├── .classpath
├── .gitignore
├── .project
├── .pydevproject
├── Module.manifest
├── README.md
├── bin
    ├── README.txt
    └── help
    │   ├── TOC_Source.xml
    │   ├── shared
    │       └── Frontpage.css
    │   └── topics
    │       └── quarkenginehelper
    │           └── help.html
├── build.gradle
├── data
    └── README.txt
├── extension.properties
├── ghidra_scripts
    └── README.txt
├── lib
    └── README.txt
├── os
    ├── linux64
    │   └── README.txt
    ├── osx64
    │   └── README.txt
    └── win64
    │   └── README.txt
└── src
    ├── main
        ├── help
        │   └── help
        │   │   ├── TOC_Source.xml
        │   │   ├── shared
        │   │       └── Frontpage.css
        │   │   └── topics
        │   │       └── quarkenginehelper
        │   │           └── help.html
        ├── java
        │   └── quarkenginehelper
        │   │   ├── CallQuarkTask.java
        │   │   ├── QuarkEnginePlugin.java
        │   │   ├── QuarkReport.java
        │   │   ├── ReportExporter.java
        │   │   ├── ReportReader.java
        │   │   ├── SummaryModel.java
        │   │   ├── SummaryProvider.java
        │   │   └── SummaryTable.java
        └── resources
        │   └── images
        │       ├── README.txt
        │       └── quark-icon.png
    └── test
        ├── java
            ├── README.test.txt
            └── quarkenginehelper
            │   └── ReportAdapterTest.java
        └── sample
            └── SampleReport.json


/.classpath:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <classpath>
  3 | 	<classpathentry kind="src" path="src/main/java"/>
  4 | 	<classpathentry kind="src" path="src/main/help"/>
  5 | 	<classpathentry kind="src" path="src/main/resources"/>
  6 | 	<classpathentry kind="src" path="ghidra_scripts"/>
  7 | 	<classpathentry kind="src" path="src/test/java"/>
  8 | 	<classpathentry kind="con" path="org.eclipse.jdt.junit.JUNIT_CONTAINER/4"/>
  9 | 	<classpathentry kind="con" path="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/jdk-15.0.2"/>
 10 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/68000/lib/68000.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/68000/lib/68000-src.zip">
 11 | 		<attributes>
 12 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 13 | 		</attributes>
 14 | 	</classpathentry>
 15 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/8051/lib/8051.jar">
 16 | 		<attributes>
 17 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 18 | 		</attributes>
 19 | 	</classpathentry>
 20 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/AARCH64/lib/AARCH64.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/AARCH64/lib/AARCH64-src.zip">
 21 | 		<attributes>
 22 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 23 | 		</attributes>
 24 | 	</classpathentry>
 25 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/ARM/lib/ARM.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/ARM/lib/ARM-src.zip">
 26 | 		<attributes>
 27 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 28 | 		</attributes>
 29 | 	</classpathentry>
 30 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/Atmel/lib/Atmel.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/Atmel/lib/Atmel-src.zip">
 31 | 		<attributes>
 32 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 33 | 		</attributes>
 34 | 	</classpathentry>
 35 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/Base.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/Base-src.zip">
 36 | 		<attributes>
 37 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 38 | 		</attributes>
 39 | 	</classpathentry>
 40 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/biz.aQute.bndlib-5.1.2.jar">
 41 | 		<attributes>
 42 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 43 | 		</attributes>
 44 | 	</classpathentry>
 45 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/org.apache.felix.framework-6.0.3.jar">
 46 | 		<attributes>
 47 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 48 | 		</attributes>
 49 | 	</classpathentry>
 50 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/phidias-0.3.7.jar">
 51 | 		<attributes>
 52 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 53 | 		</attributes>
 54 | 	</classpathentry>
 55 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/slf4j-api-1.7.25.jar">
 56 | 		<attributes>
 57 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 58 | 		</attributes>
 59 | 	</classpathentry>
 60 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Base/lib/slf4j-nop-1.7.25.jar">
 61 | 		<attributes>
 62 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 63 | 		</attributes>
 64 | 	</classpathentry>
 65 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/BytePatterns/lib/BytePatterns.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/BytePatterns/lib/BytePatterns-src.zip">
 66 | 		<attributes>
 67 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 68 | 		</attributes>
 69 | 	</classpathentry>
 70 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/ByteViewer/lib/ByteViewer.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/ByteViewer/lib/ByteViewer-src.zip">
 71 | 		<attributes>
 72 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 73 | 		</attributes>
 74 | 	</classpathentry>
 75 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/DATA/lib/DATA.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/DATA/lib/DATA-src.zip">
 76 | 		<attributes>
 77 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 78 | 		</attributes>
 79 | 	</classpathentry>
 80 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/DB/lib/DB.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/DB/lib/DB-src.zip">
 81 | 		<attributes>
 82 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 83 | 		</attributes>
 84 | 	</classpathentry>
 85 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/Dalvik/lib/Dalvik.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/Dalvik/lib/Dalvik-src.zip">
 86 | 		<attributes>
 87 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 88 | 		</attributes>
 89 | 	</classpathentry>
 90 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/DebugUtils/lib/DebugUtils.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/DebugUtils/lib/DebugUtils-src.zip">
 91 | 		<attributes>
 92 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 93 | 		</attributes>
 94 | 	</classpathentry>
 95 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Decompiler/lib/Decompiler.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Decompiler/lib/Decompiler-src.zip">
 96 | 		<attributes>
 97 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
 98 | 		</attributes>
 99 | 	</classpathentry>
100 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/DecompilerDependent/lib/DecompilerDependent.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/DecompilerDependent/lib/DecompilerDependent-src.zip">
101 | 		<attributes>
102 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
103 | 		</attributes>
104 | 	</classpathentry>
105 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Docking/lib/Docking.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Docking/lib/Docking-src.zip">
106 | 		<attributes>
107 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
108 | 		</attributes>
109 | 	</classpathentry>
110 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Docking/lib/javahelp-2.0.05.jar">
111 | 		<attributes>
112 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
113 | 		</attributes>
114 | 	</classpathentry>
115 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Docking/lib/timingframework-1.0.jar">
116 | 		<attributes>
117 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
118 | 		</attributes>
119 | 	</classpathentry>
120 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/asm-debug-all-4.1.jar">
121 | 		<attributes>
122 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
123 | 		</attributes>
124 | 	</classpathentry>
125 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/AXMLPrinter2.jar">
126 | 		<attributes>
127 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
128 | 		</attributes>
129 | 	</classpathentry>
130 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/baksmali-1.4.0.jar">
131 | 		<attributes>
132 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
133 | 		</attributes>
134 | 	</classpathentry>
135 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/dex-ir-2.0.jar">
136 | 		<attributes>
137 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
138 | 		</attributes>
139 | 	</classpathentry>
140 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/dex-reader-2.0.jar">
141 | 		<attributes>
142 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
143 | 		</attributes>
144 | 	</classpathentry>
145 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/dex-reader-api-2.0.jar">
146 | 		<attributes>
147 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
148 | 		</attributes>
149 | 	</classpathentry>
150 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/dex-translator-2.0.jar">
151 | 		<attributes>
152 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
153 | 		</attributes>
154 | 	</classpathentry>
155 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/dexlib-1.4.0.jar">
156 | 		<attributes>
157 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
158 | 		</attributes>
159 | 	</classpathentry>
160 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/FileFormats.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/FileFormats-src.zip">
161 | 		<attributes>
162 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
163 | 		</attributes>
164 | 	</classpathentry>
165 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/sevenzipjbinding-16.02-2.01.jar">
166 | 		<attributes>
167 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
168 | 		</attributes>
169 | 	</classpathentry>
170 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/sevenzipjbinding-all-platforms-16.02-2.01.jar">
171 | 		<attributes>
172 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
173 | 		</attributes>
174 | 	</classpathentry>
175 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FileFormats/lib/util-1.4.0.jar">
176 | 		<attributes>
177 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
178 | 		</attributes>
179 | 	</classpathentry>
180 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/FileSystem/lib/FileSystem.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/FileSystem/lib/FileSystem-src.zip">
181 | 		<attributes>
182 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
183 | 		</attributes>
184 | 	</classpathentry>
185 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/FileSystem/lib/ganymed-ssh2-262.jar">
186 | 		<attributes>
187 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
188 | 		</attributes>
189 | 	</classpathentry>
190 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FunctionGraph/lib/FunctionGraph.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FunctionGraph/lib/FunctionGraph-src.zip">
191 | 		<attributes>
192 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
193 | 		</attributes>
194 | 	</classpathentry>
195 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FunctionGraphDecompilerExtension/lib/FunctionGraphDecompilerExtension.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FunctionGraphDecompilerExtension/lib/FunctionGraphDecompilerExtension-src.zip">
196 | 		<attributes>
197 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
198 | 		</attributes>
199 | 	</classpathentry>
200 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FunctionID/lib/FunctionID.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/FunctionID/lib/FunctionID-src.zip">
201 | 		<attributes>
202 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
203 | 		</attributes>
204 | 	</classpathentry>
205 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/cglib-nodep-2.2.jar">
206 | 		<attributes>
207 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
208 | 		</attributes>
209 | 	</classpathentry>
210 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/commons-collections4-4.1.jar">
211 | 		<attributes>
212 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
213 | 		</attributes>
214 | 	</classpathentry>
215 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/commons-io-2.6.jar">
216 | 		<attributes>
217 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
218 | 		</attributes>
219 | 	</classpathentry>
220 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/commons-lang3-3.9.jar">
221 | 		<attributes>
222 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
223 | 		</attributes>
224 | 	</classpathentry>
225 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/commons-text-1.6.jar">
226 | 		<attributes>
227 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
228 | 		</attributes>
229 | 	</classpathentry>
230 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/Generic.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/Generic-src.zip">
231 | 		<attributes>
232 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
233 | 		</attributes>
234 | 	</classpathentry>
235 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/gson-2.8.6.jar">
236 | 		<attributes>
237 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
238 | 		</attributes>
239 | 	</classpathentry>
240 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/guava-19.0.jar">
241 | 		<attributes>
242 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
243 | 		</attributes>
244 | 	</classpathentry>
245 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/jdom-legacy-1.1.3.jar">
246 | 		<attributes>
247 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
248 | 		</attributes>
249 | 	</classpathentry>
250 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/log4j-api-2.12.1.jar">
251 | 		<attributes>
252 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
253 | 		</attributes>
254 | 	</classpathentry>
255 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Generic/lib/log4j-core-2.12.1.jar">
256 | 		<attributes>
257 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
258 | 		</attributes>
259 | 	</classpathentry>
260 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GhidraServer/lib/GhidraServer.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GhidraServer/lib/GhidraServer-src.zip">
261 | 		<attributes>
262 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
263 | 		</attributes>
264 | 	</classpathentry>
265 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GnuDemangler/lib/GnuDemangler.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GnuDemangler/lib/GnuDemangler-src.zip">
266 | 		<attributes>
267 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
268 | 		</attributes>
269 | 	</classpathentry>
270 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/Graph.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/Graph-src.zip">
271 | 		<attributes>
272 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
273 | 		</attributes>
274 | 	</classpathentry>
275 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/jgrapht-core-1.5.0.jar">
276 | 		<attributes>
277 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
278 | 		</attributes>
279 | 	</classpathentry>
280 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/jgrapht-io-1.5.0.jar">
281 | 		<attributes>
282 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
283 | 		</attributes>
284 | 	</classpathentry>
285 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/jung-algorithms-2.1.1.jar">
286 | 		<attributes>
287 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
288 | 		</attributes>
289 | 	</classpathentry>
290 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/jung-api-2.1.1.jar">
291 | 		<attributes>
292 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
293 | 		</attributes>
294 | 	</classpathentry>
295 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/jung-graph-impl-2.1.1.jar">
296 | 		<attributes>
297 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
298 | 		</attributes>
299 | 	</classpathentry>
300 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Graph/lib/jung-visualization-2.1.1.jar">
301 | 		<attributes>
302 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
303 | 		</attributes>
304 | 	</classpathentry>
305 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphFunctionCalls/lib/GraphFunctionCalls.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphFunctionCalls/lib/GraphFunctionCalls-src.zip">
306 | 		<attributes>
307 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
308 | 		</attributes>
309 | 	</classpathentry>
310 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/GraphServices.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/GraphServices-src.zip">
311 | 		<attributes>
312 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
313 | 		</attributes>
314 | 	</classpathentry>
315 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/jheaps-0.13.jar">
316 | 		<attributes>
317 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
318 | 		</attributes>
319 | 	</classpathentry>
320 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/jungrapht-layout-1.0.jar">
321 | 		<attributes>
322 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
323 | 		</attributes>
324 | 	</classpathentry>
325 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/jungrapht-visualization-1.0.jar">
326 | 		<attributes>
327 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
328 | 		</attributes>
329 | 	</classpathentry>
330 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/slf4j-api-1.7.25.jar">
331 | 		<attributes>
332 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
333 | 		</attributes>
334 | 	</classpathentry>
335 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/GraphServices/lib/slf4j-nop-1.7.25.jar">
336 | 		<attributes>
337 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
338 | 		</attributes>
339 | 	</classpathentry>
340 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/HCS12/lib/HCS12.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/HCS12/lib/HCS12-src.zip">
341 | 		<attributes>
342 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
343 | 		</attributes>
344 | 	</classpathentry>
345 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Help/lib/Help.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Help/lib/Help-src.zip">
346 | 		<attributes>
347 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
348 | 		</attributes>
349 | 	</classpathentry>
350 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/JVM/lib/JVM.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/JVM/lib/JVM-src.zip">
351 | 		<attributes>
352 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
353 | 		</attributes>
354 | 	</classpathentry>
355 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/MIPS/lib/MIPS.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/MIPS/lib/MIPS-src.zip">
356 | 		<attributes>
357 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
358 | 		</attributes>
359 | 	</classpathentry>
360 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/MicrosoftCodeAnalyzer/lib/MicrosoftCodeAnalyzer.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/MicrosoftCodeAnalyzer/lib/MicrosoftCodeAnalyzer-src.zip">
361 | 		<attributes>
362 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
363 | 		</attributes>
364 | 	</classpathentry>
365 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/MicrosoftDemangler/lib/MicrosoftDemangler.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/MicrosoftDemangler/lib/MicrosoftDemangler-src.zip">
366 | 		<attributes>
367 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
368 | 		</attributes>
369 | 	</classpathentry>
370 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/MicrosoftDmang/lib/MicrosoftDmang.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/MicrosoftDmang/lib/MicrosoftDmang-src.zip">
371 | 		<attributes>
372 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
373 | 		</attributes>
374 | 	</classpathentry>
375 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/PDB/lib/PDB.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/PDB/lib/PDB-src.zip">
376 | 		<attributes>
377 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
378 | 		</attributes>
379 | 	</classpathentry>
380 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/PIC/lib/PIC.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/PIC/lib/PIC-src.zip">
381 | 		<attributes>
382 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
383 | 		</attributes>
384 | 	</classpathentry>
385 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/PowerPC/lib/PowerPC.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/PowerPC/lib/PowerPC-src.zip">
386 | 		<attributes>
387 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
388 | 		</attributes>
389 | 	</classpathentry>
390 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/ProgramDiff/lib/ProgramDiff.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/ProgramDiff/lib/ProgramDiff-src.zip">
391 | 		<attributes>
392 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
393 | 		</attributes>
394 | 	</classpathentry>
395 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/ProgramGraph/lib/ProgramGraph.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/ProgramGraph/lib/ProgramGraph-src.zip">
396 | 		<attributes>
397 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
398 | 		</attributes>
399 | 	</classpathentry>
400 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Project/lib/commons-compress-1.19.jar">
401 | 		<attributes>
402 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
403 | 		</attributes>
404 | 	</classpathentry>
405 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Project/lib/Project.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Project/lib/Project-src.zip">
406 | 		<attributes>
407 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
408 | 		</attributes>
409 | 	</classpathentry>
410 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Configurations/Public_Release/lib/Public_Release.jar">
411 | 		<attributes>
412 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
413 | 		</attributes>
414 | 	</classpathentry>
415 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Python/lib/jython-standalone-2.7.2.jar">
416 | 		<attributes>
417 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
418 | 		</attributes>
419 | 	</classpathentry>
420 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Python/lib/Python.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Python/lib/Python-src.zip">
421 | 		<attributes>
422 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
423 | 		</attributes>
424 | 	</classpathentry>
425 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/RISCV/lib/RISCV.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/RISCV/lib/RISCV-src.zip">
426 | 		<attributes>
427 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
428 | 		</attributes>
429 | 	</classpathentry>
430 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Recognizers/lib/Recognizers.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/Recognizers/lib/Recognizers-src.zip">
431 | 		<attributes>
432 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
433 | 		</attributes>
434 | 	</classpathentry>
435 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/antlr-runtime-3.5.2.jar">
436 | 		<attributes>
437 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
438 | 		</attributes>
439 | 	</classpathentry>
440 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/isorelax-20050913.jar">
441 | 		<attributes>
442 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
443 | 		</attributes>
444 | 	</classpathentry>
445 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/msv-20050913.jar">
446 | 		<attributes>
447 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
448 | 		</attributes>
449 | 	</classpathentry>
450 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/relaxngDatatype-20050913.jar">
451 | 		<attributes>
452 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
453 | 		</attributes>
454 | 	</classpathentry>
455 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/SoftwareModeling.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/SoftwareModeling-src.zip">
456 | 		<attributes>
457 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
458 | 		</attributes>
459 | 	</classpathentry>
460 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/SoftwareModeling/lib/xsdlib-20050913.jar">
461 | 		<attributes>
462 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
463 | 		</attributes>
464 | 	</classpathentry>
465 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/SourceCodeLookup/lib/SourceCodeLookup.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/SourceCodeLookup/lib/SourceCodeLookup-src.zip">
466 | 		<attributes>
467 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
468 | 		</attributes>
469 | 	</classpathentry>
470 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/Sparc/lib/Sparc.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/Sparc/lib/Sparc-src.zip">
471 | 		<attributes>
472 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
473 | 		</attributes>
474 | 	</classpathentry>
475 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/SuperH4/lib/SuperH4.jar">
476 | 		<attributes>
477 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
478 | 		</attributes>
479 | 	</classpathentry>
480 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Utility/lib/Utility.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Framework/Utility/lib/Utility-src.zip">
481 | 		<attributes>
482 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
483 | 		</attributes>
484 | 	</classpathentry>
485 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/V850/lib/V850.jar">
486 | 		<attributes>
487 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
488 | 		</attributes>
489 | 	</classpathentry>
490 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/VersionTracking/lib/VersionTracking.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Features/VersionTracking/lib/VersionTracking-src.zip">
491 | 		<attributes>
492 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
493 | 		</attributes>
494 | 	</classpathentry>
495 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/tricore/lib/tricore.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/tricore/lib/tricore-src.zip">
496 | 		<attributes>
497 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
498 | 		</attributes>
499 | 	</classpathentry>
500 | 	<classpathentry kind="lib" path="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/x86/lib/x86.jar" sourcepath="C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC/Ghidra/Processors/x86/lib/x86-src.zip">
501 | 		<attributes>
502 | 			<attribute name="javadoc_location" value="jar:file:/C:\Users\cinde\Ghidra\ghidra_9.2.2_PUBLIC\docs\GhidraAPI_javadoc.zip!/api/"/>
503 | 		</attributes>
504 | 	</classpathentry>
505 | 	<classpathentry kind="output" path="bin"/>
506 | </classpath>
507 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | # Compiled class file
 2 | *.class
 3 | 
 4 | # Log file
 5 | *.log
 6 | 
 7 | # BlueJ files
 8 | *.ctxt
 9 | 
10 | # Mobile Tools for Java (J2ME)
11 | .mtj.tmp/
12 | 
13 | # Package Files #
14 | *.jar
15 | *.war
16 | *.nar
17 | *.ear
18 | *.zip
19 | *.tar.gz
20 | *.rar
21 | 
22 | # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
23 | hs_err_pid*
24 | 
25 | .metadata
26 | bin/
27 | tmp/
28 | *.tmp
29 | *.bak
30 | *.swp
31 | *~.nib
32 | local.properties
33 | .settings/
34 | .loadpath
35 | .recommenders
36 | 
37 | # External tool builders
38 | .externalToolBuilders/
39 | 
40 | # Locally stored "Eclipse launch configurations"
41 | *.launch
42 | 
43 | # PyDev specific (Python IDE for Eclipse)
44 | *.pydevproject
45 | 
46 | # CDT-specific (C/C++ Development Tooling)
47 | .cproject
48 | 
49 | # CDT- autotools
50 | .autotools
51 | 
52 | # Java annotation processor (APT)
53 | .factorypath
54 | 
55 | # PDT-specific (PHP Development Tools)
56 | .buildpath
57 | 
58 | # sbteclipse plugin
59 | .target
60 | 
61 | # Tern plugin
62 | .tern-project
63 | 
64 | # TeXlipse plugin
65 | .texlipse
66 | 
67 | # STS (Spring Tool Suite)
68 | .springBeans
69 | 
70 | # Code Recommenders
71 | .recommenders/
72 | 
73 | # Annotation Processing
74 | .apt_generated/
75 | .apt_generated_test/
76 | 
77 | # Scala IDE specific (Scala & Java development for Eclipse)
78 | .cache-main
79 | .scala_dependencies
80 | .worksheet
81 | 
82 | # Uncomment this line if you wish to ignore the project description file.
83 | # Typically, this file would be tracked if it contains build/dependency configurations:
84 | #.project
85 | 
86 | bin/*


