💾 Archived View for uscoffings.net › retro-computing › components › PC › interrupts › OPCODES.LST captured on 2024-07-09 at 01:22:23.
⬅️ Previous capture (2022-07-16)
-=-=-=-=-=-=-
OPCODE LIST Release 61 Last change 16jul00
------------------ OPCODE.LST ----------------------------
This is DOC 'bout undocument command and document command
of any last processors. And 'bout some registers and
Chips specific stuffs.
-----------------------------------------------------------
(C) (P) Potemkin's Hackers Group 1994...1999
-----------------------------------------------------------
Revision 4.51 15 Oct 1999
-----------------------------------------------------------
Latest versions available on Web:
http://www.chat.ru/~phg
Our contact E-mail:
avp@gdev.msk.ru
ICQ UIN:
20570214
------------------------------------------------------------
[New In revision 4.50]
o AMD 3DNow! Extentions and Athlon CPU
o Update CPUID features summary
o Update OPCODE tables
o Update CPU revisions
-------------------------------------------------------------
---------------------------------------------------
OPCODE AAA - ASCII adjust AX after addition
CPU: 8086+
Type of Instruction: User
Instruction: AAA ; (no operands)
Description:
IF ((( AL and 0FH ) > 9 ) or (AF==1)
THEN {
IF CPU<286 THEN { AL <- AL+6 }
ELSE { AX <- AX+6 }
AH <- AH+1
CF <- 1
AF <- 1
} ELSE {
CF <- 0
AF <- 0
}
AL <- AL and 0Fh
Note: This istruction incorrectly documented in Intel's materials.
See description field.
Flags Affected: AF,CF (modified)
OF,SF,ZF,PF (undefined)
Faults:
RM PM V86 VME
None
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form:
COP (Code of Operation) : 37H
Clocks:
AAA
8086: 4
8088: 4
80186: 8
80286: 3
80386: 4
i486: 3
Pentium: 3
Cx486SLC: 4
Cx486DX: 4
IBM 486BL3X: 4
UMC U5S: 1
---------------------------------------------------
OPCODE AAD - ASCII adjust AX before Division
CPU: 8086+
Type of Instruction: User
Instruction: AAD basen
Description:
AL <- (AH*basen) + AL
AH <- 0
Flags Affected: SF,ZF,PF (modified)
OF,AF,CF (undefined)
Faults:
RM PM V86 VME SMM
None
CPU mode: RM,PM,VM,SMM
Note: AAD without operands means AAD with operand 0AH.
Note: NECs understand only AAD 0AH form.
+++++++++++++++++++++++
Physical Form: AAD imm8
COP (Code of Operation) : D5H imm8
Clocks: AAD 0AH
8086: 60
80186: 15
80286: 14
80386: 19
i486: 14
Pentium: 10
Cx486SLC: 4
Cx486DX: 4
IBM 486BL3X: 15
UMC U5S: 11
---------------------------------------------------
OPCODE AAM - ASCII adjust AX after Multiply
CPU: 8086+
Type of Instruction: User
Instruction: AAM basen
Description:
AH <- AL / basen
AL <- AL MOD basen
Flags Affected: SF,ZF,PF (modified)
OF,AF,CF (undefined)
Faults:
RM PM V86 VME SMM
None
CPU mode: RM,PM,VM,SMM
Note: AAM without operands means AAM with operand 0AH.
WARNING: NECs understand only AAM 0Ah form.
+++++++++++++++++++++++
Physical Form: AAM imm8
COP (Code of Operation) : D4H imm8
Clocks: AAM 0AH
8086: 83
80186: 19
80286: 16
80386: 17
i486: 15
Pentium: 18
Cx486SLC: 16
Cx486DX: 16
IBM 486BL3X: 17
UMC U5S: 12
---------------------------------------------------
OPCODE ADD4S - Addition for packed BCD strings
CPU: all NECs V-series
Type of Instruction: User
Instruction: ADD4S
Description:
BCD STRING (ADDRESS=ES:DI,LENGTH=CL) <-
BCD STRING (ADDRESS=DS:SI,LENGTH=CL) +
BCD STRING (ADDRESS=ES:DI,LENGTH=CL);
Note: si,di, other registers not changed
Flags Affected: OF,CF,ZF
;; ZF set if both strings are zeros.
;; CF,OF set as result of operation with most
;; signification BCDs.
CPU mode: RM
+++++++++++++++++++++++
Physical Form: ADD4S
COP (Code of Operation) : 0FH 20H
Clocks: ADD4S
NEC V20: ~19*(CL/2)+7
-----------------------------------------------------------------
ADDPS - Packed Single-FP Add
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: ADDPS dest,src
Description:
dest[<0>] = dest[<0>] + src[<0>];
dest[<1>] = dest[<1>] + src[<1>];
dest[<2>] = dest[<2>] + src[<2>];
dest[<3>] = dest[<3>] + src[<3>];
addition is F.P.
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
ADDPS xmm1,xmm2/m128 ---- 0F 58 /r ---- 2
-----------------------------------------------------------------
ADDSS - Scalar Single-FP Add
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: ADDSS dest,src
Description:
dest[<0>] = dest[<0>] + src[<0>];
addition is F.P.
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
ADDSS xmm1,xmm2/m32 ---- F3 0F 58 /r ---- 1
-----------------------------------------------------------------
ANDNPS - Bit-wise Logical And Not For Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: ANDNPS dest,src
Description:
dest = NOT( dest AND src ); // Bitwize
Physical Form and Timing:
ANDNPS xmm1,xmm2/m128 ---- 0F 55 /r ---- 2
-----------------------------------------------------------------
ANDPS - Bit-wise Logical And For Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: ANDPS dest,src
Description:
dest = dest AND src; // Bitwize
Physical Form and Timing:
ANDPS xmm1,xmm2/m128 ---- 0F 54 /r ---- 2
---------------------------------------------------
OPCODE BOUND - Chack Array Index Against Bounds
CPU: 80186+,NECs
Type of Instruction: User - HLL support
Instruction: BOUND index,bound_array
Description:
IF (index < (opsize ptr [bound_array]))
OR
(index > (opsize ptr [bound_array+opsize]))
THEN INT 5;
Flags Affected: No Flags Affected
CPU mode: RM,PM,VM,SMM
Faults:
RM PM V86 VME SMM
#GP(0) if result is nonwritable seg.
#GP(0) illegal memory operand
in CS..GS (exc. SS)
#SS(0) illegal memory operand in SS
#PF #PF
#UD #UD #UD if 2nd operand is register
#13 if any part of operand lie
outside of 0..FFFFh
#AC #AC if CPL=3 and enable AC.
Note: (186s&NECs) saved CS:IP BOUND interrupt as pointer to following
instruction that self.
(286+) saved as pointer to BOUND instruction.
+++++++++++++++++++++++
Physical Form: BOUND reg16,mem32
BOUND reg32,mem64
COP (Code of Operation) : 62H Postbyte
Note: for 32bit op. add Pfix 66h if in 16bit mode
Clocks: BOUND reg16,mem16
In Range Out Range
80186: 33-35
80286: 13 int+13
80386: 10
i486: 7
Pentium: 8 int+32
Cx486SLC: 11 int+11
Cx486DX: 11 int+11
---------------------------------------------------
OPCODE BRKCS - Break with Contex Switch
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: BRKCS bank
Description:
Perform a High-Speed Software Interrupt with contex-switch to
register bank indicated by the lower 3-bits of 'bank'.
Info: NEC V25/V35/V25 Plus/V35 Plus Bank System
This Chips have 8 32bytes register banks, which placed in
Internal chip RAM by addresses:
xxE00h..xxE1Fh Bank 0
xxE20h..xxE3Fh Bank 1
.........
xxEC0h..xxEDFh Bank 6
xxEE0h..xxEFFh Bank 7
xxF00h..xxFFFh Special Functions Register
Where xx is Value of IDB register.
IBD is Byte Register contained Internal data area base
IBD addresses is FFFFFh and xxFFFh where xx is data in IBD.
Format of Bank:
+0 Reserved
+2 Vector PC
+4 Save PSW
+6 Save PC
+8 DS0 ;DS
+A SS ;SS
+C PS ;CS
+E DS1 ;ES
+10 IY ;DI
+11 IX ;SI
+14 BP ;BP
+16 SP ;SP
+18 BW ;BX
+1A DW ;DX
+1C CW ;CX
+1E AW ;AX
Format of V25 etc. PSW (FLAGS):
Bit Description
15 1
14 RB2 \
13 RB1 > Current Bank Number
12 RB0 /
11 V ;OF
10 DIR ;DF
9 IE ;IF
8 BRK ;TF
7 S ;SF
6 Z ;ZF
5 F1 General Purpose user flag #1
(accessed by Flag Special Function Register)
4 AC ;AF
3 F0 General purpose user flag #0
(accessed by Flag Special Function Register)
2 P ;PF
1 BRKI I/O Trap Enable Flag
0 CY ;CF
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BRKCS reg16
COP (Code of Operation) : 0Fh 2Dh <1111 1RRR>
Clocks: 15
---------------------------------------------------
OPCODE BRKEM - Break for Emulation
CPU: NEC/Sony V20/V30/V40/V50
Type of Instruction: System
Instruction: BRKEM intnum
Description:
PUSH FLAGS
PUSH CS
PUSH IP
MOV CS,0:[intnum*4+2]
MOV IP,0:[intnum*4]
MD <- 0; // Enable 8080 emulation
Note: BRKEM instruction do software interrupt and then New CS,IP loaded
it switch to 8080 mode i.e. CPU will execute 8080 code.
Mapping Table of Registers in 8080 Mode
8080 Md. A B C D E H L SP PC F
native. AL CH CL DH DL BH BL BP IP FLAGS(low)
For Return of 8080 mode use CALLN instruction.
Note: I.e. 8080 addressing only 64KB then "Real Address" is CS*16+PC
Flags Affected: MD
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BRKEM imm8
COP (Code of Operation) : 0FH FFH imm8
Clocks: BRKEM imm8
NEC V20: 38
---------------------------------------------------
OPCODE BRKN - Break to Native Mode
CPU: NEC (V25/V35) Software Guard only
Type of Instruction: System
Instruction: BRKN int_vector
Description:
[sp-1,sp-2] <- PSW ; PSW EQU FLAGS
[sp-3,sp-4] <- PS ; PS EQU CS
[sp-5,sp-6] <- PC ; PC EQU IP
SP <- SP -6
IE <- 0
BRK <- 0
MD <- 1
PC <- [int_vector*4 +0,+1]
PS <- [int_vector*4 +2,+3]
Note: The BRKN instruction switches operations in Native Mode
from Security Mode via Interrupt call. In Normal Mode
Instruction executed as mPD70320/70322 (V25) operation mode.
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BRKN imm8
COP (Code of Operation) : 63h imm8
Clocks: 56+10T [44+10T]
---------------------------------------------------
OPCODE BRKS - Break to Security Mode
CPU: NEC (V25/V35) Software Guard only
Type of Instruction: System
Instruction: BRKS int_vector
Description:
[sp-1,sp-2] <- PSW ; PSW EQU FLAGS
[sp-3,sp-4] <- PS ; PS EQU CS
[sp-5,sp-6] <- PC ; PC EQU IP
SP <- SP -6
IE <- 0
BRK <- 0
MD <- 0
PC <- [int_vector*4 +0,+1]
PS <- [int_vector*4 +2,+3]
Note: The BRKS instruction switches operations in Security Mode
via Interrupt call. In Security Mode the fetched operation
code is executed after conversion in accordance with build-in
translation table
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BRKS imm8
COP (Code of Operation) : F1h imm8
Clocks: 56+10T [44+10T]
---------------------------------------------------
OPCODE BRKXA - Break to Expansion Address
CPU: NEC V33/V53 only
Type of Instruction: System
Instruction: BRKXA int_vector
Description:
[sp-1,sp-2] <- PSW ; PSW EQU FLAGS
[sp-3,sp-4] <- PS ; PS EQU CS
[sp-5,sp-6] <- PC ; PC EQU IP
SP <- SP -6
IE <- 0
BRK <- 0
MD <- 0
PC <- [int_vector*4 +0,+1]
PS <- [int_vector*4 +2,+3]
Enter Expansion Address Mode.
Note: In NEC V53 Memory Space dividing into 1024 16K pages.
The programming model is Same as in Normal mode.
Mechanism is:
20 bit Logical Address: 19..14 Page Num 13..0 Offset
page Num convertin by internal table to 23..14 Page Base
tHE pHYSICAL ADDRESS is both Base and Offset.
Address Expansion Registers:
logical Address A19..A14 I/O Address
0 FF00h
1 FF02h
... ...
63 FF7Eh
Register XAM aliased with port # FF80h indicated current mode
of operation.
Format of XAM register (READ ONLY):
15..1 reserved
0 XA Flag, if=1 then in XA mode.
Format of V53 PSW:
15..12 1
11 V
10 DIR
9 IE
8 BRK
7 S
6 Z
5 0
4 AC
3 0
2 P
1 1
0 CY
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BRKXA imm8
COP (Code of Operation) : 0Fh E0h imm8
Clocks: 12
---------------------------------------------------
OPCODE BSWAP - Bytes Swap
CPU: I486 +
Type of Instruction: User
Instruction: BSWAP dwordr
Description:
XCHG BYTE dwordr[31:24],dwordr[7:0]
XCHG BYTE dwordr[23:16],dwordr[15:8]
; Need Good Picture to Show It
Notes: This instruction used for converting big-endian
(Intel) format to little-endian (Motorolla etc.) format.
Flags Affected: None
CPU mode: RM,PM,VM,SMM
Physical Form: BSWAP r32
COP (Code of Operation): 0FH 11001rrr (For 32bit segment)
Clocks: Cyrix Cx486SLC : 4
i486 : 1
Pentium : 1
Cyrix Cx486DX : 4
UMC U5S : 2
IBM 486BL3X : 9
---------------------------------------------------
OPCODE BTCLR - Bit Test, If it True Clear and Branch
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: User
Instruction: BTCLR var,bitnumber,Short_Label
Description:
IF BIT(bitnumber OF var) =1 THEN
{
PC <- PC + ext - disp8;
BIT(bitnumber OF var) <-0
}
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: BTCLR reg/mem8,imm3, short_label
COP (Code of Operation) : 0Fh 9Ch PostByte imm3 Short_Label (Total=5 bytes)
Clocks: 29
---------------------------------------------------
OPCODE CALLN - Call Native Mode Routine
CPU: NEC/Sony V20/V30 etc
Type of Instruction: System
Instruction: CALLN intnum
Description:
CALLN instruction call (interrupt service in Native Mode)
from 8080 emulation mode:
PUSH FLAGS
PUSH CS
PUSH IP
IF <- 0
TF <- 0
MD <- 1
MOV CS,0:[intnum*4+2]
MOV IP,0:[intnum*4]
Flags Affected: IF,TF,MD
CPU mode: 8080 Emulation
+++++++++++++++++++++++
Physical Form: CALLN imm8
COP (Code of Operation) : EDH EDH imm8
Clocks:
NEC V20/V30: 38-58
---------------------------------------------------
OPCODE CLEAR1 - Clear one bit
CPU: NEC/Sony all V-series.
Type of Instruction: User
Instruction: CLEAR1 dest,bitnumb
Description:
BIT bitnumb OF dest <- 0;
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: CLEAR1 reg/mem8,CL
COP (Code of Operation) : 0FH 12H Postbyte
Physical Form: CLEAR1 reg/mem8,imm8
COP (Code of Operation) : 0FH 1AH Postbyte imm8
Physical Form: CLEAR1 reg/mem16,CL
COP (Code of Operation) : 0FH 13H Postbyte
Physical Form: CLEAR1 reg/mem16,imm8
COP (Code of Operation) : 0FH 1BH Postbyte imm8
Clocks: CLEAR1
r/m8,CL r/m8,i8 r/m16,CL r/m16,i8
NEC V20: 5/14 6/15 5/14 6/15
---------------------------------------------------
OPCODE CMOVcc - Conditional Move
CPU: P6
Type of Instruction: User
Instruction: CMOVcc dest,sorc
Description:
IF condition(cc) is true THEN dest <- sorc;
Flags Affected: None
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form & COPs:
CMOVO reg,reg/mem 0FH 40H Postbyte
CMOVNO reg,reg/mem 0FH 41H Postbyte
CMOVC reg,reg/mem 0FH 42H Postbyte
CMOVNC reg,reg/mem 0FH 43H Postbyte
CMOVZ reg,reg/mem 0FH 44H Postbyte
CMOVNZ reg,reg/mem 0FH 45H Postbyte
CMOVNA reg,reg/mem 0FH 46H Postbyte
CMOVA reg,reg/mem 0FH 47H Postbyte
CMOVS reg,reg/mem 0FH 48H Postbyte
CMOVNS reg,reg/mem 0FH 49H Postbyte
CMOVP reg,reg/mem 0FH 4AH Postbyte
CMOVNP reg,reg/mem 0FH 4BH Postbyte
CMOVL reg,reg/mem 0FH 4CH Postbyte
CMOVNL reg,reg/mem 0FH 4DH Postbyte
CMOVNG reg,reg/mem 0FH 4EH Postbyte
CMOVG reg,reg/mem 0FH 4FH Postbyte
Clocks: ~1 (~pairing with other instructions)
---------------------------------------------------
OPCODE CMP4S - Compare for packed BCD strings
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: CMP4S
Description:
SetFlaGS( BCD STRING (ADDRESS=ES:DI,LENGTH=CL) -
BCD STRING (ADDRESS=DS:SI,LENGTH=CL) );
Note: si,di, other registers not changed
Flags Affected: OF,CF,ZF
;; ZF set if RESULT of subtraction is zero.
;; CF,OF set as result of operation with most
;; signification BCDs.
CPU mode: RM
+++++++++++++++++++++++
Physical Form: CMP4S
COP (Code of Operation) : 0FH 26H
Clocks: CMP4S
NEC V20: ~7+19*CL
-----------------------------------------------------------------
CMPPS - Packed Single FP-Compare
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CMPPS dest,src,predicate
Description:
operation predicate
EQ equal (dest == src) 0
LT less-than (dest < src) 1
LE less-equal (dest <= src) 2
UNORD unordered (dest ? src) 3
NEQ not-equal (dest <> src) 4
NLT not-less-that (dest => src) 5
NLE not-less-equal (dest > src) 6
ORD ordered !(dest ? src) 7
par for i = 0 to 3 do
cmp<i> = dest[<i>] operation(predicate) src[<i>];
if cmp<i> = true then
dest[<i>] = 0xffffffff;
else
dest[<i>] = 0x00000000;
endif
endfor endpar
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Note: Compilers may implement additional instructions:
CMPEQPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,0
CMPLTPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,1
CMPLEPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,2
CMPUNORDPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,3
CMPNEQPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,4
CMPNLTPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,5
CMPNLEPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,6
CMPORDPS xmm1,xmm2 <=> CMPPS xmm1,xmm2,7
Physical Form and Timing:
CMPPS xmm1,xmm2/m128,imm8 ---- 0F C2 /r imm8 ---- 1-2
-----------------------------------------------------------------
CMPSS - Scalar Single FP-Compare
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CMPSS dest,src,predicate
Description:
operation predicate
EQ equal (dest == src) 0
LT less-than (dest < src) 1
LE less-equal (dest <= src) 2
UNORD unordered (dest ? src) 3
NEQ not-equal (dest <> src) 4
NLT not-less-that (dest => src) 5
NLE not-less-equal (dest > src) 6
ORD ordered !(dest ? src) 7
cmp = dest[<0>] operation(predicate) src[<0>];
if cmp = true then
dest[<0>] = 0xffffffff;
else
dest[<0>] = 0x00000000;
endif
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Note: Compilers may implement additional instructions:
CMPEQSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,0
CMPLTSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,1
CMPLESS xmm1,xmm2 <=> CMPSS xmm1,xmm2,2
CMPUNORDSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,3
CMPNEQSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,4
CMPNLTSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,5
CMPNLESS xmm1,xmm2 <=> CMPSS xmm1,xmm2,6
CMPORDSS xmm1,xmm2 <=> CMPSS xmm1,xmm2,7
Physical Form and Timing:
CMPSS xmm1,xmm2/m128,imm8 ---- F3 0F C2 /r imm8 ---- 1-2
---------------------------------------------------
OPCODE CMPXCHG8B - Compare and exchange 8 bytes
CPU: Pentium (tm), Pentium Pro(tm), AMD Am5k86
Type of Instruction: Operation
Instruction: CMPXCHG8B dest
Note: dest is memory operand: QWORD PTR [memory]
Description:
IF ( QWORD(EDX:EAX) = dest) THEN
{
ZF <- 1;
dest <- QWORD(ECX:EBX);
}
ELSE
{
ZF <- 0;
EDX:EAX <- dest
}
END
Flags Affected: ZF
CPU mode: RM,PM,VM,SMM
Physical Form: CMPXCHG8B mem64
COP (Code of Operation) : 0FH C7H Postbyte
Clocks: Pentium : 10
Note: Postbyte MMRRRMMM: MM<>11 if (==) then INT 6
---------------------------------------------------
OPCODE CMPXCHG - Compare and exchange
CPU: i486+
Type of Instruction: User
Instruction: CMPXCHG dest,sorc
Description:
Acc = if OperationSize(8) -> AL
OperationSize(16) -> AX
OperationSize(32) -> EAX
IF ( Acc = dest) THEN
{
ZF <- 1;
dest <- sorc;
}
ELSE
{
ZF <- 0;
Acc <- dest;
}
END
Note: This instruction used to support semaphores
Flags Affected: ZF ( see description)
OF,SF,AF,PF,CF ( like CMP instruction ) ( see description)
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form: CMPXCHG r/m8,r8
COP (Code of Operation) : 0FH A6H Postbyte ; i486 (A-B0 step)
: 0FH B0H Postbyte ; i486 (B1+ step clones
; and upgrades)
Clocks:
Intel i486 : 6/7 if compare OK
: 6/10 if compare FAIL
Cyrix Cx486SLC : 5/7
Pentium (tm) : 6
Penalty if cache miss :
Intel i486 : 2
Cyrix Cx486SLC : 1
+++++++++++++++++++++
Physical Form: CMPXCHG r/m16,r16
CMPXCHG r/m32,r32
COP (Code of Operation) : 0FH A7H Postbyte ; i486 (A-B0 step)
: 0FH B1H Postbyte ; i486 (B1+ step clones
; and upgrades)
Clocks:
Intel i486 : 6/7 if compare OK
: 6/10 if compare FAIL
Cyrix Cx486SLC : 5/7
Pentium (tm) : 6
Penalty if cache miss :
Intel i486 : 2
Cyrix Cx486SLC : 1
-----------------------------------------------------------------
COMISS - Scalar Ordered Single-FP Compare and Set EFLAGS
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: COMISS dest,src
Description:
OF <- 0;
SF <- 0;
AF <- 0;
if (dest[<0>] UNORD src[<0>]) then
ZF <- 1;
PF <- 1;
CF <- 1;
elif (dest[<0>] > src[<0>]) then
ZF <- 0;
PF <- 0;
CF <- 0;
elif (dest[<0>] < src[<0>]) then
ZF <- 0;
PF <- 0;
CF <- 1;
else
ZF <- 1;
PF <- 0;
CF <- 0;
endif
<0> is 31..0
Physical Form and Timing:
COMISS xmm1,xmm2/m32 ---- 0F 2F /r ---- ?
---------------------------------------------------
OPCODE CPUID - CPU Identification
CPU: Intel 486DX/SX/DX2 SL Enhanced and all later
Intel processors include ( IntelDX4, IntelSX2,
Pentium etc.), UMC microprocessors: U5S,U5SD,U5S-VL.
Cyrix M1, AMD K5, Intel P6, and AMD Ehnanced Am486 CPU,
such as A80486DX4-100SV8B.
Note: i.e. 1993+ years processors produced by Intel
Note: To know if your CPU support CPUID instruction
try to set ID flag ( bit 21 of EFLAGS ) to 1, and
if it sets this mean that CPUID support.(Soft).
Or If Your CPU is Intel Look for '&E' signature on
Top side of Chip.(Hard)
Type of Instruction: Operation
Instruction: CPUID
Description:
IF (EAX=0) THEN // All
{
EAX <- Maximum value of EAX to CALL CPUID instruction
1 for all processors (date 1 September 1994)
may be >1 in future microprocessors
;; EBX,EDX and ECX contain a OEM name string
;; for Intel this string is 'GenuineIntel'
EBX <- 756E6547H i.e. 'Genu'
EDX <- 49656E69H i.e. 'ineI'
ECX <- 6C65746EH i.e. 'ntel'
;; for UMC this string is 'UMC UMC UMC '
EBX <- 20434D55H i.e. 'UMC '
EDX <- 20434D55H i.e. 'UMC '
ECX <- 20434D55H i.e. 'UMC '
;; for Cyrix this string is 'CyrixInstead' (Cx6x86,Cx5x86 steps B+)
;; for AMD this string is 'AuthenticAMD' (K6,K5,486 Enhanced CPUs)
;; for last NexGen is 'NexGenDriven' (Nx5x86 latest models)
;; for Centaur Technology is 'CentaurHauls' (IDT)
;; for Rise Technology is 'RiseRiseRise'
}
ELSEIF (EAX=1) THEN // All
{
EAX[3:0] <- Stepping ID
EAX[7:4] <- Model
EAX[11:8] <- Family
; 3 - 386 family
; 4 - i486 family
; 5 - Pentium family
; 6 - Pentium Pro family
EAX[15:12] <- Reserved
; 0 - Original OEM processor
; 1 - OverDrive
; 2 - Dual Processor
Note: Pentium P54C have pin CPUTYPE which
define is this CPU First or Second e.t.c
in System.
So, if this chip set in "First" socket it
return for example 0425h, but THIS chip
return 2425h if we insert it in "Second"
socket.
Note: Refer to Appendix B for more information.
EAX[31:16] <- Reserved and set to 0s now
Note: This value in EAX[31:0] is upper 32-bit of 96-bit processor
serial number.
EDX <- Compability flags
;; below all info if bit flag =1
EDX[0] <- FPU: FPU on Chip
EDX[1] <- VME: Virtual Mode Extention present
EDX[2] <- DE: Debbuging Extentions
EDX[3] <- PSE: CPU support 4MB size pages
EDX[4] <- TSC: TSC present (See RDTSC command)
EDX[5] <- MSR: CPU have Pentium Compatible MSRs
EDX[6] <- PAE: Physical Address Extension (Intel)
EDX[6] <- PTE: Support PTE (Cyrix)
When set in PTE TLB will not be flushed
when CR3 is written.
EDX[7] <- MCE: Machine Check exception
EDX[8] <- CX8: Support CMPXCHG8B instruction
EDX[9] <- APIC: Local APIC on Chip (Intel)
PGE: Page Global Extension (K5)
EDX[10]<- reserved
EDX[11]<- SEP: Fast System Call feature (Pentium Pro)
EDX[12]<- MTRR: CPU support Memory Type Range Register (MTRR)
EDX[13]<- PGE: Page Global Feature support
EDX[14]<- MCA: Machine Check Architecture
EDX[15]<- CMOV: CPU support CMOV instruction
EDX[16]<- PAT: Page Attribute Table
EDX[17]<- PSE36: CPU support 4MB Pages for access memory higher
that 2GB.
EDX[18]<- SN: CPU Support Processor Serial Number
EDX[22..19] <- Reserved
EDX[23] <- MMX: CPU support IA MMX
EDX[24] <- FXSR: CPU Support Fast Save/Restore (IA MMX-2)
EDX[25] <- SIMD: Streaming SIMD Extension (IA MMX-2)
EDX[31:26] <- Reserved and set to 0s now
}
ELSEIF (EAX=2)
{
AL = 1 (Pentium Pro, Pentium II)
remainder of EAX and EBX,ECX,EDX contain bytes which
described cache architecture on this chip.
Description of this bytes is:
Value Description
00h None
01h Instruction TLB, 4K page, 4way, 64 entry
02h Instruction TLB, 4M page, 4way, 4 entry
03h Data TLB, 4K page, 4way, 64 entry
04h Data TLB, 4M page, 4way, 8 entry
06h Instruction Cache, 8K, 4 way, 32 byte per line
08h Instruction Cache, 16K, 4 way, 32 byte per line
0Ah Data cache, 8K, 2 way, 32 byte per line
0Ch Data cache, 16K, 4 way, 32 byte per line
40h No L2 cache
41h Unifed L2 cache, 32 byte per line, 4 way, 128KB
42h Unifed L2 cache, 32 byte per line, 4 way, 256KB
43h Unifed L2 cache, 32 byte per line, 4 way, 512KB
44h Unifed L2 cache, 32 byte per line, 4 way, 1MB
45h Unifed L2 cache, 32 byte per line, 4 way, 2MB
(Cyrix MediaGX MMX Enhanced)
70h TLB 32-bit entry, 4 way, 4K cache
80h L1 cache 4-way associative, 16byte/line
}
ELSEIF (EAX = 3) // Pentium III
{
EDX:ECX <- Lower 64-bit of 96-bit processor serial number.
}
ELSEIF (EAX = 80000000h) // (K5 not SSA/5),K6, Cyrix GXm
{
EBX,ECX,EDX <- Undefined
EAX <- Largest Extended function value recognized by CPUID.
(Note: Extended CPUID functions started with 80000000h)
(Example: For AMD 5k86 (K5) = 80000005h )
}
ELSEIF (EAX = 80000001h) // K5,K6,Cyrix GXm,IDT Winchip 2
{
EAX <- AMD Processor Signature
0000051Xh - for AMD 5k86 (K5 not SSA/5)
0000066Xh - for AMD 6k86 (K6)
EBX,ECX <- Undefined
EDX <- Extended Feature Flags
EDX[0] <- FPU: FPU on Chip
EDX[1] <- VME: Virtual Mode Extention present
EDX[2] <- DE: Debbuging Extentions
EDX[3] <- PSE: CPU support 4MB size pages
EDX[4] <- TSC: TSC present (See RDTSC command)
EDX[5] <- MSR: CPU have K5 Compatible MSRs
or Cyrix Compatible MSRs
EDX[6] <- PAE: Page Address Extensions
EDX[7] <- MCE: Machine Check exception
EDX[8] <- CX8: Support CMPXCHG8B instruction
EDX[9] <- APIC: CPU have local APIC (must be enabled)
EDX[10] <- Reserved
EDX[11] <- SYSCALL and SYSRET Instructions (!)
EDX[12]<- MTRR: Memory Type Range Registers
EDX[13]<- Global Paging Extensions (PTE-PGE)
EDX[14]<- MCA: Machine Check Architecture
EDX[15]<- CMOV: CPU support CMOV instruction (!)
EDX[16]<- FCMOV: CPU support FP. FCMOV (!)
EDX[17]<- PSE: Page Size Extention
EDX[21..18] <- Reserved
EDX[22] <- MMXE: CPU Support Extended MMX instructions
(AMD Athlon)
EDX[23] <- MMX: CPU support IA MMX
EDX[24] <- (Cyrix) Cyrix Extended MMX support
EDX[24] <- (AMD) FXSAVE/FXRSTOR instruction support
EDX[29..24] <- Reserved
EDX[30] <- CPU support Extended 3DNow! Instructions
EDX[31] <- AMD 3DNow! support
;Note: For AMD K5 = 000021BFh
For AMD K6 = 008005BFh
}
ELSEIF (EAX = 80000002h,80000003h,80000004h) // AMD K5,K6, Cyrix GXm
{ // IDT Winchip 2
EAX, EBX, ECX ,EDX = CPU Name
// Note: for AMD K5 (Don't forget x86 is BIG-Endian!!)
// CPUID(EAX) EAX EBX ECX EDX
// 80000002h 2D444D41 7428354B 5020296D 65636F72
// AMD- K5(r m) P roce
// 80000003h 726F7373 00000000 00000000 00000000
// ssor
// 80000004h 00000000 00000000 00000000 00000000
}
ELSEIF (EAX = 80000005h) // AMD K5,K6,Cyrix GXm
{ // L1 TLB and Cache information
EAX <- TLB Information (for 2M/4M pages):
see format of EBX.
EBX <- TLB Information (for 4K pages):
EBX[31..24] <- Data TLB: Associativity
(if Full assocuiativity = FFh)
see CPUID 80000006h for more datails
EBX[23..16] <- Data TLB: Number of Entryes
EBX[15..8] <- Instruction TLB: Associativity
(if Full assocuiativity = FFh)
EBX[7..0] <- Instruction TLB: Number of Entryes
ECX <- L1 Data Cache Information
ECX[31..24] <- Size in KB
ECX[23..16] <- Associativity (if full = FFh)
ECX[15..8] <- Lines per Tag
ECX[7..0] <- Line size in Bytes
EDX <- L1 Instruction Cache Information
ECX[31..24] <- Size in KB
ECX[23..16] <- Associativity (if full = FFh)
ECX[15..8] <- Lines per Tag
ECX[7..0] <- Line size in Bytes
// Note: after execution CPUID with EAX = 80000005h
// reg AMD K5 AMD K6
// EBX 04800000 02800140
// ECX 08040120 20020220
// EDX 10040120 20020220
}
ELSE THEN (EAX = 80000006h) // K6-III model-9, AMD Athlon
{ // L2 cache and TLB information
EAX = 2M/4M Pages and L2 TLB Info
bits description
31..28 Associativity (L2 Data TLB)
0000 L2 off
0001 Direct Mapped
0010 2-Way
0100 4-Way
0110 8-Way
1000 16-Way
1111 Full
27..16 Number of Entries (L2 Data TLB)
15..12 Associativity (L2 Instruction or Unifed TLB)
11..0 Number of entries (L2 Instruction or Unifed TLB)
EBX = 4K Pages and L2 TLB Info
bits description
31..28 Associativity (L2 Data TLB)
27..16 Number of Entries (L2 Data TLB)
15..12 Associativity (L2 Instruction or Unifed TLB)
11..0 Number of entries (L2 Instruction or Unifed TLB)
ECX = L2 Unifed Cache Info (K6-III: only this field)
bits description
31..16 Size (KB)
15..12 Associativity
11..8 Lines per tag
7..0 Line size (bytes)
EDX = reserved
}
ELSE THEN
{
EAX,EBX,ECX,EDX <- Undefined
}
END.
------------------------------------------------------
Notes: In Tables Below, you may see that Your CPU return other features
values, so in this tables, values writed on maximal. So possibly
some features exists on Your CPU, but not activated in time You
test, so CPUID return less functions that processor really can
support
------------------------------------------------------
Table of STANDART Features (CPUID/EAX=1) by Different Vendors
Media
(Cyrix) 6x86 6x86L GX 6x86MX MII GXm
EDX[0] <- FPU: + + + + + +
EDX[1] <- VME: - - - - - -
EDX[2] <- DE: - + - + + -
EDX[3] <- PSE: - - - - - -
EDX[4] <- TSC: - - - + + +
EDX[5] <- MSR: - - - + + +
EDX[6] <- PAE: - - - - -
EDX[6] <- PTE: ?
EDX[7] <- MCE: - - - - - -
EDX[8] <- CX8: - + - + + +
EDX[9] <- APIC: - - - - -
EDX[10]<- res - - - - - -
EDX[11]<- SEP: - - - - - -
EDX[12]<- MTRR: - - - - - -
EDX[13]<- PGE: - - - + + -
EDX[14]<- MCA: - - - - - -
EDX[15]<- CMOV: - - - + + +
EDX[16]<- PAT: - - - - - -
EDX[17]<- PSE36:- - - - - -
EDX[18]<- SN: - - - - - -
EDX[23]<- MMX: - - - + + +
EDX[24]<- FXSR: - - - - - -
EDX[25]<- SIMD: - - - - - -
IDT IDT AMD AMD AMD AMD AMD
(IDT/AMD) C6 C2 K5 K6 K6-2 K6-III Athlon
EDX[0] <- FPU: + + + + + + +
EDX[1] <- VME: - - + + + + +
EDX[2] <- DE: + + + + + + +
EDX[3] <- PSE: - - + + + + +
EDX[4] <- TSC: + + + + + + +
EDX[5] <- MSR: + + + + + + +
EDX[6] <- PAE: - - - - - - +
EDX[7] <- MCE: + + + + + + +
EDX[8] <- CX8: + + + + + + +
EDX[9] <- APIC: - - - - - x
EDX[9] <- GPE +
EDX[10]<- res - - - - - - -
EDX[11]<- SEP: - - - - - - +
EDX[12]<- MTRR: - - - - - - +
EDX[13]<- PGE: - - - - - - +
EDX[14]<- MCA: - - - - - - +
EDX[15]<- CMOV: - - - - - - +
EDX[16]<- PAT: - - - - - - +
EDX[17]<- PSE36:- - - - - - -
EDX[18]<- SN: - - - - - - -
EDX[23]<- MMX: + + - + + + +
EDX[24]<- FXSR: - - - - - - -
EDX[25]<- SIMD: - - - - - - -
Pentium Pentium Pentium Pentium
(Intel) Pentium w/MMX Pro II III Celeron
EDX[0] <- FPU: + + + + + +
EDX[1] <- VME: + + + + + +
EDX[2] <- DE: + + + + + +
EDX[3] <- PSE: + + + + + +
-------------------------------------------------------
EDX[4] <- TSC: + + + + + +
EDX[5] <- MSR: + + + + + +
EDX[6] <- PAE: - - + + + +
EDX[7] <- MCE: + + + + + +
-------------------------------------------------------
EDX[8] <- CX8: + + + + + +
EDX[9] <- APIC: (1) (1) (1) (1) (1) (1)
EDX[10]<- res - - - - ? -
EDX[11]<- SEP: - - + + + +
-------------------------------------------------------
EDX[12]<- MTRR: - - + + + +
EDX[13]<- PGE: - - + + + +
EDX[14]<- MCA: - - + + + +
EDX[15]<- CMOV: - - + + + +
-------------------------------------------------------
EDX[16]<- PAT: - - - (2) + +
EDX[17]<- PSE36:- - - (2) + +
EDX[18]<- SN: - - - - + -
EDX[23]<- MMX: - + - + + +
EDX[24]<- FXSR: - - - (2) + +
EDX[25]<- SIMD: - - - - + -
(1) = Intel produce chips with APIC and w/o APIC.
(2) = It start to support since "Deschutes" core
SL_enh SL_enh WB_Enh Intel Pentium UMC AMD
i486SX DX/DX2 i486DX2 DX4 OVDR U5S 5x86
EDX[0] <- FPU: - + + + + - +
EDX[1] <- VME: + + + + + - -
EDX[2] <- DE: - - - - + - -
EDX[3] <- PSE: - - + + + - -
-------------------------------------------------------
EDX[4] <- TSC: - - - - + - -
EDX[5] <- MSR: - - - - + - -
EDX[6] <- PAE: - - - - - - -
EDX[7] <- MCE: - - - - - - -
-------------------------------------------------------
EDX[8] <- CX8: - - - - + - -
EDX[9] <- APIC: - - - - - - -
no need to look higher flags, theys is 0s.
------------------------------------------------------
Table of EXTENDED Features (CPUID/EAX=80000001) by Different
Vendors
Cyrix IDT IDT AMD AMD AMD AMD
GXm C6 C2 K6 K6-2 K6-III Athlon
EDX[0] <- FPU: + + + + + + +
EDX[1] <- VME: - - - + + + +
EDX[2] <- DE: - + + + + + +
EDX[3] <- PSE: - - - + + + +
EDX[4] <- TSC: + + + + + + +
EDX[5] <- MSR: + + + + + + +
EDX[6] <- PAE: - - - - - - +
EDX[7] <- MCE: - + + + + + +
EDX[8] <- CX8: + + + + + + +
EDX[9] <- APIC: - - - - - - *
EDX[10]<- res - - - + - - -
EDX[11]<- SCL - - - - + + +
EDX[12]<- MTRR - - - - - - +
EDX[13]<- GPE - - - - + + +
EDX[14]<- MCE - - - - - - +
EDX[15]<- CMOV + - - - - - +
EDX[16]<- PAT ? - - - - - +
EDX[17]<- PSE36 - - - - - - -
EDX[22]<- AMMX - - - - - - +
EDX[23]<- MMX + + + + + + +
EDX[24]<- EMMX + - - - - - -
EDX[30]<- E3D! - - - - - - +
EDX[31]<- 3D! - - + - + + +
Refer to: Appendix B for more informations about CPU codes.
Note: On IDT C6 CPU we may set any Identification string and family/model/
stepping info. (See MSRs 108h,109h for More Details).
Here is 3 examples of Information we can may get from CPUID instruction:
1) UMC U5S
Note: All UMC Chips: U5S,U5SD, 3V chips never have FPU on-chip,
and never support VME
Maximum Available of CPUID info entrys:1
Vendor string is : "UMC UMC UMC "
Model Info :
Stepping ID is : 3
Model : 2
Family : 4
M field : 0
Compability Flags:
FPU on Chip :-
Virtual Mode Extensions present :-
CPU support I/O breakpoints :-
CPU support 4MB pages :-
Time Stamp Counter Presents :-
CPU have Pentium compatible MSRs :-
Machine Check Exception Presents :-
CMPXCHG8B instruction support :-
APIC on Chip :-
2) Intel 486
Note: All SL Enhanced 486: { i486SX,i486DX,i486DX2 marked '&E' on chip
surface }, IntelSX2,IntelDX4 support VME !!!!
But: Sxs never have FPU on chip.
Maximum Available of CPUID info entrys:1
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 0
Model : 8
Family : 4
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :-
CPU support 4MB pages :-
Time Stamp Counter Presents :-
CPU have Pentium compatible MSRs :-
Machine Check Exception Presents :-
CMPXCHG8B instruction support :-
APIC on Chip :-
3) Pentium
Note: P54C may say that build-in APIC not present if it
not supported by external hardware !!!!! (This data from
P54C in single processor configuration)
Maximum Available of CPUID info entrys:1
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 1
Model : 2
Family : 5
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :+
CPU support 4MB pages :+
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
Machine Check Exception Presents :+
CMPXCHG8B instruction support :+
APIC on Chip :-
4) Pentium OverDrive
Note: P24T never have Machine Check Exception
Maximum Available of CPUID info entrys:1
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 1
Model : 3
Family : 5
M field : 1
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :+
CPU support 4MB pages :+
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
Machine Check Exception Presents :-
CMPXCHG8B instruction support :+
APIC on Chip :-
5) AMD Am5x86 (also AMD Enhanced 486).
Maximum Available of CPUID info entrys:1
Vendor string is : "AuthenticAMD"
Model Info :
Stepping ID is : 4
Model : 15
Family : 4
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :-
CPU support I/O breakpoints :-
CPU support 4MB pages :-
Time Stamp Counter Presents :-
CPU have Pentium compatible MSRs :-
P6 Flag: n/a :-
Machine Check Exception Presents :-
CMPXCHG8B instruction support :-
6) Pentium Pro (P6)
Maximum Available of CPUID info entrys:2 <<-------------- !!!!
Vendor string is : "GenuineIntel"
Model Info :
Stepping ID is : 1
Model : 1
Family : 6
M field : 0
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :+
CPU support I/O breakpoints :+
CPU support 4MB pages :+
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
P6 Flag: n/a :+
Machine Check Exception Presents :+
CMPXCHG8B instruction support :+
APIC on Chip :+
Reserved :- ; bit 10
Fast System Call feature :+
Memory Type Range Regs. support :+
Page Global Feature support :+
Machine Check Architecture :+
CMOVxx instructions support :+
IA MMX support :+
7)
Maximum Available of CPUID info entrys:1
Vendor string is : "CyrixInstead"
Compability Flags:
FPU on Chip :+
Virtual Mode Extensions present :-
CPU support I/O breakpoints :+
CPU support 4MB pages :-
Time Stamp Counter Presents :+
CPU have Pentium compatible MSRs :+
P6 Flag: n/a :+
Machine Check Exception Presents :-
CMPXCHG8B instruction support :+
APIC on Chip :-
Reserved :-
Reserved :-
Memory Type Range Regs. support :-
Page Global Feature support :+
Machine Check Architecture :-
CMOVxx instructions support :+
IA MMX support :+
Note: Some Last NexGen Nx586 support CPUID instruction, but never support ID
flag in EFALGS, so check it with #UD hook.
Note: On Cyrix CPUs need to Enable CPUID instruction, setting CPUIDEN bit
in CCR4.
Note: Cyrix Cx6x86 return on CPUID(1) in EAX next data:
YYYYXXMMh - where
YYYY - normally 0s.
XX - value of control register 0FCh
(usually 05h, may be changed to any
other value by user).
MM - Model Unical Revision (according to DIR0)
Note: Cyrix 486s never support CPUID.
Flags Affected: None
CPU mode: RM,PM,VM,SMM
Physical Form: CPUID
COP (Code of Operation): 0FH A2H
Clocks: 486s & Pentium (EAX=1) : 14
486s & Pentium (EAX=0 or EAX>1) : 9
-----------------------------------------------------------------
CVTPI2PS - Packed Signed INT32 to Packed Single-FP Conversion
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CVTPI2PS dest,src
Description:
dest[<0>] <- (float) src[<0>];
dest[<1>] <- (float) src[<1>];
<0> is 31..0
<1> is 63..32
Physical Form and Timing:
CVTPI2PS xmm,mm/m64 ---- 0F 2A /r ---- ??
-----------------------------------------------------------------
CVTPS2PI - Packed Single-FP to Packed INT32 Conversion
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CVTPS2PI dest,src
Description:
dest[<0>] <- (int) src[<0>];
dest[<1>] <- (int) src[<1>];
src is in Single F.P. format
<0> is 31..0
<1> is 63..32
Physical Form and Timing:
CVTPS2PI mm,xmm/m64 ---- 0F 2D /r ---- ??
-----------------------------------------------------------------
CVTSI2SS - Scalar Signed INT32 to Single-FP Conversion
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CVTSI2SS dest,src
Description:
dest[<0>] <- (float) src[<0>];
<0> is 31..0
Physical Form and Timing:
CVTSI2SS xmm,r/m32 ---- F3 0F 2A /r ---- ??
-----------------------------------------------------------------
CVTSS2SI - Scalae Single-FP to Signed INT32 Conversion
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CVTSS2SI dest,src
Description:
dest[<0>] <- (int) src[<0>];
src is in Single F.P. format
<0> is 31..0
Physical Form and Timing:
CVTSS2SI r32,xmm/m32 ---- F3 0F 2D /r ---- ??
-----------------------------------------------------------------
CVTTPS2PI - Packed Single-FP to Packed INT32 Conversion (Truncate)
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CVTTPS2PI dest,src
Description:
dest[<0>] <- (int) src[<0>];
dest[<1>] <- (int) src[<1>];
<0> is 31..0
<1> is 63..32
Physical Form and Timing:
CVTTPS2PI mm,xmm/m64 ---- 0F 2C /r ---- ??
-----------------------------------------------------------------
CVTTSS2SI - Scalar Single-FP to Signed INT32 Conversion (Truncate)
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: CVTTSS2SI dest,src
Description:
dest[<0>] <- (int) src[<0>]
if conversion is unexact returning truncate value,
if result > maximal 32-bit value, result will be 0x80000000
Physical Form and Timing:
CVTTSS2SI r32,xmm/m32 ---- F3 0F 2C /r ---- ??
-----------------------------------------------------------------
DIVPS - Packed Single-FP Divide
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: DIVPS dest,src
Description:
dest[<0>] = dest[<0>] / src[<0>];
dest[<1>] = dest[<1>] / src[<1>];
dest[<2>] = dest[<2>] / src[<2>];
dest[<3>] = dest[<3>] / src[<3>];
Physical Form and Timing:
DIVPS xmm1,xmm2/m128 ---- 0F 5E /r ---- 24-106
-----------------------------------------------------------------
DIVSS - Scalar Single-FP. Divide
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: DIVSS dest,src
Description:
dest[<0>] = dest[<0>] / src[<0>];
Physical Form and Timing:
DIVSS xmm1,xmm2/r32 ---- F3 0F 5E /r ---- 7-??
---------------------------------------------------
OPCODE EMMS - Empty MMX State
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: EMMS
Description:
FloatPointTagWord <- FFFFh
Note: The EMMS instruction sets the values of the floating-point (FP) tag
word to empty (all ones). EMMS marks the registers as available, so
they can subsequently be used by floating-point instructions.
If a floating-point instruction loads into one of the registers
before it has been reset by the EMMS instruction, a floating-point
stack overflow can occur, which results in a FP exception or incorrect
result. All other MMX instructions validate the entire FP tag word (all
zeros).
This instruction must be used to dear the MMX state at the end of all
MMX routines, and before calling other routines that may execute
floating-point instructions.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
EMMS 0FH 77H
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE ESC - Escape Extrnal Cooprocessors
CPU: 8086...80386, any Hybrid 486.
Type of Instruction: User
Instruction: ESC Number,R/M
Description: This Instruction uses for Link with External Coprocessors
Such as NPX. External Coprocessors look at command sequence
at get ESC. CPU give Memory Operand sending to A-bus EA
doing pseudo-read operation.
{ If 2nd Operand is Register then Do Nothing,
If 2nd Operand is Memory then set EA (Effective Address)
in Address Bus }
First operand is Part of Command that Ext. coprocessors get.
Flags Affected: None
Example: ESC 0Fh,DX means FSQRT
Note: ESC mnemonic was used for 8086 CPU, later all were used alternative
mnemonic for cooprocessor instructions, such as FSQRT.
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form:
COP (Code of Operation) : <1101 1xxx> Postbyte
Clocks: ESC n,Reg ESC n,Mem8/Mem16
8088: 2 8/12+EA
286: 9-20 9-20
386: N/A N/A
486: N/A N/A
---------------------------------------------------
OPCODE EXT - Extract Bit Field
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: EXT start,len
Description:
AX <- BitField [
BASE = DS:SI
START BIT OFFSET = start
LENGTH = len
];
Note: si and start automatically UPDATE
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form : EXT reg8,reg8
COP (Code of Operation) : 0FH 33H PostByte
Clocks: EXT reg8,reg8
NEC V20: 26-55
---------------------------------------------------
OPCODE F4X4 - FPU: Multiplicate vector on Matrix 4x4
FPU: IIT FPUs.
Type of Instruction: FPU instruction
Instruction: F4X4
Description:
; This Instruction Multiplicate vector on
; Matrix 4X4
_ _ _ _ _ _
| | | | | |
| Xn | | A00 A01 A02 A03 | | X0 |
| Yn | = | A10 A11 A12 A13 | X | Y0 |
| Zn | | A20 A21 A22 A23 | | Z0 |
| Wn | | A30 A31 A31 A33 | | W0 |
|_ _| |_ _| |_ _|
; Data fetches/stores from/to FPU registers:
# of F E T C H E S STORE
Register Bank0 Bank1 Bank2 Bank0
ST X0 A33 A31 Xn
ST(1) Y0 A23 A21 Yn
ST(2) Z0 A13 A11 Zn
ST(3) W0 A03 A01 Wn
ST(4) A32 A30
ST(5) A22 A20
ST(6) A12 A10
ST(7) A02 A00
Note: See FSBP0,FSBP1,FSBP2 for more information
FPU Flags Affected: S
FPU mode: Any
Physical Form: F4X4
COP (Code of Operation): DBH F1H
Clocks: IIT 2c87 : 242
IIT 3c87 : 242
IIT 3c87SX : 242
---------------------------------------------------
OPCODE FCMOVcc - Floating Point Conditional Move
CPU: P6
Type of Instruction: User
Instruction: FCMOVcc dest,sorc
Description:
IF condition(cc) is true THEN dest <- sorc;
Flags Affected: Int: None
Fp : None
Note: Testing Integer flags:
cc Meaning Test Flags Description
B Below CF=1 <
NB Not Below CF=0 >=
E Equal ZF=1 =
NE Not Equal ZF=0 !=
BE Below Equal (CF=1 .OR. ZF=1) <=
NBE Not BelowEqual (CF=0 .AND. ZF=0) >
U Unordered PF=1
NU Not Unordered PF!=1
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form & COPs:
FCMOVB ST,STi DA C0+i
FCMOVE ST,STi DA C8+i
FCMOVBE ST,STi DA D0+i
FCMOVU ST,STi DA D8+i
FCMOVNB ST,STi DB C0+i
FCMOVNE ST,STi DB C8+i
FCMOVNBE ST,STi DB D0+i
FCMOVNU ST,STi DB D8+i
Clocks: N/A
---------------------------------------------------
OPCODE FCOMI - Floating Point Compare setting Integer Flags
CPU: P6
Type of Instruction: User
Instruction: FuCOMIp ST0,STi
Description:
CASE ( result (compare(ST0,STi) ) OF
{ ; ZF PF CF
Not Comparable: 1 1 1
ST0 > STi : 0 0 0
ST0 < STi : 0 0 1
ST0 = STi : 1 0 0
}
CASE ( FP_stack_status ) OF
{ ; SF
Overflow : 1
Underflow : 0
Otherwize : 0
}
CASE ( instruction ) OF
{
FCOMI,FUCOMI : No FP stack adjustment;
FCOMIP,FUCOMIP : POP ST;
}
Flags Affected: Int: CF,ZF,PF,SF
Fp : None
Note: In any case Sign of zero Ignored , so +0.0 = -0.0
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form & COPs:
FCOMI ST0,STi DB F0+i
FCOMIP ST0,STi DF F0+i
FUCOMI ST0,STi DB E8+i
FUCOMIP ST0,STi DF E8+i
Clocks: N/A
-----------------------------------------------
OPCODE FEMMS - Faster Enter/Exit of MMX of F.P. state
CPU: AMD-3D
Type of Instruction: User
Instruction: FEMMS (no operands)
Description:
Clear MMX state after MMX instructions.
(FPU.TAG <- FFFFh).
