocontrast method)": [[13, "quark.radiocontrast.RadioContrast.method_recursive_search"]], "module": [[13, "module-quark"], [13, "module-quark.cli"], [13, "module-quark.config"], [13, "module-quark.freshquark"], [13, "module-quark.logo"], [13, "module-quark.radiocontrast"], [13, "module-quark.report"], [13, "module-quark.rulegeneration"], [14, "module-quark.core"], [14, "module-quark.core.analysis"], [14, "module-quark.core.apkinfo"], [14, "module-quark.core.parallelquark"], [14, "module-quark.core.quark"], [14, "module-quark.core.rzapkinfo"], [15, "module-quark.core.axmlreader"], [16, "module-quark.core.interface"], [16, "module-quark.core.interface.baseapkinfo"], [17, "module-quark.core.struct"], [17, "module-quark.core.struct.bytecodeobject"], [17, "module-quark.core.struct.methodobject"], [17, "module-quark.core.struct.registerobject"], [17, "module-quark.core.struct.ruleobject"], [17, "module-quark.core.struct.tableobject"], [18, "module-quark.evaluator"], [18, "module-quark.evaluator.pyeval"], [19, "module-quark.forensic"], [19, "module-quark.forensic.forensic"], [19, "module-quark.forensic.vt_analysis"], [20, "module-quark.script"], [20, "module-quark.script.ciphey"], [20, "module-quark.script.objection"], [20, "module-quark.script.utils"], [21, "module-quark.script.frida"], [22, "module-quark.utils"], [22, "module-quark.utils.colors"], [22, "module-quark.utils.graph"], [22, "module-quark.utils.output"], [22, "module-quark.utils.pprint"], [22, "module-quark.utils.regex"], [22, "module-quark.utils.tools"], [22, "module-quark.utils.weight"], [23, "module-quark.webreport"], [23, "module-quark.webreport.generate"]], "quark": [[13, "module-quark"]], "quark.cli": [[13, "module-quark.cli"]], "quark.config": [[13, "module-quark.config"]], "quark.freshquark": [[13, "module-quark.freshquark"]], "quark.logo": [[13, "module-quark.logo"]], "quark.radiocontrast": [[13, "module-quark.radiocontrast"]], "quark.report": [[13, "module-quark.report"]], "quark.rulegeneration": [[13, "module-quark.rulegeneration"]], "update_rule_buffer() (in module quark.cli)": [[13, "quark.cli.update_rule_buffer"]], "androguardimp (class in quark.core.apkinfo)": [[14, "quark.core.apkinfo.AndroguardImp"]], "parallelquark (class in quark.core.parallelquark)": [[14, "quark.core.parallelquark.ParallelQuark"]], "quark (class in quark.core.quark)": [[14, "quark.core.quark.Quark"]], "quarkanalysis (class in quark.core.analysis)": [[14, "quark.core.analysis.QuarkAnalysis"]], "rizincache (in module quark.core.rzapkinfo)": [[14, "quark.core.rzapkinfo.RizinCache"]], "rizinimp (class in quark.core.rzapkinfo)": [[14, "quark.core.rzapkinfo.RizinImp"]], "activities (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.activities"]], "activities (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.activities"]], "add_table_row() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.add_table_row"]], "all_methods (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.all_methods"]], "all_methods (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.all_methods"]], "analysis (quark.core.apkinfo.androguardimp attribute)": [[14, "quark.core.apkinfo.AndroguardImp.analysis"]], "android_apis (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.android_apis"]], "android_apis (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.android_apis"]], "apk (quark.core.apkinfo.androguardimp attribute)": [[14, "quark.core.apkinfo.AndroguardImp.apk"]], "apk_filename (quark.core.rzapkinfo.rizinimp attribute)": [[14, "quark.core.rzapkinfo.RizinImp.apk_filename"]], "apk_filepath (quark.core.rzapkinfo.rizinimp attribute)": [[14, "quark.core.rzapkinfo.RizinImp.apk_filepath"]], "apply_rules() (quark.core.parallelquark.parallelquark method)": [[14, "quark.core.parallelquark.ParallelQuark.apply_rules"]], "call_graph_analysis_list (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.call_graph_analysis_list"]], "check_parameter() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.check_parameter"]], "check_parameter_on_single_method() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.check_parameter_on_single_method"]], "check_parameter_values() (quark.core.quark.quark static method)": [[14, "quark.core.quark.Quark.check_parameter_values"]], "check_sequence() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.check_sequence"]], "clean_result() (quark.core.analysis.quarkanalysis method)": [[14, "quark.core.analysis.QuarkAnalysis.clean_result"]], "close() (quark.core.parallelquark.parallelquark method)": [[14, "quark.core.parallelquark.ParallelQuark.close"]], "core_library (quark.core.rzapkinfo.rizinimp attribute)": [[14, "quark.core.rzapkinfo.RizinImp.core_library"]], "crime_description (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.crime_description"]], "custom_methods (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.custom_methods"]], "custom_methods (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.custom_methods"]], "dalvikvmformat (quark.core.apkinfo.androguardimp attribute)": [[14, "quark.core.apkinfo.AndroguardImp.dalvikvmformat"]], "find_api_usage() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.find_api_usage"]], "find_intersection() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.find_intersection"]], "find_method() (quark.core.apkinfo.androguardimp method)": [[14, "quark.core.apkinfo.AndroguardImp.find_method"]], "find_method() (quark.core.rzapkinfo.rizinimp method)": [[14, "quark.core.rzapkinfo.RizinImp.find_method"]], "find_previous_method() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.find_previous_method"]], "first_api (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.first_api"]], "generate_json_report() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.generate_json_report"]], "get_json_report() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.get_json_report"]], "get_method_bytecode() (quark.core.apkinfo.androguardimp method)": [[14, "quark.core.apkinfo.AndroguardImp.get_method_bytecode"]], "get_method_bytecode() (quark.core.rzapkinfo.rizinimp method)": [[14, "quark.core.rzapkinfo.RizinImp.get_method_bytecode"]], "get_strings() (quark.core.apkinfo.androguardimp method)": [[14, "quark.core.apkinfo.AndroguardImp.get_strings"]], "get_strings() (quark.core.rzapkinfo.rizinimp method)": [[14, "quark.core.rzapkinfo.RizinImp.get_strings"]], "get_wrapper_smali() (quark.core.apkinfo.androguardimp method)": [[14, "quark.core.apkinfo.AndroguardImp.get_wrapper_smali"]], "get_wrapper_smali() (quark.core.rzapkinfo.rizinimp method)": [[14, "quark.core.rzapkinfo.RizinImp.get_wrapper_smali"]], "init_label_report_table() (in module quark.core.analysis)": [[14, "quark.core.analysis.init_label_report_table"]], "init_pretty_table() (in module quark.core.analysis)": [[14, "quark.core.analysis.init_pretty_table"]], "json_report (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.json_report"]], "label_report_table (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.label_report_table"]], "level_1_result (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.level_1_result"]], "level_2_result (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.level_2_result"]], "level_3_result (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.level_3_result"]], "level_4_result (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.level_4_result"]], "level_5_result (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.level_5_result"]], "lowerfunc() (quark.core.apkinfo.androguardimp method)": [[14, "quark.core.apkinfo.AndroguardImp.lowerfunc"]], "lowerfunc() (quark.core.rzapkinfo.rizinimp method)": [[14, "quark.core.rzapkinfo.RizinImp.lowerfunc"]], "method_recursive_search() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.method_recursive_search"]], "parent_wrapper_mapping (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.parent_wrapper_mapping"]], "permissions (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.permissions"]], "permissions (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.permissions"]], "quark.core": [[14, "module-quark.core"]], "quark.core.analysis": [[14, "module-quark.core.analysis"]], "quark.core.apkinfo": [[14, "module-quark.core.apkinfo"]], "quark.core.parallelquark": [[14, "module-quark.core.parallelquark"]], "quark.core.quark": [[14, "module-quark.core.quark"]], "quark.core.rzapkinfo": [[14, "module-quark.core.rzapkinfo"]], "ret_type (quark.core.rzapkinfo.rizinimp attribute)": [[14, "quark.core.rzapkinfo.RizinImp.ret_type"]], "run() (quark.core.parallelquark.parallelquark method)": [[14, "quark.core.parallelquark.ParallelQuark.run"]], "run() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.run"]], "score_sum (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.score_sum"]], "second_api (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.second_api"]], "show_call_graph() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.show_call_graph"]], "show_detail_report() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.show_detail_report"]], "show_label_report() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.show_label_report"]], "show_rule_classification() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.show_rule_classification"]], "show_summary_report() (quark.core.quark.quark method)": [[14, "quark.core.quark.Quark.show_summary_report"]], "subclass_relationships (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.subclass_relationships"]], "subclass_relationships (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.subclass_relationships"]], "summary_report_table (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.summary_report_table"]], "superclass_relationships (quark.core.apkinfo.androguardimp property)": [[14, "quark.core.apkinfo.AndroguardImp.superclass_relationships"]], "superclass_relationships (quark.core.rzapkinfo.rizinimp property)": [[14, "quark.core.rzapkinfo.RizinImp.superclass_relationships"]], "upperfunc() (quark.core.apkinfo.androguardimp method)": [[14, "quark.core.apkinfo.AndroguardImp.upperfunc"]], "upperfunc() (quark.core.rzapkinfo.rizinimp method)": [[14, "quark.core.rzapkinfo.RizinImp.upperfunc"]], "weight_sum (quark.core.analysis.quarkanalysis attribute)": [[14, "quark.core.analysis.QuarkAnalysis.weight_sum"]], "axmlexception": [[15, "quark.core.axmlreader.AxmlException"]], "axmlreader (class in quark.core.axmlreader)": [[15, "quark.core.axmlreader.AxmlReader"]], "resvalue (class in quark.core.axmlreader)": [[15, "quark.core.axmlreader.ResValue"]], "res_value_type (class in quark.core.axmlreader)": [[15, "quark.core.axmlreader.Res_value_type"]], "type_attribute (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_ATTRIBUTE"]], "type_dimension (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_DIMENSION"]], "type_dynamic_attribute (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_DYNAMIC_ATTRIBUTE"]], "type_dynamic_reference (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_DYNAMIC_REFERENCE"]], "type_first_color_int (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_FIRST_COLOR_INT"]], "type_first_int (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_FIRST_INT"]], "type_float (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_FLOAT"]], "type_fraction (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_FRACTION"]], "type_int_boolean (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_BOOLEAN"]], "type_int_color_argb4 (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB4"]], "type_int_color_argb8 (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_ARGB8"]], "type_int_color_rgb4 (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB4"]], "type_int_color_rgb8 (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_COLOR_RGB8"]], "type_int_dec (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_DEC"]], "type_int_hex (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_INT_HEX"]], "type_last_color_int (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_LAST_COLOR_INT"]], "type_last_int (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_LAST_INT"]], "type_null (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_NULL"]], "type_reference (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_REFERENCE"]], "type_string (quark.core.axmlreader.res_value_type attribute)": [[15, "quark.core.axmlreader.Res_value_type.TYPE_STRING"]], "axml_size (quark.core.axmlreader.axmlreader property)": [[15, "quark.core.axmlreader.AxmlReader.axml_size"]], "data (quark.core.axmlreader.resvalue attribute)": [[15, "quark.core.axmlreader.ResValue.data"]], "file_size (quark.core.axmlreader.axmlreader property)": [[15, "quark.core.axmlreader.AxmlReader.file_size"]], "get_attributes() (quark.core.axmlreader.axmlreader method)": [[15, "quark.core.axmlreader.AxmlReader.get_attributes"]], "get_string() (quark.core.axmlreader.axmlreader method)": [[15, "quark.core.axmlreader.AxmlReader.get_string"]], "get_xml_tree() (quark.core.axmlreader.axmlreader method)": [[15, "quark.core.axmlreader.AxmlReader.get_xml_tree"]], "name (quark.core.axmlreader.resvalue attribute)": [[15, "quark.core.axmlreader.ResValue.name"]], "namespace (quark.core.axmlreader.resvalue attribute)": [[15, "quark.core.axmlreader.ResValue.namespace"]], "quark.core.axmlreader": [[15, "module-quark.core.axmlreader"]], "type (quark.core.axmlreader.resvalue attribute)": [[15, "quark.core.axmlreader.ResValue.type"]], "value (quark.core.axmlreader.resvalue attribute)": [[15, "quark.core.axmlreader.ResValue.value"]], "baseapkinfo (class in quark.core.interface.baseapkinfo)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo"]], "activities (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.activities"]], "all_methods (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.all_methods"]], "android_apis (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.android_apis"]], "apk_filename (quark.core.interface.baseapkinfo.baseapkinfo attribute)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.apk_filename"]], "apk_filepath (quark.core.interface.baseapkinfo.baseapkinfo attribute)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.apk_filepath"]], "core_library (quark.core.interface.baseapkinfo.baseapkinfo attribute)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.core_library"]], "custom_methods (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.custom_methods"]], "filename (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.filename"]], "filesize (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.filesize"]], "find_method() (quark.core.interface.baseapkinfo.baseapkinfo method)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.find_method"]], "get_method_bytecode() (quark.core.interface.baseapkinfo.baseapkinfo method)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.get_method_bytecode"]], "get_strings() (quark.core.interface.baseapkinfo.baseapkinfo method)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.get_strings"]], "get_subclasses (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.get_subclasses"]], "get_wrapper_smali() (quark.core.interface.baseapkinfo.baseapkinfo method)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.get_wrapper_smali"]], "lowerfunc() (quark.core.interface.baseapkinfo.baseapkinfo method)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.lowerfunc"]], "md5 (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.md5"]], "permissions (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.permissions"]], "quark.core.interface": [[16, "module-quark.core.interface"]], "quark.core.interface.baseapkinfo": [[16, "module-quark.core.interface.baseapkinfo"]], "ret_type (quark.core.interface.baseapkinfo.baseapkinfo attribute)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.ret_type"]], "superclass_relationships (quark.core.interface.baseapkinfo.baseapkinfo property)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.superclass_relationships"]], "upperfunc() (quark.core.interface.baseapkinfo.baseapkinfo method)": [[16, "quark.core.interface.baseapkinfo.BaseApkinfo.upperfunc"]], "bytecodeobject (class in quark.core.struct.bytecodeobject)": [[17, "quark.core.struct.bytecodeobject.BytecodeObject"]], "methodobject (class in quark.core.struct.methodobject)": [[17, "quark.core.struct.methodobject.MethodObject"]], "registerobject (class in quark.core.struct.registerobject)": [[17, "quark.core.struct.registerobject.RegisterObject"]], "ruleobject (class in quark.core.struct.ruleobject)": [[17, "quark.core.struct.ruleobject.RuleObject"]], "tableobject (class in quark.core.struct.tableobject)": [[17, "quark.core.struct.tableobject.TableObject"]], "access_flags (quark.core.struct.methodobject.methodobject attribute)": [[17, "quark.core.struct.methodobject.MethodObject.access_flags"]], "api (quark.core.struct.ruleobject.ruleobject property)": [[17, "quark.core.struct.ruleobject.RuleObject.api"]], "cache (quark.core.struct.methodobject.methodobject attribute)": [[17, "quark.core.struct.methodobject.MethodObject.cache"]], "called_by_func (quark.core.struct.registerobject.registerobject property)": [[17, "quark.core.struct.registerobject.RegisterObject.called_by_func"]], "check_item (quark.core.struct.ruleobject.ruleobject attribute)": [[17, "quark.core.struct.ruleobject.RuleObject.check_item"]], "class_name (quark.core.struct.methodobject.methodobject attribute)": [[17, "quark.core.struct.methodobject.MethodObject.class_name"]], "crime (quark.core.struct.ruleobject.ruleobject property)": [[17, "quark.core.struct.ruleobject.RuleObject.crime"]], "current_type (quark.core.struct.registerobject.registerobject property)": [[17, "quark.core.struct.registerobject.RegisterObject.current_type"]], "descriptor (quark.core.struct.methodobject.methodobject attribute)": [[17, "quark.core.struct.methodobject.MethodObject.descriptor"]], "full_name (quark.core.struct.methodobject.methodobject property)": [[17, "quark.core.struct.methodobject.MethodObject.full_name"]], "get_obj_list() (quark.core.struct.tableobject.tableobject method)": [[17, "quark.core.struct.tableobject.TableObject.get_obj_list"]], "get_score() (quark.core.struct.ruleobject.ruleobject method)": [[17, "quark.core.struct.ruleobject.RuleObject.get_score"]], "get_table() (quark.core.struct.tableobject.tableobject method)": [[17, "quark.core.struct.tableobject.TableObject.get_table"]], "hash_index (quark.core.struct.registerobject.registerobject property)": [[17, "quark.core.struct.registerobject.RegisterObject.hash_index"]], "hash_table (quark.core.struct.tableobject.tableobject attribute)": [[17, "quark.core.struct.tableobject.TableObject.hash_table"]], "insert() (quark.core.struct.tableobject.tableobject method)": [[17, "quark.core.struct.tableobject.TableObject.insert"]], "is_android_api() (quark.core.struct.methodobject.methodobject method)": [[17, "quark.core.struct.methodobject.MethodObject.is_android_api"]], "label (quark.core.struct.ruleobject.ruleobject property)": [[17, "quark.core.struct.ruleobject.RuleObject.label"]], "mnemonic (quark.core.struct.bytecodeobject.bytecodeobject property)": [[17, "quark.core.struct.bytecodeobject.BytecodeObject.mnemonic"]], "name (quark.core.struct.methodobject.methodobject attribute)": [[17, "quark.core.struct.methodobject.MethodObject.name"]], "parameter (quark.core.struct.bytecodeobject.bytecodeobject property)": [[17, "quark.core.struct.bytecodeobject.BytecodeObject.parameter"]], "permission (quark.core.struct.ruleobject.ruleobject property)": [[17, "quark.core.struct.ruleobject.RuleObject.permission"]], "pop() (quark.core.struct.tableobject.tableobject method)": [[17, "quark.core.struct.tableobject.TableObject.pop"]], "quark.core.struct": [[17, "module-quark.core.struct"]], "quark.core.struct.bytecodeobject": [[17, "module-quark.core.struct.bytecodeobject"]], "quark.core.struct.methodobject": [[17, "module-quark.core.struct.methodobject"]], "quark.core.struct.registerobject": [[17, "module-quark.core.struct.registerobject"]], "quark.core.struct.ruleobject": [[17, "module-quark.core.struct.ruleobject"]], "quark.core.struct.tableobject": [[17, "module-quark.core.struct.tableobject"]], "register_name (quark.core.struct.registerobject.registerobject property)": [[17, "quark.core.struct.registerobject.RegisterObject.register_name"]], "registers (quark.core.struct.bytecodeobject.bytecodeobject property)": [[17, "quark.core.struct.bytecodeobject.BytecodeObject.registers"]], "rule_filename (quark.core.struct.ruleobject.ruleobject attribute)": [[17, "quark.core.struct.ruleobject.RuleObject.rule_filename"]], "score (quark.core.struct.ruleobject.ruleobject property)": [[17, "quark.core.struct.ruleobject.RuleObject.score"]], "type_histroy (quark.core.struct.registerobject.registerobject property)": [[17, "quark.core.struct.registerobject.RegisterObject.type_histroy"]], "value (quark.core.struct.registerobject.registerobject property)": [[17, "quark.core.struct.registerobject.RegisterObject.value"]], "aget_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.AGET_KIND"]], "aget_wide_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.AGET_WIDE_KIND"]], "aput_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.APUT_KIND"]], "aput_wide_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.APUT_WIDE_KIND"]], "binop_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.BINOP_KIND"]], "cast_type() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CAST_TYPE"]], "const() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST"]], "const_class() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_CLASS"]], "const_four() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_FOUR"]], "const_highsixteen() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_HIGHSIXTEEN"]], "const_sixteen() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_SIXTEEN"]], "const_string() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_STRING"]], "const_wide() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_WIDE"]], "const_wide_highsixteen() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_WIDE_HIGHSIXTEEN"]], "const_wide_sixteen() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_WIDE_SIXTEEN"]], "const_wide_thirty_two() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.CONST_WIDE_THIRTY_TWO"]], "filled_new_array_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.FILLED_NEW_ARRAY_KIND"]], "invoke_custom() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_CUSTOM"]], "invoke_direct() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_DIRECT"]], "invoke_interface() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_INTERFACE"]], "invoke_polymorphic() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_POLYMORPHIC"]], "invoke_static() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_STATIC"]], "invoke_super() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_SUPER"]], "invoke_virtual() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_VIRTUAL"]], "invoke_virtual_range() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.INVOKE_VIRTUAL_RANGE"]], "move_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.MOVE_KIND"]], "move_result() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.MOVE_RESULT"]], "move_result_object() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.MOVE_RESULT_OBJECT"]], "move_result_wide() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.MOVE_RESULT_WIDE"]], "neg_and_not_kind() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.NEG_AND_NOT_KIND"]], "new_array() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.NEW_ARRAY"]], "new_instance() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.NEW_INSTANCE"]], "pyeval (class in quark.evaluator.pyeval)": [[18, "quark.evaluator.pyeval.PyEval"]], "get_method_pattern() (quark.evaluator.pyeval.pyeval static method)": [[18, "quark.evaluator.pyeval.PyEval.get_method_pattern"]], "logger() (in module quark.evaluator.pyeval)": [[18, "quark.evaluator.pyeval.logger"]], "quark.evaluator": [[18, "module-quark.evaluator"]], "quark.evaluator.pyeval": [[18, "module-quark.evaluator.pyeval"]], "show_table() (quark.evaluator.pyeval.pyeval method)": [[18, "quark.evaluator.pyeval.PyEval.show_table"]], "forensic (class in quark.forensic.forensic)": [[19, "quark.forensic.forensic.Forensic"]], "vtanalysis (class in quark.forensic.vt_analysis)": [[19, "quark.forensic.vt_analysis.VTAnalysis"]], "all_strings (quark.forensic.forensic.forensic attribute)": [[19, "quark.forensic.forensic.Forensic.all_strings"]], "analyze_multi_file() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.analyze_multi_file"]], "analyze_single_file() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.analyze_single_file"]], "apk (quark.forensic.forensic.forensic attribute)": [[19, "quark.forensic.forensic.Forensic.apk"]], "change_api_key() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.change_api_key"]], "check_api_key_available() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.check_api_key_available"]], "get_all_strings() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_all_strings"]], "get_android_api() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_android_api"]], "get_api_keys_list() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.get_api_keys_list"]], "get_base64() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_base64"]], "get_content() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_content"]], "get_file() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_file"]], "get_file_md5() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.get_file_md5"]], "get_ip() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_ip"]], "get_reports() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.get_reports"]], "get_url() (quark.forensic.forensic.forensic method)": [[19, "quark.forensic.forensic.Forensic.get_url"]], "quark.forensic": [[19, "module-quark.forensic"]], "quark.forensic.forensic": [[19, "module-quark.forensic.forensic"]], "quark.forensic.vt_analysis": [[19, "module-quark.forensic.vt_analysis"]], "retreive_report() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.retreive_report"]], "scan_file() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.scan_file"]], "set_progress() (quark.forensic.vt_analysis.vtanalysis method)": [[19, "quark.forensic.vt_analysis.VTAnalysis.set_progress"]], "activity (class in quark.script)": [[20, "quark.script.Activity"]], "behavior (class in quark.script)": [[20, "quark.script.Behavior"]], "defaultruleset (class in quark.script)": [[20, "quark.script.DefaultRuleset"]], "method (class in quark.script)": [[20, "quark.script.Method"]], "objection (class in quark.script.objection)": [[20, "quark.script.objection.Objection"]], "quarkresult (class in quark.script)": [[20, "quark.script.QuarkResult"]], "ruleset (class in quark.script)": [[20, "quark.script.Ruleset"]], "behavioroccurlist (quark.script.quarkresult property)": [[20, "quark.script.QuarkResult.behaviorOccurList"]], "checkcleartext() (in module quark.script.ciphey)": [[20, "quark.script.ciphey.checkClearText"]], "classname (quark.script.method property)": [[20, "quark.script.Method.className"]], "convertmethodtostring() (in module quark.script.objection)": [[20, "quark.script.objection.convertMethodToString"]], "descriptor (quark.script.method property)": [[20, "quark.script.Method.descriptor"]], "findmethodinapk() (in module quark.script)": [[20, "quark.script.findMethodInAPK"]], "findmethodincaller() (quark.script.quarkresult method)": [[20, "quark.script.QuarkResult.findMethodInCaller"]], "fullname (quark.script.method property)": [[20, "quark.script.Method.fullName"]], "getactivities() (in module quark.script)": [[20, "quark.script.getActivities"]], "getallstrings() (quark.script.quarkresult method)": [[20, "quark.script.QuarkResult.getAllStrings"]], "getarguments() (quark.script.method method)": [[20, "quark.script.Method.getArguments"]], "getmethodxreffrom() (quark.script.quarkresult method)": [[20, "quark.script.QuarkResult.getMethodXrefFrom"]], "getmethodxrefto() (quark.script.quarkresult method)": [[20, "quark.script.QuarkResult.getMethodXrefTo"]], "getmethodsinargs() (quark.script.behavior method)": [[20, "quark.script.Behavior.getMethodsInArgs"]], "getparamvalues() (quark.script.behavior method)": [[20, "quark.script.Behavior.getParamValues"]], "getxreffrom() (quark.script.method method)": [[20, "quark.script.Method.getXrefFrom"]], "getxrefto() (quark.script.method method)": [[20, "quark.script.Method.getXrefTo"]], "hasintentfilter() (quark.script.activity method)": [[20, "quark.script.Activity.hasIntentFilter"]], "hasstring() (quark.script.behavior method)": [[20, "quark.script.Behavior.hasString"]], "hasurl() (quark.script.behavior method)": [[20, "quark.script.Behavior.hasUrl"]], "hookmethod() (quark.script.objection.objection method)": [[20, "quark.script.objection.Objection.hookMethod"]], "isargfrommethod() (quark.script.behavior method)": [[20, "quark.script.Behavior.isArgFromMethod"]], "isargumenttrue() (in module quark.script.utils)": [[20, "quark.script.utils.isArgumentTrue"]], "isexported() (quark.script.activity method)": [[20, "quark.script.Activity.isExported"]], "methodname (quark.script.method property)": [[20, "quark.script.Method.methodName"]], "quark.script": [[20, "module-quark.script"]], "quark.script.ciphey": [[20, "module-quark.script.ciphey"]], "quark.script.objection": [[20, "module-quark.script.objection"]], "quark.script.utils": [[20, "module-quark.script.utils"]], "runquarkanalysis() (in module quark.script)": [[20, "quark.script.runQuarkAnalysis"]], "behavior (class in quark.script.frida)": [[21, "quark.script.frida.Behavior"]], "fridaresult (class in quark.script.frida)": [[21, "quark.script.frida.FridaResult"]], "methodcalleventdispatcher (class in quark.script.frida)": [[21, "quark.script.frida.MethodCallEventDispatcher"]], "behavioroccurlist (quark.script.frida.fridaresult property)": [[21, "quark.script.frida.FridaResult.behaviorOccurList"]], "getparamvalues() (quark.script.frida.behavior method)": [[21, "quark.script.frida.Behavior.getParamValues"]], "handlecapturedevent() (quark.script.frida.methodcalleventdispatcher method)": [[21, "quark.script.frida.MethodCallEventDispatcher.handleCapturedEvent"]], "hasstring() (quark.script.frida.behavior method)": [[21, "quark.script.frida.Behavior.hasString"]], "hasurl() (quark.script.frida.behavior method)": [[21, "quark.script.frida.Behavior.hasUrl"]], "quark.script.frida": [[21, "module-quark.script.frida"]], "runfridahook() (in module quark.script.frida)": [[21, "quark.script.frida.runFridaHook"]], "startwatchingmethodcall() (quark.script.frida.methodcalleventdispatcher method)": [[21, "quark.script.frida.MethodCallEventDispatcher.startWatchingMethodCall"]], "stopwatchingmethodcall() (quark.script.frida.methodcalleventdispatcher method)": [[21, "quark.script.frida.MethodCallEventDispatcher.stopWatchingMethodCall"]], "high (quark.utils.weight.level_info attribute)": [[22, "quark.utils.weight.LEVEL_INFO.High"]], "level_info (class in quark.utils.weight)": [[22, "quark.utils.weight.LEVEL_INFO"]], "low (quark.utils.weight.level_info attribute)": [[22, "quark.utils.weight.LEVEL_INFO.LOW"]], "moderate (quark.utils.weight.level_info attribute)": [[22, "quark.utils.weight.LEVEL_INFO.Moderate"]], "weight (class in quark.utils.weight)": [[22, "quark.utils.weight.Weight"]], "black() (in module quark.utils.colors)": [[22, "quark.utils.colors.black"]], "blue() (in module quark.utils.colors)": [[22, "quark.utils.colors.blue"]], "bold() (in module quark.utils.colors)": [[22, "quark.utils.colors.bold"]], "calculate() (quark.utils.weight.weight method)": [[22, "quark.utils.weight.Weight.calculate"]], "call_graph() (in module quark.utils.graph)": [[22, "quark.utils.graph.call_graph"]], "color() (in module quark.utils.colors)": [[22, "quark.utils.colors.color"]], "colorful_report() (in module quark.utils.colors)": [[22, "quark.utils.colors.colorful_report"]], "contains() (in module quark.utils.tools)": [[22, "quark.utils.tools.contains"]], "cyan() (in module quark.utils.colors)": [[22, "quark.utils.colors.cyan"]], "descriptor_to_androguard_format() (in module quark.utils.tools)": [[22, "quark.utils.tools.descriptor_to_androguard_format"]], "extract_content() (in module quark.utils.regex)": [[22, "quark.utils.regex.extract_content"]], "extract_file() (in module quark.utils.regex)": [[22, "quark.utils.regex.extract_file"]], "extract_ip() (in module quark.utils.regex)": [[22, "quark.utils.regex.extract_ip"]], "extract_url() (in module quark.utils.regex)": [[22, "quark.utils.regex.extract_url"]], "filter_api_by_usage_count() (in module quark.utils.tools)": [[22, "quark.utils.tools.filter_api_by_usage_count"]], "get_arguments_from_argument_str() (in module quark.utils.tools)": [[22, "quark.utils.tools.get_arguments_from_argument_str"]], "get_parenthetic_contents() (in module quark.utils.tools)": [[22, "quark.utils.tools.get_parenthetic_contents"]], "get_rule_classification_data() (in module quark.utils.output)": [[22, "quark.utils.output.get_rule_classification_data"]], "green() (in module quark.utils.colors)": [[22, "quark.utils.colors.green"]], "lightblue() (in module quark.utils.colors)": [[22, "quark.utils.colors.lightblue"]], "lightyellow() (in module quark.utils.colors)": [[22, "quark.utils.colors.lightyellow"]], "magenta() (in module quark.utils.colors)": [[22, "quark.utils.colors.magenta"]], "output_parent_function_graph() (in module quark.utils.output)": [[22, "quark.utils.output.output_parent_function_graph"]], "output_parent_function_json() (in module quark.utils.output)": [[22, "quark.utils.output.output_parent_function_json"]], "output_parent_function_table() (in module quark.utils.output)": [[22, "quark.utils.output.output_parent_function_table"]], "print_error() (in module quark.utils.pprint)": [[22, "quark.utils.pprint.print_error"]], "print_info() (in module quark.utils.pprint)": [[22, "quark.utils.pprint.print_info"]], "print_success() (in module quark.utils.pprint)": [[22, "quark.utils.pprint.print_success"]], "print_warning() (in module quark.utils.pprint)": [[22, "quark.utils.pprint.print_warning"]], "quark.utils": [[22, "module-quark.utils"]], "quark.utils.colors": [[22, "module-quark.utils.colors"]], "quark.utils.graph": [[22, "module-quark.utils.graph"]], "quark.utils.output": [[22, "module-quark.utils.output"]], "quark.utils.pprint": [[22, "module-quark.utils.pprint"]], "quark.utils.regex": [[22, "module-quark.utils.regex"]], "quark.utils.tools": [[22, "module-quark.utils.tools"]], "quark.utils.weight": [[22, "module-quark.utils.weight"]], "red() (in module quark.utils.colors)": [[22, "quark.utils.colors.red"]], "remove_dup_list() (in module quark.utils.tools)": [[22, "quark.utils.tools.remove_dup_list"]], "select_label_menu() (in module quark.utils.graph)": [[22, "quark.utils.graph.select_label_menu"]], "show_comparison_graph() (in module quark.utils.graph)": [[22, "quark.utils.graph.show_comparison_graph"]], "table() (in module quark.utils.pprint)": [[22, "quark.utils.pprint.table"]], "validate_base64() (in module quark.utils.regex)": [[22, "quark.utils.regex.validate_base64"]], "validate_ip_address() (in module quark.utils.regex)": [[22, "quark.utils.regex.validate_ip_address"]], "validate_url() (in module quark.utils.regex)": [[22, "quark.utils.regex.validate_url"]], "white() (in module quark.utils.colors)": [[22, "quark.utils.colors.white"]], "wrapper_lookup() (in module quark.utils.graph)": [[22, "quark.utils.graph.wrapper_lookup"]], "yellow() (in module quark.utils.colors)": [[22, "quark.utils.colors.yellow"]], "reportgenerator (class in quark.webreport.generate)": [[23, "quark.webreport.generate.ReportGenerator"]], "count_confidence_rule_number() (in module quark.webreport.generate)": [[23, "quark.webreport.generate.count_confidence_rule_number"]], "get_all_labels() (in module quark.webreport.generate)": [[23, "quark.webreport.generate.get_all_labels"]], "get_analysis_report_html() (quark.webreport.generate.reportgenerator method)": [[23, "quark.webreport.generate.ReportGenerator.get_analysis_report_html"]], "get_five_stages_labels() (in module quark.webreport.generate)": [[23, "quark.webreport.generate.get_five_stages_labels"]], "get_json_report_html() (in module quark.webreport.generate)": [[23, "quark.webreport.generate.get_json_report_html"]], "get_rule_generate_editor_html() (quark.webreport.generate.reportgenerator method)": [[23, "quark.webreport.generate.ReportGenerator.get_rule_generate_editor_html"]], "insert_genrule_report_html() (quark.webreport.generate.reportgenerator method)": [[23, "quark.webreport.generate.ReportGenerator.insert_genrule_report_html"]], "insert_radarchart_html() (quark.webreport.generate.reportgenerator method)": [[23, "quark.webreport.generate.ReportGenerator.insert_radarchart_html"]], "insert_report_html() (quark.webreport.generate.reportgenerator method)": [[23, "quark.webreport.generate.ReportGenerator.insert_report_html"]], "insert_sample_information_html() (quark.webreport.generate.reportgenerator method)": [[23, "quark.webreport.generate.ReportGenerator.insert_sample_information_html"]], "quark.webreport": [[23, "module-quark.webreport"]], "quark.webreport.generate": [[23, "module-quark.webreport.generate"]]}})quark-engine-23.4.1/docs/make.bat000066400000000000000000000014371442215066700165400ustar00rootroot00000000000000@ECHO OFF pushd %~dp0 REM Command file for Sphinx documentation if "%SPHINXBUILD%" == "" ( set SPHINXBUILD=sphinx-build ) set SOURCEDIR=source set BUILDDIR=build if "%1" == "" goto help %SPHINXBUILD% >NUL 2>NUL if errorlevel 9009 ( echo. echo.The 'sphinx-build' command was not found. Make sure you have Sphinx echo.installed, then set the SPHINXBUILD environment variable to point echo.to the full path of the 'sphinx-build' executable. Alternatively you echo.may add the Sphinx directory to PATH. echo. echo.If you don't have Sphinx installed, grab it from echo.http://sphinx-doc.org/ exit /b 1 ) %SPHINXBUILD% -M %1 %SOURCEDIR% %BUILDDIR% %SPHINXOPTS% %O% goto end :help %SPHINXBUILD% -M help %SOURCEDIR% %BUILDDIR% %SPHINXOPTS% %O% :end popd quark-engine-23.4.1/docs/source/000077500000000000000000000000001442215066700164265ustar00rootroot00000000000000quark-engine-23.4.1/docs/source/addRules.rst000066400000000000000000000110661442215066700207270ustar00rootroot00000000000000+++++++++ Add Rules +++++++++ Android malware analysis engine is not a new story. Every antivirus company has their own secrets to build it. With curiosity, we develop a malware scoring system from the perspective of Taiwan Criminal Law in an easy but solid way. We have an order theory of criminal which explains stages of committing a crime. For example, crime of murder consists of five stages, they are determined, conspiracy, preparation, start and practice. The latter the stage the more we’re sure that the crime is practiced. According to the above principle, we developed our order theory of android malware. We develop five stages to see if the malicious activity is being practiced. They are 1. Permission requested. 2. Native API call. 3. Certain combination of native API. 4. Calling sequence of native API. 5. APIs that handle the same register. We not only define malicious activities and their stages but also develop weights and thresholds for calculating the threat level of a malware. But before we explain how to set weights and thresholds, we need to define crimes and corresponding five stages. An example of defining crime "Send Location via SMS" is shown below. We use json format to construct the rule of the crime. .. code-block:: python :linenos: { "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "score": 4 } So let me walk you through the json file. .. code-block:: python "crime": "Send Location via SMS" First, we define the crime. Our principle of constructing a crime is ``Action + Target``. In this example, the action is "Send SMS" and the target is Location info. Therefore, the crime of our first rule is defined as: "Send Location via SMS". .. code-block:: python "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ] ``permission`` is where we fill in permission requested by the apk to practice the crime. For instance, we need permission ``android.permission.SEND_SMS`` to send information through SMS. We also need permission ``android.permission.ACCESS_COARSE_LOCATION`` and ``android.permission.ACCESS_FINE_LOCATION`` to practice the crime. .. code-block:: python "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ] ``api`` means this field can be used to practice analysis from stage 2 to stage 4. In stage 2, we need to find key native APIs that do the ``Action`` and ``Target``. And since the API method name can be used by self-defined class. We need to fill in information of both the native API class name and method name. .. note:: We like to keep our crime/rule simple. So do not fill in more than 2 native APIs. In stage 3, we will find the combination of the native APIs we define in stage 2. Further, we will check whether they're called in the same method. If so, we will say that the combination of crime is caught! And we don't need to do anything to adjust the ``api`` field. .. note:: We know that the native API might be wrapped in other methods. We use XREF to solve this problem. In stage 4, we will find whether the native APIs are called in a right sequence. If so, we have more confidence that the crime is practiced. .. note:: Please place the APIs in the order as the crime is being committed. In stage 5, we will check whether the native APIs are operating the same parameter. If so, we are 100% sure that the crime is practiced. As for the field ``score``, we will be updating our principles of weight defining. please check that part later. quark-engine-23.4.1/docs/source/coding_style.rst000066400000000000000000000102351442215066700216440ustar00rootroot00000000000000============ Coding Style ============ Having a clean and structured code is very important for the sustainable development of this project. `Cuckoo Sandbox `_ is a good example. So we follow most of their style for maintaining the code base. We do help out with code refactoring where required, but please try to do as much as possible on your own. Essentially Quark's code style is based on `PEP 8 - Style Guide for Python Code `_ and `PEP 257 -- Docstring Conventions `_. Formatting ========== File and folder naming ---------------------- All characters in the filenames or folder names should be lowercase letters. Copyright header ---------------- All existing source code files start with the following copyright header:: # This file is part of Quark Engine - https://quark-engine.rtfd.io # See GPLv3 for copying permission. Indentation ----------- The code must have a 4-spaces-tabs indentation. Since Python enforce the indentation, make sure to configure your editor properly or your code might cause malfunctioning. Maximum Line Length ------------------- Limit all lines to a maximum of 79 characters. Blank Lines ----------- Separate the class definition and the top level function with one blank line. Methods definitions inside a class are separated by a single blank line:: class MyClass: """Doing something.""" def __init__(self): """Initialize""" pass def do_it(self, what): """Do it. @param what: do what. """ pass Use blank lines in functions, sparingly, to isolate logic sections. Import blocks are separated by a single blank line, import blocks are separated from classes by one blank line. Imports ------- Imports must be on separate lines. If you're importing multiple objects from a package, use a single line:: from lib import a, b, c **NOT**:: from lib import a from lib import b from lib import c Always specify explicitly the objects to import:: from lib import a, b, c **NOT**:: from lib import * Strings ------- Strings must be delimited by double quotes ("). Printing and Logging -------------------- We discourage the use of ``print()``: if you need to log an event please use Python's ``logging`` which is already initialized by Quark. In your module add:: import logging log = logging.getLogger(__name__) And use the ``log`` handle. More details can be found in the Python documentation, but as follows is an example:: log.info("Log message") Exceptions ========== Custom exceptions will be defined in the ``quark/utils/exceptions.py`` file. Naming ------ Custom exception names must start with "Quark" and end with "Error" if it represents an unexpected malfunction. Exception handling ------------------ When catching an exception and accessing its handle, use ``as e``:: try: foo() except Exception as e: bar() **NOT**:: try: foo() except Exception, something: bar() It's a good practice use "e" instead of "e.message". Documentation ============= All code must be documented in docstring format, see `PEP 257 -- Docstring Conventions `_. Additional comments may be added in logical blocks to make the code easier to understand. As for the contribution to `quark rtdf `_. Please use ``make html`` to build the html files. And commit with rst files altogether. So that users can read docs when offline. Automated testing ================= We believe in automated testing to provide high quality code and avoid easily overlooked mistakes. When possible, all code must be committed with proper unit tests. Particular attention must be placed when fixing bugs: it's good practice to write unit tests to reproduce the bug. All unit tests and fixtures are placed in the tests folder in the quark-engine/tests. We have adopted `Pytest `_ as unit testing framework. Also we adopted `travis ci `_ for the continuous integration. quark-engine-23.4.1/docs/source/conf.py000066400000000000000000000041241442215066700177260ustar00rootroot00000000000000# Configuration file for the Sphinx documentation builder. # # This file only contains a selection of the most common options. For a full # list see the documentation: # https://www.sphinx-doc.org/en/master/usage/configuration.html # -- Path setup -------------------------------------------------------------- # If extensions (or modules to document with autodoc) are in another directory, # add these directories to sys.path here. If the directory is relative to the # documentation root, use os.path.abspath to make it absolute, like shown here. # import os import sys sys.path.insert(0, os.path.abspath('../../')) # -- Project information ----------------------------------------------------- project = 'quark-engine' copyright = 'Quark-Engine Team' author = 'KunYu Chen, JunWei Song, YuShiang Dang, ShengFone Lu, AnWei Kung, ShunTe Lin, Vivek, Krishna' # The full version, including alpha/beta/rc tags release = 'v22.10.3' # -- General configuration --------------------------------------------------- # Add any Sphinx extension module names here, as strings. They can be # extensions coming with Sphinx (named 'sphinx.ext.*') or your custom # ones. extensions = [ 'sphinx.ext.autodoc', 'sphinx.ext.githubpages', ] # Add any paths that contain templates here, relative to this directory. templates_path = ['_templates'] # List of patterns, relative to source directory, that match files and # directories to ignore when looking for source files. # This pattern also affects html_static_path and html_extra_path. exclude_patterns = [] # -- Options for HTML output ------------------------------------------------- # The theme to use for HTML and HTML Help pages. See the documentation for # a list of builtin themes. # html_theme = 'sphinx_rtd_theme' # 'alabaster' # Add any paths that contain custom static files (such as style sheets) here, # relative to this directory. They are copied after the builtin static files, # so a file named "default.css" will overwrite the builtin "default.css". # html_static_path = ['_static'] master_doc = 'index' html_logo = "quark-logo.png" latex_engine = "lualatex" quark-engine-23.4.1/docs/source/contribution.rst000066400000000000000000000102621442215066700217000ustar00rootroot00000000000000++++++++++++ Contribution ++++++++++++ Different stages of core members ================================ * ``Contributor``: As soon as you post a comment, fix a typo, ask a question or report a bug etc. , you become an active contributor. * ``Contributor followed by a mentor``: Spotted active contributors can be asked to get a mentor to speedup their learning of this project. * ``Core member``: Once other core members consider that a contributor is ready to be promoted, a core member opens a private vote for the candidate. Core members ============ +---------------+-------------------------------------------------------------------------------------------+ | Name | Contribution | +===============+===========================================================================================+ | KunYu Chen | ``BDFL, Project Founder, The man who runs the show`` | +---------------+-------------------------------------------------------------------------------------------+ | YuShiang Dang | ``UI/UX Team Lead, Core Developer, Rule generation system, Malware Analyst`` | +---------------+-------------------------------------------------------------------------------------------+ | ShengFone Lu | ``Core Developer, Triage Team Lead, Rizin Engine Implementation`` | +---------------+-------------------------------------------------------------------------------------------+ | AnWei Kung | ``Core Developer, Triage Team Member, Backend (database, downloader, API), Testing`` | +---------------+-------------------------------------------------------------------------------------------+ | Zin Wong | ``Triage Team Member`` | +---------------+-------------------------------------------------------------------------------------------+ | Zee | ``UI/UX Team Member`` | +---------------+-------------------------------------------------------------------------------------------+ Alumni ====== +---------------+-------------------------------------------------------------------------------------------+ | Name | Contribution | +===============+===========================================================================================+ | JunWei Song | ``Project Co-Founder, Engine Implementation (Malware Scoring System), Frontend, Testing`` | +---------------+-------------------------------------------------------------------------------------------+ | ShunTe Lin | ``Core Developer, Triage Team Member`` | +---------------+-------------------------------------------------------------------------------------------+ | ChaoWen Li | ``Quark Community Development`` | +---------------+-------------------------------------------------------------------------------------------+ | Sin | ``Malware Analyst, Detection Rules, Engine Implementation (Malware Anti-Detection)`` | +---------------+-------------------------------------------------------------------------------------------+ | IokJin Sih | ``Malware Analyst`` | +---------------+-------------------------------------------------------------------------------------------+ | YunChen Liu | ``Artwork Design, Frontend`` | +---------------+-------------------------------------------------------------------------------------------+ Consultants =========== Consultant is the one who is important to this project and shows great support to our engine. +-----------------+ | Consultant | +=================+ | Chun-I Fan | +-----------------+ | HY Lin | +-----------------+ | Jheng-Jia Huang | +-----------------+ | Lin Gao-Yu | +-----------------+ | Pippen Wang | +-----------------+ quark-engine-23.4.1/docs/source/dev.rst000066400000000000000000000032371442215066700177430ustar00rootroot00000000000000================= Development Notes ================= Git Branching Model =================== Quark-engine source code is available in our `official Git repository`_. .. _`official Git repository`: https://github.com/quark-engine/quark-engine We have 6 branches. * **master**: - This is the stable and releasing branch. * **dev**: - This is where we commit our beta version. - When all the features are fully tested, it will be merged to ``master`` branch. * **feature**: - This is where we develop new features for the project. - Once it's done, it will be merged to ``dev`` branch. * **testing**: - This is where we write tests for the codebase and new feature. - When it's done, it will be merged to ``dev`` branch. * **hotfix**: - This branch is used to fix bugs. - Will be merged to ``dev`` and ``master`` * **doc**: - This is where we update our documentation. - Just like hotfix branch, will be merged to ``dev`` and ``master``. Release Versioning ================== Our versioning logic is quite simple. We use the year and month of the release as a version number. ``v19.10`` means we release this version in Oct. 2019. Ticketing System ================ To submit reports or feature requests, please use GitHub's `Issue`_ tracking system. .. _`Issue`: https://github.com/quark-engine/quark-engine/issues Contribute ========== To submit your patch, just create a Pull Request from your GitHub fork. If you don't know how to create a Pull Request take a look to `GitHub help`_. .. _`GitHub help`: https://help.github.com/articles/using-pull-requests/ quark-engine-23.4.1/docs/source/dev_index.rst000066400000000000000000000002521442215066700211240ustar00rootroot00000000000000.. Development chapter frontpage Development =========== This chapter explains how to write Quark's code and how to contribute. .. toctree:: dev coding_style quark-engine-23.4.1/docs/source/doc.rst000066400000000000000000000011021442215066700177170ustar00rootroot00000000000000====================== Updating Documentation ====================== If you want to help update Quark documentation, you can refer to the following command to update. To make documentation can be read offline, we will reserve the HTML files for users. After editing the docs you would like to modify, you can type the following commands to make quark generate documentation automatically. Inside the directory of ``quark-engine/docs/``: Clean the source:: $ make clean Auto gen the doc:: $ sphinx-apidoc -o source ../quark -f Build the HTML:: $ make html quark-engine-23.4.1/docs/source/faq.rst000066400000000000000000000054551442215066700177400ustar00rootroot00000000000000 FAQ ================ I have some questions. Where can I ask? --------------------------------------- We welcome you to post your questions on our GitHub repository or our Telegram. We'll try our best to answer your questions as soon as possible, but not be instant since we're focusing on adding new features into Quark-Engine! Also, please understand that we may not answer questions about personal information since we want to keep them as our privacy. I got an error while using Quark-Engine. What can I do? ------------------------------------------------------- Please use ``pip3 install quark-engine --upgrade`` to update your Quark-Engine and use ``freshquark`` to update rules first, then inspect if there are misspellings in the command. Here are two common errors that will occur. If those errors happened to you too, please check out the following information. #. Errors on arguments (Reference to issue `#239 `_\ ): This type of error is usually caused by an outdated version of packages. Please update Quark Engine and the related python package first, then check if the problem still exists. #. Errors on rules not found (Reference to `issue #237 `_\ ): Please update Quark-Rule with ``freshquark`` first. Since the way to specify rules is by adding ```` as an argument, you need to input ```` if the rule file is not in the current folder. If you want to select one of the rules of Quark-Rule, the default path to Quark-Rule is ``$HOME/.quark-engine/quark-rules/``. How do threshold, score, and weight working in Quark Engine? ------------------------------------------------------------ About those details, we have a video to explain how it works. You can check out the video on YouTube: https://www.youtube.com/watch?v=SOH4eqrv9_g Why do scores keeping the same in all the analyses? --------------------------------------------------- The default value is one since we would like users to define these numbers themselves, and we are still doing experiments to adjust the numbers. How can I write a rule? ----------------------- We have a detailed introduction to add rules. You can check it out `here `_. How can I contribute my rules? ------------------------------ Feel free to make a pull request on the `Quark-Rule repository `_. We appreciate your contribution to Quark-Engine! Can I take part and contribute to Quark? ---------------------------------------- That's a big YES! We welcome anyone interested of Quark-Engine. Please check out our `development document `_ and join our Telegram. quark-engine-23.4.1/docs/source/index.rst000066400000000000000000000017341442215066700202740ustar00rootroot00000000000000.. quick-engine documentation master file, created by sphinx-quickstart on Mon Nov 4 09:49:14 2019. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive. ================= Quark-Engine Book ================= Quark Engine is an *open source* software for automating analysis of suspicious Android application. To do so it makes use of custom Dalvik Bytecode Loader and unique scoring system that detect malicious behaviors and calculate threat level within seconds. This guide will explain how to set up Quark, use it, and customize it. .. toctree:: :maxdepth: 2 :caption: Contents: install_index quark_script quark_mit_program quark_reports addRules rule_generation integration dev_index contribution organization doc quark_method_reference quark_inside_index modules faq Indices and tables ================== * :ref:`genindex` * :ref:`modindex` * :ref:`search` quark-engine-23.4.1/docs/source/install.rst000066400000000000000000000045211442215066700206300ustar00rootroot00000000000000+++++++++++++++++++++++ Installing Quark-Engine +++++++++++++++++++++++ PyPi:: $ pip3 install -U quark-engine Install from Source:: $ git clone https://github.com/quark-engine/quark-engine.git $ cd quark-engine/ $ pipenv install --skip-lock $ pipenv shell Run the help cmd of quark:: $ quark --help Once you see the following msg, then you're all set:: Usage: quark [OPTIONS] Quark is an Obfuscation-Neglect Android Malware Scoring System Options: -s, --summary TEXT Show summary report. Optionally specify the name of a rule/label -d, --detail TEXT Show detail report. Optionally specify the name of a rule/label -o, --output FILE Output report in JSON -a, --apk FILE APK file [required] -r, --rule PATH Rules directory [default: /Users/$USER/.quark-engine/quark-rules] -g, --graph Create call graph to call_graph_image directory -c, --classification Show rules classification -t, --threshold [100|80|60|40|20] Set the lower limit of the confidence threshold -i, --list [all|native|custom] List classes, methods and descriptors -p, --permission List Android permissions -l, --label [max|detailed] Show report based on label of rules -C, --comparison Behaviors comparison based on max confidence of rule labels --core-library [androguard|rizin] Specify the core library used to analyze an APK --multi-process INTEGER RANGE Allow analyzing APK with N processes, where N doesn't exceeds the number of usable CPUs - 1 to avoid memory exhaustion. --version Show the version and exit. --help Show this message and exit. To learn how to scan multiple samples in a directory, please have a look at :ref:`Directory Scanning ` quark-engine-23.4.1/docs/source/install_index.rst000066400000000000000000000002551442215066700220170ustar00rootroot00000000000000.. Installation chapter frontpage Installation ============ This chapter explains how to write Quark's code and how to contribute. .. toctree:: install testing quark-engine-23.4.1/docs/source/integration.rst000066400000000000000000000216261442215066700215120ustar00rootroot00000000000000++++++++++++++++++++++++++++++++++++++++ Integration ++++++++++++++++++++++++++++++++++++++++ Quark Engine Integration In Just 2 Steps First Step: Installation ------------------------ :: $ pip3 install -U quark-engine Second Step: Code Snippet As You Go ----------------------------------- Here we present the simplest way for quark API usage: .. code-block:: python from quark.report import Report APK_PATH = "14d9f1a92dd984d6040cc41ed06e273e.apk" RULE_PATH = "sendLocation_SMS.json" report = Report() ''' RULE_PATH can be a directory with multiple rules inside EX: "rules/" ''' report.analysis(APK_PATH, RULE_PATH) json_report = report.get_report("json") print(json_report) Then you get the json report. :D .. code-block:: json { "md5": "14d9f1a92dd984d6040cc41ed06e273e", "apk_filename": "14d9f1a92dd984d6040cc41ed06e273e.apk", "size_bytes": 166917, "threat_level": "High Risk", "total_score": 4, "crimes": [ { "crime": "Send Location via SMS", "score": 4, "weight": 4.0, "confidence": "100%", "permissions": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "native_api": [ { "class": "Landroid/telephony/TelephonyManager;", "method": "getCellLocation" }, { "class": "Landroid/telephony/SmsManager;", "method": "sendTextMessage" } ], "combination": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "sequence": [ { "Lcom/google/progress/AndroidClientService; sendMessage ()V": { "first": [ "invoke-virtual", "v6", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 06 00", "second": [ "invoke-virtual", "v4", "v6", "v7", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 64 07" } }, { "Lcom/google/progress/AndroidClientService; doByte ([B)V": { "first": [ "invoke-virtual/range", "v35", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "74 01 2f 02 23 00", "second": [ "invoke-virtual", "v0", "v1", "v2", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 10 02" } }, { "Lcom/google/progress/AndroidClientService$2; run ()V": { "first": [ "invoke-virtual", "v5", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 05 00", "second": [ "invoke-virtual", "v3", "v0", "v4", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 03 04" } } ], "register": [ { "Lcom/google/progress/AndroidClientService; sendMessage ()V": { "first": [ "invoke-virtual", "v6", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 06 00", "second": [ "invoke-virtual", "v4", "v6", "v7", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 64 07" } }, { "Lcom/google/progress/AndroidClientService$2; run ()V": { "first": [ "invoke-virtual", "v5", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 05 00", "second": [ "invoke-virtual", "v3", "v0", "v4", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 03 04" } } ] } ] } .. _dir_scan: Directory Scanning ------------------ To scan the entire directory with quark, you can use a simple bash script. .. code-block:: bash #!