OPCODE LIST Release 61 Last change 16jul00
------------------ OPCODE.LST ---------------------------- This is DOC 'bout undocument command and document command of any last processors. And 'bout some registers and Chips specific stuffs. ----------------------------------------------------------- (C) (P) Potemkin's Hackers Group 1994...1999 ----------------------------------------------------------- Revision 4.51 15 Oct 1999 ----------------------------------------------------------- Latest versions available on Web: http://www.chat.ru/~phg Our contact E-mail: avp@gdev.msk.ru ICQ UIN: 20570214 ------------------------------------------------------------ [New In revision 4.50] o AMD 3DNow! Extentions and Athlon CPU o Update CPUID features summary o Update OPCODE tables o Update CPU revisions
Table of Contents
A AAA AAD AAM ADD4S ADDPS ADDSS ANDNPS ANDPS
B BOUND BRKCS BRKEM BRKN BRKS BRKXA BSWAP BTCLR
C CALLN CLEAR1 CMOVcc CMP4S CMPPS CMPSS CMPXCHG8B CMPXCHG COMISS CPUID CVTPI2PS CVTPS2PI CVTSI2SS CVTSS2SI CVTTPS2PI CVTTSS2SI
D DIVPS DIVSS
E EMMS ESC EXT
F F4X4 FCMOVcc FCOMI FEMMS FINT FNDISI FNENI FNSTDW FNSTSG FPO2 FRICHOP FRINEAR FRINT2 FRSTPM FSBP0 FSBP1 FSBP2 FSETPM FXRSTOR FXSAVE
I IBTS ICEBP ICEBP ICERET INS INVD INVLPG
J JMPE
L LDMXCSR LOADALL LOADALL
M MASKMOVQ MAXPS MAXSS MINPS MINSS MOVAPS MOVD MOVHLPS MOVHPS MOVLHPS MOVLPS MOVMSKPS MOVNTPS MOVNTQ MOVQ MOVSPA MOVSPB MOVSS MOVUPS MULPS MULSS
N NOT1
O OIO ORPS
P PACKSSDW PACKSSWB PACKUSWB PADDB PADDD PADDSB PADDSIW PADDSW PADDUSB PADDUSW PADDW PAND PANDN PAVEB PAVGB PAVGUSB PAVGW PCMPEQB PCMPEQD PCMPEQW PCMPGTB PCMPGTD PCMPGTW PDISTIB PEXTRW PF2ID PF2IW PFACC PFADD PFCMPEQ PFCMPGE PFCMPGT PFMAX PFMIN PFMUL PFNACC PFPNACC PFRCP PFRCPIT1 PFRCPIT2 PFRSQIT1 PFRSQRT PFSUB PFSUBR PI2FD PI2FW PINSRW PMACHRIW PMADDWD PMAGW PMAXSW PMAXUB PMINSW PMINUB PMOVMSKB PMULHRIW PMULHRW PMULHRW PMULHUW PMULHW PMULLW PMVGEZB PMVLZB PMVNZB PMVZB POR PREFETCHxx PREFETCH PREFETCHW PSADBW PSHUFW PSLLD PSLLQ PSLLW PSRAD PSRAW PSRLD PSRLQ PSRLW PSUBB PSUBD PSUBSB PSUBSIW PSUBSW PSUBUSB PSUBUSW PSUBW PSWAPD PUNPCKHBW PUNPCKHDQ PUNPCKHWD PUNPCKLBW PUNPCKLDQ PUNPCKLWD PXOR
R RCPPS RCPSS RDMSR RDPMC RDSHR RDTSC REPC REPNC RES3 RES4 RETRBI RETXA ROL4 ROR4 RSDC RSLDT RSM RSM RSQRTPS RSQRTSS RSTS
S SET1 SETALC SFENCE SHUFPS SMI SMINT SQRTPS SQRTSS STMXCSR STOP SUB4S SUBPS SUBSS SVDC SVLDT SVTS SYSCALL SYSENTER SYSEXIT SYSRET
T TEST1 TSKSW
U UCOMISS UNPCKHPS UNPCKLPS UD UD2 UMOV
W WBINVD WRMSR WRSHR
X XADD XBTS XORPS
Appendix
APPENDIX A0:
APPENDIX A1:
APPENDIX A2:
APPENDIX A3:
APPENDIX A4:
APPENDIX A5:
APPENDIX A6:
APPENDIX B:
APPENDIX C0:
APPENDIX C1:
APPENDIX C2:
APPENDIX D0:
APPENDIX D1: INTEL 386/486SL REGISTERS
APPENDIX D2: NS486SXF REGISTERS
APPENDIX E:
APPENDIX F0: NON FP OPCODES
APPENDIX F1: FLOATING POINT OPCODES
APPENDIX F2: CPUs AND INSTRUCTION SET
APPENDIX G:
APPENDIX H:
APPENDIX I: FORMAT OF DEBUG CONTROL REGISTERS (DR6/DR7)
APPENDIX I: FORMAT OF DEBUG DATA REGISTERS (except DR0-DR5)
APPENDIX K: FORMAT OF CACHE TEST REGISTER (TR4/TR5/TR3)
APPENDIX L: FORMAT OF BTB TEST REGISTER (TR1/TR2)
APPENDIX K: FORMAT OF TLB TEST REGISTER (TR6/TR7)
APPENDIX N: EFLAGS register format
APPENDIX O: OLD CONTROL REGISTERS FORMAT (CR0-CR3)
APPENDIX P: CR4 register format
APPENDIX Q: TYPE OF INTEL'S SOCKETS
APPENDIX R: UNDEFINED FLAGS
APPENDIX S: FLOATING POINT REGISTERS FORMATS
APPENDIX T: FORMAT OF PAGE TABLES ENTRYES
APPENDIX U: FORMAT OF DESCRIPTORS
APPENDIX V: FORMAT OF TSS
APPENDIX W: Model Specific Registers List
APPENDIX X: SYSTEM MANAGMENT MODE (SMM)
APPENDIX Y0: Vendor Instruction Time for Intel 8088 CPU
APPENDIX Y1: Vendor Instruction Time for Intel i80186 CPU
APPENDIX Y2: Vendor Instruction Time for NEC V20 CPU
APPENDIX Y3: Vendor Instruction Time for Intel i286 CPU
APPENDIX Y4: Vendor Instruction Time for Intel i386DX CPU
APPENDIX Y5: Vendor Instruction Time for Intel i486DX CPU
APPENDIX Y6: Vendor Instruction Time for Cyrix Cx486DX CPU
APPENDIX Y7: Vendor Instruction Time for Intel Pentium Processor
APPENDIX Y8: Vendor Instruction Time for Cyrix Cx6x86 (M1) CPU
APPENDIX Z0: Execution time for Intel 8087 FPU
APPENDIX Z1: Execution time for Intel 80287 FPU
APPENDIX Z2: Execution time for Intel 80387 FPU
APPENDIX Z3: Execution time for Intel 387DX FPU
APPENDIX Z4: Execution time for IIT 3C87 FPU
APPENDIX Z5: Execution time for ULSI 83C87 FPU
APPENDIX Z6: Execution time for ULSI DX/DLC FPU
APPENDIX Z7: Execution time for C&T 38700 FPU
APPENDIX Z8: Execution time for Cyrix 387+ FPU
APPENDIX Z9: Execution time for Cyrix 83D87 FPU
APPENDIX Z10: Execution time for Intel RapidCAD FPU
APPENDIX Z11: Execution time for Intel i486 FPU
APPENDIX Z12: Execution time for Intel Pentium FPU
APPENDIX _A: PENTIUM PRO/PENTIUM II RISC-CORE INSTRUCTIONS INFO & TIMES
Top
CPU: 8086+
Type of Instruction: User
Instruction: AAA ; (no operands)
Description:
IF ((( AL and 0FH ) > 9 ) or (AF==1)
THEN {
IF CPU<286 THEN { AL <- AL+6 }
ELSE { AX <- AX+6 }
AH <- AH+1
CF <- 1
AF <- 1
} ELSE {
CF <- 0
AF <- 0
}
AL <- AL and 0Fh
Note: This istruction incorrectly documented in Intel's materials.
See description field.
Flags Affected: AF,CF (modified)
OF,SF,ZF,PF (undefined)
Faults:
RM PM V86 VME
None
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form:
COP (Code of Operation) : 37H
Clocks:
AAA
8086: 4
8088: 4
80186: 8
80286: 3
80386: 4
i486: 3
Pentium: 3
Cx486SLC: 4
Cx486DX: 4
IBM 486BL3X: 4
UMC U5S: 1
Top
CPU: 8086+ Type of Instruction: User Instruction: AAD basen Description: AL <- (AH*basen) + AL AH <- 0 Flags Affected: SF,ZF,PF (modified) OF,AF,CF (undefined) Faults: RM PM V86 VME SMM None CPU mode: RM,PM,VM,SMM Note: AAD without operands means AAD with operand 0AH. Note: NECs understand only AAD 0AH form. +++++++++++++++++++++++ Physical Form: AAD imm8 COP (Code of Operation) : D5H imm8 Clocks: AAD 0AH 8086: 60 80186: 15 80286: 14 80386: 19 i486: 14 Pentium: 10 Cx486SLC: 4 Cx486DX: 4 IBM 486BL3X: 15 UMC U5S: 11Top
CPU: 8086+ Type of Instruction: User Instruction: AAM basen Description: AH <- AL / basen AL <- AL MOD basen Flags Affected: SF,ZF,PF (modified) OF,AF,CF (undefined) Faults: RM PM V86 VME SMM None CPU mode: RM,PM,VM,SMM Note: AAM without operands means AAM with operand 0AH. WARNING: NECs understand only AAM 0Ah form. +++++++++++++++++++++++ Physical Form: AAM imm8 COP (Code of Operation) : D4H imm8 Clocks: AAM 0AH 8086: 83 80186: 19 80286: 16 80386: 17 i486: 15 Pentium: 18 Cx486SLC: 16 Cx486DX: 16 IBM 486BL3X: 17 UMC U5S: 12Top
CPU: all NECs V-series Type of Instruction: User Instruction: ADD4S Description: BCD STRING (ADDRESS=ES:DI,LENGTH=CL) <- BCD STRING (ADDRESS=DS:SI,LENGTH=CL) + BCD STRING (ADDRESS=ES:DI,LENGTH=CL); Note: si,di, other registers not changed Flags Affected: OF,CF,ZF ;; ZF set if both strings are zeros. ;; CF,OF set as result of operation with most ;; signification BCDs. CPU mode: RM +++++++++++++++++++++++ Physical Form: ADD4S COP (Code of Operation) : 0FH 20H Clocks: ADD4S NEC V20: ~19*(CL/2)+7Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: ADDPS dest,src Description: dest[<0>] = dest[<0>] + src[<0>]; dest[<1>] = dest[<1>] + src[<1>]; dest[<2>] = dest[<2>] + src[<2>]; dest[<3>] = dest[<3>] + src[<3>]; addition is F.P. <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: ADDPS xmm1,xmm2/m128 ---- 0F 58 /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: ADDSS dest,src Description: dest[<0>] = dest[<0>] + src[<0>]; addition is F.P. <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: ADDSS xmm1,xmm2/m32 ---- F3 0F 58 /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: ANDNPS dest,src Description: dest = NOT( dest AND src ); // Bitwize Physical Form and Timing: ANDNPS xmm1,xmm2/m128 ---- 0F 55 /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: ANDPS dest,src Description: dest = dest AND src; // Bitwize Physical Form and Timing: ANDPS xmm1,xmm2/m128 ---- 0F 54 /r ---- 2Top
CPU: 80186+,NECs
Type of Instruction: User - HLL support
Instruction: BOUND index,bound_array
Description:
IF (index < (opsize ptr [bound_array]))
OR
(index > (opsize ptr [bound_array+opsize]))
THEN INT 5;
Flags Affected: No Flags Affected
CPU mode: RM,PM,VM,SMM
Faults:
RM PM V86 VME SMM
#GP(0) if result is nonwritable seg.
#GP(0) illegal memory operand
in CS..GS (exc. SS)
#SS(0) illegal memory operand in SS
#PF #PF
#UD #UD #UD if 2nd operand is register
#13 if any part of operand lie
outside of 0..FFFFh
#AC #AC if CPL=3 and enable AC.
Note: (186s&NECs) saved CS:IP BOUND interrupt as pointer to following
instruction that self.
(286+) saved as pointer to BOUND instruction.
+++++++++++++++++++++++
Physical Form: BOUND reg16,mem32
BOUND reg32,mem64
COP (Code of Operation) : 62H Postbyte
Note: for 32bit op. add Pfix 66h if in 16bit mode
Clocks: BOUND reg16,mem16
In Range Out Range
80186: 33-35
80286: 13 int+13
80386: 10
i486: 7
Pentium: 8 int+32
Cx486SLC: 11 int+11
Cx486DX: 11 int+11
Top
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: BRKCS bank Description: Perform a High-Speed Software Interrupt with contex-switch to register bank indicated by the lower 3-bits of 'bank'. Info: NEC V25/V35/V25 Plus/V35 Plus Bank System This Chips have 8 32bytes register banks, which placed in Internal chip RAM by addresses: xxE00h..xxE1Fh Bank 0 xxE20h..xxE3Fh Bank 1 ......... xxEC0h..xxEDFh Bank 6 xxEE0h..xxEFFh Bank 7 xxF00h..xxFFFh Special Functions Register Where xx is Value of IDB register. IBD is Byte Register contained Internal data area base IBD addresses is FFFFFh and xxFFFh where xx is data in IBD. Format of Bank: +0 Reserved +2 Vector PC +4 Save PSW +6 Save PC +8 DS0 ;DS +A SS ;SS +C PS ;CS +E DS1 ;ES +10 IY ;DI +11 IX ;SI +14 BP ;BP +16 SP ;SP +18 BW ;BX +1A DW ;DX +1C CW ;CX +1E AW ;AX Format of V25 etc. PSW (FLAGS): Bit Description 15 1 14 RB2 \ 13 RB1 > Current Bank Number 12 RB0 / 11 V ;OF 10 DIR ;DF 9 IE ;IF 8 BRK ;TF 7 S ;SF 6 Z ;ZF 5 F1 General Purpose user flag #1 (accessed by Flag Special Function Register) 4 AC ;AF 3 F0 General purpose user flag #0 (accessed by Flag Special Function Register) 2 P ;PF 1 BRKI I/O Trap Enable Flag 0 CY ;CF Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: BRKCS reg16 COP (Code of Operation) : 0Fh 2Dh <1111 1RRR> Clocks: 15Top
CPU: NEC/Sony V20/V30/V40/V50 Type of Instruction: System Instruction: BRKEM intnum Description: PUSH FLAGS PUSH CS PUSH IP MOV CS,0:[intnum*4+2] MOV IP,0:[intnum*4] MD <- 0; // Enable 8080 emulation Note: BRKEM instruction do software interrupt and then New CS,IP loaded it switch to 8080 mode i.e. CPU will execute 8080 code. Mapping Table of Registers in 8080 Mode 8080 Md. A B C D E H L SP PC F native. AL CH CL DH DL BH BL BP IP FLAGS(low) For Return of 8080 mode use CALLN instruction. Note: I.e. 8080 addressing only 64KB then "Real Address" is CS*16+PC Flags Affected: MD CPU mode: RM +++++++++++++++++++++++ Physical Form: BRKEM imm8 COP (Code of Operation) : 0FH FFH imm8 Clocks: BRKEM imm8 NEC V20: 38Top
CPU: NEC (V25/V35) Software Guard only Type of Instruction: System Instruction: BRKN int_vector Description: [sp-1,sp-2] <- PSW ; PSW EQU FLAGS [sp-3,sp-4] <- PS ; PS EQU CS [sp-5,sp-6] <- PC ; PC EQU IP SP <- SP -6 IE <- 0 BRK <- 0 MD <- 1 PC <- [int_vector*4 +0,+1] PS <- [int_vector*4 +2,+3] Note: The BRKN instruction switches operations in Native Mode from Security Mode via Interrupt call. In Normal Mode Instruction executed as mPD70320/70322 (V25) operation mode. Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: BRKN imm8 COP (Code of Operation) : 63h imm8 Clocks: 56+10T [44+10T]Top
CPU: NEC (V25/V35) Software Guard only Type of Instruction: System Instruction: BRKS int_vector Description: [sp-1,sp-2] <- PSW ; PSW EQU FLAGS [sp-3,sp-4] <- PS ; PS EQU CS [sp-5,sp-6] <- PC ; PC EQU IP SP <- SP -6 IE <- 0 BRK <- 0 MD <- 0 PC <- [int_vector*4 +0,+1] PS <- [int_vector*4 +2,+3] Note: The BRKS instruction switches operations in Security Mode via Interrupt call. In Security Mode the fetched operation code is executed after conversion in accordance with build-in translation table Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: BRKS imm8 COP (Code of Operation) : F1h imm8 Clocks: 56+10T [44+10T]Top
CPU: NEC V33/V53 only Type of Instruction: System Instruction: BRKXA int_vector Description: [sp-1,sp-2] <- PSW ; PSW EQU FLAGS [sp-3,sp-4] <- PS ; PS EQU CS [sp-5,sp-6] <- PC ; PC EQU IP SP <- SP -6 IE <- 0 BRK <- 0 MD <- 0 PC <- [int_vector*4 +0,+1] PS <- [int_vector*4 +2,+3] Enter Expansion Address Mode. Note: In NEC V53 Memory Space dividing into 1024 16K pages. The programming model is Same as in Normal mode. Mechanism is: 20 bit Logical Address: 19..14 Page Num 13..0 Offset page Num convertin by internal table to 23..14 Page Base tHE pHYSICAL ADDRESS is both Base and Offset. Address Expansion Registers: logical Address A19..A14 I/O Address 0 FF00h 1 FF02h ... ... 63 FF7Eh Register XAM aliased with port # FF80h indicated current mode of operation. Format of XAM register (READ ONLY): 15..1 reserved 0 XA Flag, if=1 then in XA mode. Format of V53 PSW: 15..12 1 11 V 10 DIR 9 IE 8 BRK 7 S 6 Z 5 0 4 AC 3 0 2 P 1 1 0 CY Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: BRKXA imm8 COP (Code of Operation) : 0Fh E0h imm8 Clocks: 12Top
CPU: I486 + Type of Instruction: User Instruction: BSWAP dwordr Description: XCHG BYTE dwordr[31:24],dwordr[7:0] XCHG BYTE dwordr[23:16],dwordr[15:8] ; Need Good Picture to Show It Notes: This instruction used for converting big-endian (Intel) format to little-endian (Motorolla etc.) format. Flags Affected: None CPU mode: RM,PM,VM,SMM Physical Form: BSWAP r32 COP (Code of Operation): 0FH 11001rrr (For 32bit segment) Clocks: Cyrix Cx486SLC : 4 i486 : 1 Pentium : 1 Cyrix Cx486DX : 4 UMC U5S : 2 IBM 486BL3X : 9Top
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: User
Instruction: BTCLR var,bitnumber,Short_Label
Description:
IF BIT(bitnumber OF var) =1 THEN
{
PC <- PC + ext - disp8;
BIT(bitnumber OF var) <-0
}
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BTCLR reg/mem8,imm3, short_label
COP (Code of Operation) : 0Fh 9Ch PostByte imm3 Short_Label (Total=5 bytes)
Clocks: 29
Top
CPU: NEC/Sony V20/V30 etc Type of Instruction: System Instruction: CALLN intnum Description: CALLN instruction call (interrupt service in Native Mode) from 8080 emulation mode: PUSH FLAGS PUSH CS PUSH IP IF <- 0 TF <- 0 MD <- 1 MOV CS,0:[intnum*4+2] MOV IP,0:[intnum*4] Flags Affected: IF,TF,MD CPU mode: 8080 Emulation +++++++++++++++++++++++ Physical Form: CALLN imm8 COP (Code of Operation) : EDH EDH imm8 Clocks: NEC V20/V30: 38-58Top
CPU: NEC/Sony all V-series. Type of Instruction: User Instruction: CLEAR1 dest,bitnumb Description: BIT bitnumb OF dest <- 0; Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: CLEAR1 reg/mem8,CL COP (Code of Operation) : 0FH 12H Postbyte Physical Form: CLEAR1 reg/mem8,imm8 COP (Code of Operation) : 0FH 1AH Postbyte imm8 Physical Form: CLEAR1 reg/mem16,CL COP (Code of Operation) : 0FH 13H Postbyte Physical Form: CLEAR1 reg/mem16,imm8 COP (Code of Operation) : 0FH 1BH Postbyte imm8 Clocks: CLEAR1 r/m8,CL r/m8,i8 r/m16,CL r/m16,i8 NEC V20: 5/14 6/15 5/14 6/15Top
CPU: P6 Type of Instruction: User Instruction: CMOVcc dest,sorc Description: IF condition(cc) is true THEN dest <- sorc; Flags Affected: None CPU mode: RM,PM,VM,SMM +++++++++++++++++++++++ Physical Form & COPs: CMOVO reg,reg/mem 0FH 40H Postbyte CMOVNO reg,reg/mem 0FH 41H Postbyte CMOVC reg,reg/mem 0FH 42H Postbyte CMOVNC reg,reg/mem 0FH 43H Postbyte CMOVZ reg,reg/mem 0FH 44H Postbyte CMOVNZ reg,reg/mem 0FH 45H Postbyte CMOVNA reg,reg/mem 0FH 46H Postbyte CMOVA reg,reg/mem 0FH 47H Postbyte CMOVS reg,reg/mem 0FH 48H Postbyte CMOVNS reg,reg/mem 0FH 49H Postbyte CMOVP reg,reg/mem 0FH 4AH Postbyte CMOVNP reg,reg/mem 0FH 4BH Postbyte CMOVL reg,reg/mem 0FH 4CH Postbyte CMOVNL reg,reg/mem 0FH 4DH Postbyte CMOVNG reg,reg/mem 0FH 4EH Postbyte CMOVG reg,reg/mem 0FH 4FH Postbyte Clocks: ~1 (~pairing with other instructions)Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: CMP4S Description: SetFlaGS( BCD STRING (ADDRESS=ES:DI,LENGTH=CL) - BCD STRING (ADDRESS=DS:SI,LENGTH=CL) ); Note: si,di, other registers not changed Flags Affected: OF,CF,ZF ;; ZF set if RESULT of subtraction is zero. ;; CF,OF set as result of operation with most ;; signification BCDs. CPU mode: RM +++++++++++++++++++++++ Physical Form: CMP4S COP (Code of Operation) : 0FH 26H Clocks: CMP4S NEC V20: ~7+19*CLTop
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CMPPS dest,src,predicate Description: operation predicate EQ equal (dest == src) 0 LT less-than (dest < src) 1 LE less-equal (dest <= src) 2 UNORD unordered (dest ? src) 3 NEQ not-equal (dest <> src) 4 NLT not-less-that (dest => src) 5 NLE not-less-equal (dest > src) 6 ORD ordered !(dest ? src) 7 par for i = 0 to 3 do cmp<i> = dest[<i>] operation(predicate) src[<i>]; if cmp<i> = true then dest[<i>] = 0xffffffff; else dest[<i>] = 0x00000000; endif endfor endpar <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Note: Compilers may implement additional instructions: CMPEQPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,0 CMPLTPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,1 CMPLEPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,2 CMPUNORDPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,3 CMPNEQPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,4 CMPNLTPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,5 CMPNLEPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,6 CMPORDPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,7 Physical Form and Timing: CMPPS xmm1,xmm2/m128,imm8 ---- 0F C2 /r imm8 ---- 1-2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CMPSS dest,src,predicate Description: operation predicate EQ equal (dest == src) 0 LT less-than (dest < src) 1 LE less-equal (dest <= src) 2 UNORD unordered (dest ? src) 3 NEQ not-equal (dest <> src) 4 NLT not-less-that (dest => src) 5 NLE not-less-equal (dest > src) 6 ORD ordered !(dest ? src) 7 cmp = dest[<0>] operation(predicate) src[<0>]; if cmp = true then dest[<0>] = 0xffffffff; else dest[<0>] = 0x00000000; endif <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Note: Compilers may implement additional instructions: CMPEQSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,0 CMPLTSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,1 CMPLESS xmm1,xmm2 <=> CMPSS xmm1,xmm2,2 CMPUNORDSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,3 CMPNEQSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,4 CMPNLTSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,5 CMPNLESS xmm1,xmm2 <=> CMPSS xmm1,xmm2,6 CMPORDSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,7 Physical Form and Timing: CMPSS xmm1,xmm2/m128,imm8 ---- F3 0F C2 /r imm8 ---- 1-2Top
CPU: Pentium (tm), Pentium Pro(tm), AMD Am5k86
Type of Instruction: Operation
Instruction: CMPXCHG8B dest
Note: dest is memory operand: QWORD PTR [memory]
Description:
IF ( QWORD(EDX:EAX) = dest) THEN
{
ZF <- 1;
dest <- QWORD(ECX:EBX);
}
ELSE
{
ZF <- 0;
EDX:EAX <- dest
}
END
Flags Affected: ZF
CPU mode: RM,PM,VM,SMM
Physical Form: CMPXCHG8B mem64
COP (Code of Operation) : 0FH C7H Postbyte
Clocks: Pentium : 10
Note: Postbyte MMRRRMMM: MM<>11 if (==) then INT 6
Top
CPU: i486+
Type of Instruction: User
Instruction: CMPXCHG dest,sorc
Description:
Acc = if OperationSize(8) -> AL
OperationSize(16) -> AX
OperationSize(32) -> EAX
IF ( Acc = dest) THEN
{
ZF <- 1;
dest <- sorc;
}
ELSE
{
ZF <- 0;
Acc <- dest;
}
END
Note: This instruction used to support semaphores
Flags Affected: ZF ( see description)
OF,SF,AF,PF,CF ( like CMP instruction ) ( see description)
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form: CMPXCHG r/m8,r8
COP (Code of Operation) : 0FH A6H Postbyte ; i486 (A-B0 step)
: 0FH B0H Postbyte ; i486 (B1+ step clones
; and upgrades)
Clocks:
Intel i486 : 6/7 if compare OK
: 6/10 if compare FAIL
Cyrix Cx486SLC : 5/7
Pentium (tm) : 6
Penalty if cache miss :
Intel i486 : 2
Cyrix Cx486SLC : 1
+++++++++++++++++++++
Physical Form: CMPXCHG r/m16,r16
CMPXCHG r/m32,r32
COP (Code of Operation) : 0FH A7H Postbyte ; i486 (A-B0 step)
: 0FH B1H Postbyte ; i486 (B1+ step clones
; and upgrades)
Clocks:
Intel i486 : 6/7 if compare OK
: 6/10 if compare FAIL
Cyrix Cx486SLC : 5/7
Pentium (tm) : 6
Penalty if cache miss :
Intel i486 : 2
Cyrix Cx486SLC : 1
Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: COMISS dest,src Description: OF <- 0; SF <- 0; AF <- 0; if (dest[<0>] UNORD src[<0>]) then ZF <- 1; PF <- 1; CF <- 1; elif (dest[<0>] > src[<0>]) then ZF <- 0; PF <- 0; CF <- 0; elif (dest[<0>] < src[<0>]) then ZF <- 0; PF <- 0; CF <- 1; else ZF <- 1; PF <- 0; CF <- 0; endif <0> is 31..0 Physical Form and Timing: COMISS xmm1,xmm2/m32 ---- 0F 2F /r ---- ?Top
CPU: Intel 486DX/SX/DX2 SL Enhanced and all later
Intel processors include ( IntelDX4, IntelSX2,
Pentium etc.), UMC microprocessors: U5S,U5SD,U5S-VL.
Cyrix M1, AMD K5, Intel P6, and AMD Ehnanced Am486 CPU,
such as A80486DX4-100SV8B.
Note: i.e. 1993+ years processors produced by Intel
Note: To know if your CPU support CPUID instruction
try to set ID flag ( bit 21 of EFLAGS ) to 1, and
if it sets this mean that CPUID support.(Soft).
Or If Your CPU is Intel Look for '&E' signature on
Top side of Chip.(Hard)
Type of Instruction: Operation
Instruction: CPUID
Description:
IF (EAX=0) THEN // All
{
EAX <- Maximum value of EAX to CALL CPUID instruction
1 for all processors (date 1 September 1994)
may be >1 in future microprocessors
;; EBX,EDX and ECX contain a OEM name string
;; for Intel this string is 'GenuineIntel'
EBX <- 756E6547H i.e. 'Genu'
EDX <- 49656E69H i.e. 'ineI'
ECX <- 6C65746EH i.e. 'ntel'
;; for UMC this string is 'UMC UMC UMC '
EBX <- 20434D55H i.e. 'UMC '
EDX <- 20434D55H i.e. 'UMC '
ECX <- 20434D55H i.e. 'UMC '
;; for Cyrix this string is 'CyrixInstead' (Cx6x86,Cx5x86 steps B+)
;; for AMD this string is 'AuthenticAMD' (K6,K5,486 Enhanced CPUs)
;; for last NexGen is 'NexGenDriven' (Nx5x86 latest models)
;; for Centaur Technology is 'CentaurHauls' (IDT)
;; for Rise Technology is 'RiseRiseRise'
}
ELSEIF (EAX=1) THEN // All
{
EAX[3:0] <- Stepping ID
EAX[7:4] <- Model
EAX[11:8] <- Family
; 3 - 386 family
; 4 - i486 family
; 5 - Pentium family
; 6 - Pentium Pro family
EAX[15:12] <- Reserved
; 0 - Original OEM processor
; 1 - OverDrive
; 2 - Dual Processor
Note: Pentium P54C have pin CPUTYPE which
define is this CPU First or Second e.t.c
in System.
So, if this chip set in "First" socket it
return for example 0425h, but THIS chip
return 2425h if we insert it in "Second"
socket.
Note: Refer to Appendix B for more information.
EAX[31:16] <- Reserved and set to 0s now
Note: This value in EAX[31:0] is upper 32-bit of 96-bit processor
serial number.
EDX <- Compability flags
;; below all info if bit flag =1
EDX[0] <- FPU: FPU on Chip
EDX[1] <- VME: Virtual Mode Extention present
EDX[2] <- DE: Debbuging Extentions
EDX[3] <- PSE: CPU support 4MB size pages
EDX[4] <- TSC: TSC present (See RDTSC command)
EDX[5] <- MSR: CPU have Pentium Compatible MSRs
EDX[6] <- PAE: Physical Address Extension (Intel)
EDX[6] <- PTE: Support PTE (Cyrix)
When set in PTE TLB will not be flushed
when CR3 is written.
EDX[7] <- MCE: Machine Check exception
EDX[8] <- CX8: Support CMPXCHG8B instruction
EDX[9] <- APIC: Local APIC on Chip (Intel)
PGE: Page Global Extension (K5)
EDX[10]<- reserved
EDX[11]<- SEP: Fast System Call feature (Pentium Pro)
EDX[12]<- MTRR: CPU support Memory Type Range Register (MTRR)
EDX[13]<- PGE: Page Global Feature support
EDX[14]<- MCA: Machine Check Architecture
EDX[15]<- CMOV: CPU support CMOV instruction
EDX[16]<- PAT: Page Attribute Table
EDX[17]<- PSE36: CPU support 4MB Pages for access memory higher
that 2GB.
EDX[18]<- SN: CPU Support Processor Serial Number
EDX[22..19] <- Reserved
EDX[23] <- MMX: CPU support IA MMX
EDX[24] <- FXSR: CPU Support Fast Save/Restore (IA MMX-2)
EDX[25] <- SIMD: Streaming SIMD Extension (IA MMX-2)
EDX[31:26] <- Reserved and set to 0s now
}
ELSEIF (EAX=2)
{
AL = 1 (Pentium Pro, Pentium II)
remainder of EAX and EBX,ECX,EDX contain bytes which
described cache architecture on this chip.
Description of this bytes is:
Value Description
00h None
01h Instruction TLB, 4K page, 4way, 64 entry
02h Instruction TLB, 4M page, 4way, 4 entry
03h Data TLB, 4K page, 4way, 64 entry
04h Data TLB, 4M page, 4way, 8 entry
06h Instruction Cache, 8K, 4 way, 32 byte per line
08h Instruction Cache, 16K, 4 way, 32 byte per line
0Ah Data cache, 8K, 2 way, 32 byte per line
0Ch Data cache, 16K, 4 way, 32 byte per line
40h No L2 cache
41h Unifed L2 cache, 32 byte per line, 4 way, 128KB
42h Unifed L2 cache, 32 byte per line, 4 way, 256KB
43h Unifed L2 cache, 32 byte per line, 4 way, 512KB
44h Unifed L2 cache, 32 byte per line, 4 way, 1MB
45h Unifed L2 cache, 32 byte per line, 4 way, 2MB
(Cyrix MediaGX MMX Enhanced)
70h TLB 32-bit entry, 4 way, 4K cache
80h L1 cache 4-way associative, 16byte/line
}
ELSEIF (EAX = 3) // Pentium III
{
EDX:ECX <- Lower 64-bit of 96-bit processor serial number.
}
ELSEIF (EAX = 80000000h) // (K5 not SSA/5),K6, Cyrix GXm
{
EBX,ECX,EDX <- Undefined
EAX <- Largest Extended function value recognized by CPUID.
(Note: Extended CPUID functions started with 80000000h)
(Example: For AMD 5k86 (K5) = 80000005h )
}
ELSEIF (EAX = 80000001h) // K5,K6,Cyrix GXm,IDT Winchip 2
{
EAX <- AMD Processor Signature
0000051Xh - for AMD 5k86 (K5 not SSA/5)
0000066Xh - for AMD 6k86 (K6)
EBX,ECX <- Undefined
EDX <- Extended Feature Flags
EDX[0] <- FPU: FPU on Chip
EDX[1] <- VME: Virtual Mode Extention present
EDX[2] <- DE: Debbuging Extentions
EDX[3] <- PSE: CPU support 4MB size pages
EDX[4] <- TSC: TSC present (See RDTSC command)
EDX[5] <- MSR: CPU have K5 Compatible MSRs
or Cyrix Compatible MSRs
EDX[6] <- PAE: Page Address Extensions
EDX[7] <- MCE: Machine Check exception
EDX[8] <- CX8: Support CMPXCHG8B instruction
EDX[9] <- APIC: CPU have local APIC (must be enabled)
EDX[10] <- Reserved
EDX[11] <- SYSCALL and SYSRET Instructions (!)
EDX[12]<- MTRR: Memory Type Range Registers
EDX[13]<- Global Paging Extensions (PTE-PGE)
EDX[14]<- MCA: Machine Check Architecture
EDX[15]<- CMOV: CPU support CMOV instruction (!)
EDX[16]<- FCMOV: CPU support FP. FCMOV (!)
EDX[17]<- PSE: Page Size Extention
EDX[21..18] <- Reserved
EDX[22] <- MMXE: CPU Support Extended MMX instructions
(AMD Athlon)
EDX[23] <- MMX: CPU support IA MMX
EDX[24] <- (Cyrix) Cyrix Extended MMX support
EDX[24] <- (AMD) FXSAVE/FXRSTOR instruction support
EDX[29..24] <- Reserved
EDX[30] <- CPU support Extended 3DNow! Instructions
EDX[31] <- AMD 3DNow! support
;Note: For AMD K5 = 000021BFh
For AMD K6 = 008005BFh
}
ELSEIF (EAX = 80000002h,80000003h,80000004h) // AMD K5,K6, Cyrix GXm
{ // IDT Winchip 2
EAX, EBX, ECX ,EDX = CPU Name
// Note: for AMD K5 (Don't forget x86 is BIG-Endian!!)
// CPUID(EAX) EAX EBX ECX EDX
// 80000002h 2D444D41 7428354B 5020296D 65636F72
// AMD- K5(r m) P roce
// 80000003h 726F7373 00000000 00000000 00000000
// ssor
// 80000004h 00000000 00000000 00000000 00000000
}
ELSEIF (EAX = 80000005h) // AMD K5,K6,Cyrix GXm
{ // L1 TLB and Cache information
EAX <- TLB Information (for 2M/4M pages):
see format of EBX.
EBX <- TLB Information (for 4K pages):
EBX[31..24] <- Data TLB: Associativity
(if Full assocuiativity = FFh)
see CPUID 80000006h for more datails
EBX[23..16] <- Data TLB: Number of Entryes
EBX[15..8] <- Instruction TLB: Associativity
(if Full assocuiativity = FFh)
EBX[7..0] <- Instruction TLB: Number of Entryes
ECX <- L1 Data Cache Information
ECX[31..24] <- Size in KB
ECX[23..16] <- Associativity (if full = FFh)
ECX[15..8] <- Lines per Tag
ECX[7..0] <- Line size in Bytes
EDX <- L1 Instruction Cache Information
ECX[31..24] <- Size in KB
ECX[23..16] <- Associativity (if full = FFh)
ECX[15..8] <- Lines per Tag
ECX[7..0] <- Line size in Bytes
// Note: after execution CPUID with EAX = 80000005h
// reg AMD K5 AMD K6
// EBX 04800000 02800140
// ECX 08040120 20020220
// EDX 10040120 20020220
}
ELSE THEN (EAX = 80000006h) // K6-III model-9, AMD Athlon
{ // L2 cache and TLB information
EAX = 2M/4M Pages and L2 TLB Info
bits description
31..28 Associativity (L2 Data TLB)
0000 L2 off
0001 Direct Mapped
0010 2-Way
0100 4-Way
0110 8-Way
1000 16-Way
1111 Full
27..16 Number of Entries (L2 Data TLB)
15..12 Associativity (L2 Instruction or Unifed TLB)
11..0 Number of entries (L2 Instruction or Unifed TLB)
EBX = 4K Pages and L2 TLB Info
bits description
31..28 Associativity (L2 Data TLB)
27..16 Number of Entries (L2 Data TLB)
15..12 Associativity (L2 Instruction or Unifed TLB)
11..0 Number of entries (L2 Instruction or Unifed TLB)
ECX = L2 Unifed Cache Info (K6-III: only this field)
bits description
31..16 Size (KB)
15..12 Associativity
11..8 Lines per tag
7..0 Line size (bytes)
EDX = reserved
}
ELSE THEN
{
EAX,EBX,ECX,EDX <- Undefined
}
END.
------------------------------------------------------
Notes: In Tables Below, you may see that Your CPU return other features
values, so in this tables, values writed on maximal. So possibly
some features exists on Your CPU, but not activated in time You
test, so CPUID return less functions that processor really can
support
------------------------------------------------------
Table of STANDART Features (CPUID/EAX=1) by Different Vendors
Media
(Cyrix) 6x86 6x86L GX 6x86MX MII GXm
EDX[0] <- FPU: + + + + + +
EDX[1] <- VME: - - - - - -
EDX[2] <- DE: - + - + + -
EDX[3] <- PSE: - - - - - -
EDX[4] <- TSC: - - - + + +
EDX[5] <- MSR: - - - + + +
EDX[6] <- PAE: - - - - -
EDX[6] <- PTE: ?
EDX[7] <- MCE: - - - - - -
EDX[8] <- CX8: - + - + + +
EDX[9] <- APIC: - - - - -
EDX[10]<- res - - - - - -
EDX[11]<- SEP: - - - - - -
EDX[12]<- MTRR: - - - - - -
EDX[13]<- PGE: - - - + + -
EDX[14]<- MCA: - - - - - -
EDX[15]<- CMOV: - - - + + +
EDX[16]<- PAT: - - - - - -
EDX[17]<- PSE36:- - - - - -
EDX[18]<- SN: - - - - - -
EDX[23]<- MMX: - - - + + +
EDX[24]<- FXSR: - - - - - -
EDX[25]<- SIMD: - - - - - -
IDT IDT AMD AMD AMD AMD AMD
(IDT/AMD) C6 C2 K5 K6 K6-2 K6-III Athlon
EDX[0] <- FPU: + + + + + + +
EDX[1] <- VME: - - + + + + +
EDX[2] <- DE: + + + + + + +
EDX[3] <- PSE: - - + + + + +
EDX[4] <- TSC: + + + + + + +
EDX[5] <- MSR: + + + + + + +
EDX[6] <- PAE: - - - - - - +
EDX[7] <- MCE: + + + + + + +
EDX[8] <- CX8: + + + + + + +
EDX[9] <- APIC: - - - - - x
EDX[9] <- GPE +
EDX[10]<- res - - - - - - -
EDX[11]<- SEP: - - - - - - +
EDX[12]<- MTRR: - - - - - - +
EDX[13]<- PGE: - - - - - - +
EDX[14]<- MCA: - - - - - - +
EDX[15]<- CMOV: - - - - - - +
EDX[16]<- PAT: - - - - - - +
EDX[17]<- PSE36:- - - - - - -
EDX[18]<- SN: - - - - - - -
EDX[23]<- MMX: + + - + + + +
EDX[24]<- FXSR: - - - - - - -
EDX[25]<- SIMD: - - - - - - -
Pentium Pentium Pentium Pentium
(Intel) Pentium w/MMX Pro II III Celeron
EDX[0] <- FPU: + + + + + +
EDX[1] <- VME: + + + + + +
EDX[2] <- DE: + + + + + +
EDX[3] <- PSE: + + + + + +
-------------------------------------------------------
EDX[4] <- TSC: + + + + + +
EDX[5] <- MSR: + + + + + +
EDX[6] <- PAE: - - + + + +
EDX[7] <- MCE: + + + + + +
-------------------------------------------------------
EDX[8] <- CX8: + + + + + +
EDX[9] <- APIC: (1) (1) (1) (1) (1) (1)
EDX[10]<- res - - - - ? -
EDX[11]<- SEP: - - + + + +
-------------------------------------------------------
EDX[12]<- MTRR: - - + + + +
EDX[13]<- PGE: - - + + + +
EDX[14]<- MCA: - - + + + +
EDX[15]<- CMOV: - - + + + +
-------------------------------------------------------
EDX[16]<- PAT: - - - (2) + +
EDX[17]<- PSE36:- - - (2) + +
EDX[18]<- SN: - - - - + -
EDX[23]<- MMX: - + - + + +
EDX[24]<- FXSR: - - - (2) + +
EDX[25]<- SIMD: - - - - + -
(1) = Intel produce chips with APIC and w/o APIC.
(2) = It start to support since "Deschutes" core
SL_enh SL_enh WB_Enh Intel Pentium UMC AMD
i486SX DX/DX2 i486DX2 DX4 OVDR U5S 5x86
EDX[0] <- FPU: - + + + + - +
EDX[1] <- VME: + + + + + - -
EDX[2] <- DE: - - - - + - -
EDX[3] <- PSE: - - + + + - -
-------------------------------------------------------
EDX[4] <- TSC: - - - - + - -
EDX[5] <- MSR: - - - - + - -
EDX[6] <- PAE: - - - - - - -
EDX[7] <- MCE: - - - - - - -
-------------------------------------------------------
EDX[8] <- CX8: - - - - + - -
EDX[9] <- APIC: - - - - - - -
no need to look higher flags, theys is 0s.
------------------------------------------------------
Table of EXTENDED Features (CPUID/EAX=80000001) by Different
Vendors
Cyrix IDT IDT AMD AMD AMD AMD
GXm C6 C2 K6 K6-2 K6-III Athlon
EDX[0] <- FPU: + + + + + + +
EDX[1] <- VME: - - - + + + +
EDX[2] <- DE: - + + + + + +
EDX[3] <- PSE: - - - + + + +
EDX[4] <- TSC: + + + + + + +
EDX[5] <- MSR: + + + + + + +
EDX[6] <- PAE: - - - - - - +
EDX[7] <- MCE: - + + + + + +
EDX[8] <- CX8: + + + + + + +
EDX[9] <- APIC: - - - - - - *
EDX[10]<- res - - - + - - -
EDX[11]<- SCL - - - - + + +
EDX[12]<- MTRR - - - - - - +
EDX[13]<- GPE - - - - + + +
EDX[14]<- MCE - - - - - - +
EDX[15]<- CMOV + - - - - - +
EDX[16]<- PAT ? - - - - - +
EDX[17]<- PSE36 - - - - - - -
EDX[22]<- AMMX - - - - - - +
EDX[23]<- MMX + + + + + + +
EDX[24]<- EMMX + - - - - - -
EDX[30]<- E3D! - - - - - - +
EDX[31]<- 3D! - - + - + + +
Refer to: Appendix B for more informations about CPU codes.
Note: On IDT C6 CPU we may set any Identification string and family/model/
stepping info. (See MSRs 108h,109h for More Details).
Here is 3 examples of Information we can may get from CPUID instruction:
1) UMC U5S
Note: All UMC Chips: U5S,U5SD, 3V chips never have FPU on-chip,
and never support VME
Maximum Available of CPUID info entrys:1
Vendor string is : "UMC UMC UMC "
Model Info :
Stepping ID is : 3
Model : 2
Family : 4
M field : 0
Compability Flags:
FPU on Chip :-
Virtual Mode Extensions present :-
CPU support I/O breakpoints :-
CPU support 4MB pages :-
Time Stamp Counter Presents :-
CPU have Pentium compatible MSRs :-
Machine Check Exception Presents :-
CMPXCHG8B instruction support :-
APIC on Chip :-
2) Intel 486
Note: All SL Enhanced 486: { i486SX,i486DX,i486DX2 marked '&E' on chip
surface }, IntelSX2,IntelDX4 support VME !!!!
But: Sxs never have FPU on chip.
Maximum Available of CPUID info entrys:1
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 0
Model : 8
Family : 4
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :-
CPU support 4MB pages :-
Time Stamp Counter Presents :-
CPU have Pentium compatible MSRs :-
Machine Check Exception Presents :-
CMPXCHG8B instruction support :-
APIC on Chip :-
3) Pentium
Note: P54C may say that build-in APIC not present if it
not supported by external hardware !!!!! (This data from
P54C in single processor configuration)
Maximum Available of CPUID info entrys:1
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 1
Model : 2
Family : 5
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :+
CPU support 4MB pages :+
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
Machine Check Exception Presents :+
CMPXCHG8B instruction support :+
APIC on Chip :-
4) Pentium OverDrive
Note: P24T never have Machine Check Exception
Maximum Available of CPUID info entrys:1
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 1
Model : 3
Family : 5
M field : 1
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :+
CPU support 4MB pages :+
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
Machine Check Exception Presents :-
CMPXCHG8B instruction support :+
APIC on Chip :-
5) AMD Am5x86 (also AMD Enhanced 486).
Maximum Available of CPUID info entrys:1
Vendor string is : "AuthenticAMD"
Model Info :
Stepping ID is : 4
Model : 15
Family : 4
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :-
CPU support I/O breakpoints :-
CPU support 4MB pages :-
Time Stamp Counter Presents :-
CPU have Pentium compatible MSRs :-
P6 Flag: n/a :-
Machine Check Exception Presents :-
CMPXCHG8B instruction support :-
6) Pentium Pro (P6)
Maximum Available of CPUID info entrys:2 <<-------------- !!!!
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 1
Model : 1
Family : 6
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :+
CPU support 4MB pages :+
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
P6 Flag: n/a :+
Machine Check Exception Presents :+
CMPXCHG8B instruction support :+
APIC on Chip :+
Reserved :- ; bit 10
Fast System Call feature :+
Memory Type Range Regs. support :+
Page Global Feature support :+
Machine Check Architecture :+
CMOVxx instructions support :+
IA MMX support :+
7)
Maximum Available of CPUID info entrys:1
Vendor string is : "CyrixInstead"
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :-
CPU support I/O breakpoints :+
CPU support 4MB pages :-
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
P6 Flag: n/a :+
Machine Check Exception Presents :-
CMPXCHG8B instruction support :+
APIC on Chip :-
Reserved :-
Reserved :-
Memory Type Range Regs. support :-
Page Global Feature support :+
Machine Check Architecture :-
CMOVxx instructions support :+
IA MMX support :+
Note: Some Last NexGen Nx586 support CPUID instruction, but never support ID
flag in EFALGS, so check it with #UD hook.
Note: On Cyrix CPUs need to Enable CPUID instruction, setting CPUIDEN bit
in CCR4.
Note: Cyrix Cx6x86 return on CPUID(1) in EAX next data:
YYYYXXMMh - where
YYYY - normally 0s.
XX - value of control register 0FCh
(usually 05h, may be changed to any
other value by user).
MM - Model Unical Revision (according to DIR0)
Note: Cyrix 486s never support CPUID.
Flags Affected: None
CPU mode: RM,PM,VM,SMM
Physical Form: CPUID
COP (Code of Operation): 0FH A2H
Clocks: 486s & Pentium (EAX=1) : 14
486s & Pentium (EAX=0 or EAX>1) : 9
Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CVTPI2PS dest,src Description: dest[<0>] <- (float) src[<0>]; dest[<1>] <- (float) src[<1>]; <0> is 31..0 <1> is 63..32 Physical Form and Timing: CVTPI2PS xmm,mm/m64 ---- 0F 2A /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CVTPS2PI dest,src Description: dest[<0>] <- (int) src[<0>]; dest[<1>] <- (int) src[<1>]; src is in Single F.P. format <0> is 31..0 <1> is 63..32 Physical Form and Timing: CVTPS2PI mm,xmm/m64 ---- 0F 2D /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CVTSI2SS dest,src Description: dest[<0>] <- (float) src[<0>]; <0> is 31..0 Physical Form and Timing: CVTSI2SS xmm,r/m32 ---- F3 0F 2A /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CVTSS2SI dest,src Description: dest[<0>] <- (int) src[<0>]; src is in Single F.P. format <0> is 31..0 Physical Form and Timing: CVTSS2SI r32,xmm/m32 ---- F3 0F 2D /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CVTTPS2PI dest,src Description: dest[<0>] <- (int) src[<0>]; dest[<1>] <- (int) src[<1>]; <0> is 31..0 <1> is 63..32 Physical Form and Timing: CVTTPS2PI mm,xmm/m64 ---- 0F 2C /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: CVTTSS2SI dest,src Description: dest[<0>] <- (int) src[<0>] if conversion is unexact returning truncate value, if result > maximal 32-bit value, result will be 0x80000000 Physical Form and Timing: CVTTSS2SI r32,xmm/m32 ---- F3 0F 2C /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: DIVPS dest,src Description: dest[<0>] = dest[<0>] / src[<0>]; dest[<1>] = dest[<1>] / src[<1>]; dest[<2>] = dest[<2>] / src[<2>]; dest[<3>] = dest[<3>] / src[<3>]; Physical Form and Timing: DIVPS xmm1,xmm2/m128 ---- 0F 5E /r ---- 24-106Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: DIVSS dest,src Description: dest[<0>] = dest[<0>] / src[<0>]; Physical Form and Timing: DIVSS xmm1,xmm2/r32 ---- F3 0F 5E /r ---- 7-??Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: EMMS
Description:
FloatPointTagWord <- FFFFh
Note: The EMMS instruction sets the values of the floating-point (FP) tag
word to empty (all ones). EMMS marks the registers as available, so
they can subsequently be used by floating-point instructions.
If a floating-point instruction loads into one of the registers
before it has been reset by the EMMS instruction, a floating-point
stack overflow can occur, which results in a FP exception or incorrect
result. All other MMX instructions validate the entire FP tag word (all
zeros).
This instruction must be used to dear the MMX state at the end of all
MMX routines, and before calling other routines that may execute
floating-point instructions.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
EMMS 0FH 77H
P55C: n/a
future P6: n/a
Top
CPU: 8086...80386, any Hybrid 486.
Type of Instruction: User
Instruction: ESC Number,R/M
Description: This Instruction uses for Link with External Coprocessors
Such as NPX. External Coprocessors look at command sequence
at get ESC. CPU give Memory Operand sending to A-bus EA
doing pseudo-read operation.
{ If 2nd Operand is Register then Do Nothing,
If 2nd Operand is Memory then set EA (Effective Address)
in Address Bus }
First operand is Part of Command that Ext. coprocessors get.
Flags Affected: None
Example: ESC 0Fh,DX means FSQRT
Note: ESC mnemonic was used for 8086 CPU, later all were used alternative
mnemonic for cooprocessor instructions, such as FSQRT.
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form:
COP (Code of Operation) : <1101 1xxx> Postbyte
Clocks: ESC n,Reg ESC n,Mem8/Mem16
8088: 2 8/12+EA
286: 9-20 9-20
386: N/A N/A
486: N/A N/A
Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: EXT start,len Description: AX <- BitField [ BASE = DS:SI START BIT OFFSET = start LENGTH = len ]; Note: si and start automatically UPDATE Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form : EXT reg8,reg8 COP (Code of Operation) : 0FH 33H PostByte Clocks: EXT reg8,reg8 NEC V20: 26-55Top
FPU: IIT FPUs.
Type of Instruction: FPU instruction
Instruction: F4X4
Description:
; This Instruction Multiplicate vector on
; Matrix 4X4
_ _ _ _ _ _
| | | | | |
| Xn | | A00 A01 A02 A03 | | X0 |
| Yn | = | A10 A11 A12 A13 | X | Y0 |
| Zn | | A20 A21 A22 A23 | | Z0 |
| Wn | | A30 A31 A31 A33 | | W0 |
|_ _| |_ _| |_ _|
; Data fetches/stores from/to FPU registers:
# of F E T C H E S STORE
Register Bank0 Bank1 Bank2 Bank0
ST X0 A33 A31 Xn
ST(1) Y0 A23 A21 Yn
ST(2) Z0 A13 A11 Zn
ST(3) W0 A03 A01 Wn
ST(4) A32 A30
ST(5) A22 A20
ST(6) A12 A10
ST(7) A02 A00
Note: See FSBP0,FSBP1,FSBP2 for more information
FPU Flags Affected: S
FPU mode: Any
Physical Form: F4X4
COP (Code of Operation): DBH F1H
Clocks: IIT 2c87 : 242
IIT 3c87 : 242
IIT 3c87SX : 242
Top
CPU: P6 Type of Instruction: User Instruction: FCMOVcc dest,sorc Description: IF condition(cc) is true THEN dest <- sorc; Flags Affected: Int: None Fp : None Note: Testing Integer flags: cc Meaning Test Flags Description B Below CF=1 < NB Not Below CF=0 >= E Equal ZF=1 = NE Not Equal ZF=0 != BE Below Equal (CF=1 .OR. ZF=1) <= NBE Not BelowEqual (CF=0 .AND. ZF=0) > U Unordered PF=1 NU Not Unordered PF!=1 CPU mode: RM,PM,VM,SMM +++++++++++++++++++++++ Physical Form & COPs: FCMOVB ST,STi DA C0+i FCMOVE ST,STi DA C8+i FCMOVBE ST,STi DA D0+i FCMOVU ST,STi DA D8+i FCMOVNB ST,STi DB C0+i FCMOVNE ST,STi DB C8+i FCMOVNBE ST,STi DB D0+i FCMOVNU ST,STi DB D8+i Clocks: N/ATop
CPU: P6
Type of Instruction: User
Instruction: FuCOMIp ST0,STi
Description:
CASE ( result (compare(ST0,STi) ) OF
{ ; ZF PF CF
Not Comparable: 1 1 1
ST0 > STi : 0 0 0
ST0 < STi : 0 0 1
ST0 = STi : 1 0 0
}
CASE ( FP_stack_status ) OF
{ ; SF
Overflow : 1
Underflow : 0
Otherwize : 0
}
CASE ( instruction ) OF
{
FCOMI,FUCOMI : No FP stack adjustment;
FCOMIP,FUCOMIP : POP ST;
}
Flags Affected: Int: CF,ZF,PF,SF
Fp : None
Note: In any case Sign of zero Ignored , so +0.0 = -0.0
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form & COPs:
FCOMI ST0,STi DB F0+i
FCOMIP ST0,STi DF F0+i
FUCOMI ST0,STi DB E8+i
FUCOMIP ST0,STi DF E8+i
Clocks: N/A
Top
CPU: AMD-3D Type of Instruction: User Instruction: FEMMS (no operands) Description: Clear MMX state after MMX instructions. (FPU.TAG <- FFFFh). Faster version of EMMS. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: FEMMS 0FH 0EHTop
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: FINT Description: Inticate to Internal Interrupt controller that interrupt service Routine is completed. (EOI) Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: FINT COP (Code of Operation) : 0Fh 92h Clocks: 2Top
FPU: i8087 only Type of Instruction: FPU instruction Instruction: FNDISI Description: CW.IEM <- 1; // Enable NPX interrupt Note: IEM is 7 of FPU.CW FPU Flags Affected: None CPU mode: 8087 support just real mode Physical Form: FNDISI COP (Code of Operation): DBH E1H Clocks: i8087 5Top
FPU: i8087 only Type of Instruction: FPU instruction Instruction: FNENI Description: CW.IEM <- 0; // Enable NPX interrupt Note: IEM is 7 of FPU.CW FPU Flags Affected: None CPU mode: 8087 support just real mode Physical Form: FNENI COP (Code of Operation): DBH E0H Clocks: i8087 5Top
FPU: i387SL Mobile Type of Instruction: FPU instruction Instruction: FNSTDW dest Description: dest <- Device Word Format of Device word: bit(s) Description 0-7 Reserved 8 S - Status bit: if S=1 then FP device is a static design and OS or APM Bios may set CLK slow to 0 Mhz without lost any data. 9-15 Reserved Note: Device word register valid only after FNINIT FPU Flags Affected: None CPU mode: Any Physical Form: FNSTDW AX COP (Code of Operation): DFH E1H Clocks: i387SL Mobile: 13Top
FPU: i387SL Mobile Type of Instruction: FPU instruction Instruction: FNSTSG dest Description: dest <- Signature Word Format of Signature word: bit(s) Description 3-0 Revision 7-4 Steppin 11-8 Family 15-12 Version Note: For i387(tm) SL Mobile Signature is: Version = 2 Family = 3 ; 387 Stepping = 1 ; Ax step Revision = 0 ; x0 step i.e i387(tm) SL is A0 step Note: This FPU is out of life Note: Signature word register valid only after FNINIT FPU Flags Affected: None CPU mode: Any Physical Form: FNSTSG AX COP (Code of Operation): DFH E2H Clocks: i387SL Mobile: 13Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: FPO2 fp_op,mem Description: This instruction was building for sending FP commands to NEC NPX which never be realized Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form : FPO2 imm4,reg/mem COP (Code of Operation) : If imm4 in range 0-7 then 66H mmFFFMMM there FFF is imm4. If imm4 in range 7-F then 67H mmFFFMMM there FFF is imm4. Clocks: FPO2 imm4,reg/mem NEC V20: 2/11Top
FPU: Cyrix FPUs and 486s with FPU on chip Type of Instruction: FPU instruction Instruction: FRICHOP Description: ST <- ROUND ( ST,CHOP ) Note: This instruction calculate rounding ST toward zero i.e. ignoring part righter that decimal . Examples: 1.2 -> 1.0 -1.2 -> -1.0 3.0 -> 3.0 0.0 -> 0.0 1.5 -> 1.0 -2.0 -> -2.0 FPU Flags Affected: S,P,D,I,C1 FPU mode: Any Physical Form: FRICHOP COP (Code of Operation): DDH FCH Clocks: Cx83D87 : 15 Cx83S87 : 15 CxEMC87 : 15 Cx487DLC :Top
FPU: Cyrix FPUs and 486s with FPU on chip Type of Instruction: FPU instruction Instruction: FRINEAR Description: ST <- ROUND ( ST,NEAREST ) Note: This instruction calculate rounding ST toward nearest Examples: 1.2 -> 1.0 -1.2 -> -1.0 3.0 -> 3.0 0.0 -> 0.0 1.5 -> 1.0 1.8 -> 2.0 -2.0 -> -2.0 FPU Flags Affected: S,P,D,I,C1 FPU mode: Any Physical Form: FRINEAR COP (Code of Operation): DFH FCH Clocks: Cx83D87 : 15 Cx83S87 : 15 CxEMC87 : 15 Cx487DLC :Top
FPU: Cyrix FPUs and 486s with FPU on chip
Type of Instruction: FPU instruction
Instruction: FRINT2
Description:
IF ( exact half ) THEN
{
ST <- SIGN(ST) * ROUND(ABS(ST)+0.5,NEAREST)
}
ELSE
{
ST <- ROUND ( ST,NEAREST )
}
END
Note:
This instruction calculate rounding ST toward nearest,
but if number is exact half then this instruction round
it toward signed infinity. Sign of this infinity is same
with sign of number.
Examples:
1.2 -> 1.0
-1.2 -> -1.0
3.0 -> 3.0
0.0 -> 0.0
1.5 -> 2.0
1.8 -> 2.0
-2.0 -> -2.0
-1.5 -> -2.0
FPU Flags Affected: S,P,D,I,C1
FPU mode: Any
Physical Form: FRINT2
COP (Code of Operation): DBH FCH
Clocks: Cx83D87 : 15
Cx83S87 : 15
CxEMC87 : 15
Cx487DLC :
Top
FPU: i287XL i287XLT Type of Instruction: FPU instruction Instruction: FRSTPM Description: Reset Cooprocessor from Protected Mode to Real Address mode. FPU Flags Affected: None CPU mode:Any ??? Physical Form: FRSTPM COP (Code of Operation): DBH E5H Clocks: i287XL : 12 i287XLT : 12Top
FPU: IIT FPUs. Type of Instruction: FPU instruction Instruction: FSBP0 Description: ; This Instruction set current bank pointer to ; Bank # 0. ; Each bank contain eight 80bit registers ; There are 3 banks (0,1,2) in Chip ; After initialization FPU select bank # 0. FPU Flags Affected: None FPU mode: Any Physical Form: FSBP0 COP (Code of Operation): DBH E8H Clocks: IIT 2c87 : 6 IIT 3c87 : 6 IIT 3c87SX : 6Top
FPU: IIT FPUs. Type of Instruction: FPU instruction Instruction: FSBP1 Description: ; This Instruction set current bank pointer to ; Bank # 1. ; Each bank contain eight 80bit registers ; There are 3 banks (0,1,2) in Chip ; After initialization FPU select bank # 0. FPU Flags Affected: None FPU mode: Any Physical Form: FSBP1 COP (Code of Operation): DBH EBH Clocks: IIT 2c87 : 6 IIT 3c87 : 6 IIT 3c87SX : 6Top
FPU: IIT FPUs. Type of Instruction: FPU instruction Instruction: FSBP2 Description: ; This Instruction set current bank pointer to ; Bank # 2. ; Each bank contain eight 80bit registers ; There are 3 banks (0,1,2) in Chip ; After initialization FPU select bank # 0. FPU Flags Affected: None FPU mode: Any Physical Form: FSBP2 COP (Code of Operation): DBH EAH Clocks: IIT 2c87 : 6 IIT 3c87 : 6 IIT 3c87SX : 6Top
FPU: 80287, i287XL i287XLT Type of Instruction: FPU instruction Instruction: FRSTPM Description: Setup Coprocessor for addressing in Protected mode FPU Flags Affected: None CPU mode:Any ??? Physical Form: FSETPM COP (Code of Operation): DBH E4H Clocks: i287XL : 12 i287XLT : 12Top
CPU: Katmai/Deschutes (IA MMX-2) Type of Instruction: User Instruction: FXRSTOR src Description: Fast Restore 94 (16-bit mode) or 108 (32-bit mode) byte of F.P. context to memory. Format of context as in standart x86 instruction: FSAVE. Note: Check CPUID, EAX=1, bit 24 for knew CPU support this feature. And then look at CR4.bit9. Note: See FXSAVE for more information Flags Affected: None CPU mode: any +++++++++++++++++++++++ Physical Form & COPs: FXRSTOR mem512byte 0F AE mm001mmm Clocks: n/aTop
CPU: Pentium II (Deschutes) + Type of Instruction: User Instruction: FXSAVE dest Description: Fast Save 94 (16-bit mode) or 108 (32-bit mode) byte of F.P. context to memory. Format of context as in standart x86 instruction: FSAVE. Note: Check CPUID, EAX=1, bit 24 for knew CPU support this feature. And then look at CR4.bit9. Format of F.P./MMX Save Area: Offset (hex) Size Description +00 WORD FCW (Control word) +02 WORD FSW (Status word) +04 WORD FTW (Tag word) +06 WORD FOP (lower 11-bit F.P. opcode) +08 DWORD IP (F.P. Instruction pointer) +0C WORD CS +10 DWORD DP (F.P. Data pointer) +14 WORD DS +18 DWORD MXCSR (Pentium III+) see LDMXCSR instruction for more info +20 TBYTE ST0/MM0 +30 TBYTE ST1/MM1 +40 TBYTE ST2/MM2 +50 TBYTE ST3/MM3 +60 TBYTE ST4/MM4 +70 TBYTE ST5/MM5 +80 TBYTE ST6/MM6 +90 TBYTE ST7/MM7 +A0 16BYTE XMM0 (Pentium III+) +B0 16BYTE XMM1 (Pentium III+) +C0 16BYTE XMM2 (Pentium III+) +D0 16BYTE XMM3 (Pentium III+) +E0 16BYTE XMM4 (Pentium III+) +F0 16BYTE XMM5 (Pentium III+) +100 16BYTE XMM6 (Pentium III+) +110 16BYTE XMM7 (Pentium III+) All other fields are reserved. Full length of Save/Restore area is 512 byte. (200h) Flags Affected: None CPU mode: any +++++++++++++++++++++++ Physical Form & COPs: FXSAVE mem512byte 0F AE mm000mmm Clocks: n/aTop
CPU: 80386 step A0-B0 only Type of Instruction: User Instruction: IBTS base,bitoffset,len,sorc Description: Write bit string length <len> bits from <sorc> [bits <len> .. 0 ] (lowest bits) to bitfield, defined by <base> and bitsoffset <bitoffset> from this base to start of the field to write. String write from this start field bit to higher memory addresses or register bits. Flags Affected: None CPU mode: RM,PM,VM +++++++++++++++++++++++ Physical Form: IBTS r/m16,AX,CL,r16 IBTS r/m32,EAX,CL,r32 COP (Code of Operation) : 0FH A7H Postbyte Clocks: IBTS 80386: 12/19Top
CPU: IBM 486SLC2
Type of Instruction: System
Instruction: ICEBP
Description:
IF (condition) THEN ; see condition below
{
SAVE STATUS OF EXECUTION TO ICE space;
ENTER SMM;
}
ELSE
{
INT 1;
}
END
Note: This condition can be set before execution this instruction:
CPL=0
MSR1000H.EPCEA=1
MSR1000H.EPWI=1
See Appendix X for more info.