Faster version of EMMS.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
FEMMS 0FH 0EH
---------------------------------------------------
OPCODE FINT - Finished Interrupt
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: FINT
Description:
Inticate to Internal Interrupt controller that
interrupt service Routine is completed. (EOI)
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: FINT
COP (Code of Operation) : 0Fh 92h
Clocks: 2
---------------------------------------------------
OPCODE FNDISI - Disable NPX Interrupt
FPU: i8087 only
Type of Instruction: FPU instruction
Instruction: FNDISI
Description:
CW.IEM <- 1; // Enable NPX interrupt
Note: IEM is 7 of FPU.CW
FPU Flags Affected: None
CPU mode: 8087 support just real mode
Physical Form: FNDISI
COP (Code of Operation): DBH E1H
Clocks: i8087 5
---------------------------------------------------
OPCODE FNENI - Enable NPX Interrupt
FPU: i8087 only
Type of Instruction: FPU instruction
Instruction: FNENI
Description:
CW.IEM <- 0; // Enable NPX interrupt
Note: IEM is 7 of FPU.CW
FPU Flags Affected: None
CPU mode: 8087 support just real mode
Physical Form: FNENI
COP (Code of Operation): DBH E0H
Clocks: i8087 5
---------------------------------------------------
OPCODE FNSTDW - FPU Not wait Store Device Word register
FPU: i387SL Mobile
Type of Instruction: FPU instruction
Instruction: FNSTDW dest
Description:
dest <- Device Word
Format of Device word:
bit(s) Description
0-7 Reserved
8 S - Status bit:
if S=1 then FP device is a static design and OS
or APM Bios may set CLK slow to 0 Mhz without
lost any data.
9-15 Reserved
Note: Device word register valid only after FNINIT
FPU Flags Affected: None
CPU mode: Any
Physical Form: FNSTDW AX
COP (Code of Operation): DFH E1H
Clocks: i387SL Mobile: 13
---------------------------------------------------
OPCODE FNSTSG - FPU Not wait Store Signature Word register
FPU: i387SL Mobile
Type of Instruction: FPU instruction
Instruction: FNSTSG dest
Description:
dest <- Signature Word
Format of Signature word:
bit(s) Description
3-0 Revision
7-4 Steppin
11-8 Family
15-12 Version
Note:
For i387(tm) SL Mobile Signature is:
Version = 2
Family = 3 ; 387
Stepping = 1 ; Ax step
Revision = 0 ; x0 step
i.e i387(tm) SL is A0 step
Note: This FPU is out of life
Note: Signature word register valid only after FNINIT
FPU Flags Affected: None
CPU mode: Any
Physical Form: FNSTSG AX
COP (Code of Operation): DFH E2H
Clocks: i387SL Mobile: 13
---------------------------------------------------
OPCODE FPO2 - Floating Point Operations 2nd Way
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: FPO2 fp_op,mem
Description:
This instruction was building for sending FP commands to
NEC NPX which never be realized
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form : FPO2 imm4,reg/mem
COP (Code of Operation) :
If imm4 in range 0-7 then
66H mmFFFMMM there FFF is imm4.
If imm4 in range 7-F then
67H mmFFFMMM there FFF is imm4.
Clocks: FPO2 imm4,reg/mem
NEC V20: 2/11
---------------------------------------------------
OPCODE FRICHOP - FPU: Round to Integer chop method
FPU: Cyrix FPUs and 486s with FPU on chip
Type of Instruction: FPU instruction
Instruction: FRICHOP
Description:
ST <- ROUND ( ST,CHOP )
Note:
This instruction calculate rounding ST toward zero
i.e. ignoring part righter that decimal .
Examples:
1.2 -> 1.0
-1.2 -> -1.0
3.0 -> 3.0
0.0 -> 0.0
1.5 -> 1.0
-2.0 -> -2.0
FPU Flags Affected: S,P,D,I,C1
FPU mode: Any
Physical Form: FRICHOP
COP (Code of Operation): DDH FCH
Clocks: Cx83D87 : 15
Cx83S87 : 15
CxEMC87 : 15
Cx487DLC :
---------------------------------------------------
OPCODE FRINEAR - FPU: Round to Integer Nearest method
FPU: Cyrix FPUs and 486s with FPU on chip
Type of Instruction: FPU instruction
Instruction: FRINEAR
Description:
ST <- ROUND ( ST,NEAREST )
Note:
This instruction calculate rounding ST toward nearest
Examples:
1.2 -> 1.0
-1.2 -> -1.0
3.0 -> 3.0
0.0 -> 0.0
1.5 -> 1.0
1.8 -> 2.0
-2.0 -> -2.0
FPU Flags Affected: S,P,D,I,C1
FPU mode: Any
Physical Form: FRINEAR
COP (Code of Operation): DFH FCH
Clocks: Cx83D87 : 15
Cx83S87 : 15
CxEMC87 : 15
Cx487DLC :
---------------------------------------------------
OPCODE FRINT2 - FPU: Round to Integer
FPU: Cyrix FPUs and 486s with FPU on chip
Type of Instruction: FPU instruction
Instruction: FRINT2
Description:
IF ( exact half ) THEN
{
ST <- SIGN(ST) * ROUND(ABS(ST)+0.5,NEAREST)
}
ELSE
{
ST <- ROUND ( ST,NEAREST )
}
END
Note:
This instruction calculate rounding ST toward nearest,
but if number is exact half then this instruction round
it toward signed infinity. Sign of this infinity is same
with sign of number.
Examples:
1.2 -> 1.0
-1.2 -> -1.0
3.0 -> 3.0
0.0 -> 0.0
1.5 -> 2.0
1.8 -> 2.0
-2.0 -> -2.0
-1.5 -> -2.0
FPU Flags Affected: S,P,D,I,C1
FPU mode: Any
Physical Form: FRINT2
COP (Code of Operation): DBH FCH
Clocks: Cx83D87 : 15
Cx83S87 : 15
CxEMC87 : 15
Cx487DLC :
---------------------------------------------------
OPCODE FRSTPM - FPU Reset Protected Mode
FPU: i287XL i287XLT
Type of Instruction: FPU instruction
Instruction: FRSTPM
Description:
Reset Cooprocessor from Protected Mode
to Real Address mode.
FPU Flags Affected: None
CPU mode:Any ???
Physical Form: FRSTPM
COP (Code of Operation): DBH E5H
Clocks: i287XL : 12
i287XLT : 12
---------------------------------------------------
OPCODE FSBP0 - FPU: Set Bank pointer to Bank # 0
FPU: IIT FPUs.
Type of Instruction: FPU instruction
Instruction: FSBP0
Description:
; This Instruction set current bank pointer to
; Bank # 0.
; Each bank contain eight 80bit registers
; There are 3 banks (0,1,2) in Chip
; After initialization FPU select bank # 0.
FPU Flags Affected: None
FPU mode: Any
Physical Form: FSBP0
COP (Code of Operation): DBH E8H
Clocks: IIT 2c87 : 6
IIT 3c87 : 6
IIT 3c87SX : 6
---------------------------------------------------
OPCODE FSBP1 - FPU: Set Bank pointer to Bank # 1
FPU: IIT FPUs.
Type of Instruction: FPU instruction
Instruction: FSBP1
Description:
; This Instruction set current bank pointer to
; Bank # 1.
; Each bank contain eight 80bit registers
; There are 3 banks (0,1,2) in Chip
; After initialization FPU select bank # 0.
FPU Flags Affected: None
FPU mode: Any
Physical Form: FSBP1
COP (Code of Operation): DBH EBH
Clocks: IIT 2c87 : 6
IIT 3c87 : 6
IIT 3c87SX : 6
---------------------------------------------------
OPCODE FSBP2 - FPU: Set Bank pointer to Bank # 2
FPU: IIT FPUs.
Type of Instruction: FPU instruction
Instruction: FSBP2
Description:
; This Instruction set current bank pointer to
; Bank # 2.
; Each bank contain eight 80bit registers
; There are 3 banks (0,1,2) in Chip
; After initialization FPU select bank # 0.
FPU Flags Affected: None
FPU mode: Any
Physical Form: FSBP2
COP (Code of Operation): DBH EAH
Clocks: IIT 2c87 : 6
IIT 3c87 : 6
IIT 3c87SX : 6
---------------------------------------------------
OPCODE FSETPM - FPU Set Protected Mode Adressing
FPU: 80287, i287XL i287XLT
Type of Instruction: FPU instruction
Instruction: FRSTPM
Description:
Setup Coprocessor for addressing in Protected mode
FPU Flags Affected: None
CPU mode:Any ???
Physical Form: FSETPM
COP (Code of Operation): DBH E4H
Clocks: i287XL : 12
i287XLT : 12
---------------------------------------------------
OPCODE FXRSTOR - Fast Restore F.P. Context
CPU: Katmai/Deschutes (IA MMX-2)
Type of Instruction: User
Instruction: FXRSTOR src
Description:
Fast Restore 94 (16-bit mode) or 108 (32-bit mode) byte of
F.P. context to memory.
Format of context as in standart x86 instruction: FSAVE.
Note: Check CPUID, EAX=1, bit 24 for knew CPU support this feature.
And then look at CR4.bit9.
Note: See FXSAVE for more information
Flags Affected: None
CPU mode: any
+++++++++++++++++++++++
Physical Form & COPs:
FXRSTOR mem512byte 0F AE mm001mmm
Clocks: n/a
---------------------------------------------------
OPCODE FXSAVE - Fast Save F.P. Context
CPU: Pentium II (Deschutes) +
Type of Instruction: User
Instruction: FXSAVE dest
Description:
Fast Save 94 (16-bit mode) or 108 (32-bit mode) byte of
F.P. context to memory.
Format of context as in standart x86 instruction: FSAVE.
Note: Check CPUID, EAX=1, bit 24 for knew CPU support this feature.
And then look at CR4.bit9.
Format of F.P./MMX Save Area:
Offset
(hex) Size Description
+00 WORD FCW (Control word)
+02 WORD FSW (Status word)
+04 WORD FTW (Tag word)
+06 WORD FOP (lower 11-bit F.P. opcode)
+08 DWORD IP (F.P. Instruction pointer)
+0C WORD CS
+10 DWORD DP (F.P. Data pointer)
+14 WORD DS
+18 DWORD MXCSR (Pentium III+)
see LDMXCSR instruction for more info
+20 TBYTE ST0/MM0
+30 TBYTE ST1/MM1
+40 TBYTE ST2/MM2
+50 TBYTE ST3/MM3
+60 TBYTE ST4/MM4
+70 TBYTE ST5/MM5
+80 TBYTE ST6/MM6
+90 TBYTE ST7/MM7
+A0 16BYTE XMM0 (Pentium III+)
+B0 16BYTE XMM1 (Pentium III+)
+C0 16BYTE XMM2 (Pentium III+)
+D0 16BYTE XMM3 (Pentium III+)
+E0 16BYTE XMM4 (Pentium III+)
+F0 16BYTE XMM5 (Pentium III+)
+100 16BYTE XMM6 (Pentium III+)
+110 16BYTE XMM7 (Pentium III+)
All other fields are reserved.
Full length of Save/Restore area is 512 byte. (200h)
Flags Affected: None
CPU mode: any
+++++++++++++++++++++++
Physical Form & COPs:
FXSAVE mem512byte 0F AE mm000mmm
Clocks: n/a
---------------------------------------------------
OPCODE IBTS - Insert Bits String
CPU: 80386 step A0-B0 only
Type of Instruction: User
Instruction: IBTS base,bitoffset,len,sorc
Description:
Write bit string length <len> bits from
<sorc> [bits <len> .. 0 ] (lowest bits) to bitfield,
defined by <base> and bitsoffset <bitoffset> from this base
to start of the field to write. String write from this start
field bit to higher memory addresses or register bits.
Flags Affected: None
CPU mode: RM,PM,VM
+++++++++++++++++++++++
Physical Form: IBTS r/m16,AX,CL,r16
IBTS r/m32,EAX,CL,r32
COP (Code of Operation) : 0FH A7H Postbyte
Clocks: IBTS
80386: 12/19
---------------------------------------------------
OPCODE ICEBP - PWI Mode BreakPoint, ICE address space
CPU: IBM 486SLC2
Type of Instruction: System
Instruction: ICEBP
Description:
IF (condition) THEN ; see condition below
{
SAVE STATUS OF EXECUTION TO ICE space;
ENTER SMM;
}
ELSE
{
INT 1;
}
END
Note: This condition can be set before execution this instruction:
CPL=0
MSR1000H.EPCEA=1
MSR1000H.EPWI=1
See Appendix X for more info.
Flags Affected: None
CPU mode: RM,PM0
Physical Form: ICEBP
COP (Code of Operation): F1H
Clocks: IBM 486SLC2 : 460
---------------------------------------------------
OPCODE ICEBP - In-Circuit Emulator Breakpoint
CPU: some models of i486, i386, Pentium, Pentium Pro
Type of Instruction: System
Instruction: ICEBP
Description:
IF (condition) THEN ; see condition below
{
CHANGED TO THE ICE instruction mode;
}
ELSE
{
INT 1;
}
END
Note: 386/486: Condition is DR7.bit12=1
(CPU must be supported ICE).
Note: This instruction very usefull to debbuging as Single-Byte Interrupt
but it generate never int 3, but int 1.
Note: On Pentium Interrupt redirection initiately disabled on PMCR
(Probe Mode Control Register), which is only accessable via debug port
i.e. Need external hardware for enable normal ICEBP execution.
Note: On Pentium Pro situation is the same.
But in Pentium Pro Intel named this instruction INT01.
Flags Affected: None
CPU mode: RM,PM0
Physical Form: ICEBP
COP (Code of Operation): F1H
Clocks: : N/A
---------------------------------------------------
OPCODE ICERET - Return from PWI mode, ICE space
CPU: IBM 486SLC2
Type of Instruction: System Operation
(Work only then CPL=0)
Instruction: ICERET
Description:
Load All Registers (Include Shadow Registers) from Table
Which Begin on place pointed ES:EDI, and return from PWI
mode.
Format of ICERET Table:
Offset Len Description
0H 4 CR0
4H 4 EFLAGS
8H 4 EIP
CH 4 EDI
10H 4 ESI
14H 4 EBP
18H 4 ESP
1CH 4 EBX
20H 4 EDX
24H 4 ESX
28H 4 EAX
2CH 4 DR6
30H 4 DR7
34H 4 TR (16 bit, zero filled up)
38H 4 LDT ---------
3CH 4 GS ---------
40H 4 FS ---------
44H 4 DS ---------
48H 4 SS ---------
4CH 4 CS ---------
50H 4 ES ---------
54H 4 TSS.attrib
58H 4 TSS.base
5CH 4 TSS.limit
60H 4 Reserved
64H 4 IDT.base
68H 4 IDT.limit
6CH 4 REP OUTS overrun flag
70H 4 GDT.base
74H 4 GDT.limit
78H 4 LDT.attrib
7CH 4 LDT.base
80H 4 LDT.limit
84H 4 GS.attrib
88H 4 GS.base
8CH 4 GS.limit
90H 4 FS.attrib
94H 4 FS.base
98H 4 FS.limit
9CH 4 DS.attrib
A0H 4 DS.base
A4H 4 DS.limit
A8H 4 SS.attrib
ACH 4 SS.base
B0H 4 SS.limit
B4H 4 CS.attrib
B8H 4 CS.base
BCH 4 CS.limit
C0H 4 ES.attrib
C4H 4 ES.base
C8H 4 ES.limit
Unknown Unusable area
;; Temporary registers:
100H 4 TST
104H 4 IDX
108H 4 TMPH
10CH 4 TMPG
110H 4 TMPF
114H 4 TMPE
118H 4 TMPD
11CH 4 TMPC
120H 4 TMPB
124H 4 TMPA
128H 4 CR2
12CH 4 CR3
130H 4 MSR1001H (31-0)
134H 4 MSR1001H (63-32)
138H 4 MSR1000H (15-0)
13CH 4 DR0
140H 4 DR1
144H 4 DR2
148H 4 DR3
14CH 4 PEIP
Length of table is 150H bytes.
see Appendix X for more info.
Note: For descriptor format refer to LOADALL and RES3 instructions.
Flags Affected: All (FLAGS Register Reload)
CPU mode: SMM
Physical Form: ICERET
COP (Code of Operation): 0FH 07H Note: Code is same with Intel's LOADALL
Clocks: IBM 486SLC2 : 440
---------------------------------------------------
OPCODE INS - Insert Bit String
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: INS start,len
Description:
BitField [ BASE = ES:DI
START BIT OFFSET = start
LENGTH = len
] <- AX [ bits= (len-1)..0]
Note: di and start automatically UPDATE
Note: Alternative Name of this instruction is NECINS
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form : INS reg8,reg8
COP (Code of Operation) : 0FH 31H PostByte
Clocks: INS reg8,reg8
NEC V20: 31-117
---------------------------------------------------
OPCODE INVD - Invalidate Cache Buffer
CPU: I486 +
Type of Instruction: System
Instruction: INVD
Description:
FLUSH INTERNAL CACHE
( It means that all lines of internal caches sets as
invalid )
SIGNAL EXTERNAL CACHE TO FLUSH
Notes: This instruction not work in Real Mode and in
Protected mode work only in ring 0 ;
Flags Affected: None
CPU mode: PM0,SMM?
Physical Form: INVD
COP (Code of Operation): 0FH 08H
Clocks: Cyrix Cx486SLC : 4
i486 : 4
Pentium : 15
---------------------------------------------------
OPCODE INVLPG - Invalidate Page Entry In TLB
CPU: I486 +
Type of Instruction: System
Instruction: INVLPG mem
Description:
IF found in data or code (if both) (or common if single)
TLB entry with linear address (page part) same as
memory operand <mem> then mark this entry as Invalid;
Notes: This instruction not work in Real Mode and in
Protected mode work only in ring 0 ;
Flags Affected: None
CPU mode: RM,PM,VM,SMM
Physical Form: INVLPG mem
COP (Code of Operation): 0FH 01H mm111mmm
Clocks: Cyrix Cx486SLC : 4
i486 : 12 if hit
: 11 if not hit
Pentium : 25
---------------------------------------------------
OPCODE JMPE - Jump and change to 64-bit ISA.
CPU: Merced
Type of Instruction: User
Instruction: JMPX dest_addr
Description:
This instruction make jump to specified address, and
change execution mode from IA-32 to IA-64.
(So address must be 16-byte aligned).
Note: The other method to cnange execution mode to IA-64 is interrupt
to 64-bit code or IRET in IA-32 routine, which will be called from
IA-64.
back to IA-32 mode using commands: br.ia, rti and via interrupt.
Flags Affected: None
CPU mode: IA-32
Physical Form: JMPX rel16/rel32 0F B8 rel16/rel32
JMPX r/m(16/32) 0F 00 /6
COP (Code of Operation):
Clocks: Merced :
-----------------------------------------------------------------
LDMXCSR - Load Streaming SIMD Extension Control/Status
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: LDMXCSR src
Description:
MXCSR <- src;
Format of MXCSR:
Bits Description
31..16 Reserved
15 FZ (Flush to Zero)
14..13 RC (Round Control)
00 Round to nearest (even)
01 Round down (to minius infinity)
10 Round up (to positive infinity)
11 Round toward zero (Truncate)
12 PM (SIMD numeric exception masks)
11 UM
10 OM
9 ZM
8 DM
7 IM
6 Reserved
5 PE (SIMD numeric exceptions)
4 UE
3 OE
2 ZE
1 DE
0 IE
Physical Form and Timing:
LDMXCSR m32 ---- 0F AE /2 ---- ??
---------------------------------------------------
OPCODE LOADALL - Load All Registers
CPU: Intel 386+ +all clones
Type of Instruction: System
(Work only then CPL=0)
Instruction: LOADALL
Description:
Load All Registers (Include Shadow Registers) from Table
Which Begin on place pointed ES:EDI
Format of LOADALL Table:
Offset Len Description
0H 4 CR0
4H 4 EFLAGS
8H 4 EIP
CH 4 EDI
10H 4 ESI
14H 4 EBP
18H 4 ESP
1CH 4 EBX
20H 4 EDX
24H 4 ESX
28H 4 EAX
2CH 4 DR6
30H 4 DR7
34H 4 TR (16 bit, zero filled up)
38H 4 LDT ---------
3CH 4 GS ---------
40H 4 FS ---------
44H 4 DS ---------
48H 4 SS ---------
4CH 4 CS ---------
50H 4 ES ---------
54H 4 TSS.attrib
58H 4 TSS.base
5CH 4 TSS.limit
60H 4 0s
64H 4 IDT.base
68H 4 IDT.limit
6CH 4 0s
70H 4 GDT.base
74H 4 GDT.limit
78H 4 LDT.attrib
7CH 4 LDT.base
80H 4 LDT.limit
84H 4 GS.attrib
88H 4 GS.base
8CH 4 GS.limit
90H 4 FS.attrib
94H 4 FS.base
98H 4 FS.limit
9CH 4 DS.attrib
A0H 4 DS.base
A4H 4 DS.limit
A8H 4 SS.attrib
ACH 4 SS.base
B0H 4 SS.limit
B4H 4 CS.attrib
B8H 4 CS.base
BCH 4 CS.limit
C0H 4 ES.attrib
C4H 4 ES.base
C8H 4 ES.limit
CCH 4 Length of table
D0H 30h Unused,not loaded
100H 4 Temporary Register IST
104H 4 Temporary Register I
108H 4 Temporary Register H
10CH 4 Temporary Register G
110H 4 Temporary Register F
114H 4 Temporary Register E
118H 4 Temporary Register D
11CH 4 Temporary Register C
120H 4 Temporary Register B
124H 4 Temporary Register A
Format of Attrib field:
Byte Description
0 0s
1 AR (Access Right) byte in the Descriptor format
Note:
P bit is a valid bit
if valid bit=0 then Shadow Register is invalid and
INT 0DH - General Protection Fault call
DPL of SS,CS det. CPL
2-3 0s
Flags Affected: All (FLAGS Register Reload)
CPU mode: RM,PM0
Physical Form: LOADALL
COP (Code of Operation): 0FH 07H
Clocks: i386XX : n/a
i486XX : n/a
Note: This operation used 102 data transfer cycles on 32bit bus
Typical clocks:
i386SX: ~350
i386DX: ~290
i486XX: ~220
---------------------------------------------------
OPCODE LOADALL - Load All Registers From Table
CPU: Intel 80286 and all its clones
Type of Instruction: System
(Work only then CPL=0)
Instruction: LOADALL
Description:
Load All Registers (Include Shadow Registers) from Table
Which Begin on 000800H Address, Len of this table is
66H
Format of LOADALL Table:
Address Len Description
800H 6 None
806H 2 MSW
808H 14 None
816H 2 TR
818H 2 FLAGS
81AH 2 IP
81CH 2 LDTR
81EH 2 DS
820H 2 SS
822H 2 CS
824H 2 ES
826H 2 DI
828H 2 SI
82AH 2 BP
82CH 2 SP
82EH 2 BX
830H 2 DX
832H 2 CX
834H 2 AX
836H 6 ES Shadow Descriptor
83CH 6 CS Shadow Descriptor
842H 6 SS Shadow Descriptor
848H 6 DS Shadow Descriptor
84EH 6 GDTR
854H 6 LDT Shadow Descriptor
85AH 6 IDTR
860H 6 TSS Shadow Descriptor
Format of Shadow Descriptor:
Byte Description
0-2 24bit Phisical Address
3 AR (Access Right) byte
4-5 16bit Segment Limit
Format of GDTR and IDTR:
Byte Description
0-2 24bit Phisical Address
3 0s
4-5 16bit Segment Limit
Note: Using this instruction we may turn on "Big Real Mode" i.e. mode then
PG=1,PE=0,cpl=0. This mode very usefull,But Pentium never support this
instruction.
Flags Affected: All (FLAGS Register Reload)
CPU mode: RM,PM0
Physical Form: LOADALL
COP (Code of Operation): 0FH 05H
Clocks: 80286 : 195
-----------------------------------------------------------------
MASKMOVQ - Byte Mask Write
CPU: Pentium III+ (KNI/MMX2), Athlon+ (AMD EMMX)
Type of instruction: User
Instruction: MASKMOVQ src,mask
Description:
#define MOVE_BYTE(check_bit,move_bits)
if (mask[check_bit] == 1) mem64[EDI][move_bits] = src[move_bits];
else mem64[EDI][move_bits] = 0;
endif;
#enddef
MOVE_BYTE(7 , 7..0);
MOVE_BYTE(15, 15..8);
MOVE_BYTE(23, 23..16);
MOVE_BYTE(31, 31..24);
MOVE_BYTE(39, 39..32);
MOVE_BYTE(47, 47..40);
MOVE_BYTE(55, 55..48);
MOVE_BYTE(63, 63..56);
Physical Form and Timing:
MASKMOVQ mm1,mm2 ---- 0F F7 /r ---- ??
-----------------------------------------------------------------
MAXPS - Packed Single-FP Maximum
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MAXPS dest,src
Description:
par for i=0 to 3 do
if dest[<i>] is NaN then dest[<i>] <- src[<i>];
if src[<i>] is NaN then dest[<i>] <- src[<i>];
if src[<i>] >= dest[<i>] then dest[<i>] <- src[<i>];
endfor;
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MAXPS xmm1,xmm2/m128 ---- 0F 5F /r ---- 2
-----------------------------------------------------------------
MAXSS - Scalar Single-FP Maximum
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MAXSS dest,src
Description:
if dest[<0>] is NaN then dest[<0>] <- src[<0>];
if src[<0>] is NaN then dest[<0>] <- src[<0>];
if src[<0>] >= dest[<0>] then dest[<0>] <- src[<0>];
Physical Form and Timing:
MAXSS xmm1,xmm2/m32 ---- F3 0F 5F /r ---- 1
-----------------------------------------------------------------
MINPS - Packed Single-FP Minimum
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MINPS dest,src
Description:
par for i=0 to 3 do
if dest[<i>] is NaN then dest[<i>] <- src[<i>];
if src[<i>] is NaN then dest[<i>] <- src[<i>];
if src[<i>] < dest[<i>] then dest[<i>] <- src[<i>];
endfor;
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MINPS xmm1,xmm2/m128 ---- 0F 5D /r ---- 2
-----------------------------------------------------------------
MINSS - Scalar Single-FP Manimum
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MINSS dest,src
Description:
if dest[<0>] is NaN then dest[<0>] <- src[<0>];
if src[<0>] is NaN then dest[<0>] <- src[<0>];
if src[<0>] < dest[<0>] then dest[<0>] <- src[<0>];
Physical Form and Timing:
MINSS xmm1,xmm2/m32 ---- F3 0F 5D /r ---- 1
-----------------------------------------------------------------
MOVAPS - Move Aligned Four Packed Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVAPS dest,src
Description:
dest <- src;
Note: This instruction moved 16-byte (128-bit) total size
4x 32-bit FP. from/to memory.
Address of this F.P. block must be 16-bytes aligned
Physical Form and Timing:
MOVAPS xmm1,xmm2/m128 ---- 0F 28 /r ---- ??
MOVAPS xmm2/m128,xmm1 ---- 0F 29 /r ---- ??
---------------------------------------------------
OPCODE MOVD - Move Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: MOVD dest,src
Description:
IF dest is MMi register THEN
{
dest[63..32] <- 0
dest[31..0] <- src
} ELSE ; If dest is DWORD
dest <- src [31..0]
Note: This instruction moved DWORDs to/from MMX registers
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If result in Non-Writable segment
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
MOVD mm,r/m32 0FH 6EH PostByte
MOVD r/m32,mm 0Fh 7Eh PostByte
mm,r/m32 r/m32,mm
P55C: n/a (~1) (~1)
future P6: n/a (~1) (~1)
-----------------------------------------------------------------
MOVHLPS - Move High to Low Packed Single-F.P.
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVHLPS dest,src
Description:
dest[<1>] <- src[<3>];
dest[<0>] <- src[<2>];
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MOVHLPS xmm1,xmm2 ---- 0F 12 /r ---- 1
-----------------------------------------------------------------
MOVHPS - Move High Packed Single FP.
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVHPS dest,src
Description:
if (dest is mem64) then
dest[<1>] <- src[<3>];
dest[<0>] <- src[<2>];
endif
if (src is mem64) then
dest[<3>] <- src[<1>];
dest[<2>] <- src[<0>];
endif
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MOVHPS xmm,m64 ---- 0F 16 /r ---- 1
MOVHPS m64,xmm ---- 0F 17 /r ---- 1
-----------------------------------------------------------------
MOVLHPS - Move Low to High Packed Single-F.P.
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVLHPS dest,src
Description:
dest[<3>] <- src[<1>];
dest[<2>] <- src[<0>];
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MOVLHPS xmm1,xmm2 ---- 0F 16 /r ---- 1
-----------------------------------------------------------------
MOVLPS - Move Low Packed Single FP.
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVLPS dest,src
Description:
dest[<1>] <- src[<1>];
dest[<0>] <- src[<0>];
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MOVLPS xmm,m64 ---- 0F 12 /r ---- 1
MOVLPS m64,xmm ---- 0F 13 /r ---- 1
-----------------------------------------------------------------
MOVMSKPS - Move Mask to Integer
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVMSKPS dest,src
Description:
dest[0] <- src[31]; // Single Bits, not bit groups
dest[1] <- src[63];
dest[2] <- src[95];
dest[3] <- src[127];
dest[31..4] <- 0;
Physical Form and Timing:
MOVMSKPS r32,xmm ---- 0F 50 /m ---- ??
-----------------------------------------------------------------
MOVNTPS - Move Aligned Four Packed Single-FP Non Temporal
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVNTPS dest,src
Description:
dest <- src; // This store mimimize cache pollution
// storing XMM 128-bit register
Physical Form and Timing:
MOVNTPS m128,xmm ---- 0F 2B /r ---- ??
-----------------------------------------------------------------
MOVNTQ - Move 64 bits non temporal
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: MOVNTQ dest,src
Description:
dest <- src; // This store minimize cache pollution
// storing MM (MMX) 64-bit register
Physical Form and Timing:
MOVNTQ m64,mm ---- 0F E7 /r ---- ??
---------------------------------------------------
OPCODE MOVQ - Move Qwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: MOVQ dest,src
Description:
dest <- src
Note: This instruction moved QWORDs to/from MMX registers
Of course, IA support Big-endian QWORDS.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If result in Non-Writable segment
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
MOVQ mm,mm/m64 0FH 6FH PostByte
MOVQ mm/m64,mm 0Fh 7Fh PostByte
Note: In PostByte instead IU registers used MMX registers,
0Fh 6Fh C0h means MOVQ MM0,MM0
mm,r/m32 r/m32,mm
P55C: n/a (~1) (~1)
future P6: n/a (~1) (~1)
---------------------------------------------------
OPCODE MOVSPA - Move Stack Pointer After Bank Switched
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: MOVSPA
Description: This instruction transfer both SS and SP of the old register
bank to new register bank after the bank has been switched by
interrupt or BRKCS instruction.
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: MOVSPA
COP (Code of Operation) : 0Fh 25h
Clocks: 16
---------------------------------------------------
OPCODE MOVSPB - Move Stack Pointer Before Bamk Switching
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: MOVSPB Number_of_bank
Description: The MOVSPB instruction transfers the current SP and SS before
the bank switching to new register bank.
Note: New Register Bank Number indicated by lower 3bit of Number_of_
_bank.
Note: See BRKCS instruction for more info about banks.
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: MOVSPB reg16
COP (Code of Operation) : 0Fh 95h <1111 1RRR>
Clocks: 11
-----------------------------------------------------------------
MOVSS - Move Scalar Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVSS dest,src
Description:
dest[<0>] <- src[<0>];
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
MOVSS xmm1,xmm2/m32 ---- F3 0F 10 /r ---- ??
MOVSS xmm2/m32,xmm1 ---- F3 0F 11 /r ---- ??
-----------------------------------------------------------------
MOVUPS - Move Unaligned Four Packed Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MOVUPS dest,src
Description:
dest <- src // Analigned move of XMM 128-bit register
Physical Form and Timing:
MOVUPS xmm1,xmm2/m128 ---- 0F 10 /r ---- ??
MOVUPS xmm2/m128,xmm1 ---- 0F 11 /r ---- ??
-----------------------------------------------------------------
MULPS - Packed Single-FP Multiply
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MULPS dest,src
Description:
dest[<0>] = dest[<0>] * src[<0>];
dest[<1>] = dest[<1>] * src[<1>];
dest[<2>] = dest[<2>] * src[<2>];
dest[<3>] = dest[<3>] * src[<3>];
Physical Form and Timing:
MULPS xmm1,xmm2/m128 ---- 0F 59 /r ---- 2
-----------------------------------------------------------------
MULSS - Scalar Single-FP Multiply
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: MULPS dest,src
Description:
dest[<0>] = dest[<0>] * src[<0>];
Physical Form and Timing:
MULSS xmm1,xmm2/m32 ---- F3 0F 59 /r ---- 2
---------------------------------------------------
OPCODE NOT1 - Invert a Specified bit
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: NOT1 dest,bitnumb
Description:
(BIT bitnumb OF dest) <- NOT (BIT bitnumb OF dest);
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: NOT1 reg/mem8,CL
COP (Code of Operation) : 0FH 16H Postbyte
Physical Form: NOT1 reg/mem8,imm8
COP (Code of Operation) : 0FH 1EH Postbyte imm8
Physical Form: NOT1 reg/mem16,CL
COP (Code of Operation) : 0FH 17H Postbyte
Physical Form: NOT1 reg/mem16,imm8
COP (Code of Operation) : 0FH 1FH Postbyte imm8
Clocks: NOT1
r/m8,CL r/m8,i8 r/m16,CL r/m16,i8
NEC V20: 4/18 5/19 4/18 5/19
--------------------------------------------------
OPCODE OIO - Official Undefined Opcode
CPU: Cyrix Cx6x86 (same code on AMD Am5k86)
Logical Form: OIO
Description:
Caused #UD exception
Flags Affected: No Flags Affected
CPU Mode : RM,PM,VM,VME,SMM
Exceptions :
RM PM V86 VME SMM
#UD #UD #UD #UD #UD Undefined Instruction
No more Exceptions
Note :
This instruction caused #UD. AMD guaranteed that in future AMD's
CPUs this instruction will caused #UD. Of course all previous CPUs
(186+) caused #UD on this opcode. This instruction used by software
writers for testing #UD exception servise routine.
++++++++++++++++++++++++++++++
Physical Form : UD
COP (Code of Operation) : 0Fh FFh
Clocks : UD
8088: Not supported
NEC V20: Not supported
80186: ~int
80286: ~int
80386: ~int
Cx486SLC: ~int
i486: ~int
Cx486DX: ~int
Cx5x86: ~int
Pentium: ~int
Nx5x86: ~int
Cx6x86: ~int
Am5k86: ~int
Pentium Pro: ~int
++++++++++++++++++++++++++++++
-----------------------------------------------------------------
ORPS - Bit-wise Logical OR For Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: ORPS dest,src
Description:
dest = dest OR src; // Bitwize 128-bit
Physical Form and Timing:
ORPS xmm1,xmm2/m128 ---- 0F 56 /r ---- 2
---------------------------------------------------
OPCODE PACKSSDW - Pack with Signed Saturation dword to word
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PACKSSDW dest,src
Description:
dest[15..0] <- SaturateSignedDWordToSignedWord dest[31..0]
dest[31..16] <- SaturateSignedDWordToSignedWord dest[63..32]
dest[47..32] <- SaturateSignedDWordToSignedWord src[31..0]
dest[63..46] <- SaturateSignedDWordToSignedWord src[63..32]
Note: This instruction packs and saturates signed data from src and dest to
dest.
If signed value of word larger or smaller that the range of signed byte
value is saturated (in case of overflow to 7Fh, in underflow to 80h).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
PACKSSDW mm,mm/m64 0FH 6BH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PACKSSWB - Pack with Signed Saturation word to Byte
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PACKSSWB dest,src
Description:
dest[7..0] <- SaturateSignedWordToSignedByte dest[15..0]
dest[15..8] <- SaturateSignedWordToSignedByte dest[31..16]
dest[23..16] <- SaturateSignedWordToSignedByte dest[47..32]
dest[31..24] <- SaturateSignedWordToSignedByte dest[63..48]
dest[39..32] <- SaturateSignedWordToSignedByte src[15..0]
dest[47..40] <- SaturateSignedWordToSignedByte src[31..16]
dest[55..48] <- SaturateSignedWordToSignedByte src[47..32]
dest[63..56] <- SaturateSignedWordToSignedByte src[63..48]
Note: This instruction packs and saturates signed data from src and dest to
dest
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
PACKSSWB mm,mm/m64 0FH 63H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PACKUSWB - Pack with Unsigned Saturation word to Byte
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PACKUSWB dest,src
Description:
dest[7..0] <- SaturateSignedWordToUnSignedByte dest[15..0]
dest[15..8] <- SaturateSignedWordToUnSignedByte dest[31..16]
dest[23..16] <- SaturateSignedWordToUnSignedByte dest[47..32]
dest[31..24] <- SaturateSignedWordToUnSignedByte dest[63..48]
dest[39..32] <- SaturateSignedWordToUnSignedByte src[15..0]
dest[47..40] <- SaturateSignedWordToUnSignedByte src[31..16]
dest[55..48] <- SaturateSignedWordToUnSignedByte src[47..32]
dest[63..56] <- SaturateSignedWordToUnSignedByte src[63..48]
Note: If signed value of word larger or smaller that the range of unsigned
byte, value is saturated (if overflow to FFh, if underflow to 0h).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
++++++++++++++++++++++++++++++++++++++
COP & Times:
PACKUSWB mm,mm/m64 0FH 67H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PADDB - Packed Add Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDB dest,src
Description:
dest[7..0] <- dest[7..0] + src[7..0]
dest[15..8] <- dest[15..8] + src[15..8]
dest[23..16] <- dest[23..16] + src[23..16]
dest[31..24] <- dest[31..24] + src[31..24]
dest[39..32] <- dest[39..32] + src[39..32]
dest[47..40] <- dest[47..40] + src[47..40]
dest[55..48] <- dest[55..48] + src[55..48]
dest[63..56] <- dest[63..56] + src[63..56]
Note: This instruction adds the bytes of the source to the bytes of the
destination and writes the results to the MMX register.
When the result is too large to be represented in a packed byte
(overflow), the result wraps around and the lower 8 bits are writen to
the destination register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDB mm,mm/m64 0FH FCH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PADDD - Packed Add Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDD dest,src
Description:
dest[31..0] <- dest[31..0] + src[31..0]
dest[63..32] <- dest[63..32] + src[63..32]
Note: This instruction adds the dwords of the source to the dwords of the
destination and writes the results to the MMX register.
When the result is too large to be represented in a packed dword
(overflow), the result wraps around and the lower 32 bits are writen to
the destination register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDW mm,mm/m64 0FH FEH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PADDSB - Packed Add with Saturation Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDSB dest,src
Description:
dest[7..0] <- SaturateToSignedByte(dest[7..0] + src[7..0])
dest[15..8] <- SaturateToSignedByte(dest[15..8] + src[15..8])
dest[23..16] <- SaturateToSignedByte(dest[23..16] + src[23..16])
dest[31..24] <- SaturateToSignedByte(dest[31..24] + src[31..24])
dest[39..32] <- SaturateToSignedByte(dest[39..32] + src[39..32])
dest[47..40] <- SaturateToSignedByte(dest[47..40] + src[47..40])
dest[55..48] <- SaturateToSignedByte(dest[55..48] + src[55..48])
dest[63..56] <- SaturateToSignedByte(dest[63..56] + src[63..56])
Note: This instruction adds the signed bytes of the source to the bytes of
the destination and writes the results to the MMX register.
If the result is larger or smaller than the range of a signed byte,
the value is saturated (in the case of a overflow - to 7FH, and in the
case of an underflow - to 80H).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDSB mm,mm/m64 0FH ECH PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PADDSIW - Packed Add with Saturation, using Implied Destination
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PADDSIW dest, src
Description:
dest[15..0] <- SaturateToSignedWord(dest[15..0] + src[15..0]
dest[31..16] <- SaturateToSignedWord(dest[31..16] + src[31..16]
dest[47..32] <- SaturateToSignedWord(dest[47..32] + src[47..32]
dest[63..48] <- SaturateToSignedWord(dest[63..48] + src[63..48]
Notes: This instruction adds the signed words of the source operand to
the signed words of the destination operand and writes the results to
the implied MMX register. The purpose of this instruction is the same
as the PADDSW instruction, except that it preserves both source
operands.
The DEST must be an MMX register. The SRC can be either an MMX
register or a 64-bit memory operand. The destination is an MMX register
which depends on the DEST.
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PADDSIW mm,mm/m64 0FH 51H PostByte
---------------------------------------------------
OPCODE PADDSW - Packed Add with Saturation Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDSW dest,src
Description:
dest[15..0] <- SaturateToSignedWord(dest[15..0] + src[15..0])
dest[31..16] <- SaturateToSignedWord(dest[31..16] + src[31..16])
dest[47..32] <- SaturateToSignedWord(dest[47..32] + src[47..32])
dest[63..48] <- SaturateToSignedWord(dest[63..48] + src[63..48])
Note: This instruction adds the signed words of the source to the words of
the destination and writes the results to the MMX register.
If the result is larger or smaller than the range of a signed word,
the value is saturated (in the case of a overflow - to 7FFFH, and in
the case of an underflow - to 8000H).
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDSW mm,mm/m64 0FH EDH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PADDUSB - Packed Add Unsigned with Saturation Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDUSB dest,src
Description:
dest[7..0] <- SaturateToUnsignedByte(dest[7..0] + src[7..0])
dest[15..8] <- SaturateToUnsignedByte(dest[15..8] + src[15..8])
dest[23..16] <- SaturateToUnsignedByte(dest[23..16] + src[23..16])
dest[31..24] <- SaturateToUnsignedByte(dest[31..24] + src[31..24])
dest[39..32] <- SaturateToUnsignedByte(dest[39..32] + src[39..32])
dest[47..40] <- SaturateToUnsignedByte(dest[47..40] + src[47..40])
dest[55..48] <- SaturateToUnsignedByte(dest[55..48] + src[55..48])
dest[63..56] <- SaturateToUnsignedByte(dest[63..56] + src[63..56])
Note: This instruction adds the unsigned bytes of the source to the
unsigned bytes of the destination operand and writes the results to the
MMX register.
When the result is larger than the range of an unsigned byte
(overflow), the value is saturated to FFH. When the result is smaller
than the range of an unsigned byte (underflow), the value is saturated
to 00H.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDUSB mm,mm/m64 0FH DCH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PADDUSW - Packed Add Unsigned with Saturation Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDUSW dest,src
Description:
dest[15..0] <- SaturateToUnsignedWord(dest[15..0] + src[15..0])
dest[31..16] <- SaturateToUnsignedWord(dest[31..16] + src[31..16])
dest[47..32] <- SaturateToUnsignedWord(dest[47..32] + src[47..32])
dest[63..48] <- SaturateToUnsignedWord(dest[63..48] + src[63..48])
Note: This instruction adds the unsigned words of the source to the
unsigned words of the destination operand and writes the results to the
MMX register.
When the result is larger than the range of an unsigned word
(overflow), the value is saturated to FFFFH. When the result is smaller
than the range of an unsigned byte (underflow), the value is saturated
to 0000H.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDUSW mm,mm/m64 0FH DDH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PADDW - Packed Add Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PADDW dest,src
Description:
dest[15..0] <- dest[15..0] + src[15..0]
dest[31..16] <- dest[31..16] + src[31..16]
dest[47..32] <- dest[47..32] + src[47..32]
dest[63..48] <- dest[63..48] + src[63..48]
Note: This instruction adds the words of the source to the words of the
destination and writes the results to the MMX register.
When the result is too large to be represented in a packed word
(overflow), the result wraps around and the lower 16 bits are writen to
the destination register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PADDW mm,mm/m64 0FH FDH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PAND - Bitwise Logical And
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PAND dest,src
Description:
dest <- dest AND src
Note: AND 64 bits from MMXregister/memory to MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PAND mm,mm/m64 0FH DBH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PANDN - Bitwise Logical And Not
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PANDN dest,src
Description:
dest <- (NOT dest) AND src
Note: Invert the 64 bits in MMX register, AND inverted MMX register with
MMXregister/memory.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PANDN mm,mm/m64 0FH DFH PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PAVEB - Packed Average
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PAVEB dest, src
Description:
dest[7..0] <- (dest[7..0] + src[7..0]) >> 1
dest[15..8] <- (dest[15..8] + src[15..8]) >> 1
dest[23..16] <- (dest[23..16] + src[23..16]) >> 1
dest[31..24] <- (dest[31..24] + src[31..24]) >> 1
dest[39..32] <- (dest[39..32] + src[39..32]) >> 1
dest[47..40] <- (dest[47..40] + src[47..40]) >> 1
dest[55..48] <- (dest[55..48] + src[55..48]) >> 1
dest[63..56] <- (dest[63..56] + src[63..56]) >> 1
Notes: The PAVEB insruction calculates the average of the unsigned
bytes of the source operand and the unsigned bytes of the destination
operand and writes the result to the MMX register. The PAVEB
instruction cannot overflow.
M2 hardware versions before v1.3 interpret values as signed
bytes on this instruction.
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PAVEB mm,mm/m64 0FH 50H PostByte
-----------------------------------------------------------------
PAVGB - Packed Average Byte
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PAVGB dest,src
Description:
define AVERAGE(bits) // This is Unsigned operation :))
dest[bits] <- (size(8bits,(src[bits] + dest[bits])) + 1) >> 1;
enddef
AVERAGE(7..0);
AVERAGE(15..8);
AVERAGE(23..16);
AVERAGE(31..24);
AVERAGE(39..32);
AVERAGE(47..40);
AVERAGE(55..48);
AVERAGE(63..56);
Physical Form and Timing:
PAVGB mm1,mm2/m64 ---- 0F E0 /r ---- ??
-----------------------------------------------
OPCODE PAVGUSB - Avarage of Unsigned packed 8-bit Values
CPU: AMD-3D
Type of Instruction: User
Instruction: PAVGUSB dest,src
Description:
dest[7..0] <- (dest[7..0] + src[7..0]) / 2;
dest[15..8] <- (dest[15..8] + src[15..8]) / 2;
dest[23..16] <- (dest[23..16] + src[23..16]) / 2;
dest[31..24] <- (dest[31..24] + src[31..24]) / 2;
dest[39..32] <- (dest[39..32] + src[39..32]) / 2;
dest[47..40] <- (dest[47..40] + src[47..40]) / 2;
dest[55..48] <- (dest[55..48] + src[55..48]) / 2;
dest[63..56] <- (dest[63..56] + src[63..56]) / 2;
Note: so, saturation rounding:
(FFH + FFH) / 2 => FFh
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PAVGUSB mm,mm/m64 0FH 0FH BFH Postbyte
-----------------------------------------------------------------
PAVGW - Packed Average Word
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PAVGW dest,src
Description:
define AVERAGE(bits) // This is Unsigned operation
dest[bits] <- (size(16bits,(src[bits] + dest[bits])) + 1) >> 1;
enddef
AVERAGE(15..0);
AVERAGE(31..16);
AVERAGE(47..32);
AVERAGE(63..48);
Physical Form and Timing:
PAVGW mm1,mm2/m64 ---- 0F E3 /r ---- ??
---------------------------------------------------
OPCODE PCMPEQB - Packed Compare for Equal Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPEQB dest,src
Description:
IF dest[7..0] = src[7..0]
THEN
dest[7..0] <- FFH
ELSE
dest[7..0] <- 00H
IF dest[15..8] = src[15..8]
THEN
dest[15..8] <- FFH
ELSE
dest[15..8] <- 00H
IF dest[23..16] = src[23..16]
THEN
dest[23..16] <- FFH
ELSE
dest[23..16] <- 00H
IF dest[31..24] = src[31..24]
THEN
dest[31..24] <- FFH
ELSE
dest[31..24] <- 00H
IF dest[39..32] = src[39..32]
THEN
dest[39..32] <- FFH
ELSE
dest[39..32] <- 00H
IF dest[47..40] = src[47..40]
THEN
dest[47..40] <- FFH
ELSE
dest[47..40] <- 00H
IF dest[55..48] = src[55..48]
THEN
dest[55..48] <- FFH
ELSE
dest[55..48] <- 00H
IF dest[63..56] = src[63..56]
THEN
dest[63..56] <- FFH
ELSE
dest[63..56] <- 00H
Note: Compare packed byte in MMXregister/memory with packed byte in MMX
register for equality.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPEQB mm,mm/m64 0FH 74H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PCMPEQD - Packed Compare for Equal Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPEQD dest,src
Description:
IF dest[31..0] = src[31..0]
THEN
dest[31..0] <- FFFFFFFFH
ELSE
dest[31..0] <- 00000000H
IF dest[63..32] = src[63..32]
THEN
dest[63..32] <- FFFFFFFFH
ELSE
dest[63..32] <- 00000000H
Note: Compare packed dword in MMXregister/memory with packed dword in MMX
register for equality.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPEQW mm,mm/m64 07H 76H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PCMPEQW - Packed Compare for Equal Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPEQW dest,src
Description:
IF dest[15..0] = src[15..0]
THEN
dest[15..0] <- FFFFH
ELSE
dest[15..0] <- 0000H
IF dest[31..16] = src[31..16]
THEN
dest[31..16] <- FFFFH
ELSE
dest[31..16] <- 0000H
IF dest[47..32] = src[47..32]
THEN
dest[47..32] <- FFFFH
ELSE
dest[47..32] <- 0000H
IF dest[63..48] = src[63..48]
THEN
dest[63..48] <- FFFFH
ELSE
dest[63..48] <- 0000H
Note: Compare packed word in MMXregister/memory with packed word in MMX
register for equality.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPEQW mm,mm/m64 07H 75H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PCMPGTB - Packed Compare for Greater Than Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPGTB dest,src
Description:
IF dest[7..0] > src[7..0]
THEN
dest[7..0] <- FFH
ELSE
dest[7..0] <- 00H
IF dest[15..8] > src[15..8]
THEN
dest[15..8] <- FFH
ELSE
dest[15..8] <- 00H
IF dest[23..16] > src[23..16]
THEN
dest[23..16] <- FFH
ELSE
dest[23..16] <- 00H
IF dest[31..24] > src[31..24]
THEN
dest[31..24] <- FFH
ELSE
dest[31..24] <- 00H
IF dest[39..32] > src[39..32]
THEN
dest[39..32] <- FFH
ELSE
dest[39..32] <- 00H
IF dest[47..40] > src[47..40]
THEN
dest[47..40] <- FFH
ELSE
dest[47..40] <- 00H
IF dest[55..48] > src[55..48]
THEN
dest[55..48] <- FFH
ELSE
dest[55..48] <- 00H
IF dest[63..56] > src[63..56]
THEN
dest[63..56] <- FFH
ELSE
dest[63..56] <- 00H
Note: Compare packed byte in MMX register with packed byte in MMXregister/
/memory for greater value.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPGTB mm,mm/m64 0FH 64H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PCMPGTD - Packed Compare for Greater Than Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPGTD dest,src
Description:
IF dest[31..0] > src[31..0]
THEN
dest[31..0] <- FFFFFFFFH
ELSE
dest[31..0] <- 00000000H
IF dest[63..32] > src[63..32]
THEN
dest[63..32] <- FFFFFFFFH
ELSE
dest[63..32] <- 00000000H
Note: Compare packed dword in MMX register with packed dword in MMXregister/
/memory for greater value.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPGTW mm,mm/m64 0FH 66H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PCMPGTW - Packed Compare for Greater Than Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PCMPGTW dest,src
Description:
IF dest[15..0] > src[15..0]
THEN
dest[15..0] <- FFFFH
ELSE
dest[15..0] <- 0000H
IF dest[31..16] > src[31..16]
THEN
dest[31..16] <- FFFFH
ELSE
dest[31..16] <- 0000H
IF dest[47..32] > src[47..32]
THEN
dest[47..32] <- FFFFH
ELSE
dest[47..32] <- 0000H
IF dest[63..48] > src[63..48]
THEN
dest[63..48] <- FFFFH
ELSE
dest[63..48] <- 0000H
Note: Compare packed word in MMX register with packed word in MMXregister/
memory for greater value.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PCMPGTW mm,mm/m64 0FH 65H PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PDISTIB - Packed Distance and Accumulate with Implied Register
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PDISTIB dest, src
Description:
dest[7..0] <-
SaturateToUnsignedByte(dest[7..0] + abs(dest[7..0] - src[7..0]))
dest[15..8] <-
SaturateToUnsignedByte(dest[15..8] + abs(dest[15..8] - src[15..8]))
dest[23..16] <-
SaturateToUnsignedByte(dest[23..16] + abs(dest[23..16] - src[23..16]))
dest[31..24] <-
SaturateToUnsignedByte(dest[31..24] + abs(dest[31..24] - src[31..24]))
dest[39..32] <-
SaturateToUnsignedByte(dest[39..32] + abs(dest[39..32] - src[39..32]))
dest[47..40] <-
SaturateToUnsignedByte(dest[47..40] + abs(dest[47..40] - src[47..40]))
dest[55..48] <-
SaturateToUnsignedByte(dest[55..48] + abs(dest[55..48] - src[55..48]))
dest[63..56] <-
SaturateToUnsignedByte(dest[63..56] + abs(dest[63..56] - src[63..56]))
Notes: The PDISTIB instruction calculates the distance between the
unsigned bytes of two source operands, adds the result to the
unsigned byte in the implied destination operand, and saturates the
result. The result is written to the implied MMX register.
The DEST must be an MMX register. The SRC must be a 64-bit
memory operand. The accumulator and destination is an MMX register
which depends on the DEST.
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PDISTIB mm,m64 0FH 54H PostByte
-----------------------------------------------------------------
PEXTRW - Extract Word
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PEXTRW dest,src,which_word
Description:
word TMP = which_word AND 0x3;
word MM_TMP = (src >> (TMP * 16)) AND 0xffff;
dest[15..0] <- MM_TMP;
dest[31..16] <- 0;
Physical Form and Timing:
PEXTRW r32,mm,imm8 ---- 0F C5 /r imm8 ---- ??
