namespace X86Disassembler.X86.Handlers.Or; /// /// Handler for OR EAX, imm32 instruction (0x0D) /// public class OrEaxImmHandler : InstructionHandler { /// /// Initializes a new instance of the OrEaxImmHandler class /// /// The buffer containing the code to decode /// The instruction decoder that owns this handler /// The length of the buffer public OrEaxImmHandler(byte[] codeBuffer, InstructionDecoder decoder, int length) : base(codeBuffer, decoder, length) { } /// /// Checks if this handler can decode the given opcode /// /// The opcode to check /// True if this handler can decode the opcode public override bool CanHandle(byte opcode) { return opcode == 0x0D; } /// /// Decodes an OR EAX, imm32 instruction /// /// The opcode of the instruction /// The instruction object to populate /// True if the instruction was successfully decoded public override bool Decode(byte opcode, Instruction instruction) { int position = Decoder.GetPosition(); if (position + 3 >= Length) { return false; } // Read the immediate dword (little-endian) byte b0 = CodeBuffer[position++]; byte b1 = CodeBuffer[position++]; byte b2 = CodeBuffer[position++]; byte b3 = CodeBuffer[position++]; uint imm32 = (uint)(b0 | (b1 << 8) | (b2 << 16) | (b3 << 24)); Decoder.SetPosition(position); // Set the mnemonic instruction.Mnemonic = "or"; // Set the operands instruction.Operands = $"eax, 0x{imm32:X8}"; return true; } }