main.cpp

#include <finddecryptor/reader.h>
#include "detectSimilar.h"
#include "timer.h"
#include <iostream>
#include <fstream>
#include <string>
#include <cstring>
#include <stdlib.h>
#include <algorithm>

#define BLOCK_SIZE 1500u
#define OVERLAP 100u

using namespace std;

int main(int argc, char** argv)
{
	TimerAnalyzer::start(TimeTotal);
	int type = 1;
	if (argc >= 4)
		type = atoi(argv[3]);
	DetectSimilar ds((DetectSimilar::AnalyzerType)(type), DetectSimilar::AnalyzerFlagBrute, (argc >= 5) ? atoi(argv[4]) : 0);
	TimerAnalyzer::start(TimeLoadShellcodes);
	if (argv[2][strlen(argv[2])-1] == '/')
	{
		ds.loadShellcodes(argv[2]);
	} 
	else 
	{
		if (!ds.loadModel(argv[2]))
		{
			cerr << "Error: could not load model." << endl;
			return 0;
		}
	}
	TimerAnalyzer::stop(TimeLoadShellcodes);
	TimerAnalyzer::start(TimeLoad);
	Reader reader;
	reader.load(argv[1]);
	TimerAnalyzer::stop(TimeLoad);
	/*
	ds.link(reader.pointer(), reader.size());
	string ans = ds.analyze();
    */
	string ans;
	for (int data_start = 0, i = 0; data_start < reader.size(); data_start += BLOCK_SIZE - OVERLAP, i++)
	{
		if (i % 10)
			cout << 100 * (float) data_start / reader.size() << "% processed" << endl;

		ds.link(reader.pointer() + data_start, min(reader.size() - data_start, BLOCK_SIZE));
		string my_ans = ds.analyze();
		if (!my_ans.empty()) {
			ans = my_ans;
			break;
		}
	}
   
	if (!ans.empty())
	{
		cout << ans << endl;
	}
	else
	{
		cout << "Not an attack" << endl;
	}

    TimerAnalyzer::stop(TimeTotal);
	cerr << "Total time: " << TimerAnalyzer::secs(TimeTotal) << endl;
	cerr << "Time spent on loading shellcodes: " << TimerAnalyzer::secs(TimeLoadShellcodes) << endl;
	cerr << "Time spent on loading data to analyze: " << TimerAnalyzer::secs(TimeLoad) << endl;

	return 0;
}