-----------------------------------------------
OPCODE PF2ID - Convert Packed F.P. to 32-bit Integer
CPU: AMD-3D
Type of Instruction: User
Instruction: PF2ID dest,src
Description:
if (src[31..0] > 2^31) then dest[31..0] <- 7FFFFFFFh;
if (src[31..0] <= -2^31) then dest[31..0] <- 80000000h;
dest[31..0] <- truncate(src[31..0]);
if (src[63..32] > 2^31) then dest[63..32] <- 7FFFFFFFh;
if (src[63..32] <= -2^31) then dest[63..32] <- 80000000h;
dest[63..32] <- truncate(src[63..32]);
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PF2ID mm,mm/m64 0FH 0FH 1DH Postbyte
-----------------------------------------------
OPCODE PF2IW - Packed FP to Integer Word conversion with sign extend
CPU: 3DNow! extension (Athlon CPU)
Type of Instruction: User
Instruction: PF2IW dest,src
Description:
if (src[31:0] >= 2^15) dest[31:0] = 00007fffh;
elseif (src[31:0] <= -2^15) dest[31:0] = ffff8000h;
else dest[31:0] <- int(src[31:0]);
if (src[63:32] >= 2^15) dest[63:32] = 00007fffh;
elseif (src[63:32] <= -2^15) dest[63:32] = ffff8000h;
else dest[63:32] <- int(src[63:32]);
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PF2IW mm,mm/m64 0F 0F 1C Postbyte
-----------------------------------------------
OPCODE PFACC - F.P. Accumulate
CPU: AMD-3D
Type of Instruction: User
Instruction: PFACC dest,src
Description:
dest[31..0] <- dest[31..0] + dest[63..32];
dest[63..32] <- src[31..0] + src [63..32];
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFACC mm,mm/m64 0FH 0FH AEH Postbyte
-----------------------------------------------
OPCODE PFADD - Packed F.P. Addition
CPU: AMD-3D
Type of Instruction: User
Instruction: PFADD dest,src
Description:
dest[31..0] <- dest[31..0] + src[31..0];
dest[63..32] <- dest[63..32] + src[63..32];
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFADD mm,mm/m64 0FH 0FH 9EH Postbyte
-----------------------------------------------
OPCODE PFCMPEQ - Packed F.P. comparson, equal to
CPU: AMD-3D
Type of Instruction: User
Instruction: PFCMPEQ dest,src
Description:
if dest[31..0] == src[31..0]
then dest[31..0] <- FFFFFFFFh
else dest[31..0] <- 00000000h
if dest[63..32] == src[63..32]
then dest[63..32] <- FFFFFFFFh
else dest[63..32] <- 00000000h
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFCMPEQ mm,mm/m64 0FH 0FH B0H Postbyte
-----------------------------------------------
OPCODE PFCMPGE - Packed F.P. comparison, greater or equal to
CPU: AMD-3D
Type of Instruction: User
Instruction: PFCMPGE dest,src
Description:
if dest[31..0] >= src[31..0]
then dest[31..0] <- FFFFFFFFh
else dest[31..0] <- 00000000h
if dest[63..32] >= src[63..32]
then dest[63..32] <- FFFFFFFFh
else dest[63..32] <- 00000000h
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFCMPGE mm,mm/m64 0FH 0FH 90H Postbyte
-----------------------------------------------
OPCODE PFCMPGT - Packed F.P. compariason, greater to
CPU: AMD-3D
Type of Instruction: User
Instruction: PFCMPGT dest,src
Description:
if dest[31..0] > src[31..0]
then dest[31..0] <- FFFFFFFFh
else dest[31..0] <- 00000000h
if dest[63..32] > src[63..32]
then dest[63..32] <- FFFFFFFFh
else dest[63..32] <- 00000000h
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFCMPGT mm,mm/m64 0FH 0FH A0H Postbyte
-----------------------------------------------
OPCODE PFMAX - Packed F.P. Maximum
CPU: AMD-3D
Type of Instruction: User
Instruction: PFMAX dest,src
Description:
if src[31..0] > dest[31..0] then dest[31..0] <- src[31..0];
if src[63..32] > dest[63..32] then dest[63..32] <- src[63..32];
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFMAX mm,mm/m64 0FH 0FH A4H
-----------------------------------------------
OPCODE PFMIN - Packed F.P. Minimum
CPU: AMD-3D
Type of Instruction: User
Instruction: PFMIN dest,src
Description:
if src[31..0] < dest[31..0] then dest[31..0] <- src[31..0];
if src[63..32] < dest[63..32] then dest[63..32] <- src[63..32];
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFMIN mm,mm/m64 0FH 0FH 94H
-----------------------------------------------
OPCODE PFMUL - Packed F.P. Multiplication
CPU: AMD-3D
Type of Instruction: User
Instruction: PFMUL dest,src
Description:
dest[31..0] <- dest[31..0] * src[31..0];
dest[63..32] <- dest[63..32] * src[63..32];
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFMUL mm,mm/m64 0FH 0FH B4H Postbyte
-----------------------------------------------
OPCODE PFNACC - Packed Floating Point negative accumulate
CPU: 3DNow! extension (Athlon CPU)
Type of Instruction: User
Instruction: PFNACC dest,src
Description:
dest[31:0] <- dest[31:0] - dest[63:32];
dest[63:32] <- src[31:0] - src[63:32]
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFNACC mm,mm/m64 0F 0F 8A Postbyte
-----------------------------------------------
OPCODE PFPNACC - Packed Floating Point Mixed Positive-Negative Accumulate
CPU: 3DNow! extension (Athlon CPU)
Type of Instruction: User
Instruction: PFPNACC dest,src
Description:
dest[31:0] <- dest[31:0] - dest[63:32];
dest[63:32] <- src[31:0] + src[63:32];
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFPNACC mm,mm/m64 0F 0F 8E Postbyte
-----------------------------------------------
OPCODE PFRCP - F.P. Reciprocal Approximation
CPU: AMD-3D
Type of Instruction: User
Instruction: PFRCP dest,src
Description:
dest[31..0] <- Reciprocal(src[31..0]);
dest[63..32] <- Reciprocal(src[63..32]);
Note:
Newton-Raphson algorithm:
Division
----------
q = a/b;
X(i+1) = X(i) * (2 - b * X(i));
X0 = RFRCP(b);
X1 = RFRCPIT1(b,X0);
X2 = RFRCPIT2(X1,X0);
q = PFMUL(a,X2);
Square Root
--------------
X(i+1) = 1/2 * X(i) * (3 - b * X(i)^2);
X0 = PFRSQRT(b);
X1 = PFMUL(X0,X0);
X2 = PFRSQIT(b,X1);
X3 = PFRCPIT2(X2,X0);
X4 = PFMUL(b,X3);
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFRCP mm,mm/m64 0FH 0FH 96H Postbyte
-----------------------------------------------
OPCODE PFRCPIT1 - Packed F.P. Reciprocal, first iteration Step
CPU: AMD-3D
Type of Instruction: User
Instruction: PFRCIT1 dest,src
Description:
dest[31..0] <- First_Step_Reciprocal(src[31..0]);
dest[63..32] <- First_Step_Reciprocal(src[63..32]);
Note: see PFRCP for more info.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFRCIT1 mm,mm/m64 0FH 0FH A6H Postbyte
-----------------------------------------------
OPCODE PFRCPIT2 - Packed F.P. Reciprocal, second iteration Step
CPU: AMD-3D
Type of Instruction: User
Instruction: PFRCIT2 dest,src
Description:
dest[31..0] <- Second_Step_Reciprocal(src[31..0]);
dest[63..32] <- Second_Step_Reciprocal(src[63..32]);
Note: see PFRCP for more info.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFRCIT2 mm,mm/m64 0FH 0FH B6H Postbyte
-----------------------------------------------
OPCODE PFRSQIT1 - Packed F.P. Reciprocal Square Root, 1st iteration step
CPU: AMD-3D
Type of Instruction: User
Instruction: PFRSQIT1 dest,src
Description:
dest[31..0] <- First_Step_Reciprocal_Square_Root(src[31..0]);
dest[63..32] <- First_Step_Reciprocal_Square_Root(src[63..32]);
Note: see RFRCP for more info
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFRSQIT1 mm,mm/m64 0FH 0FH A7H Postbyte
-----------------------------------------------
OPCODE PFRSQRT - F.P. Reciprocal Square Root Approximation
CPU: AMD-3D
Type of Instruction: User
Instruction: PFRSQRT dest,src
Description:
dest[31..0] <- Reciprocal_Square_Root(src[31..0]);
dest[63..32] <- Reciprocal_Square_Root(src[63..32]);
Note: see RFRCP for more info
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFRSQRT mm,mm/m64 0FH 0FH 97H Postbyte
-----------------------------------------------
OPCODE PFSUB - Packed F.P. Subtraction
CPU: AMD-3D
Type of Instruction: User
Instruction: PFSUB dest,src
Description:
dest[31..0] <- dest[31..0] - src[31..0];
dest[63..32] <- dest[63..32] - src[63..32];
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFSUB mm,mm/m64 0FH 0FH 9AH Postbyte
-----------------------------------------------
OPCODE PFSUBR - Packed F.P. Reverse Subtraction
CPU: AMD-3D
Type of Instruction: User
Instruction: PFSUBR dest,src
Description:
dest[31..0] <- src[31..0] - dest[31..0];
dest[63..32] <- src[63..32] - dest[63..32];
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PFSUBR mm,mm/m64 0FH 0FH AAH Postbyte
-----------------------------------------------
OPCODE PI2FD - Packed 32-bit Integer to F.P. conversion
CPU: AMD-3D
Type of Instruction: User
Instruction: PI2FD dest,src
Description:
dest[31..0] <- float(src[31..0]);
dest[63..32] <- float(src[63..32]);
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PI2FD mm,mm/m64 0FH 0FH 0DH Postbyte
-----------------------------------------------
OPCODE PI2FW - Packed 16-bit Integer to FP Conversion
CPU: 3DNow! extension (Athlon CPU)
Type of Instruction: User
Instruction: PI2FW dest,src
Description:
dest[31:0] <- float(src[15:0]);
dest[63:32] <- float(src[47:32]);
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PI2FW mm,mm/m64 0F 0F 0C Postbyte
-----------------------------------------------------------------
PINSRW - Insert Word
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PINSRW dest,src,which_word
Description:
word TMP = which_word AND 0x3;
switch (TMP)
case 0: word MASK = 0x000000000000FFFF
case 1: word MASK = 0x00000000FFFF0000
case 2: word MASK = 0x0000FFFF00000000
case 4: word MASK = 0xFFFF000000000000
endswitch
dest <- (dest and NOT(MASK)) OR ((src << (TMP * 16)) AND MASK);
Physical Form and Timing:
PINSRW mm,r32/m16,imm8 ---- 0F C4 /r imm8 ---- ??
-----------------------------------------------
OPCODE PMACHRIW - Packed Multiply and Accumulate with Rounding
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMACHRIW dest, src
Description:
dest[15..0] <-
dest[15..0] + (dest[15..0]*src[15..0] + 00004000H)[30..15]
dest[31..16] <-
dest[31..16] + (dest[31..16]*src[31..16] + 00004000H)[30..15]
dest[47..32] <-
dest[47..32] + (dest[47..32]*src[47..32] + 00004000H)[30..15]
dest[63..48] <-
dest[63..48] + (dest[63..48]*src[63..48] + 00004000H)[30..15]
Notes: The PMACHRIW multiplies the two source operands using the
method described for PMULHRW, and then accumulates the result with
the value in the implied destination register using wrap-around
arithmetic. The final result is placed in the implied DEST register.
The DEST must be an MMX register. The SRC must be a 64-bit
memory operand. The destination operand is an implied MMX register
that depends on the DEST.
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PMACHRIW mm,m64 0FH 5EH PostByte
---------------------------------------------------
OPCODE PMADDWD - Packed Multiply and Add Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PMADDWD dest,src
Description:
dest[31..0] <- dest[15..0] * src[15..0] + dest[31..16] * src[31..16]
dest[63..32] <- dest[47..32] * src[47..32] + dest[63..48] * src[63..48]
Note: Multiply the packed word in MMX register by the packed word in
MMXregister/memory. Add the 32-bit results pairwise and store in MMX
register as dword.
This instruction wraps around to 80000000H only when all four words
of both the source and destination operands are 8000H.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PMADDWD mm,mm/m64 0FH F5H PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PMAGW - Packed Magnitude
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMAGW dest, src
Description:
IF abs(src[15..0]) > abs(dest[15..0]) THEN dest[15..] <-src[15..0]
IF abs(src[31..16]) > abs(dest[31..16]) THEN dest[31..16]<-src[31..16]
IF abs(src[47..32]) > abs(dest[47..32]) THEN dest[47..32]<-src[47..32]
IF abs(src[63..56]) > abs(dest[63..56]) THEN dest[63..56]<-src[63..56]
Notes: The PMAGW instruction compares the absolute value of the
packed words in the destination operand and sets the destination words
to the value that has the larger magnitude. The PMAGW instruction
does not change the sign of the value with the larger magnitude and
it does not saturate.
The DEST must be an MMX register. The SRC can be either an MMX
register or a 64-bit memory operand.
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PMAGW mm,mm/m64 0FH 52H PostByte
-----------------------------------------------------------------
PMAXSW - Packed Signed Integer Word Maximum
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PMAXSW dest,src
Description:
if (dest[<i>] < src[<i>]) then dest[<i>] <- src[<i>];
// Signed Integer
<0> = 0..15 <2> = 47..32
<1> = 31..16 <3> = 63..48
Physical Form and Timing:
PMAXSW mm1,mm2/m64 ---- 0F EE /r ---- ??
-----------------------------------------------------------------
PMAXUB - Packed Unsigned Integer Byte Maximum
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PMAXUB dest,src
Description:
for i=0 to 7 do
if (dest[<i>] < src[<i>]) then dest[<i>] <- src[<i>];
// Unsigned int
endfor
<0> = 0..7 <4> = 39..32
<1> = 15..8 <5> = 47..40
<2> = 23..16 <6> = 55..48
<3> = 31..24 <7> = 63..56
Physical Form and Timing:
PMAXUB mm1,mm2/m64 ---- 0F DE /r ---- ??
-----------------------------------------------------------------
PMINSW - Packed Signed Integer Word Minimum
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PMINSW dest,src
Description:
if (dest[<i>] > src[<i>]) then dest[<i>] <- src[<i>];
// Signed Integer
<0> = 0..15 <2> = 47..32
<1> = 31..16 <3> = 63..48
Physical Form and Timing:
PMINSW mm1,mm2/m64 ---- 0F EA /r ---- ??
-----------------------------------------------------------------
PMINUB - Packed Unsigned Integer Byte Minimum
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PMINUB dest,src
Description:
for i=0 to 7 do
if (dest[<i>] > src[<i>]) then dest[<i>] <- src[<i>];
// Unsigned int
endfor
<0> = 0..7 <4> = 39..32
<1> = 15..8 <5> = 47..40
<2> = 23..16 <6> = 55..48
<3> = 31..24 <7> = 63..56
Physical Form and Timing:
PMIN UB mm1,mm2/m64 ---- 0F DA /r ---- ??
-----------------------------------------------------------------
PMOVMSKB - Move Byte Mask to Integer
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PMOVMSKB dest,src
Description:
dest[31..8] <- 0;
dest[7] <- src[63];
dest[6] <- src[55];
dest[5] <- src[47];
dest[4] <- src[39];
dest[3] <- src[31];
dest[2] <- src[23];
dest[1] <- src[15];
dest[0] <- src[7];
Physical Form and Timing:
PMOVMSKB r32,mm ---- 0F D7 /r ---- ?
-----------------------------------------------
OPCODE PMULHRIW - Packed Multiply High with Rounding, result to Implied Register
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMULHRIW dest, src
Description:
mmi[15..0] <- (dest[15..0]*src[15..0] + 00004000H)[30..15]
mmi[31..16] <- (dest[31..16]*src[31..16] + 00004000H)[30..15]
mmi[47..32] <- (dest[47..32]*src[47..32] + 00004000H)[30..15]
mmi[63..48] <- (dest[63..48]*src[63..48] + 00004000H)[30..15]
Notes: The PMULHRIW instruction are intended to give a result of the
form a 16x16 bit multiply with the LSB rounded before truncating to 16
bits.
The SRC can be either an MMX register or a 64-bit memory
operand. The destination is an MMX register, depending on the SRC.
The intent of the PMULHRIW instruction is the same as the PMULHRW
instrucction except that both sources are preserved
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PMULHRIW mm,mm/m64 0FH 5DH PostByte
-----------------------------------------------
OPCODE PMULHRW - Packed Multiply High with Rounding
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMULHRW dest, src
Description:
dest[15..0] <- (dest[15..0]*src[15..0] + 00004000H)[30..15]
dest[31..16] <- (dest[31..16]*src[31..16] + 00004000H)[30..15]
dest[47..32] <- (dest[47..32]*src[47..32] + 00004000H)[30..15]
dest[63..48] <- (dest[63..48]*src[63..48] + 00004000H)[30..15]
Notes: The PMULHRW instruction are intended to give a result of the
form a 16x16 bit multiply with the LSB rounded before truncating to 16
bits. This is in contrast to the PMULHW instruction which gives a
resultof the form ss.14 with no rounding.
as the PADDSW instruction, except that it preserves both source
operands.
The SRC can be either an MMX register or a 64-bit memory
operand. The destination is an MMX register.
Flags Affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operands EA in CS,DS,ES,FS,GS
#SS(0) If Illegal memory operands EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the operand lies outside of the
EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++
COP & Times:
PMULHRW mm,mm/m64 0FH 59H PostByte
-----------------------------------------------
OPCODE PMULHRW - Multiply Signed Packed 16-bits with rounding and store to 16bit
CPU: AMD-3D
Type of Instruction: User
Instruction: PMULHRW dest,src
Description:
dest[15..0] <- dest[15..0] * src[15..0];
dest[31..16] <- dest[31..16] * src[31..16];
dest[47..32] <- dest[47..32] * src[47..32];
dest[63..48] <- dest[63..48] * src[63..48];
Note: Saturation arithmetic.
This is not F.P. instruction
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PMULHRW mm,mm/m64 0FH 0FH B7H Postvyte
-----------------------------------------------------------------
PMULHUW - Packed Multiply high unsignde word
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PMULHUW dest,src
Description:
temp1 <- dest[15:0] * src[15:0];
temp2 <- dest[31:16] * src[31:16];
temp3 <- dest[47:32] * src[47:32];
temp4 <- dest[63:48] * src[63:48];
dest[15:0] <- temp1[31:16];
dest[31:16] <- temp2[31:16];
dest[47:32] <- temp3[31:16];
dest[63:48] <- temp4[31:16];
Physical Form and Timing:
PMULHUW mm,mm/m64 0Fh E4h Postbyte
---------------------------------------------------
OPCODE PMULHW - Packed Multiply High by Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PMULHW dest,src
Description:
dest[15..0] <- (dest[15..0] * src[15..0]) (31..16)
dest[31..16] <- (dest[31..16] * src[31..16]) (31..16)
dest[47..32] <- (dest[47..32] * src[47..32]) (31..16)
dest[63..48] <- (dest[63..48] * src[63..48]) (31..16)
Note: Multiply the signed packed word in MMX register with the signed
packed word in MMXregister/memory, then store the high-order 16 bits of
the results in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PMULHW mm,mm/m64 0FH E5H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PMULLW - Packed Multiply Low by Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PMULLW dest,src
Description:
dest[15..0] <- (dest[15..0] * src[15..0]) (15..0)
dest[31..16] <- (dest[31..16] * src[31..16]) (15..0)
dest[47..32] <- (dest[47..32] * src[47..32]) (15..0)
dest[63..48] <- (dest[63..48] * src[63..48]) (15..0)
Note: Multiply the packed word in MMX register with the packed word in
MMXregister/memory, then store the low-order 16 bits of the results in
MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PMULLW mm,mm/m64 0FH D5H PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PMVGEZB - Packed Conditional Move
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMVGEZB dest, src
Description:
if mmi[7..0] >= 0 then dest[7..0] <- src[7..0];
if mmi[15..8] >= 0 then dest[15..8] <- src[15..8];
if mmi[23..16] >= 0 then dest[23..16] <- src[23..16];
if mmi[31..24] >= 0 then dest[31..24] <- src[31..24];
if mmi[39..32] >= 0 then dest[39..32] <- src[39..32];
if mmi[47..40] >= 0 then dest[47..40] <- src[47..40];
if mmi[55..48] >= 0 then dest[55..48] <- src[55..48];
if mmi[63..56] >= 0 then dest[63..56] <- src[63..56];
Note: mmi is implied MMX register.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PMVGEZB mm,mm/m64 0FH 5CH PostByte
-----------------------------------------------
OPCODE PMVLZB - Packed Conditional Move
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMVLZB dest, src
Description:
if mmi[7..0] < 0 then dest[7..0] <- src[7..0];
if mmi[15..8] < 0 then dest[15..8] <- src[15..8];
if mmi[23..16] < 0 then dest[23..16] <- src[23..16];
if mmi[31..24] < 0 then dest[31..24] <- src[31..24];
if mmi[39..32] < 0 then dest[39..32] <- src[39..32];
if mmi[47..40] < 0 then dest[47..40] <- src[47..40];
if mmi[55..48] < 0 then dest[55..48] <- src[55..48];
if mmi[63..56] < 0 then dest[63..56] <- src[63..56];
Note: mmi is implied MMX register.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PMVLZB mm,mm/m64 0FH 5BH PostByte
-----------------------------------------------
OPCODE PMVNZB - Packed Conditional Move
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMVNZB dest, src
Description:
if mmi[7..0] <> 0 then dest[7..0] <- src[7..0];
if mmi[15..8] <> 0 then dest[15..8] <- src[15..8];
if mmi[23..16] <> 0 then dest[23..16] <- src[23..16];
if mmi[31..24] <> 0 then dest[31..24] <- src[31..24];
if mmi[39..32] <> 0 then dest[39..32] <- src[39..32];
if mmi[47..40] <> 0 then dest[47..40] <- src[47..40];
if mmi[55..48] <> 0 then dest[55..48] <- src[55..48];
if mmi[63..56] <> 0 then dest[63..56] <- src[63..56];
Note: mmi is implied MMX register.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PMVNZB mm,mm/m64 0FH 5AH PostByte
-----------------------------------------------
OPCODE PMVZB - Packed Conditional Move
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PMVZB dest, src
Description:
if mmi[7..0] == 0 then dest[7..0] <- src[7..0];
if mmi[15..8] == 0 then dest[15..8] <- src[15..8];
if mmi[23..16] == 0 then dest[23..16] <- src[23..16];
if mmi[31..24] == 0 then dest[31..24] <- src[31..24];
if mmi[39..32] == 0 then dest[39..32] <- src[39..32];
if mmi[47..40] == 0 then dest[47..40] <- src[47..40];
if mmi[55..48] == 0 then dest[55..48] <- src[55..48];
if mmi[63..56] == 0 then dest[63..56] <- src[63..56];
Note: mmi is implied MMX register.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PMVZB mm,mm/m64 0FH 58H PostByte
---------------------------------------------------
OPCODE POR - Bitwise Logical Or
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: POR dest,src
Description:
dest <- dest OR src
Note: OR 64 bits from MMXregister/memory with MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
POR mm,mm/m64 0FH EBH PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------------------------
PREFETCHxx - Prefetch
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PREFETCHxx src
Description:
Prefetch src memory into cache.
PREFETCH0 src - Temporal Data
Prefetch into all caches levels
PREFETCH1 src - Prefetch to all caches, except L1
PREFETCH2 src - Prefetch to all caches, except L1 and L2
PREFETCHNTA src - Non Temporal with respect to all cache levels -
prefetch to non-temporal cache structure
Physical Form and Timing:
PREFETCHNTA mem ---- 0F 18 /0 ---- ?
PREFETCH0 mem ---- 0F 18 /1 ---- ?
PREFETCH1 mem ---- 0F 18 /2 ---- ?
PREFETCH2 mem ---- 0F 18 /3 ---- ?
-----------------------------------------------
OPCODE PREFETCH - Prefetch CPU cache line into L1 data cache
CPU: AMD-3D
Type of Instruction: User
Instruction: PREFETCH mem
Description:
PRELOAD_L1_DATA_CACHE_LINE(mem);
SET_LINE_STATE_TO_EXCLUSIVE; (MESI)
Note: If cache hit, then do nothing.
mem - is address of any cache-line byte.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PREFETCH mem8 0FH 0DH mm000xxx
-----------------------------------------------
OPCODE PREFETCHW - Prefetch CPU cache line into L1 data cache
CPU: AMD-3D
Type of Instruction: User
Instruction: PREFETCHW mem
Description:
PRELOAD_L1_DATA_CACHE_LINE(mem);
SET_LINE_STATE_TO_MODIFIED; (MESI)
Note: If cache hit, then do nothing.
mem - is address of any cache-line byte.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PREFETCHW mem8 0FH 0DH mm001xxx
-----------------------------------------------------------------
PSADBW - Packed Sum of Absolute Differenses
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PSADBW dest,src
Description:
SUM = 0;
for i = 1 to 7 do
SUM[15..0] = SUM[15..0] + ABS(dest[<i>] - src[<i>]);
endfor
dest[15..0] <- SUM[15..0];
dest[63..16] <- 0;
<0> = 0..7 <4> = 39..32
<1> = 15..8 <5> = 47..40
<2> = 23..16 <6> = 55..48
<3> = 31..24 <7> = 63..56
Physical Form and Timing:
PSADBW mm1,mm2/m64 ---- 0F F6 /r ---- ?
-----------------------------------------------------------------
PSHUFW - Packed Shuffle Word
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: PSHUFW dest,src,sc
Description:
Changed order of words to another:
dest[15..0] <- (src >> (sc[1..0] * 16)) [15..0];
dest[31..16] <- (src >> (sc[3..2] * 16)) [15..0];
dest[47..32] <- (src >> (sc[5..4] * 16)) [15..0];
dest[63..48] <- (src >> (sc[7..6] * 16)) [15..0];
Physical Form and Timing:
PSHUFW mm1,mm2/m64,imm8 ---- 0F 70 /r imm8 ---- ?
---------------------------------------------------
OPCODE PSLLD - Packed Shift Left Logical Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSLLD dest,src
Description:
temp <- src
dest[31..0] <- dest[31..0] << temp
dest[63..32] <- dest[63..32] << temp
Note: Shift dwords in MMX register left by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSLLD mm,mm/m64 0FH F2H PostByte
PSLLD mm,Imm8 0FH 72H/6 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSLLQ - Packed Shift Left Logical Qwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSLLQ dest,src
Description:
temp <- src
dest <- dest << temp
Note: Shift MMX register left by Imm8 or amount specified in MMXregister/
/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSLLQ mm,mm/m64 0FH F3H PostByte
PSLLQ mm,Imm8 0FH 73H/6 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSLLW - Packed Shift Left Logical Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSLLW dest,src
Description:
temp <- src
dest[15..0] <- dest[15..0] << temp
dest[31..16] <- dest[31..16] << temp
dest[47..32] <- dest[47..32] << temp
dest[63..48] <- dest[63..48] << temp
Note: Shift words in MMX register left by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSLLW mm,mm/m64 0FH F1H PostByte
PSLLW mm,Imm8 0FH 71H/6 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSRAD - Packed Shift Right Arithmetic Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRAD dest,src
Description:
temp <- src
dest[31..0] <- SignExtend(dest[31..0]) >> temp
dest[63..32] <- SignExtend(dest[63..32]) >> temp
Note: Shift dwords in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in sign bits.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRAD mm,mm/m64 0FH E2H PostByte
PSRAD mm,Imm8 0FH 72H/4 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSRAW - Packed Shift Right Arithmetic Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRAW dest,src
Description:
temp <- src
dest[15..0] <- SignExtend(dest[15..0]) >> temp
dest[31..16] <- SignExtend(dest[31..16]) >> temp
dest[47..32] <- SignExtend(dest[47..32]) >> temp
dest[63..48] <- SignExtend(dest[63..48]) >> temp
Note: Shift words in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in sign bits.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRAW mm,mm/m64 0FH E1H PostByte
PSRAW mm,Imm8 0FH 71H/4 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSRLD - Packed Shift Right Logical Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRLD dest,src
Description:
temp <- src
dest[31..0] <- dest[31..0] >> temp
dest[63..32] <- dest[63..32] >> temp
Note: Shift dwords in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRLD mm,mm/m64 0FH D2H PostByte
PSRLD mm,Imm8 0FH 72H/2 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSRLQ - Packed Shift Right Logical Qwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRLQ dest,src
Description:
temp <- src
dest <- dest >> temp
Note: Shift MMX register right by Imm8 or amount specified in MMXregister/
/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRLQ mm,mm/m64 0FH D3H PostByte
PSRLQ mm,Imm8 0FH 73H/2 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSRLW - Packed Shift Right Logical Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSRLW dest,src
Description:
temp <- src
dest[15..0] <- dest[15..0] >> temp
dest[31..16] <- dest[31..16] >> temp
dest[47..32] <- dest[47..32] >> temp
dest[63..48] <- dest[63..48] >> temp
Note: Shift words in MMX register right by Imm8 or amount specified in MMX
register/memory, while shifting in zeros.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSRLW mm,mm/m64 0FH D1H PostByte
PSRLW mm,Imm8 0FH 71H/2 PostByte ImmData
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSUBB - Packed Subtract Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBB dest,src
Description:
dest[7..0] <- dest[7..0] - src[7..0]
dest[15..8] <- dest[15..8] - src[15..8]
dest[23..16] <- dest[23..16] - src[23..16]
dest[31..24] <- dest[31..24] - src[31..24]
dest[39..32] <- dest[39..32] - src[39..32]
dest[47..40] <- dest[47..40] - src[47..40]
dest[55..48] <- dest[55..48] - src[55..48]
dest[63..56] <- dest[63..56] - src[63..56]
Note: This instruction subtract packed byte in MMXregister/memory from
packed byte in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBB mm,mm/m64 0FH F8H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSUBD - Packed Subtract Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBD dest,src
Description:
dest[31..0] <- dest[31..0] - src[31..0]
dest[63..32] <- dest[63..48] - src[63..32]
Note: This instruction subtract packed dword in MMXregister/memory from
packed dword in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBD mm,mm/m64 0FH FAH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSUBSB - Packed Subtract with Saturation Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBSB dest,src
Description:
dest[7..0] <- SaturateToSignedByte(dest[7..0] - src[7..0])
dest[15..8] <- SaturateToSignedByte(dest[15..8] - src[15..8])
dest[23..16] <- SaturateToSignedByte(dest[23..16] - src[23..16])
dest[31..24] <- SaturateToSignedByte(dest[31..24] - src[31..24])
dest[39..32] <- SaturateToSignedByte(dest[39..32] - src[39..32])
dest[47..40] <- SaturateToSignedByte(dest[47..40] - src[47..40])
dest[55..48] <- SaturateToSignedByte(dest[55..48] - src[55..48])
dest[63..56] <- SaturateToSignedByte(dest[63..56] - src[63..56])
Note: This instruction subtract signed packed byte in MMXregister/memory
from signed packed byte in MMX register and saturate.
If the result is larger or smaller than the range of a signed byte,
the value is saturated; in the case of an overflow - to 7FH, and the
case of an underflow - to 80H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBSB mm,mm/m64 0FH E8H PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PSUBSIW - Packed Subtract with Saturation, using Implied Destination
CPU: Cyrix with Extended MMX Instruction Set
Type of Instruction: User
Instruction: PSUBSIW dest, src
Description:
mmi[15..0] <- SaturateToSignedWord(dest[15..0] - src[15..0]);
mmi[31..16] <- SaturateToSignedWord(dest[31..16] - src[31..16]);
mmi[47..32] <- SaturateToSignedWord(dest[47..32] - src[47..32]);
mmi[63..48] <- SaturateToSignedWord(dest[63..48] - src[63..48]);
Note: mmi is implied MMX register.
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PSUBSIW mm,mm/m64 0FH 55H PostByte
---------------------------------------------------
OPCODE PSUBSW - Packed Subtract with Saturation Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBSW dest,src
Description:
dest[15..0] <- SaturateToSignedWord(dest[15..0] - src[15..0])
dest[31..16] <- SaturateToSignedWord(dest[31..16] - src[31..16])
dest[47..32] <- SaturateToSignedWord(dest[47..32] - src[47..32])
dest[63..48] <- SaturateToSignedWord(dest[63..48] - src[63..48])
Note: This instruction subtract signed packed word in MMXregister/memory
from signed packed word in MMX register and saturate.
If the result is larger or smaller than the range of a signed word,
the value is saturated; in the case of an overflow - to 7FFFH, and the
case of an underflow - to 8000H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBSW mm,mm/m64 0FH E9H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSUBUSB - Packed Subtract Unsigned with Saturation Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBUSB dest,src
Description:
dest[7..0] <- SaturateToUnsignedByte(dest[7..0] - src[7..0])
dest[15..8] <- SaturateToUnsignedByte(dest[15..8] - src[15..8])
dest[23..16] <- SaturateToUnsignedByte(dest[23..16] - src[23..16])
dest[31..24] <- SaturateToUnsignedByte(dest[31..24] - src[31..24])
dest[39..32] <- SaturateToUnsignedByte(dest[39..32] - src[39..32])
dest[47..40] <- SaturateToUnsignedByte(dest[47..40] - src[47..40])
dest[55..48] <- SaturateToUnsignedByte(dest[55..48] - src[55..48])
dest[63..56] <- SaturateToUnsignedByte(dest[63..56] - src[63..56])
Note: This instruction subtract unsigned packed byte in MMXregister/memory
from unsigned packed byte in MMX register and saturate.
If the result element is less than zero (a negative value), it is
saturated to 00H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBUSB mm,mm/m64 0FH D8H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSUBUSW - Packed Subtract Unsigned with Saturation Bytes
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBUSW dest,src
Description:
dest[15..0] <- SaturateToUnsignedWord(dest[15..0] - src[15..0])
dest[31..16] <- SaturateToUnsignedWord(dest[31..16] - src[31..16])
dest[47..32] <- SaturateToUnsignedWord(dest[47..32] - src[47..32])
dest[63..48] <- SaturateToUnsignedWord(dest[63..48] - src[63..48])
Note: This instruction subtract unsigned packed word in MMXregister/memory
from unsigned packed word in MMX register and saturate.
If the result element is less than zero (a negative value), it is
saturated to 0000H
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBUSW mm,mm/m64 0FH D9H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PSUBW - Packed Subtract Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PSUBW dest,src
Description:
dest[15..0] <- dest[15..0] - src[15..0]
dest[31..16] <- dest[31..16] - src[31..16]
dest[47..32] <- dest[47..32] - src[47..32]
dest[63..48] <- dest[63..48] - src[63..48]
Note: This instruction subtract packed word in MMXregister/memory from
packed word in MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PSUBW mm,mm/m64 0FH F9H PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------
OPCODE PSWAPD - Packed Swap Doubleword
CPU: 3DNow! extension (Athlon CPU)
Type of Instruction: User
Instruction: PSWAPD dest, src
Description:
dest[63:32] <- src[31:0];
dest[31:0] <- src[63:32];
Note:
Flags Affected: None
++++++++++++++++++++++++++++++++++
COP & Times:
PSWAPD mm,mm/m64 0Fh 0Fh BBh Postbyte
---------------------------------------------------
OPCODE PUNPCKHBW - Unpack High Bytes to Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKHBW dest,src
Description:
dest[63..56] <- src[63..56]
dest[55..48] <- dest[63..56]
dest[47..40] <- src[55..48]
dest[39..32] <- dest[55..48]
dest[31..24] <- src[47..40]
dest[23..16] <- dest[47..40]
dest[15..8] <- src[39..32]
dest[7..0] <- dest[39..32]
Note: This instruction unpack and interleave the high-order data elements
of the destination and source operands into the destination operand.
The low-order data elements are ignored.
When unpacking from a memory operand, the full 64-bit operand is
accessed from memory. The instruction uses only the high-order 32 bits.
If the source operand is all zeros, the result is a zero extension of
the high-order elements of the destination operand. When using
PUNPCKHBW instruction the bytes are zero extended, or unpacked into
unsigned words.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKHBW mm,mm/m64 0FH 68H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PUNPCKHDQ - Unpack High Dwords to Qwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKHDQ dest,src
Description:
dest[63..32] <- src[63..32]
dest[31..0] <- dest[63..32]
Note: This instruction unpack and interleave the high-order data elements
of the destination and source operands into the destination operand.
The low-order data elements are ignored.
When unpacking from a memory operand, the full 64-bit operand is
accessed from memory. The instruction uses only the high-order 32 bits.
If the source operand is all zeros, the result is a zero extension of
the high-order elements of the destination operand.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKHDQ mm,mm/m64 0FH 6AH PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PUNPCKHWD - Unpack High Words to Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKHWD dest,src
Description:
dest[63..56] <- src[63..48]
dest[47..32] <- dest[63..48]
dest[31..16] <- src[47..32]
dest[15..0] <- dest[47..32]
Note: This instruction unpack and interleave the high-order data elements
of the destination and source operands into the destination operand.
The low-order data elements are ignored.
When unpacking from a memory operand, the full 64-bit operand is
accessed from memory. The instruction uses only the high-order 32 bits.
If the source operand is all zeros, the result is a zero extension of
the high-order elements of the destination operand. When using
PUNPCKHWD instruction the words are zero extended, or unpacked into
unsigned doublewords.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKHWD mm,mm/m64 0FH 69H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PUNPCKLBW - Unpack Low Bytes to Words
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKLBW dest,src
Description:
dest[63..56] <- src[31..24]
dest[55..48] <- dest[31..24]
dest[47..40] <- src[23..16]
dest[39..32] <- dest[23..16]
dest[31..24] <- src[15..8]
dest[23..16] <- dest[15..8]
dest[15..8] <- src[7..0]
dest[7..0] <- dest[7..0]
Note: This instruction unpack and interleave the low-order data elements
of the destination and source operands into the destination operand.
The high-order data elements are ignored.
When the source data comes from 64-bit registers, the upper 32 bits
are ignored.
When unpacking from a memory operand, only 32 bits are accessed. The
instruction uses all 32 bits.
If the source operand is all zeros, the result is a zero extension of
the low-order elements of the destination operand. When using
PUNPCKLBW instruction the bytes are zero extended, or unpacked into
unsigned words.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKLBW mm,mm/m32 0FH 60H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PUNPCKLDQ - Unpack Low Dwords to Qwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKLDQ dest,src
Description:
dest[63..32] <- src[31..0]
dest[31..0] <- dest[31..0]
Note: This instruction unpack and interleave the low-order data elements
of the destination and source operands into the destination operand.
When the source data comes from 64-bit registers, the upper 32 bits
are ignored.
When unpacking from a memory operand, only 32 bits are accessed. The
instruction uses all 32 bits.
If the source operand is all zeros, the result is a zero extension of
the low-order elements of the destination operand.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKLDQ mm,mm/m32 0FH 62H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PUNPCKLWD - Unpack Low Words to Dwords
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PUNPCKLWD dest,src
Description:
dest[63..48] <- src[31..16]
dest[47..32] <- dest[31..16]
dest[31..16] <- src[15..0]
dest[15..0] <- dest[15..0]
Note: This instruction unpack and interleave the low-order data elements
of the destination and source operands into the destination operand.
When the source data comes from 64-bit registers, the upper 32 bits
are ignored.
When unpacking from a memory operand, only 32 bits are accessed. The
instruction uses all 32 bits.
If the source operand is all zeros, the result is a zero extension of
the low-order elements of the destination operand. When using
PUNPCKLWD instruction the words are zero extended, or unpacked into
unsigned doublewords.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PUNPCKLWD mm,mm/m32 0FH 61H PostByte
P55C: n/a
future P6: n/a
---------------------------------------------------
OPCODE PXOR - Bitwise Logical Exclusive OR
CPU: all which supported IA MMX:
Pentium (P55C only), Pentium (tm) Pro (P6) future models
Type of Instruction: User
Instruction: PXOR dest,src
Description:
dest <- dest XOR src
Note: XOR 64 bits from MMXregister/memory to MMX register.
Flags affected: None
Exceptions:
RM PM VM SMM Description
#GP(0) If Illegal memory operand's EA in CS,DS,ES,FS,GS
#SS(0) If illegal memory operand's EA in SS
#PF(fcode) If page fault
#AC #AC If unaligned memory reference then alignment
check enabled and in ring 3.
#UD #UD #UD #UD If CR0.EM = 1
#NM #NM #NM #NM If CR0.TS = 1
#MF #MF #MF #MF If pending FPU Exception
#13 #13 If any part of the the operand lies outside of
the EA space from 0 to FFFFH
++++++++++++++++++++++++++++++++++++++
COP & Times:
PXOR mm,mm/m64 0FH EFH PostByte
P55C: n/a
future P6: n/a
-----------------------------------------------------------------
RCPPS - Packed Single-FP Reciprocal
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: RCPPS dest,src
Description:
for i = 0 to 3 do
dest[<i>] = APPROX(1.0 / src[<i>]);
endfor
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
RCPPS xmm1,xmm2/m128 ---- 0F 53 /r ---- 1
-----------------------------------------------------------------
RCPSS - Scalar Single-FP Reciprocal
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: RCPSS dest,src
Description:
dest[31..0] = APPROX(1.0 / src[31..0]);
Physical Form and Timing:
RCPSS xmm1,xmm2/m32 ---- F3 0F 53 /r ---- 1
---------------------------------------------------
OPCODE RDMSR - Read From Model Specified Register
CPU: Pentium (tm), IBM 386SLC,486SLC,486SLC2
Type of Instruction: System
Instruction: RDMSR
Description:
IF (ECX is valid number of MSR) and (CPL=0) THEN
{
EDX:EAX <- MSR [ECX];
}
ELSE
{
General Protection Fault INT 0DH (0)
}
END
Refer to Appendix W for more info.
Flags Affected: None
CPU mode: RM,PM0,SMM
Physical Form: RDMSR
COP (Code of Operation): 0FH 32H
Clocks: Pentium : 20-24
---------------------------------------------------
OPCODE RDPMC - Read Perfomance Monitoring Counters
CPU: Pentium (tm) Pro (P6)
Type of Instruction: User
Instruction: RDPMC
Description:
IF ((CPL<>0) AND (CR4.PCE==0))
THEN { INT D (0) ; GENERAL PROTECTION FAULT }
ELSE { EDX:EAX <- PERFOMANCE_MONITORING_REGISTER[ECX] }
Note: Valid ECX values is 0,1.
Invalid ECX values call INT D(0)
Note: CR4.PSE = bit 8 of CR4
Note: Perfomance Monitoring Registers (PMR) are aliases to some Perfomance
Monitoring MSRs:
MSR 12h is Counter #0 (Read/Write) (Perfomance Monitoring Counter # 0)
bits Description
63..40 Reserved
39..0 Current counter value
MSR 13h is Counter #1 (Read/Write) (Perfomance Monitoring Counter # 1)
bits Description
63..40 Reserved
39..0 Current counter value
++++++++++++++++++++++++++++++++++++++
COP & Times:
RDPMC 0FH 33H
P6: n/a
---------------------------------------------------
OPCODE RDSHR - Read SMM Header Pointer Register
CPU: Cyrix Cx6x86MX
Type of Instruction: SMM mode only
Instruction: RDSHR dest
Description:
dest <- SMHR (SMM Header pointer Register)
Note: Format of SMHR:
Bits Description
31..2 SMM Header pointer address
1 Reserved
0 (Valid)
if =1, then address valid
Note: SMHR pointed to phisical address SMM space area,
where will be saved non-SMM contex when entered SMM.
Format of SMM Header (for Cx6x86MX):
Address Size Description
(Relative (bit)
to SMH
pointer)
+00 32 DR7
-04h 32 EFLAGS
-08h 32 CR0
-0Ch 32 current EIP
-10h 32 next EIP
-14h 16 CS selector
-16h 16 Reserved
-18h 64 CS descriptor
-20h 16 Context
all reserved , but
22..21 CPL
-22h 16 Context
all reserved, but
15 N (Nested SMI indicator)
if = 1, current SMI serviced from SMM.
13 IS (Internal SMI indicator)
if = 1, current SMI is result of internal SMI
event.
if = 0, current SMI result of external event
4 H (SMI during CPU HALT state indicator)
if = 1, CPU was in halt or shutdown state,
before SMI.
3 S (Software SMM entry indicator)
if = 1, SMM is result of SMINT instruction
2 P (REP INSx/REP OUTSx indicator)
if = 1, current instruction have REP pfix.
1 I (IN,INSx,OUT,OUTx indicator)
if = 1, current instruction perform I/O
read/write
0 C (Code segment writable indicator)
if = 1, current code segment is writable,
if = 0, ---//---- is not writable.
-24h 16 I/O Data Size
-26h 16 I/O Write Address
-28h 32 I/O Write Data
-2Ch 32 ESI or EDI
total size of SMM header = 30h
Flags Affected: None
CPU mode: SMM
++++++++++++++++
Physical Form: RDSHR reg/mem32
COP (Code of Operation) : 0FH 36H Postbyte
Clocks Cx6x86MX: n/a
---------------------------------------------------
OPCODE RDTSC - Read From Time Stamp Counter
CPU: Pentium (tm), Pentium Pro, AMD Am5k86
Type of Instruction: System/User
Instruction: RDTSC
Description:
IF (CR4.TSD=0) or ((CR4.TSD=1) and (CPL=0)) THEN
{
EDX:EAX <- TSC;
}
ELSE
{
General Protection Fault INT 0DH (0)
}
END
Note: TSC is one of MSR and after global hardware reset (not SRESET , but
RESET ) it clear to 0000000000000000H.
TSC is MSR index 10h. TSC may set using WRMSR instruction.
TSC incremented every CPU core clock cycle.
Flags Affected: None
CPU mode: RM,PM0,SMM
; PM,VM if enable
Physical Form: RDTSC
COP (Code of Operation): 0FH 31H
Clocks: Pentium : n/a [20-24]
---------------------------------------------------
OPCODE REPC - Repeat While Carry Flag
CPU: NEC/Sony all V-series
Type of Instruction: Prefix
Instruction: REPC
Description:
DO
CX=CX-1;
SERVICE_PENDING_INTERRUPT;
STRING_INSTRUCTION;
LOOPWHILE ((CX<>0) AND (CF==1));
Flags Affected: None
CPU Mode: RM 8086
Physical Form: REPC
COP (Code of Operation): 65H
Clocks: NEC V20 : 2
NEC V30 : 2
---------------------------------------------------
OPCODE REPNC - Repeat While Not Carry Flag
CPU: NEC/Sony all V-series
Type of Instruction: Prefix
Instruction: REPNC
Description:
DO
CX=CX-1;
SERVICE_PENDING_INTERRUPT;
STRING_INSTRUCTION;
LOOPWHILE ((CX<>0) AND (CF<>1));
Flags Affected: None
CPU mode: RM 8086
Physical Form: REPNC
COP (Code of Operation): 64H
Clocks: NEC V20 : 2
NEC V30 : 2
---------------------------------------------------
OPCODE RES3 - Restore All CPU Registers
CPU: AMD Am386SXLV, Am386DXLV
Type of Instruction: System Operation
(Work only then CPL=0)
Instruction: RES3
Description:
Load All Registers (Include Shadow Registers) from Table
Which Begin on place pointed ES:EDI
Note:
This instruction is AMD analog Intel's LOADALL instruction
but it's more i.c. return from SMM used this instruction.
Then in SMM table is in SMRAM, then non SMM then table is
in main memory.
Format of RES3 Table:
Offset Len Description
0H 4 CR0
4H 4 EFLAGS
8H 4 EIP
CH 4 EDI
10H 4 ESI
14H 4 EBP
18H 4 ESP
1CH 4 EBX
20H 4 EDX
24H 4 ESX
28H 4 EAX
2CH 4 DR6
30H 4 DR7
34H 4 TR (16 bit, zero filled up)
38H 4 LDT ---------
3CH 4 GS ---------
40H 4 FS ---------
44H 4 DS ---------
48H 4 SS ---------
4CH 4 CS ---------
50H 4 ES ---------
54H 4 TSS.attrib
58H 4 TSS.base
5CH 4 TSS.limit
60H 4 Reserved
64H 4 IDT.base
68H 4 IDT.limit
6CH 4 REP OUTS overrun flag
70H 4 GDT.base
74H 4 GDT.limit
78H 4 LDT.attrib
7CH 4 LDT.base
80H 4 LDT.limit
84H 4 GS.attrib
88H 4 GS.base
8CH 4 GS.limit
90H 4 FS.attrib
94H 4 FS.base
98H 4 FS.limit
9CH 4 DS.attrib
A0H 4 DS.base
A4H 4 DS.limit
A8H 4 SS.attrib
ACH 4 SS.base
B0H 4 SS.limit
B4H 4 CS.attrib
B8H 4 CS.base
BCH 4 CS.limit
C0H 4 ES.attrib
C4H 4 ES.base
C8H 4 ES.limit
Unknown Unusable area
100H 4 Temporary register
104H 4 -------------
108H 4 -------------
10CH 4 -------------
110H 4 -------------
114H 4 -------------
118H 4 -------------
11CH 4 -------------
120H 4 -------------
124H 4 Last EIP (Last instruction EIP for Restart)
See APPENDIX X for more info.
Format of Attrib field:
Byte Description
0 0s
1 AR (Access Right) byte in the Descriptor format
Note:
P bit is a valid bit
if valid bit=0 then Shadow Register is invalid and
INT 0DH - General Protection Fault call
DPL of SS,CS det. CPL
2-3 0s
Flags Affected: All (FLAGS Register Reload)
CPU mode: RM,PM0,SMM
Physical Form: RES3
COP (Code of Operation): 0FH 07H Note: Code is same with Intel's LOADALL
Clocks: Am386SXLV : 366
Am386DXLV : 291
---------------------------------------------------
OPCODE RES4 - Restore All CPU Registers
CPU: AMD Am486SXLV, Am486DXLV
Type of Instruction: System Operation
(Work only then CPL=0)
Instruction: RES3
Description:
Load All Registers (Include Shadow Registers) from Table
Which Begin on place pointed ES:EDI
Note:
This instruction is AMD analog Intel's LOADALL instruction
but it's more i.c. return from SMM used this instruction.
Then in SMM table is in SMRAM, then non SMM then table is
in main memory.
Format of RES3 Table:
Offset Len Description
0H 4 CR0
4H 4 EFLAGS
8H 4 EIP
CH 4 EDI
10H 4 ESI
14H 4 EBP
18H 4 ESP
1CH 4 EBX
20H 4 EDX
24H 4 ESX
28H 4 EAX
2CH 4 DR6
30H 4 DR7
34H 4 TR (16 bit, zero filled up)
38H 4 LDT ---------
3CH 4 GS ---------
40H 4 FS ---------
44H 4 DS ---------
48H 4 SS ---------
4CH 4 CS ---------
50H 4 ES ---------
54H 4 TSS.attrib
58H 4 TSS.base
5CH 4 TSS.limit
60H 4 Reserved
64H 4 IDT.base
68H 4 IDT.limit
6CH 4 REP OUTS overrun flag
70H 4 GDT.base
74H 4 GDT.limit
78H 4 LDT.attrib
7CH 4 LDT.base
80H 4 LDT.limit
84H 4 GS.attrib
88H 4 GS.base
8CH 4 GS.limit
90H 4 FS.attrib
94H 4 FS.base
98H 4 FS.limit
9CH 4 DS.attrib
A0H 4 DS.base
A4H 4 DS.limit
A8H 4 SS.attrib
ACH 4 SS.base
B0H 4 SS.limit
B4H 4 CS.attrib
B8H 4 CS.base
BCH 4 CS.limit
C0H 4 ES.attrib
C4H 4 ES.base
C8H 4 ES.limit
Unknown Unusable area
100H 4 Temporary register
104H 4 -------------
108H 4 -------------
10CH 4 -------------
110H 4 -------------
114H 4 -------------
118H 4 -------------
11CH 4 -------------
120H 4 -------------
124H 4 Last EIP (Last instruction EIP for Restart)
128H 4 PEIP - Previous SRAM space instruction pointer
12EH 36 Unused
150H 22 Floating Pointer Internal Registers (Am486DXLV)
See Appendix X for more info.
Format of Attrib field:
Byte Description
0 0s
1 AR (Access Right) byte in the Descriptor format
Note:
P bit is a valid bit
if valid bit=0 then Shadow Register is invalid and
INT 0DH - General Protection Fault call
DPL of SS,CS det. CPL
2-3 0s
Flags Affected: All (FLAGS Register Reload)
CPU mode: RM,PM0,SMM
Physical Form: RES4
COP (Code of Operation): 0FH 07H Note: Code is same with Intel's LOADALL
Clocks: Am486SXLV : N/A
---------------------------------------------------
OPCODE RETRBI - Return from Register Bank Context
Switch Interrupt.
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: RETRBI
Description:
PC <- Save PC;
PSW <- Save PSW;
Flags Affected: All
CPU mode: RM
+++++++++++++++++++++++
Physical Form: RETRBI
COP (Code of Operation) : 0Fh 91h
Clocks: 12
---------------------------------------------------
OPCODE RETXA - Return from Expansion Address
CPU: NEC V33/V53 only
Type of Instruction: System
Instruction: RETXA int_vector
Description:
[sp-1,sp-2] <- PSW ; PSW EQU FLAGS
[sp-3,sp-4] <- PS ; PS EQU CS
[sp-5,sp-6] <- PC ; PC EQU IP
SP <- SP -6
IE <- 0
BRK <- 0
MD <- 0
PC <- [int_vector*4 +0,+1]
PS <- [int_vector*4 +2,+3]
Disable EA mode.
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: RETXA imm8
COP (Code of Operation) : 0Fh F0h imm8
Clocks: 12
---------------------------------------------------
OPCODE ROL4 - Rotate left 4 bits
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: ROL4 dest
Description:
AL dest
bits 7 4 3 0 7 4 3 0
------------- -------------
| | o <--------| <-|-o |<--\
---------|---- ------------- |
| |
\---------------------------/
Note: This instruction Rotates (4bits) left out of dest through low 4bits
of AL
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form : ROL4 reg/mem8
COP (Code of Operation) : 0FH 28H PostByte
Clocks: ROL4 reg/mem8
NEC V20: 25/28
---------------------------------------------------
OPCODE ROR4 - Rotate right 4 bits
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: ROL4 dest
Description:
AL dest
bits 7 4 3 0 7 4 3 0
------------- -------------
| | o--|------>| o-|-> o-|--\
---------^---- ------------- |
| |
\---------------------------/
Note: This instruction Rotates (4bits) right out of dest through low 4bits
of AL
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form : ROR4 reg/mem8
COP (Code of Operation) : 0FH 2AH PostByte
Clocks: ROR4 reg/mem8
NEC V20: 29/33
---------------------------------------------------
OPCODE RSDC - Restore Register and Descriptor
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: RSDC sreg,sorc
Description:
sreg [selector,shadow_descriptor] <- sorc
; sorc is register and descriptor structure (see below)
; Note: This instruction load segment register
; include shadow descriptor
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: RSDC sgeg,mem80
COP (Code of Operation) : 0FH 79H [mm sreg3 mmm]
Clocks IBM BL486DX: 10
TI 486SXL : 14
Note: sreg3 is: 000 ES
001 CS
010 SS
011 DS
100 FS
101 GS
---------------------------------------------------
OPCODE RSLDT - Restore LDTR and Descriptor
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: RSLDT sorc
Description:
LDTR [selector,shadow_descriptor] <- sorc
; sorc is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: RSLDT mem80
COP (Code of Operation) : 0FH 7BH [mm 000 mmm]
Clocks IBM BL486DX: 10
TI 486SXL : 14
---------------------------------------------------
OPCODE RSM - Resume from System Managment Mode
CPU: I486 SL Enhanced+,i486SL,i386CX,i386EX
Type of Instruction: System
Instruction: RSM
Description:
Restore execution state from SMRAM and
return to previous CPU mode
CPU mode: SMM only
( INT 6 - Undefined Opcode in all other mode )
Flags Affected: All
Note: CPU state restored from dump created entrance to SMM.
