namespace X86Disassembler.X86.Handlers; /// /// Handler for TEST EAX, imm32 instruction (0xA9) /// public class TestEaxImmHandler : InstructionHandler { /// /// Initializes a new instance of the TestEaxImmHandler class /// /// The buffer containing the code to decode /// The instruction decoder that owns this handler /// The length of the buffer public TestEaxImmHandler(byte[] codeBuffer, InstructionDecoder decoder, int length) : base(codeBuffer, decoder, length) { } /// /// Checks if this handler can decode the given opcode /// /// The opcode to check /// True if this handler can decode the opcode public override bool CanHandle(byte opcode) { return opcode == 0xA9; } /// /// Decodes a TEST EAX, imm32 instruction /// /// The opcode of the instruction /// The instruction object to populate /// True if the instruction was successfully decoded public override bool Decode(byte opcode, Instruction instruction) { // Set the mnemonic instruction.Mnemonic = "test"; int position = Decoder.GetPosition(); if (position + 3 >= Length) { return false; } // Read the immediate value - x86 is little-endian, so we need to read the bytes in the correct order byte b0 = CodeBuffer[position]; byte b1 = CodeBuffer[position + 1]; byte b2 = CodeBuffer[position + 2]; byte b3 = CodeBuffer[position + 3]; // Combine the bytes to form a 32-bit immediate value uint imm32 = (uint)(b0 | (b1 << 8) | (b2 << 16) | (b3 << 24)); Decoder.SetPosition(position + 4); // Set the operands instruction.Operands = $"eax, 0x{imm32:X8}"; return true; } }