/bin/bash for apkFile in *.apk; do quark -a ${apkFile} -o ${apkFile%%.*}_output.json; done; Alternatively, you can use the quark API as well. .. code-block:: python #!/usr/bin/env python from glob import glob from quark.report import Report RULE_PATH = "./quark-rules/00001.json" report = Report() for file in glob('*.apk'): report.analysis(file, RULE_PATH) json_report = report.get_report("json") print(json_report) Radiocontrast ------------- Radiocontrast is a Quark API that quickly generates Quark rules from a specified method. It builds up 100% matched rules by using native APIs in that method. The feature lets you easily expose the behavior of a method, just like radiocontrast. For example, we want to know the behavior of a method called `Lahmyth/mine/king/ahmyth/CameraManager;->startUp(I)V,` in Ahmyth.apk. Here is the simplest way for Radiocontrast usage: .. code-block:: python from quark.radiocontrast import RadioContrast # The target APK. APK_PATH = "Ahmyth.apk" # The method that you want to generate rules. TARGET_METHOD = "Lahmyth/mine/king/ahmyth/CameraManager;->startUp(I)V" # The output directory for generated rules. GENERATED_RULE_DIR = "~/generated_rules" radiocontrast = RadioContrast( APK_PATH, TARGET_METHOD, GENERATED_RULE_DIR ) radiocontrast.rule_generate() quark-engine-23.4.1/docs/source/modules.rst000066400000000000000000000000641442215066700206300ustar00rootroot00000000000000quark ===== .. toctree:: :maxdepth: 4 quark quark-engine-23.4.1/docs/source/organization.rst000066400000000000000000000036071442215066700216720ustar00rootroot00000000000000++++++++++++ Organization ++++++++++++ Quark triage team ================= The Quark triage team handles more than just triage. They are the managers of the Quark organization. They define processes for handling issues/PRs, manage Quark releases. And the most important of all, they communicate with community members. Responsibilities ---------------- ``Version: v1.0`` * Management of issues within the Quark Github organization, including: - Review, close issues and apply appropriate labels for issues. - Resolve minor issues (typo, usage problem, ask about the Quark’s techniques). - Initiate a discussion with other members if the issues are major changes. - Define and revise the process for handling issues. * Management of PRs within the Quark Github organization, including: - Review, merging PRs and applying appropriate labels for PRs. - Initiate a discussion with other members if the PRs are major changes. - Define and revise the process for handling PRs. * Management of Quark releases on Kali/PyPi/Github, including: - Generate and create releases. - Test releases. - Define and revise the process and determine the content for releases. Triage process --------------- ``Version: v1.1`` When Quark received an issue, the triage process is as below: .. image:: https://i.imgur.com/iFFqcYx.png .. note:: **If the issue is unable to reproduce, and the issue raiser hasn't responded.** - **Over one month**, the assignee should apply the label ``more-info-require`` to the issue and ask for more information. - **Over two months**, the assignee should apply the label ``invalid`` to the issue and close it. When Quark received a PR, the triage process is as below: .. image:: https://i.imgur.com/jEkZSV8.png Release process ---------------- ``Version: v1.0`` The Quark release process is as below: .. image:: https://i.imgur.com/WFifONc.pngquark-engine-23.4.1/docs/source/quark-logo.png000066400000000000000000001606221442215066700212240ustar00rootroot00000000000000‰PNG  IHDR =蟄 pHYs.#.#xĨ?vtEXtSoftwareAdobe ImageReadyqÉe<áIDATxÚėŨ˜]e}/ú´FKeО{Áļ§™ŌJåO{鑧xšÁSÎĶ>ö"įzrkąŲhđé ‰Ĩ-MZe{  Ø š¤3A蚁‚Å !’4aHHjeÁHŌPaĄ´ŪũÎĖ–äĪz×Ú{ÖÚûķyž÷4īĘĖo¯ĩ×ŋīú­c~đƒēÂäÆxļ1V)Gãac€Žąslô)GãX%č 3cbcLjŒšrp4t6č|'„ŅŽÆ=c˙ũÍÆčUŽDgc€Îģ÷ôßąÃqMY8:Û+ģ7én Āél ĐŲ^ŲÕ¸)v7Ž+‡Ŗŗ1@įęmŒ:Ė˙?<ögžU*^‹ÎƝĢ~„˙?v<žĄLŠÎƝŠ7žĢq“îÆ’ÎƝiŪQūšØŨ¸Ž\ŧ:O_cܟqÎĪ5ÆNĨā`:tžz›æĐát6č,}!{Wã&Ũø6îkŒŪąqBcœáŖč8Ī6Ɩą_Fo|îT(ü˜ęā6¯˛X5öĪ¯Ũ䌱sĶæ÷iĘyꖱãŸgú÷-J @†ãōI‰sW´€#ywcœŲīlŒ_ûß~Ļ1~RiŽč-%ûyžņ‘@é=rĐöÛŸjŒ%ĘĨÕŧNÜü§ RkŒE9—qŽcv^!žëŧ¯1&7Æ/‡ŅkIoR–\Ž)ŲĪãu¸P]˙Fī™ũCŊWö…0z hfˆ¸/ŧ|ßM–)?×&h•Æ˜Ē I<ÖėĢJØxōØNy˛2GđÅą“Žx1e§rĀˆŪƒŽĨâ?{Jōs=^{X¨‚ú.í+Ņųé7ú.˙>čn; ØGén @4§1~;Œ†‹‹‹'l ´R Įđņ=1S9 PÍ&Íqē’´„°1­0!ĢGÆöwĨîlÜF[⠐*—Ž0Bˇ‰OM×Bĩ.r4ˇŲ8å€2›NûN­Ę÷éꃞOwúēJÜ_-*hYnętŸx?îãņŪÆ8I9ZNØh§Ũqwc\t=†ŊáåFį)G[¸.AŅ‚ 1dõàņČIl ÃÆqįCƓ|V$ļķŸ7vđ¸S9č`Ŋa4\GÕÖúâØ6Ģã10N8čÜ´ę])Vô}ęA€ÎˇŗĀsx!ų %č ũAĀx<ãĨ<žĻpXÍëÄqˇŸ°1EnËņ‰,"dķ#A㑓Ø…kQēĐZ‹Įö7;•‚Ōė¸Ų‰:<,´S Tŀq'>ŲŋO—Ž}§nņQt¤xŽ{EÁËŧ0x[@§zwc|&Œ>`yŒrŒ ac  Û} ‘üÆxH9ā‡zĮÎąãũˇå7ÂÆᄱõčtĨ€L^49‰-AØ8ūPAČ€öŠĄãA‡?Ē­ēëa­¸Ũ É­ú>Ŗ[žj_=ļ˙XåŖčņÆÉÎPüMĐøzå^åč(ņščcûƗ°1P&ąÛņ5aôčņÜļŨ–&†C\X ’ûŠgcn4āÕNÛG<Ü;Ŗûô…—ķK‚ÆЍ!Í!ƒÆŅxu6Ž‡â_éŠÛYę–JŲÕBwu2>’/†Ņ‹ž;•Ȩ/Œviq‘i”NĮÕÖĒŽÆMąģņÁ›ĒJ'ãōŌŲ(ŗxü˙‡ąD)č`}A'ã2ĶŲ˜Tņ:ÖŌāž:duØ qtė8lĖ1Č%h @™Ä Ņæą“I(ŖžđrįM'E/;¯1ū)ŒŨ0ŽFoxšC… ņ˚Ž—ŽÕ€j‰ĮÃ=-\~<ŅŲ  zŪŨß:&î;ūŋą}‰ûtšŪÆ:C'ŠŲÄUö]ŲƒÆQ;;Į Ōs}.”\ėr<9č”J9ċya4TËá ü.U āߧÍn^Ų'ƒ‡°Ēĸ7Œ>€×Žãíøwén P Ģã7Cų:įōŖt6Ē"~?Ä7 žO)čņ:q=´öĄ]ŠĄŗ1Y5ƒÆļoČæÂ0šK9ĸvt6n†d¨‚Øå0váŸŦŒŗxącg4>Zņ¤ņ c'Ŋʤ/xÃNVWŒÕŦO)J¯ŪÆãmŨĘoJc<F;ô P”¸O‰÷͞Û×@5ßÄ>7"B§nãĢlߐŲQG [ÜŲ¸7Œv—këëi{t0ėߡäß7>ŧÁ*Pqgū‡_ųį›s8åÔĶÚųWëęĮx8aėøiÜ_Ûô­'žģž|räß÷íÛžžãųgéíŋŽ?ūø‘˙é˙īÃĪüėĪŽįģŽÍČrP tŦøZųKĮû‡Ø7<ļoŨúÃ˙>ÜyęÛ~ęmá§ægÆëØĮņ@ĩô†ÄŽÆ[‡v…wžüĶ)ĮŲņÆÍNĨ(ĨUĄ$¯_ųāēđ/Īîûá?ōøaß /vü0íŋŧ'œö+oĪ2Ĩō§]x‘-ÚāWŪūKá­o}ËčŋŸöÎpæģÎīī ]ŽŠšŌŧ‰}ũš5?ü÷nË3ÅkßįOÉôŧ‚ÎÆ­ø@Ė@( hŧ|Ų˛ÃŪ‡Š~ŸJĻ ņČIl ÃÆmyb ‹7Ŧ{8üũ–Á°ûéī„ĄŨ{ŦQîä“N 'ũģˇ†_;ã´đëgũ‡V‡p7FMÕŠÚ‰PÖ㊏mO}ûŠđ÷ƒÛžųNØ3ŧ/÷rOė9>œø“o ŋxōÄđKŋô‹áí§ŧŖŨĄš/Žmŋ^õ ŨįŒąīĶļ>øŌØžmÛȅ¨ø}úŨį˙ĩsÔã&L?˙Ķo 'ūŸ˙.üō/üüČ÷éģÎ>ģŋÚ#cû¨V-€RYBeĪŊp |páá’IŋŪķŊ=ëtįČåķîÆøR}€ŊmvīŲ|xsxpÛ7žį_ {_úˇđÔģģ‰Ø˙üĩŪ˙_ūs–)•˙ú¤sm0N^wė1áM?ö†pŌ[ß~ņį&†wŊëĖđŪÉm}igŧî¯Á}Ķ§A‰KƒŸƒ¯ũC˛LcN;š7Ü´čÆ,S„9ĩÆXTĂĖ–Ū­ĸ”ZĖ`|ę/¯("w‘9hHؘ¨…‚‚Æŗ.Ÿ–¯Û¨ĸ”Zŧ/xã Âņ=švmņ~ßäÔī×V„ ې_šsžeņÍáž× pH1xüÛ˙ņŦpÁÔ??ķŗ?[äĸŽi•ļ§DâõËš­ü š(ž˛b•ŽÅGIؘ‚Õ‚ 1]¤Ā q_ČŅ¨­č°qaōÁ;č… ūÚF @fįžuf˜~ņ˙[dčXā˜ĸÅWŒÅ‹p[ąđxõÅ;î Ëî°OQĮāņīœķÃy˙íüĸhúdcÔ­vБ⃍q^+žox8Ŧ¸įž°äÎ/UâÂq3x|Áŋ×Ēō_;˙wL0>âyiŽŽÆMąģņį§ŸŽ{ã„Ŧ‹úÕāí!ãéņķ­Zø§n¸5ÜķO{ÂSoėQé „2{ŨąĮ„Ÿ;ņÄpŲĮ.gžëŦVü7Æ/¨4%0ĐS[ĩđ;—, wßŗ" íT錄)PŊ1Ž(bA‚ÆTAY‚Æ#'ą†kĄĀ qŧ™{õėĢmĐäVpčXā˜ĸœ1v‚\ø]›õkք/ŪõåJGũÆ;ß>đ)á]gŸ]ôĸuaƒÎsÂØ÷ééE/¸ųđëÚ͏Vö ;ņî{ûˇÂųSĻŊhĮDãgKĘ~ī•]›ūâėĶÂī˙Ö¯g]ÜęąũíXßŪo*zÁģ÷ė ŗŨ–?L¯{ƒJ'6Ēâ'&Lĩ÷OS/šVôĸãuĸxīã›ĒĖ8hŲ›Dc~éķŸ[n_ļ›Øs6Ļ Ą€ âvũņYkˇnWQJ˙Ũ9wŪ˙*EĐxä$ļ °qĄa™Å7ö‡Eˇ/ĩ“ 0ąÃßûįˇÂÅ+ä­ßŒíû U-ü6ˆ(†Œoč訧ŠãÁķGĻՊëČ Ŗ%â;ņ ;ą{ü‡~˙ŋ:Ž7Žâk›uļ¨ĀšÄĩwčß6ôĒ˙ũ¤7üXøōĮĻ¤t7vĶ ŊZ4Ž!ãKÜ_÷fÎIبš…Ž˙ĩ1ŪŽi¯–4¤h6IŦr3Š26ĻĄ  ņEš¸o˛¤ģÅƊŗ¯™“w11ßīåí,âg*"l\XĐ8ŪĐŊėOfŲ˜h™øz+ūâO‹xĨ¸î¨¤ŠëMĄAãx uÅWvô+›âˆËūčąí|PŨŽĄĘ īß o؉Ąã_ūGE>ÄQØĶĐ•xПų!›ŊĪėŋųéÛų˙ën PzņŠÁ[ãõE-P'ãâ UÕ‚ĐąĀ1íTxĐX'ãÖ6&§ hL)0hÜ ĖD[ĀN;v‘Ę}s÷Î%KÂĶĻۘhŠ¸Ÿ™zÉe#]ôsŠ˛u%ŖZ(0h<ŠģōĒđž~¸ŖƒÆQüũâļßø{ ^tZ5v< TOáAãxlđ_ß˙û4Žö ī —ĖĒ‡_xŅČÃ*čû,ŧõ =įIŨüožīđûˇū ÛGÉÅWĶNöą´\ ˙īP`ĐøS7ÜÎYđwaų ‚Æ„ī8æ߲$œ÷ž˙v=ųd‹Œ]ø˙il­¯Iî —/[6rx`éŨ‚ÆPÍlĸ 1]ŖŦAã(oØxU(āuĩŗ.Ÿæ,ėˇŖ mâE“¸˙ÉZŧ"čnĖŅ‹ëJaAãæŎ;VŦîĒ"Æßw$ Øøũ p ÕThĐøąGÔ)ŒtĶ9i|ˆ#>Ŧ˛`îŧ"'p Đzņ˜5éK;†ˆûˇ öĪė~ņĨ#’až ĨšAãB:ānÛŪ3ķē°čŠ„Œx•oį™đž >f\ri‹‹ûŽØ•ĸĘŌ"ŊĄĀëÄą1ClĐ0ëęëd— <šËĪËģ x/HИ*(sĐ8Ę6Ž’s=^ņĻn§wŽ œâū'Pæ ĮũĄ` GR ãúzéÅíę‹ņ÷ŽŋŦC]ŽŽĄZ Į mėšŪÍ—b‡Žx^/´å$p ĐZ3R÷ŗī¸˙¨ū\ $'t7ž<„ Đ*ī˙b^˜˛äūđÔ{T€CúAcŦyôąpÎūŨ°qũēŧ‹‹]ųˇcŠWØ[ØŖøÖģø&öN‹(Tp;_ č\īLŋl– 1Ĩ7sú´"‚Æ‹C‹‚ÆQjظÖšgĶš€2ˆûĄ|đCy6ņ$v *rh1tUHĐxũš5#ëëÚ­ÛUĩ!Ö!v9ŽuÉéôąí(ˇæ…Ĩܐc—Š°A[F‡â…ļxQ='ĮE­ÛÎH™¸uhW¸g×ŪŖūķ‰Ũë>"€ÂÅPÖŊĄ€ ņî={Gēß1|ŒnÆĩī8Ļ˙éĮÃÜkū*īĸŪŽ)ūyU( €ØlđĶmoŊƒnÚΛAcÛ8eƒÆįO™’w11h\ - G)aãŪķõxqCŽAAcĘ`Īđž‘ĖãĶƒWĮōښ8s‹°KfÕGÖW^O c]bwŌœâëwTJĢ° q|@!vŠp>úęīĶxQ}Öå3ķv×1 xÉ]oZš)ĶŸŨw~ûéŦÍІāßĢ1”õĻŧ Zųāēp΂ŋĶÍ€$ąËņß~åŪđ{˙Īķ.*îĶÖŠ(‰ jđĨÔŧŋ.hL×(8hÜR)aã\¯"hnȂ2”I<ĀĖ8žÚ“U’ƒō §øŠÁ¯ãĐbwŌrq;’€’næĄ€ KÍ7\X:´åë6Žŧ…(vÎÁƒXÅé męjÜtũWÖĻüuõāA€ĸÜ ę†[ÃÅ+ˇéf @nßxjwx÷ú°ëÉ'ķ,æ¤ÆØŦšä4Đ“ō.äÎ%K䖠œ /_ļLИJ¨RĐ8Ę6ŽįŲ cøã“W}ʆ @)8Ž'¸nŽŌƒÆš^ bā+ŋ8Š“Æą€\ÎĀņÜÆčSM(•Z=/īB<¸qôb×įØũ9Į1Q4uėųÄīŌ¤?ąô¤ŋ0”cP9Ŗø3zp ŋUņķyōĄ+?=õ‚jP˜ßû^øođáp÷ŌĨyCdũĒIĸZŊæ˜K|S朅ũrKP>Í qîײÄ f]}íœR;n„°xūĩE?Ú4ŽŽÍ¸Q_‘ú5Ã2^U @™ÅÎ?ũķOĻ†ãī€*FšžŦnžžÉąS6ą^ąn9rņji¯jB)ġ\šgqŸ~éÅõāFÂ1Q|+^”Ë!^CčSM€dņ˜4éFęĘM;ÂöũĪ'˙Å7­Ü”2-†=€ .~æîÔ7åķÂ×ūíĮU€Â}˙ß~>9wAŪĀņ‡âîJ5É(æ•å]HlHߔ ”r_ Į  ĖbĐxáĩŗÃ)§ž–wQ†67ūÉ6Îõ ԏÍøca*!ž2'GwÔØyq˛*vĩžã­(eŊž)ß6œŗKy<‘]Ē’0îzC·xšŊŽŨē]5ÄĀqŧ(—3pŋOĪŌÔS'Î_īíÄē´]|;Öuy°{ĪŪđž™×…Á×ŊY5h™4FÎĀņ1a44:Q59JņÚbî{61hŦ!”RĖVŦ ‚Æt‰‚ƒÆíūų6l\ 9žĻžúĘĢÂāĐNk •šzöÕŠĶįĄšn•û‚G3hėĩ.ų4;ræŸÚü đ*ņ9ųⒷë'gāØiúÂ8u5núÄŌRĻÅ/{}|™m ŖáĢ$1h<ųú[ÃSoėQIZŽ€Āņ›‚ëEŊ3œ.h ĨUkŒ/„‚Æ‹oė4ĻôĒ4ŽŽ&lC3É]ã É;VŦļļP9ņ¤3”&ˆ'ŧē9u§<'C‚ÆÅ* pƒg¨$Œ‹zČņĀĢ qņrŽ'96HÚf?~á@¸ōŪ‡ ųb`9—Ûõŗtąxs=Wã‚4ž Ŗ1íS@ā8^{wŊˆ#æ„ŅˇĘ&4†ŌĒ…ŅN÷šÅí|ū-KT”R;ų¤Ã]ˇßš7h_Īūž0NAãčhÂÆņ/)4ķ­'žŸžéķÖ*+”&ãūŗWģJŽ 1'h\ŧfā8Ö7Ņ€*BÛÅ WäYĀĮfüą q ÄĀņú5kR§×ĩžøĐÍŌ‡Ãî_*îœxõæ”iS}įĩw‡œš)Ÿ˜'h Ā¸( püW!gĮZ:Z|k ĪĄ´jĄĀ ąíœ˛‹AãoXŽīÉÕÄ;úÂ8ŋâHaã¸ķN~šė˛?˜ úūôĪ?™TŒG uÕëš.x4;p:njX×XßÄĀņéļehģyy&Į KƒC;UąE.˙äœÔąz‚8ŽVŌņgėjÜŋa{Ą?Hėn|ך¤īũy>F€ŖōĨÆ8&ur žNĐ€ņĶ īzōɔé¯ã˜ĄÔBŽˇ‰^}åUˆPN1‡(hL×(8hŧeŧŸ#…įĨîŧĖ§“aĪđž°đĶŸI™Ē›S÷¨‡<>>ë㎛Z,Ö7v:Mt…mÚĻ;96ĪC]Xj­øGâƒXaėŗŦŠ‡59”¤ĢqĶÜļŒ™3Š]:û|œ‡ÕF`Oōķú(…8žRûHjā8žålŠ*ō }!ĮÛî\˛$Üąbĩ*Bų 4ÆÜŧ ‰÷'Š‚N G‡ ÷†ŅTfąËŅĀŌģ­1tŒxBšøÚđēęuŧx!ėŌÔÉ1ˇvëvUlƒØé4>ɞãäh­x“=š âōe˜‡ļI|+Į:]´ā{rī3ûÃUiˆ(˜cŲų0@Ąâ+ã§ĻNžũK÷†;†QEJãĀ÷žĻô˛ÔéŸUA^a ubĖ+ÍYد‚PÎízjŪ…4ß,hLŲ{֙E % G‡ ×RzíuŸąÆĐqŽûô_§LĶŨ¸ķ%‡Ļb€]0ŽŊâƒ1˜`RЙ Z-ž:+éŒû[O<ūrîlŖpÄPE]^Smė{2ŗ›īkí –ū ÛSē;†8´ÅaôÕņ™íŪŗ7|bÃã*@é|û;Ī„OĖü‹”Šą ÁdĖŒÔsãBŒoeJg 4öÆ`Ę.g_3§ã‚ÆŅą‡9˜›‘˛Āø:‚xĶ:M„×ŊA(Ĩ{ÖŽw/]š2õU0zÍ0ų<ōãŗ>>ōV6 TÛô@4Ļ‹4ƒÆ95ƒÆĪ–í÷;TØxrHč(7ėĪŨz›ĩ€ŽĩčöĨ#ûģŒjA ĻSÕS'Æ ‚qã#ÖũŠ+ŽL™zzČņö 5ߧ æÎsqi]yÍu)ĮFņzƒ‡ą~TrįĻVw5nējÍāH°9ŖIŽĄ^%v5>&eâG¯^žzc PZ?hŒ9Ÿų›”Šąãŋ :7‰oŋ‹ ŖÖnŨŽ‚P1ą*4ŽM¤Š‚NG‡ ×SöųĪ-ō”-†ãū.ŖxRYåēJoŊF˜ŲįnŊMõ`ü4žŗ°_E)ĩ4^xíėđŽŗĪÎģ¨ C¯•æĮׁĮ€t›ø¤ėcfVSšĘK:āûâ]_VšKčnÜc{†Ü’ļ!]ËmŲũļm]¨¸ŪƘš2qåĻaûūįĮũĐŨ “?K™ģ‡×ŊAõ¨´„îÆņIiŗî‘ÔÜEWc(…ž hLiO9õ´ŧ‹ŠAã*ÖāØW|dŪøoY|ŗ5 €ŽuË-˙;倛ęęmŒĶŗNŠg-_ˇQõJ,><—đđ€îƐOŌ6¤ĢqšÅ üņĸ`F5•ēĐŧԉķWo.Å/ģĮāsF=y~w€ {gʤÕûŋ¯rT^bwã÷Ē\×HjōŖĢ1ŒģZcÜ Į}„ 1e'h<ę•aãĖÚ°ŲÚ@×ZģųŅŦSbPU§ęJ Æy8Ģ8Īö šžO3_€Š!V]Ëoɝ_Ę:eb}Õ@ˇč;–ĖėÖJŅÕ¸)1ø;:÷Z €.2Ĩ1^ŸuŌ§n¸5ŧø†W=:_š7딓Âč5#:Û)Ÿķú5kt5†ņUkŒEE,hÖå3Ãü[–¨(ĨvōI'4GšÂÆąû›8Ũ,ž–/[–ušn¨Õ•ôŲŨķā:•Ģ€Ø}zßđ°íJü}šbe íŪŖ[<ĀáՓÎ?_8ú7l/Õ/ƒĪ Ũ“kPQ–2éžÚŖrtŒoį™°ëÉ'ŗNûC•ëx})“žxחUÆO-4öv`Ę.oŧaAAã¸Ī¨z=OĘ:yÃē‡­QtŊM7eĸs_5rŧÃčēpVĮŠ{îÉ:ĨOÕ Iæmį[O<1bĨîZzWÖ)ÂÆ@7í'ĨL\úĐ`ØũâKĨû…t78ĸwf0¸mGxę=*@Gų›…“uĘûU­ãÕ˛NˆMc„a\ˇYAcēF3h||OŽķķfĐxK'Ô¤6îK™üĀÚõÖ*ēŪC2ßXíSĩJJúÜî_õ€ĘUHB×TÛ3d—ôjŧ[ßŦr’ĐÕ˙ô0ú`@§›—2ŠŒ]›bwã[WlH™:`uēĀģãõY'Ũļü!• ãŦܚuĘDUëhņZāéY'%4Š1é"‚Ư-WØxph§5 €ŽˇgxßHˇÅ NWĩJJ:^ZģųQ•ĢØ55>ŸAŧØŠ[9´áûtķÖ*W!ąĢ˙cļeŨ¨Zęųā-+6–˛ĢqS BĮ@tF“|÷]ōŨŸŲŠūŽĘĐqžķŨįÂŽ'ŸĖ2%>°ķn•ëXIįƒĢXŖrĐ~aô-UšÄ{°SĻ\ hLéũÆ;ß!h|Í°qæ€Äú5vāĐôđ׾֖hÆUæĪlų˛e#a+Ē%áŠxachņ÷i|¨'> @ĩÜĩô.ĮG?Ēž2iī3ûÃŧMå~č&Ą—>4ØļštōųĪî={Ãđ„7ĢéoūMÖ)5Usœt°ĩ[ˇĢ´×@((h|ŅG.v¯‡Ō;÷Ŧ3Ãõ >7hüHcô† GÍ°qo։Ū`í€1_˙ú?f"œX=™;mÚ¸IÕ*(áŠø>UƒÖîīûęŊĒVA Ũ¨Ŧ_|ķ}Õčöĸģ1ĀkúŠĖßû_tū@įzdĮ×ŗNqžĐš2_ ŒM~€ļ‚Æt‘4ž}͜܇;cĮ/ĪvbšaãĖᙯcČcūqč›Y§ôĒZĨôĨLJYQücæã\á88z'„„ ÕßoTš ŠãEÄ &ŠĐÁûŋzĘÄØÕ¸[5ŽÃÆîƟũōڔŠV ƒŊ)ë„MßÚĢjtŦ=ĪfÎŨü”ĒuŦĖ×ŋžãT Ú#^ˊYé‚ÆG'†“?šËZc‡vf"œX-IŸ—“ĻjzîĀđ­'žČ2åtUƒÖ~Ÿ:˙ŦŽõk×ļe(š!ąĢņė;î¯Ô/ƒŅ1 QŦMÍjtč÷fßüžÂĐšž˙o?ׯË2åMĒ֑’Žūũā6•ƒÖ‹AãUĄ€ûŸ=:ūëûß=sJ¯6ųŊ‚ÆGéØą/‰Ėö īŗĻĀA2†iĒĨ7ë„õkÖ¨Z…=üĩ¯eŌ§jКm%î_VWBˇ‘^U:Lŧöš6Û:´+ÜŗĢzŨ-ožocĘ´ēUč@™ģõíŪŗ7 OxŗĘĐŅ\õ`Ö)ST­ãôĻLJhūdShĐxúeŗFš-\üąyŗ8Œf€žíôzÅ°q_ÖIÂ3đjģž|2ËīQąJÉßņØvUĢ°§žũTĘÉ7pdŊ-ŪŋR2 ŨF<tšŠį7­ÜTÉ_Xwc€zKÖ >ŧYÕčxÛv|=딷ŠZĮÉ| 0–4ĻëÄ ņųSr?ĶƒÆĩnŠŲą)“öíĶU ^iãÃ˛NéUĩĘČüYũÃ7Wĩ Žƒō|Ÿ&ė_)‘=˙ōĮG@7ëēŽÆMŗī¸?eÚŧā!> ŗdžI˙ČãO¨īņ]™›}LVĩŽĶ›uÂŽoíR5hxŸsg4Ļ‹§IęlœđT €iÆÍÄŦöüķĶĒVa á8ĄhŅžo×î=ĒVåīĶá}-_GJ,†g“ē_ģl]Ĩņ”ŽéŒb­fXm€nļī…€Ž÷Ō÷ŋ¯ôf §-ƒÆĢBofžsɒ0õ’ˍ)ĩã&L4ÎáXĢãëßR„Δ"MĢR" á8áčxxŖ }ë‰LŨŲ<ŧtŠŪƘš2qåĻaŨĶĪVž7­Ü”2m†}ĐA2Ÿm~AÕčxž÷ŊŦSNW5ĮIûŋû]Uƒâ4žŗ°_E)ĩ4^xíė"‚Ɔ. GIaca*xĩī>˙¯)īTã$+ŗ„°*%ŗoxX šûWJfדOfųãnĸž:qūęÍQŨ8„Ė×˙qč›ĒÅ4ĻĢ4ƒÆ§œzZŪEÅ ņ@ˇÖņؐ qŗ Ą[”Øö­[mĪPŦŪ”ICģ÷¨U¯ˇ&w5Ūž˙ųŽ)Ä'–>2íŠÔã€Ē{ęĮŪ¤t…Å7 ĨŒŖZcħŨé ‚ÆÅ9ļˆ/ĀÃ8ŧlũš5ŠĐ}tâ„#ëU‚î´ņá Št›y)“ž{á@Įt5nŠÁé NPˇ—öNÖ×ŊAåāÕdZ{ūå;ŠÅ¨5Æĸ"4ëō™‚Æ”Ū‰=Į čXĢCįE€Ž×דR&.}h°Ŗē7%¨cgč^ĢPaoS(Ė1JĀžá}ŠųÕBAãåë6Ē(ĨvōI'†ŋũüįō‡㜠hrqÚŠĸ”ÚšgnZtcŪ ņ#qF4~MÂÆųÔS&t5Ū6ÔŌŨ mBAãĄŨ{T”R‹AãŲ×ĖÉģ˜4îkŒ*úڄŌÕBŽŽÆŨ$v7ŽëŒbwãÉV3€#:Ą1VAcēHÁAãgUôЄŌÄ8ķR&îüöĶ]ĶÕ¸)v7N XĪŗĒV3h<)ī‚{t0|āƒ4ĻôÛKØ ͌ÆčI™xũWÖveÁbĀ:Ąģqė]ŗēŧĻfĐøôŧ ŠAãé—Í {†÷Š*Ĩ6sú´"‚Æ‹ƒ ņQ6Č.Ūę‘2qëĐŽpĪŽŊ][¸ÄîÆuĢĀĢ4~îĀUĨÔbĐøü)Sō.&kAĐø¨ d—ÜÕøĻ•›ēēpąģq \gģ×­v?tFcl ‚Æt‘‚ƒÆd l Moc\‘2ąÛģ7%ŽcĀûĢĀHĐxU}@;—;—,4ĻĮ—°1@6õԉŸXú€ę5ÄĀuBwãØIz†ę]Ž4îÉģ 4žŗ°_ИR;n„°xūĩE?“ ŊŪƘš2qåĻaûūįUpŒîƙ4†2‹Aã…×ΧœzZŪE]r4‘@Ø ‹zęÄųĢ7ĢŪAbwãõۆ˛Në n ŨŠé"T4ac€ŖĶģßĩfPWã×pÍWקLģ4Œv˜čĩÆX _}åU‚Æ”ž qųzʤį^8æ>°Eõ^C `¯Ü´ŖmŸ@ÕÂhĐ8ˇY—Ī wŦX­ĸ”ÚÉ'îēũÖŧAãáÆx_4.Œ°1Ā‘õ5Ƥ”‰K ģ_|IaūęÍ)Ķb‡é^Õ:\-4^žnŖŠRj1h|ã Âņ=ššxĮ q_c,UŅâY=eRėjÜŋaģęFėn|ëŠ )SįŠĐÁęAИ.RpĐØĢæ &l pxĩ ĢqKÅ@v fgt^ŊqĐiãŠŧ Ų7<.ŊøŖ‚Æ”ž qų ^=eŌŪgö‡ĢÖ ĒŪQˆėĖn×gPb15īBbĐøĸ\ÖnõÖ-ĘíÜŗÎ,"hüH4n)ac€CĢ5ÆĔ‰7ߧcL‰ŨcĮé>Õ:Ä@(0h<´{ŠRj1h<ûš9‚Æ l phõ”IąĢq˙ļ!ÕË v7žeER@{žęwBc, ‚Æt‘fĐ8§fĐøYm-ac€×V‰]įßŊFõĖÛ´c$¨Ņéa´5@Å ņĒÆ8/ī‚{tPИJ4Žac€W‹7yf¤LÜ:´+Üöø.Ltķ}IŨë*TP3h|zŪÅ ņôËf Sz—\0Ĩˆ ņę hÜVÂƯƒÆ=)oZšIõrčß6”ŌŨ8v ŽŠP!…Ÿ;p@U)ĩ™Ķ§…ŠMËģ˜ÅAи턍~TŽŽÆ÷ėÚĢ‚9Íŋ{MĘ´úØgPvgAcēL Ÿ?eJŪÅÄ qM5ÛOØāGՃŽÆãęļĮwˇ3ŠŨg¨Pr…—/[&hL%WŸ°1ĀËzãŌ”‰+7íĐÕ¸@‰Áí6ÖŨ(Ģfи'ī‚î\˛$Ėēú:AcJí¸ ÂüŲõ"‚Æ×Aãq%l đ˛zęÄųĢ7Ģ^bp;ĄģqŧQ§ģ1PF…į,ėWQJ-^;;ŧëėŗķ.ęÂāšß¸6ÕÛSS&ÆŽÆÛ÷?¯‚ģvŲē”i3Æ>K€˛˜é"Í ņ)§ž–wQ1h< ĸãOØ`Ô@ęD][cŨĶĪŽš3Š7íęĒ”D­1ž /˜;OИŌ4îLÂÆ!ô5Ƥ”‰ˇŽØ Ģq %šc‡ę^ÕÆY­1ą Y—Ī KīVQJíä“N,"h<KGØ ąîs/ũļĢ^ Å wBwãäĪ  ĩP`Đxųē*JŠÅ ņ7,("h܍KGØčv}!ąĢņŌ‡Ãî_RÁ‹Ũc°;ŖØŨø ÕÆÁŒ hLiīéÉŗ˜fĐx‹Š–°1ĐíæĨLŌÕ¸}bwãėn×g Ã@cĖÍģ}ÃÂÆT‚ qw6ēY­1NO™øŲ/¯ÕÕ¸b°;ĄģqėXŨ§z@› „Ņˇ-åƒÆ}äbAcJī7ŪųAã.!l tŗzʤŊĪėũۆT¯b°;ąģq]õ€6‡vīQQJíÜŗÎ ×/øtŪ ņ#ŅKOØčVĩƘ˜2ņæût•ąģq zg¤ģ1ĐJ'AcēL ĪžfNŪÅÄ q_c<Ģĸå'l tŖxh^ĘD]ĮOėnœôP= â5ĻUĄ€ ņˇžxBИJ4îNÂÆ@7šŅIī÷›}ĮũĒ7ŽbĐ;Ąģqė`]S= @Í ņéyôØŖƒá‚iĶ)ŊÚä÷ w)ac ÛÄA3R&nÚîŲĩWĮYbwãēĘ)4h<ũ˛YášT•R›9}Z¸øc3ō.fqcœ+GØč6É]oZšIõJ v7Ūųí§ŗN›Cæé ‚Æt™4>ʔŧ‹‰AãšjV“°1ĐMzƒŽÆáú¯ŦM™VŖ‡RĎŦ[BAãõkÖS ‚ÆDÂÆ@7Š‡ÄŽÆŸXú€ę•H ~ĮxFņŗ×ŨHƒÆĢBâĩĨƒŨšdI¸dV]ИR;nÂAc~HØčŊ15eâĘM;ÂöũĪĢ`ÉÜ´rSĘ´6ÖŨČĸĐ ņœ…ũ*JŠÅ ņÂkg4ž0wac [ÔS'Î_ŊYõJHwc  ú‚ 1]¤4>åÔĶō.*T´3Ũ vŸŅÕ¸}bé)ĶŽŖŽ§Ö÷‡‚Æ‹oė4Ļô9ac ĖK™ôÜ •÷>Ŧz%ƒā1ž ŽzĀaÔcQ šuųĖ0˙–%*JŠØsŧ 1‡$l tēžÆ˜”2qéCƒa÷‹/Š`ÉÍ_Ŋ9eZėtŨĢzĀk¨…ƒÆË×mTQJíä“N ûųĪå 7Æ9Aи# Žž2)v5îß°]õ* v7žkÍ`ĘÔyĒŧŒ hL‰AãoXŽīéÉŗ˜4îkŒU*ڙ„€N69čjÜæ>°e$ žŅyaô&@4Đs‹X 1UPpĐx‹Šv.ac “%uŽŨûĖ~]+&Ãc@bĐøĸ\‡v*Ĩöī|‡ 1•$l ”Q=eŌŪgö‡ūmCĒG2Ũ ZšAãĄŨ{ƒR;÷Ŧ3Ãõ >7hüHcôAcÚLØ(›ZHėj|ķ}^“I~ąģq ŽgģOV=hAcĒ"g_3'ībbи¯1žUQÚMØ(“c^Ęĝß~ZWc ģ'×įŠ´Įc S ‚Ætac Lf4FŌ{¯˙ĘZÕŖ01¸žĐŨ8v䎊´V Oŋl– 1ĨW›ü^Ac:‚°1PąĢņŒ”‰[‡v…{víUA •ØŨ¸ŽrĐ:Í ņs(Ĩ6sú´pņĮfä]ĖâÆ8#3΄€˛Hîj|ĶĘMĒGábwãdĪhbH ͇'hLUÄ ņųSĻä]L ×T“26Ę ˇ1ŽH™¨Ģ1­”d¯‡ŅNŨ@A–/[&hL%Ķ‰„€2¨§NüÄŌT–‰Aö„îÆąCˇîÆP;—, ŗŽžNИR;nÂAc:–°10ŪzcjĘĕ›v„íûŸWAZ*ąģq ën 9Å ņœ…ũ AŠÅ ņÂkg4ž0SBÂÆĀxĢ§NœŋzŗęŅrąģņúmCY§õäYˇAcĒĄ4>åÔĶō.*T”26ÆS_Hėj|ךA]i›kžē>eÚĨa´s7Ņ‚šķ)=Acē…°10žę)“ž{á@˜ûĀÕŖmb°}åĻm[Į ›Íē|fXzˇBPj'ö/hL×6ÆK_cLJ™¸ôĄÁ°ûŗTļšŋzsĘ´ØšģWõāčÄ ņōu‚R;ų¤Ãß~ūsyƒÆÍqN4Ļ„€ņRO™ģ÷oØŽz´]ėn|ךÁ”ŠķTŽLИ*ˆAãoXŽīéÉŗ˜4îkŒU*JãarĐ՘ šûĀ–‘Ā{Fį…Ņ›GĀkØ7<.ŊøŖ‚Æ”^ÁAã-*JUã!ŠĶëŪgö‡ĢŌ:ËB!bĐ=ŪÔU^-/úČÅaíVo˛ĸÜN;šWИŽ%l ´[­1&ĻLŧų>Ũmũļ§t7ŽŧûT^Ö íŪŖ”ÚšgnZtcŪ ņ#qF4Ļ‚„€vĢ§LŠ]ûˇ Šã.v7žeERđ}žęĀ(AcĒ"g_3'ībbи¯1vĒ(U$l ´S=čjL˜ˇiĮH>ŖĶÃhgočjßzâ Ac*Ąā ņŗ*JU írBcĖH™¸uh—ŽÆ”NbžŽrtŗĮ L›.hLé Ã˄€v‰A㞔‰7­Ü¤z”N Ā't7ŽŊkĒ@7ŠAãé—Í Ī8 ”ÚĖéĶŠ/‚Ætac ru5žg×^¤”æßŊ&eZ}l›€Ž!hLUÄ ņųSĻä]L ׂ 1BØh‡zĐ՘tÛãģFņÅîÆ3T€ną~ÍAc*Ąā 1t ac ÕzãŌ”‰+7íĐ՘ŌK ÄĮ°ąîÆtŧĮw=.™U4ĻôáЄ€VĢ§NœŋzŗęQz1ŸĐŨ8vúÖŨ€Ž'dLŲ7aBX<˙Ú"‚ÆŸ ‚Æt(ac •zcjĘÄØÕxûūįUJ¸vŲē”iēŒŖ4^xíėpĘŠ§å]ԅ!GĶ(;ac •R'ęjL•Ŧ{úŲ‘€|Fąģņ<Õhŋ‚ƒÆ*J'6ZĨ¯1&ĨLŧuÅ]ŠœÄ€|ėüŨĢzí#h Ų­RO™ôÜ B˙†íĒGåĀ|Bwãäm€ėN>éÄp×íˇæ 7Æû‚ 1]BØh…žØÕxéCƒa÷‹/Š •ģĮĀ|FąģņĒĐZ1h|ã Âņ==yƒÆ}ąTEéÂÆ@+ĖK™¤Ģ1UģĮĀ|ģļŽNÁAã-*J76ŠVkŒĶS&Ū˛bŖŽÆT^ Ė't7ŽĀûT x‚Ɛ°1P´zʤŊĪėķ6íP=*/æģ×U XįžufAãoAcē˜°1P¤ZcLL™xķ}UŽĄģ1Āø‹AãŲ×ĖÉ4~¤1΂Æt1ac ('„]ûˇ Š #v7ūė—×ĻLP=€üšAãœbи¯1žUQē™°1P”!ąĢņė;îW=:N ĐĮ }FqĒŠ@:Ac(–°1P„ØÕxFĘÄ­CģÂ=ģöĒ éæû6ĻLĢĢ@šK.˜RDĐxu4†6ŠƒÆ=)oZšIõčXąģņÎo?uÚĐŪčf3§O S/š–w1‹ƒ 1üac ¯Ū Ģ1Ōõ_Y›2­F;†˙?{÷$gYį‹ū7IĖBHdƒ‰‘qVŦÁ@v‚IeØd@ŗ+Æ%9¨›SWV†CđnAΒŦU‡…Ũ#-°AŦË܀[’Č °+ø‡ĀÁō‡Cŧ(äQ„Ēs͆='ģXx¯$“d˛Âíg&¨ü™~ģ§ģßîĪ§ę)KČķvį×=Cwŋß÷Û0 )h|öōåå&ûL~°1PŽBdl5žöģ˜ /ęS°žDégJģ1Ā(ÃØ6ĘŅ^\įfŲ¸iû3ņČ/|!ÍaÃĻíYļĨ°ąvc€71šĩ5Ö­)T"h|}Û6ĘQČēqŨÖĮMĻĄŨ ˛RĐøÆk×Äŧžžru^ø Ū’°1UW”ŅjüôĀ¤Š|nãCYļ]à â24ūĀIsĘ=T ÷›(ŧ5ac ĢĩY6íq0Žŧ˙GĻGĶIû´Ī `zÍĄú„€,z‹kQ–ŪĪŊtĐiJëļ>že[jo7= Ųu;]Đj@ØČĸeSj5^˙čĶĻGĶJíÆ÷lÛQĩŸ9€F‘‚Æ7}å†rƒÆ{Šë”4†’Ĩę ­ÆŲu=1ŧ/Ņš‡~öšÎHĐøČļļr“‚ÆŊÅõ„‰Bi„€RõgŲôü/´CQ ܧā}Ķš 1Ԟ°1PŠžâ:.ËƯ=ø˜Vc8$ī3´§Fņ^ĶšÅ‚O4Ž.#āõ„€R˛lj5~j§éÁ!ڍŪÚâųsãúžTnĐøÉâjAãR¤ ņcāõ„€ŅZe´ŋîĒm;†‚ø%JíÆ}Ļ4˛4^sÍÕå&{‹ëĩžˇ¯'l ŒÆQ‘ąQu×ŋüBĢ1ŧ‰ŒAü‚ɍJиfúŠëæ4æ Ŗ‘Z3}Č|ũ?ūĀôāM¤ ~†vãÔ0Ūgz@Ŗé[ļDиFŖá 1ŧ!acāí¤VãUY6ūdįî¸o÷ķ&oAģ1@ÄĨŽˆ‹V¯*÷0ˇWW—ĸ/yÂÆĀÛÉÜjŧaĶvĶƒˇ‘ڍS0ŋDŠŨ¸`z@#HAãŗ—//÷0)hÜgš%Y‚ÆŒ‚°1đVڋëō,øÔN­Æ0JƒųéB€ŖLČ3Aãšé/Ž‹Ņ6ŪJ!ëÆkž÷CĶƒQJÁü íÆŠq|•éy4šĩUиvú‹ë\c`´„€7Ķ?pŪ´ũ™xzā€ B ´Í"oŧvM%‚ÆĢCиTũ!hL‰„€7ŗ6ëÆu[7=(Qj7NAũĩ•ķŗ Pm#Aãœ4§ÜC>)Eē`}K“°1đFz‹ki–÷lÛĄÕ2ĘÔO'ˆÚM¨w÷›č¨Yo¤eĶūãē‡ž0=Č(õ3´gū™¨–émG ×ÆHĐødŖ +acā7õFƆ‹īˆį^:h‚PíÆ@Ŗé8vzüũ­_-7hŧ§¸NAãRSÂÆĀo*dŲ”Z×?ú´éA™Rģņí<šekŋéõ&oúĘ qd[[9‡IAãŪÎ2:]!hL…¯×[o{ā1­ÆP!)¸Ÿü%J?ģŊĻԋ Ÿ0ŅQ4Ļĸ&đ:…,›ž˙å@ŦŨūŒéA…¤āūƇwħ>|j–Ÿá^„š:Š¸ūOc¨‰jŸDōĐ˙ū?FŸ;˙Z\wĀؚĶŅ×­ũŋĢo$hÜfTŠ°10ĸ¯¸ŽË˛ņk>fzPaŠŨxŲisbō¤ÖRļ´o1A¨™4žČšÂiFk_7€ąŗxūÜXsÍÕå&]āˇŦ¸v™č¨ 3&ÆpH!ËĻÔjŧūŠĻ–ڍ˙îŪdŲēÖô€ZŠ`и7K‘‚Ų[BИ1 l $…ČØjŧî;ÛLÆH ō§@‰NŽáĻr€ĒĒpĐøĩžâē+#ÂÆĀQÅĩ*ËƟėÜwūlˇ ÂúڃeŲV09 škĻ¯¸n6ƒ°1‚Æ™/6lÚnz0Æ2ļ§Ļō>ĶĒáŌ WT"h|w—Ē/Šachneĩߡûy„*Xķ­ÍYļ­=ô30fRĐøėåËË=Ė-Åĩ,KQAcĒDØš[ #j5†:—‚ũ)ā_ĸôŗŊĘô€ąRÁ qŸi–¤ŋ¸.7ĒEØšW{q›eãĻíĪh5†*ËđOacíÆ@Å ×Ldü\˛6€æUČēqŨÖĮMĒLģ1P&ˇļÆ-뎭DĐøķ!h\Ēū4Ļ„ 9ĩG­ÆO0A¨kŋûH–mĢũĖ”%oŧvM|ā¤9åęŧ(Ŗ Ą ĨoŽÚ‚ÆԈ°14§ū,›öŋ8¨Õjč‘_ŧ0ø/Qj7.˜PŽ ûMtÔRĐxKq-5 jEØšOoq-ʲqãÃ;´Ce ü§Ö›vĶ˛4Ž™‘ ņÉFA-M0h:…,›RĢņúGŸ6=¨ąøOíÆgtwfųŲī3A¨Og\ú7†PõĢxi0^y‹?sĞįŖõųŨŅōŌ‹Uv°ø3 T_ĮąĶãĻ¯ÜGļĩ•s˜=1üšÄFĩŠúãņĖOŸŽŗ—/7U26€æŌe´?÷ŌAĖšoüÉGâsŌPsWŪ˙Ŗ˜7ûŊ1yRk)ÛRģņÚâzÂĄūüë¤6C¨“ßú_ŋpôģ"ÚįÄ;ūåÆa˙ôĶxyđßĖ €†UÁ qoøLĸ]1Ü]‘ ņ…ŸŊ,>yæ‡M•ĖÆ4•ū,›´7†Ė<&Nė˜+b9—‚˙é€ ֚@eœq|ėíYēF´M3Ž qͤ ņ–¨@Đø‡Ûļ ÷š*e6€æŅW\ĮeŲøw÷ū@Ģq8˙ŒîĄ˙=Ŗģ3N˜r¸ä\ē ]PĸÔlŪkz•ķōÔą¯{ņPč¸eú, !×ĖHиė¯ŋųöwÄĘË ‚ÆT„°14B–MĪ˙r Ö?ĩĶôrn¤ÕxÄËJΕŅn\0=€ĘKĄãŲ=ąoÁ’ĄĐqËø †@.-ž?ˇAãgCиT _}ãzĨb„ 9ôEÆVã¯=ø˜é5€‹?ēā×ū §2ų–ڍĶ%JíÆËL`ŒLš2:č9+Æĩw +)hŧæšĢË ?ÃÁYAãŅë Ac꘰14žŖŠkm–ZÊŲŅ>ãŋõĪĪ?ŖÛpr.ĩgŧ `­éŒą coGW ,úD vvĮ¸ÖÃĖ€ē64.S ÷× &:j}Åĩ9*4žåĻõ‚ÆŒ ach|Ģ"ãÕkžĩŲôĀ§?4÷ ˙švãƐ.ČĐnœšÎûL :Î8>öö, GÛ4 î×L_qŨ\‰]vÉĨąîļ;L”1!l -ĩ¯Ę˛ņ';wĮ}ģŸ7ÁœK­ÆĮ=åM˙ũe?Ũ@Ævã‚ÉTW īë^ēFË´é@]XyÎōJˇ† qŠúĸ‚Aãī?ō˜‰2f„ ąen5Ū°iģéåÜąßúąoųgR9’ɡÔnœ.(Ņq‘ņbĘķōÔ1pōéąoÁ’h™>Ë@¨™K/\į^°ĸÜÃÜ‚ÆĨJŸÉ“ÂÆиÚCĢqS[qę 1yRëÛūšOhŽa5€Œb¸€Z˜4%f÷Äž…gĮ¸öÎh?ÁL¨š4>{ųōr“‚Æ}ĻY’ūâēŽÜƒėŨŗGИĒ6€ÆUˆŒ­ÆŸÛøéå\j5^vڜQũYíƍ!] ĄŨ8ũŽĐn Pk&ÆŪŽŽč9+^~ßI1Žõ03`L ×Lq[îARĐø‚Ī\$hLÕ@cjŒZoÚūL<=pĀsn´­Æ#ūôc †Ęä[Ævã6Ön P&LŒī™{{–Æ`gw´q¤™PQ“[[cŨšB%‚Æׇ qŠúŖ‚AãĪũÜDŠachL…Ŧ×m}Üôrî„)‡ēÕxD &§€2ų–ڍøÔÎRˇĩ•ķ;€ąqpÆņ1đÁÆŽ…ÅßÔĶ €˛Ĩ ņ×Ž‰y==åęŧđMIĨHy÷‡ 19&l §7´7ĩ•‹N)ŠÕxD (k7Îŋkž÷Ã,Û.ŽáFtęĖËSgÄžîÅąoÁ’h™>Ë@Čd$hü“æ”{¨4î7ŅQKAã-Q ņ˙ūį4Ļf„ ņ˛lÚ˙â`\y˙L/įRĢņŨ™öj7n 邁tá@ĩ~wP%“ĻÄĀėžáĐņģ;ĸeü3`Tkf$h|ršúéwÄ9+.4Ļf„ ąô×ĸ,7>ŧ#ž{é  æ\j5.Gj7NeōmŨÖĮŗlK ;íĻPįRčøũŒžŗb\{gŒk=ĖLxSĮN4ŽŠ/üėeąpĐTŠach,…,›RĢņúGŸ6Ŋœ›˙ÎŖ2ˇHíÆå–ŠŊÔn|ĪļYļŽ5=€œ˜01övtÅŪžĨ1ØŲ-t ĀoIA㛞rCšAã=ŕ>,ę7ŅQkAcŒ°14ŽeĄÕ¸Š}öĖų9N ,k7ÎŋëzbčB‚-á†träāŒã‡BĮēF´M3^ ŲÖVÎaRиˇ¸ž0ŅQë:4/AcŠ°14ŽL¤Ī˙r ŽĘրJųČĖcâϙ;žvãüK¤ 2(˜@>ŊĨŨ85¤÷š@~Ŋ2eZ Ėî‰} – …Ž[ÆO0€&ąāčkŖĸAãĢo\oĸÔach …,›RĢņú§vš^ÎũņīÎŦhĢņˆJ˜ŠžÔn|Û™.((˜@˜4e(t<ĐsVŒkī:hp‹įĪëoøRšAã'‹Ģ=K!hLÃ6€ü[Z›ÚĘ%=crÜ`Önœkˇ?3taA‰RģqŸé4ˆ coGW ,úD vvĮ¸ÖÃĖ Á¤ ņškŽ.÷0)hÜ[\/˜č¨õ×ã!hLƒ6€|;*26ūdįn­Æ `ÅėŽ8æč)cv|íƍ!ã…“h<g{{–ÆūįG´M3€ h\3}Åus%tŲ%— Sׄ ßRĢqĻ֌ ›ļ›^øô‡æŽéņSģņ˙îLƒÎštaA†vãԘŪgzé•ßi}Ũ‹ã@×Âh™6Ũ@rĒoŲAã>*4ūū#žŽú&l ų•ZWeŲ˜ZīÛũŧ æÜĒîÎ1m5ąrIa7€ußŲ–e[áĐīÔËSgÄĀɧĮžKĸeú,ȑK/\­^Uîan)ŽŽ4.E_Ķd„ ŋ ĄÕ¸i;ņq·įVåļR yÅėCĪš;ļ{čBƒĨvãUĻĐ&M‰Ų=ąoáŲ1ŽŊ3ZÆO0€:–‚Æg/_^îaRиĪ4KŌ‚Æ4!acȧöâē8ËÆ>ĩSĢqXqę 1yRkŠÛļ×ŗYnīĶškč ã…)lŦŨ YL˜{;ēb įŦėėŽq­‡™ @4Ž™ūâ:ˇÜƒėŨŗ'–/?GИ\6€|*dŨxÍ÷~hz9—Z—6'ëķ&Ķs'ĩ˙UĪÃĪštĄA†vãÔ ŽŨ ŲL˜g{{–…Ž[Ž8ŌLjlrkĢ qíôG…‚Æ|æĸØųÜĪM”\6€üiŒloÚūL<=pĀsnõÂŽ,­Æwז>1˛5ËíĻ€s :“oڍ(U |đŖq kaDÛ4¨4žņÚ5•¯AãRõ‡ 1MNØōgm֍ëļ>nz9w”ÃãŦl ïoĻ-d9@ 8¯8õBÎĨvãtáA‰ÚĘųŨ@cxyęŒØ×Ŋ8ö-X-Ķg@•Œ?pRŲß:už÷÷%I^?‚Æ l 9Ķ[\KŗlŧũGĩ7€•‹Nɲ-}5æŽ×ũ˙-ĄŨ¸Šeŧđ Xk7=bŌ”˜Ũ3:×Ū-ã'˜ ĀŠpиßDG-ˇ×Éåč§?Ūg}ōS‚Æ䚰1äK!ËĻũ/ÆúGŸ6ŊœK­ÆgtwVęy“隔ڍW/ėō`ä\ēđ Cģqæį jŌ”ØÛŅ=g …ŽĮĩf&4ŊíHAãÚ¨hĐøÂĪ^ûM•\6€üč-ŽEY6n|xG<÷ŌAĖšKūp^–m×Į¯ˇØÍĮ%;ĢgÎPđ™|KíÆéB„Ĩvcis~Ũ„‰CĄãŊ=Kc°ŗ[č :ŽëWË ī)ŽĶCи‚Æđ„ ?ÖfŲ¤Õ¸1|dæ11ovGŠÛŌ ĨÂ[üûBÖûŗrŅ)”œKíÆéB„jũ. 9œqüPčø@׈ļiA ßô•âČļļr“>ęáā,Ŗ“.°Ū‚Æđ[„ ú"ã‡Üˇ=đ˜VãpūŨYļĨPč oņīwEÆvã3ē;ĩ7€t!B†vãÔ°Ūkzŧ•—§Îˆ}Ũ‹c˙Š‹Ŗeú,Ĩ Ÿ0ŅQKAã-ÅÕV}ĮqîĘĪ ĶP„  Y6=˙ˁXģũĶËšÔj|bĮĖRˇĨ“JkĮ깕\ō‡ķ<89—.DČØn\0=Fã•)Ķb`vOė[°d(tÜ2~‚Ąŧ‰9í‚ÆĩQŅ ņÕ7Ž7QŽ°1Ôŋžâ:.ËƯ=ø˜é5€‹?ē ËļBŧuĢņˆ]Åõų,70ovĮPš|Ķn @ULš2:č9+Æĩw ü†ÅķįƆ›o*7hüd gGOĐFAØęÛQQFĢņú§vš`ݘŨí3ŪYęļgct­Æ#ŌŸŨ“åūFˇ)įRģņßŨûƒ,[ûM€’M˜{;ēb`Ņ'b°ŗ;Æĩf&@ĶKAã5×\]îaRи7†/,gtúŠëņ4†ˇ%l õmUdl5^ķ­ÍĻ×>ũĄšYļJüķŠym–:ącĻvã.LH(”(ũnę3=˛:8ãøØÛŗ4öŸ8?ĸmšMŠÂAãLtÔúŠëæJč W^%hLÃ6€ú•ZWeŲø“ģãžŨĪ›`ÎĨVãcŽžRęļÔjܟáæ2ˇ_üŅŦđĩ˲­`r”ë•ßi}Ũ‹ã@×Âh™6Ũ@€Ļ!h\3}QĄ ņe—\ßz`Ģ‰Ōđ„ ~Ĩ qĻ¯đÛ°iģéåÜąߑĩÕxUƛL'¤ Y6ļĪxįP0š|KíÆģūåĨnĶn @ÅŧÃ4† „ >Ĩž3ĩ_ûŨGL/įRĢņ˛ĶædŲZ¨ĀÍg:F Fk7ÎŋtĄBē`ĄDéwÕ*Ķ â&LŒŊ]1ĐsV vvĮ¸ÖÃĖČŊ ûLŗ$ũÅuqšŲģgOœŪ‚Æ4ac¨?íÅun–›ļ?üB™IŪĨVãɓZKŨ–ZˇTāæûŖŒvã”&ß6lڞe[ k7`lL˜g{{–…Ž[Ž8ŌL€\4Ž™ūČøyëëĨ ņŸš(vėÜeĸ4ac¨?…Ŧ×m}Üôrî„)‡×˛ÕxD_–MCíƧžāAĖ9íÆÔŗ:øāGã@×Ââ}Ļ “[[ã–u×V"hüų4.UT0hŧķšŸ›(MIØęKW”ŅjüôĀĖš•‹NÉŌjœmļTđn¤cmͲ1Ĩĩįßį6>”eÛå1ÜĖcîåŠ3b_÷âØˇ`I´LŸe @ŨJAã¯]8iNš‡:/*{ąyŖKßĀ´%Ą"„ žŦͲi˙‹ƒZ@j5>Ŗģ3ËÖÂܝLĮLAiíÆų—.\H0ÔÉsŪܤ)10ģg(t<ŽŊ3ZÆO0 nT8hÜoĸŖ64^Tî~úãņüÉ4Ļé @ũ荌€o|x‡VãZ3H­ÆģÆāîl‰2ڍSpš|ËxCj j7=ĒnŌ”ØÛŅ=gÅËī;)Æĩf&@M ×ĖHĐøär”‚Æ~ö˛øųžŊĻJĶ6€úQȲ)ĩ¯ôiĶËšųī<*KĢņžÛ&ŲUY6ĨvãŒÁięˆvcriÂÄ8đžŲąˇgi vv 5Ņqėô¸įˇ—4NŸûü‡4.EŃÆûMBØęEo”ŅjüÜKM0į>{æü,ÛÖÆØ´x"†›“K–‚ĶڍķīĘû4tAC‰Î=ô; jęāŒã‡BĮēF´M3 *RĐøĻ¯ÜGļĩ•s˜=‡Ū[o4ŅQëŠáĪ˛a @}čĪ˛éų_h5n™yLœØ1ŗÔmé¤ĶÚ*ÜŊB֍ڍķ/]Ȑ.h¨æķ*íåŠ3b_÷âØęâh™>Ë@€1Sá ņ&:j)hŧĨ¸Ž+÷@ßžãAcxÂÆP{}‘ņƒđ¯=ø˜VãpūŨYļĨ ņ U¸{ģĸŒvãųī<Ęœs邆 íÆŠŠŊ×ô¨'¯L™ŗ{b߂%ŅōîŽh?ÁP€Š4Ž™‘ q[šJAãĢo\/h o@Øj¯eĶPĢņS;M/įęŧÕxÄĒCˇY˛Īž9߃œsڍh8“ĻÄĀû?=gŸöNĄc l‹įĪ­DĐøŲ4.UŃÆĀ6€ÚJ!ÎĖ­Æäße?=ëķæ…*ŪÍt[™ÂÍ)HÕäÛUÛv ]āPĸÔnÜgzÔ­ coGW ,úD vvĮ¸ÖÃĖÆĐ­­ąōœåqî+ h()hŧæšĢË ?ÃÁYAãŅë Ac¨ac¨Ŗ"cķįŽų…Vã°bvGsô”RˇĨ–›ūÜŨ6ÎÔn|ūŨėņ‡‚ɐg{{–ÆūįG´M3¨ S ož˙^Ac áŒË”‚ÆŊQŨ ËķŽ¯¸nŽ ŋpåU‚Æ0 ÂÆP;Š6Ķâ×˙ãL¯|úCsŗl+Ôčîj7nré‡ íÆŠšŊĪôȋW~§=öu/Ž] Ŗeú,2¤ņ—ŋxeÜ}םBÆ@C4Ž™ž—í˛K.o=°ÕDa„ 6RĢņĒ,˛swܡûyĖšUŨYZĶ ¨ūŪí6~6ËÆË>~ēŊh7 YŧĶ,Idü<õõöîŲ_ôg‚Ɛ°1T_!ëÆĪm|Čôr.ĩ/;mNUŸ7õōNíÆĢē;= r.]đĄŨ85š¯2=roÂÄ88ãøØÛŗt(tmĶĖ„Ļ”BÆg.˜lž?ÖŽģ^Čh ‚Æ5Ķ_\į–{4žā3Å~ō´‰BÂÆP]í‘ņÃņM۟‰§˜`ÎåŧÕxDq=™eã9ž;¸&ß´@ …Ž÷u/Ž] …ŽiG´ļž2žâęĢĒq“˙nę@­M.ūî[ˇĻP‰ ņõ!h\Ēū¨`Đxįs?7QČHØĒĢuãē­›^Ν0åđøԇOͲĩ¯˙:™ZjSĐ:ŽÉˇÔnœ.€(Q[ÔWC7TÄËSg …Ž÷-X-ĶĩģŌ˜RČxå9Ëcķũ÷V3dŧĄ¸\ŠÔT ßx횘×ĶSîĄÎ ßøSŠtąōÆ4†ē!l ÕĶ? ŋgÛ­Æ `åĸS˛lK_¯šĢ˙:[b¸qšdËN›ŖŨ¸dŧâânx€Æ3iJ Ėî kīŒ–ņĖ„Ü›1õčWCÆį^°ĸ7ųoņZČx…G¨Ĩ‘ ņNšSîĄRиßDG-ˇ×ŌrôĶī4† 6€ę)dŲ´˙ÅÁ¸îĄ'L/įRĢņŨU{ŪÔķsZģqcH@dh7Ž÷į4”oŌ”ØÛŅ=gÅËī;)Æĩf&äN ų‹WÆŨwŨY­ņ Åĩē¸!c ×ĖHĐøär”‚Æ~ö2Ac¨ac¨ŽŪâZ”eãƇwÄs/4ÁœģäįeŲv}ÔgĢņˆ-Åuw–ŸúđŠClō-cģqjxo7=Ū„‰qā=ŗcoĪŌėė:Ļîĩ×ûŪuėĢ!ãšķæWãfGBÆG×ZP:Ž.h\ī4U¨ac¨ŽB–MŠÕxũŖO›^Î}dæ11ovGŠÛöD>`WeŨ¸rŅ)ž9—ڍoāŅ,[ûM€frpÆņCĄã] #ÚĻu%…ŒOîhģnûjüÃ×o­VČøgÅõû!d ԙ4žé+7”4NŸéœâŊoIēBĐꚰ1ŒŊžĐjÜÔÎ?Ŗ;ËļtÂũ…üõv×-Y6žŅŨŠŨ¸¤ "Ō…%Jŋ{M€fķōÔą¯{qė?uq´LŸe ÔÔøq-ŅsŌ†BÆëož)fÎĒĘsr$düžâzØŖԓ‘ ņ‘mmåfĪĄ÷ģO˜č¨U,hüũī~WĐƈ°1ŒŊB–MĪ˙r ŽÚļÃôr.ĩŸØ1ŗÔméÄÔÚFŽ'—üáfz  Á[Gė*Žëŗlœ7ģc(Mži7€Œ&M‰÷0zΊqíBĮŒŠÖ ^ _qõUոɑņ{Ŋî{ÖŖÔŖ'ž h\ _}ãz…1$l cĢeSj5^˙ÔNĶËšŗ;˛´?ųl|M÷yO–ŲԑÔn|Û™.XkzP4abėí芁EŸˆÁÎî×z˜™P1G´ļÆĘs–ĮÃ~ˇZ!ã/Ž 1œIé !c Ž-ž?7ŽŋáK卟ŒáövAãŅ[‚Ɛ+ÂÆ0v ‘ąÕxŨwļ™^øô‡æf}ŪäQjbÎMlíÆųˇvû3CJ”čän€98ãøØÛŗ4öŸ8?ĸmšŲÔ#&…Œ7ßoœ{ÁŠjÜäHČøÅĩÂ#Ôģ4^sÍÕå&{#_ßPUkés€ģĸAãŽ[+h U"l cã¨âZ•eãOvîŽ;ļÛs.ĩsô”RˇĨƯū˙ĩSØXģqûڃ™Ú &ŋí•ßi}Ũ‹ã@×Âh™>Ë@ĩSŽ/ņĘøŪw6V+dœvĢCČČAãšé+Ž›+q Ë.š4ú7~ĮDĄJ„`l¤ qĻvŽ ›ļ›^Î;ņY[Wåü¯žNŽ˛lLíÆ) Mž­jg–vãÔßgzđÆ^ž:#f÷ÄžK„ŽyS-ņZČøîģķæWëõ ŋå ú–-4ŽŅčŖ‚Aãī?ō˜‰B @å•Õj|ßîįM0įVœzB–Vã­Åĩąūú)dđl–Úԙ5ßڜe[áĐīNāÍLš2:^xvŒkīŒ–ņĖ„ĄņÉíq×m_­fČøgÅõû!d äĐĨŽˆ‹V—}­÷-ÅÕ‚ÆĨžī4†6€Ę+„VãĻ•Z—6'ëķĻ‘~J–Úڍķ/]0‘.œ(Qj7^ez0 &ÆŪŽŽč9+;ģc\ëafŌ„Əky5dŧūæ›bæŦĒ´^„ŒßW\{€ŧIAãŗ—//÷0)hÜgš%é/ŽËË=ČŪ={Ą†„ ˛Ú‹ëâ,7mFĢqH­Æ“'ĩ–ē-ĩoi 1ô‡vãĻ–ņ‰6Ön Ŗ5abœq|ėíY::ŽļifŌRČøĖķâ‘Í÷W+düĘĄ÷+éŊŽ1[‚Æ5Ķ_\į–{4žā3 C ¯ˇĖ l…Ŧ×m}ÜôrNĢņ¯ÉÔR›Ú˙ĒgŽ'SÎel7n íƐI īë^ēFË´éŌ€Z'Lx5d|ÅÕWUã&GBÆī-ŽŪČx1!@­Mnm4Žū¨`Đxįs?7Q¨!acāõēŠkW@Ví‘ņôÔjüôĀĖš˙úĖŌjœNVmiĀqlŒápBÉR`;ˇÉˇkŋûH–mĢũ.2xyęŒ8ųôØˇ`I´LŸe āˆÖÖXyÎōxøÁīV+düīÅĩ!†ķ$Ŋ!d äX ßxíšJW‡ q)Ōˇõ‡ 14acāõŌč+ŽģbøWģ‘@Éī­3Ņjœ'L9<ÎčîĖ˛ĩĐĀcÉôwKí§žāI•süⅡ )JÔÖā?P“ĻÄĀėžĄĐņ¸öÎh?ÁLrf꓇Bƛīŋ7ÎŊ`E5nr$dœŽú[áōn$hü“Ęūö¤ķŠk­‰ŽZ o‰ ˙÷?˙ŗ 1ÔacāõvÅp“N˛¨¸ūéĐ ĻŖŒŪVīĄ÷Ķ%ģũGĩ7€•‹Nɲ-}ŗĢĮ˛%´7ĩŒR¤’íĻ0iJėí芁žŗâå÷ãZ3“:7cęŅņå/^ßûÎÆj…Œ_ˆáÆN!c aT8hÜoĸŖ64>šÜũôĮ;✠C6~ĶožHē8†Oxõ ŧĨB–Mû_Œõ>mz9§Õ¸ōĮÔnü_˙āƒž\9—.¤ČĐnÜ,?P=&Ɓ÷ĖŽŊ=Kc°ŗ;ZŽ8ŌLęHKŧ2žûŽ;cîŧųÕ¸Ų‘ņŅĄąh Ķێ4ŽŠ/üėeąpĐTĄŽŋ)ũ‡˙ÉßøgéĢ o.Ž'b¸Ĩ øuéũrĻVãīˆį^:h‚9wÅ˛…Yļ}>ģÕxĖxíÛ´J’Ü)ČMž]y˙†.Ŧ(Qj7î2=¨ŧƒ3Ž~4t_ÃļM3J!ã“;ÚãŽÛžZ͐ņĪŠë÷CČh@ĮNŋŋõĢå÷×é!h\Šö4††'l ŧ‘7{S™^l>ô‚ę(c€ˇ}/ũ–´7†Ė<&Nė˜Yęļ=Ņ\'ö Y7Ž\tŠ'YÎĨ *Ō…ÕúŨ ŒÎËSgÄžîÅą˙ÔÅŅ2}–TŅøq-¯†Œ×ß|SĖœU•ų„ŒßW\{€F“‚Æ7}å†8˛­­œÃ¤Īkzc88Ëč¤ …SyaŲAãnÛ&h uLØx#ũ‡^@Ŋ™Ô*˛+|•!$}‘ņÃôŋģ÷ZĀųgtgŲ–B”/4Ņ˜v…vãĻ–.ŦČĐnœã{MÆÖ+SĻÅĀėžØˇ`I´ŧģ#ZÆO0”1’BÆg.˜lžŋZ!ãWŠkk ŽÂAã'LtÔRĐxK czYž}Įąō˛‚ 1Ô1acāÍŧ]kHzĄpy Ÿ(ę5.šX!ËĻį9ëŸÚiz9§Õ¸äŸ•=Y6^ąlĄ'[ΕŅn\0=¨’ISbāũŒžŗb\{gŒk=ĖL*¤u„WCÆW\}U5nr$düŪ>—+d 4Ŧ9í‚ÆĩQŅ ņÕ7Ž7Q¨sÂÆĀ›éåŸ;Ž¸6zŅnl4™žCīKöĩ3ŊpŲĮOĪ˛mU4WĢņˆ]‘1dŨ)ØMžĨvãtĄE‰Rģņ2Ķ€*š01övtÅŪžĨ1ØŲ-t\†#Z[cå9Ëãáŋ[­ņŋ׆x-düŦGhd‹įĪ 7ßTnĐøÉÎ ^úoĖ–4†Ļ"l ŧ™]QÚW[Ļũ˙)†›FŽ2>š@z˙›)8ŠÕ¸1Ŧ˜ŨĮ=ĨÔméd-ũĖdj7>˙ŒnOēœKíÆ/´XkzPg?:Ūâüˆļi2J#!ãÍ÷ßį^°ĸ792~GzĢBÆ@HAã5×\]îaRи7†32ŒN_ —–4žåĻõ‚Ɛ#ÂÆĀ[éĪ°įōC/ÂúŒ€—Úi3}¨žæ[›M¯|úCsŗl+4ųØRŖŗvã&–.´ČĐnœäûLjį•ßi}Ũ‹ã@×Âh™>Ë@ŪČŠGĮ—ŋxe5CÆéõõâĩ1@S¨pĐøĩôŪüæJč˛K.uˇŨaĸ#ÂÆĀ[ŲŲŽzm;ôâbËĄfĐhRĢņĒ,˛swܡûyĖ9­ÆeÉÜn|ņG˜^ČØn\09¨Ŋ—§ÎˆŲ=ąoÁ’ĄĐqËø †¯…ŒīžëΘ;o~5n2ãV×ŅÅuŠGh&‚Æ5Ķ ˙‘ĮLrFØx;…2ö.Šá¯Nčá“°Đ(2ˇoØ´Ũôrî؉īˆ?ũXĻĐkŸé y!2†õÛgŧs(čMžĨvã]˙ō‹Rˇ—õyŒIS†BĮ=gŸöÎĻ ˇ×Éíąņļ¯V3düŗâú12^ë‰4›K/\Q‰ ņŨ!h\Ēô~\Đšœ°1đv6FÆĻ™×9ˇ¸v…öC{h5nj+N=!&Oj-uÛÖū(†õGļoԊOhŽé5€ë˙ņYļBŠԗ coG×Pčx°ŗ;ÆĩÖđ呐ņ]ˇ}5Öß|SĖœ5Ģ7›BÆŋ_\ī+.ß94Ĩ4>{ųōrsKq- AãRô×uådīž=‚ƐsÂÆĀÛy!*ķõžŠíéō÷+9VˆŒ­ÆŸÛøéå\j5^vڜŦĪ*0“cŽžĸŨ¸¤ /Ō%Jŋ{ĩ@=š01Î8>öö, GÛ´†û+Ž×g.˜?Úúũj…Œ_‰á‹GBÆ{ĸÍĒ‚Aã>Ķ,I  –%/øĖE‚ƐsÂÆĀhTō+xŌ×nŽáÆävŖ gŌ{ŲL°oÚūL<=pĀsNĢqEõGÆvã?ũ؂Ąā7ųļaĶö,ÛRØXģ1Ôą:Ū×Ŋ8t-Œ–iĶs˙÷ ?˛ųū¸âęĢĒq“#!ã÷Æp‰“1ĐԍkĻ?*4ŪųÜĪMrN؍]Åuw…š´¸ū)|õ!ųRČēqŨÖĮM/įN˜rx|ęçfŲÚgz•M |§ā7ų–ڍøÔÎRˇi7€œxyęŒ8ųôØˇ`I´LŸ•ģûDkkŦ;€†đōÔą¯{qė?uq´LŸ5fˇ32žëļ¯Æú›oŠ™ŗfU㯗BÆŋ_\ī+Ž;<Úŋ-oúĘ qd[[9‡Ųsč=âFĩŽūLFĐx[ÂÆ@ŠĒ}•íqÅĩųЋÁvã /ī…Ÿ˙å€VãZOė˜Yęļ=ĄŠ,‹B֍ڍķ/]˜‘.Шæķ¨?¯L™ŗ{b߂%ŅōîŽh?Ą"Į?Ž%Î\0/~´õûÕ ŋR\[ãĩņÃ]€7Vá ņ&:j)hŧ%†ËËōí;îˆsW~VĐœ°1PĒ]Åuw n7ĩ”üS Ÿ<8ĘÃ@•ôÅđ…°%ûڃi5nZĢjW”Ņnœ‚áä[ē@#Cģqjžī5=h0“ĻÄĀû?=gŸöÎ×zXĻ̄ŒŲ|\qõUÕ¸į#!ã÷z"d đkĻĸAãĢo\oĸĐ„,jŲĖsųĄˆË< TA!ËĻĄVã§vš^ݘŨ‘ĨÕøŲĐ´ZŽU1|’°dƒáԑtÆmũĄšYļLŽ,Š:Ķ…î)ŽŨ8˙Önf肍Ĩvã>Ķ€ÆvpÆņCĄãũ'Ώh›ö†f$dŧųū{ãÜ VTãnĨņ†âzGqũ‡2•4^sÍÕ卟ŒáĖˆ q Cķ6˛*ÔÁ}H'áPGyH¨ Ŗ˛ž÷ũÉÎŨZ@j5>æč)ĨnKÁ‚~Ķ+[úŦGģqËxÁFÁä 9ŧō;íą¯{qčZ-Ķg ũŗSŽ/ņĘj†ŒĶEr#!ã€Ņ —){ũ>ĻĘ.ģäRAchBÂÆ@Vék€öÔÉ}š¸¸vÅpãTBz™ŠZeÃĻíĻ×´×TYíÆüģ3M0įŌڍS}Ÿé@ķxyęŒ˜Ũ/vVôœš4ŪŨūģÕŧųIÅõ @iķ/ŋ˙ˆouƒf$l d•^´õ×ŅũI'€¯‹á¯ĮčõđP†Ôjœé‚ÖÔj|ßîįM0įūĒgN–Vã­ĄÕ¸’ ‘ņ+¨W.é1Ŋ°î;Û˛>o|4™—&7˙ë‹qú ߌ?ûņÜĪĢōž,…/)Ž_ÅpI“× o÷~ũœå•§Ī_zCи&Ąš åX›uãåˇŨ7tv œ\\›ŊŠo÷E,ųȇcrkĢAŒ^!´7­c'ž#–6'ëķ†Ę˙,–,ÅWĖî0Ŋœģķgģŗ|~˜Ú}ûP3īzqOL|é€A@­ŒŸßl?üŌ×ã‹_šŊZˇš2K‹ë˙-Ž×Āo›ĶŅį^°ĸÜÃÜ‚Æ5ķÃmۍĄÉ åØU\wgŲøūc§Å'oŊ/Žũææ,_‰8éM}j9.D“_I|öōåqĪ7nx‘g,ĀÛk/Ž‹ŗlüáS;ĩ7€§ž“'•|ŅnjÕŲbz×ۍ?ũĄšĻ×2^Ā‘Âƚš8ąmR<ų×˙9Î{פh0¨‘‘Ļã“˙ōoã¯ÖŽ¯VĶqĘ^œZ\OÆđ9Ęß÷HTT ÷@íåĘÔn<Ō´ūŠņĮwWÜūĀŖcqßR Õå‡ŪĐ/kæéČļļø‹˙úWqËēk‡ŽāM˛nŧæ{?4ŊœĶjÜ8?“ŠŨxUw§éå\ē€#CģqúLPģ1PS˙å3ŸŠGÖŦŠ+~oÖPÛ1P)tü­=-qú ߌ?ûÂÕ 'é›X*ŽįŠë?z$Ę&h P„rm‰ 3Š!häë,Ÿ{é`\ĩmGœũ7˙åäÁh¤¯OŧëĐ}íjæë'͉ 7ßkūâĪczۑžŊŋŽŊ¸ÎͲqĶögâé_™wĢvei5Nßú´ÅôÆL 7G—ėœĪ “oڍ<ûäũAlēúĪ‡BĮŋûŌ^Z?1ž?Ø::ūOWūmėxę™jŨōôâú‡âJUį_đ@dr}Ôac  Y6}|ÁIŋö˙ĶIŲOŪz_Ŧ^O<˙Ë1ųząEÅõx ˇ17õɆÅgžëWŖoŲĪ^€×ŦÍēqŨÖĮM/įN˜rxœÕ“ŠÕXƒęØ+dŲ4tąûŠ'˜^ÎĨvãtAG‰ÚĘųPi)t|ī_¯Ž;>Ņs~5` P+ã'Æ˙ũōáąü›ÛbųįÖV3t|Dq]R\˙ÃĶš( `tÎ ŸģÔ ac 6WÉßÖ>ãņ‘™ĮüÖ?O'~éθũGc˙‹ƒcq/.Ž]ÍūĸôČļļ¸hõĒ¸ëÖ ąāD'Ū€Ļ×[\KŗlŧgÛ­Æ `åĸS˛lK_ãšËôÆܖČØnŧė´9ڍ@Æ :RS}ģéõdÎėθãŠU¯…Žõ’Ą@ė?åÕĐņĻ˙ūHĩnvŌĄ×(˙oq}ŨŖđ–VĮđÔ ac ^Čú"īNy˙›ūģĢļ툏]wG–æ’ŅHí&××1|BšiŊû=ī‰ëoøRŦ[SˆémGz6ÍĒeSēHöē‡ž0ŊœK­ÆgtwVíyCõ~FSģņę…]Ļ—s邎ŒŸúęŌHčxķEŸˆÅ­ƒBĮPC)t|ŅĻ§âŒK˙&žņßî¯ÖÍĻœÆ'‹kŊGāMųĀ  Î•’ék Ķ‰ŧtBīÍ<÷ŌÁ¸čŪmązũ=ņ“ģĮâ~Ÿ\\›c8,Ũžƒ9oĢĪëé‰{īųVŦ¤vã ߂ĻŨ¨kĮN?&žôž:žø’oˀZų×Imņš˙ņŋ†BĮ_ųûģĒq“)Ģq~qũĒ¸Ō įQ ž •˛+2žđųøœ÷Ŋퟹo÷ķņÉ[ī‹kŋš9ËI…ŅH'Ō•q…:Ÿsēé{]ˇŽÕ œ{ÁŠ¸įˇĮâųs=Ģ€f‘éŊ`zēūŅ§M/į>2ķ˜8ącfŠÛöDÆ ¯)ËĒŦW.:Åôr.ĩ§ <2č7= Ū„ŽŸüë˙įŊk’Đ1ÔP _÷?˙ŋ8ų/˙6žø•ÛĢq“)ŗą,†Īĩ>BĮÔ)ac ’2d[vڜQ˙ŲõO팏]wGÜūĀŖcq˙ۊëōCoæ—ÕņœS(ēˇ¸Î+ŽgĮâŽlk‹5×\ˇŦģ6æt´{fŦ/2ļßöĀcZĀųgtgŲ–>yÁôĒnWqŨ’eãÛ}ģų.đČPD~Į÷š˙å3Ÿz5tÜ68` P#/M<U\§y¨'ÂÆ@%m‰ á×ɓZcÅėŽQ˙ųt"÷Ēm;âėŋų‡øÉÎŨcņ÷HW ßučīĶ^Įķî/ŽŽūÚÖ1ņ“æƛoŠK/\Ķێô Q!ËĻį9kˇ?cz9§Õ¸y~f“Kūpžéå\ú\0cģqÁô€ŧIĄãGÖŦŠ+~oVŧëÅ=52:>ũ†oƟ}áÆj…Ž?P\˙=†ƒĮBĮÔac Ō Y6}|ÁI%īI_øÉ[ī‹Õëī:É;RëÉ?Åđ ÄŖętŪ/šų{‹ëîąē‘ŗ—/ŋŋõĢŅˇl‰g8ĐHú"ãWÔ~íÁĮL¯\üŅYļBĢq-튌^Ī›Ũ10'ß´Íæ“ôąéę? ˙îK{ jeüÄøū`ëĢĄãOUåâĶô~5…ŽSûŌrĩ$l TÚÆnø)IûŒwf>Ųsßîįcá—îŒÛx4ˉ†Ņ¸8†OdõÕņÜĶũ[V\§G†véŅ8˛­-.ZŊ*îēuCĖéh÷Lō.]TZȲ1]đēūŠ&˜sé[–Ōį%Jīšĩ×^z 2U<žFˇéå\j7ūģ{ekŋéy–BĮ÷ūõę¸ã=1įWĩr(tŧü›ÛbųįÖV+t<Ŗ¸ž^\ûŠk•€Z6*-5ûlĖ˛ņNyY7|Õļņ'7~;6Í×Øļ×ÍÅõDÔw ʖâj/ŽÕ‘ņ¤ÛÛy÷{Ūnž)Ö­)Äôļ#=ã€ŧJ'h3ĩ¯ûÎ6ĶkŸūĐÜ,Û &WŌįO™Bß'vĖÔnÜŌžé,ũÎī3= īæĖîŒ;ŽXõZčøW/ ÔȎņSĒ:ž\\××ūâēÚ#@5 cĄeĶŨq”ÃËēá§ÄE÷n‹Õëī‰]˙ō‹ąøģ\\›c¸ ĨŊŽƒĩ‡îß-cuķzzâŪ{ž}˖ÄäÖVĪz ORĢqĻ6¨ŸėÜwūlˇ æ\j5>æč)Ĩn{64Ŗ֓ĖíÆté5€¯=øX–m“ÅHčxķEŸˆÅ­ƒBĮPC#Ąã3.ũ›øÆģŋ7™N¨ūEqũ*Ŋ,ōP ÂÆĀXØU\[ŗlüøœ÷Uäܡûų8ķĻģãÚonŽũ/ŽÅßņÜn9.ÔņãZ~úŠëôŦĮh\´zUÜķÛcņüšžų@^¤ q[–6m7Ŋœ;vâ;âO?–)lÚgzu%}îQȲą}Æ;‡įä[j7ÎP6 Ũhŧ×6Ķ‰/ũŅ¯†Ž'žtĀP FūuR[|îü¯j†ŽSŪãOâĩĐņqÆōÅ'ĀXČôU–ËN›SŅ;‘N:|ėē;âžm;Æâī˜NL_ÃáęŪ:~,ļēįEÆƟˇsd[[ŦšæęXˇĻs:Ú=û€zVVĢqē¸•|[qę 1yRÉßĐŗõĐûkęKúüéŲ,?ũ!M7‚ë˙ņYŸ7G™ĐhFBĮOūõŽķŪ5Ičjh$t|ō_ūm|ņ+ˇWã&GBĮģŠë‘:`Œ^tŒ…‘ádO:ŲWéf™į^:—<đhœũ7˙0tbx ¤7ė›cø¤c{?&ũ‡îßįĮęæõôƛoŠK/\“[[ũõ(…Ė2ĩ_ûŨGL/įRĢqÆ  ĻWˇ2=6Į=EģqH€døŧ/ũ7`•éėŋ|æS¯†ŽÛ jäĨ‰‡ĮÍ˙úb5CĮÉŧ?BĮT°10–2ĩ˙áīŊLîĖĶ⓷Ū—ßv_<˙Ë1ųpmQqũS ŸäĒ×v”‘¯}o ˇ2‰ŗ—/{žq{ô-[⧨'íÅun–›ļ?üâĖ9­Æ Š?Ęh7NtōmÃĻíYļĨ°ąvc áĨĐņ#kVÅŋ7+Ūõ⁠Ÿđš/ĮŸ}áÆxîįUųƜî§+ŗNķ(P.ac`,õWɟ^Ø13æŋsė>ëŋķgģcá—îŒÛx4öŋ887qųĄ7ī}uüؤû×[\§GÆroįČļļ¸hõĒ¸ëÖ 1§ŖŨOP Y7ŽÛú¸éåÜ SĪÚjŦĩūõeŲ4Ôn|ę Ļ—sڍŪŪ'˙čbĶÕ>:ūŨ—öÔĘø‰ņũÁÖ8ũ†oV3t<Ŗ¸ū{qũ<„Ž(ƒ°10–RåĶÆ,˙dūė1ŋsWmÛrãˇ‡ÚŠÆ@:aqs 7õÖņc”î_{q}>2ÃGãŨīyOl¸ųĻXķĶێôSÔJzī“šÕ8}[ųļrŅ)YZo)Ž'L¯îm‰Œßā”čڍķīsʲíōC˙m¨Ĩô ėŲjŨX ßû×ĢãŽOôĜ_ ˜>ÔĘHčøīî‰åŸ[;žzĻˇú;1:Ū.ē ac`Ŧ˛l:Ŗģŗ*'zŌÉâ‹îŨĢ×ßģūåcq‹Šks ˇ<UįS{ ŸD‹Ī<3îŊį[ŅˇlILnmõ“T[–Méq´į_j5NŸ5d|ŋL>dzŦR]ģqūĨĪø2 øjíĮ1üŲ|úú…Ē…ŽįĖîŒ;ŽX%t u`Įø)ąü›ÛĒ:>ŧ¸Ž+Ž+ŽK=Œ–°10ÖvEÆf™jžčI_ˇxæMwĮĩßÜåä áŽĪ|,lŧ჆Ža”=;æ„pã?üS˜ũŲ¯ŽÔĐqœš:[˙ đęmUHxüׄĮ…yím#ūËî>üJøôú­áē; ĪôÖã“˛ĩ1T‡z[øŧu˙~ˇ×ëĶgÎ ==÷†Ī~l^8~ėXī :ÃQ¤ĮkDŠíúŲĶRĘâÆéŊēW8O…j"unq }ʸãt°āžôŨŋOyjŲĩĄąƒ€æõęĐņĘlũķHđÕĄã7˙—pŨ[Ž c{ÂŒ–Û24t<ãO‡?˙Ģ#qČø÷æÕĄãøšz’ŗĀ/2l Œ”¤tãKŪyú¨ũÂOŧ¸7ĖŊg]¸éŪuaĪKûëqˆøEáB5=e|ƒžˇxc5ĻŊ#$>ŠôH\qõÕaÍũ+•īžåÔZwJ‘TãrˆŠÆSÛ&æ-‹ŠÆ‹u¯°*Š…ķg­{7ˆÄ"#ųēWfë˜lŨFhč8úã?øpxúO?nčFŲžąãÂ]?>ÎüÜ_ŒäĐņ™Ąú¤VCĮŧÆ°10RēCõf].ņ†āŒ“Fw÷žgÃU_(ŦXŋ5%åHÜ4|ąŪÕĀįo T^~?$¤T‰ZZÂgžđųđĐ=ËBG[Ģw P ņ:+éÆč××~OĒq H5nJá(ŌGû{(Ž^Ü(’đ^Üߊ{@ƒ›ĒCĮŸÉÖū‘:čĢCĮ7ŋķíá-÷9 0J9îĩĄã?úŗ¯…Ũ/ė‰Ãž:tüBļÎwš›ac`¤Ä›tĢR ?:Ŗ}Ôųxƒų–ŪžđŅ¯­ [vô×ãņæ÷]Ųڔ­ŗø<Æsؚ­/†„áņ#ņļSO ËîúF¸õ3Ÿ 'ˇœāJJQ|ēÍŌú\û1‚Ž:mbJĒqÜ`+Õ¸īũ¤ī->uŲ Ũ+8éÆ@¸-[ņËķša‡Žįž˙â°á˟4t Ŗ,?rhl¸đÎFrčøßgëīBučøRg 96FR%Ĩ(Ļʜ2昆øØš˙åĐõĀÆ°péš0đŖëqˆ˜ĸōd¨&Aođs‡ĸ—×ëīšė˛đ×÷|3tÍy_8~ėXī ¯Ž˜j|÷ŖÛt¯æŋofęõŽTãâ‰Cãq@ũŌ‰t°ābh@Ü8’Sü^nŽîō@øųĐņž‘:čĢCĮ=œ:~ēßY€Ņōæ1¯ _}ãâСc×H5?Ē>ë$4ÃÆĀHČÖæ”ÂyįNi¨˙uƒ{ÂeßXūrmoĘcÄĩÃũZĐāįŗ+[fëézā„––pÃÂáŪĨ_ įMâŠ¸y3iĐ0n,•j\|ķÚÛ„Įå-‹ŠÆŨēWņo@Rėâõŗ§é^ $n‘lQ:Ž€ßgFDGûäĐsķCĮ0ÚŪ<&ôŊy\¸úŪ‘:ūwŲē5[ŗuŗ“Đ #-é û‹§MnĖ˙˜íģÂå‹zšŪžzüø–l- ÕĄŪÎ>§›B5åxaHŧ‰÷FŪvęŠáö;īKn­„ļSNö.ŪȂákĒÜn˙›īé^ \sŅ9)e+•˜P-Ũ¸‰Å# éÆ1ŋK÷€‚ú~ļZCučøû#uĐW‡Ž7ūáī…÷Œ=ÂO;0J^:žüs‹ÂũßūîH2>šô ŲŠÉL˙Í(7ÃÆĀH[vÖĮ4ĸ˜JԈv~%|zũÖpŨ†gúëqˆx“cãpīZøÜ.ūũn¯×ĻĪœzzî ķ?ru8~ėXī&āW‰ŠÆIO‰‰×tņI6Ûįgv¤¤Į'1uë^éÄī*’˙äĘ u¯Ķ+:\4ŽĮoĘÖc#uĐSNžîøĖĮÂÆ>hčFŲŗcN7ūÃ?…ŲŸũęH ÉÖÕŲú—l}Į('ÃÆĀhHJ•šä§7ôÔ/î sīYnēw]Jjʑø@ļ~Ē7<Æ7hbjPŧŠv¨Ū¨­‹k˙ķŧ°æūáĘwĪōnū­äTãeļë^Á2æ˜0įüŽ”ŌŠî•ŌŪÔsÛČß9r1Ũ8!`’ŋ @‰Ä/Ņ_:ūįų<6ļåĩĄã?˙Ģ#qČø÷æŊĄ:tüÄđį*J°10ēŗĩ/oQ|„匓Æ7üÜ}Ī†ĢžūPXą~kŊqSļž ũHĮøûufë÷Cb‚Đ9ĄĨ%|æ Ÿ˗|%t´ĩzWQëđ5SnRËaŪšSÂņĮæ~NÜ,ģI÷JĢ;$~7qÍEįč^ $n$‰WÆëP"qčø˜lŨFhč8:ág?ÕyhqčøŽ g~î/Frčxzļ˛ĩ+:(ÃÆĀhˆŠ2ĢR ?:ŖŊ˙ģŋnéí W|õ[aˎūz"^”ßĒ7CĪjāVŦūũžĖÄ8Ŗ#,ģëáÖĪ|2œÜr‚w4ˇJjáĢĶŊ‚“jL­ĪqL7^0m˛î\ÜH’nōčPBķÃĪ‡Ž÷k4—ÃcŽ{mčøķ‹—†Ũ/ŒČ†Ûß ÕĄãfëRg ¸ ŖĨ’R4{Ú䡛‡Eąs˙ˡ끍aáŌ5aĪKuųŪ.Ļ<Ē)=šļōę#KãĐņęzä=—]ūúžo†Ž9īķî€æԚ­kS 7lß5tũFą-ŧāŦ”TãxēI÷J¯;[O§~äŨįęģ(~5éÆŋ$ĮôŽšÁĐ148tüāž7… ī| üŅŸ}m¤†Ž'fëálũĪ`蠐 Ŗe TSš[|$jŅÄ• î¸/üåÚŪpāāĄzâÚáž.hđs>'[†Ä|o䄖–pÃÂáĄ{–…ķĻNņ.€æRI-\˛ųIŨ+¸)㎠ŋ73)ÕXriķH:×q€ŊˆßEņ¯Åīæž>Ö$Ÿå÷@øųĐņí€&ķæ1á‘Cc‡†Ž˙Ķ—ū"ôíØ5Gũ?Cučø'Ąēņ€‚0l ŒĻÅ)Eøņ•‹ˇī —/ęJÍĒƒxdQļžĘVgˇaS¨Ļ/ĖÖžzām§žnŋķŽ°äÖJ8šåī4(ŋx ””jŧĻˇOĒq ĖŸuvJŲōPŨKsØ7žĪ9ŋCēq Üöˇ[RĘ>ĒÉųe‡Ž˙}ļâî­į´šĖ›Į„˙ū/Į…Ģč W߸x¤†ŽĮeë/˛SšūĢ“Đø ŖiUHøŌj‰ãÂŧöļÂūGī>üJ¸amo¸îÎÃ3ũƒõ8ęŲÚ8ÜßÖnÅâáßoyŊ0}æĖ°v̓aūGŽĮëåUI)ŠOžYôØSēWp1ÕxvÚÆäŠîų[q$¤—CÜX’āoĐLžĒßÛw ˙ ÉôŊyÜkCĮ÷ûģ#qČ1Ųú˛õJļV8Ë°10ڒŌ/yįé…˙âÅŊaî=ëÂWØöŧ´ŋ‡ø@¨ĻW˛5žAÛ°7[]ŲŠT›ëuk˙ķŧ°æūá=3ÎņŽ€ōéĖÖŦ”ÂU÷ mĨØ>}Éô”˛ÛƒTãf´)[ĢS ?üîs‡Û)ļ%›ŸL)‹Éų­ē4™8hŽß”­Į´šO:žņū)ĖūėWGjčø7ŗõeë_BīÎ°10Úēŗĩ/oŅÔļ‰aÆIãKŅ€Ĩ;úÃU_(ŦXŋĩ?ž%[7…ęĐņœnCüũ:ŗu]¨Ķ#ÚNhi ˇŪöå°|ÉWBG[Ģw”G%Ĩ(Ļ/ŨēS÷ îŌ‰ÂôüO?Ú$•6ŗŠ…ķg­{Ķŋƒ[Ŧ{@‹ûâĐņĪ´šĪmymčø¯ūúĄ‘8dü{sÁđߜ8t<ÉYh †Ņ“mWĨ~tF{iš“´néí W|õ[aˎūz"^ˆĮo6eëŦnE÷đī÷Åzā?œŅ–ŨõđŲÍ ĮëÅ7UJ5nb×Īž–R‡÷ę^ĶČÖō”ÂŲĶ&K7.¸Ņ$n8É)>AŦS÷€&÷S-€æ‡Žũ˙ÎüÜ_„?˙Ģ#uØ †?ŋĮu†ŗ0ē  ’Rođœ2æ˜R5"ĻĢt=°1,\ē&ėyi=oÂĮįEÆĢ Ŋwø5ņŽøhĶ#qÅÕW‡5÷¯]sŪįŕ”4¯ˇâ†OŠ-ĻĮ'å´/H(å(’­Ĩ_Üh7œŒäë ,9.Üõワ ī~aĪH6†*ÅpŲšé,ŒÃÆ@#ˆ†›S į;Ĩ” Y7¸'\pĮ}CuLHZ9Ÿîû‚]Ĕ˛ ŗõ\=pBKK¸aá‚đĐ=ËBG[Ģw"KWH|œęŨnĶŊøÄ{ĪK)ĢŠÆTŋs¸=Ĩ0n~ƒî[bēqÜÄߊ{?:žđÎÂũŲ×Frčøņlũ$[tF–ac Qt§]/z%ŠW˛õŽPŊ\W\}uXs˙Špåģgy—Ā艟ũĨ7ŠxŨ?įüŽÔ× Ôü5ßĨ_܈’°™?nԗ˜C:^ô?ūW8ķsūü¯Vh@Á6ÍS!a`ôøcĮ†qZĶ6-ŪšāŽûŠõ[Áƒ‡ęqˆOdk 4ö#"ãīי­ Cb"Ņ9ĄĨ%|æ ŸŨŗ,t´ĩzˇĀČjž6ÉmÃö]RK ĻĮë˙œâw ›t7Ф7ĩÄ )qØXē1@N‡ĮîúņACĮcØhDŨ)EWĖėhúÆŨŌÛ._Ô3t#ŊbzØ]Ą:ŪŲĀmØĒC_ĖÖžzām§ž–Ũõpëg>Nn9Á;FF%ĩpÉæ'u¯āĻŒ;.5ÕXō(u}­ÄtãĪûNĒđĶ[üH÷ęĐņ”˙ßđGöĩ°û›„™ac u‡„4™xsįĒĶ&6}ķv~%Ü°ļ7,\ē&å&ɑ83[‡ĪSkˇĸ2üû-¯×ŪsŲeaíšCל÷…ãĮŽõ΀ú‰Ÿí¯M)Œ›1wîY nūŦŗSRãõāSēĮZžļÅAøSÆŖƒ÷•‡ŸH)[ûû1€Æ÷æ1á‘CcÅw>`蠁6UwJŅÜķÎĐša1‘eî=ëÂWØ}Éô”˛ÛƒTcFĪĻpéÆqĀžb[˛ųɔ˛˜āßĒ{•ac ¨ēSŠŽ˜ŲĄs#$ŪôŋĨˇ/|ôk+Öũõ8ĤlŨĒ7ųÎjđ×jüũžčUŋ¤’R75.ŨēS÷ îŌ‰Âôöļŧeû‚„PF_WJQÜ?ÖŲēWp1ŨxMo_JébŨ ¨ EÕŌb'œ8.\uÚDŨAņL×ÃÂĨkž—ö×ã1íÉá×ÄømÃŪPŊūŽl­öĒ€!AĒqSģ~ö´”˛ÅÃ×X0š˛ĩ<Ĩpö´ÉŌK`ŅcOĨ<ÍëÃ˙ö@á6ŠŦ;ĨhîygčÜ(X7¸'\pĮ}á/×öĻ܌9ņq”ŲZĐĀmˆŋߜl]†åĀ5]ÚÄ(Õ¸øbĒņÔļܛcĒądPE%ĩPēqņÅ /qãËHžn`46ŠŦ;Ĩ(ŪĖ” 3zoß._Ô6d˙[-ŲZĒCŊ ܆MŲjM} @ tekRJáŨn“j\R)péÆ3N¯ƒ7ž$l¨‰ūē@­]Ųōŗđ–ƒû4¨ÃÆ@‘ „Ä›:dFW ¸amo¸îÎÃ3ũƒõ8DZؘ­UĄ:ÔÛČ¯ahF•”ĸĄTãũēWpķÚÛRRŸ Ai<ņéJIS=Ÿēl†îœtcə§6|ų“áÎŲíĄã§û5¨9ÃÆ@Ņu§MoG8eĖ1ē7ʞxqo˜{Īēđ•6 ÔÁ˛õT¨Ūč!į%§S|×\tNJYEįh@1i{qJa¸ŋtâ,¸[zûRžĶŠéÆ]ē@=Ėū3BĪÍ BĪg:jĘ°1Pt›˛õtŪĸã>tÆiē× b2ŲU_(ŦXŋĩ?ž%[7…ęĐņŨ€Q7VR ~ôĸT㈊ÆN—ˇ,Ļwë *'Ĩ_?{šî•@âF˜ŠÎPOí“_:~ĪØC!üô°ĻGÅ°1PI 2WĖėĐš=Ķ`ŽøęˇÂ–ú Ä䴇Bu@ũ,€QS[R o˙›īé^ÁÅ' %Ļ/Đ=ØQĨ_uÚD,¸¸&!Ũ8~OÕĨ{Ô[:žã3 oø Ącā¨6Ę ;$$ČÄ$%Ģl<;÷ŋēØ.]“rŖæHÄGU>Ē7Įë8Œ˜øų;ihô™ūÁ°npÜŧs§¤¤oÎÖ*ŨŖÁÅīžK)œ˙ž™ēWKžĶ›RVŅ9FĘ)'OxmčøʖŸ…1‡_Ö ÃÆ@Y$%Č|č]SuŽAÅA‚ î¸/üåÚŪpāāĄzâŲ˛`¤$§/Û°]÷ .ĻĪ9?é CŨŖöĻžVãūŧö6,¸ûžÚ“Ķ$ãņĪå'Oˇ,˜žūĶ‡ëŪrŦĄcāˆ6Ęĸ;Ĩhz{[˜2î8Ũk`‹ˇī —/ę ˛˙­ƒ8č°([OeĢSˇ nZŗuSJá–ũRK ĻėØŧe1Õx“îQŨ!1Ũøš‹ÎŅŊHÜ7âxōŖâ˙āï ŋåā> ~-ÃÆ@Y dkyJa×ôvŨkpģŋnXÛ.]“’s$ÎĖÖÆP}4oĢŽ@ÍUR oûÛ-ēWpRņˇî׋éÆ ĻMÖŊ‚‹cžˇŠá=u €Q‡Ž7|ų“áæwžŨĐ1đē eŌRtŅ´ßēņIã‹7mæŪŗ.|偍áĀÁCõ8ÄB5帤Ę@­´fëڔÂø„“û=ÖˇčžpņīĻ¤Į śt‚éÕDîÜ>ōîs|?UŌ(˛šīŋøĩĄãŽŸî×ā_1l ”ÉĻl=ˇ(ŪđŧüˇßŽ{˛tG¸|QOXą~k=~|L”‰wŽCĮstŽÚâÔÂ%›ŸÔŊ‚›2î¸0;-ąĩĸ{TŌk7~?5īÜ)ēWpqŖ|Ü(“SËŅü[ ĩ‡Ž{n^z>8ĶĐ1đÃÆ@Ų$}1ÍEįč\Áė>üJ¸Ĩˇ/\ņÕoĨ<ĸōHLĘÖCĄ:ÄŪĒ㐤3TŸ ’ÛšėķžTãâ›?ëė”˛˜j< {ÔĻ˜n<įüéÆ%¸Q&> U÷h$í“_:~×od×f?=Ŧ)ĐÄ eĶ­}y‹&œ8.\:q‚îP>˜{Īē°p隰įĨēė°Ÿ•­„ę ģGZ@>•”ĸ…E=Ĩ{7ã¤ņ)ŠÆû‚Tcšôo_L7^xÁYēWpņģĒ„tãä× Ô[:ūæ>6ŪđÁ𞱇 @“2l ”QRēņ‡Ū5Uį ,>Ļō‚;î +ÖoL¨ƒO„j˛V—nĀé ÕÍ{š­zŧoči&Û§.›‘zM? {ÜĻl­N)üŊ™aʸãt°ābēqÂ÷SŌhh§œŪ2ĻWtū•¤ĪČ{^Ú×į)%Œ ŠÆpt ŖO_2]÷ .nœIL7ŽčE‡Ž7|ų“áæwžŨĐ1””ac Ŧ6eëéŧEĮ;6\ūÛo×Ŋ’YēŖ?\ž¨'ŦXŋĩ?ž%[7…jbŅŨ€ĄTãI)…w?ēM÷JāOŽŧ0ĨlAjLų dë‹)…ĶÛۆ÷)6éÆ4›šīŋøĩĄãŽŸî×(ÃÆ@™%%"]sŅ9:WB1Mæ–ŪžpÅWŋžéŦĮ!â0ÅCĄ:čŪĒã4ąJJQL5Ž)ļyíma‰ãō–=ŸPŋŸJŠ÷ģ~ö4Ũ+¸ø}Ô××~/ĨÔßD -÷Üŧ ô|pĻĄc(‰ßԂŌé R(žP›/ÔãĪˆ7tZōśĸ19fŨāgĸ„vî9ĖŊg]¸ę´‰aūûfĻÜ#1}æŲē=T‡,$sAķ¨hüZ­ZMķīaRĒņ’īôę^ $nāõ9ĒöēüÛÛP˛ufŪĸŠm}GUq#Müۘķ;¨IÃīãn Č:Ú'‡ž›'‡žģÂ╏„˙ūĘo†đæ1P-(ŧMÃë¨6.Ÿkĩ€ũĄ¨ÁĪ‰ÃÆ7å-úĐģĻ†ultJėžgÃ}wÜ>?ŗ#Ė9ŋ#ėØZâĄzS(> ¸[ĮĄ)ܤ4šņßs‹O‰ŸŅ)ļĶ&§lč|Ú5SÍĩfë.m(‡˜nŧîžuQpw?ē-|ęƒæ-Ģøû@udkIļ.‘ƒĩOßĖÖîö„[īē?<ōō› ƒ{āå°Š?ä7ôhP]5ú9Ũ)EĶÛÛ”qĮ9 Mā–ŪžđŅ¯­ ļīĒĮŠÚw ˙ŖŨŠÛ”Ü‚ķÉ2¯ZļaģîÜ)cŽ y÷9Š¯jĢ[ Ę#ĻĪkoĶˆ‚‹éÆ{^ĘũųWĶ žĒOj|Sļąë†“'„;>ķą°ņ††+[~Æ~Ų™€‚0l 4ĒZŨlČÖō”ÂŽéíÎB“Øš˙åpÃÚŪ°péš0đŖëqˆø…]ŒĘîÕ´7(›ŖJ5^7¸G nŪšSRžŗ9Ô(Q×t_ƒR"×\tŽ&”Ā­&=Emqđ]õ÷ęĐņĘlũķH0߲`^xúO?Ž{Ëą†Ž  *ĻauÕčgu§]4íw†’™hqĀá˛oŦ_y`c8pđP=qm¨ĀWt€’Y¤7­xí<įüŽ”R×Fĩ§§%4áÄqŌK ~ī7Øä˙m•ĀHš2[ņÆ؝a„†ŽŖ?ūƒŋ6tü–ƒûœhP†FVĢ/Ō7eëéŧE1‘éōß~ģŗЄâŖ-/_ÔÖôöÕãĮĮ›D7…ęĐņYē @ ´†ęÆēÜ6lß%Õ¸¤7ŒÎ Õ¸´bēąMņŗ¸Á&~G*Ũ€‘4?T‡Ž?“­ũ#uĐ8tŧá˟ 7ŋķ톎 6Ų™ĄzŖŦ§yLeķÚ}ø•đéõ[Ã_ũVJęĖ‘˜”­9: @ TR —l~R÷ nʸã‡ß}nJi—îÕÜb-(¯Ątãs§hDÁI7 `nËÖ ŲšFpčxîû/~mč¸ã§ûh†F×UŖŸĶ­Ü۠㍜K'NpšØÎũ/‡š÷Ŧ 7Ũģ.ėyɗZđo´†ŖH5ŽŸˇ)ļųŗÎN)[ĒO{ĄvēBuĶ6%6įüéÆ%pãĒĮRĘ ˙› ŖáđķĄãįFę qč¸įæĄįƒ3 @0l 4ēxĶēĩF?+)áįCīšę,î{v0\pĮ}aÅú­áĀÁCUŨ)Eņ3ĩTã⋩Æŗ§MN)­č^Íéi8ūØąŌK n´‰nrjņ> ÄĄãÖlu„:îhŸüÚĐņģ~ãå~zؙ€Q`Ø(‚Žũœî”ĸéímC7P!ēĨˇ/|ôk+Öũš@ŗëĖÖŦ”ÂU÷I5.ŠÆ Ŗ+[“´Ą9H7.‡Ä 7ĩ e€ŖņũđķĄãĮFę qčø›_øxØxÃÃ{Æ2t #Ė°1P jôsBõĻfn]Ķ۝^‡"ēØ.]~ôĸ†ĐŦ*)E1Õxé֝ēWp—Nœ’jŧ¯†×øT‰Orĸ˜bēņ.ū](¸Ätãä{ NâĐq܀úĻ0‚CĮ§œū8ûß?˙ĢaŨ^?>Ö~<€_ep÷ f nÜ ãÂ8ctf“ 7¸ūė >˙O*AétÍy_¸aaŽûag†ę—č›jpøøĻē+oŅ5cؘ×o}zũVÃÆP"KîíŅxKēsįĢžžö{RK@ĒqÃHN5žõÁCOëFW܀3įüŽĄ ƒbrdg¨Í÷¤P/ķ‡×§ŗõšl‰ƒž:t<å‹Ëœ€_á‘'ļ -ŠĢŖ­5,ģëŖrėßĐ~`4Ü˙đú”˛Ž~U¨&*å2áÄqCéMMŽ’R“Tmā,žyím)ŠÆĪĨžnx]­!1Õø™ūAƒÆĐ ^M7Š‹`ܖ­˛57[ûĩŠË°10*:VöäNŒŧ6ToĻ­˜¤ÔRøĄwMuō€fÖSī~TZBħū$¨č\ÍŞ&Ĩ߸ę1ŨƒrKoßІœœbēņŨ @?:~N; x ŖĻgåˇSĘējtøÅ)EĶÛÛ”qĮ9y@3Ÿz-%Õ¸bĒq|ęONq [÷jĒ5T7dįļaûŽ°s˙Ë: &qCÎb €ū<Û @Ą6FM˙î–ŪŪŧe jtøl­N)ŧ˛ãˇœ< Å빤$Õ[ܨ{% Õ¸a$÷tÉæ'uPܐ“nŸ4ĐĨ{Ô÷ÃĪ‡Žŋ¯Đø ŖjõšĩyKâíŽ>)ũcÎųNĐlbĒqŌæĪgúÃēÁ=:XpŸŸŲ‘’jŧ9H5ŽĩÎ ÕJ)1Ũ¸ĸs\4Ž7ŪŪ”­Į´—ac`T=ōÄļđÃįŸĪ[VĢtãM!áMĮ;včŅąM$9ÕxŲ†íēWp§Œ9&uãmE÷j.Š§ _úîßë4°˜n7čä4)ÔîģRmŗÂĪ‡Ž˙Y; ą6FŨęWæ-93T“|jĄ’Rtåyg8q@ŗh R›Úŧs§ mŧÍ)ĻoŌŊšę ÕŒÜV=Ūv~EĄÁ%nĐŠ„ę ,âgŪc˛ug0t ð10ęîx}JYWŋ*[ûōĩžõ¤péÄ NĐ *!1ÕøÆUž‚[tRîŊ˜[L5^ēu§îAÄ : éÆņßhéƔŅüP:€ac`Ô8t(ŦėéÉ[vm¨Ļk­ŊŲęN)|˙Ų§;y@Ųĩ_åļaûŽ°s˙Ë:Xp_¸øwSR—ŠÆĩ6'H5†Ļ˜n‡ĨP7††ĐŗōÛ)e]5:üâ”ĸŲĶ&‡)ãŽsō€2Ģ¤.Ųü¤î\ŧæ×ž#ųēáu%}wąįĨũá–Ū>Ũƒ‰éÆ[vôį-kņˇ€z2l 4„ūŨ/„-ŊŊyËjõxĀl­N)ŧ˛ãˇœ< Ŧ:ƒTãĻ6ÖŲ)eˇ¯ŗŠŽlMJ)ŧûŅmētÛßnI)ûD¨Í“āā—6Æę5kķ–ÄĎŽ>)!hÎųNPV•”ĸ…/}÷īu¯ā¤˙ŊS—æOG@Ü°7îø @Ŗ0l 4ŒGžØ~øüķyËj•nŧ)[Īå-:ūØąa^{›“”MgļfĨŽzŧ/ė>üŠÜÍs.H)ûbj\k• ÕšŌ’ÍOĻ”Å'´ęĩfØh(Ģ\™ˇäĖPŊ ^ •”ĸ+Ī;ÉĘ&éú(Ļ/ŨēS÷ îŌ‰ÂÔļ‰yËö…ħņēƇÄMÖĪôJ5†‚‹éÆ+ÖoM)õˇ€š3l 4”û^ŸRÖUŖï ՛Ŗš´žõ¤Ąą%1'H5nj×Īž–R‡Ûöę^MÅA㖔Âeļë”@ÜĀ7ōäôPģpbØh( +{zō–Õęņ€ņĻhwJáûĪ>ŨÉĘ")qĪKûÃ-Ŋ}ēWpRÆQĨ¯ÜŖƒPqOÜȓ ĸ{Ԓac áôŦüvJYWŸtstö´Éaʸãœ< čâĩÕ¤”ÂģŨĻ{%đ'W^˜R‡bĨ×V%H5Brēq|BA§îP+††Ķŋû…°Ĩˇ7oŲ‚~ [ĢS ¯ėø-'(ēJJQL5^ēŖ_÷ n^{[˜pâ¸ŧeĪ…ħņēZŗõ‰” ÛwI5†’‰éÆ÷ŽOÚĐ#q€š1l 4¤ÕkÖæ-‰i?]5:|ŌņsÎīpâ€"‹›8Ĩ7ąk.:'ĨŦĸs5—ÜĶ%›ŸÔ=(ĄÅÛw mėÉéĖPģīKhr††ôČÛŸ>oY­Ō7…j2S.Į;v(  €Æ‡ÄĮgúĨ—€Tã†Ņš­kS cĒņÎũ/ë ”TâƞŠÎP ††ĩúÁ•yKbZGg_I)ēōŧ3œ8 ˆâæ͖”Âeļë^Á2æ˜đ‡—Ÿ—RÚĨ{5םZ(ÕĘ-nėIH7žäo5ĩ`ØhX÷?ŧ>ĨŦĢF‡_•­}y‹ZßzR¸tâ'(’˜jœô¤˜˜jŧnpÜŧs§ =­'§ÍĄúd j§3[ŗR WŦß*ÕšĀ­nL)Ģ ˙[É~S €FuāĐĄ°˛§'\qõÕyĘâŖF+Ų8ĘÃī Õ4ĄOä-|˙Ų§ģŲIŧ†’jܤbĒņœķ;R_7ÔūŊ˜Ûƒ‡ÂŌ­;uš@üÎņúūÁ0ĩmbž˛˜nŧĀßm`4|ūŊį…˙š÷'1ūãīž­ @]6ZĪĘoį6ŽēBmž<_†gO›Ļl~RĸP­)×=Ņ–ũ6Z–€Tã†ŅSW=Ūv~EĄIč>‹ō GqØ8~ךW‘4û?ÎĐ€’ø -Y˙î–ŪŪŧe jtøl­N)ŧ˛ãˇœ< *Š…ˇũíŨ+¸)ãŽKM5^ {5םR$ÕšOÜčķL˙`Ū˛ģ8††ˇzÍÚŧ%ņËķŽ~qJQâÍZ€‘Ôš­kS 7lßåi.%0ÖŲ)ŠÆËŗõ”îÕTWļ&Ĩ~}í÷¤CúĘÃO¤”Åaãņē@ ÃÆ@Ã{ä‰má‡Ī?ŸˇŦVI›˛õ\Ūĸxŗv^{›“4˛ÅŠ…K6?Š{SgO›œRZŅŊšKę鞗ö‡Ĩ;úušĐ/îÚø“SËŅüÛ@s3l ÂęWæ-93[5:|%ĨčĘķÎpâ€F¯—>R¸bũVŠÆ%SÄTãŨĢŠŽ˜j|÷ŖÛtšXâƟøDƒVŨ /ÃÆ@!Ü˙đú”˛Ž~Uļöå-j}ëIáŌ‰œ< URŠ<–nŨŠ{¯URãuņŨĢŠņ!1eTĒ17ū$¤' š6 áĀĄCaeOOŪ˛Z%uė ՁãÜŪöéNĐh:ŗ5+ĨpÕã}a÷áWt°āŽŸ=-Ĩlņđõ1ĩ‡ˇ[R o}pŖîCéÆq#PNņ;Ķŗt€< …ŅŗōÛ)e]5:|%Ĩ(&EMwœ“4’¤$UŠÆåS§ļMĖ[ļ/õuÃ늩ÆIIŅĪô†uƒ{tJ7ŽFęŗÍË°1Pũģ_[z{ķ–Õę¯ŲڜRxeĮo9y@ŖčĘ֙)…÷Žß&Õ¸¤7ŒäTãeļëđš¸(!Ũ8>á S÷8R†BYŊfmŪ’xãŽĢF‡OJü˜s~‡4ŠJJŅž—ö‡ÅÛwé^Á]uÚĔTãį‚ĖZkÍÖM)…R+nJL7ŽčGĘ°1P(<ą-üđųįķ–uÕčđĢBõ&k.Į;6Ėkosō€Ņ¯&ĨŪũč6Ũ+ųī›™RV Rk­’ZxãĒĮtø%1Ũ8n ĘIē1Gė7ĩ(šÕŽ 7,\§$~q~VļžĒÁácšĶĸŧE—ŧķô°tGŋ“Œ–ņá(R]Ī_Ü;áÄqyËâ†ÛnŨĢŠÖl]›R¸aûŽ°s˙Ë:ü’˜n7}ęƒæ-íūģp$ž7/P|†Âš˙áõy‡ŖXĐUƒÃw‡ę ú–Ģĩΐ˜jŧĻˇOĒ1đ†bēq‚ŠÎđF …ÔŗōÛ)e jtøJJŅėi“Ã)cŽqō€‘¯…ZR —mØŽ{¯Cįœß1bמԞ§ ‹{J÷€7Ķ~ôbŪ˛IĄvߛPR†BęßũBØŌۛˇŦĢF‡Մ§Üæ;ÅÉF’Tã&¯C?vlŪ˛xÍģI÷jĒ3$>z|Õã}a÷áWt8"ˇ˙Í÷RĘ*Ą6O… ¤ …ĩzÍÚŧ%1ĨŖĢF‡_œRtņ´ÉN0’âĩKRĒņW~B÷ NĒqCIęiL5^ēu§îG,nŠ†rŠŸ¤đē …õČÛŸ>oYWŋ*[Īå-špâ¸0¯ŊÍÉFBkļŽM)Ü°}WxâÅŊ:Xp /8+%Õxuj\k]AĒ10‚–m؞R‡Ĩđ+6 mõƒ+ķ–Ä›{gÕčđIéƗŧķt' •ÔÂ%›ŸÔŊ‚›2î¸đ{3“R%[6Č{qĪKûÃ-Ŋ}ēäĶˇėčĪ[&Ũ€×eØ(´û^ŸRVĢ/Íģŗĩ/oŅÔļ‰aÆIBB€ēŠ›,“SwîY nūŦŗSʖgk@÷jĒ+[“R ī~t›îÉnûÛ-)e7…ę“ā_1l ځC‡Âʞžŧeņ†{-Ļ}ã3…WĨ~tFģ“ÔSŌ“X<$Õ¸bĒņėi“SJ+ēWsI=ŠÆKķ§’ŧ&nŠˆü[@-6 ¯gåˇSĘj•n\I)Š7}OsŒ“ÔCgļfĨŽzŧOĒq Ü<į‚”˛/ŠÆĩV ‰ŠÆKžĶĢ{ĀQKÜ@ƒZu€_dØ(ŧūŨ/„-ŊšoÂuÕčđŲڜR8īÜ)NP•”ĸ˜jŧtëNŨ+¸K'NSÛ&æ-ÛĶ°y]ņ‰JIŸé ÷=;¨ƒĀQ‹ˆÖôöØg ĘË°1P Ģ×ŦÍ[“…ējtø¤˛§=Ōā×é G‘jŧûđ+:Xp×Īž–z]ģW÷j*ˇ¤.Û°]÷€šYôØSCŠrēvø3 1l ”Â#Ol ?|ūųŧe]5:üĒl=—ˇh‰ãÂŧö6'¨Ĩî”ĸ=/í—j\RÆQĨ¯ÜŖƒ@ÍčDqCQ‚Šîđ*ÃÆ@iŦ~peŪ’˜öuVŸtcö’wžîÄĩŌĒOqÉíîGˇI5.Oŧ÷ŧ”˛Jj\kņ;ŠÆ@ÈŠŌãw§ē@dØ(û^ŸRļ F‡īÕ4¨\bâԌ“Æ;y@-TRŠ†Rwôë^ÁÅ'į´žõ¤ŧeņ)=RkĢ5[×ĻnØžKĒ1PŌ8Z†Ō8pčPXŲĶ“ˇ,ŪŦÅ´oLZ•RøŅíNp´âFĘäTcŠīš‹ÎI)Ģč\Í%÷tÉæ'u¨›[zû†6åĶģtÃÆ@ŠôŦüvJY­Ō+)Eŗ§M§Œ9ÆÉROŊøŅ‹RK ĻO8q\Ū˛˜jÜ­{5ÕŽ"Õxįū—u¨ĢÄ FĀ°1P*ũģ_[z{ķ–uÕčđŲڜR8īÜ)N*n lI)ŧũož§{7¯ūáåįĨ”vé^Íu§8xHĒ10"âŖ„tãIūÍĀ°1P:Ģ×ŦÍ[RË/Ė§]˙|Ū˛Ž~U¨>Š6—ø¸ÛøØ[€œ’S—mØŽ{Sįœß‘RZŅŊšKęiL5^ēu§î#æžg‡6å4ÉŋĨō”y6Jiõƒ+ķ–ÄôĄŗjtø¤tãKŪyēäŅš­›R ˇėč—j\RFg8ŠTãŨ‡_ŅA`D%n8ŠœÆë@s2l ”ŌÃ˙.ĨlAߝ­}y‹ĻļM 3Nō}=pÄ*Š…ˇũíŨ+¸)ãŽKM5^ {5םR$Õ-qÃQBēq‹Cš×”ŠS5šœac ”^Ø÷“°˛§'oŲĩĄ6é{ŗĩ*ĨđŖ3ڝ<āH´_ÃäļaûŽ°s˙Ë:Xpķg’jŧĨŦVé•”ĸŲĶ&‡SÆãäušæˆ–l~R÷ .ĻĮëĮ‘|ŨP۞îyiXēŖ_÷€QĶã¤œâåÅēPx{ĩČË°1PZ}ũáŋߗˇŦĢF‡ČÖæ”ÂyįNqō€_§3$Ļ¯éí“j\1Õ8ÁōákUj§+$Ļßũč6ŨF]â¤ø¤U÷ -éégm.Ą™6JíŪ{ŋ•ˇ$Ū$ėĒŅáģSŠ.NK§šG%ĨčĀÁCaŅcOé^ÁÍ8i|JĒņž Õ¸ÖƇÄtĪŊ(ÕhqRBēqōgŠíß÷h41ÃÆ@Š=ōÄļđ“}ûō–uÕčđŨŲz.oŅ„Į…yímNđĢtfkVJáĒĮûÂîïč`Á}ę˛)eq(v@÷jjAļZR o˙›īéĐ0¤4­ÜOë>ũˇĖ˛@33l ”Ū=ßŧ+oIŧqVߝRtÉ;Owâ€_Ĩ’RS—nŨŠ{wéÄ ajÛÄŧeqîbŨĢŠ˜jŧ Ĩđ™ūÁ°np #Ļ¯Xŋ5Ĩ´[÷ moŪ‚Ķ'˙ŽŽA3l ”ŪÃ˙.ĨlAŸtC7Ū<ž2î8'øE]AĒqSģ~ö´ÔëŌŊēWSÉŠÆË6l×= áÄ IqcRNņ3I§îÖSy Ļ´ˇë41ÃÆ@éŊ°ī'aeOOŪ˛ø(Āņ58|ŧĄģ<ĨpūŦŗ<āURŠöŧ´?ÜŌÛ§{wÕiSRŸ Rk­5[7ĨJ5Uܐ7&ÔgBîaãˇzj8~ėXƒ&eØh ßYˇ>ĨlTĶ§ˇŋ#œ2æ'ˆē˛5)ĨđîGˇé^ ĖßĖ”˛Jj\k•ÔÂW=Ļ{@Òn ĐtžJ):ķˇÛtš”ac )ôõ„ü~îtŽŽ~@ۜˇčøcĮ†qš“D•”ĸ˜jŧtGŋîÜŧöļ0áÄqyËbĒqˇîÕTk¨> )ˇ Ûw…û_ÖA aÅt㯯ũ^JŠ}€bČÖžŧEŗ.˜ŠsФ MãŪ{ŋ•ˇ$Ļ†uÕčđŨ)EWĖėpâ€JHL5^ō^Ũ+k.:'õuCíߋI–l~R÷€†7(ōJ9j÷*#kSŪ‚ß}×ģt š”ac i<ōÄļđ“}š7euÕčđŨĄš*•KLŽē괉N4¯ņŲZRøL˙`¸īŲA,¸Ķ&§¤?¤×ZgHL5^ĶÛ'Õ(ŒģŨ–RVŅ9€Bڔˇām§žÚN9Yį  6šĘ=ßŧ+oÉŦlUŖÃw§Í=ī 'šW4nI)\ļaģîÜ)cŽ y÷9Š¯jĢ’RtāāĄ°čą§t(ŒÄtãZ>!€‘ŗ)ĨčŊīîÔ9hB†ĻōđÆŋK)ĢÕMÚÅ)ESÛ&†)ãŽsō ųUĒņēÁ=:XpķΝŽ?vlŪ˛Í!ņ&¯Ģ3T7#įļęņž°ûđ+:Ę­nL)[<üŲ€âˆģäs?ĨûĸK.Ö9hB†ĻōžŸ„•==yËâcRkņEųŪl-O)œ?ël'šO%H5nZ1ÕxÎųŠ¯j˙^Ė-Ļ/ŨēS÷€Â‰–âÆĨœâgÉúÅŗ)oÁÛN=5œ7uŠÎA“1l 4īŦ[ŸR6ĒéÆĶÛß1tŖh­ŲúDJá†íģ¤—Ā ÎJI5^¤×ZWj 4ĄÄKņ;TéÆÅ˛*ĨčōË/Ķ9h2†ĻĶ×?ūņû}yËējtøøŠÍy‹â æqš“ÍŖ’Z¸dķ“ēWpSÆ~ofRĒąDÉy/îyi¸ĨˇO÷€Â’n Đ4â°ņžŧEīšė˛prË ēMÄ°1ДîŊ÷[yK&…Ú w§]‘vŖ(žÖl]›RSwîY nūŦŗSʖgk@÷jĒkøû€Üî~t›î…wãĒĮRĘ – 8ēSŠūĶ‡¯Ō9h"†ĻôČÛÂOöåŪ˜ÕUÃiĪå-špâ¸pÕi<(ŋîÔBŠÆÅSgO›œRZŅŊšKęiL5^ēŖ_÷€Â‹˜âFĻœZü›P8Ũ)EW\}ĩtch"†ĻuĪ7īĘ[2+[gæĩšįáÄ@šu_{äļbũVŠÆ%đéKĻ§”Ũ¤×Z%$Ļ/ųN¯îĨ‘¸‘)>ĄĄU÷ ãŠl=R(Ũš‡ac i=ŧņīRĘÔčđ‹SŠĻļMJšJĢ’RtāāĄ°tëNŨ+¸K'NĶÛÛō–í $km|ęõ˙3ũƒážgu(ÄtãäĪ4Œš¤9éÆĐ< Më…}? +{zō–ÅTŽņ58üŪl-O)œ?ël'ĘŠ3$Ļ¯zŧ/ė>üŠÜõŗ§Ĩ”-žÆ¤vâ qKJᲠÛu(/}÷ī‡66åŋG=K÷ Ŗ;Tƒ rû§?Š{Đ Mí;ëÖ§”jēņôöw„SÆãä@ų$]#H5.‡˜jŸf“ĶžÔ× ¯ë¨R× îŅA tâ†Ļ¸ąi¤>Û0jŌæXfÎ įMĸ{Pr†ĻÖ×?ūņûšŋ(īĒŅáŸĘÖæŧEĮ;6|čŒĶœ<(—xqfJá××~OĒq |âŊįĨ”U‚TãZ‹7T¤üqcSBēq|bC§îFün,)ŨøKˇ~)?vŦB‰6šŪŊ÷~+oɤPģãî”ĸ+fv8qP.•”ĸ=/íKwôë^ÁÍko ­o=)oŲsAbd­ĩfëڔ ÛwI5Jí(Ō+ēP1Ø é;ĮZZÂįŪ ƒPb†Ļ÷ČÛÂOöåŪ˜ÕUŖÃw‡ę â\&œ8.\uÚD'Ę!^_LJ)ŧûŅmēW×\tNJYEįj.š§K6?Š{@éÅtã¸Ņ)§˜næä@õtŠÆ3ZL5Ž{ē’âžqŋîeÕ&‘jüúûč 0#%>øT yŪ@sÄ{ØcŠÅ_XŗÆĀ1´ÃÆįxŧlILäčËôņõ¤‹ŗۗ8qP=ĩ˜jüÍ]?ĶŊŠ“jÜR’öâR™.>ø”n¯}¤TĮé0ə˜8pŧjÅ2„6`ØāĪŊx(œ+ũPV_Ļ¯ëDŲĸ뎝ūúcķœ<¨ŽŽb­M)Ü{øx8vöŦ¸ŋ˙ËŋHI5Ž¯,ܯ{YÅũü‚”ÂyęR/1Ũ8K7¨Ž]ÅÚ4™Ŧßđ-ĮĐ œgĮcÛʖÄ×­veúøzJŅ—nģɉ€ę¨Ĩn|I÷*náėĢÃgnųDSnČÛĶSož [^Ö=`ƋéÆĘ˙>ėô7  râ>îčdŽûz?§“Pa†ÎķĖžįS/Ŧr¨§-îž7ū…5Đō–ŠÆ3Úũ+oN)‹ŠÆ#ē—ULÖLJ5ūūOéĀ„ ĪH){ ä o`ꝍˇ„Mæ ÷=ØžwnBE68ĪÉą3ቝ;˖õ†<¯˙ /‘KKüÂhŽ)Eoŋû^øĮŸüR÷*nÅG椤Įø5ŨËjNjOG~÷†Tc€sÄĄâQ üm¨–#Ą1p<)_Xŗ&ŦčëaVG‡ŽBÅ6ø#žŪŊ§lIgŽ‹Ē õ”ĸå‹n s¯ŧÂÉ€ÖÕSŦ•)…ģ^ ¯ŋ˙VÜß­^‘RÔGt/Ģū‰}|i›ūãēpžÍƒ/Ĩ”Å7=té@Ĩė*փ“=ČĒÕĢÃwŋŊ>tĪŊ^GĄB üCÃ#áĩ—‡Ę–õgúøũÅ:ZļhÖUáķ˙¨“­Ģ–RSˇ<Ļ{÷ŲyׅÅŨķʖÅTãē—ÕœÔũû+ÃŖa÷č)8OL7ūÁžƒ)ĨūÆTOÜËmŸėAūüĻ%á{˙úh¸mņB…Š0l p—-YPŦŪŒgĨ}õÎeN´Ļ¸Wj<ƒũÍgnIŨžÖŊŦ’Sˇî=Ŧ{ŒŠH•twhŧų€jé Ž¯éė ›ũįp˙WքYē -ΰ1Ā<÷âĄpflŦlYŽtãzh$X•rŨĩŗĮĶ˛€–“ô@áŠ7ĪJ5nR[FWąI)<đę°Tc€‹ˆFŤÔt ’â|ĖŅZûˇëÂĀ–ī†%Ũ]ē -Ė°1ĀEėxl[Ų’˜T–ëę'éKå{>ĩ؉€ÖŌoB)íû?=$Õ¸ |ã‹w¤”Å›õRķĒĨnxö€î\BbēqŧŸÚŖ{•szb?—eāø†ųķÃÖmߓr -Ė°1ĀE<ŗīų”˛ZĻ¯§-_ÔΞÚÉ€Ö‘´GO5~uX÷*n]ąG‹oĄ)éDꞐ ę*ÖڔÂŊ‡‡cgßŅA€KˆH ė9Ô´k%Ļ]ցã(Ļ?ųī?ĢV,Ķ]h1†.âäؙđÄΝeËz‹5'ÃĮk{JaßōEN´†˜N›œjLõ}õΤ›â5ËncjáæÁ—tārŲ>>ūĀTI1Ũ¸O÷*é÷Į?ÎuĀk:;Ãú ß ?ÚąÕĐ1´ÃƗđôî=eK:Cž›ãõ”ĸ;oųŗ0÷Ę+œ<˜^ņ!ÄZJá+ÃŖRÛ@˙-ŸHI5>¤įÖSŦģS ŸüųTc€’˜Ēé@eŁãĖˇ=įAo˜?ßĐ1´ÃƗ04<^{y¨lYĻß^71ëĒŽđųÔÉ€é÷)…[÷ÖŊŠ‹€~åŽeŠ?7äUK)zûŨ÷Âw~vD÷JŠL%¤Į7Aôé@ĨÅ}ŨĻÜ=wč¸¯÷saVG‡NÃ40l p/[oŽ÷fúø¤WŊ&žĒČ#Ļ' ÆTãŨŖ§t°âÖŨēpüAВCãĄSōé)ÖʔÂ]/ …×ß˙@l~úį)eĩ‰k(Ē+Ū˙ÚT8ß÷`Ø˙“§Âú‡ž.íšĖ°1ĀexîÅCáĖØXĘTõb•ūđøĒŪĪÎģÎÉ€éQ RgŦ˜jÜûé%Š?7ä˙ˇXZL5Ūrđ˜î$úˇ˙€Ē¤ā á úęÅē9$Ėē\ŽUĢW§|īŧFįa 6¸L;ÛVļ$&'ueúø¤tã{>ĩ؉€æ‹û€R ŧ:,Õ¸ H5n}!1Õx`Ī!ŠÆ“”øU6–n P}GBã^ųāTĐīŸzō‡áG;ļ†‡ī]žx×Ę°¤ģËY€Œ>Ŧ—į™}ĪŋŽĄ¤Zh|š9Yõb=Rļhųĸî°đŲáØŲwœ@hžZjá†âúj[8ûęđåģnM)íĶŊÖøˇxęÍŗaãáãē0IņĒ~÷FčúĶ”)‹o†čŌūÚÁébõLėķžĶŒŧaūüņuŽßūú×aô7ŋ Į_;Ūzë­0úúÉpōŋŪøƒ˙ghxÄŲ‚KøĐ´`ĘÄWBtM\@MVŊXkĩ´­üCđÅIÄsôˆ6@ĶÜĒî¯˙å4RŌö`Ø8ˇØĪmÚPI9īŠN—ÍÅēĪŠä2m 4úâ}ÖBpmh¤ĮáãA­Šķa-hēxÁŗ+ÃqęĄņ…j§–@ĶÍ †F)o0Ķ~˙ĶSŦ•Ú0#Ԃ„cūĐéиįzî}×8„ÜuÎãŠ÷ô?Š]îˇyáŒ1"ØIENDŽB`‚quark-engine-23.4.1/docs/source/quark.core.axmlreader.rst000066400000000000000000000002721442215066700233560ustar00rootroot00000000000000quark.core.axmlreader package ============================= Module contents --------------- .. automodule:: quark.core.axmlreader :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.core.interface.rst000066400000000000000000000006071442215066700231740ustar00rootroot00000000000000quark.core.interface package ============================ Submodules ---------- quark.core.interface.baseapkinfo module --------------------------------------- .. automodule:: quark.core.interface.baseapkinfo :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.core.interface :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.core.rst000066400000000000000000000020161442215066700212310ustar00rootroot00000000000000quark.core package ================== Subpackages ----------- .. toctree:: :maxdepth: 4 quark.core.axmlreader quark.core.interface quark.core.struct Submodules ---------- quark.core.analysis module -------------------------- .. automodule:: quark.core.analysis :members: :undoc-members: :show-inheritance: quark.core.apkinfo module ------------------------- .. automodule:: quark.core.apkinfo :members: :undoc-members: :show-inheritance: quark.core.parallelquark module ------------------------------- .. automodule:: quark.core.parallelquark :members: :undoc-members: :show-inheritance: quark.core.quark module ----------------------- .. automodule:: quark.core.quark :members: :undoc-members: :show-inheritance: quark.core.rzapkinfo module --------------------------- .. automodule:: quark.core.rzapkinfo :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.core :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.core.struct.rst000066400000000000000000000021071442215066700225550ustar00rootroot00000000000000quark.core.struct package ========================= Submodules ---------- quark.core.struct.bytecodeobject module --------------------------------------- .. automodule:: quark.core.struct.bytecodeobject :members: :undoc-members: :show-inheritance: quark.core.struct.methodobject module ------------------------------------- .. automodule:: quark.core.struct.methodobject :members: :undoc-members: :show-inheritance: quark.core.struct.registerobject module --------------------------------------- .. automodule:: quark.core.struct.registerobject :members: :undoc-members: :show-inheritance: quark.core.struct.ruleobject module ----------------------------------- .. automodule:: quark.core.struct.ruleobject :members: :undoc-members: :show-inheritance: quark.core.struct.tableobject module ------------------------------------ .. automodule:: quark.core.struct.tableobject :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.core.struct :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.evaluator.rst000066400000000000000000000005321442215066700223040ustar00rootroot00000000000000quark.evaluator package ======================= Submodules ---------- quark.evaluator.pyeval module ----------------------------- .. automodule:: quark.evaluator.pyeval :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.evaluator :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.forensic.rst000066400000000000000000000010031442215066700221040ustar00rootroot00000000000000quark.forensic package ====================== Submodules ---------- quark.forensic.forensic module ------------------------------ .. automodule:: quark.forensic.forensic :members: :undoc-members: :show-inheritance: quark.forensic.vt\_analysis module ---------------------------------- .. automodule:: quark.forensic.vt_analysis :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.forensic :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.rst000066400000000000000000000023231442215066700203030ustar00rootroot00000000000000quark package ============= Subpackages ----------- .. toctree:: :maxdepth: 4 quark.core quark.evaluator quark.forensic quark.script quark.utils quark.webreport Submodules ---------- quark.cli module ---------------- .. automodule:: quark.cli :members: :undoc-members: :show-inheritance: quark.config module ------------------- .. automodule:: quark.config :members: :undoc-members: :show-inheritance: quark.freshquark module ----------------------- .. automodule:: quark.freshquark :members: :undoc-members: :show-inheritance: quark.logo module ----------------- .. automodule:: quark.logo :members: :undoc-members: :show-inheritance: quark.radiocontrast module -------------------------- .. automodule:: quark.radiocontrast :members: :undoc-members: :show-inheritance: quark.report module ------------------- .. automodule:: quark.report :members: :undoc-members: :show-inheritance: quark.rulegeneration module --------------------------- .. automodule:: quark.rulegeneration :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.script.frida.rst000066400000000000000000000002611442215066700226710ustar00rootroot00000000000000quark.script.frida package ========================== Module contents --------------- .. automodule:: quark.script.frida :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.script.rst000066400000000000000000000013001442215066700216000ustar00rootroot00000000000000quark.script package ==================== Subpackages ----------- .. toctree:: :maxdepth: 4 quark.script.frida Submodules ---------- quark.script.ciphey module -------------------------- .. automodule:: quark.script.ciphey :members: :undoc-members: :show-inheritance: quark.script.objection module ----------------------------- .. automodule:: quark.script.objection :members: :undoc-members: :show-inheritance: quark.script.utils module ------------------------- .. automodule:: quark.script.utils :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.script :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.utils.rst000066400000000000000000000022231442215066700214410ustar00rootroot00000000000000quark.utils package =================== Submodules ---------- quark.utils.colors module ------------------------- .. automodule:: quark.utils.colors :members: :undoc-members: :show-inheritance: quark.utils.graph module ------------------------ .. automodule:: quark.utils.graph :members: :undoc-members: :show-inheritance: quark.utils.output module ------------------------- .. automodule:: quark.utils.output :members: :undoc-members: :show-inheritance: quark.utils.pprint module ------------------------- .. automodule:: quark.utils.pprint :members: :undoc-members: :show-inheritance: quark.utils.regex module ------------------------ .. automodule:: quark.utils.regex :members: :undoc-members: :show-inheritance: quark.utils.tools module ------------------------ .. automodule:: quark.utils.tools :members: :undoc-members: :show-inheritance: quark.utils.weight module ------------------------- .. automodule:: quark.utils.weight :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.utils :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark.webreport.rst000066400000000000000000000005401442215066700223120ustar00rootroot00000000000000quark.webreport package ======================= Submodules ---------- quark.webreport.generate module ------------------------------- .. automodule:: quark.webreport.generate :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: quark.webreport :members: :undoc-members: :show-inheritance: quark-engine-23.4.1/docs/source/quark_inside_index.rst000066400000000000000000000002611442215066700230240ustar00rootroot00000000000000Quark-Engine Inside =================== This chapter explains how Quark work inside. .. toctree:: quark_inside_workflow quark_inside_overview quark_inside_objects quark-engine-23.4.1/docs/source/quark_inside_objects.rst000066400000000000000000000206271442215066700233560ustar00rootroot00000000000000================================= Quark-Engine Objects Introduction ================================= Dalvik Bytecode Loader(quark.Evaluator.pyeval) ============================================== .. image:: https://i.imgur.com/DvVTUok.png PyEval, inspired by the ``ceval.c`` design principle in CPython's Interpreter. It takes python bytecode instructions into an infinite loop and interacts with the CPU using C language. Thus, we apply this principle to our Dalvik Bytecode Loader, takes Dalvik's Bytecode instructions, and apply our custom instructions events to implement tracking whether two function calls operating the same variable in the fifth crime stage. Of course, we haven't implemented all the bytecode instructions, and we haven't considered the conditional jump now. .. image:: https://i.imgur.com/WNA6ws7.png Take Android's bytecode instruction ``invoke-direct`` as an example. When an instruction ``invoke-direct`` is passed to our Dalvik bytecode loader, it will enter the PyEval main switch, execute the corresponding ``INVOKE_DIRECT`` function, and call ``self._invoke()``, here another ``_invoke`` is written for reuse, because there are many instructions related to ``invoke`` family, such as ``invoke-direct``, ``invoke-virtual``, but the invoke family is the same for our program implementation. .. image:: https://i.imgur.com/hcU6AX0.png XRule(quark.Objects.XRule) ========================== XRule as an object in the quark-engine responsible for the five-stage inspection, each APK will initialize an XRule object respectively. .. image:: https://i.imgur.com/8Z0ldvq.png Explanation of each function ---------------------------- * **run**: - This function responsible for starting the five-stage inspection. * **show_summary_report**: - Show the summary report. * **show_detail_report**: - Show detailed report. * **find_previous_method**: - Track the previous function of a specific function. * **find_intersection**: - Find if there is a function of intersection in a given two functions. * **check_sequence**: - Check if the two function is in order or not. * **check_parameter**: - Check if the two functions operate on the same variable or not. Five-stage inspection --------------------- Each function in this XRul object is used to correspond to the five-stage inspection, which will be described in order according to the five-stage inspection. Level 1 ^^^^^^^ Check whether all permission requirements match the given rules. Level 2 ^^^^^^^ Check whether all native API functions match the given rules (as long as one of them is met). Level 3 ^^^^^^^ Check if the native API functions all match to the given rules (both appear). Level 4 ^^^^^^^ Check if the native API functions all match to the given rules (both appear in the order). Level 5 ^^^^^^^ Check whether the native API functions all match to the given rules (both appear in the order, and operate on the same variable). Apkinfo(quark.Objects.Apkinfo) ============================== Apkinfo is an object in Quark-Engine used to store APK information which is based on ``androguard`` module. .. image:: https://i.imgur.com/FlNVZgU.png Explanation of each function ---------------------------- * **permissions**: - Get all permissions required by the APK. * **find_method**: - Query function name in APK. * **upperfunc**: - Query the upper-level function call for a given function name in the APK. * **get_method_bytecode**: - Returns the Android bytecode corresponding to the given function name. BytecodeObject(quark.Objects.bytecodeObject) ============================================ Bytecodeobject is an object in Quark-Engine that stores information about a single bytecode command. .. image:: https://i.imgur.com/ZIc3A4W.png After bytecode generated by ``androguard``, it will look like below. ============== ========== ================================================ mnemonic registers parameter ============== ========== ================================================ invoke-virtual v3 Lcom/google/progress/APNOperator;->deleteAPN()Z ============== ========== ================================================ **mnemonic**: mnemonic is a human-readable instruction form compared to the machine code. **registers**: registers used by each line of instructions in the smali bytecode instruction. They usually express in the form of "v3", "v4". **parameter**: is the function or parameter used in the smali bytecode instruction. RuleObject(quark.Objects.ruleobject) ==================================== The ruleobject in Quark-Engine will read a ``JSON`` format rule from a given JSON file, for example, `sendLocation_SMS `_. .. image:: https://i.imgur.com/U0Yi0LJ.png Explanation of each function ---------------------------- * **get_score**: - Returns the weight score based on the five stages of malicious behavior. TableObject(quark.Objects.tableobject) ====================================== The tableobject is used to track the usage of variables in the register. We want to know whether the same variable is used by the two APIs we have defined in our rule. .. image:: https://i.imgur.com/NZAOX6n.png In the output of the bytecode instruction generated by ``androguard``, it is difficult to use a single register to track the usage of the same parameter being APIs call since the register is often reused by the Dalvik machine. Therefore, we creat the TableObject to store each RegisterObject in each row. Tableobject is composed of multiple registerobjects as below: [[registerobject,registerobject,registerobject],[registerobject,registerobject],[registerobject],[],[]] Take this bytecode instruction as an example: .. code-block:: invoke-virtual v2 Landroid/app/PendingIntent;->send()V We can know what the v2 register stores, which is used by the send function. .. code-block:: const-string v2 'gps' However, the "v2" register may be overwritten by other values ​​in the future. As above instruction, the content in v2 becomes "gps" after executing ``const-string v2 'gps'``. Therefore, the method we want to track must be reversed. We use the function call name as the tracker, and record the contents of the current register in the table. Once we encounter a function call, we will check the parameters used by it, such as the above command invoke-virtual, then find out the current value of the v2 register, together with the function recorded in the table, assuming v2 finds the value "hello", the function name and parameter, "hello", will be recorded in called_by_func column. You can take a look to this `Bytecode example `_. With this table record, we can track all parameter content by each function call. Explanation of each function ---------------------------- * **insert**: - Insert RegisterObject into the nested list in the hashtable. * **get_obj_list**: - Return the list which contains the RegisterObject. * **get_table**: - Get the entire hash table. * **pop**: - Override the built-in pop function, to get the top element, which is RegisterObject on the stack while not delete it. RegisterObject(quark.Objects.registerobject) ============================================ RegisterObject is used to record the state of each register. Each initialized registerobject will have register_name, value, called_by_func in a single instance. .. image:: https://i.imgur.com/k5nHprC.png ============== ========== ================================================= register_name value called_by_func ============== ========== ================================================= "v3" "GPS" Lcom/google/progress/APNOperator;->deleteAPN()Z ============== ========== ================================================= **register_name**: register name, such as "v3", "v4". **value**: the value stored in the register. **called_by_func**: what functions are called with this register as a parameter. Explanation of each function ---------------------------- * **hash_index**: - Get the index number from given VarabileObject, given "v34" will return 34. quark-engine-23.4.1/docs/source/quark_inside_overview.rst000066400000000000000000000026531442215066700235720ustar00rootroot00000000000000============================= Quark-Engine Project Overview ============================= Quark-Engine Map ================ .. image:: https://i.imgur.com/FEZh3SB.png The entire Quark-Engine project can be composed of four major parts, namely * Five-stage rule * Dalvik Bytecode Loader * Scoring System * Self-define objects data structure Quark module architecture diagram ================================= .. image:: https://i.imgur.com/8B2oV7c.png The project is divided into three main folders. Objects ------- .. image:: https://i.imgur.com/sw5q0Qn.png The Objects directory is used to store all the main self define objects, including APK information object, Bytecode object, rule object, variable tracking table object, variable object, and five-stage rule object. Evaluator --------- .. image:: https://i.imgur.com/yinL9P3.png The Evaluator directory is used to store the Dalvik Bytecode Loader. The name comes from the CPython virtual machine used to execute the python bytecode. The Bytecode Loader itself is a huge switch. When the corresponding Bytecode instruction is given, our customized function event will be executed. However, the bytecode instruction does not interact with the CPU, so it is faster than executing Android DEX files dynamically. utils ----- .. image:: https://i.imgur.com/O6w93vs.png The utils directory is used to store repetitive tool code, print output control, and weighted score calculations. quark-engine-23.4.1/docs/source/quark_inside_workflow.rst000066400000000000000000000126301442215066700235720ustar00rootroot00000000000000===================== Quark-Engine Workflow ===================== .. image:: https://i.imgur.com/xN4js5P.png Quark-Engine Step 1(Command Line) ================================= ``quark.cli`` is the entry point of the program, and it will initialize the ``XRule`` object and the ``RuleObject`` object according to the given APK file and JSON rules, and create ``quark.utils.weight`` object at the end to calculate the weighted score, finally, display the report according to ``-s`` or ``-d``. No matter whether you choose the detail report or the summary report, a full analysis will be run. The difference is that the report display is different. .. image:: https://i.imgur.com/QZOMJSY.png Quark-Engine through the command interface to execute malware analysis like below: Summary Report:: $ quark -a malware.apk -s Detail Report:: $ quark -a malware.apk -d The Quark-Engine will start from the ``quark.cli`` module, which is our first step in the above image.:: -a specifies an apk file -r will specify a rule directory -s for summary report -d for detail report Quark-Engine Step 2 (APK Information Extract) ============================================= In step 2, we will extract the information we want from the given APK file, such as the permission request list, what native APIs are called, and with the help of androguard, we can find the cross-reference method from the given function name, and also get the Dalvik bytecode instruction. Quark-Engine Step 3 (Load JSON Rule) ==================================== In step 3, we will traverse each JSON file from the rules folder given by ``-r`` in the command-line interface, and each JSON file will be considered a five-stage rule of malicious behavior. Quark-Engine Step 4 (Level 1-5 Check) ===================================== In step 4, We will follow our custom five-stage crime rules, which are as follows: 1. Permission requested. 