The CPU leave SMM and return to previous mode.
If CPU detect any invalid state it enters shutdown.
This invalid states is:
* The value stored in State Dump Base field is not 32K aligned
address
* Any Reserved bit of CR4 is set to 1 (Pentium only)
* Any illegal Combination of CR0:
** (PG=1 and PE=0)
** (NW=1 and CD=0)
Format of Execution State in SMRAM:
Offset Register
7FFCh CR0
7FF8h CR3
7FF4h EFLAGS
7FF0h EIP
7FECh EDI
7FE8h ESI
7FE4h EBP
7FE0h ESP
7FDCh EBX
7FD8h EDX
7FD4h ECX
7FD0h EAX
7FCCh DR7
7FC4h TR, upper 2 bytes reserved
7FC0h LDTR, upper 2 bytes reserved
7FBCh GS, upper 2 bytes reserved
7FB8h FS, upper 2 bytes reserved
7FB4h DS, upper 2 bytes reserved
7FB0h SS, upper 2 bytes reserved
7FACh CS, upper 2 bytes reserved
7FA8h ES, upper 2 bytes reserved
7F98h Reserved
7F94h IDT base (4 bytes)
7F8Ch Reserved
7F88h GDT base (4 bytes)
7F04h Reserved
7F02h Auto HALT Restart Slot (2 bytes)
Bits 15..2 are reserved
Bit 1 Bit 0 Description
0 0 Resume to next instruction in interrupted
program
0 1 Unpredictable
1 0 Return to next instruction after HALT
1 1 Return to HALT state
7F00h I/O Restart Slot (2 bytes)
When RSM execution if I/O restart slot = 0FFh then
EIP modified to instruction immediate preceding the
SMI# request i.e. CPU automatically reexecute I/O
instruction which be trapped by SMI.
7EFCh SMM Revision Identificator (4 bytes)
Bits Description
31..18 Reserved
17 If=1 Processor support SMBASE relocation
else not support
16 If =1 Processor support I/O Instruction Restart
15..0 SMM Revision Identificator
P5,486s = 0000h
P54C when I/O Restarts enable = 0002h
7EF8h SMBASE Slot (4 bytes)
SMBASE is 32KB aligned 32bit dword which contained a base
address for SMRAM.
Default value is 30000h
Starting Address for for jump in SMM is:
SMBASE+8000h
Starting address for State Save area is
SMBASE+[8000h+7FFFh]
7E00h Reserved
Note: In fields marked Reserved saved and restores next registers:
CR1,CR2,CR3, hidden descriptors for CS,DS,ES,FS,SS,GS.
Never saved registers: DR5-DR0,TR7-TR3,all FPU registers.
More Information Not available Yet.
Physical Form: RSM
COP (Code of Operation) : 0FH AAH
Clocks: i386CX : 338
i486 SL Enhanced : ???
IntelDX4 : 452 ; SMBASE relocation
: 456 ; AutoHALT restart
: 465 ; I/O Trap restart
Pentium : 83
---------------------------------------------------
OPCODE RSM - Resume from SMM
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: RSM
Description:
RESTORE CPU STATE FROM SMM HEADER AT THE TOP OF
SMM SPACE (defined by SMAR register);
EXIT SMM;
Format of SMM Header:
Offset Length Description
-00h - Nothing (Top of SMM space) (Not accessable)
-04h 32 DR7
-08h 32 EFLAGS
-0Ch 32 CR0
-10h 32 Current EIP
-14h 32 Next instruction EIP
-16h 16 Reserved
-18h 16 CS selector
-1Ch 32 CS descriptor(63-32)
-20h 32 CS descriptor(31-0)
-24h 32 SMM Flags
[ ALL BITS are Not available in Cx486S/S2/D/D2]
Bit Description
1 I (IN/INSx/OUT/OUTx Indicator)
If =0 current instruction performed
I/O read
=1 I/O write
2 P (REP INSx/OUTx Prefix)
If =1 current instruction has REP pfix.
=0 not has REP pfix
3 S (Software SMI)
If =1 current SMM is result of execution
SMINT instruction
=0 current SMM is result of hardware SMI
Note: TI 486SXL/SXL2 support only bits 1,2.
-26h 16 I/O Write Data size
[ Not available in Cx486S/S2/D/D2]
[ Not available in TI486SXL/SXL2]
[ Not available in TI486SLC/DLC/e]
1h = byte
3h = word
fh = dword
-28h 16 I/O Write Address
[ Not avaliable in Cx486S/S2/D/D2]
[ Not available in TI486SXL/SXL2]
[ Not available in TI486SLC/DLC/e]
-2Ch 32 I/O Write Data
[ Not avaliable in Cx486S/S2/D/D2]
[ Not available in TI486SXL/SXL2]
[ Not available in TI486SLC/DLC/e]
-30h 32 ESI or EDI
This field saved value of source/destination
for restart INSx/OUTSx instruction
[ Not avaliable in Cx486S/S2/D/D2]
Flags Affected: All
CPU mode: SMM
++++++++++++++++
Physical Form: RSM
COP (Code of Operation) : 0FH AAH
Clocks IBM BL486DX: 76
TI 486SXL : 58
-----------------------------------------------------------------
RSQRTPS - Packed Single-FP Square Root Reciprocal
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: RSQRTPS dest,src
Description:
for i = 0 to 3 do
dest[<i>] = APPROX(1.0 / SQRT(src[<i>]));
endfor
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
RSQRTPS xmm1,xmm2/m128 ---- 0F 52 /r ---- 2
-----------------------------------------------------------------
RSQRTSS - Scalar Single-FP Square Root Reciprocal
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: RSQRTPS dest,src
Description:
dest[31..0] = APPROX(1.0 / SQRT(src[31..0]));
Physical Form and Timing:
RSQRTSS xmm1,xmm2/m128 ---- F3 0F 52 /r ---- 1
---------------------------------------------------
OPCODE RSTS - Restore TR and Descriptor
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
IBM BL486DX/DX2
Type of Instruction: System
Instruction: RSTS sorc
Description:
TR [selector,shadow_descriptor] <- sorc
; sorc is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: RSTS mem80
COP (Code of Operation) : 0FH 7DH [mm 000 mmm]
Clocks IBM BL486DX: 10
TI 486SXL : 14
---------------------------------------------------
OPCODE SET1 - Set a Specified Bit
CPU: NEC/Sony V-series
Type of Instruction: User
Instruction: SET1 dest,bitnumb
Description:
BIT bitnumb OF dest <- 1;
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: SET1 reg/mem8,CL
COP (Code of Operation) : 0FH 14H Postbyte
Physical Form: SET1 reg/mem8,imm8
COP (Code of Operation) : 0FH 1CH Postbyte imm8
Physical Form: SET1 reg/mem16,CL
COP (Code of Operation) : 0FH 15H Postbyte
Physical Form: SET1 reg/mem16,imm8
COP (Code of Operation) : 0FH 1DH Postbyte imm8
Clocks: SET1
r/m8,CL r/m8,i8 r/m16,CL r/m16,i8
NEC V20: 4/13 5/14 4/13 5/14
---------------------------------------------------
OPCODE SETALC - Set AL to Carry Flag
CPU: Intel 8086 and all its clones and upward
compatibility chips.
Type of Instruction: User
Instruction: SETALC
Description:
IF (CF=0) THEN AL:=0 ELSE AL:=FFH;
Flags Affected: None
CPU mode: RM,PM,VM,SMM
Physical Form: SETALC
COP (Code of Operation): D6H
Clocks: 80286 : n/a [3]
80386 : n/a [3]
Cx486SLC : n/a [2]
i486 : n/a [3]
Pentium : n/a [3]
Note: n/a is Time that Intel etc not say.
[3] is real time it executed.
-----------------------------------------------------------------
SFENCE - Store Fence
CPU: Pentium III+ (KNI/MMX2), AMD Athlon (AMD EMMX)
Type of instruction: User
Instruction: SFENCE
Description:
Guranteed that every store instruction that precedes in program
order the store fence instruction is globally visible before any
store instruction follows the fence is globally visible.
Physical Form and Timing:
SFENCE ---- 0F AE F8 ---- ?
-----------------------------------------------------------------
SHUFPS - Shuffle Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: SHUFPS dest,src,sc
Description:
for i=0 to 3 do
SEL = (sc >> (i*2)) AND 3;
dest[<i>] <- src[<SEL>];
endfor
Physical Form and Timing:
SHUFPS xmm1,xmm2/m128,imm8 ---- 0F C6 /r imm8 ---- ?
---------------------------------------------------
OPCODE SMI - System Managment Interrupt
CPU: AMD Am386SXLV,Am386DXLV
AMD 486s
Type of Instruction: System
Instruction: SMI
Description:
IF (SMIE=1) THEN
{
SAVE STATUS OF EXECUTION TO SMRAM;
ENTER SMM;
SMMS <- 1;
}
ELSE
{
INT 1;
}
END
Notes: SMIE is <Soft SMI Enable> (DR7.bit12)
=1 Enable soft SMI
=0 Disable soft SMI
SMMS is <SMM status bit> (DR6.bit12)
=1 SMM was entered
=0 SMM status cleared
Flags Affected: None
CPU mode: RM?,PM0
Physical Form: SMI
COP (Code of Operation): F1H
Clocks: Am386SXLV : 357
Am386DXLV : 325
Am486xxxx : Don't know, do you?
---------------------------------------------------
OPCODE SMINT - Software SMM Interrupt
CPU: Cyrix Cx486DX/DX2/DX4
IBM BL486DX/DX2
Note: Never in Cx486S/S2/D/D2
Never in any TI's chips.
Type of Instruction: System
Instruction: SMINT
Description:
SAVE CPU STATE TO SMM HEADER AT THE TOP OF
SMM SPACE (defined by SMAR register);
ENTER SMM MODE;
Format of SMM Header: Refer to Cyrix/IBM SMI Instruction
Flags Affected: None
CPU mode: CPL=0, CCR1.bit1=1, SMAR size >= 30h.
++++++++++++++++
Physical Form: SMINT
COP (Code of Operation) : 0FH 7EH
Clocks IBM BL486DX: 24
-----------------------------------------------------------------
SQRTPS - Packed Single-FP Square Root
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: SQRTPS dest,src
Description:
for i = 0 to 3 do
dest[<i>] = SQRT(src[<i>]);
endfor
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
SQRTPS xmm1,xmm2/m128 ---- 0F 51 /r ---- 56-114
-----------------------------------------------------------------
SQRTSS - Scalar Single-FP Square Root
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: SQRTSS dest,src
Description:
dest[31..0] = SQRT(src[31..0]);
Physical Form and Timing:
SQRTSS xmm1,xmm2/m32 ---- F3 0F 51 /r ---- 8-??
-----------------------------------------------------------------
STMXCSR - Store Streaming SIMD Extension Control/Status
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: STMXCSR dest
Description:
dest <- MXCSR
For format of MXCSR look LDMXCSR instruction
Physical Form and Timing:
STMXCSR m32 ---- 0F AE /3 ---- ?
---------------------------------------------------
OPCODE STOP - Stop CPU
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: STOP
Description:
PowerDown instruction, Stop Oscillator,
Halt CPU.
Flags Affected: None
CPU mode: RM
+++++++++++++++++++++++
Physical Form: STOP
COP (Code of Operation) : 0Fh BEh
Clocks: N/A
---------------------------------------------------
OPCODE SUB4S - Subtraction of packed BCD strings
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: SUB4S
Description:
BCD STRING (ADDRESS=ES:DI,LENGTH=CL) <-
BCD STRING (ADDRESS=DS:SI,LENGTH=CL) -
BCD STRING (ADDRESS=ES:DI,LENGTH=CL);
Length of BCD string in CL;
Note: si,di,cl and other registers not changed
Flags Affected: OF,CF,ZF
;; ZF set if result is zero.
;; CF,OF set as result of operation with most
;; signification BCDs.
CPU mode: RM
+++++++++++++++++++++++
Physical Form: SUB4S
COP (Code of Operation) : 0FH 22H
Clocks: SUB4S
NEC V20: ~7+19*CL
-----------------------------------------------------------------
SUBPS - Packed Single-FP Subtract
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: SUBPS dest,src
Description:
for i = 0 to 3 do
dest[<i>] = dest[<i>] - src[<i>];
endfor
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
SUBPS xmm1,xmm2/m128 ---- 0F 5C /r ---- 2
-----------------------------------------------------------------
SUBSS - Scalar Single-FP Subtract
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: SUBSS dest,src
Description:
dest[31..0] = dest[31..0] - src[31..0];
Physical Form and Timing:
SUBSS xmm1,xmm2/m32 ---- F3 0F 5C /r ---- 1
---------------------------------------------------
OPCODE SVDC - Save Register and Descriptor
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: SVDC dest,sreg
Description:
dest <- sreg [selector,shadow_descriptor]
; dest is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: SVDC mem80,sreg
COP (Code of Operation) : 0FH 78H [mm sreg3 mmm]
Clocks IBM BL486DX: 18
TI 486SXL : 22
Note: sreg3 is: 000 ES
001 CS
010 SS
011 DS
100 FS
101 GS
---------------------------------------------------
OPCODE SVLDT - Save LDTR and Descriptor
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: SVLDT dest
Description:
dest <- LDTR [selector,shadow_descriptor]
; dest is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: SVLDT mem80
COP (Code of Operation) : 0FH 7AH [mm 000 mmm]
Clocks IBM BL486DX: 18
TI 486SXL : 22
---------------------------------------------------
OPCODE SVTS - Save TR and Descriptor
CPU: Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
TI 486SLC/DLC/e
TI 486SXL/SXL2/SXLC
TI Potomac
Type of Instruction: System
Instruction: SVTS dest
Description:
dest <- TR [selector,shadow_descriptor]
; dest is register and descriptor structure (see below)
Format or Register and Descriptor Structure:
+00 Limit (15-0)
+02 Base (15-0)
+04 Base (23-16)
+05 AR byte
+06 AR2/Limit (19-16)
+07 Base (31-24)
+08 Selector
Length of structure is 0Ah
Flags Affected: None
CPU mode: (1) and (2) and (3) and [(4A) or (4B)]
1) CPL=0
2) CCR1.bit1=1 ; SMI enable
3) SMAR size > 0
4A) in SMM
4B) CCR1.bit2=1 ; SMAC is on
++++++++++++++++
Physical Form: SVTS mem80
COP (Code of Operation) : 0FH 7CH [mm 000 mmm]
Clocks IBM BL486DX: 18
TI 486SXL : 22
---------------------------------------------------
OPCODE SYSCALL - Call Operating System
CPU: AMD K6-2,K6-3
Type of Instruction: User
Instruction: SYSCALL
Description:
if EFER.SCE = 1 then
{ ECX <- EIP
EIP <- STAR[31..0]
IF <- 0
VM <- 0
CS.selector <- STAR[47..32]
SS.selector <- (STAR[47..32]) + 8
CS.base <- 0
SS.base <- 0
CS.limit <- 4G
SS.limit <- 4G
CS.attr <- ReadOnly
SS.attr <- R/W, Expand-Up
CPL <- 0
} else #UD;
Note: Passing control to fixed entry point for faster OS calls.
see RDMSR for description of STAR (SYSCALL Target Address register)
Note: Command opcode equal to 286 LOADALL undocument instruction.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSCALL 0FH 05H
Am6k86: n/a
---------------------------------------------------
OPCODE SYSENTER - Call Operating System
CPU: Intel Pentium II
Type of Instruction: System
Instruction: SYSENTER
Description:
if CR.0.PE == 0 then #GP(0);
if SYSENTER_CS_MSR == 0 then #GP(0);
EFLAGS.VM <- 0;
EFLAGS.IF <- 0;
CS.SEL <- SYSENTER_CS_MSR;
CPL <- 0;
CS.BASE <- 0;
CS.LIMIT <- 0xffff;
CS.ATTR.G <- 1;
CS.ATTR.S <- 1;
CS.ATTR.TYPE <- 1011b;
CS.ATTR.D <- 1;
CS.ATTR.DPL <- 0;
CS.RPL <- 0;
CS.ATTR.P <- 1;
SS.SEL <- CS.SEL+8;
SS.BASE <- 0;
SS.LIMIT <- 0xffff;
SS.ATTR.G <- 1;
SS.ATTR.S <- 1;
SS.ATTR.TYPE <- 0011b;
SS.ATTR.D <- 1;
SS.ATTR.DPL <- 0;
SS.RPL <- 0;
SS.ATTR.P <- 1;
ESP <- SYSENTER_ESP_MSR;
EIP <- SYSENTER_EIP_MSR;
Note: How to check if this instruction present:
CPUID.SEP bit must be set.
AND
CPUID.FAMILY == 6 AND (CPUID.MODEL >=3) AND (CPUID.STEP >= 3)
Note: See MSR List for more Info. (MSRs 174h,175h,176h)
Note: Passing control to fixed entry point for faster OS calls.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSENTER 0FH 34H
P6: n/a
---------------------------------------------------
OPCODE SYSEXIT - Return from Operation System
CPU: Intel Pentium II
Type of Instruction: Privelege (CPL =0)
Instruction: SYSRET
Description:
if CR.0.PE == 0 then #GP(0);
if SYSENTER_CS_MSR == 0 then #GP(0);
EFLAGS.VM <- 0;
EFLAGS.IF <- 0;
CS.SEL <- SYSENTER_CS_MSR + 16;
CPL <- 0;
CS.BASE <- 0;
CS.LIMIT <- 0xffff;
CS.ATTR.G <- 1;
CS.ATTR.S <- 1;
CS.ATTR.TYPE <- 1011b;
CS.ATTR.D <- 1;
CS.ATTR.DPL <- 0;
CS.RPL <- 0;
CS.ATTR.P <- 1;
SS.SEL <- CS.SEL+8;
SS.BASE <- 0;
SS.LIMIT <- 0xffff;
SS.ATTR.G <- 1;
SS.ATTR.S <- 1;
SS.ATTR.TYPE <- 0011b;
SS.ATTR.D <- 1;
SS.ATTR.DPL <- 0;
SS.RPL <- 0;
SS.ATTR.P <- 1;
ESP <- SYSENTER_ESP_MSR;
EIP <- SYSENTER_EIP_MSR;
Note: See SYSENTER for more Info.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSEXIT 0FH 35H
P6: n/a
---------------------------------------------------
OPCODE SYSRET - Return from Operation System
CPU: AMD K6-2,K6-3
Type of Instruction: Privelege (CPL =0)
Instruction: SYSRET
Description:
if EFER.SCE == 1
{
if CPL == 0
{
EIP <- ECX
IF <- 1
CS.selector <- STAR[47..32] OR 3H
CS.base <- 0
CS.limit <- 4GB
CS.attr <- ReadOnly
SS <- (STAR[47..32]) + 16) OR 3H
} else #GP(0);
} else #UD;
Note: Passing control from OS entry point back to ring 3 client.
see RDMSR for description of STAR (SYSCALL Target Address register)
Note: Command opcode equal to 386/486 LOADALL undocument instruction.
++++++++++++++++++++++++++++++++++++++
COP & Times:
SYSRET 0FH 07H
Am6k86: n/a
---------------------------------------------------
OPCODE TEST1 - Test a Specified bit
CPU: NEC/Sony all V-series
Type of Instruction: User
Instruction: NOT1 dest,bitnumb
Description:
IF dest IS 8BIT THEN bitn <- bitnumb AND 7;
IF dest IS 16BIT THEN bitn <- bitnumb AND Fh;
IF (BIT bitn OF dest) = 0 THEN
{
ZF <- 1;
}
ELSE {
ZF <- 0;
}
ENDIF
Flags Affected: ZF
CPU mode: RM
+++++++++++++++++++++++
Physical Form: TEST1 reg/mem8,CL
COP (Code of Operation) : 0FH 10H Postbyte
Physical Form: TEST1 reg/mem8,imm8
COP (Code of Operation) : 0FH 18H Postbyte imm8
Physical Form: TEST1 reg/mem16,CL
COP (Code of Operation) : 0FH 11H Postbyte
Physical Form: TEST1 reg/mem16,imm8
COP (Code of Operation) : 0FH 19H Postbyte imm8
Clocks: TEST1
r/m8,CL r/m8,i8 r/m16,CL r/m16,i8
NEC V20: 3/12 4/13 3/12 4/13
---------------------------------------------------
OPCODE TSKSW - Task Switch
CPU: NEC V25,V35,V25 Plus,V35 Plus,V25 Software Guard
Type of Instruction: System
Instruction: TSKSW reg16
Description: Perform a High-Speed task switch to the register bank indicated
by lower 3 bits of reg16. The PC and PSW are saved in the old
banks. PC and PSW save Registers and the new PC and PSW values
are retrived from the new register bank's save area.
Note: See BRKCS instruction for more Info about banks.
Flags Affected: All
CPU mode: RM
+++++++++++++++++++++++
Physical Form: TSCSW reg16
COP (Code of Operation) : 0Fh 94h <1111 1RRR>
Clocks: 11
-----------------------------------------------------------------
UCOMISS - Unordered Scalar Single-FP compare and Set EFLAGS
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: UCOMISS dest,src
Description:
OF <- 0;
SF <- 0;
AF <- 0;
if (dest[31..0] UNORD src[31..0]) then
ZF <- 1;
PF <- 1;
CF <- 1;
else if (dest[31..0] > src[31..0]) then
ZF <- 0;
PF <- 0;
CF <- 0;
else if (dest[31..0] < src[31..0]) then
ZF <- 0;
PF <- 0;
CF <- 1;
else // Equal
ZF <- 1;
PF <- 0;
CF <- 0;
endif
Physical Form and Timing:
UCOMISS xmm1,xmm2/m32 ---- 0F 2E /r ---- ?
-----------------------------------------------------------------
UNPCKHPS - Unpack High Packed Single-FP Data
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: UNPCKHPS dest,src
Description:
dest[<0>] <- dest[<2>];
dest[<1>] <- src[<2>];
dest[<2>] <- dest[<3>];
dest[<3>] <- src[<3>];
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
UNPCKHPS xmm1,xmm2/m128 ---- 0F 15 /r ---- 2
-----------------------------------------------------------------
UNPCKLPS - Unpack Low Packed Single-FP Data
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: UNPCKLPS dest,src
Description:
dest[<0>] <- dest[<0>];
dest[<1>] <- src[<0>];
dest[<2>] <- dest[<1>];
dest[<3>] <- src[<1>];
<0> = 31..0 <2> = 95..64
<1> = 63..32 <3> = 127..96
Physical Form and Timing:
UNPCKLPS xmm1,xmm2/m128 ---- 0F 14 /r ---- 2
--------------------------------------------------
OPCODE UD - Undefined Instruction
CPU: AMD Am5k86 (SSA/5, K5)
Logical Form: UD
Description:
Caused #UD exception
Flags Affected: No Flags Affected
CPU Mode : RM,PM,VM,VME,SMM
Exceptions :
RM PM V86 VME SMM
#UD #UD #UD #UD #UD Undefined Instruction
No more Exceptions
Note :
This instruction caused #UD. AMD guaranteed that in future AMD's
CPUs this instruction will caused #UD. Of course all previous CPUs
(186+) caused #UD on this opcode. This instruction used by software
writers for testing #UD exception servise routine.
++++++++++++++++++++++++++++++
Physical Form : UD
COP (Code of Operation) : 0Fh FFh
Clocks : UD
8088: Not supported
NEC V20: Not supported
80186: ~int
80286: ~int
80386: ~int
Cx486SLC: ~int
i486: ~int
Cx486DX: ~int
Cx5x86: ~int
Pentium: ~int
Nx5x86: ~int
Cx6x86: ~int
Am5k86: ~int
Pentium Pro: ~int
++++++++++++++++++++++++++++++
--------------------------------------------------
OPCODE UD2 - Undefined Instruction
CPU: Pentium Pro+ and all other
Logical Form: UD2
Description:
Caused #UD exception
Flags Affected: No Flags Affected
CPU Mode : RM,PM,VM,VME,SMM
Exceptions :
RM PM V86 VME SMM
#UD #UD #UD #UD #UD Undefined Instruction
No more Exceptions
Note :
This instruction caused #UD. Intel guaranteed that in future Intel's
CPUs this instruction will caused #UD. Of course all previous CPUs
(186+) caused #UD on this opcode. This instruction used by software
writers for testing #UD exception servise routine.
++++++++++++++++++++++++++++++
Physical Form : UD2
COP (Code of Operation) : 0Fh 0Bh
Clocks : UD2
8088: Not supported
NEC V20: Not supported
80186: ~int
80286: ~int
80386: ~int
Cx486SLC: ~int
i486: ~int
Cx486DX: ~int
Cx5x86: ~int
Pentium: ~int
Nx5x86: ~int
Cx6x86: ~int
Am5k86: ~int
Pentium Pro: ~int
++++++++++++++++++++++++++++++
---------------------------------------------------
OPCODE UMOV - Mov Data to Main (User) Memory
CPU: AMD Am386SXLV,Am386DXLV
AMD 486s
IBM 486SLC2
Type of Instruction: Special System
Instruction: UMOV dest,sorc
Description:
dest <- sorc;
Note!!!!!: But all memory operands placed in Main memory only !
( i.e. not in SMRAM then in SMM )
WARNING: UMC's CPUs hang on execution this instruction !!!!!!
check that CPU is none UMC's before
Note: On Cyrix's CPUs UMOV opcodes do nothing. This way used to
determination of Cyrix Microprocessors.
Note: Pentium P54C never support this instruction
Flags Affected: None
CPU mode: RM?,PM?,VM?,SMM
+++++++++++++++++++++++
Physical Form: UMOV r/m8,r8
COP (Code of Operation) : 0FH 10H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/2
IBM 486SLC2 : 4
+++++++++++++++++++++
Physical Form: UMOV r/m16,r16
UMOV r/m32,r32
COP (Code of Operation) : 0FH 11H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/2
IBM 486SLC2 : 4
+++++++++++++++++++++++
Physical Form: UMOV r8,r/m8
COP (Code of Operation) : 0FH 12H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/4
IBM 486SLC2 : 4
+++++++++++++++++++++
Physical Form: UMOV r16,r/m16
UMOV r32,r/m32
COP (Code of Operation) : 0FH 13H Postbyte
Clocks:
Am386SXLV or AM386DXLV: 2/4
IBM 486SLC2 : 4
---------------------------------------------------
OPCODE WBINVD - Write Back and Invalidate Cache
CPU: I486 +
Type of Instruction: System
Instruction: WBINVD
Description:
IF (internal cache is WB and in WB mode) THEN
{
Write Back Internal Cache;
}
Flush internal cache;
Signal external cache to Write Back;
Signal external cache to Flush;
Notes: This instruction not work in Real Mode and in
Protected mode work only in ring 0 ;
Flags Affected: None
CPU mode: PM0,SMM
Physical Form: INVD
COP (Code of Operation): 0FH 09H
Clocks: Cyrix Cx486SLC : 4
i486 : 5
Pentium : 2000+
---------------------------------------------------
OPCODE WRMSR - Write to Model Specified Register
CPU: Pentium (tm), IBM 486SLC2
Type of Instruction: System
Instruction: WRMSR
Description:
IF (ECX is valid number of MSR) and (CPL=0) THEN
{
MSR [ECX] <- EDX:EAX;
}
ELSE
{
General Protection Fault INT 0DH (0)
}
END
Flags Affected: None
Note: Refer to RDMSR for more Info.
CPU mode: RM,PM0,SMM
Physical Form: WRMSR
COP (Code of Operation): 0FH 30H
Clocks: Pentium : 30-45
---------------------------------------------------
OPCODE WRSHR - Write SMM Header Pointer Register
CPU: Cyrix Cx6x86MX
Type of Instruction: SMM mode only
Instruction: WRSHR src
Description:
SMHR <- src
Note: See RDSHR for more details
Flags Affected: None
CPU mode: SMM
++++++++++++++++
Physical Form: RDSHR reg/mem32
COP (Code of Operation) : 0FH 37H Postbyte
Clocks Cx6x86MX: n/a
---------------------------------------------------
OPCODE XADD - Exchange and addition
CPU: i486+
Type of Instruction: User
Instruction: XADD dest,sorc
Description:
Temporary <- dest;
dest <- dest + sorc;
sorc <- Temporary;
Flags Affected: ZF,OF,SF,AF,PF,CF ( like ADD instruction ) ( see description)
CPU mode: RM,PM,VM,SMM
+++++++++++++++++++++++
Physical Form: XADD r/m8,r8
COP (Code of Operation) : 0FH C0H Postbyte
Clocks:
Intel i486 : 3/4
Cyrix Cx486SLC : 3/6
Pentium (tm) : 3/4
Penalty if cache miss :
Intel i486 : 6/2 ; Unlocked/Locked
Cyrix Cx486SLC : 0 ; N/A
+++++++++++++++++++++
Physical Form: XADD r/m16,r16
XADD r/m32,r32
COP (Code of Operation) : 0FH C1H Postbyte
Clocks:
Intel i486 : 3/4
Cyrix Cx486SLC : 3/6
Pentium (tm) : 3/4
Penalty if cache miss :
Intel i486 : 6/2 ; Unlocked/Locked
Cyrix Cx486SLC : 1 ; N/A
---------------------------------------------------
OPCODE XBTS - Extract Bits String
CPU: 80386 step A0-B0 only
Type of Instruction: User
Instruction: XBTS dest,base,bitoffset,len
Description:
Write bit string length <len> bits from bitfield, defined by
<base> and bitsoffset <bitoffset> from this base to start of
the field to read. String read from this start field bit to
higher memory addresses or register bits.
And after it string placed to <dest> operand, lowest bit of
register or memory to bit 0 of <dest>.
Note: Use SHLD/SHRD instructions for extract bits strings.
On 80386 steps B1+ this opcode generation INT 6,
and on some of 486 other instruction replace this
instruction opcode.
Flags Affected: None
CPU mode: RM,PM,VM
+++++++++++++++++++++++
Physical Form: XBTS r16,r/m16,AX,CL
XBTS r32,r/m32,EAX,CL
COP (Code of Operation) : 0FH A6H Postbyte
Clocks: XBTS
80386: 6/13
-----------------------------------------------------------------
XORPS - Bit-wise Logical XOR For Single-FP
CPU: Pentium III+ (KNI/MMX2)
Type of instruction: User
Instruction: XORPS dest,src
Description:
dest = dest XOR src; // Bitwize 128-bit
Physical Form and Timing:
XORPS xmm1,xmm2/m128 ---- 0F 57 /r ---- 2
-----------------------------------------------------
APPENDIX A0
Cyrix Cx486SLC/DLC configuration Registers
for Cx486DLC:
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
NCR1 Non-cacheble Region #0 C4H-C6H 24
NCR2 Non-cachable Region #1 C7H-C9H 24
NCR3 Non-cacheble Region #2 CAH-CCH 24
NCR4 Non-cacheble Region #4 CDH-CFH 24
for Cx486SLC:
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
NCR1 Non-cacheble Region #0 C5H-C6H 16
NCR2 Non-cachable Region #1 C8H-C9H 16
NCR3 Non-cacheble Region #2 CBH-CCH 16
NCR4 Non-cacheble Region #4 CEH-CFH 16
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH then Cyrix CPU
generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR0 00H
CCR1 xxxx xxx0B
NCR1 000Fh
NCR2 0
NCR3 0
NCR4 0
format of registers:
CCR0:
Bit Name Description
7 SUSPEND
If =1 then enable SUSP# and SUSPA# pins, which used for
put CPU in PowerSave mode.
If =0 disable
6 CO (Cache Organisation)
If =0 2ways set associative
If =1 Dirrect Mapped
5 BARB
If =1 then enable flushing internal cache when begining
HOLD state.
IF =0 disable.
4 FLUSH
If =1 enable input pin FLUSH#
if =0 disable
3 KEN
If =1 enable input pin KEN#
if =0 disable
2 A20M
If =1 enable input pin A20M#
if =0 disable
1 NC1
If=1 then 640KB-1MB area never caching
If=0 caching (but see NCRi)
0 NC0
If=1 then first 64K of each 1MB bounds not caching,
when in Real or Virtual8086 mode
If =0 caching
CCR1:
Bit Name Description
7-1 Reserved
0 RPL
If =1 then enable RPLSET,RPLVAL# pins
If =0 this pins are disable and float.
NCRi:
Byte Bits Description
0 7-0 Address bits A31-A24 of non-cacheble region start
(Reserved for Cx486SLC)
1 7-0 Address bits A23-A16 of non-cachable region start
2 7-4 Address bits A15-A12 of non-cacheble region start
2 3-0 Size of non-cacheble block:
0000 Disable NCRi
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4G
NCRi bytes:
Byte
NCRi 0 1 2
NCR1 C4H C5H C6H
NCR2 C7H C8H C9H
NCR3 CAH CBH CCH
NCR4 CDH CEH CFH
---------------------------------------------------
APPENDIX A1
Cyrix Cx486S/S2/D/D2/DX/DX2/DX4
IBM BL486DX/DX2
configuration Registers
Register Full Register Name Index size(bits)
CCR1 Configuration Control Register #1 C1H 8
CCR2 Configuration Control Register #2 C2H 8
CCR3 Configuration Control Register #3 C3H 8
SMAR SMM Address Region CDH-CFH 24
DIR0 Device Identification register #0 FEH 8
DIR1 Device Identification register #1 FFH 8
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
CCR1:
Bit Name Description
7..5 Reserved
4 NO_LOCK (Negate LOCK#)
3 MMAC (Main Memory Access)
If =1 then all data access which occur within SMI
routine (when SMAC=1) accessing main memory instead
SMM space
=0 No affects on access
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 RPL (Enable RPL pins)
If=1 then enable output pins RPLSET(1-0) and RPLVAL#
=0 Float it
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6 BWRT (Enable Burst Write Cycle)
If =1 enable use of 16byte burst WB cycle
=0 disable
5 BARB (Enable cache coherency on Bus Arbitration)
If =1 enable write back of all dirty cache data when
HOLD is requered and prior to asserting HLDA.
=0 isable
4 WT1 (Write-Through Region 1)
If =1 Forces all writes to the 640KB-1MB region that
hit in cache issued on the external bus
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 WBAK (Enable WB Cache Interface pins)
If =1 then enable INVAL,WM_RST and HITM# pins
=0 float it
0 COP?? Reserved
(Award BIOS used this bit during coprocessor Test,
in Cx486S, Cx486S2 only)
(may be turn coprocessor on :)))
CCR3:
Note: Cyrix Cx486S/D never have CCR3 register.
Bit Name Description
7..2 Reserved
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
SMAR:
(Index CDh)
Bit Description
7..0 A31..A24 bits of starting adress of SMM region
(Index CEh)
Bit Description
7..0 A23..A16 bits of starting adress of SMM region
(Index CFh)
Bit Description
7..4 A15..A12 bits of starting adress of SMM region
3..0 Size of SMM region:
0000 SMM region disabled
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4K
DIR0:
Bit Description
7..0 (Device Identification)
-------------------------------------------
for Cx486SLC/e = 00h
for Cx486DLC = 01h
for Cx486SLC2 = 02h
for Cx486DLC2 = 03h
for Cx486SRx = 04h
for Cx486DRx = 05h
for Cx486SRx2 = 06h
for Cx486DRx2 = 07h
for Cx486SRu = 08h
for Cx486DRu = 09h
for Cx486SRu2 = 0Ah
for Cx486DRu2 = 0Bh
for Cx486S = 10h ; B Step
for Cx486S2 = 11h ; B Step
for Cx486Se = 12h or 14h or 16h ; 12h - B step
for Cx486S2e = 13h or 15h or 17h ; 12h - B step
for Cx486DX/BL486DX = 1Ah
for Cx486DX2/BL486DX2 = 1Bh
for ST486DX2 = 1Bh
for TI486DX2 = 1Bh
-------------------------------------------
for Cx486DX4 (x2 mode)= 1Bh (x2 mode)
Note: DIR1 = 36h for DX4
1Fh (x3 mode)
-------------------------------------------
for Cx5x86 (M1sc) = 28h (x1,S)
= 29h (x2,S)
= 2Ah (x1,P)
= 2Bh (x2,P)
= 2Ch (x4,S)
= 2Dh (x3,S)
= 2Eh (x4,P)
= 2Fh (x3,P)
-------------------------------------------
for Cyrix Cx6x86 (M1) = 20h,30h (1x,S) [DIR1 < 20h]
= 21h,31h (2x,S) [DIR1 < 20h]
= 22h,32h (1x,P) [DIR1 < 20h]
= 23h,33h (2x,P) [DIR1 < 20h]
= 24h,34h (4x,S) [DIR1 < 20h]
= 25h,35h (3x,S) [DIR1 < 20h]
= 26h,36h (4x,P) [DIR1 < 20h]
= 27h,37h (3x,P) [DIR1 < 20h]
-------------------------------------------
for Cyrix Cx6x86L(M1) = 30h (1x) [DIR1 > 21h]
= 31h (2x) [DIR1 > 21h]
= 35h (3x) [DIR1 > 21h]
= 34h (4x) [DIR1 > 21h]
-------------------------------------------
for Cyrix MediaGX = 41h (3x) [DIR1: 00h-2Fh]
= 44h (4x,S) [DIR1: 00h-2Fh]
= 45h (3x,S) [DIR1: 00h-2Fh]
= 46h (4x,P) [DIR1: 00h-2Fh]
= 47h (3x,P) [DIR1: 00h-2Fh]
------------------------------------------- cor/PCI
for Cyrix GXm = 40h x4
= 41h [DIR1: 50h-FFh] x10
[DIR1: 30h-4Fh] x6
= 42h x4
= 43h x6
= 44h [DIR1: 50h-FFh] x9
[DIR1: 30h-4Fh] x7
= 45h [DIR1: 50h-FFh] x5
[DIR1: 30h-4Fh] x8
= 46h x7
= 47h [DIR1: 30h-4Fh] x5
[DIR1: 50h-FFh] x8
-------------------------------------------
for Cyrix 6x86MX (M2) [DIR1: 00h-07h or 80h-8Fh]
and Cyrix MII (M2) [DIR1: 08h-7Fh]
= 50h (1.5x,S)
= 51h (2x,S)
= 52h (2.5x,S)
= 53h (3x,S)
= 54h (3.5x,S)
= 55h (4x,S)
= 56h (4.5x,S)
= 57h (5x,S)
= 58h (1,5x,P)
= 59h (2x,P)
= 5Ah (2.5x,P)
= 5Bh (3x,P)
= 5Ch (3.5x,P)
= 5Dh (4x,P)
= 5Eh (4.5x,P)
= 5Fh (5x,P)
-------------------------------------------
for TI486DX4 = 81h
for Cyrix OverDrive = FDh
for TI Potomac's = FFh ;; None connections
Important Note: The original Cx486SLC never have DIRi registers.
DIR1:
Note: Cyrix Cx486S/D never have DIR1 register.
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
See Appendix A3 for more information
CPU DIR0 DIR1 NOTE
Cx486DX-40 1Ah 05h
Cx486DX-50 1Ah 05h
Cx486DX2-50 1Bh 08h
Cx486DX2-50 1Bh 08h Marked 001 on pin side of chip
ST486DX2-66 1Bh 0Bh
ST486DX2-66 1Bh 0Bh
Cx486DX2-v80 1Bh 31h 3 VOLT
Cx486DX4-v100 1Fh 36h 3 VOLT
Cx5x86-100 2Dh 13h 3 VOLT
TI486DX2-66,80 1Bh 32h stepping eA0
TI486DX2-66,80 1Bh B2h stepping eB0
TI486DX4-100 81h 91h
-----------------------------------------------------
APPENDIX A2
TI486SXLC/SXL configuration Registers
for TI486SXL
--------------
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
ARR1 Address Region #1 C4H-C6H 24
ARR2 Address Region #2 C7H-C9H 24
ARR3 Address Region #3 CAH-CCH 24
ARR4 Address Region #4 CDH-CFH 24
for TI486SXLC
--------------
Register Full Register Name Index size(bits)
CCR0 Configuration Control Register #0 C0H 8
CCR1 Configuration Control Register #1 C1H 8
ARR1 Address Region #1 C5H-C6H 16
ARR2 Address Region #2 C8H-C9H 16
ARR3 Address Region #3 CBH-CCH 16
ARR4 Address Region #4 CEH-CFH 16
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH then Cyrix CPU
generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR0 00H
CCR1 xxxx xxx0B
ARR1 000Fh ; 4Gbyte Non-Caching Region
ARR2 0
ARR3 0
ARR4 0
format of registers:
CCR0:
Bit Name Description
7 SUS
If =1 then enable SUSP# and SUSPA# pins, which used for
put CPU in PowerSave mode.
If =0 disable
6 CKD (Clock Double)
If =0 Disable Clock-double mode
If =1 Enable Clock-Double mode
5 BARB
If =1 then enable flushing internal cache when begining
HOLD state.
IF =0 disable.
4 FLUSH
If =1 enable input pin FLUSH#
if =0 disable
3 KEN
If =1 enable input pin KEN#
if =0 disable
2 A20M
If =1 enable input pin A20M#
if =0 disable
1 NC1
If=1 then 640KB-1MB area never caching
If=0 caching (but see NCRi)
0 NC0
If=1 then first 64K of each 1MB bounds not caching,
when in Real or Virtual8086 mode
If =0 caching
CCR1:
Bit Name Description
7 SM4
Access Region 4 Control
If=1 then Region 4 is non-cachable SMM Memory Space
If=0 Region 4 is non-cachable. SMI# input ignored.
6 WP3
Access Region 3 Control
If=1 then Region 3 is write-protected and cachable
If=0 Region 3 is non-cachable.
5 WP2
Access Region 2 Control
If=1 then Region 2 is write-protected and cachable
If=0 Region 2 is non-cachable.
4 WP1
Access Region 1 Control
If=1 then Region 1 is write-protected and cachable
If=0 Region 1 is non-cachable.
3 NMAC
Main Memory Access
If=1 All data accesses which occur within SMI service routine
(or then SMAC=1) will access main memory instead of SMM Memory space
If=0 No changes in access
2 SMAC
System Managment memory access
If=1 Any access to addresses within SMM memory space cause external bus
cycles to be issued with SMADS# output active. SMI# input is ignored.
1 SMI
Enable SMM Pins
If=1 SMI# input/output pin and SMADS# output pin are enabled
If=0 Disabled
0 Reserved
ARRi:
Byte Bits Description
0 7-0 Address bits A31-A24 of non-cacheble region start
(Reserved for TI486SXLC)
1 7-0 Address bits A23-A16 of non-cachable region start
2 7-4 Address bits A15-A12 of non-cacheble region start
2 3-0 Size of non-cacheble block:
0000 Disable NCRi
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4G
ARRi bytes:
Byte
ARRi 0 1 2
ARR1 C4H C5H C6H
ARR2 C7H C8H C9H
ARR3 CAH CBH CCH
ARR4 CDH CDH CEH
---------------------------------------------------
APPENDIX A3
Texas Instruments TI486DX2,TI486DX4
configuration Registers
Register Full Register Name Index size(bits)
CCR1 Configuration Control Register #1 C1H 8
CCR2 Configuration Control Register #2 C2H 8
CCR3 Configuration Control Register #3 C3H 8
SMAR SMM Address Region CDH-CFH 24
DIR0 Device Identification register #0 FEH 8
DIR1 Device Identification register #1 FFH 8
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
CCR1:
Bit Name Description
7..5 Reserved
4 NO_LOCK (Negate LOCK#)
If =0 Usuall scheme
If =1 previously noncachable locked cycles will be
executed as unlocked, result is higher perfomanse.
3 MMAC (Main Memory Access)
If =1 then all data access which occur within SMI
routine (when SMAC=1) accessing main memory instead
SMM space
=0 No affects on access
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 RPL (Enable RPL pins)
If=1 then enable output pins RPLSET(1-0) and RPLVAL#
=0 Float it
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6 BWRT (Enable Burst Write Cycle)
If =1 enable use of 16byte burst WB cycle
=0 disable
5 BARB (Enable cache coherency on Bus Arbitration)
If =1 enable write back of all dirty cache data when
HOLD is requered and prior to asserting HLDA.
=0 isable
4 WT1 (Write-Through Region 1)
If =1 Forces all writes to the 640KB-1MB region that
hit in cache issued on the external bus
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 WBAK (Enable WB Cache Interface pins)
If =1 then enable INVAL,WM_RST and HITM# pins
=0 float it
0 Reserved
CCR3:
Note: Cyrix Cx486S/D never have CCR3 register.
Bit Name Description
7..4 Reserved
3 SM_MODE (SMM Mode Select)
If =0 then Normal SMM mode (Cyrix style)
If =1 then SL-compatible mode
(but SMI_LOCK MUST BE 0)
Note: For more info refer to
"TI486DX2 Microprocessor SM Mode Programming Guide"
// Texas Instruments 1995 (literature number SRZU019)
2 Reserved
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
Any SMAR bits
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
SMAR:
(Index CDh)
Bit Description
7..0 A31..A24 bits of starting adress of SMM region
(Index CEh)
Bit Description
7..0 A23..A16 bits of starting adress of SMM region
(Index CFh)
Bit Description
7..4 A15..A12 bits of starting adress of SMM region
3..0 Size of SMM region:
0000 SMM region disabled
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4K
DIR0:
Bit Description
7..0 (Device Identification)
for TI486DX2 = 1Bh (compare with Cyrix's DIR0)
for TI486DX4 = 81h
DIR1:
Bit Name Description
7 MID Manafacturer ID
0 = Cyrix
1 = Texas Instruments (support starting TI486DX2 eB0 steping)
6..4 SID Stepping Identificator
3..0 RID Revision Identification
see Appendix A1 for more info about identification.
---------------------------------------------------
APPENDIX A4
Cyrix Cx5x86, IBM 5x86
configuration Registers
for access
Register Full Register Name Index size(bits) MAPEN(3..0)
PCR0 Perfomance Control register 20h 8 1
CCR1 Configuration Control Register #1 C1H 8 x
CCR2 Configuration Control Register #2 C2H 8 x
CCR3 Configuration Control Register #3 C3H 8 x
CCR4 Configuration Control Register #4 E8h 8 1
SMAR SMM Address Region CDH-CFH 24 x
PMR Power Managment register F0h 8 1
DIR0 Device Identification register #0 FEH 8 x
DIR1 Device Identification register #1 FFH 8 x
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
PCR0:
Bit Name Description
7 LSSER If set, all memory reads/writes will occur in execution order
6..3 Reserved
2 LOOP_EN If set, enables faster support for loops.
1 BTB_EN If set, enables the Branch Target Buffer for branch prediction
0 RSTK_EN If se, enables call return stack
CCR1:
Bit Name Description
7..4 Reserved
3 MMAC (Main Memory Access)
If =1 then all data access which occur within SMI
routine (when SMAC=1) accessing main memory instead
SMM space
=0 No affects on access
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 Reserved
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6 BWRT (Enable Burst Write Cycle)
If =1 enable use of 16byte burst WB cycle
=0 disable
5 Reserved
4 WT1 (Write-Through Region 1)
If =1 Forces all writes to the 640KB-1MB region that
hit in cache issued on the external bus
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 WBAK (Enable WB Cache Interface pins)
If =1 then enable INVAL,WM_RST and HITM# pins
=0 float it
0 Reserved
CCR3:
Bit Name Description
7..4 MAPEN(3-0) (Register Mapping Enable)
If set to 0001b all register accessible,
else 0000h then accessed only (C0j-CFh,FEh,FFh)
3 SMM_MODE
If =1, then CPU hardware interface pins are redefined to
function like SMM hardware interface on SL Enhanced Intel's CPUs
2 LINBRST
If =1, CPU will use linear address sequence when performing
burst cycle, If =0 CPU will used 1+4 address sequence.
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
SMAR:
(Index CDh)
Bit Description
7..0 A31..A24 bits of starting adress of SMM region
(Index CEh)
Bit Description
7..0 A23..A16 bits of starting adress of SMM region
(Index CFh)
Bit Description
7..4 A15..A12 bits of starting adress of SMM region
3..0 Size of SMM region:
0000 SMM region disabled
0001 4K
0010 8K
0011 16K
0100 32K
0101 64K
0110 128K
0111 256K
1000 512K
1001 1M
1010 2M
1011 4M
1100 8M
1101 16M
1110 32M
1111 4K
CCR4:
Bit Name Description
7 CPUIDEN (Enable CPUID instruction)
If =1 bit 21 of EFLAGS (ID) may changed, and CPUID instruction
enabled,
else bit 21 of EFLAGS =0 forever and CPUID caused INT 6 -
Invalid Opcode
6 Reserved
5 FP_FAST
If =1, FPU execution reporting enabled
4 DTE
If =1, Directory Table Entry cache is enabled
3 MEM_BYP
If =1, Enabled memory read bypassing
2..0 IORT[2..0]
Specify minimum number of bus clocks between two I/O
accesses (I/O recovery time)
000 - No Delay
001 - 2 clk
010 - 4 clk
011 - 8 clk
100 - 16 clk
101 - 32 clk (Default Value)
110 - 64 clk
111 - 128 clk
PMR:
Bit Name Description
7..3 Reserved
2..0 CLK[2..0]
Select Bus/Core Operation Frequency
CLK2 CLK1 CLK0 Core/Bus
1 x x 1/2
0 0 0 1/1
0 0 1 2/1
0 1 0 3/1
0 1 1 reserved
DIR0:
Bit Description
7..0 (Device Identification)
Value Description Core/Bus clk
29h or 2Bh Cx/IBM/ST 5x86 2/1
2Dh or 2Fh Cx/IBM/ST 5x86 3/1
DIR1:
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
Note: 5x86 Cyrix/IBM/ST
Stepping Revision
0 0 EDX after reset = [15:8]=DIR1, [7:0]=DIR0
0 1 EDX after reset = [15:8]=DIR1, [7:0]=DIR0
0 2 EDX after reset = [15:8]=04h [7:0]=90h
0 5
1 3
see Appendix A1 for more info about identification.
---------------------------------------------------
APPENDIX A5
Cyrix Cx6x86 (M1), IBM 6x86
configuration Registers
for access
Register Full Register Name Index size(bits) MAPEN(3..0)
DBR0 30H 8 ?
??? 31H 8 ?
??? 32H 8 ?
??? 33H 8 ?
??? 34H 8 ?
??? 38H 8 ?
??? 3CH 8 ?
CCR0 Configuration Control Register #0 C0H 8 x
CCR1 Configuration Control Register #1 C1H 8 x
CCR2 Configuration Control Register #2 C2H 8 x
CCR3 Configuration Control Register #3 C3H 8 x
ARR0 Address Region Register #0 C4H-C6H 24 x
ARR1 Address Region Register #1 C7H-C9H 24 x
ARR2 Address Region Register #2 CAH-CCH 24 x
ARR3 Address Region Register #3 CDH-CFH 24 x
ARR4 Address Region Register #4 D0H-D2H 24 1
ARR5 Address Region Register #5 D3H-D5H 24 1
ARR6 Address Region Register #6 D6H-D8H 24 1
ARR7 Address Region Register #7 D9H-DBH 24 1
RCR0 Region Configuration Register #0 DCh 8 1
RCR1 Region Configuration Register #1 DDh 8 1
RCR2 Region Configuration Register #2 DEh 8 1
RCR3 Region Configuration Register #3 DFh 8 1
RCR4 Region Configuration Register #4 E0h 8 1
RCR5 Region Configuration Register #5 E1h 8 1
RCR6 Region Configuration Register #6 E2h 8 1
RCR7 Region Configuration Register #7 E3h 8 1
CCR4 Configuration Control Register #4 E8h 8 1
CCR5 Configuration Control Register #5 E9h 8 1
DIR0 Device Identification register #0 FEH 8 x
DIR1 Device Identification register #1 FFH 8 x
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
DBR0:
Note: This Register is Undocumented
Bit Name Description
7 ? ????
6 ? BTB TR access enabled
if = 1 MOV to/from TR1/2 enabled
5 ? Data bypassing and forwarding Enable
(default set to 1)
4-0 ? ???
Registers with Indexes 31h,32h,33h:
Used for perfomance control or CPU pipeline debbuging.
(Usually = 0).
Registers with indexes 34h,38h,3Ch exist, but description ????
CCR0:
Bit Name Description
7..2 Reserved
1 NC1 (Non-cachable 1MB)
If =1 then area 640KM-1MB is non-cachable.
CCR1:
Bit Name Description
7 SM3 (System Managment Address Region 3)
If =1 then ARR3 used as SMM address space region
6..5 Reserved
4 NO_LOCK (No Lock Cycles)
If =1 all bus cycles are issued with LOCK# pin negated, except
page tables access and INTA cycles.
3 Reserved
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 Reserved
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6..5 Reserved
4 WPR1 (Write-Protected Region 1)
If =1 then any cachable accesses in the 640KB-1MB region
are Write-Protected
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1..0 Reserved
CCR3:
Bit Name Description
7..4 MAPEN(3-0) (Register Mapping Enable)
If set to 0001b all register accessible,
else 0000h then accessed only (C0h-CFh,FEh,FFh)
3 Reserved
2 LINBRST
If =1, CPU will use linear address sequence when performing
burst cycle, If =0 CPU will used 1+4 address sequence.