Flags Affected: None
CPU mode: RM,PM0
Physical Form: ICEBP
COP (Code of Operation): F1H
Clocks: IBM 486SLC2 : 460
Top
CPU: some models of i486, i386, Pentium, Pentium Pro
Type of Instruction: System
Instruction: ICEBP
Description:
IF (condition) THEN ; see condition below
{
CHANGED TO THE ICE instruction mode;
}
ELSE
{
INT 1;
}
END
Note: 386/486: Condition is DR7.bit12=1
(CPU must be supported ICE).
Note: This instruction very usefull to debbuging as Single-Byte Interrupt
but it generate never int 3, but int 1.
Note: On Pentium Interrupt redirection initiately disabled on PMCR
(Probe Mode Control Register), which is only accessable via debug port
i.e. Need external hardware for enable normal ICEBP execution.
Note: On Pentium Pro situation is the same.
But in Pentium Pro Intel named this instruction INT01.
Flags Affected: None
CPU mode: RM,PM0
Physical Form: ICEBP
COP (Code of Operation): F1H
Clocks: : N/A
Top
CPU: IBM 486SLC2 Type of Instruction: System Operation (Work only then CPL=0) Instruction: ICERET Description: Load All Registers (Include Shadow Registers) from Table Which Begin on place pointed ES:EDI, and return from PWI mode. Format of ICERET Table: Offset Len Description 0H 4 CR0 4H 4 EFLAGS 8H 4 EIP CH 4 EDI 10H 4 ESI 14H 4 EBP 18H 4 ESP 1CH 4 EBX 20H 4 EDX 24H 4 ESX 28H 4 EAX 2CH 4 DR6 30H 4 DR7 34H 4 TR (16 bit, zero filled up) 38H 4 LDT --------- 3CH 4 GS --------- 40H 4 FS --------- 44H 4 DS --------- 48H 4 SS --------- 4CH 4 CS --------- 50H 4 ES --------- 54H 4 TSS.attrib 58H 4 TSS.base 5CH 4 TSS.limit 60H 4 Reserved 64H 4 IDT.base 68H 4 IDT.limit 6CH 4 REP OUTS overrun flag 70H 4 GDT.base 74H 4 GDT.limit 78H 4 LDT.attrib 7CH 4 LDT.base 80H 4 LDT.limit 84H 4 GS.attrib 88H 4 GS.base 8CH 4 GS.limit 90H 4 FS.attrib 94H 4 FS.base 98H 4 FS.limit 9CH 4 DS.attrib A0H 4 DS.base A4H 4 DS.limit A8H 4 SS.attrib ACH 4 SS.base B0H 4 SS.limit B4H 4 CS.attrib B8H 4 CS.base BCH 4 CS.limit C0H 4 ES.attrib C4H 4 ES.base C8H 4 ES.limit Unknown Unusable area ;; Temporary registers: 100H 4 TST 104H 4 IDX 108H 4 TMPH 10CH 4 TMPG 110H 4 TMPF 114H 4 TMPE 118H 4 TMPD 11CH 4 TMPC 120H 4 TMPB 124H 4 TMPA 128H 4 CR2 12CH 4 CR3 130H 4 MSR1001H (31-0) 134H 4 MSR1001H (63-32) 138H 4 MSR1000H (15-0) 13CH 4 DR0 140H 4 DR1 144H 4 DR2 148H 4 DR3 14CH 4 PEIP Length of table is 150H bytes. see Appendix X for more info. Note: For descriptor format refer to LOADALL and RES3 instructions. Flags Affected: All (FLAGS Register Reload) CPU mode: SMM Physical Form: ICERET COP (Code of Operation): 0FH 07H Note: Code is same with Intel's LOADALL Clocks: IBM 486SLC2 : 440Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: INS start,len Description: BitField [ BASE = ES:DI START BIT OFFSET = start LENGTH = len ] <- AX [ bits= (len-1)..0] Note: di and start automatically UPDATE Note: Alternative Name of this instruction is NECINS Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form : INS reg8,reg8 COP (Code of Operation) : 0FH 31H PostByte Clocks: INS reg8,reg8 NEC V20: 31-117Top
CPU: I486 +
Type of Instruction: System
Instruction: INVD
Description:
FLUSH INTERNAL CACHE
( It means that all lines of internal caches sets as
invalid )
SIGNAL EXTERNAL CACHE TO FLUSH
Notes: This instruction not work in Real Mode and in
Protected mode work only in ring 0 ;
Flags Affected: None
CPU mode: PM0,SMM?
Physical Form: INVD
COP (Code of Operation): 0FH 08H
Clocks: Cyrix Cx486SLC : 4
i486 : 4
Pentium : 15
Top
CPU: I486 + Type of Instruction: System Instruction: INVLPG mem Description: IF found in data or code (if both) (or common if single) TLB entry with linear address (page part) same as memory operand <mem> then mark this entry as Invalid; Notes: This instruction not work in Real Mode and in Protected mode work only in ring 0 ; Flags Affected: None CPU mode: RM,PM,VM,SMM Physical Form: INVLPG mem COP (Code of Operation): 0FH 01H mm111mmm Clocks: Cyrix Cx486SLC : 4 i486 : 12 if hit : 11 if not hit Pentium : 25Top
CPU: Merced Type of Instruction: User Instruction: JMPX dest_addr Description: This instruction make jump to specified address, and change execution mode from IA-32 to IA-64. (So address must be 16-byte aligned). Note: The other method to cnange execution mode to IA-64 is interrupt to 64-bit code or IRET in IA-32 routine, which will be called from IA-64. back to IA-32 mode using commands: br.ia, rti and via interrupt. Flags Affected: None CPU mode: IA-32 Physical Form: JMPX rel16/rel32 0F B8 rel16/rel32 JMPX r/m(16/32) 0F 00 /6 COP (Code of Operation): Clocks: Merced :Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: LDMXCSR src Description: MXCSR <- src; Format of MXCSR: Bits Description 31..16 Reserved 15 FZ (Flush to Zero) 14..13 RC (Round Control) 00 Round to nearest (even) 01 Round down (to minius infinity) 10 Round up (to positive infinity) 11 Round toward zero (Truncate) 12 PM (SIMD numeric exception masks) 11 UM 10 OM 9 ZM 8 DM 7 IM 6 Reserved 5 PE (SIMD numeric exceptions) 4 UE 3 OE 2 ZE 1 DE 0 IE Physical Form and Timing: LDMXCSR m32 ---- 0F AE /2 ---- ??Top
CPU: Intel 386+ +all clones
Type of Instruction: System
(Work only then CPL=0)
Instruction: LOADALL
Description:
Load All Registers (Include Shadow Registers) from Table
Which Begin on place pointed ES:EDI
Format of LOADALL Table:
Offset Len Description
0H 4 CR0
4H 4 EFLAGS
8H 4 EIP
CH 4 EDI
10H 4 ESI
14H 4 EBP
18H 4 ESP
1CH 4 EBX
20H 4 EDX
24H 4 ESX
28H 4 EAX
2CH 4 DR6
30H 4 DR7
34H 4 TR (16 bit, zero filled up)
38H 4 LDT ---------
3CH 4 GS ---------
40H 4 FS ---------
44H 4 DS ---------
48H 4 SS ---------
4CH 4 CS ---------
50H 4 ES ---------
54H 4 TSS.attrib
58H 4 TSS.base
5CH 4 TSS.limit
60H 4 0s
64H 4 IDT.base
68H 4 IDT.limit
6CH 4 0s
70H 4 GDT.base
74H 4 GDT.limit
78H 4 LDT.attrib
7CH 4 LDT.base
80H 4 LDT.limit
84H 4 GS.attrib
88H 4 GS.base
8CH 4 GS.limit
90H 4 FS.attrib
94H 4 FS.base
98H 4 FS.limit
9CH 4 DS.attrib
A0H 4 DS.base
A4H 4 DS.limit
A8H 4 SS.attrib
ACH 4 SS.base
B0H 4 SS.limit
B4H 4 CS.attrib
B8H 4 CS.base
BCH 4 CS.limit
C0H 4 ES.attrib
C4H 4 ES.base
C8H 4 ES.limit
CCH 4 Length of table
D0H 30h Unused,not loaded
100H 4 Temporary Register IST
104H 4 Temporary Register I
108H 4 Temporary Register H
10CH 4 Temporary Register G
110H 4 Temporary Register F
114H 4 Temporary Register E
118H 4 Temporary Register D
11CH 4 Temporary Register C
120H 4 Temporary Register B
124H 4 Temporary Register A
Format of Attrib field:
Byte Description
0 0s
1 AR (Access Right) byte in the Descriptor format
Note:
P bit is a valid bit
if valid bit=0 then Shadow Register is invalid and
INT 0DH - General Protection Fault call
DPL of SS,CS det. CPL
2-3 0s
Flags Affected: All (FLAGS Register Reload)
CPU mode: RM,PM0
Physical Form: LOADALL
COP (Code of Operation): 0FH 07H
Clocks: i386XX : n/a
i486XX : n/a
Note: This operation used 102 data transfer cycles on 32bit bus
Typical clocks:
i386SX: ~350
i386DX: ~290
i486XX: ~220
Top
CPU: Intel 80286 and all its clones Type of Instruction: System (Work only then CPL=0) Instruction: LOADALL Description: Load All Registers (Include Shadow Registers) from Table Which Begin on 000800H Address, Len of this table is 66H Format of LOADALL Table: Address Len Description 800H 6 None 806H 2 MSW 808H 14 None 816H 2 TR 818H 2 FLAGS 81AH 2 IP 81CH 2 LDTR 81EH 2 DS 820H 2 SS 822H 2 CS 824H 2 ES 826H 2 DI 828H 2 SI 82AH 2 BP 82CH 2 SP 82EH 2 BX 830H 2 DX 832H 2 CX 834H 2 AX 836H 6 ES Shadow Descriptor 83CH 6 CS Shadow Descriptor 842H 6 SS Shadow Descriptor 848H 6 DS Shadow Descriptor 84EH 6 GDTR 854H 6 LDT Shadow Descriptor 85AH 6 IDTR 860H 6 TSS Shadow Descriptor Format of Shadow Descriptor: Byte Description 0-2 24bit Phisical Address 3 AR (Access Right) byte 4-5 16bit Segment Limit Format of GDTR and IDTR: Byte Description 0-2 24bit Phisical Address 3 0s 4-5 16bit Segment Limit Note: Using this instruction we may turn on "Big Real Mode" i.e. mode then PG=1,PE=0,cpl=0. This mode very usefull,But Pentium never support this instruction. Flags Affected: All (FLAGS Register Reload) CPU mode: RM,PM0 Physical Form: LOADALL COP (Code of Operation): 0FH 05H Clocks: 80286 : 195Top
CPU: Pentium III+ (KNI/MMX2), Athlon+ (AMD EMMX) Type of instruction: User Instruction: MASKMOVQ src,mask Description: #define MOVE_BYTE(check_bit,move_bits) if (mask[check_bit] == 1) mem64[EDI][move_bits] = src[move_bits]; else mem64[EDI][move_bits] = 0; endif; #enddef MOVE_BYTE(7 , 7..0); MOVE_BYTE(15, 15..8); MOVE_BYTE(23, 23..16); MOVE_BYTE(31, 31..24); MOVE_BYTE(39, 39..32); MOVE_BYTE(47, 47..40); MOVE_BYTE(55, 55..48); MOVE_BYTE(63, 63..56); Physical Form and Timing: MASKMOVQ mm1,mm2 ---- 0F F7 /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MAXPS dest,src Description: par for i=0 to 3 do if dest[<i>] is NaN then dest[<i>] <- src[<i>]; if src[<i>] is NaN then dest[<i>] <- src[<i>]; if src[<i>] >= dest[<i>] then dest[<i>] <- src[<i>]; endfor; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MAXPS xmm1,xmm2/m128 ---- 0F 5F /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MAXSS dest,src Description: if dest[<0>] is NaN then dest[<0>] <- src[<0>]; if src[<0>] is NaN then dest[<0>] <- src[<0>]; if src[<0>] >= dest[<0>] then dest[<0>] <- src[<0>]; Physical Form and Timing: MAXSS xmm1,xmm2/m32 ---- F3 0F 5F /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MINPS dest,src Description: par for i=0 to 3 do if dest[<i>] is NaN then dest[<i>] <- src[<i>]; if src[<i>] is NaN then dest[<i>] <- src[<i>]; if src[<i>] < dest[<i>] then dest[<i>] <- src[<i>]; endfor; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MINPS xmm1,xmm2/m128 ---- 0F 5D /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MINSS dest,src Description: if dest[<0>] is NaN then dest[<0>] <- src[<0>]; if src[<0>] is NaN then dest[<0>] <- src[<0>]; if src[<0>] < dest[<0>] then dest[<0>] <- src[<0>]; Physical Form and Timing: MINSS xmm1,xmm2/m32 ---- F3 0F 5D /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVAPS dest,src Description: dest <- src; Note: This instruction moved 16-byte (128-bit) total size 4x 32-bit FP. from/to memory. Address of this F.P. block must be 16-bytes aligned Physical Form and Timing: MOVAPS xmm1,xmm2/m128 ---- 0F 28 /r ---- ?? MOVAPS xmm2/m128,xmm1 ---- 0F 29 /r ---- ??Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: MOVD dest,src
Description:
IF dest is MMi register THEN
{
dest[63..32] <- 0
dest[31..0] <- src
} ELSE ; If dest is DWORD
dest <- src [31..0]
Note: This instruction moved DWORDs to/from MMX registers
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If result in Non-Writable segment
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
MOVD mm,r/m32 0FH 6EH PostByte
MOVD r/m32,mm 0Fh 7Eh PostByte
mm,r/m32 r/m32,mm
P55C: n/a (~1) (~1)
future P6: n/a (~1) (~1)
Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVHLPS dest,src Description: dest[<1>] <- src[<3>]; dest[<0>] <- src[<2>]; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MOVHLPS xmm1,xmm2 ---- 0F 12 /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVHPS dest,src Description: if (dest is mem64) then dest[<1>] <- src[<3>]; dest[<0>] <- src[<2>]; endif if (src is mem64) then dest[<3>] <- src[<1>]; dest[<2>] <- src[<0>]; endif <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MOVHPS xmm,m64 ---- 0F 16 /r ---- 1 MOVHPS m64,xmm ---- 0F 17 /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVLHPS dest,src Description: dest[<3>] <- src[<1>]; dest[<2>] <- src[<0>]; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MOVLHPS xmm1,xmm2 ---- 0F 16 /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVLPS dest,src Description: dest[<1>] <- src[<1>]; dest[<0>] <- src[<0>]; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MOVLPS xmm,m64 ---- 0F 12 /r ---- 1 MOVLPS m64,xmm ---- 0F 13 /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVMSKPS dest,src Description: dest[0] <- src[31]; // Single Bits, not bit groups dest[1] <- src[63]; dest[2] <- src[95]; dest[3] <- src[127]; dest[31..4] <- 0; Physical Form and Timing: MOVMSKPS r32,xmm ---- 0F 50 /m ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVNTPS dest,src Description: dest <- src; // This store mimimize cache pollution // storing XMM 128-bit register Physical Form and Timing: MOVNTPS m128,xmm ---- 0F 2B /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: MOVNTQ dest,src Description: dest <- src; // This store minimize cache pollution // storing MM (MMX) 64-bit register Physical Form and Timing: MOVNTQ m64,mm ---- 0F E7 /r ---- ??Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: MOVQ dest,src
Description:
dest <- src
Note: This instruction moved QWORDs to/from MMX registers
Of course, IA support Big-endian QWORDS.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If result in Non-Writable segment
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
MOVQ mm,mm/m64 0FH 6FH PostByte
MOVQ mm/m64,mm 0Fh 7Fh PostByte
Note: In PostByte instead IU registers used MMX registers,
0Fh 6Fh C0h means MOVQ MM0,MM0
mm,r/m32 r/m32,mm
P55C: n/a (~1) (~1)
future P6: n/a (~1) (~1)
Top
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: MOVSPA Description: This instruction transfer both SS and SP of the old register bank to new register bank after the bank has been switched by interrupt or BRKCS instruction. Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: MOVSPA COP (Code of Operation) : 0Fh 25h Clocks: 16Top
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: MOVSPB Number_of_bank Description: The MOVSPB instruction transfers the current SP and SS before the bank switching to new register bank. Note: New Register Bank Number indicated by lower 3bit of Number_of_ _bank. Note: See BRKCS instruction for more info about banks. Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: MOVSPB reg16 COP (Code of Operation) : 0Fh 95h <1111 1RRR> Clocks: 11Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVSS dest,src Description: dest[<0>] <- src[<0>]; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: MOVSS xmm1,xmm2/m32 ---- F3 0F 10 /r ---- ?? MOVSS xmm2/m32,xmm1 ---- F3 0F 11 /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MOVUPS dest,src Description: dest <- src // Analigned move of XMM 128-bit register Physical Form and Timing: MOVUPS xmm1,xmm2/m128 ---- 0F 10 /r ---- ?? MOVUPS xmm2/m128,xmm1 ---- 0F 11 /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MULPS dest,src Description: dest[<0>] = dest[<0>] * src[<0>]; dest[<1>] = dest[<1>] * src[<1>]; dest[<2>] = dest[<2>] * src[<2>]; dest[<3>] = dest[<3>] * src[<3>]; Physical Form and Timing: MULPS xmm1,xmm2/m128 ---- 0F 59 /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: MULPS dest,src Description: dest[<0>] = dest[<0>] * src[<0>]; Physical Form and Timing: MULSS xmm1,xmm2/m32 ---- F3 0F 59 /r ---- 2Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: NOT1 dest,bitnumb Description: (BIT bitnumb OF dest) <- NOT (BIT bitnumb OF dest); Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: NOT1 reg/mem8,CL COP (Code of Operation) : 0FH 16H Postbyte Physical Form: NOT1 reg/mem8,imm8 COP (Code of Operation) : 0FH 1EH Postbyte imm8 Physical Form: NOT1 reg/mem16,CL COP (Code of Operation) : 0FH 17H Postbyte Physical Form: NOT1 reg/mem16,imm8 COP (Code of Operation) : 0FH 1FH Postbyte imm8 Clocks: NOT1 r/m8,CL r/m8,i8 r/m16,CL r/m16,i8 NEC V20: 4/18 5/19 4/18 5/19Top
CPU: Cyrix Cx6x86 (same code on AMD Am5k86) Logical Form: OIO Description: Caused #UD exception Flags Affected: No Flags Affected CPU Mode : RM,PM,VM,VME,SMM Exceptions : RM PM V86 VME SMM #UD #UD #UD #UD #UD Undefined Instruction No more Exceptions Note : This instruction caused #UD. AMD guaranteed that in future AMD's CPUs this instruction will caused #UD. Of course all previous CPUs (186+) caused #UD on this opcode. This instruction used by software writers for testing #UD exception servise routine. ++++++++++++++++++++++++++++++ Physical Form : UD COP (Code of Operation) : 0Fh FFh Clocks : UD 8088: Not supported NEC V20: Not supported 80186: ~int 80286: ~int 80386: ~int Cx486SLC: ~int i486: ~int Cx486DX: ~int Cx5x86: ~int Pentium: ~int Nx5x86: ~int Cx6x86: ~int Am5k86: ~int Pentium Pro: ~int ++++++++++++++++++++++++++++++Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: ORPS dest,src Description: dest = dest OR src; // Bitwize 128-bit Physical Form and Timing: ORPS xmm1,xmm2/m128 ---- 0F 56 /r ---- 2Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PACKSSDW dest,src
Description:
dest[15..0] <- SaturateSignedDWordToSignedWord dest[31..0]
dest[31..16] <- SaturateSignedDWordToSignedWord dest[63..32]
dest[47..32] <- SaturateSignedDWordToSignedWord src[31..0]
dest[63..46] <- SaturateSignedDWordToSignedWord src[63..32]
Note: This instruction packs and saturates signed data from src and dest to
dest.
If signed value of word larger or smaller that the range of signed byte
value is saturated (in case of overflow to 7Fh, in underflow to 80h).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
PACKSSDW mm,mm/m64 0FH 6BH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PACKSSWB dest,src
Description:
dest[7..0] <- SaturateSignedWordToSignedByte dest[15..0]
dest[15..8] <- SaturateSignedWordToSignedByte dest[31..16]
dest[23..16] <- SaturateSignedWordToSignedByte dest[47..32]
dest[31..24] <- SaturateSignedWordToSignedByte dest[63..48]
dest[39..32] <- SaturateSignedWordToSignedByte src[15..0]
dest[47..40] <- SaturateSignedWordToSignedByte src[31..16]
dest[55..48] <- SaturateSignedWordToSignedByte src[47..32]
dest[63..56] <- SaturateSignedWordToSignedByte src[63..48]
Note: This instruction packs and saturates signed data from src and dest to
dest
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
PACKSSWB mm,mm/m64 0FH 63H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PACKUSWB dest,src
Description:
dest[7..0] <- SaturateSignedWordToUnSignedByte dest[15..0]
dest[15..8] <- SaturateSignedWordToUnSignedByte dest[31..16]
dest[23..16] <- SaturateSignedWordToUnSignedByte dest[47..32]
dest[31..24] <- SaturateSignedWordToUnSignedByte dest[63..48]
dest[39..32] <- SaturateSignedWordToUnSignedByte src[15..0]
dest[47..40] <- SaturateSignedWordToUnSignedByte src[31..16]
dest[55..48] <- SaturateSignedWordToUnSignedByte src[47..32]
dest[63..56] <- SaturateSignedWordToUnSignedByte src[63..48]
Note: If signed value of word larger or smaller that the range of unsigned
byte, value is saturated (if overflow to FFh, if underflow to 0h).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
PACKUSWB mm,mm/m64 0FH 67H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDB dest,src
Description:
dest[7..0] <- dest[7..0] + src[7..0]
dest[15..8] <- dest[15..8] + src[15..8]
dest[23..16] <- dest[23..16] + src[23..16]
dest[31..24] <- dest[31..24] + src[31..24]
dest[39..32] <- dest[39..32] + src[39..32]
dest[47..40] <- dest[47..40] + src[47..40]
dest[55..48] <- dest[55..48] + src[55..48]
dest[63..56] <- dest[63..56] + src[63..56]
Note: This instruction adds the bytes of the source to the bytes of the
destination and writes the results to the MMX register.
When the result is too large to be represented in a packed byte
(overflow), the result wraps around and the lower 8 bits are writen to
the destination register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDB mm,mm/m64 0FH FCH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDD dest,src
Description:
dest[31..0] <- dest[31..0] + src[31..0]
dest[63..32] <- dest[63..32] + src[63..32]
Note: This instruction adds the dwords of the source to the dwords of the
destination and writes the results to the MMX register.
When the result is too large to be represented in a packed dword
(overflow), the result wraps around and the lower 32 bits are writen to
the destination register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDW mm,mm/m64 0FH FEH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDSB dest,src
Description:
dest[7..0] <- SaturateToSignedByte(dest[7..0] + src[7..0])
dest[15..8] <- SaturateToSignedByte(dest[15..8] + src[15..8])
dest[23..16] <- SaturateToSignedByte(dest[23..16] + src[23..16])
dest[31..24] <- SaturateToSignedByte(dest[31..24] + src[31..24])
dest[39..32] <- SaturateToSignedByte(dest[39..32] + src[39..32])
dest[47..40] <- SaturateToSignedByte(dest[47..40] + src[47..40])
dest[55..48] <- SaturateToSignedByte(dest[55..48] + src[55..48])
dest[63..56] <- SaturateToSignedByte(dest[63..56] + src[63..56])
Note: This instruction adds the signed bytes of the source to the bytes of
the destination and writes the results to the MMX register.
If the result is larger or smaller than the range of a signed byte,
the value is saturated (in the case of a overflow - to 7FH, and in the
case of an underflow - to 80H).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDSB mm,mm/m64 0FH ECH PostByte
P55C: n/a
future P6: n/a
Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PADDSIW dest, src Description: dest[15..0] <- SaturateToSignedWord(dest[15..0] + src[15..0] dest[31..16] <- SaturateToSignedWord(dest[31..16] + src[31..16] dest[47..32] <- SaturateToSignedWord(dest[47..32] + src[47..32] dest[63..48] <- SaturateToSignedWord(dest[63..48] + src[63..48] Notes: This instruction adds the signed words of the source operand to the signed words of the destination operand and writes the results to the implied MMX register. The purpose of this instruction is the same as the PADDSW instruction, except that it preserves both source operands. The DEST must be an MMX register. The SRC can be either an MMX register or a 64-bit memory operand. The destination is an MMX register which depends on the DEST. Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PADDSIW mm,mm/m64 0FH 51H PostByteTop
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDSW dest,src
Description:
dest[15..0] <- SaturateToSignedWord(dest[15..0] + src[15..0])
dest[31..16] <- SaturateToSignedWord(dest[31..16] + src[31..16])
dest[47..32] <- SaturateToSignedWord(dest[47..32] + src[47..32])
dest[63..48] <- SaturateToSignedWord(dest[63..48] + src[63..48])
Note: This instruction adds the signed words of the source to the words of
the destination and writes the results to the MMX register.
If the result is larger or smaller than the range of a signed word,
the value is saturated (in the case of a overflow - to 7FFFH, and in
the case of an underflow - to 8000H).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDSW mm,mm/m64 0FH EDH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDUSB dest,src
Description:
dest[7..0] <- SaturateToUnsignedByte(dest[7..0] + src[7..0])
dest[15..8] <- SaturateToUnsignedByte(dest[15..8] + src[15..8])
dest[23..16] <- SaturateToUnsignedByte(dest[23..16] + src[23..16])
dest[31..24] <- SaturateToUnsignedByte(dest[31..24] + src[31..24])
dest[39..32] <- SaturateToUnsignedByte(dest[39..32] + src[39..32])
dest[47..40] <- SaturateToUnsignedByte(dest[47..40] + src[47..40])
dest[55..48] <- SaturateToUnsignedByte(dest[55..48] + src[55..48])
dest[63..56] <- SaturateToUnsignedByte(dest[63..56] + src[63..56])
Note: This instruction adds the unsigned bytes of the source to the
unsigned bytes of the destination operand and writes the results to the
MMX register.
When the result is larger than the range of an unsigned byte
(overflow), the value is saturated to FFH. When the result is smaller
than the range of an unsigned byte (underflow), the value is saturated
to 00H.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDUSB mm,mm/m64 0FH DCH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDUSW dest,src
Description:
dest[15..0] <- SaturateToUnsignedWord(dest[15..0] + src[15..0])
dest[31..16] <- SaturateToUnsignedWord(dest[31..16] + src[31..16])
dest[47..32] <- SaturateToUnsignedWord(dest[47..32] + src[47..32])
dest[63..48] <- SaturateToUnsignedWord(dest[63..48] + src[63..48])
Note: This instruction adds the unsigned words of the source to the
unsigned words of the destination operand and writes the results to the
MMX register.
When the result is larger than the range of an unsigned word
(overflow), the value is saturated to FFFFH. When the result is smaller
than the range of an unsigned byte (underflow), the value is saturated
to 0000H.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDUSW mm,mm/m64 0FH DDH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDW dest,src
Description:
dest[15..0] <- dest[15..0] + src[15..0]
dest[31..16] <- dest[31..16] + src[31..16]
dest[47..32] <- dest[47..32] + src[47..32]
dest[63..48] <- dest[63..48] + src[63..48]
Note: This instruction adds the words of the source to the words of the
destination and writes the results to the MMX register.
When the result is too large to be represented in a packed word
(overflow), the result wraps around and the lower 16 bits are writen to
the destination register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDW mm,mm/m64 0FH FDH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PAND dest,src
Description:
dest <- dest AND src
Note: AND 64 bits from MMXregister/memory to MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PAND mm,mm/m64 0FH DBH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PANDN dest,src
Description:
dest <- (NOT dest) AND src
Note: Invert the 64 bits in MMX register, AND inverted MMX register with
MMXregister/memory.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PANDN mm,mm/m64 0FH DFH PostByte
P55C: n/a
future P6: n/a
Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PAVEB dest, src Description: dest[7..0] <- (dest[7..0] + src[7..0]) >> 1 dest[15..8] <- (dest[15..8] + src[15..8]) >> 1 dest[23..16] <- (dest[23..16] + src[23..16]) >> 1 dest[31..24] <- (dest[31..24] + src[31..24]) >> 1 dest[39..32] <- (dest[39..32] + src[39..32]) >> 1 dest[47..40] <- (dest[47..40] + src[47..40]) >> 1 dest[55..48] <- (dest[55..48] + src[55..48]) >> 1 dest[63..56] <- (dest[63..56] + src[63..56]) >> 1 Notes: The PAVEB insruction calculates the average of the unsigned bytes of the source operand and the unsigned bytes of the destination operand and writes the result to the MMX register. The PAVEB instruction cannot overflow. M2 hardware versions before v1.3 interpret values as signed bytes on this instruction. Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PAVEB mm,mm/m64 0FH 50H PostByteTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PAVGB dest,src Description: define AVERAGE(bits) // This is Unsigned operation :)) dest[bits] <- (size(8bits,(src[bits] + dest[bits])) + 1) >> 1; enddef AVERAGE(7..0); AVERAGE(15..8); AVERAGE(23..16); AVERAGE(31..24); AVERAGE(39..32); AVERAGE(47..40); AVERAGE(55..48); AVERAGE(63..56); Physical Form and Timing: PAVGB mm1,mm2/m64 ---- 0F E0 /r ---- ??Top
CPU: AMD-3D Type of Instruction: User Instruction: PAVGUSB dest,src Description: dest[7..0] <- (dest[7..0] + src[7..0]) / 2; dest[15..8] <- (dest[15..8] + src[15..8]) / 2; dest[23..16] <- (dest[23..16] + src[23..16]) / 2; dest[31..24] <- (dest[31..24] + src[31..24]) / 2; dest[39..32] <- (dest[39..32] + src[39..32]) / 2; dest[47..40] <- (dest[47..40] + src[47..40]) / 2; dest[55..48] <- (dest[55..48] + src[55..48]) / 2; dest[63..56] <- (dest[63..56] + src[63..56]) / 2; Note: so, saturation rounding: (FFH + FFH) / 2 => FFh Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PAVGUSB mm,mm/m64 0FH 0FH BFH PostbyteTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PAVGW dest,src Description: define AVERAGE(bits) // This is Unsigned operation dest[bits] <- (size(16bits,(src[bits] + dest[bits])) + 1) >> 1; enddef AVERAGE(15..0); AVERAGE(31..16); AVERAGE(47..32); AVERAGE(63..48); Physical Form and Timing: PAVGW mm1,mm2/m64 ---- 0F E3 /r ---- ??Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPEQB dest,src
Description:
IF dest[7..0] = src[7..0]
THEN
dest[7..0] <- FFH
ELSE
dest[7..0] <- 00H
IF dest[15..8] = src[15..8]
THEN
dest[15..8] <- FFH
ELSE
dest[15..8] <- 00H
IF dest[23..16] = src[23..16]
THEN
dest[23..16] <- FFH
ELSE
dest[23..16] <- 00H
IF dest[31..24] = src[31..24]
THEN
dest[31..24] <- FFH
ELSE
dest[31..24] <- 00H
IF dest[39..32] = src[39..32]
THEN
dest[39..32] <- FFH
ELSE
dest[39..32] <- 00H
IF dest[47..40] = src[47..40]
THEN
dest[47..40] <- FFH
ELSE
dest[47..40] <- 00H
IF dest[55..48] = src[55..48]
THEN
dest[55..48] <- FFH
ELSE
dest[55..48] <- 00H
IF dest[63..56] = src[63..56]
THEN
dest[63..56] <- FFH
ELSE
dest[63..56] <- 00H
Note: Compare packed byte in MMXregister/memory with packed byte in MMX
register for equality.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPEQB mm,mm/m64 0FH 74H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPEQD dest,src
Description:
IF dest[31..0] = src[31..0]
THEN
dest[31..0] <- FFFFFFFFH
ELSE
dest[31..0] <- 00000000H
IF dest[63..32] = src[63..32]
THEN
dest[63..32] <- FFFFFFFFH
ELSE
dest[63..32] <- 00000000H
Note: Compare packed dword in MMXregister/memory with packed dword in MMX
register for equality.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPEQW mm,mm/m64 07H 76H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPEQW dest,src
Description:
IF dest[15..0] = src[15..0]
THEN
dest[15..0] <- FFFFH
ELSE
dest[15..0] <- 0000H
IF dest[31..16] = src[31..16]
THEN
dest[31..16] <- FFFFH
ELSE
dest[31..16] <- 0000H
IF dest[47..32] = src[47..32]
THEN
dest[47..32] <- FFFFH
ELSE
dest[47..32] <- 0000H
IF dest[63..48] = src[63..48]
THEN
dest[63..48] <- FFFFH
ELSE
dest[63..48] <- 0000H
Note: Compare packed word in MMXregister/memory with packed word in MMX
register for equality.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPEQW mm,mm/m64 07H 75H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPGTB dest,src
Description:
IF dest[7..0] > src[7..0]
THEN
dest[7..0] <- FFH
ELSE
dest[7..0] <- 00H
IF dest[15..8] > src[15..8]
THEN
dest[15..8] <- FFH
ELSE
dest[15..8] <- 00H
IF dest[23..16] > src[23..16]
THEN
dest[23..16] <- FFH
ELSE
dest[23..16] <- 00H
IF dest[31..24] > src[31..24]
THEN
dest[31..24] <- FFH
ELSE
dest[31..24] <- 00H
IF dest[39..32] > src[39..32]
THEN
dest[39..32] <- FFH
ELSE
dest[39..32] <- 00H
IF dest[47..40] > src[47..40]
THEN
dest[47..40] <- FFH
ELSE
dest[47..40] <- 00H
IF dest[55..48] > src[55..48]
THEN
dest[55..48] <- FFH
ELSE
dest[55..48] <- 00H
IF dest[63..56] > src[63..56]
THEN
dest[63..56] <- FFH
ELSE
dest[63..56] <- 00H
Note: Compare packed byte in MMX register with packed byte in MMXregister/
/memory for greater value.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPGTB mm,mm/m64 0FH 64H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPGTD dest,src
Description:
IF dest[31..0] > src[31..0]
THEN
dest[31..0] <- FFFFFFFFH
ELSE
dest[31..0] <- 00000000H
IF dest[63..32] > src[63..32]
THEN
dest[63..32] <- FFFFFFFFH
ELSE
dest[63..32] <- 00000000H
Note: Compare packed dword in MMX register with packed dword in MMXregister/
/memory for greater value.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPGTW mm,mm/m64 0FH 66H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPGTW dest,src
Description:
IF dest[15..0] > src[15..0]
THEN
dest[15..0] <- FFFFH
ELSE
dest[15..0] <- 0000H
IF dest[31..16] > src[31..16]
THEN
dest[31..16] <- FFFFH
ELSE
dest[31..16] <- 0000H
IF dest[47..32] > src[47..32]
THEN
dest[47..32] <- FFFFH
ELSE
dest[47..32] <- 0000H
IF dest[63..48] > src[63..48]
THEN
dest[63..48] <- FFFFH
ELSE
dest[63..48] <- 0000H
Note: Compare packed word in MMX register with packed word in MMXregister/
memory for greater value.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPGTW mm,mm/m64 0FH 65H PostByte
P55C: n/a
future P6: n/a
Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PDISTIB dest, src Description: dest[7..0] <- SaturateToUnsignedByte(dest[7..0] + abs(dest[7..0] - src[7..0])) dest[15..8] <- SaturateToUnsignedByte(dest[15..8] + abs(dest[15..8] - src[15..8])) dest[23..16] <- SaturateToUnsignedByte(dest[23..16] + abs(dest[23..16] - src[23..16])) dest[31..24] <- SaturateToUnsignedByte(dest[31..24] + abs(dest[31..24] - src[31..24])) dest[39..32] <- SaturateToUnsignedByte(dest[39..32] + abs(dest[39..32] - src[39..32])) dest[47..40] <- SaturateToUnsignedByte(dest[47..40] + abs(dest[47..40] - src[47..40])) dest[55..48] <- SaturateToUnsignedByte(dest[55..48] + abs(dest[55..48] - src[55..48])) dest[63..56] <- SaturateToUnsignedByte(dest[63..56] + abs(dest[63..56] - src[63..56])) Notes: The PDISTIB instruction calculates the distance between the unsigned bytes of two source operands, adds the result to the unsigned byte in the implied destination operand, and saturates the result. The result is written to the implied MMX register. The DEST must be an MMX register. The SRC must be a 64-bit memory operand. The accumulator and destination is an MMX register which depends on the DEST. Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PDISTIB mm,m64 0FH 54H PostByteTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PEXTRW dest,src,which_word Description: word TMP = which_word AND 0x3; word MM_TMP = (src >> (TMP * 16)) AND 0xffff; dest[15..0] <- MM_TMP; dest[31..16] <- 0; Physical Form and Timing: PEXTRW r32,mm,imm8 ---- 0F C5 /r imm8 ---- ??Top
CPU: AMD-3D Type of Instruction: User Instruction: PF2ID dest,src Description: if (src[31..0] > 2^31) then dest[31..0] <- 7FFFFFFFh; if (src[31..0] <= -2^31) then dest[31..0] <- 80000000h; dest[31..0] <- truncate(src[31..0]); if (src[63..32] > 2^31) then dest[63..32] <- 7FFFFFFFh; if (src[63..32] <= -2^31) then dest[63..32] <- 80000000h; dest[63..32] <- truncate(src[63..32]); Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PF2ID mm,mm/m64 0FH 0FH 1DH PostbyteTop
CPU: 3DNow! extension (Athlon CPU) Type of Instruction: User Instruction: PF2IW dest,src Description: if (src[31:0] >= 2^15) dest[31:0] = 00007fffh; elseif (src[31:0] <= -2^15) dest[31:0] = ffff8000h; else dest[31:0] <- int(src[31:0]); if (src[63:32] >= 2^15) dest[63:32] = 00007fffh; elseif (src[63:32] <= -2^15) dest[63:32] = ffff8000h; else dest[63:32] <- int(src[63:32]); Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PF2IW mm,mm/m64 0F 0F 1C PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFACC dest,src Description: dest[31..0] <- dest[31..0] + dest[63..32]; dest[63..32] <- src[31..0] + src [63..32]; Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFACC mm,mm/m64 0FH 0FH AEH PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFADD dest,src Description: dest[31..0] <- dest[31..0] + src[31..0]; dest[63..32] <- dest[63..32] + src[63..32]; Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFADD mm,mm/m64 0FH 0FH 9EH PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFCMPEQ dest,src Description: if dest[31..0] == src[31..0] then dest[31..0] <- FFFFFFFFh else dest[31..0] <- 00000000h if dest[63..32] == src[63..32] then dest[63..32] <- FFFFFFFFh else dest[63..32] <- 00000000h Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFCMPEQ mm,mm/m64 0FH 0FH B0H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFCMPGE dest,src Description: if dest[31..0] >= src[31..0] then dest[31..0] <- FFFFFFFFh else dest[31..0] <- 00000000h if dest[63..32] >= src[63..32] then dest[63..32] <- FFFFFFFFh else dest[63..32] <- 00000000h Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFCMPGE mm,mm/m64 0FH 0FH 90H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFCMPGT dest,src Description: if dest[31..0] > src[31..0] then dest[31..0] <- FFFFFFFFh else dest[31..0] <- 00000000h if dest[63..32] > src[63..32] then dest[63..32] <- FFFFFFFFh else dest[63..32] <- 00000000h Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFCMPGT mm,mm/m64 0FH 0FH A0H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFMAX dest,src Description: if src[31..0] > dest[31..0] then dest[31..0] <- src[31..0]; if src[63..32] > dest[63..32] then dest[63..32] <- src[63..32]; Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFMAX mm,mm/m64 0FH 0FH A4HTop
CPU: AMD-3D Type of Instruction: User Instruction: PFMIN dest,src Description: if src[31..0] < dest[31..0] then dest[31..0] <- src[31..0]; if src[63..32] < dest[63..32] then dest[63..32] <- src[63..32]; Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFMIN mm,mm/m64 0FH 0FH 94HTop
CPU: AMD-3D Type of Instruction: User Instruction: PFMUL dest,src Description: dest[31..0] <- dest[31..0] * src[31..0]; dest[63..32] <- dest[63..32] * src[63..32]; Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFMUL mm,mm/m64 0FH 0FH B4H PostbyteTop
CPU: 3DNow! extension (Athlon CPU) Type of Instruction: User Instruction: PFNACC dest,src Description: dest[31:0] <- dest[31:0] - dest[63:32]; dest[63:32] <- src[31:0] - src[63:32] Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFNACC mm,mm/m64 0F 0F 8A PostbyteTop
CPU: 3DNow! extension (Athlon CPU) Type of Instruction: User Instruction: PFPNACC dest,src Description: dest[31:0] <- dest[31:0] - dest[63:32]; dest[63:32] <- src[31:0] + src[63:32]; Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFPNACC mm,mm/m64 0F 0F 8E PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFRCP dest,src Description: dest[31..0] <- Reciprocal(src[31..0]); dest[63..32] <- Reciprocal(src[63..32]); Note: Newton-Raphson algorithm: Division ---------- q = a/b; X(i+1) = X(i) * (2 - b * X(i)); X0 = RFRCP(b); X1 = RFRCPIT1(b,X0); X2 = RFRCPIT2(X1,X0); q = PFMUL(a,X2); Square Root -------------- X(i+1) = 1/2 * X(i) * (3 - b * X(i)^2); X0 = PFRSQRT(b); X1 = PFMUL(X0,X0); X2 = PFRSQIT(b,X1); X3 = PFRCPIT2(X2,X0); X4 = PFMUL(b,X3); Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFRCP mm,mm/m64 0FH 0FH 96H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFRCIT1 dest,src Description: dest[31..0] <- First_Step_Reciprocal(src[31..0]); dest[63..32] <- First_Step_Reciprocal(src[63..32]); Note: see PFRCP for more info. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFRCIT1 mm,mm/m64 0FH 0FH A6H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFRCIT2 dest,src Description: dest[31..0] <- Second_Step_Reciprocal(src[31..0]); dest[63..32] <- Second_Step_Reciprocal(src[63..32]); Note: see PFRCP for more info. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFRCIT2 mm,mm/m64 0FH 0FH B6H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFRSQIT1 dest,src Description: dest[31..0] <- First_Step_Reciprocal_Square_Root(src[31..0]); dest[63..32] <- First_Step_Reciprocal_Square_Root(src[63..32]); Note: see RFRCP for more info Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFRSQIT1 mm,mm/m64 0FH 0FH A7H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFRSQRT dest,src Description: dest[31..0] <- Reciprocal_Square_Root(src[31..0]); dest[63..32] <- Reciprocal_Square_Root(src[63..32]); Note: see RFRCP for more info Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFRSQRT mm,mm/m64 0FH 0FH 97H PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFSUB dest,src Description: dest[31..0] <- dest[31..0] - src[31..0]; dest[63..32] <- dest[63..32] - src[63..32]; Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFSUB mm,mm/m64 0FH 0FH 9AH PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PFSUBR dest,src Description: dest[31..0] <- src[31..0] - dest[31..0]; dest[63..32] <- src[63..32] - dest[63..32]; Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PFSUBR mm,mm/m64 0FH 0FH AAH PostbyteTop
CPU: AMD-3D Type of Instruction: User Instruction: PI2FD dest,src Description: dest[31..0] <- float(src[31..0]); dest[63..32] <- float(src[63..32]); Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PI2FD mm,mm/m64 0FH 0FH 0DH PostbyteTop
CPU: 3DNow! extension (Athlon CPU) Type of Instruction: User Instruction: PI2FW dest,src Description: dest[31:0] <- float(src[15:0]); dest[63:32] <- float(src[47:32]); Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PI2FW mm,mm/m64 0F 0F 0C PostbyteTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PINSRW dest,src,which_word Description: word TMP = which_word AND 0x3; switch (TMP) case 0: word MASK = 0x000000000000FFFF case 1: word MASK = 0x00000000FFFF0000 case 2: word MASK = 0x0000FFFF00000000 case 4: word MASK = 0xFFFF000000000000 endswitch dest <- (dest and NOT(MASK)) OR ((src << (TMP * 16)) AND MASK); Physical Form and Timing: PINSRW mm,r32/m16,imm8 ---- 0F C4 /r imm8 ---- ??Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMACHRIW dest, src Description: dest[15..0] <- dest[15..0] + (dest[15..0]*src[15..0] + 00004000H)[30..15] dest[31..16] <- dest[31..16] + (dest[31..16]*src[31..16] + 00004000H)[30..15] dest[47..32] <- dest[47..32] + (dest[47..32]*src[47..32] + 00004000H)[30..15] dest[63..48] <- dest[63..48] + (dest[63..48]*src[63..48] + 00004000H)[30..15] Notes: The PMACHRIW multiplies the two source operands using the method described for PMULHRW, and then accumulates the result with the value in the implied destination register using wrap-around arithmetic. The final result is placed in the implied DEST register. The DEST must be an MMX register. The SRC must be a 64-bit memory operand. The destination operand is an implied MMX register that depends on the DEST. Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PMACHRIW mm,m64 0FH 5EH PostByteTop
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PMADDWD dest,src
Description:
dest[31..0] <- dest[15..0] * src[15..0] + dest[31..16] * src[31..16]
dest[63..32] <- dest[47..32] * src[47..32] + dest[63..48] * src[63..48]
Note: Multiply the packed word in MMX register by the packed word in
MMXregister/memory. Add the 32-bit results pairwise and store in MMX
register as dword.
This instruction wraps around to 80000000H only when all four words
of both the source and destination operands are 8000H.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PMADDWD mm,mm/m64 0FH F5H PostByte
P55C: n/a
future P6: n/a
Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMAGW dest, src Description: IF abs(src[15..0]) > abs(dest[15..0]) THEN dest[15..] <-src[15..0] IF abs(src[31..16]) > abs(dest[31..16]) THEN dest[31..16]<-src[31..16] IF abs(src[47..32]) > abs(dest[47..32]) THEN dest[47..32]<-src[47..32] IF abs(src[63..56]) > abs(dest[63..56]) THEN dest[63..56]<-src[63..56] Notes: The PMAGW instruction compares the absolute value of the packed words in the destination operand and sets the destination words to the value that has the larger magnitude. The PMAGW instruction does not change the sign of the value with the larger magnitude and it does not saturate. The DEST must be an MMX register. The SRC can be either an MMX register or a 64-bit memory operand. Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PMAGW mm,mm/m64 0FH 52H PostByteTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PMAXSW dest,src Description: if (dest[<i>] < src[<i>]) then dest[<i>] <- src[<i>]; // Signed Integer <0> = 0..15 <2> = 47..32 <1> = 31..16 <3> = 63..48 Physical Form and Timing: PMAXSW mm1,mm2/m64 ---- 0F EE /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PMAXUB dest,src Description: for i=0 to 7 do if (dest[<i>] < src[<i>]) then dest[<i>] <- src[<i>]; // Unsigned int endfor <0> = 0..7 <4> = 39..32 <1> = 15..8 <5> = 47..40 <2> = 23..16 <6> = 55..48 <3> = 31..24 <7> = 63..56 Physical Form and Timing: PMAXUB mm1,mm2/m64 ---- 0F DE /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PMINSW dest,src Description: if (dest[<i>] > src[<i>]) then dest[<i>] <- src[<i>]; // Signed Integer <0> = 0..15 <2> = 47..32 <1> = 31..16 <3> = 63..48 Physical Form and Timing: PMINSW mm1,mm2/m64 ---- 0F EA /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PMINUB dest,src Description: for i=0 to 7 do if (dest[<i>] > src[<i>]) then dest[<i>] <- src[<i>]; // Unsigned int endfor <0> = 0..7 <4> = 39..32 <1> = 15..8 <5> = 47..40 <2> = 23..16 <6> = 55..48 <3> = 31..24 <7> = 63..56 Physical Form and Timing: PMIN UB mm1,mm2/m64 ---- 0F DA /r ---- ??Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PMOVMSKB dest,src Description: dest[31..8] <- 0; dest[7] <- src[63]; dest[6] <- src[55]; dest[5] <- src[47]; dest[4] <- src[39]; dest[3] <- src[31]; dest[2] <- src[23]; dest[1] <- src[15]; dest[0] <- src[7]; Physical Form and Timing: PMOVMSKB r32,mm ---- 0F D7 /r ---- ?Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMULHRIW dest, src Description: mmi[15..0] <- (dest[15..0]*src[15..0] + 00004000H)[30..15] mmi[31..16] <- (dest[31..16]*src[31..16] + 00004000H)[30..15] mmi[47..32] <- (dest[47..32]*src[47..32] + 00004000H)[30..15] mmi[63..48] <- (dest[63..48]*src[63..48] + 00004000H)[30..15] Notes: The PMULHRIW instruction are intended to give a result of the form a 16x16 bit multiply with the LSB rounded before truncating to 16 bits. The SRC can be either an MMX register or a 64-bit memory operand. The destination is an MMX register, depending on the SRC. The intent of the PMULHRIW instruction is the same as the PMULHRW instrucction except that both sources are preserved Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PMULHRIW mm,mm/m64 0FH 5DH PostByteTop
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMULHRW dest, src Description: dest[15..0] <- (dest[15..0]*src[15..0] + 00004000H)[30..15] dest[31..16] <- (dest[31..16]*src[31..16] + 00004000H)[30..15] dest[47..32] <- (dest[47..32]*src[47..32] + 00004000H)[30..15] dest[63..48] <- (dest[63..48]*src[63..48] + 00004000H)[30..15] Notes: The PMULHRW instruction are intended to give a result of the form a 16x16 bit multiply with the LSB rounded before truncating to 16 bits. This is in contrast to the PMULHW instruction which gives a resultof the form ss.14 with no rounding. as the PADDSW instruction, except that it preserves both source operands. The SRC can be either an MMX register or a 64-bit memory operand. The destination is an MMX register. Flags Affected: None Exceptions: RM PM VM SMM Description #GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS #SS(0) If Illegal memory operands EA in SS #PF(fcode) If page fault #AC #AC If unaligned memory reference then alignment check enabled and in ring 3. #UD #UD #UD #UD If CR0.EM = 1 #NM #NM #NM #NM If CR0.TS = 1 #MF #MF #MF #MF If pending FPU Exception #13 #13 If any part of the operand lies outside of the EA space from 0 to FFFFH ++++++++++++++++++++++++++++++++++ COP & Times: PMULHRW mm,mm/m64 0FH 59H PostByteTop
CPU: AMD-3D Type of Instruction: User Instruction: PMULHRW dest,src Description: dest[15..0] <- dest[15..0] * src[15..0]; dest[31..16] <- dest[31..16] * src[31..16]; dest[47..32] <- dest[47..32] * src[47..32]; dest[63..48] <- dest[63..48] * src[63..48]; Note: Saturation arithmetic. This is not F.P. instruction Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PMULHRW mm,mm/m64 0FH 0FH B7H PostvyteTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PMULHUW dest,src Description: temp1 <- dest[15:0] * src[15:0]; temp2 <- dest[31:16] * src[31:16]; temp3 <- dest[47:32] * src[47:32]; temp4 <- dest[63:48] * src[63:48]; dest[15:0] <- temp1[31:16]; dest[31:16] <- temp2[31:16]; dest[47:32] <- temp3[31:16]; dest[63:48] <- temp4[31:16]; Physical Form and Timing: PMULHUW mm,mm/m64 0Fh E4h PostbyteTop
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PMULHW dest,src
Description:
dest[15..0] <- (dest[15..0] * src[15..0]) (31..16)
dest[31..16] <- (dest[31..16] * src[31..16]) (31..16)
dest[47..32] <- (dest[47..32] * src[47..32]) (31..16)
dest[63..48] <- (dest[63..48] * src[63..48]) (31..16)
Note: Multiply the signed packed word in MMX register with the signed
packed word in MMXregister/memory, then store the high-order 16 bits of
the results in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PMULHW mm,mm/m64 0FH E5H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PMULLW dest,src
Description:
dest[15..0] <- (dest[15..0] * src[15..0]) (15..0)
dest[31..16] <- (dest[31..16] * src[31..16]) (15..0)
dest[47..32] <- (dest[47..32] * src[47..32]) (15..0)
dest[63..48] <- (dest[63..48] * src[63..48]) (15..0)
Note: Multiply the packed word in MMX register with the packed word in
MMXregister/memory, then store the low-order 16 bits of the results in
MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PMULLW mm,mm/m64 0FH D5H PostByte
P55C: n/a
future P6: n/a
Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMVGEZB dest, src Description: if mmi[7..0] >= 0 then dest[7..0] <- src[7..0]; if mmi[15..8] >= 0 then dest[15..8] <- src[15..8]; if mmi[23..16] >= 0 then dest[23..16] <- src[23..16]; if mmi[31..24] >= 0 then dest[31..24] <- src[31..24]; if mmi[39..32] >= 0 then dest[39..32] <- src[39..32]; if mmi[47..40] >= 0 then dest[47..40] <- src[47..40]; if mmi[55..48] >= 0 then dest[55..48] <- src[55..48]; if mmi[63..56] >= 0 then dest[63..56] <- src[63..56]; Note: mmi is implied MMX register. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PMVGEZB mm,mm/m64 0FH 5CH PostByteTop
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMVLZB dest, src Description: if mmi[7..0] < 0 then dest[7..0] <- src[7..0]; if mmi[15..8] < 0 then dest[15..8] <- src[15..8]; if mmi[23..16] < 0 then dest[23..16] <- src[23..16]; if mmi[31..24] < 0 then dest[31..24] <- src[31..24]; if mmi[39..32] < 0 then dest[39..32] <- src[39..32]; if mmi[47..40] < 0 then dest[47..40] <- src[47..40]; if mmi[55..48] < 0 then dest[55..48] <- src[55..48]; if mmi[63..56] < 0 then dest[63..56] <- src[63..56]; Note: mmi is implied MMX register. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PMVLZB mm,mm/m64 0FH 5BH PostByteTop
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMVNZB dest, src Description: if mmi[7..0] <> 0 then dest[7..0] <- src[7..0]; if mmi[15..8] <> 0 then dest[15..8] <- src[15..8]; if mmi[23..16] <> 0 then dest[23..16] <- src[23..16]; if mmi[31..24] <> 0 then dest[31..24] <- src[31..24]; if mmi[39..32] <> 0 then dest[39..32] <- src[39..32]; if mmi[47..40] <> 0 then dest[47..40] <- src[47..40]; if mmi[55..48] <> 0 then dest[55..48] <- src[55..48]; if mmi[63..56] <> 0 then dest[63..56] <- src[63..56]; Note: mmi is implied MMX register. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PMVNZB mm,mm/m64 0FH 5AH PostByteTop
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PMVZB dest, src Description: if mmi[7..0] == 0 then dest[7..0] <- src[7..0]; if mmi[15..8] == 0 then dest[15..8] <- src[15..8]; if mmi[23..16] == 0 then dest[23..16] <- src[23..16]; if mmi[31..24] == 0 then dest[31..24] <- src[31..24]; if mmi[39..32] == 0 then dest[39..32] <- src[39..32]; if mmi[47..40] == 0 then dest[47..40] <- src[47..40]; if mmi[55..48] == 0 then dest[55..48] <- src[55..48]; if mmi[63..56] == 0 then dest[63..56] <- src[63..56]; Note: mmi is implied MMX register. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PMVZB mm,mm/m64 0FH 58H PostByteTop
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: POR dest,src
Description:
dest <- dest OR src
Note: OR 64 bits from MMXregister/memory with MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
POR mm,mm/m64 0FH EBH PostByte
P55C: n/a
future P6: n/a
Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PREFETCHxx src Description: Prefetch src memory into cache. PREFETCH0 src - Temporal Data Prefetch into all caches levels PREFETCH1 src - Prefetch to all caches, except L1 PREFETCH2 src - Prefetch to all caches, except L1 and L2 PREFETCHNTA src - Non Temporal with respect to all cache levels - prefetch to non-temporal cache structure Physical Form and Timing: PREFETCHNTA mem ---- 0F 18 /0 ---- ? PREFETCH0 mem ---- 0F 18 /1 ---- ? PREFETCH1 mem ---- 0F 18 /2 ---- ? PREFETCH2 mem ---- 0F 18 /3 ---- ?Top
CPU: AMD-3D Type of Instruction: User Instruction: PREFETCH mem Description: PRELOAD_L1_DATA_CACHE_LINE(mem); SET_LINE_STATE_TO_EXCLUSIVE; (MESI) Note: If cache hit, then do nothing. mem - is address of any cache-line byte. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PREFETCH mem8 0FH 0DH mm000xxxTop
CPU: AMD-3D Type of Instruction: User Instruction: PREFETCHW mem Description: PRELOAD_L1_DATA_CACHE_LINE(mem); SET_LINE_STATE_TO_MODIFIED; (MESI) Note: If cache hit, then do nothing. mem - is address of any cache-line byte. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PREFETCHW mem8 0FH 0DH mm001xxxTop
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PSADBW dest,src Description: SUM = 0; for i = 1 to 7 do SUM[15..0] = SUM[15..0] + ABS(dest[<i>] - src[<i>]); endfor dest[15..0] <- SUM[15..0]; dest[63..16] <- 0; <0> = 0..7 <4> = 39..32 <1> = 15..8 <5> = 47..40 <2> = 23..16 <6> = 55..48 <3> = 31..24 <7> = 63..56 Physical Form and Timing: PSADBW mm1,mm2/m64 ---- 0F F6 /r ---- ?Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: PSHUFW dest,src,sc Description: Changed order of words to another: dest[15..0] <- (src >> (sc[1..0] * 16)) [15..0]; dest[31..16] <- (src >> (sc[3..2] * 16)) [15..0]; dest[47..32] <- (src >> (sc[5..4] * 16)) [15..0]; dest[63..48] <- (src >> (sc[7..6] * 16)) [15..0]; Physical Form and Timing: PSHUFW mm1,mm2/m64,imm8 ---- 0F 70 /r imm8 ---- ?Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSLLD dest,src
Description:
temp <- src
dest[31..0] <- dest[31..0] << temp
dest[63..32] <- dest[63..32] << temp
Note: Shift dwords in MMX register left by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSLLD mm,mm/m64 0FH F2H PostByte
PSLLD mm,Imm8 0FH 72H/6 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSLLQ dest,src
Description:
temp <- src
dest <- dest << temp
Note: Shift MMX register left by Imm8 or amount specified in MMXregister/
/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSLLQ mm,mm/m64 0FH F3H PostByte
PSLLQ mm,Imm8 0FH 73H/6 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSLLW dest,src
Description:
temp <- src
dest[15..0] <- dest[15..0] << temp
dest[31..16] <- dest[31..16] << temp
dest[47..32] <- dest[47..32] << temp
dest[63..48] <- dest[63..48] << temp
Note: Shift words in MMX register left by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSLLW mm,mm/m64 0FH F1H PostByte
PSLLW mm,Imm8 0FH 71H/6 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRAD dest,src
Description:
temp <- src
dest[31..0] <- SignExtend(dest[31..0]) >> temp
dest[63..32] <- SignExtend(dest[63..32]) >> temp
Note: Shift dwords in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in sign bits.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRAD mm,mm/m64 0FH E2H PostByte
PSRAD mm,Imm8 0FH 72H/4 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRAW dest,src
Description:
temp <- src
dest[15..0] <- SignExtend(dest[15..0]) >> temp
dest[31..16] <- SignExtend(dest[31..16]) >> temp
dest[47..32] <- SignExtend(dest[47..32]) >> temp
dest[63..48] <- SignExtend(dest[63..48]) >> temp
Note: Shift words in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in sign bits.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRAW mm,mm/m64 0FH E1H PostByte
PSRAW mm,Imm8 0FH 71H/4 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRLD dest,src
Description:
temp <- src
dest[31..0] <- dest[31..0] >> temp
dest[63..32] <- dest[63..32] >> temp
Note: Shift dwords in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRLD mm,mm/m64 0FH D2H PostByte
PSRLD mm,Imm8 0FH 72H/2 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRLQ dest,src
Description:
temp <- src
dest <- dest >> temp
Note: Shift MMX register right by Imm8 or amount specified in MMXregister/
/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRLQ mm,mm/m64 0FH D3H PostByte
PSRLQ mm,Imm8 0FH 73H/2 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRLW dest,src
Description:
temp <- src
dest[15..0] <- dest[15..0] >> temp
dest[31..16] <- dest[31..16] >> temp
dest[47..32] <- dest[47..32] >> temp
dest[63..48] <- dest[63..48] >> temp
Note: Shift words in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRLW mm,mm/m64 0FH D1H PostByte
PSRLW mm,Imm8 0FH 71H/2 PostByte ImmData
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBB dest,src
Description:
dest[7..0] <- dest[7..0] - src[7..0]
dest[15..8] <- dest[15..8] - src[15..8]
dest[23..16] <- dest[23..16] - src[23..16]
dest[31..24] <- dest[31..24] - src[31..24]
dest[39..32] <- dest[39..32] - src[39..32]
dest[47..40] <- dest[47..40] - src[47..40]
dest[55..48] <- dest[55..48] - src[55..48]
dest[63..56] <- dest[63..56] - src[63..56]
Note: This instruction subtract packed byte in MMXregister/memory from
packed byte in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBB mm,mm/m64 0FH F8H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBD dest,src
Description:
dest[31..0] <- dest[31..0] - src[31..0]
dest[63..32] <- dest[63..48] - src[63..32]
Note: This instruction subtract packed dword in MMXregister/memory from
packed dword in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBD mm,mm/m64 0FH FAH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBSB dest,src
Description:
dest[7..0] <- SaturateToSignedByte(dest[7..0] - src[7..0])
dest[15..8] <- SaturateToSignedByte(dest[15..8] - src[15..8])
dest[23..16] <- SaturateToSignedByte(dest[23..16] - src[23..16])
dest[31..24] <- SaturateToSignedByte(dest[31..24] - src[31..24])
dest[39..32] <- SaturateToSignedByte(dest[39..32] - src[39..32])
dest[47..40] <- SaturateToSignedByte(dest[47..40] - src[47..40])
dest[55..48] <- SaturateToSignedByte(dest[55..48] - src[55..48])
dest[63..56] <- SaturateToSignedByte(dest[63..56] - src[63..56])
Note: This instruction subtract signed packed byte in MMXregister/memory
from signed packed byte in MMX register and saturate.
If the result is larger or smaller than the range of a signed byte,
the value is saturated; in the case of an overflow - to 7FH, and the
case of an underflow - to 80H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBSB mm,mm/m64 0FH E8H PostByte
P55C: n/a
future P6: n/a
Top
CPU: Cyrix with Extended MMX Instruction Set Type of Instruction: User Instruction: PSUBSIW dest, src Description: mmi[15..0] <- SaturateToSignedWord(dest[15..0] - src[15..0]); mmi[31..16] <- SaturateToSignedWord(dest[31..16] - src[31..16]); mmi[47..32] <- SaturateToSignedWord(dest[47..32] - src[47..32]); mmi[63..48] <- SaturateToSignedWord(dest[63..48] - src[63..48]); Note: mmi is implied MMX register. Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PSUBSIW mm,mm/m64 0FH 55H PostByteTop
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBSW dest,src
Description:
dest[15..0] <- SaturateToSignedWord(dest[15..0] - src[15..0])
dest[31..16] <- SaturateToSignedWord(dest[31..16] - src[31..16])
dest[47..32] <- SaturateToSignedWord(dest[47..32] - src[47..32])
dest[63..48] <- SaturateToSignedWord(dest[63..48] - src[63..48])
Note: This instruction subtract signed packed word in MMXregister/memory
from signed packed word in MMX register and saturate.
If the result is larger or smaller than the range of a signed word,
the value is saturated; in the case of an overflow - to 7FFFH, and the
case of an underflow - to 8000H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBSW mm,mm/m64 0FH E9H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBUSB dest,src
Description:
dest[7..0] <- SaturateToUnsignedByte(dest[7..0] - src[7..0])
dest[15..8] <- SaturateToUnsignedByte(dest[15..8] - src[15..8])
dest[23..16] <- SaturateToUnsignedByte(dest[23..16] - src[23..16])
dest[31..24] <- SaturateToUnsignedByte(dest[31..24] - src[31..24])
dest[39..32] <- SaturateToUnsignedByte(dest[39..32] - src[39..32])
dest[47..40] <- SaturateToUnsignedByte(dest[47..40] - src[47..40])
dest[55..48] <- SaturateToUnsignedByte(dest[55..48] - src[55..48])
dest[63..56] <- SaturateToUnsignedByte(dest[63..56] - src[63..56])
Note: This instruction subtract unsigned packed byte in MMXregister/memory
from unsigned packed byte in MMX register and saturate.
If the result element is less than zero (a negative value), it is
saturated to 00H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBUSB mm,mm/m64 0FH D8H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBUSW dest,src
Description:
dest[15..0] <- SaturateToUnsignedWord(dest[15..0] - src[15..0])
dest[31..16] <- SaturateToUnsignedWord(dest[31..16] - src[31..16])
dest[47..32] <- SaturateToUnsignedWord(dest[47..32] - src[47..32])
dest[63..48] <- SaturateToUnsignedWord(dest[63..48] - src[63..48])
Note: This instruction subtract unsigned packed word in MMXregister/memory
from unsigned packed word in MMX register and saturate.
If the result element is less than zero (a negative value), it is
saturated to 0000H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBUSW mm,mm/m64 0FH D9H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBW dest,src
Description:
dest[15..0] <- dest[15..0] - src[15..0]
dest[31..16] <- dest[31..16] - src[31..16]
dest[47..32] <- dest[47..32] - src[47..32]
dest[63..48] <- dest[63..48] - src[63..48]
Note: This instruction subtract packed word in MMXregister/memory from
packed word in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBW mm,mm/m64 0FH F9H PostByte
P55C: n/a
future P6: n/a
Top
CPU: 3DNow! extension (Athlon CPU) Type of Instruction: User Instruction: PSWAPD dest, src Description: dest[63:32] <- src[31:0]; dest[31:0] <- src[63:32]; Note: Flags Affected: None ++++++++++++++++++++++++++++++++++ COP & Times: PSWAPD mm,mm/m64 0Fh 0Fh BBh PostbyteTop
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKHBW dest,src
Description:
dest[63..56] <- src[63..56]
dest[55..48] <- dest[63..56]
dest[47..40] <- src[55..48]
dest[39..32] <- dest[55..48]
dest[31..24] <- src[47..40]
dest[23..16] <- dest[47..40]
dest[15..8] <- src[39..32]
dest[7..0] <- dest[39..32]
Note: This instruction unpack and interleave the high-order data elements
of the destination and source operands into the destination operand.
