0
mirror of https://github.com/sampletext32/ParkanPlayground.git synced 2025-05-19 20:01:17 +03:00

57 lines
1.9 KiB
C#
Raw Normal View History

namespace X86Disassembler.X86.Handlers.Mov;
/// <summary>
/// Handler for MOV moffs32, EAX instruction (0xA3) and MOV moffs8, AL instruction (0xA2)
/// </summary>
public class MovMoffsEaxHandler : InstructionHandler
{
/// <summary>
/// Initializes a new instance of the MovMoffsEaxHandler class
/// </summary>
/// <param name="codeBuffer">The buffer containing the code to decode</param>
/// <param name="decoder">The instruction decoder that owns this handler</param>
/// <param name="length">The length of the buffer</param>
2025-04-13 23:06:52 +03:00
public MovMoffsEaxHandler(byte[] codeBuffer, InstructionDecoder decoder, int length)
: base(codeBuffer, decoder, length)
{
}
2025-04-13 23:06:52 +03:00
/// <summary>
/// Checks if this handler can decode the given opcode
/// </summary>
/// <param name="opcode">The opcode to check</param>
/// <returns>True if this handler can decode the opcode</returns>
public override bool CanHandle(byte opcode)
{
return opcode == 0xA2 || opcode == 0xA3;
}
2025-04-13 23:06:52 +03:00
/// <summary>
/// Decodes a MOV moffs32, EAX or MOV moffs8, AL instruction
/// </summary>
/// <param name="opcode">The opcode of the instruction</param>
/// <param name="instruction">The instruction object to populate</param>
/// <returns>True if the instruction was successfully decoded</returns>
public override bool Decode(byte opcode, Instruction instruction)
{
// Set the mnemonic
instruction.Mnemonic = "mov";
2025-04-13 23:06:52 +03:00
// Get the operand size and register name
2025-04-13 23:06:52 +03:00
int operandSize = opcode == 0xA2 ? 8 : 32;
string regName = ModRMDecoder.GetRegisterName(RegisterIndex.A, operandSize);
// Read the memory offset
uint offset = Decoder.ReadUInt32();
if (Decoder.GetPosition() > Length)
{
return false;
}
2025-04-13 23:06:52 +03:00
// Set the operands
instruction.Operands = $"[0x{offset:X}], {regName}";
2025-04-13 23:06:52 +03:00
return true;
}
2025-04-13 23:06:52 +03:00
}