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
ARR3: Starting address and Block size
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
ARRi:
-- Starting Address --- Region
ARR # A31-A24 A23-A16 A15-A12 Block Size
7..0 7..0 7..4 3..0 (Bits)
ARR0 C4h C5h C6h C6h (Index)
ARR1 C7h C8h C9h C9h
ARR2 CAh CBh CCh CCh
ARR3 CDh CEh CFh CFh
ARR4 D0h D1h D2h D2h
ARR5 D3h D4h D5h D5h
ARR6 D6h D7h D8h D8h
ARR7 D9h DAh DBh DBh
(ARRi^)
(index)
(Index ARRi+0)
Bit Description
7..0 A31..A24 bits of starting adress of region #i
(Index ARRi+1)
Bit Description
7..0 A23..A16 bits of starting adress of region #i
(Index ARRi+2)
Bit Description
7..4 A15..A12 bits of starting adress of region #i
3..0 Size of region #i :
Value ARR0-ARR6 ARR7
0000 **** region disabled ****
0001 4K 256K
0010 8K 512K
0011 16K 1M
0100 32K 2M
0101 64K 4M
0110 128K 8M
0111 256K 16M
1000 512K 32M
1001 1M 64M
1010 2M 128M
1011 4M 256M
1100 8M 512M
1101 16M 1G
1110 32M 2G
1111 4K 4G
RCRi:
Bit Name ARR# Description
7..6 any Reserved
5 NBL any If =1 LBA# pin is negated for corresponding region
4 WT any If =1 Write-Throught caching is enable for region
3 WG any If =1 Write Gathering enabled for region
2 WL any If =1 Weak Locking enable for region
1 WWO any If =1 weak write ordering enable for region
0 RCD 0..6 If =1 address region is non-cachable
0 RCE 7 If=1 region is cachable and implies thet address space
outside of region is non-cachable.
CCR4:
Bit Name Description
7 CPUIDEN (Enable CPUID instruction)
If =1 bit 21 of EFLAGS (ID) may changed, and CPUID instruction
enabled,
else bit 21 of EFLAGS =0 forever and CPUID caused INT 6 -
Invalid Opcode
6..5 Reserved
4 DTE
If =1, Directory Table Entry cache is enabled
3 Reserved
2..0 IORT[2..0]
Specify minimum number of bus clocks between two I/O
accesses (I/O recovery time)
(base modeL) (some later models)
000 - No Delay 000 - fast
001 - 2 clk
010 - 4 clk
011 - 8 clk .......
100 - 16 clk
101 - 32 clk (Default Value)
110 - 64 clk
111 - 128 clk 111 - no delay
CCR5:
Bit Name Description
7 Reserved
6 VIPERM If = 1 then prevents any access to contol registers outside of
range C0..CF if MAPEN in CCR3 has the other value that 1.
Note:
This is effect of Disable CPU identification via DIR0
and DIR1 (reads FFh while VIPERM=1 and MAPEN != 1).
5 ARREN (Address region registers Enable)
If =1 then Enable all ARRs,
If =0 all ARRs disable, but if SM3=1 then ARR3 enable.
4 LBR1
If =1 LBA# pin asserted for all accesses to the 640KB-1MB
region
3..2 Reserved
1 SLOP (Slow Loop Instruction)
Slow Loop instruction make CPU more compatible with Pentium
for critical-timing rootining.
0 WT_ALLOC
If =1 new cache lines allocated for both read misses and
write misses, else only on read misses.
DIR0:
Bit Description
7..0 (Device Identification)
Value Description Core/Bus clk Note
20h or 22h 6x86 (M1) 1/1 Early 6x86
21h or 23h 6x86 (M1) 2/1
25h or 27h 6x86 (M1) 4/1
24h or 26h 6x86 (M1) 3/1
30h or 32h 6x86 (M1) 1/1 Modern 6x86
31h or 33h 6x86 (M1) 2/1
35h or 37h 6x86 (M1) 4/1
34h or 36h 6x86 (M1) 3/1
DIR1:
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
Value Description
0xh - Old Cyrix Samplers of 6x86 ???
1xh - Normal 6x86.
10h,11h,12h - Early 6x86s (with DIR0 = 2xh)
14h - v2.4
15h - v2.5
16h - v2.6
17h - v2.7 or 3.7
(first with no NT problems, with SLOP bit).
2xh - 6x86L (Dual Voltage,Lower Power)
20h,21h - Samplers
22h - v4.0 (no SLOP support)
Note: Register with Index FCh contains CPU family.
Initialized by 05h, but may be changed by USER, look CPUID instruction
for more info.
see Appendix A1 for more info about identification
-----------------------------
Format of TR1,TR2 registers:
Note: Need to Enable MOV to/from TR1/2 using DBR0 register in processor
control space.
TR1:
Bits Description
31..5? ?????
5..3 Index of register in BTB Control space.
(Register will be accesable via TR2)
2..0 ????
TR2:
Data, which will be written/reading from/to register
Registers in BTB control space:
Reg 4 - ???????
Reg 5:
Bits Description
0 BTB Disable
1 Far BTB COF hits enable.
If =1 enable BTB to predict intersegment jumps.
2 Return Stack Enable
3 ???? (used)
4..31 ?????
---------------------------------------------------
APPENDIX A6
Cyrix Cx6x86MX (M2)
for access
Register Full Register Name Index size(bits) MAPEN(3..0)
CCR0 Configuration Control Register #0 C0H 8 x
CCR1 Configuration Control Register #1 C1H 8 x
CCR2 Configuration Control Register #2 C2H 8 x
CCR3 Configuration Control Register #3 C3H 8 x
ARR0 Address Region Register #0 C4H-C6H 24 x
ARR1 Address Region Register #1 C7H-C9H 24 x
ARR2 Address Region Register #2 CAH-CCH 24 x
ARR3 Address Region Register #3 CDH-CFH 24 x
ARR4 Address Region Register #4 D0H-D2H 24 1
ARR5 Address Region Register #5 D3H-D5H 24 1
ARR6 Address Region Register #6 D6H-D8H 24 1
ARR7 Address Region Register #7 D9H-DBH 24 1
RCR0 Region Configuration Register #0 DCh 8 1
RCR1 Region Configuration Register #1 DDh 8 1
RCR2 Region Configuration Register #2 DEh 8 1
RCR3 Region Configuration Register #3 DFh 8 1
RCR4 Region Configuration Register #4 E0h 8 1
RCR5 Region Configuration Register #5 E1h 8 1
RCR6 Region Configuration Register #6 E2h 8 1
RCR7 Region Configuration Register #7 E3h 8 1
CCR4 Configuration Control Register #4 E8h 8 1
CCR5 Configuration Control Register #5 E9h 8 1
CCR6 Configuration Control Register #6 EAh 8 1
DIR0 Device Identification register #0 FEH 8 x
DIR1 Device Identification register #1 FFH 8 x
For access to this register You need to do:
A) write INDEX_OF_REGISTER to I/O port #22H
B) wait 5-6 clocks
D) read/write DATA from/to register via I/O port #23
Note: If Index of register not in range C0H..CFH,FEH,FFH then Cyrix
CPU generated external bus cycle. If You try to read I/O port
#22H CPU will generated external bus cycle too. Then index
is out of range all operations with port #23H will generate
external bus cycle.
State After Reset:
CCR1 00H
CCR2 00H
CCR3 00H
SMAR 0
DIR0 see DIR0 description
DIR1 see DIR1 description
format of registers:
CCR0:
Bit Name Description
7..2 Reserved
1 NC1 (Non-cachable 1MB)
If =1 then area 640KM-1MB is non-cachable.
CCR1:
Bit Name Description
7 SM3 (System Managment Address Region 3)
If =1 then ARR3 used as SMM address space region
6..5 Reserved
4 NO_LOCK (No Lock Cycles)
If =1 all bus cycles are issued with LOCK# pin negated, except
page tables access and INTA cycles.
3 Reserved
2 SMAC (System Managment Memory Access)
If =1 Any access within SMM memory space issued with SMAADS#
output active, SMI# ignored
=0 No affects on access
1 SMI (Enable SMM pins)
If =1 then enable SMI# i/o pin and SMADS# output pin
=0 Float it
0 Reserved
CCR2:
Bit Name Description
7 SUSP (Enable Suspend pins)
If =1 SUSP# input and SUSPA# output pins enabled
=0 Float
6..5 Reserved
4 WPR1 (Write-Protected Region 1)
If =1 then any cachable accesses in the 640KB-1MB region
are Write-Protected
3 HALT (Suspend on HALT)
If =1 CPU enters suspend mode following execution
HLT instruction.
2 LOCK_NW (Lock NW bit)
If =1 Prohibits changing the state of NW bit in CR0
1 SADS
If =1 CPU insert an idle cyce following the BRDY# and idle
cycle prior to asserting ADS#
0 Reserved
CCR3:
Bit Name Description
7..4 MAPEN(3-0) (Register Mapping Enable)
If set to 0001b all register accessible,
else 0000h then accessed only (C0h-CFh,FEh,FFh)
3 Reserved
2 LINBRST
If =1, CPU will use linear address sequence when performing
burst cycle, If =0 CPU will used 1+4 address sequence.
1 NMIEN (NMI Enable)
If =1 then NMI enable during SMM
If =0 NMI don't recognizing during SMM
0 SMI_LOCK (SMM Register Lock)
If =1 the following SMM control bits can not
be modified:
CCR1: bits 1,2,3
CCR3: bit 1
CCR6: bits 6,1,0
ARR3: Starting address and Block size
But this bit may be changed in SMM.
This bit (SMI_LOCK) clearing RESET only.
ARRi:
-- Starting Address --- Region
ARR # A31-A24 A23-A16 A15-A12 Block Size
7..0 7..0 7..4 3..0 (Bits)
ARR0 C4h C5h C6h C6h (Index)
ARR1 C7h C8h C9h C9h
ARR2 CAh CBh CCh CCh
ARR3 CDh CEh CFh CFh
ARR4 D0h D1h D2h D2h
ARR5 D3h D4h D5h D5h
ARR6 D6h D7h D8h D8h
ARR7 D9h DAh DBh DBh
(ARRi^)
(index)
(Index ARRi+0)
Bit Description
7..0 A31..A24 bits of starting adress of region #i
(Index ARRi+1)
Bit Description
7..0 A23..A16 bits of starting adress of region #i
(Index ARRi+2)
Bit Description
7..4 A15..A12 bits of starting adress of region #i
3..0 Size of region #i :
Value ARR0-ARR6 ARR7
0000 **** region disabled ****
0001 4K 256K
0010 8K 512K
0011 16K 1M
0100 32K 2M
0101 64K 4M
0110 128K 8M
0111 256K 16M
1000 512K 32M
1001 1M 64M
1010 2M 128M
1011 4M 256M
1100 8M 512M
1101 16M 1G
1110 32M 2G
1111 4G 4G
RCRi:
Bit Name ARR# Description
7 any Reserved
6 INV_RGN 0..6 If =1, then all memory outside specific memory region
treated as RCR flags for this region
(Inversion)
5 any Reserved
4 WT any If =1 Write-Throught caching is enable for region
3 WG any If =1 Write Gathering enabled for region
2 WL any If =1 Weak Locking enable for region
1 any Reserved
0 CD any If =1 address region is non-cachable
CCR4:
Bit Name Description
7 CPUIDEN (Enable CPUID instruction)
If =1 bit 21 of EFLAGS (ID) may changed, and CPUID instruction
enabled,
else bit 21 of EFLAGS =0 forever and CPUID caused INT 6 -
Invalid Opcode
6..3 Reserved
2..0 IORT[2..0]
Specify minimum number of bus clocks between two I/O
accesses (I/O recovery time)
000 - 1 clk
001 - 2 clk
010 - 4 clk
011 - 8 clk
100 - 16 clk
101 - 32 clk (Default Value)
110 - 64 clk
111 - no delay
Note: 6x86 (M1), 000 - no delay, 111 - 128 clk
CCR5:
Bit Name Description
7..6 Reserved
5 ARREN (Address region registers Enable)
If =1 then Enable all ARRs,
If =0 all ARRs disable, but if SM3=1 then ARR3 enable.
4..1 Reserved
0 WT_ALLOC
If =1 new cache lines allocated for both read misses and
write misses, else only on read misses.
CCR6:
Bit Name Description
7 Reserved
6 N (Nested SMI Enable bit)
If =1 enable nesting of SMI
If = 0 disabled.
(This bit automatically cleared when entered every SMI routine)
5..2 Reserved
1 WP_ARR3 (Write Protected Memory Region # 3)
if =1 Memory region defined by ARR3 is write-protected,
when operating outside SMM mode
0 SMM_MODE (SMM Mode)
if = 1 Enable Cyrix Enhanced SMM
if = 0 Disable Cyrix Enhanced SMM
DIR0:
Bit Description
7..0 (Device Identification)
Value Description Core/Bus clk
5xh 6x86MX (see APPENDIX B for more details)
DIR1:
Bit Name Description
7..4 SID Stepping Identificator
3..0 RID Revision Identification
see Appendix A1 for more info about identification
Note: Try to test some Undocument Registers from Cx6x86.
----------------------------------------------
APPENDIX B
Codes which returned after Reset in EDX
DH DL
Type of CPU Steppin Model ID Revision
------------------------------------------------------------
i386DX A (00h) ??? :Early Models
B0-B10 03h 03h
04h :???
D0 05h
D1-D2 08h
E0,E1,F0 08h
------------------------------------------------------------
Am386DX/DXL A 03h 05h
B 08h
------------------------------------------------------------
i386SX A0 23h 04h
B 05h
C,D,E 08h
------------------------------------------------------------
Am386SX/SXL A1 23h 05h
B 08h
------------------------------------------------------------
Intel386CXSA A 23h 09h
------------------------------------------------------------
Intel386CXSB A 23h 09h
------------------------------------------------------------
i386EX A 23h 09h
------------------------------------------------------------
Intel386SXSA ? 23h 09h
------------------------------------------------------------
i376 A0 33h 05h
B 08h
------------------------------------------------------------
i386SL A0-A3 43h 0xh (05H)
B0-B1 1xh
------------------------------------------------------------
RapidCAD (tm) A 03h 40h
B 41h
------------------------------------------------------------
IBM 386SLC A A3h xxh
------------------------------------------------------------
Cx486SLC A 04h 10h
------------------------------------------------------------
TI486SLC/DLC/e A 04h 10h
B 11h
------------------------------------------------------------
TI486SXL/SXLC A 04h 10h
B 11h
------------------------------------------------------------
i486DX A0/A1 04h 00h
B2-B6 01h
C0 02h
C1 03h
D0 04h
cA2,cA3 10h
cB0,cB1 11h
cC0 13h
aA0,aA1 14h : SL Enhanced
aB0 15h : SL Enhanced
------------------------------------------------------------
Am486DX any 04h 12h
------------------------------------------------------------
UMC U5SD any 04h 1xh
------------------------------------------------------------
i486SX A0 04h 20h
B0 22h
bBx 23h : SL Enhanced
gAx 24h
cA0 27h
cB0 28h
aA0,aA1 2Ah : SL Enhanced
aB0,aC0 2Bh : SL Enhanced
------------------------------------------------------------
i487SX A0 04h 20h
B0 21h
------------------------------------------------------------
UMC U5S any 04h 23h
------------------------------------------------------------
UMC U5SX 486-A any 04h 23h
------------------------------------------------------------
UMC U5SD 04h 23h
------------------------------------------------------------
Cx5x86 0,rev 1- 04h 29h : core/bus clk=2/1 +clones
2Bh : core/bus clk=2/1 +clones
2Dh : core/bus clk=3/1 +clones
2Fh : core/bus clk=3/1 +clones
------------------------------------------------------------
i486DX2 & A0-A2 04h 32h
OverDrive (tm) B1 33h
aA0,aA1 34h : SL Enhanced
aB0,aC0 35h : SL Enhanced
------------------------------------------------------------
Am486DX2 any 04h 32h : 66 and 80 MHz
------------------------------------------------------------
Am486DXL2 any 04h 32h
------------------------------------------------------------
Am486DX4 any 04h 32h : Original
any 04h 84h : Enhanced in WT mode
04h 94h : Enhanced in WB mode
------------------------------------------------------------
UMC U486DX2 any 04h 3xh : ???
------------------------------------------------------------
UMC U486SX2 any 04h 5xh : ???
------------------------------------------------------------
i486SL A 04h 40h
?? 41h
------------------------------------------------------------
i486SX2 aC0 04h 5Bh : SL Enhanced
------------------------------------------------------------
IntelSX2 (tm) A 04h 5xh
OverDrive (tm)
------------------------------------------------------------
WB Enh IntelDX2 A 04h 70h : in WB mode
(P24D) 36h : in WT mode
------------------------------------------------------------
IBM BL486DX2 A 04h 80h
------------------------------------------------------------
IntelDX4 (tm) A 04h 80h
------------------------------------------------------------
TI TI486DX2 any 04h 80h
------------------------------------------------------------
TI TI486DX4 any 04h 81h
------------------------------------------------------------
IntelDX4 (tm) A 14h 80h : DX4ODPR (5V IntelDX4)
OverDrive (tm)
------------------------------------------------------------
Cx5x86 0,rev 2+ 04h 90h
------------------------------------------------------------
Write-Back Enh. A 04h 83h : WT Mode
IntelDX4 (tm) 90h : WB mode
------------------------------------------------------------
AMD Am5x86 A 04h 84h : x3, WT mode
94h : x3, WB mode
E4h : x4, WT mode
F4h : x4, WB mode
------------------------------------------------------------
IBM 486SLC A A4h 0xh
------------------------------------------------------------
IBM 486SLC2 Ax A4h 1xh
Bx 2xh
?? 3xh
------------------------------------------------------------
IBM 486BLX3 A 84h xxh
------------------------------------------------------------
Cyrix M5 all 00h 05h
(Cx486S/D)
------------------------------------------------------------
Cyrix M6 all 00h 06h
(Cx486DX)
------------------------------------------------------------
Cyrix M7 all 00h 07h
(Cx486DX2)
------------------------------------------------------------
Cyrix M8 all 00h 08h
(Cx486DX4)
------------------------------------------------------------
Am5k86 (SSA/5) all 05h 0xh ; Model 0
E 05h 00h
F 01h
------------------------------------------------------------
Am5k86 (K5) all 05h 1xh : (x1.5) ; Model 1
05h 2xh : (x1.75) ; Model 2
24h
05h 3xh : (x2) ; Model 3
------------------------------------------------------------
AMD K6 05h 6xh ; Model 6
61h
7xh ; Model 7
------------------------------------------------------------
AMD K6-2 05h 8xh ; Model 8
------------------------------------------------------------
AMD K6-III 05h 9xh ; Model 9
------------------------------------------------------------
Pentium (P5) Ax 05h 0xh : (FPU bug)
B1 05h 13h : (FPU bug)
B2 05h 14h : (FPU bug)
C1 05h 15h : (FPU bug)
D1 05h 17h
------------------------------------------------------------
Pentium (P54C) B1 05h 21h : (FPU bug)
(P54CS) B3 05h 22h : (FPU bug)
(P54CSQ) B5 05h 24h : (FPU bug)
C1 05h 25h
C2 25h
E0 26h : 75,90,100,120 MHz
cB1 2Bh : 120,133 MHz
cC0 2Ch : 133,150,166,200 MHz
------------------------------------------------------------
Pentium mA1 05h 25h
(P54LM) mcB1 2Bh
(Mobile) mcC0 2Ch
(Vcc=2.9V) mA4 70h
------------------------------------------------------------
Pentium Overdrive B1 15h 31h : PODP5V63, PODP5V83
(Vcc=5V)(P24T) B2 15h 31h : (Socket 3,6)
C0 15h 32h
------------------------------------------------------------
Pentium OverDrive tA0 05h 1Ah : PODP5V120, PODP5V133
(P5T) : (Socket 4)
------------------------------------------------------------
Pentium OverDrive aC0 05h 2Ch : PODP3V125, PODP3V150
(P54T) : PODP3V166
: (Socket 5,7)
------------------------------------------------------------
NexGen Nx586 05h 0xh
04h : 120 MHz
06h : 133 MHz
------------------------------------------------------------
Cx6x86 05h 2xh : early models
(M1) 30h : core/bus = 1/1
32h : core/bus = 1/1
31h : core/bus = 2/1
33h : core/bus = 2/1
34h : core/bus = 3/1
36h : core/bus = 3/1
35h : core/bus = 4/1
37h : core/bus = 4/1
------------------------------------------------------------
Pentium w/MMX A1 05h 41h
(P55C) A2 42h
xB1/mxB1 43h
xA3/mxA3 44h
myA0 81h
sB1 82h
------------------------------------------------------------
Pentium MMX oxA3 15h 44h
OverDrive (P55CTP)
------------------------------------------------------------
Cyrix MediaGX 05h 4xh
------------------------------------------------------------
Cyrix MediaGX 05h 4xh
MMX Enhanced
------------------------------------------------------------
IDT Winchip (C6) 05h 40h
------------------------------------------------------------
IDT Winchip 2 (C2) 05h 81h
------------------------------------------------------------
Cx6x86MX and MII 06h 51h : core/bus = x2
(M2) 06h 52h : core/bus = x2.5
06h 53h : core/bus = x3
06h 54h : core/bus = x3.5
06h 55h : core/bus = x4
06h 59h : core/bus = x2
06h 5Ah : core/bus = x2.5
06h 5Bh : core/bus = x3
06h 5Ch : core/bus = x3.5
06h 5Dh : core/bus = x4
------------------------------------------------------------
Intel Pentium OverDrive 25h 2xh : will be Set as second CPU
(P54M)
------------------------------------------------------------
Pentium Pro (P6) 06h 0xh ; Engineering Sample 133MHz 0.6mkm
06h 11h ; Engineering Sample 150MHz
B0 06h 11h ; 150 MHz
C0 06h 12h ; 150 MHz
sA0 06h 16h ; 166,180,200 MHz
sA1 06h 17h ; 166,180,200 MHz
sB1 06h 19h ; 166,180,200 MHz
------------------------------------------------------------
AMD Athlon 06h 1xh ; Model 1
------------------------------------------------------------
Pentium II C0 06h 33h
C1 06h 34h
(P6L,Klamath) dA0/mdA0/mmdA0 06h 50h
dA1 06h 51h
dB0/mdB0/mmdB0 06h 52h
mdB0 06h 52h
mmdB0 06h 52h
dB1 06h 53h
dB1 06h 62h
mdbA0/mdxA0/mqbA1/mqpA1 06h 6Ah
------------------------------------------------------------
Pentium II Xeon B0 06h 52h
B1 06h 53h
------------------------------------------------------------
Celeron dA0 06h 50h No-Cache
dA1 06h 51h No-Cache
dB0 06h 52h No-Cache
mA0 06h 60h (128KB cache) [Mendocino]
mB0 06h 65h (128KB cache) PPGA
------------------------------------------------------------
Pentium II TdB0 16h 32h
Overdrive
------------------------------------------------------------
Pentium III kB0 06h 72h
kC0 06h 73h
------------------------------------------------------------
Pentium III Xeon B0 06h 72h
C0 06h 73h
------------------------------------------------------------
Note: For detection Cyrix's chips refer to APPENDIX A1.
Note: Then Intel Pentium and higher chips, sometimes include build-in APIC
and setup such chips on motherbard as second CPU, change id code
from 0xxxh to 2xxxh.
--------------------------------------------
APPENDIX C0
iCOMP index for Intel's Microprocessors
i386SX-20 32
i386SX-25 39
i386SL-25 41
i386DX-25 49
i386DX-33 68
i486SX-20 78
i486SX-25 100 ; Base model for test iCOMP=100 by define
i486DX-25 122
i486SX-33 136
i486DX-33 166
i486DX2-20/40 166
IntelSX2-25/50 180
i486DX2-25/50 231
i486DX-50 249
IntelDX4-20/60 258
i486DX2-33/66 297
Pentium OverDrive-20/50 314 ; P24T
IntelDX4-25/75 319 ; P24C
IntelDX4-33/100 435 ; P24C
Pentium OverDrive-25/63 443 ; P24T
Pentium-(510\60) 510 ; P5
Pentium-(567\66) 567 ; P5
Pentium OverDrive-33/83 581 ; P24T
Pentium-(610\75) 610 ; P54C,P54LM
Pentium-(735\90) 735 ; P54C,P54LM
Pentium-(815\100) 815 ; P54C
Pentium-(1000\120) 1000 ; P54CSQ
Pentium-(133) 1110 ; P54CSQ
iCOMP index 2.0 for Intel Microprocessors
Pentium-75 67
Pentium-90 81
Pentium-100 90
Pentium-120 100 ; Base Model iCOMP 2.0 = 100
Pentium-133 111
Pentium-150 114
Pentium-166 127
Pentium-200 142
Pentium w/MMX-166 160
Pentium Pro-150-256 168
Pentium w/MMX-200 182
Pentium Pro-180-256 197
Pentium w/MMX-233 203
Pentium Pro-200-256 220
Celeron-266-0 213
Celeron-300-0 226
Pentium II-233 267
Celeron-300-128 296
Pentium II-266 303
Celeron-333-128 318
Pentium II-300 332
Pentium II-333 366
Pentium II-350 386
Pentium II-400 440
Pentium II-450 483
iCOMP index 3.0 for Intel Microprocessors
Pentium II-300 1000
Pentium II-400 1130
Pentium II-450 1500
Pentium III-450 1500
Pentium III-500 1650
----------------------------------------------
APPENDIX C1
Cyrix Microprocessors Relative Perfomance
Cyrix Inc. Used for declaration of perfomance of
theys microprocessors tests based on PC Bench 8.0
and normalization.
CPU Perfomance Scores
Cx486SLC-25 36
Cx486SLC-33 39
Cx486SLC2-50 40
Cx486DLC-33 69
Cx486DLC-40 83
Cx486DX-33 100 ; <--- Base Point
Cx486DX-40 118
Cx486DX2-50 139
Cx486DX-50 148
Cx486DX2-66 179
Cx486DX2-V80 209
----------------------------------------------
APPENDIX C2
CPU's perfomance
Note: Data was get on different M/B and configurations, so treat this
tables like simple numbers, which said perfomance is xxx +-10%.
CPUMark 32 CPUMark 16 P-rating
AMD Am5k86-75 (SSA/5) 154
AMD Am5k86-90 (SSA/5) 187
AMD Am5k86-100 (SSA/5) 208
AMD Am5k86-133 (K5) 271 247
AMD Am5k86-166 (K5) 306 303
Pentium-75 174 168
Pentium-90 210 201
Pentium-100 233 223
Pentium-120 257 247
Pentium-133 283 278
Pentium-150 286 296
Pentium-166 321 326
Pentium-200 358
Cyrix Cx6x86-P120+ 235 247
Cyrix Cx6x86-P133+ 260
Cyrix Cx6x86-P150+ 283 298
Cyrix Cx6x86-P166+ 316 329
Cyrix Cx6x86-P200+ 350 340
Pentium w/MMX-166 378 380
Pentium w/MMX-200 425 429
Pentium w/MMX-233 450 475
Pentium Pro-150-256 420
Pentium Pro-180-256 493
Pentium Pro-200-256 540 358
Pentium Pro-200-512 610
AMD K6-200 520 427
AMD K6-233 550 456
AMD K6-266 608
Pentium II-233 632 468
Pentium II-266 721 536
Pentium II-300 813 603
Pentium II-333
Pentium II-350 902
Pentium II-400 1030
Pentium II-450 1140
IDT Winchip C6-180
IDT Winchip C6-200 382 362
Cyrix Cx6x86MX/PR166
Cyrix Cx6x86MX/PR200 391 372
Cyrix Cx6x86MX/PR233 505 474
Cyrix Cx6x86MX/PR266
AMD K6-2-266 582
AMD K6-2-300 763
AMD K6-2-366 878
Cyrix MII-300 512
Cyrix MII-333
Celeron-266
Celeron-300
Celeron-300/128
Celeron-333/128 655
Celeron-366/128 685
Celeron-433/128
Celeron-466/128
PentII Xeon-400/512
PentII Xeon-450/512 1160
Pentium III-450
Pentium III-500 1260
PentIII Xeon-500/512
PentIII Xeon-550/512
------------------------------------------------
APPENDIX D0
Pentium P54C+ Build-in APIC
(Advanced programmable Interrupt Controller)
Base Address of Build-in APIC in memory location
is 0FEE00000H.
Map of APIC REgisters:
Offset (hex) Description Read/Write state
0 Reserved
10 Reserved
20 Local APIC ID R/W
30 Local APIC Version R
40-70 Reserved
80 Task Priority Register R/W
90 Arbitration Priority Register R
A0 Processor Priority Register R
B0 EOI Register W
C0 Remote read R
D0 Logical Destination R/W
E0 Destination Format Register 0..27 R
28..31 R/W
F0 Spurious Interrupt Vector Reg. 0..3 R
4..9 R/W
100-170 ISR 0-255 R
180-1F0 TMR 0-255 R
200-270 IRR 0-255 R
280 Error Status Register R
290-2F0 Reserved
300 Interrupt Command Reg. (0-31) R/W
310 Interrupt Command Reg. (32-63) R/W
320 Local Vector Table (Timer) R/W
330-340 Reserved
350 Local Vector Table (LINT0) R/W
360 Local Vector Table (LINT1) R/W
370 Local Vector Table (ERROR) R/W
380 Initial Count Reg. for Timer R/W
390 Current Count of Timer R
3A0-3D0 Reserved
3E0 Timer Divide Configuration Reg. R/W
3F0 Reserved
Note: Pentium-120MHz (Step C2) Never have APIC
---------------------------------------------------
APPENDIX D1 INTEL 386/486SL REGISTERS
Note: Intel Chipset for SL microprocessors (i386SL,i486SL) contain
self CPU and 82360SL chip.
[i386SL]
Note: address of register in Normal I/O space
Name of Register Address Default Value Where placed Size
CPUPWRMODE 22h 0 CPU 16
CFGSTAT 23h 0 82360SL 8
CFGINDEX 24h 0 82360SL 16
CFGDATA 25h xxh 82360SL 16
EMSCNTLREG 28h 0 CPU 8
EMSINDEXREG 2Ah 0 CPU 16
EMSDPREG 2Ch xxh CPU 16
PORT92 92h 0 CPU 8
PORT102 102h 0 CPU 8
FAIL SAFE NMI CTRL 461h 0 CPU 8
The followed ports visible only when they enabled,
Any writes to this ports caused the action it named.
FAST CPU RESET EFh N/A 82360SL 8
FAST A20 GATE EEh N/A 82360SL 8
SLOW CPU F4h N/A CPU 8
FAST CPU F5h N/A CPU 8
SFS DISABLE F9h N/A CPU 8
SFS ENABLE FBh N/A CPU 8
Format of CPUPWRMODE register (i386SL):
Bits Name Description
15 DT If Unlock Status { // See bit 0 of this register
if bit=0 then access to 82360SL
if bit=1 then access to CPUPWRMODE register
}
If Lock Staus { // i.e.SB=1
(De-Turbo Select Bit) Selected clock speed
If bit=0 then EFI/2
If bit=1 then EFI/4
}
14 0 Reserved
13..11 IMCPC (Idle MCP Clock)
13.12.11 Description
000 EFI
001 EFI/2
010 EFI/4
011 EFI/8
100 EFI/16
101 Reserved
110 Reserved
111 Stop Clock
10,9 SLC (Slow CPU clock)
10.9 Description
00 EFI
01 EFI/2
10 EFI/4
11 EFI?8
8 CPUCNFG
If =1 CPU Lock. (Write Protect to CPUPMODE register)
7 FD (Flash Disk Enable)
If bit=1 then phisical addresses D0000H - DFFFFh
automatically never caching.
6 0 Reserved
5,4 FCC (Fast CPU clock)
5.4 Description
00 EFI
01 EFI/2
10 EFI/4
11 EFI/8
3,2 US (Unit Select)
Select Unit of 82360SL which will be accessable through 23h-25h
I/O Ports
3.2 Description
00 On-Board Memory Controller
01 Cache Unit
10 Internal Bus Unit
11 External Bus Unit
1 UE (Unit Enable)
If =1 Enable to Access Units
else enable to access System bus.
0 SB (Status Bit)
If =0 Enable access to CPUPWRMODE register
If =1 Disable
Format of EMSCNTLREG:
Bits Description
7 (Global Enable)
If =1 EMS enable
6 Valid bit
5 EMSDP Status Bit (Read Only)
4..2 Reserved
1..0 Active EMS Set (0-3)
Format of EMSINDEXREG:
Bits Description
15..10 Reserved
9..8 EMS set (0-3)
7..6 Reserved
5..0 EMS Page Register Index (0-64)
Format of EMSDPREG:
Bits Description
15 This EMS Page Enable (i.e. page indexed by EMSINDEXREG)
14 EMS Valid bit
13..11 reserved
10..0 Address lines A24..A14 for page selected by EMSINDEXREG
Important Note:
i386SL have SIGNATURE register have index 30Eh in On-Board Memory Controller
Configuration Space. This Register contain Stepping Info of i386SL.
Stepping Signature Register DX register after reset
A0 4300h 4310h
A1 4300h 4310h
A2 4301h 4310h
A3 4302h 4310h
B0 4310h 4311h
B1 4311h 4311h
[i486SL]
Note: address of register in Normal I/O space
Name of Register Address Default Value Where placed Size
CPUPWRMODE 22h 100H CPU 16
CFGSTAT 23h 0 82360SL 8
CFGINDEX 24h 0 82360SL 16
CFGDATA 25h xxh 82360SL 16
PORT92 92h 0 CPU 8
PORT102 102h 0 CPU 8
FAIL SAFE NMI CTRL 461h 0 CPU 8
The followed ports visible only when they enabled
FAST CPU RESET EFh N/A 82360SL 8
FAST A20 GATE EEh N/A 82360SL 8
SLOW CPU F4h N/A CPU 8
FAST CPU F5h N/A CPU 8
SFS DISABLE F9h N/A CPU 8
SFS ENABLE FBh N/A CPU 8
Format of CPUPWRMODE register (i486SL):
Bits Name Description
15 DT If Unlock Status { // See bit 0 of this register
if bit=0 then access to 82360SL
if bit=1 then access to CPUPWRMODE register
}
If Lock Staus { // i.e.SB=1
(De-Turbo Select Bit) Selected clock speed
If bit=0 then EFI/2
If bit=1 then EFI/4
}
14..13 0 Reserved
12 FPUERROR
This bit controlled access to I/O port 0F0h,
if =0 then access to internal F0h port,
If =1 then access ISA bus.
11..9 0 Reserved
8 CPUCNFG
If =1 CPU Lock. (Write Protect to CPUPMODE register)
7 0 RESERVED
6,5 FCC (Fast CPU clock)
5.4 Description
00 CPUCLK=definition=EFI/2
01 CPUCLK/2
10 CPUCLK/4
11 CPUCLK/8
4 0 Reserved
3,2 US (Unit Select)
Select Unit of 82360SL which will be accessable through 23h-25h
I/O Ports
3.2 Description
00 On-Board Memory Controller
01 Reserved
10 Internal Bus Unit
11 External Bus Unit
1 UE (Unit Enable)
If =1 Enable to Access Units
else enable to access System bus.
0 SB (Status Bit)
If =0 Enable access to CPUPWRMODE register
If =1 Disable
Important Note:
i486SL have SIGNATURE register have index 70Ah in On-Board Memory Controller
Configuration Space. This Register contain Stepping Info of i486SL.
Format Of this register provided below:
Bits Description
15..12 Member of Family (4h - SL)
11..8 Family (4h - 486 family)
7..0 Revision Name (Not Same as in DX after reset)
---------------------------------------------------
APPENDIX D2 NS486SXF REGISTERS
Note: NS486SXF - Embedded 486-processor, which contain base (IBM PC/AT
compatible I/O on-chip.
I/O Port Range Desctription
0000h-001Fh DMA Controller
0020h-0021h Master PIC (Programmable Interrupt Controller)
0040h-0047h PS/2 Style PIT (with WATCHDOG timer)
0050h-0057h 3-Wire Interface
0070h-0071h Real Time Clock
0080h-008Fh DMA Controller
00A0h-00A1h Slave PIC
00C0h-00DFh DMA Controller
0278h-027Ah ECP (Option)
02E8h-02EFh COM4 (Option)
02F8h-02FFh COM2 (Option)
0378h-037Ah ECP (Option)
03BCh-03BEh ECP (Option)
03E0h-03E3h PCMCIA
03E8h-03EFh COM3 (Option)
03F8h-03FFh COM1 (Default)
0678h-067Dh ECP (Default)
0778h-077Dh ECP (Option)
07BCh-07C1h ECP (Option)
EF00h-EF57h Bus Interface Unit
EF70h-EF71h UART
EF80h-EF8Bh DRAM Controller
EF90h-EF93h Power Managment
EFA0h-EFA3h LCD Controller
EFB0h-EFBFh Interrupt Controller
EFC0h-EFCFh RIO and Bus Interface Unit
EFE0h-EFE1h DMA Controller
---------------------------------------------
APPENDIX E
Pentium (tm) Processor Pairing Instruction
Pentium (tm) is superscalar microprocessor
i.e. it may execute >1 instruction per CLK
cycle. It may execute maximum 2 instruction
per cycle.It have two integer pipes to execute
instruction. This pipes not same, and some
instruction may pairing (i.e. execute together)
(only if not link with this 2 instruction)
only in U pipe, some other only in V pipe, other
in any pipe,other absolutely not pairing and they
executed on U pipe only.
------ Integer Part
Note:
PU - is pairable if issued to U pipe
PV - is pairable if issued to V pipe
UV - pairable in either pipe
ADC Reg,Reg PU
Reg,Mem PU
Reg,Imm PU
Mem,Reg PU
Mem,Imm PU
ADD Reg,Reg UV
Reg,Mem UV
Reg,Imm UV
Mem,Reg UV
Mem,Imm UV
AND Reg,Reg UV
Reg,Mem UV
Reg,Imm UV
Mem,Reg UV
Mem,Imm UV
CALL direct PV
CMP Reg,Reg UV
Reg,Mem UV
Reg,Imm UV
Mem,Reg UV
Mem,Imm UV
DEC Reg UV
Mem UV
INC Reg UV
Mem UV
Jcc any PV
JMP Short PV
Direct PV
LEA Reg,Mem UV
MOV Reg,Reg/Mem/Imm UV
Mem,Reg UV
NOP UV
OR Reg,Reg UV
Reg,Mem UV
Reg,Imm UV
Mem,Reg UV
Mem,Imm UV
POP Reg UV
PUSH Reg UV
Imm UV
Rotates/Shifts:
Reg,1 PU
Mem,1 PU
Reg,Imm PU
Mem,Imm PU
SUB Reg,Reg UV
Reg,Mem UV
Reg,Imm UV
Mem,Reg UV
Mem,Imm UV
TEST Reg,Reg UV
Mem,Reg UV
Acc,Imm UV
XOR Reg,Reg UV
Reg,Mem UV
Reg,Imm UV
Mem,Reg UV
Mem,Imm UV
_____ Floating Part
Note: FX - Pairing with FXCH
(All other never pairing)
FABS FX
FADD FX
FADDP FX
FCHS FX
FCOM FX
FCOMP FX
FDIV/R/P/RP FX
FLD m32,m64,ST(i) FX Note: FLD m80 not pairing
FMUL/P FX
FSUB/P/R/RP FX
FTST FX
FUCOM/P/PP FX
For more information refer to:
1) Optimization for Intel's 32-Bit Processors
(Application Note AP-500)
Gary CArleton)
// Intel Corp. 1993
// Order Number 241799
2) Supplement to the Pentium (tm) Processor User's
Manual
// Intel Corp. 1993.
------------------------------------------------------------
APPENDIX F0 NON FP OPCODES
Base Format of opcodes:
<Basecode> <Postbyte> <offset> <immediate_operands>
Format of Postbyte:
MM RRR MMM
MM - Memory addresing mode
RRR - Register operand address
MMM - Memory operand address
RRR Register Names
Fields 8bit 16bit 32bit
000 AL AX EAX
001 CL CX ECX
010 DL DX EDX
011 BL BX EBX
100 AH SP ESP
101 CH BP EBP
110 DH SI ESI
111 BH DI EDI
16bit memory (No 32 bit memory address prefix):
MMM Default MM Field
Field Sreg 00 01 10 11=MMM is reg
000 DS [BX+SI] [BX+SI+O8] [BX+SI+O16]
001 DS [BX+DI] [BX+DI+O8] [BX+SI+O16]
010 SS [BP+SI] [BP+SI+O8] [BP+SI+O16]
011 SS [BP+DI] [BP+DI+O8] [BP+DI+O16]
100 DS [SI] [SI+O8] [SI+O16]
101 DS [DI] [DI+O8] [DI+O16]
110 SS [O16] [BP+O8] [BP+O16]
111 DS [BX] [BX+O8] [BX+O16]
Note: MMM=110,MM=00 Default Sreg is DS !!!!
32bit memory (Has 67h 32 bit memory address prefix):
MMM Default MM Field
Field Sreg 00 01 10 11=MMM is reg
000 DS [EAX] [EAX+O8] [EAX+O32]
001 DS [ECX] [ECX+O8] [ECX+O32]
010 DS [EDX] [EDX+O8] [EDX+O32]
011 DS [EBX] [EBX+O8] [EBX+O32]
100 see SIB [SIB] [SIB+O8] [SIB+O32]
101 SS [O32] [EBP+O8] [EBP+O32]
110 DS [ESI] [ESI+O8] [ESI+O32]
111 DS [EDI] [EDI+O8] [EDI+O32]
Note: MMM=110,MM=00 Default Sreg is DS !!!!
SIB is (Scale/Base/Index):
SS BBB III
Note: SIB address calculated as :
<SIB address>=<Base>+<Index>*(2^(Scale))
Field Default Base
BBB Sreg Register Note
000 DS EAX
001 DS ECX
010 DS EDX
011 DS EBX
100 SS ESP
101 DS O32 If MM=00 (Postbyte)
SS EBP If MM<>00 (Postbyte)
110 DS ESI
111 DS EDI
Field Index
III register Note
000 EAX
001 ECX
010 EDX
011 EBX
100 Never Index SS can be 00
101 EBP
110 ESI
111 EDI
Field Scale coefficient
SS =2^(SS)
00 1
01 2
10 4
11 8
Note:
<No comments> this code are for 8086 and all other processors
NEC V20+ : for NEC V-seria only
186+ : for 186/188 and higher
286+ : for 80286 and higher
386+ : for 80386 and higher
486+ : for i486 and higher
Cyrix M5+ : for Cyrix only (Cx486S and higher)
Pentium+ : for Pentium
Pentium Pro+ : for Pentium Pro and higher
Pentium II+ : for Pentium II and higher
MMX : Intel MMX
AMD 3D : AMD 3D MMX Extensions
Cyrix EMMX : Cyrix Extended MMX
KNI/MMX2 : Katmai New Instructions/Intel MMX2
<specified> : specified
mem8 - Memory Operand 8 bit
mem - Memory operand 16/32 or more bit (depends on operation size)
m64 - Memory operand 64-bit
m128 - Memory operand 128-bit
reg8 - Register 8 bit
reg - Register 16/32 bit
mm - MMX register Integer (64-bit)
xmm - MMX2 register F.P (128-bit)
imm8 - Immediate 8 bit
imm - Immediate 16/32 bit
----------------------- [TABLE00]: ---------------------------
00 ADD mem8,reg8
01 ADD mem,reg
02 ADD reg8,mem8
03 ADD reg,mem
04 ADD AL,imm8
05 ADD AX,imm
06 PUSH ES
07 POP ES
08 OR mem8,reg8
09 OR mem,reg
0A OR reg8,mem8
0B OR reg,mem
0C OR AL,imm8
0D OR AX,imm
0E PUSH CS
0F POP CS ; 8088 non CMOS versions
>>> TABLE 01 ; NECs & 286+
Invalid Opcode ; 186/188
10 ADC mem8,reg8
11 ADC mem,reg
12 ADC reg8,mem8
13 ADC reg,mem
14 ADC AL,imm8
15 ADC AX,imm
16 PUSH SS
17 POP SS
18 SBB mem8,reg8
19 SBB mem,reg
1A SBB reg8,mem8
1B SBB reg,mem
1C SBB AL,imm8
1D SBB AX,imm
1E PUSH DS
1F POP DS
20 AND mem8,reg8
21 AND mem,reg
22 AND reg8,mem8
23 AND reg,mem
24 AND AL,imm8
25 AND AX,imm
26 ES: segment prefix
27 DAA
28 SUB mem8,reg8
29 SUB mem,reg
2A SUB reg8,mem8
2B SUB reg,mem
2C SUB AL,imm8
2D SUB AX,imm
2E CS: segment prefix
2F DAS
30 XOR mem8,reg8
31 XOR mem,reg
32 XOR reg8,mem8
33 XOR reg,mem
34 XOR AL,imm8
35 XOR AX,imm
36 SS: segment prefix
37 AAA
38 CMP mem8,reg8
39 CMP mem,reg
3A CMP reg8,mem8
3B CMP reg,mem
3C CMP AL,imm8
3D CMP AX,imm
3E DS: segment prefix
3F AAS
40 INC AX
41 INC CX
42 INC DX
43 INC BX
44 INC SP
45 INC BP
46 INC SI
47 INC DI
48 DEC AX
49 DEC CX
4A DEC DX
4B DEC BX
4C DEC SP
4D DEC BP
4E DEC SI
4F DEC DI
50 PUSH AX
51 PUSH CX
52 PUSH DX
53 PUSH BX
54 PUSH SP
55 PUSH BP
56 PUSH SI
57 PUSH DI
58 POP AX
59 POP CX
5A POP DX
5B POP BX
5C POP SP
5D POP BP
5E POP SI
5F POP DI
60 PUSHA ; NECs & 186+
61 POPA ; NECs & 186+
62 BOUND reg,mem ; NECs & 186+
63 ARPL reg,mem ; 286+ PM
64 FS: segment prefix ; 386+
65 GS: segment prefix ; 386+
66 Memory access size prefix ; 386+
67 Operands size prefix ; 386+
68 PUSH imm ; NECs & 186+
69 IMUL reg,imm,mem ; NECs & 186+
6A PUSH imm8 ; NECs & 186+
6B IMUL reg,imm8,mem ; NECs & 186+
6C INSB ; 186+
6D INS ; 186+
6E OUTSB ; 186+
6F OUTS ; 186+
70 JO rel8
71 JNO rel8
72 JC rel8
73 JNC rel8
74 JZ rel8
75 JNZ rel8
76 JNA rel8
77 JA rel8
78 JS rel8
79 JNS rel8
7A JP rel8
7B JNP rel8
7C JL rel8
7D JNL rel8
7E JNG rel8
7F JG rel8
80 code extention [1]
81 code extention [2]
82 code extention [3]
83 code extention [4]
84 TEST mem8,reg8
85 TEST mem,reg
86 XCHG mem8,reg8
87 XCHG mem,reg
88 MOV mem8,reg8
89 MOV mem,reg
8A MOV reg8,mem8
8B MOV reg,mem
8C code extention [5]
8D LEA reg,mem
8E code extention [6]
8F code extention [7]
90 NOP
91 XCHG AX,CX
92 XCHG AX,DX
93 XCHG AX,BX
94 XCHG AX,SP
95 XCHG AX,BP
96 XCHG AX,SI
97 XCHG AX,DI
98 CBW
66 98 CWDE ; 386+
99 CWD
66 99 CDQ ; 386+
9A CALL FAR seg:offs
9B WAIT/FWAIT
9C PUSHF
66 9C PUSHFD ; 386+
9D POPF
66 9D POPFD ; 386+
9E SAHF
9F LAHF
A0 MOV AL,[imm]
A1 MOV AX,[imm]
A2 MOV [imm],AL
A3 MOV [imm],ax
A4 MOVSB
A5 MOVS
A6 CMPSB
A7 CMPS
A8 TEST AL,imm8
A9 TEST AX,imm
AA STOSB
AB STOS
AC LODSB
AD LODS
AE SCASB
AF SCAS
B0 MOV AL,imm8
B1 MOV CL,imm8
B2 MOV DL,imm8
B3 MOV BL,imm8
B4 MOV AH,imm8
B5 MOV CH,imm8
B6 MOV DH,imm8
B7 MOV BH,imm8
B8 MOV AX,imm
B9 MOV CX,imm
BA MOV DX,imm
BB MOV BX,imm
BC MOV SP,imm
BD MOV BP,imm
BE MOV SI,imm
BF MOV DI,imm
C0 code extention [8]
C1 code extention [9]
C2 RET NEAR imm
C3 RET NEAR
C4 LES reg,mem
C5 LDS reg,mem
C6 code extention [10]
C7 code extention [11]
C8 ENTER imm,imm8 ; NECs & 186+
C9 LEAVE ; NECs & 186+
CA RET FAR imm
CB RET FAR
CC INT 3
CD INT imm8
CE INTO
CF IRET
D0 code extention [12]
D1 code extention [13]
D2 code extention [14]
D3 code extention [15]
D4 AAM imm8 ; NECs w/o imm8 but D4 0A only
D5 AAD imm8 ; NECs w/o imm8 but D4 0A only
D6 SETALC ; 286+
D7 XLAT
D8-DF ESC imm6,mem ; Note: Refer to Appendix F1
; (Cooprocessor commands).
E0 LOOPNZ rel8
E1 LOOPZ rel8
E2 LOOP rel8
E3 JCXZ rel8
66 E3 JECXZ rel8 ; 386+
E4 IN AL,imm8
E5 IN AX,imm8
E6 OUT imm8,AL
E7 OUT imm8,AX
E8 CALL NEAR rel16
E9 JMP NEAR rel16
EA JMP FAR seg:offs
EB JMP SHORT rel8
EC IN AL,DX
ED IN AX,DX
EE OUT DX,AL
EF OUT DX,AX
F0 LOCK prefix
F1 SMI ; AMD Am386/486DXLV
F2 REPNZ
F3 REP/REPZ ; Used in KNI/MMX2 as
; Modificator !!!!!!
F4 HLT
F5 CMC
F6 code extention [16]
F7 code extention [17]
F8 CLC
F9 STC
FA CLI
FB STI
FC CLD
FD STD
FE code extention [18]
FF code extention [19]
----------------------- [TABLE 01]: ---------------------------
Note: First Byte of Operation is 0Fh
00 Extended Opcode 20 ; 286+
01 Extended Opcode 21 ; 286+
02 LAR reg,mem ; 286+
03 LSL reg,mem ; 286+
04 LOADALL ; 286 only
05 LOADALL ; 286 only
05 SYSCALL ; AMD K6
06 CLTS ; 286+
07 LOADALL ; 386,486, None Pentium+
RES3 ; AMD Am386zXLV
RES4 ; AMD Am486DXLV
ICERET ; IBM 386SLC,486SLC,486SLC2
SYSRET ; AMD K6
08 INVD ; 486+
09 WBINVD ; 486+
0A Reserved, INT 6
0B UD2 ; all, but documented on
; Pentium Pro only
0C
0D code extention [25] ; AMD 3DNow!
0E FEMMS ; AMD 3DNow!
0F >>> TABLE 02 ; AMD 3DNow!