--------------------------------------------------------------------------------
/.project:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <projectDescription>
 3 | 	<name>QuarkEngineHelper</name>
 4 | 	<comment></comment>
 5 | 	<projects>
 6 | 	</projects>
 7 | 	<buildSpec>
 8 | 		<buildCommand>
 9 | 			<name>org.python.pydev.PyDevBuilder</name>
10 | 			<arguments>
11 | 			</arguments>
12 | 		</buildCommand>
13 | 		<buildCommand>
14 | 			<name>org.eclipse.jdt.core.javabuilder</name>
15 | 			<arguments>
16 | 			</arguments>
17 | 		</buildCommand>
18 | 	</buildSpec>
19 | 	<natures>
20 | 		<nature>org.eclipse.jdt.core.javanature</nature>
21 | 	</natures>
22 | 	<linkedResources>
23 | 		<link>
24 | 			<name>Ghidra</name>
25 | 			<type>2</type>
26 | 			<location>C:/Users/cinde/Ghidra/ghidra_9.2.2_PUBLIC</location>
27 | 		</link>
28 | 	</linkedResources>
29 | </projectDescription>
30 | 


--------------------------------------------------------------------------------
/.pydevproject:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8" standalone="no"?>
2 | <?eclipse-pydev version="1.0"?><pydev_project>
3 |     <pydev_property name="org.python.pydev.PYTHON_PROJECT_INTERPRETER">Default</pydev_property>
4 |     <pydev_property name="org.python.pydev.PYTHON_PROJECT_VERSION">python interpreter</pydev_property>
5 | </pydev_project>
6 | 


--------------------------------------------------------------------------------
/Module.manifest:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/quark-engine/ghidraquark/4a9659caf7cb8bb71fee5a80c1ab11179bc27f12/Module.manifest


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | <p align="center">
 2 | 	<img src="https://i.imgur.com/rfkOCSI.png"/>
 3 | </p>
 4 | 
 5 | GhidraQuark bridges Quark Engine into Ghidra.
 6 | 
 7 | Fire a Quark analysis or inspect program behaviors with Quark report. Work with Quark and Ghidra all at once!
 8 | 
 9 | ## Demo
10 | 
11 | [![](https://i.imgur.com/CipAD0D.jpg)](https://www.youtube.com/watch?v=VXzfFB2S4bo&ab_channel=JunWeiSong)
12 | 
13 | ## Installing the extension
14 | 
15 | + Download the built extension from GitHub
16 |   + Visit the Releases page, normally use the latest release
17 |   + Download the built extension zip file `ghidra_9.2.2_PUBLIC_20210204_QuarkEngineHelper`
18 | + If you don't already have Ghdira, download and install Ghidra from https://ghidra-sre.org/
19 | + Install the extension into Ghidra
20 |   + Start Ghidra
21 |   + Open `File->Install Extensions...`
22 |   + Press the `+` icon found in the top right of the `Install Extensions` window
23 |   + Navigate to the file location where you downloaded the extension zip file above and select it
24 |   + Press `OK`
25 |   + You may want to restart Ghidra for the changes to take effect
26 |   + Enjoy it!
27 | 
28 | ## Building extension from the command line
29 | 
30 | + Install Gradle
31 | 
32 | + Execute the following commands
33 | 
34 |   ```
35 |   $ gradle -PGHIDRA_INSTALL_DIR=<path_to_ghidra>
36 |   ```
37 | 
38 | + Zip file will be created in the `dist` folder
39 | 
40 | ## Resources
41 | 
42 | ### Ghidra
43 | 
44 | + https://ghidra.re/online-courses/
45 | + https://ghidra.re/ghidra_docs/api/
46 | + https://github.com/edmcman/ghidra-scala-loader
47 | 
48 | ---
49 | 
50 | Don't forget to take a glance at our [Quark-Engine](https://github.com/quark-engine/quark-engine) GitHub page :)
51 | 


--------------------------------------------------------------------------------
/bin/README.txt:
--------------------------------------------------------------------------------
1 | Java source directory to hold module-specific Ghidra scripts.
2 | 


--------------------------------------------------------------------------------
/bin/help/TOC_Source.xml:
--------------------------------------------------------------------------------
 1 | <?xml version='1.0' encoding='ISO-8859-1' ?>
 2 | <!-- 
 3 | 
 4 | 	This is an XML file intended to be parsed by the Ghidra help system.  It is loosely based 
 5 | 	upon the JavaHelp table of contents document format.  The Ghidra help system uses a 
 6 | 	TOC_Source.xml file to allow a module with help to define how its contents appear in the 
 7 | 	Ghidra help viewer's table of contents.  The main document (in the Base module) 
 8 | 	defines a basic structure for the 
 9 | 	Ghidra table of contents system.  Other TOC_Source.xml files may use this structure to insert
10 | 	their files directly into this structure (and optionally define a substructure).
11 | 	
12 | 	
13 | 	In this document, a tag can be either a <tocdef> or a <tocref>.  The former is a definition
14 | 	of an XML item that may have a link and may contain other <tocdef> and <tocref> children.  
15 | 	<tocdef> items may be referred to in other documents by using a <tocref> tag with the 
16 | 	appropriate id attribute value.  Using these two tags allows any module to define a place 
17 | 	in the table of contents system (<tocdef>), which also provides a place for 
18 | 	other TOC_Source.xml files to insert content (<tocref>).  
19 | 	
20 | 	During the help build time, all TOC_Source.xml files will be parsed and	validated to ensure
21 | 	that all <tocref> tags point to valid <tocdef> tags.  From these files will be generated
22 | 	<module name>_TOC.xml files, which are table of contents files written in the format 
23 | 	desired by the JavaHelp system.   Additionally, the genated files will be merged together
24 | 	as they are loaded by the JavaHelp system.  In the end, when displaying help in the Ghidra
25 | 	help GUI, there will be on table of contents that has been created from the definitions in 
26 | 	all of the modules' TOC_Source.xml files.
27 | 
28 | 	
29 | 	Tags and Attributes
30 | 	
31 | 	<tocdef>
32 | 	-id          - the name of the definition (this must be unique across all TOC_Source.xml files)	
33 | 	-text        - the display text of the node, as seen in the help GUI
34 | 	-target**    - the file to display when the node is clicked in the GUI
35 | 	-sortgroup   - this is a string that defines where a given node should appear under a given
36 | 	               parent.  The string values will be sorted by the JavaHelp system using
37 | 	               a javax.text.RulesBasedCollator.  If this attribute is not specified, then
38 | 	               the text of attribute will be used.
39 | 
40 | 	<tocref>
41 | 	-id			 - The id of the <tocdef> that this reference points to 
42 | 	
43 | 	**The URL for the target is relative and should start with 'help/topics'.  This text is 
44 | 	used by the Ghidra help system to provide a universal starting point for all links so that
45 | 	they can be resolved at runtime, across modules.
46 | 	
47 | 	
48 | -->
49 | 
50 | 
51 | <tocroot>
52 | 	<!-- Uncomment and adjust fields to add help topic to help system's Table of Contents
53 | 	<tocref id="Ghidra Functionality">
54 | 		<tocdef id="HelpAnchor" text="My Feature" target="help/topics/my_topic/help.html" />
55 | 	</tocref>
56 | 	-->
57 | </tocroot>
58 | 


--------------------------------------------------------------------------------
/bin/help/shared/Frontpage.css:
--------------------------------------------------------------------------------
 1 | /* ###
 2 |  * IP: GHIDRA
 3 |  *
 4 |  * Licensed under the Apache License, Version 2.0 (the "License");
 5 |  * you may not use this file except in compliance with the License.
 6 |  * You may obtain a copy of the License at
 7 |  * 
 8 |  *      http://www.apache.org/licenses/LICENSE-2.0
 9 |  * 
10 |  * Unless required by applicable law or agreed to in writing, software
11 |  * distributed under the License is distributed on an "AS IS" BASIS,
12 |  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 |  * See the License for the specific language governing permissions and
14 |  * limitations under the License.
15 |  */
16 | /*
17 | 									WARNING!
18 |     This file is copied to all help directories.  If you change this file, you must copy it 
19 |     to each src/main/help/help/shared directory.									
20 | 									
21 | 	
22 | 	Java Help Note:  JavaHelp does not accept sizes (like in 'margin-top') in anything but 
23 | 	px (pixel) or with no type marking. 
24 | 
25 | */ 
26 | 
27 | body { margin-bottom: 50px; margin-left: 10px; margin-right: 10px; margin-top: 10px; } /* some padding to improve readability */ 
28 | li { font-family:times new roman; font-size:14pt; }
29 | h1 { color:#000080; font-family:times new roman; font-size:36pt; font-style:italic; font-weight:bold; text-align:center; }
30 | h2 { margin: 10px; margin-top: 20px; color:#984c4c; font-family:times new roman; font-size:18pt; font-weight:bold; }
31 | h3 { margin-left: 10px; margin-top: 20px; color:#0000ff; font-family:times new roman; `font-size:14pt; font-weight:bold;  }
32 | h4 { margin-left: 10px; margin-top: 20px; font-family:times new roman; font-size:14pt; font-style:italic; }
33 |  
34 | /*
35 | 	 P tag code.  Most of the help files nest P tags inside of blockquote tags (the was the 
36 | 	 way it had been done in the beginning).  The net effect is that the text is indented.  In 
37 | 	 modern HTML we would use CSS to do this.  We need to support the Ghidra P tags, nested in
38 | 	 blockquote tags, as well as naked P tags.  The following two lines accomplish this.  Note
39 | 	 that the 'blockquote p' definition will inherit from the first 'p' definition.
40 | */
41 | p { margin-left: 40px; font-family:times new roman; font-size:14pt; }
42 | blockquote p { margin-left: 10px; }
43 | 
44 | p.providedbyplugin { color:#7f7f7f; margin-left: 10px; font-size:14pt; margin-top:100px  }
45 | p.ProvidedByPlugin { color:#7f7f7f; margin-left: 10px; font-size:14pt; margin-top:100px }
46 | p.relatedtopic { color:#800080; margin-left: 10px; font-size:14pt; }
47 | p.RelatedTopic { color:#800080; margin-left: 10px; font-size:14pt; }
48 | 
49 | /* 
50 | 	We wish for a tables to have space between it and the preceding element, so that text
51 | 	is not too close to the top of the table.  Also, nest the table a bit so that it is clear
52 | 	the table relates to the preceding text.
53 | */
54 | table { margin-left: 20px; margin-top: 10px; width: 80%;}
55 | td { font-family:times new roman; font-size:14pt; vertical-align: top; }
56 | th { font-family:times new roman; font-size:14pt; font-weight:bold; background-color: #EDF3FE; }
57 | 
58 | /*
59 | 	Code-like formatting for things such as file system paths and proper names of classes, 
60 | 	methods, etc.  To apply this to a file path, use this syntax:
61 | 		<CODE CLASS="path">...</CODE>
62 | */
63 | code { color: black; font-weight: bold; font-family: courier new, monospace; font-size: 14pt; white-space: nowrap; }
64 | code.path { color: #4682B4; font-weight: bold; font-family: courier new, monospace; font-size: 14pt; white-space: nowrap; }
65 | 


--------------------------------------------------------------------------------
/bin/help/topics/quarkenginehelper/help.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 2 | 
 3 | <HTML>
 4 |   <HEAD>
 5 |     <META name="generator" content=
 6 |     "HTML Tidy for Java (vers. 2009-12-01), see jtidy.sourceforge.net">
 7 |     <META http-equiv="Content-Language" content="en-us">
 8 |     <META http-equiv="Content-Type" content="text/html; charset=windows-1252">
 9 |     <META name="GENERATOR" content="Microsoft FrontPage 4.0">
10 |     <META name="ProgId" content="FrontPage.Editor.Document">
11 | 
12 |     <TITLE>Skeleton Help File for a Module</TITLE>
13 |     <LINK rel="stylesheet" type="text/css" href="../../shared/Frontpage.css">
14 |   </HEAD>
15 | 
16 |   <BODY>
17 |     <H1><a name="HelpAnchor"></a>Skeleton Help File for a Module</H1>
18 | 
19 |     <P>This is a simple skeleton help topic. For a better description of what should and should not
20 |     go in here, see the "sample" Ghidra extension in the Extensions/Ghidra directory, or see your 
21 |     favorite help topic. In general, language modules do not have their own help topics.</P>
22 |   </BODY>
23 | </HTML>
24 | 