2. Native API call. 3. Certain combination of native API. 4. Calling sequence of native API. 5. APIs that handle the same register. Detailed implementation principle, please refer to the ``quark.Objects.xrule``. Quark-Engine Step 5 (Weighted Score Calculation) ================================================ In step 5, We will calculate the weighted score of each five-stage crime rule based on the stages we found by each rule, and sum up each score. Further, we will have a set of formulas to evaluate which risk range this weighted score is, such as ``low risk``, ``medium risk``, and ``high risk``. First of all, in each of the five-stage crime rules, there is a field called score. This score is based on the severity of the crime. Take this rule for example: .. code-block:: python :linenos: { "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage" } ], "score": 4 } As you can see, this rule has a field called ``score``, which is ``4``. Then, after the ``RuleObject`` initialize this rule, you can get this score by using ``RuleObject.yscore``. After that, while the five-stage analysis check is completed, we can know which crime stages have been reached. We will use ``get_score`` to get the weighted score of this five-stage crime rule. .. code-block:: python :linenos: def get_score(self, confidence): """ According to the state of the five stages, we calculate the weighted score based on exponential growth. For example, we captured the third stage in five stages, then the weighted score would be (2^3-1) / 2^4. 2^(confidence - 1) :param confidence: :return: floating point """ if confidence == 0: return 0 return (2 ** (confidence - 1) * self._score) / 2 ** 4 So assuming this rule, we captured the ``fourth stage``, that is, we can confirm that the two native APIs appear in order. Then the calculation of this score is (2 ** (``4`` - 1) * self._score) / 2 ** 4, which is ``2``. As for our risk range is defined in function ``calculate`` of ``qaurk.utils.weight``. There are five level threshold, the range are defined as below: .. code-block:: python :linenos: # Level 1 threshold level_one_threshold = self.score_sum / 2 ** 4 # Level 2 threshold level_two_threshold = self.score_sum / 2 ** 3 # Level 3 threshold level_three_threshold = self.score_sum / 2 ** 2 # Level 4 threshold level_four_threshold = self.score_sum / 2 ** 1 # Level 5 threshold level_five_threshold = self.score_sum / 2 ** 0 If the final total risk score falls in the ``first and second`` stages, it is **low risk**; if it is in the ``third and fourth`` stages, it is **medium risk**. If it is in the ``fifth`` stage, it is **high risk**. Quark-Engine Step 6 (Report) ============================ As a final step, we present our analysis report in two forms, a summary report and a detailed report. Summary Report -------------- .. image:: https://i.imgur.com/Ib01V6k.png Detail Report --------------- .. image:: https://i.imgur.com/kh1jpsQ.png quark-engine-23.4.1/docs/source/quark_method_reference.rst000066400000000000000000000367141442215066700236740ustar00rootroot00000000000000+++++++++++++++++++++++ Quark Method Reference +++++++++++++++++++++++ quark.core.quark.py -------------------- find_previous_method ===================== **The algorithm of find_previous_method** The find_previous_method method uses a DFS algorithm to collect all MethodObjects called by the parent_method and add them to the specified wrapper. The search starts from the base_method and goes on recursively until there are no more levels or all candidates have been processed. .. code-block:: TEXT 1. Initialize an empty set "visited_methods" if it is not provided. 2. Get a set "method_set" using "self.apkinfo.upperfunc(base_method)". 3. Add "base_method" to the "visited_methods" set. 4. If "method_set" is not None then check if "parent_function" is in "method_set". - If yes, append "base_method" to "wrapper". - If no, then iterate through each item in "method_set". - If the item is in "visited_methods", skip it and continue to the next item. - If not, call "find_previous_method" again with the current item, "parent_function", "wrapper", and "visited_methods". **The code of find_previous_method** .. code-block:: python def find_previous_method( self, base_method, parent_function, wrapper, visited_methods=None ): """ Find the method under the parent function, based on base_method before to parent_function. This will append the method into wrapper. :param base_method: the base function which needs to be searched. :param parent_function: the top-level function which calls the basic function. :param wrapper: list is used to track each function. :param visited_methods: set with tested method. :return: None """ if visited_methods is None: visited_methods = set() method_set = self.apkinfo.upperfunc(base_method) visited_methods.add(base_method) if method_set is not None: if parent_function in method_set: wrapper.append(base_method) else: for item in method_set: # prevent to test the tested methods. if item in visited_methods: continue self.find_previous_method( item, parent_function, wrapper, visited_methods ) find_intersection ===================== **The algorithm of find_intersection** The ``find_intersection`` method takes in two sets, ``first_method_set`` and ``second_method_set``, and finds their intersection using a recursive search algorithm. Here is the process of ``find_intersection``。 .. code-block:: TEXT 1. Check that the input sets are not empty. If one of the sets is empty, raise a ValueError. 2. Use the & operator to find the intersection of the two sets. If the intersection is not empty, return the resulting set. 3. If the intersection is empty, call the method_recursive_search function with the input sets and a specified maximum depth. 4. The method_recursive_search function recursively searches for the intersection of the two input sets up to the specified depth by splitting the sets into subsets and comparing each subset's elements. - If the intersection is found, return the resulting set. - Otherwise, return None. **The code of find_intersection** .. code-block:: python def find_intersection(self, first_method_set, second_method_set, depth=1): """ Find the first_method_list ∊ second_method_list. [MethodAnalysis, MethodAnalysis,...] :param first_method_set: first list that contains each MethodAnalysis. :param second_method_set: second list that contains each MethodAnalysis. :param depth: maximum number of recursive search functions. :return: a set of first_method_list ∊ second_method_list or None. """ # Check both lists are not null if not first_method_set or not second_method_set: raise ValueError("Set is Null") # find ∊ result = first_method_set & second_method_set if result: return result else: return self.method_recursive_search( depth, first_method_set, second_method_set ) method_recursive_search ======================= **The algorithm of method_recursive_search** The ``method_recursive_search`` algorithm finds the intersection between two sets of methods. Specifically, the algorithm expands each set by recursively adding their respective upper-level method objects until it finds an intersection or the depth reaches ``MAX_SEARCH_LAYER``. Here is the process of ``method_recursive_search``. .. code:: text 1. The method_recursive_search function takes three arguments: - depth, first_method_set, and second_method_set 2. If the depth+1 > MAX_SEARCH_LAYER, return None. 3. Create next_level_set_1 and next_level_set_2 that are the copies of first_method_set and second_method_set, respectively. 4. Expand next_level_set_1 and next_level_set_2 by adding their respective upper-level methods. 5. Calls find_intersection with the next_level_set_1, next_level_set_2 and depth+1 as arguments recursively. - If an intersection is found, return the result. - If no intersection is found, continue searching until depth > MAX_SEARCH_LAYER. **The code of method_recursive_search** .. code:: python def method_recursive_search( self, depth, first_method_set, second_method_set ): # Not found same method usage, try to find the next layer. depth += 1 if depth > MAX_SEARCH_LAYER: return None # Append first layer into next layer. next_level_set_1 = first_method_set.copy() next_level_set_2 = second_method_set.copy() # Extend the xref from function into next layer. for method in first_method_set: if self.apkinfo.upperfunc(method): next_level_set_1 = ( self.apkinfo.upperfunc(method) | next_level_set_1 ) for method in second_method_set: if self.apkinfo.upperfunc(method): next_level_set_2 = ( self.apkinfo.upperfunc(method) | next_level_set_2 ) return self.find_intersection( next_level_set_1, next_level_set_2, depth ) find_api_usage ============== **The algorithm of find_api_usage** ``find_api_usage`` searches for methods with ``method_name`` and ``descriptor_name``, that belong to either the ``class_name`` or its subclass. It returns a list that contains matching methods. Here is the process of ``find_api_usage``. .. code-block:: TEXT 1. Initialize an empty "method_list". 2. Search for an exact match of the method by its "class_name", "method_name", and "descriptor_name". - If found, return a list with the matching methods. 3. Create a list of potential methods with matching "method_name" and "descriptor_name". 4. Filter the list of potential methods to include only those with bytecodes. 5. Check if the class of each potential method is a subclass of the given "class_name". - If yes, add the method to "method_list". 6. Return "method_list". Here is the flowchart of ``find_api_usage``. .. image:: https://i.imgur.com/FZKRMgX.png **The code of find_api_usage** .. code-block:: python def find_api_usage(self, class_name, method_name, descriptor_name): method_list = [] # Source method source_method = self.apkinfo.find_method( class_name, method_name, descriptor_name ) if source_method: return [source_method] # Potential Method potential_method_list = [ method for method in self.apkinfo.all_methods if method.name == method_name and method.descriptor == descriptor_name ] potential_method_list = [ method for method in potential_method_list if not next(self.apkinfo.get_method_bytecode(method), None) ] # Check if each method's class is a subclass of the given class for method in potential_method_list: current_class_set = {method.class_name} while current_class_set and not current_class_set.intersection( {class_name, "Ljava/lang/Object;"} ): next_class_set = set() for clazz in current_class_set: next_class_set.update( self.apkinfo.superclass_relationships[clazz] ) current_class_set = next_class_set current_class_set.discard("Ljava/lang/Object;") if current_class_set: method_list.append(method) return method_list _evaluate_method ===================== **The algorithm of _evaluate_method** The ``_evaluate_method`` method evaluates the execution of opcodes in the target method and returns a matrix representing the usage of each involved register. The method takes one parameter, method, which is the method to be evaluated. Here is the process of ``_evaluate_method``. .. code-block:: TEXT 1. Create a PyEval object with the apkinfo attribute of the instance. PyEval is presumably a class that handles the evaluation of opcodes. 2. Loop through the bytecode objects in the target method by calling the get_method_bytecode method of the apkinfo attribute. 3. Extract the mnemonic (opcode), registers, and parameter from the bytecode_obj and create an instruction list containing these elements. 4. Convert all elements of the instruction list to strings (in case there are MUTF8String objects). 5. Check if the opcode (the first element of instruction) is in the eval dictionary of the pyeval object. - If it is, call the corresponding function with the instruction as its argument. 6. Once the loop is finished, call the show_table method of the pyeval object to return the matrix representing the usage of each involved register. Here is the flowchart of ``_evaluate_method``. .. image:: https://i.imgur.com/XCKrjjR.jpg **The code of _evaluate_method** .. code-block:: python def _evaluate_method(self, method) -> List[List[str]]: """ Evaluate the execution of the opcodes in the target method and return the usage of each involved register. :param method: Method to be evaluated :return: Matrix that holds the usage of the registers """ pyeval = PyEval(self.apkinfo) for bytecode_obj in self.apkinfo.get_method_bytecode(method): # ['new-instance', 'v4', Lcom/google/progress/SMSHelper;] instruction = [bytecode_obj.mnemonic] if bytecode_obj.registers is not None: instruction.extend(bytecode_obj.registers) if bytecode_obj.parameter is not None: instruction.append(bytecode_obj.parameter) # for the case of MUTF8String instruction = [str(x) for x in instruction] if instruction[0] in pyeval.eval.keys(): pyeval.eval[instruction[0]](instruction) return pyeval.show_table() check_parameter_on_single_method ======================================= **The algorithm of check_parameter_on_single_method** The ``check_parameter_on_single_method`` function checks whether two methods use the same parameter. Here is the process of ``check_parameter_on_single_method``. .. code-block:: TEXT 1. Define a method named check_parameter_on_single_method, which takes 5 parameters: * self: a reference to the current object, indicating that this method is defined in a class * usage_table: a table for storing the usage of called functions * first_method: the first API or the method calling the first API * second_method: the second API or the method calling the second API * keyword_item_list: a list of keywords used to determine if the parameter meets specific conditions 2. Define a Boolean variable regex, which is set to False by default. 3. Obtain the patterns of first_method and second_method based on the given input, and store them in first_method_pattern and second_method_pattern, respectively. 4. Define a generator matched_records. Use the filter function to filter register_usage_records to include only those matched records used by both first_method and second_method. 5. Use a for loop to process the matched records one by one. 6. Call method check_parameter_values to check if the matched records contain keywords in keyword_item_list. - If True, add matched keywords to matched_keyword_list. - If False, leave matched_keyword_list empty. 7. Use yield to return the matched record and matched_keyword_list. This method is a generator that processes data and returns results at the same time. Here is the flowchart of ``check_parameter_on_single_method`` .. image:: https://i.imgur.com/BJf7oSg.png **The code of check_parameter_on_single_method** .. code:: python def check_parameter_on_single_method( self, usage_table, first_method, second_method, keyword_item_list=None, regex=False, ) -> Generator[Tuple[str, List[str]], None, None]: """Check the usage of the same parameter between two method. :param usage_table: the usage of the involved registers :param first_method: the first API or the method calling the first APIs :param second_method: the second API or the method calling the second APIs :param keyword_item_list: keywords required to be present in the usage , defaults to None :param regex: treat the keywords as regular expressions, defaults to False :yield: _description_ """ first_method_pattern = PyEval.get_method_pattern( first_method.class_name, first_method.name, first_method.descriptor ) second_method_pattern = PyEval.get_method_pattern( second_method.class_name, second_method.name, second_method.descriptor, ) register_usage_records = ( c_func for table in usage_table for val_obj in table for c_func in val_obj.called_by_func ) matched_records = filter( lambda r: first_method_pattern in r and second_method_pattern in r, register_usage_records, ) for record in matched_records: if keyword_item_list and list(keyword_item_list): matched_keyword_list = self.check_parameter_values( record, (first_method_pattern, second_method_pattern), keyword_item_list, regex, ) if matched_keyword_list: yield (record, matched_keyword_list) else: yield (record, None) quark-engine-23.4.1/docs/source/quark_mit_program.rst000066400000000000000000000024551442215066700227110ustar00rootroot00000000000000+++++++++++++++++ Quark MIT Program +++++++++++++++++ Quark MIT aims to create a **WIN-WIN** for both new comers and the community. For new comers, the community helps you to build a stronger resume by creating specific works that fit the job description of your **DREAM JOB**. | For the community, Quark-Engine gets new energy by the work the new comers contribute. | And the most important of all, the Quark community gets to **GROW**. - **Find more details below:** .. image:: https://i.imgur.com/XNwGYEN.png Quark to You ------------- We help our MIT program members to build stronger resumes upon Quark-Engine in just **5** specific steps. .. image:: https://i.imgur.com/1Qlf03U.png You to Quark ------------- Alunies are expected to positive feedbacks and continously participation of the Quark Community (not mandatory). .. image:: https://i.imgur.com/xknY1Jc.png Better Community ----------------- We believe helping people is the key to build a better community. .. image:: https://i.imgur.com/kIJBqOn.png Minumum Requirements --------------------- Members need to complete at least **1** goal every **6** months. .. image:: https://i.imgur.com/LxAVUcE.png Contact us ---------- Send a direct message to our Twitter @quarkengine to join this program! .. image:: https://i.imgur.com/762fgld.pngquark-engine-23.4.1/docs/source/quark_reports.rst000066400000000000000000000062271442215066700220700ustar00rootroot00000000000000++++++++++++++++++++++++++++++++++++++++ Quark Report ++++++++++++++++++++++++++++++++++++++++ Easy to Use and Intuitive Report --------------------------------------- Quark provides **7 flexible report formats** to boost your analysis. * `Summary Report`_ * `Detail Report`_ * `Web Report`_ * `Label-based Report`_ * `Behaviors Comparison Radar Chart`_ * `Call Graph`_ * `Rule Classification`_ Please see below for more details. Summary Report -------------- Examine with rules. .. code-block:: bash quark -a 14d9f1a92dd984d6040cc41ed06e273e.apk -s There is the possibility to select only one label to filter the rules: .. code-block:: bash quark -a 14d9f1a92dd984d6040cc41ed06e273e.apk -s network There is also the possibility to select only one rule: .. code-block:: bash quark -a 14d9f1a92dd984d6040cc41ed06e273e.apk -s .. image:: https://i.imgur.com/v7ehRW0.png Note that if you want to select the default rules of Quark, the path to the ruleset is ``$HOME/.quark-engine/quark-rules/rules/``. Detail Report ------------- This is how we examine a real android malware (candy corn) with one single rule (crime). .. code-block:: bash quark -a 14d9f1a92dd984d6040cc41ed06e273e.apk -d There is the possibility to select only one label to filter the rules: .. code-block:: bash quark -a 14d9f1a92dd984d6040cc41ed06e273e.apk -d network There is also the possibility to select only one rule: .. code-block:: bash quark -a 14d9f1a92dd984d6040cc41ed06e273e.apk -d .. image:: https://i.imgur.com/LFLFpvc.png Note that if you want to select the default rules of Quark, the path to the ruleset is ``$HOME/.quark-engine/quark-rules/rules/``. Web Report ---------------- With the following command, you can easily analyze the Android sample and output the web report. See our demo `here `_. .. code-block:: python quark -a sample.apk -s -w quark_report.html .. image:: https://i.imgur.com/fNc3mC0.jpg Label-based Report ------------------ Check which topic (indicated by `labels `_) of the malware is more aggressive. .. code-block:: bash quark -a Ahmyth.apk -l detailed .. image:: https://i.imgur.com/0GbBDfn.png Behaviors Comparison Radar Chart -------------------------------- With the following command, you can compare different APK actions based on the max confidence of rule labels and generate a radar chart. .. code-block:: bash quark -a first.apk -a second.apk -C .. image:: https://i.imgur.com/ClRWOei.png Call Graph ---------- You can add the ``-g`` option to the quark command, and you can get the call graph (only those rules match with 100% confidence). .. code-block:: bash quark -a Ahmyth.apk -s -g .. image:: https://i.imgur.com/5xcrcdN.png Rule Classification -------------------- You can add the ``-c`` option to the quark command, and you can output the rules classification with the mutual parent function (only those rules match with 100% confidence). .. code-block:: bash quark -a Ahmyth.apk -s -c .. image:: https://i.imgur.com/YTK8V1x.png quark-engine-23.4.1/docs/source/quark_script.rst000066400000000000000000001731211442215066700216740ustar00rootroot00000000000000++++++++++++++++++++++++++++++++++++++++++++++++++ Quark Script ++++++++++++++++++++++++++++++++++++++++++++++++++ Ecosystem for Mobile Security Tools ------------------------------------ Innovative & Interactive ========================= The goal of Quark Script aims to provide an innovative way for mobile security researchers to analyze or **pentest** the targets. Based on Quark, we integrate decent tools as Quark Script APIs and make them exchange valuable intelligence to each other. This enables security researchers to **interact** with staged results and perform **creative** analysis with Quark Script. Dynamic & Static Analysis ========================== In Quark script, we integrate not only static analysis tools (e.g. Quark itself) but also dynamic analysis tools (e.g. `objection `_). Re-Usable & Sharable ==================== Once the user creates a Quark script for specific analysis scenario. The script can be used in another targets. Also, the script can be shared to other security researchers. This enables the exchange of knowledges. More APIs to come ================== Quark Script is now in a beta version. We'll keep releasing practical APIs and analysis scenarios. Quickstart ----------- | In this tutorial, we will learn how to install and run Quark Script with a very easy example. | We show how to detect CWE-798 in ovaa.apk. Step 1: Environments Requirements ================================== - Quark Script requires Python 3.8 or above. Step 2: Install Quark Engine ============================= You can install Quark Engine by running: :: $ pip3 install quark-engine Step 3: Prepare Quark Script, Detection Rule and the Sample File ================================================================ 1. Get the CWE-798 Quark Script and the detection rule `here `_. 2. Get the sampe file (ovaa.apk) `here `_. 3. Put the script, detection rule, and sample file in the same directory. 4. Edit accordingly to the file names: .. code-block:: python SAMPLE_PATH = "ovaa.apk" RULE_PATH = "findSecretKeySpec.json" Now you are ready to run the script! Step 4: Run the script ====================== :: $ python3 CWE-798.py You should now see the detection result in the terminal. :: Found hard-coded AES key 49u5gh249gh24985ghf429gh4ch8f23f Introduce of Quark Script APIs ------------------------------ findMethodInAPK(samplePath, targetMethod) ========================================= - **Description**: Find the target method in APK - **params**: 1. samplePath: Target file 2. targetMethod: A python list contains class name, method name, and descriptor of target method - **return**: Python list contains caller method instance of target method Rule(rule.json) =============== - **Description**: Making detection rule a rule instance - **params**: Path of a single Quark rule - **return**: Quark rule instance runQuarkAnalysis(SAMPLE_PATH, ruleInstance) =========================================== - **Description**: Given detection rule and target sample, this instance runs the basic Quark analysis. - **params**: 1. SAMPLE_PATH: Target file 2. ruleInstance: Quark rule object - **return**: quarkResult instance quarkResultInstance.behaviorOccurList ===================================== - **Description**: List that stores instances of detected behavior in different part of the target file. - **params**: none - **return**: detected behavior instance quarkResultInstance.getAllStrings(none) ======================================= - **Description**: Get all strings inside the target APK file. - **params**: none - **return**: python list containing all strings inside the target APK file. quarkResultInstance.isHardcoded(argument) ========================================== - **Description**: Check if the argument is hardcoded into the APK. - **params**: 1. argument: string value that is passed in when a method is invoked - **return**: True/False quarkResultInstance.findMethodInCaller(callerMethod, targetMethod) ================================================================== - **Description**: Find target method in caller method. - **params**: 1. callerMethod: python list contains class name, method name and descriptor of caller method. 2. targetMethod: python list contains class name, method name and descriptor of target method. - **return**: python list contains target method instances. behaviorInstance.firstAPI.fullName ================================== - **Description**: Show the name of the first key API called in this behavior. - **params**: none - **return**: API name behaviorInstance.secondAPI.fullName =================================== - **Description**: Show the name of the second key API called in this behavior. - **params**: none - **return**: API name behaviorInstance.hasString(pattern, isRegex) ============================================ - **Description**: Check if the arguments of the two APIs contain the string. - **params**: 1. pattern: string that may appear in the arguments 2. isRegex: consider the string as a regular expression if True, defaults to False - **return**: the matched string behaviorInstance.hasUrl(none) ============================= - **Description**: Check if the behavior contains urls. - **params**: none - **return**: python list containing all detected urls. behaviorInstance.methodCaller ============================= - **Description**: Find method who calls this behavior (API1 & API2). - **params**: none - **return**: method instance behaviorInstance.getParamValues(none) ===================================== - **Description**: Get parameter values that API1 sends to API2 in the behavior. - **params**: none - **return**: python list containing parameter values. behaviorInstance.isArgFromMethod(targetMethod) ============================================== - **Description**: Check if there are any arguments from the target method. - **params**: 1. targetMethod: python list contains class name, method name, and descriptor of target method - **return**: True/False behaviorInstance.getMethodsInArgs(none) ============================================== - **Description**: Get the methods which the arguments in API2 has passed through. - **params**: none - **return**: python list containing method instances methodInstance.getXrefFrom(none) ================================ - **Description**: Find out who call this method. - **params**: none - **return**: python list containing caller methods. methodInstance.getXrefTo(none) ============================== - **Description**: Find out who this method called. - **params**: none - **return**: python list containing tuples (callee methods, index). methodInstance.getArguments(none) ============================== - **Description**: Get arguments from method. - **params**: none - **return**: python list containing arguments. methodInstance.findSuperclassHierarchy(none) ============================================= - **Description**: Find all superclasses of this method object. - **params**: none - **return**: Python list contains all superclass names of this method. Objection(host) =============== - **Description**: Create an instance for Objection (dynamic analysis tool). - **params**: Monitoring IP:port - **return**: objection instance objInstance.hookMethod(method, watchArgs, watchBacktrace, watchRet) ===================================================================== - **Description**: Hook the target method with Objection. - **params**: 1. method: the tagrget API. (type: str or method instance) 2. watchArgs: Return Args information if True. (type: boolean) 3. watchBacktrace: Return backtrace information if True. (type: boolean) 4. watchRet: Return the return information of the target API if True. (type: boolean) - **return**: none runFridaHook(apkPackageName, targetMethod, methodParamTypes, secondToWait) ============================================================================ - **Description**: Track calls to the specified method for given seconds. - **params**: 1. apkPackageName: the package name of the target APP 2. targetMethod: the target API 3. methodParamTypes: string that holds the parameters used by the target API 4. secondToWait: seconds to wait for method calls, defaults to 10 - **return**: FridaResult instance checkClearText(inputString) ============================ - **Description**: Check the decrypted value of the input string. - **params**: 1. inputString: string to be checked - **return**: the decrypted value getActivities(samplePath) ========================== - **Description**: Get activities from the manifest of target sample. - **params**: 1. samplePath: the file path of target sample - **return**: python list containing activities activityInstance.hasIntentFilter(none) ====================================== - **Description**: Check if the activity has an intent-filter. - **params**: none - **return**: True/False activityInstance.isExported(none) ================================== - **Description**: Check if the activity set ``android:exported=true``. - **params**: none - **return**: True/False getApplication(samplePath) ========================== - **Description**: Get the application element from the manifest file of the target sample. - **params**: 1. samplePath: the file path of the target sample - **return**: the application element of the target sample applicationInstance.isDebuggable(none) ====================================== - **Description**: Check if the application element sets ``android:debuggable=true``. - **params**: none - **return**: True/False Analyzing real case (InstaStealer) using Quark Script ------------------------------------------------------ Quark Script that dynamic hooks the method containing urls =========================================================== The scenario is simple! We'd like to dynamic hooking the methods in the malware that contains urls. We can use APIs above to write Quark Script. .. code-block:: python from quark.script import runQuarkAnalysis, Rule from quark.script.objection import Objection SAMPLE_PATH = "6f032.apk" RULE_PATH = "00211.json" ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for behaviorInstance in quarkResult.behaviorOccurList: detectedUrl = behaviorInstance.hasUrl() if detectedUrl: print(f"\nDetected Behavior -> {ruleInstance.crime}") print(f"\nDetected Url -> {detectedUrl}") method = behaviorInstance.methodCaller print(f"\nThe detected behavior was called by -> {method.fullName}") print("\nAttempt to hook the method:") obj = Objection("127.0.0.1:8888") obj.hookMethod(method, watchArgs=True, watchBacktrace=True, watchRet=True) print(f"\tHook -> {method.fullName}") for methodCaller in method.getXrefFrom(): obj.hookMethod(methodCaller, watchArgs=True, watchBacktrace=True, watchRet=True) print(f"\tHook -> {methodCaller.fullName}") for methodCallee, _ in method.getXrefTo(): obj.hookMethod(methodCallee, watchArgs=True, watchBacktrace=True, watchRet=True) print(f"\tHook -> {methodCallee.fullName}") print("\nSee the hook results in Objection's terminal.") .. note:: Please make sure you have the dynamic analysis environment ready before executing the script. 1. Objection installed and running. Check the guideline `here `_. 2. Android Virtual Machine with frida installed. Check the guideline `here `_. 3. Or a rooted Android Device (Google Pixel 6) with frida installed. Check the root guideline `here `_, frida install guideline is the `same `_ with Android Virtual Machine. Quark Script Result =================== .. image:: https://i.imgur.com/elztZdC.png Logs on the Objection terminal (hooking) ======================================== .. image:: https://i.imgur.com/XrtfgjY.jpg Method (callComponentMethod) with urls is detected triggered! ============================================================= .. image:: https://i.imgur.com/ryV3f57.jpg Detect CWE-798 in Android Application (ovaa.apk) ------------------------------------------------ This scenario seeks to find hard-coded credentials in the APK file. See `CWE-798 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we design a detection rule ``findSecretKeySpec.json`` to spot on behavior uses method SecretKeySpec. Then, we get all the parameter values that input to this method. From the returned parameter values, we identify it's a AES key and parse the key out of the values. Finally, we dump all strings in the APK file and check if the AES key is in the strings. If the answer is YES, BINGO!!! We find hard-coded credentials in the APK file. Quark Scipt: CWE-798.py ======================== .. code-block:: python import re from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "ovaa.apk" RULE_PATH = "findSecretKeySpec.json" ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for secretKeySpec in quarkResult.behaviorOccurList: allStrings = quarkResult.getAllStrings() firstParam = secretKeySpec.getParamValues()[1] secondParam = secretKeySpec.getParamValues()[2] if secondParam == "AES": AESKey = re.findall(r'\((.*?)\)', firstParam)[1] if AESKey in allStrings: print(f"Found hard-coded {secondParam} key {AESKey}") Quark Rule: findSecretKeySpec.json ================================== .. code-block:: json { "crime": "Detect APK using SecretKeySpec.", "permission": [], "api": [ { "descriptor": "()[B", "class": "Ljava/lang/String;", "method": "getBytes" }, { "descriptor": "([BLjava/lang/String;)V", "class": "Ljavax/crypto/spec/SecretKeySpec;", "method": "" } ], "score": 1, "label": [] } Quark Script Result ===================== .. code-block:: TEXT $ python3 findSecretKeySpec.py Found hard-coded AES key 49u5gh249gh24985ghf429gh4ch8f23f Hard-Coded AES key in the APK file =================================== .. code-block:: TEXT const-string v2, "49u5gh249gh24985ghf429gh4ch8f23f" invoke-virtual {v2}, Ljava/lang/String;->getBytes()[B move-result-object v2 invoke-direct {v1, v2, v0}, Ljavax/crypto/spec/SecretKeySpec;->([BLjava/lang/String;)V Detect CWE-94 in Android Application (ovaa.apk) ----------------------------------------------- This scenario seeks to find code injection in the APK file. See `CWE-94 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we design a detection rule ``loadExternalCode.json`` to spot on behavior uses method createPackageContext. Then, we find the caller method who calls the createPackageContext. Finally, we check if method checkSignatures is called in the caller method for verification. Quark Scipt: CWE-94.py ======================== .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "ovaa.apk" RULE_PATH = "loadExternalCode.json" targetMethod = [ "Landroid/content/pm/PackageManager;", "checkSignatures", "(Ljava/lang/String;Ljava/lang/String;)I" ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for ldExternalCode in quarkResult.behaviorOccurList: callerMethod = [ ldExternalCode.methodCaller.className, ldExternalCode.methodCaller.methodName, ldExternalCode.methodCaller.descriptor ] if not quarkResult.findMethodInCaller(callerMethod, targetMethod): print(f"\nMethod: {targetMethod[1]} not found!") print(f"CWE-94 is detected in {SAMPLE_PATH}") Quark Rule: loadExternalCode.json ================================== .. code-block:: json { "crime": "Load external code from other APK.", "permission": [], "api": [ { "descriptor": "(Ljava/lang/String;I)Landroid/content/Context;", "class": "", "method": "createPackageContext" }, { "descriptor": "(Ljava/lang/String;)Ljava/lang/Class;", "class": "Ljava/lang/ClassLoader;", "method": "loadClass" } ], "score": 1, "label": [] } Quark Script Result =================== .. code-block:: TEXT $ python3 CWE-94.py Method: checkSignatures not found! CWE-94 is detected in ovaa.apk Detect CWE-921 in Android Application (ovaa.apk) ------------------------------------------------ This scenario seeks to find unsecure storage mechanism of data in the APK file. See `CWE-921 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we design a detection rule ``checkFileExistence.json`` to spot on behavior that checks if a file exist on given storage mechanism. Then, we use API ``getParamValues()`` to get the file path. Finally, CWE-921 is found if the file path contains keyword ``sdcard``. Quark Script CWE-921.py ======================== .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "ovaa.apk" RULE_PATH = "checkFileExistence.json" ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for existingFile in quarkResult.behaviorOccurList: filePath = existingFile.getParamValues()[0] if "sdcard" in filePath: print(f"This file is stored inside the SDcard\n") print(f"CWE-921 is detected in {SAMPLE_PATH}.") Quark Rule: checkFileExistence.json =================================== .. code-block:: json { "crime": "Check file existence", "permission": [], "api": [ { "descriptor": "(Ljava/lang/String;)V", "class": "Ljava/io/File;", "method": "" }, { "descriptor": "()Z", "class": "Ljava/io/File;", "method": "exists" } ], "score": 1, "label": [] } Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-921.py This file is stored inside the SDcard CWE-921 is detected in ovaa.apk. Detect CWE-312 in Android Application (ovaa.apk) ------------------------------------------------ This scenario seeks to find cleartext storage of sensitive data in the APK file. See `CWE-312 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we designed a `Frida `_ script ``agent.js`` to hook the target method and get the arguments when the target method is called. Then we hook the method ``putString`` to catch its arguments. Finally, we use `Ciphey `_ to check if the arguments are encrypted. Quark Script CWE-312.py ======================== .. code-block:: python from quark.script.frida import runFridaHook from quark.script.ciphey import checkClearText APP_PACKAGE_NAME = "oversecured.ovaa" TARGET_METHOD = "android.app." \ "SharedPreferencesImpl$EditorImpl." \ "putString" METHOD_PARAM_TYPE = "java.lang.String," \ "java.lang.String" fridaResult = runFridaHook(APP_PACKAGE_NAME, TARGET_METHOD, METHOD_PARAM_TYPE, secondToWait = 10) for putString in fridaResult.behaviorOccurList: firstParam, secondParam = putString.getParamValues() if firstParam in ["email", "password"] and \ secondParam == checkClearText(secondParam): print(f'The CWE-312 vulnerability is found. The cleartext is "{secondParam}"') Frida Script: agent.js ======================= .. code-block:: javascript // -*- coding: utf-8 -*- // This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine // See the file 'LICENSE' for copying permission. /*global Java, send, rpc*/ function replaceMethodImplementation(targetMethod, classAndMethodName, methodParamTypes, returnType) { targetMethod.implementation = function () { let callEvent = { "type": "CallCaptured", "identifier": [classAndMethodName, methodParamTypes, returnType], "paramValues": [] }; for (const arg of arguments) { callEvent["paramValues"].push((arg || "(none)").toString()); } send(JSON.stringify(callEvent)); return targetMethod.apply(this, arguments); }; } function watchMethodCall(classAndMethodName, methodParamTypes) { if (classAndMethodName == null || methodParamTypes == null) { return; } const indexOfLastSeparator = classAndMethodName.lastIndexOf("."); const classNamePattern = classAndMethodName.substring(0, indexOfLastSeparator); const methodNamePattern = classAndMethodName.substring(indexOfLastSeparator + 1); Java.perform(() => { const classOfTargetMethod = Java.use(classNamePattern); const possibleMethods = classOfTargetMethod[`${methodNamePattern}`]; if (typeof possibleMethods === "undefined") { const failedToWatchEvent = { "type": "FailedToWatch", "identifier": [classAndMethodName, methodParamTypes] }; send(JSON.stringify(failedToWatchEvent)); return; } possibleMethods.overloads.filter((possibleMethod) => { const paramTypesOfPossibleMethod = possibleMethod.argumentTypes.map((argument) => argument.className); return paramTypesOfPossibleMethod.join(",") === methodParamTypes; }).forEach((matchedMethod) => { const retType = matchedMethod.returnType.name; replaceMethodImplementation(matchedMethod, classAndMethodName, methodParamTypes, retType); } ); }); } rpc.exports["watchMethodCall"] = (classAndMethodName, methodParamTypes) => watchMethodCall(classAndMethodName, methodParamTypes); Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-312.py The CWE-312 vulnerability is found. The cleartext is "test@email.com" The CWE-312 vulnerability is found. The cleartext is "password" Detect CWE-89 in Android Application (AndroGoat.apk) ---------------------------------------------------- This scenario seeks to find SQL injection in the APK file. See `CWE-89 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we design a detection rule ``executeSQLCommand.json`` to spot on behavior using SQL command Execution. Then, we use API ``isArgFromMethod`` to check if ``append`` use the value of ``getText`` as the argument. If yes, we confirmed that the SQL command string is built from user input, which will cause CWE-89 vulnerability. Quark Script CWE-89.py ====================== .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "AndroGoat.apk" RULE_PATH = "executeSQLCommand.json" targetMethod = [ "Landroid/widget/EditText;", # class name "getText", # method name "()Landroid/text/Editable;", # descriptor ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for sqlCommandExecution in quarkResult.behaviorOccurList: if sqlCommandExecution.isArgFromMethod( targetMethod ): print(f"CWE-89 is detected in {SAMPLE_PATH}") Quark Rule: executeSQLCommand.json ================================== .. code-block:: json { "crime": "Execute SQL Command", "permission": [], "api": [ { "class": "Ljava/lang/StringBuilder;", "method": "append", "descriptor": "(Ljava/lang/String;)Ljava/lang/StringBuilder;" }, { "class": "Landroid/database/sqlite/SQLiteDatabase;", "method": "rawQuery", "descriptor": "(Ljava/lang/String; [Ljava/lang/String;)Landroid/database/Cursor;" } ], "score": 1, "label": [] } Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-89.py CWE-89 is detected in AndroGoat.apk Detect CWE-926 in Android Application (dvba.apk) ---------------------------------------------------- This scenario seeks to find **improper export of Android application components** in the APK file. See `CWE-926 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we use Quark API ``getActivities`` to get all activity data in the manifest. Then we use ``activityInstance.hasIntentFilter`` to check if the activities have ``intent-filter``. Also, we use ``activityInstance.isExported`` to check if the activities set the attribute ``android:exported=true``. If both are **true**, then the APK exports the component for use by other applications. That may cause CWE-926 vulnerabilities. Quark Script CWE-926.py ======================= .. code-block:: python from quark.script import * SAMPLE_PATH = "dvba.apk" for activityInstance in getActivities(SAMPLE_PATH): if activityInstance.hasIntentFilter() and activityInstance.isExported(): print(f"CWE-926 is detected in the activity, {activityInstance}") Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-926.py CWE-926 is found in the activity, com.app.damnvulnerablebank.CurrencyRates CWE-926 is found in the activity, com.app.damnvulnerablebank.SplashScreen Detect CWE-749 in Android Application (MSTG-Android-Java.apk) ------------------------------------------------------------- This scenario seeks to find **exposed methods or functions** in the APK file. See `CWE-749 `_ for more details. Let's use this `APK `_ and the above APIs to show how Quark script find this vulnerability. First, we design a detection rule ``configureJsExecution.json`` to spot on behavior using method ``setJavascriptEnabled``. Then, we use API ``methodInstance.getArguments`` to check if it enables JavaScript execution on websites. Finally, we look for calls to method ``addJavaScriptInterface`` in the caller method. If **yes**, the APK exposes methods or functions to websites. That causes CWE-749 vulnerability. Quark Script CWE-749.py ======================= .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "MSTG-Android-Java.apk" RULE_PATH = "configureJsExecution.json" targetMethod = [ "Landroid/webkit/WebView;", "addJavascriptInterface", "(Ljava/lang/Object; Ljava/lang/String;)V" ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for configureJsExecution in quarkResult.behaviorOccurList: caller = configureJsExecution.methodCaller secondAPI = configureJsExecution.secondAPI enableJS = secondAPI.getArguments()[1] exposeAPI = quarkResult.findMethodInCaller(caller, targetMethod) if enableJS and exposeAPI: print(f"CWE-749 is detected in method, {caller.fullName}" Quark Rule: configureJsExecution.json ===================================== .. code-block:: json { "crime": "Configure JavaScript execution on websites", "permission": [], "api": [ { "class": "Landroid/webkit/WebView;", "method": "getSettings", "descriptor": "()Landroid/webkit/WebSettings;" }, { "class": "Landroid/webkit/WebSettings;", "method": "setJavaScriptEnabled", "descriptor": "(Z)V" } ], "score": 1, "label": [] } Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-749.py CWE-749 is detected in method, Lsg/vp/owasp_mobile/OMTG_Android/OMTG_ENV_005_WebView_Remote; onCreate (Landroid/os/Bundle;)V CWE-749 is detected in method, Lsg/vp/owasp_mobile/OMTG_Android/OMTG_ENV_005_WebView_Local; onCreate (Landroid/os/Bundle;)V Detect CWE-532 in Android Application (dvba.apk) ------------------------------------------------------------- This scenario seeks to find **insertion of sensitive information into Log file**. See `CWE-532 `_ for more details. Let’s use this `APK `_ and the above APIs to show how the Quark script finds this vulnerability. First, we use API ``findMethodInAPK`` to locate ``log.d`` method. Then we use API ``methodInstance.getArguments`` to get the argument that input to ``log.d``. Finally, we use some keywords such as "token", "password", and "decrypt" to check if arguments include sensitive data. If the answer is YES, that may cause sensitive data leakage into log file. You can use your own keywords in the keywords list to detect sensitive data. Quark Script CWE-532.py ======================= .. code-block:: python from quark.script import findMethodInAPK SAMPLE_PATH = "dvba.apk" TARGET_METHOD = [ "Landroid/util/Log;", # class name "d", # method name "(Ljava/lang/String; Ljava/lang/String;)I" # descriptor ] CREDENTIAL_KEYWORDS = [ "token", "decrypt", "password" ] methodsFound = findMethodInAPK(SAMPLE_PATH, TARGET_METHOD) for debugLogger in methodsFound: arguments = debugLogger.getArguments() for keyword in CREDENTIAL_KEYWORDS: if keyword in arguments[1]: print(f"CWE-532 is detected in method, {debugLogger.fullName}") Quark Script Result ==================== .. code-block:: TEXT $ python CWE-532.py CWE-532 is detected in method, Lcom/google/firebase/auth/FirebaseAuth; d (Lc/c/b/h/o;)V Detect CWE-780 in Android Application (MSTG-Android-Java.apk) ------------------------------------------------------------- This scenario seeks to find **the use of the RSA algorithm without Optimal Asymmetric Encryption Padding (OAEP)**. See `CWE-780 `_ for more details. Let's use this `APK `_ and the above APIs to show how the Quark script find this vulnerability. We first design a detection rule ``useOfCryptographicAlgo.json`` to spot on behavior using the cryptographic algorithm. Then, we use API `behaviorInstance.hasString(pattern, isRegex)` to filter behaviors using the RSA algorithm. Finally, we use the same API to check if the algorithm runs without the OAEP scheme. If the answer is YES, the plaintext is predictable. Quark Script CWE-780.py ======================= .. code-block:: python from quark.script import Rule, runQuarkAnalysis SAMPLE_PATH = "MSTG-Android-Java.apk" RULE_PATH = "useOfCryptographicAlgo.json" ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for useCryptographicAlgo in quarkResult.behaviorOccurList: methodCaller = useCryptographicAlgo.methodCaller if useCryptographicAlgor.hasString("RSA") and \ not useCryptographicAlgo.hasString("OAEP"): print(f"CWE-780 is detected in method, {methodCaller.fullName}") Quark Rule: useOfCryptographicAlgo.json ======================================= .. code-block:: json { "crime": "Use of cryptographic algorithm", "permission": [], "api": [ { "class": "Ljavax/crypto/Cipher;", "method": "getInstance", "descriptor": "(Ljava/lang/String; Ljava/lang/String;)Ljavax/crypto/Cipher" }, { "class": "Ljavax/crypto/Cipher;", "method": "init", "descriptor": "(I Ljava/security/Key;)V" } ], "score": 1, "label": [] } Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-780.py CWE-780 is detected in method, Lsg/vp/owasp_mobile/OMTG_Android/OMTG_DATAST_001_KeyStore; encryptString (Ljava/lang/String;)V Detect CWE-319 in Android Application (ovaa.apk) ------------------------------------------------------------- This scenario seeks to find **the Cleartext Transmission of Sensitive Information**. See `CWE-319 `_ for more details. Let's use this `APK `_ and the above APIs to show how the Quark script finds this vulnerability. This sample uses the package Retrofit to request Web APIs, but the APIs use cleartext protocols. We first design a detection rule ``setRetrofitBaseUrl.json`` to spot on behavior that sets the base URL of the Retrofit instance. Then, we loop through a custom list of cleartext protocol schemes and use API `behaviorInstance.hasString` to filter arguments that are URL strings with cleartext protocol. Quark Script CWE-319.py ======================= .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "./ovaa.apk" RULE_PATH = "setRetrofitBaseUrl.json" PROTOCOL_KEYWORDS = [ "http", "smtp", "ftp" ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for setRetrofitBaseUrl in quarkResult.behaviorOccurList: for protocol in PROTOCOL_KEYWORDS: regexRule = f"{protocol}://[0-9A-Za-z./-]+" cleartextProtocolUrl = setRetrofitBaseUrl.hasString(regexRule, True) if cleartextProtocolUrl: print(f"CWE-319 detected!") print(f"Here are the found URLs with cleartext protocol:") print("\n".join(cleartextProtocolUrl)) Quark Rule: setRetrofitBaseUrl.json ======================================= .. code-block:: json { "crime": "Set Retrofit Base Url", "permission": [], "api": [ { "descriptor": "()V", "class": "Lretrofit2/Retrofit$Builder;", "method": "" }, { "descriptor": "(Ljava/lang/String;)Lretrofit2/Retrofit$Builder;", "class": "Lretrofit2/Retrofit$Builder;", "method": "baseUrl" } ], "score": 1, "label": [] } Quark Script Result ==================== .. code-block:: TEXT $ python3 CWE-319.py CWE-319 detected! Here are the found URLs with cleartext protocol: http://example.com./api/v1/ Detect CWE-327 in Android Application (InjuredAndroid.apk) ------------------------------------------------------------- This scenario seeks to find **the use of a Broken or Risky Cryptographic Algorithm**. See `CWE-327 `_ for more details. Let's use this `APK `_ and the above APIs to show how the Quark script finds this vulnerability. We first design a detection rule ``useOfCryptographicAlgo.json`` to spot on behavior using cryptographic algorithms. Then, we use API ``behaviorInstance.hasString(pattern, isRegex)`` with a list to check if the algorithm is risky. If YES, that may cause the exposure of sensitive data. Quark Script CWE-327.py ======================= .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "InjuredAndroid.apk" RULE_PATH = "useOfCryptographicAlgo.json" WEAK_ALGORITHMS = ["DES", "ARC4", "BLOWFISH"] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for useCryptoAlgo in quarkResult.behaviorOccurList: caller = useCryptoAlgo.methodCaller for algo in WEAK_ALGORITHMS: if useCryptoAlgo.hasString(algo): print(f"CWE-327 is detected in method, {caller.fullName}") Quark Rule: useOfCryptographicAlgo.json ======================================= .. code-block:: json { "crime": "Use of cryptographic algorithm", "permission": [], "api": [ { "class": "Ljavax/crypto/Cipher;", "method": "getInstance", "descriptor": "(Ljava/lang/String;)Ljavax/crypto/Cipher" }, { "class": "Ljavax/crypto/Cipher;", "method": "init", "descriptor": "(I Ljava/security/Key;)V" } ], "score": 1, "label": [] } Quark Script Result =================== .. code-block:: TEXT $ python3 CWE-327.py CWE-327 is detected in method, Lb3nac/injuredandroid/k; b (Ljava/lang/String;)Ljava/lang/String; CWE-327 is detected in method, Lb3nac/injuredandroid/k; a (Ljava/lang/String;)Ljava/lang/String; Detect CWE-20 in Android Application (diva.apk) ----------------------------------------------- This scenario seeks to find **Improper Input Validation**. See `CWE-20 `_ for more details. Let’s use this `APK `_ and the above APIs to show how the Quark script finds this vulnerability. First, we design a detection rule ``openUrlThatUserInput.json`` to spot the behavior of opening the URL that the user input. Then we use API ``behaviorInstance.getMethodsInArgs`` to get a list of methods which the URL in ``loadUrl`` has passed through. Finally, we check if any validation method is in the list. If **No**, the APK does not validate user input. That causes CWE-20 vulnerability. Quark Script CWE-20.py ====================== .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "diva.apk" RULE_PATH = "openUrlThatUserInput.json" rule = Rule(RULE_PATH) result = runQuarkAnalysis(SAMPLE_PATH, rule) VALIDATE_METHODS = ["contains", "indexOf", "matches", "replaceAll"] for openUrl in result.behaviorOccurList: calledMethods = openUrl.getMethodsInArgs() if not any(method.methodName in VALIDATE_METHODS for method in calledMethods): print("CWE-20 is detected in method," f"{openUrl.methodCaller.fullName}") Quark Rule: inputWebUrl.json ==================================== .. code-block:: json { "crime": "Open the Url that user input", "permission": [], "api": [ { "class": "Landroid/widget/EditText;", "method": "getText", "descriptor": "()Landroid/text/Editable;" }, { "class": "Landroid/webkit/WebView;", "method": "loadUrl", "descriptor": "(Ljava/lang/String;)V" } ], "score": 1, "label": [] } Quark Script Result =================== .. code-block:: TEXT $ python CWE-20.py CWE-20 is detected in method, Ljakhar/aseem/diva/InputValidation2URISchemeActivity; get (Landroid/view/View;)V Detect CWE-79 in Android Application (Vuldroid.apk) ------------------------------------------------------ This scenario seeks to find **Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').** See `CWE-79 `_ for more details. Let’s use this `APK `_ and the above APIs to show how the Quark script finds this vulnerability. First, we design a detection rule ``loadUrlFromIntent.json`` to spot on behavior loading URL from intent data to the WebView instance. Next, we use API ``quarkResultInstance.findMethodInCaller(callerMethod, targetMethod)`` and ``methodInstance.getArguments()`` to check if the Javascript execution is enabled in the WebView. Finally, we check if there are any famous XSS filters. If **NO**, that may cause CWE-79 vulnerability. Quark Script CWE-79.py ======================== .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "Vuldroid.apk" RULE_PATH = "loadUrlFromIntent.json" XSS_FILTERS = [ [ "Lorg/owasp/esapi/Validator;", "getValidSafeHTML", "(Ljava/lang/String; Ljava/lang/String; I Z)Ljava/lang/String;", ], [ "Lorg/owasp/esapi/Encoder;", "encodeForHTML", "(Ljava/lang/String;)Ljava/lang/String;", ], [ "Lorg/owasp/esapi/Encoder;", "encodeForJavaScript", "(Ljava/lang/String;)Ljava/lang/String;", ], [ "Lorg/owasp/html/PolicyFactory;", "sanitize", "(Ljava/lang/String;)Ljava/lang/String;", ], ] targetMethod = [ "Landroid/webkit/WebSettings;", "setJavaScriptEnabled", "(Z)V" ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for loadUrl in quarkResult.behaviorOccurList: caller = loadUrl.methodCaller setJS = quarkResult.findMethodInCaller(caller, targetMethod) enableJS = [] if setJS: enableJS = setJS[0].getArguments()[1] if enableJS: XSSFiltersInCaller = [ filterAPI for filterAPI in XSS_FILTERS if quarkResult.findMethodInCaller(caller, filterAPI) ] if not XSSFiltersInCaller: print(f"CWE-79 is detected in method, {caller.fullName}") Quark Rule: loadUrlFromIntent.json ==================================== .. code-block:: json { "crime": "Load URL from intent to WebView", "permission": [], "api": [ { "descriptor": "()Landroid/net/Uri;", "class": "Landroid/content/Intent;", "method": "getData" }, { "descriptor": "(Ljava/lang/String;)V", "class": "Landroid/webkit/WebView;", "method": "loadUrl" } ], "score": 1, "label": [] } Quark Script Result =================== .. code-block:: TEXT $ python CWE-79.py CWE-79 is detected in method, Lcom/vuldroid/application/ForgetPassword; onCreate (Landroid/os/Bundle;)V Detect CWE-328 in Android Application (allsafe.apk) ------------------------------------------------------ This scenario seeks to find **the use of weak Hash**. See `CWE-328 `_ for more details. Let’s use `allsafe.apk `_, `ovaa.apk `_, `AndroGoat.apk `_, `MSTG-Android-Java.apk `_, and the above APIs to show how the Quark script finds this vulnerability. First, we use API ``findMethodInAPK(samplePath, targetMethod)`` to find the method ``MessageDigest.getInstance()`` or ``SecretKeyFactory.getInstance()``. Next, we use API ``methodInstance.getArguments()`` with a list to check if the method uses `weak hashing algorithms `_. If **YES**, that causes CWE-328 vulnerability. Quark Script CWE-328.py ======================== .. code-block:: python from quark.script import findMethodInAPK SAMPLE_PATHS = [ "./allsafe.apk", "./ovaa.apk", "./AndroGoat.apk", "./MSTG-Android-Java.apk" ] TARGET_METHODS = [ [ "Ljava/security/MessageDigest;", "getInstance", "(Ljava/lang/String;)Ljava/security/MessageDigest;" ], [ "Ljavax/crypto/SecretKeyFactory;", "getInstance", "(Ljava/lang/String;)Ljavax/crypto/SecretKeyFactory;" ] ] HASH_KEYWORDS = [ "MD2", "MD4", "MD5", "PANAMA", "SHA0", "SHA1", "HAVAL128", "RIPEMD128" ] for samplePath in SAMPLE_PATHS: methodsFound = [] for target in TARGET_METHODS: methodsFound += findMethodInAPK(samplePath, target) for setHashAlgo in methodsFound: algoName = setHashAlgo.getArguments()[0].replace("-", "") if any(keyword in algoName for keyword in HASH_KEYWORDS): print(f"CWE-328 is detected in {samplePath},\n\t" f"and it occurs in method, {setHashAlgo.fullName}") Quark Script Result =================== .. code-block:: TEXT $ python CWE-328.py CWE-328 is detected in ./allsafe.apk, and it occurs in method, Linfosecadventures/allsafe/challenges/SQLInjection; md5 (Ljava/lang/String;)Ljava/lang/String; CWE-328 is detected in ./allsafe.apk, and it occurs in method, Lcom/google/firebase/database/core/utilities/Utilities; sha1HexDigest (Ljava/lang/String;)Ljava/lang/String; CWE-328 is detected in ./allsafe.apk, and it occurs in method, Linfosecadventures/allsafe/challenges/WeakCryptography; md5Hash (Ljava/lang/String;)Ljava/lang/String; CWE-328 is detected in ./ovaa.apk, and it occurs in method, Lorg/apache/commons/io/input/MessageDigestCalculatingInputStream; (Ljava/io/InputStream;)V CWE-328 is detected in ./AndroGoat.apk, and it occurs in method, Lowasp/sat/agoat/AccessControlIssue1Activity; hashPIN (Ljava/lang/String;)Ljava/lang/String; CWE-328 is detected in ./MSTG-Android-Java.apk, and it occurs in method, Lcom/tozny/crypto/android/AesCbcWithIntegrity; generateKeyFromPassword (Ljava/lang/String; [B)Lcom/tozny/crypto/android/AesCbcWithIntegrity$SecretKeys; Detect CWE-295 in Android Application (InsecureShop.apk) ---------------------------------------------------------- This scenario seeks to find **Improper Certificate Validation**. See `CWE-295 `__ for more details. Let’s use this `APK `__ and the above APIs to show how the Quark script finds this vulnerability. We use the API ``findMethodInAPK`` to locate all ``SslErrorHandler.proceed`` methods. Then we need to identify whether if the method ``WebViewClient.onReceivedSslError`` is overrode by its subclass. First, we check and make sure that the ``MethodInstance.name`` is ``onReceivedSslError``, and the ``MethodInstance.descriptor`` is ``(Landroid/webkit/WebView; Landroid/webkit/SslErrorHandler; Landroid/net/http/SslError;)V``. Then we use the API ``MethodInstance.findSuperclassHierarchy`` to get the superclass list of the method’s caller class. Finally, we check the ``Landroid/webkit/WebViewClient;`` is on the superclass list. If **YES**, that may cause CWE-295 vulnerability. Quark Script CWE-295.py ======================== .. code-block:: python from quark.script import findMethodInAPK SAMPLE_PATH = "insecureShop.apk" TARGET_METHOD = [ "Landroid/webkit/SslErrorHandler;", # class name "proceed", # method name "()V" # descriptor ] OVERRIDE_METHOD = [ "Landroid/webkit/WebViewClient;", # class name "onReceivedSslError", # method name "(Landroid/webkit/WebView;"+" Landroid/webkit/SslErrorHandler;" + \ " Landroid/net/http/SslError;)V" # descriptor ] for sslProceedCaller in findMethodInAPK(SAMPLE_PATH, TARGET_METHOD): if (sslProceedCaller.name == OVERRIDE_METHOD[1] and sslProceedCaller.descriptor == OVERRIDE_METHOD[2] and OVERRIDE_METHOD[0] in sslProceedCaller.findSuperclassHierarchy()): print(f"CWE-295 is detected in method, {sslProceedCaller.fullName}") Quark Script Result =================== .. code-block:: TEXT $　python3 CWE-295.py Requested API level 29 is larger than maximum we have, returning API level 28 instead. CWE-295 is detected in method, Lcom/insecureshop/util/CustomWebViewClient; onReceivedSslError (Landroid/webkit/WebView; Landroid/webkit/SslErrorHandler; Landroid/net/http/SslError;)V Detect CWE-489 in Android Application (allsafe.apk, AndroGoat.apk, pivaa.apk) ------------------------------------------------------------------------------- This scenario seeks to find **active debug code** in the APK file. See `CWE-489 `_ for more details. Let's use `allsafe.apk `_, `AndroGoat.apk `_, `pivaa.apk `_, and the above APIs to show how the Quark script finds this vulnerability. First, we use Quark API ``getApplication`` to get the application element in the manifest file. Then we use ``applicationInstance.isDebuggable`` to check if the application element sets the attribute ``android:debuggable`` to true. If **Yes**, that causes CWE-489 vulnerabilities. Quark Script CWE-489.py =========================== The Quark Script below uses allsafe.apk to demonstrate. You can change the ``SAMPLE_PATH`` to the sample you want to detect. For example, ``SAMPLE_PATH = AndroGoat.apk`` or ``SAMPLE_PATH = pivaa.apk``. .. code-block:: python from quark.script import getApplication SAMPLE_PATH = "allsafe.apk" if getApplication(SAMPLE_PATH).isDebuggable(): print(f"CWE-489 is detected in {SAMPLE_PATH}.") Quark Script Result ====================== - **allsafe.apk** .. code-block:: TEXT $ python3 CWE-489.py CWE-489 is detected in allsafe.apk - **AndroGoat.apk** .. code-block:: TEXT $ python3 CWE-489.py CWE-489 is detected in AndroGoat.apk - **pivaa.apk** .. code-block:: TEXT $ python3 CWE-489.py CWE-489 is detected in pivaa.apk Detect CWE-22 in Android Application (ovaa.apk and InsecureBankv2.apk ) ----------------------------------------------------------------------- This scenario seeks to find **the improper limitation of a pathname to a restricted directory ('Path Traversal')**. See `CWE-22 `_ for more details. Let’s use `ovaa.apk `_, `InsecureBankv2.apk `_, and the above APIs to show how the Quark script finds this vulnerability. First, we design a detection rule ``accessFileInExternalDir.json`` to spot behavior accessing a file in an external directory. Next, we use API ``methodInstance.getArguments()`` to get the argument for the file path and use `quarkResultInstance.isHardcoded(argument)` to check if the argument is hardcoded into the APK. If No, the argument is from external input. Finally, we use Quark API ``quarkResultInstance.findMethodInCaller(callerMethod, targetMethod)`` to check if there are any APIs in the caller method for string matching. If **NO**, the APK does not neutralize special elements within the argument, which may cause CWE-22 vulnerability. Quark Script CWE-22.py ======================= The Quark Script below uses ovaa.apk to demonstrate. You can change the ``SAMPLE_PATH`` to the sample you want to detect. For example, ``SAMPLE_PATH = InsecureBankv2.apk``. .