/* Copyright (C) 2011-2015 de4dot@gmail.com This file is part of de4dot. de4dot is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. de4dot is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with de4dot. If not, see . */ using System; using System.Collections.Generic; using dnlib.DotNet; using dnlib.IO; using de4dot.blocks; using de4dot.blocks.cflow; namespace de4dot.code.deobfuscators.Confuser { public class DeobfuscatorInfo : DeobfuscatorInfoBase { public const string THE_NAME = "Confuser"; public const string THE_TYPE = "cr"; const string DEFAULT_REGEX = DeobfuscatorBase.DEFAULT_VALID_NAME_REGEX; BoolOption removeAntiDebug; BoolOption removeAntiDump; BoolOption decryptMainAsm; public DeobfuscatorInfo() : base(DEFAULT_REGEX) { removeAntiDebug = new BoolOption(null, MakeArgName("antidb"), "Remove anti debug code", true); removeAntiDump = new BoolOption(null, MakeArgName("antidump"), "Remove anti dump code", true); decryptMainAsm = new BoolOption(null, MakeArgName("decrypt-main"), "Decrypt main embedded assembly", true); } public override string Name { get { return THE_NAME; } } public override string Type { get { return THE_TYPE; } } public override IDeobfuscator CreateDeobfuscator() { return new Deobfuscator(new Deobfuscator.Options { ValidNameRegex = validNameRegex.Get(), RemoveAntiDebug = removeAntiDebug.Get(), RemoveAntiDump = removeAntiDump.Get(), DecryptMainAsm = decryptMainAsm.Get(), }); } protected override IEnumerable