--------------------------------------------------------------------------------
/build.gradle:
--------------------------------------------------------------------------------
 1 | // Builds a Ghidra Extension for a given Ghidra installation.
 2 | //
 3 | // An absolute path to the Ghidra installation directory must be supplied either by setting the 
 4 | // GHIDRA_INSTALL_DIR environment variable or Gradle project property:
 5 | //
 6 | //     > export GHIDRA_INSTALL_DIR=<Absolute path to Ghidra> 
 7 | //     > gradle
 8 | //
 9 | //         or
10 | //
11 | //     > gradle -PGHIDRA_INSTALL_DIR=<Absolute path to Ghidra>
12 | //
13 | // Gradle should be invoked from the directory of the project to build.  Please see the
14 | // application.gradle.version property in <GHIDRA_INSTALL_DIR>/Ghidra/application.properties
15 | // for the correction version of Gradle to use for the Ghidra installation you specify.
16 | 
17 | //----------------------START "DO NOT MODIFY" SECTION------------------------------
18 | def ghidraInstallDir
19 | 
20 | if (System.env.GHIDRA_INSTALL_DIR) {
21 | 	ghidraInstallDir = System.env.GHIDRA_INSTALL_DIR
22 | }
23 | else if (project.hasProperty("GHIDRA_INSTALL_DIR")) {
24 | 	ghidraInstallDir = project.getProperty("GHIDRA_INSTALL_DIR")
25 | }
26 | 
27 | if (ghidraInstallDir) {
28 | 	apply from: new File(ghidraInstallDir).getCanonicalPath() + "/support/buildExtension.gradle"
29 | }
30 | else {
31 | 	throw new GradleException("GHIDRA_INSTALL_DIR is not defined!")
32 | }
33 | //----------------------END "DO NOT MODIFY" SECTION-------------------------------
34 | 


--------------------------------------------------------------------------------
/data/README.txt:
--------------------------------------------------------------------------------
 1 | The "data" directory is intended to hold data files that will be used by this module and will
 2 | not end up in the .jar file, but will be present in the zip or tar file.  Typically, data
 3 | files are placed here rather than in the resources directory if the user may need to edit them.
 4 | 
 5 | An optional data/languages directory can exist for the purpose of containing various Sleigh language
 6 | specification files and importer opinion files.  
 7 | 
 8 | The data/buildLanguage.xml is used for building the contents of the data/languages directory.
 9 | 
10 | The skel language definition has been commented-out within the skel.ldefs file so that the 
11 | skeleton language does not show-up within Ghidra.
12 | 
13 | See the Sleigh language documentation (docs/languages/index.html) for details Sleigh language 
14 | specification syntax.
15 |  


--------------------------------------------------------------------------------
/extension.properties:
--------------------------------------------------------------------------------
1 | name=GhidraQuark
2 | description=Quark Engine integration.
3 | author=Quark-Engine
4 | createdOn=2020
5 | version=@extversion@
6 | 


--------------------------------------------------------------------------------
/ghidra_scripts/README.txt:
--------------------------------------------------------------------------------
1 | Java source directory to hold module-specific Ghidra scripts.
2 | 


--------------------------------------------------------------------------------
/lib/README.txt:
--------------------------------------------------------------------------------
1 | The "lib" directory is intended to hold Jar files which this module
2 | is dependent upon.  This directory may be eliminated from a specific
3 | module if no other Jar files are needed.
4 | 


--------------------------------------------------------------------------------
/os/linux64/README.txt:
--------------------------------------------------------------------------------
1 | The "os/linux64" directory is intended to hold Linux native binaries
2 | which this module is dependent upon.   This directory may be eliminated for a specific 
3 | module if native binaries are not provided for the corresponding platform.
4 | 


--------------------------------------------------------------------------------
/os/osx64/README.txt:
--------------------------------------------------------------------------------
1 | The "os/osx64" directory is intended to hold macOS (OS X) native binaries
2 | which this module is dependent upon.   This directory may be eliminated for a specific 
3 | module if native binaries are not provided for the corresponding platform.
4 | 


--------------------------------------------------------------------------------
/os/win64/README.txt:
--------------------------------------------------------------------------------
1 | The "os/win64" directory is intended to hold MS Windows native binaries (.exe)
2 | which this module is dependent upon.   This directory may be eliminated for a specific 
3 | module if native binaries are not provided for the corresponding platform.
4 | 


--------------------------------------------------------------------------------
/src/main/help/help/TOC_Source.xml:
--------------------------------------------------------------------------------
 1 | <?xml version='1.0' encoding='ISO-8859-1' ?>
 2 | <!-- 
 3 | 
 4 | 	This is an XML file intended to be parsed by the Ghidra help system.  It is loosely based 
 5 | 	upon the JavaHelp table of contents document format.  The Ghidra help system uses a 
 6 | 	TOC_Source.xml file to allow a module with help to define how its contents appear in the 
 7 | 	Ghidra help viewer's table of contents.  The main document (in the Base module) 
 8 | 	defines a basic structure for the 
 9 | 	Ghidra table of contents system.  Other TOC_Source.xml files may use this structure to insert
10 | 	their files directly into this structure (and optionally define a substructure).
11 | 	
12 | 	
13 | 	In this document, a tag can be either a <tocdef> or a <tocref>.  The former is a definition
14 | 	of an XML item that may have a link and may contain other <tocdef> and <tocref> children.  
15 | 	<tocdef> items may be referred to in other documents by using a <tocref> tag with the 
16 | 	appropriate id attribute value.  Using these two tags allows any module to define a place 
17 | 	in the table of contents system (<tocdef>), which also provides a place for 
18 | 	other TOC_Source.xml files to insert content (<tocref>).  
19 | 	
20 | 	During the help build time, all TOC_Source.xml files will be parsed and	validated to ensure
21 | 	that all <tocref> tags point to valid <tocdef> tags.  From these files will be generated
22 | 	<module name>_TOC.xml files, which are table of contents files written in the format 
23 | 	desired by the JavaHelp system.   Additionally, the genated files will be merged together
24 | 	as they are loaded by the JavaHelp system.  In the end, when displaying help in the Ghidra
25 | 	help GUI, there will be on table of contents that has been created from the definitions in 
26 | 	all of the modules' TOC_Source.xml files.
27 | 
28 | 	
29 | 	Tags and Attributes
30 | 	
31 | 	<tocdef>
32 | 	-id          - the name of the definition (this must be unique across all TOC_Source.xml files)	
33 | 	-text        - the display text of the node, as seen in the help GUI
34 | 	-target**    - the file to display when the node is clicked in the GUI
35 | 	-sortgroup   - this is a string that defines where a given node should appear under a given
36 | 	               parent.  The string values will be sorted by the JavaHelp system using
37 | 	               a javax.text.RulesBasedCollator.  If this attribute is not specified, then
38 | 	               the text of attribute will be used.
39 | 
40 | 	<tocref>
41 | 	-id			 - The id of the <tocdef> that this reference points to 
42 | 	
43 | 	**The URL for the target is relative and should start with 'help/topics'.  This text is 
44 | 	used by the Ghidra help system to provide a universal starting point for all links so that
45 | 	they can be resolved at runtime, across modules.
46 | 	
47 | 	
48 | -->
49 | 
50 | 
51 | <tocroot>
52 | 	<!-- Uncomment and adjust fields to add help topic to help system's Table of Contents
53 | 	<tocref id="Ghidra Functionality">
54 | 		<tocdef id="HelpAnchor" text="My Feature" target="help/topics/my_topic/help.html" />
55 | 	</tocref>
56 | 	-->
57 | </tocroot>
58 | 


--------------------------------------------------------------------------------
/src/main/help/help/shared/Frontpage.css:
--------------------------------------------------------------------------------
 1 | /* ###
 2 |  * IP: GHIDRA
 3 |  *
 4 |  * Licensed under the Apache License, Version 2.0 (the "License");
 5 |  * you may not use this file except in compliance with the License.
 6 |  * You may obtain a copy of the License at
 7 |  * 
 8 |  *      http://www.apache.org/licenses/LICENSE-2.0
 9 |  * 
10 |  * Unless required by applicable law or agreed to in writing, software
11 |  * distributed under the License is distributed on an "AS IS" BASIS,
12 |  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 |  * See the License for the specific language governing permissions and
14 |  * limitations under the License.
15 |  */
16 | /*
17 | 									WARNING!
18 |     This file is copied to all help directories.  If you change this file, you must copy it 
19 |     to each src/main/help/help/shared directory.									
20 | 									
21 | 	
22 | 	Java Help Note:  JavaHelp does not accept sizes (like in 'margin-top') in anything but 
23 | 	px (pixel) or with no type marking. 
24 | 
25 | */ 
26 | 
27 | body { margin-bottom: 50px; margin-left: 10px; margin-right: 10px; margin-top: 10px; } /* some padding to improve readability */ 
28 | li { font-family:times new roman; font-size:14pt; }
29 | h1 { color:#000080; font-family:times new roman; font-size:36pt; font-style:italic; font-weight:bold; text-align:center; }
30 | h2 { margin: 10px; margin-top: 20px; color:#984c4c; font-family:times new roman; font-size:18pt; font-weight:bold; }
31 | h3 { margin-left: 10px; margin-top: 20px; color:#0000ff; font-family:times new roman; `font-size:14pt; font-weight:bold;  }
32 | h4 { margin-left: 10px; margin-top: 20px; font-family:times new roman; font-size:14pt; font-style:italic; }
33 |  
34 | /*
35 | 	 P tag code.  Most of the help files nest P tags inside of blockquote tags (the was the 
36 | 	 way it had been done in the beginning).  The net effect is that the text is indented.  In 
37 | 	 modern HTML we would use CSS to do this.  We need to support the Ghidra P tags, nested in
38 | 	 blockquote tags, as well as naked P tags.  The following two lines accomplish this.  Note
39 | 	 that the 'blockquote p' definition will inherit from the first 'p' definition.
40 | */
41 | p { margin-left: 40px; font-family:times new roman; font-size:14pt; }
42 | blockquote p { margin-left: 10px; }
43 | 
44 | p.providedbyplugin { color:#7f7f7f; margin-left: 10px; font-size:14pt; margin-top:100px  }
45 | p.ProvidedByPlugin { color:#7f7f7f; margin-left: 10px; font-size:14pt; margin-top:100px }
46 | p.relatedtopic { color:#800080; margin-left: 10px; font-size:14pt; }
47 | p.RelatedTopic { color:#800080; margin-left: 10px; font-size:14pt; }
48 | 
49 | /* 
50 | 	We wish for a tables to have space between it and the preceding element, so that text
51 | 	is not too close to the top of the table.  Also, nest the table a bit so that it is clear
52 | 	the table relates to the preceding text.
53 | */
54 | table { margin-left: 20px; margin-top: 10px; width: 80%;}
55 | td { font-family:times new roman; font-size:14pt; vertical-align: top; }
56 | th { font-family:times new roman; font-size:14pt; font-weight:bold; background-color: #EDF3FE; }
57 | 
58 | /*
59 | 	Code-like formatting for things such as file system paths and proper names of classes, 
60 | 	methods, etc.  To apply this to a file path, use this syntax:
61 | 		<CODE CLASS="path">...</CODE>
62 | */
63 | code { color: black; font-weight: bold; font-family: courier new, monospace; font-size: 14pt; white-space: nowrap; }
64 | code.path { color: #4682B4; font-weight: bold; font-family: courier new, monospace; font-size: 14pt; white-space: nowrap; }
65 | 