The low-order data elements are ignored.
When unpacking from a memory operand, the full 64-bit operand is
accessed from memory. The instruction uses only the high-order 32 bits.
If the source operand is all zeros, the result is a zero extension of
the high-order elements of the destination operand. When using
PUNPCKHBW instruction the bytes are zero extended, or unpacked into
unsigned words.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKHBW mm,mm/m64 0FH 68H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKHDQ dest,src
Description:
dest[63..32] <- src[63..32]
dest[31..0] <- dest[63..32]
Note: This instruction unpack and interleave the high-order data elements
of the destination and source operands into the destination operand.
The low-order data elements are ignored.
When unpacking from a memory operand, the full 64-bit operand is
accessed from memory. The instruction uses only the high-order 32 bits.
If the source operand is all zeros, the result is a zero extension of
the high-order elements of the destination operand.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKHDQ mm,mm/m64 0FH 6AH PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKHWD dest,src
Description:
dest[63..56] <- src[63..48]
dest[47..32] <- dest[63..48]
dest[31..16] <- src[47..32]
dest[15..0] <- dest[47..32]
Note: This instruction unpack and interleave the high-order data elements
of the destination and source operands into the destination operand.
The low-order data elements are ignored.
When unpacking from a memory operand, the full 64-bit operand is
accessed from memory. The instruction uses only the high-order 32 bits.
If the source operand is all zeros, the result is a zero extension of
the high-order elements of the destination operand. When using
PUNPCKHWD instruction the words are zero extended, or unpacked into
unsigned doublewords.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKHWD mm,mm/m64 0FH 69H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKLBW dest,src
Description:
dest[63..56] <- src[31..24]
dest[55..48] <- dest[31..24]
dest[47..40] <- src[23..16]
dest[39..32] <- dest[23..16]
dest[31..24] <- src[15..8]
dest[23..16] <- dest[15..8]
dest[15..8] <- src[7..0]
dest[7..0] <- dest[7..0]
Note: This instruction unpack and interleave the low-order data elements
of the destination and source operands into the destination operand.
The high-order data elements are ignored.
When the source data comes from 64-bit registers, the upper 32 bits
are ignored.
When unpacking from a memory operand, only 32 bits are accessed. The
instruction uses all 32 bits.
If the source operand is all zeros, the result is a zero extension of
the low-order elements of the destination operand. When using
PUNPCKLBW instruction the bytes are zero extended, or unpacked into
unsigned words.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKLBW mm,mm/m32 0FH 60H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKLDQ dest,src
Description:
dest[63..32] <- src[31..0]
dest[31..0] <- dest[31..0]
Note: This instruction unpack and interleave the low-order data elements
of the destination and source operands into the destination operand.
When the source data comes from 64-bit registers, the upper 32 bits
are ignored.
When unpacking from a memory operand, only 32 bits are accessed. The
instruction uses all 32 bits.
If the source operand is all zeros, the result is a zero extension of
the low-order elements of the destination operand.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKLDQ mm,mm/m32 0FH 62H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKLWD dest,src
Description:
dest[63..48] <- src[31..16]
dest[47..32] <- dest[31..16]
dest[31..16] <- src[15..0]
dest[15..0] <- dest[15..0]
Note: This instruction unpack and interleave the low-order data elements
of the destination and source operands into the destination operand.
When the source data comes from 64-bit registers, the upper 32 bits
are ignored.
When unpacking from a memory operand, only 32 bits are accessed. The
instruction uses all 32 bits.
If the source operand is all zeros, the result is a zero extension of
the low-order elements of the destination operand. When using
PUNPCKLWD instruction the words are zero extended, or unpacked into
unsigned doublewords.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKLWD mm,mm/m32 0FH 61H PostByte
P55C: n/a
future P6: n/a
Top
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PXOR dest,src
Description:
dest <- dest XOR src
Note: XOR 64 bits from MMXregister/memory to MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PXOR mm,mm/m64 0FH EFH PostByte
P55C: n/a
future P6: n/a
Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: RCPPS dest,src Description: for i = 0 to 3 do dest[<i>] = APPROX(1.0 / src[<i>]); endfor <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: RCPPS xmm1,xmm2/m128 ---- 0F 53 /r ---- 1Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: RCPSS dest,src Description: dest[31..0] = APPROX(1.0 / src[31..0]); Physical Form and Timing: RCPSS xmm1,xmm2/m32 ---- F3 0F 53 /r ---- 1Top
CPU: Pentium (tm), IBM 386SLC,486SLC,486SLC2
Type of Instruction: System
Instruction: RDMSR
Description:
IF (ECX is valid number of MSR) and (CPL=0) THEN
{
EDX:EAX <- MSR [ECX];
}
ELSE
{
General Protection Fault INT 0DH (0)
}
END
Refer to Appendix W for more info.
Flags Affected: None
CPU mode: RM,PM0,SMM
Physical Form: RDMSR
COP (Code of Operation): 0FH 32H
Clocks: Pentium : 20-24
Top
CPU: Pentium (tm) Pro (P6)
Type of Instruction: User
Instruction: RDPMC
Description:
IF ((CPL<>0) AND (CR4.PCE==0))
THEN { INT D (0) ; GENERAL PROTECTION FAULT }
ELSE { EDX:EAX <- PERFOMANCE_MONITORING_REGISTER[ECX] }
Note: Valid ECX values is 0,1.
Invalid ECX values call INT D(0)
Note: CR4.PSE = bit 8 of CR4
Note: Perfomance Monitoring Registers (PMR) are aliases to some Perfomance
Monitoring MSRs:
MSR 12h is Counter #0 (Read/Write) (Perfomance Monitoring Counter # 0)
bits Description
63..40 Reserved
39..0 Current counter value
MSR 13h is Counter #1 (Read/Write) (Perfomance Monitoring Counter # 1)
bits Description
63..40 Reserved
39..0 Current counter value
++++++++++++++++++++++++++++++++++++++
COP & Times:
RDPMC 0FH 33H
P6: n/a
Top
CPU: Cyrix Cx6x86MX Type of Instruction: SMM mode only Instruction: RDSHR dest Description: dest <- SMHR (SMM Header pointer Register) Note: Format of SMHR: Bits Description 31..2 SMM Header pointer address 1 Reserved 0 (Valid) if =1, then address valid Note: SMHR pointed to phisical address SMM space area, where will be saved non-SMM contex when entered SMM. Format of SMM Header (for Cx6x86MX): Address Size Description (Relative (bit) to SMH pointer) +00 32 DR7 -04h 32 EFLAGS -08h 32 CR0 -0Ch 32 current EIP -10h 32 next EIP -14h 16 CS selector -16h 16 Reserved -18h 64 CS descriptor -20h 16 Context all reserved , but 22..21 CPL -22h 16 Context all reserved, but 15 N (Nested SMI indicator) if = 1, current SMI serviced from SMM. 13 IS (Internal SMI indicator) if = 1, current SMI is result of internal SMI event. if = 0, current SMI result of external event 4 H (SMI during CPU HALT state indicator) if = 1, CPU was in halt or shutdown state, before SMI. 3 S (Software SMM entry indicator) if = 1, SMM is result of SMINT instruction 2 P (REP INSx/REP OUTSx indicator) if = 1, current instruction have REP pfix. 1 I (IN,INSx,OUT,OUTx indicator) if = 1, current instruction perform I/O read/write 0 C (Code segment writable indicator) if = 1, current code segment is writable, if = 0, ---//---- is not writable. -24h 16 I/O Data Size -26h 16 I/O Write Address -28h 32 I/O Write Data -2Ch 32 ESI or EDI total size of SMM header = 30h Flags Affected: None CPU mode: SMM ++++++++++++++++ Physical Form: RDSHR reg/mem32 COP (Code of Operation) : 0FH 36H Postbyte Clocks Cx6x86MX: n/aTop
CPU: Pentium (tm), Pentium Pro, AMD Am5k86
Type of Instruction: System/User
Instruction: RDTSC
Description:
IF (CR4.TSD=0) or ((CR4.TSD=1) and (CPL=0)) THEN
{
EDX:EAX <- TSC;
}
ELSE
{
General Protection Fault INT 0DH (0)
}
END
Note: TSC is one of MSR and after global hardware reset (not SRESET , but
RESET ) it clear to 0000000000000000H.
TSC is MSR index 10h. TSC may set using WRMSR instruction.
TSC incremented every CPU core clock cycle.
Flags Affected: None
CPU mode: RM,PM0,SMM
; PM,VM if enable
Physical Form: RDTSC
COP (Code of Operation): 0FH 31H
Clocks: Pentium : n/a [20-24]
Top
CPU: NEC/Sony all V-series
Type of Instruction: Prefix
Instruction: REPC
Description:
DO
CX=CX-1;
SERVICE_PENDING_INTERRUPT;
STRING_INSTRUCTION;
LOOPWHILE ((CX<>0) AND (CF==1));
Flags Affected: None
CPU Mode: RM 8086
Physical Form: REPC
COP (Code of Operation): 65H
Clocks: NEC V20 : 2
NEC V30 : 2
Top
CPU: NEC/Sony all V-series
Type of Instruction: Prefix
Instruction: REPNC
Description:
DO
CX=CX-1;
SERVICE_PENDING_INTERRUPT;
STRING_INSTRUCTION;
LOOPWHILE ((CX<>0) AND (CF<>1));
Flags Affected: None
CPU mode: RM 8086
Physical Form: REPNC
COP (Code of Operation): 64H
Clocks: NEC V20 : 2
NEC V30 : 2
Top
CPU: AMD Am386SXLV, Am386DXLV Type of Instruction: System Operation (Work only then CPL=0) Instruction: RES3 Description: Load All Registers (Include Shadow Registers) from Table Which Begin on place pointed ES:EDI Note: This instruction is AMD analog Intel's LOADALL instruction but it's more i.c. return from SMM used this instruction. Then in SMM table is in SMRAM, then non SMM then table is in main memory. Format of RES3 Table: Offset Len Description 0H 4 CR0 4H 4 EFLAGS 8H 4 EIP CH 4 EDI 10H 4 ESI 14H 4 EBP 18H 4 ESP 1CH 4 EBX 20H 4 EDX 24H 4 ESX 28H 4 EAX 2CH 4 DR6 30H 4 DR7 34H 4 TR (16 bit, zero filled up) 38H 4 LDT --------- 3CH 4 GS --------- 40H 4 FS --------- 44H 4 DS --------- 48H 4 SS --------- 4CH 4 CS --------- 50H 4 ES --------- 54H 4 TSS.attrib 58H 4 TSS.base 5CH 4 TSS.limit 60H 4 Reserved 64H 4 IDT.base 68H 4 IDT.limit 6CH 4 REP OUTS overrun flag 70H 4 GDT.base 74H 4 GDT.limit 78H 4 LDT.attrib 7CH 4 LDT.base 80H 4 LDT.limit 84H 4 GS.attrib 88H 4 GS.base 8CH 4 GS.limit 90H 4 FS.attrib 94H 4 FS.base 98H 4 FS.limit 9CH 4 DS.attrib A0H 4 DS.base A4H 4 DS.limit A8H 4 SS.attrib ACH 4 SS.base B0H 4 SS.limit B4H 4 CS.attrib B8H 4 CS.base BCH 4 CS.limit C0H 4 ES.attrib C4H 4 ES.base C8H 4 ES.limit Unknown Unusable area 100H 4 Temporary register 104H 4 ------------- 108H 4 ------------- 10CH 4 ------------- 110H 4 ------------- 114H 4 ------------- 118H 4 ------------- 11CH 4 ------------- 120H 4 ------------- 124H 4 Last EIP (Last instruction EIP for Restart) See APPENDIX X for more info. Format of Attrib field: Byte Description 0 0s 1 AR (Access Right) byte in the Descriptor format Note: P bit is a valid bit if valid bit=0 then Shadow Register is invalid and INT 0DH - General Protection Fault call DPL of SS,CS det. CPL 2-3 0s Flags Affected: All (FLAGS Register Reload) CPU mode: RM,PM0,SMM Physical Form: RES3 COP (Code of Operation): 0FH 07H Note: Code is same with Intel's LOADALL Clocks: Am386SXLV : 366 Am386DXLV : 291Top
CPU: AMD Am486SXLV, Am486DXLV Type of Instruction: System Operation (Work only then CPL=0) Instruction: RES3 Description: Load All Registers (Include Shadow Registers) from Table Which Begin on place pointed ES:EDI Note: This instruction is AMD analog Intel's LOADALL instruction but it's more i.c. return from SMM used this instruction. Then in SMM table is in SMRAM, then non SMM then table is in main memory. Format of RES3 Table: Offset Len Description 0H 4 CR0 4H 4 EFLAGS 8H 4 EIP CH 4 EDI 10H 4 ESI 14H 4 EBP 18H 4 ESP 1CH 4 EBX 20H 4 EDX 24H 4 ESX 28H 4 EAX 2CH 4 DR6 30H 4 DR7 34H 4 TR (16 bit, zero filled up) 38H 4 LDT --------- 3CH 4 GS --------- 40H 4 FS --------- 44H 4 DS --------- 48H 4 SS --------- 4CH 4 CS --------- 50H 4 ES --------- 54H 4 TSS.attrib 58H 4 TSS.base 5CH 4 TSS.limit 60H 4 Reserved 64H 4 IDT.base 68H 4 IDT.limit 6CH 4 REP OUTS overrun flag 70H 4 GDT.base 74H 4 GDT.limit 78H 4 LDT.attrib 7CH 4 LDT.base 80H 4 LDT.limit 84H 4 GS.attrib 88H 4 GS.base 8CH 4 GS.limit 90H 4 FS.attrib 94H 4 FS.base 98H 4 FS.limit 9CH 4 DS.attrib A0H 4 DS.base A4H 4 DS.limit A8H 4 SS.attrib ACH 4 SS.base B0H 4 SS.limit B4H 4 CS.attrib B8H 4 CS.base BCH 4 CS.limit C0H 4 ES.attrib C4H 4 ES.base C8H 4 ES.limit Unknown Unusable area 100H 4 Temporary register 104H 4 ------------- 108H 4 ------------- 10CH 4 ------------- 110H 4 ------------- 114H 4 ------------- 118H 4 ------------- 11CH 4 ------------- 120H 4 ------------- 124H 4 Last EIP (Last instruction EIP for Restart) 128H 4 PEIP - Previous SRAM space instruction pointer 12EH 36 Unused 150H 22 Floating Pointer Internal Registers (Am486DXLV) See Appendix X for more info. Format of Attrib field: Byte Description 0 0s 1 AR (Access Right) byte in the Descriptor format Note: P bit is a valid bit if valid bit=0 then Shadow Register is invalid and INT 0DH - General Protection Fault call DPL of SS,CS det. CPL 2-3 0s Flags Affected: All (FLAGS Register Reload) CPU mode: RM,PM0,SMM Physical Form: RES4 COP (Code of Operation): 0FH 07H Note: Code is same with Intel's LOADALL Clocks: Am486SXLV : N/ATop
Switch Interrupt. CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: RETRBI Description: PC <- Save PC; PSW <- Save PSW; Flags Affected: All CPU mode: RM +++++++++++++++++++++++ Physical Form: RETRBI COP (Code of Operation) : 0Fh 91h Clocks: 12Top
CPU: NEC V33/V53 only Type of Instruction: System Instruction: RETXA int_vector Description: [sp-1,sp-2] <- PSW ; PSW EQU FLAGS [sp-3,sp-4] <- PS ; PS EQU CS [sp-5,sp-6] <- PC ; PC EQU IP SP <- SP -6 IE <- 0 BRK <- 0 MD <- 0 PC <- [int_vector*4 +0,+1] PS <- [int_vector*4 +2,+3] Disable EA mode. Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: RETXA imm8 COP (Code of Operation) : 0Fh F0h imm8 Clocks: 12Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: ROL4 dest Description: AL dest bits 7 4 3 0 7 4 3 0 ------------- ------------- | | o <--------| <-|-o |<--\ ---------|---- ------------- | | | \---------------------------/ Note: This instruction Rotates (4bits) left out of dest through low 4bits of AL Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form : ROL4 reg/mem8 COP (Code of Operation) : 0FH 28H PostByte Clocks: ROL4 reg/mem8 NEC V20: 25/28Top
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: ROL4 dest Description: AL dest bits 7 4 3 0 7 4 3 0 ------------- ------------- | | o--|------>| o-|-> o-|--\ ---------^---- ------------- | | | \---------------------------/ Note: This instruction Rotates (4bits) right out of dest through low 4bits of AL Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form : ROR4 reg/mem8 COP (Code of Operation) : 0FH 2AH PostByte Clocks: ROR4 reg/mem8 NEC V20: 29/33Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: RSDC sreg,sorc
Description:
sreg [selector,shadow_descriptor] <- sorc
; sorc is register and descriptor structure (see below)
; Note: This instruction load segment register
; include shadow descriptor
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: RSDC sgeg,mem80
COP (Code of Operation) : 0FH 79H [mm sreg3 mmm]
Clocks IBM BL486DX: 10
TI 486SXL : 14
Note: sreg3 is: 000 ES
001 CS
010 SS
011 DS
100 FS
101 GS
Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: RSLDT sorc
Description:
LDTR [selector,shadow_descriptor] <- sorc
; sorc is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: RSLDT mem80
COP (Code of Operation) : 0FH 7BH [mm 000 mmm]
Clocks IBM BL486DX: 10
TI 486SXL : 14
Top
CPU: I486 SL Enhanced+,i486SL,i386CX,i386EX
Type of Instruction: System
Instruction: RSM
Description:
Restore execution state from SMRAM and
return to previous CPU mode
CPU mode: SMM only
( INT 6 - Undefined Opcode in all other mode )
Flags Affected: All
Note: CPU state restored from dump created entrance to SMM.
The CPU leave SMM and return to previous mode.
If CPU detect any invalid state it enters shutdown.
This invalid states is:
* The value stored in State Dump Base field is not 32K aligned
address
* Any Reserved bit of CR4 is set to 1 (Pentium only)
* Any illegal Combination of CR0:
** (PG=1 and PE=0)
** (NW=1 and CD=0)
Format of Execution State in SMRAM:
Offset Register
7FFCh CR0
7FF8h CR3
7FF4h EFLAGS
7FF0h EIP
7FECh EDI
7FE8h ESI
7FE4h EBP
7FE0h ESP
7FDCh EBX
7FD8h EDX
7FD4h ECX
7FD0h EAX
7FCCh DR7
7FC4h TR, upper 2 bytes reserved
7FC0h LDTR, upper 2 bytes reserved
7FBCh GS, upper 2 bytes reserved
7FB8h FS, upper 2 bytes reserved
7FB4h DS, upper 2 bytes reserved
7FB0h SS, upper 2 bytes reserved
7FACh CS, upper 2 bytes reserved
7FA8h ES, upper 2 bytes reserved
7F98h Reserved
7F94h IDT base (4 bytes)
7F8Ch Reserved
7F88h GDT base (4 bytes)
7F04h Reserved
7F02h Auto HALT Restart Slot (2 bytes)
Bits 15..2 are reserved
Bit 1 Bit 0 Description
0 0 Resume to next instruction in interrupted
program
0 1 Unpredictable
1 0 Return to next instruction after HALT
1 1 Return to HALT state
7F00h I/O Restart Slot (2 bytes)
When RSM execution if I/O restart slot = 0FFh then
EIP modified to instruction immediate preceding the
SMI# request i.e. CPU automatically reexecute I/O
instruction which be trapped by SMI.
7EFCh SMM Revision Identificator (4 bytes)
Bits Description
31..18 Reserved
17 If=1 Processor support SMBASE relocation
else not support
16 If =1 Processor support I/O Instruction Restart
15..0 SMM Revision Identificator
P5,486s = 0000h
P54C when I/O Restarts enable = 0002h
7EF8h SMBASE Slot (4 bytes)
SMBASE is 32KB aligned 32bit dword which contained a base
address for SMRAM.
Default value is 30000h
Starting Address for for jump in SMM is:
SMBASE+8000h
Starting address for State Save area is
SMBASE+[8000h+7FFFh]
7E00h Reserved
Note: In fields marked Reserved saved and restores next registers:
CR1,CR2,CR3, hidden descriptors for CS,DS,ES,FS,SS,GS.
Never saved registers: DR5-DR0,TR7-TR3,all FPU registers.
More Information Not available Yet.
Physical Form: RSM
COP (Code of Operation) : 0FH AAH
Clocks: i386CX : 338
i486 SL Enhanced : ???
IntelDX4 : 452 ; SMBASE relocation
: 456 ; AutoHALT restart
: 465 ; I/O Trap restart
Pentium : 83
Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: RSM
Description:
RESTORE CPU STATE FROM SMM HEADER AT THE TOP OF
SMM SPACE (defined by SMAR register);
EXIT SMM;
Format of SMM Header:
Offset Length Description
-00h - Nothing (Top of SMM space) (Not accessable)
-04h 32 DR7
-08h 32 EFLAGS
-0Ch 32 CR0
-10h 32 Current EIP
-14h 32 Next instruction EIP
-16h 16 Reserved
-18h 16 CS selector
-1Ch 32 CS descriptor(63-32)
-20h 32 CS descriptor(31-0)
-24h 32 SMM Flags
[ ALL BITS are Not available in Cx486S/S2/D/D2]
Bit Description
1 I (IN/INSx/OUT/OUTx Indicator)
If =0 current instruction performed
I/O read
=1 I/O write
2 P (REP INSx/OUTx Prefix)
If =1 current instruction has REP pfix.
=0 not has REP pfix
3 S (Software SMI)
If =1 current SMM is result of execution
SMINT instruction
=0 current SMM is result of hardware SMI
Note: TI 486SXL/SXL2 support only bits 1,2.
-26h 16 I/O Write Data size
[ Not available in Cx486S/S2/D/D2]
[ Not available in TI486SXL/SXL2]
[ Not available in TI486SLC/DLC/e]
1h = byte
3h = word
fh = dword
-28h 16 I/O Write Address
[ Not avaliable in Cx486S/S2/D/D2]
[ Not available in TI486SXL/SXL2]
[ Not available in TI486SLC/DLC/e]
-2Ch 32 I/O Write Data
[ Not avaliable in Cx486S/S2/D/D2]
[ Not available in TI486SXL/SXL2]
[ Not available in TI486SLC/DLC/e]
-30h 32 ESI or EDI
This field saved value of source/destination
for restart INSx/OUTSx instruction
[ Not avaliable in Cx486S/S2/D/D2]
Flags Affected: All
CPU mode: SMM
++++++++++++++++
Physical Form: RSM
COP (Code of Operation) : 0FH AAH
Clocks IBM BL486DX: 76
TI 486SXL : 58
Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: RSQRTPS dest,src Description: for i = 0 to 3 do dest[<i>] = APPROX(1.0 / SQRT(src[<i>])); endfor <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: RSQRTPS xmm1,xmm2/m128 ---- 0F 52 /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: RSQRTPS dest,src Description: dest[31..0] = APPROX(1.0 / SQRT(src[31..0])); Physical Form and Timing: RSQRTSS xmm1,xmm2/m128 ---- F3 0F 52 /r ---- 1Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
IBM BL486DX/DX2
Type of Instruction: System
Instruction: RSTS sorc
Description:
TR [selector,shadow_descriptor] <- sorc
; sorc is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: RSTS mem80
COP (Code of Operation) : 0FH 7DH [mm 000 mmm]
Clocks IBM BL486DX: 10
TI 486SXL : 14
Top
CPU: NEC/Sony V-series Type of Instruction: User Instruction: SET1 dest,bitnumb Description: BIT bitnumb OF dest <- 1; Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: SET1 reg/mem8,CL COP (Code of Operation) : 0FH 14H Postbyte Physical Form: SET1 reg/mem8,imm8 COP (Code of Operation) : 0FH 1CH Postbyte imm8 Physical Form: SET1 reg/mem16,CL COP (Code of Operation) : 0FH 15H Postbyte Physical Form: SET1 reg/mem16,imm8 COP (Code of Operation) : 0FH 1DH Postbyte imm8 Clocks: SET1 r/m8,CL r/m8,i8 r/m16,CL r/m16,i8 NEC V20: 4/13 5/14 4/13 5/14Top
CPU: Intel 8086 and all its clones and upward
compatibility chips.
Type of Instruction: User
Instruction: SETALC
Description:
IF (CF=0) THEN AL:=0 ELSE AL:=FFH;
Flags Affected: None
CPU mode: RM,PM,VM,SMM
Physical Form: SETALC
COP (Code of Operation): D6H
Clocks: 80286 : n/a [3]
80386 : n/a [3]
Cx486SLC : n/a [2]
i486 : n/a [3]
Pentium : n/a [3]
Note: n/a is Time that Intel etc not say.
[3] is real time it executed.
Top
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX) Type of instruction: User Instruction: SFENCE Description: Guranteed that every store instruction that precedes in program order the store fence instruction is globally visible before any store instruction follows the fence is globally visible. Physical Form and Timing: SFENCE ---- 0F AE F8 ---- ?Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: SHUFPS dest,src,sc Description: for i=0 to 3 do SEL = (sc >> (i*2)) AND 3; dest[<i>] <- src[<SEL>]; endfor Physical Form and Timing: SHUFPS xmm1,xmm2/m128,imm8 ---- 0F C6 /r imm8 ---- ?Top
CPU: AMD Am386SXLV,Am386DXLV
AMD 486s
Type of Instruction: System
Instruction: SMI
Description:
IF (SMIE=1) THEN
{
SAVE STATUS OF EXECUTION TO SMRAM;
ENTER SMM;
SMMS <- 1;
}
ELSE
{
INT 1;
}
END
Notes: SMIE is <Soft SMI Enable> (DR7.bit12)
=1 Enable soft SMI
=0 Disable soft SMI
SMMS is <SMM status bit> (DR6.bit12)
=1 SMM was entered
=0 SMM status cleared
Flags Affected: None
CPU mode: RM?,PM0
Physical Form: SMI
COP (Code of Operation): F1H
Clocks: Am386SXLV : 357
Am386DXLV : 325
Am486xxxx : Don't know, do you?
Top
CPU: Cyrix Cx486DX/DX2/DX4
IBM BL486DX/DX2
Note: Never in Cx486S/S2/D/D2
Never in any TI's chips.
Type of Instruction: System
Instruction: SMINT
Description:
SAVE CPU STATE TO SMM HEADER AT THE TOP OF
SMM SPACE (defined by SMAR register);
ENTER SMM MODE;
Format of SMM Header: Refer to Cyrix/IBM SMI Instruction
Flags Affected: None
CPU mode: CPL=0, CCR1.bit1=1, SMAR size >= 30h.
++++++++++++++++
Physical Form: SMINT
COP (Code of Operation) : 0FH 7EH
Clocks IBM BL486DX: 24
Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: SQRTPS dest,src Description: for i = 0 to 3 do dest[<i>] = SQRT(src[<i>]); endfor <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: SQRTPS xmm1,xmm2/m128 ---- 0F 51 /r ---- 56-114Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: SQRTSS dest,src Description: dest[31..0] = SQRT(src[31..0]); Physical Form and Timing: SQRTSS xmm1,xmm2/m32 ---- F3 0F 51 /r ---- 8-??Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: STMXCSR dest Description: dest <- MXCSR For format of MXCSR look LDMXCSR instruction Physical Form and Timing: STMXCSR m32 ---- 0F AE /3 ---- ?Top
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: STOP Description: PowerDown instruction, Stop Oscillator, Halt CPU. Flags Affected: None CPU mode: RM +++++++++++++++++++++++ Physical Form: STOP COP (Code of Operation) : 0Fh BEh Clocks: N/ATop
CPU: NEC/Sony all V-series Type of Instruction: User Instruction: SUB4S Description: BCD STRING (ADDRESS=ES:DI,LENGTH=CL) <- BCD STRING (ADDRESS=DS:SI,LENGTH=CL) - BCD STRING (ADDRESS=ES:DI,LENGTH=CL); Length of BCD string in CL; Note: si,di,cl and other registers not changed Flags Affected: OF,CF,ZF ;; ZF set if result is zero. ;; CF,OF set as result of operation with most ;; signification BCDs. CPU mode: RM +++++++++++++++++++++++ Physical Form: SUB4S COP (Code of Operation) : 0FH 22H Clocks: SUB4S NEC V20: ~7+19*CLTop
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: SUBPS dest,src Description: for i = 0 to 3 do dest[<i>] = dest[<i>] - src[<i>]; endfor <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: SUBPS xmm1,xmm2/m128 ---- 0F 5C /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: SUBSS dest,src Description: dest[31..0] = dest[31..0] - src[31..0]; Physical Form and Timing: SUBSS xmm1,xmm2/m32 ---- F3 0F 5C /r ---- 1Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: SVDC dest,sreg
Description:
dest <- sreg [selector,shadow_descriptor]
; dest is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: SVDC mem80,sreg
COP (Code of Operation) : 0FH 78H [mm sreg3 mmm]
Clocks IBM BL486DX: 18
TI 486SXL : 22
Note: sreg3 is: 000 ES
001 CS
010 SS
011 DS
100 FS
101 GS
Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: SVLDT dest
Description:
dest <- LDTR [selector,shadow_descriptor]
; dest is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: SVLDT mem80
COP (Code of Operation) : 0FH 7AH [mm 000 mmm]
Clocks IBM BL486DX: 18
TI 486SXL : 22
Top
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: SVTS dest
Description:
dest <- TR [selector,shadow_descriptor]
; dest is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: SVTS mem80
COP (Code of Operation) : 0FH 7CH [mm 000 mmm]
Clocks IBM BL486DX: 18
TI 486SXL : 22
Top
CPU: AMD K6-2,K6-3
Type of Instruction: User
Instruction: SYSCALL
Description:
if EFER.SCE = 1 then
{ ECX <- EIP
EIP <- STAR[31..0]
IF <- 0
VM <- 0
CS.selector <- STAR[47..32]
SS.selector <- (STAR[47..32]) + 8
CS.base <- 0
SS.base <- 0
CS.limit <- 4G
SS.limit <- 4G
CS.attr <- ReadOnly
SS.attr <- R/W, Expand-Up
CPL <- 0
} else #UD;
Note: Passing control to fixed entry point for faster OS calls.
see RDMSR for description of STAR (SYSCALL Target Address register)
Note: Command opcode equal to 286 LOADALL undocument instruction.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSCALL 0FH 05H
Am6k86: n/a
Top
CPU: Intel Pentium II
Type of Instruction: System
Instruction: SYSENTER
Description:
if CR.0.PE == 0 then #GP(0);
if SYSENTER_CS_MSR == 0 then #GP(0);
EFLAGS.VM <- 0;
EFLAGS.IF <- 0;
CS.SEL <- SYSENTER_CS_MSR;
CPL <- 0;
CS.BASE <- 0;
CS.LIMIT <- 0xffff;
CS.ATTR.G <- 1;
CS.ATTR.S <- 1;
CS.ATTR.TYPE <- 1011b;
CS.ATTR.D <- 1;
CS.ATTR.DPL <- 0;
CS.RPL <- 0;
CS.ATTR.P <- 1;
SS.SEL <- CS.SEL+8;
SS.BASE <- 0;
SS.LIMIT <- 0xffff;
SS.ATTR.G <- 1;
SS.ATTR.S <- 1;
SS.ATTR.TYPE <- 0011b;
SS.ATTR.D <- 1;
SS.ATTR.DPL <- 0;
SS.RPL <- 0;
SS.ATTR.P <- 1;
ESP <- SYSENTER_ESP_MSR;
EIP <- SYSENTER_EIP_MSR;
Note: How to check if this instruction present:
CPUID.SEP bit must be set.
AND
CPUID.FAMILY == 6 AND (CPUID.MODEL >=3) AND (CPUID.STEP >= 3)
Note: See MSR List for more Info. (MSRs 174h,175h,176h)
Note: Passing control to fixed entry point for faster OS calls.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSENTER 0FH 34H
P6: n/a
Top
CPU: Intel Pentium II
Type of Instruction: Privelege (CPL =0)
Instruction: SYSRET
Description:
if CR.0.PE == 0 then #GP(0);
if SYSENTER_CS_MSR == 0 then #GP(0);
EFLAGS.VM <- 0;
EFLAGS.IF <- 0;
CS.SEL <- SYSENTER_CS_MSR + 16;
CPL <- 0;
CS.BASE <- 0;
CS.LIMIT <- 0xffff;
CS.ATTR.G <- 1;
CS.ATTR.S <- 1;
CS.ATTR.TYPE <- 1011b;
CS.ATTR.D <- 1;
CS.ATTR.DPL <- 0;
CS.RPL <- 0;
CS.ATTR.P <- 1;
SS.SEL <- CS.SEL+8;
SS.BASE <- 0;
SS.LIMIT <- 0xffff;
SS.ATTR.G <- 1;
SS.ATTR.S <- 1;
SS.ATTR.TYPE <- 0011b;
SS.ATTR.D <- 1;
SS.ATTR.DPL <- 0;
SS.RPL <- 0;
SS.ATTR.P <- 1;
ESP <- SYSENTER_ESP_MSR;
EIP <- SYSENTER_EIP_MSR;
Note: See SYSENTER for more Info.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSEXIT 0FH 35H
P6: n/a
Top
CPU: AMD K6-2,K6-3
Type of Instruction: Privelege (CPL =0)
Instruction: SYSRET
Description:
if EFER.SCE == 1
{
if CPL == 0
{
EIP <- ECX
IF <- 1
CS.selector <- STAR[47..32] OR 3H
CS.base <- 0
CS.limit <- 4GB
CS.attr <- ReadOnly
SS <- (STAR[47..32]) + 16) OR 3H
} else #GP(0);
} else #UD;
Note: Passing control from OS entry point back to ring 3 client.
see RDMSR for description of STAR (SYSCALL Target Address register)
Note: Command opcode equal to 386/486 LOADALL undocument instruction.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSRET 0FH 07H
Am6k86: n/a
Top
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: NOT1 dest,bitnumb
Description:
IF dest IS 8BIT THEN bitn <- bitnumb AND 7;
IF dest IS 16BIT THEN bitn <- bitnumb AND Fh;
IF (BIT bitn OF dest) = 0 THEN
{
ZF <- 1;
}
ELSE {
ZF <- 0;
}
ENDIF
Flags Affected: ZF
CPU mode: RM
+++++++++++++++++++++++
Physical Form: TEST1 reg/mem8,CL
COP (Code of Operation) : 0FH 10H Postbyte
Physical Form: TEST1 reg/mem8,imm8
COP (Code of Operation) : 0FH 18H Postbyte imm8
Physical Form: TEST1 reg/mem16,CL
COP (Code of Operation) : 0FH 11H Postbyte
Physical Form: TEST1 reg/mem16,imm8
COP (Code of Operation) : 0FH 19H Postbyte imm8
Clocks: TEST1
r/m8,CL r/m8,i8 r/m16,CL r/m16,i8
NEC V20: 3/12 4/13 3/12 4/13
Top
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard Type of Instruction: System Instruction: TSKSW reg16 Description: Perform a High-Speed task switch to the register bank indicated by lower 3 bits of reg16. The PC and PSW are saved in the old banks. PC and PSW save Registers and the new PC and PSW values are retrived from the new register bank's save area. Note: See BRKCS instruction for more Info about banks. Flags Affected: All CPU mode: RM +++++++++++++++++++++++ Physical Form: TSCSW reg16 COP (Code of Operation) : 0Fh 94h <1111 1RRR> Clocks: 11Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: UCOMISS dest,src Description: OF <- 0; SF <- 0; AF <- 0; if (dest[31..0] UNORD src[31..0]) then ZF <- 1; PF <- 1; CF <- 1; else if (dest[31..0] > src[31..0]) then ZF <- 0; PF <- 0; CF <- 0; else if (dest[31..0] < src[31..0]) then ZF <- 0; PF <- 0; CF <- 1; else // Equal ZF <- 1; PF <- 0; CF <- 0; endif Physical Form and Timing: UCOMISS xmm1,xmm2/m32 ---- 0F 2E /r ---- ?Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: UNPCKHPS dest,src Description: dest[<0>] <- dest[<2>]; dest[<1>] <- src[<2>]; dest[<2>] <- dest[<3>]; dest[<3>] <- src[<3>]; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: UNPCKHPS xmm1,xmm2/m128 ---- 0F 15 /r ---- 2Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: UNPCKLPS dest,src Description: dest[<0>] <- dest[<0>]; dest[<1>] <- src[<0>]; dest[<2>] <- dest[<1>]; dest[<3>] <- src[<1>]; <0> = 31..0 <2> = 95..64 <1> = 63..32 <3> = 127..96 Physical Form and Timing: UNPCKLPS xmm1,xmm2/m128 ---- 0F 14 /r ---- 2Top
CPU: AMD Am5k86 (SSA/5, K5) Logical Form: UD Description: Caused #UD exception Flags Affected: No Flags Affected CPU Mode : RM,PM,VM,VME,SMM Exceptions : RM PM V86 VME SMM #UD #UD #UD #UD #UD Undefined Instruction No more Exceptions Note : This instruction caused #UD. AMD guaranteed that in future AMD's CPUs this instruction will caused #UD. Of course all previous CPUs (186+) caused #UD on this opcode. This instruction used by software writers for testing #UD exception servise routine. ++++++++++++++++++++++++++++++ Physical Form : UD COP (Code of Operation) : 0Fh FFh Clocks : UD 8088: Not supported NEC V20: Not supported 80186: ~int 80286: ~int 80386: ~int Cx486SLC: ~int i486: ~int Cx486DX: ~int Cx5x86: ~int Pentium: ~int Nx5x86: ~int Cx6x86: ~int Am5k86: ~int Pentium Pro: ~int ++++++++++++++++++++++++++++++Top
CPU: Pentium Pro+ and all other Logical Form: UD2 Description: Caused #UD exception Flags Affected: No Flags Affected CPU Mode : RM,PM,VM,VME,SMM Exceptions : RM PM V86 VME SMM #UD #UD #UD #UD #UD Undefined Instruction No more Exceptions Note : This instruction caused #UD. Intel guaranteed that in future Intel's CPUs this instruction will caused #UD. Of course all previous CPUs (186+) caused #UD on this opcode. This instruction used by software writers for testing #UD exception servise routine. ++++++++++++++++++++++++++++++ Physical Form : UD2 COP (Code of Operation) : 0Fh 0Bh Clocks : UD2 8088: Not supported NEC V20: Not supported 80186: ~int 80286: ~int 80386: ~int Cx486SLC: ~int i486: ~int Cx486DX: ~int Cx5x86: ~int Pentium: ~int Nx5x86: ~int Cx6x86: ~int Am5k86: ~int Pentium Pro: ~int ++++++++++++++++++++++++++++++Top
CPU: AMD Am386SXLV,Am386DXLV
AMD 486s
IBM 486SLC2
Type of Instruction: Special System
Instruction: UMOV dest,sorc
Description:
dest <- sorc;
Note!!!!!: But all memory operands placed in Main memory only !
( i.e. not in SMRAM then in SMM )
WARNING: UMC's CPUs hang on execution this instruction !!!!!!
check that CPU is none UMC's before
Note: On Cyrix's CPUs UMOV opcodes do nothing. This way used to
determination of Cyrix Microprocessors.
Note: Pentium P54C never support this instruction
Flags Affected: None
CPU mode: RM?,PM?,VM?,SMM
+++++++++++++++++++++++
Physical Form: UMOV r/m8,r8
COP (Code of Operation) : 0FH 10H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/2
IBM 486SLC2 : 4
+++++++++++++++++++++
Physical Form: UMOV r/m16,r16
UMOV r/m32,r32
COP (Code of Operation) : 0FH 11H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/2
IBM 486SLC2 : 4
+++++++++++++++++++++++
Physical Form: UMOV r8,r/m8
COP (Code of Operation) : 0FH 12H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/4
IBM 486SLC2 : 4
+++++++++++++++++++++
Physical Form: UMOV r16,r/m16
UMOV r32,r/m32
COP (Code of Operation) : 0FH 13H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/4
IBM 486SLC2 : 4
Top
CPU: I486 +
Type of Instruction: System
Instruction: WBINVD
Description:
IF (internal cache is WB and in WB mode) THEN
{
Write Back Internal Cache;
}
Flush internal cache;
Signal external cache to Write Back;
Signal external cache to Flush;
Notes: This instruction not work in Real Mode and in
Protected mode work only in ring 0 ;
Flags Affected: None
CPU mode: PM0,SMM
Physical Form: INVD
COP (Code of Operation): 0FH 09H
Clocks: Cyrix Cx486SLC : 4
i486 : 5
Pentium : 2000+
Top
CPU: Pentium (tm), IBM 486SLC2
Type of Instruction: System
Instruction: WRMSR
Description:
IF (ECX is valid number of MSR) and (CPL=0) THEN
{
MSR [ECX] <- EDX:EAX;
}
ELSE
{
General Protection Fault INT 0DH (0)
}
END
Flags Affected: None
Note: Refer to RDMSR for more Info.
CPU mode: RM,PM0,SMM
Physical Form: WRMSR
COP (Code of Operation): 0FH 30H
Clocks: Pentium : 30-45
Top
CPU: Cyrix Cx6x86MX Type of Instruction: SMM mode only Instruction: WRSHR src Description: SMHR <- src Note: See RDSHR for more details Flags Affected: None CPU mode: SMM ++++++++++++++++ Physical Form: RDSHR reg/mem32 COP (Code of Operation) : 0FH 37H Postbyte Clocks Cx6x86MX: n/aTop
CPU: i486+ Type of Instruction: User Instruction: XADD dest,sorc Description: Temporary <- dest; dest <- dest + sorc; sorc <- Temporary; Flags Affected: ZF,OF,SF,AF,PF,CF ( like ADD instruction ) ( see description) CPU mode: RM,PM,VM,SMM +++++++++++++++++++++++ Physical Form: XADD r/m8,r8 COP (Code of Operation) : 0FH C0H Postbyte Clocks: Intel i486 : 3/4 Cyrix Cx486SLC : 3/6 Pentium (tm) : 3/4 Penalty if cache miss : Intel i486 : 6/2 ; Unlocked/Locked Cyrix Cx486SLC : 0 ; N/A +++++++++++++++++++++ Physical Form: XADD r/m16,r16 XADD r/m32,r32 COP (Code of Operation) : 0FH C1H Postbyte Clocks: Intel i486 : 3/4 Cyrix Cx486SLC : 3/6 Pentium (tm) : 3/4 Penalty if cache miss : Intel i486 : 6/2 ; Unlocked/Locked Cyrix Cx486SLC : 1 ; N/ATop
CPU: 80386 step A0-B0 only Type of Instruction: User Instruction: XBTS dest,base,bitoffset,len Description: Write bit string length <len> bits from bitfield, defined by <base> and bitsoffset <bitoffset> from this base to start of the field to read. String read from this start field bit to higher memory addresses or register bits. And after it string placed to <dest> operand, lowest bit of register or memory to bit 0 of <dest>. Note: Use SHLD/SHRD instructions for extract bits strings. On 80386 steps B1+ this opcode generation INT 6, and on some of 486 other instruction replace this instruction opcode. Flags Affected: None CPU mode: RM,PM,VM +++++++++++++++++++++++ Physical Form: XBTS r16,r/m16,AX,CL XBTS r32,r/m32,EAX,CL COP (Code of Operation) : 0FH A6H Postbyte Clocks: XBTS 80386: 6/13Top
CPU: Pentium III+ (KNI/MMX2) Type of instruction: User Instruction: XORPS dest,src Description: dest = dest XOR src; // Bitwize 128-bit Physical Form and Timing: XORPS xmm1,xmm2/m128 ---- 0F 57 /r ---- 2Top
Cyrix Cx486SLC/DLC configuration Registers
for Cx486DLC:
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
NCR1 Non-cacheble Region #0 C4H-C6H 24
NCR2 Non-cachable Region #1 C7H-C9H 24
NCR3 Non-cacheble Region #2 CAH-CCH 24
NCR4 Non-cacheble Region #4 CDH-CFH 24
for Cx486SLC:
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
NCR1 Non-cacheble Region #0 C5H-C6H 16
NCR2 Non-cachable Region #1 C8H-C9H 16
NCR3 Non-cacheble Region #2 CBH-CCH 16
NCR4 Non-cacheble Region #4 CEH-CFH 16
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH then Cyrix CPU
generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR0 00H
CCR1 xxxx xxx0B
NCR1 000Fh
NCR2 0
NCR3 0
NCR4 0
format of registers:
CCR0:
Bit Name Description
7 SUSPEND
If =1 then enable SUSP# and SUSPA# pins, which used for
put CPU in PowerSave mode.
If =0 disable
6 CO (Cache Organisation)
If =0 2ways set associative
If =1 Dirrect Mapped
5 BARB
If =1 then enable flushing internal cache when begining
HOLD state.
IF =0 disable.
4 FLUSH
If =1 enable input pin FLUSH#
if =0 disable
3 KEN
If =1 enable input pin KEN#
if =0 disable
2 A20M
If =1 enable input pin A20M#
if =0 disable
1 NC1
If=1 then 640KB-1MB area never caching
If=0 caching (but see NCRi)
0 NC0
If=1 then first 64K of each 1MB bounds not caching,
when in Real or Virtual8086 mode
If =0 caching
CCR1:
Bit Name Description
7-1 Reserved
0 RPL
If =1 then enable RPLSET,RPLVAL# pins
If =0 this pins are disable and float.
NCRi:
Byte Bits Description
0 7-0 Address bits A31-A24 of non-cacheble region start
(Reserved for Cx486SLC)
1 7-0 Address bits A23-A16 of non-cachable region start
2 7-4 Address bits A15-A12 of non-cacheble region start
2 3-0 Size of non-cacheble block:
0000 Disable NCRi
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4G
NCRi bytes:
Byte
NCRi 0 1 2
NCR1 C4H C5H C6H
NCR2 C7H C8H C9H
NCR3 CAH CBH CCH
NCR4 CDH CEH CFH
Top
Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
configuration Registers
Register Full Register Name Index size(bits)
CCR1 Configuration Control Register #1 C1H 8
CCR2 Configuration Control Register #2 C2H 8
CCR3 Configuration Control Register #3 C3H 8
SMAR SMM Address Region CDH-CFH 24
DIR0 Device Identification register #0 FEH 8
DIR1 Device Identification register #1 FFH 8
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
CCR1:
Bit Name Description
7..5 Reserved
4 NO_LOCK (Negate LOCK#)
3 MMAC (Main Memory Access)
If =1 then all data access which occur within SMI
routine (when SMAC=1) accessing main memory instead
SMM space
=0 No affects on access
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 RPL (Enable RPL pins)
If=1 then enable output pins RPLSET(1-0) and RPLVAL#
=0 Float it
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6 BWRT (Enable Burst Write Cycle)
If =1 enable use of 16byte burst WB cycle
=0 disable
5 BARB (Enable cache coherency on Bus Arbitration)
If =1 enable write back of all dirty cache data when
HOLD is requered and prior to asserting HLDA.
=0 isable
4 WT1 (Write-Through Region 1)
If =1 Forces all writes to the 640KB-1MB region that
hit in cache issued on the external bus
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 WBAK (Enable WB Cache Interface pins)
If =1 then enable INVAL,WM_RST and HITM# pins
=0 float it
0 COP?? Reserved
(Award BIOS used this bit during coprocessor Test,
in Cx486S, Cx486S2 only)
(may be turn coprocessor on :)))
CCR3:
Note: Cyrix Cx486S/D never have CCR3 register.
Bit Name Description
7..2 Reserved
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
SMAR:
(Index CDh)
Bit Description
7..0 A31..A24 bits of starting adress of SMM region
(Index CEh)
Bit Description
7..0 A23..A16 bits of starting adress of SMM region
(Index CFh)
Bit Description
7..4 A15..A12 bits of starting adress of SMM region
3..0 Size of SMM region:
0000 SMM region disabled
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4K
DIR0:
Bit Description
7..0 (Device Identification)
-------------------------------------------
for Cx486SLC/e = 00h
for Cx486DLC = 01h
for Cx486SLC2 = 02h
for Cx486DLC2 = 03h
for Cx486SRx = 04h
for Cx486DRx = 05h
for Cx486SRx2 = 06h
for Cx486DRx2 = 07h
for Cx486SRu = 08h
for Cx486DRu = 09h
for Cx486SRu2 = 0Ah
for Cx486DRu2 = 0Bh
for Cx486S = 10h ; B Step
for Cx486S2 = 11h ; B Step
for Cx486Se = 12h or 14h or 16h ; 12h - B step
for Cx486S2e = 13h or 15h or 17h ; 12h - B step
for Cx486DX/BL486DX = 1Ah
for Cx486DX2/BL486DX2 = 1Bh
for ST486DX2 = 1Bh
for TI486DX2 = 1Bh
-------------------------------------------
for Cx486DX4 (x2 mode)= 1Bh (x2 mode)
Note: DIR1 = 36h for DX4
1Fh (x3 mode)
-------------------------------------------
for Cx5x86 (M1sc) = 28h (x1,S)
= 29h (x2,S)
= 2Ah (x1,P)
= 2Bh (x2,P)
= 2Ch (x4,S)
= 2Dh (x3,S)
= 2Eh (x4,P)
= 2Fh (x3,P)
-------------------------------------------
for Cyrix Cx6x86 (M1) = 20h,30h (1x,S) [DIR1 < 20h]
= 21h,31h (2x,S) [DIR1 < 20h]
= 22h,32h (1x,P) [DIR1 < 20h]
= 23h,33h (2x,P) [DIR1 < 20h]
= 24h,34h (4x,S) [DIR1 < 20h]
= 25h,35h (3x,S) [DIR1 < 20h]
= 26h,36h (4x,P) [DIR1 < 20h]
= 27h,37h (3x,P) [DIR1 < 20h]
-------------------------------------------
for Cyrix Cx6x86L(M1) = 30h (1x) [DIR1 > 21h]
= 31h (2x) [DIR1 > 21h]
= 35h (3x) [DIR1 > 21h]
= 34h (4x) [DIR1 > 21h]
-------------------------------------------
for Cyrix MediaGX = 41h (3x) [DIR1: 00h-2Fh]
= 44h (4x,S) [DIR1: 00h-2Fh]
= 45h (3x,S) [DIR1: 00h-2Fh]
= 46h (4x,P) [DIR1: 00h-2Fh]
= 47h (3x,P) [DIR1: 00h-2Fh]
------------------------------------------- cor/PCI
for Cyrix GXm = 40h x4
= 41h [DIR1: 50h-FFh] x10
[DIR1: 30h-4Fh] x6
= 42h x4
= 43h x6
= 44h [DIR1: 50h-FFh] x9
[DIR1: 30h-4Fh] x7
= 45h [DIR1: 50h-FFh] x5
[DIR1: 30h-4Fh] x8
= 46h x7
= 47h [DIR1: 30h-4Fh] x5
[DIR1: 50h-FFh] x8
-------------------------------------------
for Cyrix 6x86MX (M2) [DIR1: 00h-07h or 80h-8Fh]
and Cyrix MII (M2) [DIR1: 08h-7Fh]
= 50h (1.5x,S)
= 51h (2x,S)
= 52h (2.5x,S)
= 53h (3x,S)
= 54h (3.5x,S)
= 55h (4x,S)
= 56h (4.5x,S)
= 57h (5x,S)
= 58h (1,5x,P)
= 59h (2x,P)
= 5Ah (2.5x,P)
= 5Bh (3x,P)
= 5Ch (3.5x,P)
= 5Dh (4x,P)
= 5Eh (4.5x,P)
= 5Fh (5x,P)
-------------------------------------------
for TI486DX4 = 81h
for Cyrix OverDrive = FDh
for TI Potomac's = FFh ;; None connections
Important Note: The original Cx486SLC never have DIRi registers.
DIR1:
Note: Cyrix Cx486S/D never have DIR1 register.
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
See Appendix A3 for more information
CPU DIR0 DIR1 NOTE
Cx486DX-40 1Ah 05h
Cx486DX-50 1Ah 05h
Cx486DX2-50 1Bh 08h
Cx486DX2-50 1Bh 08h Marked 001 on pin side of chip
ST486DX2-66 1Bh 0Bh
ST486DX2-66 1Bh 0Bh
Cx486DX2-v80 1Bh 31h 3 VOLT
Cx486DX4-v100 1Fh 36h 3 VOLT
Cx5x86-100 2Dh 13h 3 VOLT
TI486DX2-66,80 1Bh 32h stepping eA0
TI486DX2-66,80 1Bh B2h stepping eB0
TI486DX4-100 81h 91h
Top
TI486SXLC/SXL configuration Registers
for TI486SXL
--------------
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
ARR1 Address Region #1 C4H-C6H 24
ARR2 Address Region #2 C7H-C9H 24
ARR3 Address Region #3 CAH-CCH 24
ARR4 Address Region #4 CDH-CFH 24
for TI486SXLC
--------------
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
ARR1 Address Region #1 C5H-C6H 16
ARR2 Address Region #2 C8H-C9H 16
ARR3 Address Region #3 CBH-CCH 16
ARR4 Address Region #4 CEH-CFH 16
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH then Cyrix CPU
generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR0 00H
CCR1 xxxx xxx0B
ARR1 000Fh ; 4Gbyte Non-Caching Region
ARR2 0
ARR3 0
ARR4 0
format of registers:
CCR0:
Bit Name Description
7 SUS
If =1 then enable SUSP# and SUSPA# pins, which used for
put CPU in PowerSave mode.
If =0 disable
6 CKD (Clock Double)
If =0 Disable Clock-double mode
If =1 Enable Clock-Double mode
5 BARB
If =1 then enable flushing internal cache when begining
HOLD state.
IF =0 disable.
4 FLUSH
If =1 enable input pin FLUSH#
if =0 disable
3 KEN
If =1 enable input pin KEN#
if =0 disable
2 A20M
If =1 enable input pin A20M#
if =0 disable
1 NC1
If=1 then 640KB-1MB area never caching
If=0 caching (but see NCRi)
0 NC0
If=1 then first 64K of each 1MB bounds not caching,
when in Real or Virtual8086 mode
If =0 caching
CCR1:
Bit Name Description
7 SM4
Access Region 4 Control
If=1 then Region 4 is non-cachable SMM Memory Space
If=0 Region 4 is non-cachable. SMI# input ignored.
6 WP3
Access Region 3 Control
If=1 then Region 3 is write-protected and cachable
If=0 Region 3 is non-cachable.
5 WP2
Access Region 2 Control
If=1 then Region 2 is write-protected and cachable
If=0 Region 2 is non-cachable.
4 WP1
Access Region 1 Control
If=1 then Region 1 is write-protected and cachable
If=0 Region 1 is non-cachable.
3 NMAC
Main Memory Access
If=1 All data accesses which occur within SMI service routine
(or then SMAC=1) will access main memory instead of SMM Memory space
If=0 No changes in access
2 SMAC
System Managment memory access
If=1 Any access to addresses within SMM memory space cause external bus
cycles to be issued with SMADS# output active. SMI# input is ignored.
1 SMI
Enable SMM Pins
If=1 SMI# input/output pin and SMADS# output pin are enabled
If=0 Disabled
0 Reserved
ARRi:
Byte Bits Description
0 7-0 Address bits A31-A24 of non-cacheble region start
(Reserved for TI486SXLC)
1 7-0 Address bits A23-A16 of non-cachable region start
2 7-4 Address bits A15-A12 of non-cacheble region start
2 3-0 Size of non-cacheble block:
0000 Disable NCRi
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4G
ARRi bytes:
Byte
ARRi 0 1 2
ARR1 C4H C5H C6H
ARR2 C7H C8H C9H
ARR3 CAH CBH CCH
ARR4 CDH CDH CEH
Top
Texas Instruments TI486DX2,TI486DX4
configuration Registers
Register Full Register Name Index size(bits)
CCR1 Configuration Control Register #1 C1H 8
CCR2 Configuration Control Register #2 C2H 8
CCR3 Configuration Control Register #3 C3H 8
SMAR SMM Address Region CDH-CFH 24
DIR0 Device Identification register #0 FEH 8
DIR1 Device Identification register #1 FFH 8
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
CCR1:
Bit Name Description
7..5 Reserved
4 NO_LOCK (Negate LOCK#)
If =0 Usuall scheme
If =1 previously noncachable locked cycles will be
executed as unlocked, result is higher perfomanse.
3 MMAC (Main Memory Access)
If =1 then all data access which occur within SMI
routine (when SMAC=1) accessing main memory instead
SMM space
=0 No affects on access
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 RPL (Enable RPL pins)
If=1 then enable output pins RPLSET(1-0) and RPLVAL#
=0 Float it
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6 BWRT (Enable Burst Write Cycle)
If =1 enable use of 16byte burst WB cycle
=0 disable
5 BARB (Enable cache coherency on Bus Arbitration)
If =1 enable write back of all dirty cache data when
HOLD is requered and prior to asserting HLDA.
=0 isable
4 WT1 (Write-Through Region 1)
If =1 Forces all writes to the 640KB-1MB region that
hit in cache issued on the external bus
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 WBAK (Enable WB Cache Interface pins)
If =1 then enable INVAL,WM_RST and HITM# pins
=0 float it
0 Reserved
CCR3:
Note: Cyrix Cx486S/D never have CCR3 register.
Bit Name Description
7..4 Reserved
3 SM_MODE (SMM Mode Select)
If =0 then Normal SMM mode (Cyrix style)
If =1 then SL-compatible mode
(but SMI_LOCK MUST BE 0)
Note: For more info refer to
"TI486DX2 Microprocessor SM Mode Programming Guide"
// Texas Instruments 1995 (literature number SRZU019)
2 Reserved
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
Any SMAR bits
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
SMAR:
(Index CDh)
Bit Description
7..0 A31..A24 bits of starting adress of SMM region
(Index CEh)
Bit Description
7..0 A23..A16 bits of starting adress of SMM region
(Index CFh)
Bit Description
7..4 A15..A12 bits of starting adress of SMM region
3..0 Size of SMM region:
0000 SMM region disabled
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4K
DIR0:
Bit Description
7..0 (Device Identification)
for TI486DX2 = 1Bh (compare with Cyrix's DIR0)
for TI486DX4 = 81h
DIR1:
Bit Name Description
7 MID Manafacturer ID
0 = Cyrix
1 = Texas Instruments (support starting TI486DX2 eB0 steping)
6..4 SID Stepping Identificator
3..0 RID Revision Identification
see Appendix A1 for more info about identification.
Top
Cyrix Cx5x86, IBM 5x86
configuration Registers
for access
Register Full Register Name Index size(bits) MAPEN(3..0)
PCR0 Perfomance Control register 20h 8 1
CCR1 Configuration Control Register #1 C1H 8 x
CCR2 Configuration Control Register #2 C2H 8 x
CCR3 Configuration Control Register #3 C3H 8 x
CCR4 Configuration Control Register #4 E8h 8 1
SMAR SMM Address Region CDH-CFH 24 x
PMR Power Managment register F0h 8 1
DIR0 Device Identification register #0 FEH 8 x
DIR1 Device Identification register #1 FFH 8 x
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
PCR0:
Bit Name Description
7 LSSER If set, all memory reads/writes will occur in execution order
6..3 Reserved
2 LOOP_EN If set, enables faster support for loops.
1 BTB_EN If set, enables the Branch Target Buffer for branch prediction
0 RSTK_EN If se, enables call return stack
CCR1:
Bit Name Description
7..4 Reserved
3 MMAC (Main Memory Access)
If =1 then all data access which occur within SMI
routine (when SMAC=1) accessing main memory instead
SMM space
=0 No affects on access
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 Reserved
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6 BWRT (Enable Burst Write Cycle)
If =1 enable use of 16byte burst WB cycle
=0 disable
5 Reserved
4 WT1 (Write-Through Region 1)
If =1 Forces all writes to the 640KB-1MB region that
hit in cache issued on the external bus
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 WBAK (Enable WB Cache Interface pins)
If =1 then enable INVAL,WM_RST and HITM# pins
=0 float it
0 Reserved
CCR3:
Bit Name Description
7..4 MAPEN(3-0) (Register Mapping Enable)
If set to 0001b all register accessible,
else 0000h then accessed only (C0j-CFh,FEh,FFh)
3 SMM_MODE
If =1, then CPU hardware interface pins are redefined to
function like SMM hardware interface on SL Enhanced Intel's CPUs
2 LINBRST
If =1, CPU will use linear address sequence when performing
burst cycle, If =0 CPU will used 1+4 address sequence.
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
SMAR:
(Index CDh)
Bit Description
7..0 A31..A24 bits of starting adress of SMM region
(Index CEh)
Bit Description
7..0 A23..A16 bits of starting adress of SMM region
(Index CFh)
Bit Description
7..4 A15..A12 bits of starting adress of SMM region
3..0 Size of SMM region:
0000 SMM region disabled
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4K
CCR4:
Bit Name Description
7 CPUIDEN (Enable CPUID instruction)
If =1 bit 21 of EFLAGS (ID) may changed, and CPUID instruction
enabled,
else bit 21 of EFLAGS =0 forever and CPUID caused INT 6 -
Invalid Opcode
6 Reserved
5 FP_FAST
If =1, FPU execution reporting enabled
4 DTE
If =1, Directory Table Entry cache is enabled
3 MEM_BYP
If =1, Enabled memory read bypassing
2..0 IORT[2..0]
Specify minimum number of bus clocks between two I/O
accesses (I/O recovery time)
000 - No Delay
001 - 2 clk
010 - 4 clk
011 - 8 clk
100 - 16 clk
101 - 32 clk (Default Value)
110 - 64 clk
111 - 128 clk
PMR:
Bit Name Description
7..3 Reserved
2..0 CLK[2..0]
Select Bus/Core Operation Frequency
CLK2 CLK1 CLK0 Core/Bus
1 x x 1/2
0 0 0 1/1
0 0 1 2/1
0 1 0 3/1
0 1 1 reserved
DIR0:
Bit Description
7..0 (Device Identification)
Value Description Core/Bus clk
29h or 2Bh Cx/IBM/ST 5x86 2/1
2Dh or 2Fh Cx/IBM/ST 5x86 3/1
DIR1:
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
Note: 5x86 Cyrix/IBM/ST
Stepping Revision
0 0 EDX after reset = [15:8]=DIR1, [7:0]=DIR0
0 1 EDX after reset = [15:8]=DIR1, [7:0]=DIR0
0 2 EDX after reset = [15:8]=04h [7:0]=90h
0 5
1 3
see Appendix A1 for more info about identification.
Top
Cyrix Cx6x86 (M1), IBM 6x86
configuration Registers
for access
Register Full Register Name Index size(bits) MAPEN(3..0)
DBR0 30H 8 ?
??? 31H 8 ?
??? 32H 8 ?
??? 33H 8 ?
??? 34H 8 ?
??? 38H 8 ?
??? 3CH 8 ?
CCR0 Configuration Control Register #0 C0H 8 x
CCR1 Configuration Control Register #1 C1H 8 x
CCR2 Configuration Control Register #2 C2H 8 x
CCR3 Configuration Control Register #3 C3H 8 x
ARR0 Address Region Register #0 C4H-C6H 24 x
ARR1 Address Region Register #1 C7H-C9H 24 x
ARR2 Address Region Register #2 CAH-CCH 24 x
ARR3 Address Region Register #3 CDH-CFH 24 x
ARR4 Address Region Register #4 D0H-D2H 24 1
ARR5 Address Region Register #5 D3H-D5H 24 1
ARR6 Address Region Register #6 D6H-D8H 24 1
ARR7 Address Region Register #7 D9H-DBH 24 1
RCR0 Region Configuration Register #0 DCh 8 1
RCR1 Region Configuration Register #1 DDh 8 1
RCR2 Region Configuration Register #2 DEh 8 1
RCR3 Region Configuration Register #3 DFh 8 1
RCR4 Region Configuration Register #4 E0h 8 1
RCR5 Region Configuration Register #5 E1h 8 1
RCR6 Region Configuration Register #6 E2h 8 1
RCR7 Region Configuration Register #7 E3h 8 1
CCR4 Configuration Control Register #4 E8h 8 1
CCR5 Configuration Control Register #5 E9h 8 1
DIR0 Device Identification register #0 FEH 8 x
DIR1 Device Identification register #1 FFH 8 x
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
DBR0:
Note: This Register is Undocumented
Bit Name Description
7 ? ????
6 ? BTB TR access enabled
if = 1 MOV to/from TR1/2 enabled
5 ? Data bypassing and forwarding Enable
(default set to 1)
4-0 ? ???
Registers with Indexes 31h,32h,33h:
Used for perfomance control or CPU pipeline debbuging.
(Usually = 0).
Registers with indexes 34h,38h,3Ch exist, but description ????
CCR0:
Bit Name Description
7..2 Reserved
1 NC1 (Non-cachable 1MB)
If =1 then area 640KM-1MB is non-cachable.
CCR1:
Bit Name Description
7 SM3 (System Managment Address Region 3)
If =1 then ARR3 used as SMM address space region
6..5 Reserved
4 NO_LOCK (No Lock Cycles)
If =1 all bus cycles are issued with LOCK# pin negated, except
page tables access and INTA cycles.
3 Reserved
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 Reserved
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6..5 Reserved
4 WPR1 (Write-Protected Region 1)
If =1 then any cachable accesses in the 640KB-1MB region
are Write-Protected
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1..0 Reserved
CCR3:
Bit Name Description
7..4 MAPEN(3-0) (Register Mapping Enable)
If set to 0001b all register accessible,
else 0000h then accessed only (C0h-CFh,FEh,FFh)
3 Reserved
2 LINBRST
If =1, CPU will use linear address sequence when performing
burst cycle, If =0 CPU will used 1+4 address sequence.
