@Test
	public void testMOV_EAX_dword_RBPm4() throws Throwable {
		try (ToyDBTraceBuilder tb = new ToyDBTraceBuilder("Test", "x86:LE:64:default")) {
			TraceThread thread = initTrace(tb, """
					RIP = 0x00400000;
					RSP = 0x00110000;
					*:4 (0:8-4) = 0x12345678;
					""",
				List.of(
					"MOV EAX, dword ptr [RBP + -0x4]"));

			BytesTracePcodeEmulator emu = new BytesTracePcodeEmulator(tb.host, 0);
			PcodeThread<byte[]> emuThread = emu.newThread(thread.getPath());
			emuThread.stepInstruction();

			try (Transaction tx = tb.startTransaction()) {
				emu.writeDown(tb.host, 1, 1);
			}

			assertEquals(BigInteger.valueOf(0x12345678),
				TraceSleighUtils.evaluate("EAX", tb.trace, 1, thread, 0));
		}
	}
Test the read max boundary case

<p>
This happens very easily when RBP is uninitialized, as code commonly uses negative offsets
from RBP. The range will have upper endpoint {@code ULONG_MAX+1}, non-inclusive, which would
crash, instead requiring some special logic.
Ghidra/Debug/Framework-TraceModeling/src/test/java/ghidra/pcode/exec/trace/BytesTracePcodeEmulatorTest.java