--------------------------------------------------------------------------------
/src/main/help/help/topics/quarkenginehelper/help.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 2 | 
 3 | <HTML>
 4 |   <HEAD>
 5 |     <META name="generator" content=
 6 |     "HTML Tidy for Java (vers. 2009-12-01), see jtidy.sourceforge.net">
 7 |     <META http-equiv="Content-Language" content="en-us">
 8 |     <META http-equiv="Content-Type" content="text/html; charset=windows-1252">
 9 |     <META name="GENERATOR" content="Microsoft FrontPage 4.0">
10 |     <META name="ProgId" content="FrontPage.Editor.Document">
11 | 
12 |     <TITLE>Skeleton Help File for a Module</TITLE>
13 |     <LINK rel="stylesheet" type="text/css" href="../../shared/Frontpage.css">
14 |   </HEAD>
15 | 
16 |   <BODY>
17 |     <H1><a name="HelpAnchor"></a>Skeleton Help File for a Module</H1>
18 | 
19 |     <P>This is a simple skeleton help topic. For a better description of what should and should not
20 |     go in here, see the "sample" Ghidra extension in the Extensions/Ghidra directory, or see your 
21 |     favorite help topic. In general, language modules do not have their own help topics.</P>
22 |   </BODY>
23 | </HTML>
24 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/CallQuarkTask.java:
--------------------------------------------------------------------------------
 1 | package quarkenginehelper;
 2 | 
 3 | import java.io.BufferedReader;
 4 | import java.io.IOException;
 5 | import java.io.InputStreamReader;
 6 | import java.util.Arrays;
 7 | import java.util.concurrent.TimeUnit;
 8 | 
 9 | import ghidra.util.Msg;
10 | import ghidra.util.exception.CancelledException;
11 | import ghidra.util.task.Task;
12 | import ghidra.util.task.TaskMonitor;
13 | 
14 | public final class CallQuarkTask extends Task {
15 | 
16 | 	final String absoluteQuarkPath;
17 | 	final String absoluteDexPath;
18 | 	final String absoluteReportPath;
19 | 
20 | 	CallQuarkTask(String quarkPath, String dexPath, String reportPath) {
21 | 		super("Quark-Engine launching", true, true, false);
22 | 
23 | 		this.absoluteQuarkPath = quarkPath;
24 | 		this.absoluteDexPath = dexPath;
25 | 		this.absoluteReportPath = reportPath;
26 | 
27 | 		Msg.debug(this, "QuarkPath:" + absoluteQuarkPath);
28 | 		Msg.debug(this, "DexPath  :" + absoluteDexPath);
29 | 		Msg.debug(this, "ReportPath:" + absoluteReportPath);
30 | 	}
31 | 
32 | 	@Override
33 | 	public void run(TaskMonitor monitor) throws CancelledException {
34 | 		monitor.setShowProgressValue(false);
35 | 
36 | 		monitor.setMessage("Launching Quark-Engine");
37 | 
38 | 		String[] commands = { absoluteQuarkPath, "-a", absoluteDexPath, "-o", absoluteReportPath };
39 | 		Process quark = null;
40 | 		try {
41 | 			quark = new ProcessBuilder().command(commands).redirectErrorStream(true).start();
42 | 			BufferedReader quarkStdOutNErr = new BufferedReader(new InputStreamReader(quark.getInputStream()));
43 | 
44 | 			monitor.setMessage("Analyzing File");
45 | 			Msg.debug(this, "Executing Quark with following command: ");
46 | 			Msg.debug(this, Arrays.toString(commands));
47 | 			while (!quark.waitFor(1, TimeUnit.SECONDS)) {
48 | 				String line = null;
49 | 				while ((line = quarkStdOutNErr.readLine()) != null) {
50 | 					monitor.setMessage(line);
51 | 					Msg.debug(this, line);
52 | 
53 | 					monitor.checkCanceled();
54 | 				}
55 | 			}
56 | 
57 | 		} catch (IOException | InterruptedException e) {
58 | 			Msg.error(this, "Error on running Quark.", e);
59 | 			return;
60 | 
61 | 		} catch (CancelledException e) {
62 | 			if (quark != null)
63 | 				quark.destroyForcibly();
64 | 			Msg.debug(this, "--Cancelled by User--");
65 | 			return;
66 | 
67 | 		}
68 | 
69 | 		Msg.debug(this, "--End of Output--");
70 | 	}
71 | 
72 | }
73 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/QuarkEnginePlugin.java:
--------------------------------------------------------------------------------
  1 | /* ###
  2 |  * IP: GHIDRA
  3 |  *
  4 |  * Licensed under the Apache License, Version 2.0 (the "License");
  5 |  * you may not use this file except in compliance with the License.
  6 |  * You may obtain a copy of the License at
  7 |  * 
  8 |  *      http://www.apache.org/licenses/LICENSE-2.0
  9 |  * 
 10 |  * Unless required by applicable law or agreed to in writing, software
 11 |  * distributed under the License is distributed on an "AS IS" BASIS,
 12 |  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 13 |  * See the License for the specific language governing permissions and
 14 |  * limitations under the License.
 15 |  */
 16 | package quarkenginehelper;
 17 | 
 18 | import java.io.BufferedReader;
 19 | import java.io.File;
 20 | import java.io.IOException;
 21 | import java.io.InputStreamReader;
 22 | import java.nio.file.Path;
 23 | import java.util.concurrent.TimeUnit;
 24 | 
 25 | import javax.swing.ImageIcon;
 26 | 
 27 | import docking.ActionContext;
 28 | import docking.action.DockingAction;
 29 | import docking.action.ToolBarData;
 30 | import docking.widgets.filechooser.GhidraFileChooser;
 31 | import docking.widgets.filechooser.GhidraFileChooserMode;
 32 | import ghidra.app.ExamplesPluginPackage;
 33 | import ghidra.app.plugin.PluginCategoryNames;
 34 | import ghidra.app.plugin.ProgramPlugin;
 35 | import ghidra.app.services.GoToService;
 36 | import ghidra.framework.plugintool.PluginInfo;
 37 | import ghidra.framework.plugintool.PluginTool;
 38 | import ghidra.framework.plugintool.util.PluginStatus;
 39 | import ghidra.program.model.listing.Program;
 40 | import ghidra.util.Msg;
 41 | import ghidra.util.filechooser.ExtensionFileFilter;
 42 | import ghidra.util.task.Task;
 43 | import ghidra.util.task.TaskListener;
 44 | import resources.Icons;
 45 | import resources.ResourceManager;
 46 | 
 47 | /**
 48 |  * TODO: Provide class-level documentation that describes what this plugin does.
 49 |  */
 50 | //@formatter:off
 51 | @PluginInfo(
 52 | 	status = PluginStatus.STABLE,
 53 | 	packageName = ExamplesPluginPackage.NAME,
 54 | 	category = PluginCategoryNames.ANALYSIS,
 55 | 	servicesRequired = GoToService.class,
 56 | 	shortDescription = "Quark Engine integration with Ghidra.",
 57 | 	description = "A plugin bridges Quark Engine to Ghidra. Now you can view malware reports generated by Quark without switching! Of cause, launching Quark analysis directly in Ghidra is possible, too!"
 58 | )
 59 | //@formatter:on
 60 | public class QuarkEnginePlugin extends ProgramPlugin implements TaskListener {
 61 | 
 62 | 	private String absoluteQuarkPath;
 63 | 
 64 | 	// User interfaces
 65 | 	private SummaryProvider summaryProvider;
 66 | 
 67 | 	// Service
 68 | 	private GoToService goToService;
 69 | 
 70 | 	private GhidraFileChooser chooser;
 71 | 
 72 | 	private DockingAction launchQuark;
 73 | 	private DockingAction openReport;
 74 | 
 75 | 	final static String QUARK_GROUP = "Quark";
 76 | 	final static ImageIcon ICON = ResourceManager.loadImage("images/quark-icon.png");
 77 | 
 78 | 	public QuarkEnginePlugin(PluginTool tool) {
 79 | 		super(tool, true, true);
 80 | 
 81 | 		summaryProvider = new SummaryProvider(this);
 82 | 		createActions();
 83 | 	}
 84 | 
 85 | 	private void initChooser() {
 86 | 		if (chooser == null) {
 87 | 			chooser = new GhidraFileChooser(tool.getActiveWindow());
 88 | 
 89 | 			var filter = ExtensionFileFilter.forExtensions("Quark-Enging Report", "json");
 90 | 			chooser.addFileFilter(filter);
 91 | 			chooser.setSelectedFileFilter(filter);
 92 | 
 93 | 			chooser.setFileSelectionMode(GhidraFileChooserMode.FILES_ONLY);
 94 | 			chooser.setMultiSelectionEnabled(false);
 95 | 			chooser.setTitle("Select Report to import");
 96 | 		}
 97 | 	}
 98 | 
 99 | 	private String findQuarkPath() {
100 | 		int timeout = 2; // 2 seconds
101 | 		String command[] = { "where", "quark" };
102 | 
103 | 		try {
104 | 			Process process = new ProcessBuilder().command(command).start();
105 | 			BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream()));
106 | 
107 | 			boolean exitInTime = process.waitFor(timeout, TimeUnit.SECONDS);
108 | 			if (exitInTime & process.exitValue() == 0)
109 | 				return reader.readLine();
110 | 
111 | 		} catch (IOException | InterruptedException e) {
112 | 			return null;
113 | 		}
114 | 
115 | 		return null;
116 | 	}
117 | 
118 | 	boolean isSupportedFormat(Program newProgram) {
119 | 		return newProgram.getExecutableFormat().equals("Dalvik Executable (DEX)");
120 | 	}
121 | 
122 | 	void callQuarkTask() {
123 | 
124 | 		String absoluteDexPath = currentProgram.getExecutablePath();
125 | 		if (System.getProperty("os.name").startsWith("Windows")) {
126 | 			if (absoluteDexPath.startsWith("\\") || absoluteDexPath.startsWith("/"))
127 | 				absoluteDexPath = absoluteDexPath.substring(1);
128 | 		}
129 | 
130 | 		File projectDir = currentProgram.getDomainFile().getProjectLocator().getProjectDir();
131 | 		String absoluteReportPath = Path.of(projectDir.getPath(), "QuarkReport.json").toString();
132 | 
133 | 		Msg.info(this, "Activating Quark-Engine.");
134 | 		CallQuarkTask task = new CallQuarkTask(absoluteQuarkPath, absoluteDexPath, absoluteReportPath);
135 | 		task.addTaskListener(this);
136 | 
137 | 		getTool().execute(task);
138 | 	}
139 | 
140 | 	@Override
141 | 	public void init() {
142 | 		goToService = getTool().getService(GoToService.class);
143 | 		if (goToService == null) {
144 | 			Msg.warn(this, "Quark-Engine Plugin cannot find GoToService. Some features may disappear.");
145 | 		} else {
146 | 			summaryProvider.setGoToService(goToService);
147 | 		}
148 | 
149 | 		absoluteQuarkPath = findQuarkPath();
150 | 		if (absoluteQuarkPath != null)
151 | 			Msg.debug(this, "Find Quark at: " + absoluteQuarkPath);
152 | 		else
153 | 			Msg.error(this, "Unable to find Quark. The plugin will not activate.");
154 | 	}
155 | 
156 | 	private void createActions() {
157 | 		// Action for user to launch Quark
158 | 		launchQuark = new DockingAction("Launch Quark Analysis", getName()) {
159 | 			@Override
160 | 			public void actionPerformed(ActionContext context) {
161 | 				callQuarkTask();
162 | 			}
163 | 		};
164 | 		launchQuark.setToolBarData(new ToolBarData(ICON, null));
165 | 		launchQuark.setEnabled(false);
166 | 		launchQuark.markHelpUnnecessary();
167 | 		tool.addAction(launchQuark);
168 | 
169 | 		// Action for user to open a Quark report.
170 | 		openReport = new DockingAction("Open a report", getName()) {
171 | 
172 | 			@Override
173 | 			public void actionPerformed(ActionContext context) {
174 | 				initChooser();
175 | 				File selected = chooser.getSelectedFile();
176 | 				if (selected != null)
177 | 					summaryProvider.openFile(selected);
178 | 			}
179 | 
180 | 		};
181 | 		openReport.setToolBarData(new ToolBarData(Icons.OPEN_FOLDER_ICON, null));
182 | 		openReport.setEnabled(false);
183 | 		openReport.markHelpUnnecessary();
184 | 		tool.addAction(openReport);
185 | 	}
186 | 
187 | 	GoToService getGoToService() {
188 | 		return goToService;
189 | 	}
190 | 
191 | 	@Override
192 | 	protected void programOpened(Program newProgram) {
193 | 		if (isSupportedFormat(newProgram)) {
194 | 			summaryProvider.setEnable(newProgram);
195 | 
196 | 			launchQuark.setEnabled(true);
197 | 			openReport.setEnabled(true);
198 | 		}
199 | 
200 | 	}
201 | 
202 | 	@Override
203 | 	protected void programClosed(Program newProgram) {
204 | 		summaryProvider.setDisable();
205 | 
206 | 		launchQuark.setEnabled(false);
207 | 		openReport.setEnabled(false);
208 | 	}
209 | 
210 | 	@Override
211 | 	public void taskCompleted(Task task) {
212 | 		if (task instanceof CallQuarkTask) {
213 | 			Msg.info(this, "Analysis of Quark-Engine ended.");
214 | 
215 | 			// Refresh Panel
216 | 			File jsonReport = new File(((CallQuarkTask) task).absoluteReportPath);
217 | 			summaryProvider.openFile(jsonReport);
218 | 		}
219 | 	}
220 | 
221 | 	@Override
222 | 	public void taskCancelled(Task task) {
223 | 		// Do nothing
224 | 	}
225 | 
226 | }
227 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/QuarkReport.java:
--------------------------------------------------------------------------------
 1 | package quarkenginehelper;
 2 | 
 3 | import java.util.ArrayList;
 4 | import java.util.List;
 5 | 
 6 | public class QuarkReport {
 7 | 	public String md5;
 8 | 	public String filename;
 9 | 	public double totalScore;
10 | 
11 | 	public List<Crime> crimes;
12 | 	public List<Node> nodes;
13 | 
14 | 	public static class Crime {
15 | 		public String description;
16 | 		public double score;
17 | 		public double weight;
18 | 		public String confidence;
19 | 		public String[] permissions;
20 | 		public Method[] nativeAPI;
21 | 	}
22 | 
23 | 	public static class Method {
24 | 		public final String className;
25 | 		public final String name;
26 | 		public final String descriptor;
27 | 
28 | 		public Method(String className, String name, String descriptor) {
29 | 			super();
30 | 			this.className = className;
31 | 			this.name = name;
32 | 			this.descriptor = descriptor;
33 | 		}
34 | 	}
35 | 
36 | 	public static class Node {
37 | 		public final Crime crime;
38 | 
39 | 		public final Method location;
40 | 
41 | 		public final byte[] firstInvocation;
42 | 		public final byte[] secondInvocation;
43 | 
44 | 		public Node(Crime crime, Method location, byte[] firstInvocation, byte[] secondInvocation) {
45 | 			super();
46 | 			this.crime = crime;
47 | 			this.location = location;
48 | 			this.firstInvocation = firstInvocation;
49 | 			this.secondInvocation = secondInvocation;
50 | 		}
51 | 	}
52 | 	
53 | 	public QuarkReport() {
54 | 		crimes = new ArrayList<Crime>();
55 | 		nodes = new ArrayList<Node>();
56 | 	}
57 | }