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
ARR3: Starting address and Block size
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
ARRi:
-- Starting Address --- Region
ARR # A31-A24 A23-A16 A15-A12 Block Size
7..0 7..0 7..4 3..0 (Bits)
ARR0 C4h C5h C6h C6h (Index)
ARR1 C7h C8h C9h C9h
ARR2 CAh CBh CCh CCh
ARR3 CDh CEh CFh CFh
ARR4 D0h D1h D2h D2h
ARR5 D3h D4h D5h D5h
ARR6 D6h D7h D8h D8h
ARR7 D9h DAh DBh DBh
(ARRi^)
(index)
(Index ARRi+0)
Bit Description
7..0 A31..A24 bits of starting adress of region #i
(Index ARRi+1)
Bit Description
7..0 A23..A16 bits of starting adress of region #i
(Index ARRi+2)
Bit Description
7..4 A15..A12 bits of starting adress of region #i
3..0 Size of region #i :
Value ARR0-ARR6 ARR7
0000 **** region disabled ****
0001 4K 256K
0010 8K 512K
0011 16K 1M
0100 32K 2M
0101 64K 4M
0110 128K 8M
0111 256K 16M
1000 512K 32M
1001 1M 64M
1010 2M 128M
1011 4M 256M
1100 8M 512M
1101 16M 1G
1110 32M 2G
1111 4K 4G
RCRi:
Bit Name ARR# Description
7..6 any Reserved
5 NBL any If =1 LBA# pin is negated for corresponding region
4 WT any If =1 Write-Throught caching is enable for region
3 WG any If =1 Write Gathering enabled for region
2 WL any If =1 Weak Locking enable for region
1 WWO any If =1 weak write ordering enable for region
0 RCD 0..6 If =1 address region is non-cachable
0 RCE 7 If=1 region is cachable and implies thet address space
outside of region is non-cachable.
CCR4:
Bit Name Description
7 CPUIDEN (Enable CPUID instruction)
If =1 bit 21 of EFLAGS (ID) may changed, and CPUID instruction
enabled,
else bit 21 of EFLAGS =0 forever and CPUID caused INT 6 -
Invalid Opcode
6..5 Reserved
4 DTE
If =1, Directory Table Entry cache is enabled
3 Reserved
2..0 IORT[2..0]
Specify minimum number of bus clocks between two I/O
accesses (I/O recovery time)
(base modeL) (some later models)
000 - No Delay 000 - fast
001 - 2 clk
010 - 4 clk
011 - 8 clk .......
100 - 16 clk
101 - 32 clk (Default Value)
110 - 64 clk
111 - 128 clk 111 - no delay
CCR5:
Bit Name Description
7 Reserved
6 VIPERM If = 1 then prevents any access to contol registers outside of
range C0..CF if MAPEN in CCR3 has the other value that 1.
Note:
This is effect of Disable CPU identification via DIR0
and DIR1 (reads FFh while VIPERM=1 and MAPEN != 1).
5 ARREN (Address region registers Enable)
If =1 then Enable all ARRs,
If =0 all ARRs disable, but if SM3=1 then ARR3 enable.
4 LBR1
If =1 LBA# pin asserted for all accesses to the 640KB-1MB
region
3..2 Reserved
1 SLOP (Slow Loop Instruction)
Slow Loop instruction make CPU more compatible with Pentium
for critical-timing rootining.
0 WT_ALLOC
If =1 new cache lines allocated for both read misses and
write misses, else only on read misses.
DIR0:
Bit Description
7..0 (Device Identification)
Value Description Core/Bus clk Note
20h or 22h 6x86 (M1) 1/1 Early 6x86
21h or 23h 6x86 (M1) 2/1
25h or 27h 6x86 (M1) 4/1
24h or 26h 6x86 (M1) 3/1
30h or 32h 6x86 (M1) 1/1 Modern 6x86
31h or 33h 6x86 (M1) 2/1
35h or 37h 6x86 (M1) 4/1
34h or 36h 6x86 (M1) 3/1
DIR1:
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
Value Description
0xh - Old Cyrix Samplers of 6x86 ???
1xh - Normal 6x86.
10h,11h,12h - Early 6x86s (with DIR0 = 2xh)
14h - v2.4
15h - v2.5
16h - v2.6
17h - v2.7 or 3.7
(first with no NT problems, with SLOP bit).
2xh - 6x86L (Dual Voltage,Lower Power)
20h,21h - Samplers
22h - v4.0 (no SLOP support)
Note: Register with Index FCh contains CPU family.
Initialized by 05h, but may be changed by USER, look CPUID instruction
for more info.
see Appendix A1 for more info about identification
-----------------------------
Format of TR1,TR2 registers:
Note: Need to Enable MOV to/from TR1/2 using DBR0 register in processor
control space.
TR1:
Bits Description
31..5? ?????
5..3 Index of register in BTB Control space.
(Register will be accesable via TR2)
2..0 ????
TR2:
Data, which will be written/reading from/to register
Registers in BTB control space:
Reg 4 - ???????
Reg 5:
Bits Description
0 BTB Disable
1 Far BTB COF hits enable.
If =1 enable BTB to predict intersegment jumps.
2 Return Stack Enable
3 ???? (used)
4..31 ?????
Top
Cyrix Cx6x86MX (M2)
for access
Register Full Register Name Index size(bits) MAPEN(3..0)
CCR0 Configuration Control Register #0 C0H 8 x
CCR1 Configuration Control Register #1 C1H 8 x
CCR2 Configuration Control Register #2 C2H 8 x
CCR3 Configuration Control Register #3 C3H 8 x
ARR0 Address Region Register #0 C4H-C6H 24 x
ARR1 Address Region Register #1 C7H-C9H 24 x
ARR2 Address Region Register #2 CAH-CCH 24 x
ARR3 Address Region Register #3 CDH-CFH 24 x
ARR4 Address Region Register #4 D0H-D2H 24 1
ARR5 Address Region Register #5 D3H-D5H 24 1
ARR6 Address Region Register #6 D6H-D8H 24 1
ARR7 Address Region Register #7 D9H-DBH 24 1
RCR0 Region Configuration Register #0 DCh 8 1
RCR1 Region Configuration Register #1 DDh 8 1
RCR2 Region Configuration Register #2 DEh 8 1
RCR3 Region Configuration Register #3 DFh 8 1
RCR4 Region Configuration Register #4 E0h 8 1
RCR5 Region Configuration Register #5 E1h 8 1
RCR6 Region Configuration Register #6 E2h 8 1
RCR7 Region Configuration Register #7 E3h 8 1
CCR4 Configuration Control Register #4 E8h 8 1
CCR5 Configuration Control Register #5 E9h 8 1
CCR6 Configuration Control Register #6 EAh 8 1
DIR0 Device Identification register #0 FEH 8 x
DIR1 Device Identification register #1 FFH 8 x
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
CCR0:
Bit Name Description
7..2 Reserved
1 NC1 (Non-cachable 1MB)
If =1 then area 640KM-1MB is non-cachable.
CCR1:
Bit Name Description
7 SM3 (System Managment Address Region 3)
If =1 then ARR3 used as SMM address space region
6..5 Reserved
4 NO_LOCK (No Lock Cycles)
If =1 all bus cycles are issued with LOCK# pin negated, except
page tables access and INTA cycles.
3 Reserved
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 Reserved
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6..5 Reserved
4 WPR1 (Write-Protected Region 1)
If =1 then any cachable accesses in the 640KB-1MB region
are Write-Protected
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 SADS
If =1 CPU insert an idle cyce following the BRDY# and idle
cycle prior to asserting ADS#
0 Reserved
CCR3:
Bit Name Description
7..4 MAPEN(3-0) (Register Mapping Enable)
If set to 0001b all register accessible,
else 0000h then accessed only (C0h-CFh,FEh,FFh)
3 Reserved
2 LINBRST
If =1, CPU will use linear address sequence when performing
burst cycle, If =0 CPU will used 1+4 address sequence.
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
CCR6: bits 6,1,0
ARR3: Starting address and Block size
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
ARRi:
-- Starting Address --- Region
ARR # A31-A24 A23-A16 A15-A12 Block Size
7..0 7..0 7..4 3..0 (Bits)
ARR0 C4h C5h C6h C6h (Index)
ARR1 C7h C8h C9h C9h
ARR2 CAh CBh CCh CCh
ARR3 CDh CEh CFh CFh
ARR4 D0h D1h D2h D2h
ARR5 D3h D4h D5h D5h
ARR6 D6h D7h D8h D8h
ARR7 D9h DAh DBh DBh
(ARRi^)
(index)
(Index ARRi+0)
Bit Description
7..0 A31..A24 bits of starting adress of region #i
(Index ARRi+1)
Bit Description
7..0 A23..A16 bits of starting adress of region #i
(Index ARRi+2)
Bit Description
7..4 A15..A12 bits of starting adress of region #i
3..0 Size of region #i :
Value ARR0-ARR6 ARR7
0000 **** region disabled ****
0001 4K 256K
0010 8K 512K
0011 16K 1M
0100 32K 2M
0101 64K 4M
0110 128K 8M
0111 256K 16M
1000 512K 32M
1001 1M 64M
1010 2M 128M
1011 4M 256M
1100 8M 512M
1101 16M 1G
1110 32M 2G
1111 4G 4G
RCRi:
Bit Name ARR# Description
7 any Reserved
6 INV_RGN 0..6 If =1, then all memory outside specific memory region
treated as RCR flags for this region
(Inversion)
5 any Reserved
4 WT any If =1 Write-Throught caching is enable for region
3 WG any If =1 Write Gathering enabled for region
2 WL any If =1 Weak Locking enable for region
1 any Reserved
0 CD any If =1 address region is non-cachable
CCR4:
Bit Name Description
7 CPUIDEN (Enable CPUID instruction)
If =1 bit 21 of EFLAGS (ID) may changed, and CPUID instruction
enabled,
else bit 21 of EFLAGS =0 forever and CPUID caused INT 6 -
Invalid Opcode
6..3 Reserved
2..0 IORT[2..0]
Specify minimum number of bus clocks between two I/O
accesses (I/O recovery time)
000 - 1 clk
001 - 2 clk
010 - 4 clk
011 - 8 clk
100 - 16 clk
101 - 32 clk (Default Value)
110 - 64 clk
111 - no delay
Note: 6x86 (M1), 000 - no delay, 111 - 128 clk
CCR5:
Bit Name Description
7..6 Reserved
5 ARREN (Address region registers Enable)
If =1 then Enable all ARRs,
If =0 all ARRs disable, but if SM3=1 then ARR3 enable.
4..1 Reserved
0 WT_ALLOC
If =1 new cache lines allocated for both read misses and
write misses, else only on read misses.
CCR6:
Bit Name Description
7 Reserved
6 N (Nested SMI Enable bit)
If =1 enable nesting of SMI
If = 0 disabled.
(This bit automatically cleared when entered every SMI routine)
5..2 Reserved
1 WP_ARR3 (Write Protected Memory Region # 3)
if =1 Memory region defined by ARR3 is write-protected,
when operating outside SMM mode
0 SMM_MODE (SMM Mode)
if = 1 Enable Cyrix Enhanced SMM
if = 0 Disable Cyrix Enhanced SMM
DIR0:
Bit Description
7..0 (Device Identification)
Value Description Core/Bus clk
5xh 6x86MX (see APPENDIX B for more details)
DIR1:
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
see Appendix A1 for more info about identification
Note: Try to test some Undocument Registers from Cx6x86.
Top
Codes which returned after Reset in EDX
DH DL
Type of CPU Steppin Model ID Revision
------------------------------------------------------------
i386DX A (00h) ??? :Early Models
B0-B10 03h 03h
04h :???
D0 05h
D1-D2 08h
E0,E1,F0 08h
------------------------------------------------------------
Am386DX/DXL A 03h 05h
B 08h
------------------------------------------------------------
i386SX A0 23h 04h
B 05h
C,D,E 08h
------------------------------------------------------------
Am386SX/SXL A1 23h 05h
B 08h
------------------------------------------------------------
Intel386CXSA A 23h 09h
------------------------------------------------------------
Intel386CXSB A 23h 09h
------------------------------------------------------------
i386EX A 23h 09h
------------------------------------------------------------
Intel386SXSA ? 23h 09h
------------------------------------------------------------
i376 A0 33h 05h
B 08h
------------------------------------------------------------
i386SL A0-A3 43h 0xh (05H)
B0-B1 1xh
------------------------------------------------------------
RapidCAD (tm) A 03h 40h
B 41h
------------------------------------------------------------
IBM 386SLC A A3h xxh
------------------------------------------------------------
Cx486SLC A 04h 10h
------------------------------------------------------------
TI486SLC/DLC/e A 04h 10h
B 11h
------------------------------------------------------------
TI486SXL/SXLC A 04h 10h
B 11h
------------------------------------------------------------
i486DX A0/A1 04h 00h
B2-B6 01h
C0 02h
C1 03h
D0 04h
cA2,cA3 10h
cB0,cB1 11h
cC0 13h
aA0,aA1 14h : SL Enhanced
aB0 15h : SL Enhanced
------------------------------------------------------------
Am486DX any 04h 12h
------------------------------------------------------------
UMC U5SD any 04h 1xh
------------------------------------------------------------
i486SX A0 04h 20h
B0 22h
bBx 23h : SL Enhanced
gAx 24h
cA0 27h
cB0 28h
aA0,aA1 2Ah : SL Enhanced
aB0,aC0 2Bh : SL Enhanced
------------------------------------------------------------
i487SX A0 04h 20h
B0 21h
------------------------------------------------------------
UMC U5S any 04h 23h
------------------------------------------------------------
UMC U5SX 486-A any 04h 23h
------------------------------------------------------------
UMC U5SD 04h 23h
------------------------------------------------------------
Cx5x86 0,rev 1- 04h 29h : core/bus clk=2/1 +clones
2Bh : core/bus clk=2/1 +clones
2Dh : core/bus clk=3/1 +clones
2Fh : core/bus clk=3/1 +clones
------------------------------------------------------------
i486DX2 & A0-A2 04h 32h
OverDrive (tm) B1 33h
aA0,aA1 34h : SL Enhanced
aB0,aC0 35h : SL Enhanced
------------------------------------------------------------
Am486DX2 any 04h 32h : 66 and 80 MHz
------------------------------------------------------------
Am486DXL2 any 04h 32h
------------------------------------------------------------
Am486DX4 any 04h 32h : Original
any 04h 84h : Enhanced in WT mode
04h 94h : Enhanced in WB mode
------------------------------------------------------------
UMC U486DX2 any 04h 3xh : ???
------------------------------------------------------------
UMC U486SX2 any 04h 5xh : ???
------------------------------------------------------------
i486SL A 04h 40h
?? 41h
------------------------------------------------------------
i486SX2 aC0 04h 5Bh : SL Enhanced
------------------------------------------------------------
IntelSX2 (tm) A 04h 5xh
OverDrive (tm)
------------------------------------------------------------
WB Enh IntelDX2 A 04h 70h : in WB mode
(P24D) 36h : in WT mode
------------------------------------------------------------
IBM BL486DX2 A 04h 80h
------------------------------------------------------------
IntelDX4 (tm) A 04h 80h
------------------------------------------------------------
TI TI486DX2 any 04h 80h
------------------------------------------------------------
TI TI486DX4 any 04h 81h
------------------------------------------------------------
IntelDX4 (tm) A 14h 80h : DX4ODPR (5V IntelDX4)
OverDrive (tm)
------------------------------------------------------------
Cx5x86 0,rev 2+ 04h 90h
------------------------------------------------------------
Write-Back Enh. A 04h 83h : WT Mode
IntelDX4 (tm) 90h : WB mode
------------------------------------------------------------
AMD Am5x86 A 04h 84h : x3, WT mode
94h : x3, WB mode
E4h : x4, WT mode
F4h : x4, WB mode
------------------------------------------------------------
IBM 486SLC A A4h 0xh
------------------------------------------------------------
IBM 486SLC2 Ax A4h 1xh
Bx 2xh
?? 3xh
------------------------------------------------------------
IBM 486BLX3 A 84h xxh
------------------------------------------------------------
Cyrix M5 all 00h 05h
(Cx486S/D)
------------------------------------------------------------
Cyrix M6 all 00h 06h
(Cx486DX)
------------------------------------------------------------
Cyrix M7 all 00h 07h
(Cx486DX2)
------------------------------------------------------------
Cyrix M8 all 00h 08h
(Cx486DX4)
------------------------------------------------------------
Am5k86 (SSA/5) all 05h 0xh ; Model 0
E 05h 00h
F 01h
------------------------------------------------------------
Am5k86 (K5) all 05h 1xh : (x1.5) ; Model 1
05h 2xh : (x1.75) ; Model 2
24h
05h 3xh : (x2) ; Model 3
------------------------------------------------------------
AMD K6 05h 6xh ; Model 6
61h
7xh ; Model 7
------------------------------------------------------------
AMD K6-2 05h 8xh ; Model 8
------------------------------------------------------------
AMD K6-III 05h 9xh ; Model 9
------------------------------------------------------------
Pentium (P5) Ax 05h 0xh : (FPU bug)
B1 05h 13h : (FPU bug)
B2 05h 14h : (FPU bug)
C1 05h 15h : (FPU bug)
D1 05h 17h
------------------------------------------------------------
Pentium (P54C) B1 05h 21h : (FPU bug)
(P54CS) B3 05h 22h : (FPU bug)
(P54CSQ) B5 05h 24h : (FPU bug)
C1 05h 25h
C2 25h
E0 26h : 75,90,100,120 MHz
cB1 2Bh : 120,133 MHz
cC0 2Ch : 133,150,166,200 MHz
------------------------------------------------------------
Pentium mA1 05h 25h
(P54LM) mcB1 2Bh
(Mobile) mcC0 2Ch
(Vcc=2.9V) mA4 70h
------------------------------------------------------------
Pentium Overdrive B1 15h 31h : PODP5V63, PODP5V83
(Vcc=5V)(P24T) B2 15h 31h : (Socket 3,6)
C0 15h 32h
------------------------------------------------------------
Pentium OverDrive tA0 05h 1Ah : PODP5V120, PODP5V133
(P5T) : (Socket 4)
------------------------------------------------------------
Pentium OverDrive aC0 05h 2Ch : PODP3V125, PODP3V150
(P54T) : PODP3V166
: (Socket 5,7)
------------------------------------------------------------
NexGen Nx586 05h 0xh
04h : 120 MHz
06h : 133 MHz
------------------------------------------------------------
Cx6x86 05h 2xh : early models
(M1) 30h : core/bus = 1/1
32h : core/bus = 1/1
31h : core/bus = 2/1
33h : core/bus = 2/1
34h : core/bus = 3/1
36h : core/bus = 3/1
35h : core/bus = 4/1
37h : core/bus = 4/1
------------------------------------------------------------
Pentium w/MMX A1 05h 41h
(P55C) A2 42h
xB1/mxB1 43h
xA3/mxA3 44h
myA0 81h
sB1 82h
------------------------------------------------------------
Pentium MMX oxA3 15h 44h
OverDrive (P55CTP)
------------------------------------------------------------
Cyrix MediaGX 05h 4xh
------------------------------------------------------------
Cyrix MediaGX 05h 4xh
MMX Enhanced
------------------------------------------------------------
IDT Winchip (C6) 05h 40h
------------------------------------------------------------
IDT Winchip 2 (C2) 05h 81h
------------------------------------------------------------
Cx6x86MX and MII 06h 51h : core/bus = x2
(M2) 06h 52h : core/bus = x2.5
06h 53h : core/bus = x3
06h 54h : core/bus = x3.5
06h 55h : core/bus = x4
06h 59h : core/bus = x2
06h 5Ah : core/bus = x2.5
06h 5Bh : core/bus = x3
06h 5Ch : core/bus = x3.5
06h 5Dh : core/bus = x4
------------------------------------------------------------
Intel Pentium OverDrive 25h 2xh : will be Set as second CPU
(P54M)
------------------------------------------------------------
Pentium Pro (P6) 06h 0xh ; Engineering Sample 133MHz 0.6mkm
06h 11h ; Engineering Sample 150MHz
B0 06h 11h ; 150 MHz
C0 06h 12h ; 150 MHz
sA0 06h 16h ; 166,180,200 MHz
sA1 06h 17h ; 166,180,200 MHz
sB1 06h 19h ; 166,180,200 MHz
------------------------------------------------------------
AMD Athlon 06h 1xh ; Model 1
------------------------------------------------------------
Pentium II C0 06h 33h
C1 06h 34h
(P6L,Klamath) dA0/mdA0/mmdA0 06h 50h
dA1 06h 51h
dB0/mdB0/mmdB0 06h 52h
mdB0 06h 52h
mmdB0 06h 52h
dB1 06h 53h
dB1 06h 62h
mdbA0/mdxA0/mqbA1/mqpA1 06h 6Ah
------------------------------------------------------------
Pentium II Xeon B0 06h 52h
B1 06h 53h
------------------------------------------------------------
Celeron dA0 06h 50h No-Cache
dA1 06h 51h No-Cache
dB0 06h 52h No-Cache
mA0 06h 60h (128KB cache) [Mendocino]
mB0 06h 65h (128KB cache) PPGA
------------------------------------------------------------
Pentium II TdB0 16h 32h
Overdrive
------------------------------------------------------------
Pentium III kB0 06h 72h
kC0 06h 73h
------------------------------------------------------------
Pentium III Xeon B0 06h 72h
C0 06h 73h
------------------------------------------------------------
Note: For detection Cyrix's chips refer to APPENDIX A1.
Note: Then Intel Pentium and higher chips, sometimes include build-in APIC
and setup such chips on motherbard as second CPU, change id code
from 0xxxh to 2xxxh.
Top
iCOMP index for Intel's Microprocessors i386SX-20 32 i386SX-25 39 i386SL-25 41 i386DX-25 49 i386DX-33 68 i486SX-20 78 i486SX-25 100 ; Base model for test iCOMP=100 by define i486DX-25 122 i486SX-33 136 i486DX-33 166 i486DX2-20/40 166 IntelSX2-25/50 180 i486DX2-25/50 231 i486DX-50 249 IntelDX4-20/60 258 i486DX2-33/66 297 Pentium OverDrive-20/50 314 ; P24T IntelDX4-25/75 319 ; P24C IntelDX4-33/100 435 ; P24C Pentium OverDrive-25/63 443 ; P24T Pentium-(510\60) 510 ; P5 Pentium-(567\66) 567 ; P5 Pentium OverDrive-33/83 581 ; P24T Pentium-(610\75) 610 ; P54C,P54LM Pentium-(735\90) 735 ; P54C,P54LM Pentium-(815\100) 815 ; P54C Pentium-(1000\120) 1000 ; P54CSQ Pentium-(133) 1110 ; P54CSQ iCOMP index 2.0 for Intel Microprocessors Pentium-75 67 Pentium-90 81 Pentium-100 90 Pentium-120 100 ; Base Model iCOMP 2.0 = 100 Pentium-133 111 Pentium-150 114 Pentium-166 127 Pentium-200 142 Pentium w/MMX-166 160 Pentium Pro-150-256 168 Pentium w/MMX-200 182 Pentium Pro-180-256 197 Pentium w/MMX-233 203 Pentium Pro-200-256 220 Celeron-266-0 213 Celeron-300-0 226 Pentium II-233 267 Celeron-300-128 296 Pentium II-266 303 Celeron-333-128 318 Pentium II-300 332 Pentium II-333 366 Pentium II-350 386 Pentium II-400 440 Pentium II-450 483 iCOMP index 3.0 for Intel Microprocessors Pentium II-300 1000 Pentium II-400 1130 Pentium II-450 1500 Pentium III-450 1500 Pentium III-500 1650Top
Cyrix Microprocessors Relative Perfomance Cyrix Inc. Used for declaration of perfomance of theys microprocessors tests based on PC Bench 8.0 and normalization. CPU Perfomance Scores Cx486SLC-25 36 Cx486SLC-33 39 Cx486SLC2-50 40 Cx486DLC-33 69 Cx486DLC-40 83 Cx486DX-33 100 ; <--- Base Point Cx486DX-40 118 Cx486DX2-50 139 Cx486DX-50 148 Cx486DX2-66 179 Cx486DX2-V80 209Top
CPU's perfomance Note: Data was get on different M/B and configurations, so treat this tables like simple numbers, which said perfomance is xxx +-10%. CPUMark 32 CPUMark 16 P-rating AMD Am5k86-75 (SSA/5) 154 AMD Am5k86-90 (SSA/5) 187 AMD Am5k86-100 (SSA/5) 208 AMD Am5k86-133 (K5) 271 247 AMD Am5k86-166 (K5) 306 303 Pentium-75 174 168 Pentium-90 210 201 Pentium-100 233 223 Pentium-120 257 247 Pentium-133 283 278 Pentium-150 286 296 Pentium-166 321 326 Pentium-200 358 Cyrix Cx6x86-P120+ 235 247 Cyrix Cx6x86-P133+ 260 Cyrix Cx6x86-P150+ 283 298 Cyrix Cx6x86-P166+ 316 329 Cyrix Cx6x86-P200+ 350 340 Pentium w/MMX-166 378 380 Pentium w/MMX-200 425 429 Pentium w/MMX-233 450 475 Pentium Pro-150-256 420 Pentium Pro-180-256 493 Pentium Pro-200-256 540 358 Pentium Pro-200-512 610 AMD K6-200 520 427 AMD K6-233 550 456 AMD K6-266 608 Pentium II-233 632 468 Pentium II-266 721 536 Pentium II-300 813 603 Pentium II-333 Pentium II-350 902 Pentium II-400 1030 Pentium II-450 1140 IDT Winchip C6-180 IDT Winchip C6-200 382 362 Cyrix Cx6x86MX/PR166 Cyrix Cx6x86MX/PR200 391 372 Cyrix Cx6x86MX/PR233 505 474 Cyrix Cx6x86MX/PR266 AMD K6-2-266 582 AMD K6-2-300 763 AMD K6-2-366 878 Cyrix MII-300 512 Cyrix MII-333 Celeron-266 Celeron-300 Celeron-300/128 Celeron-333/128 655 Celeron-366/128 685 Celeron-433/128 Celeron-466/128 PentII Xeon-400/512 PentII Xeon-450/512 1160 Pentium III-450 Pentium III-500 1260 PentIII Xeon-500/512 PentIII Xeon-550/512Top
Pentium P54C+ Build-in APIC (Advanced programmable Interrupt Controller) Base Address of Build-in APIC in memory location is 0FEE00000H. Map of APIC REgisters: Offset (hex) Description Read/Write state 0 Reserved 10 Reserved 20 Local APIC ID R/W 30 Local APIC Version R 40-70 Reserved 80 Task Priority Register R/W 90 Arbitration Priority Register R A0 Processor Priority Register R B0 EOI Register W C0 Remote read R D0 Logical Destination R/W E0 Destination Format Register 0..27 R 28..31 R/W F0 Spurious Interrupt Vector Reg. 0..3 R 4..9 R/W 100-170 ISR 0-255 R 180-1F0 TMR 0-255 R 200-270 IRR 0-255 R 280 Error Status Register R 290-2F0 Reserved 300 Interrupt Command Reg. (0-31) R/W 310 Interrupt Command Reg. (32-63) R/W 320 Local Vector Table (Timer) R/W 330-340 Reserved 350 Local Vector Table (LINT0) R/W 360 Local Vector Table (LINT1) R/W 370 Local Vector Table (ERROR) R/W 380 Initial Count Reg. for Timer R/W 390 Current Count of Timer R 3A0-3D0 Reserved 3E0 Timer Divide Configuration Reg. R/W 3F0 Reserved Note: Pentium-120MHz (Step C2) Never have APICTop
Note: Intel Chipset for SL microprocessors (i386SL,i486SL) contain
self CPU and 82360SL chip.
[i386SL]
Note: address of register in Normal I/O space
Name of Register Address Default Value Where placed Size
CPUPWRMODE 22h 0 CPU 16
CFGSTAT 23h 0 82360SL 8
CFGINDEX 24h 0 82360SL 16
CFGDATA 25h xxh 82360SL 16
EMSCNTLREG 28h 0 CPU 8
EMSINDEXREG 2Ah 0 CPU 16
EMSDPREG 2Ch xxh CPU 16
PORT92 92h 0 CPU 8
PORT102 102h 0 CPU 8
FAIL SAFE NMI CTRL 461h 0 CPU 8
The followed ports visible only when they enabled,
Any writes to this ports caused the action it named.
FAST CPU RESET EFh N/A 82360SL 8
FAST A20 GATE EEh N/A 82360SL 8
SLOW CPU F4h N/A CPU 8
FAST CPU F5h N/A CPU 8
SFS DISABLE F9h N/A CPU 8
SFS ENABLE FBh N/A CPU 8
Format of CPUPWRMODE register (i386SL):
Bits Name Description
15 DT If Unlock Status { // See bit 0 of this register
if bit=0 then access to 82360SL
if bit=1 then access to CPUPWRMODE register
}
If Lock Staus { // i.e.SB=1
(De-Turbo Select Bit) Selected clock speed
If bit=0 then EFI/2
If bit=1 then EFI/4
}
14 0 Reserved
13..11 IMCPC (Idle MCP Clock)
13.12.11 Description
000 EFI
001 EFI/2
010 EFI/4
011 EFI/8
100 EFI/16
101 Reserved
110 Reserved
111 Stop Clock
10,9 SLC (Slow CPU clock)
10.9 Description
00 EFI
01 EFI/2
10 EFI/4
11 EFI?8
8 CPUCNFG
If =1 CPU Lock. (Write Protect to CPUPMODE register)
7 FD (Flash Disk Enable)
If bit=1 then phisical addresses D0000H - DFFFFh
automatically never caching.
6 0 Reserved
5,4 FCC (Fast CPU clock)
5.4 Description
00 EFI
01 EFI/2
10 EFI/4
11 EFI/8
3,2 US (Unit Select)
Select Unit of 82360SL which will be accessable through 23h-25h
I/O Ports
3.2 Description
00 On-Board Memory Controller
01 Cache Unit
10 Internal Bus Unit
11 External Bus Unit
1 UE (Unit Enable)
If =1 Enable to Access Units
else enable to access System bus.
0 SB (Status Bit)
If =0 Enable access to CPUPWRMODE register
If =1 Disable
Format of EMSCNTLREG:
Bits Description
7 (Global Enable)
If =1 EMS enable
6 Valid bit
5 EMSDP Status Bit (Read Only)
4..2 Reserved
1..0 Active EMS Set (0-3)
Format of EMSINDEXREG:
Bits Description
15..10 Reserved
9..8 EMS set (0-3)
7..6 Reserved
5..0 EMS Page Register Index (0-64)
Format of EMSDPREG:
Bits Description
15 This EMS Page Enable (i.e. page indexed by EMSINDEXREG)
14 EMS Valid bit
13..11 reserved
10..0 Address lines A24..A14 for page selected by EMSINDEXREG
Important Note:
i386SL have SIGNATURE register have index 30Eh in On-Board Memory Controller
Configuration Space. This Register contain Stepping Info of i386SL.
Stepping Signature Register DX register after reset
A0 4300h 4310h
A1 4300h 4310h
A2 4301h 4310h
A3 4302h 4310h
B0 4310h 4311h
B1 4311h 4311h
[i486SL]
Note: address of register in Normal I/O space
Name of Register Address Default Value Where placed Size
CPUPWRMODE 22h 100H CPU 16
CFGSTAT 23h 0 82360SL 8
CFGINDEX 24h 0 82360SL 16
CFGDATA 25h xxh 82360SL 16
PORT92 92h 0 CPU 8
PORT102 102h 0 CPU 8
FAIL SAFE NMI CTRL 461h 0 CPU 8
The followed ports visible only when they enabled
FAST CPU RESET EFh N/A 82360SL 8
FAST A20 GATE EEh N/A 82360SL 8
SLOW CPU F4h N/A CPU 8
FAST CPU F5h N/A CPU 8
SFS DISABLE F9h N/A CPU 8
SFS ENABLE FBh N/A CPU 8
Format of CPUPWRMODE register (i486SL):
Bits Name Description
15 DT If Unlock Status { // See bit 0 of this register
if bit=0 then access to 82360SL
if bit=1 then access to CPUPWRMODE register
}
If Lock Staus { // i.e.SB=1
(De-Turbo Select Bit) Selected clock speed
If bit=0 then EFI/2
If bit=1 then EFI/4
}
14..13 0 Reserved
12 FPUERROR
This bit controlled access to I/O port 0F0h,
if =0 then access to internal F0h port,
If =1 then access ISA bus.
11..9 0 Reserved
8 CPUCNFG
If =1 CPU Lock. (Write Protect to CPUPMODE register)
7 0 RESERVED
6,5 FCC (Fast CPU clock)
5.4 Description
00 CPUCLK=definition=EFI/2
01 CPUCLK/2
10 CPUCLK/4
11 CPUCLK/8
4 0 Reserved
3,2 US (Unit Select)
Select Unit of 82360SL which will be accessable through 23h-25h
I/O Ports
3.2 Description
00 On-Board Memory Controller
01 Reserved
10 Internal Bus Unit
11 External Bus Unit
1 UE (Unit Enable)
If =1 Enable to Access Units
else enable to access System bus.
0 SB (Status Bit)
If =0 Enable access to CPUPWRMODE register
If =1 Disable
Important Note:
i486SL have SIGNATURE register have index 70Ah in On-Board Memory Controller
Configuration Space. This Register contain Stepping Info of i486SL.
Format Of this register provided below:
Bits Description
15..12 Member of Family (4h - SL)
11..8 Family (4h - 486 family)
7..0 Revision Name (Not Same as in DX after reset)
Top
Note: NS486SXF - Embedded 486-processor, which contain base (IBM PC/AT
compatible I/O on-chip.
I/O Port Range Desctription
0000h-001Fh DMA Controller
0020h-0021h Master PIC (Programmable Interrupt Controller)
0040h-0047h PS/2 Style PIT (with WATCHDOG timer)
0050h-0057h 3-Wire Interface
0070h-0071h Real Time Clock
0080h-008Fh DMA Controller
00A0h-00A1h Slave PIC
00C0h-00DFh DMA Controller
0278h-027Ah ECP (Option)
02E8h-02EFh COM4 (Option)
02F8h-02FFh COM2 (Option)
0378h-037Ah ECP (Option)
03BCh-03BEh ECP (Option)
03E0h-03E3h PCMCIA
03E8h-03EFh COM3 (Option)
03F8h-03FFh COM1 (Default)
0678h-067Dh ECP (Default)
0778h-077Dh ECP (Option)
07BCh-07C1h ECP (Option)
EF00h-EF57h Bus Interface Unit
EF70h-EF71h UART
EF80h-EF8Bh DRAM Controller
EF90h-EF93h Power Managment
EFA0h-EFA3h LCD Controller
EFB0h-EFBFh Interrupt Controller
EFC0h-EFCFh RIO and Bus Interface Unit
EFE0h-EFE1h DMA Controller
Top
Pentium (tm) Processor Pairing Instruction Pentium (tm) is superscalar microprocessor i.e. it may execute >1 instruction per CLK cycle. It may execute maximum 2 instruction per cycle.It have two integer pipes to execute instruction. This pipes not same, and some instruction may pairing (i.e. execute together) (only if not link with this 2 instruction) only in U pipe, some other only in V pipe, other in any pipe,other absolutely not pairing and they executed on U pipe only. ------ Integer Part Note: PU - is pairable if issued to U pipe PV - is pairable if issued to V pipe UV - pairable in either pipe ADC Reg,Reg PU Reg,Mem PU Reg,Imm PU Mem,Reg PU Mem,Imm PU ADD Reg,Reg UV Reg,Mem UV Reg,Imm UV Mem,Reg UV Mem,Imm UV AND Reg,Reg UV Reg,Mem UV Reg,Imm UV Mem,Reg UV Mem,Imm UV CALL direct PV CMP Reg,Reg UV Reg,Mem UV Reg,Imm UV Mem,Reg UV Mem,Imm UV DEC Reg UV Mem UV INC Reg UV Mem UV Jcc any PV JMP Short PV Direct PV LEA Reg,Mem UV MOV Reg,Reg/Mem/Imm UV Mem,Reg UV NOP UV OR Reg,Reg UV Reg,Mem UV Reg,Imm UV Mem,Reg UV Mem,Imm UV POP Reg UV PUSH Reg UV Imm UV Rotates/Shifts: Reg,1 PU Mem,1 PU Reg,Imm PU Mem,Imm PU SUB Reg,Reg UV Reg,Mem UV Reg,Imm UV Mem,Reg UV Mem,Imm UV TEST Reg,Reg UV Mem,Reg UV Acc,Imm UV XOR Reg,Reg UV Reg,Mem UV Reg,Imm UV Mem,Reg UV Mem,Imm UV _____ Floating Part Note: FX - Pairing with FXCH (All other never pairing) FABS FX FADD FX FADDP FX FCHS FX FCOM FX FCOMP FX FDIV/R/P/RP FX FLD m32,m64,ST(i) FX Note: FLD m80 not pairing FMUL/P FX FSUB/P/R/RP FX FTST FX FUCOM/P/PP FX For more information refer to: 1) Optimization for Intel's 32-Bit Processors (Application Note AP-500) Gary CArleton) // Intel Corp. 1993 // Order Number 241799 2) Supplement to the Pentium (tm) Processor User's Manual // Intel Corp. 1993.Top
Base Format of opcodes:
<Basecode> <Postbyte> <offset> <immediate_operands>
Format of Postbyte:
MM RRR MMM
MM - Memory addresing mode
RRR - Register operand address
MMM - Memory operand address
RRR Register Names
Fields 8bit 16bit 32bit
000 AL AX EAX
001 CL CX ECX
010 DL DX EDX
011 BL BX EBX
100 AH SP ESP
101 CH BP EBP
110 DH SI ESI
111 BH DI EDI
16bit memory (No 32 bit memory address prefix):
MMM Default MM Field
Field Sreg 00 01 10 11=MMM is reg
000 DS [BX+SI] [BX+SI+O8] [BX+SI+O16]
001 DS [BX+DI] [BX+DI+O8] [BX+SI+O16]
010 SS [BP+SI] [BP+SI+O8] [BP+SI+O16]
011 SS [BP+DI] [BP+DI+O8] [BP+DI+O16]
100 DS [SI] [SI+O8] [SI+O16]
101 DS [DI] [DI+O8] [DI+O16]
110 SS [O16] [BP+O8] [BP+O16]
111 DS [BX] [BX+O8] [BX+O16]
Note: MMM=110,MM=00 Default Sreg is DS !!!!
32bit memory (Has 67h 32 bit memory address prefix):
MMM Default MM Field
Field Sreg 00 01 10 11=MMM is reg
000 DS [EAX] [EAX+O8] [EAX+O32]
001 DS [ECX] [ECX+O8] [ECX+O32]
010 DS [EDX] [EDX+O8] [EDX+O32]
011 DS [EBX] [EBX+O8] [EBX+O32]
100 see SIB [SIB] [SIB+O8] [SIB+O32]
101 SS [O32] [EBP+O8] [EBP+O32]
110 DS [ESI] [ESI+O8] [ESI+O32]
111 DS [EDI] [EDI+O8] [EDI+O32]
Note: MMM=110,MM=00 Default Sreg is DS !!!!
SIB is (Scale/Base/Index):
SS BBB III
Note: SIB address calculated as :
<SIB address>=<Base>+<Index>*(2^(Scale))
Field Default Base
BBB Sreg Register Note
000 DS EAX
001 DS ECX
010 DS EDX
011 DS EBX
100 SS ESP
101 DS O32 If MM=00 (Postbyte)
SS EBP If MM<>00 (Postbyte)
110 DS ESI
111 DS EDI
Field Index
III register Note
000 EAX
001 ECX
010 EDX
011 EBX
100 Never Index SS can be 00
101 EBP
110 ESI
111 EDI
Field Scale coefficient
SS =2^(SS)
00 1
01 2
10 4
11 8
Note:
<No comments> this code are for 8086 and all other processors
NEC V20+ : for NEC V-seria only
186+ : for 186/188 and higher
286+ : for 80286 and higher
386+ : for 80386 and higher
486+ : for i486 and higher
Cyrix M5+ : for Cyrix only (Cx486S and higher)
Pentium+ : for Pentium
Pentium Pro+ : for Pentium Pro and higher
Pentium II+ : for Pentium II and higher
MMX : Intel MMX
AMD 3D : AMD 3D MMX Extensions
Cyrix EMMX : Cyrix Extended MMX
KNI/MMX2 : Katmai New Instructions/Intel MMX2
<specified> : specified
mem8 - Memory Operand 8 bit
mem - Memory operand 16/32 or more bit (depends on operation size)
m64 - Memory operand 64-bit
m128 - Memory operand 128-bit
reg8 - Register 8 bit
reg - Register 16/32 bit
mm - MMX register Integer (64-bit)
xmm - MMX2 register F.P (128-bit)
imm8 - Immediate 8 bit
imm - Immediate 16/32 bit
----------------------- [TABLE00]: ---------------------------
00 ADD mem8,reg8
01 ADD mem,reg
02 ADD reg8,mem8
03 ADD reg,mem
04 ADD AL,imm8
05 ADD AX,imm
06 PUSH ES
07 POP ES
08 OR mem8,reg8
09 OR mem,reg
0A OR reg8,mem8
0B OR reg,mem
0C OR AL,imm8
0D OR AX,imm
0E PUSH CS
0F POP CS ; 8088 non CMOS versions
>>> TABLE 01 ; NECs & 286+
Invalid Opcode ; 186/188
10 ADC mem8,reg8
11 ADC mem,reg
12 ADC reg8,mem8
13 ADC reg,mem
14 ADC AL,imm8
15 ADC AX,imm
16 PUSH SS
17 POP SS
18 SBB mem8,reg8
19 SBB mem,reg
1A SBB reg8,mem8
1B SBB reg,mem
1C SBB AL,imm8
1D SBB AX,imm
1E PUSH DS
1F POP DS
20 AND mem8,reg8
21 AND mem,reg
22 AND reg8,mem8
23 AND reg,mem
24 AND AL,imm8
25 AND AX,imm
26 ES: segment prefix
27 DAA
28 SUB mem8,reg8
29 SUB mem,reg
2A SUB reg8,mem8
2B SUB reg,mem
2C SUB AL,imm8
2D SUB AX,imm
2E CS: segment prefix
2F DAS
30 XOR mem8,reg8
31 XOR mem,reg
32 XOR reg8,mem8
33 XOR reg,mem
34 XOR AL,imm8
35 XOR AX,imm
36 SS: segment prefix
37 AAA
38 CMP mem8,reg8
39 CMP mem,reg
3A CMP reg8,mem8
3B CMP reg,mem
3C CMP AL,imm8
3D CMP AX,imm
3E DS: segment prefix
3F AAS
40 INC AX
41 INC CX
42 INC DX
43 INC BX
44 INC SP
45 INC BP
46 INC SI
47 INC DI
48 DEC AX
49 DEC CX
4A DEC DX
4B DEC BX
4C DEC SP
4D DEC BP
4E DEC SI
4F DEC DI
50 PUSH AX
51 PUSH CX
52 PUSH DX
53 PUSH BX
54 PUSH SP
55 PUSH BP
56 PUSH SI
57 PUSH DI
58 POP AX
59 POP CX
5A POP DX
5B POP BX
5C POP SP
5D POP BP
5E POP SI
5F POP DI
60 PUSHA ; NECs & 186+
61 POPA ; NECs & 186+
62 BOUND reg,mem ; NECs & 186+
63 ARPL reg,mem ; 286+ PM
64 FS: segment prefix ; 386+
65 GS: segment prefix ; 386+
66 Memory access size prefix ; 386+
67 Operands size prefix ; 386+
68 PUSH imm ; NECs & 186+
69 IMUL reg,imm,mem ; NECs & 186+
6A PUSH imm8 ; NECs & 186+
6B IMUL reg,imm8,mem ; NECs & 186+
6C INSB ; 186+
6D INS ; 186+
6E OUTSB ; 186+
6F OUTS ; 186+
70 JO rel8
71 JNO rel8
72 JC rel8
73 JNC rel8
74 JZ rel8
75 JNZ rel8
76 JNA rel8
77 JA rel8
78 JS rel8
79 JNS rel8
7A JP rel8
7B JNP rel8
7C JL rel8
7D JNL rel8
7E JNG rel8
7F JG rel8
80 code extention [1]
81 code extention [2]
82 code extention [3]
83 code extention [4]
84 TEST mem8,reg8
85 TEST mem,reg
86 XCHG mem8,reg8
87 XCHG mem,reg
88 MOV mem8,reg8
89 MOV mem,reg
8A MOV reg8,mem8
8B MOV reg,mem
8C code extention [5]
8D LEA reg,mem
8E code extention [6]
8F code extention [7]
90 NOP
91 XCHG AX,CX
92 XCHG AX,DX
93 XCHG AX,BX
94 XCHG AX,SP
95 XCHG AX,BP
96 XCHG AX,SI
97 XCHG AX,DI
98 CBW
66 98 CWDE ; 386+
99 CWD
66 99 CDQ ; 386+
9A CALL FAR seg:offs
9B WAIT/FWAIT
9C PUSHF
66 9C PUSHFD ; 386+
9D POPF
66 9D POPFD ; 386+
9E SAHF
9F LAHF
A0 MOV AL,[imm]
A1 MOV AX,[imm]
A2 MOV [imm],AL
A3 MOV [imm],ax
A4 MOVSB
A5 MOVS
A6 CMPSB
A7 CMPS
A8 TEST AL,imm8
A9 TEST AX,imm
AA STOSB
AB STOS
AC LODSB
AD LODS
AE SCASB
AF SCAS
B0 MOV AL,imm8
B1 MOV CL,imm8
B2 MOV DL,imm8
B3 MOV BL,imm8
B4 MOV AH,imm8
B5 MOV CH,imm8
B6 MOV DH,imm8
B7 MOV BH,imm8
B8 MOV AX,imm
B9 MOV CX,imm
BA MOV DX,imm
BB MOV BX,imm
BC MOV SP,imm
BD MOV BP,imm
BE MOV SI,imm
BF MOV DI,imm
C0 code extention [8]
C1 code extention [9]
C2 RET NEAR imm
C3 RET NEAR
C4 LES reg,mem
C5 LDS reg,mem
C6 code extention [10]
C7 code extention [11]
C8 ENTER imm,imm8 ; NECs & 186+
C9 LEAVE ; NECs & 186+
CA RET FAR imm
CB RET FAR
CC INT 3
CD INT imm8
CE INTO
CF IRET
D0 code extention [12]
D1 code extention [13]
D2 code extention [14]
D3 code extention [15]
D4 AAM imm8 ; NECs w/o imm8 but D4 0A only
D5 AAD imm8 ; NECs w/o imm8 but D4 0A only
D6 SETALC ; 286+
D7 XLAT
D8-DF ESC imm6,mem ; Note: Refer to Appendix F1
; (Cooprocessor commands).
E0 LOOPNZ rel8
E1 LOOPZ rel8
E2 LOOP rel8
E3 JCXZ rel8
66 E3 JECXZ rel8 ; 386+
E4 IN AL,imm8
E5 IN AX,imm8
E6 OUT imm8,AL
E7 OUT imm8,AX
E8 CALL NEAR rel16
E9 JMP NEAR rel16
EA JMP FAR seg:offs
EB JMP SHORT rel8
EC IN AL,DX
ED IN AX,DX
EE OUT DX,AL
EF OUT DX,AX
F0 LOCK prefix
F1 SMI ; AMD Am386/486DXLV
F2 REPNZ
F3 REP/REPZ ; Used in KNI/MMX2 as
; Modificator !!!!!!
F4 HLT
F5 CMC
F6 code extention [16]
F7 code extention [17]
F8 CLC
F9 STC
FA CLI
FB STI
FC CLD
FD STD
FE code extention [18]
FF code extention [19]
----------------------- [TABLE 01]: ---------------------------
Note: First Byte of Operation is 0Fh
00 Extended Opcode 20 ; 286+
01 Extended Opcode 21 ; 286+
02 LAR reg,mem ; 286+
03 LSL reg,mem ; 286+
04 LOADALL ; 286 only
05 LOADALL ; 286 only
05 SYSCALL ; AMD K6
06 CLTS ; 286+
07 LOADALL ; 386,486, None Pentium+
RES3 ; AMD Am386zXLV
RES4 ; AMD Am486DXLV
ICERET ; IBM 386SLC,486SLC,486SLC2
SYSRET ; AMD K6
08 INVD ; 486+
09 WBINVD ; 486+
0A Reserved, INT 6
0B UD2 ; all, but documented on
; Pentium Pro only
0C
0D code extention [25] ; AMD 3DNow!
0E FEMMS ; AMD 3DNow!
0F >>> TABLE 02 ; AMD 3DNow!
10 UMOV mem8,reg8 ; Really different op. space
; 386-486, Never Pentium+
; on AMD Amz86zXLV,never Cx5x86+
TEST1 mem8,CL ; NEC V20+
MOVSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 10)
MOVUPS xmm,xmm/m128 ; KNI/MMX2
11 UMOV mem,reg ; see 0Fh,10h
TEST1 mem,CL ; NEC V20+
MOVSS xmm/m32,xmm ; KNI/MMX2 (F3 0F 11)
MOVUPS xmm/m128,xmm ; KNI/MMX2
12 UMOV reg8,mem8 ; see 0Fh,10h
CLEAR1 mem8,CL ; NEC V20+
MOVHLPS xmm,xmm ; KNI/MMX2
MOVLPS xmm,m64 ; KNI/MMX2
13 UMOV reg,mem ; see 0Fh,10h
CLEAR1 mem,CL ; NEC V20+
MOVLPS m64,xmm ; KNI/MMX2
14 SET1 mem8,CL ; NEC V20+
UNPCKLPS xmm,xmm/m128 ; KNI/MMX2
15 SET1 mem,CL ; NEC V20+
UNPCKHPS xmm,xmm/m128 ; KNI/MMX2
16 NOT1 mem8,CL ; NEC V20+
MOVHPS xmm,m64 ; KNI/MMX2
MOVLHPS xmm,xmm ; KNI/MMX2
17 NOT1 mem,CL ; NEC V20+
MOVHPS m64,xmm ; KNI/MMX2
18 TEST1 mem8,imm8 ; NEC V20+
code extension [26] ; KNI/MMX2
19 TEST1 mem,imm8 ; NEC V20+
1A CLEAR1 mem8,imm8 ; NEC V20+
1B CLEAR1 mem,imm8 ; NEC V20+
1C SET1 mem8,imm8 ; NEC V20+
1D SET1 mem,imm8 ; NEC V20+
1E NOT1 mem8,imm8 ; NEC V20+
1F NOT1 mem,imm8 ; NEC V20+
20 MOV reg32,CRn ; 386+
ADD4S ; NEC V20+
21 MOV reg32,DRn ; 386+
22 MOV CRn,reg32 ; 386+
SUB4S ; NEC V20+
23 MOV DRn,reg32 ; 386+
24 MOV reg32,TRn ; 386-486 only, and Cyrix
25
26 MOV TRn,reg32 ; 386-486 only, and Cyrix
CMPS4S ; NEC V20+
27
28 ROL4 mem8 ; NEC V20+
MOVAPS xmm,xmm/m128 ; KNI/MMX2
29 MOVAPS xmm/m128,xmm ; KNI/MMX2
2A ROL4 mem8 ; NEC V20+
CVTPI2PS xmm,mm/m64 ; KNI/MMX2
CVTSI2SS xmm,r32/m32 ; KNI/MMX2 (F3 0F 2A)
2B MOVNTPS m128,xmm ; KNI/MMX2
2C CVTTPS2PI mm,xmm/m64 ; KNI/MMX2
CVTTSS2SI r32,xmm/m32 ; KNI/MMX2 (F3 0F 2C)
2D CVTPS2PI mm,xmm/m64 ; KNI/MMX2
CVTSS2SI r32,xmm/m32 ; KNI/MMX2 (F3 0F 2D)
2E UCOMISS xmm,xmm/m32 ; KNI/MMX2
2F COMISS xmm,xmm/m32 ; KNI/MMX2
30 WRMSR ; Pentium+, IBM 386SLC,486SLC/SLC2
31 RDTSC ; Pentium+
INS reg8,reg8 ; NEC V20+ ; Note: NECINS
32 RDMSR ; Pentium, IBM 386SLC,486SLC/SLC2
33 EXT reg8,reg8 ; NEC V20+
RDPMC ; Pentium Pro+
34 SYSENTER ; Pentium II+
35 SYSEXIT ; Pentium II+
36 RDSHR reg/mem32 ; Cx6x86MX (SMM only)
37 WRSHR reg/mem32 ; Cx6x86MX (SMM only)
38
39
3A
3B
3C
3D
3E
3F
40 CMOVO reg,mem ; Pentium Pro+
41 CMOVNO reg,mem ; Pentium Pro+
42 CMOVC reg,mem ; Pentium Pro+
43 CMOVNC reg,mem ; Pentium Pro+
44 CMOVZ reg,mem ; Pentium Pro+
45 CMOVNZ reg,mem ; Pentium Pro+
46 CMOVA reg,mem ; Pentium Pro+
47 CMOVNA reg,mem ; Pentium Pro+
48 CMOVS reg,mem ; Pentium Pro+
49 CMOVNS reg,mem ; Pentium Pro+
4A CMOVP reg,mem ; Pentium Pro+
4B CMOVNP reg,mem ; Pentium Pro+
4C CMOVL reg,mem ; Pentium Pro+
4D CMOVNL reg,mem ; Pentium Pro+
4E CMOVNG reg,mem ; Pentium Pro+
4F CMOVG reg,mem ; Pentium Pro+
50 PAVEB mm,mm/m64 ; Cyrix EMMX
MOVMSKPS r32,xmm ; KNI/MMX2
51 PADDSIW mm,mm/m64 ; Cyrix EMMX
SQRTPS xmm,xmm/m128 ; KNI/MMX2
SQRTSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 51)
52 PMAGW mm,mm/m64 ; Cyrix EMMX
PSQRTPS xmm,xmm/m128 ; KNI/MMX2
PSQRTSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 52)
53 RCPPS xmm,xmm/m128 ; KNI/MMX2
RCPSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 53)
54 PDISTIB mm,m64 ; Cyrix EMMX
ANDPS xmm,xmm/m128 ; KNI/MMX2
55 PSUBSIW mm,mm/m64 ; Cyrix EMMX
ANDNPS xmm,xmm/m128 ; KNI/MMX2
56 ORPS xmm,xmm/m128 ; KNI/MMX2
57 XORPS xmm,xmm/m128 ; KNI/MMX2
58 PMVZB mm,m64 ; Cyrix EMMX
ADDPS xmm,xmm/m128 ; KNI/MMX2
ADDSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 58)
59 PMULHRW mm,mm/m64 ; Cyrix EMMX
MULPS xmm,xmm/m128 ; KNI/MMX2
MULSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 59)
5A PMVNZB mm,m64 ; Cyrix EMMX
5B PMVLZB mm,m64 ; Cyrix EMMX
5C PMVGEZB mm,m64 ; Cyrix EMMX
SUBPS xmm,xmm/m128 ; KNI/MMX2
SUBSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5C)
5D PMULHRIW mm,mm/m64 ; Cyrix EMMX
MINPS xmm,xmm/m128 ; KNI/MMX2
MINSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5D)
5E PMACHRIW mm,m64 ; Cyrix EMMX
DIVPS xmm,xmm/m128 ; KNI/MMX2
DIVSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5E)
5F MAXPS xmm,xmm/m128 ; KNI/MMX2
MAXSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5F)
60 PUNPCKLBW mm,mm/m32 ; MMX
61 PUNPCKLWD mm,mm/m32 ; MMX
62 PUNPCKLDQ mm,mm/m32 ; MMX
63 PACKSSWB mm,mm/m64 ; MMX
64 PCMPGTB mm,mm/m64 ; MMX
65 PCMPGTW mm,mm/m64 ; MMX
66 PCMPGTD mm,mm/m64 ; MMX
67 PACKUSWB mm,mm/m64 ; MMX
68 PUNPCKHBW mm,mm/m64 ; MMX
69 PUNPCKHWD mm,mm/m64 ; MMX
6A PUNPCKHDQ mm,mm/m64 ; MMX
6B PACKSSDW mm,mm/m64 ; MMX
6C
6D
6E MOVD mm,r/m32 ; MMX
6F MOVQ mm,mm/m64 ; MMX
70 PSHUFW mm,mm/m64,i8 ; KNI/MMX2,AMD EMMX
71 code extention [28] ; MMX
72 code extention [29] ; MMX
73 code extention [30] ; MMX
74 PCMPEQB mm,mm/m64 ; MMX
75 PCMPEQW mm,mm/m64 ; MMX
76 PCMPEQD mm,mm/m64 ; MMX
77 EMMS ; MMX
78 SVDC mem,sreg ; Cyrix M5+ (SMM only)
79 RSDC sreg,mem ; Cyrix M5+ (SMM only)
7A SVLDT mem ; Cyrix M5+ (SMM only)
7B RSLDT mem ; Cyrix M5+ (SMM only)
7C SVTS mem ; Cyrix M5+ (SMM only)
7D RSTS mem ; Cyrix M5+ (SMM only)
7E SMINT ; Cyrix M6+
7E MOVD r/m32,mm ; MMX
7F MOVD mm/m64,mm ; MMX
80 JO rel16 ; 386+
81 JNO rel16 ; 386+
82 JC rel16 ; 386+
83 JNC rel16 ; 386+
84 JZ rel16 ; 386+
85 JNZ rel16 ; 386+
86 JNA rel16 ; 386+
87 JA rel16 ; 386+
88 JS rel16 ; 386+
89 JNS rel16 ; 386+
8A JP rel16 ; 386+
8B JNP rel16 ; 386+
8C JL rel16 ; 386+
8D JNL rel16 ; 386+
8E JNG rel16 ; 386+
8F JG rel16 ; 386+
90 SETO mem8 ; 386+
91 SETNO mem8 ; 386+
92 SETC mem8 ; 386+
93 SETNC mem8 ; 386+
94 SETZ mem8 ; 386+
95 SETNZ mem8 ; 386+
96 SETNA mem8 ; 386+
97 SETA mem8 ; 386+
98 SETS mem8 ; 386+
99 SETNS mem8 ; 386+
9A SETP mem8 ; 386+
9B SETNP mem8 ; 386+
9C SETL mem8 ; 386+
9D SETNL mem8 ; 386+
9E SETNG mem8 ; 386+
9F SETG mem8 ; 386+
A0 PUSH FS ; 386+
A1 POP FS ; 386+
A2 CPUID ; 486 SL enhanced, Pentium+
; UMC,i386CX,Cyrix M1+,AMD K5+,
; Some NexGen, IDT
A3 BT mem,reg ; 386+
A4 SHLD mem,reg,imm ; 386+
A5 SHLD mem,reg,CL ; 386+
A6 XBTS reg,mem,AX,CL ; Intel (!!!) 80386 steps A0-B0
CMPXCHG mem8,reg8 ; Intel (!!!) 80486 steps A0-B0
A7 IBTS mem,AX,CL,reg ; Intel (!!!) 80386 steps A0-B0
CMPXCHG mem,reg ; Intel (!!!) 80486 steps A0-B0
A8 PUSH GS ; 386+
A9 POP GS ; 386+
AA RSM ; i486 SL Enhanced, i386CX
; Intel Pentium+, etc
AB BTS mem,reg ; 386+
AC SHRD mem,reg,imm ; 386+
AD SHRD mem,reg,CL ; 386+
AE code extention [24]
AF IMUL reg,mem ; 386+
B0 CMPXCHG mem8,reg8 ; 486+ (Intel B1+ step only)
B1 CMPXCHG mem,reg ; 486+ (Intel B1+ step only)
B2 LSS reg,mem ; 386+
B3 BTR mem,reg ; 386+
B4 LFS reg,mem ; 386+
B5 LGS reg,mem ; 386+
B6 MOVZX reg,mem8 ; 386+
B7 MOVZX reg32,mem ; 386+
B8
B9 UD2 ; one more Undefined Opcode-2
BA code extention [22]
BB BTC mem,reg ; 386+
BC BSF reg,mem ; 386+
BD BSR reg,mem ; 386+
BE MOVSX reg,mem8 ; 386+
BF MOVSX reg32,mem ; 386+
C0 XADD mem8,reg8 ; 486+
C1 XADD mem,reg ; 486+
C2 code extension [27] ; KNI/MMX2
C3
C4 PINSRW mm,r32/m16,i8 ; KNI/MMX2,AMD EMMX
C5 PEXTRW r32,mm,i8 ; KNI/MMX2,AMD EMMX
C6 SHUFPS xmm,xmm/m128,i8 ; KNI/MMX2
C7 code extention [23]
C8 BSWAP EAX ; 486+
C9 BSWAP ECX ; 486+
CA BSWAP EDX ; 486+
CB BSWAP EBX ; 486+
CC BSWAP ESP ; 486+
CD BSWAP EBP ; 486+
CE BSWAP ESI ; 486+
CF BSWAP EDI ; 486+
D0
D1 PSRLW mm,mm/m64 ; MMX
D2 PSRLD mm,mm/m64 ; MMX
D3 PSRLQ mm,mm/m64 ; MMX
D4
D5 PMULLW mm,mm/m64 ; MMX
D6
D7 PMOVMSKB r32,mm ; KNI/MMX2,AMD EMMX
D8 PSUBUSB mm,mm/m64 ; MMX
D9 PSUBUSW mm,mm/m64 ; MMX
DA PMINUB mm,mm/m64 ; KNI/MMX2,AMD EMMX
DB PAND mm,mm/m64 ; MMX
DC PADDUSB mm,mm/m64 ; MMX
DD PADDUSW mm,mm/m64 ; MMX
DE PMAXUB mm,mm/m64 ; KNI/MMX2,AMD EMMX
DF PANDN mm,mm/m64 ; MMX
E0 PAVGB mm,mm/m64 ; KNI/MMX2,AMD EMMX
E1 PSRAW mm,mm/m64 ; MMX
E2 PSRAD mm,mm/m64 ; MMX
E3 PAVGW mm,mm/m64 ; KNI/MMX2, AMD EMMX
E4 PMULHUW mm,mm/m64 ; KNI/MMX2, AMD EMMX
E5 PMULHW mm,mm/m64 ; MMX
E6
E7 MOVNTQ m64,mm ; KNI/MMX2, AMD EMMX
E8 PSUBSB mm,mm/m64 ; MMX
E9 PSUBSW mm,mm/m64 ; MMX
EA PMINSW mm,mm/m64 ; KNI/MMX2, AMD EMMX
EB POR mm,mm/m64 ; MMX
EC PADDSB mm,mm/m64 ; MMX
ED PADDSW mm,mm/m64 ; MMX
EE PMAXSW mm,mm/m64 ; KNI/MMX2, AMD EMMX
EF PXOR mm,mm/m64 ; MMX
F0
F1 PSLLW mm,mm/m64 ; MMX
F2 PSLLD mm,mm/m64 ; MMX
F3 PSLLQ mm,mm/m64 ; MMX
F4
F5 PMULADDWD mm,mm/m64 ; MMX
F6 PSADBW mm,mm/m64 ; KNI/MMX2, AMD EMMX
F7 MASKMOVQ mm,mm ; KNI/MMX2, AMD EMMX
F8 PSUBB mm,mm/m64 ; MMX
F9 PSUBW mm,mm/m64 ; MMX
FA PSUBD mm,mm/m64 ; MMX
FB
FC PADDB mm,mm/m64 ; MMX
FD PADDW mm,mm/m64 ; MMX
FE PADDD mm,mm/m64 ; MMX
FF UD ; AMD Am5k86+ and all other CPUs
FF OIO ; Cyrix Cx6x86+ and all other CPUs
FF BRKEM imm8 ; NEC V20+
---------------------- [TABLE 02] --------------------------
First bytes is 0Fh,0Fh
(In Table 02 marked only valid opcodes)
0C PI2FW mm,mm/m64 ; AMD 3FNow! extensions
0D PI2FD mm,mm/m64 ; AMD 3DNow!
1C PF2IW mm,mm/m64 ; AMD 3DNow! extensions
1D PF2ID mm,mm/m64 ; AMD 3DNow!
8A PFNACC mm,mm/m64 ; AMD 3DNow! extensions
8E PFPNACC mm,mm/m64 ; AMD 3DNow! extensions
90 PFCMPGE mm,mm/m64 ; AMD 3DNow!
94 PFMIN mm,mm/m64 ; AMD 3DNow!
96 PFRCP mm,mm/m64 ; AMD 3DNow!
97 PFRSQRT mm,mm/m64 ; AMD 3DNow!
9A PFSUB mm,mm/m64 ; AMD 3DNow!
9E PFADD mm,mm/m64 ; AMD 3DNow!
A0 PFCMPGT mm,mm/m64 ; AMD 3DNow!
A4 PFMAX mm,mm/m64 ; AMD 3DNow!
A6 PFRCPIT1 mm,mm/m64 ; AMD 3DNow!
A7 PFRSQIT1 mm,mm/m64 ; AMD 3DNow!
AA PFSUBR mm,mm/m64 ; AMD 3DNow!
AE PFACC mm,mm/m64 ; AMD 3DNow!
B0 PFCMPEQ mm,mm/m64 ; AMD 3DNow!
B4 PFMUL mm,mm/m64 ; AMD 3DNow!
B6 PFRCPIT2 mm,mm/m64 ; AMD 3DNow!
B7 PMULHRW mm,mm/m64 ; AMD 3DNow!
BB PSWAPD mm,mm/m64 ; AMD 3DNow! extension
BF PAVGUSB mm,mm/m64 ; AMD 3DNow!
**************************************************
CODE EXTENTIONS:
First byte(s) look at TABLES#00,01
Next byte have format
MMOOOMMM : MM is memory mode (see postbyte)
OOO select operation in this extention code field
MMM is memory field (see Postbyte)
Code Extention # 1
(First byte(s) = 80h)
Field
OOO Operation
000 ADD mem8,imm8
001 OR mem8,imm8
010 ADC mem8,imm8
011 SBB mem8,imm8
100 AND mem8,imm8
101 SUB mem8,imm8
110 XOR mem8,imm8
111 CMP mem8,imm8
Code Extention # 2
(First byte(s) = 81h)
Field
OOO Operation
000 ADD mem,imm
001 OR mem,imm
010 ADC mem,imm
011 SBB mem,imm
100 AND mem,imm
101 SUB mem,imm
110 XOR mem,imm
111 CMP mem,imm
Code Extention # 3
(First byte(s) = 82h)
Note: On some models, undefined code do nothing, on any work as 83h
None INT 6 at all.