10 UMOV mem8,reg8 ; Really different op. space
; 386-486, Never Pentium+
; on AMD Amz86zXLV,never Cx5x86+
TEST1 mem8,CL ; NEC V20+
MOVSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 10)
MOVUPS xmm,xmm/m128 ; KNI/MMX2
11 UMOV mem,reg ; see 0Fh,10h
TEST1 mem,CL ; NEC V20+
MOVSS xmm/m32,xmm ; KNI/MMX2 (F3 0F 11)
MOVUPS xmm/m128,xmm ; KNI/MMX2
12 UMOV reg8,mem8 ; see 0Fh,10h
CLEAR1 mem8,CL ; NEC V20+
MOVHLPS xmm,xmm ; KNI/MMX2
MOVLPS xmm,m64 ; KNI/MMX2
13 UMOV reg,mem ; see 0Fh,10h
CLEAR1 mem,CL ; NEC V20+
MOVLPS m64,xmm ; KNI/MMX2
14 SET1 mem8,CL ; NEC V20+
UNPCKLPS xmm,xmm/m128 ; KNI/MMX2
15 SET1 mem,CL ; NEC V20+
UNPCKHPS xmm,xmm/m128 ; KNI/MMX2
16 NOT1 mem8,CL ; NEC V20+
MOVHPS xmm,m64 ; KNI/MMX2
MOVLHPS xmm,xmm ; KNI/MMX2
17 NOT1 mem,CL ; NEC V20+
MOVHPS m64,xmm ; KNI/MMX2
18 TEST1 mem8,imm8 ; NEC V20+
code extension [26] ; KNI/MMX2
19 TEST1 mem,imm8 ; NEC V20+
1A CLEAR1 mem8,imm8 ; NEC V20+
1B CLEAR1 mem,imm8 ; NEC V20+
1C SET1 mem8,imm8 ; NEC V20+
1D SET1 mem,imm8 ; NEC V20+
1E NOT1 mem8,imm8 ; NEC V20+
1F NOT1 mem,imm8 ; NEC V20+
20 MOV reg32,CRn ; 386+
ADD4S ; NEC V20+
21 MOV reg32,DRn ; 386+
22 MOV CRn,reg32 ; 386+
SUB4S ; NEC V20+
23 MOV DRn,reg32 ; 386+
24 MOV reg32,TRn ; 386-486 only, and Cyrix
25
26 MOV TRn,reg32 ; 386-486 only, and Cyrix
CMPS4S ; NEC V20+
27
28 ROL4 mem8 ; NEC V20+
MOVAPS xmm,xmm/m128 ; KNI/MMX2
29 MOVAPS xmm/m128,xmm ; KNI/MMX2
2A ROL4 mem8 ; NEC V20+
CVTPI2PS xmm,mm/m64 ; KNI/MMX2
CVTSI2SS xmm,r32/m32 ; KNI/MMX2 (F3 0F 2A)
2B MOVNTPS m128,xmm ; KNI/MMX2
2C CVTTPS2PI mm,xmm/m64 ; KNI/MMX2
CVTTSS2SI r32,xmm/m32 ; KNI/MMX2 (F3 0F 2C)
2D CVTPS2PI mm,xmm/m64 ; KNI/MMX2
CVTSS2SI r32,xmm/m32 ; KNI/MMX2 (F3 0F 2D)
2E UCOMISS xmm,xmm/m32 ; KNI/MMX2
2F COMISS xmm,xmm/m32 ; KNI/MMX2
30 WRMSR ; Pentium+, IBM 386SLC,486SLC/SLC2
31 RDTSC ; Pentium+
INS reg8,reg8 ; NEC V20+ ; Note: NECINS
32 RDMSR ; Pentium, IBM 386SLC,486SLC/SLC2
33 EXT reg8,reg8 ; NEC V20+
RDPMC ; Pentium Pro+
34 SYSENTER ; Pentium II+
35 SYSEXIT ; Pentium II+
36 RDSHR reg/mem32 ; Cx6x86MX (SMM only)
37 WRSHR reg/mem32 ; Cx6x86MX (SMM only)
38
39
3A
3B
3C
3D
3E
3F
40 CMOVO reg,mem ; Pentium Pro+
41 CMOVNO reg,mem ; Pentium Pro+
42 CMOVC reg,mem ; Pentium Pro+
43 CMOVNC reg,mem ; Pentium Pro+
44 CMOVZ reg,mem ; Pentium Pro+
45 CMOVNZ reg,mem ; Pentium Pro+
46 CMOVA reg,mem ; Pentium Pro+
47 CMOVNA reg,mem ; Pentium Pro+
48 CMOVS reg,mem ; Pentium Pro+
49 CMOVNS reg,mem ; Pentium Pro+
4A CMOVP reg,mem ; Pentium Pro+
4B CMOVNP reg,mem ; Pentium Pro+
4C CMOVL reg,mem ; Pentium Pro+
4D CMOVNL reg,mem ; Pentium Pro+
4E CMOVNG reg,mem ; Pentium Pro+
4F CMOVG reg,mem ; Pentium Pro+
50 PAVEB mm,mm/m64 ; Cyrix EMMX
MOVMSKPS r32,xmm ; KNI/MMX2
51 PADDSIW mm,mm/m64 ; Cyrix EMMX
SQRTPS xmm,xmm/m128 ; KNI/MMX2
SQRTSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 51)
52 PMAGW mm,mm/m64 ; Cyrix EMMX
PSQRTPS xmm,xmm/m128 ; KNI/MMX2
PSQRTSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 52)
53 RCPPS xmm,xmm/m128 ; KNI/MMX2
RCPSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 53)
54 PDISTIB mm,m64 ; Cyrix EMMX
ANDPS xmm,xmm/m128 ; KNI/MMX2
55 PSUBSIW mm,mm/m64 ; Cyrix EMMX
ANDNPS xmm,xmm/m128 ; KNI/MMX2
56 ORPS xmm,xmm/m128 ; KNI/MMX2
57 XORPS xmm,xmm/m128 ; KNI/MMX2
58 PMVZB mm,m64 ; Cyrix EMMX
ADDPS xmm,xmm/m128 ; KNI/MMX2
ADDSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 58)
59 PMULHRW mm,mm/m64 ; Cyrix EMMX
MULPS xmm,xmm/m128 ; KNI/MMX2
MULSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 59)
5A PMVNZB mm,m64 ; Cyrix EMMX
5B PMVLZB mm,m64 ; Cyrix EMMX
5C PMVGEZB mm,m64 ; Cyrix EMMX
SUBPS xmm,xmm/m128 ; KNI/MMX2
SUBSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5C)
5D PMULHRIW mm,mm/m64 ; Cyrix EMMX
MINPS xmm,xmm/m128 ; KNI/MMX2
MINSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5D)
5E PMACHRIW mm,m64 ; Cyrix EMMX
DIVPS xmm,xmm/m128 ; KNI/MMX2
DIVSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5E)
5F MAXPS xmm,xmm/m128 ; KNI/MMX2
MAXSS xmm,xmm/m32 ; KNI/MMX2 (F3 0F 5F)
60 PUNPCKLBW mm,mm/m32 ; MMX
61 PUNPCKLWD mm,mm/m32 ; MMX
62 PUNPCKLDQ mm,mm/m32 ; MMX
63 PACKSSWB mm,mm/m64 ; MMX
64 PCMPGTB mm,mm/m64 ; MMX
65 PCMPGTW mm,mm/m64 ; MMX
66 PCMPGTD mm,mm/m64 ; MMX
67 PACKUSWB mm,mm/m64 ; MMX
68 PUNPCKHBW mm,mm/m64 ; MMX
69 PUNPCKHWD mm,mm/m64 ; MMX
6A PUNPCKHDQ mm,mm/m64 ; MMX
6B PACKSSDW mm,mm/m64 ; MMX
6C
6D
6E MOVD mm,r/m32 ; MMX
6F MOVQ mm,mm/m64 ; MMX
70 PSHUFW mm,mm/m64,i8 ; KNI/MMX2,AMD EMMX
71 code extention [28] ; MMX
72 code extention [29] ; MMX
73 code extention [30] ; MMX
74 PCMPEQB mm,mm/m64 ; MMX
75 PCMPEQW mm,mm/m64 ; MMX
76 PCMPEQD mm,mm/m64 ; MMX
77 EMMS ; MMX
78 SVDC mem,sreg ; Cyrix M5+ (SMM only)
79 RSDC sreg,mem ; Cyrix M5+ (SMM only)
7A SVLDT mem ; Cyrix M5+ (SMM only)
7B RSLDT mem ; Cyrix M5+ (SMM only)
7C SVTS mem ; Cyrix M5+ (SMM only)
7D RSTS mem ; Cyrix M5+ (SMM only)
7E SMINT ; Cyrix M6+
7E MOVD r/m32,mm ; MMX
7F MOVD mm/m64,mm ; MMX
80 JO rel16 ; 386+
81 JNO rel16 ; 386+
82 JC rel16 ; 386+
83 JNC rel16 ; 386+
84 JZ rel16 ; 386+
85 JNZ rel16 ; 386+
86 JNA rel16 ; 386+
87 JA rel16 ; 386+
88 JS rel16 ; 386+
89 JNS rel16 ; 386+
8A JP rel16 ; 386+
8B JNP rel16 ; 386+
8C JL rel16 ; 386+
8D JNL rel16 ; 386+
8E JNG rel16 ; 386+
8F JG rel16 ; 386+
90 SETO mem8 ; 386+
91 SETNO mem8 ; 386+
92 SETC mem8 ; 386+
93 SETNC mem8 ; 386+
94 SETZ mem8 ; 386+
95 SETNZ mem8 ; 386+
96 SETNA mem8 ; 386+
97 SETA mem8 ; 386+
98 SETS mem8 ; 386+
99 SETNS mem8 ; 386+
9A SETP mem8 ; 386+
9B SETNP mem8 ; 386+
9C SETL mem8 ; 386+
9D SETNL mem8 ; 386+
9E SETNG mem8 ; 386+
9F SETG mem8 ; 386+
A0 PUSH FS ; 386+
A1 POP FS ; 386+
A2 CPUID ; 486 SL enhanced, Pentium+
; UMC,i386CX,Cyrix M1+,AMD K5+,
; Some NexGen, IDT
A3 BT mem,reg ; 386+
A4 SHLD mem,reg,imm ; 386+
A5 SHLD mem,reg,CL ; 386+
A6 XBTS reg,mem,AX,CL ; Intel (!!!) 80386 steps A0-B0
CMPXCHG mem8,reg8 ; Intel (!!!) 80486 steps A0-B0
A7 IBTS mem,AX,CL,reg ; Intel (!!!) 80386 steps A0-B0
CMPXCHG mem,reg ; Intel (!!!) 80486 steps A0-B0
A8 PUSH GS ; 386+
A9 POP GS ; 386+
AA RSM ; i486 SL Enhanced, i386CX
; Intel Pentium+, etc
AB BTS mem,reg ; 386+
AC SHRD mem,reg,imm ; 386+
AD SHRD mem,reg,CL ; 386+
AE code extention [24]
AF IMUL reg,mem ; 386+
B0 CMPXCHG mem8,reg8 ; 486+ (Intel B1+ step only)
B1 CMPXCHG mem,reg ; 486+ (Intel B1+ step only)
B2 LSS reg,mem ; 386+
B3 BTR mem,reg ; 386+
B4 LFS reg,mem ; 386+
B5 LGS reg,mem ; 386+
B6 MOVZX reg,mem8 ; 386+
B7 MOVZX reg32,mem ; 386+
B8
B9 UD2 ; one more Undefined Opcode-2
BA code extention [22]
BB BTC mem,reg ; 386+
BC BSF reg,mem ; 386+
BD BSR reg,mem ; 386+
BE MOVSX reg,mem8 ; 386+
BF MOVSX reg32,mem ; 386+
C0 XADD mem8,reg8 ; 486+
C1 XADD mem,reg ; 486+
C2 code extension [27] ; KNI/MMX2
C3
C4 PINSRW mm,r32/m16,i8 ; KNI/MMX2,AMD EMMX
C5 PEXTRW r32,mm,i8 ; KNI/MMX2,AMD EMMX
C6 SHUFPS xmm,xmm/m128,i8 ; KNI/MMX2
C7 code extention [23]
C8 BSWAP EAX ; 486+
C9 BSWAP ECX ; 486+
CA BSWAP EDX ; 486+
CB BSWAP EBX ; 486+
CC BSWAP ESP ; 486+
CD BSWAP EBP ; 486+
CE BSWAP ESI ; 486+
CF BSWAP EDI ; 486+
D0
D1 PSRLW mm,mm/m64 ; MMX
D2 PSRLD mm,mm/m64 ; MMX
D3 PSRLQ mm,mm/m64 ; MMX
D4
D5 PMULLW mm,mm/m64 ; MMX
D6
D7 PMOVMSKB r32,mm ; KNI/MMX2,AMD EMMX
D8 PSUBUSB mm,mm/m64 ; MMX
D9 PSUBUSW mm,mm/m64 ; MMX
DA PMINUB mm,mm/m64 ; KNI/MMX2,AMD EMMX
DB PAND mm,mm/m64 ; MMX
DC PADDUSB mm,mm/m64 ; MMX
DD PADDUSW mm,mm/m64 ; MMX
DE PMAXUB mm,mm/m64 ; KNI/MMX2,AMD EMMX
DF PANDN mm,mm/m64 ; MMX
E0 PAVGB mm,mm/m64 ; KNI/MMX2,AMD EMMX
E1 PSRAW mm,mm/m64 ; MMX
E2 PSRAD mm,mm/m64 ; MMX
E3 PAVGW mm,mm/m64 ; KNI/MMX2, AMD EMMX
E4 PMULHUW mm,mm/m64 ; KNI/MMX2, AMD EMMX
E5 PMULHW mm,mm/m64 ; MMX
E6
E7 MOVNTQ m64,mm ; KNI/MMX2, AMD EMMX
E8 PSUBSB mm,mm/m64 ; MMX
E9 PSUBSW mm,mm/m64 ; MMX
EA PMINSW mm,mm/m64 ; KNI/MMX2, AMD EMMX
EB POR mm,mm/m64 ; MMX
EC PADDSB mm,mm/m64 ; MMX
ED PADDSW mm,mm/m64 ; MMX
EE PMAXSW mm,mm/m64 ; KNI/MMX2, AMD EMMX
EF PXOR mm,mm/m64 ; MMX
F0
F1 PSLLW mm,mm/m64 ; MMX
F2 PSLLD mm,mm/m64 ; MMX
F3 PSLLQ mm,mm/m64 ; MMX
F4
F5 PMULADDWD mm,mm/m64 ; MMX
F6 PSADBW mm,mm/m64 ; KNI/MMX2, AMD EMMX
F7 MASKMOVQ mm,mm ; KNI/MMX2, AMD EMMX
F8 PSUBB mm,mm/m64 ; MMX
F9 PSUBW mm,mm/m64 ; MMX
FA PSUBD mm,mm/m64 ; MMX
FB
FC PADDB mm,mm/m64 ; MMX
FD PADDW mm,mm/m64 ; MMX
FE PADDD mm,mm/m64 ; MMX
FF UD ; AMD Am5k86+ and all other CPUs
FF OIO ; Cyrix Cx6x86+ and all other CPUs
FF BRKEM imm8 ; NEC V20+
---------------------- [TABLE 02] --------------------------
First bytes is 0Fh,0Fh
(In Table 02 marked only valid opcodes)
0C PI2FW mm,mm/m64 ; AMD 3FNow! extensions
0D PI2FD mm,mm/m64 ; AMD 3DNow!
1C PF2IW mm,mm/m64 ; AMD 3DNow! extensions
1D PF2ID mm,mm/m64 ; AMD 3DNow!
8A PFNACC mm,mm/m64 ; AMD 3DNow! extensions
8E PFPNACC mm,mm/m64 ; AMD 3DNow! extensions
90 PFCMPGE mm,mm/m64 ; AMD 3DNow!
94 PFMIN mm,mm/m64 ; AMD 3DNow!
96 PFRCP mm,mm/m64 ; AMD 3DNow!
97 PFRSQRT mm,mm/m64 ; AMD 3DNow!
9A PFSUB mm,mm/m64 ; AMD 3DNow!
9E PFADD mm,mm/m64 ; AMD 3DNow!
A0 PFCMPGT mm,mm/m64 ; AMD 3DNow!
A4 PFMAX mm,mm/m64 ; AMD 3DNow!
A6 PFRCPIT1 mm,mm/m64 ; AMD 3DNow!
A7 PFRSQIT1 mm,mm/m64 ; AMD 3DNow!
AA PFSUBR mm,mm/m64 ; AMD 3DNow!
AE PFACC mm,mm/m64 ; AMD 3DNow!
B0 PFCMPEQ mm,mm/m64 ; AMD 3DNow!
B4 PFMUL mm,mm/m64 ; AMD 3DNow!
B6 PFRCPIT2 mm,mm/m64 ; AMD 3DNow!
B7 PMULHRW mm,mm/m64 ; AMD 3DNow!
BB PSWAPD mm,mm/m64 ; AMD 3DNow! extension
BF PAVGUSB mm,mm/m64 ; AMD 3DNow!
**************************************************
CODE EXTENTIONS:
First byte(s) look at TABLES#00,01
Next byte have format
MMOOOMMM : MM is memory mode (see postbyte)
OOO select operation in this extention code field
MMM is memory field (see Postbyte)
Code Extention # 1
(First byte(s) = 80h)
Field
OOO Operation
000 ADD mem8,imm8
001 OR mem8,imm8
010 ADC mem8,imm8
011 SBB mem8,imm8
100 AND mem8,imm8
101 SUB mem8,imm8
110 XOR mem8,imm8
111 CMP mem8,imm8
Code Extention # 2
(First byte(s) = 81h)
Field
OOO Operation
000 ADD mem,imm
001 OR mem,imm
010 ADC mem,imm
011 SBB mem,imm
100 AND mem,imm
101 SUB mem,imm
110 XOR mem,imm
111 CMP mem,imm
Code Extention # 3
(First byte(s) = 82h)
Note: On some models, undefined code do nothing, on any work as 83h
None INT 6 at all.
Field
OOO Operation
000 ADD mem8,simm8
001
010 ADC mem8,simm8
011 SBB mem8,simm8
100
101 SUB mem8,simm8
110
111 CMP mem8,simm8
Code Extention # 4
(First byte(s) = 83h)
Field
OOO Operation
000 ADD mem,simm8
001 OR mem,simm8 ; 386+
010 ADC mem,simm8
011 SBB mem,simm8
100 AND mem,simm8 ; 386+
101 SUB mem,simm8
110 XOR mem,simm8 ; 388+
111 CMP mem,simm8
Code Extention # 5
(First byte(s) = 8Ch)
Field
OOO Operation
000 MOV mem,ES
001 MOV mem,CS
010 MOV mem,SS
011 MOV mem,DS
100 MOV mem,FS ; 386+
101 MOV mem,GS ; 386+
110
111
Code Extention # 6
(First byte(s) = 8Eh)
Field
OOO Operation
000 MOV ES,mem
001 MOV CS,mem ; Non CMOS version of 8086/8088 only
010 MOV SS,mem
011 MOV DS,mem
100 MOV FS,mem ; 386+
101 MOV GS,mem ; 386+
110
111
Code Extention # 7
(First byte(s) = 8Fh)
Note: i486 can eat any OOO.
Field
OOO Operation
000 POP mem
001
010
011
100
101
110
111
Code Extention # 8
(First byte(s) = C0h)
Field
OOO Operation
000 ROL mem8,imm8 ; 186+
001 ROR mem8,imm8 ; 186+
010 RCL mem8,imm8 ; 186+
011 RCR mem8,imm8 ; 186+
100 SHL mem8,imm8 ; 186+
101 SHR mem8,imm8 ; 186+
110 SAL mem8,imm8 ; 186+
111 SAR mem8,imm8 ; 186+
Code Extention # 9
(First byte(s) = C1h)
Field
OOO Operation
000 ROL mem,imm8 ; 186+
001 ROR mem,imm8 ; 186+
010 RCL mem,imm8 ; 186+
011 RCR mem,imm8 ; 186+
100 SHL mem,imm8 ; 186+
101 SHR mem,imm8 ; 186+
110 SAL mem,imm8 ; 186+
111 SAR mem,imm8 ; 186+
Code Extention # 10
(First byte(s) = C6h)
Note: i486 can eat any OOO field.
Field
OOO Operation
000 MOV mem8,imm8
001
010
011
100
101
110
111
Code Extention # 11
(First byte(s) = C7h)
Note: i486 can eat any OOO field
Field
OOO Operation
000 MOV mem,imm16
001
010
011
100
101
110
111
Code Extention # 12
(First byte(s) = D0h)
Field
OOO Operation
000 ROL mem8,1
001 ROR mem8,1
010 RCL mem8,1
011 RCR mem8,1
100 SHL mem8,1
101 SHR mem8,1
110 SAL mem8,1
111 SAR mem8,1
Code Extention # 13
(First byte(s) = D1h)
Field
OOO Operation
000 ROL mem,1
001 ROR mem,1
010 RCL mem,1
011 RCR mem,1
100 SHL mem,1
101 SHR mem,1
110 SAL mem,1
111 SAR mem,1
Code Extention # 14
(First byte(s) = D2h)
Field
OOO Operation
000 ROL mem8,CL
001 ROR mem8,CL
010 RCL mem8,CL
011 RCR mem8,CL
100 SHL mem8,CL
101 SHR mem8,CL
110 SAL mem8,CL
111 SAR mem8,CL
Code Extention # 15
(First byte(s) = D3h)
Field
OOO Operation
000 ROL mem,CL
001 ROR mem,CL
010 RCL mem,CL
011 RCR mem,CL
100 SHL mem,CL
101 SHR mem,CL
110 SAL mem,CL
111 SAR mem,CL
Code Extention # 16
(First byte(s) = F6h)
Note: Usually 001 do same thing as 000, TEST mem8,imm8
Field
OOO Operation
000 TEST mem8,imm8
001
010 NOT mem8
011 NEG mem8
100 MUL mem8
101 IMUL mem8
110 DIV mem8
111 IDIV mem8
Code Extention # 17
(First byte(s) = F7h)
Note: Usually 001 do same thing as 000, TEST mem,imm16
Field
OOO Operation
000 TEST mem,imm16
001
010 NOT mem
011 NEG mem
100 MUL mem
101 IMUL mem
110 DIV mem
111 IDIV mem
Code Extention # 18
(First byte(s) = FEh)
Field
OOO Operation
000 INC mem8
001 DEC mem8
010
011
100
101
110
111
Code Extention # 19
(First byte(s) = FFh)
Field
OOO Operation
000 INC mem
001 DEC mem
010 CALL NEAR mem
011 CALL FAR mem
100 JMP NEAR mem
101 JMP FAR mem
110 PUSH mem
111
Code Extention # 20
(First byte(s) = 0FH,00H)
Field
OOO Operation
000 SLDT mem ; 286+
001 STR mem ; 286+
010 LLDT mem ; 286+
011 LTR mem ; 286+
100 VERR mem ; 286+
101 VERW mem ; 286+
110
111
Code Extention # 21
(First byte(s) = 0Fh,01h)
Field
OOO Operation
000 SGDT mem ; 286+
001 SIDT mem ; 286+
010 LGDT mem ; 286+
011 LIDT mem ; 286+
100 SMSW mem ; 286+
101
110 LMSW mem ; 286+
111 INVLPG mem ; 486+
Code Extention # 22
(First byte(s) = 0Fh,BAh)
Field
OOO Operation
000
001
010
011
100 BT mem,imm8 ; 386+
101 BTS mem,imm8 ; 386+
110 BTR mem,imm8 ; 386+
111 BTC mem,imm8 ; 386+
Code Extention # 23
(First byte(s) = 0Fh,C7h)
Field
OOO Operation
000
001 CMPXCHG8B mem ; Pentium
010
011
100
101
110
111
Code Extention # 24
(First byte(s) = 0Fh,AEh)
Field
OOO Operation
000 FXSAVE mem512byte ; KNI/MMX2
001 FXRSTOR mem512byte ; KNI/MMX2
010 LDMXCSR m32 ; KNI/MMX2
011 STMXCSR m32 ; KNI/MMX2
100
101
110
111 SFENCE ; KNI/MMX2, AMD EMMX
(0F AE F8)
Code Extention # 25
(First byte(s) = 0Fh,0Dh)
Field
OOO Operation
000 PREFETCH mem ; AMD 3DNow!
001 PREFETCHW mem ; AMD 3DNow!
010
011
100
101
110
111
Code Extention # 26
(First byte(s) = 0Fh,18h)
Field
OOO Operation
000 PREFETCHNTA mem ; KNI/MMX2, AMD EMMX
001 PREFETCHT0 mem ; KNI/MMX2, AMD EMMX
010 PREFETCHT1 mem ; KNI/MMX2, AMD EMMX
011 PREFETCHT2 mem ; KNI/MMX2, AMD EMMX
100
101
110
111
Code Extension # 27
(First byte(s) = (F3h) 0Fh,C2h) ; KNI/MMX2 All extension
.
Instruction have unusuall x86 format:
<0Fh> <C2h> <Postbyte> [<Memory>] <Nextbyte>
<F3h> <0Fh> <C2h> <Postbyte> [<Memory>] <Nextbyte>
.
Next byte (w/o F3h Prefix) (with F3 prefix)
00 CMPEQPS xmm,xmm/m128 CMPEQSS xmm,xmm/m32 ; KNI/MMX2
01 CMPLTPS xmm,xmm/m128 CMPLTSS xmm,xmm/m32 ; KNI/MMX2
02 CMPLEPS xmm,xmm/m128 CMPLESS xmm,xmm/m32 ; KNI/MMX2
03 CMPUNORDPS xmm,xmm/m128 CMPUNORDSS xmm,xmm/m32 ; KNI/MMX2
04 CMPNEPS xmm,xmm/m128 CMPNESS xmm,xmm/m32 ; KNI/MMX2
05 CMPNLTPS xmm,xmm/m128 CMPNLTSS xmm,xmm/m32 ; KNI/MMX2
06 CMPNLEPS xmm,xmm/m128 CMPNLESS xmm,xmm/m32 ; KNI/MMX2
07 CMPORDPS xmm,xmm/m128 CMPORDSS xmm,xmm/m32 ; KNI/MMX2
.
Note: This is other forms of
CMPPS xmm,xmm/m128,imm8
CMPSS xmm,xmm/m32,imm8
Code Extention # 28
(First byte(s) = 0Fh,71h)
Field
OOO Operation
000
001
010 PSRLW mm,imm8 ; MMX
011
100 PSRAW mm,imm8 ; MMX
101
110 PSSLW mm,imm8 ; MMX
111
Code Extention # 29
(First byte(s) = 0Fh,72h)
Field
OOO Operation
000
001
010 PSRLD mm,imm8 ; MMX
011
100 PSRAD mm,imm8 ; MMX
101
110 PSLLD mm,imm8 ; MMX
111
Code Extention # 30
(First byte(s) = 0Fh,73h)
Field
OOO Operation
000
001
010 PSRLQ mm,imm8 ; MMX
011
100
101
110 PSLLQ mm,imm8 ; MMX
111
Note:
Here Provided small note about
Additional Instruction Sets
(SIMD subset)
Cyrix AMD 3DNow!
P5 P6 MMX EMMX 3DNow! SIMD EMMX ext
Pentium + - - - - - - -
Pentium/wMMX + - + - - - - -
Pentium Pro + + - - - - - -
Pentium II + + + - - - - -
Pentium III + + + - - + (+) -
AMD K5 + - - - - - - -
AMD K6 + + + - - - - -
AMD K6-2 + + + - + - - -
AMD K6-III + + + - + - - -
AMD Athlon + + + - + - + +
------------------------------------------------
APPENDIX F1 FLOATING POINT OPCODES
ESC 0 (First byte = D8h)
==========================
ESCAPE 000 MMRRRMMM
==========================
Operation
RRR If MM<>11 If MM=11
000 FADD mem32r FADD ST,ST(i)
001 FMUL mem32r FMUL ST,ST(i)
010 FCOM mem32r FCOM ST(i)
011 FCOMP mem32r FCOMP ST(i)
100 FSUB mem32r FSUB ST,ST(i)
101 FSUBR mem32r FSUBR ST,ST(i)
110 FDIV mem32r FDIV ST,ST(i)
111 FDIVR mem32r FDIVR ST,ST(i)
ESC 1 (First byte = D9h)
==========================
ESCAPE 001 MMRRRMMM
==========================
Operation
RRR If MM<>11 If MM=11
000 FLD mem32r FLD ST(i)
001 empty FXCH ST(i)
010 FST mem32r See Table marked ESC1-Extended codes
011 FSTP mem32r FSTP ST(i)
100 FLDENV mem See Table marked ESC1-Extended codes
101 FLDCW mem See Table marked ESC1-Extended codes
110 FSTENV mem See Table marked ESC1-Extended codes
111 FSTCW mem See Table marked ESC1-Extended codes
ESC1-Extended codes:
\ RRR
MMM \ 010 100 101 110 111
000 FNOP FCHS FLD1 F2XM1 FPREM
001 FABS FLDL2T FYL2X FYL2XP1
010 FLDL2E FPTAN FSQRT
011 FLDPI FPATAN FSINCOS'
100 FTST FLDLG2 FXTRACT FRNDINT
101 FXAM FLDLN2 FPREM1 FSCALE
110 FLDZ FDECSTP FSIN'
111 FINCSTP FCOS'
' means 387+ (include 287XL/XLT, 187!!!)
ESC 2 (First byte = DAh)
==========================
ESCAPE 010 MMRRRMMM
==========================
Operation
RRR If MM<>11
000 FIADD mem32i
001 FIMUL mem32i
010 FICOM mem32i
011 FICOMP mem32i
100 FISUB mem32i
101 FISUBR mem32i
110 FIDIV mem32i
111 FIDIVR mem32i
Note: P6
DA C0+i FCMOVB ST0,STi
DA C8+i FCMOVE ST0,STi
DA D0+i FCMOVBE ST0,STi
DA D8+i FCMOVU ST0,STi
ESC 3 (First byte = DBh)
==========================
ESCAPE 011 MMRRRMMM
==========================
Operation
RRR If MM<>11
000 FILD mem32i
001
010 FIST mem32i
011 FISTP mem32i
100
101 FLD mem80r
110
111 FSTP mem80r
So,If MM=11 we have next command (first byte = DBh)
Mnemonic Second byte of code
FNENI E0H (8087 only, others do nothing)
FNDISI E1H (8087 only, others do nothing)
FNCLEX E2H
FNINIT E3H
FSETPM E4H (287s only)
FRSTPM E5H (287XL/XLT only)
FSTB0 E8H (IIT)
FSTB2 EAH (IIT)
FSTB1 EBH (IIT)
F4X4 F1H (IIT)
FRINT2 FCH (Cyrix)
FUCOMI ST0,STi E8H+i (P6)
FCMOVNB ST0,STi C0H+i (P6)
FCMOVNE ST0,STi C8H+i (P6)
FCMOVNBE ST0,STi D0H+i (P6)
FCMOVNU ST0,STi D8H+i (P6)
FCOMPI ST0,STi F0H+i (P6)
ESC 4 (First byte = DCh)
==========================
ESCAPE 100 MMRRRMMM
==========================
Operation
RRR If MM<>11 If MM=11
000 FADD mem64r FADD ST(i),ST
001 FMUL mem64r FMUL ST(i),ST
010 FCOM mem64r FCOM ST(i)
011 FCOMP mem64r FCOMP ST(i)
100 FSUB mem64r FSUB ST(i),ST
101 FSUBR mem64r FSUBR ST(i),ST
110 FDIV mem64r FDIV ST(i),ST
111 FDIVR mem64r FDIVR ST(i),ST
ESC 5 (First byte = DDh)
==========================
ESCAPE 101 MMRRRMMM
==========================
Operation
RRR If MM<>11 If MM=11
000 FLD mem64r FFREE ST(i)
001 FXCH ST(i)
010 FST mem64r FST ST(i)
011 FSTP mem64r FSTP ST(i)
100 FNRSTOR mem
101
110 FNSAVE mem FUCOM ST(i)
111 FSTSW mem FUCOMP ST(i)
Note: FRICHOP have opcode (DDh FCh) (Cyrix)
ESC 6 (First byte = DEh)
==========================
ESCAPE 110 MMRRRMMM
==========================
Operation
RRR If MM<>11 If MM=11
000 FIADD mem16i FADDP ST(i),ST
001 FIMUL mem16i FMULP ST(i),ST
010 FICOM mem16i FCOMP ST(i),ST
011 FICOMP mem16i
100 FISUB mem16i FSUBP ST(i),ST
101 FISUBR mem16i FSUBRP ST(i),ST
110 FIDIV mem16i FDIVP ST(i),ST
111 FIDIVR mem16i FDIVRP ST(i),ST
Note: FCOMPP have opcode (DEh D9h) (Intel and all)
ESC 7 (First byte = DFh)
==========================
ESCAPE 111 MMRRRMMM
==========================
Operation
RRR If MM<>11 If MM=11
000 FILD mem16i FFREE ST(i)
001 FXCH ST(i)
010 FIST mem16i FST ST(i)
011 FISTP mem16i FSTP ST(i)
100 FBLD mem80b
101 FILD mem64i
110 FBSTP mem80b
111 FISTP mem64i
Note: Next Instruction have opcodes:
Mnemonic Opcode
FNSTSW AX DFh E0h (287+)
FNSTDW AX DFh E1h (387SL Mobile)
FSTSG AX DFh E2h (387SL Mobile)
FRINEAR DFh FCh (Cyrix)
FUCOMIP ST0,STi DFH E8H+i (P6)
FCOMIP ST0,STi DFH F0H+i (P6)
------------------------------------------------------------
APPENDIX F2 CPUs AND INSTRUCTION SET
Note:
Here Provided small note about Additional Instruction Sets:
P5 P6 MMX EMMX 3DNow! SIMD
Pentium +
Pentium/wMMX + +
Pentium Pro + +
Pentium II + + +
Celeron + + +
Pentium III + + + +
AMD K5 +
AMD K6 + +
AMD K6-2 + + +
AMD K6-3 + + +
Cyrix Cx6x86 (1)
Cyxix Cx6x86MX + + + +
Cyrix MII + + + +
IDT C6 + +
IDT WinChip 2 + + +
(1) - Not support CPUID
------------------------------------------
APPENDIX G
BUGS & CPU IDENTIFICATION INFO
1) How to separate i386SX and i386DX
(Cx486SLC and Cx486DLC)
Note: With 386DX type CPU possible to used
287 class NPX, and bit 4 in CR0
ET - Extention Type on DX we may to
clear to 0, but for SX and REAL 486
this bit always 1.
Routine:
mov eax,cr0
push eax
and al,0efh
mov cr0,eax
mov eax,cr0
test al,10h
pop eax
mov cr0,eax
jne SX/SLC
jmp DX/DLC
2) How to separate i486SX and i487SX/i486DX/DX2 etc
Routine:
memory_location DW ?
mov memory_location,0
fninit
fstcw memory_location
cmp memory_location,037Fh
jz i486SX
jmp i486DX/DX2etc/i487SX
3) How to separate Cyrix's CPUs and other
Be sure that Your CPU no Pentium before
UMOV executed on Intel and other in
Non SM modes as MOV.
But Cyrix executed this instruction as
Double NOP, and never generate INT 6.
So.
Mem_Loc DW 1
xor ax,ax
umov ax,Mem_Loc
or ax,ax
jz Cyrix
jmp No_Cyrix
4) Standart Way: Part 1
(Intel recomended this way)
pushf
pop ax
and ax,0fffh ; Clear bits 15..12
push ax
popf
pushf
pop ax
and ax,0f000h ; Is bits 15..12=0 ?
jz 286_CPU
and ax,8000h ; Is bit 15=0
jz 386_and_Higher
jmp 86_88and186_186etc
5) How separate 86/88, 186/188 and NECs
mov ax,1
mov cl,33
shl ax,cl
jnz 186_188
pusha ; Executed on 8086/8088 as JMP $+2
stc
jc NECs
jmp 86_88
6) Non CMOS 8086/88 execute command MOV CS,xxxx (Opcode 8Eh ...)
CMOS 80C86/88 ignore it.
7) Then Invalid Opcode NEC/Sony V40/V50 do INT 6
NEC/Sony V20/V30 don't.
8) Remember POP CS instruction on non-CMOS 8086/8088.
9) PUSH SP
286 placed in stack new value of SP
86/88 old.
10) Best way to Reset 286+ in Real Mode:
mov sp,1 (LOW BOUND)
push smth
note:
mov sp,ffffh (HIGH BOUND)
pop smth
caused non Stack Fault, but GPF.
11) Maximal Length of Instructian
86: N/R
286: 10 byte
386+: 15 byte
12) UMC Chips Detection (UMC U486SX, for other use CPUID)
db 64h,0dbh ; look like "SETALC FS:", but it none
cmp eax,0ab6b1b07h
je u486SX
jne Other
13) MSW on 386/486
On 386 MSR reserved bits = 1, so Real Mode 386 usually MSW = FFF0
Real Mode 486+ usually MSW = 0010
smsw ax
and ah,ah
jnz cpu_386
jz cpu_486_and_more
14) Selectors PUSH
486 write 2 bytes to stack and ADD ESP,4
Pentium Write all 4 bytes (and two of it are zero)
(The same situation, then pushing 16-bit error code on exception)
15) TSS I/O Map Addressing
Then I/O Map Base Address in TSS contain for example FFFFh,
(don't forget TSS Limit)
i486 wrap around segment and access invalid address near start of TSS.
Pentium caused GPF.
16) Prefetcher
up to 486 and 486 then instruction fetched to prefetcher and we write
into memory area, where this instruction placed, will be execute
already-prefetched command, but non-new.
Pentium flush prefetcher, when detect modify of fetched cache line,
so, for avoid this flush use different linear addresses for modify.
CPU Size_of_prefetch_queue Number_of_empty_bytes_in
(bytes) queue_needed_for_initiate
prefetch_cycle
8086/186/V20 6 2
8088/188/V30 4 1
286 6 2
386SX 16 2
386DX 16 4
17) DR4/DR5 :))
on 486 then accessing DR4/DR5 CPU accessed DR6/DR7.
on Pentium if CR4.DE=0 the same situation as on 486,
but if CR4.DE=1 then MOV from/to DR4/DR5 caused GPF.
18) NexGen Nx586
On Pentium and 486 we cannot set ET flag in CR0.
We may set ET flag in CR0.
(On 386 we may set this flag too).
19) IDIV
if result of IDIV will be 80h (byte IDIV) or 8000h (word IDIV)
86/88 caused INT 0 - Division by zero,
on 286+ 80h/8000h keeps as result and no exception
20) Division by zero
On 86/88 pointer in stack then caused Division by zero
pointed to DIV/IDIV instruction,
on 286+ pointed to next instruction.
21) FPU Exception
So, then FPU command with prefixes caused exception
on 86/88 pointer to failed instruction on stack pointed to ESC command,
on 386+ pointed to one of prefixes before ESC.
22) String commands
if while 86/88 execute string instruction interrupt caused,
CPU end execute instruction and goto next instruction,
CX,SI and DI have values after last complete iteration
To avoid it, use:
pushf
cli
rep STRING
popf
23) How to separate C&T 386 CPU form other (AMD,Intel)
(C&T none have POPAD bug, but Intel and AMD have)
mov esi,32
mov eax,12345678h
loop:
mov ebx,eax
mov edx,0
mov esi,0
pushad
popad
mov ecx,[edx+edi]
cmp eax,ebx
jnz AMD_Intel
rol eax,1
dec esi
jnz loop
jmp C_T_CPUs
------------------------------------------------
APPENDIX H
Internal Names Of Processors
(Intel)
P9 i386SX
P4 i486DX
P4S i486SX
P23S i487SX
P23T OverDrive for PGA(169)
P4T OverDrive for PGA(168)
P24S i486DX2
P24T Pentium OverDrive for i486DX2 socket 3 (Vcc=5V,core=3V).
P24CT Pentium OverDrive for Socket 3 (Vcc=3V)
P5 Pentium-60,66
P5T Overdrive for P5 socket (120/133 MHz).
P54C Pentium-90,100,75 x1.5 usually with APIC and Multiprocessing features
P54CS Pentium-120,133 x2 with reduced APIC and multipr. features
P55C Pentium w/MMX
P54LM Pentium P54C with 2.9V (for Notebooks)
P24C IntelDX4
P24D i486DX2 with WB cache (IntelDX2 (tm) WriteBack Enhanced)
P54M Overdrive ( include to P54C but P54C work too)
P6 Pentium Pro (no comments)
P6T Pentium Pro OverDrive (for extended Pentium Sockets)
P7 "Merced" (IA-64, VLIW command set "Tahoe")
P54CSQ 3xCLK Pentiums P120 etc.
P54CSLM P54CS with Low Power.
P6L Pentium II "Klamath" (P6+MMX, Slot 1, 66 MHz bus, L2 speed CLK/2)
Pentium II "Deschutes" (modernized Klamath, Slot 1, 66 or 100 MHz bus,
L2 speed CLK/2)
Celeron "Covington" (Slot1, Deschutes w/o L2 cache)
Celron "Mendocino" (Slot1, L2 speed at CLK)
Pentium II Xeon "Xeon" (Slot2, L2 speed at CLK)
Pentium III "Katmai" (Slot1, 100MHz system bus, SIMD (MMX2/KNI))
Pentium III Xeon "Tanner" (Slot2, 100MHz system bus, L2 speed at CLK)
P68 "Willamette" (Next gen P6: Pentium IV?)
"Dixon" (Mendocino, with L2 256KB)
"Coppermine" (future high-tech Pentium III 0.18m)
"Cascades" (future high-tech Pentium III Xeon)
"Foster" (THE LAST IA-32 INTEL CPU) :(
"McKinley" (Second Generation Merced)
(Cyrix)
M5 Cx486S/S2
M6 Cx486D/D2
C6 Cx487D
M7 Cx486DX/Cx486DX2
M8 Cx486DX4
M1 Cx6x86
M1SC Cx5x86
M1R Cx6x86L (0.35 mkm, reduced due size)
M2 Cx6x86MX
MII
MIII "Jalapeno" (may be will support 3DNow! :)
MediaGX (Integerated PCI and some perepheria)
GXm (MMX-version of MediaGX)
(AMD)
SSA/5 Am5k86 early series (K5 with big due size and with reduced some
features, 'cos don't work).
K5 Am5k86
K6 (IA MMX support)
K6-2 (3DNow!+ some extensions)
K6-III "Sharptooth" (K6-2 + L2 cache)
K7 (Slot A,512KB..8M L2 at Clk,Clk/2,Clk/3, 500MHz or higher)
(IDT)
C6 Winchip (MMX)
C2 "Winchip 2" (+3DNow! and higher cache)
"Winchip 4"
(Rise)
-------------------------------------------------
APPENDIX I FORMAT OF DEBUG CONTROL REGISTERS (DR6/DR7)
+---------+
| DR6 |
+---------+
[Am386xx/i386xx/i486xx/Am486xx]
3322222222221111 1 1 1 111
1098765432109876 5 4 3 210987654 3 2 1 0
----------------------------------------
0000000000000000 B B B 000000000 B B B B
T S D 3 2 1 0
----------------------------------------
[Intel Pentium]
3322222222221111 1 1 1 111
1098765432109876 5 4 3 210987654 3 2 1 0
----------------------------------------
1111111111111111 B B B 111111111 B B B B
T S D 3 2 1 0
----------------------------------------
[Cyrix Cx486DX,TI 486SXLC, TI 486SLC/e]
3322222222221111 1 1 1 111
1098765432109876 5 4 3 210987654 3 2 1 0
----------------------------------------
1111111111111111 B B 0 011111111 B B B B
T S 3 2 1 0
----------------------------------------
[TI 486SXL/Cx486SLC]
3322222222221111 1 1 1 111
1098765432109876 5 4 3 210987654 3 2 1 0
----------------------------------------
1111111111111111 B B 1 011111111 B B B B
T S 3 2 1 0
----------------------------------------
[IBM 486SLC2]
3322222222221111 1 1 1 1 11
1098765432109876 5 4 3 2 10987654 3 2 1 0
-----------------------------------------
0000000000000000 B B B B 00000000 B B B B
T S D K 3 2 1 0
----------------------------------------
[AMD Am486SXLV/Am386DXLV/Am386SXLV]
3322222222221111 1 1 1 1 11
1098765432109876 5 4 3 2 10987654 3 2 1 0
-----------------------------------------
0000000000000000 B B B S 00000000 B B B B
T S D M 3 2 1 0
M
S
----------------------------------------
[Cyrix Cx6x86] [Cx6x86MX]
3322222222221111 1 1 1 1 11
1098765432109876 5 4 3 2 10987654 3 2 1 0
-----------------------------------------
0000000000000000 B B 0 0 11111111 B B B B
T S 3 2 1 0
----------------------------------------
BT - Debug Trap due to Task Switch
BS - Debug Trap due to Single-Step
BD - Debug Fault due to attemped registeracess when GD bit set
BK - Debug Trap due to ICE
This bit set if exception 1 will invoked due to occurence of
ICEMD interrupt or ICEBP software breakpoint.
SMMS - SMM Status
if = 1 SMM is entered
B3 - Debug fault/trap due to Breakpoint # 3
B2 - Debug fault/trap due to Breakpoint # 2
B1 - Debug fault/trap due to Breakpoint # 1
B0 - Debug fault/trap due to Breakpoint # 0
+--------+
| DR7 |
+--------+
[Am386xx/i386xx/i486xx/Am486xx]
[TI486SXL/Cx486SLC]
33 22 22 22 22 22 11 11 11 1 111
10 98 76 54 32 10 98 76 54 3 210 9 8 7 6 5 4 3 2 1 0
----------------------------------------------------
LL RR LL RR LL RR LL RR 00 G 000 G L G L G L G L G L
EE // EE // EE // EE // D E E 3 3 2 2 1 1 0 0
NN WW NN WW NN WW NN WW
33 33 22 22 11 11 00 00
----------------------------------------------------
[Pentium/Cx486DX/Cx486DX2/Cx486DX4]
[TI486SLC/e / TI486SXLC/Cx6x86] [Cx6x86MX]
33 22 22 22 22 22 11 11 11 1 111
10 98 76 54 32 10 98 76 54 3 210 9 8 7 6 5 4 3 2 1 0
----------------------------------------------------
LL RR LL RR LL RR LL RR 00 G 001 G L G L G L G L G L
EE // EE // EE // EE // D E E 3 3 2 2 1 1 0 0
NN WW NN WW NN WW NN WW
33 33 22 22 11 11 00 00
----------------------------------------------------
[IBM486SLC2]
33 22 22 22 22 22 11 11 1 1 1 1 1 1
10 98 76 54 32 10 98 76 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
-------------------------------------------------------
LL RR LL RR LL RR LL RR T T G T G 0 G L G L G L G L G L
EE // EE // EE // EE // T B D P M E E 3 3 2 2 1 1 0 0
NN WW NN WW NN WW NN WW
33 33 22 22 11 11 00 00
-------------------------------------------------------
[Am486SXLV/Am386DXLV/Am386SXLV]
33 22 22 22 22 22 11 11 111 1 11
10 98 76 54 32 10 98 76 543 2 10 9 8 7 6 5 4 3 2 1 0
-----------------------------------------------------
LL RR LL RR LL RR LL RR 000 S 00 G L G L G L G L G L
EE // EE // EE // EE // M E E 3 3 2 2 1 1 0 0
NN WW NN WW NN WW NN WW I
33 33 22 22 11 11 00 00 E
----------------------------------------------------
[Am486xx]
33 22 22 22 22 22 11 11 111111
10 98 76 54 32 10 98 76 543210 9 8 7 6 5 4 3 2 1 0
----------------------------------------------------
LL RR LL RR LL RR LL RR 000000 G L G L G L G L G L
EE // EE // EE // EE // E E 3 3 2 2 1 1 0 0
NN WW NN WW NN WW NN WW
33 33 22 22 11 11 00 00
----------------------------------------------------
LENi - Length of Breakpoint
00 - byte
01 - word
10 - undefined
11 - dword
R/Wi - Reaw/Write Instructions Enable
00 - Instruction Execute cause Debug Interrupt
01 - Data Writes only
10 - I/O Reads or Writes
11 - Data Reads or Writes
GD - Global Debug Register Access Protect
INT 1 will be caused if any instructions will be read/write
DRs. This bit cleared when invoking Debug Exception.
GE - Global Exact
Any data breakpoint traps will be reported exactly after
competition of the instruction that caused the operand
transfer.
LE - Local Exact (Cleared on Task Switches)
Note: 486+ always does exact data breakpoint matches,
regardless of GE/LE bits. But 386 not.
G3 - Global Enable Breakpoint # 3
L3 - Local Enable Breakpoint # 3 (Cleared on Task Switches)
G2 - Global Enable Breakpoint # 2
L2 - Local Enable Breakpoint # 2 (Cleared on Task Switches)
G1 - Global Enable Breakpoint # 1
L1 - Local Enable Breakpoint # 1 (Cleared on Task Switches)
G0 - Global Enable Breakpoint # 0
L0 - Local Enable Breakpoint # 0 (Cleared on Task Switches)
TT - Enable Task Trace Messages (to External ICE hardware)
TB - Enable Branch Trace Messages (to External ICE hardware)
TP - Exception 1 Handler Entry Convention
if TP=0 exception 1 will interrupt 1 in user address space
if TP=1 exception 1 will enter ICE mode
GM - Enable Global Mapping
if =1 Enable Mapping user memory addresses into ICE space.
(Paging Must be disabled)
SMIE - Software SMI Enable
if = 1 enable
Note:
DR7: Undocument features on Intel's CPUs.
see IBM 486SLC2. All this bits in DR7 exist on Intel CPUs,
but where thay are undocument. (bits 15,14,12).
-------------------------------------------------
APPENDIX I FORMAT OF DEBUG DATA REGISTERS (except DR0-DR5)
+---------+ +---------+
| DR4 | | DR5 |
+---------+ +---------+
DR4 and DR5 physically not exist, but then You accessing it using
MOV from/to DR, thay are aliasing to DR6,DR7.
+---------+
| DR3 |
+---------+
[386+]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
BREAKPOINT_3_LINEAR_ADDRESS
--------------------------------
+---------+
| DR2 |
+---------+
[386+]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
BREAKPOINT_2_LINEAR_ADDRESS
--------------------------------
+---------+
| DR1 |
+---------+
[386+]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
BREAKPOINT_1_LINEAR_ADDRESS
--------------------------------
+---------+
| DR0 |
+---------+
[386+]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
BREAKPOINT_0_LINEAR_ADDRESS
--------------------------------
-------------------------------------------------
APPENDIX K FORMAT OF CACHE TEST REGISTER (TR4/TR5/TR3)
+-------+
| TR4 |
+-------+
[i486xx/Cx486xx]
332222222222111111111 1
109876543210987654321 0 987 6543 210
-------------------------------------
TTTTTTTTTTTTTTTTTTTTT V LLL VVVV %%%
AAAAAAAAAAAAAAAAAAAAA RRR AAAA
GGGGGGGGGGGGGGGGGGGGG UUU LLLL
IIII
DDDD
--------------------------------------
[Cx486SXL/e]
3322222222221111111111
10987654321098765432109 8 7 6543 210
-------------------------------------
TTTTTTTTTTTTTTTTTTTTTTT % L VVVV 000
AAAAAAAAAAAAAAAAAAAAAAA R AAAA
GGGGGGGGGGGGGGGGGGGGGGG U LLLL
IIII
DDDD
-------------------------------------
[WB-Enhanced IntelDX2 WB-mode]
332222222222111111111 1
109876543210987654321 0 987 65432 1 0
--------------------------------------
TTTTTTTTTTTTTTTTTTTTT % LLL %%%%% V V
AAAAAAAAAAAAAAAAAAAAA RRR H L
GGGGGGGGGGGGGGGGGGGGG UUU
--------------------------------------
[IntelDX4]
33222222222211111111 1 1
10987654321098765432 1 0 987 6543 210
--------------------------------------
TTTTTTTTTTTTTTTTTTTT % V LLL VVVV %%%
AAAAAAAAAAAAAAAAAAAA RRR AAAA
GGGGGGGGGGGGGGGGGGGG UUU LLLL
IIII
DDDD
--------------------------------------
[WB-Enhanced IntelDX4 WB-mode]
33222222222211111111 11
10987654321098765432 10 987 65432 10
--------------------------------------
TTTTTTTTTTTTTTTTTTTT %% LLL %%%%% V V
AAAAAAAAAAAAAAAAAAAA RRR H L
GGGGGGGGGGGGGGGGGGGG UUU
--------------------------------------
[TI486SXL]
3322222222221111111 111
1098765432109876543 21098 7 6543 2 10
--------------------------------------
TTTTTTTTTTTTTTTTTTT %%%%% L VVVV V 00
AAAAAAAAAAAAAAAAAAA R AAAA A
GGGGGGGGGGGGGGGGGGG U LLLL L
IIII I
DDDD D
B
--------------------------------------
[AMD Enhanced 486 CPU with EXT=0]
33222222222211111111 1 1
10987654321098765432 1 0 987 6543 210
--------------------------------------
TTTTTTTTTTTTTTTTTTTT 0 V LLL VVVV %%%
AAAAAAAAAAAAAAAAAAAA RRR AAAA
GGGGGGGGGGGGGGGGGGGG UUU LLLL
IIII
DDDD
--------------------------------------
[AMD Enhanced 486 CPU with EXT=1]
3 32 2 22 22 22 22 111111111 1
1 09 8 76 54 32 10 987654321 0 987 6543 210
--------------------------------------------
% SS % SS SS SS SS %%%%%%%%% V LLL VVVV %%%
TT TT TT TT TT RRR AAAA
nn 33 22 11 00 UUU LLLL
IIII
DDDD
--------------------------------------------
[Cyrix Cx6x86]
33222222222211111111 11
10987654321098765432 1098 76 54 3210
--------------------------------------
TTTTTTTTTTTTTTTTTTTT %%%% MM MM MMMM
AAAAAAAAAAAAAAAAAAAA EE EE RRRR
GGGGGGGGGGGGGGGGGGGG SS SS UUUU
II II
UU LL
--------------------------------------
[Cyrix Cx6x86MX]
3322222222221111111111
109876543210987654321098765432 10
---------------------------------
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
---------------------------------
VALUD - dwords (or other size units) of Cache Line which Valid
LRU - LRU
V - is cache line entry valid
TAG - Tag of cache line
VL,VH - Define MESI state of line
VH VL State
1 1 M
0 1 E
1 0 S
0 0 I
VALIDB - Valid of Cache Line
STn - State of Cache Line (MESI)
ST3 - State of 3rd dword of cache line (MESI)
ST2 - State of 2nd dword of cache line (MESI)
ST1 - State of 1st dword of cache line (MESI)
ST0 - State of 0 dword of cache line (MESI)
00 - Invalid
01 - Exclusive
10 - Modified
11 - Shared
MESIU - Upper Sector of Cache Line MESI state
00 - Modified
01 - Shared
10 - Exclusive
11 - Invalid
MESIL - Lower Sector of Cache Line MESI state
00 - Modified
01 - Shared
10 - Exclusive
11 - Invalid
MRU - Used for Determinate LRU line
ADDR - Physical Address of Cache Line
+--------+
| TR5 |
+--------+
[i486xx/Am486xx/Cx486xx]
332222222222111111111 1
109876543210987654321 0987654 32 10
-------------------------------------
%%%%%%%%%%%%%%%%%%%%% SSSSSSS EE CC
EEEEEEE NN TT
TTTTTTT TT LL
--------------------------------------
[TI486SXL/e]
33222222222211111111 11
10987654321098765432 10987654 3 2 10
--------------------------------------
%%%%%%%%%%%%%%%%%%%% SSSSSSSS % E CC
EEEEEEEE N TT
TTTTTTTT T LL
--------------------------------------
[WB-Enhanced IndelDX2 WB-mode]
332222222222111111 1 11 1
109876543210987654 3 21 0987654 32 10
---------------------------------------
%%%%%%%%%%%%%%%%%% S %% SSSSSSS EE CC
L EEEEEEE NN TT
F TTTTTTT TT LL
--------------------------------------
[IntelDX4]
33222222222211111111 11
10987654321098765432 10987654 32 10
-------------------------------------
%%%%%%%%%%%%%%%%%%%% SSSSSSSS EE CC
EEEEEEEE NN TT
TTTTTTTT TT LL
--------------------------------------
[WB-Enhanced IntelDX4 WB-mode]
332222222222111111 1 1 11
109876543210987654 3 2 10987654 32 10
-------------------------------------
%%%%%%%%%%%%%%%%%% S % SSSSSSSS EE CC
L EEEEEEEE NN TT
F TTTTTTTT TT LL
-------------------------------------
[TI486SXL]
3322222222221111111 1 11
1098765432109876543 2 10987654 32 10
-------------------------------------
%%%%%%%%%%%%%%%%%%% W SSSSSSSS EE CC
A EEEEEEEE NN TT
Y TTTTTTTT TT LL
-------------------------------------
[AMD Enhanced 486 in WT-mode]
3322222222221111111 1 11
1098765432109876543 2 10987654 32 10
-------------------------------------
%%%%%%%%%%%%%%%%%%% ( SSSSSSSS EE CC
S EEEEEEEE NN TT
E TTTTTTTT TT LL
T
)
-------------------------------------
[AMD Enhanced 486 in WB-mode]
332222222222 1 11 1111 1 11
109876543210 9 87 6543 2 10987654 32 10
-------------------------------------
%%%%%%%%%%%% E SS %%%% ( SSSSSSSS EE CC
X TT S EEEEEEEE NN TT
T E TTTTTTTT TT LL
T
)
-------------------------------------
[Cx6x86]
332222222222111111 11 11
109876543210987654 32 1098765 432 10
-------------------------------------
%%%%%%%%%%%%%%%%%% WW SSSSSSS EEE CC
AA EEEEEEE NNN TT
YY TTTTTTT TTT LL
-------------------------------------
[Cx6x86MX]
33222222 2 222 1 111 1111 11
10987654 3 210 9 876 5432 1098 76 54 32 10
------------------------------------------
%%%%%%%% S %%% V MMM %%%% MMMM %% SS %% CC
M EEE RRRR EE TT
I SSS UUUU TT LL
III
------------------------------------------
CTL - Control (Select operation)
00 - Enable (Fill Buffer Write/Read Buffer Read)
01 - Perform Cache Line Write
10 - Perform Cache Line Read
11 - Perform Cache Line Flush
ENT - Select Entry for Operation
SET - Select Set for Operation
SLF -
WAY - Select Way for Operation
ST - State of set will be writing during write operation
00 - Invalid
01 - Exclusive
10 - Modified
11 - Shared
EXT - Extension
if EXT=0 bits 31..11 of TR4 contain TAG
if EXT=1 bits 31..11 of TR4 contain STi
SMI - SMI Address bit. Select separate/cachable SMI code/data space.