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "ovaa.apk" RULE_PATH = "accessFileInExternalDir.json" STRING_MATCHING_API = [ ["Ljava/lang/String;", "contains", "(Ljava/lang/CharSequence)Z"], ["Ljava/lang/String;", "indexOf", "(I)I"], ["Ljava/lang/String;", "indexOf", "(Ljava/lang/String;)I"], ["Ljava/lang/String;", "matches", "(Ljava/lang/String;)Z"], ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for accessExternalDir in quarkResult.behaviorOccurList: filePath = accessExternalDir.secondAPI.getArguments()[2] if quarkResult.isHardcoded(filePath): continue caller = accessExternalDir.methodCaller strMatchingAPIs = [ api for api in STRING_MATCHING_API if quarkResult.findMethodInCaller( caller, api) ] if not strMatchingAPIs: print(f"CWE-22 is detected in method, {caller.fullName}") Quark Rule: accessFileInExternalDir.json ========================================= .. code-block:: json { "crime": "Access a file in an external directory", "permission": [], "api": [ { "class": "Landroid/os/Environment;", "method": "getExternalStorageDirectory", "descriptor": "()Ljava/io/File;" }, { "class": "Ljava/io/File;", "method": "", "descriptor": "(Ljava/io/File;Ljava/lang/String;)V" } ], "score": 1, "label": [] } Quark Script Result ====================== - **ovaa.apk** .. code-block:: TEXT $ python3 CWE-22.py CWE-22 is detected in method, Loversecured/ovaa/providers/TheftOverwriteProvider; openFile (Landroid/net/Uri; Ljava/lang/String;)Landroid/os/ParcelFileDescriptor; - **InsecureBankv2.apk** .. code-block:: TEXT $ python3 CWE-22.py CWE-22 is detected in method, Lcom/android/insecurebankv2/ViewStatement; onCreate (Landroid/os/Bundle;)V Detect CWE-23 in Android Application (ovaa.apk and InsecureBankv2.apk ) ----------------------------------------------------------------------- This scenario aims to demonstrate the detection of the **Relative Path Traversal** vulnerability using `ovaa.apk `_ and `InsecureBankv2.apk `_. See `CWE-23 `_ for more details. To begin with, we will create a detection rule named ``accessFileInExternalDir.json`` to identify behavior that accesses a file in an external directory. Next, we will use ``methodInstance.getArguments()`` to retrieve the file path argument and check whether it belongs to the APK or not. If it does not belong to the APK, the argument is likely from external input. Finally, we will use the Quark API ``quarkResultInstance.findMethodInCaller(callerMethod, targetMethod)`` to search for any APIs in the caller method that match the string. If no matching API is found, the APK does not neutralize special elements within the argument, which may result in the CWE-23 vulnerability. If a matching API is found, we will verify whether it neutralizes the Relative Path string or not. If it does not neutralize it, the APK may still be vulnerable to CWE-23. Quark Script CWE-23.py ======================= The Quark Script below uses ovaa.apk to demonstrate. You can change the ``SAMPLE_PATH`` to the sample you want to detect. For example, ``SAMPLE_PATH = "InsecureBankv2.apk"``. .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "ovaa.apk" RULE_PATH = "accessFileInExternalDir.json" STRING_MATCHING_API = [ ["Ljava/lang/String;", "contains", "(Ljava/lang/CharSequence)Z"], ["Ljava/lang/String;", "indexOf", "(I)I"], ["Ljava/lang/String;", "indexOf", "(Ljava/lang/String;)I"], ["Ljava/lang/String;", "matches", "(Ljava/lang/String;)Z"], ["Ljava/lang/String;", "replaceAll", "(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;"], ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for accessExternalDir in quarkResult.behaviorOccurList: filePath = accessExternalDir.secondAPI.getArguments()[2] if quarkResult.isHardcoded(filePath): continue caller = accessExternalDir.methodCaller strMatchingAPIs = [ api for api in STRING_MATCHING_API if quarkResult.findMethodInCaller( caller, api) ] if not strMatchingAPIs: print(f"CWE-23 is detected in method, {caller.fullName}") elif strMatchingAPIs.find("..") == -1: print(f"CWE-23 is detected in method, {caller.fullName}") Quark Rule: accessFileInExternalDir.json ========================================= .. code-block:: json { "crime": "Access a file in an external directory", "permission": [], "api": [ { "class": "Landroid/os/Environment;", "method": "getExternalStorageDirectory", "descriptor": "()Ljava/io/File;" }, { "class": "Ljava/io/File;", "method": "", "descriptor": "(Ljava/io/File;Ljava/lang/String;)V" } ], "score": 1, "label": [] } Quark Script Result ====================== - **ovaa.apk** .. code-block:: TEXT $ python3 CWE-23.py CWE-23 is detected in method, Loversecured/ovaa/providers/TheftOverwriteProvider; openFile (Landroid/net/Uri; Ljava/lang/String;)Landroid/os/ParcelFileDescriptor; - **InsecureBankv2.apk** .. code-block:: TEXT $ python3 CWE-23.py CWE-23 is detected in method, Lcom/android/insecurebankv2/ViewStatement; onCreate (Landroid/os/Bundle;)V Detect CWE-338 in Android Application (pivva.apk) ------------------------------------------------------ This scenario aims to detect the **Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG).** See `CWE-338 `_ for more details. To demonstrate how the Quark script finds this vulnerability, we will use the `pivaa `_ APK file and the above APIs. First, we design a detection rule useMethodOfPRNG.json to spot on behavior that uses Pseudo Random Number Generator (PRNG). Then, we use API ``getXrefFrom()`` to get the caller method of PRNG. Finally, we use some keywords such as “token”, “password”, and “encrypt” to check if the PRNG is for credential usage. Quark Script CWE-338.py ======================== .. code-block:: python from quark.script import runQuarkAnalysis, Rule SAMPLE_PATH = "pivaa.apk" RULE_PATH = "useMethodOfPRNG.json" CREDENTIAL_KEYWORDS = [ "token", "password", "account", "encrypt", "authentication", "authorization", "id", "key" ] ruleInstance = Rule(RULE_PATH) quarkResult = runQuarkAnalysis(SAMPLE_PATH, ruleInstance) for usePRNGMethod in quarkResult.behaviorOccurList: for prngCaller in usePRNGMethod.methodCaller.getXrefFrom(): if any(keyword in prngCaller.fullName for keyword in CREDENTIAL_KEYWORDS): print("CWE-338 is detected in %s" % prngCaller.fullName) useMethodOfPRNG.json ======================== .. code-block:: json { "crime": "Use method of PRNG", "permission": [], "api": [ { "class": "Ljava/util/Random;", "method": "", "descriptor": "()V" }, { "class": "Ljava/util/Random;", "method": "nextInt", "descriptor": "(I)I" } ], "score": 1, "label": [] } Quark Script Result =================== .. code-block:: TEXT $ python CWE-338.py CWE-338 is detected in Lcom/htbridge/pivaa/EncryptionActivity$2; onClick (Landroid/view/View;)V quark-engine-23.4.1/docs/source/rule_generation.rst000066400000000000000000000065171442215066700223530ustar00rootroot00000000000000++++++++++++++++++++++++++++++++++++++++ Rule Generation ++++++++++++++++++++++++++++++++++++++++ The Rule generation technique is based on the idea below: 1. Sort all APIs used in an APK by their usage counts. 2. Separate all APIs into two groups, P(20% least usage count) and S(other 80% APIs), by the Pareto principle (20-80 rule). 3. Combine $P$ and $S$ into four different phases: - PxP - PxS - SxP - SxS 4. Execute the rule generation with each phase in this order: PxP -> PxS -> SxP -> SxS The earlier the phase, the higher the value of the rule but less time spent. We can generate rules in a phased manner according to different situations. For example, under a time constraint, we can take PxP phase rules as an overview for the target APK. CLI Usage ------------------------ Generate rules for APK with the following command:: $ quark -a --generate-rule Generate rules and web editor with the following command:: $ quark -a --generate-rule -w API Usage ----------------------------------- And here is the simplest way for API usage: .. code-block:: python from quark.rulegeneration import RuleGeneration # The target APK. APK_PATH = "Ahmyth.apk" # The output directory for generated rules. GENERATED_RULE_DIR = "generated_rules" generator = RuleGeneration(APK_PATH, GENERATED_RULE_DIR) generator.generate_rule(web_editor="report.html") Web Editor Tutorial ----------------------------------- Here is the demo for the rule generation web editor. You can easily review and edit generated rules with 5 steps: 1. Input keywords to search rules. 2. Select the generated rules you want to save. 3. Edit rule information. .. image:: https://i.imgur.com/0FLlGq0.png 4. Edit crime, score, and labels with the editor. 5. Save the edited rule. .. image:: https://i.imgur.com/kIVIeCk.png Radiocontrast ----------------------------------- Radiocontrast is a Quark API that quickly generates Quark rules from a specified method. It builds up 100% matched rules by using native APIs in that method. The feature lets you easily expose the behavior of a method, just like radiocontrast. For example, we want to know the behavior of a method called ``Lahmyth/mine/king/ahmyth/CameraManager;->startUp(I)V,`` in Ahmyth.apk. Here is the simplest way for Radiocontrast usage: .. code-block:: python from quark.radiocontrast import RadioContrast # The target APK. APK_PATH = "Ahmyth.apk" # The method that you want to generate rules. TARGET_METHOD = "Lahmyth/mine/king/ahmyth/CameraManager;->startUp(I)V" # The output directory for generated rules. GENERATED_RULE_DIR = "~/generated_rules" radiocontrast = RadioContrast( APK_PATH, TARGET_METHOD, GENERATED_RULE_DIR ) radiocontrast.generate_rule() Use web editor to manage generated rules, you can define the parameter ``web_editor`` in ``generate_rule()`` as the path of output html file:: radiocontrast.generate_rule(web_editor="ahmyth.html") The parameter ``percentile_rank`` in ``generate_rule()`` as the percentile number of API filter rank. For example, if you want to keep the 20% least usage count APIs, set the percentile_rank as 0.2:: radiocontrast.generate_rule(percentile_rank=0.2) quark-engine-23.4.1/docs/source/testing.rst000066400000000000000000000014421442215066700206360ustar00rootroot00000000000000++++++++++++++++++++ Testing Quark-Engine ++++++++++++++++++++ Firstly let's fetch some apk examples. .. code-block:: bash $ git clone https://github.com/quark-engine/apk-samples.git Then we could test one of the apk in `apk-samples/malware-samples` by the rules `quark-rules`. For example: .. code-block:: bash $ quark -a Ahmyth.apk -s Running in Docker ================= We could build the corresponding docker image by this command: .. code-block:: bash docker build . -t quark When the image is ready, let's run an example to test the image: You may also interactively use quark in the docker container. For example: .. code-block:: bash $ docker run -v $(pwd):/tmp -it quark bash (in-docker): /app/quark# cd /tmp (in-docker)::/tmp# quark -a Ahmyth.apk -s quark-engine-23.4.1/quark/000077500000000000000000000000001442215066700153215ustar00rootroot00000000000000quark-engine-23.4.1/quark/__init__.py000066400000000000000000000000271442215066700174310ustar00rootroot00000000000000__version__ = "23.4.1" quark-engine-23.4.1/quark/cli.py000066400000000000000000000323101442215066700164410ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import json import os import click import numpy as np from tqdm import tqdm from quark import __version__, config from quark.core.parallelquark import ParallelQuark from quark.core.quark import Quark from quark.core.struct.ruleobject import RuleObject from quark.logo import logo from quark.rulegeneration import RuleGeneration from quark.utils.colors import yellow from quark.utils.graph import select_label_menu, show_comparison_graph from quark.utils.pprint import print_info, print_success, print_warning from quark.utils.weight import Weight from quark.webreport.generate import ReportGenerator logo() @click.version_option(version=__version__) @click.command(no_args_is_help=True) @click.option( "-s", "--summary", is_flag=False, flag_value="all_rules", help="Show summary report. Optionally specify the name of a rule/label", ) @click.option( "-d", "--detail", is_flag=False, flag_value="all_rules", help="Show detail report. Optionally specify the name of a rule/label", ) @click.option( "-o", "--output", help="Output report in JSON", type=click.Path(exists=False, file_okay=True, dir_okay=False), required=False, ) @click.option( "-w", "--webreport", help="Generate web report", type=click.Path(exists=False, file_okay=True, dir_okay=False), required=False, ) @click.option( "-a", "--apk", help="APK file", type=click.Path(exists=True, file_okay=True, dir_okay=False), required=True, multiple=True, ) @click.option( "-r", "--rule", help="Rules directory", type=click.Path(exists=True, file_okay=True, dir_okay=True), default=f"{config.DIR_PATH}", required=False, show_default=True, ) @click.option( "-g", "--graph", is_flag=False, help="Create call graph to call_graph_image directory", flag_value="png", type=click.Choice(["png", "json"]), required=False, ) @click.option( "-c", "--classification", is_flag=True, help="Show rules classification", required=False, ) @click.option( "-t", "--threshold", help="Set the lower limit of the confidence threshold", type=click.Choice(["100", "80", "60", "40", "20"]), required=False, ) @click.option( "-i", "--list", help="List classes, methods and descriptors", type=click.Choice(["all", "native", "custom"]), required=False, ) @click.option( "-p", "--permission", help="List Android permissions", is_flag=True, required=False, ) @click.option( "-l", "--label", help="Show report based on label of rules", type=click.Choice(["max", "detailed"]), required=False, ) @click.option( "-C", "--comparison", help="Behaviors comparison based on max confidence of rule labels", required=False, is_flag=True, ) @click.option( "--generate-rule", "rule_generation", help="Generate rules and output to given directory", type=click.Path(exists=True, file_okay=False, dir_okay=True), required=False, ) @click.option( "--core-library", "core_library", help="Specify the core library used to analyze an APK", type=click.Choice(("androguard", "rizin"), case_sensitive=False), required=False, default="androguard", ) @click.option( "--multi-process", "num_of_process", type=click.IntRange(min=1), help="Allow analyzing APK with N processes, where N doesn't exceeds" + " the number of usable CPUs - 1 to avoid memory exhaustion.", required=False, default=1, ) def entry_point( summary, detail, rule_generation, apk, rule, output, webreport, graph, classification, threshold, list, permission, label, comparison, core_library, num_of_process, ): """Quark is an Obfuscation-Neglect Android Malware Scoring System""" # Load rules rule_buffer_list = [] rule_filter = summary or detail # Determine the location of rules if rule_filter and rule_filter.endswith("json"): if not os.path.isfile(rule_filter): print_warning( f"Specified rule not found.\n" f"If you want to specify one of the rules of Quark-Rule, " f"use {yellow(f'{config.DIR_PATH}/{rule_filter}')} " f"as an argument." ) return rule_path_list = [rule_filter] else: rule_path_list = [ os.path.join(dir_path, file) for dir_path, _, file_list in os.walk(rule) for file in file_list if file.endswith("json") ] # Load rules into memory update_rule_buffer(rule_buffer_list, rule_path_list) # Determine if the user provide a rule label if ( rule_filter and rule_filter != "all_rules" and not rule_filter.endswith("json") ): rule_checker_list = [ rule_checker for rule_checker in rule_buffer_list if rule_filter in rule_checker.label ] else: rule_checker_list = rule_buffer_list if comparison: # selection of labels on which it will be done the comparison on radar chart # first look for all label found in the rule list all_labels = set() # array type, e.g. ['network', 'collection'] for rule_checker in rule_checker_list: all_labels.update(rule_checker.label) # let user choose a list of label on which it will be performed the analysis selected_label = np.array( select_label_menu(all_labels, min_labels=5, max_labels=15) ) # perform label based analysis on the apk_ malware_confidences = {} for apk_ in apk: data = ( ParallelQuark(apk_, core_library, num_of_process) if num_of_process > 1 else Quark(apk_, core_library) ) all_labels = {} # dictionary containing # key: label # value: list of confidence values # $ print(all_rules["accessibility service"]) # > [60, 40, 60, 40, 60, 40] # analyse malware only on rules where appears label selected rule_checker_list = [ rule_checker for rule_checker in rule_buffer_list if len(np.intersect1d(rule_checker.label, selected_label)) != 0 ] if num_of_process > 1: data.apply_rules(rule_checker_list) for rule_checker in tqdm(rule_checker_list): # Run the checker data.run(rule_checker) confidence = rule_checker.check_item.count(True) * 20 labels = ( rule_checker.label ) # array type, e.g. ['network', 'collection'] for single_label in labels: if single_label in all_labels: all_labels[single_label].append(confidence) else: all_labels[single_label] = [confidence] # extrapolate data used to plot radar chart radar_data = {} for _label in selected_label: confidences = np.array(all_labels[_label]) # on radar data use the maximum confidence for a certain label radar_data[_label] = np.max(confidences) radar_confidence = [ value_ for _label, value_ in radar_data.items() ] malware_confidences[apk_.split("/")[-1]] = radar_confidence show_comparison_graph( title=f"Malicious Actions Comparison Between {len(apk)} Malwares", labels=selected_label, malware_confidences=malware_confidences, font_size=22, ) return # Load APK data = ( ParallelQuark(apk[0], core_library, num_of_process) if num_of_process > 1 else Quark(apk[0], core_library) ) if label: all_labels = {} # dictionary containing # key: label # value: list of confidence values # $ print(all_rules["accessibility service"]) # > [60, 40, 60, 40, 60, 40] if num_of_process > 1: data.apply_rules(rule_buffer_list) for rule_checker in tqdm(rule_buffer_list): # Run the checker data.run(rule_checker) confidence = rule_checker.check_item.count(True) * 20 labels = ( rule_checker.label ) # array type, e.g. ['network', 'collection'] for single_label in labels: if single_label in all_labels: all_labels[single_label].append(confidence) else: all_labels[single_label] = [confidence] # get how many label with max confidence >= 80% counter_high_confidence = sum( max(value) >= 80 for single_label, value in all_labels.items() ) print_info(f"Total Label found: {yellow(len(all_labels))}") print_info( f"Rules with label which max confidence >= 80%: {yellow(counter_high_confidence)}" ) data.show_label_report(rule, all_labels, label) print(data.quark_analysis.label_report_table) # Show summary report if summary: if isinstance(data, ParallelQuark): data.apply_rules(rule_checker_list) for rule_checker in tqdm(rule_checker_list): # Run the checker data.run(rule_checker) data.show_summary_report(rule_checker, threshold) w = Weight( data.quark_analysis.score_sum, data.quark_analysis.weight_sum ) print_warning(w.calculate()) print_info(f"Total Score: {data.quark_analysis.score_sum}") print(data.quark_analysis.summary_report_table) if classification: data.show_rule_classification() if graph: data.show_call_graph(graph) # Show detail report if detail: threshold_number = int(threshold) if threshold else 0 if isinstance(data, ParallelQuark): data.apply_rules(rule_checker_list) for rule_checker in tqdm(rule_checker_list): # Run the checker data.run(rule_checker) confidence = rule_checker.check_item.count(True) * 20 if confidence >= threshold_number: print( f"Rulepath: " f"{os.path.join(rule, rule_checker.rule_filename)}" ) print(f"Rule crime: {rule_checker.crime}") data.show_detail_report(rule_checker) print_success("OK") if classification: data.show_rule_classification() if graph: data.show_call_graph() if rule_generation: generator = RuleGeneration(apk[0], rule_generation) if webreport: if ".html" not in webreport: webreport = f"{webreport}.html" webreport_file = os.path.join(rule_generation, webreport) generator.generate_rule(web_editor=webreport_file) else: generator.generate_rule() # Show JSON report if output: if isinstance(data, ParallelQuark): data.apply_rules(rule_buffer_list) for rule_checker in tqdm(rule_buffer_list): # Run the checker data.run(rule_checker) data.generate_json_report(rule_checker) json_report = data.get_json_report() with open(output, "w") as file: json.dump(json_report, file, indent=4) file.close() # Generate web report if webreport: if summary or detail: for rule_checker in tqdm(rule_buffer_list): data.generate_json_report(rule_checker) json_report = data.get_json_report() report_html = ReportGenerator( json_report).get_analysis_report_html() if ".html" not in webreport: webreport = f"{webreport}.html" with open(webreport, "w") as file: file.write(report_html) file.close() if list: if list == "all": for all_method in data.apkinfo.all_methods: print(all_method.full_name) if list == "native": for api in data.apkinfo.android_apis: print(api.full_name) if list == "custom": for custom_method in data.apkinfo.custom_methods: print(custom_method.full_name) if permission: for p in data.apkinfo.permissions: print(p) if isinstance(data, ParallelQuark): data.close() def update_rule_buffer(rule_buffer_list, rule_path_list): for rule_path in rule_path_list: with open(rule_path, "r") as json_file: json_data = json.loads(json_file.read()) if isinstance(json_data, list): for rule_data in json_data: rule_buffer_list.append(RuleObject(rule_path, rule_data)) else: rule_buffer_list.append(RuleObject(rule_path, json_data)) if __name__ == "__main__": entry_point() quark-engine-23.4.1/quark/config.py000066400000000000000000000006051442215066700171410ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from pathlib import Path HOME_DIR = f"{Path.home()}/.quark-engine/" SOURCE = "https://github.com/quark-engine/quark-rules" DIR_PATH = f"{HOME_DIR}quark-rules/rules" DEBUG = False Path(HOME_DIR).mkdir(parents=True, exist_ok=True) quark-engine-23.4.1/quark/core/000077500000000000000000000000001442215066700162515ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/__init__.py000066400000000000000000000000001442215066700203500ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/analysis.py000066400000000000000000000042331442215066700204500ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from collections import defaultdict from prettytable import PrettyTable def init_pretty_table(): # Pretty Table Output tb = PrettyTable() tb.field_names = ["Filename", "Rule", "Confidence", "Score", "Weight"] tb.align = "l" return tb def init_label_report_table(): # Pretty Table Output tb = PrettyTable() tb.field_names = [ "Label", "Description", "Number of rules", "MAX Confidence %", ] tb.align = "l" tb.sortby = "Number of rules" tb.reversesort = True return tb class QuarkAnalysis: __slots__ = [ "crime_description", "first_api", "second_api", "level_1_result", "level_2_result", "level_3_result", "level_4_result", "level_5_result", "json_report", "weight_sum", "score_sum", "summary_report_table", "label_report_table", "call_graph_analysis_list", "parent_wrapper_mapping", ] def __init__(self): self.crime_description = "" self.first_api = None self.second_api = None self.level_1_result = [] self.level_2_result = [] self.level_3_result = [] self.level_4_result = [] self.level_5_result = [] # Json report self.json_report = [] # Sum of the each weight self.weight_sum = 0 # Sum of the each rule self.score_sum = 0 self.summary_report_table = init_pretty_table() # label report self.label_report_table = init_label_report_table() # Call graph analysis self.call_graph_analysis_list = [] # Mapping between the parent function and the wrapper method self.parent_wrapper_mapping = defaultdict(str) def clean_result(self): self.level_1_result.clear() self.level_2_result.clear() self.level_3_result.clear() self.level_4_result.clear() self.level_5_result.clear() if __name__ == "__main__": pass quark-engine-23.4.1/quark/core/apkinfo.py000066400000000000000000000262731442215066700202640ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import functools import re from collections import defaultdict from os import PathLike from typing import Dict, List, Optional, Set, Union from androguard.core.analysis.analysis import MethodAnalysis from androguard.core.bytecodes.dvm_types import Operand from androguard.misc import AnalyzeAPK, AnalyzeDex from quark.core.interface.baseapkinfo import BaseApkinfo, XMLElement from quark.core.struct.bytecodeobject import BytecodeObject from quark.core.struct.methodobject import MethodObject from quark.evaluator.pyeval import PyEval class AndroguardImp(BaseApkinfo): """Information about apk based on androguard analysis""" __slots__ = ("apk", "dalvikvmformat", "analysis") def __init__(self, apk_filepath: Union[str, PathLike]): super().__init__(apk_filepath, "androguard") if self.ret_type == "APK": # return the APK, list of DalvikVMFormat, and Analysis objects self.apk, self.dalvikvmformat, self.analysis = AnalyzeAPK(apk_filepath) elif self.ret_type == "DEX": # return the sha256hash, DalvikVMFormat, and Analysis objects _, _, self.analysis = AnalyzeDex(apk_filepath) else: raise ValueError("Unsupported File type.") @property def permissions(self) -> List[str]: if self.ret_type == "APK": return self.apk.get_permissions() if self.ret_type == "DEX": return [] @property def application(self) -> XMLElement: """Get the application element from the manifest file. :return: an application element """ if self.ret_type == "DEX": return [] manifest_root = self.apk.get_android_manifest_xml() return manifest_root.find("application") @property def activities(self) -> List[XMLElement]: if self.ret_type == "DEX": return [] manifest_root = self.apk.get_android_manifest_xml() application = manifest_root.find("application") return application.findall("activity") @property def receivers(self) -> List[XMLElement]: """ Return all receivers from the given APK. :return: a list of all receivers """ if self.ret_type == "DEX": return [] manifest_root = self.apk.get_android_manifest_xml() application = manifest_root.find("application") return application.findall("receiver") @property def android_apis(self) -> Set[MethodObject]: apis = set() for external_cls in self.analysis.get_external_classes(): for meth_analysis in external_cls.get_methods(): if meth_analysis.is_android_api(): apis.add(meth_analysis) return {self._convert_to_method_object(api) for api in apis} @property def custom_methods(self) -> Set[MethodObject]: return { self._convert_to_method_object(meth_analysis) for meth_analysis in self.analysis.get_methods() if not meth_analysis.is_external() } @property def all_methods(self) -> Set[MethodObject]: return { self._convert_to_method_object(meth_analysis) for meth_analysis in self.analysis.get_methods() } @functools.lru_cache() def find_method( self, class_name: Optional[str] = ".*", method_name: Optional[str] = ".*", descriptor: Optional[str] = ".*", ) -> List[MethodObject]: if not class_name: class_name = ".*" if class_name != ".*": regex_class_name = re.escape(class_name) else: regex_class_name = class_name if not method_name: method_name = ".*" if method_name != ".*": regex_method_name = f"^{re.escape(method_name)}$" else: regex_method_name = f"^{method_name}$" if not descriptor: descriptor = ".*" if descriptor != ".*": regex_descriptor = re.escape(descriptor) else: regex_descriptor = descriptor method_result = self.analysis.find_methods( classname=regex_class_name, methodname=regex_method_name, descriptor=regex_descriptor, ) return [self._convert_to_method_object(item) for item in method_result] @functools.lru_cache() def upperfunc(self, method_object: MethodObject) -> Set[MethodObject]: method_analysis = method_object.cache return { self._convert_to_method_object(call) for _, call, _ in method_analysis.get_xref_from() } def lowerfunc(self, method_object: MethodObject) -> Set[MethodObject]: method_analysis = method_object.cache return { (self._convert_to_method_object(call), offset) for _, call, offset in method_analysis.get_xref_to() } def get_method_bytecode( self, method_object: MethodObject ) -> Set[MethodObject]: method_analysis = method_object.cache try: for ( _, ins, ) in method_analysis.get_method().get_instructions_idx(): bytecode_obj = None register_list = [] # count the number of the registers. length_operands = len(ins.get_operands()) if length_operands == 0: # No register, no parameter bytecode_obj = BytecodeObject( ins.get_name(), None, None, ) else: index_of_parameter_starts = None for i in range(length_operands - 1, -1, -1): if ( not isinstance(ins.get_operands()[i][0], Operand) or ins.get_operands()[i][0].name != "REGISTER" ): index_of_parameter_starts = i break if index_of_parameter_starts is not None: parameter = ins.get_operands()[ index_of_parameter_starts ] parameter = ( parameter[2] if len(parameter) == 3 else parameter[1] ) for i in range(index_of_parameter_starts): register_list.append( "v" + str(ins.get_operands()[i][1]), ) else: parameter = None for i in range(length_operands): register_list.append( "v" + str(ins.get_operands()[i][1]), ) bytecode_obj = BytecodeObject( ins.get_name(), register_list, parameter ) yield bytecode_obj except AttributeError: # TODO Log the rule here pass def get_strings(self) -> str: return { str(string_analysis.get_orig_value()) for string_analysis in self.analysis.get_strings() } @functools.lru_cache() def _construct_bytecode_instruction(self, instruction): """ Construct a list of strings from the given bytecode instructions. :param instruction: instruction instance from androguard :return: a list with bytecode instructions strings """ instruction_list = [instruction.get_name()] reg_list = [] # count the number of the registers. length_operands = len(instruction.get_operands()) if length_operands == 0: # No register, no parameter return instruction_list elif length_operands == 1: # Only one register reg_list.append(f"v{instruction.get_operands()[length_operands - 1][1]}") instruction_list.extend(reg_list) return instruction_list elif length_operands >= 2: # the last one is parameter, the other are registers. parameter = instruction.get_operands()[length_operands - 1] for i in range(length_operands - 1): reg_list.append( "v" + str(instruction.get_operands()[i][1]), ) parameter = parameter[2] if len(parameter) == 3 else parameter[1] instruction_list.extend(reg_list) instruction_list.append(parameter) return instruction_list @functools.lru_cache() def get_wrapper_smali( self, parent_method: MethodObject, first_method: MethodObject, second_method: MethodObject, ) -> Dict[str, Union[BytecodeObject, str]]: method_analysis = parent_method.cache result = { "first": None, "first_hex": None, "second": None, "second_hex": None, } first_method_pattern = PyEval.get_method_pattern( first_method.class_name, first_method.name, first_method.descriptor ) second_method_pattern = PyEval.get_method_pattern( second_method.class_name, second_method.name, second_method.descriptor, ) for _, ins in method_analysis.get_method().get_instructions_idx(): if first_method_pattern in str(ins): result["first"] = self._construct_bytecode_instruction(ins) result["first_hex"] = ins.get_hex() if second_method_pattern in str(ins): result["second"] = self._construct_bytecode_instruction(ins) result["second_hex"] = ins.get_hex() return result @property def superclass_relationships(self) -> Dict[str, Set[str]]: hierarchy_dict = defaultdict(set) for _class in self.analysis.get_classes(): hierarchy_dict[str(_class.name)].add(str(_class.extends)) hierarchy_dict[str(_class.name)].union( str(implements) for implements in _class.implements ) return hierarchy_dict @property def subclass_relationships(self) -> Dict[str, Set[str]]: hierarchy_dict = defaultdict(set) for _class in self.analysis.get_classes(): class_name = str(_class.name) hierarchy_dict[str(_class.extends)].add(class_name) for implements in _class.implements: hierarchy_dict[str(implements)].add(class_name) return hierarchy_dict @staticmethod @functools.lru_cache def _convert_to_method_object( method_analysis: MethodAnalysis, ) -> MethodObject: return MethodObject( access_flags=method_analysis.access, class_name=str(method_analysis.class_name), name=str(method_analysis.name), descriptor=str(method_analysis.descriptor), cache=method_analysis, ) quark-engine-23.4.1/quark/core/axmlreader/000077500000000000000000000000001442215066700203755ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/axmlreader/__init__.py000066400000000000000000000312221442215066700225060ustar00rootroot00000000000000import enum import functools import os.path from collections import namedtuple from typing import Any, Dict, Iterator, List from xml.etree.ElementTree import Element as XMLElement # nosec B405 from xml.etree.ElementTree import ElementTree as XMLElementTree # nosec B405 import pkg_resources import rzpipe # Resource Types Definition # Please reference to # https://android.googlesource.com/platform/frameworks/base/+/master/libs/androidfw/include/androidfw/ResourceTypes.h # ResChunk_header types RES_NULL_TYPE = 0x0000 RES_STRING_POOL_TYPE = 0x0001 RES_TABLE_TYPE = 0x0002 RES_XML_TYPE = 0x0003 # Chunk types in RES_XML_TYPE RES_XML_FIRST_CHUNK_TYPE = 0x0100 RES_XML_START_NAMESPACE_TYPE = 0x0100 RES_XML_END_NAMESPACE_TYPE = 0x0101 RES_XML_START_ELEMENT_TYPE = 0x0102 RES_XML_END_ELEMENT_TYPE = 0x0103 RES_XML_CDATA_TYPE = 0x0104 RES_XML_LAST_CHUNK_TYPE = 0x017F RES_XML_RESOURCE_MAP_TYPE = 0x0180 # Chunk types in RES_TABLE_TYPE RES_TABLE_PACKAGE_TYPE = 0x0200 RES_TABLE_TYPE_TYPE = 0x0201 RES_TABLE_TYPE_SPEC_TYPE = 0x0202 RES_TABLE_LIBRARY_TYPE = 0x0203 RES_TABLE_OVERLAYABLE_TYPE = 0x0204 RES_TABLE_OVERLAYABLE_POLICY_TYPE = 0x0205 ResChunkHeader = Dict[str, Any] ResValue = namedtuple( "ResValue", ["namespace", "name", "type", "value", "data"] ) class Res_value_type(enum.Enum): """ List all possible types of a value in the Android XML binary. """ TYPE_NULL = 0x00 TYPE_REFERENCE = 0x01 TYPE_ATTRIBUTE = 0x02 TYPE_STRING = 0x03 TYPE_FLOAT = 0x04 TYPE_DIMENSION = 0x05 TYPE_FRACTION = 0x06 TYPE_DYNAMIC_REFERENCE = 0x07 TYPE_DYNAMIC_ATTRIBUTE = 0x08 TYPE_FIRST_INT = 0x10 TYPE_INT_DEC = 0x10 TYPE_INT_HEX = 0x11 TYPE_INT_BOOLEAN = 0x12 TYPE_FIRST_COLOR_INT = 0x1C TYPE_INT_COLOR_ARGB8 = 0x1C TYPE_INT_COLOR_RGB8 = 0x1D TYPE_INT_COLOR_ARGB4 = 0x1E TYPE_INT_COLOR_RGB4 = 0x1F TYPE_LAST_COLOR_INT = 0x1F TYPE_LAST_INT = 0x1F class AxmlException(Exception): """ A Exception for AxmlReader """ def __init__(self, message): super(AxmlException, self).__init__(message) class AxmlReader(object): """ A Class that parses the Android XML file """ def __init__(self, file_path, structure_path=None): if structure_path is None: structure_path = pkg_resources.resource_filename( "quark.core.axmlreader", "axml_definition" ) if not os.path.isfile(structure_path): raise AxmlException( f"Cannot find printing format definition file" f" of Rizin in {structure_path}" ) self._rz = rzpipe.open(file_path) self._rz.cmd(f"pfo {structure_path}") self._file_size = int(self._rz.cmd("i~size[1]"), 16) self._ptr = 0 self._cache = {} if self._file_size > 0xFFFF_FFFF: raise AxmlException("Filesize exceeds theoretical upper bound.") elif self._file_size < 8: raise AxmlException("Filesize exceeds theoretical lower bound.") # File Header header = self._rz.cmdj("pfj axml_ResChunk_header @ 0x0") self._data_type = header[0]["value"] self._axml_size = header[2]["value"] header_size = header[1]["value"] if self._data_type != RES_XML_TYPE or header_size != 0x8: raise AxmlException( f"Error parsing first header(type: {self._data_type}," f" size: {header_size})." ) if self._axml_size > self._file_size: raise AxmlException( f"Decleared size ({self._axml_size} bytes) is" f" larger than total size({self._file_size})." ) self._ptr += 8 if self._ptr >= self._axml_size: return # String Pool string_pool_header = self._rz.cmdj("pfj axml_ResStringPool_header @ 8") string_pool_size = string_pool_header[0]["value"][2]["value"] if string_pool_size > self._axml_size - self._ptr: raise AxmlException( f"Error parsing string pool, there should" f" be {string_pool_size}" f" bytes but only {self._axml_size - self._ptr} bytes." ) header = string_pool_header[0]["value"] header_type = header[0]["value"] header_size = header[1]["value"] if header_type != RES_STRING_POOL_TYPE: raise AxmlException( f"Error parsing string pool, expect string pool" f" data at {self._ptr} bytes." ) if header_size != 28: raise AxmlException( f"Error parsing string pool, heardsize should " f"be 16 bytes rather than { header_size } bytes." ) self._stringCount = string_pool_header[1]["value"] stringStart = string_pool_header[4]["value"] self._rz.cmd(f"f string_pool_header @ 0x8 ") string_pool_index = header_size + self._ptr self._rz.cmd(f"f string_pool_index @ { string_pool_index }") string_pool_data = stringStart + self._ptr self._rz.cmd(f"f string_pool_data @ { string_pool_data }") self._ptr += string_pool_size if self._ptr >= self._axml_size: return # Resource Map (Optional) header = self._rz.cmdj(f"pfj axml_ResChunk_header @ {self._ptr}") header_type = header[0]["value"] if header_type == RES_XML_RESOURCE_MAP_TYPE: map_size = header[2]["value"] # Skip all the resource map if map_size > self._axml_size - self._ptr: raise AxmlException( f"Map size should be {map_size} bytes rather" f" than {self._axml_size - self._ptr} bytes." ) self._ptr += map_size if self._ptr >= self._axml_size: return def __iter__(self) -> Iterator[ResChunkHeader]: """Get an iterator that walks through the content of the Android XML binary. :raises AxmlException: if the given file is not a valid Android XML binary :yield: header of a resource chunk defined in the binary """ while self._axml_size - self._ptr >= 16: header = self._rz.cmdj(f"pfj axml_ResXMLTree_node @ {self._ptr}") node_type = header[0]["value"][0]["value"] header_size = header[0]["value"][1]["value"] node_size = header[0]["value"][2]["value"] if header_size != 16: raise AxmlException( f"heardsize should be 16 bytes rather" f" than { header_size } bytes." ) if node_size > self._axml_size - self._ptr: raise AxmlException( f"Not enough data left, need {node_size} bytes" f" but {self._axml_size - self._ptr} bytes left." ) ext_ptr = self._ptr + 16 chunk = {"Address": self._ptr, "Type": node_type} if node_type == RES_XML_START_ELEMENT_TYPE: ext = self._rz.cmdj( f"pfj axml_ResXMLTree_attrExt @ { ext_ptr }" ) chunk["Namespace"] = ext[0]["value"][0]["value"] chunk["Name"] = ext[1]["value"][0]["value"] # Attributes # node['AttrCount'] = ext[4]['value'] elif node_type == RES_XML_END_ELEMENT_TYPE: ext = self._rz.cmdj( f"pfj axml_ResXMLTree_endElementExt @ { ext_ptr }" ) chunk["Namespace"] = ext[0]["value"][0]["value"] chunk["Name"] = ext[1]["value"][0]["value"] elif node_type in [ RES_XML_START_NAMESPACE_TYPE, RES_XML_END_NAMESPACE_TYPE, ]: ext = self._rz.cmdj( f"pfj axml_ResXMLTree_namespaceExt @ { ext_ptr }" ) chunk["Prefix"] = ext[0]["value"][0]["value"] chunk["Uri"] = ext[1]["value"][0]["value"] elif node_type == RES_XML_CDATA_TYPE: ext = self._rz.cmdj( f"pfj axml_ResXMLTree_cdataExt @ { ext_ptr }" ) chunk["Data"] = ext[0]["value"][0]["value"] # typedData else: self._ptr = self._ptr + node_size continue self._ptr = self._ptr + node_size yield chunk @property def file_size(self): return self._file_size @property def axml_size(self): return self._axml_size @functools.lru_cache() def get_string(self, index): if index < 0 or index >= self._stringCount: return None return self._rz.cmdj( f"pfj Z @ string_pool_data + `pfv n4 " f"@ string_pool_index+ {index}*4` + 2" )[0]["string"] def get_attributes(self, chunk: ResChunkHeader) -> List[ResValue]: """Get the attributes of a resource chunk :param chunk: header of a resource chunk :return: python list that holds attributes """ if chunk["Type"] != RES_XML_START_ELEMENT_TYPE: return None extAddress = int(chunk["Address"]) + 16 attrExt = self._rz.cmdj(f"pfj axml_ResXMLTree_attrExt @ {extAddress}") attrAddress = extAddress + attrExt[2]["value"] attributeSize = attrExt[3]["value"] attributeCount = attrExt[4]["value"] attributes = [] for _ in range(attributeCount): attr = self._rz.cmdj( f"pfj axml_ResXMLTree_attribute @ {attrAddress}" ) value = ResValue( namespace=attr[0]["value"][0]["value"], name=attr[1]["value"][0]["value"], value=attr[2]["value"][0]["value"], type=attr[3]["value"][2]["value"], data=attr[3]["value"][3]["value"], ) attributes.append(value) attrAddress = attrAddress + attributeSize return attributes def __convert_tag_to_xml_element( self, chunk: ResChunkHeader ) -> XMLElement: """Convert a resource chunk in the Android XML binary into an XMLElement instance. :param chunk: header of a resource chunk in the Android XML binary :return: XMLElement instance """ name = self.get_string(chunk["Name"]) attributes = {} for raw_attribute in self.get_attributes(chunk): attr_namespace = self.get_string(raw_attribute.namespace) attr_name = self.get_string(raw_attribute.name) data_type = raw_attribute.type raw_data = raw_attribute.data if data_type == Res_value_type.TYPE_STRING.value: value = self.get_string(raw_data) elif data_type == Res_value_type.TYPE_INT_BOOLEAN.value: value = bool(abs(raw_data)) else: value = raw_attribute.data if attr_namespace: attr_name = "{" + attr_namespace + "}" + attr_name attributes[attr_name] = value return XMLElement(name, attributes) def __find_manifest( self, chunk_iterator: Iterator[ResChunkHeader] ) -> XMLElement: """Find the resource chunk of the first XML label named manifest and convert it into an XMLElement instance. :param chunk_iterator: iterator of the resource chunk headers :return: XMLElement instance """ manifest_chunk = next( ( chunk for chunk in chunk_iterator if chunk["Type"] == RES_XML_START_ELEMENT_TYPE and self.get_string(chunk["Name"]) == "manifest" ), None, ) if manifest_chunk: return self.__convert_tag_to_xml_element(manifest_chunk) def get_xml_tree(self) -> XMLElementTree: """ Return the parsed XML corresponding to the AndroidManifest.xml file. :return: the content of the file """ file_iterator = iter(self) root = self.__find_manifest(file_iterator) stack = [root] for tag in file_iterator: tag_type = tag["Type"] if tag_type == RES_XML_END_ELEMENT_TYPE: stack.pop() elif tag_type == RES_XML_START_ELEMENT_TYPE: element = self.__convert_tag_to_xml_element(tag) parent = stack[-1] parent.append(element) stack.append(element) return XMLElementTree(root) def __del__(self): try: self._rz.quit() except BaseException: pass quark-engine-23.4.1/quark/core/axmlreader/axml_definition000066400000000000000000000024111442215066700234670ustar00rootroot00000000000000# Base Type pf.axml_ResChunk_header n2n2n4 type headersize size pf.axml_Res_value n2n1n1n4 size res0 datatype data # String Pool pf.axml_ResStringPool_ref n4 index pf.axml_ResStringPool_header ?n4n4n4n4n4 (axml_ResChunk_header)header stringCount styleCount flags stringStart styleStart # XML Part pf.axml_ResXMLTree_header ? (axml_ResChunk_header)header pf.axml_ResXMLTree_node ?n4? (axml_ResChunk_header)header lineNumber (axml_ResStringPool_ref)comment pf.axml_ResXMLTree_cdataExt ?? (axml_ResStringPool_ref)data (axml_Res_value)typedData pf.axml_ResXMLTree_namespaceExt ?? (axml_ResStringPool_ref)prefix (axml_ResStringPool_ref)uri pf.axml_ResXMLTree_endElementExt ?? (axml_ResStringPool_ref)ns (axml_ResStringPool_ref)name pf.axml_ResXMLTree_attrExt ??n2n2n2n2n2n2 (axml_ResStringPool_ref)ns (axml_ResStringPool_ref)name attributeStart attributeSize attributeCount idIndex classIndex styleIndex pf.axml_ResXMLTree_attribute ???? (axml_ResStringPool_ref)ns (axml_ResStringPool_ref)name (axml_ResStringPool_ref)rawValue (axml_Res_value)typedValue # Resource Table pf.axml_ResTable_header ?n4 (axml_ResChunk_header)header packageCount pf.axml_ResTable_package ?n4[128]n2n4n4n4n4n4 (axml_ResChunk_header)header id name typeStrings lastPublicType keyStrings lastPublicKey typeIdOffset quark-engine-23.4.1/quark/core/interface/000077500000000000000000000000001442215066700202115ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/interface/__init__.py000066400000000000000000000000001442215066700223100ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/interface/baseapkinfo.py000066400000000000000000000141001442215066700230410ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import hashlib import os.path from abc import abstractmethod from os import PathLike from typing import Dict, List, Optional, Set, Union from xml.etree.ElementTree import Element as XMLElement # nosec B405 from quark.core.struct.bytecodeobject import BytecodeObject from quark.core.struct.methodobject import MethodObject class BaseApkinfo: __slots__ = ["ret_type", "apk_filename", "apk_filepath", "core_library"] def __init__(self, apk_filepath: Union[str, PathLike], core_library: str = "None"): with open(apk_filepath, "rb") as file: raw = file.read() self.ret_type = self._check_file_signature(raw) self.apk_filename = os.path.basename(apk_filepath) self.apk_filepath = apk_filepath self.core_library = core_library def __repr__(self) -> str: return f"" @property def filename(self) -> str: """ Return the filename of apk. :return: a string of apk filename """ return os.path.basename(self.apk_filepath) @property def filesize(self) -> int: """ Return the file size of apk file by bytes. :return: a number of size bytes """ return os.path.getsize(self.apk_filepath) @property def md5(self) -> str: """ Return the md5 checksum of the apk file. :return: a string of md5 checksum of the apk file """ md5 = hashlib.md5() with open(self.apk_filepath, "rb") as f: for chunk in iter(lambda: f.read(4096), b""): md5.update(chunk) return md5.hexdigest() @property @abstractmethod def permissions(self) -> List[str]: """ Return all permissions from given APK. :return: a list of all permissions """ pass @property @abstractmethod def application(self) -> XMLElement: """Get the application element from the manifest file. :return: an application element """ pass @property @abstractmethod def activities(self) -> List[XMLElement]: """ Return all activity from given APK. :return: a list of all activities """ pass @property @abstractmethod def receivers(self) -> List[XMLElement]: """ Return all receivers from the given APK. :return: a list of all receivers """ pass @property @abstractmethod def android_apis(self) -> Set[MethodObject]: """ Return all Android native APIs from given APK. :return: a set of all Android native APIs MethodObject """ pass @property @abstractmethod def custom_methods(self) -> Set[MethodObject]: """ Return all custom methods from given APK. :return: a set of all custom methods MethodObject """ pass @property def all_methods(self) -> Set[MethodObject]: """ Return all methods including Android native API and custom methods from given APK. :return: a set of all method MethodObject """ pass @abstractmethod def find_method( self, class_name: Optional[str] = ".*", method_name: Optional[str] = ".*", descriptor: Optional[str] = ".*", ) -> List[MethodObject]: """ Find method from given class_name, method_name and the descriptor. default is find all method. :param class_name: the class name of the Android API :param method_name: the method name of the Android API :param descriptor: the descriptor of the Android API :return: a list with MethodObjects """ pass @abstractmethod def upperfunc(self, method_object: MethodObject) -> Set[MethodObject]: """ Return the xref from method from given MethodObject instance. :param method_object: the MethodObject instance :return: a set of all xref from functions """ pass @abstractmethod def lowerfunc(self, method_object: MethodObject) -> Set[MethodObject]: """ Return the xref from method from given MethodObject instance. :param method_object: the MethodObject instance :return: a set of all xref from functions """ pass @abstractmethod def get_method_bytecode(self, method_object: MethodObject) -> Set[MethodObject]: """ Return the corresponding bytecode according to the given class name and method name. :param method_object: the MethodObject instance :return: a generator of all bytecode instructions """ pass @abstractmethod def get_strings(self) -> str: pass @abstractmethod def get_wrapper_smali( self, parent_method: MethodObject, first_method: MethodObject, second_method: MethodObject, ) -> Dict[str, Union[BytecodeObject, str]]: """ Return the dict of two method smali code from given MethodObject instance, only for self-defined method. :param method_analysis: :return: { "first": "invoke-virtual v5, Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;", "second": "invoke-virtual v3, v0, v4, Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" } """ pass @property @abstractmethod def superclass_relationships(self) -> Dict[str, Set[str]]: pass @property def get_subclasses(self, class_name) -> Set[str]: pass @staticmethod def _check_file_signature(raw: bytes) -> Optional[str]: if raw[0:3] == b"dex": return "DEX" elif raw[0:2] == b"PK": return "APK" elif raw[0:4] in [b"\x03\x00\x08\x00", b"\x00\x00\x08\x00"]: return "AXML" else: return None quark-engine-23.4.1/quark/core/parallelquark.py000066400000000000000000000101471442215066700214660ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from multiprocessing.pool import Pool from multiprocessing import cpu_count from quark.core.analysis import QuarkAnalysis from quark.core.quark import Quark _quark = None class ParallelQuark(Quark): @staticmethod def _worker_initializer(apk, core_library): global _quark _quark = Quark(apk, core_library) @staticmethod def _worker_analysis(rule_obj): _quark.quark_analysis = QuarkAnalysis() _quark.run(rule_obj) # Pack analysis result def to_raw_method(methodobject): return ( methodobject.class_name, methodobject.name, methodobject.descriptor, ) reached_stage = rule_obj.check_item.count(True) level_4_result = tuple( to_raw_method(method) for method in _quark.quark_analysis.level_4_result ) behavior_list = [ ( to_raw_method(item["parent"]), to_raw_method(item["first_call"]), to_raw_method(item["second_call"]), ) for item in _quark.quark_analysis.call_graph_analysis_list ] return ( reached_stage, level_4_result, behavior_list, _quark.quark_analysis.parent_wrapper_mapping, ) def _apply_analysis_result(self, rule_obj): async_result = self._result_map[id(rule_obj)] result = async_result.get() # Overwrite rule_obj for i in range(result[0]): rule_obj.check_item[i] = True # Overwrite quark analysis analysis = self.quark_analysis analysis.crime_description = rule_obj.crime apis = [ self.apkinfo.find_method( rule_obj.api[i]["class"], rule_obj.api[i]["method"], rule_obj.api[i]["descriptor"], )[0] for i in range(2) ] analysis.first_api, analysis.second_api = apis # analysis.level_1_result if result[0] >= 2: analysis.level_2_result = [api for api in apis if api] # analysis.level_3_result if result[0] >= 4: analysis.level_4_result = [ self.apkinfo.find_method(method[0], method[1], method[2])[0] for method in result[1] ] analysis.parent_wrapper_mapping = result[3] if result[0] >= 5: behavior_list = [ tuple( self.apkinfo.find_method(method[0], method[1], method[2])[0] for method in behavior ) for behavior in result[2] ] analysis.level_5_result = [behavior[0] for behavior in behavior_list] analysis.call_graph_analysis_list.extend( [ { "parent": behavior[0], "first_call": behavior[1], "second_call": behavior[2], "apkinfo": self.apkinfo, "first_api": analysis.first_api, "second_api": analysis.second_api, "crime": analysis.crime_description, } for behavior in behavior_list ] ) def __init__(self, apk, core_library, num_of_process=1): self._result_map = {} self._pool = Pool( min(num_of_process, cpu_count() - 1), self._worker_initializer, (apk, core_library) ) super().