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/ReportExporter.java:
--------------------------------------------------------------------------------
 1 | /* ###
 2 |  * IP: GHIDRA
 3 |  *
 4 |  * Licensed under the Apache License, Version 2.0 (the "License");
 5 |  * you may not use this file except in compliance with the License.
 6 |  * You may obtain a copy of the License at
 7 |  * 
 8 |  *      http://www.apache.org/licenses/LICENSE-2.0
 9 |  * 
10 |  * Unless required by applicable law or agreed to in writing, software
11 |  * distributed under the License is distributed on an "AS IS" BASIS,
12 |  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 |  * See the License for the specific language governing permissions and
14 |  * limitations under the License.
15 |  */
16 | package quarkenginehelper;
17 | 
18 | import java.io.File;
19 | import java.io.IOException;
20 | import java.util.ArrayList;
21 | import java.util.List;
22 | 
23 | import ghidra.app.util.*;
24 | import ghidra.app.util.exporter.Exporter;
25 | import ghidra.app.util.exporter.ExporterException;
26 | import ghidra.framework.model.DomainObject;
27 | import ghidra.program.model.address.AddressSetView;
28 | import ghidra.util.task.TaskMonitor;
29 | 
30 | /**
31 |  * TODO: Provide class-level documentation that describes what this exporter
32 |  * does.
33 |  */
34 | public class ReportExporter extends Exporter {
35 | 
36 | 	/**
37 | 	 * Exporter constructor.
38 | 	 */
39 | 	public ReportExporter() {
40 | 
41 | 		// TODO: Name the exporter and associate a file extension with it
42 | 
43 | 		super("Quark Engine Report Exporter", "Quark-Engine_Helper", null);
44 | 	}
45 | 
46 | 	@Override
47 | 	public boolean export(File file, DomainObject domainObj, AddressSetView addrSet, TaskMonitor monitor)
48 | 			throws ExporterException, IOException {
49 | 
50 | 		// TODO: Perform the export, and return true if it succeeded
51 | 
52 | 		return false;
53 | 	}
54 | 
55 | 	@Override
56 | 	public List<Option> getOptions(DomainObjectService domainObjectService) {
57 | 		List<Option> list = new ArrayList<>();
58 | 
59 | 		// TODO: If this exporter has custom options, add them to 'list'
60 | 		list.add(new Option("Option name goes here", "Default option value goes here"));
61 | 
62 | 		return list;
63 | 	}
64 | 
65 | 	@Override
66 | 	public void setOptions(List<Option> options) throws OptionException {
67 | 
68 | 		// TODO: If this exporter has custom options, assign their values to the
69 | 		// exporter here
70 | 	}
71 | }
72 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/ReportReader.java:
--------------------------------------------------------------------------------
  1 | package quarkenginehelper;
  2 | 
  3 | import java.io.FileReader;
  4 | import java.io.IOException;
  5 | import java.util.ArrayList;
  6 | import java.util.Arrays;
  7 | 
  8 | import com.google.gson.stream.JsonReader;
  9 | 
 10 | import quarkenginehelper.QuarkReport.Crime;
 11 | import quarkenginehelper.QuarkReport.Method;
 12 | import quarkenginehelper.QuarkReport.Node;
 13 | 
 14 | public class ReportReader {
 15 | 
 16 | 	public static QuarkReport parseReport(FileReader in) throws IOException {
 17 | 		JsonReader reader = new JsonReader(in);
 18 | 		QuarkReport report = new QuarkReport();
 19 | 
 20 | 		reader.beginObject();
 21 | 		while (reader.hasNext()) {
 22 | 			String name = reader.nextName();
 23 | 			switch (name) {
 24 | 			case "md5":
 25 | 				report.md5 = reader.nextString();
 26 | 				break;
 27 | 			case "apk_filename":
 28 | 				report.filename = reader.nextString();
 29 | 				break;
 30 | 			case "total_score":
 31 | 				report.totalScore = reader.nextDouble();
 32 | 				break;
 33 | 			case "crimes":
 34 | 				readCrimeArray(reader, report);
 35 | 				break;
 36 | 			default:
 37 | 				reader.skipValue();
 38 | 			}
 39 | 		}
 40 | 		reader.endObject();
 41 | 		return report;
 42 | 	}
 43 | 
 44 | 	public static void readCrimeArray(JsonReader reader, QuarkReport report) throws IOException {
 45 | 		reader.beginArray();
 46 | 		while (reader.hasNext())
 47 | 			report.crimes.add(readCrime(reader, report));
 48 | 		reader.endArray();
 49 | 	}
 50 | 
 51 | 	protected static Crime readCrime(JsonReader reader, QuarkReport report) throws IOException {
 52 | 		Crime crime = new Crime();
 53 | 
 54 | 		reader.beginObject();
 55 | 		while (reader.hasNext()) {
 56 | 			String name = reader.nextName();
 57 | 			switch (name) {
 58 | 			case "crime":
 59 | 				crime.description = reader.nextString();
 60 | 				break;
 61 | 			case "score":
 62 | 				crime.score = reader.nextDouble();
 63 | 				break;
 64 | 			case "weight":
 65 | 				crime.weight = reader.nextDouble();
 66 | 				break;
 67 | 			case "confidence":
 68 | 				crime.confidence = reader.nextString();
 69 | 				break;
 70 | 			case "permissions":
 71 | 				crime.permissions = readPermissionArray(reader);
 72 | 				break;
 73 | 			case "native_api":
 74 | 			case "combination":
 75 | 				crime.nativeAPI = readMethodArray(reader);
 76 | 				break;
 77 | 			case "sequence":
 78 | 				reader.skipValue();
 79 | 				break;
 80 | 			case "register":
 81 | 				readInvocationArray(reader, crime, report);
 82 | 				break;
 83 | 			default:
 84 | 				reader.skipValue();
 85 | 			}
 86 | 		}
 87 | 		reader.endObject();
 88 | 		return crime;
 89 | 	}
 90 | 
 91 | 	protected static String[] readPermissionArray(JsonReader reader) throws IOException {
 92 | 		var tempList = new ArrayList<String>();
 93 | 
 94 | 		reader.beginArray();
 95 | 		while (reader.hasNext())
 96 | 			tempList.add(reader.nextString());
 97 | 		reader.endArray();
 98 | 		return tempList.toArray(new String[] {});
 99 | 	}
100 | 
101 | 	public static Method[] readMethodArray(JsonReader reader) throws IOException {
102 | 		var tempList = new ArrayList<Method>();
103 | 
104 | 		reader.beginArray();
105 | 		while (reader.hasNext())
106 | 			tempList.add(readMethod(reader));
107 | 		reader.endArray();
108 | 		return tempList.toArray(new Method[] {});
109 | 	}
110 | 
111 | 	protected static Method readMethod(JsonReader reader) throws IOException {
112 | 		String className = "";
113 | 		String methodName = "";
114 | 		String descriptor = "";
115 | 
116 | 		reader.beginObject();
117 | 		while (reader.hasNext()) {
118 | 			String name = reader.nextName();
119 | 			String value = reader.nextString();
120 | 			switch (name) {
121 | 			case "class":
122 | 				className = value;
123 | 				break;
124 | 			case "method":
125 | 				methodName = value;
126 | 				break;
127 | 			case "descriptor":
128 | 				descriptor = value;
129 | 				break;
130 | 			default:
131 | 			}
132 | 		}
133 | 		reader.endObject();
134 | 
135 | 		return new Method(className, methodName, descriptor);
136 | 	}
137 | 
138 | 	protected static byte[] getBytecode(String insStr) throws IOException {
139 | 		insStr = insStr.trim();
140 | 		if (insStr.isEmpty())
141 | 			return null;
142 | 
143 | 		String[] insArr = insStr.split(" +");
144 | 		byte[] byteArr = new byte[insArr.length];
145 | 
146 | 		try {
147 | 			for (int i = 0; i < insArr.length; i++)
148 | 				byteArr[i] = Integer.valueOf(insArr[i], 16).byteValue();
149 | 		} catch (NumberFormatException e) {
150 | 			throw new IOException(e);
151 | 		}
152 | 
153 | 		return byteArr;
154 | 	}
155 | 
156 | 	protected static void readInvocationArray(JsonReader reader, Crime crime, QuarkReport report) throws IOException {
157 | 		reader.beginArray();
158 | 		while (reader.hasNext())
159 | 			report.nodes.add(readInvocation(reader, crime));
160 | 		reader.endArray();
161 | 	}
162 | 
163 | 	protected static Method parseMethod(String fullname) throws IOException {
164 | 		var pieces = fullname.split(" +", 3);
165 | 		if (pieces[1].length() == 0 || pieces[2].length() == 0)
166 | 			throw new IOException("Illegal Method Name %s".formatted(Arrays.toString(pieces)));
167 | 
168 | 		// Class name
169 | 		var className = pieces[0].toCharArray();
170 | 		var newClassName = new char[className.length * 2];
171 | 		if (className[0] != 'L')
172 | 			throw new IOException("Illegal Method Name %s".formatted(Arrays.toString(pieces)));
173 | 
174 | 		var index = 1; // The first char must is 'L'
175 | 		var newIndex = 0;
176 | 		while (index < className.length && newIndex < newClassName.length) {
177 | 			char c = className[index++];
178 | 			switch (c) {
179 | 			case '/':
180 | 				newClassName[newIndex++] = ':';
181 | 				newClassName[newIndex++] = ':';
182 | 				break;
183 | 			case ';':
184 | 				break;
185 | 			default:
186 | 				newClassName[newIndex++] = c;
187 | 			}
188 | 		}
189 | 		return new Method(String.valueOf(newClassName).trim(), pieces[1], pieces[2]);
190 | 	}
191 | 
192 | 	protected static Node readInvocation(JsonReader reader, Crime crime) throws IOException {
193 | 		Method location = null;
194 | 		byte[] first = null;
195 | 		byte[] second = null;
196 | 
197 | 		reader.beginObject();
198 | 		String fullMethodName = reader.nextName();
199 | 		location = parseMethod(fullMethodName);
200 | 
201 | 		reader.beginObject();
202 | 		while (reader.hasNext()) {
203 | 			String name = reader.nextName();
204 | 			switch (name) {
205 | 			case "first_hex":
206 | 				first = getBytecode(reader.nextString());
207 | 				break;
208 | 			case "second_hex":
209 | 				second = getBytecode(reader.nextString());
210 | 				break;
211 | 			default:
212 | 				reader.skipValue();
213 | 			}
214 | 		}
215 | 		reader.endObject();
216 | 		reader.endObject();
217 | 
218 | 		return new Node(crime, location, first, second);
219 | 	}
220 | 
221 | }
222 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/SummaryModel.java:
--------------------------------------------------------------------------------
  1 | package quarkenginehelper;
  2 | 
  3 | import java.io.File;
  4 | import java.io.FileNotFoundException;
  5 | import java.io.FileReader;
  6 | import java.io.IOException;
  7 | import java.util.Arrays;
  8 | import java.util.List;
  9 | 
 10 | import docking.widgets.table.TableColumnDescriptor;
 11 | import ghidra.docking.settings.Settings;
 12 | import ghidra.framework.plugintool.ServiceProvider;
 13 | import ghidra.program.model.address.Address;
 14 | import ghidra.program.model.address.AddressSet;
 15 | import ghidra.program.model.listing.CodeUnit;
 16 | import ghidra.program.model.listing.Function;
 17 | import ghidra.program.model.listing.Listing;
 18 | import ghidra.program.model.listing.Program;
 19 | import ghidra.program.model.mem.MemoryAccessException;
 20 | import ghidra.program.util.AddressFieldLocation;
 21 | import ghidra.program.util.ProgramLocation;
 22 | import ghidra.program.util.ProgramSelection;
 23 | import ghidra.util.Msg;
 24 | import ghidra.util.datastruct.Accumulator;
 25 | import ghidra.util.exception.CancelledException;
 26 | import ghidra.util.table.AddressBasedTableModel;
 27 | import ghidra.util.table.field.AbstractProgramBasedDynamicTableColumn;
 28 | import ghidra.util.table.field.ProgramLocationTableColumnExtensionPoint;
 29 | import ghidra.util.task.TaskMonitor;
 30 | import quarkenginehelper.QuarkReport.Method;
 31 | import quarkenginehelper.QuarkReport.Node;
 32 | 
 33 | public class SummaryModel extends AddressBasedTableModel<Node> {
 34 | 	private File reportPath;
 35 | 
 36 | 	public final static int ADDRESS_COL = 0;
 37 | 
 38 | 	SummaryModel(QuarkEnginePlugin plugin) {
 39 | 		super("Quark Engine Summary", plugin.getTool(), null, null);
 40 | 	}
 41 | 
 42 | 	@Override
 43 | 	public Address getAddress(int row) {
 44 | 		return (Address) this.getColumnValueForRow(this.getRowObject(row), ADDRESS_COL);
 45 | 	}
 46 | 
 47 | 	public AddressSet getAddressSet(int row) {
 48 | 		Node node = getRowObject(row);
 49 | 		byte[][] searchBytes = { node.firstInvocation, node.secondInvocation };
 50 | 
 51 | 		Object value = getColumnValueForRow(node, ADDRESS_COL);
 52 | 		if (value == null)
 53 | 			return null;
 54 | 		
 55 | 		Address address = (Address) value;
 56 | 		if (address.isExternalAddress())
 57 | 			return null;
 58 | 
 59 | 		AddressSet set = new AddressSet();
 60 | 		
 61 | 		Listing listing = program.getListing();
 62 | 		Function func = listing.getFunctionAt(address);
 63 | 		if (func == null) return null;
 64 | 		
 65 | 		var iter = func.getBody().getAddresses(true);
 66 | 		try {
 67 | 			SEARCH_LOOP: for (byte[] target : searchBytes) {
 68 | 				while (iter.hasNext()) {
 69 | 					CodeUnit instruction = listing.getCodeUnitAt(iter.next());
 70 | 					if (instruction == null) continue;
 71 | 
 72 | 					Msg.debug(this, instruction.getMnemonicString());
 73 | 
 74 | 					String mnemonic = instruction.getMnemonicString();
 75 | 					if (mnemonic.startsWith("return"))
 76 | 						break SEARCH_LOOP;
 77 | 
 78 | 					if (mnemonic.startsWith("invoke")) {
 79 | 
 80 | 						if (Arrays.equals(instruction.getBytes(), target)) {
 81 | 							set.add(instruction.getAddress());
 82 | 							break;
 83 | 						}
 84 | 					}
 85 | 				}
 86 | 			}
 87 | 
 88 | 		} catch (MemoryAccessException e) {
 89 | 			Msg.warn(this, "Cannot read instructions in byte.", e);
 90 | 		}
 91 | 
 92 | 		return set.getNumAddresses() == 2 ? set : null;
 93 | 	}
 94 | 
 95 | 	@Override
 96 | 	public ProgramSelection getProgramSelection(int[] rows) {
 97 | 		AddressSet newSet = new AddressSet();
 98 | 		for (int element : rows) {
 99 | 			AddressSet addressSet = getAddressSet(element);
100 | 			if (addressSet != null)
101 | 				newSet = newSet.union(addressSet);
102 | 		}
103 | 
104 | 		return new ProgramSelection(newSet);
105 | 	}
106 | 
107 | 	void openFile(File newReportPath) {
108 | 		reportPath = newReportPath;
109 | 		reload();
110 | 	}
111 | 
112 | 	@Override
113 | 	protected void doLoad(Accumulator<Node> accumulator, TaskMonitor monitor) throws CancelledException {
114 | 		if (reportPath == null) {
115 | 			return;
116 | 		}
117 | 
118 | 		try (FileReader reader = new FileReader(reportPath);) {
119 | 			QuarkReport report = ReportReader.parseReport(reader);
120 | 
121 | 			accumulator.addAll(report.nodes);
122 | 
123 | 		} catch (FileNotFoundException e) {
124 | 			Msg.error(this, "Cannot find report file at " + reportPath.getAbsolutePath());
125 | 		} catch (IOException e) {
126 | 			Msg.error(this, "Error on reading report at " + reportPath.getAbsolutePath(), e);
127 | 		}
128 | 	}
129 | 
130 | 	@Override
131 | 	protected TableColumnDescriptor<Node> createTableColumnDescriptor() {
132 | 		TableColumnDescriptor<Node> descriptor = new TableColumnDescriptor<Node>();
133 | 
134 | 		descriptor.addVisibleColumn(new NodeAddressTableColumn(), 1, true);
135 | 		descriptor.addVisibleColumn(new NodeDescriptorTableColumn());
136 | 		descriptor.addVisibleColumn(new NodeConfidenceTableColumn());
137 | 		//descriptor.addVisibleColumn(new NodeBytecodesTableColumn());
138 | 
139 | 		return descriptor;
140 | 	}
141 | 
142 | 	public static class NodeAddressTableColumn extends ProgramLocationTableColumnExtensionPoint<Node, Address> {
143 | 
144 | 		@Override
145 | 		public String getColumnName() {
146 | 			return "Location";
147 | 		}
148 | 
149 | 		@Override
150 | 		public Address getValue(Node node, Settings settings, Program data, ServiceProvider serviceProvider)
151 | 				throws IllegalArgumentException {
152 | 			if (data != null && node.location != null) {
153 | 				Method location = node.location;
154 | 				List<Function> functions = data.getListing().getFunctions(location.className, location.name);
155 | 
156 | 				// Show the first result
157 | 				return functions.size() == 0 ? null : functions.get(0).getEntryPoint();
158 | 			}
159 | 			return null;
160 | 		}
161 | 
162 | 		@Override
163 | 		public ProgramLocation getProgramLocation(Node node, Settings settings, Program program,
164 | 				ServiceProvider serviceProvider) {
165 | 			if (program != null && node.location != null) {
166 | 				Method location = node.location;
167 | 				List<Function> functions = program.getListing().getFunctions(location.className, location.name);
168 | 
169 | 				if (functions.size() == 0)
170 | 					return null;
171 | 
172 | 				return new AddressFieldLocation(program, functions.get(0).getEntryPoint());
173 | 
174 | 			}
175 | 			return null;
176 | 
177 | 		}
178 | 	}
179 | 
180 | 	private static class NodeDescriptorTableColumn extends AbstractProgramBasedDynamicTableColumn<Node, String> {
181 | 
182 | 		@Override
183 | 		public String getColumnName() {
184 | 			return "High Potential Risk";
185 | 		}
186 | 
187 | 		@Override
188 | 		public String getValue(Node node, Settings settings, Program data, ServiceProvider serviceProvider)
189 | 				throws IllegalArgumentException {
190 | 			return node.crime.description;
191 | 		}
192 | 	}
193 | 
194 | 	private static class NodeConfidenceTableColumn extends AbstractProgramBasedDynamicTableColumn<Node, String> {
195 | 
196 | 		@Override
197 | 		public String getColumnName() {
198 | 			return "Confidence";
199 | 		}
200 | 
201 | 		@Override
202 | 		public String getValue(Node node, Settings settings, Program data, ServiceProvider serviceProvider)
203 | 				throws IllegalArgumentException {
204 | 			return node.crime.confidence;
205 | 		}
206 | 
207 | 	}
208 | 
209 | //	private static class NodeBytecodesTableColumn extends AbstractProgramBasedDynamicTableColumn<Node, String> {
210 | //
211 | //		@Override
212 | //		public String getColumnName() {
213 | //			return "Bytecodes";
214 | //		}
215 | //
216 | //		@Override
217 | //		public String getValue(Node node, Settings settings, Program data, ServiceProvider serviceProvider)
218 | //				throws IllegalArgumentException {
219 | //			return Arrays.toString(node.firstInvocation) + Arrays.toString(node.secondInvocation);
220 | //		}
221 | //
222 | //	}
223 | 
224 | }
225 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/SummaryProvider.java:
--------------------------------------------------------------------------------
  1 | package quarkenginehelper;
  2 | 
  3 | import java.awt.BorderLayout;
  4 | import java.awt.Dimension;
  5 | import java.io.File;
  6 | 
  7 | import javax.swing.JComponent;
  8 | import javax.swing.JPanel;
  9 | import javax.swing.JScrollPane;
 10 | import javax.swing.ListSelectionModel;
 11 | 
 12 | import docking.WindowPosition;
 13 | import ghidra.app.services.GoToService;
 14 | import ghidra.framework.plugintool.ComponentProviderAdapter;
 15 | import ghidra.program.model.listing.Program;
 16 | import ghidra.util.Msg;
 17 | 
 18 | public class SummaryProvider extends ComponentProviderAdapter {
 19 | 
 20 | 	private JPanel mainPanel;
 21 | 	private SummaryTable reportTable;
 22 | 	private SummaryModel reportModel;
 23 | 
 24 | //	private DockingAction selectionNavigating;
 25 | //	private DockingAction makeProgramSelecting;
 26 | 
 27 | 	private final QuarkEnginePlugin plugin;
 28 | 
 29 | 	public SummaryProvider(QuarkEnginePlugin plugin) {
 30 | 		super(plugin.getTool(), "Quark-Engine", plugin.getName());
 31 | 		this.plugin = plugin;
 32 | 
 33 | 		setDefaultWindowPosition(WindowPosition.BOTTOM);
 34 | 		setSubTitle("Summary Report");
 35 | 		setIcon(QuarkEnginePlugin.ICON);
 36 | 
 37 | 		buildPanel();
 38 | 		createActions();
 39 | 	}
 40 | 
 41 | 	private void createActions() {
 42 | //		selectionNavigating = new SelectionNavigationAction(plugin, reportTable);
 43 | //		dockingTool.addLocalAction(this, selectionNavigating);
 44 | //
 45 | //		makeProgramSelecting = new MakeProgramSelectionAction(plugin, reportTable);
 46 | //		dockingTool.addLocalAction(this, makeProgramSelecting);
 47 | 	}
 48 | 
 49 | 	private void buildPanel() {
 50 | 		mainPanel = new JPanel(new BorderLayout(5, 5));
 51 | 		reportModel = new SummaryModel(plugin);
 52 | 		reportTable = new SummaryTable(reportModel);
 53 | 
 54 | 		reportTable.setAutoLookupColumn(SummaryModel.ADDRESS_COL);
 55 | 		reportTable.setRowSelectionAllowed(true);
 56 | 		reportTable.setSelectionMode(ListSelectionModel.SINGLE_SELECTION);
 57 | 		reportTable.getSelectionModel().addListSelectionListener(e -> tool.contextChanged(this));
 58 | 		reportTable.setNavigateOnSelectionEnabled(true);
 59 | 
 60 | 		var scroller = new JScrollPane(reportTable);
 61 | 		scroller.setPreferredSize(new Dimension(200, 100));
 62 | 
 63 | 		mainPanel.add(scroller, BorderLayout.CENTER);
 64 | 	}
 65 | 
 66 | 	void setEnable(Program newProgram) {
 67 | 		reportModel.setProgram(newProgram);
 68 | 		reportModel.reload();
 69 | 
 70 | //		selectionNavigating.setEnabled(true);
 71 | //		makeProgramSelecting.setEnabled(true);
 72 | 	}
 73 | 
 74 | 	void setDisable() {
 75 | 		reportModel.setProgram(null);
 76 | 		reportModel.reload();
 77 | 
 78 | //		selectionNavigating.setEnabled(false);
 79 | //		makeProgramSelecting.setEnabled(false);
 80 | 	}
 81 | 
 82 | 	void openFile(File jsonReport) {
 83 | 		if (jsonReport.exists()) {
 84 | 			reportModel.openFile(jsonReport);
 85 | 			setVisible(true);
 86 | 		} else {
 87 | 			Msg.error(this, "Cannot find generated report.");
 88 | 		}
 89 | 	}
 90 | 
 91 | 	void setGoToService(GoToService service) {
 92 | 		reportTable.installNavigation(service, service.getDefaultNavigatable());
 93 | 	}
 94 | 
 95 | 	SummaryTable getTable() {
 96 | 		return reportTable;
 97 | 	}
 98 | 
 99 | 	@Override
100 | 	public JComponent getComponent() {
101 | 		return mainPanel;
102 | 	}
103 | }
104 | 