V,MESI - Select Valid & MESI
V MESI Description
1 000 Modified
1 001 Shared
1 010 Exclusive
0 011 Invalid
1 100 Locked Valid
0 111 Locked Invalid
else Undefined
MRU - Used for determinate LRU.
+-------+
| TR3 |
+-------+
[any,which support Cache Testing (all 486+)]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
___________CACHE_DATA___________
--------------------------------
CACHE_DATA - Data which will be reading/writing to/from cache line part.
-------------------------------------------------
APPENDIX L FORMAT OF BTB TEST REGISTER (TR1/TR2)
Note: This kind of registers present only on Cx6x86 and may be
on Cx6x86MX.
+-------+
| TR1 |
+-------+
[Cx6x86]
3322222222221111111111
10987654321098765432109876 543 210
----------------------------------
?????????????????????????? III ???
DDD
XXX
----------------------------------
IDX - Index of Register in BTB control space, which may be accessed via TR2.
+-------+
| TR2 |
+-------+
[Cx6x86]
3322222222221111111111
10987654321098765432109876543210
--------------------------------
_____________DATA_______________
--------------------------------
DATA - data which will be reading/writing from/to BTB control space registers.
Note: Refer to Appendix A5 for more details.
-------------------------------------------------
APPENDIX K FORMAT OF TLB TEST REGISTER (TR6/TR7)
Note: Pentium and Higher Intel CPUs not support Test registers (TRs) at all.
+-------+
| TR6 |
+-------+
[i386xx] [i486xx] [TI486SXL]
33222222222211111111 1 1
10987654321098765432 1 0 9 8 7 6 5 4321 0
-----------------------------------------
LLLLLLLLLLLLLLLLLLLL V D D U U W W %%%% O
AAAAAAAAAAAAAAAAAAAA # # # P
DDDDDDDDDDDDDDDDDDDD
DDDDDDDDDDDDDDDDDDDD
RRRRRRRRRRRRRRRRRRRR
-----------------------------------------
[Cx6x86]
33222222222211111111 1 1
10987654321098765432 1 0 9 8 7 6 5 4 3 210
------------------------------------------
LLLLLLLLLLLLLLLLLLLL V D D U U W W A A CCC
AAAAAAAAAAAAAAAAAAAA # # # # MMM
DDDDDDDDDDDDDDDDDDDD DDD
DDDDDDDDDDDDDDDDDDDD
RRRRRRRRRRRRRRRRRRRR
------------------------------------------
[Cx6x86MX]
33222222222211111111 1 1
10987654321098765432 1 0 9 8 7 6 5 4 3 210
------------------------------------------
LLLLLLLLLLLLLLLLLLLL V D P U 0 W 0 A 0 CCC
AAAAAAAAAAAAAAAAAAAA G MMM
DDDDDDDDDDDDDDDDDDDD DDD
DDDDDDDDDDDDDDDDDDDD 222
RRRRRRRRRRRRRRRRRRRR
------------------------------------------
LADDR - Linear Address
V - Valid bit for TLB entry
D,D# - The Dirty Bit for/from TLB entry (Normal and Reverse)
U,U# - The User/Supervisor bit for/from TLB Entry (Normal and Reverse)
W,W# - The Read/Write bit for/from TLB entry (Normal and Reverse)
OP - Operation
0 - TLB Write
1 - TLB LookUp
A,A# - The Accessed Bit (Normal and Reverse)
CMD - Array Command Select
000 - Direct Write to main TLB
001 - TLB lookup for an linear address in all arrays
100 - Write to variable page size mask only
110 - Write to variable page size, linear and physical addreses
101 - Read variable page size and linear address.
111 - Read variable page size cache physical and linear address
PG - Page Global bit
CMD2 - Array Command Select
Value Description
x00 - Write to L1 TLB
x01 - Write to L2 TLB
010 - Read from L1 TLB X-port
011 - Read from L2 TLB X-port
110 - Read from L1 TLB Y-port
111 - Read from L2 TLB Y-port
+-------+
| TR7 |
+-------+
[i386xx]
33222222222211111111 11
10987654321098765432 1098765 4 32 10
-------------------------------------
PPPPPPPPPPPPPPPPPPPP %%%%%%% H RR %%
HHHHHHHHHHHHHHHHHHHH T EE
YYYYYYYYYYYYYYYYYYYY PP
SSSSSSSSSSSSSSSSSSSS
-------------------------------------
[i486xx] [TI486SXL]
33222222222211111111 1 1
10987654321098765432 1 0 987 65 4 32 10
---------------------------------------
PPPPPPPPPPPPPPPPPPPP P P LLL %% R RR %%
HHHHHHHHHHHHHHHHHHHH C W RRR P PP
YYYYYYYYYYYYYYYYYYYY D T UUU S //
SSSSSSSSSSSSSSSSSSSS / HH
H LL
I
---------------------------------------
[Cx6x86]
33222222222211111111 1 1
10987654321098765432 1 0 987 6 5 4 3 210
----------------------------------------
PPPPPPPPPPPPPPPPPPPP P P BBB % H H H %%%
HHHHHHHHHHHHHHHHHHHH C W III V D B
YYYYYYYYYYYYYYYYYYYY D T
SSSSSSSSSSSSSSSSSSSS
----------------------------------------
[Cx6x86MX]
33222222222211111111 1 1
10987654321098765432 1 0 987 6 5 4 3 210
----------------------------------------
PPPPPPPPPPPPPPPPPPPP P P SSS % H H % HHH
HHHHHHHHHHHHHHHHHHHH C W EEE 1 2 SSS
YYYYYYYYYYYYYYYYYYYY D T TTT EEE
SSSSSSSSSSSSSSSSSSSS TTT
----------------------------------------
PHYS - Physiacl Address
HT - TLB Lookup Hit
REP - Replacement Pointer
PCD - Page Cache Disable
PWT - Page Write Throught
LRU - LRU
RPS/HI - Replacement Pointer Select (writes)/Hit Indication (LookUp)
RP/HL - Replacement Pointer (writes)/Hit Location (LookUp)
BI - Cell Index for victim TLB and block cache operation.
HV - Victim TLB Hit
HD - Main TLB Hit
HB - Variable-size Paging Mechanism Hit
SET - L2 TLB Set Selection (0..5h)
H1 - Hit in L1 TLB
H2 - Hit in L2 TLB
HSET - L2 set selection when L2 TLB hit occures (0h..5h)
----------------------------------------------------
APPENDIX N EFLAGS register format
+---------+
| EFLAGS |
+---------+
[Pentium P5] [Pentium P54C] [IntelDX4] [Am5k86]
[Pentium Pro] [Pentium II] [Am6k86] [Pentium w/MMX (P55C)]
3322222222 2 2 1 1 1 1 1 1 11 1 1
1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0
-----------------------------------------------------
I V V A V R N IO O D I T S Z A P C
0000000000 D I I C M F 0 T PL F F F F F F 0 F 0 F 1 F
P F
-----------------------------------------------------
[i486 SL Enhanced SX,DX,DX2] [IntelSX2] [Cx5x86]
[UMC] [Cx6x86] [Cx6x86MX]
3322222222 2 2 1 1 1 1 1 1 11 1 1
1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0
-----------------------------------------------------
I A V R N IO O D I T S Z A P C
0000000000 D 0 0 C M F 0 T PL F F F F F F 0 F 0 F 1 F
-----------------------------------------------------
[i486 SX,DX,DX2] [OverDrive] [M5,M6,M7] [AMD Am486DX/DXL/DX2/DXL2 ] etc
[IBM BL486DX/DX2] [Cx486SLC/DLC/SLC2/DLC2] [NexGen Nx586]
3322222222 2 2 1 1 1 1 1 1 11 1 1
1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0
-----------------------------------------------------
A V R N IO O D I T S Z A P C
0000000000 0 0 0 C M F 0 T PL F F F F F F 0 F 0 F 1 F
-----------------------------------------------------
[i386 SX,DX,CX,EX] [AMD Am386 ] [C&T 38600 ] etc
[IBM 486SLC2]
3322222222 2 2 1 1 1 1 1 1 11 1 1
1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0
-----------------------------------------------------
V R N IO O D I T S Z A P C
0000000000 0 0 0 0 M F 0 T PL F F F F F F 0 F 0 F 1 F
-----------------------------------------------------
[i376]
3322222222 2 2 1 1 1 1 1 1 11 1 1
1098765432 1 0 9 8 7 6 5 4 32 1 0 9 8 7 6 5 4 3 2 1 0
-----------------------------------------------------
R N IO O D I T S Z A P C
0000000000 0 0 0 0 0 F 0 T PL F F F F F F 0 F 0 F 1 F
-----------------------------------------------------
[i286 and all clones]
1 1 11 1 1
5 4 32 1 0 9 8 7 6 5 4 3 2 1 0
------------------------------
N IO O D I T S Z A P C
0 T PL F F F F F F 0 F 0 F 1 F
------------------------------
[NEC/Sony V20/V30]
1 1 1 1 1 1
5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
-------------------------------
M O D I T S Z A P C
D 1 1 1 F F F F F F 0 F 0 F 1 F
-------------------------------
[80x186 ,EA,EB,EC,XL] [8086/88 and all clones]
1 1 1 1 1 1
5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
-------------------------------
O D I T S Z A P C
1 1 1 1 F F F F F F 0 F 0 F 1 F
-------------------------------
Flags Summary:
ID - Identification Flag
VIP - Virtual Interrupt Pending
VIF - Virtual Interrupt Flag
AC - Align Check
VM - Virtual 8086 Mode
RF - Resume Flag
MD - Mode Flag
NT - Nested Task flag
IOPL - Input/Output Privelege Level
OF - Overflow Flag
DF - Direction Flag
IF - Interrupt Flag
TF - Trap Flag
SF - Sign Flag
ZF - Zero Flag
AF - Auxiliary Carry Flag
PF - Parity Flag
CF - Carry Flag
---------------------------------------------------
APPENDIX O OLD CONTROL REGISTERS FORMAT (CR0-CR3)
+---------+
| CR0 |
+---------+
[Pentium P5] [Pentium P54C] [Pentium Pro]
[Pentium II] [Pentium w/MMX]
[Cx6x86MX] [Am6k86] [Am5k86]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W N T E M P
G D W 0000000000 M 0 P 0000000000 E 1 S M P E
---------------------------------------------
[IntelDX4] [486DX/DX2, IntelDX4 ]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W T M P
G D W 0000000000 M 0 P 0000000000 * 1 S 1 P E
---------------------------------------------
[Cx486SLC]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C A W T E M P
G D 0 0000000000 M 0 P 0000000000 0 1 S M P E
---------------------------------------------
[Cx486DLC]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W E T E M P
G D W 0000000000 M 0 P 0000000000 0 T S M P E
---------------------------------------------
[Intel i486SX,SX2]
3 3 2 2222222221 1 1 1 111111
1 0 9 8765432109 8 7 6 5432109876 5 4 3 2 1 0
---------------------------------------------
P C N A W T E M P
G D W 0000000000 M 0 P 0000000000 * 1 S M P E
---------------------------------------------
[IBM 486SLC2]
3 32222222222111 1 111111
1 09876543210987 6 54321098765 4 3 2 1 0
---------------------------------------------
P W T E M P
G 00000000000000 P 0000000000 1 S M P E
---------------------------------------------
[Intel i386SX]
3 322222222221111111111
1 09876543210987654321098765 4 3 2 1 0
---------------------------------------------
P T E M P
G 0000000000000000000000000 1 S M P E
---------------------------------------------
[Intel i386DX]
3 322222222221111111111
1 09876543210987654321098765 4 3 2 1 0
---------------------------------------------
P E T E M P
G 0000000000000000000000000 T S M P E
---------------------------------------------
[80286]
Note: None CR0, but MSW
111111
543210987654 3 2 1 0
---------------------
T E M P
000000000000 S M P E
---------------------
PE - Protection Enable
MP - Monitor Processor
EM - Emulation
TS - Task Switch
ET - Extention Type
NE - Numeric Exception
WP - Write protect
AM - Align Mode
NW - No Write Throught
CD - Cache Disable
PG - Paging
+--------+
| CR1 |
+--------+
CR1 register not exist on x86 architecture. Usually aliased CR0.
+--------+
| CR2 |
+--------+
[386+]
3 322222222221111111111
1 0987654321098765432109876543210
---------------------------------
LAST_PAGE_FAULT_LINEAR_ADDRESS
---------------------------------
+--------+
| CR3 |
+--------+
[Intel i386xx] [Cyrix Cx486SLC]
33222222222211111111 11
10987654321098765432 109876543210
---------------------------------
PPPPPPPPPPPPPPPPPPPP %%%%%%%%%%%%
DDDDDDDDDDDDDDDDDDDD
BBBBBBBBBBBBBBBBBBBB
RRRRRRRRRRRRRRRRRRRR
---------------------------------
[Intel i486xx] [Cx6x86] [Cx6x86MX]
[Pentium] [Pentium Pro] [Pentium II]
[Pentium w/MMX]
33222222222211111111 11
10987654321098765432 1098765 4 3 210
------------------------------------
PPPPPPPPPPPPPPPPPPPP %%%%%%% P P %%%
DDDDDDDDDDDDDDDDDDDD C W
BBBBBBBBBBBBBBBBBBBB D T
RRRRRRRRRRRRRRRRRRRR
------------------------------------
see APPENDIX
PDBR - Page Directory Base Register
PCD - Page Cache Disable
PWT - Page Write Whrought
---------------------------------------------------
APPENDIX P CR4 register format
+-------+
| CR4 |
+-------+
[Katmai] [Deschutes]
3322222222221111111111
1098765432109876543210 9 8 7 6 5 4 3 2 1 0
------------------------------------------
F P P M P P D T P V
0000000000000000000000 S C G C A S E S V M
R E E E E E D I E
------------------------------------------
[Pentium Pro] [Pentium II]
3322222222221111111111
10987654321098765432109 8 7 6 5 4 3 2 1 0
-----------------------------------------
P P M P P D T P V
00000000000000000000000 C G C A S E S V M
E E E E E D I E
-----------------------------------------
[IDT C6] [IDT WinChip 2]
3322222222221111111111
10987654321098765432109 8 7 6 54 3 2 10
---------------------------------------
P M D T
00000000000000000000000 C 0 C 00 E S 00
E E D
---------------------------------------
[Cx6x86MX/MII]
3322222222221111111111
10987654321098765432109 8 7 654 3 2 10
---------------------------------------
P P D T
00000000000000000000000 C G 000 E S 00
E E D
---------------------------------------
[Pentium w/MMX]
3322222222221111111111
10987654321098765432109 8 7 6 5 4 3 2 1 0
-----------------------------------------
P M P D T P V
00000000000000000000000 C 0 C 0 S E S V M
E E E D I E
-----------------------------------------
[AMD Am5k86] [AMD Am6k86] [AMD K6-III]
3322222222221111111111
109876543210987654321098 7 6 5 4 3 2 1 0
----------------------------------------
P M P D T P V
000000000000000000000000 G C 0 S E S V M
E E E D I E
----------------------------------------
[Pentium P5] [Pentium P54C]
3322222222221111111111
1098765432109876543210987 6 5 4 3 2 1 0
---------------------------------------
M P D T P V
0000000000000000000000000 C 0 S E S V M
E E D I E
----------------------------------------
[IntelDX4] [486s SL Enhanced]
3322222222221111111111
109876543210987654321098765432 1 0
----------------------------------
P V
000000000000000000000000000000 V M
I E
----------------------------------
FSR - Fast F.P. Context save/restore Enabled
PCE - Perfomance Monitoring Counters Enabled
PGE - Page Global Extension
MCE - Machine Check Enable
PAE - Physical Address Extention
PSE - Page Size Extention
DE - Debbuging Expection
TSD - Time Stamp Disable
PVI - Protected mode Virtual Interrupt
VME - Virtual Mode Exception
------------------------------------------------------
APPENDIX Q TYPE OF INTEL'S SOCKETS
Socket # Pins Vcc CPU OverDrive Bus Clk
----------------------------------------------
1 169 5 i486SX IntelSX2 ODP ..50MHz
i486DX IntelDX2 ODP
----------------------------------------------
2 238 5 i486SX IntelSX2 ODP ..50MHz
i486DX IntelDX2 ODP
i486DX2 IntelDX4 ODP
Pentium ODP (P24T)
----------------------------------------------
3 237 3/5 i486SX IntelSX2 ODP ..50Mhz
i486DX IntelDX2 ODP
i486DX2 IntelDX4 ODP
i486SX2 Pentium ODP (P24T)
IntelDX4
----------------------------------------------
4 273 5 Pentium (P5) Pentium ODP (P5T) ..66MHz
----------------------------------------------
5 320 3.3 Pentium (P54C) Pentium ODP (P54T) ..66Mhz
----------------------------------------------
6 235 3.3 IntelDX4 Pentium ODP (P24T)
----------------------------------------------
7 321 2.9-3.3 Pentium (P54C) Pentium ODP (P54T) ..100MHz
Pentium (P55C)
----------------------------------------------
8 387 2.9-3.3 Pentium Pro(P6) Pentium Pro ODP (P6T) ..66MHz
----------------------------------------------
Socket370 370 2.9? Celeron ...100MHz
----------------------------------------------
Slot # Pins Vcc CPU Overdrive
----------------------------------------------
1 242 2.9-3.3 Pentium II 66MHz
Celeron
Pentium III
----------------------------------------------
2 330 2.0? Pentium II Xeon 100MHz
Pentium III Xeon
-----------------------------------------------
Note: The main Pentium II chip have 528 pins.
------------------------------------------------------
APPENDIX R UNDEFINED FLAGS
See CPUUTIL.ZIP for UFLAGS.COM !!
Hey, Guys! Do You really think about set of 80x86 CPU cores and
"That's mean UNDEFINED FLAGS?".
1) Do You Ask Yourself: "How many 80x86 base cores are?"
Let's discuss about definitions:
What's mean "base core"?
"Base core" mean: same core clock for instructions, same undefined
features e.t.c., and was produced many CPUs this type.
(so, i486DX2 and i486DX have same core),
(but i486DX2 and IntelDX4 have differ (cos MUL time +etc.).
(i486SX integer core is look like i486DX core without NPX and all things
joined with it).
So we have next list of Main Base Cores:
8086/8088 (186s skipped)
286
386 (have some differents on vendors)
Cx486SLC/Cx486DX (and all clones like TI486SXL)
i486
UMC U5S
Cyrix Cx5x86 (M1sc)
Pentium
NexGen Nx5x86
Cyrix Cx6x86 (M1)
AMD Am5k86
Pentium Pro
Of course one Main Base Core have many CPUs which have differents between
self, for example: TI486SXL have Cx486DLC Base Core.
This Base Cores is relative, of course.
(We may discuss Where to push C&T 38600DX etc., but it doesn't matter)
2) How many situation with Undefined Flags exists?
Not too many, as You think:
MUL
DIV
IMUL
IDIV
NEG (ZF)
AND/OR/XOR/etc (AF)
Shift/Rotates (OF)
and some more.
3) What's To Do?
Let's make next experiment:
AH = 0
AH -> FLG
PERFORM TEST SEQUENCE
FLG -> AH
GET RESULT # 1
AH = FF
AH -> FLG
PERFORM TEST SEQUENCE
FLG -> AH
GET RESULT # 2
ANALYSING RESULTS. (WHICH BIT PASSED, WHICH DRIVEN BY INSTRUCTION
Main Test Sequences are:
MUL: mov ax,0000h
mov bx,1234h
mul bx
DIV: mov ax,1234h
mov bl,22h
div bl
IMUL: mov ax,0092h
mov bl,22h
imul bl
IDIV: mov ax,0ffeeh
mov bl,22h
idiv bl
LOG: mov ax,0ff00h
mov bx,0f0fh
and ax,bx
4) Result:
Here placed summary of Undefined flag analysis on CPUs.
------------------------------------------------------------------------
CPU ------------- Sequence -------------
CORE MUL DIV IMUL IDIV LOG Note
------------------------------------------------------------------------
286 ALL ALL ALL ALL ALL as 386,i486
DRIVEN DRIVEN DRIVEN DRIVEN DRIVEN
------------------------------------------------------------------------
386 ALL ALL ALL ALL ALL as 286,i486
DRIVEN DRIVEN DRIVEN DRIVEN DRIVEN
------------------------------------------------------------------------
i486 ALL ALL ALL ALL ALL as 286,386
DRIVEN DRIVEN DRIVEN DRIVEN DRIVEN
------------------------------------------------------------------------
Cx486SLC Z,S,P,A ALL Z,S,P,A ALL AF
PASSED PASSED PASSED PASSSED PASSED
------------------------------------------------------------------------
UMC U5S Z,S,P,A ALL Z,S,P,A ALL ALL
PASSED PASSED PASSED PASSED DRIVEN
------------------------------------------------------------------------
Cx5x86 P,A C,O,P,A P,A C,O,P,A ALL
PASSED PASSED PASSED PASSED DRIVEN
------------------------------------------------------------------------
Pentium Z,S,P,A ALL Z,S,P,A ALL ALL as Pentium Pro
Pentium w/MMX PASSED DRIVEN PASSED DRIVEN DRIVEN
------------------------------------------------------------------------
Nx5x86 ???? ???? ???? ???? ???? Somebody who have
???? ???? ???? ???? ???? NexGen please contact Me.
-------------------------------------------------------------------------
Cx6x86 ALL C,O ALL C,O ALL
DRIVEN PASSED DRIVEN PASSED DRIVEN
------------------------------------------------------------------------
Am5k86 Z,S,P,A C,O Z,S,P,A C,O ALL
K6 PASSED PASSED PASSED PASSED DRIVEN
------------------------------------------------------------------------
Pentium Pro Z,S,P,A ALL Z,S,P,A ALL ALL as Pentium
Pentium II PASSED DRIVEN PASSED DRIVEN DRIVEN
Celeron
------------------------------------------------------------------------
Note: See utilites, included to this OPCODE.LST for getting UNDEFINED FLAGS
on Your processor.
All looks like Intel and AMD frozen theys Undefined Flags conception :)
---------------------------------------------------
APPENDIX S FLOATING POINT REGISTERS FORMATS
+-------+
| CW |
+-------+
[8087]
1111 1 11
6543 2 10 98 7 6 5 4 3 2 1 0
----------------------------
%%%% I RR PP I % P U O Z D I
C CC CC E M M M M M M
M
----------------------------
[80287]
1111 1 11
6543 2 10 98 76 5 4 3 2 1 0
---------------------------
%%%% I RR PP %% P U O Z D I
C CC CC M M M M M M
---------------------------
[287XL/XLT,387SX/DX and all build-in FPUs]
11111 11
65432 10 98 76 5 4 3 2 1 0
----------------------------
%%%%% RR PP %% P U O Z D I
CC CC M M M M M M
----------------------------
IC - Infinity Control
if =0 Infinity is Projective
if =1 Infinity is Affine
RC - Round Control
00 - Round to nearest or soon
01 - Round down (toward -infinity)
10 - Round up (toward +infinity)
11 - Chop (Truncate toward 0)
PC - Precension Control
00 - 24 bit
01 - Reserved
10 - 53 bit
11 - 64 bit
IEM - Interrupt Mask Enable
0 - Interrupts Enable
1 - Interrupts Disable
PM - Precension mask
UM - Underflow mask
OM - Overflow Mask
ZM - Zero Maks
DM - Denormalized operand mask
IM - Invalid Operation Mask
All other F.P registers: ST(i), TAGS, SW have same format on all FPUs.
Present some different in FPU environment, but now is no time for describe
it here.
-------------------------------------------------
APPENDIX T FORMAT OF PAGE TABLES ENTRYES
In X86 Architecture there are 3 modes of Paging:
Mode A - i386..Pentium Compatible
The selection of paging mode:
CR0.PG CR4.PAE CR4.PSE page_desc.PS Page Size Address Space Paging Mode
0 x x x ----- Paging Disable -----
1 0 0 x 4K 32bit A
1 0 1 0 4K 32bit A
1 0 1 1 4M 32bit A
1 1 x 0 4K 36bit B
1 1 x 1 2M 36bit C
+----------------------------------------------------------------------------+
| ---------------- Paging Mode A ----------- |
+----------------------------------------------------------------------------+
Format of Linear Address:
[32 bit address, 4K pages]
bit description
31..22 index in PDT (Page Directory Table)
21..12 index in PT (Page Table)
11..0 offset within Page
[32 bit address, 4M pages]
bit description
31..22 index in PDT (Page Directory Table)
21..0 offset within Page
Format of CR3 register:
-----------------
bit description
31..12 PDT base address (31..12) (PDBR)
11..5 Reserved
4 PCD
3 PWT
2..0 Reserved (0)
+----------+
| CR3.PDBR |
+----------+
| PDT (Pages
| Directory Table)
\---->+----------------+
| .... |
+----------------+ PT (Pages Table)
| PT desc. |------>+-------------------+
+----------------+ | ...... |
| .... | +-------------------+
+----------------+ | Page desc. | ---> +-----------+
| | +-------------------+ | Page in |
| | | ..... | | memory 4K |
| | +-------------------+ +-----------+
+----------------+
| 4M page desc. |-----> +----------+
+----------------+ | Page in |
| | | memory |
+----------------+ | 4Mb |
+----------+
+------------------------------+
| Format of Pages Descriptors |
+------------------------------+
[Pentium Pro,Pentium II,AMD K5,K6]
(only page directory entrys support 4MB pages)
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA G P D A P P U R P
FFFFFFFFFFFFFFFFFFFF VVV S C W / /
AAAAAAAAAAAAAAAAAAAA LLL D T S W
------------------------------------------
[Pentium,Cyrix Cx6x86MX]
(only page directory entrys support 4MB pages)
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 P D A P P U R P
FFFFFFFFFFFFFFFFFFFF VVV S C W / /
AAAAAAAAAAAAAAAAAAAA LLL D T S W
------------------------------------------
[i486 and clones]
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 0 D A P P U R P
FFFFFFFFFFFFFFFFFFFF VVV C W / /
AAAAAAAAAAAAAAAAAAAA LLL D T S W
------------------------------------------
[Cx486SLC/DLC,TI486SLC/DLC/e,TI486SXL and clones]
33222222222211111111 11
10987654321098765432 109 8 7 6 5 4 3 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 0 D A P 0 U R P
FFFFFFFFFFFFFFFFFFFF VVV C / /
AAAAAAAAAAAAAAAAAAAA LLL D S W
------------------------------------------
[i386 and all clones]
33222222222211111111 11
10987654321098765432 109 8 7 6 5 43 2 1 0
------------------------------------------
PPPPPPPPPPPPPPPPPPPP AAA 0 0 D A 00 U R P
FFFFFFFFFFFFFFFFFFFF VVV / /
AAAAAAAAAAAAAAAAAAAA LLL S W
------------------------------------------
PFA - Physical Frame address
AVL - Available for Operating System
G - Global Page (valid if PGE bit in CR4 set
PS - Page Size
=0 Directory entry (if in PDT)
4K page (if in page table)
=1 4M boundary (descriptor must be in PDT only))
D - Dirty (ignored in PDT)
A - Accessed
PCD - Page Cache disable
PWT - Page Write throught
U/S - User/Supervisor
R/W - Read/Write
P - Present
+----------------------------------------------------------------------------+
| ---------------- Paging Modes B & C ----------- |
+----------------------------------------------------------------------------+
Schemes, which used in paging modes B and C support address extension
up to 64bit, but now can be used only 36 bits of it.
Format of Linear Address:
[36 bit address, 4K pages] (mode B)
bit description
31..30 index in PDPT (Page Directory Pointers Table)
29..21 index in PDT (Page Directory Table)
20..12 index in PT (Page Table)
11..0 offset within Page
[36 bit address, 2M pages] (mode C)
bit description
31..30 index in PDPT (Page Directory Pointers Table)
29..21 index in PDT (Page Directory Table)
20..0 offset within Page
Format of CR3 register:
--------------------
bit description
31..5 PDPT base address (38..12) (PDBR)
4 PCD
3 PWT
2..0 Reserved (0)
PDPT (Page Directory
Pointer Table) +----------+
+----------+ <--------------------| CR3.PDBR |
| ... | +----------+
+----------+
| PDT desc |
+----------+
| PDT (Pages
| Directory Table)
\---->+----------------+
| .... |
+----------------+ PT (Pages Table)
| PT desc. |------>+-------------------+
+----------------+ | ...... |
| .... | +-------------------+
+----------------+ | Page desc. | ---> +-----------+
| | +-------------------+ | Page in |
| | | ..... | | memory 4K |
| | +-------------------+ +-----------+
+----------------+
| 2M page desc. |-----> +----------+
+----------------+ | Page in |
| | | memory |
+----------------+ | 2M |
+----------+
Format of Page Directory Pointer Table Entry (4 entry/PDPT):
----------------------------------
6 3 3 1 1
3 ... 6 5 ..... 2 1 ... 9 8..5 4 3 2..0
-------+---------+-------+----+-+-+----
%%%%%%%| PDT Base| | %% |P|P| %%%
%%%%%%%| Address | AVAIL | %% |C|W| %%%
%%%%%%%|(35..12) | | %% |D|T| %%%
-------+---------+-------+----+-+-+----
Format of Page Directory Table Entry (512 entry/PDT)
----------------------------
[4K pages DT]: (Mode B)
6 3 3 1 1
3 ... 6 5 ..... 2 1 ... 9 8..6 5 4 3 2 1 0
-------+---------+-------+----+-+-+-+-+-+-
%%%%%%%| PT Base | | %% | |P|P|U|R|
%%%%%%%| Address | AVAIL | %% |A|C|W|/|/|P
%%%%%%%|(35..12) | | %% | |D|T|S|W|
-------+---------+-------+----+-+-+-+-+-+-
[2M page]: (Mode C)
6 3 3 2 2 1 1
3 ... 6 5 ..... 1 0..2 1 ... 9 8 7 6 5 4 3 2 1 0
-------+---------+----+-------+-+-+-+-+-+-+-+-+-
%%%%%%%|Page Base| %% | | | | | |P|P|U|R|
%%%%%%%| Address | %% | AVAIL |G|1|D|A|C|W|/|/|P
%%%%%%%|(35..21) | %% | | | | | |D|T|S|W|
-------+---------+----+-------+-+-+-+-+-+-+-+-+-
Format of Page Table Entry (512 entry/PT):
-------------------------
[2K page]: (Mode B)
6 3 3 1 1
3 ... 6 5 ..... 2 1 ... 9 8 7 6 5 4 3 2 1 0
-------+---------+-------+-+-+-+-+-+-+-+-+-
%%%%%%%|Page Base| | | | | |P|P|U|R|
%%%%%%%| Address | AVAIL |G|0|D|A|C|W|/|/|P
%%%%%%%|(35..21) | | | | | |D|T|S|W|
-------+---------+-------+-+-+-+-+-+-+-+-+-
The means of bits same as in Paging Mode A.
-------------------------------------------------
APPENDIX U FORMAT OF DESCRIPTORS
+-------------------------------+
| Format of Generic Descriptor: |
+-------------------------------+
+00 WORD Segment Limit (Low) (15..0)
+02 WORD Segment Base (Low) (15..0)
+04 BYTE Segment Base (Mid) (23..16)
+05 BYTE Access Rights Byte (AR)
+06 BYTE Segment Limit (High) (19..16)/AR2
+07 BYTE Segment Base (High) (31..24)
This format have data and code segment descriptors.
+----------+
| AR | Access Rights Byte
+----------+
+----+----+----+----+----+----+----+----+
| P | DPL | S | | | | | [General AR]
+----+----+----+----+----+----+----+----+
P - (Present segment)
=0 segment not present
=1 segment present in memory
DPL - (Descriptor Privelege Level)
00 - Highest
11 - Lowest
S - (System)
=0 descriptor is system
=1 descriptor is segment
+----+----+----+----+----+----+----+----+
| P | DPL | 1 | E | | | | [segment AR]
+----+----+----+----+----+----+----+----+
E - (Extended Type of Segment Descriptor)
=0 data segment
=1 code segment
+----+----+----+----+----+----+----+----+
| P | DPL | 1 | 1 | C | R | A | [Code segment AR]
+----+----+----+----+----+----+----+----+
C - (Control Bit)
=0 Working rules of calling segment wia gates, using PL.
=1 Segment may be immediate called using CALL FAR from
same or more privelege segment
R - (Readable segment)
=0 Reading disable (only execution enable)
=1 Enable reading
A - (Accessable)
=0 None accesses into segment was
=1 Some accesses was
+----+----+----+----+----+----+----+----+
| P | DPL | 1 | 0 | ED | W | A | [Data segment AR]
+----+----+----+----+----+----+----+----+
ED - (Expand Down)
=0 Expand Up
=1 Expand down
W - (Writable)
=0 Write disable
=1 Write enable
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | T Y P E | [System descriptor AR]
+----+----+----+----+----+----+----+----+
TYPE - (Type of System descriptor)
0000 - Not Used
0001 - Available TSS (286 style)
0010 - LDT
0011 - Busy TSS (286 style)
0100 - Call Gate (286 style)
0101 - Task Gate (286 style)
0110 - Interrupt Gate (286 style)
0111 - Trap Gate (286 style)
1000 - Not Used
1001 - Available TSS (386 style)
1010 - Reserved
1011 - Busy TSS (386 style)
1100 - Call Gate (386 style)
1101 - Reserved
1110 - Interrupt Gate (386 style)
1111 - Trap Gate (386 style)
+--------+
| AR2 |
+--------+
+----+----+----+----+
| G | D | 0 | X |
+----+----+----+----+
G - (Granularity)
=0 Segment limit calculated in Bytes (up to 2^20 bytes)
=1 Segment limit calculated in Pages of 4K (up to 2^32 bytes)
D - (Dimensions)
=0 16 bit segment
=1 32 bit segment
Note: need for code segments, 'cos opcodes in 16-bit and 32-bit
segments are different.
X - Available for Operating System
+---------------------------------------------------------------------------+
| ------------------------ System Descriptors -----------------------------|
+---------------------------------------------------------------------------+
+-----+
| LDT |
+-----+
+00 WORD LDT Limit (Low) 15..0
+02 WORD LDT Base (15..0) (Low)
+04 BYTE LDT Base (23..16) (Mid)
+05 BYTE AR
+06 BYTE AR2
+07 BYTE LDT Base (31..24) (High)
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 0 | 1 | 0 | [AR]
+----+----+----+----+----+----+----+----+
+---------------+
| 286 Call Gate |
+---------------+
+00 WORD Offset 15..0
+02 WORD Selector
+04 BYTE Word Count (5 bit)
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 1 | 0 | 0 | [AR]
+----+----+----+----+----+----+----+----+
+---------------+
| 386 Call Gate |
+---------------+
+00 WORD Offset 15..0 (Low)
+02 WORD Selector
+04 BYTE Dword Count (5 bit)
+05 BYTE AR
+06 WORD Offset 31..16
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 1 | 1 | 0 | 0 | [AR]
+----+----+----+----+----+----+----+----+
+---------+
| 286 TSS |
+---------+
+00 WORD TSS Limit (15..0)
+02 WORD TSS Base (15..0) (Low)
+04 BYTE TSS Base (23..16) (Mid)
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 0 | B | 1 | [AR]
+----+----+----+----+----+----+----+----+
B - (Busy)
=0 TSS is available
=1 TSS is busy (active,current)
+---------+
| 386 TSS |
+---------+
+00 WORD TSS Limit (15..0) (Low)
+02 WORD TSS Base (15..0) (Low)
+04 BYTE TSS Base (23..16)(Mid)
+05 BYTE AR
+06 BYTE AR2/TSS Limit High (19..16)
+07 BYTE TSS Base (31..24) (High)
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 1 | 0 | B | 1 | [AR]
+----+----+----+----+----+----+----+----+
+-------------------------+
| Interrupt/Trap Gate 286 |
+-------------------------+
+00 WORD Offset 15..0
+02 WORD Selector
+04 BYTE 0
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 1 | 1 | T | [AR]
+----+----+----+----+----+----+----+----+
T - (Trap Flag)
=0 Interrupt Gate
=1 Trap Gate
+-------------------------+
| Interrupt/Trap Gate 386 |
+-------------------------+
+00 WORD Offset 15..0 (Low)
+02 WORD Selector
+04 BYTE 0
+05 BYTE AR
+06 WORD Offset 31..16 (High)
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 1 | 1 | 1 | T | [AR]
+----+----+----+----+----+----+----+----+
+-----------+
| Task Gate |
+-----------+
+00 WORD 0
+02 WORD TSS Selector
+04 BYTE 0
+05 BYTE AR
+06 WORD 0
+----+----+----+----+----+----+----+----+
| P | DPL | 0 | 0 | 1 | 0 | 1 | [AR]
+----+----+----+----+----+----+----+----+
+----------------------------------+
| Possible Tables for Descriptors |
+----------------------------------+
---------------+-----------------------+---------------------------
Lowest 5 bits | | Valid in
of AR | Type | GDT LDT IDT
---------------+-----------------------+---------------------------
00010 LDT + - -
0*0*1 286 TSS + - -
0*100 Call Gate + + -
0*101 Task Gate + + +
0*110 Interrupt Gate - - +
0*111 Trap Gate - - +
10*** Data segment + + -
11*** Code segment + + -
-------------------------------------------------
APPENDIX V FORMAT OF TSS
+--------------------+
| Format of 286 TSS |
+--------------------+
+00 WORD Previous TSS Selector (Back Link)
+02 WORD Offset of stack ring 0
+04 WORD Selector of stack ring 0
+06 WORD Offset of stack ring 1
+08 WORD Selector of stack ring 1
+0A WORD Offset of stack ring 2
+0C WORD Selector of stack ring 2
+0E WORD IP
+10 WORD FLG
+12 WORD AX
+14 WORD CX
+16 WORD DX
+18 WORD BX
+1A WORD SP
+1C WORD BP
+1E WORD SI
+20 WORD DI
+22 WORD ES
+24 WORD CS
+26 WORD SS
+28 WORD DS
+2A WORD LDT
Note: Len of 286 TSS is 2Ch bytes (44d)
+--------------------+
| Format of 386 TSS |
+--------------------+
High word/Low word
+00 DWORD 0/Previous TSS selector (Back Link)
+04 DWORD Stack pointer for ring 0
+08 DWORD 0/Stack Selector for ring 0
+0C DWORD Stack pointer for ring 1
+10 DWORD 0/Stack Selector for ring 1
+14 DWORD Stack pointer for ring 2
+18 DWORD 0/Stack Selector for ring 2
+1C DWORD CR3
+20 DWORD EIP
+24 DWORD EFLAGS
+28 DWORD EAX
+2C DWORD ECX
+30 DWORD EDX
+34 DWORD EBX
+38 DWORD ESP
+3C DWORD EBP
+40 DWORD ESI
+44 DWORD EDI
+48 DWORD 0/ES
+4C DWORD 0/CS
+50 DWORD 0/SS
+54 DWORD 0/DS
+58 DWORD 0/FS
+5C DWORD 0/GS
+60 DWORD 0/LDT
+64 WORD Trap Bits
+66 WORD Offset within TSS to I/O Permission Map
Minimal Length of TSS is 68 bytes.
IPM is IO Permition Map Base address
TSS_LAST is last byte of TSS.
+IPM-20h 20h BYTEs Software Interrupt Redirection Bitmap (VME)
1 bit/int
+IPM xxh BYTEs I/O Permition Bitmap
1 bit/port
+TSS_LAST BYTE I/O PAD Byte
PAD byte show which bits in last byte of
I/O permission bitmap valid.
(recommended to set up this byte to FF)
TSS
+----------------+
| |
| ..... |
| |
+----------------+
| offset to IPM |----------------+
+----------------+ |
| .... | |
| .... | |
+----------------+ |
|Int Redir Bitmap| |
+----------------+ <--------------+
| IPM |
+----------------+
| PAD BYTE |
+----------------+ <------ TSS Limit
---------------------------------------------------
APPENDIX W - Model Specific Registers List
[See MSR.LST]
----------------------------------------------------------
APPENDIX X - SYSTEM MANAGMENT MODE (SMM)
+----------------+
| Base SM Modes: |
+----------------+
There are 4 base types of SMM in x86 CPUs (unfortunetly, I don't knew
SMM in NexGen):
Activation Bytes Hidden RAM Hidden RAM SMM
Vendor Hard Soft Saved Save Area SMM code start Type
AMD 386SXLV + SMI 228 6000:0000 FFFFFFF0 \
AMD 386DXLV + SMI 228 6000:0000 FFFFFFF0 | old AMD
AMD 486DXLV + SMI 364 6000:0000 FFFFFFF0 /
-----------------------------------------------------------
Cx486SLC/DLC + HLT - - - \
Cx486SLC/e + - 35 User Definded User Defined | Cyrix
Cx486S..Cx486MX + (SMINT) 48 User Defined User Defined /
-----------------------------------------------------------
IBM 386/486SLC + ICEBP 284 6000:0000 FFFFFFF0 ] IBM
-----------------------------------------------------------
i386SL/i486SL + Timer 512 3000:FE00 3000:8000 \
i486SL-Enhanced + - 512 3000:FE00 3000:8000 | Intel
Pentium + (APIC) 512 3000:FE00 3000:8000 |
Pentium Pro/II + (APIC) 512 3000:FE00 3000:8000 /
Intel Type SMM support all Intel CPUs (starting i386SL or i486
SL-Enhanced), and AMD K5, K6 and later, IDT C6.
+---------------+
| Intel SMM |
+---------------+
Format of SMRAM
Ofset from Actual
SMBASE Description Size Writeable
FFFC 4 CR0 32 -
FFF8 4 CR3 32 -
FFF4 4 EFLAGS 32 +
FFF0 4 EIP 32 +
FFEC 4 EDI 32 +
FFE8 4 ESI 32 +
FFE4 4 EBP 32 +
FFE0 4 ESP 32 +
FFDC 4 EBX 32 +
FFD8 4 EDX 32 +
FFD4 4 ECX 32 +
FFD0 4 EAX 32 +
FFCC 4 DR6 32 -
FFC8 4 DR7 32 -
FFC4 4 TR 16 -
FFC0 4 LDTR 16 -
FFBC 4 GS 16 -
FFB8 4 FS 16 -
FFB4 4 DS 16 -
FFB0 4 SS 16 -
FFAC 4 CS 16 -
FFA8 4 ES 16 -
FFA4 4 I/O trap Dword 32 -
FFA0 8 reserved -
FF9C 4 I/O trap EIP 32 -
FF94 8 reserved -
FF90 4 IDT Base 32 -
FF8C 4 IDT Limit 20 -
FF88 4 GDT Base 32 -
FF84 4 GDT Limit 20 -
FF80 4 TSS Attribute 12 -
FF7C 4 TSS Base 32 -
FF78 4 TSS Limit 20 -
FF74 4 LDT Attribute 12 -
FF70 4 LDT Base 32 -
FF6C 4 LDT Limit 20 -
FF68 4 GS Attribute 12 -
FF64 4 GS Base 32 -
FF60 4 GS Limit 20 -
FF5C 4 FS Attribute 12 -
FF58 4 FS Base 32 -
FF54 4 FS Limit 20 -
FF50 4 DS Attribute 12 -
FF4C 4 DS Base 32 -
FF48 4 DS Limit 20 -
FF44 4 SS Attribute 12 -
FF40 4 SS Base 32 -
FF3C 4 SS Limit 20 -
FF38 4 CS Attribute 12 -
FF34 4 CS Base 32 -
FF30 4 CS Limit 20 -
FF2C 4 ES Attribute 12 -
FF28 4 ES Base 32 -
FF24 4 ES Limit 20 -
FF18 12 reserved -
FF14 4 CR2 32 -
FF10 4 CR4 32 -
FF0C 4 I/O Restart ESI 32 -
FF08 4 I/O Restart ECX 32 -
FF04 4 I/O Restart EDI 32 -
FF02 2 Auto HALT Restart Slot 16* +
FF00 2 I/O Trap Restart Slot 16* +
FEFC 4 SMM Revision ID 32 -
FEF8 4 SMBASE Slot 32 +
7E00 248 reserved -
Note: if Actual size < fiels size, then all upper that actual size bits are
reserved.
+---------------+
| Cyrix SMM |
+---------------+
Full description of Cyrix SMM will be placed in future OPCODE.LST.
Now see SMINT and some other Cyrix SMM commands for more details.
See APPENDIX A1-A6 for more details.
Format of SMRAM:
+00 <-------- Here pointed SMHR register (M2)
-04 4 DR7
-08 4 EFLAGS
-0C 4 CR0
-10 4 Current EIP
-14 4 Next EIP
-18 4 CS selector
-20 8 CS descriptor
-24 4 Bitfields
Bit Description
22..21 CPL
15 N (Nested SMI Indicator)
13 IS (Internal SMI Indicator)
4 H (SMI on HLT instruction)
3 S (Software SMI entrance)
2 P (REP INSx/OUTSx indicator)
1 I (IN/INSx/OUT/OUTSx indicator)
0 C (Code segment writable flag)
-26 2 I/O Write Data Size
-28 2 I/O Write Address
-2C 4 I/O Write Data
-30 4 ESI or EDI
+-------------------+
| Old-style AMD SMM |
+-------------------+
Format of SMRAM:
Offset Bytes Description
60000 4 CR0
60004 4 EFLAGS
60008 4 EIP
6000C 4 EDI
60010 4 ESI
60014 4 EBP
60018 4 ESP
6001C 4 EBX
60020 4 EDX
60024 4 ECX
60028 4 EAX
6002C 4 DR6
60030 4 DR7
60034 4 TR selector
60038 4 LDT selector
6003C 4 GS selector
60040 4 FS selector
60044 4 DS selector
60048 4 SS selector
6004C 4 CS selector
60050 4 ES selector
60054 4 TSS descriptor (ATTR)
60058 4 TSS descriptor (BASE)
6005C 4 TSS descriptor (LIMIT)
60060 4 reserved
60064 4 IDTR (BASE)
60068 4 IDTR (LIMIT)
6006C 4 REP OUTS Overrun Flag
60070 4 GDTR (BASE)
60074 4 GDTR (LIMIT)
60078 4 LDT (ATTR)
6007C 4 LDT (BASE)
60080 4 LDT (LIMIT)
60084 4 GS (ATTR)
60088 4 GS (BASE)
6008C 4 GS (LIMIT)
60090 4 FS (ATTR)
60094 4 FS (BASE)
60098 4 FS (LIMIT)
6009C 4 DS (ATTR)
600A0 4 DS (BASE)
600A4 4 DS (LIMIT)
600A8 4 SS (ATTR)
600AC 4 SS (BASE)
600B0 4 SS (LIMIT)
600B4 4 CS (ATTR)
600B8 4 CS (BASE)
600BC 4 CS (LIMIT)
600C0 4 ES (ATTR)
600C4 4 ES (BASE)
600C8 4 ES (LIMIT)
....
60100 4 Temporary Register TST
60104 4 Temporary Register IDX
60108 4 Temporary Register TMPH
6010C 4 Temporary Register TMPG
60110 4 Temporary Register TMPF
60114 4 Temporary Register TMPE
60118 4 Temporary Register TMPD
6011C 4 Temporary Register TMPC
60120 4 Temporary Register TMPB
60124 4 LEIP (Last EIP)
------------- AMD Am486DXLV additional fields
60128 4 PEIP
6012C 36 Unused
60150 88 F.P. Internal Registers
Note: See LOADALL for More Information
+-------------------+
| IBM SMM |
+-------------------+
Format of SMRAM:
Offset Bytes Description
60000 4 CR0
60004 4 EFLAGS
60008 4 EIP
6000C 4 EDI
60010 4 ESI
60014 4 EBP
60018 4 ESP
6001C 4 EBX
60020 4 EDX
60024 4 ECX
60028 4 EAX
6002C 4 DR6
60030 4 DR7
60034 4 TR selector
60038 4 LDT selector
6003C 4 GS selector
60040 4 FS selector
60044 4 DS selector
60048 4 SS selector
6004C 4 CS selector
60050 4 ES selector
60054 4 TSS descriptor (ATTR)
60058 4 TSS descriptor (BASE)
6005C 4 TSS descriptor (LIMIT)
60060 4 reserved
60064 4 IDTR (BASE)
60068 4 IDTR (LIMIT)
6006C 4 REP OUTS Overrun Flag
60070 4 GDTR (BASE)
60074 4 GDTR (LIMIT)
60078 4 LDT (ATTR)
6007C 4 LDT (BASE)
60080 4 LDT (LIMIT)
60084 4 GS (ATTR)
60088 4 GS (BASE)
6008C 4 GS (LIMIT)
60090 4 FS (ATTR)
60094 4 FS (BASE)
60098 4 FS (LIMIT)
6009C 4 DS (ATTR)
600A0 4 DS (BASE)
600A4 4 DS (LIMIT)
600A8 4 SS (ATTR)
600AC 4 SS (BASE)
600B0 4 SS (LIMIT)
600B4 4 CS (ATTR)
600B8 4 CS (BASE)
600BC 4 CS (LIMIT)
600C0 4 ES (ATTR)
600C4 4 ES (BASE)
600C8 4 ES (LIMIT)
...