__init__(apk, core_library) def apply_rules(self, rule_obj_list): for rule_obj in rule_obj_list: result = self._pool.apply_async(self._worker_analysis, (rule_obj,)) self._result_map[id(rule_obj)] = result def run(self, rule_obj): self._apply_analysis_result(rule_obj) def close(self): self._pool.close() self._pool.join() quark-engine-23.4.1/quark/core/quark.py000066400000000000000000000726671442215066700177700ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import collections import operator import os import re from typing import Generator, List, Tuple import numpy as np #import pandas as pd from quark.core.analysis import QuarkAnalysis from quark.core.apkinfo import AndroguardImp from quark.core.rzapkinfo import RizinImp from quark.evaluator.pyeval import PyEval from quark.utils import tools from quark.utils.colors import ( colorful_report, green, lightblue, lightyellow, magenta, red, yellow, ) from quark.utils.graph import call_graph from quark.utils.output import ( get_rule_classification_data, output_parent_function_graph, output_parent_function_json, output_parent_function_table, ) from quark.utils.pprint import print_info, print_success, print_warning from quark.utils.weight import Weight MAX_SEARCH_LAYER = 3 class Quark: """Quark module is used to check quark's five-stage theory""" def __init__(self, apk, core_library="androguard"): """ :param apk: the filename of the apk. """ core_library = core_library.lower() if core_library == "rizin": self.apkinfo = RizinImp(apk) elif core_library == "androguard": self.apkinfo = AndroguardImp(apk) else: raise ValueError( f"Unsupported core library for Quark: {core_library}" ) self.quark_analysis = QuarkAnalysis() def find_previous_method( self, base_method, parent_function, wrapper, visited_methods=None ): """ Find the method under the parent function, based on base_method before to parent_function. This will append the method into wrapper. :param base_method: the base function which needs to be searched. :param parent_function: the top-level function which calls the basic function. :param wrapper: list is used to track each function. :param visited_methods: set with tested method. :return: None """ if visited_methods is None: visited_methods = set() method_set = self.apkinfo.upperfunc(base_method) visited_methods.add(base_method) if method_set is not None: if parent_function in method_set: wrapper.append(base_method) else: for item in method_set: # prevent to test the tested methods. if item in visited_methods: continue self.find_previous_method( item, parent_function, wrapper, visited_methods ) def find_intersection(self, first_method_set, second_method_set, depth=1): """ Find the first_method_list ∊ second_method_list. [MethodAnalysis, MethodAnalysis,...] :param first_method_set: first list that contains each MethodAnalysis. :param second_method_set: second list that contains each MethodAnalysis. :param depth: maximum number of recursive search functions. :return: a set of first_method_list ∊ second_method_list or None. """ # Check both lists are not null if not first_method_set or not second_method_set: raise ValueError("Set is Null") # find ∊ result = first_method_set & second_method_set if result: return result else: return self.method_recursive_search( depth, first_method_set, second_method_set ) def method_recursive_search( self, depth, first_method_set, second_method_set ): # Not found same method usage, try to find the next layer. depth += 1 if depth > MAX_SEARCH_LAYER: return None # Append first layer into next layer. next_level_set_1 = first_method_set.copy() next_level_set_2 = second_method_set.copy() # Extend the xref from function into next layer. for method in first_method_set: if self.apkinfo.upperfunc(method): next_level_set_1 = ( self.apkinfo.upperfunc(method) | next_level_set_1 ) for method in second_method_set: if self.apkinfo.upperfunc(method): next_level_set_2 = ( self.apkinfo.upperfunc(method) | next_level_set_2 ) return self.find_intersection( next_level_set_1, next_level_set_2, depth ) def check_sequence( self, mutual_parent, first_method_list, second_method_list ): """ Check if the first function appeared before the second function. :param mutual_parent: function that call the first function and second functions at the same time. :param first_method_list: the first show up function, which is a MethodAnalysis :param second_method_list: the second show up function, which is a MethodAnalysis :return: True or False """ state = False for first_call_method in first_method_list: for second_call_method in second_method_list: seq_table = [ (call, number) for call, number in self.apkinfo.lowerfunc(mutual_parent) if call in (first_call_method, second_call_method) ] # sorting based on the value of the number if len(seq_table) < 2: # Not Found sequence in same_method continue seq_table.sort(key=operator.itemgetter(1)) # seq_table would look like: [(getLocation, 1256), (sendSms, 1566), (sendSms, 2398)] method_list_need_check = [x[0] for x in seq_table] sequence_pattern_method = [ first_call_method, second_call_method, ] if tools.contains( sequence_pattern_method, method_list_need_check ): state = True # Record the mapping between the parent function and the wrapper method self.quark_analysis.parent_wrapper_mapping[ mutual_parent.full_name ] = self.apkinfo.get_wrapper_smali( mutual_parent, first_call_method, second_call_method ) return state def _evaluate_method(self, method) -> List[List[str]]: """ Evaluate the execution of the opcodes in the target method and return the usage of each involved register. :param method: Method to be evaluated :return: Matrix that holds the usage of the registers """ pyeval = PyEval(self.apkinfo) for bytecode_obj in self.apkinfo.get_method_bytecode(method): # ['new-instance', 'v4', Lcom/google/progress/SMSHelper;] instruction = [bytecode_obj.mnemonic] if bytecode_obj.registers is not None: instruction.extend(bytecode_obj.registers) if bytecode_obj.parameter is not None: instruction.append(bytecode_obj.parameter) # for the case of MUTF8String instruction = [str(x) for x in instruction] if instruction[0] in pyeval.eval.keys(): pyeval.eval[instruction[0]](instruction) return pyeval.show_table() def check_parameter_on_single_method( self, usage_table, first_method, second_method, keyword_item_list=None, regex=False, ) -> Generator[Tuple[str, List[str]], None, None]: """Check the usage of the same parameter between two method. :param usage_table: the usage of the involved registers :param first_method: the first API or the method calling the first APIs :param second_method: the second API or the method calling the second APIs :param keyword_item_list: keywords required to be present in the usage , defaults to None :param regex: treat the keywords as regular expressions, defaults to False :yield: _description_ """ first_method_pattern = PyEval.get_method_pattern( first_method.class_name, first_method.name, first_method.descriptor ) second_method_pattern = PyEval.get_method_pattern( second_method.class_name, second_method.name, second_method.descriptor, ) register_usage_records = ( c_func for table in usage_table for val_obj in table for c_func in val_obj.called_by_func ) matched_records = filter( lambda r: first_method_pattern in r and second_method_pattern in r, register_usage_records, ) for record in matched_records: if keyword_item_list and list(keyword_item_list): matched_keyword_list = self.check_parameter_values( record, (first_method_pattern, second_method_pattern), keyword_item_list, regex, ) if matched_keyword_list: yield (record, matched_keyword_list) else: yield (record, None) def check_parameter( self, parent_function, first_method_list, second_method_list, keyword_item_list=None, regex=False, ): """ Check the usage of the same parameter between two method. :param parent_function: function that call the first function and second functions at the same time. :param first_method_list: function which calls before the second method. :param second_method_list: function which calls after the first method. :return: True or False """ if parent_function is None: raise TypeError("Parent function is None.") if first_method_list is None or second_method_list is None: raise TypeError("First or second method list is None.") if keyword_item_list: keyword_item_list = list(keyword_item_list) if not any(keyword_item_list): keyword_item_list = None state = False # Evaluate the opcode in the parent function usage_table = self._evaluate_method(parent_function) # Check if any of the target methods (the first and second methods) # used the same registers. state = False for first_call_method in first_method_list: for second_call_method in second_method_list: result_generator = self.check_parameter_on_single_method( usage_table, first_call_method, second_call_method, keyword_item_list, regex, ) found = next(result_generator, None) is not None # Build for the call graph if found: call_graph_analysis = { "parent": parent_function, "first_call": first_call_method, "second_call": second_call_method, "apkinfo": self.apkinfo, "first_api": self.quark_analysis.first_api, "second_api": self.quark_analysis.second_api, "crime": self.quark_analysis.crime_description, } self.quark_analysis.call_graph_analysis_list.append( call_graph_analysis ) # Record the mapping between the parent function and the # wrapper method self.quark_analysis.parent_wrapper_mapping[ parent_function.full_name ] = self.apkinfo.get_wrapper_smali( parent_function, first_call_method, second_call_method, ) state = True return state @staticmethod def check_parameter_values( source_str, pattern_list, keyword_item_list, regex=False ) -> List[str]: matched_string_set = set() parameter_strs = [ tools.get_parenthetic_contents( source_str, source_str.index(pattern) + len(pattern) ) for pattern in pattern_list ] for parameter_str, keyword_item in zip( parameter_strs, keyword_item_list ): if keyword_item is None: continue for keyword in keyword_item: if regex: matched_strings = re.findall(keyword, parameter_str) if any(matched_strings): matched_strings = filter(bool, matched_strings) matched_strings = list(matched_strings) element = matched_strings[0] if isinstance( element, collections.abc.Sequence ) and not isinstance(element, str): for str_list in matched_strings: matched_string_set.update(str_list) else: matched_string_set.update(matched_strings) else: if str(keyword) in parameter_str: matched_string_set.add(keyword) return [e for e in list(matched_string_set) if bool(e)] def find_api_usage(self, class_name, method_name, descriptor_name): method_list = [] # Source method source_method = self.apkinfo.find_method( class_name, method_name, descriptor_name ) if source_method: return source_method # Potential Method potential_method_list = [ method for method in self.apkinfo.all_methods if method.name == method_name and method.descriptor == descriptor_name ] potential_method_list = [ method for method in potential_method_list if not next(self.apkinfo.get_method_bytecode(method), None) ] # Check if each method's class is a subclass of the given class for method in potential_method_list: current_class_set = {method.class_name} while current_class_set and not current_class_set.intersection( {class_name, "Ljava/lang/Object;"} ): next_class_set = set() for clazz in current_class_set: next_class_set.update( self.apkinfo.superclass_relationships[clazz] ) current_class_set = next_class_set current_class_set.discard("Ljava/lang/Object;") if current_class_set: method_list.append(method) return method_list def run(self, rule_obj): """ Run the five levels check to get the y_score. :param rule_obj: the instance of the RuleObject. :return: None """ self.quark_analysis.clean_result() self.quark_analysis.crime_description = rule_obj.crime # Level 1: Permission Check if self.apkinfo.ret_type == "DEX": rule_obj.check_item[0] = True elif set(rule_obj.permission).issubset(set(self.apkinfo.permissions)): rule_obj.check_item[0] = True else: # Exit if the level 1 stage check fails. return # Level 2: Single Native API Check api_1_method_name = rule_obj.api[0]["method"] api_1_class_name = rule_obj.api[0]["class"] api_1_descriptor = rule_obj.api[0]["descriptor"] api_2_method_name = rule_obj.api[1]["method"] api_2_class_name = rule_obj.api[1]["class"] api_2_descriptor = rule_obj.api[1]["descriptor"] first_api_list = self.find_api_usage( api_1_class_name, api_1_method_name, api_1_descriptor ) second_api_list = self.find_api_usage( api_2_class_name, api_2_method_name, api_2_descriptor ) if not first_api_list and not second_api_list: # Exit if the level 2 stage check fails. return else: rule_obj.check_item[1] = True if first_api_list: self.quark_analysis.level_2_result.append(first_api_list[0]) if second_api_list: self.quark_analysis.level_2_result.append(second_api_list[0]) # Level 3: Both Native API Check if not (first_api_list and second_api_list): # Exit if the level 3 stage check fails. return self.quark_analysis.first_api = first_api_list[0] self.quark_analysis.second_api = second_api_list[0] rule_obj.check_item[2] = True self.quark_analysis.level_3_result = [set(), set()] # Level 4: Sequence Check for first_api in first_api_list: for second_api in second_api_list: # Looking for the first layer of the upper function first_api_xref_from = self.apkinfo.upperfunc(first_api) second_api_xref_from = self.apkinfo.upperfunc(second_api) self.quark_analysis.level_3_result[0].update( first_api_xref_from ) self.quark_analysis.level_3_result[1].update( second_api_xref_from ) if not first_api_xref_from: print_warning( f"Unable to find the upperfunc of {first_api}" ) continue if not second_api_xref_from: print_warning( f"Unable to find the upperfunc of{second_api}" ) continue mutual_parent_function_list = self.find_intersection( first_api_xref_from, second_api_xref_from ) if mutual_parent_function_list is None: # Exit if the level 4 stage check fails. return for parent_function in mutual_parent_function_list: first_wrapper = [] second_wrapper = [] self.find_previous_method( first_api, parent_function, first_wrapper ) self.find_previous_method( second_api, parent_function, second_wrapper ) if self.check_sequence( parent_function, first_wrapper, second_wrapper ): rule_obj.check_item[3] = True self.quark_analysis.level_4_result.append( parent_function ) keyword_item_list = ( rule_obj.api[i].get("keyword", None) for i in range(2) ) # Level 5: Handling The Same Register Check if self.check_parameter( parent_function, first_wrapper, second_wrapper, keyword_item_list=keyword_item_list, ): rule_obj.check_item[4] = True self.quark_analysis.level_5_result.append( parent_function ) def get_json_report(self): """ Get quark report including summary and detail with json format. :return: json report """ w = Weight( self.quark_analysis.score_sum, self.quark_analysis.weight_sum ) warning = w.calculate() # Filter out color code in threat level for level in ["Low Risk", "Moderate Risk", "High Risk"]: if level in warning: warning = level return { "md5": self.apkinfo.md5, "apk_filename": self.apkinfo.filename, "size_bytes": self.apkinfo.filesize, "threat_level": warning, "total_score": self.quark_analysis.score_sum, "crimes": self.quark_analysis.json_report, } def generate_json_report(self, rule_obj): """ Show the json report. :param rule_obj: the instance of the RuleObject :return: None """ # Count the confidence confidence = str(rule_obj.check_item.count(True) * 20) + "%" conf = rule_obj.check_item.count(True) weight = rule_obj.get_score(conf) score = rule_obj.score # Assign level 1 examine result permissions = rule_obj.permission if rule_obj.check_item[0] else [] # Assign level 2 examine result api = [] if rule_obj.check_item[1]: for item2 in self.quark_analysis.level_2_result: api.append( { "class": str(item2.class_name), "method": str(item2.name), "descriptor": str(item2.descriptor), } ) # Assign level 3 examine result combination = [] if rule_obj.check_item[2]: combination = rule_obj.api # Assign level 4 - 5 examine result if exist sequnce_show_up = [] same_operation_show_up = [] # Check examination has passed level 4 if self.quark_analysis.level_4_result and rule_obj.check_item[3]: for item4 in self.quark_analysis.level_4_result: sequnce_show_up.append( { item4.full_name: self.quark_analysis.parent_wrapper_mapping[ item4.full_name ] } ) # Check examination has passed level 5 if self.quark_analysis.level_5_result and rule_obj.check_item[4]: for item5 in self.quark_analysis.level_5_result: same_operation_show_up.append( { item5.full_name: self.quark_analysis.parent_wrapper_mapping[ item5.full_name ] } ) crime = { "rule": rule_obj.rule_filename, "crime": rule_obj.crime, "label": rule_obj.label, "score": score, "weight": weight, "confidence": confidence, "permissions": permissions, "native_api": api, "combination": combination, "sequence": sequnce_show_up, "register": same_operation_show_up, } self.quark_analysis.json_report.append(crime) # add the weight self.quark_analysis.weight_sum += weight # add the score self.quark_analysis.score_sum += score def add_table_row(self, name, rule_obj, confidence, score, weight): self.quark_analysis.summary_report_table.add_row( [ name, green(rule_obj.crime), yellow(confidence), score, red(weight), ] ) def show_summary_report(self, rule_obj, threshold=None): """ Show the summary report. :param rule_obj: the instance of the RuleObject. :return: None """ # Count the confidence confidence = f"{rule_obj.check_item.count(True) * 20}%" conf = rule_obj.check_item.count(True) weight = rule_obj.get_score(conf) score = rule_obj.score name = rule_obj.rule_filename if threshold: if rule_obj.check_item.count(True) * 20 >= int(threshold): self.add_table_row(name, rule_obj, confidence, score, weight) else: self.add_table_row(name, rule_obj, confidence, score, weight) # add the weight self.quark_analysis.weight_sum += weight # add the score self.quark_analysis.score_sum += score def show_label_report(self, rule_path, all_labels, table_version): """ Show the report based on label, last column represents max confidence for that label :param rule_path: the path where may be present the file label_desc.csv. :param all_labels: dictionary containing label: :return: None """ label_desc = {} # clear table to manage max/detail version self.quark_analysis.label_report_table.clear() if os.path.isfile(os.path.join(rule_path, "label_desc.csv")): # associate to each label a description col_list = ["label", "description"] # csv file on form # put this file in the folder of rules (it must not be a json file since it could create conflict with management of rules) # remove temporarily #df = pd.read_csv( # os.path.join(rule_path, "label_desc.csv"), usecols=col_list #) # #label_desc = dict(zip(df["label"], df["description"])) for label_name in all_labels: confidences = np.array(all_labels[label_name]) if table_version == "max": self.quark_analysis.label_report_table.field_names = [ "Label", "Description", "Number of rules", "MAX Confidence %", ] self.quark_analysis.label_report_table.add_row( [ green(label_name), yellow(label_desc.get(label_name, "-")), (len(confidences)), red(np.max(confidences)), ] ) else: self.quark_analysis.label_report_table.field_names = [ "Label", "Description", "Number of rules", "MAX Confidence %", "AVG Confidence", "Std Deviation", "# of Rules with Confidence >= 80%", ] self.quark_analysis.label_report_table.add_row( [ green(label_name), yellow(label_desc.get(label_name, "-")), (len(confidences)), red(np.max(confidences)), magenta(round(np.mean(confidences), 2)), lightblue(round(np.std(confidences), 2)), lightyellow(np.count_nonzero(confidences >= 80)), ] ) def show_detail_report(self, rule_obj): """ Show the detail report. :param rule_obj: the instance of the RuleObject. :return: None """ # Count the confidence print("") print(f"Confidence: {rule_obj.check_item.count(True) * 20}%") print("") if rule_obj.check_item[0]: colorful_report("1.Permission Request") for permission in rule_obj.permission: print(f"\t\t {permission}") if rule_obj.check_item[1]: colorful_report("2.Native API Usage") for api in self.quark_analysis.level_2_result: print(f"\t\t {api.full_name}") if rule_obj.check_item[2]: colorful_report("3.Native API Combination") for numbered_api, method_list in zip( ("First API", "Second API"), self.quark_analysis.level_3_result ): print(f"\t\t {numbered_api} show up in:") if method_list: for comb_method in method_list: print(f"\t\t {comb_method.full_name}") else: print("\t\t None") if rule_obj.check_item[3]: colorful_report("4.Native API Sequence") print("\t\t Sequence show up in:") for seq_method in self.quark_analysis.level_4_result: print(f"\t\t {seq_method.full_name}") if rule_obj.check_item[4]: colorful_report("5.Native API Use Same Parameter") for seq_operation in self.quark_analysis.level_5_result: print(f"\t\t {seq_operation.full_name}") def show_call_graph(self, output_format=None): print_info("Creating Call Graph...") for ( call_graph_analysis ) in self.quark_analysis.call_graph_analysis_list: call_graph(call_graph_analysis, output_format) print_success("Call Graph Completed") def show_rule_classification(self): print_info("Rules Classification") data_bundle = get_rule_classification_data( self.quark_analysis.call_graph_analysis_list, MAX_SEARCH_LAYER ) output_parent_function_table(data_bundle) output_parent_function_json(data_bundle) output_parent_function_graph(data_bundle) if __name__ == "__main__": pass quark-engine-23.4.1/quark/core/rzapkinfo.py000066400000000000000000000467071442215066700206440ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import functools import logging import os.path import re import tempfile import zipfile from collections import defaultdict, namedtuple from os import PathLike from typing import Any, Dict, Generator, List, Optional, Set, Union import rzpipe from quark.core.axmlreader import AxmlReader from quark.core.interface.baseapkinfo import BaseApkinfo, XMLElement from quark.core.struct.bytecodeobject import BytecodeObject from quark.core.struct.methodobject import MethodObject from quark.utils.tools import ( descriptor_to_androguard_format, remove_dup_list, ) RizinCache = namedtuple("rizin_cache", "address dexindex is_imported") PRIMITIVE_TYPE_MAPPING = { "void": "V", "boolean": "Z", "byte": "B", "char": "C", "short": "S", "int": "I", "long": "J", "float": "F", "double": "D", "Boolean": "Ljava/lang/Boolean;", "Byte": "Ljava/lang/Byte;", "Character": "Ljava/lang/Character;", "Short": "Ljava/lang/Short;", "Integer": "Ljava/lang/Integer;", "Long": "Ljava/lang/Long;", "Float": "Ljava/lang/Float;", "Double": "Ljava/lang/Double;", "String": "Ljava/lang/String;", } RIZIN_ESCAPE_CHAR_LIST = ["<", ">", "$"] class RizinImp(BaseApkinfo): def __init__( self, apk_filepath: Union[str, PathLike], tmp_dir: Union[str, PathLike] = None, ): super().__init__(apk_filepath, "rizin") if self.ret_type == "DEX": self._tmp_dir = None self._dex_list = [apk_filepath] elif self.ret_type == "APK": self._tmp_dir = tempfile.mkdtemp() if tmp_dir is None else tmp_dir with zipfile.ZipFile(self.apk_filepath) as apk: apk.extract("AndroidManifest.xml", path=self._tmp_dir) self._manifest = os.path.join(self._tmp_dir, "AndroidManifest.xml") dex_files = [ file for file in apk.namelist() if file.startswith("classes") and file.endswith(".dex") ] for dex in dex_files: apk.extract(dex, path=self._tmp_dir) self._dex_list = [os.path.join(self._tmp_dir, dex) for dex in dex_files] else: raise ValueError("Unsupported File type.") self._number_of_dex = len(self._dex_list) @functools.lru_cache def _get_rz(self, index): rz = rzpipe.open(self._dex_list[index]) rz.cmd("aa") return rz def _convert_type_to_type_signature(self, raw_type: str): if raw_type.endswith("[]"): return "[" + self._convert_type_to_type_signature(raw_type[:-2]) if raw_type.startswith("["): return "[" + self._convert_type_to_type_signature(raw_type[1:]) if raw_type in PRIMITIVE_TYPE_MAPPING: return PRIMITIVE_TYPE_MAPPING[raw_type] if "." in raw_type or "_" in raw_type: raw_type = raw_type.replace(".", "/") raw_type = raw_type.replace("_", "$") return "L" + raw_type + ";" return raw_type @staticmethod def _escape_str_in_rizin_manner(raw_str: str): for c in RIZIN_ESCAPE_CHAR_LIST: raw_str = raw_str.replace(c, "_") return raw_str @functools.lru_cache def _get_methods_classified(self, dexindex): rz = self._get_rz(dexindex) method_json_list = rz.cmdj("isj") method_dict = defaultdict(list) for json_obj in method_json_list: if json_obj.get("type") not in ["FUNC", "METH"]: continue # -- Descriptor -- full_method_name = json_obj["name"] raw_argument_str = next( re.finditer("\\(.*\\).*", full_method_name), None ) if raw_argument_str is None: continue raw_argument_str = raw_argument_str.group(0) if raw_argument_str.endswith(")"): # Convert Java lauguage type to JVM type signature # Parse the arguments raw_argument_str = raw_argument_str[1:-1] arguments = [ self._convert_type_to_type_signature(arg) for arg in raw_argument_str.split(", ") ] # Parse the return type return_type = next( re.finditer( "[A-Za-zL][A-Za-z0-9L/\\;[\\]$.]+ ", full_method_name ), None, ) if return_type is None: print(f"Unresolved method signature: {full_method_name}") continue return_type = return_type.group(0).strip() # Convert raw_argument_str = ( "(" + " ".join(arguments) + ")" + self._convert_type_to_type_signature(return_type) ) descriptor = descriptor_to_androguard_format(raw_argument_str) # -- Method name -- method_name = json_obj["realname"] # -- Is imported -- is_imported = json_obj["is_imported"] # -- Class name -- # Test if the class name is truncated escaped_method_name = self._escape_str_in_rizin_manner(method_name) if escaped_method_name.endswith("_"): escaped_method_name = escaped_method_name[:-1] flag_name = json_obj["flagname"] # sym.imp.clone doesn't belong to a class if flag_name == "sym.imp.clone": method = MethodObject( class_name="", name="clone", descriptor="()Ljava/lang/Object;", cache=RizinCache(json_obj["vaddr"], dexindex, is_imported), ) method_dict[""].append(method) continue if escaped_method_name not in flag_name: logging.warning( f"The class name may be truncated: {json_obj['flagname']}" ) # Drop the method name match = None for match in re.finditer("_+[A-Za-z]+", flag_name): pass if match is None: logging.warning( f"Skip the damaged flag: {json_obj['flagname']}" ) continue match = match.group(0) flag_name = flag_name[: flag_name.rfind(match)] # Drop the prefixes sym. and imp. while flag_name.startswith("sym.") or flag_name.startswith("imp."): flag_name = flag_name[4:] class_name = self._convert_type_to_type_signature(flag_name) # Append the method method = MethodObject( class_name=class_name, name=method_name, descriptor=descriptor, cache=RizinCache(json_obj["vaddr"], dexindex, is_imported), ) method_dict[class_name].append(method) # Remove duplicates for class_name, method_list in method_dict.items(): method_dict[class_name] = remove_dup_list(method_list) return method_dict @functools.cached_property def permissions(self) -> List[str]: axml = AxmlReader(self._manifest) permission_list = set() for tag in axml: label = tag.get("Name") if label and axml.get_string(label) == "uses-permission": attrs = axml.get_attributes(tag) if attrs: permission = axml.get_string(attrs[0].value) permission_list.add(permission) return permission_list @functools.cached_property def application(self) -> XMLElement: """Get the application element from the manifest file. :return: an application element """ axml = AxmlReader(self._manifest) root = axml.get_xml_tree() return root.find("application") @functools.cached_property def activities(self) -> List[XMLElement]: """ Return all activity from given APK. :return: a list of all activities """ axml = AxmlReader(self._manifest) root = axml.get_xml_tree() return root.findall("application/activity") @functools.cached_property def receivers(self) -> List[XMLElement]: """ Return all receivers from the given APK. :return: a list of all receivers """ axml = AxmlReader(self._manifest) root = axml.get_xml_tree() return root.findall("application/receiver") @property def android_apis(self) -> Set[MethodObject]: return { method for method in self.all_methods if method.is_android_api() and method.cache.is_imported } @property def custom_methods(self) -> Set[MethodObject]: return {method for method in self.all_methods if not method.cache.is_imported} @functools.cached_property def all_methods(self) -> Set[MethodObject]: method_set = set() for dex_index in range(self._number_of_dex): for method_list in self._get_methods_classified(dex_index).values(): method_set.update(method_list) return method_set def find_method( self, class_name: Optional[str] = ".*", method_name: Optional[str] = ".*", descriptor: Optional[str] = ".*", ) -> List[MethodObject]: if not class_name: class_name = ".*" if not method_name: method_name = ".*" if method_name != ".*": method_name = re.escape(method_name) if not descriptor: descriptor = ".*" if descriptor != ".*": descriptor = re.escape(descriptor) def method_filter(method): return re.match(method_name, method.name) and re.match( descriptor, method.descriptor ) dex_list = range(self._number_of_dex) filtered_methods = list() if class_name != ".*": for dex_index in dex_list: method_dict = self._get_methods_classified(dex_index) filtered_methods += list( filter(method_filter, method_dict[class_name]) ) else: for dex_index in dex_list: method_dict = self._get_methods_classified(dex_index) for key_name in method_dict: filtered_methods += list( filter(method_filter, method_dict[key_name]) ) return filtered_methods @functools.lru_cache def upperfunc(self, method_object: MethodObject) -> Set[MethodObject]: cache = method_object.cache r2 = self._get_rz(cache.dexindex) xrefs = r2.cmdj(f"axtj @ {cache.address}") upperfunc_set = set() for xref in xrefs: if xref["type"] != "CALL": continue if "fcn_addr" in xref: matched_method = self._get_method_by_address(xref["fcn_addr"]) if not matched_method: logging.debug( f"Cannot identify function at {xref['fcn_addr']}." ) continue upperfunc_set.add(matched_method) else: logging.debug( f"Key from was not found at searching" f" upper methods for {method_object}." ) return upperfunc_set @functools.lru_cache def lowerfunc(self, method_object: MethodObject) -> Set[MethodObject]: cache = method_object.cache r2 = self._get_rz(cache.dexindex) xrefs = r2.cmdj(f"axffj @ {cache.address}") if not xrefs: return set() lowerfunc_set = set() for xref in xrefs: if xref["type"] != "CALL": continue if "to" in xref: matched_method = self._get_method_by_address(xref["to"]) if not matched_method: logging.debug( f"Cannot identify function at {xref['fcn_addr']}." ) continue offset = xref["from"] - cache.address lowerfunc_set.add( ( matched_method, offset, ) ) else: logging.debug( f"Key from was not found at searching" f" upper methods for {method_object}." ) return lowerfunc_set def get_method_bytecode( self, method_object: MethodObject ) -> Generator[BytecodeObject, None, None]: cache = method_object.cache if not cache.is_imported: rz = self._get_rz(cache.dexindex) instruct_flow = rz.cmdj(f"pdfj @ {cache.address}")["ops"] if instruct_flow: for ins in instruct_flow: yield self._parse_smali(ins["disasm"]) def get_strings(self) -> Set[str]: strings = set() for dex_index in range(self._number_of_dex): rz = self._get_rz(dex_index) string_detail_list = rz.cmdj("izzj") strings.update( [string_detail["string"] for string_detail in string_detail_list] ) return strings def get_wrapper_smali( self, parent_method: MethodObject, first_method: MethodObject, second_method: MethodObject, ) -> Dict[str, Union[BytecodeObject, str]]: def convert_bytecode_to_list(bytecode): return [bytecode.mnemonic] + bytecode.registers + [bytecode.parameter] cache = parent_method.cache result = { "first": None, "first_hex": None, "second": None, "second_hex": None, } search_pattern = "{class_name}.{name}{descriptor}" first_method_pattern = search_pattern.format( class_name=first_method.class_name[:-1], name=first_method.name, descriptor=first_method.descriptor, ) second_method_pattern = search_pattern.format( class_name=second_method.class_name[:-1], name=second_method.name, descriptor=second_method.descriptor, ) if cache.is_imported: return {} rz = self._get_rz(cache.dexindex) instruction_flow = rz.cmdj(f"pdfj @ {cache.address}")["ops"] if instruction_flow: for ins in instruction_flow: if ins["disasm"].startswith("invoke"): if ";" in ins["disasm"]: index = ins["disasm"].rindex(";") instrcution_string = ins["disasm"][:index] if first_method_pattern in instrcution_string: result["first"] = convert_bytecode_to_list( self._parse_smali(instrcution_string) ) result["first_hex"] = " ".join( map( lambda r: r.group(0), re.finditer(r"\w{2}", ins["bytes"]), ) ) if second_method_pattern in instrcution_string: result["second"] = convert_bytecode_to_list( self._parse_smali(instrcution_string) ) result["second_hex"] = " ".join( map( lambda r: r.group(0), re.finditer(r"\w{2}", ins["bytes"]), ) ) return result @functools.cached_property def superclass_relationships(self) -> Dict[str, Set[str]]: hierarchy_dict = defaultdict(set) for dex_index in range(self._number_of_dex): rz = self._get_rz(dex_index) class_info_list = rz.cmdj("icj") for class_info in class_info_list: class_name = class_info["classname"] super_class = class_info["super"] hierarchy_dict[class_name].add(super_class) return hierarchy_dict @functools.cached_property def subclass_relationships(self) -> Dict[str, Set[str]]: hierarchy_dict = defaultdict(set) for dex_index in range(self._number_of_dex): rz = self._get_rz(dex_index) class_info_list = rz.cmdj("icj") for class_info in class_info_list: class_name = class_info["classname"] super_class = class_info["super"] hierarchy_dict[super_class].add(class_name) return hierarchy_dict def _get_method_by_address(self, address: int) -> MethodObject: if address < 0: return None for method in self.all_methods: if method.cache.address == address: return method @staticmethod def _parse_parameter(mnemonic: str, parameter: str) -> Any: """Parse the value of the parameter based on the mnemonic. :param mnemonic: the mnemonic of a bytecode :param parameter: the parameter of a bytecode :return: the value of the parameter """ if mnemonic.startswith("invoke"): return re.sub(r"\.", "->", parameter, count=1) elif mnemonic == "const-wide": return float(parameter) elif mnemonic.startswith("const") and "string" not in mnemonic: return int(parameter, 16) elif '/lit' in mnemonic: return int(parameter, 16) return parameter @staticmethod def _parse_smali(smali: str) -> BytecodeObject: if smali == "": raise ValueError("Argument cannot be empty.") if " " not in smali: return BytecodeObject(smali, None, None) mnemonic, args = smali.split(maxsplit=1) # Split into twe parts # invoke-kind instruction may left method index at the last # if mnemonic.startswith("invoke"): # args = args[: args.rfind(" ;")] args = [arg.strip() for arg in re.split("[{},]+", args) if arg] parameter = None # Remove the parameter at the last if args and not args[-1].startswith("v"): parameter = RizinImp._parse_parameter(mnemonic, args[-1]) args = args[:-1] register_list = [] # Ranged registers if len(args) == 1 and (":" in args[0] or ".." in args[0]): register_list = args[0] register_list = [ int(reg[1:]) for reg in re.split("[:.]+", register_list) if reg ] if ".." in args[0]: register_list = range(register_list[0], register_list[1] + 1) # Simple registers elif len(args) != 0: try: register_list = [int(arg[1:]) for arg in args] except ValueError: raise ValueError( f"Cannot parse bytecode. Unknown smali {smali}." ) register_list = [f"v{index}" for index in register_list] return BytecodeObject(mnemonic, register_list, parameter) quark-engine-23.4.1/quark/core/struct/000077500000000000000000000000001442215066700175755ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/struct/__init__.py000066400000000000000000000000001442215066700216740ustar00rootroot00000000000000quark-engine-23.4.1/quark/core/struct/bytecodeobject.py000066400000000000000000000034021442215066700231330ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. class BytecodeObject: """BytecodeObject is used to store the instructions in smali, including mnemonic, registers, parameter""" __slots__ = ["_mnemonic", "_registers", "_parameter"] def __init__(self, mnemonic, registers, parameter): """ ['invoke-virtual', 'v3', 'Lcom/google/progress/APNOperator;->deleteAPN()Z'] :param mnemonic: :param registers: :param parameter: """ self._mnemonic = mnemonic self._registers = registers self._parameter = parameter def __repr__(self): return f"" def __eq__(self, obj): return ( isinstance(obj, BytecodeObject) and obj.mnemonic == self.mnemonic and obj.registers == self.registers and obj.parameter == self.parameter ) @property def mnemonic(self): """ Dalvik bytecode instructions set, for example 'invoke-virtual'. :return: a string of mnemonic """ return self._mnemonic @property def registers(self): """ Registers used in Dalvik instructions, for example '[v3]'. :return: a list containing all the registers used """ return self._registers @property def parameter(self): """ Commonly used for functions called by invoke-kind instructions, for example 'Lcom/google/progress/APNOperator;->deleteAPN()Z'. :return: a string of the function name """ return self._parameter quark-engine-23.4.1/quark/core/struct/methodobject.py000066400000000000000000000020031442215066700226110ustar00rootroot00000000000000from dataclasses import dataclass, field @dataclass(unsafe_hash=True) class MethodObject(object): """ Information about a method in a dex file. """ class_name: str name: str descriptor: str access_flags: str = field(compare=False, default="") cache: object = field(compare=False, default=None, repr=False) @property def full_name(self) -> str: return self.__str__() def is_android_api(self) -> bool: # Packages found at https://developer.android.com/reference/packages api_list = [ "Landroid/", "Lcom/google/android/", "Ldalvik/", "Ljava/", "Ljavax/", "Ljunit/", "Lorg/apache/", "Lorg/json/", "Lorg/w3c/", "Lorg/xml/", "Lorg/xmlpull/", ] return any(self.class_name.startswith(prefix) for prefix in api_list) def __str__(self) -> str: return f"{self.class_name} {self.name} {self.descriptor}" quark-engine-23.4.1/quark/core/struct/registerobject.py000066400000000000000000000070401442215066700231630ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. class RegisterObject: """The RegisterObject is used to record the state of each register""" __slots__ = [ "_register_name", "_value", "_called_by_func", "_current_type", "_type_history", ] def __init__(self, register_name, value, called_by_func=None, value_type=None): """ A data structure for creating the bytecode variable object, which used to record the state of each register. +================+========+==================+ | register_name | value | called_by_func | +================+========+==================+ :param register_name: :param value: :param called_by_func: """ self._register_name = register_name self._value = value self._current_type = value_type self._type_history = [] self._called_by_func = [] if called_by_func is not None: self._called_by_func.append(called_by_func) def __repr__(self): return f"" def __eq__(self, obj): return ( isinstance(obj, RegisterObject) and obj.called_by_func == self.called_by_func and obj.register_name == self.register_name and obj.value == self.value and obj.current_type == self.current_type ) @property def called_by_func(self): """ Record which functions have been called by using this register as a parameter. :return: a list containing function name """ return self._called_by_func @called_by_func.setter def called_by_func(self, called_by_func): """ Setter of called_by_func. :param called_by_func: :return: None """ self._called_by_func.append(called_by_func) self._type_history.append(self._current_type) @property def register_name(self): """ Individual register name, for example 'v3'. :return: a string of register name """ return self._register_name @register_name.setter def register_name(self, reg_name): """ Setter of register_name. :param reg_name: :return: None """ self._register_name = reg_name @property def value(self): """ The current value stored in the register. :return: a string of the value """ return self._value @value.setter def value(self, value): """ Setter of value. :param value: :return: None """ self._value = value @property def current_type(self): """ Get the type of the value in the register :return: a plant text that describes a data type :rtype: str """ return self._current_type @current_type.setter def current_type(self, value): self._current_type = value @property def type_histroy(self): return self._type_history @property def hash_index(self): """ Get the index number from given VarabileObject. :return: an integer corresponding to the register index """ return int(self.register_name[1:]) if __name__ == "__main__": pass quark-engine-23.4.1/quark/core/struct/ruleobject.py000066400000000000000000000063401442215066700223100ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import json import os from quark.utils.tools import descriptor_to_androguard_format class RuleObject: """RuleObject is used to store the rule from json file""" __slots__ = [ "check_item", "_json_obj", "_crime", "_permission", "_api", "_score", "rule_filename", "_label", ] def __init__(self, ruleJson: os.PathLike, jsonData: dict = None) -> None: """Making detection rule a rule instance :param ruleJson: Path of a single Quark rule :param jsonData: Dictionary to directly assign to the content of this Quark rule, defaults to None """ # the state of five stages self.check_item = [False, False, False, False, False] if jsonData is not None: self._json_obj = jsonData else: with open(ruleJson) as json_file: self._json_obj = json.loads(json_file.read()) self._crime = self._json_obj["crime"] self._permission = self._json_obj["permission"] self._api = self._json_obj["api"] for index in range(len(self._api)): descriptor = self._api[index]["descriptor"] if " " not in descriptor: self._api[index][ "descriptor" ] = descriptor_to_androguard_format(descriptor) self._score = self._json_obj["score"] self.rule_filename = os.path.basename(ruleJson) self._label = self._json_obj["label"] def __repr__(self): return f"" @property def crime(self): """ Description of given crime. :return: a string of the crime """ return self._crime @property def permission(self): """ Permission requested by the apk to practice the crime. :return: a list of given permissions """ return self._permission @property def api(self): """ Key native APIs that do the action and target in order. :return: a list recording the APIs class_name and method_name in order """ return self._api @property def label(self): """ A list contains various lebels described in https://github.com/quark-engine/quark-rules/blob/master/label_desc.csv :return: a label list defined in rules """ return self._label @property def score(self): """ The value used to calculate the weighted score :return: integer """ return self._score def get_score(self, confidence): """ According to the state of the five stages, we calculate the weighted score based on exponential growth. For example, we captured the third stage in five stages, then the weighted score would be (2^3-1) / 2^4. 2^(confidence - 1) :param confidence: :return: floating point """ if confidence == 0: return 0 return (2 ** (confidence - 1) * self._score) / 2**4 if __name__ == "__main__": pass quark-engine-23.4.1/quark/core/struct/tableobject.py000066400000000000000000000036411442215066700224310ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. class TableObject: """This table is used to track the usage of variables in the register""" __slots__ = ["hash_table"] def __init__(self, count_reg): """ This table used to store the variable object, which uses a hash table with a stack-based list to generate the bytecode variable tracker table. :param count_reg: the maximum number of register to initialize """ self.hash_table = [[] for _ in range(count_reg)] def __repr__(self): return f"" def insert(self, index, var_obj): """ Insert VariableObject into the nested list in the hashtable. :param index: the index to insert to the table :param var_obj: instance of VariableObject :return: None """ try: self.hash_table[index].append(var_obj) except IndexError: pass def get_obj_list(self, index): """ Return the list which contains the VariableObject. :param index: the index to get the corresponding VariableObject :return: a list containing VariableObject """ try: return self.hash_table[index] except IndexError: return None def get_table(self): """ Get the entire hash table. :return: a two-dimensional list """ return self.hash_table def pop(self, index): """ Override the built-in pop function, to get the top element, which is VariableObject on the stack while not delete it. :param index: the index to get the corresponding VariableObject :return: VariableObject """ return self.hash_table[index][-1] if __name__ == "__main__": pass quark-engine-23.4.1/quark/evaluator/000077500000000000000000000000001442215066700173235ustar00rootroot00000000000000quark-engine-23.4.1/quark/evaluator/__init__.py000066400000000000000000000000001442215066700214220ustar00rootroot00000000000000quark-engine-23.4.1/quark/evaluator/pyeval.py000066400000000000000000000612141442215066700212010ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. # Thanks for the description of Dalvik bytecode instruction from the following # websites, some of our explanations or comments will quote from it. # https://source.android.google.cn/devices/tech/dalvik/instruction-formats # http://pallergabor.uw.hu/androidblog/dalvik_opcodes.html import logging from datetime import datetime from quark import config from quark.core.struct.registerobject import RegisterObject from quark.core.struct.tableobject import TableObject MAX_REG_COUNT = 40 log = logging.getLogger(__name__) log.setLevel(logging.DEBUG) if config.DEBUG: TIMESTAMPS = datetime.now().strftime("%Y-%m-%d") LOG_FILENAME = f"{TIMESTAMPS}.quark.log" handler = logging.FileHandler(LOG_FILENAME, mode="w") format_str = "%(asctime)s %(levelname)s [%(lineno)d]: %(message)s" handler.setFormatter(logging.Formatter(format_str)) log.addHandler(handler) else: log.disabled = True def logger(func): def warp(*args, **kwargs): log.info(f"{func.__name__} with args-> {args}") func(*args, **kwargs) return warp class PyEval: def __init__(self, apkinfo): # Main switch for executing the bytecode instruction. self.eval = { # invoke-kind "invoke-virtual": self.INVOKE_VIRTUAL, "invoke-direct": self.INVOKE_DIRECT, "invoke-static": self.INVOKE_STATIC, "invoke-virtual/range": self.INVOKE_VIRTUAL_RANGE, "invoke-interface": self.INVOKE_INTERFACE, "invoke-super": self.INVOKE_SUPER, "invoke-polymorphic": self.INVOKE_POLYMORPHIC, "invoke-custom": self.INVOKE_CUSTOM, # move-result-kind "move-result": self.MOVE_RESULT, "move-result-wide": self.MOVE_RESULT_WIDE, "move-result-object": self.MOVE_RESULT_OBJECT, # instance-kind "new-instance": self.NEW_INSTANCE, "new-array": self.NEW_ARRAY, # const-kind "const-string": self.CONST_STRING, "const-string/jumbo": self.CONST_STRING, "const-class": self.CONST_CLASS, "const": self.CONST, "const/4": self.CONST_FOUR, "const/16": self.CONST_SIXTEEN, "const/high16": self.CONST_HIGHSIXTEEN, "const-wide": self.CONST_WIDE, "const-wide/16": self.CONST_WIDE_SIXTEEN, "const-wide/32": self.CONST_WIDE_THIRTY_TWO, "const-wide/high16": self.CONST_WIDE_HIGHSIXTEEN, } # move-kind for prefix in ("move", "move-object", "move-wide"): for postfix in ("", "/from16", "/16"): self.eval[f"{prefix}{postfix}"] = self.MOVE_KIND self.eval["array-length"] = self.MOVE_KIND # filled-array-kind for ins in ("filled-new-array", "filled-new-array/range"): self.eval[ins] = self.FILLED_NEW_ARRAY_KIND # aget-kind for postfix in ("", "-object", "-boolean", "-byte", "-char", "-short"): self.eval[f"aget{postfix}"] = self.AGET_KIND self.eval["aget-wide"] = self.AGET_WIDE_KIND # aput-kind for postfix in ("", "-object", "-boolean", "-byte", "-char", "-short"): self.eval[f"aput{postfix}"] = self.APUT_KIND self.eval["aput-wide"] = self.APUT_WIDE_KIND # neg-kind and not-kind for prefix in ("neg", "not"): self.eval[f"{prefix}-int"] = self.NEG_AND_NOT_KIND self.eval[f"{prefix}-long"] = self.NEG_AND_NOT_KIND self.eval[f"{prefix}-float"] = self.NEG_AND_NOT_KIND self.eval[f"{prefix}-double"] = self.NEG_AND_NOT_KIND # type casting for first_type in ("int", "long", "float", "double"): for second_type in ("int", "long", "float", "double"): if first_type == second_type: continue self.eval[f"{first_type}-{second_type}"] = self.CAST_TYPE # binop_kind for prefix in ( "add", "sub", "mul", "div", "rem", "and", "or", "xor", "shl", "shr", "ushr", ): for _type in ("int", "float", "double", "long"): for postfix in ("", "/2addr", "/lit16", "/lit8"): self.eval[f"{prefix}-{_type}{postfix}"] = self.BINOP_KIND self.eval["move-exception"] = lambda ins: self._assign_value( (ins[0], ins[1], "Exception"), value_type="Ljava/lang/Throwable;" ) self.eval[ "fill-array-data" ] = lambda ins: self._move_value_and_data_to_register( (ins[0], ins[1], ins[1], ins[2]), "Embedded-array-data()[" ) self.type_mapping = { "boolean": "Z", "byte": "B", "char": "C", "short": "S", "int": "I", "long": "J", "float": "F", "double": "D", } self.table_obj = TableObject(MAX_REG_COUNT) self.ret_stack = [] self.ret_type = "" self.apkinfo = apkinfo def _invoke(self, instruction, look_up=False, skip_self=False): """ Function call in Android smali code. It will check if the corresponding table field has a value, if it does, inserts its own function name into called_by_func column. """ if look_up: try: instruction[-1] = self._lookup_implement( self.table_obj.pop(int(instruction[1][1:])).current_type, instruction[-1], skip_self=skip_self, ) except ValueError as e: log.exception(e) except IndexError: pass executed_fuc = instruction[-1] reg_list = instruction[1 : len(instruction) - 1] value_of_reg_list = [] # query the value from hash table based on register index. for reg in reg_list: index = int(reg[1:]) obj_stack = self.table_obj.get_obj_list(index) if obj_stack: var_obj = self.table_obj.pop(index) value_of_reg_list.append(var_obj.value) invoked_state = f"{executed_fuc}({','.join(value_of_reg_list)})" # insert the function and the parameter into called_by_func for reg in reg_list: index = int(reg[1:]) obj_stack = self.table_obj.get_obj_list(index) if obj_stack: # add the function name into each parameter table var_obj = self.table_obj.pop(index) var_obj.called_by_func = invoked_state if instruction[0].startswith('invoke') and not instruction[0].endswith("static"): # push the return value into the instance reg_idx_to_object = int(reg_list[0][1:]) obj_stack = self.table_obj.get_obj_list(reg_idx_to_object) if obj_stack: var_obj = self.table_obj.pop(reg_idx_to_object) var_obj.value = invoked_state if not executed_fuc.endswith(")V"): # push the return value into ret_stack self.ret_stack.append(invoked_state) # Extract the type of return value self.ret_type = executed_fuc[executed_fuc.index(")") + 1:] def _move_result(self, instruction): reg = instruction[1] index = int(reg[1:]) try: pre_ret = self.ret_stack.pop() variable_object = RegisterObject(reg, pre_ret, value_type=self.ret_type) self.table_obj.insert(index, variable_object) self.ret_type = "" except IndexError as e: log.exception(f"{e} in _move_result") def _assign_value(self, instruction, value_type=""): reg = instruction[1] value = instruction[2] index = int(reg[1:]) variable_object = RegisterObject(reg, value, value_type=value_type) self.table_obj.insert(index, variable_object) def _assign_value_wide(self, instruction, value_type=""): """ For 64 bit, it has two register, which is vx and vx+1 """ reg = instruction[1] value = instruction[2] index = int(reg[1:]) reg_plus_one = f"v{index + 1}" variable_object = RegisterObject(reg, value, value_type=value_type) variable_object2 = RegisterObject(reg_plus_one, value, value_type=value_type) self.table_obj.insert(index, variable_object) self.table_obj.insert(index + 1, variable_object2) @logger def INVOKE_VIRTUAL(self, instruction): """ invoke-virtual { parameters }, methodtocall Invokes a virtual method with parameters. """ self._invoke(instruction, look_up=True) @logger def INVOKE_DIRECT(self, instruction): """ invoke-direct { parameters }, methodtocall Invokes a method with parameters without the virtual method resolution. (first parameter is "this") """ self._invoke(instruction) @logger def INVOKE_STATIC(self, instruction): """ invoke-static {parameters}, methodtocall Invokes a static method with parameters. """ self._invoke(instruction) @logger def INVOKE_VIRTUAL_RANGE(self, instruction): """ invoke-virtual/range { parameters }, methodtocall Invokes a virtual-range method with parameters. """ self._invoke(instruction, look_up=True) @logger def INVOKE_INTERFACE(self, instruction): """ invoke-interface { parameters }, methodtocall Invokes a interface method with parameters. """ self._invoke(instruction, look_up=True) @logger def INVOKE_SUPER(self, instruction): """ invoke-interface { parameters }, methodtocall Invokes a interface method with parameters. """ self._invoke(instruction, look_up=True, skip_self=True) def INVOKE_POLYMORPHIC(self, instruction): self._invoke(instruction) def INVOKE_CUSTOM(self, instruction): self._invoke(instruction) @logger def MOVE_RESULT(self, instruction): """ move-result vx Move the result value of the previous method invocation into vx. Save the value returned by the previous function call to the vx register,and then insert the VariableObject into table. """ self._move_result(instruction) @logger def MOVE_RESULT_WIDE(self, instruction): """ move-result-wide vx Move the long/double result value of the previous method invocation into vx,vx+1. """ reg = instruction[1] index = int(reg[1:]) try: pre_ret = self.ret_stack.pop() variable_object = RegisterObject(reg, pre_ret, value_type=self.ret_type) variable_object2 = RegisterObject( f"v{index + 1}", pre_ret, value_type=self.ret_type ) self.table_obj.insert(index, variable_object) self.table_obj.insert(index + 1, variable_object2) except IndexError as e: log.exception(f"{e} in MOVE_RESULT_WIDE") @logger def MOVE_RESULT_OBJECT(self, instruction): """ move-result-object vx Move the result object reference of the previous method invocation into vx. Save the value returned by the previous function call to the vx register,and then insert the VariableObject into table. """ self._move_result(instruction) @logger def NEW_INSTANCE(self, instruction): """ new-instance vx,type Instantiates an object type and puts the reference of the newly created instance into vx. Store variables to vx, and then insert the VariableObject into table. """ self._assign_value(instruction, value_type=instruction[2]) @logger def NEW_ARRAY(self, instruction): try: self._move_value_to_register( instruction[:-1], "new-array()[({src0})", value_type=instruction[-1], ) except IndexError as e: log.exception(f"{e} in NEW_ARRAY") @logger def CONST_STRING(self, instruction): """ const-string vx,string_id Puts reference to a string constant identified by string_id into vx. Store string variable to vx, and then insert the VariableObject into table. """ self._assign_value(instruction, value_type="Ljava/lang/String;") @logger def CONST_CLASS(self, instruction): self._assign_value(instruction, value_type="Ljava/lang/Class;") @logger def CONST(self, instruction): """ const vx, lit32 Puts the integer constant into vx. """ self._assign_value(instruction) @logger def CONST_FOUR(self, instruction): """ const/4 vx,lit4 Puts the 4 bit constant into vx. Store 4 bit constant into vx, and then insert the VariableObject into table. """ self._assign_value(instruction) @logger def CONST_SIXTEEN(self, instruction): """ const/16 vx,lit16 Puts the 4 bit constant into vx. """ self._assign_value(instruction) @logger def CONST_HIGHSIXTEEN(self, instruction): """ const/high16 v0, lit16 Puts the 16 bit constant into the topmost bits of the register. Used to initialize float values. """ self._assign_value(instruction) @logger def CONST_WIDE(self, instruction): """ const-wide vx, lit64 Puts the 64 bit constant into vx and vx+1 registers. """ self._assign_value_wide(instruction) @logger def CONST_WIDE_SIXTEEN(self, instruction): """ const-wide/16 vx, lit16 Puts the integer constant into vx and vx+1 registers, expanding the integer constant into a long constant. """ self._assign_value_wide(instruction) @logger def CONST_WIDE_THIRTY_TWO(self, instruction): """ const-wide/32 vx, lit32 Puts the 32 bit constant into vx and vx+1 registers, expanding the integer constant into a long constant. """ self._assign_value_wide(instruction) @logger def CONST_WIDE_HIGHSIXTEEN(self, instruction): """ const-wide/high16 vx,lit16 Puts the 16 bit constant into the highest 16 bit of vx and vx+1 registers. Used to initialize double values. """ self._assign_value_wide(instruction) @logger def AGET_KIND(self, instruction): """ aget-kind vx,vy,vz Gets an object reference value of an object reference array into vx. The array is referenced by vy and is indexed by vz. It means vx = vy[vz]. """ try: if "-" in instruction[0] and "object" not in instruction[0]: index = instruction[0].index("-") + 1 value_type = self.type_mapping[instruction[0][index:]] else: array_reg_index = int(instruction[2][1:]) value_type = self.table_obj.pop(array_reg_index).current_type[1:] self._move_value_to_register( instruction, "{src0}[{src1}]", wide=True, value_type=value_type ) except IndexError as e: log.exception(f"{e} in AGET_OBJECT") @logger def MOVE_KIND(self, instruction): try: wide = "wide" in instruction[0] self._move_value_to_register(instruction, "{src0}", wide=wide) except IndexError as e: log.exception(f"{e} in MOVE_KIND") @logger def FILLED_NEW_ARRAY_KIND(self, instruction): value_type = instruction[-1] try: self._invoke(instruction[:-1] + [f"new-array(){value_type}"]) except IndexError as e: log.exception(f"{e} in MOVE_KIND") @logger def AGET_WIDE_KIND(self, instruction): array_reg_index = int(instruction[2][1:]) try: value_type = self.table_obj.pop(array_reg_index).current_type[1:] destination = int(instruction[1][1:]) source_list = [int(reg[1:]) for reg in instruction[2:]] self._transfer_register( source_list, destination, "{src0}[{src1}]", value_type=value_type, ) self._transfer_register( source_list, destination + 1, "{src0}[{src1}]", value_type=value_type, ) except IndexError as e: log.exception(f"{e} in {instruction[0]}") @logger def APUT_KIND(self, instruction): try: value, array_reference, index = instruction[1:] self._move_value_to_register( (None, array_reference, array_reference, index, value), "{src0}[{src1}]:{src2}", ) except IndexError as e: log.exception(f"{e} in {instruction[0]}") @logger def APUT_WIDE_KIND(self, instruction): try: value, array_reference, index = instruction[1:] self._move_value_to_register( ( None, array_reference, array_reference, index, value, f"v{int(value[1:])+1}", ), "{src0}[{src1}]:({src2}, {src3})", ) except IndexError as e: log.exception(f"{e} in {instruction[0]}") @logger def NEG_AND_NOT_KIND(self, instruction): try: wide = any(wide_type in instruction[0] for wide_type in ("double", "long")) self._move_value_to_register(instruction, "{src0}", wide) except IndexError as e: log.exception(f"{e} in {instruction[0]}") @logger def CAST_TYPE(self, instruction): try: part = instruction[0].split("-") value_type = self.type_mapping[part[1]] if part[0] in ("double", "long"): self._move_value_to_register( instruction + [f"v{int(instruction[2][1:])+1}"], "casting({src0}, {src1})", value_type=value_type, ) elif part[1] in ("double", "long"): self._move_value_to_register( instruction, "casting({src0})", value_type=value_type, ) self._move_value_to_register( [ instruction[0], f"v{int(instruction[1][1:])+1}", instruction[2], ], "casting({src0})", value_type=value_type, ) else: self._move_value_to_register( instruction, "casting({src0})", value_type=value_type, ) except IndexError as e: log.exception(f"{e} in {instruction[0]}") @logger def BINOP_KIND(self, instruction): mnemonic = instruction[0] index = mnemonic.index("-") + 1 if "/" in mnemonic: r_index = mnemonic.index("/") value_type = self.type_mapping[mnemonic[index:r_index]] else: value_type = self.type_mapping[mnemonic[index:]] try: wide = value_type in ("D", "J") if "/2addr" in instruction[0]: self._combine_value_to_register( instruction, "binop({src0}, {src1})", wide, value_type=value_type, ) elif "/lit" in instruction[0]: self._move_value_and_data_to_register( instruction, "binop({src0}, {data})", wide, value_type=value_type, ) else: self._move_value_to_register( instruction, "binop({src0}, {src1})", wide, value_type=value_type, ) except IndexError as e: log.exception(f"{e} in BINOP_KIND") def show_table(self): return self.table_obj.get_table() def _move_value_to_register( self, instruction, str_format, wide=False, value_type=None ): destination = int(instruction[1][1:]) source_list = [int(reg[1:]) for reg in instruction[2:]] self._transfer_register( source_list, destination, str_format, value_type=value_type ) if wide: pair_source_list = [src + 1 for src in source_list] pair_destination = destination + 1 self._transfer_register( pair_source_list, pair_destination, str_format, value_type=value_type, ) def _lookup_implement(self, instance_type, method_full_name, skip_self=False): class_name, signature = method_full_name.split("->") index = signature.index("(") method_name, descriptor = signature[:index], signature[index:] class_pool = ( self.apkinfo.superclass_relationships[instance_type] if skip_self else {instance_type} ) next_class_pool = set() while class_pool and not ( len(class_pool) == 1 and "Ljava/lang/Object;" in class_pool ): next_class_pool.clear() for class_name in class_pool: method_list = self.apkinfo.find_method( class_name, method_name, descriptor ) if method_list: return PyEval.get_method_pattern( method_list[0].class_name, method_list[0].name, method_list[0].descriptor, ) next_class_pool.update( (self.apkinfo.superclass_relationships[class_name]) ) next_class_pool.difference_update(class_pool) class_pool = set(next_class_pool) raise ValueError( "The implement of method {signature} was" "not found. Instance type: {instance_type}" ) def _move_value_and_data_to_register( self, instruction, str_format, wide=False, value_type=None ): destination = int(instruction[1][1:]) source_list = [int(reg[1:]) for reg in instruction[2:-1]] data = instruction[-1] self._transfer_register( source_list, destination, str_format, data=data, value_type=value_type, ) if wide: self._transfer_register( source_list, destination + 1, str_format, data=data, value_type=value_type, ) def _combine_value_to_register( self, instruction, str_format, wide=False, value_type="" ): self._move_value_to_register( instruction[0:2] + instruction[1:], str_format, wide, value_type=value_type, ) def _transfer_register( self, source_list, destination, str_format, data=None, value_type=None ): source_register_list = [self.table_obj.pop(index) for index in source_list] if not value_type: value_type = source_register_list[0].current_type value_dict = { f"src{index}": register.value for index, register in enumerate(source_register_list) } value_dict["data"] = data new_register = RegisterObject( f"v{destination}", str_format.format(**value_dict), value_type=value_type, ) self.table_obj.insert(destination, new_register) @staticmethod def get_method_pattern( class_name: str, method_name: str, descriptor: str ) -> str: """Convert a method into a string representation to record method calls during the tainted analysis. :param class_name: the class name of the method :param method_name: the name of the method :param descriptor: the descriptor of the method :return: a string representation of the method """ return f"{class_name}->{method_name}{descriptor}" if __name__ == "__main__": pass quark-engine-23.4.1/quark/forensic/000077500000000000000000000000001442215066700171315ustar00rootroot00000000000000quark-engine-23.4.1/quark/forensic/__init__.py000066400000000000000000000000551442215066700212420ustar00rootroot00000000000000from quark.forensic.forensic import Forensic quark-engine-23.4.1/quark/forensic/forensic.py000066400000000000000000000052151442215066700213160ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from quark.core.apkinfo import AndroguardImp from quark.core.rzapkinfo import RizinImp from quark.utils.regex import ( extract_url, extract_ip, extract_content, validate_base64, extract_file, ) class Forensic: __slots__ = ["apk", "all_strings"] def __init__(self, apkpath, core_library="androguard"): if core_library == "rizin": self.apk = RizinImp(apkpath) elif core_library == "androguard": self.apk = AndroguardImp(apkpath) self.all_strings = self.apk.get_strings() def get_all_strings(self): """ Return all the strings inside the APK with a set. :return: a set of strings containing all strings """ return self.all_strings def get_url(self): """ Return all the url strings inside the APK with a set. :return: a set of strings containing the url """ url = set() for string in self.all_strings: if extract_url(string): for url_string in extract_url(string): url.add(url_string) return url def get_ip(self): """ Return all the ip address strings inside the APK with a set. :return: a set of strings containing the ip address """ ip = set() for string in self.all_strings: if extract_ip(string): for ip_string in extract_ip(string): ip.add(ip_string) return ip def get_content(self): """ Return all the content strings inside the APK with a set. :return: a set of strings containing "content://" """ return {string for string in self.all_strings if extract_content(string)} def get_file(self): """ Return all the file strings inside the APK with a set. :return: a set of strings containing "file://" """ return {string for string in self.all_strings if extract_file(string)} def get_base64(self): """ Return all possible Base64-encoded strings in the APK. :return: a set of strings containing possible Base64-encoded string """ return {string for string in self.all_strings if validate_base64(string)} def get_android_api(self): """ Return all Android APIs in the APK. :return: a list of MethodAnalysis which contains all Android API. """ return self.apk.android_apis if __name__ == "__main__": pass quark-engine-23.4.1/quark/forensic/vt_analysis.py000066400000000000000000000160631442215066700220450ustar00rootroot00000000000000import hashlib import os import time import requests from tqdm import tqdm from quark.utils.colors import green, red, yellow class VTAnalysis: def __init__(self, api_keys_list, waiting_time=16): self.REPORT_URL = "https://www.virustotal.com/vtapi/v2/file/report" self.SCAN_URL = "https://www.virustotal.com/vtapi/v2/file/scan" self.api_keys_list = {} for api_key in api_keys_list: self.api_keys_list[api_key] = True self.api_key = api_keys_list[0] self.reports = {} # A queue for uploaded file but waiting for retrieve report self.waiting_queue = set() self.WAITING_TIME = waiting_time def get_api_keys_list(self): return self.api_keys_list def get_file_md5(self, file): md5 = hashlib.md5() with open(file, "rb") as f: for chunk in iter(lambda: f.read(4096), b""): md5.update(chunk) return md5.hexdigest() def set_progress(self, progress): self.reports.update(progress) def change_api_key(self): tqdm.write(f"[*] {self.api_key} is unavailable, change another API key") self.api_keys_list[self.api_key] = False for api_key in self.api_keys_list: if self.api_keys_list[api_key]: self.api_key = api_key return True tqdm.write(red(f"[ERROR] There is no available api key")) return False def check_api_key_available(self): tqdm.write("[*] Check API keys available") for api_key in self.api_keys_list: try: params = { "apikey": api_key, "resource": "34efc3ebf51a6511c0d12cce7592db73", } res = requests.get(self.REPORT_URL, params) tqdm.write(f"API {api_key}: {res.status_code}") if res.status_code == 200: self.api_keys_list[api_key] = True elif res.status_code == 403: self.api_keys_list[api_key] = False elif res.status_code == 204: self.api_keys_list[api_key] = False elif res.status_code == 400: tqdm.write("Failed to check api key: Bad Request.") except Exception as e: tqdm.write(red(f"[ERROR] Failed to check api: {api_key}")) continue def get_reports(self, all_info=False): if all_info: return self.reports positives_report = {} for file_md5 in self.reports: if self.reports[file_md5] > 0: positives_report[file_md5] = self.reports[file_md5] return positives_report def retreive_report(self, file_md5): params = {"apikey": self.api_key, "resource": file_md5} res = requests.get(self.REPORT_URL, params) if res.status_code == 200: return res.json() else: if not self.change_api_key(): return False return self.retreive_report(file_md5) def scan_file(self, filename, file): params = { "apikey": self.api_key, } files = {"file": (filename, file)} res = requests.post(self.SCAN_URL, files=files, params=params) if res.status_code == 200: return res.json() else: if not self.change_api_key(): return False return self.scan_file(filename, file) def analyze_single_file(self, path): if not os.path.isfile(path): tqdm.write(red(f"[*] Error: Given path is not a file: {path}")) return # Retreive file report tqdm.write(f"[*] Retrieved file scan report: {path}") file_md5 = self.get_file_md5(path) if file_md5 in self.reports: tqdm.write(green(f"[*] {file_md5} already retrieved report")) return self.reports[file_md5] report = self.retreive_report(file_md5) time.sleep(self.WAITING_TIME) if not report: tqdm.write(red(f"[*] ERROR: All API keys are unavailable")) return -1 if report["response_code"] == 1: self.reports[file_md5] = report["positives"] return report["positives"] # Upload file to VT tqdm.write(f"[*] Upload file: {path}") with open(path, "rb") as f: scan_result = self.scan_file(os.path.basename(path), f) time.sleep(self.WAITING_TIME) if not scan_result: tqdm.write(red(f"[*] ERROR: All API keys are unavailable")) return -1 if scan_result["response_code"] == 0: tqdm.write(red(f"[*] ERROR: Failed to upload file: {path}")) return tqdm.write(f"[*] Retrieve file scan reports again") re_report = self.retreive_report(file_md5) time.sleep(self.WAITING_TIME) if not re_report: tqdm.write(red(f"[*] ERROR: All API keys are unavailable")) return -1 if re_report["response_code"] == 1: self.reports[file_md5] = report["positives"] return report["positives"] else: tqdm.write(f"[*] Unable to retrieve {file_md5}, add to waiting queue") self.waiting_queue.add(file_md5) return def analyze_multi_file(self, path): if not os.path.isdir(path): tqdm.write(red(f"[*] Error: Given path is not a directory: {path}")) return file_count = sum(len(files) for _, _, files in os.walk(path)) progress_bar = tqdm(total=file_count) for root, dirs, files in os.walk(path): # Walk the directory for name in files: file_path = os.path.join(root, name) try: result = self.analyze_single_file(file_path) progress_bar.update(1) # Increment the progress bar # All API keys are unavailable if result == -1: return if not result: continue # Found positives file if result > 0: tqdm.write(green(f"[*] Found positives file: {file_path}")) except Exception as e: tqdm.write(yellow(f"[WARN] Exception found: {e.message}")) continue progress_bar.close() # Retrieve the file report from waiting queue tqdm.write(f"[*] Start to retrieve file report from waiting queue") for file_md5 in tqdm(self.waiting_queue): try: report = self.retreive_report(file_md5) if not report: tqdm.write(red(f"[*] ERROR: All API keys are unavailable")) return -1 if report["response_code"] == 1: self.reports[file_md5] = report["positives"] except Exception as e: tqdm.write(yellow(f"[WARN] Exception found: {e.message}")) continue if __name__ == "__main__": pass quark-engine-23.4.1/quark/freshquark.py000066400000000000000000000060571442215066700200560ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. """ Freshquark is a command-line interface to download the latest Quark rules """ import os import subprocess from quark import config from quark.utils.colors import green, yellow from quark.utils.pprint import print_warning, print_info, print_success def download(): """ Download the latest quark-rules from https://github.com/quark-engine/quark-rules. :return: None """ if not os.path.isdir(config.DIR_PATH): try: result = subprocess.run( [ "git", "clone", "https://github.com/quark-engine/quark-rules", f"{config.HOME_DIR}quark-rules", ], stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=True, ) if result.returncode == 0: # Download successful print_success("Complete downloading the latest quark-rules") except FileNotFoundError: print_warning("FileNotFoundError with git clone") except subprocess.CalledProcessError as error: network_unavailable = "unable to access" if network_unavailable in error.stderr.decode("utf-8"): print_warning( f"Your network is currently unavailable, " f"you can use {green('freshquark')} " "to update the quark-rules later!