--------------------------------------------------------------------------------
/src/main/java/quarkenginehelper/SummaryTable.java:
--------------------------------------------------------------------------------
 1 | package quarkenginehelper;
 2 | 
 3 | import ghidra.app.nav.Navigatable;
 4 | import ghidra.app.services.GoToService;
 5 | import ghidra.util.table.GhidraTable;
 6 | 
 7 | public class SummaryTable extends GhidraTable {
 8 | 
 9 | 	protected Navigatable navigatable;
10 | 
11 | 	public SummaryTable(SummaryModel model) {
12 | 		super(model);
13 | 	}
14 | 
15 | 	@Override
16 | 	public void installNavigation(GoToService newGoToService, Navigatable nav) {
17 | 		super.installNavigation(newGoToService, nav);
18 | 
19 | 		navigatable = nav;
20 | 	}
21 | 
22 | 	@Override
23 | 	public void navigate(int row, int column) {
24 | 		super.navigate(row, column);
25 | 		if (navigatable == null || row < 0 || column < 0 || !(dataModel instanceof SummaryModel)) {
26 | 			return;
27 | 		}
28 | 
29 | 		column = convertColumnIndexToModel(column);
30 | 
31 | 		var model = (SummaryModel) dataModel;
32 | 		var selection = model.getProgramSelection(new int[] { row });
33 | 		if (selection.getMinAddress() != null && selection.getMinAddress().isMemoryAddress()) {
34 | 			navigatable.setSelection(selection);
35 | 		}
36 | 	}
37 | 
38 | 	@Override
39 | 	public void removeNavigation() {
40 | 		super.removeNavigation();
41 | 		navigatable = null;
42 | 	}
43 | }
44 | 


--------------------------------------------------------------------------------
/src/main/resources/images/README.txt:
--------------------------------------------------------------------------------
1 | The "src/resources/images" directory is intended to hold all image/icon files used by
2 | this module.
3 | 


--------------------------------------------------------------------------------
/src/main/resources/images/quark-icon.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/quark-engine/ghidraquark/4a9659caf7cb8bb71fee5a80c1ab11179bc27f12/src/main/resources/images/quark-icon.png


--------------------------------------------------------------------------------
/src/test/java/README.test.txt:
--------------------------------------------------------------------------------
1 | The "test" directory is intended to hold unit test cases.  The package structure within
2 | this folder should correspond to that found in the "src" folder.
3 | 


--------------------------------------------------------------------------------
/src/test/java/quarkenginehelper/ReportAdapterTest.java:
--------------------------------------------------------------------------------
 1 | package quarkenginehelper;
 2 | 
 3 | import static org.junit.Assert.*;
 4 | 
 5 | import java.io.File;
 6 | import java.io.FileReader;
 7 | import java.io.IOException;
 8 | 
 9 | import org.junit.After;
10 | import org.junit.Before;
11 | import org.junit.Test;
12 | 
13 | public class ReportAdapterTest {
14 | 
15 | 	private FileReader source;
16 | 	private ReportReader adapter;
17 | 	
18 | 	@Before
19 | 	public void setUp() throws Exception {
20 | 		source = new FileReader(new File("sample/SampleReport.json"));
21 | 		adapter = new ReportReader();
22 | 	}
23 | 
24 | 	@After
25 | 	public void tearDown() throws Exception {
26 | 		if (source!=null) {
27 | 			source.close();
28 | 		}
29 | 	}
30 | 
31 | 	@Test
32 | 	public void testParseReport() {
33 | 		try {
34 | 			QuarkReport report = adapter.parseReport(source);
35 | 			assertNotNull(report);
36 | 		}catch(IOException e) {
37 | 			assert false;
38 | 		}
39 | 	}
40 | 
41 | }
42 | 