Field
OOO Operation
000 ADD mem8,simm8
001
010 ADC mem8,simm8
011 SBB mem8,simm8
100
101 SUB mem8,simm8
110
111 CMP mem8,simm8
Code Extention # 4
(First byte(s) = 83h)
Field
OOO Operation
000 ADD mem,simm8
001 OR mem,simm8 ; 386+
010 ADC mem,simm8
011 SBB mem,simm8
100 AND mem,simm8 ; 386+
101 SUB mem,simm8
110 XOR mem,simm8 ; 388+
111 CMP mem,simm8
Code Extention # 5
(First byte(s) = 8Ch)
Field
OOO Operation
000 MOV mem,ES
001 MOV mem,CS
010 MOV mem,SS
011 MOV mem,DS
100 MOV mem,FS ; 386+
101 MOV mem,GS ; 386+
110
111
Code Extention # 6
(First byte(s) = 8Eh)
Field
OOO Operation
000 MOV ES,mem
001 MOV CS,mem ; Non CMOS version of 8086/8088 only
010 MOV SS,mem
011 MOV DS,mem
100 MOV FS,mem ; 386+
101 MOV GS,mem ; 386+
110
111
Code Extention # 7
(First byte(s) = 8Fh)
Note: i486 can eat any OOO.
Field
OOO Operation
000 POP mem
001
010
011
100
101
110
111
Code Extention # 8
(First byte(s) = C0h)
Field
OOO Operation
000 ROL mem8,imm8 ; 186+
001 ROR mem8,imm8 ; 186+
010 RCL mem8,imm8 ; 186+
011 RCR mem8,imm8 ; 186+
100 SHL mem8,imm8 ; 186+
101 SHR mem8,imm8 ; 186+
110 SAL mem8,imm8 ; 186+
111 SAR mem8,imm8 ; 186+
Code Extention # 9
(First byte(s) = C1h)
Field
OOO Operation
000 ROL mem,imm8 ; 186+
001 ROR mem,imm8 ; 186+
010 RCL mem,imm8 ; 186+
011 RCR mem,imm8 ; 186+
100 SHL mem,imm8 ; 186+
101 SHR mem,imm8 ; 186+
110 SAL mem,imm8 ; 186+
111 SAR mem,imm8 ; 186+
Code Extention # 10
(First byte(s) = C6h)
Note: i486 can eat any OOO field.
Field
OOO Operation
000 MOV mem8,imm8
001
010
011
100
101
110
111
Code Extention # 11
(First byte(s) = C7h)
Note: i486 can eat any OOO field
Field
OOO Operation
000 MOV mem,imm16
001
010
011
100
101
110
111
Code Extention # 12
(First byte(s) = D0h)
Field
OOO Operation
000 ROL mem8,1
001 ROR mem8,1
010 RCL mem8,1
011 RCR mem8,1
100 SHL mem8,1
101 SHR mem8,1
110 SAL mem8,1
111 SAR mem8,1
Code Extention # 13
(First byte(s) = D1h)
Field
OOO Operation
000 ROL mem,1
001 ROR mem,1
010 RCL mem,1
011 RCR mem,1
100 SHL mem,1
101 SHR mem,1
110 SAL mem,1
111 SAR mem,1
Code Extention # 14
(First byte(s) = D2h)
Field
OOO Operation
000 ROL mem8,CL
001 ROR mem8,CL
010 RCL mem8,CL
011 RCR mem8,CL
100 SHL mem8,CL
101 SHR mem8,CL
110 SAL mem8,CL
111 SAR mem8,CL
Code Extention # 15
(First byte(s) = D3h)
Field
OOO Operation
000 ROL mem,CL
001 ROR mem,CL
010 RCL mem,CL
011 RCR mem,CL
100 SHL mem,CL
101 SHR mem,CL
110 SAL mem,CL
111 SAR mem,CL
Code Extention # 16
(First byte(s) = F6h)
Note: Usually 001 do same thing as 000, TEST mem8,imm8
Field
OOO Operation
000 TEST mem8,imm8
001
010 NOT mem8
011 NEG mem8
100 MUL mem8
101 IMUL mem8
110 DIV mem8
111 IDIV mem8
Code Extention # 17
(First byte(s) = F7h)
Note: Usually 001 do same thing as 000, TEST mem,imm16
Field
OOO Operation
000 TEST mem,imm16
001
010 NOT mem
011 NEG mem
100 MUL mem
101 IMUL mem
110 DIV mem
111 IDIV mem
Code Extention # 18
(First byte(s) = FEh)
Field
OOO Operation
000 INC mem8
001 DEC mem8
010
011
100
101
110
111
Code Extention # 19
(First byte(s) = FFh)
Field
OOO Operation
000 INC mem
001 DEC mem
010 CALL NEAR mem
011 CALL FAR mem
100 JMP NEAR mem
101 JMP FAR mem
110 PUSH mem
111
Code Extention # 20
(First byte(s) = 0FH,00H)
Field
OOO Operation
000 SLDT mem ; 286+
001 STR mem ; 286+
010 LLDT mem ; 286+
011 LTR mem ; 286+
100 VERR mem ; 286+
101 VERW mem ; 286+
110
111
Code Extention # 21
(First byte(s) = 0Fh,01h)
Field
OOO Operation
000 SGDT mem ; 286+
001 SIDT mem ; 286+
010 LGDT mem ; 286+
011 LIDT mem ; 286+
100 SMSW mem ; 286+
101
110 LMSW mem ; 286+
111 INVLPG mem ; 486+
Code Extention # 22
(First byte(s) = 0Fh,BAh)
Field
OOO Operation
000
001
010
011
100 BT mem,imm8 ; 386+
101 BTS mem,imm8 ; 386+
110 BTR mem,imm8 ; 386+
111 BTC mem,imm8 ; 386+
Code Extention # 23
(First byte(s) = 0Fh,C7h)
Field
OOO Operation
000
001 CMPXCHG8B mem ; Pentium
010
011
100
101
110
111
Code Extention # 24
(First byte(s) = 0Fh,AEh)
Field
OOO Operation
000 FXSAVE mem512byte ; KNI/MMX2
001 FXRSTOR mem512byte ; KNI/MMX2
010 LDMXCSR m32 ; KNI/MMX2
011 STMXCSR m32 ; KNI/MMX2
100
101
110
111 SFENCE ; KNI/MMX2, AMD EMMX
(0F AE F8)
Code Extention # 25
(First byte(s) = 0Fh,0Dh)
Field
OOO Operation
000 PREFETCH mem ; AMD 3DNow!
001 PREFETCHW mem ; AMD 3DNow!
010
011
100
101
110
111
Code Extention # 26
(First byte(s) = 0Fh,18h)
Field
OOO Operation
000 PREFETCHNTA mem ; KNI/MMX2, AMD EMMX
001 PREFETCHT0 mem ; KNI/MMX2, AMD EMMX
010 PREFETCHT1 mem ; KNI/MMX2, AMD EMMX
011 PREFETCHT2 mem ; KNI/MMX2, AMD EMMX
100
101
110
111
Code Extension # 27
(First byte(s) = (F3h) 0Fh,C2h) ; KNI/MMX2 All extension
.
Instruction have unusuall x86 format:
<0Fh> <C2h> <Postbyte> [<Memory>] <Nextbyte>
<F3h> <0Fh> <C2h> <Postbyte> [<Memory>] <Nextbyte>
.
Next byte (w/o F3h Prefix) (with F3 prefix)
00 CMPEQPS xmm,xmm/m128 CMPEQSS xmm,xmm/m32 ; KNI/MMX2
01 CMPLTPS xmm,xmm/m128 CMPLTSS xmm,xmm/m32 ; KNI/MMX2
02 CMPLEPS xmm,xmm/m128 CMPLESS xmm,xmm/m32 ; KNI/MMX2
03 CMPUNORDPS xmm,xmm/m128 CMPUNORDSS xmm,xmm/m32 ; KNI/MMX2
04 CMPNEPS xmm,xmm/m128 CMPNESS xmm,xmm/m32 ; KNI/MMX2
05 CMPNLTPS xmm,xmm/m128 CMPNLTSS xmm,xmm/m32 ; KNI/MMX2
06 CMPNLEPS xmm,xmm/m128 CMPNLESS xmm,xmm/m32 ; KNI/MMX2
07 CMPORDPS xmm,xmm/m128 CMPORDSS xmm,xmm/m32 ; KNI/MMX2
.
Note: This is other forms of
CMPPS xmm,xmm/m128,imm8
CMPSS xmm,xmm/m32,imm8
Code Extention # 28
(First byte(s) = 0Fh,71h)
Field
OOO Operation
000
001
010 PSRLW mm,imm8 ; MMX
011
100 PSRAW mm,imm8 ; MMX
101
110 PSSLW mm,imm8 ; MMX
111
Code Extention # 29
(First byte(s) = 0Fh,72h)
Field
OOO Operation
000
001
010 PSRLD mm,imm8 ; MMX
011
100 PSRAD mm,imm8 ; MMX
101
110 PSLLD mm,imm8 ; MMX
111
Code Extention # 30
(First byte(s) = 0Fh,73h)
Field
OOO Operation
000
001
010 PSRLQ mm,imm8 ; MMX
011
100
101
110 PSLLQ mm,imm8 ; MMX
111
Note:
Here Provided small note about
Additional Instruction Sets
(SIMD subset)
Cyrix AMD 3DNow!
P5 P6 MMX EMMX 3DNow! SIMD EMMX ext
Pentium + - - - - - - -
Pentium/wMMX + - + - - - - -
Pentium Pro + + - - - - - -
Pentium II + + + - - - - -
Pentium III + + + - - + (+) -
AMD K5 + - - - - - - -
AMD K6 + + + - - - - -
AMD K6-2 + + + - + - - -
AMD K6-III + + + - + - - -
AMD Athlon + + + - + - + +
Top
ESC 0 (First byte = D8h) ========================== ESCAPE 000 MMRRRMMM ========================== Operation RRR If MM<>11 If MM=11 000 FADD mem32r FADD ST,ST(i) 001 FMUL mem32r FMUL ST,ST(i) 010 FCOM mem32r FCOM ST(i) 011 FCOMP mem32r FCOMP ST(i) 100 FSUB mem32r FSUB ST,ST(i) 101 FSUBR mem32r FSUBR ST,ST(i) 110 FDIV mem32r FDIV ST,ST(i) 111 FDIVR mem32r FDIVR ST,ST(i) ESC 1 (First byte = D9h) ========================== ESCAPE 001 MMRRRMMM ========================== Operation RRR If MM<>11 If MM=11 000 FLD mem32r FLD ST(i) 001 empty FXCH ST(i) 010 FST mem32r See Table marked ESC1-Extended codes 011 FSTP mem32r FSTP ST(i) 100 FLDENV mem See Table marked ESC1-Extended codes 101 FLDCW mem See Table marked ESC1-Extended codes 110 FSTENV mem See Table marked ESC1-Extended codes 111 FSTCW mem See Table marked ESC1-Extended codes ESC1-Extended codes: \ RRR MMM \ 010 100 101 110 111 000 FNOP FCHS FLD1 F2XM1 FPREM 001 FABS FLDL2T FYL2X FYL2XP1 010 FLDL2E FPTAN FSQRT 011 FLDPI FPATAN FSINCOS' 100 FTST FLDLG2 FXTRACT FRNDINT 101 FXAM FLDLN2 FPREM1 FSCALE 110 FLDZ FDECSTP FSIN' 111 FINCSTP FCOS' ' means 387+ (include 287XL/XLT, 187!!!) ESC 2 (First byte = DAh) ========================== ESCAPE 010 MMRRRMMM ========================== Operation RRR If MM<>11 000 FIADD mem32i 001 FIMUL mem32i 010 FICOM mem32i 011 FICOMP mem32i 100 FISUB mem32i 101 FISUBR mem32i 110 FIDIV mem32i 111 FIDIVR mem32i Note: P6 DA C0+i FCMOVB ST0,STi DA C8+i FCMOVE ST0,STi DA D0+i FCMOVBE ST0,STi DA D8+i FCMOVU ST0,STi ESC 3 (First byte = DBh) ========================== ESCAPE 011 MMRRRMMM ========================== Operation RRR If MM<>11 000 FILD mem32i 001 010 FIST mem32i 011 FISTP mem32i 100 101 FLD mem80r 110 111 FSTP mem80r So,If MM=11 we have next command (first byte = DBh) Mnemonic Second byte of code FNENI E0H (8087 only, others do nothing) FNDISI E1H (8087 only, others do nothing) FNCLEX E2H FNINIT E3H FSETPM E4H (287s only) FRSTPM E5H (287XL/XLT only) FSTB0 E8H (IIT) FSTB2 EAH (IIT) FSTB1 EBH (IIT) F4X4 F1H (IIT) FRINT2 FCH (Cyrix) FUCOMI ST0,STi E8H+i (P6) FCMOVNB ST0,STi C0H+i (P6) FCMOVNE ST0,STi C8H+i (P6) FCMOVNBE ST0,STi D0H+i (P6) FCMOVNU ST0,STi D8H+i (P6) FCOMPI ST0,STi F0H+i (P6) ESC 4 (First byte = DCh) ========================== ESCAPE 100 MMRRRMMM ========================== Operation RRR If MM<>11 If MM=11 000 FADD mem64r FADD ST(i),ST 001 FMUL mem64r FMUL ST(i),ST 010 FCOM mem64r FCOM ST(i) 011 FCOMP mem64r FCOMP ST(i) 100 FSUB mem64r FSUB ST(i),ST 101 FSUBR mem64r FSUBR ST(i),ST 110 FDIV mem64r FDIV ST(i),ST 111 FDIVR mem64r FDIVR ST(i),ST ESC 5 (First byte = DDh) ========================== ESCAPE 101 MMRRRMMM ========================== Operation RRR If MM<>11 If MM=11 000 FLD mem64r FFREE ST(i) 001 FXCH ST(i) 010 FST mem64r FST ST(i) 011 FSTP mem64r FSTP ST(i) 100 FNRSTOR mem 101 110 FNSAVE mem FUCOM ST(i) 111 FSTSW mem FUCOMP ST(i) Note: FRICHOP have opcode (DDh FCh) (Cyrix) ESC 6 (First byte = DEh) ========================== ESCAPE 110 MMRRRMMM ========================== Operation RRR If MM<>11 If MM=11 000 FIADD mem16i FADDP ST(i),ST 001 FIMUL mem16i FMULP ST(i),ST 010 FICOM mem16i FCOMP ST(i),ST 011 FICOMP mem16i 100 FISUB mem16i FSUBP ST(i),ST 101 FISUBR mem16i FSUBRP ST(i),ST 110 FIDIV mem16i FDIVP ST(i),ST 111 FIDIVR mem16i FDIVRP ST(i),ST Note: FCOMPP have opcode (DEh D9h) (Intel and all) ESC 7 (First byte = DFh) ========================== ESCAPE 111 MMRRRMMM ========================== Operation RRR If MM<>11 If MM=11 000 FILD mem16i FFREE ST(i) 001 FXCH ST(i) 010 FIST mem16i FST ST(i) 011 FISTP mem16i FSTP ST(i) 100 FBLD mem80b 101 FILD mem64i 110 FBSTP mem80b 111 FISTP mem64i Note: Next Instruction have opcodes: Mnemonic Opcode FNSTSW AX DFh E0h (287+) FNSTDW AX DFh E1h (387SL Mobile) FSTSG AX DFh E2h (387SL Mobile) FRINEAR DFh FCh (Cyrix) FUCOMIP ST0,STi DFH E8H+i (P6) FCOMIP ST0,STi DFH F0H+i (P6)Top
Note: Here Provided small note about Additional Instruction Sets: P5 P6 MMX EMMX 3DNow! SIMD Pentium + Pentium/wMMX + + Pentium Pro + + Pentium II + + + Celeron + + + Pentium III + + + + AMD K5 + AMD K6 + + AMD K6-2 + + + AMD K6-3 + + + Cyrix Cx6x86 (1) Cyxix Cx6x86MX + + + + Cyrix MII + + + + IDT C6 + + IDT WinChip 2 + + + (1) - Not support CPUIDTop
BUGS & CPU IDENTIFICATION INFO
1) How to separate i386SX and i386DX
(Cx486SLC and Cx486DLC)
Note: With 386DX type CPU possible to used
287 class NPX, and bit 4 in CR0
ET - Extention Type on DX we may to
clear to 0, but for SX and REAL 486
this bit always 1.
Routine:
mov eax,cr0
push eax
and al,0efh
mov cr0,eax
mov eax,cr0
test al,10h
pop eax
mov cr0,eax
jne SX/SLC
jmp DX/DLC
2) How to separate i486SX and i487SX/i486DX/DX2 etc
Routine:
memory_location DW ?
mov memory_location,0
fninit
fstcw memory_location
cmp memory_location,037Fh
jz i486SX
jmp i486DX/DX2etc/i487SX
3) How to separate Cyrix's CPUs and other
Be sure that Your CPU no Pentium before
UMOV executed on Intel and other in
Non SM modes as MOV.
But Cyrix executed this instruction as
Double NOP, and never generate INT 6.
So.
Mem_Loc DW 1
xor ax,ax
umov ax,Mem_Loc
or ax,ax
jz Cyrix
jmp No_Cyrix
4) Standart Way: Part 1
(Intel recomended this way)
pushf
pop ax
and ax,0fffh ; Clear bits 15..12
push ax
popf
pushf
pop ax
and ax,0f000h ; Is bits 15..12=0 ?
jz 286_CPU
and ax,8000h ; Is bit 15=0
jz 386_and_Higher
jmp 86_88and186_186etc
5) How separate 86/88, 186/188 and NECs
mov ax,1
mov cl,33
shl ax,cl
jnz 186_188
pusha ; Executed on 8086/8088 as JMP $+2
stc
jc NECs
jmp 86_88
6) Non CMOS 8086/88 execute command MOV CS,xxxx (Opcode 8Eh ...)
CMOS 80C86/88 ignore it.
7) Then Invalid Opcode NEC/Sony V40/V50 do INT 6
NEC/Sony V20/V30 don't.
8) Remember POP CS instruction on non-CMOS 8086/8088.
9) PUSH SP
286 placed in stack new value of SP
86/88 old.
10) Best way to Reset 286+ in Real Mode:
mov sp,1 (LOW BOUND)
push smth
note:
mov sp,ffffh (HIGH BOUND)
pop smth
caused non Stack Fault, but GPF.
11) Maximal Length of Instructian
86: N/R
286: 10 byte
386+: 15 byte
12) UMC Chips Detection (UMC U486SX, for other use CPUID)
db 64h,0dbh ; look like "SETALC FS:", but it none
cmp eax,0ab6b1b07h
je u486SX
jne Other
13) MSW on 386/486
On 386 MSR reserved bits = 1, so Real Mode 386 usually MSW = FFF0
Real Mode 486+ usually MSW = 0010
smsw ax
and ah,ah
jnz cpu_386
jz cpu_486_and_more
14) Selectors PUSH
486 write 2 bytes to stack and ADD ESP,4
Pentium Write all 4 bytes (and two of it are zero)
(The same situation, then pushing 16-bit error code on exception)
15) TSS I/O Map Addressing
Then I/O Map Base Address in TSS contain for example FFFFh,
(don't forget TSS Limit)
i486 wrap around segment and access invalid address near start of TSS.
Pentium caused GPF.
16) Prefetcher
up to 486 and 486 then instruction fetched to prefetcher and we write
into memory area, where this instruction placed, will be execute
already-prefetched command, but non-new.
Pentium flush prefetcher, when detect modify of fetched cache line,
so, for avoid this flush use different linear addresses for modify.
CPU Size_of_prefetch_queue Number_of_empty_bytes_in
(bytes) queue_needed_for_initiate
prefetch_cycle
8086/186/V20 6 2
8088/188/V30 4 1
286 6 2
386SX 16 2
386DX 16 4
17) DR4/DR5 :))
on 486 then accessing DR4/DR5 CPU accessed DR6/DR7.
on Pentium if CR4.DE=0 the same situation as on 486,
but if CR4.DE=1 then MOV from/to DR4/DR5 caused GPF.
18) NexGen Nx586
On Pentium and 486 we cannot set ET flag in CR0.
We may set ET flag in CR0.
(On 386 we may set this flag too).
19) IDIV
if result of IDIV will be 80h (byte IDIV) or 8000h (word IDIV)
86/88 caused INT 0 - Division by zero,
on 286+ 80h/8000h keeps as result and no exception
20) Division by zero
On 86/88 pointer in stack then caused Division by zero
pointed to DIV/IDIV instruction,
on 286+ pointed to next instruction.
21) FPU Exception
So, then FPU command with prefixes caused exception
on 86/88 pointer to failed instruction on stack pointed to ESC command,
on 386+ pointed to one of prefixes before ESC.
22) String commands
if while 86/88 execute string instruction interrupt caused,
CPU end execute instruction and goto next instruction,
CX,SI and DI have values after last complete iteration
To avoid it, use:
pushf
cli
rep STRING
popf
23) How to separate C&T 386 CPU form other (AMD,Intel)
(C&T none have POPAD bug, but Intel and AMD have)
mov esi,32
mov eax,12345678h
loop:
mov ebx,eax
mov edx,0
mov esi,0
pushad
popad
mov ecx,[edx+edi]
cmp eax,ebx
jnz AMD_Intel
rol eax,1
dec esi
jnz loop
jmp C_T_CPUs
Top
Internal Names Of Processors (Intel) P9 i386SX P4 i486DX P4S i486SX P23S i487SX P23T OverDrive for PGA(169) P4T OverDrive for PGA(168) P24S i486DX2 P24T Pentium OverDrive for i486DX2 socket 3 (Vcc=5V,core=3V). P24CT Pentium OverDrive for Socket 3 (Vcc=3V) P5 Pentium-60,66 P5T Overdrive for P5 socket (120/133 MHz). P54C Pentium-90,100,75 x1.5 usually with APIC and Multiprocessing features P54CS Pentium-120,133 x2 with reduced APIC and multipr. features P55C Pentium w/MMX P54LM Pentium P54C with 2.9V (for Notebooks) P24C IntelDX4 P24D i486DX2 with WB cache (IntelDX2 (tm) WriteBack Enhanced) P54M Overdrive ( include to P54C but P54C work too) P6 Pentium Pro (no comments) P6T Pentium Pro OverDrive (for extended Pentium Sockets) P7 "Merced" (IA-64, VLIW command set "Tahoe") P54CSQ 3xCLK Pentiums P120 etc. P54CSLM P54CS with Low Power. P6L Pentium II "Klamath" (P6+MMX, Slot 1, 66 MHz bus, L2 speed CLK/2) Pentium II "Deschutes" (modernized Klamath, Slot 1, 66 or 100 MHz bus, L2 speed CLK/2) Celeron "Covington" (Slot1, Deschutes w/o L2 cache) Celron "Mendocino" (Slot1, L2 speed at CLK) Pentium II Xeon "Xeon" (Slot2, L2 speed at CLK) Pentium III "Katmai" (Slot1, 100MHz system bus, SIMD (MMX2/KNI)) Pentium III Xeon "Tanner" (Slot2, 100MHz system bus, L2 speed at CLK) P68 "Willamette" (Next gen P6: Pentium IV?) "Dixon" (Mendocino, with L2 256KB) "Coppermine" (future high-tech Pentium III 0.18m) "Cascades" (future high-tech Pentium III Xeon) "Foster" (THE LAST IA-32 INTEL CPU) :( "McKinley" (Second Generation Merced) (Cyrix) M5 Cx486S/S2 M6 Cx486D/D2 C6 Cx487D M7 Cx486DX/Cx486DX2 M8 Cx486DX4 M1 Cx6x86 M1SC Cx5x86 M1R Cx6x86L (0.35 mkm, reduced due size) M2 Cx6x86MX MII MIII "Jalapeno" (may be will support 3DNow! :) MediaGX (Integerated PCI and some perepheria) GXm (MMX-version of MediaGX) (AMD) SSA/5 Am5k86 early series (K5 with big due size and with reduced some features, 'cos don't work). K5 Am5k86 K6 (IA MMX support) K6-2 (3DNow!+ some extensions) K6-III "Sharptooth" (K6-2 + L2 cache) K7 (Slot A,512KB..8M L2 at Clk,Clk/2,Clk/3, 500MHz or higher) (IDT) C6 Winchip (MMX) C2 "Winchip 2" (+3DNow! and higher cache) "Winchip 4" (Rise)Top
+---------+ | DR6 | +---------+ [Am386xx/i386xx/i486xx/Am486xx] 3322222222221111 1 1 1 111 1098765432109876 5 4 3 210987654 3 2 1 0 ---------------------------------------- 0000000000000000 B B B 000000000 B B B B T S D 3 2 1 0 ---------------------------------------- [Intel Pentium] 3322222222221111 1 1 1 111 1098765432109876 5 4 3 210987654 3 2 1 0 ---------------------------------------- 1111111111111111 B B B 111111111 B B B B T S D 3 2 1 0 ---------------------------------------- [Cyrix Cx486DX,TI 486SXLC, TI 486SLC/e] 3322222222221111 1 1 1 111 1098765432109876 5 4 3 210987654 3 2 1 0 ---------------------------------------- 1111111111111111 B B 0 011111111 B B B B T S 3 2 1 0 ---------------------------------------- [TI 486SXL/Cx486SLC] 3322222222221111 1 1 1 111 1098765432109876 5 4 3 210987654 3 2 1 0 ---------------------------------------- 1111111111111111 B B 1 011111111 B B B B T S 3 2 1 0 ---------------------------------------- [IBM 486SLC2] 3322222222221111 1 1 1 1 11 1098765432109876 5 4 3 2 10987654 3 2 1 0 ----------------------------------------- 0000000000000000 B B B B 00000000 B B B B T S D K 3 2 1 0 ---------------------------------------- [AMD Am486SXLV/Am386DXLV/Am386SXLV] 3322222222221111 1 1 1 1 11 1098765432109876 5 4 3 2 10987654 3 2 1 0 ----------------------------------------- 0000000000000000 B B B S 00000000 B B B B T S D M 3 2 1 0 M S ---------------------------------------- [Cyrix Cx6x86] [Cx6x86MX] 3322222222221111 1 1 1 1 11 1098765432109876 5 4 3 2 10987654 3 2 1 0 ----------------------------------------- 0000000000000000 B B 0 0 11111111 B B B B T S 3 2 1 0 ---------------------------------------- BT - Debug Trap due to Task Switch BS - Debug Trap due to Single-Step BD - Debug Fault due to attemped registeracess when GD bit set BK - Debug Trap due to ICE This bit set if exception 1 will invoked due to occurence of ICEMD interrupt or ICEBP software breakpoint. SMMS - SMM Status if = 1 SMM is entered B3 - Debug fault/trap due to Breakpoint # 3 B2 - Debug fault/trap due to Breakpoint # 2 B1 - Debug fault/trap due to Breakpoint # 1 B0 - Debug fault/trap due to Breakpoint # 0 +--------+ | DR7 | +--------+ [Am386xx/i386xx/i486xx/Am486xx] [TI486SXL/Cx486SLC] 33 22 22 22 22 22 11 11 11 1 111 10 98 76 54 32 10 98 76 54 3 210 9 8 7 6 5 4 3 2 1 0 ---------------------------------------------------- LL RR LL RR LL RR LL RR 00 G 000 G L G L G L G L G L EE // EE // EE // EE // D E E 3 3 2 2 1 1 0 0 NN WW NN WW NN WW NN WW 33 33 22 22 11 11 00 00 ---------------------------------------------------- [Pentium/Cx486DX/Cx486DX2/Cx486DX4] [TI486SLC/e / TI486SXLC/Cx6x86] [Cx6x86MX] 33 22 22 22 22 22 11 11 11 1 111 10 98 76 54 32 10 98 76 54 3 210 9 8 7 6 5 4 3 2 1 0 ---------------------------------------------------- LL RR LL RR LL RR LL RR 00 G 001 G L G L G L G L G L EE // EE // EE // EE // D E E 3 3 2 2 1 1 0 0 NN WW NN WW NN WW NN WW 33 33 22 22 11 11 00 00 ---------------------------------------------------- [IBM486SLC2] 33 22 22 22 22 22 11 11 1 1 1 1 1 1 10 98 76 54 32 10 98 76 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 ------------------------------------------------------- LL RR LL RR LL RR LL RR T T G T G 0 G L G L G L G L G L EE // EE // EE // EE // T B D P M E E 3 3 2 2 1 1 0 0 NN WW NN WW NN WW NN WW 33 33 22 22 11 11 00 00 ------------------------------------------------------- [Am486SXLV/Am386DXLV/Am386SXLV] 33 22 22 22 22 22 11 11 111 1 11 10 98 76 54 32 10 98 76 543 2 10 9 8 7 6 5 4 3 2 1 0 ----------------------------------------------------- LL RR LL RR LL RR LL RR 000 S 00 G L G L G L G L G L EE // EE // EE // EE // M E E 3 3 2 2 1 1 0 0 NN WW NN WW NN WW NN WW I 33 33 22 22 11 11 00 00 E ---------------------------------------------------- [Am486xx] 33 22 22 22 22 22 11 11 111111 10 98 76 54 32 10 98 76 543210 9 8 7 6 5 4 3 2 1 0 ---------------------------------------------------- LL RR LL RR LL RR LL RR 000000 G L G L G L G L G L EE // EE // EE // EE // E E 3 3 2 2 1 1 0 0 NN WW NN WW NN WW NN WW 33 33 22 22 11 11 00 00 ---------------------------------------------------- LENi - Length of Breakpoint 00 - byte 01 - word 10 - undefined 11 - dword R/Wi - Reaw/Write Instructions Enable 00 - Instruction Execute cause Debug Interrupt 01 - Data Writes only 10 - I/O Reads or Writes 11 - Data Reads or Writes GD - Global Debug Register Access Protect INT 1 will be caused if any instructions will be read/write DRs. This bit cleared when invoking Debug Exception. GE - Global Exact Any data breakpoint traps will be reported exactly after competition of the instruction that caused the operand transfer. LE - Local Exact (Cleared on Task Switches) Note: 486+ always does exact data breakpoint matches, regardless of GE/LE bits. But 386 not. G3 - Global Enable Breakpoint # 3 L3 - Local Enable Breakpoint # 3 (Cleared on Task Switches) G2 - Global Enable Breakpoint # 2 L2 - Local Enable Breakpoint # 2 (Cleared on Task Switches) G1 - Global Enable Breakpoint # 1 L1 - Local Enable Breakpoint # 1 (Cleared on Task Switches) G0 - Global Enable Breakpoint # 0 L0 - Local Enable Breakpoint # 0 (Cleared on Task Switches) TT - Enable Task Trace Messages (to External ICE hardware) TB - Enable Branch Trace Messages (to External ICE hardware) TP - Exception 1 Handler Entry Convention if TP=0 exception 1 will interrupt 1 in user address space if TP=1 exception 1 will enter ICE mode GM - Enable Global Mapping if =1 Enable Mapping user memory addresses into ICE space. (Paging Must be disabled) SMIE - Software SMI Enable if = 1 enable Note: DR7: Undocument features on Intel's CPUs. see IBM 486SLC2. All this bits in DR7 exist on Intel CPUs, but where thay are undocument. (bits 15,14,12).Top
+---------+ +---------+ | DR4 | | DR5 | +---------+ +---------+ DR4 and DR5 physically not exist, but then You accessing it using MOV from/to DR, thay are aliasing to DR6,DR7. +---------+ | DR3 | +---------+ [386+] 3322222222221111111111 10987654321098765432109876543210 -------------------------------- BREAKPOINT_3_LINEAR_ADDRESS -------------------------------- +---------+ | DR2 | +---------+ [386+] 3322222222221111111111 10987654321098765432109876543210 -------------------------------- BREAKPOINT_2_LINEAR_ADDRESS -------------------------------- +---------+ | DR1 | +---------+ [386+] 3322222222221111111111 10987654321098765432109876543210 -------------------------------- BREAKPOINT_1_LINEAR_ADDRESS -------------------------------- +---------+ | DR0 | +---------+ [386+] 3322222222221111111111 10987654321098765432109876543210 -------------------------------- BREAKPOINT_0_LINEAR_ADDRESS --------------------------------Top
+-------+ | TR4 | +-------+ [i486xx/Cx486xx] 332222222222111111111 1 109876543210987654321 0 987 6543 210 ------------------------------------- TTTTTTTTTTTTTTTTTTTTT V LLL VVVV %%% AAAAAAAAAAAAAAAAAAAAA RRR AAAA GGGGGGGGGGGGGGGGGGGGG UUU LLLL IIII DDDD -------------------------------------- [Cx486SXL/e] 3322222222221111111111 10987654321098765432109 8 7 6543 210 ------------------------------------- TTTTTTTTTTTTTTTTTTTTTTT % L VVVV 000 AAAAAAAAAAAAAAAAAAAAAAA R AAAA GGGGGGGGGGGGGGGGGGGGGGG U LLLL IIII DDDD ------------------------------------- [WB-Enhanced IntelDX2 WB-mode] 332222222222111111111 1 109876543210987654321 0 987 65432 1 0 -------------------------------------- TTTTTTTTTTTTTTTTTTTTT % LLL %%%%% V V AAAAAAAAAAAAAAAAAAAAA RRR H L GGGGGGGGGGGGGGGGGGGGG UUU -------------------------------------- [IntelDX4] 33222222222211111111 1 1 10987654321098765432 1 0 987 6543 210 -------------------------------------- TTTTTTTTTTTTTTTTTTTT % V LLL VVVV %%% AAAAAAAAAAAAAAAAAAAA RRR AAAA GGGGGGGGGGGGGGGGGGGG UUU LLLL IIII DDDD -------------------------------------- [WB-Enhanced IntelDX4 WB-mode] 33222222222211111111 11 10987654321098765432 10 987 65432 10 -------------------------------------- TTTTTTTTTTTTTTTTTTTT %% LLL %%%%% V V AAAAAAAAAAAAAAAAAAAA RRR H L GGGGGGGGGGGGGGGGGGGG UUU -------------------------------------- [TI486SXL] 3322222222221111111 111 1098765432109876543 21098 7 6543 2 10 -------------------------------------- TTTTTTTTTTTTTTTTTTT %%%%% L VVVV V 00 AAAAAAAAAAAAAAAAAAA R AAAA A GGGGGGGGGGGGGGGGGGG U LLLL L IIII I DDDD D B -------------------------------------- [AMD Enhanced 486 CPU with EXT=0] 33222222222211111111 1 1 10987654321098765432 1 0 987 6543 210 -------------------------------------- TTTTTTTTTTTTTTTTTTTT 0 V LLL VVVV %%% AAAAAAAAAAAAAAAAAAAA RRR AAAA GGGGGGGGGGGGGGGGGGGG UUU LLLL IIII DDDD -------------------------------------- [AMD Enhanced 486 CPU with EXT=1] 3 32 2 22 22 22 22 111111111 1 1 09 8 76 54 32 10 987654321 0 987 6543 210 -------------------------------------------- % SS % SS SS SS SS %%%%%%%%% V LLL VVVV %%% TT TT TT TT TT RRR AAAA nn 33 22 11 00 UUU LLLL IIII DDDD -------------------------------------------- [Cyrix Cx6x86] 33222222222211111111 11 10987654321098765432 1098 76 54 3210 -------------------------------------- TTTTTTTTTTTTTTTTTTTT %%%% MM MM MMMM AAAAAAAAAAAAAAAAAAAA EE EE RRRR GGGGGGGGGGGGGGGGGGGG SS SS UUUU II II UU LL -------------------------------------- [Cyrix Cx6x86MX] 3322222222221111111111 109876543210987654321098765432 10 --------------------------------- AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD RRRRRRRRRRRRRRRRRRRRRRRRRRRRRR --------------------------------- VALUD - dwords (or other size units) of Cache Line which Valid LRU - LRU V - is cache line entry valid TAG - Tag of cache line VL,VH - Define MESI state of line VH VL State 1 1 M 0 1 E 1 0 S 0 0 I VALIDB - Valid of Cache Line STn - State of Cache Line (MESI) ST3 - State of 3rd dword of cache line (MESI) ST2 - State of 2nd dword of cache line (MESI) ST1 - State of 1st dword of cache line (MESI) ST0 - State of 0 dword of cache line (MESI) 00 - Invalid 01 - Exclusive 10 - Modified 11 - Shared MESIU - Upper Sector of Cache Line MESI state 00 - Modified 01 - Shared 10 - Exclusive 11 - Invalid MESIL - Lower Sector of Cache Line MESI state 00 - Modified 01 - Shared 10 - Exclusive 11 - Invalid MRU - Used for Determinate LRU line ADDR - Physical Address of Cache Line +--------+ | TR5 | +--------+ [i486xx/Am486xx/Cx486xx] 332222222222111111111 1 109876543210987654321 0987654 32 10 ------------------------------------- %%%%%%%%%%%%%%%%%%%%% SSSSSSS EE CC EEEEEEE NN TT TTTTTTT TT LL -------------------------------------- [TI486SXL/e] 33222222222211111111 11 10987654321098765432 10987654 3 2 10 -------------------------------------- %%%%%%%%%%%%%%%%%%%% SSSSSSSS % E CC EEEEEEEE N TT TTTTTTTT T LL -------------------------------------- [WB-Enhanced IndelDX2 WB-mode] 332222222222111111 1 11 1 109876543210987654 3 21 0987654 32 10 --------------------------------------- %%%%%%%%%%%%%%%%%% S %% SSSSSSS EE CC L EEEEEEE NN TT F TTTTTTT TT LL -------------------------------------- [IntelDX4] 33222222222211111111 11 10987654321098765432 10987654 32 10 ------------------------------------- %%%%%%%%%%%%%%%%%%%% SSSSSSSS EE CC EEEEEEEE NN TT TTTTTTTT TT LL -------------------------------------- [WB-Enhanced IntelDX4 WB-mode] 332222222222111111 1 1 11 109876543210987654 3 2 10987654 32 10 ------------------------------------- %%%%%%%%%%%%%%%%%% S % SSSSSSSS EE CC L EEEEEEEE NN TT F TTTTTTTT TT LL ------------------------------------- [TI486SXL] 3322222222221111111 1 11 1098765432109876543 2 10987654 32 10 ------------------------------------- %%%%%%%%%%%%%%%%%%% W SSSSSSSS EE CC A EEEEEEEE NN TT Y TTTTTTTT TT LL ------------------------------------- [AMD Enhanced 486 in WT-mode] 3322222222221111111 1 11 1098765432109876543 2 10987654 32 10 ------------------------------------- %%%%%%%%%%%%%%%%%%% ( SSSSSSSS EE CC S EEEEEEEE NN TT E TTTTTTTT TT LL T ) ------------------------------------- [AMD Enhanced 486 in WB-mode] 332222222222 1 11 1111 1 11 109876543210 9 87 6543 2 10987654 32 10 ------------------------------------- %%%%%%%%%%%% E SS %%%% ( SSSSSSSS EE CC X TT S EEEEEEEE NN TT T E TTTTTTTT TT LL T ) ------------------------------------- [Cx6x86] 332222222222111111 11 11 109876543210987654 32 1098765 432 10 ------------------------------------- %%%%%%%%%%%%%%%%%% WW SSSSSSS EEE CC AA EEEEEEE NNN TT YY TTTTTTT TTT LL ------------------------------------- [Cx6x86MX] 33222222 2 222 1 111 1111 11 10987654 3 210 9 876 5432 1098 76 54 32 10 ------------------------------------------ %%%%%%%% S %%% V MMM %%%% MMMM %% SS %% CC M EEE RRRR EE TT I SSS UUUU TT LL III ------------------------------------------ CTL - Control (Select operation) 00 - Enable (Fill Buffer Write/Read Buffer Read) 01 - Perform Cache Line Write 10 - Perform Cache Line Read 11 - Perform Cache Line Flush ENT - Select Entry for Operation SET - Select Set for Operation SLF - WAY - Select Way for Operation ST - State of set will be writing during write operation 00 - Invalid 01 - Exclusive 10 - Modified 11 - Shared EXT - Extension if EXT=0 bits 31..11 of TR4 contain TAG if EXT=1 bits 31..11 of TR4 contain STi SMI - SMI Address bit. Select separate/cachable SMI code/data space. V,MESI - Select Valid & MESI V MESI Description 1 000 Modified 1 001 Shared 1 010 Exclusive 0 011 Invalid 1 100 Locked Valid 0 111 Locked Invalid else Undefined MRU - Used for determinate LRU. +-------+ | TR3 | +-------+ [any,which support Cache Testing (all 486+)] 3322222222221111111111 10987654321098765432109876543210 -------------------------------- ___________CACHE_DATA___________ -------------------------------- CACHE_DATA - Data which will be reading/writing to/from cache line part.Top
Note: This kind of registers present only on Cx6x86 and may be
on Cx6x86MX.
+-------+
| TR1 |
+-------+
[Cx6x86]
3322222222221111111111
10987654321098765432109876 543 210
----------------------------------
?????????????????????????? III ???
DDD
XXX
----------------------------------
IDX - Index of Register in BTB control space, which may be accessed via TR2.
+-------+
| TR2 |
+-------+
[Cx6x86]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
_____________DATA_______________
--------------------------------
DATA - data which will be reading/writing from/to BTB control space registers.
Note: Refer to Appendix A5 for more details.
Top
Note: Pentium and Higher Intel CPUs not support Test registers (TRs) at all. +-------+ | TR6 | +-------+ [i386xx] [i486xx] [TI486SXL] 33222222222211111111 1 1 10987654321098765432 1 0 9 8 7 6 5 4321 0 ----------------------------------------- LLLLLLLLLLLLLLLLLLLL V D D U U W W %%%% O AAAAAAAAAAAAAAAAAAAA # # # P DDDDDDDDDDDDDDDDDDDD DDDDDDDDDDDDDDDDDDDD RRRRRRRRRRRRRRRRRRRR ----------------------------------------- [Cx6x86] 33222222222211111111 1 1 10987654321098765432 1 0 9 8 7 6 5 4 3 210 ------------------------------------------ LLLLLLLLLLLLLLLLLLLL V D D U U W W A A CCC AAAAAAAAAAAAAAAAAAAA # # # # MMM DDDDDDDDDDDDDDDDDDDD DDD DDDDDDDDDDDDDDDDDDDD RRRRRRRRRRRRRRRRRRRR ------------------------------------------ [Cx6x86MX] 33222222222211111111 1 1 10987654321098765432 1 0 9 8 7 6 5 4 3 210 ------------------------------------------ LLLLLLLLLLLLLLLLLLLL V D P U 0 W 0 A 0 CCC AAAAAAAAAAAAAAAAAAAA G MMM DDDDDDDDDDDDDDDDDDDD DDD DDDDDDDDDDDDDDDDDDDD 222 RRRRRRRRRRRRRRRRRRRR ------------------------------------------ LADDR - Linear Address V - Valid bit for TLB entry D,D# - The Dirty Bit for/from TLB entry (Normal and Reverse) U,U# - The User/Supervisor bit for/from TLB Entry (Normal and Reverse) W,W# - The Read/Write bit for/from TLB entry (Normal and Reverse) OP - Operation 0 - TLB Write 1 - TLB LookUp A,A# - The Accessed Bit (Normal and Reverse) CMD - Array Command Select 000 - Direct Write to main TLB 001 - TLB lookup for an linear address in all arrays 100 - Write to variable page size mask only 110 - Write to variable page size, linear and physical addreses 101 - Read variable page size and linear address. 111 - Read variable page size cache physical and linear address PG - Page Global bit CMD2 - Array Command Select Value Description x00 - Write to L1 TLB x01 - Write to L2 TLB 010 - Read from L1 TLB X-port 011 - Read from L2 TLB X-port 110 - Read from L1 TLB Y-port 111 - Read from L2 TLB Y-port +-------+ | TR7 | +-------+ [i386xx] 33222222222211111111 11 10987654321098765432 1098765 4 32 10 ------------------------------------- PPPPPPPPPPPPPPPPPPPP %%%%%%% H RR %% HHHHHHHHHHHHHHHHHHHH T EE YYYYYYYYYYYYYYYYYYYY PP SSSSSSSSSSSSSSSSSSSS ------------------------------------- [i486xx] [TI486SXL] 33222222222211111111 1 1 10987654321098765432 1 0 987 65 4 32 10 --------------------------------------- PPPPPPPPPPPPPPPPPPPP P P LLL %% R RR %% HHHHHHHHHHHHHHHHHHHH C W RRR P PP YYYYYYYYYYYYYYYYYYYY D T UUU S // SSSSSSSSSSSSSSSSSSSS / HH H LL I --------------------------------------- [Cx6x86] 33222222222211111111 1 1 10987654321098765432 1 0 987 6 5 4 3 210 ---------------------------------------- PPPPPPPPPPPPPPPPPPPP P P BBB % H H H %%% HHHHHHHHHHHHHHHHHHHH C W III V D B YYYYYYYYYYYYYYYYYYYY D T SSSSSSSSSSSSSSSSSSSS ---------------------------------------- [Cx6x86MX] 33222222222211111111 1 1 10987654321098765432 1 0 987 6 5 4 3 210 ---------------------------------------- PPPPPPPPPPPPPPPPPPPP P P SSS % H H % HHH HHHHHHHHHHHHHHHHHHHH C W EEE 1 2 SSS YYYYYYYYYYYYYYYYYYYY D T TTT EEE SSSSSSSSSSSSSSSSSSSS TTT ---------------------------------------- PHYS - Physiacl Address HT - TLB Lookup Hit REP - Replacement Pointer PCD - Page Cache Disable PWT - Page Write Throught LRU - LRU RPS/HI - Replacement Pointer Select (writes)/Hit Indication (LookUp) RP/HL - Replacement Pointer (writes)/Hit Location (LookUp) BI - Cell Index for victim TLB and block cache operation. HV - Victim TLB Hit HD - Main TLB Hit HB - Variable-size Paging Mechanism Hit SET - L2 TLB Set Selection (0..5h) H1 - Hit in L1 TLB H2 - Hit in L2 TLB HSET - L2 set selection when L2 TLB hit occures (0h..5h)Top
+---------+ | EFLAGS | +---------+ [Pentium P5] [Pentium P54C] [IntelDX4] [Am5k86] [Pentium Pro] [Pentium II] [Am6k86] [Pentium w/MMX (P55C)] 3322222222 2 2 1 1 1 1 1 1 11 1 1 1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0 ----------------------------------------------------- I V V A V R N IO O D I T S Z A P C 0000000000 D I I C M F 0 T PL F F F F F F 0 F 0 F 1 F P F ----------------------------------------------------- [i486 SL Enhanced SX,DX,DX2] [IntelSX2] [Cx5x86] [UMC] [Cx6x86] [Cx6x86MX] 3322222222 2 2 1 1 1 1 1 1 11 1 1 1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0 ----------------------------------------------------- I A V R N IO O D I T S Z A P C 0000000000 D 0 0 C M F 0 T PL F F F F F F 0 F 0 F 1 F ----------------------------------------------------- [i486 SX,DX,DX2] [OverDrive] [M5,M6,M7] [AMD Am486DX/DXL/DX2/DXL2 ] etc [IBM BL486DX/DX2] [Cx486SLC/DLC/SLC2/DLC2] [NexGen Nx586] 3322222222 2 2 1 1 1 1 1 1 11 1 1 1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0 ----------------------------------------------------- A V R N IO O D I T S Z A P C 0000000000 0 0 0 C M F 0 T PL F F F F F F 0 F 0 F 1 F ----------------------------------------------------- [i386 SX,DX,CX,EX] [AMD Am386 ] [C&T 38600 ] etc [IBM 486SLC2] 3322222222 2 2 1 1 1 1 1 1 11 1 1 1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0 ----------------------------------------------------- V R N IO O D I T S Z A P C 0000000000 0 0 0 0 M F 0 T PL F F F F F F 0 F 0 F 1 F ----------------------------------------------------- [i376] 3322222222 2 2 1 1 1 1 1 1 11 1 1 1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0 ----------------------------------------------------- R N IO O D I T S Z A P C 0000000000 0 0 0 0 0 F 0 T PL F F F F F F 0 F 0 F 1 F ----------------------------------------------------- [i286 and all clones] 1 1 11 1 1 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0 ------------------------------ N IO O D I T S Z A P C 0 T PL F F F F F F 0 F 0 F 1 F ------------------------------ [NEC/Sony V20/V30] 1 1 1 1 1 1 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 ------------------------------- M O D I T S Z A P C D 1 1 1 F F F F F F 0 F 0 F 1 F ------------------------------- [80x186 ,EA,EB,EC,XL] [8086/88 and all clones] 1 1 1 1 1 1 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 ------------------------------- O D I T S Z A P C 1 1 1 1 F F F F F F 0 F 0 F 1 F ------------------------------- Flags Summary: ID - Identification Flag VIP - Virtual Interrupt Pending VIF - Virtual Interrupt Flag AC - Align Check VM - Virtual 8086 Mode RF - Resume Flag MD - Mode Flag NT - Nested Task flag IOPL - Input/Output Privelege Level OF - Overflow Flag DF - Direction Flag IF - Interrupt Flag TF - Trap Flag SF - Sign Flag ZF - Zero Flag AF - Auxiliary Carry Flag PF - Parity Flag CF - Carry FlagTop
+---------+
| CR0 |
+---------+
[Pentium P5] [Pentium P54C] [Pentium Pro]
[Pentium II] [Pentium w/MMX]
[Cx6x86MX] [Am6k86] [Am5k86]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W N T E M P
G D W 0000000000 M 0 P 0000000000 E 1 S M P E
---------------------------------------------
[IntelDX4] [486DX/DX2, IntelDX4 ]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W T M P
G D W 0000000000 M 0 P 0000000000 * 1 S 1 P E
---------------------------------------------
[Cx486SLC]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C A W T E M P
G D 0 0000000000 M 0 P 0000000000 0 1 S M P E
---------------------------------------------
[Cx486DLC]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W E T E M P
G D W 0000000000 M 0 P 0000000000 0 T S M P E
---------------------------------------------
[Intel i486SX,SX2]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W T E M P
G D W 0000000000 M 0 P 0000000000 * 1 S M P E
---------------------------------------------
[IBM 486SLC2]
3 32222222222111 1 111111
1 09876543210987 6 54321098765 4 3 2 1 0
---------------------------------------------
P W T E M P
G 00000000000000 P 0000000000 1 S M P E
---------------------------------------------
[Intel i386SX]
3 322222222221111111111
1 09876543210987654321098765 4 3 2 1 0
---------------------------------------------
P T E M P
G 0000000000000000000000000 1 S M P E
---------------------------------------------
[Intel i386DX]
3 322222222221111111111
1 09876543210987654321098765 4 3 2 1 0
---------------------------------------------
P E T E M P
G 0000000000000000000000000 T S M P E
---------------------------------------------
[80286]
Note: None CR0, but MSW
111111
543210987654 3 2 1 0
---------------------
T E M P
000000000000 S M P E
---------------------
PE - Protection Enable
MP - Monitor Processor
EM - Emulation
TS - Task Switch
ET - Extention Type
NE - Numeric Exception
WP - Write protect
AM - Align Mode
NW - No Write Throught
CD - Cache Disable
PG - Paging
+--------+
| CR1 |
+--------+
CR1 register not exist on x86 architecture. Usually aliased CR0.
+--------+
| CR2 |
+--------+
[386+]
3 322222222221111111111
1 0987654321098765432109876543210
---------------------------------
LAST_PAGE_FAULT_LINEAR_ADDRESS
---------------------------------
+--------+
| CR3 |
+--------+
[Intel i386xx] [Cyrix Cx486SLC]
33222222222211111111 11
10987654321098765432 109876543210
---------------------------------
PPPPPPPPPPPPPPPPPPPP %%%%%%%%%%%%
DDDDDDDDDDDDDDDDDDDD
BBBBBBBBBBBBBBBBBBBB
RRRRRRRRRRRRRRRRRRRR
---------------------------------
[Intel i486xx] [Cx6x86] [Cx6x86MX]
[Pentium] [Pentium Pro] [Pentium II]
[Pentium w/MMX]
33222222222211111111 11
10987654321098765432 1098765 4 3 210
------------------------------------
PPPPPPPPPPPPPPPPPPPP %%%%%%% P P %%%
DDDDDDDDDDDDDDDDDDDD C W
BBBBBBBBBBBBBBBBBBBB D T
RRRRRRRRRRRRRRRRRRRR
------------------------------------
see APPENDIX
PDBR - Page Directory Base Register
PCD - Page Cache Disable
PWT - Page Write Whrought
Top
+-------+ | CR4 | +-------+ [Katmai] [Deschutes] 3322222222221111111111 1098765432109876543210 9 8 7 6 5 4 3 2 1 0 ------------------------------------------ F P P M P P D T P V 0000000000000000000000 S C G C A S E S V M R E E E E E D I E ------------------------------------------ [Pentium Pro] [Pentium II] 3322222222221111111111 10987654321098765432109 8 7 6 5 4 3 2 1 0 ----------------------------------------- P P M P P D T P V 00000000000000000000000 C G C A S E S V M E E E E E D I E ----------------------------------------- [IDT C6] [IDT WinChip 2] 3322222222221111111111 10987654321098765432109 8 7 6 54 3 2 10 --------------------------------------- P M D T 00000000000000000000000 C 0 C 00 E S 00 E E D --------------------------------------- [Cx6x86MX/MII] 3322222222221111111111 10987654321098765432109 8 7 654 3 2 10 --------------------------------------- P P D T 00000000000000000000000 C G 000 E S 00 E E D --------------------------------------- [Pentium w/MMX] 3322222222221111111111 10987654321098765432109 8 7 6 5 4 3 2 1 0 ----------------------------------------- P M P D T P V 00000000000000000000000 C 0 C 0 S E S V M E E E D I E ----------------------------------------- [AMD Am5k86] [AMD Am6k86] [AMD K6-III] 3322222222221111111111 109876543210987654321098 7 6 5 4 3 2 1 0 ---------------------------------------- P M P D T P V 000000000000000000000000 G C 0 S E S V M E E E D I E ---------------------------------------- [Pentium P5] [Pentium P54C] 3322222222221111111111 1098765432109876543210987 6 5 4 3 2 1 0 --------------------------------------- M P D T P V 0000000000000000000000000 C 0 S E S V M E E D I E ---------------------------------------- [IntelDX4] [486s SL Enhanced] 3322222222221111111111 109876543210987654321098765432 1 0 ---------------------------------- P V 000000000000000000000000000000 V M I E ---------------------------------- FSR - Fast F.P. Context save/restore Enabled PCE - Perfomance Monitoring Counters Enabled PGE - Page Global Extension MCE - Machine Check Enable PAE - Physical Address Extention PSE - Page Size Extention DE - Debbuging Expection TSD - Time Stamp Disable PVI - Protected mode Virtual Interrupt VME - Virtual Mode ExceptionTop
Socket # Pins Vcc CPU OverDrive Bus Clk
----------------------------------------------
1 169 5 i486SX IntelSX2 ODP ..50MHz
i486DX IntelDX2 ODP
----------------------------------------------
2 238 5 i486SX IntelSX2 ODP ..50MHz
i486DX IntelDX2 ODP
i486DX2 IntelDX4 ODP
Pentium ODP (P24T)
----------------------------------------------
3 237 3/5 i486SX IntelSX2 ODP ..50Mhz
i486DX IntelDX2 ODP
i486DX2 IntelDX4 ODP
i486SX2 Pentium ODP (P24T)
IntelDX4
----------------------------------------------
4 273 5 Pentium (P5) Pentium ODP (P5T) ..66MHz
----------------------------------------------
5 320 3.3 Pentium (P54C) Pentium ODP (P54T) ..66Mhz
----------------------------------------------
6 235 3.3 IntelDX4 Pentium ODP (P24T)
----------------------------------------------
7 321 2.9-3.3 Pentium (P54C) Pentium ODP (P54T) ..100MHz
Pentium (P55C)
----------------------------------------------
8 387 2.9-3.3 Pentium Pro(P6) Pentium Pro ODP (P6T) ..66MHz
----------------------------------------------
Socket370 370 2.9? Celeron ...100MHz
----------------------------------------------
Slot # Pins Vcc CPU Overdrive
----------------------------------------------
1 242 2.9-3.3 Pentium II 66MHz
Celeron
Pentium III
----------------------------------------------
2 330 2.0? Pentium II Xeon 100MHz
Pentium III Xeon
-----------------------------------------------
Note: The main Pentium II chip have 528 pins.
Top
See CPUUTIL.ZIP for UFLAGS.COM !!
Hey, Guys! Do You really think about set of 80x86 CPU cores and
"That's mean UNDEFINED FLAGS?".
1) Do You Ask Yourself: "How many 80x86 base cores are?"
Let's discuss about definitions:
What's mean "base core"?
"Base core" mean: same core clock for instructions, same undefined
features e.t.c., and was produced many CPUs this type.
(so, i486DX2 and i486DX have same core),
(but i486DX2 and IntelDX4 have differ (cos MUL time +etc.).
(i486SX integer core is look like i486DX core without NPX and all things
joined with it).
So we have next list of Main Base Cores:
8086/8088 (186s skipped)
286
386 (have some differents on vendors)
Cx486SLC/Cx486DX (and all clones like TI486SXL)
i486
UMC U5S
Cyrix Cx5x86 (M1sc)
Pentium
NexGen Nx5x86
Cyrix Cx6x86 (M1)
AMD Am5k86
Pentium Pro
Of course one Main Base Core have many CPUs which have differents between
self, for example: TI486SXL have Cx486DLC Base Core.
This Base Cores is relative, of course.
(We may discuss Where to push C&T 38600DX etc., but it doesn't matter)
2) How many situation with Undefined Flags exists?
Not too many, as You think:
MUL
DIV
IMUL
IDIV
NEG (ZF)
AND/OR/XOR/etc (AF)
Shift/Rotates (OF)
and some more.
3) What's To Do?
Let's make next experiment:
AH = 0
AH -> FLG
PERFORM TEST SEQUENCE
FLG -> AH
GET RESULT # 1
AH = FF
AH -> FLG
PERFORM TEST SEQUENCE
FLG -> AH
GET RESULT # 2
ANALYSING RESULTS. (WHICH BIT PASSED, WHICH DRIVEN BY INSTRUCTION
Main Test Sequences are:
MUL: mov ax,0000h
mov bx,1234h
mul bx
DIV: mov ax,1234h
mov bl,22h
div bl
IMUL: mov ax,0092h
mov bl,22h
imul bl
IDIV: mov ax,0ffeeh
mov bl,22h
idiv bl
LOG: mov ax,0ff00h
mov bx,0f0fh
and ax,bx
4) Result:
Here placed summary of Undefined flag analysis on CPUs.
------------------------------------------------------------------------
CPU ------------- Sequence -------------
CORE MUL DIV IMUL IDIV LOG Note
------------------------------------------------------------------------
286 ALL ALL ALL ALL ALL as 386,i486
DRIVEN DRIVEN DRIVEN DRIVEN DRIVEN
------------------------------------------------------------------------
386 ALL ALL ALL ALL ALL as 286,i486
DRIVEN DRIVEN DRIVEN DRIVEN DRIVEN
------------------------------------------------------------------------
i486 ALL ALL ALL ALL ALL as 286,386
DRIVEN DRIVEN DRIVEN DRIVEN DRIVEN
------------------------------------------------------------------------
Cx486SLC Z,S,P,A ALL Z,S,P,A ALL AF
PASSED PASSED PASSED PASSSED PASSED
------------------------------------------------------------------------
UMC U5S Z,S,P,A ALL Z,S,P,A ALL ALL
PASSED PASSED PASSED PASSED DRIVEN
------------------------------------------------------------------------
Cx5x86 P,A C,O,P,A P,A C,O,P,A ALL
PASSED PASSED PASSED PASSED DRIVEN
------------------------------------------------------------------------
Pentium Z,S,P,A ALL Z,S,P,A ALL ALL as Pentium Pro
Pentium w/MMX PASSED DRIVEN PASSED DRIVEN DRIVEN
------------------------------------------------------------------------
Nx5x86 ???? ???? ???? ???? ???? Somebody who have
???? ???? ???? ???? ???? NexGen please contact Me.
-------------------------------------------------------------------------
Cx6x86 ALL C,O ALL C,O ALL
DRIVEN PASSED DRIVEN PASSED DRIVEN
------------------------------------------------------------------------
Am5k86 Z,S,P,A C,O Z,S,P,A C,O ALL
K6 PASSED PASSED PASSED PASSED DRIVEN
------------------------------------------------------------------------
Pentium Pro Z,S,P,A ALL Z,S,P,A ALL ALL as Pentium
Pentium II PASSED DRIVEN PASSED DRIVEN DRIVEN
Celeron
------------------------------------------------------------------------
Note: See utilites, included to this OPCODE.LST for getting UNDEFINED FLAGS
on Your processor.
All looks like Intel and AMD frozen theys Undefined Flags conception :)
Top
+-------+ | CW | +-------+ [8087] 1111 1 11 6543 2 10 98 7 6 5 4 3 2 1 0 ---------------------------- %%%% I RR PP I % P U O Z D I C CC CC E M M M M M M M ---------------------------- [80287] 1111 1 11 6543 2 10 98 76 5 4 3 2 1 0 --------------------------- %%%% I RR PP %% P U O Z D I C CC CC M M M M M M --------------------------- [287XL/XLT,387SX/DX and all build-in FPUs] 11111 11 65432 10 98 76 5 4 3 2 1 0 ---------------------------- %%%%% RR PP %% P U O Z D I CC CC M M M M M M ---------------------------- IC - Infinity Control if =0 Infinity is Projective if =1 Infinity is Affine RC - Round Control 00 - Round to nearest or soon 01 - Round down (toward -infinity) 10 - Round up (toward +infinity) 11 - Chop (Truncate toward 0) PC - Precension Control 00 - 24 bit 01 - Reserved 10 - 53 bit 11 - 64 bit IEM - Interrupt Mask Enable 0 - Interrupts Enable 1 - Interrupts Disable PM - Precension mask UM - Underflow mask OM - Overflow Mask ZM - Zero Maks DM - Denormalized operand mask IM - Invalid Operation Mask All other F.P registers: ST(i), TAGS, SW have same format on all FPUs. Present some different in FPU environment, but now is no time for describe it here.Top
In X86 Architecture there are 3 modes of Paging:
Mode A - i386..Pentium Compatible
The selection of paging mode:
CR0.PG CR4.PAE CR4.PSE page_desc.PS Page Size Address Space Paging Mode
0 x x x ----- Paging Disable -----
1 0 0 x 4K 32bit A
1 0 1 0 4K 32bit A
1 0 1 1 4M 32bit A
1 1 x 0 4K 36bit B
1 1 x 1 2M 36bit C
+----------------------------------------------------------------------------+
| ---------------- Paging Mode A ----------- |
+----------------------------------------------------------------------------+
Format of Linear Address:
[32 bit address, 4K pages]
bit description
31..22 index in PDT (Page Directory Table)
21..12 index in PT (Page Table)
11..0 offset within Page
[32 bit address, 4M pages]
bit description
31..22 index in PDT (Page Directory Table)
21..0 offset within Page
Format of CR3 register:
-----------------
bit description
31..12 PDT base address (31..12) (PDBR)
11..5 Reserved
4 PCD
3 PWT
2..0 Reserved (0)
+----------+
| CR3.PDBR |
+----------+
| PDT (Pages
| Directory Table)
\---->+----------------+
| .... |
+----------------+ PT (Pages Table)
| PT desc. |------>+-------------------+
+----------------+ | ...... |
| .... | +-------------------+
+----------------+ | Page desc. | ---> +-----------+
| | +-------------------+ | Page in |
| | | ..... | | memory 4K |
| | +-------------------+ +-----------+
+----------------+
| 4M page desc. |-----> +----------+
+----------------+ | Page in |
| | | memory |
+----------------+ | 4Mb |
+----------+
+------------------------------+
| Format of Pages Descriptors |
+------------------------------+
[Pentium Pro,Pentium II,AMD K5,K6]
(only page directory entrys support 4MB pages)
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA G P D A P P U R P
FFFFFFFFFFFFFFFFFFFF VVV S C W / /
AAAAAAAAAAAAAAAAAAAA LLL D T S W
------------------------------------------
[Pentium,Cyrix Cx6x86MX]
(only page directory entrys support 4MB pages)
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 P D A P P U R P
FFFFFFFFFFFFFFFFFFFF VVV S C W / /
AAAAAAAAAAAAAAAAAAAA LLL D T S W
------------------------------------------
[i486 and clones]
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 0 D A P P U R P
FFFFFFFFFFFFFFFFFFFF VVV C W / /
AAAAAAAAAAAAAAAAAAAA LLL D T S W
------------------------------------------
[Cx486SLC/DLC,TI486SLC/DLC/e,TI486SXL and clones]
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 0 D A P 0 U R P
FFFFFFFFFFFFFFFFFFFF VVV C / /
AAAAAAAAAAAAAAAAAAAA LLL D S W
------------------------------------------
[i386 and all clones]
33222222222211111111 11
10987654321098765432 109 8 7 6 5 43 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 0 D A 00 U R P
FFFFFFFFFFFFFFFFFFFF VVV / /
AAAAAAAAAAAAAAAAAAAA LLL S W
------------------------------------------
PFA - Physical Frame address
AVL - Available for Operating System
G - Global Page (valid if PGE bit in CR4 set
PS - Page Size
=0 Directory entry (if in PDT)
4K page (if in page table)
=1 4M boundary (descriptor must be in PDT only))
D - Dirty (ignored in PDT)
A - Accessed
PCD - Page Cache disable
PWT - Page Write throught
U/S - User/Supervisor
R/W - Read/Write
P - Present
+----------------------------------------------------------------------------+
| ---------------- Paging Modes B & C ----------- |
+----------------------------------------------------------------------------+
Schemes, which used in paging modes B and C support address extension
up to 64bit, but now can be used only 36 bits of it.