\n" ) else: try: result = subprocess.run( [ "git", "-C", f"{config.HOME_DIR}quark-rules", "pull", ], stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=True, ) if result.returncode == 0: # Download successful print_success( f"Complete downloading the latest quark-rules.\n" f"All the rules are saved in {yellow(config.DIR_PATH)}.\n" f"To specify one of the rules of Quark-Rule, use " f"{yellow(f'{config.DIR_PATH}/.json')} " f"as an argument." ) except subprocess.CalledProcessError as error: network_unavailable = "unable to access" if network_unavailable in error.stderr.decode("utf-8"): print_warning( f"Your network is currently unavailable, " f"you can use {green('freshquark')} " "to update the quark-rules later!\n" ) def entry_point(): """ The command-line entry point for freshquark. It will download the latest quark-rules. :return: None """ print_info(f"Download the latest rules from {config.SOURCE}") download() if __name__ == "__main__": pass quark-engine-23.4.1/quark/logo.py000066400000000000000000000015731442215066700166410ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from quark import __version__ from quark.utils.colors import bold, lightyellow, lightblue def logo(): """ Output our amazing logo :return: None """ print( bold( lightyellow( """ ________ __ \\_____ \\ __ _______ _______| | __ / / \\ \\| | \\__ \\_ __ \\ |/ / / \\_/. \\ | // __ \\| | \\/ < \\_____\\ \\_/____/(____ /__| |__|_ \\ \\__> \\/ \\/ v{} """ ), ).format(__version__) + bold( lightblue( """ An Obfuscation-Neglect Android Malware Scoring System """ ), ), ) quark-engine-23.4.1/quark/radiocontrast.py000066400000000000000000000135271442215066700205570ustar00rootroot00000000000000# This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import os import json from tqdm import tqdm from quark.core.quark import Quark from quark.core.struct.ruleobject import RuleObject from quark.webreport.generate import ReportGenerator from quark.utils.tools import filter_api_by_usage_count class RadioContrast: """ This module is for generating rules with the APIs in a specific method. """ def __init__(self, apk_path, target_method, output_dir, max_search_layer=3): self.quark = Quark(apk_path) self.apkinfo = self.quark.apkinfo # Parse smali code into classname methodname and descriptor. classname = target_method.split("->")[0] methodname = target_method.split("->")[1].split("(")[0] descriptor = "(" + target_method.split("->")[1].split("(")[1] self.method = self.apkinfo.find_method( class_name=classname, method_name=methodname, descriptor=descriptor, )[0] if self.method is None: raise ValueError("Target method not found!") self.output_dir = output_dir self.api_set = set() self.max_search_layer = max_search_layer return def method_recursive_search(self, method_set, depth=1): """ Find all APIs in the target method. :param method_set: the list that contains each MethodAnalysis. :param depth: maximum number of recursive search functions. :return: a set of first_method_list ∊ second_method_list or None. """ # Not found same method usage, try to find the next layer. depth += 1 if depth > self.max_search_layer: return # Append first layer into next layer. next_level_set = method_set.copy() # Extend the xref from function into next layer. for md in next_level_set: if md[0].is_android_api(): self.api_set.add(md[0]) continue self.method_recursive_search(self.apkinfo.lowerfunc(md[0]), depth) def generate_rule(self, percentile_rank=0.2, web_editor=None): """ Generate rules and export them to the output directory. :param percentile_rank: The percentile rank for filter APIs by used count. :param web_editor: The path of the web editor html file. :return: None """ # Rescursive search for apis in target method. lower_funcs = set(self.apkinfo.lowerfunc(self.method)) self.method_recursive_search(lower_funcs) self.api_set, _ = filter_api_by_usage_count( self.apkinfo, self.api_set, percentile_rank=percentile_rank) first_apis_pool = list(self.api_set) second_apis_pool = list(self.api_set) # Setup progress bar. second_api_pool_num = len(second_apis_pool) outter_loop = tqdm(first_apis_pool) self.generated_result = list() # The number of rule file. rule_number = 1 for api1 in first_apis_pool: outter_loop.update(1) for num, api2 in enumerate(second_apis_pool, start=1): inner_desc = f"{num}/{second_api_pool_num}" outter_loop.set_postfix(inner_loop=inner_desc, refresh=True) # Skip the case of same method. if api2.name == api1.name: continue generated_rule = { "crime": "", "permission": [], "api": [ { "class": api1.class_name, "method": api1.name, "descriptor": api1.descriptor, }, { "class": api2.class_name, "method": api2.name, "descriptor": api2.descriptor, }, ], "score": 1, "label": [], } comb = RuleObject("test", jsonData=generated_rule) try: self.quark.run(comb) except KeyboardInterrupt: raise except Exception as e: tqdm.write( "{} and {} combination has some error when analyzing,\ ERROR MESSAGE: {}".format( api1, api2, e, ), ) continue if comb.check_item[4]: continue if web_editor: generated_rule["number"] = rule_number self.generated_result.append(generated_rule) rule_number += 1 else: rule_name = f"{rule_number}.json" rule_path = os.path.join(self.output_dir, rule_name) with open(rule_path, "w") as rule_file: json.dump(generated_rule, rule_file, indent=4) rule_number += 1 if web_editor: web_editor_data = { "apk_filename": self.quark.apkinfo.filename, "md5": self.quark.apkinfo.md5, "size_bytes": self.quark.apkinfo.filesize, "result": self.generated_result } editor_html = ReportGenerator( web_editor_data).get_rule_generate_editor_html() if ".html" not in web_editor: web_editor = f"{web_editor}.html" with open(web_editor, "w") as file: file.write(editor_html) file.close() # Clear progress bar outter_loop.clear() outter_loop.close() return quark-engine-23.4.1/quark/report.py000066400000000000000000000040411442215066700172050ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import os from quark.core.quark import Quark from quark.core.struct.ruleobject import RuleObject class Report: """ This module is for users who want to use quark as a Python module. """ def __init__(self): self.quark = None def analysis(self, apk, rule, core_library="androguard"): """ The main function of Quark-Engine analysis, the analysis is based on the provided APK file. :param core_library: the library to analysis binary :param apk: the APK file :param rule: the rule to be checked, it could be a directory or a single json rule :return: None """ self.quark = Quark(apk, core_library) if os.path.isdir(rule): rules_list = os.listdir(rule) for single_rule in rules_list: if single_rule.endswith("json"): rule_path = os.path.join(rule, single_rule) rule_checker = RuleObject(rule_path) # Run the checker self.quark.run(rule_checker) # Generate json report self.quark.generate_json_report(rule_checker) elif os.path.isfile(rule): if rule.endswith("json"): rule = RuleObject(rule) # Run checker self.quark.run(rule) # Generate json report self.quark.generate_json_report(rule) def get_report(self, report_type): """ Output the Quark-Engine report according to the report_type argument. :param report_type: string of the report format :return: string of the quark report with the format you specify """ if report_type == "json": return self.quark.get_json_report() raise ValueError( "The format are not supported, please refer to the Quark manual." ) quark-engine-23.4.1/quark/rulegeneration.py000066400000000000000000000114541442215066700207230ustar00rootroot00000000000000import os import json from tqdm import tqdm from quark.core.quark import Quark from quark.core.struct.ruleobject import RuleObject from quark.webreport.generate import ReportGenerator from quark.utils.tools import filter_api_by_usage_count class RuleGeneration: """ This module is for generating rules with the APIs that are 20% least usage count in the given APK """ def __init__(self, apk, output_dir): self.quark = Quark(apk) self.apkinfo = self.quark.apkinfo self.api_set = self.apkinfo.android_apis self.output_dir = output_dir self.first_api_set, self.second_api_set = filter_api_by_usage_count( self.apkinfo, self.api_set, percentile_rank=0.2) return def generate_rule(self, web_editor=None, stage=1): """ Generate rules and export them to the output directory. :param web_editor: The path of the web editor. :param stage: The int for stage of rule generation. :return: None """ if stage == 1: first_apis_pool = list(self.first_api_set) second_apis_pool = list(self.first_api_set) elif stage == 2: first_apis_pool = list(self.first_api_set) second_apis_pool = list(self.second_api_set) elif stage == 3: first_apis_pool = list(self.second_api_set) second_apis_pool = list(self.first_api_set) elif stage == 4: first_apis_pool = list(self.second_api_set) second_apis_pool = list(self.second_api_set) elif stage == 0: first_apis_pool = list(self.first_api_set) + \ list(self.second_api_set) second_apis_pool = list(self.first_api_set) + \ list(self.second_api_set) self.generated_result = list() # Setup progress bar. second_api_pool_num = len(second_apis_pool) outter_loop = tqdm(first_apis_pool) # The number of rule file. rule_number = 1 for api1 in first_apis_pool: outter_loop.update(1) for num, api2 in enumerate(second_apis_pool, start=1): inner_desc = f"{num}/{second_api_pool_num}" outter_loop.set_postfix(inner_loop=inner_desc, refresh=True) # Skip the case of same method. if api2.name == api1.name: continue generated_rule = { "crime": "", "permission": [], "api": [ { "class": api1.class_name, "method": api1.name, "descriptor": api1.descriptor, }, { "class": api2.class_name, "method": api2.name, "descriptor": api2.descriptor, }, ], "score": 1, "label": [], } comb = RuleObject("test", jsonData=generated_rule) try: self.quark.run(comb) except KeyboardInterrupt: raise except Exception as e: tqdm.write( "{} and {} combination has some error when analyzing,\ ERROR MESSAGE: {}".format( api1, api2, e, ), ) continue if not comb.check_item[4]: continue if web_editor: generated_rule["number"] = rule_number self.generated_result.append(generated_rule) rule_number += 1 else: rule_name = f"{rule_number}.json" rule_path = os.path.join(self.output_dir, rule_name) with open(rule_path, "w") as rule_file: json.dump(generated_rule, rule_file, indent=4) rule_number += 1 if web_editor: web_editor_data = { "apk_filename": self.quark.apkinfo.filename, "md5": self.quark.apkinfo.md5, "size_bytes": self.quark.apkinfo.filesize, "result": self.generated_result } editor_html = ReportGenerator( web_editor_data).get_rule_generate_editor_html() if ".html" not in web_editor: web_editor = f"{web_editor}.html" with open(web_editor, "w") as file: file.write(editor_html) file.close() # Clear progress bar outter_loop.clear() outter_loop.close() return quark-engine-23.4.1/quark/rules/000077500000000000000000000000001442215066700164535ustar00rootroot00000000000000quark-engine-23.4.1/quark/rules/sendLocation_SMS.json000066400000000000000000000013611442215066700225130ustar00rootroot00000000000000{ "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "score": 4, "label": [ "location", "collection" ] } quark-engine-23.4.1/quark/script/000077500000000000000000000000001442215066700166255ustar00rootroot00000000000000quark-engine-23.4.1/quark/script/__init__.py000066400000000000000000000434601442215066700207450ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import re import functools from os import PathLike from os.path import abspath, isfile, join from typing import Any, List, Tuple, Union from quark.config import DIR_PATH as QUARK_RULE_PATH from quark.core.analysis import QuarkAnalysis from quark.core.interface.baseapkinfo import XMLElement from quark.core.quark import Quark from quark.core.struct.methodobject import MethodObject from quark.core.struct.ruleobject import RuleObject as Rule from quark.evaluator.pyeval import PyEval from quark.utils.regex import URL_REGEX from quark.utils.tools import ( get_arguments_from_argument_str, get_parenthetic_contents, ) @functools.lru_cache def _getQuark(apk: PathLike) -> Quark: return Quark(apk) class Ruleset: def __init__(self, ruleFolder: PathLike) -> None: self.ruleFolder = ruleFolder # Apply cache self._loadRule = functools.lru_cache()(self._loadRuleWithoutCache) def __getitem__(self, key: str) -> Rule: return self._loadRule(key) def _loadRuleWithoutCache(self, key: str): absoluteRulePath = abspath(join(self.ruleFolder, key)) if isfile(absoluteRulePath) and absoluteRulePath.endswith(".json"): return Rule(absoluteRulePath) else: raise KeyError(f"Unable to find file {absoluteRulePath}") class DefaultRuleset(Ruleset): def __getitem__(self, key: Union[str, int]) -> Rule: return super().__getitem__(f"{key:05}.json") DEFAULT_RULESET = DefaultRuleset(join(QUARK_RULE_PATH, "rules")) class Application: def __init__(self, xml: XMLElement) -> None: self.xml: XMLElement = xml def __str__(self) -> str: return str(self._getAttribute("label")) def _getAttribute( self, attributeName: str, defaultValue: Any = None ) -> Any: realAttributeName = ( f"{{http://schemas.android.com/apk/res/android}}{attributeName}" ) return self.xml.get(realAttributeName, defaultValue) def isDebuggable(self) -> bool: """Check if the application element sets `android:debuggable=true`. :return: True/False """ debuggable = self._getAttribute("debuggable") print(debuggable) if debuggable is None: return False return str(debuggable).lower() == "true" class Activity: def __init__(self, xml: XMLElement) -> None: self.xml: XMLElement = xml def __str__(self) -> str: return self._getAttribute("name") def _getAttribute( self, attributeName: str, defaultValue: Any = None ) -> Any: realAttributeName = ( f"{{http://schemas.android.com/apk/res/android}}{attributeName}" ) return self.xml.get(realAttributeName, defaultValue) def hasIntentFilter(self) -> bool: """Check if the activity has an intent filter. :return: True/False """ return self.xml.find("intent-filter") is not None def isExported(self) -> bool: """Check if the activity is exported. :return: True/False """ exported = self._getAttribute("exported", self.hasIntentFilter()) return exported class Method: def __init__( self, quarkResultInstance: "QuarkResult" = None, methodObj: MethodObject = None, quark: "Quark" = None, behavior: "Behavior" = None, targetMethod: "Method" = None ) -> None: self.quark = quark self.quarkResult = quarkResultInstance self.innerObj = methodObj self.behavior = behavior self.targetMethod = targetMethod def __getattr__(self, name) -> Any: return getattr(self.innerObj, name) def __eq__(self, __o: object) -> bool: if isinstance(__o, Method): return __o.innerObj == self.innerObj return False def getXrefTo(self) -> List[Tuple["Method", int]]: """Find out who this method called. :return: python list containing tuples (callee methods, index) """ return self.quarkResult.getMethodXrefTo(self) def getXrefFrom(self) -> List["Method"]: """Find out who call this method. :return: python list containing caller methods """ return self.quarkResult.getMethodXrefFrom(self) def getArguments(self) -> List[Any]: """Get arguments from method. :return: python list containing arguments """ if self.behavior is None or self.quarkResult is None: usageTable = self.quark._evaluate_method( self.innerObj ) register_usage_records = ( c_func for table in usageTable for val_obj in table for c_func in val_obj.called_by_func ) methodPattern = PyEval.get_method_pattern( self.targetMethod.innerObj.class_name, self.targetMethod.innerObj.name, self.targetMethod.innerObj.descriptor ) matchedRecords = list(filter( lambda record: methodPattern in record, register_usage_records)) argumentStr = max(matchedRecords, key=len, default="")[:-1] filterStr = f"{self.targetMethod.innerObj.class_name}->" + \ self.targetMethod.innerObj.name + \ self.targetMethod.descriptor argumentStr = argumentStr.replace(filterStr, "")[1:] return get_arguments_from_argument_str( argumentStr, self.targetMethod.innerObj.descriptor ) argumentsOfSecondAPI = self.behavior.getParamValues() if self == self.behavior.secondAPI: return self.behavior.getParamValues() else: methodPattern = PyEval.get_method_pattern( self.className, self.methodName, self.descriptor ) argumentsOfFirstAPI = ( get_parenthetic_contents( argument, argument.find(methodPattern) ) for argument in argumentsOfSecondAPI if methodPattern in argument ) return get_arguments_from_argument_str( next(argumentsOfFirstAPI, ""), self.descriptor ) def findSuperclassHierarchy(self) -> List[str]: """Find all superclasses of this method object. :return: Python list contains all superclass names of this method. """ parentsHierarchy = list() targetClassAnalysis = self.quark.apkinfo.analysis.get_class_analysis( self.class_name) while targetClassAnalysis and "Ljava/lang/Object;" != targetClassAnalysis.extends: parentsHierarchy.append(targetClassAnalysis.extends) targetClassAnalysis = self.quark.apkinfo.analysis.get_class_analysis( targetClassAnalysis.extends) return parentsHierarchy @property def fullName(self) -> str: """Show the name of the method. :return: the name of the method """ return self.innerObj.full_name @property def className(self) -> str: """Show the class name of the method. :return: the string of the method class name """ return self.innerObj.class_name @property def methodName(self) -> str: """Show the method name of the method. :return: the string of the method name """ return self.innerObj.name @property def descriptor(self) -> str: """Show the descriptor of the method. :return: the string of the method descriptor """ return self.innerObj.descriptor class Behavior: def __init__( self, quarkResultInstance: "QuarkResult", methodCaller: Method, firstAPI: Method, secondAPI: Method, ) -> None: self.quarkResult = quarkResultInstance self.methodCaller = methodCaller self.firstAPI = firstAPI self.secondAPI = secondAPI self.methodCaller.behavior = self self.firstAPI.behavior = self self.secondAPI.behavior = self def hasString(self, pattern: str, isRegex=False) -> List[str]: """Check if the arguments of the two APIs contain the string. :param pattern: string that may appear in the arguments :param isRegex: consider the string as a regular expression if True, defaults to False :return: the matched string """ usageTable = self.quarkResult.quark._evaluate_method( self.methodCaller.innerObj ) result_generator = ( self.quarkResult.quark.check_parameter_on_single_method( usage_table=usageTable, first_method=self.firstAPI.innerObj, second_method=self.secondAPI.innerObj, keyword_item_list=[(pattern,), (pattern,)], regex=isRegex, ) ) found_keywords = { keyword for _, keyword_list in result_generator for keyword in keyword_list } return list(found_keywords) def hasUrl(self) -> List[str]: """Check if the behavior contains urls. :return: python list containing all detected urls """ return self.hasString(URL_REGEX, True) def getParamValues(self) -> List[Any]: """Get parameter values from behavior. :return: python list containing parameter values """ allResult = self.hasString(".*", True) argumentStr = max(allResult, key=len)[1:-1] return get_arguments_from_argument_str( argumentStr, self.secondAPI.descriptor ) def isArgFromMethod(self, targetMethod: List[str]) -> bool: """Check if there are any argument from the target method. :param targetMethod: python list contains class name, method name, and descriptor of target method :return: True/False """ className, methodName, descriptor = targetMethod pattern = PyEval.get_method_pattern(className, methodName, descriptor) return bool(self.hasString(pattern)) def getMethodsInArgs(self) -> List[str]: """Get the methods which the arguments in API2 has passed through. :return: python list containing method instances """ METHOD_REGEX = r"L(.*?)\;\(" methodCalled = [] for param in self.getParamValues(): for result in re.findall(METHOD_REGEX, param): className = "L" + result.split("->")[0] methodName = re.findall(r"->(.*?)\(", result)[0] descriptor = result.split(methodName)[-1] + ";" methodObj_list = self.quarkResult.quark.apkinfo.find_method( class_name=className, method_name=methodName, descriptor=descriptor ) for methodObj in methodObj_list: methodCalled.append(Method(methodObj=methodObj)) return methodCalled class QuarkResult: def __init__(self, quark: Quark, ruleInstance: Rule) -> None: self.quark = quark self.quark.run(ruleInstance) self.rule = ruleInstance # Reset the Quark object self.innerObj = self.quark.quark_analysis self.quark.quark_analysis = QuarkAnalysis() @functools.cached_property def behaviorOccurList(self): """List that stores instances of detected behavior in different part of the target file. :return: detected behavior instance """ occurList = [ Behavior( quarkResultInstance=self, methodCaller=self._wrapMethodObject( call_graph_analysis["parent"] ), firstAPI=self._wrapMethodObject( call_graph_analysis["first_call"] ), secondAPI=self._wrapMethodObject( call_graph_analysis["second_call"] ), ) for call_graph_analysis in self.innerObj.call_graph_analysis_list ] return occurList def getMethodXrefTo(self, method: Method) -> List[Tuple[Method, int]]: apkinfo = self.quark.apkinfo methodObj = method.innerObj callee_info = [ (self._wrapMethodObject(callee), offset) for callee, offset in list(apkinfo.lowerfunc(methodObj)) ] return callee_info def getMethodXrefFrom(self, method: Method) -> List[Method]: apkinfo = self.quark.apkinfo methodObj = method.innerObj caller_set = apkinfo.upperfunc(methodObj) return [self._wrapMethodObject(caller) for caller in list(caller_set)] def _wrapMethodObject(self, methodObj: MethodObject, quark: Quark = None, targetMethod: Method = None) -> Method: if methodObj: if targetMethod: return Method(self, methodObj=methodObj, quark=quark, targetMethod=targetMethod) else: return Method(self, methodObj) else: return None def getAllStrings(self) -> List[str]: """ List all strings inside the target APK. :return: python list containing all defined strings. """ apkinfo = self.quark.apkinfo return apkinfo.get_strings() def isHardcoded(self, argument: str) -> bool: """ Check if the argument is hardcoded into the APK. :params argument: string value that is passed in when a method is invoked :return: True/False """ return argument in self.getAllStrings() def findMethodInCaller( self, callerMethod: Union[List[str], Method], targetMethod: Union[List[str], Method], ) -> List[Method]: """ Find target method in caller method. :params callerMethod: python list or Method instance containing class name, method name and descriptor of caller method. :params targetMethod: python list or Method instance containing class name, method name and descriptor of target method. :return: python list contains target method instances. """ def __convertMethodToListOfStr(method: Method) -> List[str]: return [method.className, method.methodName, method.descriptor] if isinstance(callerMethod, Method): callerMethod = __convertMethodToListOfStr(callerMethod) if isinstance(targetMethod, Method): targetMethod = __convertMethodToListOfStr(targetMethod) apkinfo = self.quark.apkinfo callerMethodObj = apkinfo.find_method( class_name=callerMethod[0], method_name=callerMethod[1], descriptor=callerMethod[2], )[0] if not callerMethodObj: print("Caller method not Found!") raise ValueError callerMethodInstance = Method(self, callerMethodObj) matchedMethods = [] for calleeMethod, _ in callerMethodInstance.getXrefTo(): if ( calleeMethod.innerObj.class_name == targetMethod[0] and calleeMethod.innerObj.name == targetMethod[1] and calleeMethod.innerObj.descriptor == targetMethod[2] ): matchedMethods.append(calleeMethod) return [self._wrapMethodObject( callerMethodObj, self.quark, matchedMethod ) for matchedMethod in matchedMethods] def runQuarkAnalysis(samplePath: PathLike, ruleInstance: Rule) -> QuarkResult: """Given detection rule and target sample, this instance runs the basic Quark. :param samplePath: Target file :param ruleInstance: Quark rule object :return: QuarkResult instance """ quark = _getQuark(samplePath) analysis = QuarkResult(quark, ruleInstance) return analysis def getActivities(samplePath: PathLike) -> List[Activity]: """Get activities from a target sample. :param samplePath: target file :return: python list containing activities """ quark = _getQuark(samplePath) apkinfo = quark.apkinfo return [Activity(xml) for xml in apkinfo.activities] def getApplication(samplePath: PathLike) -> Application: """Get the application element from the manifest file of the target sample. :param samplePath: the file path of the target sample :return: the application element of the target sample """ quark = _getQuark(samplePath) apkinfo = quark.apkinfo return Application(apkinfo.application) def findMethodInAPK( samplePath: PathLike, targetMethod: Union[List[str], Method] ) -> List[Method]: """Find the target method in APK. :param samplePath: target file :param targetMethod: python list contains class name, method name, and descriptor of target method :return: python list contains caller methods """ def _wrapMethodObject( quark: Quark, methodObj: MethodObject, targetMethod: Method ) -> Method: if methodObj: return Method( quark=quark, methodObj=methodObj, targetMethod=targetMethod) else: return None quark = _getQuark(samplePath) match_methods = quark.apkinfo.find_method( class_name=targetMethod[0], method_name=targetMethod[1], descriptor=targetMethod[2], ) if not match_methods: return [] caller_methods = list() for method in match_methods: methodInstance = Method(methodObj=method) caller_set = quark.apkinfo.upperfunc(method) caller_methods += [ _wrapMethodObject(quark, caller, methodInstance) for caller in list(caller_set) ] return caller_methods quark-engine-23.4.1/quark/script/ciphey.py000066400000000000000000000007431442215066700204640ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from ciphey import decrypt from ciphey.iface import Config def checkClearText(inputString: str) -> str: """Check the decrypted value of the input string. :param inputString: string to be checked. :return: the decrypted value """ return decrypt(Config().library_default().complete_config(), inputString) quark-engine-23.4.1/quark/script/frida/000077500000000000000000000000001442215066700177125ustar00rootroot00000000000000quark-engine-23.4.1/quark/script/frida/__init__.py000066400000000000000000000154421442215066700220310ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import functools import json import re import sys from dataclasses import dataclass from time import sleep from typing import Any, Dict, List, Tuple, Union import pkg_resources from quark.utils.regex import URL_REGEX import frida from frida.core import Device from frida.core import Session as FridaSession MethodCallEvent = Dict[str, Union[List[str], str]] class MethodCallEventDispatcher: def __init__(self, frida: FridaSession) -> None: self.frida = frida self.watchedMethods = {} @staticmethod def _getMethodIdentifier(targetMethod: str, paramType: str): return (targetMethod, paramType) def startWatchingMethodCall( self, targetMethod: str, methodParamTypes: str ) -> List[MethodCallEvent]: """Start tracking calls to the target method. :param targetMethod: the target API :param methodParamTypes: the parameter types of the target API :return: python list that holds calls to the target method """ eventBuffer = [] methodId = self._getMethodIdentifier(targetMethod, methodParamTypes) self.watchedMethods[methodId] = eventBuffer self.script.exports.watch_method_call(targetMethod, methodParamTypes) return eventBuffer def stopWatchingMethodCall( self, targetMethod: str, methodParamTypes: str ) -> None: """Stop tracking calls to the target method. :param targetMethod: the target API :param methodParamTypes: the parameter types of the target API """ methodId = self._getMethodIdentifier(targetMethod, methodParamTypes) if methodId in self.watchedMethods: del self.watchedMethods[methodId] def handleCapturedEvent(self, eventWrapperFromFrida: dict, _) -> None: """Send the event captured by Frida to the corresponding buffers. :param eventWrapperFromFrida: python dict containing captured events """ if eventWrapperFromFrida["type"] == "error": errorDescription = eventWrapperFromFrida["description"] print(errorDescription, file=sys.stderr) return methodCallEvent = json.loads(eventWrapperFromFrida["payload"]) eventType = methodCallEvent.get("type", None) if eventType == "CallCaptured": methodId = tuple(methodCallEvent["identifier"][0:2]) if methodId in self.watchedMethods: messageBuffer = self.watchedMethods[methodId] messageBuffer.append(methodCallEvent) elif eventType == "FailedToWatch": methodId = tuple(methodCallEvent["identifier"]) self.watchedMethods.pop(methodId) @functools.lru_cache def _spawnApp( appPackageName: str, protocol="usb", **kwargs: Any ) -> Tuple[Device, FridaSession, int]: """Spawn the target APP with Frida :param appPackageName: the package name of the target APP :param protocol: string that holds the protocol to communicate with the Frida server, defaults to "usb" :return: tuple containing the device ID, the Frida instance and the process ID of the APP. """ device = None if protocol == "usb": device = frida.get_usb_device(**kwargs) elif protocol == "local": device = frida.get_local_device(**kwargs) elif protocol == "remote": device = frida.get_remote_device(**kwargs) processId = device.spawn([appPackageName]) session = device.attach(processId) return device, session, processId @functools.lru_cache def _injectAgent(frida: FridaSession) -> MethodCallEventDispatcher: """Inject a Frida agent to help track method calls. :param frida: Frida instance to be injected :return: dispatcher that stores the captured calls to the appropriate buffers """ dispatcher = MethodCallEventDispatcher(frida) pathToFridaAgentSource = pkg_resources.resource_filename( "quark.script.frida", "agent.js" ) with open(pathToFridaAgentSource, "r") as fridaAgentSource: fridaAgent = dispatcher.frida.create_script(fridaAgentSource.read()) fridaAgent.on("message", dispatcher.handleCapturedEvent) fridaAgent.load() dispatcher.script = fridaAgent return dispatcher @dataclass class Behavior: _callEvent: MethodCallEvent def hasString(self, pattern: str, regex: bool = False) -> List[str]: """Check if the behavior contains strings :param pattern: string to be checked :param regex: True if the string is a regular expression, defaults to False :return: python list containing all matched strings """ arguments = self.getParamValues() allMatchedStrings = set() for argument in arguments: if regex: matchedStrings = [ match.group(0) for match in re.finditer(pattern, argument) ] allMatchedStrings.update(matchedStrings) else: if pattern in argument: return [pattern] return list(allMatchedStrings) def hasUrl(self) -> List[str]: """Check if the behavior contains urls. :return: python list containing all detected urls """ return self.hasString(URL_REGEX, True) def getParamValues(self) -> List[str]: """Get parameter values from behavior. :return: python list containing parameter values """ return self._callEvent["paramValues"] @dataclass class FridaResult: _eventBuffer: List[MethodCallEvent] @property def behaviorOccurList(self) -> List[Behavior]: """List that stores instances of detected behavior in different part of the target file. :return: detected behavior instance """ return [Behavior(message) for message in self._eventBuffer] def runFridaHook( apkPackageName: str, targetMethod: str, methodParamTypes: str, secondToWait: int = 10, ) -> FridaResult: """Track calls to the specified method for given seconds. :param apkPackageName: the package name of the target APP :param targetMethod: the target API :param methodParamTypes: string that holds the parameters used by the target API :param secondToWait: seconds to wait for method calls, defaults to 10 :return: FridaResult instance """ device, frida, appProcess = _spawnApp(apkPackageName) dispatcher = _injectAgent(frida) eventBuffer = dispatcher.startWatchingMethodCall( targetMethod, methodParamTypes ) device.resume(appProcess) sleep(secondToWait) dispatcher.stopWatchingMethodCall(targetMethod, methodParamTypes) return FridaResult(eventBuffer) quark-engine-23.4.1/quark/script/frida/agent.js000066400000000000000000000042721442215066700213530ustar00rootroot00000000000000// -*- coding: utf-8 -*- // This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine // See the file 'LICENSE' for copying permission. /*global Java, send, rpc*/ function replaceMethodImplementation(targetMethod, classAndMethodName, methodParamTypes, returnType) { targetMethod.implementation = function () { let callEvent = { "type": "CallCaptured", "identifier": [classAndMethodName, methodParamTypes, returnType], "paramValues": [] }; for (const arg of arguments) { callEvent["paramValues"].push((arg || "(none)").toString()); } send(JSON.stringify(callEvent)); return targetMethod.apply(this, arguments); }; } function watchMethodCall(classAndMethodName, methodParamTypes) { if (classAndMethodName == null || methodParamTypes == null) { return; } const indexOfLastSeparator = classAndMethodName.lastIndexOf("."); const classNamePattern = classAndMethodName.substring(0, indexOfLastSeparator); const methodNamePattern = classAndMethodName.substring(indexOfLastSeparator + 1); Java.perform(() => { const classOfTargetMethod = Java.use(classNamePattern); const possibleMethods = classOfTargetMethod[`${methodNamePattern}`]; if (typeof possibleMethods === "undefined") { const failedToWatchEvent = { "type": "FailedToWatch", "identifier": [classAndMethodName, methodParamTypes] }; send(JSON.stringify(failedToWatchEvent)); return; } possibleMethods.overloads.filter((possibleMethod) => { const paramTypesOfPossibleMethod = possibleMethod.argumentTypes.map((argument) => argument.className); return paramTypesOfPossibleMethod.join(",") === methodParamTypes; }).forEach((matchedMethod) => { const retType = matchedMethod.returnType.name; replaceMethodImplementation(matchedMethod, classAndMethodName, methodParamTypes, retType); } ); }); } rpc.exports["watchMethodCall"] = (classAndMethodName, methodParamTypes) => watchMethodCall(classAndMethodName, methodParamTypes);quark-engine-23.4.1/quark/script/objection.py000066400000000000000000000052551442215066700211620ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import re from typing import Tuple, Union import requests from quark.script import Method def convertMethodToString(method: Method): def converArgumentsToObjectionFormat(arguments: str): argList = arguments.split() argList = map( lambda a: a.replace("/", ".") if a.startswith("[L") else re.sub("(^L)|;", "", a).replace("/", "."), argList, ) return ",".join(argList) str_mapping = { "class_name": method.class_name[1:-1].replace("/", "."), "method_name": method.name, "arguments": converArgumentsToObjectionFormat( method.descriptor[1: method.descriptor.index(")")] ), } return ( "{class_name}.{method_name}".format_map(str_mapping), str_mapping["arguments"], ) class Objection: def __init__(self, host: str) -> None: """Create an instance for Objection (dynamic analysis tool). :param host: Monitoring IP:port """ self.host = host def _sendRequest( self, rpcEndpoint: str, data: dict = None ) -> Tuple[int, dict]: url = f"http://{self.host}/rpc/invoke/{rpcEndpoint}" if data: response = requests.post( url, json=data, headers={"Content-type": "application/json"} ) else: response = requests.get(url) return (response.status_code, response.json()) def hookMethod( self, method: Union[Method, str], overloadFilter: str = "", watchArgs: bool = False, watchBacktrace: bool = False, watchRet: bool = False, ): """Hook the target method with Objection. :param method: the tagrget API :param overloadFilter: _description_, defaults to "" :param watchArgs: Return Args information if True, defaults to False :param watchBacktrace: Return backtrace information if True, defaults to False :param watchRet: Return the return information of the target API if True, defaults to False """ # Convert Method object to a string if isinstance(method, Method): method, overloadFilter = convertMethodToString(method) ENDPOINT = "androidHookingWatchMethod" data = { "pattern": method, "overloadFilter": overloadFilter, "watchArgs": watchArgs, "watchBacktrace": watchBacktrace, "watchRet": watchRet, } self._sendRequest(ENDPOINT, data) quark-engine-23.4.1/quark/script/utils.py000066400000000000000000000005761442215066700203470ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. def isArgumentTrue(argument: str) -> bool: """Check if the argument holds the Boolean value, True. :param argument: string that holds the value of a register :return: True/False """ return argument == "1" quark-engine-23.4.1/quark/utils/000077500000000000000000000000001442215066700164615ustar00rootroot00000000000000quark-engine-23.4.1/quark/utils/__init__.py000066400000000000000000000000001442215066700205600ustar00rootroot00000000000000quark-engine-23.4.1/quark/utils/colors.py000066400000000000000000000024551442215066700203420ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import os import sys CHECK_LIST = "".join(["\t[" + "\u2713" + "]"]) def color(text, color_code): """Colorize text. @param text: text. @param color_code: color. @return: colorized text. """ # $TERM under Windows: # cmd.exe -> "" (what would you expect..?) # cygwin -> "cygwin" (should support colors, but doesn't work somehow) # mintty -> "xterm" (supports colors) if sys.platform == "win32" and os.getenv("TERM") != "xterm": return text return "\x1b[%dm%s\x1b[0m" % (color_code, text) def black(text): return color(text, 30) def yellow(text): return color(text, 33) def red(text): return color(text, 91) def green(text): return color(text, 92) def blue(text): return color(text, 34) def magenta(text): return color(text, 35) def cyan(text): return color(text, 36) def white(text): return color(text, 37) def bold(text): return color(text, 1) def lightyellow(text): return color(text, 93) def lightblue(text): return color(text, 94) def colorful_report(arg0): print(red(CHECK_LIST), end="") print(green(bold(arg0)), end="") print("") quark-engine-23.4.1/quark/utils/graph.py000066400000000000000000000224461442215066700201440ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import sys import os import plotly.graph_objects as go from graphviz import Digraph from prompt_toolkit.shortcuts import checkboxlist_dialog def wrapper_lookup(apkinfo, method, native_api): visited_method_list = set() stack = [method] while stack: parent = stack[-1] if parent not in visited_method_list: visited_method_list.add(parent) submethods = {reference[0] for reference in apkinfo.lowerfunc(parent)} if native_api in submethods: return [parent] next_level = filter(lambda m: not m.is_android_api(), submethods) stack.extend(next_level) else: stack.pop() return [] def call_graph(call_graph_analysis, output_format="png"): """ Generating a call graph based on two native Android APIs. """ parent_function = call_graph_analysis["parent"] apkinfo = call_graph_analysis["apkinfo"] first_call = call_graph_analysis["first_call"] second_call = call_graph_analysis["second_call"] first_api = call_graph_analysis["first_api"] second_api = call_graph_analysis["second_api"] crime = call_graph_analysis["crime"] if first_call != first_api: first_wrapper = wrapper_lookup(apkinfo, first_call, first_api) if second_call != second_api: second_wrapper = wrapper_lookup(apkinfo, second_call, second_api) # Initialize the Digraph object dot = Digraph( filename=f"{parent_function.name}_{first_call.name}_{second_call.name}", node_attr={"fontname": "Courier New Bold"}, comment="Quark-Engine Call Graph Result", format=output_format, graph_attr={ "label": f"Potential Malicious Activity: {crime}", "labelloc": "top", "center": "true", }, ) dot.attr(compound="true") with dot.subgraph(name="cluster_mutual") as mutual_parent_function_description: mutual_parent_function_description.attr( style="rounded", penwidth="1", fillcolor="white", fontname="Courier New", shape="box", ) mutual_parent_function_description.attr( label="Mutual Parent Function", fontname="Courier New Bold" ) # mutual parent function node p, r = str(parent_function.descriptor).split(")") mutual_parent_function_description.node( f"{parent_function.full_name}", label=f"Access: {parent_function.access_flags}\nClass: {parent_function.class_name}\nMethod: {parent_function.name}\n Parameter: {p})\n Return: {r}", shape="none", fontcolor="blue", fontname="Courier New", ) with dot.subgraph(name="cluster_0") as wrapper: wrapper.attr(label="Wrapped Functions", fontname="Courier New Bold") wrapper.attr(style="rounded", penwidth="1", fillcolor="red", shape="box") # Build the first call nodes if first_call != first_api: for wp_func in first_wrapper: p, r = str(wp_func.descriptor).split(")") wrapper.node( f"{wp_func.full_name}", label=f"Access: {wp_func.access_flags}\nClass: {wp_func.class_name}\nMethod: {wp_func.name}\n Parameter: {p})\n Return: {r}", style="rounded", fontcolor="blue", penwidth="1", fillcolor="white", fontname="Courier New", shape="none", ) # wrapper -> wrapper for i in range(len(first_wrapper) - 1, 0, -1): wrapper.edge( f"{first_wrapper[i].full_name}", f"{first_wrapper[i - 1].full_name}", "calls", fontname="Courier New", ) if second_call != second_api: for wp_func in second_wrapper: p, r = str(wp_func.descriptor).split(")") wrapper.node( f"{wp_func.full_name}", label=f"Access: {wp_func.access_flags}\nClass: {wp_func.class_name}\nMethod: {wp_func.name}\n Parameter: {p})\n Return: {r}", style="rounded", fontcolor="blue", penwidth="1", fillcolor="white", fontname="Courier New", shape="none", ) # wrapper -> wrapper for i in range(len(second_wrapper) - 1, 0, -1): wrapper.edge( f"{second_wrapper[i].full_name}", f"{second_wrapper[i - 1].full_name}", "calls", fontname="Courier New", ) with dot.subgraph(name="cluster_1") as native_call_subgraph: native_call_subgraph.attr( style="rounded", penwidth="1", fillcolor="white", fontname="Courier New", shape="box", ) native_call_subgraph.attr(label="Native API Calls", fontname="Courier New Bold") # Native API Calls native_call_subgraph.node( f"{first_api.full_name}", label=f"Class: {first_api.class_name}\nMethod: {first_api.name}", fontcolor="blue", shape="none", fontname="Courier New", ) native_call_subgraph.node( f"{second_api.full_name}", label=f"Class: {second_api.class_name}\nMethod: {second_api.name}", fontcolor="blue", shape="none", fontname="Courier New", ) # mutual parent function -> the first node of each node if first_call != first_api: dot.edge( f"{parent_function.full_name}", f"{first_wrapper[-1].full_name}", "First Call", fontname="Courier New", ) dot.edge( f"{first_wrapper[0].full_name}", f"{first_api.full_name}", "calls", fontname="Courier New", ) else: dot.edge( f"{parent_function.full_name}", f"{first_api.full_name}", "First Call", fontname="Courier New", ) if second_call != second_api: dot.edge( f"{parent_function.full_name}", f"{second_wrapper[-1].full_name}", "Second Call", fontname="Courier New", ) dot.edge( f"{second_wrapper[0].full_name}", f"{second_api.full_name}", "calls", fontname="Courier New", ) else: dot.edge( f"{parent_function.full_name}", f"{second_api.full_name}", "Second Call", fontname="Courier New", ) dot.render( f"call_graph_image/{parent_function.name}_{first_call.name}_{second_call.name}" ) def show_comparison_graph(title, labels, malware_confidences, font_size=22): """ show radar chart based on max label confidence of several malwares :param title: title of the graph to be displayed :param labels: labels to be shown on the radar chart :param malware_confidences: dictionary with structure, malware_name=[ array of confidences to be shown on radar chart] :return: None """ fig = go.Figure() # plot the graph with specific layout fig.update_layout( polar=dict(radialaxis=dict(visible=True, range=[0, 100], dtick=20)), showlegend=True, title={ "text": f"{title}", }, font=dict(size=font_size), title_x=0.5, legend=dict( y=0.5, x=0.8, traceorder="normal", ), ) for malware_name in malware_confidences: fig.add_trace( go.Scatterpolar( r=malware_confidences[malware_name], theta=labels, fill="toself", name=malware_name, line=dict( width=4, ), ) ) fig.show() if not os.path.exists("behaviors_comparison_radar_chart"): os.mkdir("behaviors_comparison_radar_chart") fig.write_image("behaviors_comparison_radar_chart/compariso_image.jpeg") def select_label_menu(all_labels, min_labels=5, max_labels=10): """ allows user to select label to be shown in radar chart :param all_labels: all label found on the rules :param min_labels: min label to be shown on radar chart (default 5) :param max_labels: max label to be shown on radar chart (default 10) :return: label selected """ value_pair = [(label, label) for label in all_labels] while True: results_array = checkboxlist_dialog( title="Label-base Report", text=f"Select number of labels between {min_labels} and {max_labels}", values=value_pair, ).run() if results_array: if min_labels <= len(results_array) <= max_labels: break else: # user selects "Cancel" to leave the program. print("Canceled!") sys.exit() return results_array quark-engine-23.4.1/quark/utils/output.py000066400000000000000000000116601442215066700203770ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import json from collections import defaultdict from graphviz import Digraph from prettytable import PrettyTable from quark.utils.colors import green, red _GRAPH_SETTINGS = { "filename": "rules_classification", "comment": "A reference tree for parent functions", "format": "png", "graph_attr": { "center": "true", "label": "Reference Tree of Rule Classification", "labelloc": "top", "rankdir": "LR", "fontsize": "24", "fontname": "Courier New Bold", "fillcolor": "white", "shape": "box", "style": "rounded", }, "node_attr": { "fontsize": "16", "fontname": "Courier New", "fontcolor": "red", "shape": "none", }, "edge_attr": {"label": "calls"}, } def get_rule_classification_data(call_graph_analysis_list, search_depth): return _collect_crime_description( call_graph_analysis_list ), _search_cross_references(call_graph_analysis_list, search_depth) def _collect_crime_description(call_graph_analysis_list): report_dict = defaultdict(set) for item in call_graph_analysis_list: report_dict[item["parent"]].add(item["crime"]) return report_dict # @functools.lru_cache def _search_cross_references(call_graph_analysis_list, search_depth): reference_dict = defaultdict(set) if not call_graph_analysis_list: return reference_dict apkinfo = call_graph_analysis_list[0]["apkinfo"] parent_set = {item["parent"] for item in call_graph_analysis_list} for parent in parent_set: called_function_set = set() expand_queue = {parent} for _ in range(search_depth): for function in expand_queue: next_expand_queue = { child_function for child_function, _ in apkinfo.lowerfunc(function) } called_function_set.update(next_expand_queue) expand_queue = next_expand_queue referenced_set = called_function_set.intersection(parent_set) referenced_set.discard(parent) reference_dict[parent] = referenced_set return reference_dict def _convert_to_printable_dict(report_dict, reference_dict): printable_dict = defaultdict(list) for parent, reference_set in reference_dict.items(): key = _get_function_display_name(parent) printable_dict[key].extend( [ f"Call {_get_function_display_name(reference)}" for reference in reference_set ] ) for parent, values in report_dict.items(): key = _get_function_display_name(parent) printable_dict[key].extend(list(values)) return printable_dict def _get_function_display_name(function): return f"{function.class_name}{function.name}" def output_parent_function_table(rule_classification_data_bundle): dd = _convert_to_printable_dict(*rule_classification_data_bundle) # Pretty Table Output for parent, crimes in dd.items(): tb = PrettyTable() tb.field_names = [ "Parent Function", f"{green(parent)}", ] tb.align = "l" for count, crime in enumerate(set(crimes), start=1): if count == 1: tb.add_row(["Crime Description", red(f"* {crime}")]) else: tb.add_row(["", red(f"* {crime}")]) print(tb) def output_parent_function_json(rule_classification_data_bundle): dd = _convert_to_printable_dict(*rule_classification_data_bundle) # Json Output data = {"rules_classification": []} for parent, crimes in dd.items(): data["rules_classification"].append( { "parent": parent, "crime": crimes, } ) with open("rules_classification.json", "w") as outfile: json.dump(data, outfile) def output_parent_function_graph(rule_classification_data_bundle): report_dict, reference_dict = rule_classification_data_bundle identifier_dict = { parent: f"p{index}" for index, parent in enumerate(report_dict.keys()) } dot = Digraph(**_GRAPH_SETTINGS) for parent, identifier in identifier_dict.items(): descriptions = "\l".join(report_dict[parent]) + "\l" with dot.subgraph( name=f"cluster_{identifier}", graph_attr={ "label": _get_function_display_name(parent), "fontsize": "16", }, ) as sub: sub.node(identifier, label=descriptions) edge_list = [] for parent, identifier in identifier_dict.items(): edge_list.extend( [ (identifier, identifier_dict[function]) for function in reference_dict[parent] ] ) dot.edges(edge_list) dot.render() quark-engine-23.4.1/quark/utils/pprint.py000066400000000000000000000013401442215066700203450ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from prettytable import PrettyTable from quark.utils.colors import bold, cyan, yellow, red, green def print_info(message): print(bold(cyan("[*]")) + f" {message}") def print_warning(message): print(bold(yellow("[!]")) + f" WARNING: {message}") def print_error(message): print(bold(red("[!]")) + f" ERROR: {message}") def print_success(message): print(bold(green("[+]")) + f" DONE: {message}") def table(header, rows): tb = PrettyTable(header) tb.align = "l" tb.padding_width = 1 for row in rows: tb.add_row(row) return tb quark-engine-23.4.1/quark/utils/regex.py000066400000000000000000000037301442215066700201500ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import base64 import ipaddress import re IP_ADDRESS_REGEX = r"(?:\d{1,3}\.)+(?:\d{1,3})" URL_REGEX = r"(?i)\b((?:https?://|www\d{0,3}[.]|[a-z0-9.\-]+[.][a-z]{2,4}/)(?:[^\s()<>]+|\(([^\s()<>]+|(\([^\s()<>]+\)))*\))+(?:\(([^\s()<>]+|(\([^\s()<>]+\)))*\)|[^\s`!()\[\]{};:'\".,<>?ÂĢÂģ“”‘’]))" VALIDATE_URL = ( r"^(?:http|ftp)s?://" # http:// or https:// r"(?:(?:[A-Z0-9](?:[A-Z0-9-]{0,61}[A-Z0-9])?\.)+(?:[A-Z]{2,6}\.?|[A-Z0-9-]{2,}\.?)|" # domain... r"localhost|" # localhost... r"\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})" # ...or ip r"(?::\d+)?" # optional port r"(?:/?|[/?]\S+)$" ) ANDROID_CONTENT = "content://" ANDROID_FILE = "file://" def validate_url(url): regex = re.compile(VALIDATE_URL, re.IGNORECASE) return re.match(regex, url) is not None def validate_ip_address(ip): try: ipaddress.ip_address(ip) return True except ValueError: return False def validate_base64(sb): try: if isinstance(sb, str): # If there's any unicode here, an exception will be thrown and the function will return false sb_bytes = bytes(sb, "ascii") elif isinstance(sb, bytes): sb_bytes = sb else: raise ValueError("Argument must be string or bytes") return base64.b64encode(base64.b64decode(sb_bytes)) == sb_bytes except Exception: return False def extract_ip(string): ip = re.findall(IP_ADDRESS_REGEX, string) return [x for x in ip if validate_ip_address(x)] def extract_url(string): url = re.findall(URL_REGEX, string) return [x[0] for x in url if validate_url(x[0])] def extract_content(string): if ANDROID_CONTENT in string: return string return None def extract_file(string): if ANDROID_FILE in string: return string return None quark-engine-23.4.1/quark/utils/tools.py000066400000000000000000000124131442215066700201740ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import copy import re from typing import Any, List, Union def remove_dup_list(element): """ Remove the duplicate elements in given list. """ return list(set(element)) def contains(subset_to_check, target_list): """ Check the sequence pattern within two list. ----------------------------------------------------------------- subset_to_check = ["getCellLocation", "sendTextMessage"] target_list = ["put", "getCellLocation", "query", "sendTextMessage"] then it will return true. ----------------------------------------------------------------- subset_to_check = ["getCellLocation", "sendTextMessage"] target_list = ["sendTextMessage", "put", "getCellLocation", "query"] then it will return False. """ target_copy = copy.copy(target_list) # Delete elements that do not exist in the subset_to_check list for item in target_copy: if item not in subset_to_check: target_copy.remove(item) for i in range(len(target_copy) - len(subset_to_check) + 1): for j in range(len(subset_to_check)): if target_copy[i + j] != subset_to_check[j]: break else: return True return False def descriptor_to_androguard_format(descriptor): if "(" not in descriptor or ")" not in descriptor: raise ValueError(f"Invalid descriptor. {descriptor}") delimiter = descriptor.index(")") arg_str = descriptor[:delimiter] args = re.findall(r"L.+?;|[ZBCSIJFD]|\[", arg_str) new_descriptor = "(" + " ".join(args) + descriptor[delimiter:] new_descriptor = re.sub(r"\[ ", "[", new_descriptor) return new_descriptor def filter_api_by_usage_count(data, api_pool, percentile_rank=0.2): """ Sorting APIs by the number of APIs used in APK, and split APIs into P_set (less used number) and S_set (more used number) by percentile_rank (default 20%). :param data: the object of apkinfo. :param api_pool: the APIs list for rule generation. :param percentile_rank: the int for rank of percentile. :return P_set: a set of APIs that less used. :return S_set: a set of APIs that more used. """ statistic_result = {} str_statistic_result = {} for api in api_pool: api_called_count = len(data.upperfunc(api)) if api_called_count > 0: statistic_result[str(api)] = api_called_count str_statistic_result[str(api)] = api sorted_key = { k: v for k, v in sorted(statistic_result.items(), key=lambda item: item[1]) } sorted_result = {k: v for k, v in sorted(sorted_key.items())} threshold = len(api_pool) * percentile_rank P_set = [] S_set = [] for i, (api, _) in enumerate(sorted_result.items()): if i < threshold: P_set.append(str_statistic_result[api]) continue S_set.append(str_statistic_result[api]) return P_set, S_set def get_parenthetic_contents(string: str, start_index: int) -> str: """Get the content between a pair of parentheses. :param string: string to be parsed :param start_index: index to specify the parenthesis :return: string holding the content """ start_index = string.find("(", start_index) if start_index == -1: return string parenthetic_counter = 0 for idx, char in enumerate(string[start_index:]): if char == "(": parenthetic_counter += 1 elif char == ")": parenthetic_counter -= 1 if parenthetic_counter == 0: end_index = idx + start_index + 1 return string[start_index:end_index] return string[start_index:] def get_arguments_from_argument_str( argument_str: str, descriptor: str ) -> List[Any]: """Get arguments from an argument string. :param argument_str: string that holds multiple arguments and uses commas as separators :param descriptor: string that holds a descriptor for type inference :return: python list that holds the arguments """ def __valueOf(argument: str, type_hint: str) -> Union[int, float, bool]: try: if type_hint in ["I", "B", "S", "J"]: return int(argument) elif type_hint == "Z": return bool(int(argument)) elif type_hint in ["F", "D"]: return float(argument) except ValueError: pass return argument arguments = [] parentheses_counter = 0 index_of_last_separator = 0 for index, char in enumerate(argument_str): if char == "(": parentheses_counter += 1 elif char == ")": parentheses_counter -= 1 elif char == "," and parentheses_counter == 0: arguments.append(argument_str[index_of_last_separator:index]) index_of_last_separator = index + 1 arguments.append(argument_str[index_of_last_separator:]) type_hints = descriptor[1 : descriptor.find(")")].split() type_hints = reversed(type_hints) arguments = [ __valueOf(argument, next(type_hints, "")) for argument in reversed(arguments) ] arguments.reverse() return arguments quark-engine-23.4.1/quark/utils/weight.py000066400000000000000000000032361442215066700203260ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from enum import Enum from quark.utils.colors import green, yellow, red class LEVEL_INFO(Enum): LOW = "Low Risk" Moderate = "Moderate Risk" High = "High Risk" class Weight: def __init__(self, score_sum, weight_sum): self.score_sum = score_sum self.weight_sum = weight_sum def calculate(self): # Level 1 threshold level_one_threshold = self.score_sum / 2 ** 4 # Level 2 threshold level_two_threshold = self.score_sum / 2 ** 3 # Level 3 threshold level_three_threshold = self.score_sum / 2 ** 2 # Level 4 threshold level_four_threshold = self.score_sum / 2 ** 1 # Level 5 threshold level_five_threshold = self.score_sum / 2 ** 0 total_weight = self.weight_sum if 0 <= total_weight <= level_one_threshold: return green(LEVEL_INFO.LOW.value) elif level_one_threshold < total_weight <= level_two_threshold: return green(LEVEL_INFO.LOW.value) elif level_two_threshold < total_weight <= level_three_threshold: return yellow(LEVEL_INFO.Moderate.value) elif level_three_threshold < total_weight <= level_four_threshold: return yellow(LEVEL_INFO.Moderate.value) elif level_four_threshold < total_weight <= level_five_threshold: return red(LEVEL_INFO.High.value) else: raise ValueError("Weight calculate failed") if __name__ == "__main__": w = Weight(29, 19) print(w.calculate()) quark-engine-23.4.1/quark/webreport/000077500000000000000000000000001442215066700173325ustar00rootroot00000000000000quark-engine-23.4.1/quark/webreport/__init__.py000066400000000000000000000000001442215066700214310ustar00rootroot00000000000000quark-engine-23.4.1/quark/webreport/analysis_report_layout.html000066400000000000000000000526411442215066700250430ustar00rootroot00000000000000 Quark Report