--------------------------------------------------------------------------------
/src/test/sample/SampleReport.json:
--------------------------------------------------------------------------------
   1 | {
   2 |     "md5": "f9bfec4403b573581c4d3807fb1bb3d2",
   3 |     "apk_filename": "HippoSMS.apk",
   4 |     "size_bytes": 413565,
   5 |     "threat_level": "Moderate Risk",
   6 |     "total_score": 69,
   7 |     "crimes": [
   8 |         {
   9 |             "crime": "Initialize bitmap object and compress data (e.g. JPEG) into bitmap object",
  10 |             "score": 1,
  11 |             "weight": 0.0625,
  12 |             "confidence": "20%",
  13 |             "permissions": [],
  14 |             "native_api": [],
  15 |             "combination": [],
  16 |             "sequence": [],
  17 |             "register": []
  18 |         },
  19 |         {
  20 |             "crime": "Open the camera and take picture",
  21 |             "score": 1,
  22 |             "weight": 0.0625,
  23 |             "confidence": "20%",
  24 |             "permissions": [],
  25 |             "native_api": [],
  26 |             "combination": [],
  27 |             "sequence": [],
  28 |             "register": []
  29 |         },
  30 |         {
  31 |             "crime": "Put the compressed bitmap data into JSON object",
  32 |             "score": 1,
  33 |             "weight": 0.0625,
  34 |             "confidence": "20%",
  35 |             "permissions": [],
  36 |             "native_api": [],
  37 |             "combination": [],
  38 |             "sequence": [],
  39 |             "register": []
  40 |         },
  41 |         {
  42 |             "crime": "Get filename and put it to JSON object",
  43 |             "score": 1,
  44 |             "weight": 0.0625,
  45 |             "confidence": "20%",
  46 |             "permissions": [],
  47 |             "native_api": [],
  48 |             "combination": [],
  49 |             "sequence": [],
  50 |             "register": []
  51 |         },
  52 |         {
  53 |             "crime": "Get absolute path of file and put it to JSON object",
  54 |             "score": 1,
  55 |             "weight": 0.125,
  56 |             "confidence": "40%",
  57 |             "permissions": [],
  58 |             "native_api": [
  59 |                 {
  60 |                     "class": "Ljava/io/File;",
  61 |                     "method": "getAbsolutePath"
  62 |                 }
  63 |             ],
  64 |             "combination": [],
  65 |             "sequence": [],
  66 |             "register": []
  67 |         },
  68 |         {
  69 |             "crime": "Scheduling recording task",
  70 |             "score": 1,
  71 |             "weight": 0.0625,
  72 |             "confidence": "20%",
  73 |             "permissions": [],
  74 |             "native_api": [],
  75 |             "combination": [],
  76 |             "sequence": [],
  77 |             "register": []
  78 |         },
  79 |         {
  80 |             "crime": "Use absolute path of directory for the output media file path",
  81 |             "score": 1,
  82 |             "weight": 0.125,
  83 |             "confidence": "40%",
  84 |             "permissions": [],
  85 |             "native_api": [
  86 |                 {
  87 |                     "class": "Ljava/io/File;",
  88 |                     "method": "getAbsolutePath"
  89 |                 }
  90 |             ],
  91 |             "combination": [],
  92 |             "sequence": [],
  93 |             "register": []
  94 |         },
  95 |         {
  96 |             "crime": "Check if successfully sending out SMS",
  97 |             "score": 1,
  98 |             "weight": 0.0625,
  99 |             "confidence": "20%",
 100 |             "permissions": [],
 101 |             "native_api": [],
 102 |             "combination": [],
 103 |             "sequence": [],
 104 |             "register": []
 105 |         },
 106 |         {
 107 |             "crime": "Put data in cursor to JSON object",
 108 |             "score": 1,
 109 |             "weight": 0.125,
 110 |             "confidence": "40%",
 111 |             "permissions": [],
 112 |             "native_api": [
 113 |                 {
 114 |                     "class": "Landroid/database/Cursor;",
 115 |                     "method": "getString"
 116 |                 }
 117 |             ],
 118 |             "combination": [],
 119 |             "sequence": [],
 120 |             "register": []
 121 |         },
 122 |         {
 123 |             "crime": "Read sensitive data(SMS, CALLLOG) and put it into JSON object",
 124 |             "score": 1,
 125 |             "weight": 0.125,
 126 |             "confidence": "40%",
 127 |             "permissions": [],
 128 |             "native_api": [
 129 |                 {
 130 |                     "class": "Landroid/content/ContentResolver;",
 131 |                     "method": "query"
 132 |                 }
 133 |             ],
 134 |             "combination": [],
 135 |             "sequence": [],
 136 |             "register": []
 137 |         },
 138 |         {
 139 |             "crime": "Query data from URI (SMS, CALLLOGS)",
 140 |             "score": 1,
 141 |             "weight": 0.25,
 142 |             "confidence": "60%",
 143 |             "permissions": [],
 144 |             "native_api": [
 145 |                 {
 146 |                     "class": "Landroid/net/Uri;",
 147 |                     "method": "parse"
 148 |                 },
 149 |                 {
 150 |                     "class": "Landroid/content/ContentResolver;",
 151 |                     "method": "query"
 152 |                 }
 153 |             ],
 154 |             "combination": [
 155 |                 {
 156 |                     "class": "Landroid/net/Uri;",
 157 |                     "method": "parse",
 158 |                     "descriptor": "(Ljava/lang/String;)Landroid/net/Uri;"
 159 |                 },
 160 |                 {
 161 |                     "class": "Landroid/content/ContentResolver;",
 162 |                     "method": "query",
 163 |                     "descriptor": "(Landroid/net/Uri; [Ljava/lang/String; Ljava/lang/String; [Ljava/lang/String; Ljava/lang/String;)Landroid/database/Cursor;"
 164 |                 }
 165 |             ],
 166 |             "sequence": [],
 167 |             "register": []
 168 |         },
 169 |         {
 170 |             "crime": "Read data and put it into a buffer stream",
 171 |             "score": 1,
 172 |             "weight": 0.125,
 173 |             "confidence": "40%",
 174 |             "permissions": [],
 175 |             "native_api": [
 176 |                 {
 177 |                     "class": "Ljava/io/BufferedInputStream;",
 178 |                     "method": "<init>"
 179 |                 }
 180 |             ],
 181 |             "combination": [],
 182 |             "sequence": [],
 183 |             "register": []
 184 |         },
 185 |         {
 186 |             "crime": "Read file and put it into a stream",
 187 |             "score": 1,
 188 |             "weight": 0.125,
 189 |             "confidence": "40%",
 190 |             "permissions": [],
 191 |             "native_api": [
 192 |                 {
 193 |                     "class": "Ljava/io/File;",
 194 |                     "method": "<init>"
 195 |                 }
 196 |             ],
 197 |             "combination": [],
 198 |             "sequence": [],
 199 |             "register": []
 200 |         },
 201 |         {
 202 |             "crime": "Read file into a stream and put it into a JSON object",
 203 |             "score": 1,
 204 |             "weight": 0.0625,
 205 |             "confidence": "20%",
 206 |             "permissions": [],
 207 |             "native_api": [],
 208 |             "combination": [],
 209 |             "sequence": [],
 210 |             "register": []
 211 |         },
 212 |         {
 213 |             "crime": "Put buffer stream (data) to JSON object",
 214 |             "score": 1,
 215 |             "weight": 0.125,
 216 |             "confidence": "40%",
 217 |             "permissions": [],
 218 |             "native_api": [
 219 |                 {
 220 |                     "class": "Ljava/io/BufferedInputStream;",
 221 |                     "method": "read"
 222 |                 }
 223 |             ],
 224 |             "combination": [],
 225 |             "sequence": [],
 226 |             "register": []
 227 |         },
 228 |         {
 229 |             "crime": "Get location info of the device and put it to JSON object",
 230 |             "score": 1,
 231 |             "weight": 0.0625,
 232 |             "confidence": "20%",
 233 |             "permissions": [],
 234 |             "native_api": [],
 235 |             "combination": [],
 236 |             "sequence": [],
 237 |             "register": []
 238 |         },
 239 |         {
 240 |             "crime": "Get Location of the device and append this info to a string",
 241 |             "score": 1,
 242 |             "weight": 0.0625,
 243 |             "confidence": "20%",
 244 |             "permissions": [],
 245 |             "native_api": [],
 246 |             "combination": [],
 247 |             "sequence": [],
 248 |             "register": []
 249 |         },
 250 |         {
 251 |             "crime": "Get JSON object prepared and fill in location info",
 252 |             "score": 1,
 253 |             "weight": 0.0625,
 254 |             "confidence": "20%",
 255 |             "permissions": [],
 256 |             "native_api": [],
 257 |             "combination": [],
 258 |             "sequence": [],
 259 |             "register": []
 260 |         },
 261 |         {
 262 |             "crime": "Find a method from given class name, usually for reflection",
 263 |             "score": 1,
 264 |             "weight": 0.125,
 265 |             "confidence": "40%",
 266 |             "permissions": [],
 267 |             "native_api": [
 268 |                 {
 269 |                     "class": "Ljava/lang/Object;",
 270 |                     "method": "getClass"
 271 |                 }
 272 |             ],
 273 |             "combination": [],
 274 |             "sequence": [],
 275 |             "register": []
 276 |         },
 277 |         {
 278 |             "crime": "Get absolute path of the file and store in string",
 279 |             "score": 1,
 280 |             "weight": 1.0,
 281 |             "confidence": "100%",
 282 |             "permissions": [],
 283 |             "native_api": [
 284 |                 {
 285 |                     "class": "Ljava/io/File;",
 286 |                     "method": "getAbsolutePath"
 287 |                 },
 288 |                 {
 289 |                     "class": "Ljava/lang/StringBuilder;",
 290 |                     "method": "toString"
 291 |                 }
 292 |             ],
 293 |             "combination": [
 294 |                 {
 295 |                     "class": "Ljava/io/File;",
 296 |                     "method": "getAbsolutePath",
 297 |                     "descriptor": "()Ljava/lang/String;"
 298 |                 },
 299 |                 {
 300 |                     "class": "Ljava/lang/StringBuilder;",
 301 |                     "method": "toString",
 302 |                     "descriptor": "()Ljava/lang/String;"
 303 |                 }
 304 |             ],
 305 |             "sequence": [
 306 |                 {
 307 |                     "Lcom/ku6/android/videobrowser/download/HttpClients; downloadMusicFile (Ljava/lang/String; I)I": { 
 308 |                         "first": [
 309 |                             "invoke-virtual",
 310 |                             "v14",
 311 |                             "Ljava/io/File;->getAbsolutePath()Ljava/lang/String;"
 312 |                         ],
 313 |                         "second": [
 314 |                             "invoke-virtual",
 315 |                             "v13",
 316 |                             "Ljava/lang/StringBuilder;->toString()Ljava/lang/String;"
 317 |                         ]
 318 |                     }
 319 |                 }
 320 |             ],
 321 |             "register": [
 322 |                 {
 323 |                     "Lcom/ku6/android/videobrowser/download/HttpClients; downloadMusicFile (Ljava/lang/String; I)I": {
 324 |                         "first": [
 325 |                             "invoke-virtual",
 326 |                             "v14",
 327 |                             "Ljava/io/File;->getAbsolutePath()Ljava/lang/String;"
 328 |                         ],
 329 |                         "second": [
 330 |                             "invoke-virtual",
 331 |                             "v13",
 332 |                             "Ljava/lang/StringBuilder;->toString()Ljava/lang/String;"
 333 |                         ]
 334 |                     }
 335 |                 }
 336 |             ]
 337 |         },
 338 |         {
 339 |             "crime": "Load additional DEX files dynamically",
 340 |             "score": 1,
 341 |             "weight": 0.125,
 342 |             "confidence": "40%",
 343 |             "permissions": [],
 344 |             "native_api": [
 345 |                 {
 346 |                     "class": "Ljava/io/File;",
 347 |                     "method": "getAbsolutePath"
 348 |                 }
 349 |             ],
 350 |             "combination": [],
 351 |             "sequence": [],
 352 |             "register": []
 353 |         },
 354 |         {
 355 |             "crime": "Open a file from given absolute path of the file",
 356 |             "score": 1,
 357 |             "weight": 0.25,
 358 |             "confidence": "60%",
 359 |             "permissions": [],
 360 |             "native_api": [
 361 |                 {
 362 |                     "class": "Ljava/io/File;",
 363 |                     "method": "getAbsolutePath"
 364 |                 },
 365 |                 {
 366 |                     "class": "Ljava/io/File;",
 367 |                     "method": "<init>"
 368 |                 }
 369 |             ],
 370 |             "combination": [
 371 |                 {
 372 |                     "class": "Ljava/io/File;",
 373 |                     "method": "getAbsolutePath",
 374 |                     "descriptor": "()Ljava/lang/String;"
 375 |                 },
 376 |                 {
 377 |                     "class": "Ljava/io/File;",
 378 |                     "method": "<init>",
 379 |                     "descriptor": "(Ljava/lang/String;)V"
 380 |                 }
 381 |             ],
 382 |             "sequence": [],
 383 |             "register": []
 384 |         },
 385 |         {
 386 |             "crime": "Start another application from current application",
 387 |             "score": 1,
 388 |             "weight": 0.125,
 389 |             "confidence": "40%",
 390 |             "permissions": [],
 391 |             "native_api": [
 392 |                 {
 393 |                     "class": "Landroid/content/Context;",
 394 |                     "method": "startActivity"
 395 |                 }
 396 |             ],
 397 |             "combination": [],
 398 |             "sequence": [],
 399 |             "register": []
 400 |         },
 401 |         {
 402 |             "crime": "Write file after Base64 decoding",
 403 |             "score": 1,
 404 |             "weight": 0.0625,
 405 |             "confidence": "20%",
 406 |             "permissions": [],
 407 |             "native_api": [],
 408 |             "combination": [],
 409 |             "sequence": [],
 410 |             "register": []
 411 |         },
 412 |         {
 413 |             "crime": "Monitor the broadcast action events (BOOT_COMPLETED)",
 414 |             "score": 1,
 415 |             "weight": 1.0,
 416 |             "confidence": "100%",
 417 |             "permissions": [],
 418 |             "native_api": [
 419 |                 {
 420 |                     "class": "Landroid/content/Intent;",
 421 |                     "method": "getAction"
 422 |                 },
 423 |                 {
 424 |                     "class": "Ljava/lang/String;",
 425 |                     "method": "equals"
 426 |                 }
 427 |             ],
 428 |             "combination": [
 429 |                 {
 430 |                     "class": "Landroid/content/Intent;",
 431 |                     "method": "getAction",
 432 |                     "descriptor": "()Ljava/lang/String;"
 433 |                 },
 434 |                 {
 435 |                     "class": "Ljava/lang/String;",
 436 |                     "method": "equals",
 437 |                     "descriptor": "(Ljava/lang/Object;)Z"
 438 |                 }
 439 |             ],
 440 |             "sequence": [
 441 |                 {
 442 |                     "Lcom/ku6/android/videobrowser/network/NetEventReceive; onReceive (Landroid/content/Context; Landroid/content/Intent;)V": {
 443 |                         "first": [
 444 |                             "invoke-virtual",
 445 |                             "v5",
 446 |                             "Landroid/content/Intent;->getAction()Ljava/lang/String;"
 447 |                         ],
 448 |                         "second": [
 449 |                             "invoke-virtual",
 450 |                             "v0",
 451 |                             "v1",
 452 |                             "Ljava/lang/String;->equals(Ljava/lang/Object;)Z"
 453 |                         ]
 454 |                     }
 455 |                 },
 456 |                 {
 457 |                     "Lcom/ku6/android/videobrowser/sms/BootReceiver; onReceive (Landroid/content/Context; Landroid/content/Intent;)V": {
 458 |                         "first": [
 459 |                             "invoke-virtual",
 460 |                             "v9",
 461 |                             "Landroid/content/Intent;->getAction()Ljava/lang/String;"
 462 |                         ],
 463 |                         "second": [
 464 |                             "invoke-virtual",
 465 |                             "v1",
 466 |                             "v2",
 467 |                             "Ljava/lang/String;->equals(Ljava/lang/Object;)Z"
 468 |                         ]
 469 |                     }
 470 |                 }
 471 |             ],
 472 |             "register": [
 473 |                 {
 474 |                     "Lcom/ku6/android/videobrowser/network/NetEventReceive; onReceive (Landroid/content/Context; Landroid/content/Intent;)V": {
 475 |                         "first": [
 476 |                             "invoke-virtual",
 477 |                             "v5",
 478 |                             "Landroid/content/Intent;->getAction()Ljava/lang/String;"
 479 |                         ],
 480 |                         "second": [
 481 |                             "invoke-virtual",
 482 |                             "v0",
 483 |                             "v1",
 484 |                             "Ljava/lang/String;->equals(Ljava/lang/Object;)Z"
 485 |                         ]
 486 |                     }
 487 |                 },
 488 |                 {
 489 |                     "Lcom/ku6/android/videobrowser/sms/BootReceiver; onReceive (Landroid/content/Context; Landroid/content/Intent;)V": {
 490 |                         "first": [
 491 |                             "invoke-virtual",
 492 |                             "v9",
 493 |                             "Landroid/content/Intent;->getAction()Ljava/lang/String;"
 494 |                         ],
 495 |                         "second": [
 496 |                             "invoke-virtual",
 497 |                             "v1",
 498 |                             "v2",
 499 |                             "Ljava/lang/String;->equals(Ljava/lang/Object;)Z"
 500 |                         ]
 501 |                     }
 502 |                 }
 503 |             ]
 504 |         },
 505 |         {
 506 |             "crime": "Method reflection",
 507 |             "score": 1,
 508 |             "weight": 0.0625,
 509 |             "confidence": "20%",
 510 |             "permissions": [],
 511 |             "native_api": [],
 512 |             "combination": [],
 513 |             "sequence": [],
 514 |             "register": []
 515 |         },
 516 |         {
 517 |             "crime": "Get specific method from other Dex files",
 518 |             "score": 1,
 519 |             "weight": 0.0625,
 520 |             "confidence": "20%",
 521 |             "permissions": [],
 522 |             "native_api": [],
 523 |             "combination": [],
 524 |             "sequence": [],
 525 |             "register": []
 526 |         },
 527 |         {
 528 |             "crime": "Read file from assets directory",
 529 |             "score": 1,
 530 |             "weight": 0.125,
 531 |             "confidence": "40%",
 532 |             "permissions": [],
 533 |             "native_api": [
 534 |                 {
 535 |                     "class": "Ljava/io/InputStream;",
 536 |                     "method": "read"
 537 |                 }
 538 |             ],
 539 |             "combination": [],
 540 |             "sequence": [],
 541 |             "register": []
 542 |         },
 543 |         {
 544 |             "crime": "Initialize class object dynamically",
 545 |             "score": 1,
 546 |             "weight": 0.0625,
 547 |             "confidence": "20%",
 548 |             "permissions": [],
 549 |             "native_api": [],
 550 |             "combination": [],
 551 |             "sequence": [],
 552 |             "register": []
 553 |         },
 554 |         {
 555 |             "crime": "Connect to the remote server through the given URL",
 556 |             "score": 1,
 557 |             "weight": 0.0625,
 558 |             "confidence": "20%",
 559 |             "permissions": [],
 560 |             "native_api": [],
 561 |             "combination": [],
 562 |             "sequence": [],
 563 |             "register": []
 564 |         },
 565 |         {
 566 |             "crime": "Check the list of currently running applications",
 567 |             "score": 1,
 568 |             "weight": 0.0625,
 569 |             "confidence": "20%",
 570 |             "permissions": [],
 571 |             "native_api": [],
 572 |             "combination": [],
 573 |             "sequence": [],
 574 |             "register": []
 575 |         },
 576 |         {
 577 |             "crime": "Load external class",
 578 |             "score": 1,
 579 |             "weight": 0.0625,
 580 |             "confidence": "20%",
 581 |             "permissions": [],
 582 |             "native_api": [],
 583 |             "combination": [],
 584 |             "sequence": [],
 585 |             "register": []
 586 |         },
 587 |         {
 588 |             "crime": "Query the IMEI number",
 589 |             "score": 1,
 590 |             "weight": 0.125,
 591 |             "confidence": "40%",
 592 |             "permissions": [],
 593 |             "native_api": [
 594 |                 {
 595 |                     "class": "Landroid/content/Context;",
 596 |                     "method": "getSystemService"
 597 |                 }
 598 |             ],
 599 |             "combination": [],
 600 |             "sequence": [],
 601 |             "register": []
 602 |         },
 603 |         {
 604 |             "crime": "Query the current data network type",
 605 |             "score": 1,
 606 |             "weight": 0.125,
 607 |             "confidence": "40%",
 608 |             "permissions": [],
 609 |             "native_api": [
 610 |                 {
 611 |                     "class": "Landroid/content/Context;",
 612 |                     "method": "getSystemService"
 613 |                 }
 614 |             ],
 615 |             "combination": [],
 616 |             "sequence": [],
 617 |             "register": []
 618 |         },
 619 |         {
 620 |             "crime": "Query the list of the installed packages",
 621 |             "score": 1,
 622 |             "weight": 0.0625,
 623 |             "confidence": "20%",
 624 |             "permissions": [],
 625 |             "native_api": [],
 626 |             "combination": [],
 627 |             "sequence": [],
 628 |             "register": []
 629 |         },
 630 |         {
 631 |             "crime": "Get resource file from res/raw directory",
 632 |             "score": 1,
 633 |             "weight": 0.125,
 634 |             "confidence": "40%",
 635 |             "permissions": [],
 636 |             "native_api": [
 637 |                 {
 638 |                     "class": "Landroid/net/Uri;",
 639 |                     "method": "parse"
 640 |                 }
 641 |             ],
 642 |             "combination": [],
 643 |             "sequence": [],
 644 |             "register": []
 645 |         },
 646 |         {
 647 |             "crime": "Send notification",
 648 |             "score": 1,
 649 |             "weight": 0.125,
 650 |             "confidence": "40%",
 651 |             "permissions": [],
 652 |             "native_api": [
 653 |                 {
 654 |                     "class": "Landroid/app/NotificationManager;",
 655 |                     "method": "notify"
 656 |                 }
 657 |             ],
 658 |             "combination": [],
 659 |             "sequence": [],
 660 |             "register": []
 661 |         },
 662 |         {
 663 |             "crime": "Query the phone number",
 664 |             "score": 1,
 665 |             "weight": 0.125,
 666 |             "confidence": "40%",
 667 |             "permissions": [],
 668 |             "native_api": [
 669 |                 {
 670 |                     "class": "Landroid/content/Context;",
 671 |                     "method": "getSystemService"
 672 |                 }
 673 |             ],
 674 |             "combination": [],
 675 |             "sequence": [],
 676 |             "register": []
 677 |         },
 678 |         {
 679 |             "crime": "Start a web server",
 680 |             "score": 1,
 681 |             "weight": 0.0625,
 682 |             "confidence": "20%",
 683 |             "permissions": [],
 684 |             "native_api": [],
 685 |             "combination": [],
 686 |             "sequence": [],
 687 |             "register": []
 688 |         },
 689 |         {
 690 |             "crime": "Send SMS",
 691 |             "score": 1,
 692 |             "weight": 0.0625,
 693 |             "confidence": "20%",
 694 |             "permissions": [],
 695 |             "native_api": [],
 696 |             "combination": [],
 697 |             "sequence": [],
 698 |             "register": []
 699 |         },
 700 |         {
 701 |             "crime": "Save recorded audio/video to file",
 702 |             "score": 1,
 703 |             "weight": 0.0625,
 704 |             "confidence": "20%",
 705 |             "permissions": [],
 706 |             "native_api": [],
 707 |             "combination": [],
 708 |             "sequence": [],