Format of Linear Address:
[36 bit address, 4K pages] (mode B)
bit description
31..30 index in PDPT (Page Directory Pointers Table)
29..21 index in PDT (Page Directory Table)
20..12 index in PT (Page Table)
11..0 offset within Page
[36 bit address, 2M pages] (mode C)
bit description
31..30 index in PDPT (Page Directory Pointers Table)
29..21 index in PDT (Page Directory Table)
20..0 offset within Page
Format of CR3 register:
--------------------
bit description
31..5 PDPT base address (38..12) (PDBR)
4 PCD
3 PWT
2..0 Reserved (0)
PDPT (Page Directory
Pointer Table) +----------+
+----------+ <--------------------| CR3.PDBR |
| ... | +----------+
+----------+
| PDT desc |
+----------+
| PDT (Pages
| Directory Table)
\---->+----------------+
| .... |
+----------------+ PT (Pages Table)
| PT desc. |------>+-------------------+
+----------------+ | ...... |
| .... | +-------------------+
+----------------+ | Page desc. | ---> +-----------+
| | +-------------------+ | Page in |
| | | ..... | | memory 4K |
| | +-------------------+ +-----------+
+----------------+
| 2M page desc. |-----> +----------+
+----------------+ | Page in |
| | | memory |
+----------------+ | 2M |
+----------+
Format of Page Directory Pointer Table Entry (4 entry/PDPT):
----------------------------------
6 3 3 1 1
3 ... 6 5 ..... 2 1 ... 9 8..5 4 3 2..0
-------+---------+-------+----+-+-+----
%%%%%%%| PDT Base| | %% |P|P| %%%
%%%%%%%| Address | AVAIL | %% |C|W| %%%
%%%%%%%|(35..12) | | %% |D|T| %%%
-------+---------+-------+----+-+-+----
Format of Page Directory Table Entry (512 entry/PDT)
----------------------------
[4K pages DT]: (Mode B)
6 3 3 1 1
3 ... 6 5 ..... 2 1 ... 9 8..6 5 4 3 2 1 0
-------+---------+-------+----+-+-+-+-+-+-
%%%%%%%| PT Base | | %% | |P|P|U|R|
%%%%%%%| Address | AVAIL | %% |A|C|W|/|/|P
%%%%%%%|(35..12) | | %% | |D|T|S|W|
-------+---------+-------+----+-+-+-+-+-+-
[2M page]: (Mode C)
6 3 3 2 2 1 1
3 ... 6 5 ..... 1 0..2 1 ... 9 8 7 6 5 4 3 2 1 0
-------+---------+----+-------+-+-+-+-+-+-+-+-+-
%%%%%%%|Page Base| %% | | | | | |P|P|U|R|
%%%%%%%| Address | %% | AVAIL |G|1|D|A|C|W|/|/|P
%%%%%%%|(35..21) | %% | | | | | |D|T|S|W|
-------+---------+----+-------+-+-+-+-+-+-+-+-+-
Format of Page Table Entry (512 entry/PT):
-------------------------
[2K page]: (Mode B)
6 3 3 1 1
3 ... 6 5 ..... 2 1 ... 9 8 7 6 5 4 3 2 1 0
-------+---------+-------+-+-+-+-+-+-+-+-+-
%%%%%%%|Page Base| | | | | |P|P|U|R|
%%%%%%%| Address | AVAIL |G|0|D|A|C|W|/|/|P
%%%%%%%|(35..21) | | | | | |D|T|S|W|
-------+---------+-------+-+-+-+-+-+-+-+-+-
The means of bits same as in Paging Mode A.
Top
+-------------------------------+
| Format of Generic Descriptor: |
+-------------------------------+
+00 WORD Segment Limit (Low) (15..0)
+02 WORD Segment Base (Low) (15..0)
+04 BYTE Segment Base (Mid) (23..16)
+05 BYTE Access Rights Byte (AR)
+06 BYTE Segment Limit (High) (19..16)/AR2
+07 BYTE Segment Base (High) (31..24)
This format have data and code segment descriptors.
+----------+
| AR | Access Rights Byte
+----------+
+----+----+----+----+----+----+----+----+
| P | DPL | S | | | | | [General AR]
+----+----+----+----+----+----+----+----+
P - (Present segment)
=0 segment not present
=1 segment present in memory
DPL - (Descriptor Privelege Level)
00 - Highest
11 - Lowest
S - (System)
=0 descriptor is system
=1 descriptor is segment
+----+----+----+----+----+----+----+----+
| P | DPL | 1 | E | | | | [segment AR]
+----+----+----+----+----+----+----+----+
E - (Extended Type of Segment Descriptor)
=0 data segment
=1 code segment
+----+----+----+----+----+----+----+----+
| P | DPL | 1 | 1 | C | R | A | [Code segment AR]
+----+----+----+----+----+----+----+----+
C - (Control Bit)
=0 Working rules of calling segment wia gates, using PL.
=1 Segment may be immediate called using CALL FAR from
same or more privelege segment
R - (Readable segment)
=0 Reading disable (only execution enable)
=1 Enable reading
A - (Accessable)
=0 None accesses into segment was
=1 Some accesses was
+----+----+----+----+----+----+----+----+
| P | DPL | 1 | 0 | ED | W | A | [Data segment AR]
+----+----+----+----+----+----+----+----+
ED - (Expand Down)
=0 Expand Up
=1 Expand down
W - (Writable)
=0 Write disable
=1 Write enable
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | T Y P E | [System descriptor AR]
+----+----+----+----+----+----+----+----+
TYPE - (Type of System descriptor)
0000 - Not Used
0001 - Available TSS (286 style)
0010 - LDT
0011 - Busy TSS (286 style)
0100 - Call Gate (286 style)
0101 - Task Gate (286 style)
0110 - Interrupt Gate (286 style)
0111 - Trap Gate (286 style)
1000 - Not Used
1001 - Available TSS (386 style)
1010 - Reserved
1011 - Busy TSS (386 style)
1100 - Call Gate (386 style)
1101 - Reserved
1110 - Interrupt Gate (386 style)
1111 - Trap Gate (386 style)
+--------+
| AR2 |
+--------+
+----+----+----+----+
| G | D | 0 | X |
+----+----+----+----+
G - (Granularity)
=0 Segment limit calculated in Bytes (up to 2^20 bytes)
=1 Segment limit calculated in Pages of 4K (up to 2^32 bytes)
D - (Dimensions)
=0 16 bit segment
=1 32 bit segment
Note: need for code segments, 'cos opcodes in 16-bit and 32-bit
segments are different.
X - Available for Operating System
+---------------------------------------------------------------------------+
| ------------------------ System Descriptors -----------------------------|
+---------------------------------------------------------------------------+
+-----+
| LDT |
+-----+
+00 WORD LDT Limit (Low) 15..0
+02 WORD LDT Base (15..0) (Low)
+04 BYTE LDT Base (23..16) (Mid)
+05 BYTE AR
+06 BYTE AR2
+07 BYTE LDT Base (31..24) (High)
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 0 | 1 | 0 | [AR]
+----+----+----+----+----+----+----+----+
+---------------+
| 286 Call Gate |
+---------------+
+00 WORD Offset 15..0
+02 WORD Selector
+04 BYTE Word Count (5 bit)
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 1 | 0 | 0 | [AR]
+----+----+----+----+----+----+----+----+
+---------------+
| 386 Call Gate |
+---------------+
+00 WORD Offset 15..0 (Low)
+02 WORD Selector
+04 BYTE Dword Count (5 bit)
+05 BYTE AR
+06 WORD Offset 31..16
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 1 | 1 | 0 | 0 | [AR]
+----+----+----+----+----+----+----+----+
+---------+
| 286 TSS |
+---------+
+00 WORD TSS Limit (15..0)
+02 WORD TSS Base (15..0) (Low)
+04 BYTE TSS Base (23..16) (Mid)
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 0 | B | 1 | [AR]
+----+----+----+----+----+----+----+----+
B - (Busy)
=0 TSS is available
=1 TSS is busy (active,current)
+---------+
| 386 TSS |
+---------+
+00 WORD TSS Limit (15..0) (Low)
+02 WORD TSS Base (15..0) (Low)
+04 BYTE TSS Base (23..16)(Mid)
+05 BYTE AR
+06 BYTE AR2/TSS Limit High (19..16)
+07 BYTE TSS Base (31..24) (High)
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 1 | 0 | B | 1 | [AR]
+----+----+----+----+----+----+----+----+
+-------------------------+
| Interrupt/Trap Gate 286 |
+-------------------------+
+00 WORD Offset 15..0
+02 WORD Selector
+04 BYTE 0
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 1 | 1 | T | [AR]
+----+----+----+----+----+----+----+----+
T - (Trap Flag)
=0 Interrupt Gate
=1 Trap Gate
+-------------------------+
| Interrupt/Trap Gate 386 |
+-------------------------+
+00 WORD Offset 15..0 (Low)
+02 WORD Selector
+04 BYTE 0
+05 BYTE AR
+06 WORD Offset 31..16 (High)
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 1 | 1 | 1 | T | [AR]
+----+----+----+----+----+----+----+----+
+-----------+
| Task Gate |
+-----------+
+00 WORD 0
+02 WORD TSS Selector
+04 BYTE 0
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 1 | 0 | 1 | [AR]
+----+----+----+----+----+----+----+----+
+----------------------------------+
| Possible Tables for Descriptors |
+----------------------------------+
---------------+-----------------------+---------------------------
Lowest 5 bits | | Valid in
of AR | Type | GDT LDT IDT
---------------+-----------------------+---------------------------
00010 LDT + - -
0*0*1 286 TSS + - -
0*100 Call Gate + + -
0*101 Task Gate + + +
0*110 Interrupt Gate - - +
0*111 Trap Gate - - +
10*** Data segment + + -
11*** Code segment + + -
Top
+--------------------+ | Format of 286 TSS | +--------------------+ +00 WORD Previous TSS Selector (Back Link) +02 WORD Offset of stack ring 0 +04 WORD Selector of stack ring 0 +06 WORD Offset of stack ring 1 +08 WORD Selector of stack ring 1 +0A WORD Offset of stack ring 2 +0C WORD Selector of stack ring 2 +0E WORD IP +10 WORD FLG +12 WORD AX +14 WORD CX +16 WORD DX +18 WORD BX +1A WORD SP +1C WORD BP +1E WORD SI +20 WORD DI +22 WORD ES +24 WORD CS +26 WORD SS +28 WORD DS +2A WORD LDT Note: Len of 286 TSS is 2Ch bytes (44d) +--------------------+ | Format of 386 TSS | +--------------------+ High word/Low word +00 DWORD 0/Previous TSS selector (Back Link) +04 DWORD Stack pointer for ring 0 +08 DWORD 0/Stack Selector for ring 0 +0C DWORD Stack pointer for ring 1 +10 DWORD 0/Stack Selector for ring 1 +14 DWORD Stack pointer for ring 2 +18 DWORD 0/Stack Selector for ring 2 +1C DWORD CR3 +20 DWORD EIP +24 DWORD EFLAGS +28 DWORD EAX +2C DWORD ECX +30 DWORD EDX +34 DWORD EBX +38 DWORD ESP +3C DWORD EBP +40 DWORD ESI +44 DWORD EDI +48 DWORD 0/ES +4C DWORD 0/CS +50 DWORD 0/SS +54 DWORD 0/DS +58 DWORD 0/FS +5C DWORD 0/GS +60 DWORD 0/LDT +64 WORD Trap Bits +66 WORD Offset within TSS to I/O Permission Map Minimal Length of TSS is 68 bytes. IPM is IO Permition Map Base address TSS_LAST is last byte of TSS. +IPM-20h 20h BYTEs Software Interrupt Redirection Bitmap (VME) 1 bit/int +IPM xxh BYTEs I/O Permition Bitmap 1 bit/port +TSS_LAST BYTE I/O PAD Byte PAD byte show which bits in last byte of I/O permission bitmap valid. (recommended to set up this byte to FF) TSS +----------------+ | | | ..... | | | +----------------+ | offset to IPM |----------------+ +----------------+ | | .... | | | .... | | +----------------+ | |Int Redir Bitmap| | +----------------+ <--------------+ | IPM | +----------------+ | PAD BYTE | +----------------+ <------ TSS LimitTop
[See MSR.LST]Top
+----------------+ | Base SM Modes: | +----------------+ There are 4 base types of SMM in x86 CPUs (unfortunetly, I don't knew SMM in NexGen): Activation Bytes Hidden RAM Hidden RAM SMM Vendor Hard Soft Saved Save Area SMM code start Type AMD 386SXLV + SMI 228 6000:0000 FFFFFFF0 \ AMD 386DXLV + SMI 228 6000:0000 FFFFFFF0 | old AMD AMD 486DXLV + SMI 364 6000:0000 FFFFFFF0 / ----------------------------------------------------------- Cx486SLC/DLC + HLT - - - \ Cx486SLC/e + - 35 User Definded User Defined | Cyrix Cx486S..Cx486MX + (SMINT) 48 User Defined User Defined / ----------------------------------------------------------- IBM 386/486SLC + ICEBP 284 6000:0000 FFFFFFF0 ] IBM ----------------------------------------------------------- i386SL/i486SL + Timer 512 3000:FE00 3000:8000 \ i486SL-Enhanced + - 512 3000:FE00 3000:8000 | Intel Pentium + (APIC) 512 3000:FE00 3000:8000 | Pentium Pro/II + (APIC) 512 3000:FE00 3000:8000 / Intel Type SMM support all Intel CPUs (starting i386SL or i486 SL-Enhanced), and AMD K5, K6 and later, IDT C6. +---------------+ | Intel SMM | +---------------+ Format of SMRAM Ofset from Actual SMBASE Description Size Writeable FFFC 4 CR0 32 - FFF8 4 CR3 32 - FFF4 4 EFLAGS 32 + FFF0 4 EIP 32 + FFEC 4 EDI 32 + FFE8 4 ESI 32 + FFE4 4 EBP 32 + FFE0 4 ESP 32 + FFDC 4 EBX 32 + FFD8 4 EDX 32 + FFD4 4 ECX 32 + FFD0 4 EAX 32 + FFCC 4 DR6 32 - FFC8 4 DR7 32 - FFC4 4 TR 16 - FFC0 4 LDTR 16 - FFBC 4 GS 16 - FFB8 4 FS 16 - FFB4 4 DS 16 - FFB0 4 SS 16 - FFAC 4 CS 16 - FFA8 4 ES 16 - FFA4 4 I/O trap Dword 32 - FFA0 8 reserved - FF9C 4 I/O trap EIP 32 - FF94 8 reserved - FF90 4 IDT Base 32 - FF8C 4 IDT Limit 20 - FF88 4 GDT Base 32 - FF84 4 GDT Limit 20 - FF80 4 TSS Attribute 12 - FF7C 4 TSS Base 32 - FF78 4 TSS Limit 20 - FF74 4 LDT Attribute 12 - FF70 4 LDT Base 32 - FF6C 4 LDT Limit 20 - FF68 4 GS Attribute 12 - FF64 4 GS Base 32 - FF60 4 GS Limit 20 - FF5C 4 FS Attribute 12 - FF58 4 FS Base 32 - FF54 4 FS Limit 20 - FF50 4 DS Attribute 12 - FF4C 4 DS Base 32 - FF48 4 DS Limit 20 - FF44 4 SS Attribute 12 - FF40 4 SS Base 32 - FF3C 4 SS Limit 20 - FF38 4 CS Attribute 12 - FF34 4 CS Base 32 - FF30 4 CS Limit 20 - FF2C 4 ES Attribute 12 - FF28 4 ES Base 32 - FF24 4 ES Limit 20 - FF18 12 reserved - FF14 4 CR2 32 - FF10 4 CR4 32 - FF0C 4 I/O Restart ESI 32 - FF08 4 I/O Restart ECX 32 - FF04 4 I/O Restart EDI 32 - FF02 2 Auto HALT Restart Slot 16* + FF00 2 I/O Trap Restart Slot 16* + FEFC 4 SMM Revision ID 32 - FEF8 4 SMBASE Slot 32 + 7E00 248 reserved - Note: if Actual size < fiels size, then all upper that actual size bits are reserved. +---------------+ | Cyrix SMM | +---------------+ Full description of Cyrix SMM will be placed in future OPCODE.LST. Now see SMINT and some other Cyrix SMM commands for more details. See APPENDIX A1-A6 for more details. Format of SMRAM: +00 <-------- Here pointed SMHR register (M2) -04 4 DR7 -08 4 EFLAGS -0C 4 CR0 -10 4 Current EIP -14 4 Next EIP -18 4 CS selector -20 8 CS descriptor -24 4 Bitfields Bit Description 22..21 CPL 15 N (Nested SMI Indicator) 13 IS (Internal SMI Indicator) 4 H (SMI on HLT instruction) 3 S (Software SMI entrance) 2 P (REP INSx/OUTSx indicator) 1 I (IN/INSx/OUT/OUTSx indicator) 0 C (Code segment writable flag) -26 2 I/O Write Data Size -28 2 I/O Write Address -2C 4 I/O Write Data -30 4 ESI or EDI +-------------------+ | Old-style AMD SMM | +-------------------+ Format of SMRAM: Offset Bytes Description 60000 4 CR0 60004 4 EFLAGS 60008 4 EIP 6000C 4 EDI 60010 4 ESI 60014 4 EBP 60018 4 ESP 6001C 4 EBX 60020 4 EDX 60024 4 ECX 60028 4 EAX 6002C 4 DR6 60030 4 DR7 60034 4 TR selector 60038 4 LDT selector 6003C 4 GS selector 60040 4 FS selector 60044 4 DS selector 60048 4 SS selector 6004C 4 CS selector 60050 4 ES selector 60054 4 TSS descriptor (ATTR) 60058 4 TSS descriptor (BASE) 6005C 4 TSS descriptor (LIMIT) 60060 4 reserved 60064 4 IDTR (BASE) 60068 4 IDTR (LIMIT) 6006C 4 REP OUTS Overrun Flag 60070 4 GDTR (BASE) 60074 4 GDTR (LIMIT) 60078 4 LDT (ATTR) 6007C 4 LDT (BASE) 60080 4 LDT (LIMIT) 60084 4 GS (ATTR) 60088 4 GS (BASE) 6008C 4 GS (LIMIT) 60090 4 FS (ATTR) 60094 4 FS (BASE) 60098 4 FS (LIMIT) 6009C 4 DS (ATTR) 600A0 4 DS (BASE) 600A4 4 DS (LIMIT) 600A8 4 SS (ATTR) 600AC 4 SS (BASE) 600B0 4 SS (LIMIT) 600B4 4 CS (ATTR) 600B8 4 CS (BASE) 600BC 4 CS (LIMIT) 600C0 4 ES (ATTR) 600C4 4 ES (BASE) 600C8 4 ES (LIMIT) .... 60100 4 Temporary Register TST 60104 4 Temporary Register IDX 60108 4 Temporary Register TMPH 6010C 4 Temporary Register TMPG 60110 4 Temporary Register TMPF 60114 4 Temporary Register TMPE 60118 4 Temporary Register TMPD 6011C 4 Temporary Register TMPC 60120 4 Temporary Register TMPB 60124 4 LEIP (Last EIP) ------------- AMD Am486DXLV additional fields 60128 4 PEIP 6012C 36 Unused 60150 88 F.P. Internal Registers Note: See LOADALL for More Information +-------------------+ | IBM SMM | +-------------------+ Format of SMRAM: Offset Bytes Description 60000 4 CR0 60004 4 EFLAGS 60008 4 EIP 6000C 4 EDI 60010 4 ESI 60014 4 EBP 60018 4 ESP 6001C 4 EBX 60020 4 EDX 60024 4 ECX 60028 4 EAX 6002C 4 DR6 60030 4 DR7 60034 4 TR selector 60038 4 LDT selector 6003C 4 GS selector 60040 4 FS selector 60044 4 DS selector 60048 4 SS selector 6004C 4 CS selector 60050 4 ES selector 60054 4 TSS descriptor (ATTR) 60058 4 TSS descriptor (BASE) 6005C 4 TSS descriptor (LIMIT) 60060 4 reserved 60064 4 IDTR (BASE) 60068 4 IDTR (LIMIT) 6006C 4 REP OUTS Overrun Flag 60070 4 GDTR (BASE) 60074 4 GDTR (LIMIT) 60078 4 LDT (ATTR) 6007C 4 LDT (BASE) 60080 4 LDT (LIMIT) 60084 4 GS (ATTR) 60088 4 GS (BASE) 6008C 4 GS (LIMIT) 60090 4 FS (ATTR) 60094 4 FS (BASE) 60098 4 FS (LIMIT) 6009C 4 DS (ATTR) 600A0 4 DS (BASE) 600A4 4 DS (LIMIT) 600A8 4 SS (ATTR) 600AC 4 SS (BASE) 600B0 4 SS (LIMIT) 600B4 4 CS (ATTR) 600B8 4 CS (BASE) 600BC 4 CS (LIMIT) 600C0 4 ES (ATTR) 600C4 4 ES (BASE) 600C8 4 ES (LIMIT) ... 60100 4 Temporary Register TST 60104 4 Temporary Register IDX 60108 4 Temporary Register TMPH 6010C 4 Temporary Register TMPG 60110 4 Temporary Register TMPF 60114 4 Temporary Register TMPE 60118 4 Temporary Register TMPD 6011C 4 Temporary Register TMPC 60120 4 Temporary Register TMPB 60124 4 Temporary Register TMPA 60128 4 CR2 6012C 4 CR3 60130 4 MSR 1001h (0..31) 60134 4 MSR 1001h (63..32) 60138 4 MSR 1000h (0..31) 6013C 4 DR0 60140 4 DR1 60144 4 DR2 60148 4 DR3 6014C 4 PEIP (Previous Hidden Memory Space Instruction Pointer) Note: See ICEBP/ICERET for More InformationTop
AAA 4 AAD 60 AAM 83 AAS 4 ADC AL,imm8 4 ADC AX,imm16 4 ADC r/m8,imm8 4/17+EA ADC r/m16,imm8 4/25+EA ADC r/m16,imm16 4/25+EA ADC r/m8,r8 3/16+EA ADC r/m16,r16 3/24+EA ADC r8,r/m8 3/9+EA ADC r16,r/m16 3/13+EA ADD AL,imm8 4 ADD AX,imm16 4 ADD r/m8,imm8 4/17+EA ADD r/m16,imm8 4/25+EA ADD r/m16,imm16 4/25+EA ADD r/m8,r8 3/16+EA ADD r/m16,r16 3/24+EA ADD r8,r/m8 3/9+EA ADD r16,r/m16 3/13+EA AND AL,imm8 4 AND AX,imm16 4 AND r/m8,imm8 4/16+EA AND r/m16,imm16 4/25+EA AND r/m8,r8 3/16+EA AND r/m16,r16 3/24+EA AND r8,r/m8 3/9+EA AND r16,r/m16 3/13+EA CALL rel16 19(23) CALL r/m16 16(24)/21(29)+EA CALL ptr16:16 28(36) CALL m16:16 37(57)+EA CBW 2 CLC 2 CLD 2 CLI 2 CMC 2 CMP AL,imm8 4 CMP AX,imm16 4 CMP r/m8,imm8 4/10+EA CMP r/m16,imm8 4/- CMP r/m16,imm16 4/14+EA CMP r/m8,r8 3/9+EA CMP r/m16,r16 3/13+EA CMP r8,r/m8 3/9+EA CMP r16,r/m16 3/13+EA CMPSB 22 CMPSW 30 CWD 5 DAA 4 DAS 4 DEC r/m8 3/15+EA DEC r/m16 2/23+EA DEC r16 2 DIV r/m8 80-90/(86-96)+EA DIV r/m16 144-162/(154-172)+EA HLT 2 IDIV r/m8 101-112/(107-118)+EA IDIV r/m16 165-184/(175-194)+EA IMUL r/m8 80-98/(86-104)+EA IMUL r/m16 128-154/(138-164)+EA IN AL,imm8 10 IN AX,imm8 14 IN AL,DX 8 IN AX,DX 12 INC r/m8 3/15+EA INC r/m16 2/23+EA INC r16 2 INT 3 53(72) INT imm8 51(71) INTO 53(73) or 4 IRET 32(44) Jcc rel8 4 or 16 JCXZ rel8 6 or 18 JMP rel8 15 JMP rel16 15 JMP r/m16 11/18+EA JMP ptr16:16 15 JMP m16:16 24+EA LAHF 4 LDS r16,m16:16 24+EA LES r16,m16:16 24+EA LEA r16,m 2+EA LODSB 12 LODSW 16 LOOP rel8 5 or 17 LOOPE rel8 6 or 18 LOOPNE rel8 5 or 19 MOV r/m8,r8 2/9+EA MOV r/m16,r16 2/13+EA MOV r8,r/m8 2/8+EA MOV r16,r/m16 2/12+EA MOV r/m16,sreg 2/9(13)+EA MOV sreg,r/m16 2/8(12)+EA MOV AL,moffs8 10 MOV AX,moffs16 14 MOV moffs8,AL 10 MOV moffs16,AX 14 MOV r8,imm8 4 MOV r16,imm16 4 MOV r/m8,imm8 4/10+EA MOV r/m16,imm16 4/14+EA MOVSB 18 MOVSW 26 MUL r/m8 70-77/(76-83)+EA MUL r/m16 118-133/(128-143)+EA NEG r/m8 3/16+EA NEG r/m16 3/24+EA NOP 3 NOT r/m8 3/16+EA NOT r/m16 3/24+EA OR AL,imm8 4 OR AX,imm16 4 OR r/m8,imm8 4/17+EA OR r/m16,imm16 4/25+EA OR r/m8,r8 3/16+EA OR r/m16,r16 3/24+EA OR r8,r/m8 3/9+EA OR r16,r/m16 3/13+EA OUT imm8,AL 10 OUT imm8,AX 14 OUT DX,AL 8 OUT DX,AX 12 POP m16 25+EA POP r16 12 POP sreg 12 POPF 12 PUSH r/m16 15/24+EA PUSH r16 15 PUSH sreg 14 PUSHF 14 RCL r/m8,1 2/15+EA RCL r/m16,1 2/23+EA RCL r/m8,CL 8+4*bit/20+EA+4*bit RCL r/m16,CL 8+4*bit/28+EA+4*bit RCR r/m8,1 2/15+EA RCR r/m16,1 2/23+EA RCR r/m8,CL 8+4*bit/20+EA+4*bit RCR r/m16,CL 8+4*bit/28+EA+4*bit ROL r/m8,1 2/15+EA ROL r/m16,1 2/23+EA ROL r/m8,CL 8+4*bit/20+EA+4*bit ROL r/m16,CL 8+4*bit/28+EA+4*bit ROR r/m8,1 2/15+EA ROR r/m16,1 2/23+EA ROR r/m8,CL 8+4*bit/20+EA+4*bit ROR r/m16,CL 8+4*bit/28+EA+4*bit REP MOVSB 9+17*reps REP MOVSW 9+25*reps REP LODSB n/a REP LODSW n/a REP STOSB 9+10*reps REP STOSW 9+14*reps REPE CMPSB 9+17*reps REPE CMPSW 9+25*reps REPE SCASB 9+15*reps REPE SCASW 9+19*reps REPNE CMPSB 9+17*reps REPNE CMPSW 9+25*reps REPNE SCASB 9+15*reps REPNE SCASW 9+19*reps RET (near) 20 RET imm16 (near) 24 RET (far) 32 RET imm16 (far) 31 SAHF 4 SAL r/m8,1 2/15+EA SAL r/m16,1 2/23+EA SAL r/m8,CL 8+4*bit/20+EA+4*bit SAL r/m16,CL 8+4*bit/28+EA+4*bit SAR r/m8,1 2/15+EA SAR r/m16,1 2/23+EA SAR r/m8,CL 8+4*bit/20+EA+4*bit SAR r/m16,CL 8+4*bit/28+EA+4*bit SHL r/m8,1 2/15+EA SHL r/m16,1 2/23+EA SHL r/m8,CL 8+4*bit/20+EA+4*bit SHL r/m16,CL 8+4*bit/28+EA+4*bit SHR r/m8,1 2/15+EA SHR r/m16,1 2/23+EA SHR r/m8,CL 8+4*bit/20+EA+4*bit SHR r/m16,CL 8+4*bit/28+EA+4*bit SBB AL,imm8 4 SBB AX,imm16 4 SBB r/m8,imm8 4/17+EA SBB r/m16,imm8 4/25+EA SBB r/m16,imm16 4/25+EA SBB r/m8,r8 3/16+EA SBB r/m16,r16 3/24+EA SBB r8,r/m8 3/9+EA SBB r16,r/m16 3/16+EA SCASB 15 SCASW 19 SETALC n/a STC 2 STD 2 STI 2 STOSB 11 STOSW 15 SUB AL,imm8 4 SUB AX,imm16 4 SUB r/m8,imm8 4/17+EA SUB r/m16,imm8 4/25+EA SUB r/m16,imm16 4/25+EA SUB r/m8,r8 3/16+EA SUB r/m16,r16 3/24+EA SUB r8,r/m8 3/9+EA SUB r16,r/m16 3/13+EA TEST AL,imm8 4 TEST AX,imm16 4 TEST r/m8,imm8 5/11+EA TEST r/m16,imm16 5/11+EA TEST r/m8,r8 3/9+EA TEST r/m16,r16 3/13+EA WAIT 3+5*number_of_wait_cycles XCHG AX,r16 3 XCHG r/m8,r8 4/17+EA XCHG r/m16,r16 4/25+EA XLAT 11 XOR AL,imm8 4 XOR AX,imm16 4 XOR r/m8,imm8 4/17+EA XOR r/m16,imm16 4/25+EA XOR r/m8,r8 3/16+EA XOR r/m16,r16 3/24+EA XOR r8,r/m8 3/9+EA XOR r16,r/m16 3/13+EA (END)Top
AAA 8 AAD 15 AAD imm8 15 ?? (n/a) AAM 19 AAM imm8 19 ?? (n/a) AAS 7 ADC AL,imm8 3 ADC AX,imm16 4 ADC r/m8,imm8 4/16 ADC r/m16,imm16 4/16 ADC r/m8,r8 3/15 ADC r/m16,r16 3/15 ADC r8,r/m8 3/10 ADC r16,r/m16 3/10 ADD AL,imm8 3 ADD AX,imm16 4 ADD r/m8,imm8 4/16 ADD r/m32,imm8 4/16 ADD r/m8,r8 3/15 ADD r/m16,r16 3/15 ADD r8,r/m8 3/10 ADD r16,r/m16 3/10 AND AL,imm8 3 AND AX,imm16 4 AND r/m8,imm8 4/16 AND r/m16,imm16 4/16 AND r/m8,r8 3/15 AND r/m16,r16 3/15 AND r8,r/m8 3/10 AND r16,r/m16 3/10 BOUND r16,m16&16 33-35 CALL rel16 15 CALL r/m16 13/19 CALL ptr16:16 23 CALL m16:16 38 CBW 2 CLC 2 CLD 2 CLI 2 CMC 2 CMP AL,imm8 3 CMP AX,imm16 4 CMP r/m8,imm8 3/10 CMP r/m16,imm16 3/10 CMP r/m8,r8 3/10 CMP r/m16,r16 3/10 CMP r8,r/m8 3/10 CMP r16,r/m16 3/10 CMPSB 22 CMPSW 22 CWD 4 DAA 4 DAS 4 DEC r/m8 3/15 DEC r/m16 3/15 DEC r16 3 DIV r/m8 29/35 DIV r/m16 38/44 ESC imm4,r/m n/a ENTER imm16,0 15 ENTER imm16,1 25 ENTER imm16,imm8 22+16*(level-1) HLT 2 IDIV r/m8 44-52/50-58 IDIV r/m16 53-61/59-67 IMUL r/m8 25-28/31-34 IMUL r/m16 34-47/40-43 IMUL r16,imm8 22-25/29-32 (~) IMUL r16,imm16 22-25/29-32 (~) IMUL r16,r/m16,imm8 22-25/29-32 (~) IMUL r16,r/m16,imm16 22-25/29-32 (~) IN AL,imm8 10 IN AX,imm8 10 IN AL,DX 8 IN AX,DX 8 INC r/m8 3/15 INC r/m16 3/15 INC r16 3 INSB 14 INSW 14 INT 3 45 INT imm8 47 INTO 4 or 48 IRET 28 Jcc rel8 4 or 13 JCXZ rel8 5 or 15 JMP rel8 14 JMP rel16 14 JMP r/m16 11/17 JMP ptr16:16 14 JMP m16:16 26 LAHF 2 LDS r16,m16:16 18 LES r16,m16:16 18 LEA r16,m 6 LEAVE 8 LODSB 12 LODSW 12 LOOP rel8 6 or 16 LOOPE rel8 6 or 16 LOOPNE rel8 6 or 16 MOV r/m8,r8 2/12 MOV r/m16,r16 2/12 MOV r8,r/m8 2/9 MOV r16,r/m16 2/9 MOV r/m16,sreg 2/11 MOV sreg,r/m16 2/9 MOV AL,moffs8 8 MOV AX,moffs16 8 MOV moffs8,AL 9 MOV moffs16,AX 9 MOV r8,imm8 3 MOV r16,imm16 4 MOV r/m8,imm8 3/12 MOV r/m16,imm16 4/13 MOVSB 14 MOVSW 14 MUL r/m8 26-28/32-34 MUL r/m16 35-37/41-43 NEG r/m8 3/10 NEG r/m16 3/10 NOP 3 NOT r/m8 3/10 NOT r/m16 3/10 OR AL,imm8 3 OR AX,imm16 4 OR r/m8,imm8 4/16 OR r/m16,imm16 4/16 OR r/m8,r8 3/15 OR r/m16,r16 3/15 OR r8,r/m8 3/10 OR r16,r/m16 3/10 OUT imm8,AL 9 OUT imm8,AX 9 OUT DX,AL 7 OUT DX,AX 7 OUTSB 14 OUTSW 14 POP m16 20 POP r16 10 POP sreg 8 POPA 51 POPF 8 PUSH r/m16 10/16 PUSH r16 10 PUSH imm8 10 PUSH imm16 10 PUSH sreg 9 PUSHA 36 PUSHF 9 RCL r/m8,1 2/15 RCL r/m16,1 2/15 RCL r/m8,CL 5+n/17+n RCL r/m16,CL 5+n/17+n RCL r/m8,imm8 5+n/17+n RCL r/m16,imm8 5+n/17+n RCR r/m8,1 2/15 RCR r/m16,1 2/15 RCR r/m8,CL 5+n/17+n RCR r/m16,CL 5+n/17+n RCR r/m8,imm8 5+n/17+n RCR r/m16,imm8 5+n/17+n ROL r/m8,1 2/15 ROL r/m16,1 2/15 ROL r/m8,CL 5+n/17+n ROL r/m16,CL 5+n/17+n ROL r/m8,imm8 5+n/17+n ROL r/m16,imm8 5+n/17+n ROR r/m8,1 2/15 ROR r/m16,1 2/15 ROR r/m8,CL 5+n/17+n ROR r/m16,CL 5+n/17+n ROR r/m8,imm8 5+n/17+n ROR r/m16,imm8 5+n/17+n RET (near) 16 RET (far) 22 RET imm16 (near) 18 RET imm16 (far) 25 SAHF 3 SAL r/m8,1 2/15 SAL r/m16,1 2/15 SAL r/m8,CL 5+n/17+n SAL r/m16,CL 5+n/17+n SAL r/m8,imm8 5+n/17+n SAL r/m16,imm8 5+n/17+n SAR r/m8,1 2/15 SAR r/m16,1 2/15 SAR r/m8,CL 5+n/17+n SAR r/m16,CL 5+n/17+n SAR r/m8,imm8 5+n/17+n SAR r/m16,imm8 5+n/17+n SHL r/m8,1 2/15 SHL r/m16,1 2/15 SHL r/m8,CL 5+n/17+n SHL r/m16,CL 5+n/17+n SHL r/m8,imm8 5+n/17+n SHL r/m16,imm8 5+n/17+n SHR r/m8,1 2/15 SHR r/m16,1 2/15 SHR r/m8,CL 5+n/17+n SHR r/m16,CL 5+n/17+n SHR r/m8,imm8 5+n/17+n SHR r/m16,imm8 5+n/17+n SBB AL,imm8 3 SBB AX,imm16 4 SBB r/m8,imm8 4/16 SBB r/m16,imm16 4/16 SBB r/m8,r8 3/15 SBB r/m16,r16 3/15 SBB r8,r/m8 3/10 SBB r16,r/m16 3/10 SCASB 15 SCASW 15 SETALC n/a STC 2 STD 2 STI 2 STOSB 10 STOSW 10 SUB AL,imm8 3 SUB AX,imm16 4 SUB r/m8,imm8 4/16 SUB r/m16,imm16 4/16 SUB r/m8,r8 3/15 SUB r/m16,r16 3/15 SUB r8,r/m8 3/10 SUB r16,r/m16 3/10 TEST AL,imm8 3 TEST AX,imm16 4 TEST r/m8,imm8 4/10 TEST r/m16,imm16 4/10 TEST r/m8,r8 3/10 TEST r/m16,r16 3/10 WAIT 6 (min) XCHG AX,r16 3 XCHG r/m8,r8 4/17 XCHG r/m16,r16 4/17 XLAT 11 XOR AL,imm8 3 XOR AX,imm16 4 XOR r/m8,imm8 4/16 XOR r/m16,imm16 4/16 XOR r/m8,r8 3/15 XOR r/m16,r16 3/15 XOR r8,r/m8 3/10 XOR r16,r/m16 3/10 (END)Top
AAA 3 AAD 7 AAD imm8 7 AAM 15 AAM imm8 15 AAS 3 ADC AL,imm8 4 ADC AX,imm16 4 ADC r/m8,imm8 4/18 ADC r/m16,imm16 4/26 ADC r/m8,r8 2/15 ADC r/m16,r16 2/24 ADC r8,r/m8 2/11 ADC r16,r/m16 2/15 ADD AL,imm8 4 ADD AX,imm16 4 ADD r/m8,imm8 4/18 ADD r/m16,imm16 4/26 ADD r/m8,r8 2/15 ADD r/m16,r16 2/24 ADD r8,r/m8 2/11 ADD r16,r/m16 2/15 AND AL,imm8 4 AND AX,imm16 4 AND r/m8,imm8 4/18 AND r/m16,imm16 4/26 AND r/m8,r8 2/15 AND r/m16,r16 2/24 AND r8,r/m8 2/11 AND r16,r/m16 2/15 BOUND r16,m16&16 18-23/73-76 CALL rel16 16-20 CALL r/m16 14-18/23-31 CALL ptr16:16 21-29 CALL m16:16 31-47 CBW 2 CLC 2 CLD 2 CLI 2 CMC 2 CMP AL,imm8 4 CMP AX,imm16 4 CMP r/m8,imm8 4/13 CMP r/m16,imm16 4/17 CMP r/m8,r8 2/11 CMP r/m16,r16 2/15 CMP r8,r/m8 2/11 CMP r16,r/m16 2/15 CMPSB 7+14n !! CMPSW 7+14n !! CWD 4-5 DAA 3 DAS 7 DEC r/m8 2/16 DEC r/m16 2/24 DEC r16 2 DIV r/m8 19/25 DIV r/m16 25/35 ESC imm4,r/m n/a ENTER imm16,0 16 ENTER imm16,1 23 ?? ENTER imm16,imm8 23+16*(level-1) HLT 2 IDIV r/m8 29/35 IDIV r/m16 43/53 IMUL r/m8 33/39 IMUL r/m16 47/57 IMUL r16,r/m16,imm8 28-34/34-44 IMUL r16,r/m16,imm16 36-42/46-52 IN AL,imm8 9 IN AX,imm8 13 IN AL,DX 8 IN AX,DX 12 INC r/m8 2/16 INC r/m16 2/24 INC r16 2 INSB 9+8n !! INSW 9+8n !! INT 3 38-50 INT imm8 38-50 INTO 3 or 52 IRET 27-39 Jcc rel8 4 or 14 JCXZ rel8 5 or 13 JMP rel8 12 JMP rel16 13 JMP r/m16 11/20-24 JMP ptr16:16 15 JMP m16:16 27-35 LAHF 2 LDS r16,m16:16 18-26 LES r16,m16:16 18-26 LEA r16,m 4 LEAVE 6/10 LODSB 7+9n !! LODSW 7+9n !! LOOP rel8 5 or 13 LOOPE rel8 5 or 14 LOOPNE rel8 5 or 14 MOV r/m8,r8 2/9 MOV r/m16,r16 2/13 MOV r8,r/m8 2/11 MOV r16,r/m16 2/15 MOV r/m16,sreg 2/10-14 MOV sreg,r/m16 2/11-15 MOV AL,moffs8 10 MOV AX,moffs16 14 MOV moffs8,AL 9 MOV moffs16,AX 13 MOV r8,imm8 4 MOV r16,imm16 4 MOV r/m8,imm8 4/11 MOV r/m16,imm16 4/15 MOVSB 11+8n !! MOVSW 11+8n !! MUL r/m8 21/27 MUL r/m16 30/36 NEG r/m8 2/16 NEG r/m16 2/24 NOP 3 NOT r/m8 2/16 NOT r/m16 2/24 OR AL,imm8 4 OR AX,imm16 4 OR r/m8,imm8 4/18 OR r/m16,imm16 4/26 OR r/m8,r8 2/15 OR r/m16,r16 2/24 OR r8,r/m8 2/11 OR r16,r/m16 2/15 OUT imm8,AL 8 OUT imm8,AX 12 OUT DX,AL 8 OUT DX,AX 12 OUTSB 9+8n !! OUTSW 9+8n !! POP m16 17-25 POP r16 8-12 POP sreg 8-12 POPA 43-75 POPF 8-12 PUSH r/m16 8-12/18-26 PUSH r16 8-12 PUSH imm8 7 PUSH imm16 12 PUSH sreg 8-12 PUSHA 35-67 PUSHF 8-12 RCL r/m8,1 2/2-4 RCL r/m16,1 2/2-4 RCL r/m8,CL 7+n/19+n RCL r/m16,CL 7+n/27+n RCL r/m8,imm8 7+n/19+n RCL r/m16,imm8 7+n/27+n RCR r/m8,1 2/16 RCR r/m16,1 2/24 RCR r/m8,CL 7+n/19+n RCR r/m16,CL 7+n/27+n RCR r/m8,imm8 7+n/19+n RCR r/m16,imm8 7+n/27+n ROL r/m8,1 2/16 ROL r/m16,1 2/24 ROL r/m8,CL 7+n/19+n ROL r/m16,CL 7+n/27+n ROL r/m8,imm8 7+n/19+n ROL r/m16,imm8 7+n/27+n ROR r/m8,1 2/16 ROR r/m16,1 2/24 ROR r/m8,CL 7+n/19+n ROR r/m16,CL 7+n/27+n ROR r/m8,imm8 2/16 ROR r/m16,imm8 2/24 RET (near) 15-19 RET (far) 21-29 RET imm16 (near) 20-24 RET imm16 (far) 24-32 SAHF 3 SAL r/m8,1 2/16 SAL r/m16,1 2/24 SAL r/m8,CL 7+n/19+n SAL r/m16,CL 7+n/27+n SAL r/m8,imm8 7+n/19+n SAL r/m16,imm8 7+n/27+n SAR r/m8,1 2/16 SAR r/m16,1 2/24 SAR r/m8,CL 7+n/19+n SAR r/m16,CL 7+n/27+n SAR r/m8,imm8 7+n/19+n SAR r/m16,imm8 7+n/27+n SHL r/m8,1 2/16 SHL r/m16,1 2/24 SHL r/m8,CL 7+n/19+n SHL r/m16,CL 7+n/27+n SHL r/m8,imm8 7+n/19+n SHL r/m16,imm8 7+n/27+n SHR r/m8,1 2/16 SHR r/m16,1 2/24 SHR r/m8,CL 7+n/19+n SHR r/m16,CL 7+n/27+n SHR r/m8,imm8 7+n/19+n SHR r/m16,imm8 7+n/27+n SBB AL,imm8 4 SBB AX,imm16 4 SBB r/m8,imm8 4/18 SBB r/m16,imm16 4/26 SBB r/m8,r8 2/15 SBB r/m16,r16 2/24 SBB r8,r/m8 2/11 SBB r16,r/m16 2/15 SCASB 7+10n !! SCASW 7+10n!! SETALC n/a STC 2 STD 2 STI 2 STOSB 7+4n !! STOSW 7+4n !! SUB AL,imm8 4 SUB AX,imm16 4 SUB r/m8,imm8 4/18 SUB r/m16,imm16 4/26 SUB r/m8,r8 2/15 SUB r/m16,r16 2/24 SUB r8,r/m8 2/11 SUB r16,r/m16 2/15 TEST AL,imm8 4 TEST AX,imm16 4 TEST r/m8,imm8 4/11 TEST r/m16,imm16 4/15 TEST r/m8,r8 2/10 TEST r/m16,r16 2/14 WAIT 2+5n (n = number of times POLL pin sampled) XCHG AX,r16 2 XCHG r/m8,r8 3/16 XCHG r/m16,r16 3/24 XLAT 9 XOR AL,imm8 4 XOR AX,imm16 4 XOR r/m8,imm8 4/18 XOR r/m16,imm16 4/26 XOR r/m8,r8 2/15 XOR r/m16,r16 2/24 XOR r8,r/m8 2/11 XOR r16,r/m16 2/15 (END)Top
AAA 3 AAD 14 AAD imm8 n/a AAM 16 AAM imm8 n/a AAS 3 ADC AL,imm8 3 ADC AX,imm16 3 ADC r/m8,imm8 3/7+EA ADC r/m16,imm16 3/7+EA ADC r/m8,r8 2/7+EA ADC r/m16,r16 2/7+EA ADC r8,r/m8 2/7+EA ADC r16,r/m16 2/7+EA ADD AL,imm8 3 ADD AX,imm16 3 ADD r/m8,imm8 3/7+EA ADD r/m16,imm16 3/7+EA ADD r/m8,r8 2/7+EA ADD r/m16,r16 2/7+EA ADD r8,r/m8 2/7+EA ADD r16,r/m16 2/7+EA AND AL,imm8 3 AND AX,imm16 3 AND r/m8,imm8 3/7+EA AND r/m16,imm16 3/7+EA AND r/m8,r8 2/7+EA AND r/m16,r16 2/7+EA AND r8,r/m8 2/7+EA AND r16,r/m16 2/7+EA ARPL r/m16,r16 10/11+EA BOUND r16,m16&16 13+EA CALL rel16 7+m CALL r/m16 7+m/11+m CALL ptr16:16 13+m CALL ptr16:16 (PM, direct segment) 26+m CALL ptr16:16 (PM, via call gate, same p 41+m CALL ptr16:16 (PM, via call gate, more p 82+m CALL ptr16:16 (PM, via call gate, more p 86+4*param+m CALL m16:16 16+m CALL m16:16 (PM, direct segment) 29+m CALL m16:16 (PM, via gate, same priveleg44+m CALL m16:16 (PM, via gate, more priveleg83+m CALL m16:16 (PM, via gate, more priveleg90+4*param+m CBW 2 CLC 2 CLD 2 CLI 3 CLTS 2 CMC 2 CMP AL,imm8 3 CMP AX,imm16 3 CMP r/m8,imm8 3/6+ CMP r/m16,imm8 3/6+EA CMP r/m16,imm16 3/6+EA CMP r/m8,r8 2/7+EA CMP r/m16,r16 2/7+EA CMP r8,r/m8 2/6+EA CMP r16,r/m16 2/6+EA CMPSB f CMPSW f CWD 2 DAA 3 DAS 3 DEC r/m8 2/7+EA DEC r/m16 2/7+EA DEC r16 2 DIV r/m8 14/17+EA DIV r/m16 22/25+EA ESC imm4,r/m (9-20)+EA ENTER imm16,0 11 ENTER imm16,1 15 ENTER imm16,imm8 16+4*(n-1) HLT 2 IDIV r/m8 17/20+EA IDIV r/m16 25/28+EA IMUL r/m8 13/16+EA IMUL r/m16 21/24+EA IMUL r16,r/m16 21/24+EA IMUL r16,imm8 ?? IMUL r16,imm16 ?? IMUL r16,r/m16,imm8 21/24+EA IMUL r16,r/m16,imm16 21/24+EA IN AL,imm8 5 IN AL,imm8 (PM, CPL <= IOPL) 5 IN AX,imm8 5 IN AX,imm8 (PM, CPL <= IOPL) 5 IN AL,DX 5 IN AL,DX (PM, CPL <= IOPL) 5 IN AX,DX 5 IN AX,DX (PM, CPL <= IOPL) 5 INC r/m8 2/7+EA INC r/m16 2/7+EA INC r16 2 INSB f INSW f INT 3 23+m INT 3 (PM, same privilege) 40+m INT 3 (PM, more privelege) 78+m INT imm8 23+m INT imm8 (PM, same privilege) 40+m INT imm8 (PM, more privelege) 78+m INTO 24+m or 3 INTO (PM, same privilege) 40+m or 3 INTO (PM, more privelege) 78+m or 3 IRET 17 IRET (PM, to same privilege) 31+m IRET (PM, to lesser privilege) 55+m Jcc rel8 7+m or 3 JCXZ rel8 8+m or 4 JMP rel8 7+m JMP rel16 7+m JMP r/m16 7/11+m JMP ptr16:16 11/23+m JMP ptr16:16 (PM, direct segment) f JMP ptr16:16 (PM, via call gate, same pr38+m JMP m16:16 15/26+m JMP m16:16 (PM, direct segment) f JMP m16:16 (PM, via call gate, same priv41+m LAHF 2 LAR r16,r/m16 14/16+ LDS r16,m16:16 7+/21+ LDS r16,m16:16 (PM) f LDS r32,m16:32 (PM) f LES r16,m16:16 7+/21+ LES r16,m16:16 (PM) f LES r32,m16:32 (PM) f LEA r16,m 3+ LEAVE 5 LGDT m16&32 11+ LIDT m16&32 12+ LLDT r/m16 17/19+ LMSW r/m16 3/6+ LOADALL f LODSB 5+4*n LODSW 5+4*n LOOP rel8 8/4 LOOPE rel8 8/4 LOOPNE rel8 8/4 LSL r16,r/m16 14/16 LTR r/m16 17/19+ MOV r/m8,r8 2/3+ MOV r/m16,r16 2/3+ MOV r8,r/m8 2/5+ MOV r16,r/m16 2/5+ MOV r/m16,sreg 2/3+ MOV sreg,r/m16 2/5+ MOV sreg,r/m16 (PM) 17/19+ MOV AL,moffs8 5 MOV AX,moffs16 5 MOV moffs8,AL 3 MOV moffs16,AX 3 MOV r8,imm8 2 MOV r16,imm16 2 MOV r/m8,imm8 2/3+ MOV r/m16,imm16 2/3+ MOVSB 5+4*n MOVSW 5 MUL r/m8 13/16+ MUL r/m16 21/24+ NEG r/m8 2/7 NEG r/m16 2/7 NOP 3 NOT r/m8 2/7 NOT r/m16 2/7 OR AL,imm8 3 OR AX,imm16 3 OR r/m8,imm8 3/7 OR r/m16,imm16 3/7 OR r/m8,r8 2/7 OR r/m16,r16 2/7 OR r8,r/m8 2/7 OR r16,r/m16 2/7 OUT imm8,AL 3 OUT imm8,AL (PM, CPL <= IOPL) 3 OUT imm8,AX 3 OUT imm8,AX (PM, CPL <= IOPL) 3 OUT DX,AL 3 OUT DX,AL (PM, CPL <= IOPL) 3 OUT DX,AX 3 OUT DX,AX (PM, CPL <= IOPL) 3 OUTSB 5+4*n OUTSW 5 POP m16 5+ POP r16 5 POP sreg 5/20 POP sreg (PM) 20 POPA 19 POPF 5 POPF (PM) 5 PUSH r/m16 5+ PUSH r16 3 PUSH imm8 3 PUSH imm16 3 PUSH sreg 3 PUSHA 17+ PUSHF 3 PUSHF (PM) 3 RCL r/m8,1 2/7 RCL r/m16,1 2/7 RCL r/m8,CL 5/8+n RCL r/m16,CL 5/8+n RCL r/m8,imm8 5/8+n RCL r/m16,imm8 5/8+n RCR r/m8,1 2/7 RCR r/m16,1 2/7 RCR r/m8,CL 5/8+n RCR r/m16,CL 5/8+n RCR r/m8,imm8 5/8+n RCR r/m16,imm8 5/8+n ROL r/m8,1 2/7 ROL r/m16,1 2/7 ROL r/m8,CL 5/8+n ROL r/m16,CL 5/8+n ROL r/m8,imm8 5/8+n ROL r/m16,imm8 5/8+n ROR r/m8,1 2/7 ROR r/m16,1 2/7 ROR r/m8,CL 5/8+n ROR r/m16,CL 5/8+n ROR r/m8,imm8 5/8+n ROR r/m16,imm8 5/8+n RDTSC f RET (near) 11+m RET (far) 15+m RET (PM, far, same PL) 25+m RET (PM, far, different PL) 55+m RET imm16 (near) 11+m RET imm16 (far) 15+m RET imm16 (PM, far, same PL) 25+m RET imm16 (PM, far, different PL) 55+m SAHF 2 SAL r/m8,1 2/7 SAL r/m16,1 2/7 SAL r/m8,CL 5/8+n SAL r/m16,CL 5/8+n SAL r/m8,imm8 5/8+n SAL r/m16,imm8 5/8+n SAR r/m8,1 2/7 SAR r/m16,1 2/7 SAR r/m8,CL 5/8+n SAR r/m16,CL 5/8+n SAR r/m8,imm8 5/8+n SAR r/m16,imm8 5/8+n SHL r/m8,1 2/7 SHL r/m16,1 2/7 SHL r/m8,CL 5/8+n SHL r/m16,CL 5/8+n SHL r/m8,imm8 5/8+n SHL r/m16,imm8 5/8+n SHR r/m8,1 2/7 SHR r/m16,1 2/7 SHR r/m8,CL 5/8+n SHR r/m16,CL 5/8+n SHR r/m8,imm8 5/8+n SHR r/m16,imm8 5/8+n SBB AL,imm8 3 SBB AX,imm16 3 SBB r/m8,imm8 3/7 SBB r/m16,imm16 3/7 SBB r/m8,r8 2/7 SBB r/m16,r16 2/7 SBB r8,r/m8 2/7 SBB r16,r/m16 2/7 SCASB 5+8*n SCASW 5+8*n SETALC f SGDT m16&32 11+ SIDT m16&32 12+ SLDT r/m16 2/3+ SMINT f SMSW r/m16 2/3+ STC 2 STD 2 STI 2 STOSB 4+3*n STOSW 4+3*n STR r/m16 2/3 SUB AL,imm8 3 SUB AX,imm16 3 SUB r/m8,imm8 2/7 SUB r/m16,imm16 2/7 SUB r/m8,r8 2/6 SUB r/m16,r16 2/6 SUB r8,r/m8 2/6 SUB r16,r/m16 2/6 TEST AL,imm8 3 TEST AX,imm16 3 TEST r/m8,imm8 3/6 TEST r/m16,imm16 3/6 TEST r/m8,r8 2/6 TEST r/m16,r16 2/6 VERR r/m16 14/16+ VERW r/m16 14/16+ WAIT 3 XCHG AX,r16 3 XCHG r/m8,r8 3/5+ XCHG r/m16,r16 3/5+ XLAT 5 XOR AL,imm8 3 XOR AX,imm16 3 XOR r/m8,imm8 2/7+ XOR r/m16,imm16 2/7+ XOR r/m8,r8 2/6 XOR r/m16,r16 2/6 XOR r8,r/m8 2/6 XOR r16,r/m16 2/6 (END)Top
AAA 4 AAD 19 AAD imm8 n/a AAM 17 AAM imm8 m/a AAS 4 ADC AL,imm8 2 ADC AX,imm16 2 ADC EAX,imm32 2 ADC r/m8,imm8 2/7 ADC r/m16,imm8 2/7 ADC r/m32,imm8 2/7 ADC r/m16,imm16 2/7 ADC r/m32,imm32 2/7 ADC r/m8,r8 2/7 ADC r/m16,r16 2/7 ADC r/m32,r32 2/7 ADC r8,r/m8 2/6 ADC r16,r/m16 2/6 ADC r32,r/m32 2/6 ADD AL,imm8 2 ADD AX,imm16 2 ADD EAX,imm32 2 ADD r/m8,imm8 2/7 ADD r/m16,imm8 2/7 ADD r/m32,imm8 2/7 ADD r/m16,imm16 2/7 ADD r/m32,imm32 2/7 ADD r/m8,r8 2/7 ADD r/m16,r16 2/7 ADD r/m32,r32 2/7 ADD r8,r/m8 2/6 ADD r16,r/m16 2/6 ADD r32,r/m32 2/6 AND AL,imm8 2 AND AX,imm16 2 AND EAX,imm32 2 AND r/m8,imm8 2/7 AND r/m16,imm8 2/7 AND r/m32,imm8 2/7 AND r/m16,imm16 2/7 AND r/m32,imm32 2/7 AND r/m8,r8 2/7 AND r/m16,r16 2/7 AND r/m32,r32 2/7 AND r8,r/m8 2/6 AND r16,r/m16 2/6 AND r32,r/m32 2/6 ARPL r/m16,r16 20/21 BOUND r16,m16&16 10 or 44 BOUND r32,m32&32 10 or 44 BSF r16,r/m16 11+3*n BSF r32,r/m32 11+3*n BSR r16,r/m16 9+3*n BSR r32,r/m32 9+3*n BT r/m16,r16 3/12 BT r/m32,r32 3/12 BT r/m16,imm8 3/6 BT r/m16,imm8 3/6 BTC r/m16,r16 6/13 BTC r/m32,r32 6/13 BTC r/m16,imm8 6/8 BTC r/m16,imm8 6/8 BTR r/m16,r16 6/13 BTR r/m32,r32 6/13 BTR r/m16,imm8 6/8 BTR r/m16,imm8 6/8 BTS r/m16,r16 6/13 BTS r/m32,r32 6/13 BTS r/m16,imm8 6/8 BTS r/m16,imm8 6/8 CALL rel16 7+m CALL r/m16 7+m/10+m CALL ptr16:16 17+m CALL ptr16:16 (PM, direct segment) 34+m CALL ptr16:16 (PM, via call gate, same p52+m CALL ptr16:16 (PM, via call gate, more p86+m CALL ptr16:16 (PM, via call gate, more p94+m+4*x CALL m16:16 22+m CALL m16:16 (PM, direct segment) 38+m CALL m16:16 (PM, via gate, same priveleg56+m CALL m16:16 (PM, via gate, more priveleg90+m CALL m16:16 (PM, via gate, more priveleg98+m+4*x CALL rel32 7+m CALL r/m32 7+m/10+m CALL ptr16:32 17+m CALL ptr16:32 (PM, direct segment) 34+m CALL ptr16:32 (PM, via gate, same privel52+m CALL ptr16:32 (PM, via gate, more privel86+m CALL ptr16:32 (PM, via gate, more privel94+m+4*x CALL m16:32 22+m CALL m16:32 (PM, direct segment) 38+m CALL m16:32 (PM, via gate, same priveleg56+m CALL m16:32 (PM, via gate, more priveleg90+m CALL m16:32 (PM, via gate, more priveleg98+m+4*x CBW 3 CWDE 2 CLC 2 CLD 2 CLI 3 CLTS 5 CMC 2 CMP AL,imm8 2 CMP AX,imm16 2 CMP EAX,imm32 2 CMP r/m8,imm8 2/5 CMP r/m16,imm8 2/5 CMP r/m32,imm8 2/5 CMP r/m16,imm16 2/5 CMP r/m32,imm32 2/5 CMP r/m8,r8 2/5 CMP r/m16,r16 2/5 CMP r/m32,r32 2/5 CMP r8,r/m8 2/6 CMP r16,r/m16 2/6 CMP r32,r/m32 2/6 CMPSB 10 CMPSW 10 CMPSD 10 CWD 2 CDQ 2 DAA 4 DAS 4 DEC r/m8 2/6 DEC r/m16 2/6 DEC r/m32 2/6 DEC r16 2 DEC r32 2 DIV r/m8 14/17 DIV r/m16 22/25 DIV r/m32 38/41 ESC imm4,r/m f ENTER imm16,0 10 ENTER imm16,1 12 ENTER imm16,imm8 15+4*(n-1) HLT 5 IBTS r/m16,AX,CL,r16 12/19 IBTS r/m32,EAX,CL,r32 12/19 IDIV r/m8 19/22 IDIV r/m16 27/30 IDIV r/m32 43/46 IMUL r/m8 12-17/15-20 IMUL r/m16 12-25/15-28 IMUL r/m32 12-41/15-44 IMUL r16,r/m16 12-17/15-20 IMUL r32,r/m32 12-41/15-44 IMUL r16,imm8 12-26/14-27 IMUL r32,imm8 13-42/14-43 IMUL r16,imm16 9/22-12/25 IMUL r32,imm32 9/38-12/41 IMUL r16,r/m16,imm8 9-14/12-17 IMUL r32,r/m32,imm8 9-14/12-17 IMUL r16,r/m16,imm16 9-22/12-25 IMUL r32,r/m32,imm32 9-38/12-41 IN AL,imm8 12 IN AL,imm8 (PM, CPL <= IOPL) 6/26 IN AL,imm8 (VM) 26 IN AX,imm8 12 IN AX,imm8 (PM, CPL <= IOPL) 6/26 IN AX,imm8 (VM) 26 IN EAX,imm8 12 IN EAX,imm8 (PM, CPL <= IOPL) 6/26 IN EAX,imm8 (VM) 26 IN AL,DX 13 IN AL,DX (PM, CPL <= IOPL) 7/27 IN AL,DX (VM) 27 IN AX,DX 13 IN AX,DX (PM, CPL <= IOPL) 7/27 IN AX,DX (VM) 27 IN EAX,DX 13 IN EAX,DX (PM, CPL <= IOPL) 7/27 IN EAX,DX (VM) 27 INC r/m8 2/6 INC r/m16 2/6 INC r/m32 2/6 INC r16 2 INC r32 2 INSB 15 INSW 15 INSD 15 INT 3 33 INT 3 (PM, same privilege) 59 INT 3 (PM, more privelege) 99 INT imm8 37 INT imm8 (PM, same privilege) 59 INT imm8 (PM, more privelege) 99 INTO 3/35 INTO (PM, same privilege) 3/59 INTO (PM, more privelege) 3/99 IRET 22/38 IRET (PM, to same privilege) 22/38 IRET (PM, to lesser privilege) 82 IRETD 22/38 IRETD (PM, to same privilege) 22/38 IRETD (PM, to lesser privilege) 82 Jcc rel8 7+m/3 Jcc rel16 7+m/3 Jcc rel32 7+m/3 JCXZ rel8 9+m/5 JECXZ rel8 9+m/5 JMP rel8 7+m JMP rel16 7+m JMP r/m16 7+m/10+m JMP ptr16:16 12/27+m JMP ptr16:16 (PM, direct segment) 12/27+m JMP ptr16:16 (PM, via call gate, same pr45+m JMP m16:16 43/31+m JMP m16:16 (PM, direct segment) 43/31+m JMP m16:16 (PM, via call gate, same priv49+m JMP rel32 7+m JMP r/m32 (7/10)+m JMP ptr16:32 12/27+m JMP ptr16:32 (PM, direct segment) 12/27+m JMP ptr16:32 (PM, via call gate, same pr45+m JMP m16:32 43/31+m JMP m16:32 (PM, direct segment) 43/31+m JMP m16:32 (PM, via call gate, same priv49+m LAHF 2 LAR r16,r/m16 15/16 LAR r32,r/m32 15/16 LDS r16,m16:16 7/22 LDS r32,m16:32 7/22 LDS r16,m16:16 (PM) 7/22 LDS r32,m16:32 (PM) f LSS r16,m16:16 7/22 LSS r32,m16:32 7/22 LSS r16,m16:16 (PM) 7/22 LSS r32,m16:32 (PM) f LES r16,m16:16 7/22 LES r32,m16:32 7/22 LES r16,m16:16 (PM) 7/22 LES r32,m16:32 (PM) f LFS r16,m16:16 7/25 LFS r32,m16:32 7/25 LFS r16,m16:16 (PM) 7/22 LFS r32,m16:32 (PM) f LGS r16,m16:16 7/25 LGS r32,m16:32 7/25 LGS r16,m16:16 (PM) 7/22 LGS r32,m16:32 (PM) f LEA r16,m 2 LEA r32,m 2 LEAVE 4 LGDT m16&32 11 LIDT m16&32 11 LLDT r/m16 20 LMSW r/m16 10/13 LOADALL f LODSB 5 LODSW 5 LODSD 5 LOOP rel8 11+m LOOPE rel8 11+m LOOPNE rel8 11+m LSL r16,r/m16 20/21 LSL r32,r/m32 20/21 LTR r/m16 23/27 MOV r/m8,r8 2/2 MOV r/m16,r16 2/2 MOV r/m32,r32 2/2 MOV r8,r/m8 2/4 MOV r16,r/m16 2/4 MOV r32,r/m32 2/4 MOV r/m16,sreg 2/2 MOV sreg,r/m16 2/5 18/19 MOV sreg,r/m16 (PM) f MOV AL,moffs8 4 MOV AX,moffs16 4 MOV EAX,moffs32 4 MOV moffs8,AL 2 MOV moffs16,AX 2 MOV moffs32,EAX 2 MOV r8,imm8 2 MOV r16,imm16 2 MOV r32,imm32 2 MOV r/m8,imm8 2/2 MOV r/m16,imm16 2/2 MOV r/m32,imm32 2/2 MOV CR0,r32 10 MOV CR2,r32 4/5 MOV CR3,r32 4/5 MOV CR4,r32 f MOV r32,CRi 6 MOV r32,DR0-DR3 22 MOV r32,DR4-DR5 f MOV r32,DR6-DR7 14 MOV DR0-DR3,r32 22 MOV DR4-DR5,r32 f MOV DR6-DR7,r32 16 MOV r32,TR4-TR7 12 MOV TR4-TR7,r32 12 MOVSB 7 MOVSW 7 MOVSD 7 MOVSX r16,r/m8 3/6 MOVSX r32,r/m8 3/6 MOVSX r32,r/m16 3/6 MOVZX r16,r/m8 3/6 MOVZX r32,r/m8 3/6 MOVZX r32,r/m16 3/6 MUL r/m8 9/14-12/17 MUL r/m16 9/22-12/25 MUL r/m32 9/38-12/41 NEG r/m8 2/6 NEG r/m16 2/6 NEG r/m32 2/6 NOP 3 NOT r/m8 2/6 NOT r/m16 2/6 NOT r/m32 2/6 OR AL,imm8 2 OR AX,imm16 2 OR EAX,imm32 2 OR r/m8,imm8 2/7 OR r/m16,imm8 2/7 OR r/m32,imm8 2/7 OR r/m16,imm16 2/7 OR r/m32,imm32 2/7 OR r/m8,r8 2/7 OR r/m16,r16 2/7 OR r/m32,r32 2/7 OR r8,r/m8 2/6 OR r16,r/m16 2/6 OR r32,r/m32 2/6 OUT imm8,AL 10 OUT imm8,AL (PM, CPL <= IOPL) 4/24 OUT imm8,AL (VM) 4/24 OUT imm8,AX 10 OUT imm8,AX (PM, CPL <= IOPL) 4/24 OUT imm8,AX (VM) 4/24 OUT imm8,EAX 10 OUT imm8,EAX (PM, CPL <= IOPL) 4/24 OUT imm8,EAX (VM) 4/24 OUT DX,AL 11 OUT DX,AL (PM, CPL <= IOPL) 5/25 OUT DX,AL (VM) 5/25 OUT DX,AX 11 OUT DX,AX (PM, CPL <= IOPL) 5/25 OUT DX,AX (VM) 5/25 OUT DX,EAX 11 OUT DX,EAX (PM, CPL <= IOPL) 5/25 OUT DX,EAX (VM) 5/25 OUTSB 14 OUTSW 14 OUTSD 14 POP m16 5 POP m32 5 POP r16 4 POP r32 4 POP sreg 7/21 POP sreg (PM) 7/21 POPA 24 POPAD 24 POPF 5 POPF (PM) 5 POPF (VM) ?? POPFD 5 POPFD (PM) 5 POPFD (VM) ?? PUSH r/m16 5 PUSH r/m32 5 PUSH r16 2 PUSH r32 2 PUSH imm8 2 PUSH imm16 2 PUSH imm32 2 PUSH sreg 2 PUSHA 18 PUSHAD 18 PUSHF 4 PUSHF (PM) 4 PUSHF (VM) 4 ?? PUSHFD 4 PUSHFD (PM) 4 PUSHFD (VM) 4 ?? RCL r/m8,1 9/10 RCL r/m16,1 9/10 RCL r/m32,1 9/10 RCL r/m8,CL 9/10 RCL r/m16,CL 9/10 RCL r/m32,CL 9/10 RCL r/m8,imm8 9/10 RCL r/m16,imm8 9/10 RCL r/m32,imm8 9/10 RCR r/m8,1 9/10 RCR r/m16,1 9/10 RCR r/m32,1 9/10 RCR r/m8,CL 9/10 RCR r/m16,CL 9/10 RCR r/m32,CL 9/10 RCR r/m8,imm8 9/10 RCR r/m16,imm8 9/10 RCR r/m32,imm8 9/10 ROL r/m8,1 3/7 ROL r/m16,1 3/7 ROL r/m32,1 3/7 ROL r/m8,CL 3/7 ROL r/m16,CL 3/7 ROL r/m32,CL 3/7 ROL r/m8,imm8 3/7 ROL r/m16,imm8 3/7 ROL r/m32,imm8 3/7 ROR r/m8,1 3/7 ROR r/m16,1 3/7 ROR r/m32,1 3/7 ROR r/m8,CL 3/7 ROR r/m16,CL 3/7 ROR r/m32,CL 3/7 ROR r/m8,imm8 3/7 ROR r/m16,imm8 3/7 ROR r/m32,imm8 3/7 RDTSC f RET (near) 10+m RET (far) 18+m RET (PM, far, same PL) 32+m RET (PM, far, different PL) 68 RET imm16 (near) 10+m RET imm16 (far) 18+m RET imm16 (PM, far, same PL) 32+m RET imm16 (PM, far, different PL) 68 SAHF 3 SAL r/m8,1 3/7 SAL r/m16,1 3/7 SAL r/m32,1 3/7 SAL r/m8,CL 3/7 SAL r/m16,CL 3/7 SAL r/m32,CL 3/7 SAL r/m8,imm8 3/7 SAL r/m16,imm8 3/7 SAL r/m32,imm8 3/7 SAR r/m8,1 3/7 SAR r/m16,1 3/7 SAR r/m32,1 3/7 SAR r/m8,CL 3/7 SAR r/m16,CL 3/7 SAR r/m32,CL 3/7 SAR r/m8,imm8 3/7 SAR r/m16,imm8 3/7 SAR r/m32,imm8 3/7 SHL r/m8,1 3/7 SHL r/m16,1 3/7 SHL r/m32,1 3/7 SHL r/m8,CL 3/7 SHL r/m16,CL 3/7 SHL r/m32,CL 3/7 SHL r/m8,imm8 3/7 SHL r/m16,imm8 3/7 SHL r/m32,imm8 3/7 SHR r/m8,1 3/7 SHR r/m16,1 3/7 SHR r/m32,1 3/7 SHR r/m8,CL 3/7 SHR r/m16,CL 3/7 SHR r/m32,CL 3/7 SHR r/m8,imm8 3/7 SHR r/m16,imm8 37/ SHR r/m32,imm8 3/7 SBB AL,imm8 2 SBB AX,imm16 2 SBB EAX,imm32 2 SBB r/m8,imm8 2/7 SBB r/m16,imm8 2/7 SBB r/m32,imm8 2/7 SBB r/m16,imm16 2/7 SBB r/m32,imm32 2/7 SBB r/m8,r8 2/7 SBB r/m16,r16 2/7 SBB r/m32,r32 2/7 SBB r8,r/m8 2/6 SBB r16,r/m16 2/6 SBB r32,r/m32 2/6 SCASB 7 SCASW 7 SCASD 7 SETALC f SETcc r/m8 4/5 SGDT m16&32 9 SIDT m16&32 9 SHLD r/m16,r16,imm8 3/7 SHLD r/m32,r32,imm8 3/7 SHLD r/m16,r16,CL 3/7 SHLD r/m32,r32,CL 3/7 SHRD r/m16,r16,imm8 3/7 SHRD r/m32,r32,imm8 3/7 SHRD r/m16,r16,CL 3/7 SHRD r/m32,r32,CL 3/7 SLDT r/m16 2/2 SLDT r/m32 f SMINT f SMSW r/m16 2/3 2/2 STC 2 STD 2 STI 2 STOSB 4 STOSW 4 STOSD 4 STR r/m16 23/27 SUB AL,imm8 2/8 SUB AX,imm16 2/7 SUB EAX,imm32 2/7 SUB r/m8,imm8 2/7 SUB r/m16,imm8 2/7 SUB r/m32,imm8 2/7 SUB r/m16,imm16 2/7 SUB r/m32,imm32 2/7 SUB r/m8,r8 2/7 SUB r/m16,r16 2/7 SUB r/m32,r32 2/7 SUB r8,r/m8 2/6 SUB r16,r/m16 2/6 SUB r32,r/m32 2/6 TEST AL,imm8 2 TEST AX,imm16 2 TEST EAX,imm32 2 TEST r/m8,imm8 2/5 TEST r/m16,imm16 2/5 TEST r/m32,imm32 2/5 TEST r/m8,r8 2/5 TEST r/m16,r16 2/5 TEST r/m32,r32 2/5 UMOV r8,r/m8 f UMOV r16,r/m16 f UMOV r32,r/m32 f UMOV r/m8,r8 f UMOV r/m16,r16 f UMOV r/m32,r32 f VERR r/m16 10/11 VERW r/m16 15/16 WAIT 6min XBTS r16,r/m16,AX,CL 6/13 XBTS r32,r/m32,EAX,CL 6/13 XCHG AX,r16 3 XCHG EAX,r32 3 XCHG r/m8,r8 3/5 XCHG r/m16,r16 3/5 XCHG r/m32,r32 3/5 XLAT 5 XOR AL,imm8 2 XOR AX,imm16 2 XOR EAX,imm32 2 XOR r/m8,imm8 2 XOR r/m16,imm8 2/7 XOR r/m32,imm8 2/7 XOR r/m16,imm16 2/7 XOR r/m32,imm32 2/7 XOR r/m8,r8 2/7 XOR r/m16,r16 2/7 XOR r/m32,r32 2/7 XOR r8,r/m8 2/6 XOR r16,r/m16 2/6 XOR r32,r/m32 2/6 (END)Top