Analysis Result

The # of rules for each confidence

100% $effective_rules_number_100$
80% $effective_rules_number_80$
60% $effective_rules_number_60$
40% $effective_rules_number_40$
20% $effective_rules_number_20$
0% $effective_rules_number_0$

Sample Information

File name
$filename$
MD5
$md5$
File size
$filesize$ Mb
Labels
$five_labels_html$

Select labels to see max confidence in radar chart

$all_labels_html$

The labels with 100% confidence crimes

$five_labels_html$
$report_content$
Rule No. Crime Description Confidence
$report_data$ quark-engine-23.4.1/quark/webreport/generate.py000066400000000000000000000242601442215066700215020ustar00rootroot00000000000000import pkg_resources class ReportGenerator: """ This module is for web report generating. """ def __init__(self, json_report): self.json_report = json_report # Load html layout rulegenerate_html_path = pkg_resources.resource_filename( "quark.webreport", "genrule_report_layout.html" ) analysis_result_html_path = pkg_resources.resource_filename( "quark.webreport", "analysis_report_layout.html" ) with open(rulegenerate_html_path, "r") as file: self.rulegenerate_layout = file.read() file.close() with open(analysis_result_html_path, "r") as file: self.analysis_result_layout = file.read() file.close() def get_rule_generate_editor_html(self): """ Load the rule generation result and generate the HTML of the Quark web report. :return: the string of Quark web report HTML """ generate_result = self.json_report["result"] filesize = format( float(self.json_report["size_bytes"])/float(1024*1024), '.2f', ) filename = self.json_report["apk_filename"] md5 = self.json_report["md5"] rule_number = len(generate_result) self.insert_genrule_report_html( generate_result, filename, md5, filesize, rule_number) self.rulegenerate_layout = get_json_report_html( self.rulegenerate_layout, generate_result) return self.rulegenerate_layout def get_analysis_report_html(self): """ Load the quark JSON report and generate the HTML of the Quark web report. :return: the string of Quark web report HTML """ analysis_result = self.json_report["crimes"] filesize = format( float(self.json_report["size_bytes"])/float(1024*1024), '.2f', ) filename = self.json_report["apk_filename"] md5 = self.json_report["md5"] rule_number_set = { "all": len(analysis_result), "100%": count_confidence_rule_number(analysis_result, "100%"), "80%": count_confidence_rule_number(analysis_result, "80%"), "60%": count_confidence_rule_number(analysis_result, "60%"), "40%": count_confidence_rule_number(analysis_result, "40%"), "20%": count_confidence_rule_number(analysis_result, "20%"), "0%": count_confidence_rule_number(analysis_result, "0%"), } # Get all labels five_stages_labels = get_five_stages_labels(analysis_result) all_labels = get_all_labels(analysis_result) self.insert_sample_information_html( rule_number_set, filename, md5, filesize, five_stages_labels) self.insert_radarchart_html(five_stages_labels, all_labels) self.insert_report_html(analysis_result) self.analysis_result_layout = get_json_report_html( self.analysis_result_layout, analysis_result) return self.analysis_result_layout def insert_radarchart_html(self, five_stages_labels, all_labels): """ Generate the HTML of radar chart secton in Quark web report. :param five_stages_labels: the set of lebels with 100% confidence crimes :param all_labels: the set contain all labels with crimes above 0% confidence """ five_labels_html = "" for label in five_stages_labels: five_labels_html += f"""""" all_labels_html = "" for label in all_labels: if label == "power manager": label = "power" elif label == "accessibility service": label = "accessibility" elif label == "dexClassLoader": label = "dex" all_labels_html += f""" """ replace_dict = { "$five_labels_html$": five_labels_html, "$all_labels_html$": all_labels_html, } for key, replace_str in replace_dict.items(): self.analysis_result_layout = self.analysis_result_layout.replace( key, str(replace_str)) def insert_genrule_report_html( self, data, filename, md5, filesize, rule_number ): """ Generate the HTML of rule generation result secton. :param data: the dict of rule generation result """ contentHTML = "" for rule in data: api1 = rule["api"][0]["class"].split( '/')[-1] + rule["api"][0]["method"] api2 = rule["api"][0]["class"].split( '/')[-1] + rule["api"][1]["method"] api1 = api1.replace("<", "<").replace(">", ">") api2 = api2.replace("<", "<").replace(">", ">") contentHTML += f"""

{rule["number"]}

{api1}

{api2}

Edit """ replace_dict = { "$genrule_report$": contentHTML, "$filename$": filename, "$md5$": md5, "$filesize$": filesize, "$rule_numbers$": rule_number, } for key, replace_str in replace_dict.items(): self.rulegenerate_layout = self.rulegenerate_layout.replace( key, str(replace_str)) def insert_report_html(self, data): """ Generate the HTML of summary report secton in Quark web report. :param data: the dict of Quark JSON report """ confidence_badge = { "0%": "badge-secondary", "20%": "badge-success", "40%": "badge-info", "60%": "badge-primary", "80%": "badge-warning", "100%": "badge-danger", } contentHTML = "" for crime in data: description = crime["crime"] confidence = crime["confidence"] rule_number = crime["rule"].split('.')[0] contentHTML += f"""

{rule_number}

{description}

{confidence} """ self.analysis_result_layout = self.analysis_result_layout.replace( "$report_content$", contentHTML) def insert_sample_information_html( self, rules_number_set, filename, md5, filesize, labels ): """ Generate the HTML of sample information secton in Quark web report. :param rules_number_set: the dict of rule number for each confidence :param filename: the string of the sample filename :param md5: the string of the sample md5 hash value :param filesize: the string of the sample filesize :param labels: the set of lebels with 100% confidence crimes """ five_labels_html = "" for label in labels: five_labels_html += f"""""" replace_dict = { "$effective_rules_number_100$": rules_number_set["100%"], "$effective_rules_number_80$": rules_number_set["80%"], "$effective_rules_number_60$": rules_number_set["60%"], "$effective_rules_number_40$": rules_number_set["40%"], "$effective_rules_number_20$": rules_number_set["20%"], "$effective_rules_number_0$": rules_number_set["0%"], "$all_rules_number$": rules_number_set["all"], "$filename$": filename, "$md5$": md5, "$filesize$": filesize, "$five_labels_html$": five_labels_html } for key, replace_str in replace_dict.items(): self.analysis_result_layout = self.analysis_result_layout.replace( key, str(replace_str)) def get_json_report_html(layout, data): """ Convert the quark JSON report to HTML with script tag. :param data: the dict of Quark JSON report :return: the string of Quark JSON report HTML """ report_data_html = f"""""" layout = layout.replace( "$report_data$", report_data_html) return layout def get_five_stages_labels(data): """ Get the labels with 100% confidence crimes. :param data: the dict of Quark JSON report :return: the set contain all lebels with 100% confidence crimes """ five_stage_label_set = set() for item in data: if item["confidence"] == "100%": five_stage_label_set.update(item["label"]) return five_stage_label_set def get_all_labels(data): """ Get all labels with crimes above 0% confidence. :param data: the dict of Quark JSON report :return: the set contain all labels with crimes above 0% confidence """ all_label_set = set() for item in data: if not item["confidence"] == "0%": all_label_set.update(item["label"]) return all_label_set def count_confidence_rule_number(data, confidence): """ Get the number of rules with given confidence in JSON report. :param data: the dict of Quark JSON report :param confidence: the string of given confidence :return: the int for the number of rules with given confidence in JSON report """ count = 0 for item in data: if item["confidence"] == confidence: count += 1 return count quark-engine-23.4.1/quark/webreport/genrule_report_layout.html000066400000000000000000000576011442215066700246620ustar00rootroot00000000000000 Quark Report

