j*ddlZddlZddlZdZdZdS)Nc|d}|ddks |ddkr|d}|d}n|d}|d}|d}|d}d}|d} || |z|z|z|dkr||} | } d } n&|d kr-||} tj| d } d } n||kr||} | } d } n|} ||} tjd }|| } |jr|js|jrtdd} nY#t$rL}tj |||||} | } d } Yd}~nd}~wwxYw| | fS)aP Extracts a single file from the apk_file based on the information provided from the offset and the header_info. It takes into account that the compression method provided might not be STORED or DEFLATED! The returned 'indicator', shows what compression method was used. Besides the standard STORED/DEFLATE it may return 'DEFLATED_TAMPERED', which means that the compression method found was not DEFLATED(8) but it should have been, and 'STORED_TAMPERED' which means that the compression method found was not STORED(0) but should have been. :param apk_file: The APK file e.g. with open('test.apk', 'rb') as apk_file :type apk_file: bytesIO :param local_header_info: The local header dictionary info for that specific filename :type local_header_info: dict :param central_directory_info: The central directory entry for that specific filename :type central_directory_info: dict :return: Returns the actual extracted data for that file along with an indication of whether a static analysis evasion technique was used or not. :rtype: set(bytes, str) file_name_lengthcompressed_sizeruncompressed_sizeextra_field_lengthcompression_method$relative_offset_of_local_file_headerSTOREDiDEFLATEDSTORED_TAMPEREDzInvalid or non-pure deflateDEFLATED_TAMPEREDN) seekreadzlib decompresstell decompressobjeof unused_dataunconsumed_tail ValueError Exceptionloggingdebug)apk_filelocal_header_infocentral_directory_infofilename_lengthrrrrlocal_header_sizeoffsetuncompressed_dataextracted_data indicatorcompressed_datacur_locc_objes [/home/ubuntu/.hermes/hermes-agent/venv/lib/python3.11/site-packages/apkInspector/extract.py!extract_file_based_on_header_infor+s("((:;O*+q004EFY4Z^_4_4_01BC23FG+,=>-.AB*+?@*+?@ #$J KF MM&,,>ASSTTTQ$MM*;<<* q "--88#>> - - -"--(9::(% --// *&mmO<>N9 @ 1 @U5J @ !>???+II * * * M!    MM' " " "&mm,=>>O,N)IIIIII  * 9 $$sA$E(( F>2AF99F>c| tj|rtddStj|d|D]\}}|st ||||d}tj||}tjtj|dt|d5}| |dddn #1swxYwYdS#t$r} td| Yd} ~ d Sd} ~ wwxYw) a Extracts all files from an APK based on the entries detected in the central_directory_entries. :param apk_file: The APK file e.g. with open('test.apk', 'rb') as apk_file :type apk_file: bytesIO :param central_directory_entries: The dictionary with all the entries for the central directory :type central_directory_entries: dict :param local_header_entries: The dictionary with all the local header entries :type local_header_entries: dict :param output_dir: The output directory where to save the files. :type output_dir: str :return: Returns 0 if no errors, 1 if an exception and 2 if the output directory already exists :rtype: int z4Extraction aborted. Output directory already exists.T)exist_okrwbNzError extracting files: ) ospathexistsprintmakedirsitemsr+joindirnameopenwriter) rcentral_directory_entrieslocal_header_entries output_dirfilenamecd_header_infor$ output_path output_filer)s r*(extract_all_files_from_central_directoryrBDs 7>>* % %  H I I I1 J....(A(G(G(I(I 2 2 $Hn 2(rEsI ;%;%;%|(((((rD