namespace X86Disassembler.X86.Handlers.Call; /// /// Handler for CALL r/m32 instruction (FF /2) /// public class CallRm32Handler : InstructionHandler { /// /// Initializes a new instance of the CallRm32Handler class /// /// The buffer containing the code to decode /// The instruction decoder that owns this handler /// The length of the buffer public CallRm32Handler(byte[] codeBuffer, InstructionDecoder decoder, int length) : base(codeBuffer, decoder, length) { } /// /// Checks if this handler can decode the given opcode /// /// The opcode to check /// True if this handler can decode the opcode public override bool CanHandle(byte opcode) { // CALL r/m32 is encoded as FF /2 if (opcode != 0xFF) { return false; } // Check if we have enough bytes to read the ModR/M byte if (!Decoder.CanReadByte()) { return false; } // Peek at the ModR/M byte without advancing the position byte modRM = CodeBuffer[Decoder.GetPosition()]; // Extract the reg field (bits 3-5) byte reg = (byte)((modRM & 0x38) >> 3); // CALL r/m32 is encoded as FF /2 (reg field = 2) return reg == 2; } /// /// Decodes a CALL r/m32 instruction /// /// The opcode of the instruction /// The instruction object to populate /// True if the instruction was successfully decoded public override bool Decode(byte opcode, Instruction instruction) { // Check if we have enough bytes for the ModR/M byte if (!Decoder.CanReadByte()) { return false; } // Read the ModR/M byte var (mod, reg, rm, destOperand) = ModRMDecoder.ReadModRM(); // Set the mnemonic instruction.Mnemonic = "call"; // For register operands, set the operand if (mod == 3) { // Register operand destOperand = ModRMDecoder.GetRegisterName(rm, 32); } instruction.Operands = destOperand; return true; } }