Quark Rule Generation Reviewer & Editor

File name
Ahmyth.apk
File size
0.26 Mb
MD5
893e05aabd8754236ea70d3da8363d52
Search Rules
$genrule_report$ $report_data$ quark-engine-23.4.1/setup.py000066400000000000000000000027641442215066700157210ustar00rootroot00000000000000import setuptools from quark import __version__ with open("README.md") as fh: long_description = fh.read() required_requirements = [ "prettytable>=1.0.0", "androguard==3.4.0a1", "tqdm", "colorama", "graphviz", "prompt-toolkit", "plotly", "rzpipe", "click", ] # # "kaleido", # "pandas", #] setuptools.setup( name="quark-engine", # Replace with your own username version=__version__, author="YuShiang Dang, ShengFeng Lu, KunYu Chen", author_email="pulorsok@gmail.com", description="An Obfuscation-Neglect Android Malware Scoring System", long_description=long_description, long_description_content_type="text/markdown", url="https://github.com/quark-engine/quark-engine", packages=setuptools.find_packages(), package_data={ "quark.core.axmlreader": ["axml_definition"], "quark.webreport": [ "analysis_report_layout.html", "genrule_report_layout.html" ], "quark.script.frida": [ "agent.js" ] }, entry_points={ "console_scripts": [ "quark=quark.cli:entry_point", "freshquark=quark.freshquark:entry_point", ] }, classifiers=[ "Programming Language :: Python :: 3", "License :: OSI Approved :: GNU General Public License v3 (GPLv3)", "Operating System :: OS Independent", "Topic :: Security", ], python_requires=">=3.8", install_requires=required_requirements, ) quark-engine-23.4.1/tests/000077500000000000000000000000001442215066700153405ustar00rootroot00000000000000quark-engine-23.4.1/tests/__init__.py000066400000000000000000000000001442215066700174370ustar00rootroot00000000000000quark-engine-23.4.1/tests/conftest.py000066400000000000000000000035201442215066700175370ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import os from typing import Dict import pytest import requests SAMPLES = [ { "sourceUrl": ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk" ), "fileName": "14d9f1a92dd984d6040cc41ed06e273e.apk", }, { "sourceUrl": ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk" ), "fileName": "13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk", }, { "sourceUrl": ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/Ahmyth.apk" ), "fileName": "Ahmyth.apk" } ] def downloadSample( tmp_path_factory: pytest.TempPathFactory, sample: Dict[str, str] ): folder = os.path.splitext(os.path.basename(__file__))[0] folder = tmp_path_factory.mktemp(folder) SAMPLE_PATH_14d9f = folder / sample["fileName"] response = requests.get(sample["sourceUrl"], allow_redirects=True) file = open(SAMPLE_PATH_14d9f, "wb") file.write(response.content) file.close() return str(SAMPLE_PATH_14d9f) @pytest.fixture(scope="session") def SAMPLE_PATH_14d9f(tmp_path_factory: pytest.TempPathFactory) -> str: return downloadSample(tmp_path_factory, SAMPLES[0]) @pytest.fixture(scope="session") def SAMPLE_PATH_13667(tmp_path_factory: pytest.TempPathFactory) -> str: return downloadSample(tmp_path_factory, SAMPLES[1]) @pytest.fixture(scope="session") def SAMPLE_PATH_Ahmyth(tmp_path_factory: pytest.TempPathFactory) -> str: return downloadSample(tmp_path_factory, SAMPLES[2]) quark-engine-23.4.1/tests/core/000077500000000000000000000000001442215066700162705ustar00rootroot00000000000000quark-engine-23.4.1/tests/core/json_report_sample.json000066400000000000000000000152401442215066700230720ustar00rootroot00000000000000{ "md5": "14d9f1a92dd984d6040cc41ed06e273e", "apk_filename": "14d9f1a92dd984d6040cc41ed06e273e.apk", "size_bytes": 166917, "threat_level": "High Risk", "total_score": 4, "crimes": [ { "rule": "sendLocation_SMS.json", "crime": "Send Location via SMS", "label": [ "location", "collection" ], "score": 4, "weight": 4.0, "confidence": "100%", "permissions": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "native_api": [ { "class": "Landroid/telephony/TelephonyManager;", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager;", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "combination": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "sequence": [ { "Lcom/google/progress/AndroidClientService$2; run ()V": { "first": [ "invoke-virtual", "v5", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 05 00", "second": [ "invoke-virtual", "v3", "v0", "v4", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 03 04" } }, { "Lcom/google/progress/AndroidClientService; sendMessage ()V": { "first": [ "invoke-virtual", "v6", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 06 00", "second": [ "invoke-virtual", "v4", "v6", "v7", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 64 07" } }, { "Lcom/google/progress/AndroidClientService; doByte ([B)V": { "first": [ "invoke-virtual/range", "v35", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "74 01 2f 02 23 00", "second": [ "invoke-virtual", "v0", "v1", "v2", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 10 02" } } ], "register": [ { "Lcom/google/progress/AndroidClientService$2; run ()V": { "first": [ "invoke-virtual", "v5", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 05 00", "second": [ "invoke-virtual", "v3", "v0", "v4", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 03 04" } }, { "Lcom/google/progress/AndroidClientService; sendMessage ()V": { "first": [ "invoke-virtual", "v6", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "6e 10 2f 02 06 00", "second": [ "invoke-virtual", "v4", "v6", "v7", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 64 07" } }, { "Lcom/google/progress/AndroidClientService; doByte ([B)V": { "first": [ "invoke-virtual/range", "v35", "Lcom/google/progress/Locate;->getLocation()Ljava/lang/String;" ], "first_hex": "74 01 2f 02 23 00", "second": [ "invoke-virtual", "v0", "v1", "v2", "Lcom/google/progress/SMSHelper;->sendSms(Ljava/lang/String; Ljava/lang/String;)I" ], "second_hex": "6e 30 3e 02 10 02" } } ] } ] }quark-engine-23.4.1/tests/core/struct/000077500000000000000000000000001442215066700176145ustar00rootroot00000000000000quark-engine-23.4.1/tests/core/struct/test_bytecodeobject.py000066400000000000000000000012661442215066700242170ustar00rootroot00000000000000import pytest from quark.core.struct.bytecodeobject import BytecodeObject @pytest.fixture() def bytecode_obj(): bytecode_obj = BytecodeObject( "invoke-direct", "v1", "java.io.FilterOutputStream.close:()V", ) yield bytecode_obj del bytecode_obj class TestBytecodeObject: def test_init(self, bytecode_obj): with pytest.raises(TypeError): bytecode_obj_with_no_argu = BytecodeObject() assert isinstance(bytecode_obj, BytecodeObject) assert bytecode_obj.mnemonic == "invoke-direct" assert bytecode_obj.registers == "v1" assert bytecode_obj.parameter == "java.io.FilterOutputStream.close:()V" quark-engine-23.4.1/tests/core/struct/test_methodobject.py000066400000000000000000000034271442215066700237020ustar00rootroot00000000000000from quark.core.struct.methodobject import MethodObject class TestMethodObject: def test_full_name(self): method = MethodObject( class_name="ClassName;", name="Method", descriptor="(Descriptor)" ) full_name = method.full_name assert full_name == "ClassName; Method (Descriptor)" def test_compare_with_different_access_flags(self): method_1 = MethodObject( class_name="Ljava/lang/Object;", name="clone", descriptor="()Ljava/lang/Object;", access_flags="public", ) method_2 = MethodObject( class_name=method_1.class_name, name=method_1.name, descriptor=method_1.descriptor, access_flags="protected", ) assert method_1 == method_2 def test_compare_with_different_caches(self): method_1 = MethodObject( class_name="Ljava/lang/Object;", name="clone", descriptor="()Ljava/lang/Object;", cache=("Cache Type A"), ) method_2 = MethodObject( class_name=method_1.class_name, name=method_1.name, descriptor=method_1.descriptor, cache={"Cache Type B"}, ) assert method_1 == method_2 def test_is_android_api_with_api(self): method = MethodObject( class_name="Ljava/lang/Object;", name="clone", descriptor="()Ljava/lang/Object;", ) assert method.is_android_api() is True def test_is_android_api_with_custom_method(self): method = MethodObject( "Lcom/example/google/service/ContactsHelper;", "getPhoneContacts", "()V", ) assert method.is_android_api() is False quark-engine-23.4.1/tests/core/struct/test_registerobject.py000066400000000000000000000027451442215066700242500ustar00rootroot00000000000000import pytest from quark.core.struct.registerobject import RegisterObject @pytest.fixture() def standard_register_obj(): register_obj = RegisterObject("v1", "value", "func") yield register_obj del register_obj class TestRegisterObject: def test_init_without_called_by_func(self): register_obj = RegisterObject("v1", "value") assert register_obj._register_name == "v1" assert register_obj._value == "value" assert register_obj._called_by_func == [] def test_init_with_called_by_func(self): register_obj = RegisterObject("v1", "value", "func") assert register_obj._register_name == "v1" assert register_obj._value == "value" assert register_obj._called_by_func == ["func"] def test_called_by_func(self, standard_register_obj): value = "func1" standard_register_obj.called_by_func = value assert len(standard_register_obj.called_by_func) == 2 assert standard_register_obj.called_by_func[-1] == value def test_register_name(self): value = "v1" standard_register_obj.register_name = value assert standard_register_obj.register_name == value def test_value(self): value = "value" standard_register_obj.value = value assert standard_register_obj.value == value def test_hash_index(self, standard_register_obj): standard_register_obj._register_name = "v5" assert standard_register_obj.hash_index == 5 quark-engine-23.4.1/tests/core/struct/test_ruleobject.py000066400000000000000000000074321442215066700233710ustar00rootroot00000000000000import os import pytest from quark.core.struct.ruleobject import RuleObject @pytest.fixture() def rule_obj(scope="function"): rule_json = """ { "crime": "Send Location via SMS", "permission": [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION" ], "api": [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "(I Ljava/lang/String; [B J)V" }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": "(ILjava/lang/String;[BJ)V" } ], "score": 4, "label": [ "location", "collection" ] } """ with open("sendLocation.json", "w") as f: f.write(rule_json) print("setup() begin") rule_obj = RuleObject("sendLocation.json") yield rule_obj del rule_obj os.remove("sendLocation.json") @pytest.fixture(scope="function") def invalid_file(tmp_path): invalid_file = tmp_path / "invalid_file.txt" invalid_file.write_text("Not a json") yield invalid_file @pytest.fixture(scope="function") def incomplete_rule(tmp_path): incomplete_rule = tmp_path / "incomplete_rule.txt" incomplete_rule.write_text("{}") yield incomplete_rule @pytest.fixture(scope="function") def complete_rule(): return "quark/rules/sendLocation_SMS.json" class TestRuleObject: def test_init_with_invalid_path(self): with pytest.raises(TypeError): _ = RuleObject(["Not", "a", "file"]) def test_init_with_non_exist_file(self): with pytest.raises(FileNotFoundError): _ = RuleObject("NON_EXIST_FILE") def test_init_with_invalid_file(self, invalid_file): with pytest.raises(BaseException): _ = RuleObject(invalid_file) def test_init_with_incomplete_rule(self, incomplete_rule): with pytest.raises(KeyError): _ = RuleObject(incomplete_rule) def test_init_with_complete_rule(self, complete_rule): rule = RuleObject(complete_rule) assert all(rule.check_item) is False assert rule.crime == "Send Location via SMS" assert rule.permission == [ "android.permission.SEND_SMS", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.ACCESS_FINE_LOCATION", ] assert rule.api == [ { "class": "Landroid/telephony/TelephonyManager", "method": "getCellLocation", "descriptor": "()Landroid/telephony/CellLocation;", }, { "class": "Landroid/telephony/SmsManager", "method": "sendTextMessage", "descriptor": ( "(Ljava/lang/String; Ljava/lang/String;" " Ljava/lang/String; Landroid/app/PendingIntent;" " Landroid/app/PendingIntent;)V" ), }, ] assert rule.score == 4 assert rule.rule_filename == "sendLocation_SMS.json" assert rule.label == ["location", "collection"] def test_get_score(self, rule_obj): confidence = [1, 2, 3, 4, 5] expected_value = [0.25, 0.5, 1.0, 2.0, 4.0] for idx, value in enumerate(expected_value): assert rule_obj.get_score(confidence[idx]) == value @staticmethod def test_androguard_format_api(rule_obj): assert rule_obj.api[0]["descriptor"] == "(I Ljava/lang/String; [B J)V" @staticmethod def test_java_format_api(rule_obj): assert rule_obj.api[1]["descriptor"] == "(I Ljava/lang/String; [B J)V" quark-engine-23.4.1/tests/core/struct/test_tableobject.py000066400000000000000000000041441442215066700235060ustar00rootroot00000000000000import pytest from quark.core.struct.tableobject import TableObject @pytest.fixture() def table_obj(): table_obj = TableObject(5) yield table_obj del table_obj class TestTableObject: def test_init_with_no_arg(self): with pytest.raises(TypeError): _ = TableObject() def test_init_with_non_numeric(self): with pytest.raises(TypeError): _ = TableObject(None) def test_init_with_valid_arg(self): table_obj = TableObject(5) assert isinstance(table_obj, TableObject) assert len(table_obj.hash_table) == 5 assert table_obj.hash_table == [[], [], [], [], []] def test_insert_with_non_numeric(self, table_obj): with pytest.raises(TypeError): table_obj.insert(None) def test_insert_with_number_once(self, table_obj): index, data = 1, "Value" table_obj.insert(index, data) assert table_obj.hash_table[index] == [data] def test_insert_with_number_twice(self, table_obj): table_obj.insert(0, "first") table_obj.insert(0, "second") assert table_obj.hash_table[0] == ["first", "second"] def test_insert_with_num_beyond_max(self, table_obj): index, data = 6, "Max value" try: table_obj.insert(index, data) except Exception: pytest.fail("Should not raise exceptions.") def test_get_obj_list_before_insertion(self, table_obj): assert table_obj.get_obj_list(3) == [] def test_get_obj_list_after_insertion(self, table_obj): table_obj.insert(3, "test_value") assert table_obj.get_obj_list(3) == ["test_value"] def test_get_table(self, table_obj): assert table_obj.hash_table == table_obj.get_table() def test_pop_none(self, table_obj): with pytest.raises(IndexError): _ = table_obj.pop(1) def test_pop_value(self, table_obj): table_obj.insert(4, "one") table_obj.insert(4, "two") table_obj.insert(4, "three") assert table_obj.pop(4) == "three" assert table_obj.get_obj_list(4) == ["one", "two", "three"] quark-engine-23.4.1/tests/core/test_analysis.py000066400000000000000000000037161442215066700215330ustar00rootroot00000000000000from collections import defaultdict from quark.core.analysis import QuarkAnalysis class TestQuarkAnalysis: def test_init(self): analysis = QuarkAnalysis() summary_table_field_list = [ "Filename", "Rule", "Confidence", "Score", "Weight", ] label_table_field_list = [ "Label", "Description", "Number of rules", "MAX Confidence %", ] assert analysis.crime_description == "" assert analysis.first_api is None assert analysis.second_api is None assert analysis.level_1_result == [] assert analysis.level_2_result == [] assert analysis.level_3_result == [] assert analysis.level_4_result == [] assert analysis.level_5_result == [] assert analysis.json_report == [] assert analysis.weight_sum == 0 assert analysis.score_sum == 0 assert all( label for label in summary_table_field_list if label in analysis.summary_report_table ) assert all( label for label in label_table_field_list if label in analysis.label_report_table ) assert analysis.call_graph_analysis_list == [] assert isinstance(analysis.parent_wrapper_mapping, defaultdict) assert len(analysis.parent_wrapper_mapping.items()) == 0 def test_clean_result(self): analysis = QuarkAnalysis() analysis.level_1_result = ["123"] analysis.level_2_result = ["123"] analysis.level_3_result = ["123"] analysis.level_4_result = ["123"] analysis.level_5_result = ["123"] analysis.clean_result() assert analysis.level_1_result == [] assert analysis.level_2_result == [] assert analysis.level_3_result == [] assert analysis.level_4_result == [] assert analysis.level_5_result == [] quark-engine-23.4.1/tests/core/test_apkinfo.py000066400000000000000000000275021442215066700213360ustar00rootroot00000000000000import os import zipfile import pytest import requests from quark.core.apkinfo import AndroguardImp from quark.core.interface.baseapkinfo import BaseApkinfo from quark.core.rzapkinfo import RizinImp from quark.core.struct.bytecodeobject import BytecodeObject from quark.core.struct.methodobject import MethodObject APK_SOURCE = ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk" ) APK_FILENAME = "13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk" @pytest.fixture(scope="function") def apk_path(): r = requests.get(APK_SOURCE, allow_redirects=True) file = open(APK_FILENAME, "wb") file.write(r.content) return APK_FILENAME @pytest.fixture( scope="function", params=((AndroguardImp), (RizinImp)), ) def apkinfo(request, apk_path): Apkinfo, apk_path = request.param, apk_path apkinfo = Apkinfo(apk_path) yield apkinfo @pytest.fixture(scope="function") def dex_file(): APK_SOURCE = ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/Ahmyth.apk" ) APK_NAME = "Ahmyth.apk" DEX_NAME = "classes.dex" r = requests.get(APK_SOURCE, allow_redirects=True) with open(APK_NAME, "wb") as file: file.write(r.content) with zipfile.ZipFile(APK_NAME, "r") as zip: zip.extract(DEX_NAME) yield DEX_NAME os.remove(DEX_NAME) os.remove(APK_NAME) class TestApkinfo: def test_init_with_invalid_type(self): filepath = None with pytest.raises(TypeError): _ = BaseApkinfo(filepath) def test_init_with_non_exist_file(self): filepath = "PATH_TO_NON_EXIST_FILE" with pytest.raises(FileNotFoundError): _ = BaseApkinfo(filepath) def test_init_with_apk(self, apk_path): apkinfo = BaseApkinfo(apk_path) assert apkinfo.ret_type == "APK" def test_init_with_dex(self, dex_file): apkinfo = BaseApkinfo(dex_file) assert apkinfo.ret_type == "DEX" def test_filename(self, apkinfo): assert apkinfo.filename == "13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk" def test_filesize(self, apkinfo): assert apkinfo.filesize == 266155 def test_md5(self, apkinfo): assert apkinfo.md5 == "1e80ac341a665e8984f07bec7f351e18" def test_permissions(self, apkinfo): ans = [ "android.permission.SEND_SMS", "android.permission.RECEIVE_BOOT_COMPLETED", "android.permission.WRITE_SMS", "android.permission.READ_SMS", "android.permission.INTERNET", "android.permission.READ_PHONE_STATE", "android.permission.RECEIVE_SMS", "android.permission.READ_CONTACTS", ] assert set(apkinfo.permissions) == set(ans) @staticmethod def test_application(apkinfo): application = apkinfo.application label = str(application.get( "{http://schemas.android.com/apk/res/android}label" )) assert label == "@7F050001" or label == "2131034113" @staticmethod def test_activities(apkinfo): activities = apkinfo.activities assert len(activities) == 1 assert ( activities[0].get( "{http://schemas.android.com/apk/res/android}name" ) == "com.example.google.service.MainActivity" ) @staticmethod def test_receivers(apkinfo): receivers = apkinfo.receivers assert len(receivers) == 4 assert ( receivers[0].get( "{http://schemas.android.com/apk/res/android}name" ) == "com.example.google.service.SMSServiceBootReceiver" ) assert ( receivers[1].get( "{http://schemas.android.com/apk/res/android}name" ) == "com.example.google.service.SMSReceiver" ) assert ( receivers[2].get( "{http://schemas.android.com/apk/res/android}name" ) == "TaskRequest" ) assert ( receivers[3].get( "{http://schemas.android.com/apk/res/android}name" ) == "com.example.google.service.MyDeviceAdminReceiver" ) def test_android_apis(self, apkinfo): api = { MethodObject( "Landroid/telephony/SmsMessage;", "getDisplayOriginatingAddress", "()Ljava/lang/String;", ), MethodObject( "Ljava/io/File;", "mkdir", "()Z", ), } if apkinfo.core_library == "androguard": assert len(apkinfo.android_apis) == 1270 elif apkinfo.core_library == "rizin": assert len(apkinfo.android_apis) == 1269 assert api.issubset(apkinfo.android_apis) def test_custom_methods(self, apkinfo): test_custom_method = { MethodObject( "Lcom/example/google/service/ContactsHelper;", "getPhoneContacts", "()V", ), MethodObject( "Lcom/example/google/service/ContactsHelper;", "getSIMContacts", "()V", ), } if apkinfo.core_library == "androguard": assert len(apkinfo.custom_methods) == 3999 elif apkinfo.core_library == "rizin": assert len(apkinfo.custom_methods) == 3990 assert test_custom_method.issubset(apkinfo.custom_methods) def test_all_methods(self, apkinfo): test_custom_method = { MethodObject( "Lcom/example/google/service/ContactsHelper;", "getPhoneContacts", "()V", ), MethodObject( "Lcom/example/google/service/ContactsHelper;", "getSIMContacts", "()V", ), } if apkinfo.core_library == "androguard": assert len(apkinfo.all_methods) == 5452 elif apkinfo.core_library == "rizin": assert len(apkinfo.all_methods) == 5260 assert test_custom_method.issubset(apkinfo.all_methods) @staticmethod @pytest.mark.parametrize( "test_input, expected", [ ( [ "Ljava/lang/reflect/Field;", "setAccessible", "(Z)V", ], [ "Ljava/lang/reflect/Field;", "setAccessible", "(Z)V", ], ), ( [ "", "onReceive", "(Landroid/content/Context; Landroid/content/Intent;)V", ], [ "Landroid/support/v4/media/TransportMediatorJellybeanMR2$3;", "onReceive", "(Landroid/content/Context; Landroid/content/Intent;)V", ], ), ( [ "Landroid/support/v4/media/TransportMediatorJellybeanMR2$3;", "", "(Landroid/content/Context; Landroid/content/Intent;)V", ], [ "Landroid/support/v4/media/TransportMediatorJellybeanMR2$3;", "onReceive", "(Landroid/content/Context; Landroid/content/Intent;)V", ], ), ( [ "Landroid/support/v4/media/TransportMediatorJellybeanMR2$3;", "onReceive", "", ], [ "Landroid/support/v4/media/TransportMediatorJellybeanMR2$3;", "onReceive", "(Landroid/content/Context; Landroid/content/Intent;)V", ], ), ( [ None, None, None, ], [ "Landroid/support/v4/media/TransportMediatorJellybeanMR2$3;", "onReceive", "(Landroid/content/Context; Landroid/content/Intent;)V", ], ), ], ) def test_find_method(apkinfo, test_input, expected): result = apkinfo.find_method(test_input[0], test_input[1], test_input[2]) expect_method = MethodObject( expected[0], expected[1], expected[2], ) assert isinstance(result, list) assert expect_method in result def test_upperfunc(self, apkinfo): api = apkinfo.find_method( "Lcom/example/google/service/ContactsHelper;", "", "(Landroid/content/Context;)V", )[0] expect_function = apkinfo.find_method( "Lcom/example/google/service/SMSReceiver;", "isContact", "(Ljava/lang/String;)Ljava/lang/Boolean;", )[0] upper_methods = list(apkinfo.upperfunc(api)) assert expect_function in upper_methods def test_lowerfunc(self, apkinfo): method = apkinfo.find_method( "Lcom/example/google/service/WebServiceCalling;", "Send", "(Landroid/os/Handler; Ljava/lang/String;)V", )[0] expect_method = MethodObject( "Ljava/lang/StringBuilder;", "append", "(Ljava/lang/String;)Ljava/lang/StringBuilder;", ) expect_offset = 42 upper_methods = apkinfo.lowerfunc(method) assert (expect_method, expect_offset) in upper_methods def test_get_method_bytecode(self, apkinfo): expected_bytecode_list = [ BytecodeObject( "iput-object", ["v5", "v8"], ( "Landroid/support/v4/app/FragmentManagerImpl;" "->mTmpActions [Ljava/lang/Runnable;" ), ), BytecodeObject( "invoke-direct", ["v5", "v6"], ( "Ljava/lang/IllegalStateException;" "->(Ljava/lang/String;)V" ), ), BytecodeObject("array-length", ["v5", "v5"], None), BytecodeObject( "invoke-static", [], "Landroid/os/Looper;->myLooper()Landroid/os/Looper;", ), BytecodeObject("return", ["v0"], None), BytecodeObject("const/4", ["v3"], 0), BytecodeObject("add-int/lit8", ["v2", "v2"], 1), ] method = apkinfo.find_method( class_name="Landroid/support/v4/app/FragmentManagerImpl;", method_name="execPendingActions", descriptor="()Z", )[0] bytecodes = list(apkinfo.get_method_bytecode(method)) for expected in expected_bytecode_list: assert expected in bytecodes def test_lowerfunc(self, apkinfo): method = apkinfo.find_method( "Lcom/example/google/service/SMSReceiver;", "isContact", "(Ljava/lang/String;)Ljava/lang/Boolean;", )[0] expect_method = apkinfo.find_method( "Lcom/example/google/service/ContactsHelper;", "", "(Landroid/content/Context;)V", )[0] expect_offset = 10 upper_methods = apkinfo.lowerfunc(method) assert (expect_method, expect_offset) in upper_methods def test_superclass_relationships_with_expected_class(self, apkinfo): expected_upper_class = {"Lcom/example/google/service/HttpHelper;"} class_name = "Lcom/example/google/service/WebServiceCalling;" upper_set = apkinfo.superclass_relationships[class_name] assert expected_upper_class == upper_set quark-engine-23.4.1/tests/core/test_axmlreader.py000066400000000000000000000046661442215066700220410ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import unittest import zipfile from os import PathLike from pathlib import Path import pytest from quark.core.axmlreader import AxmlReader, ResValue def extractManifest(samplePath: PathLike) -> str: folder = Path(samplePath).parent with zipfile.ZipFile(samplePath) as apk: apk.extract("AndroidManifest.xml", path=folder) return str(folder / "AndroidManifest.xml") @pytest.fixture(scope="session") def MANIFEST_PATH_14d9f(SAMPLE_PATH_14d9f): return extractManifest(SAMPLE_PATH_14d9f) class TestAxmlReader: @staticmethod def testIter(MANIFEST_PATH_14d9f) -> None: axmlReader = AxmlReader(MANIFEST_PATH_14d9f) expectedTag = {"Address": 3728, "Type": 256, "Prefix": 9, "Uri": 10} tag = next(iter(axmlReader)) helper = unittest.TestCase() helper.assertDictEqual(tag, expectedTag) @staticmethod def testFileSize(MANIFEST_PATH_14d9f): axmlReader = AxmlReader(MANIFEST_PATH_14d9f) assert axmlReader.file_size == 7676 @staticmethod def testAxmlSize(MANIFEST_PATH_14d9f): axmlReader = AxmlReader(MANIFEST_PATH_14d9f) assert axmlReader.axml_size == 7676 @staticmethod def testGetString(MANIFEST_PATH_14d9f): axmlReader = AxmlReader(MANIFEST_PATH_14d9f) assert axmlReader.get_string(13) == "manifest" @staticmethod def testGetAttributes(MANIFEST_PATH_14d9f): axmlReader = AxmlReader(MANIFEST_PATH_14d9f) manifestTag = list(axmlReader)[1] expectedAttributes = [ ResValue(namespace=10, name=0, value=-1, type=16, data=1), ResValue(namespace=10, name=1, value=15, type=3, data=15), ResValue(namespace=-1, name=12, value=14, type=3, data=14), ] attributes = axmlReader.get_attributes(manifestTag) for expectedAttrib, attrib in zip(expectedAttributes, attributes): assert expectedAttrib == attrib @staticmethod def testGetXmlTree(MANIFEST_PATH_14d9f): axmlReader = AxmlReader(MANIFEST_PATH_14d9f) xml = axmlReader.get_xml_tree() manifestLabel = xml.getroot() assert len(manifestLabel.findall("uses-sdk")) == 1 assert len(manifestLabel.findall("application")) == 1 assert len(manifestLabel.findall("uses-permission")) == 29 quark-engine-23.4.1/tests/core/test_quark.py000066400000000000000000000400511442215066700210240ustar00rootroot00000000000000import base64 import json import os from unittest.mock import patch import pytest import requests from quark.core.quark import Quark from quark.core.struct.ruleobject import RuleObject APK_SOURCE = ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk" ) APK_FILENAME = "14d9f1a92dd984d6040cc41ed06e273e.apk" @pytest.fixture(scope="function") def simple_quark_obj(): r = requests.get(APK_SOURCE, allow_redirects=True) open(APK_FILENAME, "wb").write(r.content) apk_file = APK_FILENAME return Quark(apk_file) @pytest.fixture(scope="function") def quark_obj(simple_quark_obj): data = simple_quark_obj # rule rules = "quark/rules" rules_list = os.listdir(rules) for single_rule in rules_list: if single_rule.endswith("json"): rulepath = os.path.join(rules, single_rule) rule_checker = RuleObject(rulepath) # Run the checker data.run(rule_checker) data.generate_json_report(rule_checker) yield data @pytest.fixture(scope="function") def rule_without_keyword(tmp_path): rule_file = tmp_path / "rule_without_keyword.json" data = base64.b64decode( """eyAiY3JpbWUiOiAiUmVhZCBzZW5zaXRpdmUgZGF0YShTTVMsIENBTExMT0csIGV0YykiLCAicGVy bWlzc2lvbiI6IFtdLCAiYXBpIjogWyB7ICJkZXNjcmlwdG9yIjogIigpTGFuZHJvaWQvY29udGVu dC9Db250ZW50UmVzb2x2ZXI7IiwgImNsYXNzIjogIkxhbmRyb2lkL2NvbnRlbnQvQ29udGV4dDsi LCAibWV0aG9kIjogImdldENvbnRlbnRSZXNvbHZlciIgfSwgeyAiZGVzY3JpcHRvciI6ICIoTGFu ZHJvaWQvbmV0L1VyaTsgW0xqYXZhL2xhbmcvU3RyaW5nOyBMamF2YS9sYW5nL1N0cmluZzsgW0xq YXZhL2xhbmcvU3RyaW5nOyBMamF2YS9sYW5nL1N0cmluZzspTGFuZHJvaWQvZGF0YWJhc2UvQ3Vy c29yOyIsICJjbGFzcyI6ICJMYW5kcm9pZC9jb250ZW50L0NvbnRlbnRSZXNvbHZlcjsiLCAibWV0 aG9kIjogInF1ZXJ5IiB9IF0sICJzY29yZSI6IDEsICJsYWJlbCI6IFsgImNvbGxlY3Rpb24iLCAi c21zIiwgImNhbGxsb2ciLCAiY2FsZW5kYXIiIF0gfQ==""" ).decode() rule_file.write_text(data) return rule_file @pytest.fixture(scope="function") def rule_with_one_keyword(tmp_path): rule_file = tmp_path / "rule_without_keyword.json" data = base64.b64decode( """eyAiY3JpbWUiOiAiUmVhZCBzZW5zaXRpdmUgZGF0YShTTVMsIENBTExMT0csIGV0YykiLCAicGVy bWlzc2lvbiI6IFtdLCAiYXBpIjogWyB7ICJkZXNjcmlwdG9yIjogIigpTGFuZHJvaWQvY29udGVu dC9Db250ZW50UmVzb2x2ZXI7IiwgImNsYXNzIjogIkxhbmRyb2lkL2NvbnRlbnQvQ29udGV4dDsi LCAibWV0aG9kIjogImdldENvbnRlbnRSZXNvbHZlciIgfSwgeyAiZGVzY3JpcHRvciI6ICIoTGFu ZHJvaWQvbmV0L1VyaTsgW0xqYXZhL2xhbmcvU3RyaW5nOyBMamF2YS9sYW5nL1N0cmluZzsgW0xq YXZhL2xhbmcvU3RyaW5nOyBMamF2YS9sYW5nL1N0cmluZzspTGFuZHJvaWQvZGF0YWJhc2UvQ3Vy c29yOyIsICJjbGFzcyI6ICJMYW5kcm9pZC9jb250ZW50L0NvbnRlbnRSZXNvbHZlcjsiLCAibWV0 aG9kIjogInF1ZXJ5IiwgImtleXdvcmQiOiBbICJjb250ZW50Oi8vY2FsbF9sb2cvY2FsbHMiIF0g fSBdLCAic2NvcmUiOiAxLCAibGFiZWwiOiBbICJjb2xsZWN0aW9uIiwgInNtcyIsICJjYWxsbG9n IiwgImNhbGVuZGFyIiBdIH0=""" ).decode() rule_file.write_text(data) return rule_file class TestQuark: @pytest.mark.skip(reason="discussion needed.") def test_find_previous_method_with_invalid_types(self, quark_obj): with pytest.raises(TypeError): quark_obj.find_previous_method(None, None, None) def test_find_previous_method_without_result(self, quark_obj): parent_function = quark_obj.apkinfo.find_method( "Lcom/google/progress/ContactsCollecter;", "getContactList", "()Ljava/lang/String;", )[0] base_method = quark_obj.apkinfo.find_method( "Landroid/telephony/TelephonyManager", "getCellLocation", "()Landroid/telephony/CellLocation;", )[0] wrapper = [] quark_obj.find_previous_method(base_method, parent_function, wrapper) assert wrapper == list() def test_find_previous_method_with_result(self, quark_obj): parent_function = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] wrapper = [] base_method = quark_obj.apkinfo.find_method( "Landroid/telephony/TelephonyManager", "getCellLocation", "()Landroid/telephony/CellLocation;", )[0] expect_method_analysis = quark_obj.apkinfo.find_method( "Lcom/google/progress/Locate;", "getLocation", "()Ljava/lang/String;" )[0] expected_list = [expect_method_analysis] quark_obj.find_previous_method(base_method, parent_function, wrapper=wrapper) assert wrapper == expected_list def test_find_intersection_with_invalid_type(self, quark_obj): with pytest.raises(ValueError): quark_obj.find_intersection(None, None) def test_find_intersection_with_empty_set(self, quark_obj): first_method_set = set() second_method_set = set() with pytest.raises(ValueError): quark_obj.find_intersection(first_method_set, second_method_set) @pytest.mark.skip(reason="discussion needed.") def test_find_intersection_with_set_containing_invalid_type(self, quark_obj): first_method_set = {1, 2, 3} second_method_set = {4, 5, 6} with pytest.raises(TypeError): quark_obj.find_intersection(first_method_set, second_method_set) def test_find_intersection_with_result(self, quark_obj): location_api = quark_obj.apkinfo.find_method( "Lcom/google/progress/Locate;", "getLocation", "()Ljava/lang/String;" )[0] location_api_upper = quark_obj.apkinfo.upperfunc(location_api) sms_api = quark_obj.apkinfo.find_method( "Lcom/google/progress/SMSHelper;", "sendSms", "(Ljava/lang/String; Ljava/lang/String;)I", )[0] sms_api_upper = quark_obj.apkinfo.upperfunc(sms_api) with pytest.raises(ValueError, match="Set is Null"): quark_obj.find_intersection(set(), set()) quark_obj.find_intersection(set(), {1}) quark_obj.find_intersection({1}, set()) assert len(location_api_upper & sms_api_upper) == 3 # When there is no intersection in first layer, it will try to enter # the second layer to check the intersection. # Send Location via SMS expected_result_location = { quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "doByte", "([B)V" )[0], quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0], quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService$2;", "run", "()V" )[0], } assert ( quark_obj.find_intersection(location_api_upper, sms_api_upper) == expected_result_location ) @pytest.mark.skip(reason="discussion needed.") def test_check_sequence_with_invalid_type(self, quark_obj): mutual_parent = None first_method_list = None second_method_list = None with pytest.raises(TypeError): quark_obj.check_sequence( mutual_parent, first_method_list, second_method_list ) @pytest.mark.skip(reason="discussion needed.") def test_check_sequence_with_lists_containing_invalid_type(self, quark_obj): mutual_parent = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] first_method_list = [1, 2, 3] second_method_list = [4, 5, 6] with pytest.raises(TypeError): quark_obj.check_sequence( mutual_parent, first_method_list, second_method_list ) def test_check_sequence_is_true(self, quark_obj): # Send Location via SMS location_method = quark_obj.apkinfo.find_method( "Lcom/google/progress/Locate;", "getLocation", "()Ljava/lang/String;" )[0] sendSms_method = quark_obj.apkinfo.find_method( "Lcom/google/progress/SMSHelper;", "sendSms", "(Ljava/lang/String; Ljava/lang/String;)I", )[0] mutual_parent_true = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] result = quark_obj.check_sequence( mutual_parent_true, [location_method], [sendSms_method], ) assert result is True def test_check_sequence_with_contact_method(self, quark_obj): sendSms_method = quark_obj.apkinfo.find_method( "Lcom/google/progress/SMSHelper;", "sendSms", "(Ljava/lang/String; Ljava/lang/String;)I", )[0] mutual_parent_true = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] contact_method = quark_obj.apkinfo.find_method( "Lcom/google/progress/ContactsCollecter;", "getContactList", "()Ljava/lang/String;", )[0] result = quark_obj.check_sequence( mutual_parent_true, [contact_method], [sendSms_method], ) assert result is True def test_check_sequence_is_false(self, quark_obj): # Send Location via SMS sendSms_method = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService$2;", "run", "()V" )[0] mutual_parent_false = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService$2;", "run", "()V" )[0] # # Send contact via SMS contact_method = quark_obj.apkinfo.find_method( "Lcom/google/progress/ContactsCollecter;", "getContactList", "()Ljava/lang/String;", )[0] result = quark_obj.check_sequence( mutual_parent_false, [contact_method], [sendSms_method], ) assert result is False def test_check_parameter_with_invalid_type(self, quark_obj): mutual_parent = None first_method_list = None second_method_list = None with pytest.raises(TypeError): quark_obj.check_parameter( mutual_parent, first_method_list, second_method_list ) @pytest.mark.skip(reason="discussion needed.") def test_check_parameter_with_lists_containing_invalid_type(self, quark_obj): mutual_parent = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] first_method_list = [1, 2, 3] second_method_list = [4, 5, 6] with pytest.raises(TypeError): quark_obj.check_sequence( mutual_parent, first_method_list, second_method_list ) def test_check_parameter_is_True(self, quark_obj): second_method = [ quark_obj.apkinfo.find_method( "Lcom/google/progress/SMSHelper;", "sendSms", "(Ljava/lang/String; Ljava/lang/String;)I", )[0] ] first_method = [ quark_obj.apkinfo.find_method( "Lcom/google/progress/Locate;", "getLocation", "()Ljava/lang/String;" )[0] ] mutual_parent = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] assert ( quark_obj.check_parameter(mutual_parent, first_method, second_method) == True ) def test_check_parameter_is_False(self, quark_obj): first_method_list = [ quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService$2;", "run", "()V" )[0] ] second_method_list = [ quark_obj.apkinfo.find_method( "Lcom/google/progress/ContactsCollecter;", "getContactList", "()Ljava/lang/String;", )[0] ] mutual_parent = quark_obj.apkinfo.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V" )[0] result = quark_obj.check_parameter( mutual_parent, first_method_list, second_method_list ) assert result is False def test_check_parameter_values_with_no_keyword_rule( self, simple_quark_obj, rule_without_keyword ): rule_object = RuleObject(rule_without_keyword) with patch("quark.core.quark.Quark.check_parameter_values") as mock: simple_quark_obj.run(rule_object) mock.assert_not_called() def test_check_parameter_values_with_one_keyword_rule( self, simple_quark_obj, rule_with_one_keyword ): rule_object = RuleObject(rule_with_one_keyword) with patch("quark.core.quark.Quark.check_parameter_values") as mock: simple_quark_obj.run(rule_object) mock.assert_called() def test_check_parameter_values_without_matched_str(self, simple_quark_obj): source_str = ( "Landroid/content/ContentResolver;->query(Landroid/net/Uri;" " [Ljava/lang/String; Ljava/lang/String; [Ljava/lang/String;" " Ljava/lang/String;)Landroid/database/Cursor;" "(Landroid/content/Context;" "->getContentResolver()Landroid/content/ContentResolver;" "(Lahmyth/mine/king/ahmyth/MainService;->getContextOfApplication()" "Landroid/content/Context;()),Landroid/net/Uri;" "->parse(Ljava/lang/String;)" "Landroid/net/Uri;(file://usr/bin/su),v0,v0,v0,v0)" ) pattern_list = ( ( "Landroid/content/ContentResolver;->query(Landroid/net/Uri;" " [Ljava/lang/String; Ljava/lang/String; [Ljava/lang/String;" " Ljava/lang/String;)Landroid/database/Cursor;" ), ) keyword_item_list = [("content://call_log/calls",)] result = simple_quark_obj.check_parameter_values( source_str, pattern_list, keyword_item_list ) assert bool(result) is False def test_check_parameter_values_with_matched_str(self, simple_quark_obj): source_str = ( "Landroid/database/Cursor;->getColumnIndex" "(Ljava/lang/String;)I(Landroid/content/ContentResolver;" "->query(Landroid/net/Uri; [Ljava/lang/String; Ljava/lang/String;" " [Ljava/lang/String; Ljava/lang/String;)Landroid/database/Cursor;" "(Landroid/content/Context;->getContentResolver()" "Landroid/content/ContentResolver;(Lahmyth/mine/king/ahmyth" "/MainService;->getContextOfApplication()Landroid/content/" "Context;()),Landroid/net/Uri;->parse(Ljava/lang/String;)" "Landroid/net/Uri;(content://call_log/calls),v0,v0,v0,v0),number)" ) pattern_list = ( "Landroid/content/ContentResolver;->query(Landroid/net/Uri;" " [Ljava/lang/String; Ljava/lang/String; [Ljava/lang/String;" " Ljava/lang/String;)Landroid/database/Cursor;", ) keyword_item_list = [("content://call_log/calls",)] result = simple_quark_obj.check_parameter_values( source_str, pattern_list, keyword_item_list ) assert bool(result) is True def test_get_json_report(self, quark_obj): json_report = quark_obj.get_json_report() # Check if proper dict object assert isinstance(json_report, dict) assert json_report.get("md5") == "14d9f1a92dd984d6040cc41ed06e273e" def test_json_report_format(self, quark_obj): # Inner function for comparing two json objects def sorting(item): if isinstance(item, dict): return sorted((key, sorting(values)) for key, values in item.items()) if isinstance(item, list): return sorted(sorting(x) for x in item) else: return item json_report = quark_obj.get_json_report() with open("tests/core/json_report_sample.json") as json_file: sample_json = json.loads(json_file.read()) assert sorting(sample_json) == sorting(json_report) quark-engine-23.4.1/tests/evaluator/000077500000000000000000000000001442215066700173425ustar00rootroot00000000000000quark-engine-23.4.1/tests/evaluator/test_pyeval.py000066400000000000000000000725221442215066700222630ustar00rootroot00000000000000import itertools from unittest.mock import patch import pytest import requests from quark.core.apkinfo import AndroguardImp from quark.core.struct.registerobject import RegisterObject from quark.core.struct.tableobject import TableObject from quark.evaluator.pyeval import MAX_REG_COUNT, PyEval @pytest.fixture() def instructions(): ins = [ "invoke-virtual", "invoke-direct", "move-result-object", "new-instance", "const-string", "const/4", "aget-object", ] yield ins del ins APK_SOURCE = ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk" ) APK_FILENAME = "13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk" @pytest.fixture(scope="module") def apkinfo(): r = requests.get(APK_SOURCE, allow_redirects=True) file = open(APK_FILENAME, "wb") file.write(r.content) apkinfo = AndroguardImp(APK_FILENAME) yield apkinfo @pytest.fixture(scope="function") def pyeval(apkinfo): pyeval = PyEval(apkinfo) # mock_hash_table = [...[], [v4_mock_variable_obj], [], [], # [v9_mock_variable_obj]....] v4_mock_variable_obj = RegisterObject( "v4", "Lcom/google/progress/SMSHelper;", value_type="Lcom/google/progress/SMSHelper;", ) v5_mock_variable_obj = RegisterObject( "v5", "some_number", "java.lang.String.toString()", value_type="I" ) v6_mock_variable_obj = RegisterObject( "v6", "an_array", "java.lang.Collection.toArray()", value_type="[I" ) v7_mock_variable_obj = RegisterObject("v7", "a_float", value_type="F") v8_mock_variable_obj = RegisterObject( "v8", "ArrayMap object", value_type="Landroid/support/v4/util/ArrayMap;", ) v9_mock_variable_obj = RegisterObject( "v9", "some_string", "java.io.file.close()", value_type="Ljava/lang/String;", ) pyeval.table_obj.insert(4, v4_mock_variable_obj) pyeval.table_obj.insert(5, v5_mock_variable_obj) pyeval.table_obj.insert(6, v6_mock_variable_obj) pyeval.table_obj.insert(7, v7_mock_variable_obj) pyeval.table_obj.insert(8, v8_mock_variable_obj) pyeval.table_obj.insert(9, v9_mock_variable_obj) yield pyeval del pyeval MOVE_KIND = [ prefix + postfix for prefix, postfix in itertools.product( ["move", "move-object"], ["", "/from16", "/16"] ) ] + ["array-length"] MOVE_WIDE_KIND = ["move-wide" + postfix for postfix in ["", "/from16", "/16"]] @pytest.fixture(scope="module", params=MOVE_KIND) def move_kind(request): return request.param @pytest.fixture(scope="module", params=MOVE_WIDE_KIND) def move_wide_kind(request): return request.param FILLED_ARRAY_KIND = ("filled-new-array", "filled-new-array/range") @pytest.fixture(scope="module", params=FILLED_ARRAY_KIND) def filled_array_kind(request): return request.param AGET_KIND = [ "aget" + postfix for postfix in ("", "-object", "-byte", "-char", "-short", "-boolean") ] AGET_WIDE_KIND = ["aget-wide"] @pytest.fixture(scope="module", params=AGET_KIND) def aget_kind(request): return request.param @pytest.fixture(scope="module", params=AGET_WIDE_KIND) def aget_wide_kind(request): return request.param APUT_KIND = [ "aput" + postfix for postfix in ("", "-object", "-byte", "-char", "-short", "-boolean") ] APUT_WIDE_KIND = ("aput-wide",) @pytest.fixture(scope="module", params=APUT_KIND) def aput_kind(request): return request.param @pytest.fixture(scope="module", params=APUT_WIDE_KIND) def aput_wide_kind(request): return request.param NEG_NOT_KIND = [ prefix + postfix for prefix, postfix in itertools.product( ["neg-", "not-"], ["int", "long", "float"] ) ] NEG_NOT_WIDE_KIND = ("neg-double", "not-double") @pytest.fixture(scope="module", params=NEG_NOT_KIND) def neg_not_kind(request): return request.param @pytest.fixture(scope="module", params=NEG_NOT_WIDE_KIND) def neg_not_wide_kind(request): return request.param ALL_CAST_KIND = list( { prefix + "-" + postfix for prefix, postfix in itertools.product( ("int", "long", "float", "double"), ("int", "long", "float", "double"), ) }.difference( { "int-int", "long-long", "float-float", "double-double", "double-long", "long-double", } ) ) CAST_KIND = [ ins for ins in ALL_CAST_KIND if "double" not in ins and "long" not in ins ] CAST_SIMPLE_TO_WIDE_KIND = [ ins for ins in ALL_CAST_KIND if ins.endswith("double") or ins.endswith("long") ] CAST_WIDE_TO_SIMPLE_KIND = [ ins for ins in ALL_CAST_KIND if ins.startswith("double") or ins.startswith("long") ] @pytest.fixture(scope="module", params=CAST_KIND) def cast_kind(request): return request.param @pytest.fixture(scope="module", params=CAST_SIMPLE_TO_WIDE_KIND) def cast_simple_to_wide_kind(request): return request.param @pytest.fixture(scope="module", params=CAST_WIDE_TO_SIMPLE_KIND) def cast_wide_to_simple_kind(request): return request.param _BINOP_PREFIX = ( "add", "sub", "mul", "div", "rem", "and", "or", "xor", "shl", "shr", "ushr", ) SIMPLE_BINOP_KIND = [ prefix + "-" + type_str for prefix, type_str in itertools.product( _BINOP_PREFIX, ("int", "float", "long") ) ] BINOP_WIDE_KIND = [prefix + "-" + "double" for prefix in _BINOP_PREFIX] BINOP_2ADDR_KIND = [ins + "/2addr" for ins in SIMPLE_BINOP_KIND] BINOP_LIT_KIND = [ ins + postfix for ins, postfix in itertools.product( SIMPLE_BINOP_KIND, ("/lit8", "/lit16") ) ] @pytest.fixture(scope="module", params=SIMPLE_BINOP_KIND) def simple_binop_kind(request): return request.param @pytest.fixture(scope="module", params=BINOP_WIDE_KIND) def binop_wide_kind(request): return request.param @pytest.fixture(scope="module", params=BINOP_2ADDR_KIND) def binop_2addr_kind(request): return request.param @pytest.fixture(scope="module", params=BINOP_LIT_KIND) def binop_lit_kind(request): return request.param class TestPyEval: def test_init(self, apkinfo): pyeval = PyEval(apkinfo) assert len(pyeval.table_obj.hash_table) == MAX_REG_COUNT assert isinstance(pyeval.table_obj, TableObject) assert pyeval.ret_stack == [] # Tests for _invoke def test_invoke_with_non_list_object(self, pyeval): instruction = None with pytest.raises(TypeError): pyeval._invoke(instruction) def test_invoke_with_empty_list(self, pyeval): instruction = [] with pytest.raises(IndexError): pyeval._invoke(instruction) def test_invoke_with_wrong_types(self, pyeval): instruction = [1, 2, 3] with pytest.raises(TypeError): pyeval._invoke(instruction) def test_invoke_with_invalid_value(self, pyeval): instruction = ["invoke-kind", "", ""] with pytest.raises(ValueError): pyeval._invoke(instruction) def test_invoke_with_func_returning_value(self, pyeval): instruction = ["invoke-kind", "v4", "v9", "some_function()Lclass;"] pyeval._invoke(instruction) assert pyeval.table_obj.pop(4).called_by_func == [ "some_function()Lclass;(Lcom/google/progress/SMSHelper;,some_string)" ] assert pyeval.table_obj.pop(9).called_by_func == [ "java.io.file.close()", "some_function()Lclass;(Lcom/google/progress/SMSHelper;,some_string)", ] assert pyeval.ret_stack == [ "some_function()Lclass;(Lcom/google/progress/SMSHelper;,some_string)" ] assert pyeval.ret_type == "Lclass;" @pytest.mark.skip(reason="discussion needed.") def test_invoke_with_func_not_returning_value(self, pyeval): instruction = ["invoke-kind", "v4", "v9", "some_function()V"] pyeval._invoke(instruction) assert pyeval.table_obj.pop(4).called_by_func == [ "some_function()V(Lcom/google/progress/SMSHelper;,some_string)" ] assert pyeval.table_obj.pop(9).called_by_func == [ "java.io.file.close()", "some_function()V(Lcom/google/progress/SMSHelper;,some_string)", ] assert pyeval.ret_stack == [] def test_invoke_without_registers(self, pyeval): instruction = ["invoke-static", "some-func()Lclass;"] pyeval._invoke(instruction) assert pyeval.table_obj.pop(9).called_by_func == [ "java.io.file.close()" ] assert pyeval.ret_stack == ["some-func()Lclass;()"] # Tests for invoke_virtual def test_invoke_virtual_with_valid_mnemonic(self, pyeval): instruction = [ "invoke-virtual", "v4", "v9", ( "Landroid/support/v4/util/ArrayMap;" "->entrySet()Ljava/util/Set;(ArrayMap object)" ), ] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_VIRTUAL(instruction) mock.assert_called_once_with(instruction, look_up=True) def test_invoke_virtual_with_class_inheritance(self, pyeval): instruction = [ "invoke-virtual", "v8", "Landroid/support/v4/util/ArrayMap;->isEmpty()Z", ] pyeval.eval[instruction[0]](instruction) assert pyeval.ret_stack == [ ( "Landroid/support/v4/util/SimpleArrayMap;" "->isEmpty()Z(ArrayMap object)" ) ] assert pyeval.ret_type == "Z" # Tests for invoke_direct def test_invoke_direct_with_valid_mnemonic(self, pyeval): instruction = [ "invoke-direct", "v4", "v9", ( "Landroid/support/v4/util/ArrayMap;" "->entrySet()Ljava/util/Set;(ArrayMap object)" ), ] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_DIRECT(instruction) mock.assert_called_once_with(instruction) # Tests for invoke_static def test_invoke_static_with_valid_mnemonic(self, pyeval): instruction = [ "invoke-static", "v4", "v9", ( "Landroid/support/v4/util/ArrayMap;" "->entrySet()Ljava/util/Set;(ArrayMap object)" ), ] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_STATIC(instruction) mock.assert_called_once_with(instruction) # Tests for invoke-interface def test_invoke_interface_with_valid_mnemonic(self, pyeval): instruction = [ "invoke-interface", "v4", "v9", ( "Landroid/support/v4/util/ArrayMap;" "->entrySet()Ljava/util/Set;(ArrayMap object)" ), ] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_INTERFACE(instruction) mock.assert_called_once_with(instruction, look_up=True) def test_invoke_interface_with_class_inheritance(self, pyeval): instruction = [ "invoke-interface", "v8", "Ljava/util/Map;->entrySet()Ljava/util/Set;", ] pyeval.eval[instruction[0]](instruction) assert pyeval.ret_stack == [ ( "Landroid/support/v4/util/ArrayMap;" "->entrySet()Ljava/util/Set;(ArrayMap object)" ) ] assert pyeval.ret_type == "Ljava/util/Set;" # Tests for invoke-super def test_invoke_super_with_valid_mnemonic(self, pyeval): instruction = ["invoke-super", "v4", "v9", "some_function()V"] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_SUPER(instruction) mock.assert_called_once_with( instruction, look_up=True, skip_self=True ) def test_invoke_super_with_class_inheritance(self, pyeval): instruction = [ "invoke-super", "v8", "Landroid/support/v4/app/Fragment;->toString()Ljava/lang/String;", ] pyeval.eval[instruction[0]](instruction) assert pyeval.ret_stack == [ ( "Landroid/support/v4/util/SimpleArrayMap;" "->toString()Ljava/lang/String;(ArrayMap object)" ) ] assert pyeval.ret_type == "Ljava/lang/String;" # Tests for invoke polymorphic def test_invoke_polymorphic_with_valid_mnemonic(self, pyeval): instruction = [ "invoke-polymorphic", "v4", "v9", "some_function()V", "prototype_idx", ] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_POLYMORPHIC(instruction) mock.assert_called_once_with(instruction) # Tests for invoke-custom def test_invoke_custom_with_valid_mnemonic(self, pyeval): instruction = ["invoke-custom", "v4", "v9", "method"] with patch("quark.evaluator.pyeval.PyEval._invoke") as mock: pyeval.INVOKE_CUSTOM(instruction) mock.assert_called_once_with(instruction) # Tests for _move_result def test_move_with_non_list_object(self, pyeval): instruction = None with pytest.raises(TypeError): pyeval._move_result(instruction) def test_move_with_empty_list(self, pyeval): instruction = [] with pytest.raises(IndexError): pyeval._move_result(instruction) def test_move_with_invalid_instrcution(self, pyeval): instruction = ["move-kind", "", ""] with pytest.raises(ValueError): pyeval._move_result(instruction) def test_move_with_valid_instrcution(self, pyeval): instruction = ["move-result-object", "v1"] expected_return_value = ( "some_function()V(used_register_1, used_register_2)" ) expected_return_type = "Lclass;" pyeval.ret_stack.append(expected_return_value) pyeval.ret_type = expected_return_type pyeval._move_result(instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", expected_return_value, None, value_type=expected_return_type ) # Tests for move_result def test_move_result_with_valid_mnemonic(self, pyeval): instruction = ["move-result", "v1"] with patch("quark.evaluator.pyeval.PyEval._move_result") as mock: pyeval.MOVE_RESULT(instruction) mock.assert_called_once_with(instruction) # Tests for move_result_wide def test_move_result_wide_with_valid_mnemonic(self, pyeval): instruction = ["move-result-wide", "v1"] return_value = "Return Value" pyeval.ret_stack.append("Return Value") pyeval.MOVE_RESULT_WIDE(instruction) assert pyeval.table_obj.pop(1).value == return_value assert pyeval.table_obj.pop(2).value == return_value # Tests for move_result_object def test_move_result_object_with_valid_mnemonic(self, pyeval): instruction = ["move-result-object", "v1"] with patch("quark.evaluator.pyeval.PyEval._move_result") as mock: pyeval.MOVE_RESULT_OBJECT(instruction) mock.assert_called_once_with(instruction) # Tests for new instance def test_new_instance(self, pyeval): instruction = ["new-instance", "v3", "Lcom/google/progress/SMSHelper;"] override_original_instruction = [ "new-instance", "v4", "Ljava/lang/Object;", ] pyeval.NEW_INSTANCE(instruction) assert pyeval.table_obj.pop(3) == RegisterObject( "v3", "Lcom/google/progress/SMSHelper;", value_type="Lcom/google/progress/SMSHelper;", ) assert pyeval.table_obj.pop(4) == RegisterObject( "v4", "Lcom/google/progress/SMSHelper;", value_type="Lcom/google/progress/SMSHelper;", ) pyeval.NEW_INSTANCE(override_original_instruction) assert pyeval.table_obj.pop(4) == RegisterObject( "v4", "Ljava/lang/Object;", value_type="Ljava/lang/Object;" ) # Tests for const_string def test_const_string(self, pyeval): instruction = [ "const-string", "v8", "https://github.com/quark-engine/quark-engine", ] pyeval.CONST_STRING(instruction) assert pyeval.table_obj.pop(8) == RegisterObject( "v8", "https://github.com/quark-engine/quark-engine", value_type="Ljava/lang/String;", ) def test_const_string_jumbo(self, pyeval): instruction = [ "const-string/jumbo", "v8", "https://github.com/quark-engine/quark-engine", ] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(8) == RegisterObject( "v8", "https://github.com/quark-engine/quark-engine", value_type="Ljava/lang/String;", ) def test_const_class(self, pyeval): instruction = [ "const-class", "v8", "Landroid/telephony/SmsMessage;", ] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(8) == RegisterObject( "v8", "Landroid/telephony/SmsMessage;", value_type="Ljava/lang/Class;", ) # Tests for const def test_const(self, pyeval): instruction = ["const", "v1", "string value"] with patch("quark.evaluator.pyeval.PyEval._assign_value") as mock: pyeval.CONST(instruction) mock.assert_called_once_with(instruction) # Tests for const-four def test_const_four(self, pyeval): instruction = [ "const/4", "v8", "https://github.com/quark-engine/quark-engine", ] with patch("quark.evaluator.pyeval.PyEval._assign_value") as mock: pyeval.CONST_FOUR(instruction) mock.assert_called_once_with(instruction) # Tests for const-sixteen def test_const_sixteen(self, pyeval): instruction = ["const/16", "v1", "123"] with patch("quark.evaluator.pyeval.PyEval._assign_value") as mock: pyeval.CONST_SIXTEEN(instruction) mock.assert_called_once_with(instruction) # Tests for const-high-sixteen def test_const_high_sixteen(self, pyeval): instruction = ["const/high16", "v1", "123"] with patch("quark.evaluator.pyeval.PyEval._assign_value") as mock: pyeval.CONST_HIGHSIXTEEN(instruction) mock.assert_called_once_with(instruction) # Tests for move-kind def test_move_kind(self, pyeval, move_kind): instruction = [move_kind, "v1", "v4"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "Lcom/google/progress/SMSHelper;", value_type="Lcom/google/progress/SMSHelper;", ) def test_move_wide_kind(self, pyeval, move_wide_kind): instruction = [move_wide_kind, "v1", "v4"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "Lcom/google/progress/SMSHelper;", value_type="Lcom/google/progress/SMSHelper;", ) assert pyeval.table_obj.pop(2) == RegisterObject( "v2", "some_number", value_type="I" ) def test_new_array(self, pyeval): instruction = ["new-array", "v1", "v5", "[java/lang/String;"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "new-array()[(some_number)", value_type="[java/lang/String;", ) def test_filled_array_kind_with_class_type( self, pyeval, filled_array_kind ): instruction = [filled_array_kind, "v1", "[type_idx"] pyeval.eval[instruction[0]](instruction) assert pyeval.ret_stack == ["new-array()[type_idx()"] assert pyeval.ret_type == "[type_idx" def test_filled_array_kind_with_primitive_type( self, pyeval, filled_array_kind ): instruction = [filled_array_kind, "v1", "[I"] pyeval.eval[instruction[0]](instruction) assert pyeval.ret_stack == ["new-array()[I()"] assert pyeval.ret_type == "[I" # Tests for aget-kind def test_aget_kind(self, pyeval, aget_kind): v2_mock_variable_obj = RegisterObject( "v2", "some_list_like[1,2,3,4]", "java.io.file.close()", value_type="[Ljava/lang/Integer;", ) v3_mock_variable_obj = RegisterObject("v3", "2", None, value_type="I") pyeval.table_obj.insert(2, v2_mock_variable_obj) pyeval.table_obj.insert(3, v3_mock_variable_obj) if "-" in aget_kind: index = aget_kind.index("-") + 1 postfix = aget_kind[index:] if postfix == "object": expected_value_type = "Ljava/lang/Integer;" else: expected_value_type = pyeval.type_mapping[postfix] else: expected_value_type = "Ljava/lang/Integer;" instruction = [aget_kind, "v1", "v2", "v3"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "some_list_like[1,2,3,4][2]", value_type=expected_value_type ) def test_aget_wide_kind(self, pyeval, aget_wide_kind): instruction = [aget_wide_kind, "v1", "v6", "v5"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "an_array[some_number]", value_type="I" ) # Tests for aput-kind def test_aput_kind(self, pyeval, aput_kind): instruction = [aput_kind, "v4", "v6", "v5"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(6) == RegisterObject( "v6", "an_array[some_number]:Lcom/google/progress/SMSHelper;", value_type="[I", ) def test_aput_wide_kind(self, pyeval, aput_wide_kind): instruction = [aput_wide_kind, "v4", "v6", "v5"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(6) == RegisterObject( "v6", ( "an_array[some_number]:" "(Lcom/google/progress/SMSHelper;, some_number)" ), value_type="[I", ) # Tests for neg-kind and not-kind def test_neg_and_not_kind(self, pyeval, neg_not_kind): instruction = [neg_not_kind, "v1", "v5"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "some_number", value_type="I" ) def test_neg_and_not_wide_kind(self, pyeval, neg_not_wide_kind): instruction = [neg_not_wide_kind, "v1", "v5"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "some_number", value_type="I" ) assert pyeval.table_obj.pop(2) == RegisterObject( "v2", "an_array", value_type="[I" ) # Tests for type-casting def test_type_casting_without_wide_type(self, pyeval, cast_kind): instruction = [cast_kind, "v1", "v5"] index = cast_kind.index("-") + 1 postfix = cast_kind[index:] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "casting(some_number)", value_type=pyeval.type_mapping[postfix], ) def test_type_casting_with_wide_type_to_simple_type( self, pyeval, cast_wide_to_simple_kind ): instruction = [cast_wide_to_simple_kind, "v1", "v5"] index = cast_wide_to_simple_kind.index("-") + 1 postfix = cast_wide_to_simple_kind[index:] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "casting(some_number, an_array)", value_type=pyeval.type_mapping[postfix], ) def test_type_casting_with_simple_type_to_wide_type( self, pyeval, cast_simple_to_wide_kind ): instruction = [cast_simple_to_wide_kind, "v1", "v5"] index = cast_simple_to_wide_kind.index("-") + 1 postfix = cast_simple_to_wide_kind[index:] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "casting(some_number)", value_type=pyeval.type_mapping[postfix], ) assert pyeval.table_obj.pop(2) == RegisterObject( "v2", "casting(some_number)", value_type=pyeval.type_mapping[postfix], ) # Tests for binop-kind def test_simple_binop_kind(self, pyeval, simple_binop_kind): instruction = [simple_binop_kind, "v1", "v5", "v6"] index = simple_binop_kind.index("-") + 1 postfix = simple_binop_kind[index:] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "binop(some_number, an_array)", value_type=pyeval.type_mapping[postfix], ) def test_binop_kind_with_wide_type(self, pyeval, binop_wide_kind): instruction = [binop_wide_kind, "v1", "v4", "v6"] index = binop_wide_kind.index("-") + 1 postfix = binop_wide_kind[index:] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "binop(Lcom/google/progress/SMSHelper;, an_array)", value_type=pyeval.type_mapping[postfix], ) assert pyeval.table_obj.pop(2) == RegisterObject( "v2", "binop(some_number, a_float)", value_type=pyeval.type_mapping[postfix], ) def test_binop_kind_in_place(self, pyeval, binop_2addr_kind): instruction = [binop_2addr_kind, "v4", "v6"] l_index = binop_2addr_kind.index("-") + 1 r_index = binop_2addr_kind.index("/") postfix = binop_2addr_kind[l_index:r_index] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(4) == RegisterObject( "v4", "binop(Lcom/google/progress/SMSHelper;, an_array)", value_type=pyeval.type_mapping[postfix], ) def test_binop_kind_with_literal(self, pyeval, binop_lit_kind): instruction = [binop_lit_kind, "v1", "v5", "literal_number"] l_index = binop_lit_kind.index("-") + 1 r_index = binop_lit_kind.index("/") postfix = binop_lit_kind[l_index:r_index] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "binop(some_number, literal_number)", value_type=pyeval.type_mapping[postfix], ) # Tests for move-exception def test_move_exception(self, pyeval): instruction = ["move-exception", "v1"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", "Exception", value_type="Ljava/lang/Throwable;" ) # Tests for fill-array-data def test_fill_array_data(self, pyeval): instruction = ["fill-array-data", "v6", "array-data-address"] pyeval.eval[instruction[0]](instruction) assert pyeval.table_obj.pop(6) == RegisterObject( "v6", "Embedded-array-data()[", value_type="[I" ) def test_show_table(self, pyeval): assert len(pyeval.show_table()[4]) == 1 assert len(pyeval.show_table()[9]) == 1 assert len(pyeval.show_table()[3]) == 0 assert isinstance(pyeval.show_table()[4][0], RegisterObject) assert isinstance(pyeval.show_table()[9][0], RegisterObject) def test_invoke_and_move(self, pyeval): v6_mock_variable_obj = RegisterObject( "v6", "some_string", None, value_type="Ljava/lang/String;" ) pyeval.table_obj.insert(6, v6_mock_variable_obj) assert pyeval.table_obj.pop(6) == RegisterObject( "v6", "some_string", value_type="Ljava/lang/String;" ) first_instruction = [ "invoke-virtual", "v6", "Lcom/google/progress/ContactsCollector;->getContactList()Ljava/lang/String;", ] second_instruction = ["move-result-object", "v1"] pyeval.INVOKE_VIRTUAL(first_instruction) pyeval.MOVE_RESULT_OBJECT(second_instruction) assert pyeval.table_obj.pop(1) == RegisterObject( "v1", ( "Lcom/google/progress/ContactsCollector;" "->getContactList()Ljava/lang/String;(some_string)" ), value_type="Ljava/lang/String;", ) @staticmethod def test_get_method_pattern(): class_name = "Lcom/google/progress/ContactsCollector;" method_name = "getContactList" descriptor = "()Ljava/lang/String;(some_string)" pattern = PyEval.get_method_pattern( class_name, method_name, descriptor ) assert pattern == ( "Lcom/google/progress/ContactsCollector;" "->getContactList()Ljava/lang/String;(some_string)" ) quark-engine-23.4.1/tests/forensic/000077500000000000000000000000001442215066700171505ustar00rootroot00000000000000quark-engine-23.4.1/tests/forensic/test_forensic.py000066400000000000000000000037471442215066700224040ustar00rootroot00000000000000import pytest import requests from quark.forensic import Forensic APK_SOURCE = ( "https://github.com/quark-engine/apk-samples" "/raw/master/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk" ) APK_FILENAME = "14d9f1a92dd984d6040cc41ed06e273e.apk" @pytest.fixture() def forensic(scope="function"): r = requests.get(APK_SOURCE, allow_redirects=True) open(APK_FILENAME, "wb").write(r.content) apk_file = APK_FILENAME forensic = Forensic(apk_file) yield forensic class TestForensic: def test_all_strings(self, forensic): assert len(forensic.get_all_strings()) == 1005 def test_get_url(self, forensic): assert len(forensic.get_url()) == 4 assert "http://mmsc.vnet.mobi" in forensic.get_url() assert "http://mmsc.myuni.com.cn" in forensic.get_url() assert "http://www.google.com/loc/json" in forensic.get_url() assert "http://mmsc.monternet.com" in forensic.get_url() def test_get_ip(self, forensic): assert len(forensic.get_ip()) == 3 assert "10.0.0.200" in forensic.get_ip() assert "114.80.208.163" in forensic.get_ip() assert "10.0.0.172" in forensic.get_ip() def test_get_content(self, forensic): assert len(forensic.get_content()) == 4 assert "content://sms" in forensic.get_content() assert "content://telephony/carriers" in forensic.get_content() assert "content://sms/sent" in forensic.get_content() assert "content://telephony/carriers/preferapn" in forensic.get_content() def test_get_file(self, forensic): assert len(forensic.get_file()) == 0 def test_get_base64(self, forensic): assert len(forensic.get_base64()) == 102 def test_get_android_api(self, forensic): assert len(forensic.get_android_api()) == 640 result = [str(x) for x in forensic.get_android_api()] assert any("getCellLocation" in meth for meth in result) assert any("sendTextMessage" in meth for meth in result) quark-engine-23.4.1/tests/script/000077500000000000000000000000001442215066700166445ustar00rootroot00000000000000quark-engine-23.4.1/tests/script/rules/000077500000000000000000000000001442215066700177765ustar00rootroot00000000000000quark-engine-23.4.1/tests/script/rules/00068.json000066400000000000000000000007311442215066700213470ustar00rootroot00000000000000{ "crime": "Executes the specified string Linux command", "permission": [], "api": [ { "class": "Ljava/lang/Runtime;", "method": "getRuntime", "descriptor": "()Ljava/lang/Runtime;" }, { "class": "Ljava/lang/Runtime;", "method": "exec", "descriptor": "(Ljava/lang/String;)Ljava/lang/Process;" } ], "score": 1, "label": [ "control" ] }quark-engine-23.4.1/tests/script/rules/00193.json000066400000000000000000000010461442215066700213460ustar00rootroot00000000000000{ "crime": "Send a SMS message", "permission": [], "api": [ { "class": "Landroid/telephony/SmsManager;", "method": "getDefault", "descriptor": "()Landroid/telephony/SmsManager;" }, { "class": "Landroid/telephony/SmsManager;", "method": "sendTextMessage", "descriptor": "(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V" } ], "score": 1, "label": ["sms"] }quark-engine-23.4.1/tests/script/test_ciphey.py000066400000000000000000000007051442215066700215400ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from quark.script.ciphey import checkClearText def testCheckClearTextWithClearText(): assert checkClearText("Clear Text") == "Clear Text" def testCheckClearTextWithCipherText(): assert ( checkClearText("NB2HI4DTHIXS6Z3PN5TWYZJOMNXW2===") == "https://google.com" ) quark-engine-23.4.1/tests/script/test_frida.py000066400000000000000000000144631442215066700213520ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import json from unittest.mock import Mock, patch from pytest import fixture from quark.script.frida import ( Behavior, FridaResult, MethodCallEventDispatcher, runFridaHook, ) @fixture(scope="function") def dispatcherThatHooksOneMethod(): dispatcher = MethodCallEventDispatcher(None) dispatcher.script = Mock() targetMethod = ( "com.google.progress.WifiCheckTask.checkWifiCanOrNotConnectServer" ) methodParamTypes = "java.lang.String" buffer = dispatcher.startWatchingMethodCall(targetMethod, methodParamTypes) return dispatcher, targetMethod, methodParamTypes, buffer @fixture(scope="function") def methodCallMessages(): return [ { "type": "CallCaptured", "identifier": [ ( "com.google.progress.WifiCheckTask" ".checkWifiCanOrNotConnectServer" ), "java.lang.String", "V", ], "paramValues": [ "SimpleString", "https://github.com/quark-engine/", ], } ] class TestMethodCallEventDispatcher: @staticmethod def testStartWatchingMethodCallSuccess(dispatcherThatHooksOneMethod): ( dispatcher, targetMethod, methodParamTypes, _, ) = dispatcherThatHooksOneMethod mockedFridaAgentAPI = dispatcher.script.exports.watch_method_call assert ( dispatcher._getMethodIdentifier(targetMethod, methodParamTypes) in dispatcher.watchedMethods ) mockedFridaAgentAPI.assert_called_once_with( targetMethod, methodParamTypes ) @staticmethod def testStartWatchingMethodFailed(dispatcherThatHooksOneMethod): ( dispatcher, targetMethod, methodParamTypes, _, ) = dispatcherThatHooksOneMethod failedToWatchMessage = { "type": "send", "payload": json.dumps( { "type": "FailedToWatch", "identifier": [targetMethod, methodParamTypes], } ), } dispatcher.handleCapturedEvent(failedToWatchMessage, None) assert ( dispatcher._getMethodIdentifier(targetMethod, methodParamTypes) not in dispatcher.watchedMethods ) @staticmethod def testStopWatchingMethodCallSuccess(dispatcherThatHooksOneMethod): ( dispatcher, targetMethod, methodParamTypes, _, ) = dispatcherThatHooksOneMethod dispatcher.stopWatchingMethodCall(targetMethod, methodParamTypes) assert ( dispatcher._getMethodIdentifier(targetMethod, methodParamTypes) not in dispatcher.watchedMethods ) @staticmethod def testStopWatchingMethodCallFailed(dispatcherThatHooksOneMethod): ( dispatcher, targetMethod, methodParamTypes, _, ) = dispatcherThatHooksOneMethod dispatcher.stopWatchingMethodCall(targetMethod, methodParamTypes) dispatcher.stopWatchingMethodCall(targetMethod, methodParamTypes) assert ( dispatcher._getMethodIdentifier(targetMethod, methodParamTypes) not in dispatcher.watchedMethods ) @staticmethod def testDispatchCallMessage(dispatcherThatHooksOneMethod): ( dispatcher, targetMethod, paramTypes, buffer, ) = dispatcherThatHooksOneMethod expectedEvent = { "type": "CallCaptured", "identifier": [targetMethod, paramTypes, "V"], "paramValues": ["param1", "param2"], } callMessage = { "type": "send", "payload": json.dumps(expectedEvent), } dispatcher.handleCapturedEvent(callMessage, None) assert expectedEvent in buffer @staticmethod def testDispatchErrorMessage(dispatcherThatHooksOneMethod, capsys): dispatcher = dispatcherThatHooksOneMethod[0] errorMessage = {"type": "error", "description": "Any description."} dispatcher.handleCapturedEvent(errorMessage, None) captured = capsys.readouterr() assert errorMessage["description"] in captured.err class TestBehavior: @staticmethod def testHasString(methodCallMessages): behavior = Behavior(methodCallMessages[0]) # nosec E1120 capturedStrings = behavior.hasString("SimpleString") assert capturedStrings == ["SimpleString"] @staticmethod def testHasUrl(methodCallMessages): behavior = Behavior(methodCallMessages[0]) capturedUrls = behavior.hasUrl() assert capturedUrls == ["https://github.com/quark-engine/"] @staticmethod def testGetParamValues(methodCallMessages): behavior = Behavior(methodCallMessages[0]) capturedArguments = behavior.getParamValues() assert capturedArguments == [ "SimpleString", "https://github.com/quark-engine/", ] class TestFridaResult: @staticmethod def testGetBehaviorOccurList(methodCallMessages): fridaResult = FridaResult(methodCallMessages) behaviorOccurList = fridaResult.behaviorOccurList assert len(behaviorOccurList) == 1 def testFridaHook(methodCallMessages): mockedSession = Mock() mockedSession.create_script.return_value = Mock() mockedDevice = Mock() mockedDevice.spawn.return_value = 1 mockedDevice.attach.return_value = mockedSession appPackageName = "appName" targetMethod = "targetMethod" paramTypes = "paramType1,paramType2" with patch("frida.get_usb_device", return_value=mockedDevice) as _: with patch( ( "quark.script.frida.MethodCallEventDispatcher" ".startWatchingMethodCall" ), return_value=methodCallMessages, ) as _: fridaResult = runFridaHook( appPackageName, targetMethod, paramTypes, 10 ) assert len(fridaResult.behaviorOccurList) == 1 quark-engine-23.4.1/tests/script/test_objection.py000066400000000000000000000063761442215066700222450ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. from unittest import TestCase from unittest.mock import patch from quark.core.struct.methodobject import MethodObject from quark.script import Method from quark.script.objection import Objection, convertMethodToString def testCovertMethodToStringWithClasses(): method = Method( quarkResultInstance=None, methodObj=MethodObject( "Lcustom/class/name$subclass;", "method_name", "(Ljava/lang/String; Ljava/lang/Object;)V", ), ) result = convertMethodToString(method) assert result == ( "custom.class.name$subclass.method_name", "java.lang.String,java.lang.Object", ) def testCovertMethodToStringWithPrimitives(): method = Method( quarkResultInstance=None, methodObj=MethodObject( "Lcustom/class/name;", "method_name", "(I [B J)V" ), ) result = convertMethodToString(method) assert result == ("custom.class.name.method_name", "I,[B,J") def testCovertMethodToStringWithArrays(): method = Method( quarkResultInstance=None, methodObj=MethodObject( "Lcustom/class/name;", "method_name", "([Ljava/lang/String; [Ljava/lang/Object;)V", ), ) result = convertMethodToString(method) assert result == ( "custom.class.name.method_name", "[Ljava.lang.String;,[Ljava.lang.Object;", ) def testCovertMethodToStringWithArrayAndClass(): method = Method( quarkResultInstance=None, methodObj=MethodObject( "Lcustom/class/name;", "method_name", "([Ljava/lang/String; Ljava/lang/Object;)V", ), ) result = convertMethodToString(method) assert result == ( "custom.class.name.method_name", "[Ljava.lang.String;,java.lang.Object", ) class TestObjection: @staticmethod def testHookMethodWithMethodObject(): obj = Objection("127.0.0.1:8888") method = Method( None, MethodObject( "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "([Ljava/lang/String;)Z", ), ) with patch("requests.post") as mocked_post: obj.hookMethod( method, watchArgs=True, watchBacktrace=True, watchRet=True ) expectedJson = { "pattern": ( "com.google.progress.WifiCheckTask" ".checkWifiCanOrNotConnectServer" ), "overloadFilter": "[Ljava.lang.String;", "watchArgs": True, "watchBacktrace": True, "watchRet": True, } args, keyworkArgs = mocked_post.call_args_list[0] assert ( "http://127.0.0.1:8888/rpc/invoke/androidHookingWatchMethod" in args ) TestCase().assertDictEqual(keyworkArgs["json"], expectedJson) TestCase().assertDictEqual( keyworkArgs["headers"], {"Content-type": "application/json"} ) quark-engine-23.4.1/tests/script/test_script.py000066400000000000000000000341101442215066700215600ustar00rootroot00000000000000# -*- coding: utf-8 -*- # This file is part of Quark-Engine - https://github.com/quark-engine/quark-engine # See the file 'LICENSE' for copying permission. import pytest from quark.core.quark import Quark from quark.core.struct.methodobject import MethodObject from quark.script import ( Behavior, DefaultRuleset, Method, QuarkResult, Ruleset, getActivities, getApplication, runQuarkAnalysis, findMethodInAPK, ) RULE_FOLDER_PATH = "tests/script/rules" RULE_68_FILENAME = "00068.json" RULE_193_FILENAME = "00193.json" @pytest.fixture(scope="class") def QUARK_ANALYSIS_RESULT_FOR_RULE_68(SAMPLE_PATH_14d9f): ruleset = Ruleset(RULE_FOLDER_PATH) return runQuarkAnalysis(SAMPLE_PATH_14d9f, ruleset[RULE_68_FILENAME]) @pytest.fixture(scope="class") def QUARK_ANALYSIS_RESULT_FOR_RULE_193(SAMPLE_PATH_14d9f): ruleset = Ruleset(RULE_FOLDER_PATH) return runQuarkAnalysis(SAMPLE_PATH_14d9f, ruleset[RULE_193_FILENAME]) class TestRuleset: @staticmethod def testInitWithFolder(): _ = Ruleset(RULE_FOLDER_PATH) @staticmethod def testGetExistentRule(): ruleset = Ruleset(RULE_FOLDER_PATH) rule = ruleset[RULE_68_FILENAME] assert rule.crime == "Executes the specified string Linux command" @staticmethod def testGetNonexistentRule(): NONEXISTENT_RULE = "NONEXISTENT_RULE.json" ruleset = Ruleset(RULE_FOLDER_PATH) with pytest.raises(KeyError): _ = ruleset[NONEXISTENT_RULE] class TestDefaultRuleset: @staticmethod def testGetExistentRuleByNumber(): ruleset = DefaultRuleset(RULE_FOLDER_PATH) rule = ruleset[68] assert rule.crime == "Executes the specified string Linux command" @staticmethod def testGetNonexistentRuleByNumber(): ruleset = DefaultRuleset(RULE_FOLDER_PATH) with pytest.raises(KeyError): _ = ruleset[1] class TestApplication: @staticmethod def testIsNotDebuggable(SAMPLE_PATH_Ahmyth): application = getApplication(SAMPLE_PATH_Ahmyth) assert application.isDebuggable() is False @staticmethod def testIsDebuggable(SAMPLE_PATH_13667): application = getApplication(SAMPLE_PATH_13667) assert application.isDebuggable() is True class TestActivity: @staticmethod def testHasNoIntentFilter(SAMPLE_PATH_14d9f): activity = getActivities(SAMPLE_PATH_14d9f)[0] assert activity.hasIntentFilter() is False @staticmethod def testHasIntentFilter(SAMPLE_PATH_13667): activity = getActivities(SAMPLE_PATH_13667)[0] assert activity.hasIntentFilter() is True @staticmethod def testIsNotExported(SAMPLE_PATH_14d9f): activity = getActivities(SAMPLE_PATH_14d9f)[0] assert activity.isExported() is False @staticmethod def testIsExported(SAMPLE_PATH_13667): activity = getActivities(SAMPLE_PATH_13667)[0] assert activity.isExported() is True class TestMethod: @staticmethod def testInit(QUARK_ANALYSIS_RESULT_FOR_RULE_68): methodObj = MethodObject( class_name="Lcom/google/progress/WifiCheckTask;", name="checkWifiCanOrNotConnectServer", descriptor="()Z", ) method = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodObj) assert ( method.fullName == "Lcom/google/progress/WifiCheckTask;" " checkWifiCanOrNotConnectServer ()Z" ) @staticmethod def testGetXrefTo(QUARK_ANALYSIS_RESULT_FOR_RULE_68): methodObj = ( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "()Z", )[0] ) method = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodObj) expectedMethod = Method( QUARK_ANALYSIS_RESULT_FOR_RULE_68, MethodObject( "Landroid/util/Log;", "e", "(Ljava/lang/String; Ljava/lang/String;)I", ), ) expectedOffset = 116 callee_list = method.getXrefTo() assert (expectedMethod, expectedOffset) in callee_list @staticmethod def testGetXrefFrom(QUARK_ANALYSIS_RESULT_FOR_RULE_68): methodObj = ( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "([Ljava/lang/String;)Z", )[0] ) method = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodObj) expectedMethod = Method( QUARK_ANALYSIS_RESULT_FOR_RULE_68, MethodObject("Lcom/google/progress/WifiCheckTask;", "test", "()V"), ) caller_list = method.getXrefFrom() assert expectedMethod in caller_list @staticmethod def testGetArguments(QUARK_ANALYSIS_RESULT_FOR_RULE_68): def __getMethod( quarkResult: QuarkResult, className: str, methodName: str, descriptor: str, ) -> Method: methodObj = quarkResult.quark.apkinfo.find_method( className, methodName, descriptor )[0] return Method(quarkResult, methodObj) def __getMethodWithTarget( quark: Quark, methodObj: MethodObject, targetMethod: Method ) -> Method: return Method( quark=quark, methodObj=methodObj, targetMethod=targetMethod ) methodCaller = __getMethod( QUARK_ANALYSIS_RESULT_FOR_RULE_68, "Lcom/google/progress/AndroidClientService;", "onCreate", "()V", ) firstAPI = __getMethod( QUARK_ANALYSIS_RESULT_FOR_RULE_68, "Ljava/lang/Class;", "getDeclaredMethod", "(Ljava/lang/String; [Ljava/lang/Class;)Ljava/lang/reflect/Method;", ) secondAPI = __getMethod( QUARK_ANALYSIS_RESULT_FOR_RULE_68, "Ljava/lang/reflect/Method;", "setAccessible", "(Z)V", ) behavior = Behavior( QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodCaller, firstAPI, secondAPI, ) targetMethod = \ QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( class_name="Landroid/util/Log;", method_name="e", descriptor="(Ljava/lang/String; Ljava/lang/String;)I", )[0] callerMethodObj = \ QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( class_name="Lcom/google/progress/WifiCheckTask;", method_name="CloseWifi", descriptor="()V", )[0] targetMethod = Method(methodObj=targetMethod) callerMethodInstance = __getMethodWithTarget( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark, callerMethodObj, targetMethod ) arguments = behavior.secondAPI.getArguments() argumentsOfTargetMethod = callerMethodInstance.getArguments() assert arguments[1:] == [True] assert argumentsOfTargetMethod[0] == "wifi" @staticmethod def testFindSuperclassHierarchy(QUARK_ANALYSIS_RESULT_FOR_RULE_68): methodObj = MethodObject( class_name="Lcom/google/progress/WifiCheckTask;", name="checkWifiCanOrNotConnectServer", descriptor="()Z", ) method = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodObj, QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark) assert ( ["Ljava/util/TimerTask;"] == method.findSuperclassHierarchy() ) class TestBehavior: @staticmethod def testHasString(QUARK_ANALYSIS_RESULT_FOR_RULE_68): behaviorOccurList = QUARK_ANALYSIS_RESULT_FOR_RULE_68.behaviorOccurList behavior = next( filter( lambda b: "checkWifiCanOrNotConnectServer" in b.methodCaller.fullName, behaviorOccurList, ) ) result = behavior.hasString("ping") assert result @staticmethod def testHasUrl(QUARK_ANALYSIS_RESULT_FOR_RULE_68): behaviorOccurList = QUARK_ANALYSIS_RESULT_FOR_RULE_68.behaviorOccurList behavior = next( filter( lambda b: "checkWifiCanOrNotConnectServer" in b.methodCaller.fullName, behaviorOccurList, ) ) result = behavior.hasUrl() assert "www.baidu.com" in result @staticmethod def testGetParamValues(QUARK_ANALYSIS_RESULT_FOR_RULE_68): behaviorOccurList = QUARK_ANALYSIS_RESULT_FOR_RULE_68.behaviorOccurList behavior = next( filter( lambda b: "checkWifiCanOrNotConnectServer" in b.methodCaller.fullName, behaviorOccurList, ) ) assert behavior.getParamValues()[1] == "ping www.baidu.com" @staticmethod def testIsArgFromMethod(QUARK_ANALYSIS_RESULT_FOR_RULE_193): behaviorOccurList = ( QUARK_ANALYSIS_RESULT_FOR_RULE_193.behaviorOccurList ) behavior = behaviorOccurList[0] expectedMethod = [ "Landroid/app/PendingIntent;", "getBroadcast", "(Landroid/content/Context; I Landroid/content/Intent;" " I)Landroid/app/PendingIntent;", ] assert behavior.isArgFromMethod(expectedMethod) @staticmethod def testGetMethodsInArgs(QUARK_ANALYSIS_RESULT_FOR_RULE_193): behaviorOccurList = ( QUARK_ANALYSIS_RESULT_FOR_RULE_193.behaviorOccurList ) behavior = behaviorOccurList[0] method = behavior.getMethodsInArgs()[0].fullName assert method == "Landroid/telephony/SmsManager;" + \ " getDefault ()Landroid/telephony/SmsManager;" class TestQuarkReuslt: @staticmethod def testMethodGetXrefTo(QUARK_ANALYSIS_RESULT_FOR_RULE_68): methodObj = ( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "()Z", )[0] ) method = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodObj) expectedMethod = Method( QUARK_ANALYSIS_RESULT_FOR_RULE_68, MethodObject( "Landroid/util/Log;", "e", "(Ljava/lang/String; Ljava/lang/String;)I", ), ) expectedOffset = 116 callee_list = QUARK_ANALYSIS_RESULT_FOR_RULE_68.getMethodXrefTo(method) assert (expectedMethod, expectedOffset) in callee_list @staticmethod def testMethodGetXrefFrom(QUARK_ANALYSIS_RESULT_FOR_RULE_68): methodObj = ( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "([Ljava/lang/String;)Z", )[0] ) method = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, methodObj) expectedMethod = Method( QUARK_ANALYSIS_RESULT_FOR_RULE_68, MethodObject("Lcom/google/progress/WifiCheckTask;", "test", "()V"), ) caller_list = QUARK_ANALYSIS_RESULT_FOR_RULE_68.getMethodXrefFrom( method ) assert expectedMethod in caller_list @staticmethod def testGetAllStrings(QUARK_ANALYSIS_RESULT_FOR_RULE_68): assert len(QUARK_ANALYSIS_RESULT_FOR_RULE_68.getAllStrings()) == 1005 @staticmethod def testIsHardCoded(QUARK_ANALYSIS_RESULT_FOR_RULE_68): assert QUARK_ANALYSIS_RESULT_FOR_RULE_68.isHardcoded("gps") is True @staticmethod def testIsNotHardCoded(QUARK_ANALYSIS_RESULT_FOR_RULE_68): assert QUARK_ANALYSIS_RESULT_FOR_RULE_68.isHardcoded( "Quark") is False @staticmethod def testFindMethodInCallerWithListOfStr(QUARK_ANALYSIS_RESULT_FOR_RULE_68): callerMethod = [ "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "([Ljava/lang/String;)Z", ] targetMethod = [ "Landroid/util/Log;", "e", "(Ljava/lang/String; Ljava/lang/String;)I", ] assert QUARK_ANALYSIS_RESULT_FOR_RULE_68.findMethodInCaller( callerMethod, targetMethod ) @staticmethod def testFindMethodInCallerWithMethodInstance( QUARK_ANALYSIS_RESULT_FOR_RULE_68, ): callerObj = ( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "([Ljava/lang/String;)Z", )[0] ) caller = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, callerObj) targetObj = ( QUARK_ANALYSIS_RESULT_FOR_RULE_68.quark.apkinfo.find_method( "Landroid/util/Log;", "e", "(Ljava/lang/String; Ljava/lang/String;)I", )[0] ) target = Method(QUARK_ANALYSIS_RESULT_FOR_RULE_68, targetObj) assert QUARK_ANALYSIS_RESULT_FOR_RULE_68.findMethodInCaller( caller, target ) def testRunQuarkAnalysis(SAMPLE_PATH_14d9f): ruleset = Ruleset(RULE_FOLDER_PATH) ruleObj = ruleset[RULE_68_FILENAME] analysisResult = runQuarkAnalysis(SAMPLE_PATH_14d9f, ruleObj) assert len(analysisResult.behaviorOccurList) == 1 def testGetActivities(SAMPLE_PATH_14d9f) -> None: activities = getActivities(SAMPLE_PATH_14d9f) assert len(activities) == 1 assert str(activities[0]) == "com.google.progress.BackGroundActivity" def testfindMethodInAPK(SAMPLE_PATH_14d9f) -> None: method = findMethodInAPK(SAMPLE_PATH_14d9f, [ "Lcom/google/progress/WifiCheckTask;", "checkWifiCanOrNotConnectServer", "([Ljava/lang/String;)Z"] ) assert len(method) == 2 quark-engine-23.4.1/tests/test_freshquark.py000066400000000000000000000023071442215066700211260ustar00rootroot00000000000000from unittest.mock import patch from quark.freshquark import download def test_download_without_exist_rules(tmp_path): non_exist_rule_directory = tmp_path / "quark-rules" with patch("quark.freshquark.config") as mock_config: mock_config.HOME_DIR = f"{tmp_path}/" with patch("subprocess.run") as mock: download() mock.assert_called_once() assert mock.call_args[0][0] == [ "git", "clone", "https://github.com/quark-engine/quark-rules", f"{non_exist_rule_directory}" ] def test_download_with_exist_rules(tmp_path): exist_rule_directory = tmp_path / "quark-rules" exist_rule_directory.mkdir() with patch("quark.freshquark.config") as mock_config: mock_config.HOME_DIR = f"{tmp_path}/" mock_config.DIR_PATH = f"{exist_rule_directory}" with patch("subprocess.run") as mock: download() mock.assert_called_once() assert mock.call_args[0][0] == [ "git", "-C", f"{exist_rule_directory}", "pull", ] quark-engine-23.4.1/tests/test_report.py000066400000000000000000000111271442215066700202660ustar00rootroot00000000000000import os import os.path import zipfile from unittest.mock import patch import pytest import requests from quark.report import Report @pytest.fixture(scope="function") def invalid_file(tempfile): tempfile.write("Text in file.") yield tempfile @pytest.fixture(scope="module") def sample_apk_file(): APK_SOURCE = ( "https://github.com/quark-engine/" "apk-samples/raw/master/malware-samples/Ahmyth.apk" ) APK_NAME = "Ahmyth.apk" # Download apk request = requests.get(APK_SOURCE) with open(APK_NAME, "wb") as apk_file: apk_file.write(request.content) yield APK_NAME os.remove(APK_NAME) @pytest.fixture(scope="module") def sample_dex_file(sample_apk_file): DEX_NAME = "classes.dex" with zipfile.ZipFile(sample_apk_file, "r") as zip: zip.extract(DEX_NAME) yield DEX_NAME os.remove(DEX_NAME) @pytest.fixture(scope="module") def sample_rule_file(): return "quark/rules/sendLocation_SMS.json" @pytest.fixture(scope="module") def sample_rule_directory(): return "quark/rules" @pytest.fixture(scope="function") def sample_report(): report = Report() yield report del report class TestReport: def test_analysis_with_both_invalid_types(self, sample_report): with pytest.raises(TypeError): sample_report.analysis(None, None) @pytest.mark.xfail(reason="Requirement for the future.") def test_analysis_with_non_exist_apk(self, sample_report, sample_rule_file): with pytest.raises(FileNotFoundError): sample_report.analysis("NON_EXIST_APK", sample_rule_file) @pytest.mark.xfail(reason="Requirement for the future.") def test_analysis_with_non_exist_rule(self, sample_report, sample_apk_file): with pytest.raises(FileNotFoundError): sample_report.analysis(sample_apk_file, "NON_EXIST_RULE") @pytest.mark.xfail(reason="Requirement for the future.") def test_analysis_with_both_invalid_files(self, sample_report, invalid_file): with pytest.raises(BaseException): sample_report.analysis(invalid_file, invalid_file) def test_analysis_with_dex_and_single_rule( self, sample_report, sample_dex_file, sample_rule_file ): with patch("quark.core.quark.Quark.run") as mock_run: with patch( "quark.core.quark.Quark.generate_json_report" ) as mock_generate_report: sample_report.analysis(sample_dex_file, sample_rule_file) mock_run.assert_called_once() mock_generate_report.assert_called_once() def test_analysis_with_apk_and_single_rule( self, sample_report, sample_apk_file, sample_rule_file ): with patch("quark.core.quark.Quark.run") as mock_run: with patch( "quark.core.quark.Quark.generate_json_report" ) as mock_generate_report: sample_report.analysis(sample_apk_file, sample_rule_file) mock_run.assert_called_once() mock_generate_report.assert_called_once() def test_analysis_with_rule_directory( self, sample_report, sample_apk_file, sample_rule_directory ): rule_list = [ name for name in os.listdir(sample_rule_directory) if os.path.splitext(name)[1] == ".json" ] num_of_rules = len(rule_list) with patch("quark.core.quark.Quark.run") as mock_run: with patch( "quark.core.quark.Quark.generate_json_report" ) as mock_generate_report: sample_report.analysis(sample_apk_file, sample_rule_directory) assert mock_run.call_count == num_of_rules assert mock_generate_report.call_count == num_of_rules def test_get_report_with_invalid_type(self, sample_report): with pytest.raises(ValueError): sample_report.get_report(None) def test_get_report_with_invalid_value(self, sample_report): with pytest.raises(ValueError): sample_report.get_report("txt") def test_get_report_with_json_type( self, sample_report, sample_apk_file, sample_rule_file ): sample_report.analysis(sample_apk_file, sample_rule_file) result = sample_report.get_report("json") assert isinstance(result, dict) assert result["md5"] == "893e05aabd8754236ea70d3da8363d52" assert result["apk_filename"] == sample_apk_file assert result["size_bytes"] == 268043 assert result["threat_level"] == "Low Risk" assert result["total_score"] == 4 assert result["crimes"][0] is not None quark-engine-23.4.1/tests/utils/000077500000000000000000000000001442215066700165005ustar00rootroot00000000000000quark-engine-23.4.1/tests/utils/test_colors.py000066400000000000000000000005041442215066700214110ustar00rootroot00000000000000import os import sys from quark.utils.colors import color def test_color(): text = "Text" color_code = 1 colored_text = color(text, color_code) if sys.platform == "win32" and os.getenv("TERM") != "xterm": assert colored_text == text else: assert colored_text == "\x1b[1mText\x1b[0m" quark-engine-23.4.1/tests/utils/test_graph.py000066400000000000000000000052211442215066700212120ustar00rootroot00000000000000import os.path import pytest import requests from quark.core.apkinfo import AndroguardImp as Apkinfo from quark.utils.graph import call_graph, wrapper_lookup @pytest.fixture(scope="module") def analysis_object(tmp_path_factory): APK_SOURCE = ( "https://github.com/quark-engine/" "apk-samples/raw/master/malware-samples/Ahmyth.apk" ) APK_NAME = "Ahmyth.apk" # Download apk request = requests.get(APK_SOURCE) apk_file = tmp_path_factory.getbasetemp() / APK_NAME apk_file.write_bytes(request.content) analysis = Apkinfo(apk_file) yield analysis @pytest.fixture(scope="function") def parent_method(analysis_object): return analysis_object.find_method( "Lahmyth/mine/king/ahmyth/ConnectionManager;", "sendReq", "()V", )[0] @pytest.fixture(scope="function") def connect_method_1(analysis_object): return analysis_object.find_method( "Lio/socket/client/Socket;", "connect", "()Lio/socket/client/Socket;", )[0] @pytest.fixture(scope="function") def connect_method_2(analysis_object): return analysis_object.find_method( "Lahmyth/mine/king/ahmyth/ConnectionManager$1;", "", "()V", )[0] @pytest.fixture(scope="function") def leaf_method_1(analysis_object): return analysis_object.find_method( "Lio/socket/client/Socket;", "open", "()Lio/socket/client/Socket;", )[0] @pytest.fixture(scope="function") def leaf_method_2(analysis_object): return analysis_object.find_method( "Ljava/lang/Object;", "", "()V", )[0] def test_wrapper_lookup_with_result( analysis_object, parent_method, connect_method_1, leaf_method_1 ): path = wrapper_lookup(analysis_object, parent_method, leaf_method_1) assert path == [connect_method_1] def test_wrapper_lookup_with_no_result(analysis_object, leaf_method_1, parent_method): path = wrapper_lookup(analysis_object, leaf_method_1, parent_method) assert path == [] def test_call_graph( parent_method, analysis_object, connect_method_1, connect_method_2, leaf_method_1, leaf_method_2, ): call_graph_analysis = { "parent": parent_method, "apkinfo": analysis_object, "first_call": connect_method_1, "second_call": connect_method_2, "first_api": leaf_method_1, "second_api": leaf_method_2, "crime": "For test only.", } expected_file_name = ( f"call_graph_image/{parent_method.name}_{connect_method_1.name}" f"_{connect_method_2.name}" ) call_graph(call_graph_analysis) assert os.path.exists(expected_file_name) quark-engine-23.4.1/tests/utils/test_output.py000066400000000000000000000136501442215066700214560ustar00rootroot00000000000000import json import os import pytest import requests from quark.core.apkinfo import AndroguardImp as Apkinfo from quark.core.quark import MAX_SEARCH_LAYER from quark.utils.output import ( get_rule_classification_data, output_parent_function_graph, output_parent_function_json, output_parent_function_table, ) @pytest.fixture(scope="module") def sample_apk(): APK_SOURCE = ( "https://github.com/quark-engine/" "apk-samples/raw/master/malware-samples/14d9f1a92dd984d6040cc41ed06e273e.apk" ) APK_NAME = "14d9f1a92dd984d6040cc41ed06e273e.apk" request = requests.get(APK_SOURCE, allow_redirects=True) with open(APK_NAME, "wb") as file: file.write(request.content) yield APK_NAME os.remove(APK_NAME) @pytest.fixture(scope="module") def analysis_object(sample_apk): return Apkinfo(sample_apk) @pytest.fixture(scope="module") def analysis_element_1(analysis_object): parent = analysis_object.find_method( "Lcom/google/progress/Locate;", "getLocation", "()Ljava/lang/String;", )[0] first_api = analysis_object.find_method( "Lorg/apache/http/HttpResponse;", "getEntity", "()Lorg/apache/http/HttpEntity;", )[0] second_api = analysis_object.find_method( "Lorg/json/JSONObject;", "put", "(Ljava/lang/String; I)Lorg/json/JSONObject;", )[0] return { "crime": "The Crime", "parent": parent, "apkinfo": analysis_object, "first_call": first_api, "first_api": first_api, "second_call": second_api, "second_api": second_api, } @pytest.fixture(scope="module") def analysis_element_2(analysis_object): parent = analysis_object.find_method( "Lcom/google/progress/AndroidClientService;", "sendMessage", "()V", )[0] first_api = analysis_object.find_method( "Lcom/google/progress/FileList;", "getInfo", "()Ljava/lang/String;", )[0] second_api = analysis_object.find_method( "Lcom/google/progress/SMSHelper;", "sendSms", "(Ljava/lang/String; Ljava/lang/String;)I", )[0] return { "crime": "Another Crime", "parent": parent, "apkinfo": analysis_object, "first_call": first_api, "first_api": first_api, "second_call": second_api, "second_api": second_api, } @pytest.fixture(scope="function") def referenced_crime_list(analysis_element_1, analysis_element_2): return [analysis_element_1, analysis_element_2] @pytest.fixture(scope="function") def duplicate_crime_list(analysis_element_1): return [analysis_element_1, analysis_element_1] @pytest.fixture(scope="module") def sample_data_bundle(analysis_element_1, analysis_element_2): parent_function_1 = analysis_element_1["parent"] parent_function_2 = analysis_element_2["parent"] report_dict = { parent_function_1: {"The Crime"}, parent_function_2: {"Another Crime"}, } reference_dict = { parent_function_1: set(), parent_function_2: {parent_function_1}, } return report_dict, reference_dict def test_get_rule_classification_data_with_referenced_crime( referenced_crime_list, ): expected_parent_1 = referenced_crime_list[0]["parent"] expected_parent_2 = referenced_crime_list[1]["parent"] report_dict, reference_dict = get_rule_classification_data( referenced_crime_list, MAX_SEARCH_LAYER ) assert report_dict.keys() == {expected_parent_1, expected_parent_2} assert report_dict[expected_parent_1] == {"The Crime"} assert report_dict[expected_parent_2] == {"Another Crime"} assert reference_dict.keys() == {expected_parent_1, expected_parent_2} assert reference_dict[expected_parent_1] == set() assert reference_dict[expected_parent_2] == {expected_parent_1} def test_get_rule_classification_data_with_duplicate_crime( duplicate_crime_list, ): expected_parent = duplicate_crime_list[0]["parent"] report_dict, reference_dict = get_rule_classification_data( duplicate_crime_list, MAX_SEARCH_LAYER ) assert set(report_dict.keys()) == {expected_parent} assert report_dict[expected_parent] == {"The Crime"} assert set(reference_dict.keys()) == {expected_parent} assert reference_dict[expected_parent] == set() def test_output_parent_function_table_with_data_bundle(capsys, sample_data_bundle): output_parent_function_table(sample_data_bundle) output = capsys.readouterr().out assert output.count("Lcom/google/progress/Locate;getLocation") == 2 assert output.count("Lcom/google/progress/AndroidClientService;sendMessage") == 1 assert output.count("Call Lcom/google/progress/Locate;getLocation") == 1 assert output.count("The Crime") == 1 assert output.count("Another Crime") == 1 def test_output_parent_function_json_with_sample_data_bundle( sample_data_bundle, ): output_parent_function_json(sample_data_bundle) with open("rules_classification.json", "r") as classification_report: report = json.load(classification_report) assert len(report["rules_classification"]) == 2 first_item = report["rules_classification"][0] second_item = report["rules_classification"][1] if first_item["parent"] != "Lcom/google/progress/Locate;getLocation": first_item, second_item = second_item, first_item assert set(first_item["crime"]) == {"The Crime"} assert set(second_item["crime"]) == { "Call Lcom/google/progress/Locate;getLocation", "Another Crime", } assert ( second_item["parent"] == "Lcom/google/progress/AndroidClientService;sendMessage" ) def test_output_parent_function_graph_with_sample_data_bundle( sample_data_bundle, ): expected_filename = "rules_classification" output_parent_function_graph(sample_data_bundle) assert os.path.exists(expected_filename) quark-engine-23.4.1/tests/utils/test_pprint.py000066400000000000000000000041461442215066700214320ustar00rootroot00000000000000import base64 import sys import pytest from quark.utils.pprint import ( print_error, print_info, print_success, print_warning, table, ) @pytest.fixture(scope="module") def bold_style(): return "\x1b[1m" @pytest.fixture(scope="module") def cyan_color(): return "\x1b[36m" @pytest.fixture(scope="module") def yellow_color(): return "\x1b[33m" @pytest.fixture(scope="module") def red_color(): return "\x1b[91m" @pytest.fixture(scope="module") def green_color(): return "\x1b[92m" def test_print_info(capsys, bold_style, cyan_color): message = "message" print_info(message) output = capsys.readouterr().out if not sys.platform.startswith("win32"): assert bold_style in output assert cyan_color in output assert message in output def test_print_warning(capsys, bold_style, yellow_color): message = "message" print_warning(message) output = capsys.readouterr().out if not sys.platform.startswith("win32"): assert bold_style in output assert yellow_color in output assert "WARNING" in output assert message in output def test_print_error(capsys, bold_style, red_color): message = "message" print_error(message) output = capsys.readouterr().out if not sys.platform.startswith("win32"): assert bold_style in output assert red_color in output assert "ERROR" in output assert message in output def test_print_success(capsys, bold_style, green_color): message = "message" print_success(message) output = capsys.readouterr().out if not sys.platform.startswith("win32"): assert bold_style in output assert green_color in output assert "DONE" in output assert message in output def test_table(): expected_csv = base64.b64decode( "Q29sdW1uIDEsQ29sdW1uIDIsQ29sdW1uIDMNClJv" "dyAxLDExLDIyDQpSb3cgMiwzMyw0NA0K" ).decode() header = ["Column 1", "Column 2", "Column 3"] rows = [["Row 1", "11", "22"], ["Row 2", "33", "44"]] table_obj = table(header, rows) assert table_obj.get_csv_string() == expected_csv quark-engine-23.4.1/tests/utils/test_regex.py000066400000000000000000000056461442215066700212360ustar00rootroot00000000000000import pytest from quark.utils.regex import ( extract_content, extract_file, extract_ip, extract_url, validate_base64, validate_ip_address, validate_url, ) @pytest.fixture( scope="module", params=[ "http://doc.quark-engine.com", # Domain "ftp://127.0.0.1", # Ip address "https://localhost", # localhost "http://domain:8888", # port "http://domain/file", # path "http://domain?query=val", # query "http://domain:8888/path/file?query=val", # compound ], ) def valid_url(request): return request.param @pytest.fixture( scope="module", params=[ "http", "127.0.0.1", "localhost", "127.0.0.1:8888", "path/file", "var=val", ], ) def invalid_url(request): return request.param @pytest.fixture(scope="module") def valid_ip(): return "127.0.0.1" @pytest.fixture(scope="module", params=["127.0.0", "127.0.0.1.0"]) def invalid_ip(request): return request.param @pytest.mark.xfail(reason="Requirement for the future") def test_validate_url_with_valid_string(valid_url): result = validate_url(valid_url) assert result is True def test_validate_url_with_invalid_string(invalid_url): result = validate_url(invalid_url) assert result is False def test_validate_ip_address_with_valid_string(valid_ip): result = validate_ip_address(valid_ip) assert result is True def test_validate_ip_address_with_invalid_string(invalid_ip): result = validate_ip_address(invalid_ip) assert result is False def test_validate_base64_with_valid_string(): result = validate_base64("TWVzc2VuZ2U=") assert result is True def test_validate_base64_with_invalid_string(): result = validate_base64("NOT_A_BASE64") assert result is False def test_extract_ip_with_no_result(): result = extract_ip("CXS127.0.O.1DIO8.8.8.BDC") assert result == [] def test_extract_ip_with_result(): result = extract_ip("CXS127.0.0.1DIO8.8.8.8DC") assert result == ["127.0.0.1", "8.8.8.8"] def test_extract_url_with_no_result(): url = "HTTPS://127.0.O.1.0/?DFCHTTPS:/VAL?/?REIOS1" result = extract_url(url) assert result == [] def test_extract_url_with_result(): url = "CHAR https://www.google.com/search?q=QUARK CHAR" result = extract_url(url) assert result == ["https://www.google.com/search?q=QUARK"] def test_extract_content_with_no_result(): url = "NOT_A_CONTENT" result = extract_content(url) assert result is None def test_extract_content_with_result(): url = "CHARcontent://SMS/SENTCHAR" result = extract_content(url) assert result == url def test_extract_file_with_no_result(): url = "NOT_A_FILE" result = extract_file(url) assert result is None def test_extract_content_with_result(): url = "CHARfile://usr/bin/shCHAR" result = extract_file(url) assert result == url quark-engine-23.4.1/tests/utils/test_tools.py000066400000000000000000000066121442215066700212560ustar00rootroot00000000000000import pytest from quark.utils.tools import ( contains, descriptor_to_androguard_format, get_arguments_from_argument_str, get_parenthetic_contents, remove_dup_list, ) def test_remove_dup_list_with_invalid_arg(): with pytest.raises(TypeError): remove_dup_list(123) def test_remove_dup_list_with_empty_list(): assert remove_dup_list([]) == [] def test_remove_dup_list_with_numbers(): assert remove_dup_list([1, 2, 3, 4, 3, 4, 2]) == [1, 2, 3, 4] def test_remove_dup_list_with_strings(): assert set(remove_dup_list(["hello", "test", "test"])) == { "hello", "test", } def test_remove_dup_list_with_floats(): assert remove_dup_list([2.0, 30, 4.0, 2.0]) == [2.0, 4.0, 30] def test_contains_with_mutually_exclusive_list(): subset = ["getCellLocation", "sendTextMessage"] target = ["put", "query"] result = contains(subset, target) assert result is False def test_contains_with_superset(): subset = ["put", "getCellLocation", "query", "sendTextMessage"] target = ["put", "query"] result = contains(subset, target) assert result is False def test_contains_with_incorrect_sequence(): subset = ["getCellLocation", "sendTextMessage"] target = ["sendTextMessage", "put", "getCellLocation", "query"] result = contains(subset, target) assert result is False def test_contains_with_correct_sequence(): subset = ["getCellLocation", "sendTextMessage"] target = ["put", "getCellLocation", "query", "sendTextMessage"] result = contains(subset, target) assert result is True def test_descriptor_to_androguard_format_with_invalid_str(): descriptor = "Z" with pytest.raises(ValueError): _ = descriptor_to_androguard_format(descriptor) def test_descriptor_to_androguard_format_with_formatted_str(): descriptor = "(I Ljava/lang/String; [B J)" result = descriptor_to_androguard_format(descriptor) assert result == descriptor def test_descriptor_to_androguard_format_with_primitive(): descriptor = "(ZBCSIJFD)" result = descriptor_to_androguard_format(descriptor) assert result == "(Z B C S I J F D)" def test_descriptor_to_androguard_format_with_class(): descriptor = "(Ljava/lang/String;)" result = descriptor_to_androguard_format(descriptor) assert result == "(Ljava/lang/String;)" def test_descriptor_to_androguard_format_with_array(): descriptor = "([Ljava/lang/String;)" result = descriptor_to_androguard_format(descriptor) assert result == "([Ljava/lang/String;)" def test_descriptor_to_androguard_format_with_combination(): descriptor = "(ILjava/lang/String;[BJ)" result = descriptor_to_androguard_format(descriptor) assert result == "(I Ljava/lang/String; [B J)" @pytest.mark.parametrize( "source, expected", [ ("(a)(b)(c)", "(a)"), ("(((a))(b))", "(((a))(b))"), ("f1(a,f2(b))", "(a,f2(b))"), ("()", "()"), ("((((b)", "((((b)"), ], ) def test_get_parenthetic_contents(source, expected): content = get_parenthetic_contents(source, 0) assert expected == content def test_get_arguments_from_argument_str(): argument_str = "LClass;,10,String,new-array(),3.14,1" descriptor = "(I Ljava/lang/String; [B F Z)" arguments = get_arguments_from_argument_str(argument_str, descriptor) assert arguments == ["LClass;", 10, "String", "new-array()", 3.14, True] quark-engine-23.4.1/tests/utils/test_weight.py000066400000000000000000000031021442215066700213740ustar00rootroot00000000000000import pytest from quark.utils.weight import LEVEL_INFO, Weight @pytest.fixture(params=[(20, 10), (30, 21), (50, 25)]) def expected_data(request): # (score_sum, weight_sum) return request.param @pytest.fixture(params=[(0, 0), (100, 0), (20, 100), (-50, 20)]) def unexpected_data(request): # (score_sum, weight_sum) return request.param class TestWeight: def test_init(self, expected_data): score_sum, weight_sum = expected_data weight_obj = Weight(score_sum, weight_sum) with pytest.raises(TypeError): _ = Weight() assert weight_obj.score_sum == score_sum assert weight_obj.weight_sum == weight_sum def test_level_info(self): assert LEVEL_INFO.LOW.value == "Low Risk" assert LEVEL_INFO.Moderate.value == "Moderate Risk" assert LEVEL_INFO.High.value == "High Risk" def test_calculate_with_expected_data(self, expected_data): score_sum, weight_sum = expected_data weight_obj = Weight(score_sum, weight_sum) assert weight_obj.calculate() in [ "\x1b[92mLow Risk\x1b[0m", "\x1b[33mModerate Risk\x1b[0m", "\x1b[91mHigh Risk\x1b[0m", ] @pytest.mark.xfail(raises=ValueError) def test_calculate_with_unexpected_data(self, unexpected_data): score_sum, weight_sum = unexpected_data weight_obj = Weight(score_sum, weight_sum) assert weight_obj.calculate() in [ "\x1b[92mLow Risk\x1b[0m", "\x1b[33mModerate Risk\x1b[0m", "\x1b[91mHigh Risk\x1b[0m", ]
No. API 1 API 2 Edit & Save