de4dot-cex/de4dot.code/deobfuscators/ConfuserEx/x86/Instructions/X86MOV.cs

35 lines
1.2 KiB
C#

using System.Collections.Generic;
using de4dot.Bea;
using de4dot.code.deobfuscators.ConfuserEx.x86;
namespace ConfuserDeobfuscator.Engine.Routines.Ex.x86.Instructions
{
internal class X86MOV : X86Instruction
{
public X86MOV(Disasm rawInstruction) : base()
{
Operands = new IX86Operand[2];
Operands[0] = GetOperand(rawInstruction.Argument1);
Operands[1] = GetOperand(rawInstruction.Argument2);
}
public override X86OpCode OpCode
{
get { return X86OpCode.MOV; }
}
public override void Execute(Dictionary<string, int> registers, Stack<int> localStack)
{
if (Operands[1] is X86ImmediateOperand)
registers[((X86RegisterOperand) Operands[0]).Register.ToString()] =
(Operands[1] as X86ImmediateOperand).Immediate;
else
{
var regOperand = (X86RegisterOperand) Operands[0];
registers[regOperand.Register.ToString()] =
registers[(Operands[1] as X86RegisterOperand).Register.ToString()];
}
}
}
}