AAA 3 AAD 14 AAD imm8 n/a AAM 15 AAM imm8 n/a AAS 3 ADC AL,imm8 1 ADC AX,imm16 1 ADC EAX,imm32 1 ADC r/m8,imm8 1/3 ADC r/m16,imm8 1/3 ADC r/m32,imm8 1/3 ADC r/m16,imm16 1/3 ADC r/m32,imm32 f ADC r/m8,r8 1/3 ADC r/m16,r16 1/3 ADC r/m32,r32 f ADC r8,r/m8 1/2 ADC r16,r/m16 1/2 ADC r32,r/m32 1/2 ADD AL,imm8 1 ADD AX,imm16 1 ADD EAX,imm32 1 ADD r/m8,imm8 1/3 ADD r/m16,imm8 1/3 ADD r/m32,imm8 1/3 ADD r/m16,imm16 1/3 ADD r/m32,imm32 1/3 ADD r/m8,r8 1/3 ADD r/m16,r16 1/3 ADD r/m32,r32 1/3 ADD r8,r/m8 1/2 ADD r16,r/m16 1/2 ADD r32,r/m32 1/2 AND AL,imm8 1 AND AX,imm16 1 AND EAX,imm32 1 AND r/m8,imm8 1/3 AND r/m16,imm8 1/3 AND r/m32,imm8 1/3 AND r/m16,imm16 1/3 AND r/m32,imm32 1/3 AND r/m8,r8 1/3 AND r/m16,r16 1/3 AND r/m32,r32 1/3 AND r8,r/m8 1/2 AND r16,r/m16 1/2 AND r32,r/m32 1/2 ARPL r/m16,r16 9/9 BOUND r16,m16&16 7 BOUND r32,m32&32 7 BSF r16,r/m16 6-42/7-43 BSF r32,r/m32 6-42/7-43 BSR r16,r/m16 6-103/7-104 BSR r32,r/m32 6-103/7-104 BSWAP r32 1 BT r/m16,r16 3/8 BT r/m32,r32 3/8 BT r/m16,imm8 3/3 BT r/m16,imm8 3/3 BTC r/m16,r16 6/13 BTC r/m32,r32 6/13 BTC r/m16,imm8 6/8 BTC r/m16,imm8 6/8 BTR r/m16,r16 6/13 BTR r/m32,r32 6/13 BTR r/m16,imm8 6/8 BTR r/m16,imm8 6/8 BTS r/m16,r16 6/13 BTS r/m32,r32 6/13 BTS r/m16,imm8 6/8 BTS r/m16,imm8 6/8 CALL rel16 3 CALL r/m16 5/5 CALL ptr16:16 18 CALL ptr16:16 (PM, direct segment) 20 CALL ptr16:16 (PM, via call gate, same p35 CALL ptr16:16 (PM, via call gate, more p69 CALL ptr16:16 (PM, via call gate, more p77+4*p CALL m16:16 17 CALL m16:16 (PM, direct segment) 20 CALL m16:16 (PM, via gate, same priveleg35 CALL m16:16 (PM, via gate, more priveleg69 CALL m16:16 (PM, via gate, more priveleg77+4*p CALL rel32 3 CALL r/m32 5/5 CALL ptr16:32 18 CALL ptr16:32 (PM, direct segment) 20 CALL ptr16:32 (PM, via gate, same privel35 CALL ptr16:32 (PM, via gate, more privel69 CALL ptr16:32 (PM, via gate, more privel77+4*p CALL m16:32 17 CALL m16:32 (PM, direct segment) 20 CALL m16:32 (PM, via gate, same priveleg35 CALL m16:32 (PM, via gate, more priveleg69 CALL m16:32 (PM, via gate, more priveleg77+4*p CBW 3 CWDE 3 CLC 2 CLD 2 CLI 5 CLTS 7 CMC 2 CMOVcc r16,r/m16 f CMOVcc r32,r/m32 f CMP AL,imm8 1 CMP AX,imm16 1 CMP EAX,imm32 1 CMP r/m8,imm8 1/2 CMP r/m16,imm8 1/2 CMP r/m32,imm8 1/2 CMP r/m16,imm16 1/2 CMP r/m32,imm32 1/2 CMP r/m8,r8 1/2 CMP r/m16,r16 1/2 CMP r/m32,r32 1/2 CMP r8,r/m8 1/3 CMP r16,r/m16 1/3 CMP r32,r/m32 1/3 CMPSB 8 CMPSW 8 CMPSD 8 CMPXCHG r/m8,r8 6/7 6/10 CMPXCHG r/m16,r16 6/7 6/10 CMPXCHG r/m32,r32 6/7 6/10 CPUID (SL Enhanced only) CWD 3 CDQ 3 DAA 2 DAS 2 DEC r/m8 1/3 DEC r/m16 1/3 DEC r/m32 1/3 DEC r16 1 DEC r32 1 DIV r/m8 16/16 DIV r/m16 24/24 DIV r/m32 40/40 ESC imm4,r/m f ENTER imm16,0 14 ENTER imm16,1 17 ENTER imm16,imm8 17+3*n HLT 4 IDIV r/m8 19/20 IDIV r/m16 27/28 IDIV r/m32 43/44 IMUL r/m8 13-18/13-18 IMUL r/m16 13-26/13-26 IMUL r/m32 12-42/13-42 IMUL r16,r/m16 13-26/13-26 IMUL r32,r/m32 13-42/13-42 IMUL r16,imm8 13-26 IMUL r32,imm8 13-26 IMUL r16,imm16 13-26/13-26 IMUL r32,imm32 13-42/13-42 IMUL r16,r/m16,imm8 13-26/13-26 IMUL r32,r/m32,imm8 13-42/13-42 IMUL r16,r/m16,imm16 13-26/13-26 IMUL r32,r/m32,imm32 13-42/13-42 IN AL,imm8 14 IN AL,imm8 (PM, CPL <= IOPL) 8/28 IN AL,imm8 (VM) 27 IN AX,imm8 14 IN AX,imm8 (PM, CPL <= IOPL) 8/28 IN AX,imm8 (VM) 27 IN EAX,imm8 14 IN EAX,imm8 (PM, CPL <= IOPL) 8/28 IN EAX,imm8 (VM) 27 IN AL,DX 14 IN AL,DX (PM, CPL <= IOPL) 8/28 IN AL,DX (VM) 27 IN AX,DX 14 IN AX,DX (PM, CPL <= IOPL) 8/28 IN AX,DX (VM) 2 IN EAX,DX 14 IN EAX,DX (PM, CPL <= IOPL) 8/28 IN EAX,DX (VM) 27 INC r/m8 1/3 INC r/m16 1/3 INC r/m32 1/3 INC r16 1 INC r32 1 INSB 17 INSW 17 INSD 17 INT 3 26 INT 3 (PM, same privilege) 44 INT 3 (PM, more privelege) 71 INT imm8 30 INT imm8 (PM, same privilege) 44 INT imm8 (PM, more privelege) 71 INTO 3/28 INTO (PM, same privilege) 3/46 INTO (PM, more privelege) 3/73 INVD 4 INVLPG m 12 IRET 15 IRET (PM, to same privilege) 15 IRET (PM, to lesser privilege) 36 IRETD 15 IRETD (PM, to same privilege) 15 IRETD (PM, to lesser privilege) 36 Jcc rel8 3/1 Jcc rel16 3/1 Jcc rel32 3/1 JCXZ rel8 8/5 JECXZ rel8 8/5 JMP rel8 3 JMP rel16 3 JMP r/m16 5/5 JMP ptr16:16 17/19 JMP ptr16:16 (PM, direct segment) 17/19 JMP ptr16:16 (PM, via call gate, same pr32 JMP m16:16 13/18 JMP m16:16 (PM, direct segment) 13/18 JMP m16:16 (PM, via call gate, same priv31 JMP rel32 3 JMP r/m32 5/5 JMP ptr16:32 13/18 JMP ptr16:32 (PM, direct segment) 13/18 JMP ptr16:32 (PM, via call gate, same pr31 JMP m16:32 13/18 JMP m16:32 (PM, direct segment) 13/18 JMP m16:32 (PM, via call gate, same priv31 LAHF 3 LAR r16,r/m16 11/11 LAR r32,r/m32 11/11 LDS r16,m16:16 6/12p LDS r32,m16:32 6/12p LDS r16,m16:16 (PM) f LDS r32,m16:32 (PM) f LSS r16,m16:16 7/22p LSS r32,m16:32 7/22p LSS r16,m16:16 (PM) f LSS r32,m16:32 (PM) f LES r16,m16:16 7/22p LES r32,m16:32 7/22p LES r16,m16:16 (PM) f LES r32,m16:32 (PM) f LFS r16,m16:16 6/12p LFS r32,m16:32 6/12p LFS r16,m16:16 (PM) f LFS r32,m16:32 (PM) f LGS r16,m16:16 6/12p LGS r32,m16:32 6/12p LGS r16,m16:16 (PM) f LGS r32,m16:32 (PM) f LEA r16,m 1 LEA r32,m 1 LEAVE 5 LGDT m16&32 11 LIDT m16&32 11 LLDT r/m16 11/11 LMSW r/m16 13/13 LOADALL f LODSB 5 LODSW 5 LODSD 5 LOOP rel8 2,6 LOOPE rel8 9,6 LOOPNE rel8 9,6 LSL r16,r/m16 10/10 LSL r32,r/m32 10/10 LTR r/m16 20/20 MOV r/m8,r8 1 MOV r/m16,r16 1 MOV r/m32,r32 1 MOV r8,r/m8 1 MOV r16,r/m16 1 MOV r32,r/m32 1 MOV r/m16,sreg 3/3 MOV sreg,r/m16 3/9 MOV sreg,r/m16 (PM) f MOV AL,moffs8 1 MOV AX,moffs16 1 MOV EAX,moffs32 1 MOV moffs8,AL 1 MOV moffs16,AX 1 MOV moffs32,EAX 1 MOV r8,imm8 1 MOV r16,imm16 1 MOV r32,imm32 1 MOV r/m8,imm8 1 MOV r/m16,imm16 1 MOV r/m32,imm32 1 MOV CR0,r32 16 MOV CR2,r32 4 MOV CR3,r32 4 MOV CR4,r32 (SL Enhanced only) MOV r32,CRi 4 MOV r32,DR0-DR3 10 MOV r32,DR4-DR5 9 (alias to DR6-DR7) MOV r32,DR6-DR7 10 MOV DR0-DR3,r32 11 MOV DR4-DR5,r32 10 (alias to DR6-DR7) MOV DR6-DR7,r32 11 MOV r32,TR4-TR7 4 MOV r32,TR3 4 MOV TR3,r32 6 MOV TR4-TR7,r32 f MOVSB 7 MOVSW 7 MOVSD 7 MOVSX r16,r/m8 3/3 MOVSX r32,r/m8 3/3 MOVSX r32,r/m16 3/3 MOVZX r16,r/m8 3/3 MOVZX r32,r/m8 3/3 MOVZX r32,r/m16 3/3 MUL r/m8 13-18/ MUL r/m16 13-26/ MUL r/m32 13-42/ NEG r/m8 1/3 NEG r/m16 1/3 NEG r/m32 1/3 NOP 1 NOT r/m8 1/3 NOT r/m16 1/3 NOT r/m32 1/3 OR AL,imm8 1 OR AX,imm16 1 OR EAX,imm32 1 OR r/m8,imm8 1/3 OR r/m16,imm8 1/3 OR r/m32,imm8 1/3 OR r/m16,imm16 1/3 OR r/m32,imm32 1/3 OR r/m8,r8 1/3 OR r/m16,r16 1/3 OR r/m32,r32 1/3 OR r8,r/m8 1/2 OR r16,r/m16 1/2 OR r32,r/m32 1/2 OUT imm8,AL 16 OUT imm8,AL (PM, CPL <= IOPL) 11/31 OUT imm8,AL (VM) 25 OUT imm8,AX 16 OUT imm8,AX (PM, CPL <= IOPL) 11/31 OUT imm8,AX (VM) 25 OUT imm8,EAX 16 OUT imm8,EAX (PM, CPL <= IOPL) 11/31 OUT imm8,EAX (VM) 25 OUT DX,AL 16 OUT DX,AL (PM, CPL <= IOPL) 11/31 OUT DX,AL (VM) 25 OUT DX,AX 16 OUT DX,AX (PM, CPL <= IOPL) 11/31 OUT DX,AX (VM) 25 OUT DX,EAX 16 OUT DX,EAX (PM, CPL <= IOPL) 11/31 OUT DX,EAX (VM) 25 OUTSB 17 OUTSW 10/32 OUTSD 30 POP m16 6 POP m32 6 POP r16 4 POP r32 4 POP sreg 3 POP sreg (PM) f POPA 9 POPAD 9 POPF 9/6p POPF (PM) 6 POPF (VM) 9 POPFD 9/6p POPFD (PM) 6 POPFD (VM) 9 PUSH r/m16 4 PUSH r/m32 4 PUSH r16 1 PUSH r32 1 PUSH imm8 1 PUSH imm16 1 PUSH imm32 1 PUSH sreg 3 PUSHA 11 PUSHAD 11 PUSHF 4/3p PUSHF (PM) 3 PUSHF (VM) 4 PUSHFD 4/3p PUSHFD (PM) 3 PUSHFD (VM) 4 RCL r/m8,1 3/4 RCL r/m16,1 3/4 RCL r/m32,1 3/4 RCL r/m8,CL 8-30/9-31 RCL r/m16,CL 8-30/9-31 RCL r/m32,CL 8-30/9-31 RCL r/m8,imm8 8-30/9-31 RCL r/m16,imm8 8-30/9-31 RCL r/m32,imm8 8-30/9-31 RCR r/m8,1 3/4 RCR r/m16,1 3/4 RCR r/m32,1 3/4 RCR r/m8,CL 8-30/9-31 RCR r/m16,CL 8-30/9-31 RCR r/m32,CL 8-30/9-31 RCR r/m8,imm8 8-30/9-31 RCR r/m16,imm8 8-30/9-31 RCR r/m32,imm8 8-30/9-31 ROL r/m8,1 3/4 ROL r/m16,1 3/4 ROL r/m32,1 3/4 ROL r/m8,CL 3/4 ROL r/m16,CL 3/4 ROL r/m32,CL 3/4 ROL r/m8,imm8 2/4 ROL r/m16,imm8 2/4 ROL r/m32,imm8 2/4 ROR r/m8,1 3/4 ROR r/m16,1 3/4 ROR r/m32,1 3/4 ROR r/m8,CL 3/4 ROR r/m16,CL 3/4 ROR r/m32,CL 3/4 ROR r/m8,imm8 2/4 ROR r/m16,imm8 2/4 ROR r/m32,imm8 2/4 RET (near) 5 RET (far) 13 RET (PM, far, same PL) 18 RET (PM, far, different PL) 33 RET imm16 (near) 5 RET imm16 (far) 14 RET imm16 (PM, far, same PL) f RET imm16 (PM, far, different PL) f SAHF 2 SAL r/m8,1 3/4 SAL r/m16,1 3/4 SAL r/m32,1 3/4 SAL r/m8,CL 3/4 SAL r/m16,CL 3/4 SAL r/m32,CL 3/4 SAL r/m8,imm8 2/4 SAL r/m16,imm8 2/4 SAL r/m32,imm8 2/4 SAR r/m8,1 3/4 SAR r/m16,1 3/4 SAR r/m32,1 3/4 SAR r/m8,CL 3/4 SAR r/m16,CL 3/4 SAR r/m32,CL 3/4 SAR r/m8,imm8 2/4 SAR r/m16,imm8 2/4 SAR r/m32,imm8 2/4 SHL r/m8,1 3/4 SHL r/m16,1 3/4 SHL r/m32,1 3/4 SHL r/m8,CL 3/4 SHL r/m16,CL 3/4 SHL r/m32,CL 3/4 SHL r/m8,imm8 2/4 SHL r/m16,imm8 2/4 SHL r/m32,imm8 2/4 SHR r/m8,1 3/4 SHR r/m16,1 3/4 SHR r/m32,1 3/4 SHR r/m8,CL 3/4 SHR r/m16,CL 3/4 SHR r/m32,CL 3/4 SHR r/m8,imm8 2/4 SHR r/m16,imm8 2/4 SHR r/m32,imm8 2/4 SBB AL,imm8 1 SBB AX,imm16 1 SBB EAX,imm32 1 SBB r/m8,imm8 1/3 SBB r/m16,imm8 1/3 SBB r/m32,imm8 1/3 SBB r/m16,imm16 1/3 SBB r/m32,imm32 1/3 SBB r/m8,r8 1/3 SBB r/m16,r16 1/3 SBB r/m32,r32 1/3 SBB r8,r/m8 1/2 SBB r16,r/m16 1/2 SBB r32,r/m32 1/2 SCASB 6 SCASW 6 SCASD 6 SETALC f SETcc r/m8 4/3 SGDT m16&32 10 SIDT m16&32 10 SHLD r/m16,r16,imm8 2/3 SHLD r/m32,r32,imm8 2/3 SHLD r/m16,r16,CL 3/4 SHLD r/m32,r32,CL 3/4 SHRD r/m16,r16,imm8 2/3 SHRD r/m32,r32,imm8 2/3 SHRD r/m16,r16,CL 3/4 SHRD r/m32,r32,CL 3/4 SLDT r/m16 2/3 SLDT r/m32 2/3 SMINT f SMSW r/m16 2/3 STC 2 STD 2 STI 5 STOSB 5 STOSW 5 STOSD 5 STR r/m16 2/3 SUB AL,imm8 1 SUB AX,imm16 1 SUB EAX,imm32 1 SUB r/m8,imm8 1/3 SUB r/m16,imm8 1/3 SUB r/m32,imm8 1/3 SUB r/m16,imm16 1/3 SUB r/m32,imm32 1/3 SUB r/m8,r8 1/3 SUB r/m16,r16 1/3 SUB r/m32,r32 1/3 SUB r8,r/m8 1/2 SUB r16,r/m16 1/2 SUB r32,r/m32 1/2 TEST AL,imm8 1 TEST AX,imm16 1 TEST EAX,imm32 1 TEST r/m8,imm8 1/2 TEST r/m16,imm16 1/2 TEST r/m32,imm32 1/2 TEST r/m8,r8 1/2 TEST r/m16,r16 1/2 TEST r/m32,r32 1/2 UMOV r8,r/m8 ?? UMOV r16,r/m16 ?? UMOV r32,r/m32 ?? UMOV r/m8,r8 ?? UMOV r/m16,r16 ?? UMOV r/m32,r32 ?? VERR r/m16 11/11 VERW r/m16 11/11 WAIT 1-3 WBINVD 5 XADD r/m8,r8 3/4 XADD r/m16,r16 3/4 XADD r/m32,r32 3/4 XCHG AX,r16 3 XCHG EAX,r32 3 XCHG r/m8,r8 3/5 XCHG r/m16,r16 3/5 XCHG r/m32,r32 3/5 XLAT 4 XOR AL,imm8 1 XOR AX,imm16 1 XOR EAX,imm32 1 XOR r/m8,imm8 1/3 XOR r/m16,imm8 1/3 XOR r/m32,imm8 1/3 XOR r/m16,imm16 1/3 XOR r/m32,imm32 1/3 XOR r/m8,r8 1/3 XOR r/m16,r16 1/3 XOR r/m32,r32 1/3 XOR r8,r/m8 1/2 XOR r16,r/m16 1/2 XOR r32,r/m32 1/2 (END)Top
AAA 4 AAD 4 AAD imm8 4 AAM 16 AAM imm8 16 AAS 4 ADC AL,imm8 1 ADC AX,imm16 1 ADC EAX,imm32 1 ADC r/m8,imm8 1/3 ADC r/m16,imm8 1/3 ADC r/m32,imm8 1/3 ADC r/m16,imm16 1/3 ADC r/m32,imm32 1/3 ADC r/m8,r8 1/3 ADC r/m16,r16 1/3 ADC r/m32,r32 1/3 ADC r8,r/m8 1/3 ADC r16,r/m16 1/3 ADC r32,r/m32 1/3 ADD AL,imm8 1 ADD AX,imm16 1 ADD EAX,imm32 1 ADD r/m8,imm8 1/3 ADD r/m16,imm8 1/3 ADD r/m32,imm8 1/3 ADD r/m16,imm16 1/3 ADD r/m32,imm32 1/3 ADD r/m8,r8 1/3 ADD r/m16,r16 1/3 ADD r/m32,r32 1/3 ADD r8,r/m8 1/3 ADD r16,r/m16 1/3 ADD r32,r/m32 1/3 AND AL,imm8 1 AND AX,imm16 1 AND EAX,imm32 1 AND r/m8,imm8 1/3 AND r/m16,imm8 1/3 AND r/m32,imm8 1/3 AND r/m16,imm16 1/3 AND r/m32,imm32 1/3 AND r/m8,r8 1/3 AND r/m16,r16 1/3 AND r/m32,r32 1/3 AND r8,r/m8 1/3 AND r16,r/m16 1/3 AND r32,r/m32 1/3 ARPL r/m16,r16 6/10 BOUND r16,m16&16 11 or 11+int BOUND r32,m32&32 11 or 11+int BSF r16,r/m16 5+n/7+n BSF r32,r/m32 5+n/7+n BSR r16,r/m16 5+n/7+n BSR r32,r/m32 5+n/7+n BSWAP r32 4 BT r/m16,r16 3/6 BT r/m32,r32 3/6 BT r/m16,imm8 3/4 BT r/m16,imm8 3/4 BTC r/m16,r16 5/8 BTC r/m32,r32 5/8 BTC r/m16,imm8 4/5 BTC r/m16,imm8 4/5 BTR r/m16,r16 5/8 BTR r/m32,r32 5/8 BTR r/m16,imm8 4/5 BTR r/m16,imm8 4/5 BTS r/m16,r16 4/7 BTS r/m32,r32 4/7 BTS r/m16,imm8 3/5 BTS r/m16,imm8 3/5 CALL rel16 7 CALL r/m16 8/9 CALL ptr16:16 12 CALL ptr16:16 (PM, direct segment) 30 CALL ptr16:16 (PM, via call gate, same p41 CALL ptr16:16 (PM, via call gate, more p83 CALL ptr16:16 (PM, via call gate, more p81+4*param CALL m16:16 14 CALL m16:16 (PM, direct segment) 14 CALL m16:16 (PM, via gate, same priveleg43 CALL m16:16 (PM, via gate, more priveleg85 CALL m16:16 (PM, via gate, more priveleg86+4*param CALL rel32 7 CALL r/m32 8/9 CALL ptr16:32 12 CALL ptr16:32 (PM, direct segment) 30 CALL ptr16:32 (PM, via gate, same privel41 CALL ptr16:32 (PM, via gate, more privel83 CALL ptr16:32 (PM, via gate, more privel81+4*param CALL m16:32 14 CALL m16:32 (PM, direct segment) 14 CALL m16:32 (PM, via gate, same priveleg43 CALL m16:32 (PM, via gate, more priveleg85 CALL m16:32 (PM, via gate, more priveleg86+4*param CBW 3 CWDE 3 CLC 1 CLD 1 CLI 7 CLTS 5 CMC 1 CMP AL,imm8 1 CMP AX,imm16 1 CMP EAX,imm32 1 CMP r/m8,imm8 1/3 CMP r/m16,imm8 1/3 CMP r/m32,imm8 1/3 CMP r/m16,imm16 1/3 CMP r/m32,imm32 1/3 CMP r/m8,r8 1/3 CMP r/m16,r16 1/3 CMP r/m32,r32 1/3 CMP r8,r/m8 1/3 CMP r16,r/m16 1/3 CMP r32,r/m32 1/3 CMPSB 7 CMPSW 7 CMPSD 7 CMPXCHG r/m8,r8 5/7 CMPXCHG r/m16,r16 5/7 CMPXCHG r/m32,r32 5/7 CWD 1 CDQ 1 DAA 4 DAS 4 DEC r/m8 1/3 DEC r/m16 1/3 DEC r/m32 1/3 DEC r16 1 DEC r32 1 DIV r/m8 14/15 DIV r/m16 22/23 DIV r/m32 38/39 ESC imm4,r/m n/a ENTER imm16,0 7 ENTER imm16,1 10 ENTER imm16,imm8 6+4*level HLT 3 IDIV r/m8 19/20 IDIV r/m16 27/28 IDIV r/m32 43/44 IMUL r/m8 3/5 IMUL r/m16 3/5 IMUL r/m32 7/9 IMUL r16,r/m16 3/5 IMUL r32,r/m32 7/9 IMUL r16,imm8 3/5 IMUL r32,imm8 7/9 IMUL r16,imm16 3/5 IMUL r32,imm32 7/9 IMUL r16,r/m16,imm8 3/5 IMUL r32,r/m32,imm8 7/9 IMUL r16,r/m16,imm16 3/5 IMUL r32,r/m32,imm32 7/9 IN AL,imm8 16 IN AL,imm8 (PM, CPL <= IOPL) 6 IN AL,imm8 (VM) 19 IN AX,imm8 16 IN AX,imm8 (PM, CPL <= IOPL) 6 IN AX,imm8 (VM) 19 IN EAX,imm8 16 IN EAX,imm8 (PM, CPL <= IOPL) 6 IN EAX,imm8 (VM) 19 IN AL,DX 16 IN AL,DX (PM, CPL <= IOPL) 6 IN AL,DX (VM) 19 IN AX,DX 16 IN AX,DX (PM, CPL <= IOPL) 6 IN AX,DX (VM) 19 IN EAX,DX 16 IN EAX,DX (PM, CPL <= IOPL) 6 IN EAX,DX (VM) 19 INC r/m8 1/3 INC r/m16 1/3 INC r/m32 1/3 INC r16 1 INC r32 1 INSB 20 INSW 20 INSD 20 INT 3 14 INT 3 (PM, same privilege) 49 INT 3 (PM, more privelege) 77 INT imm8 14 INT imm8 (PM, same privilege) 49 INT imm8 (PM, more privelege) 77 INTO 1 or 15 INTO (PM, same privilege) 1 or 49 INTO (PM, more privelege) 1 or 77 INVD 4 INVLPG m 4 IRET 14 IRET (PM, to same privilege) 31 IRET (PM, to lesser privilege) 66 IRETD 14 IRETD (PM, to same privilege) 31 IRETD (PM, to lesser privilege) 66 Jcc rel8 1 or 4 Jcc rel16 1 or 4 Jcc rel32 1 or 4 JCXZ rel8 3 or 7 JECXZ rel8 3 or 7 JMP rel8 4 JMP rel16 4 JMP r/m16 6/8 JMP ptr16:16 9 JMP ptr16:16 (PM, direct segment) 26 JMP ptr16:16 (PM, via call gate, same pr37 JMP m16:16 11 JMP m16:16 (PM, direct segment) 30 JMP m16:16 (PM, via call gate, same priv39 JMP rel32 4 JMP r/m32 6/8 JMP ptr16:32 9 JMP ptr16:32 (PM, direct segment) 26 JMP ptr16:32 (PM, via call gate, same pr37 JMP m16:32 11 JMP m16:32 (PM, direct segment) 30 JMP m16:32 (PM, via call gate, same priv39 LAHF 2 LAR r16,r/m16 11/12 LAR r32,r/m32 11/12 LDS r16,m16:16 6 LDS r32,m16:32 6 LDS r16,m16:16 (PM) 19 LDS r32,m16:32 (PM) 19 LSS r16,m16:16 6 LSS r32,m16:32 6 LSS r16,m16:16 (PM) 19 LSS r32,m16:32 (PM) 19 LES r16,m16:16 6 LES r32,m16:32 6 LES r16,m16:16 (PM) 19 LES r32,m16:32 (PM) 19 LFS r16,m16:16 6 LFS r32,m16:32 6 LFS r16,m16:16 (PM) 19 LFS r32,m16:32 (PM) 19 LGS r16,m16:16 6 LGS r32,m16:32 6 LGS r16,m16:16 (PM) 19 LGS r32,m16:32 (PM) 19 LEA r16,m 2 (w/o index)/3(with index) LEA r32,m 2 (w/o index)/3(with index) LEAVE 3 LGDT m16&32 9 LIDT m16&32 9 LLDT r/m16 16/17 LMSW r/m16 5 LODSB 4 LODSW 4 LODSD 4 LOOP rel8 3 or 7 LOOPE rel8 3 or 7 LOOPNE rel8 3 or 7 LSL r16,r/m16 14/15 LSL r32,r/m32 14/15 LTR r/m16 16/17 MOV r/m8,r8 1/2 MOV r/m16,r16 1/2 MOV r/m32,r32 1/2 MOV r8,r/m8 1/2 MOV r16,r/m16 1/2 MOV r32,r/m32 1/2 MOV r/m16,sreg 1/2 MOV sreg,r/m16 2/3 MOV sreg,r/m16 (PM) 15/16 MOV AL,moffs8 2 MOV AX,moffs16 2 MOV EAX,moffs32 2 MOV moffs8,AL 1/2 MOV moffs16,AX 1/2 MOV moffs32,EAX 1/2 MOV r8,imm8 1 MOV r16,imm16 1 MOV r32,imm32 1 MOV r/m8,imm8 1/2 MOV r/m16,imm16 1/2 MOV r/m32,imm32 1/2 MOV CR0,r32 11 MOV CR2,r32 3 MOV CR3,r32 3 MOV r32,CRi 1 (if CR0)/3 (if CR2,CR3) MOV r32,DR0-DR3 3 MOV r32,DR4-DR5 3 MOV r32,DR6-DR7 3 MOV DR0-DR3,r32 1 MOV DR4-DR5,r32 1 MOV DR6-DR7,r32 1 MOV r32,TR4-TR7 3 MOV r32,TR3 5 MOV TR3,r32 5 MOV TR4-TR7,r32 1 MOVSB 5 MOVSW 5 MOVSD 5 MOVSX r16,r/m8 1/3 MOVSX r32,r/m8 1/3 MOVSX r32,r/m16 1/3 MOVZX r16,r/m8 2/3 MOVZX r32,r/m8 2/3 MOVZX r32,r/m16 2/3 MUL r/m8 3/5 MUL r/m16 3/5 MUL r/m32 7/9 NEG r/m8 1/3 NEG r/m16 1/3 NEG r/m32 1/3 NOP 1 NOT r/m8 1/3 NOT r/m16 1/3 NOT r/m32 1/3 OR AL,imm8 1 OR AX,imm16 1 OR EAX,imm32 1 OR r/m8,imm8 1/3 OR r/m16,imm8 1/3 OR r/m32,imm8 1/3 OR r/m16,imm16 1/3 OR r/m32,imm32 1/3 OR r/m8,r8 1/3 OR r/m16,r16 1/3 OR r/m32,r32 1/3 OR r8,r/m8 1/3 OR r16,r/m16 1/3 OR r32,r/m32 1/3 OUT imm8,AL 18 OUT imm8,AL (PM, CPL <= IOPL) 4 OUT imm8,AL (VM) 17 OUT imm8,AX 18 OUT imm8,AX (PM, CPL <= IOPL) 4 OUT imm8,AX (VM) 17 OUT imm8,EAX 18 OUT imm8,EAX (PM, CPL <= IOPL) 4 OUT imm8,EAX (VM) 17 OUT DX,AL 18 OUT DX,AL (PM, CPL <= IOPL) 4 OUT DX,AL (VM) 17 OUT DX,AX 18 OUT DX,AX (PM, CPL <= IOPL) 4 OUT DX,AX (VM) 17 OUT DX,EAX 18 OUT DX,EAX (PM, CPL <= IOPL) 4 OUT DX,EAX (VM) 17 OUTSB 20 OUTSW 20 OUTSD 20 POP m16 5 POP m32 5 POP r16 3 POP r32 3 POP sreg 4 POP sreg (PM) 18 POPA 18 POPAD 18 POPF 4 POPF (PM) 4 POPF (VM) 4 POPFD 4 POPFD (PM) 4 POPFD (VM) 4 PUSH r/m16 2/4 PUSH r/m32 2/4 PUSH r16 2 PUSH r32 2 PUSH imm8 2 PUSH imm16 2 PUSH imm32 2 PUSH sreg 2 PUSHA 17 PUSHAD 17 PUSHF 2 PUSHF (PM) 2 PUSHF (VM) 2 PUSHFD 2 PUSHFD (PM) 2 PUSHFD (VM) 2 RCL r/m8,1 9/9 RCL r/m16,1 9/9 RCL r/m32,1 9/9 RCL r/m8,CL 9/9 RCL r/m16,CL 9/9 RCL r/m32,CL 9/9 RCL r/m8,imm8 9/9 RCL r/m16,imm8 9/9 RCL r/m32,imm8 9/9 RCR r/m8,1 9/9 RCR r/m16,1 9/9 RCR r/m32,1 9/9 RCR r/m8,CL 9/9 RCR r/m16,CL 9/9 RCR r/m32,CL 9/9 RCR r/m8,imm8 9/9 RCR r/m16,imm8 9/9 RCR r/m32,imm8 9/9 ROL r/m8,1 2/4 ROL r/m16,1 2/4 ROL r/m32,1 2/4 ROL r/m8,CL 3/5 ROL r/m16,CL 3/5 ROL r/m32,CL 3/5 ROL r/m8,imm8 2/4 ROL r/m16,imm8 2/4 ROL r/m32,imm8 2/4 ROR r/m8,1 2/4 ROR r/m16,1 2/4 ROR r/m32,1 2/4 ROR r/m8,CL 3/5 ROR r/m16,CL 3/5 ROR r/m32,CL 3/5 ROR r/m8,imm8 2/4 ROR r/m16,imm8 2/4 ROR r/m32,imm8 2/4 RET (near) 10 RET (far) 13 RET (PM, far, same PL) 26 RET (PM, far, different PL) 61 RET imm16 (near) 10 RET imm16 (far) 13 RET imm16 (PM, far, same PL) 26 RET imm16 (PM, far, different PL) 61 RSDC m80,sreg 10 RSLDT m80 10 RSM 76 RSTS m80 10 SAHF 2 SAL r/m8,1 2/4 SAL r/m16,1 2/4 SAL r/m32,1 2/4 SAL r/m8,CL 3/5 SAL r/m16,CL 3/5 SAL r/m32,CL 3/5 SAL r/m8,imm8 2/4 SAL r/m16,imm8 2/4 SAL r/m32,imm8 2/4 SAR r/m8,1 2/4 SAR r/m16,1 2/4 SAR r/m32,1 2/4 SAR r/m8,CL 3/5 SAR r/m16,CL 3/5 SAR r/m32,CL 3/5 SAR r/m8,imm8 2/4 SAR r/m16,imm8 2/4 SAR r/m32,imm8 2/4 SHL r/m8,1 1/3 SHL r/m16,1 1/3 SHL r/m32,1 1/3 SHL r/m8,CL 2/4 SHL r/m16,CL 2/4 SHL r/m32,CL 2/4 SHL r/m8,imm8 1/3 SHL r/m16,imm8 1/3 SHL r/m32,imm8 1/3 SHR r/m8,1 1/3 SHR r/m16,1 1/3 SHR r/m32,1 1/3 SHR r/m8,CL 2/4 SHR r/m16,CL 2/4 SHR r/m32,CL 2/4 SHR r/m8,imm8 1/3 SHR r/m16,imm8 1/3 SHR r/m32,imm8 1/3 SBB AL,imm8 1 SBB AX,imm16 1 SBB EAX,imm32 1 SBB r/m8,imm8 1/3 SBB r/m16,imm8 1/3 SBB r/m32,imm8 1/3 SBB r/m16,imm16 1/3 SBB r/m32,imm32 1/3 SBB r/m8,r8 1/3 SBB r/m16,r16 1/3 SBB r/m32,r32 1/3 SBB r8,r/m8 1/3 SBB r16,r/m16 1/3 SBB r32,r/m32 1/3 SCASB 5 SCASW 5 SCASD 5 SETALC n/a SETcc r/m8 2/2 SGDT m16&32 6 SIDT m16&32 6 SHLD r/m16,r16,imm8 1/3 SHLD r/m32,r32,imm8 1/3 SHLD r/m16,r16,CL 3/5 SHLD r/m32,r32,CL 3/5 SHRD r/m16,r16,imm8 1/3 SHRD r/m32,r32,imm8 1/3 SHRD r/m16,r16,CL 3/5 SHRD r/m32,r32,CL 3/5 SLDT r/m16 1/2 SLDT r/m32 1/2 SMINT 24 SMSW r/m16 1/2 STC 1 STD 1 STI 7 STOSB 3 STOSW 3 STOSD 3 STR r/m16 1/2 SUB AL,imm8 1 SUB AX,imm16 1 SUB EAX,imm32 1 SUB r/m8,imm8 1/3 SUB r/m16,imm8 1/3 SUB r/m32,imm8 1/3 SUB r/m16,imm16 1/3 SUB r/m32,imm32 1/3 SUB r/m8,r8 1/3 SUB r/m16,r16 1/3 SUB r/m32,r32 1/3 SUB r8,r/m8 1/3 SUB r16,r/m16 1/3 SUB r32,r/m32 1/3 SVDC sreg,m80 18 SVLDT m80 18 SVTS m80 18 TEST AL,imm8 1 TEST AX,imm16 1 TEST EAX,imm32 1 TEST r/m8,imm8 1/3 TEST r/m16,imm16 1/3 TEST r/m32,imm32 1/3 TEST r/m8,r8 1/3 TEST r/m16,r16 1/3 TEST r/m32,r32 1/3 UMOV r8,r/m8 n/a UMOV r16,r/m16 n/a UMOV r32,r/m32 n/a UMOV r/m8,r8 n/a UMOV r/m16,r16 n/a UMOV r/m32,r32 n/a VERR r/m16 9/10 VERW r/m16 9/10 WAIT 5 WBINVD 4 XADD r/m8,r8 3/6 XADD r/m16,r16 3/6 XADD r/m32,r32 3/6 XCHG AX,r16 3 XCHG EAX,r32 3 XCHG r/m8,r8 3/4 XCHG r/m16,r16 3/4 XCHG r/m32,r32 3/4 XLAT 3 XOR AL,imm8 1 XOR AX,imm16 1 XOR EAX,imm32 1 XOR r/m8,imm8 1/3 XOR r/m16,imm8 1/3 XOR r/m32,imm8 1/3 XOR r/m16,imm16 1/3 XOR r/m32,imm32 1/3 XOR r/m8,r8 1/3 XOR r/m16,r16 1/3 XOR r/m32,r32 1/3 XOR r8,r/m8 1/3 XOR r16,r/m16 1/3 XOR r32,r/m32 1/3 (END)Top
AAA 3 AAD 10 AAD imm8 n/a AAM 18 AAM imm8 n/a AAS 3 ADC AL,imm8 1 ADC AX,imm16 1 ADC EAX,imm32 1 ADC r/m8,imm8 1/3 ADC r/m16,imm8 1/3 ADC r/m32,imm8 1/3 ADC r/m16,imm16 1/3 ADC r/m32,imm32 1/3 ADC r/m8,r8 1/3 ADC r/m16,r16 1/3 ADC r/m32,r32 1/3 ADC r8,r/m8 1/2 ADC r16,r/m16 1/2 ADC r32,r/m32 1/2 ADD AL,imm8 1 ADD AX,imm16 1 ADD EAX,imm32 1 ADD r/m8,imm8 1/3 ADD r/m16,imm8 1/3 ADD r/m32,imm8 1/3 ADD r/m16,imm16 1/3 ADD r/m32,imm32 1/3 ADD r/m8,r8 1/3 ADD r/m16,r16 1/3 ADD r/m32,r32 1/3 ADD r8,r/m8 1/2 ADD r16,r/m16 1/2 ADD r32,r/m32 1/2 AND AL,imm8 1 AND AX,imm16 1 AND EAX,imm32 1 AND r/m8,imm8 1/3 AND r/m16,imm8 1/3 AND r/m32,imm8 1/3 AND r/m16,imm16 1/3 AND r/m32,imm32 1/3 AND r/m8,r8 1/3 AND r/m16,r16 1/3 AND r/m32,r32 1/3 AND r8,r/m8 1/2 AND r16,r/m16 1/2 AND r32,r/m32 1/2 ARPL r/m16,r16 f BOUND r16,m16&16 8/int+32 BOUND r32,m32&32 f BSF r16,r/m16 6-34/6-35 BSF r32,r/m32 6-42/6-43 BSR r16,r/m16 7-39/7-40 BSR r32,r/m32 7-71/7-72 BSWAP r32 1 BT r/m16,r16 4/9 BT r/m32,r32 4/9 BT r/m16,imm8 4 BT r/m16,imm8 4 BTC r/m16,r16 7/13 BTC r/m32,r32 7/13 BTC r/m16,imm8 7/8 BTC r/m16,imm8 7/8 BTR r/m16,r16 7/13 BTR r/m32,r32 7/13 BTR r/m16,imm8 7/8 BTR r/m16,imm8 7/8 BTS r/m16,r16 7/13 BTS r/m32,r32 7/13 BTS r/m16,imm8 7/8 BTS r/m16,imm8 7/8 CALL rel16 1 CALL r/m16 2 CALL ptr16:16 4 CALL ptr16:16 (PM, direct segment) f CALL ptr16:16 (PM, via call gate, same p22 CALL ptr16:16 (PM, via call gate, more p44 CALL ptr16:16 (PM, via call gate, more p45+2*x CALL m16:16 5 CALL m16:16 (PM, direct segment) f CALL m16:16 (PM, via gate, same priveleg22 CALL m16:16 (PM, via gate, more priveleg44 CALL m16:16 (PM, via gate, more priveleg45+2*x CALL rel32 1 CALL r/m32 2 CALL ptr16:32 4 CALL ptr16:32 (PM, direct segment) f CALL ptr16:32 (PM, via gate, same privel22 CALL ptr16:32 (PM, via gate, more privel44 CALL ptr16:32 (PM, via gate, more privel45+2*x CALL m16:32 5 CALL m16:32 (PM, direct segment) f CALL m16:32 (PM, via gate, same priveleg22 CALL m16:32 (PM, via gate, more priveleg44 CALL m16:32 (PM, via gate, more priveleg45+2*x CBW 3 CWDE 3 CLC 2 CLD 2 CLI 7 CLTS 10 CMC 2 CMOVcc r16,r/m16 f CMOVcc r32,r/m32 f CMP AL,imm8 1 CMP AX,imm16 1 CMP EAX,imm32 1 CMP r/m8,imm8 1/2 CMP r/m16,imm8 1/2 CMP r/m32,imm8 1/2 CMP r/m16,imm16 1/2 CMP r/m32,imm32 1/2 CMP r/m8,r8 1/2 CMP r/m16,r16 1/2 CMP r/m32,r32 1/2 CMP r8,r/m8 1/2 CMP r16,r/m16 1/2 CMP r32,r/m32 1/2 CMPSB 5 CMPSW 5 CMPSD 5 CMPXCHG r/m8,r8 6 CMPXCHG r/m16,r16 6 CMPXCHG r/m32,r32 6 CMPXCHG8B r/m32 10 CPUID 14 CWD 2 CDQ 2 DAA 3 DAS 3 DEC r/m8 1/3 DEC r/m16 1/3 DEC r/m32 1/3 DEC r16 1 DEC r32 1 DIV r/m8 17 DIV r/m16 25 DIV r/m32 41 ESC imm4,r/m f ENTER imm16,0 11 ENTER imm16,1 15 ENTER imm16,imm8 15+2*n HLT imfinity IBTS r/m16,AX,CL,r16 None IBTS r/m32,EAX,CL,r32 f IDIV r/m8 22 IDIV r/m16 30 IDIV r/m32 46 IMUL r/m8 11 IMUL r/m16 11 IMUL r/m32 10 IMUL r16,r/m16 10 IMUL r32,r/m32 10 IMUL r16,imm8 10 IMUL r32,imm8 10 IMUL r16,imm16 10 IMUL r32,imm32 10 IMUL r16,r/m16,imm8 10 IMUL r32,r/m32,imm8 10 IMUL r16,r/m16,imm16 10 IMUL r32,r/m32,imm32 10 IN AL,imm8 7 IN AL,imm8 (PM, CPL <= IOPL) 4/21 IN AL,imm8 (VM) 19 IN AX,imm8 7 IN AX,imm8 (PM, CPL <= IOPL) 4/21 IN AX,imm8 (VM) 19 IN EAX,imm8 7 IN EAX,imm8 (PM, CPL <= IOPL) 4/21 IN EAX,imm8 (VM) 19 IN AL,DX 7 IN AL,DX (PM, CPL <= IOPL) 4/21 IN AL,DX (VM) 19 IN AX,DX 7 IN AX,DX (PM, CPL <= IOPL) 4/21 IN AX,DX (VM) 19 IN EAX,DX 7 IN EAX,DX (PM, CPL <= IOPL) 4/21 IN EAX,DX (VM) 19 INC r/m8 1/3 INC r/m16 1/3 INC r/m32 1/3 INC r16 1 INC r32 1 INSB 9 INSW 9 INSD 9 INT 3 13 INT 3 (PM, same privilege) 27 INT 3 (PM, more privelege) 44 INT imm8 16 INT imm8 (PM, same privilege) 31 INT imm8 (PM, more privelege) 48 INTO 4/13 INTO (PM, same privilege) 4/27 INTO (PM, more privelege) 4/44 INVD 15 INVLPG m 25 IRET 10 IRET (PM, to same privilege) 10 IRET (PM, to lesser privilege) 27 IRETD 10 IRETD (PM, to same privilege) 10 IRETD (PM, to lesser privilege) 27 Jcc rel8 1 Jcc rel16 1 Jcc rel32 1 JCXZ rel8 6,5 JECXZ rel8 6,5 JMP rel8 1 JMP rel16 1 JMP r/m16 2 JMP ptr16:16 3 JMP ptr16:16 (PM, direct segment) 3 JMP ptr16:16 (PM, via call gate, same pr18 JMP m16:16 4 JMP m16:16 (PM, direct segment) 4 JMP m16:16 (PM, via call gate, same priv18 JMP rel32 1 JMP r/m32 2 JMP ptr16:32 3 JMP ptr16:32 (PM, direct segment) 3 JMP ptr16:32 (PM, via call gate, same pr18 JMP m16:32 4 JMP m16:32 (PM, direct segment) 4 JMP m16:32 (PM, via call gate, same priv18 LAHF 2 LAR r16,r/m16 8 LAR r32,r/m32 8 LDS r16,m16:16 4 LDS r32,m16:32 4 LDS r16,m16:16 (PM) f LDS r32,m16:32 (PM) f LSS r16,m16:16 4 LSS r32,m16:32 4 LSS r16,m16:16 (PM) 8 LSS r32,m16:32 (PM) 8 LES r16,m16:16 4 LES r32,m16:32 4 LES r16,m16:16 (PM) f LES r32,m16:32 (PM) f LFS r16,m16:16 4 LFS r32,m16:32 4 LFS r16,m16:16 (PM) f LFS r32,m16:32 (PM) f LGS r16,m16:16 4 LGS r32,m16:32 4 LGS r16,m16:16 (PM) f LGS r32,m16:32 (PM) f LEA r16,m 1 LEA r32,m 1 LEAVE 3 LGDT m16&32 6 LIDT m16&32 6 LLDT r/m16 9 LMSW r/m16 8 LOADALL f LODSB 2 LODSW 2 LODSD 2 LOOP rel8 5/6 LOOPE rel8 7/8 LOOPNE rel8 7/8 LSL r16,r/m16 8 LSL r32,r/m32 8 LTR r/m16 10 MOV r/m8,r8 1 MOV r/m16,r16 1 MOV r/m32,r32 1 MOV r8,r/m8 1 MOV r16,r/m16 1 MOV r32,r/m32 1 MOV r/m16,sreg 1 MOV sreg,r/m16 2/3 MOV sreg,r/m16 (PM) f MOV AL,moffs8 1 MOV AX,moffs16 1 MOV EAX,moffs32 1 MOV moffs8,AL 1 MOV moffs16,AX 1 MOV moffs32,EAX 1 MOV r8,imm8 1 MOV r16,imm16 1 MOV r32,imm32 1 MOV r/m8,imm8 1 MOV r/m16,imm16 1 MOV r/m32,imm32 1 MOV CR0,r32 22 MOV CR2,r32 12/21,46 MOV CR3,r32 12/21,46 MOV CR4,r32 14 MOV r32,CRi 4 MOV r32,DR0-DR3 11 MOV r32,DR4-DR5 11 MOV r32,DR6-DR7 11 MOV DR0-DR3,r32 11 MOV DR4-DR5,r32 12 MOV DR6-DR7,r32 11 MOV r32,TR4-TR7 None MOV r32,TR3 None MOV TR3,r32 None MOV TR4-TR7,r32 None MOVSB 4 MOVSW 4 MOVSD 4 MOVSX r16,r/m8 3 MOVSX r32,r/m8 3 MOVSX r32,r/m16 3 MOVZX r16,r/m8 3 MOVZX r32,r/m8 3 MOVZX r32,r/m16 3 MUL r/m8 11 MUL r/m16 11 MUL r/m32 10 NEG r/m8 1/3 NEG r/m16 1/3 NEG r/m32 1/3 NOP 1 NOT r/m8 1/3 NOT r/m16 1/3 NOT r/m32 1/3 OR AL,imm8 1 OR AX,imm16 1 OR EAX,imm32 1 OR r/m8,imm8 1/3 OR r/m16,imm8 1/3 OR r/m32,imm8 1/3 OR r/m16,imm16 1/3 OR r/m32,imm32 1/3 OR r/m8,r8 1/3 OR r/m16,r16 1/3 OR r/m32,r32 1/3 OR r8,r/m8 1/2 OR r16,r/m16 1/2 OR r32,r/m32 1/2 OUT imm8,AL 12 OUT imm8,AL (PM, CPL <= IOPL) 9/25 OUT imm8,AL (VM) 24 OUT imm8,AX 12 OUT imm8,AX (PM, CPL <= IOPL) 9/25 OUT imm8,AX (VM) 24 OUT imm8,EAX 12 OUT imm8,EAX (PM, CPL <= IOPL) 9/25 OUT imm8,EAX (VM) 24 OUT DX,AL 12 OUT DX,AL (PM, CPL <= IOPL) 9/25 OUT DX,AL (VM) 24 OUT DX,AX 12 OUT DX,AX (PM, CPL <= IOPL) 9/25 OUT DX,AX (VM) 24 OUT DX,EAX 12 OUT DX,EAX (PM, CPL <= IOPL) 9/25 OUT DX,EAX (VM) 24 OUTSB 13 OUTSW 13 OUTSD 13 POP m16 3 POP m32 3 POP r16 1 POP r32 1 POP sreg 3 POP sreg (PM) f POPA 5 POPAD 5 POPF f POPF (PM) 4 POPF (VM) 6 POPFD f POPFD (PM) 4 POPFD (VM) 6 PUSH r/m16 2 PUSH r/m32 2 PUSH r16 1 PUSH r32 1 PUSH imm8 1 PUSH imm16 1 PUSH imm32 1 PUSH sreg 1 PUSHA 5 PUSHAD 5 PUSHF f PUSHF (PM) 3 PUSHF (VM) 4 PUSHFD f PUSHFD (PM) 3 PUSHFD (VM) 4 RCL r/m8,1 1/3 RCL r/m16,1 1/3 RCL r/m32,1 1/3 RCL r/m8,CL 7-24/9-26 RCL r/m16,CL 7-24/9-26 RCL r/m32,CL 7-24/9-26 RCL r/m8,imm8 8-25/10-27 RCL r/m16,imm8 8-25/10-27 RCL r/m32,imm8 8-25/10-27 RCR r/m8,1 1/3 RCR r/m16,1 1/3 RCR r/m32,1 1/3 RCR r/m8,CL 7-24/9-26 RCR r/m16,CL 7-24/9-26 RCR r/m32,CL 7-24/9-26 RCR r/m8,imm8 8-25/10-27 RCR r/m16,imm8 8-25/10-27 RCR r/m32,imm8 8-25/10-27 ROL r/m8,1 1/3 ROL r/m16,1 1/3 ROL r/m32,1 1/3 ROL r/m8,CL 4 ROL r/m16,CL 4 ROL r/m32,CL 4 ROL r/m8,imm8 1/3 ROL r/m16,imm8 1/3 ROL r/m32,imm8 1/3 ROR r/m8,1 1/3 ROR r/m16,1 1/3 ROR r/m32,1 1/3 ROR r/m8,CL 4 ROR r/m16,CL 4 ROR r/m32,CL 4 ROR r/m8,imm8 1/3 ROR r/m16,imm8 1/3 ROR r/m32,imm8 1/3 RDMSR 20-24 RDTSC f RET (near) 3 RET (far) 4 RET (PM, far, same PL) 4 RET (PM, far, different PL) 23 RET imm16 (near) 4 RET imm16 (far) 4 RET imm16 (PM, far, same PL) 4 RET imm16 (PM, far, different PL) 23 RSDC m80,sreg f RSLDT m80 f RSM 83 RSTS m80 f SAHF 2 SAL r/m8,1 1/3 SAL r/m16,1 1/3 SAL r/m32,1 1/3 SAL r/m8,CL 4 SAL r/m16,CL 4 SAL r/m32,CL 4 SAL r/m8,imm8 1/3 SAL r/m16,imm8 1/3 SAL r/m32,imm8 1/3 SAR r/m8,1 1/3 SAR r/m16,1 1/3 SAR r/m32,1 1/3 SAR r/m8,CL 4 SAR r/m16,CL 4 SAR r/m32,CL 4 SAR r/m8,imm8 1/3 SAR r/m16,imm8 1/3 SAR r/m32,imm8 1/3 SHL r/m8,1 1/3 SHL r/m16,1 1/3 SHL r/m32,1 1/3 SHL r/m8,CL 4 SHL r/m16,CL 4 SHL r/m32,CL 4 SHL r/m8,imm8 1/3 SHL r/m16,imm8 1/3 SHL r/m32,imm8 1/3 SHR r/m8,1 1/3 SHR r/m16,1 1/3 SHR r/m32,1 1/3 SHR r/m8,CL 4 SHR r/m16,CL 4 SHR r/m32,CL 4 SHR r/m8,imm8 1/3 SHR r/m16,imm8 1/3 SHR r/m32,imm8 1/3 SBB AL,imm8 1 SBB AX,imm16 1 SBB EAX,imm32 1 SBB r/m8,imm8 1/3 SBB r/m16,imm8 1/3 SBB r/m32,imm8 1/3 SBB r/m16,imm16 1/3 SBB r/m32,imm32 1/3 SBB r/m8,r8 1/3 SBB r/m16,r16 1/3 SBB r/m32,r32 1/3 SBB r8,r/m8 1/2 SBB r16,r/m16 1/2 SBB r32,r/m32 1/2 SCASB 4 SCASW 4 SCASD 4 SETALC f SETcc r/m8 1/2 SGDT m16&32 4 SIDT m16&32 4 SHLD r/m16,r16,imm8 4 SHLD r/m32,r32,imm8 4 SHLD r/m16,r16,CL 4/5 SHLD r/m32,r32,CL 4/5 SHRD r/m16,r16,imm8 4 SHRD r/m32,r32,imm8 4 SHRD r/m16,r16,CL 4/5 SHRD r/m32,r32,CL 4/5 SLDT r/m16 2 SLDT r/m32 f SMINT f SMSW r/m16 4 STC 2 STD 2 STI 7 STOSB 3 STOSW 3 STOSD 3 STR r/m16 2 SUB AL,imm8 1 SUB AX,imm16 1 SUB EAX,imm32 1 SUB r/m8,imm8 1/3 SUB r/m16,imm8 1/3 SUB r/m32,imm8 1/3 SUB r/m16,imm16 1/3 SUB r/m32,imm32 1/3 SUB r/m8,r8 1/3 SUB r/m16,r16 1/3 SUB r/m32,r32 1/3 SUB r8,r/m8 1/2 SUB r16,r/m16 1/2 SUB r32,r/m32 1/2 SVDC sreg,m80 f SVLDT m80 f SVTS m80 f TEST AL,imm8 1 TEST AX,imm16 1 TEST EAX,imm32 1 TEST r/m8,imm8 1/2 TEST r/m16,imm16 1/2 TEST r/m32,imm32 1/2 TEST r/m8,r8 1/2 TEST r/m16,r16 1/2 TEST r/m32,r32 1/2 UMOV r8,r/m8 f UMOV r16,r/m16 f UMOV r32,r/m32 f UMOV r/m8,r8 f UMOV r/m16,r16 f UMOV r/m32,r32 f VERR r/m16 7 VERW r/m16 7 WAIT 1 WBINVD 2000+ WRMSR 30-45 XADD r/m8,r8 3/4 XADD r/m16,r16 3/4 XADD r/m32,r32 3/4 XCHG AX,r16 2 XCHG EAX,r32 2 XCHG r/m8,r8 3 XCHG r/m16,r16 3 XCHG r/m32,r32 3 XLAT 4 XOR AL,imm8 1 XOR AX,imm16 1 XOR EAX,imm32 1 XOR r/m8,imm8 1/3 XOR r/m16,imm8 1/3 XOR r/m32,imm8 1/3 XOR r/m16,imm16 1/3 XOR r/m32,imm32 1/3 XOR r/m8,r8 1/3 XOR r/m16,r16 1/3 XOR r/m32,r32 1/3 XOR r8,r/m8 1/2 XOR r16,r/m16 1/2 XOR r32,r/m32 1/2 (END)Top
AAA 7 AAD 7 AAD imm8 7 AAM 13-21 AAM imm8 13-21?? AAS 7 ADC AL,imm8 1 ADC AX,imm16 1 ADC EAX,imm32 1 ADC r/m8,imm8 1 ADC r/m16,imm8 1 ADC r/m32,imm8 1 ADC r/m16,imm16 1 ADC r/m32,imm32 1 ADC r/m8,r8 1 ADC r/m16,r16 1 ADC r/m32,r32 1 ADC r8,r/m8 1 ADC r16,r/m16 1 ADC r32,r/m32 1 ADD AL,imm8 1 ADD AX,imm16 1 ADD EAX,imm32 1 ADD r/m8,imm8 1 ADD r/m16,imm8 1 ADD r/m32,imm8 1 ADD r/m16,imm16 1 ADD r/m32,imm32 1 ADD r/m8,r8 1 ADD r/m16,r16 1 ADD r/m32,r32 1 ADD r8,r/m8 1 ADD r16,r/m16 1 ADD r32,r/m32 1 AND AL,imm8 1 AND AX,imm16 1 AND EAX,imm32 1 AND r/m8,imm8 1 AND r/m16,imm8 1 AND r/m32,imm8 1 AND r/m16,imm16 1 AND r/m32,imm32 1 AND r/m8,r8 1 AND r/m16,r16 1 AND r/m32,r32 1 AND r8,r/m8 1 AND r16,r/m16 1 AND r32,r/m32 1 ARPL r/m16,r16 9 BOUND r16,m16&16 11 or 20 BOUND r32,m32&32 11 or 20 BSF r16,r/m16 3 BSF r32,r/m32 3 BSR r16,r/m16 3 BSR r32,r/m32 3 BSWAP r32 4 BT r/m16,r16 5/6 BT r/m32,r32 5/6 BT r/m16,imm8 2 BT r/m16,imm8 2 BTC r/m16,r16 5/6 BTC r/m32,r32 5/6 BTC r/m16,imm8 3 BTC r/m16,imm8 3 BTR r/m16,r16 5/6 BTR r/m32,r32 5/6 BTR r/m16,imm8 3 BTR r/m16,imm8 3 BTS r/m16,r16 5/6 BTS r/m32,r32 5/6 BTS r/m16,imm8 3 BTS r/m16,imm8 3 CALL rel16 1 CALL r/m16 1/3 CALL ptr16:16 3 CALL ptr16:16 (PM, direct segment) 4 CALL ptr16:16 (PM, via call gate, same p15 CALL ptr16:16 (PM, via call gate, more p26 CALL ptr16:16 (PM, via call gate, more p35+2*param CALL m16:16 5 CALL m16:16 (PM, direct segment) 8 CALL m16:16 (PM, via gate, same priveleg20 CALL m16:16 (PM, via gate, more priveleg31 CALL m16:16 (PM, via gate, more priveleg40+2*param CALL rel32 1 CALL r/m32 1/3 CALL ptr16:32 3 CALL ptr16:32 (PM, direct segment) 4 CALL ptr16:32 (PM, via gate, same privel15 CALL ptr16:32 (PM, via gate, more privel26 CALL ptr16:32 (PM, via gate, more privel35+2*param CALL m16:32 5 CALL m16:32 (PM, direct segment) 8 CALL m16:32 (PM, via gate, same priveleg20 CALL m16:32 (PM, via gate, more priveleg31 CALL m16:32 (PM, via gate, more priveleg40+2*param CBW 3 CWDE 2 CLC 1 CLD 7 CLI 7 CLTS 10 CMC 2 CMP AL,imm8 1 CMP AX,imm16 1 CMP EAX,imm32 1 CMP r/m8,imm8 1 CMP r/m16,imm8 1 CMP r/m32,imm8 1 CMP r/m16,imm16 1 CMP r/m32,imm32 1 CMP r/m8,r8 1 CMP r/m16,r16 1 CMP r/m32,r32 1 CMP r8,r/m8 1 CMP r16,r/m16 1 CMP r32,r/m32 1 CMPSB 5 CMPSW 5 CMPSD 5 CMPXCHG r/m8,r8 11 CMPXCHG r/m16,r16 11 CMPXCHG r/m32,r32 11 CPUID 12 CWD 2 CDQ 2 DAA 9 DAS 9 DEC r/m8 1 DEC r/m16 1 DEC r/m32 1 DEC r16 1 DEC r32 1 DIV r/m8 13-17 DIV r/m16 13-25 DIV r/m32 13-41 ENTER imm16,0 10 ENTER imm16,1 13 ENTER imm16,imm8 10+level*3 HLT 5 IDIV r/m8 16-20 IDIV r/m16 16-28 IDIV r/m32 17-45 IMUL r/m8 4 IMUL r/m16 4 IMUL r/m32 10 IMUL r16,r/m16 4 IMUL r32,r/m32 10 IMUL r16,imm8 ?? IMUL r32,imm8 ?? IMUL r16,imm16 ?? IMUL r32,imm32 ?? IMUL r16,r/m16,imm8 5 IMUL r32,r/m32,imm8 11 IMUL r16,r/m16,imm16 5 IMUL r32,r/m32,imm32 11 IN AL,imm8 14 IN AL,imm8 (PM, CPL <= IOPL) 14 IN AL,imm8 (VM) 28 IN AX,imm8 14 IN AX,imm8 (PM, CPL <= IOPL) 14 IN AX,imm8 (VM) 28 IN EAX,imm8 14 IN EAX,imm8 (PM, CPL <= IOPL) 14 IN EAX,imm8 (VM) 28 IN AL,DX 14 IN AL,DX (PM, CPL <= IOPL) 14 IN AL,DX (VM) 28 IN AX,DX 14 IN AX,DX (PM, CPL <= IOPL) 14 IN AX,DX (VM) 28 IN EAX,DX 14 IN EAX,DX (PM, CPL <= IOPL) 14 IN EAX,DX (VM) 28 INC r/m8 1 INC r/m16 1 INC r/m32 1 INC r16 1 INC r32 1 INSB 14 INSW 14 INSD 14 INT 3 9 INT 3 (PM, same privilege) 21 INT 3 (PM, more privelege) 32 INT imm8 9 INT imm8 (PM, same privilege) 21 INT imm8 (PM, more privelege) 32 INTO 6 or ?? INTO (PM, same privilege) 6 or 15+21 INTO (PM, more privelege) 6 or 15+32 INVD 12 INVLPG m 13 IRET 7 IRET (PM, to same privilege) 10 IRET (PM, to lesser privilege) 26 IRETD 7 IRETD (PM, to same privilege) 10 IRETD (PM, to lesser privilege) 26 Jcc rel8 1 or 1 Jcc rel16 1 or 1 Jcc rel32 1 or 1 JCXZ rel8 1 or 1 JECXZ rel8 1 or 1 JMP rel8 1 JMP rel16 1 JMP r/m16 1/3 JMP ptr16:16 1 JMP ptr16:16 (PM, direct segment) 4 JMP ptr16:16 (PM, via call gate, same pr14 JMP m16:16 5 JMP m16:16 (PM, direct segment) 7 JMP m16:16 (PM, via call gate, same priv17 JMP rel32 1 JMP r/m32 1/3 JMP ptr16:32 1 JMP ptr16:32 (PM, direct segment) 4 JMP ptr16:32 (PM, via call gate, same pr14 JMP m16:32 5 JMP m16:32 (PM, direct segment) 7 JMP m16:32 (PM, via call gate, same priv17 LAHF 2 LAR r16,r/m16 8 LAR r32,r/m32 8 LDS r16,m16:16 2 LDS r32,m16:32 2 LDS r16,m16:16 (PM) 4 LDS r32,m16:32 (PM) 4 LSS r16,m16:16 2 LSS r32,m16:32 2 LSS r16,m16:16 (PM) 4 LSS r32,m16:32 (PM) 4 LES r16,m16:16 2 LES r32,m16:32 2 LES r16,m16:16 (PM) 4 LES r32,m16:32 (PM) 4 LFS r16,m16:16 2 LFS r32,m16:32 2 LFS r16,m16:16 (PM) 4 LFS r32,m16:32 (PM) 4 LGS r16,m16:16 2 LGS r32,m16:32 2 LGS r16,m16:16 (PM) 4 LGS r32,m16:32 (PM) 4 LEA r16,m 1 LEA r32,m 1 LEAVE 4 LGDT m16&32 8 LIDT m16&32 8 LLDT r/m16 5 LMSW r/m16 13 LOADALL None LODSB 3 LODSW 3 LODSD 3 LOOP rel8 1 LOOPE rel8 1 LOOPNE rel8 1 LSL r16,r/m16 8 LSL r32,r/m32 8 LTR r/m16 7 MOV r/m8,r8 1 MOV r/m16,r16 1 MOV r/m32,r32 1 MOV r8,r/m8 1 MOV r16,r/m16 1 MOV r32,r/m32 1 MOV r/m16,sreg 1 MOV sreg,r/m16 1 MOV sreg,r/m16 (PM) 1/3 MOV AL,moffs8 1 MOV AX,moffs16 1 MOV EAX,moffs32 1 MOV moffs8,AL 1 MOV moffs16,AX 1 MOV moffs32,EAX 1 MOV r8,imm8 1 MOV r16,imm16 1 MOV r32,imm32 1 MOV r/m8,imm8 1 MOV r/m16,imm16 1 MOV r/m32,imm32 1 MOV CR0,r32 20 MOV CR2,r32 5 MOV CR3,r32 5 MOV r32,CRi 6 MOV r32,DR0-DR3 14 MOV r32,DR4-DR5 14 MOV r32,DR6-DR7 14 MOV DR0-DR3,r32 16 MOV DR4-DR5,r32 16 MOV DR6-DR7,r32 16 MOV r32,TR4-TR7 6 MOV r32,TR3 5 MOV TR3,r32 10 MOV TR4-TR7,r32 10 MOVSB 4 MOVSW 4 MOVSD 4 MOVSX r16,r/m8 1 MOVSX r32,r/m8 1 MOVSX r32,r/m16 1 MOVZX r16,r/m8 1 MOVZX r32,r/m8 1 MOVZX r32,r/m16 1 MUL r/m8 4 MUL r/m16 4 MUL r/m32 10 NEG r/m8 1 NEG r/m16 1 NEG r/m32 1 NOP 1 NOT r/m8 1 NOT r/m16 1 NOT r/m32 1 OR AL,imm8 1 OR AX,imm16 1 OR EAX,imm32 1 OR r/m8,imm8 1 OR r/m16,imm8 1 OR r/m32,imm8 1 OR r/m16,imm16 1 OR r/m32,imm32 1 OR r/m8,r8 1 OR r/m16,r16 1 OR r/m32,r32 1 OR r8,r/m8 1 OR r16,r/m16 1 OR r32,r/m32 1 OUT imm8,AL 14 OUT imm8,AL (PM, CPL <= IOPL) 14 OUT imm8,AL (VM) 28 OUT imm8,AX 14 OUT imm8,AX (PM, CPL <= IOPL) 14 OUT imm8,AX (VM) 28 OUT imm8,EAX 14 OUT imm8,EAX (PM, CPL <= IOPL) 14 OUT imm8,EAX (VM) 28 OUT DX,AL 14 OUT DX,AL (PM, CPL <= IOPL) 14 OUT DX,AL (VM) 28 OUT DX,AX 14 OUT DX,AX (PM, CPL <= IOPL) 14 OUT DX,AX (VM) 28 OUT DX,EAX 14 OUT DX,EAX (PM, CPL <= IOPL) 14 OUT DX,EAX (VM) 28 OUTSB 14 OUTSW 14 OUTSD 14 POP m16 1 POP m32 1 POP r16 1 POP r32 1 POP sreg 1 POP sreg (PM) 3 POPA 6 POPAD 6 POPF 9 POPF (PM) 9 POPF (VM) 9 POPFD 9 POPFD (PM) 9 POPFD (VM) 9 PUSH r/m16 1 PUSH r/m32 1 PUSH r16 1 PUSH r32 1 PUSH imm8 1 PUSH imm16 1 PUSH imm32 1 PUSH sreg 1 PUSHA 6 PUSHAD 6 PUSHF 2 PUSHF (PM) 2 PUSHF (VM) 2 PUSHFD 2 PUSHFD (PM) 2 PUSHFD (VM) 2 RCL r/m8,1 3 RCL r/m16,1 3 RCL r/m32,1 3 RCL r/m8,CL 8 RCL r/m16,CL 8 RCL r/m32,CL 8 RCL r/m8,imm8 8 RCL r/m16,imm8 8 RCL r/m32,imm8 8 RCR r/m8,1 4 RCR r/m16,1 4 RCR r/m32,1 4 RCR r/m8,CL 9 RCR r/m16,CL 9 RCR r/m32,CL 9 RCR r/m8,imm8 9 RCR r/m16,imm8 9 RCR r/m32,imm8 9 ROL r/m8,1 1 ROL r/m16,1 1 ROL r/m32,1 1 ROL r/m8,CL 2 ROL r/m16,CL 2 ROL r/m32,CL 2 ROL r/m8,imm8 1 ROL r/m16,imm8 1 ROL r/m32,imm8 1 ROR r/m8,1 1 ROR r/m16,1 1 ROR r/m32,1 1 ROR r/m8,CL 2 ROR r/m16,CL 2 ROR r/m32,CL 2 ROR r/m8,imm8 1 ROR r/m16,imm8 1 ROR r/m32,imm8 1 RET (near) 3 RET (far) 4 RET (PM, far, same PL) 7 RET (PM, far, different PL) 23 RET imm16 (near) 4 RET imm16 (far) 4 RET imm16 (PM, far, same PL) 7 RET imm16 (PM, far, different PL) 23 RSDC m80,sreg 6 RSLDT m80 6 RSM 40 RSTS m80 6 SAHF 1 SAL r/m8,1 1 SAL r/m16,1 1 SAL r/m32,1 1 SAL r/m8,CL 2 SAL r/m16,CL 2 SAL r/m32,CL 2 SAL r/m8,imm8 1 SAL r/m16,imm8 1 SAL r/m32,imm8 1 SAR r/m8,1 1 SAR r/m16,1 1 SAR r/m32,1 1 SAR r/m8,CL 2 SAR r/m16,CL 2 SAR r/m32,CL 2 SAR r/m8,imm8 1 SAR r/m16,imm8 1 SAR r/m32,imm8 1 SHL r/m8,1 1 SHL r/m16,1 1 SHL r/m32,1 1 SHL r/m8,CL 2 SHL r/m16,CL 2 SHL r/m32,CL 2 SHL r/m8,imm8 1 SHL r/m16,imm8 1 SHL r/m32,imm8 1 SHR r/m8,1 1 SHR r/m16,1 1 SHR r/m32,1 1 SHR r/m8,CL 2 SHR r/m16,CL 2 SHR r/m32,CL 2 SHR r/m8,imm8 1 SHR r/m16,imm8 1 SHR r/m32,imm8 1 SBB AL,imm8 1 SBB AX,imm16 1 SBB EAX,imm32 1 SBB r/m8,imm8 1 SBB r/m16,imm8 1 SBB r/m32,imm8 1 SBB r/m16,imm16 1 SBB r/m32,imm32 1 SBB r/m8,r8 1 SBB r/m16,r16 1 SBB r/m32,r32 1 SBB r8,r/m8 1 SBB r16,r/m16 1 SBB r32,r/m32 1 SCASB 2 SCASW 2 SCASD 2 SETALC n/a SETcc r/m8 1 SGDT m16&32 4 SIDT m16&32 4 SHLD r/m16,r16,imm8 4 SHLD r/m32,r32,imm8 4 SHLD r/m16,r16,CL 5 SHLD r/m32,r32,CL 5 SHRD r/m16,r16,imm8 4 SHRD r/m32,r32,imm8 4 SHRD r/m16,r16,CL 5 SHRD r/m32,r32,CL 5 SLDT r/m16 1 SLDT r/m32 1 SMINT 55 SMSW r/m16 6 STC 1 STD 7 STI 7 STOSB 2 STOSW 2 STOSD 2 STR r/m16 4 SUB AL,imm8 1 SUB AX,imm16 1 SUB EAX,imm32 1 SUB r/m8,imm8 1 SUB r/m16,imm8 1 SUB r/m32,imm8 1 SUB r/m16,imm16 1 SUB r/m32,imm32 1 SUB r/m8,r8 1 SUB r/m16,r16 1 SUB r/m32,r32 1 SUB r8,r/m8 1 SUB r16,r/m16 1 SUB r32,r/m32 1 SVDC sreg,m80 12 SVLDT m80 12 SVTS m80 14 TEST AL,imm8 1 TEST AX,imm16 1 TEST EAX,imm32 1 TEST r/m8,imm8 1 TEST r/m16,imm16 1 TEST r/m32,imm32 1 TEST r/m8,r8 1 TEST r/m16,r16 1 TEST r/m32,r32 1 VERR r/m16 7 VERW r/m16 7 WAIT 5 WBINVD 15 XADD r/m8,r8 2 XADD r/m16,r16 2 XADD r/m32,r32 2 XCHG AX,r16 2 XCHG EAX,r32 2 XCHG r/m8,r8 2 XCHG r/m16,r16 2 XCHG r/m32,r32 2 XLAT 4 XOR AL,imm8 1 XOR AX,imm16 1 XOR EAX,imm32 1 XOR r/m8,imm8 1 XOR r/m16,imm8 1 XOR r/m32,imm8 1 XOR r/m16,imm16 1 XOR r/m32,imm32 1 XOR r/m8,r8 1 XOR r/m16,r16 1 XOR r/m32,r32 1 XOR r8,r/m8 1 XOR r16,r/m16 1 XOR r32,r/m32 1 (END)Top
FLD1 26 FLDZ 21 FLDPI 26 FLDLG2 26 FLDL2T 26 FLDL2E 26 FLDLN2 26 FLD ST(0) 31 FST ST(1) 26 FSTP ST(0) 26 FSTP ST(1) 21 FLD ST(1) 26 FXCH ST(1) 21 FILD m16 58 FILD m32 64 FILD m64 74 FLD m32 49 FLD m64 54 FLD m80 59 FBLD m80 309 FIST m16 79 FIST m32 84 FST m32 89 FST m64 99 FISTP m16 79 FISTP m32 79 FISTP m64 88 FSTP m32 89 FSTP m64 93 FSTP m80 49 FBSTP m80 528 FINIT 11 FCLEX 11 FCHS 21 FABS 21 FXAM 21 FTST 51 FSTENV 54 FLDENV 48 FSAVE 214 FRSTOR 209 FSTSW [mem] 28 FSTSW AX FSTCW [mem] 28 FLDCW [mem] 19 FADD ST,ST(0) 86 FADD ST,ST(1) 85 FADD ST(1),ST 92 FADDP ST(1),ST 92 FADD m32 105 FADD m64 115 FIADD m16 115 FIADD m32 125 FSUB ST(1),ST 88 FSUBR ST(1),ST 96 FSUBRP ST(1),ST 99 FSUB m32 119 FSUB m64 129 FISUB m16 115 FISUB m32 125 FMUL ST,ST(1) 145 FMUL ST(1),ST 145 FMULP ST(1),ST 148 FIMUL m16 132 FIMUL m32 141 FMUL m32 125 FMUL m64 175 FDIV ST,ST(0) 201 FDIV ST,ST(1) 203 FDIV ST(1),ST 207 FDIVR ST(1),ST 201 FDIVRP ST(1),ST 201 FIDIV m16 237 FIDIV m32 246 FDIV m32 229 FDIV m64 236 FSQRT (0 0) 21 FSQRT (1 0) 186 FSQRT (L2T) 186 FXTRACT (L2T) 51 FSCALE (PI,5) 41 FRNDINT (PI) 51 FPREM (99,PI) 81 FPREM1(99,PI) N/A FCOM 56 FCOMP 61 FCOMPP 61 FICOM m16 79 FICOM m32 89 FCOM m32 74 FCOM m64 74 FSIN (0 0) N/A FSIN (1 0) N/A FSIN (PI) N/A FSIN (LG2) N/A FSIN (L2T) N/A FCOS (0 0) N/A FCOS (1 0) N/A FCOS (PI) N/A FCOS (LG2) N/A FCOS (L2T) N/A FSINCOS (0 0) N/A FSINCOS (1 0) N/A FSINCOS (PI) N/A FSINCOS (LG2) N/A FSINCOS (L2T) N/A FPTAN (0 0) 41 FPTAN (1 0) 581 FPTAN (PI) 606 FPTAN (LG2) 516 FPTAN (L2T) 576 FPATAN (0 0) 41 FPATAN (1 0) 736 FPATAN (PI) 206 FPATAN (LG2) 756 FPATAN (L2T) 206 F2XM1 (0 0) 16 F2XM1 (LN2) 631 F2XM1 (LG2) 611 FYL2X (1 0) 56 FYL2X (PI) 946 FYL2X (LG2) 1081 FYL2X (L2T) 926 FYL2XP1 (LG2) 1026Top
FLD1 26 FLDZ 21 FLDPI 26 FLDLG2 26 FLDL2T 26 FLDL2E 26 FLDLN2 26 FLD ST(0) 31 FST ST(1) 26 FSTP ST(0) 26 FSTP ST(1) 21 FLD ST(1) 26 FXCH ST(1) 21 FILD m16 58 FILD m32 64 FILD m64 74 FLD m32 49 FLD m64 54 FLD m80 59 FBLD m80 309 FIST m16 79 FIST m32 84 FST m32 89 FST m64 99 FISTP m16 79 FISTP m32 79 FISTP m64 88 FSTP m32 89 FSTP m64 93 FSTP m80 49 FBSTP m80 528 FINIT 11 FCLEX 11 FCHS 21 FABS 21 FXAM 21 FTST 51 FSTENV 54 FLDENV 48 FSAVE 214 FRSTOR 209 FSTSW [mem] 28 FSTSW AX FSTCW [mem] 28 FLDCW [mem] 19 FADD ST,ST(0) 86 FADD ST,ST(1) 85 FADD ST(1),ST 92 FADDP ST(1),ST 92 FADD m32 105 FADD m64 115 FIADD m16 115 FIADD m32 125 FSUB ST(1),ST 88 FSUBR ST(1),ST 96 FSUBRP ST(1),ST 99 FSUB m32 119 FSUB m64 129 FISUB m16 115 FISUB m32 125 FMUL ST,ST(1) 145 FMUL ST(1),ST 145 FMULP ST(1),ST 148 FIMUL m16 132 FIMUL m32 141 FMUL m32 125 FMUL m64 175 FDIV ST,ST(0) 201 FDIV ST,ST(1) 203 FDIV ST(1),ST 207 FDIVR ST(1),ST 201 FDIVRP ST(1),ST 201 FIDIV m16 237 FIDIV m32 246 FDIV m32 229 FDIV m64 236 FSQRT (0 0) 21 FSQRT (1 0) 186 FSQRT (L2T) 186 FXTRACT (L2T) 51 FSCALE (PI,5) 41 FRNDINT (PI) 51 FPREM (99,PI) 81 FPREM1(99,PI) N/A FCOM 56 FCOMP 61 FCOMPP 61 FICOM m16 79 FICOM m32 89 FCOM m32 74 FCOM m64 74 FSIN (0 0) N/A FSIN (1 0) N/A FSIN (PI) N/A FSIN (LG2) N/A FSIN (L2T) N/A FCOS (0 0) N/A FCOS (1 0) N/A FCOS (PI) N/A FCOS (LG2) N/A FCOS (L2T) N/A FSINCOS (0 0) N/A FSINCOS (1 0) N/A FSINCOS (PI) N/A FSINCOS (LG2) N/A FSINCOS (L2T) N/A FPTAN (0 0) 41 FPTAN (1 0) 581 FPTAN (PI) 606 FPTAN (LG2) 516 FPTAN (L2T) 576 FPATAN (0 0) 41 FPATAN (1 0) 736 FPATAN (PI) 206 FPATAN (LG2) 756 FPATAN (L2T) 206 F2XM1 (0 0) 16 F2XM1 (LN2) 631 F2XM1 (LG2) 611 FYL2X (1 0) 56 FYL2X (PI) 946 FYL2X (LG2) 1081 FYL2X (L2T) 926 FYL2XP1 (LG2) 1026Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
FLD1 1 FLDZ 1 FLDPI 3 FLDLG2 3 FLDL2T 3 FLDL2E 3 FLDLN2 3 FLD ST(0) 1 FST ST(1) 2 FSTP ST(0) 2 FSTP ST(1) 3 FLD ST(1) 1 FXCH ST(1) 1 FILD m16 1 FILD m32 1 FILD m64 1 FLD m32 1 FLD m64 1 FLD m80 3 FBLD m80 46 FIST m16 5 FIST m32 5 FST m32 1 FST m64 1 FISTP m16 8 FISTP m32 9 FISTP m64 8 FSTP m32 5 FSTP m64 5 FSTP m80 6 FBSTP m80 155 FINIT 21 FCLEX 8 FCHS 1 FABS 1 FXAM 16 FTST 1 FSTENV 60 FLDENV 37 FSAVE 154 FRSTOR 74 FSTSW [mem] 4 FSTSW AX 4 FSTCW [mem] 2 FLDCW [mem] 7 FADD ST,ST(0) 2 FADD ST,ST(1) 3 FADD ST(1),ST 3 FADDP ST(1),ST 3 FADD m32 1 FADD m64 1 FIADD m16 3 FIADD m32 3 FSUB ST(1),ST 3 FSUBR ST(1),ST 2 FSUBRP ST(1),ST 2 FSUB m32 2 FSUB m64 2 FISUB m16 3 FISUB m32 3 FMUL ST,ST(1) 2 FMUL ST(1),ST 3 FMULP ST(1),ST 2 FIMUL m16 3 FIMUL m32 3 FMUL m32 2 FMUL m64 2 FDIV ST,ST(0) 38 FDIV ST,ST(1) 38 FDIV ST(1),ST 38 FDIVR ST(1),ST 38 FDIVRP ST(1),ST 38 FIDIV m16 39 FIDIV m32 39 FDIV m32 38 FDIV m64 38 FSQRT (0 0) 4 FSQRT (1 0) 70 FSQRT (L2T) 70 FXTRACT (L2T) 12 FSCALE (PI,5) 31 FRNDINT (PI) 19 FPREM (99,PI) 27 FPREM1(99,PI) 41 FCOM 1 FCOMP 2 FCOMPP 2 FICOM m16 FICOM m32 FCOM m32 FCOM m64 FSIN (0 0) 17 FSIN (1 0) 98 FSIN (PI) 73 FSIN (LG2) 82 FSIN (L2T) 72 FCOS (0 0) 18 FCOS (1 0) 96 FCOS (PI) 72 FCOS (LG2) 83 FCOS (L2T) 72 FSINCOS (0 0) 15 FSINCOS (1 0) 107 FSINCOS (PI) 93 FSINCOS (LG2) 91 FSINCOS (L2T) 93 FPTAN (0 0) 15 FPTAN (1 0) 142 FPTAN (PI) 125 FPTAN (LG2) 126 FPTAN (L2T) 125 FPATAN (0 0) 25 FPATAN (1 0) 93 FPATAN (PI) 132 FPATAN (LG2) 129 FPATAN (L2T) 135 F2XM1 (0 0) 14 F2XM1 (LN2) 52 F2XM1 (LG2) 52 FYL2X (1 0) 39 FYL2X (PI) 104 FYL2X (LG2) 104 FYL2X (L2T) 104 FYL2XP1 (LG2) 103Top
Format of Data Below:
---------------------------------
H: Name of x86 Instruction
N: Number of RISC operation per this x86 instruction
(in case of comlex microcode = 0)
{
D:destination regs | retry this data for each
P:port | RISC core instruction
O:operation |
L:latency |
A:arguments |
}
\n
---------------------------------
Example:
H:ADD r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
----------------------------------
Means: ADD r8,r/m8 Latency
ROP1: REG_ddd = ALU.port(1 or 0)(REG_ddd,REG_sss) 1
----------------------------------
H:ADD r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:ADD r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:ADD r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:SUB r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:SUB r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:SUB r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:AND r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:AND r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:AND r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:OR r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:OR r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:OR r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:XOR r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:XOR r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:XOR r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:ADD r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:ADD r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:ADD r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:SUB r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:SUB r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:SUB r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:AND r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:AND r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:AND r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:OR r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:OR r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:OR r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:XOR r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:XOR r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:XOR r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:ADC r8,r/m8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:ADC r16,r/m16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:ADC r32,r/m32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:SBB r8,r/m8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:SBB r16,r/m16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:SBB r32,r/m32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:ADC r8,m8
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:ADC r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:ADC r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:SBB r8,m8
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:SBB r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:SBB r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:ADD r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:ADD r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:ADD r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:SUB r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:SUB r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:SUB r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:AND r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:AND r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:AND r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:OR r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:OR r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:OR r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:XOR r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:XOR r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:XOR r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:ADD m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK ADD m8,r8
N:0
H:LOCK ADD m16,r16
N:0
H:LOCK ADD m32,r32
N:0
H:LOCK SUB m8,r8
N:0
H:LOCK SUB m16,r16
N:0
H:LOCK SUB m32,r32
N:0
H:LOCK AND m8,r8
N:0
H:LOCK AND m16,r16
N:0
H:LOCK AND m32,r32
N:0
H:LOCK OR m8,r8
N:0
H:LOCK OR m16,r16
N:0
H:LOCK OR m32,r32
N:0
H:LOCK XOR m8,r8
N:0
H:LOCK XOR m16,r16
N:0
H:LOCK XOR m32,r32
N:0
H:ADC r/m8,r8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:ADC r/m16,r16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:ADC r/m32,r32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:SBB r/m8,r8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:SBB r/m16,r16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:SBB r/m32,r32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:ADC m8,r8
N:0
H:ADC m16,r16
N:0
H:ADC m32,r32
N:0
H:SBB m8,r8
N:0
H:SBB m16,r16
N:0
H:SBB m32,r32
N:0
H:LOCK ADC m8,r8
N:0
H:LOCK ADC m16,r16
N:0
H:LOCK ADC m32,r32
N:0
H:LOCK SBB m8,r8
N:0
H:LOCK SBB m16,r16
N:0
H:LOCK SBB m32,r32
N:0
H:ADD r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK ADD m8,imm8
N:0
H:LOCK ADD m16,imm16
N:0
H:LOCK ADD m32,imm32
N:0
H:LOCK SUB m8,imm8
N:0
H:LOCK SUB m16,imm16
N:0
H:LOCK SUB m32,imm32
N:0
H:LOCK AND m8,imm8
N:0
H:LOCK AND m16,imm16
N:0
H:LOCK AND m32,imm32
N:0
H:LOCK OR m8,imm8
N:0
H:LOCK OR m16,imm16
N:0
H:LOCK OR m32,imm32
N:0
H:LOCK XOR m8,imm8
N:0
H:LOCK XOR m16,imm16
N:0
H:LOCK XOR m32,imm32
N:0
H:ADC r8,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:ADC r16,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:ADC r32,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:SBB r8,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:SBB r16,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:SBB r32,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:ADC m8,imm8
N:0
H:ADC m16,imm16
N:0
H:ADC m32,imm32
N:0
H:SBB m8,imm8
N:0
H:SBB m16,imm16
N:0
H:SBB m32,imm32
N:0
H:LOCK ADC m8,imm8
N:0
H:LOCK ADC m16,imm16
N:0
H:LOCK ADC m32,imm32
N:0
H:LOCK SBB m8,imm8
N:0
H:LOCK SBB m16,imm16
N:0
H:LOCK SBB m32,imm32
N:0