 709 |             "register": []
 710 |         },
 711 |         {
 712 |             "crime": "Query WiFi BSSID and scan results",
 713 |             "score": 1,
 714 |             "weight": 0.0625,
 715 |             "confidence": "20%",
 716 |             "permissions": [],
 717 |             "native_api": [],
 718 |             "combination": [],
 719 |             "sequence": [],
 720 |             "register": []
 721 |         },
 722 |         {
 723 |             "crime": "Calculate WiFi signal strength",
 724 |             "score": 1,
 725 |             "weight": 0.0625,
 726 |             "confidence": "20%",
 727 |             "permissions": [],
 728 |             "native_api": [],
 729 |             "combination": [],
 730 |             "sequence": [],
 731 |             "register": []
 732 |         },
 733 |         {
 734 |             "crime": "Query the last time this package's activity was used",
 735 |             "score": 1,
 736 |             "weight": 0.0625,
 737 |             "confidence": "20%",
 738 |             "permissions": [],
 739 |             "native_api": [],
 740 |             "combination": [],
 741 |             "sequence": [],
 742 |             "register": []
 743 |         },
 744 |         {
 745 |             "crime": "Query the name of currently running application",
 746 |             "score": 1,
 747 |             "weight": 0.0625,
 748 |             "confidence": "20%",
 749 |             "permissions": [],
 750 |             "native_api": [],
 751 |             "combination": [],
 752 |             "sequence": [],
 753 |             "register": []
 754 |         },
 755 |         {
 756 |             "crime": "Method reflection",
 757 |             "score": 1,
 758 |             "weight": 0.0625,
 759 |             "confidence": "20%",
 760 |             "permissions": [],
 761 |             "native_api": [],
 762 |             "combination": [],
 763 |             "sequence": [],
 764 |             "register": []
 765 |         },
 766 |         {
 767 |             "crime": "Query the local IP address",
 768 |             "score": 1,
 769 |             "weight": 0.0625,
 770 |             "confidence": "20%",
 771 |             "permissions": [],
 772 |             "native_api": [],
 773 |             "combination": [],
 774 |             "sequence": [],
 775 |             "register": []
 776 |         },
 777 |         {
 778 |             "crime": "Query the SMS contents",
 779 |             "score": 1,
 780 |             "weight": 0.0625,
 781 |             "confidence": "20%",
 782 |             "permissions": [],
 783 |             "native_api": [],
 784 |             "combination": [],
 785 |             "sequence": [],
 786 |             "register": []
 787 |         },
 788 |         {
 789 |             "crime": "Query the phone number from SMS sender",
 790 |             "score": 1,
 791 |             "weight": 0.0625,
 792 |             "confidence": "20%",
 793 |             "permissions": [],
 794 |             "native_api": [],
 795 |             "combination": [],
 796 |             "sequence": [],
 797 |             "register": []
 798 |         },
 799 |         {
 800 |             "crime": "Query the SMS service centre timestamp",
 801 |             "score": 1,
 802 |             "weight": 0.0625,
 803 |             "confidence": "20%",
 804 |             "permissions": [],
 805 |             "native_api": [],
 806 |             "combination": [],
 807 |             "sequence": [],
 808 |             "register": []
 809 |         },
 810 |         {
 811 |             "crime": "Implicit intent(view a web page, make a phone call, etc.)",
 812 |             "score": 1,
 813 |             "weight": 0.125,
 814 |             "confidence": "40%",
 815 |             "permissions": [],
 816 |             "native_api": [
 817 |                 {
 818 |                     "class": "Landroid/net/Uri;",
 819 |                     "method": "parse"
 820 |                 }
 821 |             ],
 822 |             "combination": [],
 823 |             "sequence": [],
 824 |             "register": []
 825 |         },
 826 |         {
 827 |             "crime": "Deletes media specified by a content URI(SMS, CALL_LOG, File, etc.)",
 828 |             "score": 1,
 829 |             "weight": 0.25,
 830 |             "confidence": "60%",
 831 |             "permissions": [],
 832 |             "native_api": [
 833 |                 {
 834 |                     "class": "Landroid/net/Uri;",
 835 |                     "method": "parse"
 836 |                 },
 837 |                 {
 838 |                     "class": "Landroid/content/ContentResolver;",
 839 |                     "method": "delete"
 840 |                 }
 841 |             ],
 842 |             "combination": [
 843 |                 {
 844 |                     "class": "Landroid/net/Uri;",
 845 |                     "method": "parse",
 846 |                     "descriptor": "(Ljava/lang/String;)Landroid/net/Uri;"
 847 |                 },
 848 |                 {
 849 |                     "class": "Landroid/content/ContentResolver;",
 850 |                     "method": "delete",
 851 |                     "descriptor": "(Landroid/net/Uri; Ljava/lang/String; [Ljava/lang/String;)I"
 852 |                 }
 853 |             ],
 854 |             "sequence": [],
 855 |             "register": []
 856 |         },
 857 |         {
 858 |             "crime": "Monitor data identified by a given content URI changes(SMS, MMS, etc.)",
 859 |             "score": 1,
 860 |             "weight": 1.0,
 861 |             "confidence": "100%",
 862 |             "permissions": [],
 863 |             "native_api": [
 864 |                 {
 865 |                     "class": "Landroid/net/Uri;",
 866 |                     "method": "parse"
 867 |                 },
 868 |                 {
 869 |                     "class": "Landroid/content/ContentResolver;",
 870 |                     "method": "registerContentObserver"
 871 |                 }
 872 |             ],
 873 |             "combination": [
 874 |                 {
 875 |                     "class": "Landroid/net/Uri;",
 876 |                     "method": "parse",
 877 |                     "descriptor": "(Ljava/lang/String;)Landroid/net/Uri;"
 878 |                 },
 879 |                 {
 880 |                     "class": "Landroid/content/ContentResolver;",
 881 |                     "method": "registerContentObserver",
 882 |                     "descriptor": "(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 883 |                 }
 884 |             ],
 885 |             "sequence": [
 886 |                 {
 887 |                     "Lcom/ku6/android/videobrowser/SplashActivity; onCreate (Landroid/os/Bundle;)V": {
 888 |                         "first": [
 889 |                             "invoke-static",
 890 |                             "v5",
 891 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 892 |                         ],
 893 |                         "second": [
 894 |                             "invoke-virtual",
 895 |                             "v4",
 896 |                             "v5",
 897 |                             "v9",
 898 |                             "v6",
 899 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 900 |                         ]
 901 |                     }
 902 |                 },
 903 |                 {
 904 |                     "Lcom/ku6/android/videobrowser/ChargeActivity$1; onClick (Landroid/view/View;)V": {
 905 |                         "first": [
 906 |                             "invoke-static",
 907 |                             "v5",
 908 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 909 |                         ],
 910 |                         "second": [
 911 |                             "invoke-virtual",
 912 |                             "v4",
 913 |                             "v5",
 914 |                             "v6",
 915 |                             "v7",
 916 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 917 |                         ]
 918 |                     }
 919 |                 },
 920 |                 {
 921 |                     "Lcom/ku6/android/videobrowser/sms/BootReceiver; onReceive (Landroid/content/Context; Landroid/content/Intent;)V": {
 922 |                         "first": [
 923 |                             "invoke-static",
 924 |                             "v2",
 925 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 926 |                         ],
 927 |                         "second": [
 928 |                             "invoke-virtual",
 929 |                             "v1",
 930 |                             "v2",
 931 |                             "v3",
 932 |                             "v4",
 933 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 934 |                         ]
 935 |                     }
 936 |                 },
 937 |                 {
 938 |                     "Lcom/ku6/android/videobrowser/sms/MessageService; onCreate ()V": {
 939 |                         "first": [
 940 |                             "invoke-static",
 941 |                             "v1",
 942 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 943 |                         ],
 944 |                         "second": [
 945 |                             "invoke-virtual",
 946 |                             "v0",
 947 |                             "v1",
 948 |                             "v2",
 949 |                             "v3",
 950 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 951 |                         ]
 952 |                     }
 953 |                 }
 954 |             ],
 955 |             "register": [
 956 |                 {
 957 |                     "Lcom/ku6/android/videobrowser/SplashActivity; onCreate (Landroid/os/Bundle;)V": {
 958 |                         "first": [
 959 |                             "invoke-static",
 960 |                             "v5",
 961 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 962 |                         ],
 963 |                         "second": [
 964 |                             "invoke-virtual",
 965 |                             "v4",
 966 |                             "v5",
 967 |                             "v9",
 968 |                             "v6",
 969 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 970 |                         ]
 971 |                     }
 972 |                 },
 973 |                 {
 974 |                     "Lcom/ku6/android/videobrowser/ChargeActivity$1; onClick (Landroid/view/View;)V": {
 975 |                         "first": [
 976 |                             "invoke-static",
 977 |                             "v5",
 978 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 979 |                         ],
 980 |                         "second": [
 981 |                             "invoke-virtual",
 982 |                             "v4",
 983 |                             "v5",
 984 |                             "v6",
 985 |                             "v7",
 986 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
 987 |                         ]
 988 |                     }
 989 |                 },
 990 |                 {
 991 |                     "Lcom/ku6/android/videobrowser/sms/BootReceiver; onReceive (Landroid/content/Context; Landroid/content/Intent;)V": {
 992 |                         "first": [
 993 |                             "invoke-static",
 994 |                             "v2",
 995 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
 996 |                         ],
 997 |                         "second": [
 998 |                             "invoke-virtual",
 999 |                             "v1",
1000 |                             "v2",
1001 |                             "v3",
1002 |                             "v4",
1003 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
1004 |                         ]
1005 |                     }
1006 |                 },
1007 |                 {
1008 |                     "Lcom/ku6/android/videobrowser/sms/MessageService; onCreate ()V": {
1009 |                         "first": [
1010 |                             "invoke-static",
1011 |                             "v1",
1012 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
1013 |                         ],
1014 |                         "second": [
1015 |                             "invoke-virtual",
1016 |                             "v0",
1017 |                             "v1",
1018 |                             "v2",
1019 |                             "v3",
1020 |                             "Landroid/content/ContentResolver;->registerContentObserver(Landroid/net/Uri; Z Landroid/database/ContentObserver;)V"
1021 |                         ]
1022 |                     }
1023 |                 }
1024 |             ]
1025 |         },
1026 |         {
1027 |             "crime": "Install other APKs from file",
1028 |             "score": 1,
1029 |             "weight": 1.0,
1030 |             "confidence": "100%",
1031 |             "permissions": [],
1032 |             "native_api": [
1033 |                 {
1034 |                     "class": "Landroid/net/Uri;",
1035 |                     "method": "fromFile"
1036 |                 },
1037 |                 {
1038 |                     "class": "Landroid/content/Intent;",
1039 |                     "method": "setDataAndType"
1040 |                 }
1041 |             ],
1042 |             "combination": [
1043 |                 {
1044 |                     "class": "Landroid/net/Uri;",
1045 |                     "method": "fromFile",
1046 |                     "descriptor": "(Ljava/io/File;)Landroid/net/Uri;"
1047 |                 },
1048 |                 {
1049 |                     "class": "Landroid/content/Intent;",
1050 |                     "method": "setDataAndType",
1051 |                     "descriptor": "(Landroid/net/Uri; Ljava/lang/String;)Landroid/content/Intent;"
1052 |                 }
1053 |             ],
1054 |             "sequence": [
1055 |                 {
1056 |                     "Lcom/ku6/android/videobrowser/SplashActivity; openFile (Ljava/io/File;)V": {
1057 |                         "first": [
1058 |                             "invoke-static",
1059 |                             "v4",
1060 |                             "Landroid/net/Uri;->fromFile(Ljava/io/File;)Landroid/net/Uri;"
1061 |                         ],
1062 |                         "second": [
1063 |                             "invoke-virtual",
1064 |                             "v0",
1065 |                             "v1",
1066 |                             "v2",
1067 |                             "Landroid/content/Intent;->setDataAndType(Landroid/net/Uri; Ljava/lang/String;)Landroid/content/Intent;"
1068 |                         ]
1069 |                     }
1070 |                 }
1071 |             ],
1072 |             "register": [
1073 |                 {
1074 |                     "Lcom/ku6/android/videobrowser/SplashActivity; openFile (Ljava/io/File;)V": {
1075 |                         "first": [
1076 |                             "invoke-static",
1077 |                             "v4",
1078 |                             "Landroid/net/Uri;->fromFile(Ljava/io/File;)Landroid/net/Uri;"
1079 |                         ],
1080 |                         "second": [
1081 |                             "invoke-virtual",
1082 |                             "v0",
1083 |                             "v1",
1084 |                             "v2",
1085 |                             "Landroid/content/Intent;->setDataAndType(Landroid/net/Uri; Ljava/lang/String;)Landroid/content/Intent;"
1086 |                         ]
1087 |                     }
1088 |                 }
1089 |             ]
1090 |         },
1091 |         {
1092 |             "crime": "Query the SMS content and the source of the phone number",
1093 |             "score": 1,
1094 |             "weight": 0.0625,
1095 |             "confidence": "20%",
1096 |             "permissions": [],
1097 |             "native_api": [],
1098 |             "combination": [],
1099 |             "sequence": [],
1100 |             "register": []
1101 |         },
1102 |         {
1103 |             "crime": "Modify voice volume",
1104 |             "score": 1,
1105 |             "weight": 0.0625,
1106 |             "confidence": "20%",
1107 |             "permissions": [],
1108 |             "native_api": [],
1109 |             "combination": [],
1110 |             "sequence": [],
1111 |             "register": []
1112 |         },
1113 |         {
1114 |             "crime": "Return the DHCP-assigned addresses from the last successful DHCP request",
1115 |             "score": 1,
1116 |             "weight": 0.125,
1117 |             "confidence": "40%",
1118 |             "permissions": [],
1119 |             "native_api": [
1120 |                 {
1121 |                     "class": "Ljava/lang/StringBuilder;",
1122 |                     "method": "toString"
1123 |                 }
1124 |             ],
1125 |             "combination": [],
1126 |             "sequence": [],
1127 |             "register": []
1128 |         },
1129 |         {
1130 |             "crime": "Connect to the specific WIFI network",
1131 |             "score": 1,
1132 |             "weight": 0.0625,
1133 |             "confidence": "20%",
1134 |             "permissions": [],
1135 |             "native_api": [],
1136 |             "combination": [],
1137 |             "sequence": [],
1138 |             "register": []
1139 |         },
1140 |         {
1141 |             "crime": "Query the SIM card status",
1142 |             "score": 1,
1143 |             "weight": 0.125,
1144 |             "confidence": "40%",
1145 |             "permissions": [],
1146 |             "native_api": [
1147 |                 {
1148 |                     "class": "Ljava/lang/Integer;",
1149 |                     "method": "intValue"
1150 |                 }
1151 |             ],
1152 |             "combination": [],
1153 |             "sequence": [],
1154 |             "register": []
1155 |         },
1156 |         {
1157 |             "crime": "Query the network operator name",
1158 |             "score": 1,
1159 |             "weight": 0.125,
1160 |             "confidence": "40%",
1161 |             "permissions": [],
1162 |             "native_api": [
1163 |                 {
1164 |                     "class": "Ljava/lang/Integer;",
1165 |                     "method": "valueOf"
1166 |                 }
1167 |             ],
1168 |             "combination": [],
1169 |             "sequence": [],
1170 |             "register": []
1171 |         },
1172 |         {
1173 |             "crime": "Return dynamic information about the current Wi-Fi connection",
1174 |             "score": 1,
1175 |             "weight": 0.125,
1176 |             "confidence": "40%",
1177 |             "permissions": [],
1178 |             "native_api": [
1179 |                 {
1180 |                     "class": "Ljava/lang/Integer;",
1181 |                     "method": "valueOf"
1182 |                 }
1183 |             ],
1184 |             "combination": [],
1185 |             "sequence": [],
1186 |             "register": []
1187 |         },
1188 |         {
1189 |             "crime": "Query WiFi information and WiFi Mac Address",
1190 |             "score": 1,
1191 |             "weight": 0.0625,
1192 |             "confidence": "20%",
1193 |             "permissions": [],
1194 |             "native_api": [],
1195 |             "combination": [],
1196 |             "sequence": [],
1197 |             "register": []
1198 |         },
1199 |         {
1200 |             "crime": "Implicit intent(view a web page, make a phone call, etc.)",
1201 |             "score": 1,
1202 |             "weight": 1.0,
1203 |             "confidence": "100%",
1204 |             "permissions": [],
1205 |             "native_api": [
1206 |                 {
1207 |                     "class": "Landroid/net/Uri;",
1208 |                     "method": "parse"
1209 |                 },
1210 |                 {
1211 |                     "class": "Landroid/content/Intent;",
1212 |                     "method": "<init>"
1213 |                 }
1214 |             ],
1215 |             "combination": [
1216 |                 {
1217 |                     "class": "Landroid/net/Uri;",
1218 |                     "method": "parse",
1219 |                     "descriptor": "(Ljava/lang/String;)Landroid/net/Uri;"
1220 |                 },
1221 |                 {
1222 |                     "class": "Landroid/content/Intent;",
1223 |                     "method": "<init>",
1224 |                     "descriptor": "(Ljava/lang/String; Landroid/net/Uri;)V"
1225 |                 }
1226 |             ],
1227 |             "sequence": [
1228 |                 {
1229 |                     "Lcom/ku6/android/videobrowser/VideodetailView$8; onClick (Landroid/content/DialogInterface; I)V": {
1230 |                         "first": [
1231 |                             "invoke-static",
1232 |                             "v4",
1233 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
1234 |                         ],
1235 |                         "second": [
1236 |                             "invoke-direct",
1237 |                             "v2",
1238 |                             "v4",
1239 |                             "v3",
1240 |                             "Landroid/content/Intent;-><init>(Ljava/lang/String; Landroid/net/Uri;)V"
1241 |                         ]
1242 |                     }
1243 |                 }
1244 |             ],
1245 |             "register": [
1246 |                 {
1247 |                     "Lcom/ku6/android/videobrowser/VideodetailView$8; onClick (Landroid/content/DialogInterface; I)V": {
1248 |                         "first": [
1249 |                             "invoke-static",
1250 |                             "v4",
1251 |                             "Landroid/net/Uri;->parse(Ljava/lang/String;)Landroid/net/Uri;"
1252 |                         ],
1253 |                         "second": [
1254 |                             "invoke-direct",
1255 |                             "v2",
1256 |                             "v4",
1257 |                             "v3",
1258 |                             "Landroid/content/Intent;-><init>(Ljava/lang/String; Landroid/net/Uri;)V"
1259 |                         ]
1260 |                     }
1261 |                 }
1262 |             ]
1263 |         },
1264 |         {
1265 |             "crime": "Monitor incoming call status",
1266 |             "score": 1,
1267 |             "weight": 0.125,
1268 |             "confidence": "40%",
1269 |             "permissions": [],
1270 |             "native_api": [
1271 |                 {
1272 |                     "class": "Landroid/content/Context;",
1273 |                     "method": "getSystemService"
1274 |                 }
1275 |             ],
1276 |             "combination": [],
1277 |             "sequence": [],
1278 |             "register": []
1279 |         },
1280 |         {
1281 |             "crime": "Get the country code of the SIM card provider",
1282 |             "score": 1,
1283 |             "weight": 0.125,
1284 |             "confidence": "40%",
1285 |             "permissions": [],
1286 |             "native_api": [
1287 |                 {
1288 |                     "class": "Landroid/content/Context;",
1289 |                     "method": "getSystemService"
1290 |                 }
1291 |             ],
1292 |             "combination": [],
1293 |             "sequence": [],
1294 |             "register": []
1295 |         },
1296 |         {
1297 |             "crime": "Query the ICCID number",
1298 |             "score": 1,
1299 |             "weight": 0.5,
1300 |             "confidence": "80%",
1301 |             "permissions": [],
1302 |             "native_api": [
1303 |                 {
1304 |                     "class": "Landroid/content/Context;",
1305 |                     "method": "getSystemService"
1306 |                 },
1307 |                 {
1308 |                     "class": "Landroid/telephony/TelephonyManager;",
1309 |                     "method": "getSimSerialNumber"
1310 |                 }
1311 |             ],
1312 |             "combination": [
1313 |                 {
1314 |                     "class": "Landroid/content/Context;",
1315 |                     "method": "getSystemService",
1316 |                     "descriptor": "(Ljava/lang/String;)Ljava/lang/Object;"
1317 |                 },
1318 |                 {
1319 |                     "class": "Landroid/telephony/TelephonyManager;",
1320 |                     "method": "getSimSerialNumber",
1321 |                     "descriptor": "()Ljava/lang/String;"
1322 |                 }
1323 |             ],
1324 |             "sequence": [
1325 |                 {
1326 |                     "Lcom/ku6/android/videobrowser/SplashActivity; onCreate (Landroid/os/Bundle;)V": {
1327 |                         "first": [
1328 |                             "invoke-static",
1329 |                             "v10",
1330 |                             "Lcom/ku6/android/videobrowser/network/Constants;->getProxy(Landroid/content/Context;)V"
1331 |                         ],
1332 |                         "second": [
1333 |                             "invoke-virtual",
1334 |                             "v3",
1335 |                             "Landroid/telephony/TelephonyManager;->getSimSerialNumber()Ljava/lang/String;"
1336 |                         ]
1337 |                     }
1338 |                 }
1339 |             ],
1340 |             "register": []
1341 |         },
1342 |         {
1343 |             "crime": "Query the IMSI number",
1344 |             "score": 1,
1345 |             "weight": 0.125,
1346 |             "confidence": "40%",
1347 |             "permissions": [],
1348 |             "native_api": [
1349 |                 {
1350 |                     "class": "Landroid/content/Context;",
1351 |                     "method": "getSystemService"
1352 |                 }
1353 |             ],
1354 |             "combination": [],
1355 |             "sequence": [],
1356 |             "register": []
1357 |         },
1358 |         {
1359 |             "crime": "Executes the specified string Linux command",
1360 |             "score": 1,
1361 |             "weight": 0.0625,
1362 |             "confidence": "20%",
1363 |             "permissions": [],
1364 |             "native_api": [],
1365 |             "combination": [],
1366 |             "sequence": [],
1367 |             "register": []
1368 |         },
1369 |         {
1370 |             "crime": "Run shell script programmably",
1371 |             "score": 1,
1372 |             "weight": 0.0625,
1373 |             "confidence": "20%",
1374 |             "permissions": [],
1375 |             "native_api": [],
1376 |             "combination": [],
1377 |             "sequence": [],
1378 |             "register": []
1379 |         }
1380 |     ]
1381 | }


--------------------------------------------------------------------------------