H:ADD AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:SUB AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:AND AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:OR AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:XOR AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:ADD eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:ADD eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:SUB eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:SUB eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:AND eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:AND eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:OR eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:OR eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:XOR eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:XOR eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:ADC AL,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:SBB AL,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:ADC eAX,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:ADC eAX,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:SBB eAX,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:SBB eAX,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:INC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:INC r/m16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:INC r/m32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:DEC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:DEC r/m16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:DEC r/m32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:INC m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:INC m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:INC m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:DEC m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:DEC m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:DEC m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK INC m8
N:0
H:LOCK INC m16
N:0
H:LOCK INC m32
N:0
H:LOCK DEC m8
N:0
H:LOCK DEC m16
N:0
H:LOCK DEC m32
N:0
H:INC r16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:INC r32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:DEC r16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:DEC r32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:NOT r/m8
N:1
D: REG_sss
O: xor
P:01
L:1
A: REG_sss, CONST
H:NOT r/m16
N:1
D: REG_sss
O: xor
P:01
L:1
A: REG_sss, CONST
H:NOT r/m32
N:1
D: REG_sss
O: xor
P:01
L:1
A: REG_sss, CONST
H:NOT m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: xor
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NOT m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: xor
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NOT m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: xor
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK NOT m8
N:0
H:LOCK NOT m16
N:0
H:LOCK NOT m32
N:0
H:NEG r/m8
N:1
D: REG_sss
O: sub
P:01
L:1
A: CONST, REG_sss
H:NEG r/m16
N:1
D: REG_sss
O: sub
P:01
L:1
A: CONST, REG_sss
H:NEG r/m32
N:1
D: REG_sss
O: sub
P:01
L:1
A: CONST, REG_sss
H:NEG m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: sub
P:01
L:1
A: CONST, TMP0
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NEG m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: sub
P:01
L:1
A: CONST, TMP0
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NEG m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: sub
P:01
L:1
A: CONST, TMP0
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK NEG m8
N:0
H:LOCK NEG m16
N:0
H:LOCK NEG m32
N:0
H:AAS
N:1
D: AX
O:
P:1
L:1
A: ArithFLAGS, AX
H:DAA
N:1
D: AL
O:
P:1
L:1
A: ArithFLAGS, AL
H:DAS
N:1
D: AL
O:
P:1
L:1
A: ArithFLAGS, AL
H:AAD
N:3
D: TMP0
O: mul
P:0
L:4
A: AH, IMM
D: AH
O: move
P:01
L:1
A: CONST
D: AL
O: add
P:01
L:1
A: AL, TMP0
H:AAM
N:4
D: TMP0
O: div
P:0
L:99
A: AL, IMM
D: AH
O: move
P:01
L:1
A: TMP0
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: AL
O: add
P:01
L:1
A: TMP0, CONST
H:INVD
N:0
H:WBINVD
N:0
H:INVLPG m
N:0
H:CMP AL,imm8
N:1
D: sink
O: sub
P:01
L:1
A: EAX, IMM
H:CMP eAX,imm16
N:1
D: sink
O: sub
P:01
L:1
A: EAX, IMM
H:CMP eAX,imm32
N:1
D: sink
O: sub
P:01
L:1
A: EAX, IMM
H:CMP r/m8,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m8,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m16,imm16
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m32,imm32
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m16,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m32,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m16,imm16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m32,imm32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m16,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m32,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP r/m8,r8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, REG_ddd
H:CMP r/m16,r16
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, REG_ddd
H:CMP r/m32,r32
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, REG_ddd
H:CMP m8,r8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, REG_ddd
H:CMP m16,r16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, REG_ddd
H:CMP m32,r32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, REG_ddd
H:CMP r8,r/m8
N:1
D: sink
O: sub
P:01
L:1
A: REG_ddd, REG_sss
H:CMP r16,r/m16
N:1
D: sink
O: sub
P:01
L:1
A: REG_ddd, REG_sss
H:CMP r32,r/m32
N:1
D: sink
O: sub
P:01
L:1
A: REG_ddd, REG_sss
H:CMP r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: REG_ddd, TMP0
H:CMP r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: REG_ddd, TMP0
H:CMP r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: REG_ddd, TMP0
H:TEST r/m8,r8
N:1
D: sink
O: and
P:01
L:1
A: REG_ddd, REG_sss
H:TEST r/m16,r16
N:1
D: sink
O: and
P:01
L:1
A: REG_ddd, REG_sss
H:TEST r/m32,r32
N:1
D: sink
O: and
P:01
L:1
A: REG_ddd, REG_sss
H:TEST m8,r8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: REG_ddd, TMP0
H:TEST m16,r16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: REG_ddd, TMP0
H:TEST m32,r32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: REG_ddd, TMP0
H:TEST AL,imm8
N:1
D: sink
O: and
P:01
L:1
A: EAX, IMM
H:TEST eAX,imm16
N:1
D: sink
O: and
P:01
L:1
A: EAX, IMM
H:TEST eAX,imm32
N:1
D: sink
O: and
P:01
L:1
A: EAX, IMM
H:TEST r/m8,imm8
N:1
D: sink
O: and
P:01
L:1
A: REG_sss, IMM
H:TEST r/m16,imm16
N:1
D: sink
O: and
P:01
L:1
A: REG_sss, IMM
H:TEST r/m32,imm32
N:1
D: sink
O: and
P:01
L:1
A: REG_sss, IMM
H:TEST m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m16,imm16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m32,imm32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m16,imm16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m32,imm32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:SETO r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNO r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETB r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNAE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNB r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETAE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETZ r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNZ r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETBE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNA r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNBE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNA r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETS r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNS r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETP r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETPE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNP r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETPO r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETL r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNGE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNL r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETGE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETLE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNG r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNLE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETG r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETO m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNO m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETB m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNAE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETC m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNB m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETAE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNC m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETZ m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNZ m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETBE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNA m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNBE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNA m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETS m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNS m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETP m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETPE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNP m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETPO m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETL m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNGE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNL m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETGE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETLE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNG m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNLE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETG m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:BT r/m16,r16
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, REG_ddd
H:BT r/m32,r32
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, REG_ddd
H:BT m16,r16
N:0
H:BT m32,r32
N:0
H:BT r/m16,imm8
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, IMM
H:BT r/m32,imm8
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, IMM
H:BT m16,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: test_bit
P:01
L:1
A: TMP0, IMM
H:BT m32,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: test_bit
P:01
L:1
A: TMP0, IMM
H:BTC r/m16,r16
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTC r/m32,r32
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTR r/m16,r16
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTR r/m32,r32
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTS r/m16,r16
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTS r/m32,r32
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTC m16,r16
N:0
H:BTC m32,r32
N:0
H:BTR m16,r16
N:0
H:BTR m32,r32
N:0
H:BTS m16,r16
N:0
H:BTS m32,r32
N:0
H:LOCK BTC m16,r16
N:0
H:LOCK BTC m32,r32
N:0
H:LOCK BTR m16,r16
N:0
H:LOCK BTR m32,r32
N:0
H:LOCK BTS m16,r16
N:0
H:LOCK BTS m32,r32
N:0
H:BTC r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTC r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTS r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTS r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTC m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTC m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTR m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTR m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTS m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTS m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK BTC m16,imm8
N:0
H:LOCK BTC m32,imm8
N:0
H:LOCK BTR m16,imm8
N:0
H:LOCK BTR m32,imm8
N:0
H:LOCK BTS m16,imm8
N:0
H:LOCK BTS m32,imm8
N:0
H:BSF r16,r/m16
N:2
D: TMP0
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd
H:BSF r32,r/m32
N:2
D: TMP0
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd
H:BSF r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSF r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r16,r/m16
N:2
D: TMP1
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r32,r/m32
N:2
D: TMP1
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:PUSHF
N:0
H:PUSHFD
N:0
H:POPFD
N:0
H:POPF
N:0
H:CLC
N:1
D: sink
O: add
P:01
L:1
A: CONST, CONST_0
H:CMC
N:1
D: sink
O:
P:01
L:1
A: ArithFLAGS, CONST
H:STC
N:1
D: sink
O:
P:01
L:1
A:CONST, CONST
H:SAHF
N:1
D: sink
O:
P:01
L:1
A: AH
H:LAHF
N:1
D: AH
O:
P:01
L:1
A: ArithFLAGS, CONST
H:CLI
N:0
H:STI
N:0
H:CLD
N:4
D: TMP5
O:
P:01
L:1
A: ArithFLAGS, SystemFlags
D: sink
O: move
P:01
L:1
A: CONST
D: SystemFlags
O: and
P:01
L:1
A: TMP5, CONST
D: sink
O: move
P:01
L:1
A: CONST
H:STD
N:4
D: TMP5
O:
P:01
L:1
A: ArithFLAGS, SystemFlags
D: TMP5
O:
P:01
L:1
A: TMP5, 000010000
D: SystemFlags
O:
P:01
L:1
A: TMP5, 000001010
D: sink
O: move
P:01
L:1
A: CONST
H:SALC
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, CONST
D: AL
O:
P:01
L:1
A: TMP0, CONST
H:Call rel16 near
N:3
D: sink
O: M_call
P:1
L:1
A: virt_ip
D: sink
O: store_data
P:4
L:1
A: next_virt_ip
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Call rel32 near
N:3
D: sink
O: M_call
P:1
L:1
A: virt_ip
D: sink
O: store_data
P:4
L:1
A: next_virt_ip
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Call r16 near
N:0
H:Call r32 near
N:0
H:Call m16 near
N:0
H:Call m32 near
N:0
H:Ret near
N:4
D: TMP0
O: load
P:2
L:1
A: (ESP
D: sink
O:
P:01
L:1
A: TMP0, CONST
D: ESP
O: add
P:01
L:1
A: ESP,
D: sink
O:
P:1
L:1
A: virt_ip, TMP0
H:RET near iw
N:0
H:JO rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNO rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JB rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNAE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JC rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNB rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JAE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNC rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JZ rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNZ rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JBE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNBE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JS rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNS rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JP rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNP rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPO rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JL rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNGE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNL rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JGE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JLE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNG rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNLE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JG rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JO rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JO rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNO rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNO rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JB rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNAE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JC rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JB rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNAE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JC rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNB rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JAE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNC rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNB rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JAE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNC rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JZ rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JZ rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNZ rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNZ rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JBE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JBE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNBE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNBE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JS rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JS rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNS rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNS rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JP rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JP rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNP rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPO rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNP rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPO rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JL rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNGE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JL rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNGE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNL rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JGE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNL rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JGE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JLE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNG rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JLE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNG rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNLE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JG rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNLE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JG rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JCXZ rel8
N:2
D: TMP0
O: sub
P:01
L:1
A: ECX, CONST
D: sink
O:
P:1
L:1
A: TMP0, virt_ip)
H:JECXZ rel8
N:2
D: TMP0
O: sub
P:01
L:1
A: ECX, CONST
D: sink
O:
P:1
L:1
A: TMP0, virt_ip)
H:JMP rel8
N:1
D: sink
O:
P:1
L:1
A: virt_ip
H:JMP rel16
N:1
D: sink
O:
P:1
L:1
A: virt_ip
H:JMP rel32
N:1
D: sink
O:
P:1
L:1
A: virt_ip
H:JMP near reg16
N:1
D: sink
O:
P:1
L:1
A: virt_ip, REG_sss
H:JMP near reg32
N:1
D: sink
O:
P:1
L:1
A: virt_ip, REG_sss
H:JMP near m16
N:0
H:JMP near m32
N:0
H:LOOP rel8
N:0
H:LOOPE rel8
N:0
H:LOOPNE rel8
N:0
H:Halt
N:0
H:BOUND r16,m16& 16
N:0
H:BOUND r16,m32& 32
N:0
H:INTn
N:3
D: TMP0
O: move
P:01
L:1
A: IMM
D: TMP1
O: move
P:01
L:1
A: 000110101
D: sink
O:
P:0
L:1
A: TMP0, TMP1) 1
H:INTO
N:0
H:INT3
N:0
H:INT1
N:0
H:IN eAX,imm8
N:0
H:IN eAX,DX
N:0
H:OUT imm8,eAX
N:0
H:OUT DX,eAX
N:0
H:INSB m8,DX
N:0
H:INSB m16,DX
N:0
H:INSB m32,DX
N:0
H:INSW m8,DX
N:0
H:INSW m16,DX
N:0
H:INSW m32,DX
N:0
H:INSD m8,DX
N:0
H:INSD m16,DX
N:0
H:INSD m32,DX
N:0
H:OUTSB DX,m8
N:0
H:OUTSB DX,m16
N:0
H:OUTSB DX,m32
N:0
H:OUTSW DX,m8
N:0
H:OUTSW DX,m16
N:0
H:OUTSW DX,m32
N:0
H:OUTSD DX,m8
N:0
H:OUTSD DX,m16
N:0
H:OUTSD DX,m32
N:0
H:REP INSB m8,DX
N:0
H:REP INSB m16,DX
N:0
H:REP INSB m32,DX
N:0
H:REP INSW m8,DX
N:0
H:REP INSW m16,DX
N:0
H:REP INSW m32,DX
N:0
H:REP INSD m8,DX
N:0
H:REP INSD m16,DX
N:0
H:REP INSD m32,DX
N:0
H:REP OUTSB DX,m8
N:0
H:REP OUTSB DX,m16
N:0
H:REP OUTSB DX,m32
N:0
H:REP OUTSW DX,m8
N:0
H:REP OUTSW DX,m16
N:0
H:REP OUTSW DX,m32
N:0
H:REP OUTSD DX,m8
N:0
H:REP OUTSD DX,m16
N:0
H:REP OUTSD DX,m32
N:0
H:LEA r16,m
N:1
D: REG_ddd
O: load_ea
P:0
L:1
A:base_BBB
H:LEA r32,m
N:1
D: REG_ddd
O: load_ea
P:0
L:1
A:base_BBB
H:NOP
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:BSWAP r32
N:2
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O:
P:0
L:1
A: TMP0)
H:XADD r/m8,r8
N:4
D: TMP0
O: move
P:01
L:1
A: REG_sss
D: TMP1
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: TMP0)
D: REG_sss
O: add
P:01
L:1
A: TMP0, TMP1) 1
H:XADD r/m16,r16
N:4
D: TMP0
O: move
P:01
L:1
A: REG_sss
D: TMP1
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: TMP0)
D: REG_sss
O: add
P:01
L:1
A: TMP0, TMP1) 1
H:XADD r/m32,r32
N:4
D: TMP0
O: move
P:01
L:1
A: REG_sss
D: TMP1
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: TMP0)
D: REG_sss
O: add
P:01
L:1
A: TMP0, TMP1) 1
H:XADD m8,r8
N:0
H:XADD m16,r16
N:0
H:XADD m32,r32
N:0
H:LOCK XADD m8,r8
N:0
H:LOCK XADD m16,r16
N:0
H:LOCK XADD m32,r32
N:0
H:CMPXCHG r/m8,r8
N:0
H:CMPXCHG r/m16,r16
N:0
H:CMPXCHG r/m32,r32
N:0
H:CMPXCHG m8,r8
N:0
H:CMPXCHG m16,r16
N:0
H:CMPXCHG m32,r32
N:0
H:LOCK CMPXCHG m8,r8
N:0
H:LOCK CMPXCHG m16,r16
N:0
H:LOCK CMPXCHG m32,r32
N:0
H:CMPXCHG8B r/m64
N:0
H:LOCK CMPXCHG8B r/m64
N:0
H:XLAT
N:2
D: TMP0
O: move
P:01
L:1
A: AL
D: AL
O: load
P:2
L:1
A: EBX
H:XLATB
N:2
D: TMP0
O: move
P:01
L:1
A: AL
D: AL
O: load
P:2
L:1
A: EBX
H:CMOVO r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVO r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNO r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNO r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVB r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNAE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVC r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVB r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNAE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVC r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNB r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVAE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNC r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNB r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVAE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNC r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVZ r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVZ r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNZ r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNZ r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVBE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVBE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNBE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNBE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVS r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVS r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNS r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNS r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVP r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVP r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNP r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPO r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNP r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPO r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVL r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNGE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVL r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNGE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNL r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVGE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNL r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVGE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVLE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNG r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVLE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNG r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNLE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVG r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNLE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVG r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVO r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVO r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNO r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNO r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVB r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNAE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVC r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVB r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNAE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVC r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNB r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVAE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNC r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNB r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVAE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNC r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVZ r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVZ r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNZ r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNZ r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVBE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVBE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNBE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNBE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVS r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVS r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNS r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNS r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVP r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVP r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNP r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPO r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNP r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPO r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVL r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNGE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVL r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNGE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNL r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVGE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNL r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVGE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVLE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNG r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVLE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNG r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNLE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVG r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNLE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVG r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CPUID
N:0
H:MOV r/m8,r8
N:1
D: REG_sss
O: move
P:01
L:1
A: REG_ddd
H:MOV r/m16,r16
N:1
D: REG_sss
O: move
P:01
L:1
A: REG_ddd
H:MOV r/m32,r32
N:1
D: REG_sss
O: move
P:01
L:1
A: REG_ddd
H:MOV m8,r8
N:2
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m16,r16
N:2
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m32,r32
N:2
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV r8,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOV r16,r/m16
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOV r32,r/m32
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOV r8,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOV r16,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOV r32,m32
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOV r/m8,imm8
N:1
D: REG_sss
O: move
P:01
L:1
A: IMM
H:MOV r/m16,imm16
N:1
D: REG_sss
O: move
P:01
L:1
A: IMM
H:MOV r/m32,imm32
N:1
D: REG_sss
O: move
P:01
L:1
A: IMM
H:MOV m8,imm8
N:2
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m16,imm16
N:2
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m32,imm32
N:2
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV r8,imm8
N:1
D: REG_ddd
O: move
P:01
L:1
A: IMM
H:MOV r16,imm16
N:1
D: REG_ddd
O: move
P:01
L:1
A: IMM
H:MOV r32,imm32
N:1
D: REG_ddd
O: move
P:01
L:1
A: IMM
H:MOV AL,moffs8
N:1
D: EAX
O: load
P:2
L:1
A: SEG+ DISP
H:MOV EAX,moffs16
N:1
D: EAX
O: load
P:2
L:1
A: SEG+ DISP
H:MOV EAX,moffs32
N:1
D: EAX
O: load
P:2
L:1
A: SEG+ DISP
H:MOV moffs8,AL
N:2
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: SEG+ DISP
H:MOV moffs16,EAX
N:2
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: SEG+ DISP
H:MOV moffs32,EAX
N:2
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: SEG+ DISP
H:XCHG r/m8,r8
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
D: REG_sss
O: move
P:01
L:1
A: TMP0)
H:XCHG r/m16,r16
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
D: REG_sss
O: move
P:01
L:1
A: TMP0)
H:XCHG r/m32,r32
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
D: REG_sss
O: move
P:01
L:1
A: TMP0)
H:XCHG eAX,r16
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: EAX
D: EAX
O: move
P:01
L:1
A: TMP0)
H:XCHG eAX,r32
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: EAX
D: EAX
O: move
P:01
L:1
A: TMP0)
H:XCHG m8,r8
N:0
H:XCHG m16,r16
N:0
H:XCHG m32,r32
N:0
H:LOCK XCHG m8,r8
N:0
H:LOCK XCHG m16,r16
N:0
H:LOCK XCHG m32,r32
N:0
H:MOV CR0,r32
N:0
H:MOV CR2,r32
N:0
H:MOV CR3,r32
N:0
H:MOV CR4,r32
N:0
H:LMSW r16
N:0
H:LMSW m16
N:0
H:SMSW m16
N:0
H:MOV DRx,r32
N:0
H:MOV r32,CR0
N:0
H:MOV r32,CR2
N:0
H:MOV r32,CR3
N:0
H:MOV r32,CR4
N:0
H:MOV r32,DRx
N:0
H:WRMSR
N:0
H:RDTSC
N:0
H:RDPMC
N:0
H:RDMSR
N:0
H:CLTS
N:0
H:IMUL r16,r/m16
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, REG_sss
H:IMUL r32,r/m32
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, REG_sss
H:IMUL r16,m16
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, TMP1
H:IMUL r32,m32
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, TMP1
H:IMUL r16,r/m16,imm8
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r32,r/m32,imm8
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r16,r/m16,imm16
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r32,r/m32,imm16
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r16,r/m16,imm32
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r32,r/m32,imm32
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r16,r/m16,imm8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r32,r/m32,imm8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r16,r/m16,imm16
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r32,r/m32,imm16
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r16,r/m16,imm32
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r32,r/m32,imm32
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r/m8
N:1
D: AX
O: int_mul
P:0
L:4
A: AL, REG_sss
H:IMUL m8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: AX
O: int_mul
P:0
L:4
A: AL, TMP1
H:IMUL r/m16
N:3
D: TMP0
O: int_mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IMUL m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: int_mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:IMUL r/m32
N:3
D: TMP0
O: int_mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IMUL m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: int_mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:MUL AL,r/m8
N:1
D: AX
O: mul
P:0
L:4
A: AL, REG_sss
H:MUL AL,m8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: AX
O: mul
P:0
L:4
A: AL, TMP1
H:MUL AX,r/m16
N:3
D: TMP0
O: mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:MUL AX,m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:MUL EAX,r/m32
N:3
D: TMP0
O: mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:MUL EAX,m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:IDIV AL,r/m8
N:3
D: TMP0
O: int_div
P:0
L:99
A: AX, REG_sss
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:IDIV AX,m8
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: int_div
P:0
L:99
A: AX, TMP1
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:IDIV eAX,r/m16
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IDIV eAX,r/m32
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IDIV AX,m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:IDIV AX,m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:DIV AL,r/m8
N:3
D: TMP0
O: div
P:0
L:99
A: AX, REG_sss
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,m8
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: div
P:0
L:99
A: AX, TMP1
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,r/m16
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,r/m32
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:DIV AX,m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:SHL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAR r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAR r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAR r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHR r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHR r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHR r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAR r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAR r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAR r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHR r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHR r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHR r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAR r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHR r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROR r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROR r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROR r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROR r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROR r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROR r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROR r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROL m8,imm8
N:0
H:ROL m16,imm8
N:0
H:ROL m32,imm8
N:0
H:ROR m8,imm8
N:0
H:ROR m16,imm8
N:0
H:ROR m32,imm8
N:0
H:RCL r/m8,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCL r/m16,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCL r/m32,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCR r/m8,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCR r/m16,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCR r/m32,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCL m8,1
N:0
H:RCL m16,1
N:0
H:RCL m32,1
N:0
H:RCR m8,1
N:0
H:RCR m16,1
N:0
H:RCR m32,1
N:0
H:RCL r/m8,CL
N:0
H:RCL r/m16,CL
N:0
H:RCL r/m32,CL
N:0
H:RCR r/m8,CL
N:0
H:RCR r/m16,CL
N:0
H:RCR r/m32,CL
N:0
H:RCL m8,CL
N:0
H:RCL m16,CL
N:0
H:RCL m32,CL
N:0
H:RCR m8,CL
N:0
H:RCR m16,CL
N:0
H:RCR m32,CL
N:0
H:RCL r/m8,imm8
N:0
H:RCL r/m16,imm8
N:0
H:RCL r/m32,imm8
N:0
H:RCR r/m8,imm8
N:0
H:RCR r/m16,imm8
N:0
H:RCR r/m32,imm8
N:0
H:RCL m8,imm8
N:0
H:RCL m16,imm8
N:0
H:RCL m32,imm8
N:0
H:RCR m8,imm8
N:0
H:RCR m16,imm8
N:0
H:RCR m32,imm8
N:0
H:SHLD r/m16,r16,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD r/m32,r32,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD r/m16,r16,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD r/m32,r32,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD m16,r16,imm8
N:0
H:SHLD m32,r32,imm8
N:0
H:SHLD m16,r16,CL
N:0
H:SHLD m32,r32,CL
N:0
H:SHRD r/m16,r16,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD r/m32,r32,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD r/m16,r16,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD r/m32,r32,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD m16,r16,imm8
N:0
H:SHRD m32,r32,imm8
N:0
H:SHRD m16,r16,CL
N:0
H:SHRD m32,r32,CL
N:0
H:Push r16
N:3
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push r32
N:3
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push r16
N:3
D: sink
O: store_data
P:4
L:1
A: REG_sss
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push r32
N:3
D: sink
O: store_data
P:4
L:1
A: REG_sss
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: store_data
P:4
L:1
A: TMP0)
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: store_data
P:4
L:1
A: TMP0)
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push imm8
N:3
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push imm16
N:3
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push imm32
N:3
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Pop r16
N:2
D: REG_ddd
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop r32
N:2
D: REG_ddd
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop eSP
N:3
D: TMP0
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
D: ESP
O: move
P:01
L:1
A: TMP0
H:Pop r16
N:2
D: REG_sss
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop r32
N:2
D: REG_sss
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop m16
N:0
H:Pop m32
N:0
H:PUSHA
N:0
H:PUSHAD
N:0
H:POPA
N:0
H:POPAD
N:0
H:ENTER
N:0
H:leave
N:3
D: TMP0
O: move
P:01
L:1
A: EBP
D: EBP
O: load
P:2
L:1
A: (TMP0
D: ESP
O: add
P:01
L:1
A: TMP0, REG_OP_Size
H:MOVSB m8,m8
N:0
H:MOVSB m16,m16
N:0
H:MOVSB m32,m32
N:0
H:MOVSW m8,m8
N:0
H:MOVSW m16,m16
N:0
H:MOVSW m32,m32
N:0
H:MOVSD m8,m8
N:0
H:MOVSD m16,m16
N:0
H:MOVSD m32,m32
N:0
H:CMPSB m8,m8
N:0
H:CMPSB m16,m16
N:0
H:CMPSB m32,m32
N:0
H:CMPSW m8,m8
N:0
H:CMPSW m16,m16
N:0
H:CMPSW m32,m32
N:0
H:CMPSD m8,m8
N:0
H:CMPSD m16,m16
N:0
H:CMPSD m32,m32
N:0
H:SCASB m8,m8
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASB m16,m16
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASB m32,m32
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASW m8,m8
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASW m16,m16
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASW m32,m32
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASD m8,m8
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASD m16,m16
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASD m32,m32
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:LODSB m8,m8
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSB m16,m16
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSB m32,m32
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSW m8,m8
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSW m16,m16
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSW m32,m32
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSD m8,m8
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSD m16,m16
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSD m32,m32
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:STOSB m8,m8
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSB m16,m16
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSB m32,m32
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSW m8,m8
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSW m16,m16
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSW m32,m32
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSD m8,m8
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSD m16,m16
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSD m32,m32
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:REP MOVSB m8,m8
N:0
H:REP MOVSB m16,m16
N:0
H:REP MOVSB m32,m32
N:0
H:REP MOVSW m8,m8
N:0
H:REP MOVSW m16,m16
N:0
H:REP MOVSW m32,m32
N:0
H:REP MOVSD m8,m8
N:0
H:REP MOVSD m16,m16
N:0
H:REP MOVSD m32,m32
N:0
H:REP CMPSB m8,m8
N:0
H:REP CMPSB m16,m16
N:0
H:REP CMPSB m32,m32
N:0
H:REP CMPSW m8,m8
N:0
H:REP CMPSW m16,m16
N:0
H:REP CMPSW m32,m32
N:0
H:REP CMPSD m8,m8
N:0
H:REP CMPSD m16,m16
N:0
H:REP CMPSD m32,m32
N:0
H:REP SCASB m8,m8
N:0
H:REP SCASB m16,m16
N:0
H:REP SCASB m32,m32
N:0
H:REP SCASW m8,m8
N:0
H:REP SCASW m16,m16
N:0
H:REP SCASW m32,m32
N:0
H:REP SCASD m8,m8
N:0
H:REP SCASD m16,m16
N:0
H:REP SCASD m32,m32
N:0
H:REP LODSB m8,m8
N:0
H:REP LODSB m16,m16
N:0
H:REP LODSB m32,m32
N:0
H:REP LODSW m8,m8
N:0
H:REP LODSW m16,m16
N:0
H:REP LODSW m32,m32
N:0
H:REP LODSD m8,m8
N:0
H:REP LODSD m16,m16
N:0
H:REP LODSD m32,m32
N:0
H:REP STOSB m8,m8
N:0
H:REP STOSB m16,m16
N:0
H:REP STOSB m32,m32
N:0
H:REP STOSW m8,m8
N:0
H:REP STOSW m16,m16
N:0
H:REP STOSW m32,m32
N:0
H:REP STOSD m8,m8
N:0
H:REP STOSD m16,m16
N:0
H:REP STOSD m32,m32
N:0
H:MOVSX r16,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVSX r32,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVSX r32,r/m16
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVSX r16,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVSX r32,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVSX r16,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVSX r32,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVZX r16,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVZX r32,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVZX r32,r/m16
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVZX r16,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVZX r32,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVZX r32,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:CWD
N:1
D: EDX
O: sar
P:0
L:1
A: EAX, CONST
H:CDQ
N:1
D: EDX
O: sar
P:0
L:1
A: EAX, CONST
H:CBW
N:1
D: AX
O: move
P:01
L:1
A: AL
H:CWDE
N:1
D: EAX
O: move
P:01
L:1
A: AX
H:FADD ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FMUL ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FSUB ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FDIV ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FADD ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FMUL ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FSUBR ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FDIVR ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FADDP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUBP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FMULP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FDIVP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUB ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FDIV ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUBR ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FDIVR ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUBRP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FDIVRP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FADD m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FADD m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FSUB m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FSUB m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FMUL m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FMUL m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FDIV m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FDIV m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FSUBR m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FSUBR m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FDIVR m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FDIVR m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FIADD m32int
N:0
H:FIADD m16int
N:0
H:FISUB m32int
N:0
H:FISUB m16int
N:0
H:FIMUL m32int
N:0
H:FIMUL m16int
N:0
H:FIDIV m32int
N:0
H:FIDIV m16int
N:0
H:FISUBR m32int
N:0
H:FISUBR m16int
N:0
H:FIDIVR m32int
N:0
H:FIDIVR m16int
N:0
H:FSQRT
N:1
D: ST0
O: fp_sqrt
P:0
L:66
A: ST0, CONST
H:FCOM m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOM m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOM STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOM2 STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMP m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOMP m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOMP STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMP3 STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMP5 STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMPP
N:2
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST1
D: sink
O: move
P:01
L:1
A: ST0
H:FICOM m32int
N:0
H:FICOM m16int
N:0
H:FICOMP m32int
N:0
H:FICOMP m16int
N:0
H:FTST
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, CONST
H:FUCOM STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FUCOMP STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FUCOMPP
N:2
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST1
D: sink
O: move
P:01
L:1
A: ST0
H:FXAM
N:1
D: sink
O: fp_examine
P:0
L:3
A: ST0
H:FCOMI STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FCOMIP STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FUCOMI STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FUCOMIP STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FLDZ
N:1
D: ST7
O: fp_move
P:0
L:1
A: CONST
H:FLD1
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_move
P:0
L:1
A: TMP0)
H:FLDPI
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDL2T
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDL2E
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDLG2
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDLN2
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FNINIT
N:0
H:FNSTCW m2byte
N:3
D: TMP0
O:
P:( not found)
L:1
A: CONST, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0)
D: sink
O: store_address
P:3
L:1
A: MEM
H:FNSTENV m14byte
N:0
H:FNSTENV m28byte
N:0
H:FNSAVE m94byte
N:0
H:FNSAVE m108byte
N:0
H:FLDCW m2byte
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O:
P:( not found)
L:1
A: CONST, TMP0
D: sink
O: move
P:01
L:1
A: CONST
H:FRSTOR m14byte
N:0
H:FRSTOR m28byte
N:0
H:FRSTOR m94byte
N:0
H:FRSTOR m108byte
N:0
H:FNCLEX
N:3
D: sink
O: move
P:01
L:1
A: CONST
D: FSW
O: and
P:01
L:1
A: FSW, CONST
D: sink
O: move
P:01
L:1
A: CONST
H:FNSTSW m2byte
N:3
D: TMP0
O:
P:0
L:1
A: FCC, FSW
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:FNSTSW AX
N:3
D: TMP0
O:
P:0
L:1
A: FCC, FSW
D: TMP1
O: shr
P:0
L:1
A: EAX, CONST
D: EAX
O:
P:0
L:1
A: TMP1, TMP0
H:FDISI
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:FENI
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:FSETPM
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:FINCSTP
N:1
D: sink
O: fp_move
P:0
L:1
A: CONST
H:FDECSTP
N:1
D: sink
O: fp_move
P:0
L:1
A: CONST
H:FFREE ST( i)
N:1
D: sink
O: fp_move
P:0
L:1
A: ST( i)
H:FFREEP ST( i)
N:2
D: sink
O: fp_move
P:0
L:1
A: ST( i)
D: sink
O: fp_move
P:0
L:1
A: ST0
H:FNOP
N:1
D: sink
O: fp_move
P:0
L:1
A: CONST
H:FWAIT
N:2
D: sink
O: move
P:01
L:1
A: CONST
D: sink
O: move
P:01
L:1
A: CONST
H:FILD m16int
N:4
D: TMP1
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP2
O:
P:0
L:1
A: TMP1
D: ST7
O: fp_convert
P:0
L:3
A: TMP0, TMP2
H:FILD m32int
N:4
D: TMP1
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP2
O:
P:0
L:1
A: TMP1
D: ST7
O: fp_convert
P:0
L:3
A: TMP0, TMP2
H:FILD m64int
N:4
D: TMP1
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP2
O:
P:0
L:1
A: TMP1
D: ST7
O: fp_convert
P:0
L:3
A: TMP0, TMP2
H:FLD m32real
N:1
D: ST7
O: fp_load
P:2
L:1
A: MEM
H:FLD m64real
N:1
D: ST7
O: fp_load
P:2
L:1
A: MEM
H:FLD m80real
N:4
D: TMP2
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: load_ea
P:0
L:1
A: base_BBB
D: TMP3
O: fp_load
P:2
L:1
A: TMP0
D: ST7
O: merge
P:0
L:1
A: TMP3, TMP2
H:FLD STi
N:1
D: ST7
O: fp_move
P:0
L:1
A: ST( i)
H:FIST m16int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FIST m32int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FISTP m16int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: ST0, TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FISTP m32int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: ST0, TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FISTP m64int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: ST0, TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FST m32real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FST m64real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FST STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP m32real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FSTP m64real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FSTP m80real
N:0
H:FSTP STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP8 STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP9 STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP1 STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FXCH STi
N:1
D: sink
O: fp_exchange
P:( none*)
L:1
A: ST0, ST( i)
H:FXCH4 STi
N:1
D: sink
O: fp_exchange
P:( none*)
L:1
A: ST0, ST( i)
H:FXCH7 STi
N:1
D: sink
O: fp_exchange
P:( none*)
L:1
A: ST0, ST( i)
H:FCMOVB STi
N:2
D: MP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVBE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVU STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNB STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNBE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNU STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FABS
N:1
D: ST0
O: fp_xor_sign
P:0
L:1
A: ST0, ST0
H:FCHS
N:3
D: TMP0
O: fp_move
P:0
L:1
A: ST0
D: TMP1
O: freadrom
P:( not found)
L:1
A: CONST
D: ST0
O: fp_xor
P:0
L:1
A: TMP0, TMP1
H:FPREM
N:0
H:FPREM1
N:0
H:FBLD m80dec
N:0
H:FBSTP m80dec
N:0
H:FRNDINT
N:0
H:FSCALE
N:0
H:FXTRACT
N:0
H:F2XM1
N:0
H:FCOS
N:0
H:FPATAN
N:0
H:FPTAN
N:0
H:FSIN
N:0
H:FSINCOS
N:0
H:FYL2X
N:0
H:FYL2XP1
N:0
Top
So Long and Thaks for All the Fish, guys ;)Top
Q. - How to find latest version of OPCODE.LST ? A. - You may find it within Ralf's INTERxx.ZIP. Q. - Did PHG have WWW page, where placed OPCODE.LST ? A. - http://www.chat.ru/~phgTop
If You found some errors or incorrections in this text please send info 'bout it.Top
Top