60100 4 Temporary Register TST
60104 4 Temporary Register IDX
60108 4 Temporary Register TMPH
6010C 4 Temporary Register TMPG
60110 4 Temporary Register TMPF
60114 4 Temporary Register TMPE
60118 4 Temporary Register TMPD
6011C 4 Temporary Register TMPC
60120 4 Temporary Register TMPB
60124 4 Temporary Register TMPA
60128 4 CR2
6012C 4 CR3
60130 4 MSR 1001h (0..31)
60134 4 MSR 1001h (63..32)
60138 4 MSR 1000h (0..31)
6013C 4 DR0
60140 4 DR1
60144 4 DR2
60148 4 DR3
6014C 4 PEIP (Previous Hidden Memory Space Instruction Pointer)
Note: See ICEBP/ICERET for More Information
----------------------------------------------------------
APPENDIX Y0 - Vendor Instruction Time for Intel 8088 CPU
AAA 4
AAD 60
AAM 83
AAS 4
ADC AL,imm8 4
ADC AX,imm16 4
ADC r/m8,imm8 4/17+EA
ADC r/m16,imm8 4/25+EA
ADC r/m16,imm16 4/25+EA
ADC r/m8,r8 3/16+EA
ADC r/m16,r16 3/24+EA
ADC r8,r/m8 3/9+EA
ADC r16,r/m16 3/13+EA
ADD AL,imm8 4
ADD AX,imm16 4
ADD r/m8,imm8 4/17+EA
ADD r/m16,imm8 4/25+EA
ADD r/m16,imm16 4/25+EA
ADD r/m8,r8 3/16+EA
ADD r/m16,r16 3/24+EA
ADD r8,r/m8 3/9+EA
ADD r16,r/m16 3/13+EA
AND AL,imm8 4
AND AX,imm16 4
AND r/m8,imm8 4/16+EA
AND r/m16,imm16 4/25+EA
AND r/m8,r8 3/16+EA
AND r/m16,r16 3/24+EA
AND r8,r/m8 3/9+EA
AND r16,r/m16 3/13+EA
CALL rel16 19(23)
CALL r/m16 16(24)/21(29)+EA
CALL ptr16:16 28(36)
CALL m16:16 37(57)+EA
CBW 2
CLC 2
CLD 2
CLI 2
CMC 2
CMP AL,imm8 4
CMP AX,imm16 4
CMP r/m8,imm8 4/10+EA
CMP r/m16,imm8 4/-
CMP r/m16,imm16 4/14+EA
CMP r/m8,r8 3/9+EA
CMP r/m16,r16 3/13+EA
CMP r8,r/m8 3/9+EA
CMP r16,r/m16 3/13+EA
CMPSB 22
CMPSW 30
CWD 5
DAA 4
DAS 4
DEC r/m8 3/15+EA
DEC r/m16 2/23+EA
DEC r16 2
DIV r/m8 80-90/(86-96)+EA
DIV r/m16 144-162/(154-172)+EA
HLT 2
IDIV r/m8 101-112/(107-118)+EA
IDIV r/m16 165-184/(175-194)+EA
IMUL r/m8 80-98/(86-104)+EA
IMUL r/m16 128-154/(138-164)+EA
IN AL,imm8 10
IN AX,imm8 14
IN AL,DX 8
IN AX,DX 12
INC r/m8 3/15+EA
INC r/m16 2/23+EA
INC r16 2
INT 3 53(72)
INT imm8 51(71)
INTO 53(73) or 4
IRET 32(44)
Jcc rel8 4 or 16
JCXZ rel8 6 or 18
JMP rel8 15
JMP rel16 15
JMP r/m16 11/18+EA
JMP ptr16:16 15
JMP m16:16 24+EA
LAHF 4
LDS r16,m16:16 24+EA
LES r16,m16:16 24+EA
LEA r16,m 2+EA
LODSB 12
LODSW 16
LOOP rel8 5 or 17
LOOPE rel8 6 or 18
LOOPNE rel8 5 or 19
MOV r/m8,r8 2/9+EA
MOV r/m16,r16 2/13+EA
MOV r8,r/m8 2/8+EA
MOV r16,r/m16 2/12+EA
MOV r/m16,sreg 2/9(13)+EA
MOV sreg,r/m16 2/8(12)+EA
MOV AL,moffs8 10
MOV AX,moffs16 14
MOV moffs8,AL 10
MOV moffs16,AX 14
MOV r8,imm8 4
MOV r16,imm16 4
MOV r/m8,imm8 4/10+EA
MOV r/m16,imm16 4/14+EA
MOVSB 18
MOVSW 26
MUL r/m8 70-77/(76-83)+EA
MUL r/m16 118-133/(128-143)+EA
NEG r/m8 3/16+EA
NEG r/m16 3/24+EA
NOP 3
NOT r/m8 3/16+EA
NOT r/m16 3/24+EA
OR AL,imm8 4
OR AX,imm16 4
OR r/m8,imm8 4/17+EA
OR r/m16,imm16 4/25+EA
OR r/m8,r8 3/16+EA
OR r/m16,r16 3/24+EA
OR r8,r/m8 3/9+EA
OR r16,r/m16 3/13+EA
OUT imm8,AL 10
OUT imm8,AX 14
OUT DX,AL 8
OUT DX,AX 12
POP m16 25+EA
POP r16 12
POP sreg 12
POPF 12
PUSH r/m16 15/24+EA
PUSH r16 15
PUSH sreg 14
PUSHF 14
RCL r/m8,1 2/15+EA
RCL r/m16,1 2/23+EA
RCL r/m8,CL 8+4*bit/20+EA+4*bit
RCL r/m16,CL 8+4*bit/28+EA+4*bit
RCR r/m8,1 2/15+EA
RCR r/m16,1 2/23+EA
RCR r/m8,CL 8+4*bit/20+EA+4*bit
RCR r/m16,CL 8+4*bit/28+EA+4*bit
ROL r/m8,1 2/15+EA
ROL r/m16,1 2/23+EA
ROL r/m8,CL 8+4*bit/20+EA+4*bit
ROL r/m16,CL 8+4*bit/28+EA+4*bit
ROR r/m8,1 2/15+EA
ROR r/m16,1 2/23+EA
ROR r/m8,CL 8+4*bit/20+EA+4*bit
ROR r/m16,CL 8+4*bit/28+EA+4*bit
REP MOVSB 9+17*reps
REP MOVSW 9+25*reps
REP LODSB n/a
REP LODSW n/a
REP STOSB 9+10*reps
REP STOSW 9+14*reps
REPE CMPSB 9+17*reps
REPE CMPSW 9+25*reps
REPE SCASB 9+15*reps
REPE SCASW 9+19*reps
REPNE CMPSB 9+17*reps
REPNE CMPSW 9+25*reps
REPNE SCASB 9+15*reps
REPNE SCASW 9+19*reps
RET (near) 20
RET imm16 (near) 24
RET (far) 32
RET imm16 (far) 31
SAHF 4
SAL r/m8,1 2/15+EA
SAL r/m16,1 2/23+EA
SAL r/m8,CL 8+4*bit/20+EA+4*bit
SAL r/m16,CL 8+4*bit/28+EA+4*bit
SAR r/m8,1 2/15+EA
SAR r/m16,1 2/23+EA
SAR r/m8,CL 8+4*bit/20+EA+4*bit
SAR r/m16,CL 8+4*bit/28+EA+4*bit
SHL r/m8,1 2/15+EA
SHL r/m16,1 2/23+EA
SHL r/m8,CL 8+4*bit/20+EA+4*bit
SHL r/m16,CL 8+4*bit/28+EA+4*bit
SHR r/m8,1 2/15+EA
SHR r/m16,1 2/23+EA
SHR r/m8,CL 8+4*bit/20+EA+4*bit
SHR r/m16,CL 8+4*bit/28+EA+4*bit
SBB AL,imm8 4
SBB AX,imm16 4
SBB r/m8,imm8 4/17+EA
SBB r/m16,imm8 4/25+EA
SBB r/m16,imm16 4/25+EA
SBB r/m8,r8 3/16+EA
SBB r/m16,r16 3/24+EA
SBB r8,r/m8 3/9+EA
SBB r16,r/m16 3/16+EA
SCASB 15
SCASW 19
SETALC n/a
STC 2
STD 2
STI 2
STOSB 11
STOSW 15
SUB AL,imm8 4
SUB AX,imm16 4
SUB r/m8,imm8 4/17+EA
SUB r/m16,imm8 4/25+EA
SUB r/m16,imm16 4/25+EA
SUB r/m8,r8 3/16+EA
SUB r/m16,r16 3/24+EA
SUB r8,r/m8 3/9+EA
SUB r16,r/m16 3/13+EA
TEST AL,imm8 4
TEST AX,imm16 4
TEST r/m8,imm8 5/11+EA
TEST r/m16,imm16 5/11+EA
TEST r/m8,r8 3/9+EA
TEST r/m16,r16 3/13+EA
WAIT 3+5*number_of_wait_cycles
XCHG AX,r16 3
XCHG r/m8,r8 4/17+EA
XCHG r/m16,r16 4/25+EA
XLAT 11
XOR AL,imm8 4
XOR AX,imm16 4
XOR r/m8,imm8 4/17+EA
XOR r/m16,imm16 4/25+EA
XOR r/m8,r8 3/16+EA
XOR r/m16,r16 3/24+EA
XOR r8,r/m8 3/9+EA
XOR r16,r/m16 3/13+EA
(END)
----------------------------------------------------------
APPENDIX Y1 - Vendor Instruction Time for Intel i80186 CPU
AAA 8
AAD 15
AAD imm8 15 ?? (n/a)
AAM 19
AAM imm8 19 ?? (n/a)
AAS 7
ADC AL,imm8 3
ADC AX,imm16 4
ADC r/m8,imm8 4/16
ADC r/m16,imm16 4/16
ADC r/m8,r8 3/15
ADC r/m16,r16 3/15
ADC r8,r/m8 3/10
ADC r16,r/m16 3/10
ADD AL,imm8 3
ADD AX,imm16 4
ADD r/m8,imm8 4/16
ADD r/m32,imm8 4/16
ADD r/m8,r8 3/15
ADD r/m16,r16 3/15
ADD r8,r/m8 3/10
ADD r16,r/m16 3/10
AND AL,imm8 3
AND AX,imm16 4
AND r/m8,imm8 4/16
AND r/m16,imm16 4/16
AND r/m8,r8 3/15
AND r/m16,r16 3/15
AND r8,r/m8 3/10
AND r16,r/m16 3/10
BOUND r16,m16&16 33-35
CALL rel16 15
CALL r/m16 13/19
CALL ptr16:16 23
CALL m16:16 38
CBW 2
CLC 2
CLD 2
CLI 2
CMC 2
CMP AL,imm8 3
CMP AX,imm16 4
CMP r/m8,imm8 3/10
CMP r/m16,imm16 3/10
CMP r/m8,r8 3/10
CMP r/m16,r16 3/10
CMP r8,r/m8 3/10
CMP r16,r/m16 3/10
CMPSB 22
CMPSW 22
CWD 4
DAA 4
DAS 4
DEC r/m8 3/15
DEC r/m16 3/15
DEC r16 3
DIV r/m8 29/35
DIV r/m16 38/44
ESC imm4,r/m n/a
ENTER imm16,0 15
ENTER imm16,1 25
ENTER imm16,imm8 22+16*(level-1)
HLT 2
IDIV r/m8 44-52/50-58
IDIV r/m16 53-61/59-67
IMUL r/m8 25-28/31-34
IMUL r/m16 34-47/40-43
IMUL r16,imm8 22-25/29-32 (~)
IMUL r16,imm16 22-25/29-32 (~)
IMUL r16,r/m16,imm8 22-25/29-32 (~)
IMUL r16,r/m16,imm16 22-25/29-32 (~)
IN AL,imm8 10
IN AX,imm8 10
IN AL,DX 8
IN AX,DX 8
INC r/m8 3/15
INC r/m16 3/15
INC r16 3
INSB 14
INSW 14
INT 3 45
INT imm8 47
INTO 4 or 48
IRET 28
Jcc rel8 4 or 13
JCXZ rel8 5 or 15
JMP rel8 14
JMP rel16 14
JMP r/m16 11/17
JMP ptr16:16 14
JMP m16:16 26
LAHF 2
LDS r16,m16:16 18
LES r16,m16:16 18
LEA r16,m 6
LEAVE 8
LODSB 12
LODSW 12
LOOP rel8 6 or 16
LOOPE rel8 6 or 16
LOOPNE rel8 6 or 16
MOV r/m8,r8 2/12
MOV r/m16,r16 2/12
MOV r8,r/m8 2/9
MOV r16,r/m16 2/9
MOV r/m16,sreg 2/11
MOV sreg,r/m16 2/9
MOV AL,moffs8 8
MOV AX,moffs16 8
MOV moffs8,AL 9
MOV moffs16,AX 9
MOV r8,imm8 3
MOV r16,imm16 4
MOV r/m8,imm8 3/12
MOV r/m16,imm16 4/13
MOVSB 14
MOVSW 14
MUL r/m8 26-28/32-34
MUL r/m16 35-37/41-43
NEG r/m8 3/10
NEG r/m16 3/10
NOP 3
NOT r/m8 3/10
NOT r/m16 3/10
OR AL,imm8 3
OR AX,imm16 4
OR r/m8,imm8 4/16
OR r/m16,imm16 4/16
OR r/m8,r8 3/15
OR r/m16,r16 3/15
OR r8,r/m8 3/10
OR r16,r/m16 3/10
OUT imm8,AL 9
OUT imm8,AX 9
OUT DX,AL 7
OUT DX,AX 7
OUTSB 14
OUTSW 14
POP m16 20
POP r16 10
POP sreg 8
POPA 51
POPF 8
PUSH r/m16 10/16
PUSH r16 10
PUSH imm8 10
PUSH imm16 10
PUSH sreg 9
PUSHA 36
PUSHF 9
RCL r/m8,1 2/15
RCL r/m16,1 2/15
RCL r/m8,CL 5+n/17+n
RCL r/m16,CL 5+n/17+n
RCL r/m8,imm8 5+n/17+n
RCL r/m16,imm8 5+n/17+n
RCR r/m8,1 2/15
RCR r/m16,1 2/15
RCR r/m8,CL 5+n/17+n
RCR r/m16,CL 5+n/17+n
RCR r/m8,imm8 5+n/17+n
RCR r/m16,imm8 5+n/17+n
ROL r/m8,1 2/15
ROL r/m16,1 2/15
ROL r/m8,CL 5+n/17+n
ROL r/m16,CL 5+n/17+n
ROL r/m8,imm8 5+n/17+n
ROL r/m16,imm8 5+n/17+n
ROR r/m8,1 2/15
ROR r/m16,1 2/15
ROR r/m8,CL 5+n/17+n
ROR r/m16,CL 5+n/17+n
ROR r/m8,imm8 5+n/17+n
ROR r/m16,imm8 5+n/17+n
RET (near) 16
RET (far) 22
RET imm16 (near) 18
RET imm16 (far) 25
SAHF 3
SAL r/m8,1 2/15
SAL r/m16,1 2/15
SAL r/m8,CL 5+n/17+n
SAL r/m16,CL 5+n/17+n
SAL r/m8,imm8 5+n/17+n
SAL r/m16,imm8 5+n/17+n
SAR r/m8,1 2/15
SAR r/m16,1 2/15
SAR r/m8,CL 5+n/17+n
SAR r/m16,CL 5+n/17+n
SAR r/m8,imm8 5+n/17+n
SAR r/m16,imm8 5+n/17+n
SHL r/m8,1 2/15
SHL r/m16,1 2/15
SHL r/m8,CL 5+n/17+n
SHL r/m16,CL 5+n/17+n
SHL r/m8,imm8 5+n/17+n
SHL r/m16,imm8 5+n/17+n
SHR r/m8,1 2/15
SHR r/m16,1 2/15
SHR r/m8,CL 5+n/17+n
SHR r/m16,CL 5+n/17+n
SHR r/m8,imm8 5+n/17+n
SHR r/m16,imm8 5+n/17+n
SBB AL,imm8 3
SBB AX,imm16 4
SBB r/m8,imm8 4/16
SBB r/m16,imm16 4/16
SBB r/m8,r8 3/15
SBB r/m16,r16 3/15
SBB r8,r/m8 3/10
SBB r16,r/m16 3/10
SCASB 15
SCASW 15
SETALC n/a
STC 2
STD 2
STI 2
STOSB 10
STOSW 10
SUB AL,imm8 3
SUB AX,imm16 4
SUB r/m8,imm8 4/16
SUB r/m16,imm16 4/16
SUB r/m8,r8 3/15
SUB r/m16,r16 3/15
SUB r8,r/m8 3/10
SUB r16,r/m16 3/10
TEST AL,imm8 3
TEST AX,imm16 4
TEST r/m8,imm8 4/10
TEST r/m16,imm16 4/10
TEST r/m8,r8 3/10
TEST r/m16,r16 3/10
WAIT 6 (min)
XCHG AX,r16 3
XCHG r/m8,r8 4/17
XCHG r/m16,r16 4/17
XLAT 11
XOR AL,imm8 3
XOR AX,imm16 4
XOR r/m8,imm8 4/16
XOR r/m16,imm16 4/16
XOR r/m8,r8 3/15
XOR r/m16,r16 3/15
XOR r8,r/m8 3/10
XOR r16,r/m16 3/10
(END)
----------------------------------------------------------
APPENDIX Y2 - Vendor Instruction Time for NEC V20 CPU
AAA 3
AAD 7
AAD imm8 7
AAM 15
AAM imm8 15
AAS 3
ADC AL,imm8 4
ADC AX,imm16 4
ADC r/m8,imm8 4/18
ADC r/m16,imm16 4/26
ADC r/m8,r8 2/15
ADC r/m16,r16 2/24
ADC r8,r/m8 2/11
ADC r16,r/m16 2/15
ADD AL,imm8 4
ADD AX,imm16 4
ADD r/m8,imm8 4/18
ADD r/m16,imm16 4/26
ADD r/m8,r8 2/15
ADD r/m16,r16 2/24
ADD r8,r/m8 2/11
ADD r16,r/m16 2/15
AND AL,imm8 4
AND AX,imm16 4
AND r/m8,imm8 4/18
AND r/m16,imm16 4/26
AND r/m8,r8 2/15
AND r/m16,r16 2/24
AND r8,r/m8 2/11
AND r16,r/m16 2/15
BOUND r16,m16&16 18-23/73-76
CALL rel16 16-20
CALL r/m16 14-18/23-31
CALL ptr16:16 21-29
CALL m16:16 31-47
CBW 2
CLC 2
CLD 2
CLI 2
CMC 2
CMP AL,imm8 4
CMP AX,imm16 4
CMP r/m8,imm8 4/13
CMP r/m16,imm16 4/17
CMP r/m8,r8 2/11
CMP r/m16,r16 2/15
CMP r8,r/m8 2/11
CMP r16,r/m16 2/15
CMPSB 7+14n !!
CMPSW 7+14n !!
CWD 4-5
DAA 3
DAS 7
DEC r/m8 2/16
DEC r/m16 2/24
DEC r16 2
DIV r/m8 19/25
DIV r/m16 25/35
ESC imm4,r/m n/a
ENTER imm16,0 16
ENTER imm16,1 23 ??
ENTER imm16,imm8 23+16*(level-1)
HLT 2
IDIV r/m8 29/35
IDIV r/m16 43/53
IMUL r/m8 33/39
IMUL r/m16 47/57
IMUL r16,r/m16,imm8 28-34/34-44
IMUL r16,r/m16,imm16 36-42/46-52
IN AL,imm8 9
IN AX,imm8 13
IN AL,DX 8
IN AX,DX 12
INC r/m8 2/16
INC r/m16 2/24
INC r16 2
INSB 9+8n !!
INSW 9+8n !!
INT 3 38-50
INT imm8 38-50
INTO 3 or 52
IRET 27-39
Jcc rel8 4 or 14
JCXZ rel8 5 or 13
JMP rel8 12
JMP rel16 13
JMP r/m16 11/20-24
JMP ptr16:16 15
JMP m16:16 27-35
LAHF 2
LDS r16,m16:16 18-26
LES r16,m16:16 18-26
LEA r16,m 4
LEAVE 6/10
LODSB 7+9n !!
LODSW 7+9n !!
LOOP rel8 5 or 13
LOOPE rel8 5 or 14
LOOPNE rel8 5 or 14
MOV r/m8,r8 2/9
MOV r/m16,r16 2/13
MOV r8,r/m8 2/11
MOV r16,r/m16 2/15
MOV r/m16,sreg 2/10-14
MOV sreg,r/m16 2/11-15
MOV AL,moffs8 10
MOV AX,moffs16 14
MOV moffs8,AL 9
MOV moffs16,AX 13
MOV r8,imm8 4
MOV r16,imm16 4
MOV r/m8,imm8 4/11
MOV r/m16,imm16 4/15
MOVSB 11+8n !!
MOVSW 11+8n !!
MUL r/m8 21/27
MUL r/m16 30/36
NEG r/m8 2/16
NEG r/m16 2/24
NOP 3
NOT r/m8 2/16
NOT r/m16 2/24
OR AL,imm8 4
OR AX,imm16 4
OR r/m8,imm8 4/18
OR r/m16,imm16 4/26
OR r/m8,r8 2/15
OR r/m16,r16 2/24
OR r8,r/m8 2/11
OR r16,r/m16 2/15
OUT imm8,AL 8
OUT imm8,AX 12
OUT DX,AL 8
OUT DX,AX 12
OUTSB 9+8n !!
OUTSW 9+8n !!
POP m16 17-25
POP r16 8-12
POP sreg 8-12
POPA 43-75
POPF 8-12
PUSH r/m16 8-12/18-26
PUSH r16 8-12
PUSH imm8 7
PUSH imm16 12
PUSH sreg 8-12
PUSHA 35-67
PUSHF 8-12
RCL r/m8,1 2/2-4
RCL r/m16,1 2/2-4
RCL r/m8,CL 7+n/19+n
RCL r/m16,CL 7+n/27+n
RCL r/m8,imm8 7+n/19+n
RCL r/m16,imm8 7+n/27+n
RCR r/m8,1 2/16
RCR r/m16,1 2/24
RCR r/m8,CL 7+n/19+n
RCR r/m16,CL 7+n/27+n
RCR r/m8,imm8 7+n/19+n
RCR r/m16,imm8 7+n/27+n
ROL r/m8,1 2/16
ROL r/m16,1 2/24
ROL r/m8,CL 7+n/19+n
ROL r/m16,CL 7+n/27+n
ROL r/m8,imm8 7+n/19+n
ROL r/m16,imm8 7+n/27+n
ROR r/m8,1 2/16
ROR r/m16,1 2/24
ROR r/m8,CL 7+n/19+n
ROR r/m16,CL 7+n/27+n
ROR r/m8,imm8 2/16
ROR r/m16,imm8 2/24
RET (near) 15-19
RET (far) 21-29
RET imm16 (near) 20-24
RET imm16 (far) 24-32
SAHF 3
SAL r/m8,1 2/16
SAL r/m16,1 2/24
SAL r/m8,CL 7+n/19+n
SAL r/m16,CL 7+n/27+n
SAL r/m8,imm8 7+n/19+n
SAL r/m16,imm8 7+n/27+n
SAR r/m8,1 2/16
SAR r/m16,1 2/24
SAR r/m8,CL 7+n/19+n
SAR r/m16,CL 7+n/27+n
SAR r/m8,imm8 7+n/19+n
SAR r/m16,imm8 7+n/27+n
SHL r/m8,1 2/16
SHL r/m16,1 2/24
SHL r/m8,CL 7+n/19+n
SHL r/m16,CL 7+n/27+n
SHL r/m8,imm8 7+n/19+n
SHL r/m16,imm8 7+n/27+n
SHR r/m8,1 2/16
SHR r/m16,1 2/24
SHR r/m8,CL 7+n/19+n
SHR r/m16,CL 7+n/27+n
SHR r/m8,imm8 7+n/19+n
SHR r/m16,imm8 7+n/27+n
SBB AL,imm8 4
SBB AX,imm16 4
SBB r/m8,imm8 4/18
SBB r/m16,imm16 4/26
SBB r/m8,r8 2/15
SBB r/m16,r16 2/24
SBB r8,r/m8 2/11
SBB r16,r/m16 2/15
SCASB 7+10n !!
SCASW 7+10n!!
SETALC n/a
STC 2
STD 2
STI 2
STOSB 7+4n !!
STOSW 7+4n !!
SUB AL,imm8 4
SUB AX,imm16 4
SUB r/m8,imm8 4/18
SUB r/m16,imm16 4/26
SUB r/m8,r8 2/15
SUB r/m16,r16 2/24
SUB r8,r/m8 2/11
SUB r16,r/m16 2/15
TEST AL,imm8 4
TEST AX,imm16 4
TEST r/m8,imm8 4/11
TEST r/m16,imm16 4/15
TEST r/m8,r8 2/10
TEST r/m16,r16 2/14
WAIT 2+5n (n = number of times POLL pin sampled)
XCHG AX,r16 2
XCHG r/m8,r8 3/16
XCHG r/m16,r16 3/24
XLAT 9
XOR AL,imm8 4
XOR AX,imm16 4
XOR r/m8,imm8 4/18
XOR r/m16,imm16 4/26
XOR r/m8,r8 2/15
XOR r/m16,r16 2/24
XOR r8,r/m8 2/11
XOR r16,r/m16 2/15
(END)
----------------------------------------------------------
APPENDIX Y3 - Vendor Instruction Time for Intel i286 CPU
AAA 3
AAD 14
AAD imm8 n/a
AAM 16
AAM imm8 n/a
AAS 3
ADC AL,imm8 3
ADC AX,imm16 3
ADC r/m8,imm8 3/7+EA
ADC r/m16,imm16 3/7+EA
ADC r/m8,r8 2/7+EA
ADC r/m16,r16 2/7+EA
ADC r8,r/m8 2/7+EA
ADC r16,r/m16 2/7+EA
ADD AL,imm8 3
ADD AX,imm16 3
ADD r/m8,imm8 3/7+EA
ADD r/m16,imm16 3/7+EA
ADD r/m8,r8 2/7+EA
ADD r/m16,r16 2/7+EA
ADD r8,r/m8 2/7+EA
ADD r16,r/m16 2/7+EA
AND AL,imm8 3
AND AX,imm16 3
AND r/m8,imm8 3/7+EA
AND r/m16,imm16 3/7+EA
AND r/m8,r8 2/7+EA
AND r/m16,r16 2/7+EA
AND r8,r/m8 2/7+EA
AND r16,r/m16 2/7+EA
ARPL r/m16,r16 10/11+EA
BOUND r16,m16&16 13+EA
CALL rel16 7+m
CALL r/m16 7+m/11+m
CALL ptr16:16 13+m
CALL ptr16:16 (PM, direct segment) 26+m
CALL ptr16:16 (PM, via call gate, same p 41+m
CALL ptr16:16 (PM, via call gate, more p 82+m
CALL ptr16:16 (PM, via call gate, more p 86+4*param+m
CALL m16:16 16+m
CALL m16:16 (PM, direct segment) 29+m
CALL m16:16 (PM, via gate, same priveleg44+m
CALL m16:16 (PM, via gate, more priveleg83+m
CALL m16:16 (PM, via gate, more priveleg90+4*param+m
CBW 2
CLC 2
CLD 2
CLI 3
CLTS 2
CMC 2
CMP AL,imm8 3
CMP AX,imm16 3
CMP r/m8,imm8 3/6+
CMP r/m16,imm8 3/6+EA
CMP r/m16,imm16 3/6+EA
CMP r/m8,r8 2/7+EA
CMP r/m16,r16 2/7+EA
CMP r8,r/m8 2/6+EA
CMP r16,r/m16 2/6+EA
CMPSB f
CMPSW f
CWD 2
DAA 3
DAS 3
DEC r/m8 2/7+EA
DEC r/m16 2/7+EA
DEC r16 2
DIV r/m8 14/17+EA
DIV r/m16 22/25+EA
ESC imm4,r/m (9-20)+EA
ENTER imm16,0 11
ENTER imm16,1 15
ENTER imm16,imm8 16+4*(n-1)
HLT 2
IDIV r/m8 17/20+EA
IDIV r/m16 25/28+EA
IMUL r/m8 13/16+EA
IMUL r/m16 21/24+EA
IMUL r16,r/m16 21/24+EA
IMUL r16,imm8 ??
IMUL r16,imm16 ??
IMUL r16,r/m16,imm8 21/24+EA
IMUL r16,r/m16,imm16 21/24+EA
IN AL,imm8 5
IN AL,imm8 (PM, CPL <= IOPL) 5
IN AX,imm8 5
IN AX,imm8 (PM, CPL <= IOPL) 5
IN AL,DX 5
IN AL,DX (PM, CPL <= IOPL) 5
IN AX,DX 5
IN AX,DX (PM, CPL <= IOPL) 5
INC r/m8 2/7+EA
INC r/m16 2/7+EA
INC r16 2
INSB f
INSW f
INT 3 23+m
INT 3 (PM, same privilege) 40+m
INT 3 (PM, more privelege) 78+m
INT imm8 23+m
INT imm8 (PM, same privilege) 40+m
INT imm8 (PM, more privelege) 78+m
INTO 24+m or 3
INTO (PM, same privilege) 40+m or 3
INTO (PM, more privelege) 78+m or 3
IRET 17
IRET (PM, to same privilege) 31+m
IRET (PM, to lesser privilege) 55+m
Jcc rel8 7+m or 3
JCXZ rel8 8+m or 4
JMP rel8 7+m
JMP rel16 7+m
JMP r/m16 7/11+m
JMP ptr16:16 11/23+m
JMP ptr16:16 (PM, direct segment) f
JMP ptr16:16 (PM, via call gate, same pr38+m
JMP m16:16 15/26+m
JMP m16:16 (PM, direct segment) f
JMP m16:16 (PM, via call gate, same priv41+m
LAHF 2
LAR r16,r/m16 14/16+
LDS r16,m16:16 7+/21+
LDS r16,m16:16 (PM) f
LDS r32,m16:32 (PM) f
LES r16,m16:16 7+/21+
LES r16,m16:16 (PM) f
LES r32,m16:32 (PM) f
LEA r16,m 3+
LEAVE 5
LGDT m16&32 11+
LIDT m16&32 12+
LLDT r/m16 17/19+
LMSW r/m16 3/6+
LOADALL f
LODSB 5+4*n
LODSW 5+4*n
LOOP rel8 8/4
LOOPE rel8 8/4
LOOPNE rel8 8/4
LSL r16,r/m16 14/16
LTR r/m16 17/19+
MOV r/m8,r8 2/3+
MOV r/m16,r16 2/3+
MOV r8,r/m8 2/5+
MOV r16,r/m16 2/5+
MOV r/m16,sreg 2/3+
MOV sreg,r/m16 2/5+
MOV sreg,r/m16 (PM) 17/19+
MOV AL,moffs8 5
MOV AX,moffs16 5
MOV moffs8,AL 3
MOV moffs16,AX 3
MOV r8,imm8 2
MOV r16,imm16 2
MOV r/m8,imm8 2/3+
MOV r/m16,imm16 2/3+
MOVSB 5+4*n
MOVSW 5
MUL r/m8 13/16+
MUL r/m16 21/24+
NEG r/m8 2/7
NEG r/m16 2/7
NOP 3
NOT r/m8 2/7
NOT r/m16 2/7
OR AL,imm8 3
OR AX,imm16 3
OR r/m8,imm8 3/7
OR r/m16,imm16 3/7
OR r/m8,r8 2/7
OR r/m16,r16 2/7
OR r8,r/m8 2/7
OR r16,r/m16 2/7
OUT imm8,AL 3
OUT imm8,AL (PM, CPL <= IOPL) 3
OUT imm8,AX 3
OUT imm8,AX (PM, CPL <= IOPL) 3
OUT DX,AL 3
OUT DX,AL (PM, CPL <= IOPL) 3
OUT DX,AX 3
OUT DX,AX (PM, CPL <= IOPL) 3
OUTSB 5+4*n
OUTSW 5
POP m16 5+
POP r16 5
POP sreg 5/20
POP sreg (PM) 20
POPA 19
POPF 5
POPF (PM) 5
PUSH r/m16 5+
PUSH r16 3
PUSH imm8 3
PUSH imm16 3
PUSH sreg 3
PUSHA 17+
PUSHF 3
PUSHF (PM) 3
RCL r/m8,1 2/7
RCL r/m16,1 2/7
RCL r/m8,CL 5/8+n
RCL r/m16,CL 5/8+n
RCL r/m8,imm8 5/8+n
RCL r/m16,imm8 5/8+n
RCR r/m8,1 2/7
RCR r/m16,1 2/7
RCR r/m8,CL 5/8+n
RCR r/m16,CL 5/8+n
RCR r/m8,imm8 5/8+n
RCR r/m16,imm8 5/8+n
ROL r/m8,1 2/7
ROL r/m16,1 2/7
ROL r/m8,CL 5/8+n
ROL r/m16,CL 5/8+n
ROL r/m8,imm8 5/8+n
ROL r/m16,imm8 5/8+n
ROR r/m8,1 2/7
ROR r/m16,1 2/7
ROR r/m8,CL 5/8+n
ROR r/m16,CL 5/8+n
ROR r/m8,imm8 5/8+n
ROR r/m16,imm8 5/8+n
RDTSC f
RET (near) 11+m
RET (far) 15+m
RET (PM, far, same PL) 25+m
RET (PM, far, different PL) 55+m
RET imm16 (near) 11+m
RET imm16 (far) 15+m
RET imm16 (PM, far, same PL) 25+m
RET imm16 (PM, far, different PL) 55+m
SAHF 2
SAL r/m8,1 2/7
SAL r/m16,1 2/7
SAL r/m8,CL 5/8+n
SAL r/m16,CL 5/8+n
SAL r/m8,imm8 5/8+n
SAL r/m16,imm8 5/8+n
SAR r/m8,1 2/7
SAR r/m16,1 2/7
SAR r/m8,CL 5/8+n
SAR r/m16,CL 5/8+n
SAR r/m8,imm8 5/8+n
SAR r/m16,imm8 5/8+n
SHL r/m8,1 2/7
SHL r/m16,1 2/7
SHL r/m8,CL 5/8+n
SHL r/m16,CL 5/8+n
SHL r/m8,imm8 5/8+n
SHL r/m16,imm8 5/8+n
SHR r/m8,1 2/7
SHR r/m16,1 2/7
SHR r/m8,CL 5/8+n
SHR r/m16,CL 5/8+n
SHR r/m8,imm8 5/8+n
SHR r/m16,imm8 5/8+n
SBB AL,imm8 3
SBB AX,imm16 3
SBB r/m8,imm8 3/7
SBB r/m16,imm16 3/7
SBB r/m8,r8 2/7
SBB r/m16,r16 2/7
SBB r8,r/m8 2/7
SBB r16,r/m16 2/7
SCASB 5+8*n
SCASW 5+8*n
SETALC f
SGDT m16&32 11+
SIDT m16&32 12+
SLDT r/m16 2/3+
SMINT f
SMSW r/m16 2/3+
STC 2
STD 2
STI 2
STOSB 4+3*n
STOSW 4+3*n
STR r/m16 2/3
SUB AL,imm8 3
SUB AX,imm16 3
SUB r/m8,imm8 2/7
SUB r/m16,imm16 2/7
SUB r/m8,r8 2/6
SUB r/m16,r16 2/6
SUB r8,r/m8 2/6
SUB r16,r/m16 2/6
TEST AL,imm8 3
TEST AX,imm16 3
TEST r/m8,imm8 3/6
TEST r/m16,imm16 3/6
TEST r/m8,r8 2/6
TEST r/m16,r16 2/6
VERR r/m16 14/16+
VERW r/m16 14/16+
WAIT 3
XCHG AX,r16 3
XCHG r/m8,r8 3/5+
XCHG r/m16,r16 3/5+
XLAT 5
XOR AL,imm8 3
XOR AX,imm16 3
XOR r/m8,imm8 2/7+
XOR r/m16,imm16 2/7+
XOR r/m8,r8 2/6
XOR r/m16,r16 2/6
XOR r8,r/m8 2/6
XOR r16,r/m16 2/6
(END)
----------------------------------------------------------
APPENDIX Y4 - Vendor Instruction Time for Intel i386DX CPU
AAA 4
AAD 19
AAD imm8 n/a
AAM 17
AAM imm8 m/a
AAS 4
ADC AL,imm8 2
ADC AX,imm16 2
ADC EAX,imm32 2
ADC r/m8,imm8 2/7
ADC r/m16,imm8 2/7
ADC r/m32,imm8 2/7
ADC r/m16,imm16 2/7
ADC r/m32,imm32 2/7
ADC r/m8,r8 2/7
ADC r/m16,r16 2/7
ADC r/m32,r32 2/7
ADC r8,r/m8 2/6
ADC r16,r/m16 2/6
ADC r32,r/m32 2/6
ADD AL,imm8 2
ADD AX,imm16 2
ADD EAX,imm32 2
ADD r/m8,imm8 2/7
ADD r/m16,imm8 2/7
ADD r/m32,imm8 2/7
ADD r/m16,imm16 2/7
ADD r/m32,imm32 2/7
ADD r/m8,r8 2/7
ADD r/m16,r16 2/7
ADD r/m32,r32 2/7
ADD r8,r/m8 2/6
ADD r16,r/m16 2/6
ADD r32,r/m32 2/6
AND AL,imm8 2
AND AX,imm16 2
AND EAX,imm32 2
AND r/m8,imm8 2/7
AND r/m16,imm8 2/7
AND r/m32,imm8 2/7
AND r/m16,imm16 2/7
AND r/m32,imm32 2/7
AND r/m8,r8 2/7
AND r/m16,r16 2/7
AND r/m32,r32 2/7
AND r8,r/m8 2/6
AND r16,r/m16 2/6
AND r32,r/m32 2/6
ARPL r/m16,r16 20/21
BOUND r16,m16&16 10 or 44
BOUND r32,m32&32 10 or 44
BSF r16,r/m16 11+3*n
BSF r32,r/m32 11+3*n
BSR r16,r/m16 9+3*n
BSR r32,r/m32 9+3*n
BT r/m16,r16 3/12
BT r/m32,r32 3/12
BT r/m16,imm8 3/6
BT r/m16,imm8 3/6
BTC r/m16,r16 6/13
BTC r/m32,r32 6/13
BTC r/m16,imm8 6/8
BTC r/m16,imm8 6/8
BTR r/m16,r16 6/13
BTR r/m32,r32 6/13
BTR r/m16,imm8 6/8
BTR r/m16,imm8 6/8
BTS r/m16,r16 6/13
BTS r/m32,r32 6/13
BTS r/m16,imm8 6/8
BTS r/m16,imm8 6/8
CALL rel16 7+m
CALL r/m16 7+m/10+m
CALL ptr16:16 17+m
CALL ptr16:16 (PM, direct segment) 34+m
CALL ptr16:16 (PM, via call gate, same p52+m
CALL ptr16:16 (PM, via call gate, more p86+m
CALL ptr16:16 (PM, via call gate, more p94+m+4*x
CALL m16:16 22+m
CALL m16:16 (PM, direct segment) 38+m
CALL m16:16 (PM, via gate, same priveleg56+m
CALL m16:16 (PM, via gate, more priveleg90+m
CALL m16:16 (PM, via gate, more priveleg98+m+4*x
CALL rel32 7+m
CALL r/m32 7+m/10+m
CALL ptr16:32 17+m
CALL ptr16:32 (PM, direct segment) 34+m
CALL ptr16:32 (PM, via gate, same privel52+m
CALL ptr16:32 (PM, via gate, more privel86+m
CALL ptr16:32 (PM, via gate, more privel94+m+4*x
CALL m16:32 22+m
CALL m16:32 (PM, direct segment) 38+m
CALL m16:32 (PM, via gate, same priveleg56+m
CALL m16:32 (PM, via gate, more priveleg90+m
CALL m16:32 (PM, via gate, more priveleg98+m+4*x
CBW 3
CWDE 2
CLC 2
CLD 2
CLI 3
CLTS 5
CMC 2
CMP AL,imm8 2
CMP AX,imm16 2
CMP EAX,imm32 2
CMP r/m8,imm8 2/5
CMP r/m16,imm8 2/5
CMP r/m32,imm8 2/5
CMP r/m16,imm16 2/5
CMP r/m32,imm32 2/5
CMP r/m8,r8 2/5
CMP r/m16,r16 2/5
CMP r/m32,r32 2/5
CMP r8,r/m8 2/6
CMP r16,r/m16 2/6
CMP r32,r/m32 2/6
CMPSB 10
CMPSW 10
CMPSD 10
CWD 2
CDQ 2
DAA 4
DAS 4
DEC r/m8 2/6
DEC r/m16 2/6
DEC r/m32 2/6
DEC r16 2
DEC r32 2
DIV r/m8 14/17
DIV r/m16 22/25
DIV r/m32 38/41
ESC imm4,r/m f
ENTER imm16,0 10
ENTER imm16,1 12
ENTER imm16,imm8 15+4*(n-1)
HLT 5
IBTS r/m16,AX,CL,r16 12/19
IBTS r/m32,EAX,CL,r32 12/19
IDIV r/m8 19/22
IDIV r/m16 27/30
IDIV r/m32 43/46
IMUL r/m8 12-17/15-20
IMUL r/m16 12-25/15-28
IMUL r/m32 12-41/15-44
IMUL r16,r/m16 12-17/15-20
IMUL r32,r/m32 12-41/15-44
IMUL r16,imm8 12-26/14-27
IMUL r32,imm8 13-42/14-43
IMUL r16,imm16 9/22-12/25
IMUL r32,imm32 9/38-12/41
IMUL r16,r/m16,imm8 9-14/12-17
IMUL r32,r/m32,imm8 9-14/12-17
IMUL r16,r/m16,imm16 9-22/12-25
IMUL r32,r/m32,imm32 9-38/12-41
IN AL,imm8 12
IN AL,imm8 (PM, CPL <= IOPL) 6/26
IN AL,imm8 (VM) 26
IN AX,imm8 12
IN AX,imm8 (PM, CPL <= IOPL) 6/26
IN AX,imm8 (VM) 26
IN EAX,imm8 12
IN EAX,imm8 (PM, CPL <= IOPL) 6/26
IN EAX,imm8 (VM) 26
IN AL,DX 13
IN AL,DX (PM, CPL <= IOPL) 7/27
IN AL,DX (VM) 27
IN AX,DX 13
IN AX,DX (PM, CPL <= IOPL) 7/27
IN AX,DX (VM) 27
IN EAX,DX 13
IN EAX,DX (PM, CPL <= IOPL) 7/27
IN EAX,DX (VM) 27
INC r/m8 2/6
INC r/m16 2/6
INC r/m32 2/6
INC r16 2
INC r32 2
INSB 15
INSW 15
INSD 15
INT 3 33
INT 3 (PM, same privilege) 59
INT 3 (PM, more privelege) 99
INT imm8 37
INT imm8 (PM, same privilege) 59
INT imm8 (PM, more privelege) 99
INTO 3/35
INTO (PM, same privilege) 3/59
INTO (PM, more privelege) 3/99
IRET 22/38
IRET (PM, to same privilege) 22/38
IRET (PM, to lesser privilege) 82
IRETD 22/38
IRETD (PM, to same privilege) 22/38
IRETD (PM, to lesser privilege) 82
Jcc rel8 7+m/3
Jcc rel16 7+m/3
Jcc rel32 7+m/3
JCXZ rel8 9+m/5
JECXZ rel8 9+m/5
JMP rel8 7+m
JMP rel16 7+m
JMP r/m16 7+m/10+m
JMP ptr16:16 12/27+m
JMP ptr16:16 (PM, direct segment) 12/27+m
JMP ptr16:16 (PM, via call gate, same pr45+m
JMP m16:16 43/31+m
JMP m16:16 (PM, direct segment) 43/31+m
JMP m16:16 (PM, via call gate, same priv49+m
JMP rel32 7+m
JMP r/m32 (7/10)+m
JMP ptr16:32 12/27+m
JMP ptr16:32 (PM, direct segment) 12/27+m
JMP ptr16:32 (PM, via call gate, same pr45+m
JMP m16:32 43/31+m
JMP m16:32 (PM, direct segment) 43/31+m
JMP m16:32 (PM, via call gate, same priv49+m
LAHF 2
LAR r16,r/m16 15/16
LAR r32,r/m32 15/16
LDS r16,m16:16 7/22
LDS r32,m16:32 7/22
LDS r16,m16:16 (PM) 7/22
LDS r32,m16:32 (PM) f
LSS r16,m16:16 7/22
LSS r32,m16:32 7/22
LSS r16,m16:16 (PM) 7/22
LSS r32,m16:32 (PM) f
LES r16,m16:16 7/22
LES r32,m16:32 7/22
LES r16,m16:16 (PM) 7/22
LES r32,m16:32 (PM) f
LFS r16,m16:16 7/25
LFS r32,m16:32 7/25
LFS r16,m16:16 (PM) 7/22
LFS r32,m16:32 (PM) f
LGS r16,m16:16 7/25
LGS r32,m16:32 7/25
LGS r16,m16:16 (PM) 7/22
LGS r32,m16:32 (PM) f
LEA r16,m 2
LEA r32,m 2
LEAVE 4
LGDT m16&32 11
LIDT m16&32 11
LLDT r/m16 20
LMSW r/m16 10/13
LOADALL f
LODSB 5
LODSW 5
LODSD 5
LOOP rel8 11+m
LOOPE rel8 11+m
LOOPNE rel8 11+m
LSL r16,r/m16 20/21
LSL r32,r/m32 20/21
LTR r/m16 23/27
MOV r/m8,r8 2/2
MOV r/m16,r16 2/2
MOV r/m32,r32 2/2
MOV r8,r/m8 2/4
MOV r16,r/m16 2/4
MOV r32,r/m32 2/4
MOV r/m16,sreg 2/2
MOV sreg,r/m16 2/5 18/19
MOV sreg,r/m16 (PM) f
MOV AL,moffs8 4
MOV AX,moffs16 4
MOV EAX,moffs32 4
MOV moffs8,AL 2
MOV moffs16,AX 2
MOV moffs32,EAX 2
MOV r8,imm8 2
MOV r16,imm16 2
MOV r32,imm32 2
MOV r/m8,imm8 2/2
MOV r/m16,imm16 2/2
MOV r/m32,imm32 2/2
MOV CR0,r32 10
MOV CR2,r32 4/5
MOV CR3,r32 4/5
MOV CR4,r32 f
MOV r32,CRi 6
MOV r32,DR0-DR3 22
MOV r32,DR4-DR5 f
MOV r32,DR6-DR7 14
MOV DR0-DR3,r32 22
MOV DR4-DR5,r32 f
MOV DR6-DR7,r32 16
MOV r32,TR4-TR7 12
MOV TR4-TR7,r32 12
MOVSB 7
MOVSW 7
MOVSD 7
MOVSX r16,r/m8 3/6
MOVSX r32,r/m8 3/6
MOVSX r32,r/m16 3/6
MOVZX r16,r/m8 3/6
MOVZX r32,r/m8 3/6
MOVZX r32,r/m16 3/6
MUL r/m8 9/14-12/17
MUL r/m16 9/22-12/25
MUL r/m32 9/38-12/41
NEG r/m8 2/6
NEG r/m16 2/6
NEG r/m32 2/6
NOP 3
NOT r/m8 2/6
NOT r/m16 2/6
NOT r/m32 2/6
OR AL,imm8 2
OR AX,imm16 2
OR EAX,imm32 2
OR r/m8,imm8 2/7
OR r/m16,imm8 2/7
OR r/m32,imm8 2/7
OR r/m16,imm16 2/7
OR r/m32,imm32 2/7
OR r/m8,r8 2/7
OR r/m16,r16 2/7
OR r/m32,r32 2/7
OR r8,r/m8 2/6
OR r16,r/m16 2/6
OR r32,r/m32 2/6
OUT imm8,AL 10
OUT imm8,AL (PM, CPL <= IOPL) 4/24
OUT imm8,AL (VM) 4/24
OUT imm8,AX 10
OUT imm8,AX (PM, CPL <= IOPL) 4/24
OUT imm8,AX (VM) 4/24
OUT imm8,EAX 10
OUT imm8,EAX (PM, CPL <= IOPL) 4/24
OUT imm8,EAX (VM) 4/24
OUT DX,AL 11
OUT DX,AL (PM, CPL <= IOPL) 5/25
OUT DX,AL (VM) 5/25
OUT DX,AX 11
OUT DX,AX (PM, CPL <= IOPL) 5/25
OUT DX,AX (VM) 5/25
OUT DX,EAX 11
OUT DX,EAX (PM, CPL <= IOPL) 5/25
OUT DX,EAX (VM) 5/25
OUTSB 14
OUTSW 14
OUTSD 14
POP m16 5
POP m32 5
POP r16 4
POP r32 4
POP sreg 7/21
POP sreg (PM) 7/21
POPA 24
POPAD 24
POPF 5
POPF (PM) 5
POPF (VM) ??
POPFD 5
POPFD (PM) 5
POPFD (VM) ??
PUSH r/m16 5
PUSH r/m32 5
PUSH r16 2
PUSH r32 2
PUSH imm8 2
PUSH imm16 2
PUSH imm32 2
PUSH sreg 2
PUSHA 18
PUSHAD 18
PUSHF 4
PUSHF (PM) 4
PUSHF (VM) 4 ??
PUSHFD 4
PUSHFD (PM) 4
PUSHFD (VM) 4 ??
RCL r/m8,1 9/10
RCL r/m16,1 9/10
RCL r/m32,1 9/10
RCL r/m8,CL 9/10
RCL r/m16,CL 9/10
RCL r/m32,CL 9/10
RCL r/m8,imm8 9/10
RCL r/m16,imm8 9/10
RCL r/m32,imm8 9/10
RCR r/m8,1 9/10
RCR r/m16,1 9/10
RCR r/m32,1 9/10
RCR r/m8,CL 9/10
RCR r/m16,CL 9/10
RCR r/m32,CL 9/10
RCR r/m8,imm8 9/10
RCR r/m16,imm8 9/10
RCR r/m32,imm8 9/10
ROL r/m8,1 3/7
ROL r/m16,1 3/7
ROL r/m32,1 3/7
ROL r/m8,CL 3/7
ROL r/m16,CL 3/7
ROL r/m32,CL 3/7
ROL r/m8,imm8 3/7
ROL r/m16,imm8 3/7
ROL r/m32,imm8 3/7
ROR r/m8,1 3/7
ROR r/m16,1 3/7
ROR r/m32,1 3/7
ROR r/m8,CL 3/7
ROR r/m16,CL 3/7
ROR r/m32,CL 3/7
ROR r/m8,imm8 3/7
ROR r/m16,imm8 3/7
ROR r/m32,imm8 3/7
RDTSC f
RET (near) 10+m
RET (far) 18+m
RET (PM, far, same PL) 32+m
RET (PM, far, different PL) 68
RET imm16 (near) 10+m
RET imm16 (far) 18+m
RET imm16 (PM, far, same PL) 32+m
RET imm16 (PM, far, different PL) 68
SAHF 3
SAL r/m8,1 3/7
SAL r/m16,1 3/7
SAL r/m32,1 3/7
SAL r/m8,CL 3/7
SAL r/m16,CL 3/7
SAL r/m32,CL 3/7
SAL r/m8,imm8 3/7
SAL r/m16,imm8 3/7
SAL r/m32,imm8 3/7
SAR r/m8,1 3/7
SAR r/m16,1 3/7
SAR r/m32,1 3/7
SAR r/m8,CL 3/7
SAR r/m16,CL 3/7
SAR r/m32,CL 3/7
SAR r/m8,imm8 3/7
SAR r/m16,imm8 3/7
SAR r/m32,imm8 3/7
SHL r/m8,1 3/7
SHL r/m16,1 3/7
SHL r/m32,1 3/7
SHL r/m8,CL 3/7
SHL r/m16,CL 3/7
SHL r/m32,CL 3/7
SHL r/m8,imm8 3/7
SHL r/m16,imm8 3/7
SHL r/m32,imm8 3/7
SHR r/m8,1 3/7
SHR r/m16,1 3/7
SHR r/m32,1 3/7
SHR r/m8,CL 3/7
SHR r/m16,CL 3/7
SHR r/m32,CL 3/7
SHR r/m8,imm8 3/7
SHR r/m16,imm8 37/
SHR r/m32,imm8 3/7
SBB AL,imm8 2
SBB AX,imm16 2
SBB EAX,imm32 2
SBB r/m8,imm8 2/7
SBB r/m16,imm8 2/7
SBB r/m32,imm8 2/7
SBB r/m16,imm16 2/7
SBB r/m32,imm32 2/7
SBB r/m8,r8 2/7
SBB r/m16,r16 2/7
SBB r/m32,r32 2/7
SBB r8,r/m8 2/6
SBB r16,r/m16 2/6
SBB r32,r/m32 2/6
SCASB 7
SCASW 7
SCASD 7
SETALC f
SETcc r/m8 4/5
SGDT m16&32 9
SIDT m16&32 9
SHLD r/m16,r16,imm8 3/7
SHLD r/m32,r32,imm8 3/7
SHLD r/m16,r16,CL 3/7
SHLD r/m32,r32,CL 3/7
SHRD r/m16,r16,imm8 3/7
SHRD r/m32,r32,imm8 3/7
SHRD r/m16,r16,CL 3/7
SHRD r/m32,r32,CL 3/7
SLDT r/m16 2/2
SLDT r/m32 f
SMINT f
SMSW r/m16 2/3 2/2
STC 2
STD 2
STI 2
STOSB 4
STOSW 4
STOSD 4
STR r/m16 23/27
SUB AL,imm8 2/8
SUB AX,imm16 2/7
SUB EAX,imm32 2/7
SUB r/m8,imm8 2/7
SUB r/m16,imm8 2/7
SUB r/m32,imm8 2/7
SUB r/m16,imm16 2/7
SUB r/m32,imm32 2/7
SUB r/m8,r8 2/7
SUB r/m16,r16 2/7
SUB r/m32,r32 2/7
SUB r8,r/m8 2/6
SUB r16,r/m16 2/6
SUB r32,r/m32 2/6
TEST AL,imm8 2
TEST AX,imm16 2
TEST EAX,imm32 2
TEST r/m8,imm8 2/5
TEST r/m16,imm16 2/5
TEST r/m32,imm32 2/5
TEST r/m8,r8 2/5
TEST r/m16,r16 2/5
TEST r/m32,r32 2/5
UMOV r8,r/m8 f
UMOV r16,r/m16 f
UMOV r32,r/m32 f
UMOV r/m8,r8 f
UMOV r/m16,r16 f
UMOV r/m32,r32 f
VERR r/m16 10/11
VERW r/m16 15/16
WAIT 6min
XBTS r16,r/m16,AX,CL 6/13
XBTS r32,r/m32,EAX,CL 6/13
XCHG AX,r16 3
XCHG EAX,r32 3
XCHG r/m8,r8 3/5
XCHG r/m16,r16 3/5
XCHG r/m32,r32 3/5
XLAT 5
XOR AL,imm8 2
XOR AX,imm16 2
XOR EAX,imm32 2
XOR r/m8,imm8 2
XOR r/m16,imm8 2/7
XOR r/m32,imm8 2/7
XOR r/m16,imm16 2/7
XOR r/m32,imm32 2/7
XOR r/m8,r8 2/7
XOR r/m16,r16 2/7
XOR r/m32,r32 2/7
XOR r8,r/m8 2/6
XOR r16,r/m16 2/6
XOR r32,r/m32 2/6
(END)
----------------------------------------------------------
APPENDIX Y5 - Vendor Instruction Time for Intel i486DX CPU
AAA 3
AAD 14
AAD imm8 n/a
AAM 15
AAM imm8 n/a
AAS 3
ADC AL,imm8 1
ADC AX,imm16 1
ADC EAX,imm32 1
ADC r/m8,imm8 1/3
ADC r/m16,imm8 1/3
ADC r/m32,imm8 1/3
ADC r/m16,imm16 1/3
ADC r/m32,imm32 f
ADC r/m8,r8 1/3
ADC r/m16,r16 1/3
ADC r/m32,r32 f
ADC r8,r/m8 1/2
ADC r16,r/m16 1/2
ADC r32,r/m32 1/2
ADD AL,imm8 1
ADD AX,imm16 1
ADD EAX,imm32 1
ADD r/m8,imm8 1/3
ADD r/m16,imm8 1/3
ADD r/m32,imm8 1/3
ADD r/m16,imm16 1/3
ADD r/m32,imm32 1/3
ADD r/m8,r8 1/3
ADD r/m16,r16 1/3
ADD r/m32,r32 1/3
ADD r8,r/m8 1/2
ADD r16,r/m16 1/2
ADD r32,r/m32 1/2
AND AL,imm8 1
AND AX,imm16 1
AND EAX,imm32 1
AND r/m8,imm8 1/3
AND r/m16,imm8 1/3
AND r/m32,imm8 1/3
AND r/m16,imm16 1/3
AND r/m32,imm32 1/3
AND r/m8,r8 1/3
AND r/m16,r16 1/3
AND r/m32,r32 1/3
AND r8,r/m8 1/2
AND r16,r/m16 1/2
AND r32,r/m32 1/2
ARPL r/m16,r16 9/9
BOUND r16,m16&16 7
BOUND r32,m32&32 7
BSF r16,r/m16 6-42/7-43
BSF r32,r/m32 6-42/7-43
BSR r16,r/m16 6-103/7-104
BSR r32,r/m32 6-103/7-104
BSWAP r32 1
BT r/m16,r16 3/8
BT r/m32,r32 3/8
BT r/m16,imm8 3/3
BT r/m16,imm8 3/3
BTC r/m16,r16 6/13
BTC r/m32,r32 6/13
BTC r/m16,imm8 6/8
BTC r/m16,imm8 6/8
BTR r/m16,r16 6/13
BTR r/m32,r32 6/13
BTR r/m16,imm8 6/8
BTR r/m16,imm8 6/8
BTS r/m16,r16 6/13
BTS r/m32,r32 6/13
BTS r/m16,imm8 6/8
BTS r/m16,imm8 6/8
CALL rel16 3
CALL r/m16 5/5
CALL ptr16:16 18
CALL ptr16:16 (PM, direct segment) 20
CALL ptr16:16 (PM, via call gate, same p35
CALL ptr16:16 (PM, via call gate, more p69
CALL ptr16:16 (PM, via call gate, more p77+4*p
CALL m16:16 17
CALL m16:16 (PM, direct segment) 20
CALL m16:16 (PM, via gate, same priveleg35
CALL m16:16 (PM, via gate, more priveleg69
CALL m16:16 (PM, via gate, more priveleg77+4*p
CALL rel32 3
CALL r/m32 5/5
CALL ptr16:32 18
CALL ptr16:32 (PM, direct segment) 20
CALL ptr16:32 (PM, via gate, same privel35
CALL ptr16:32 (PM, via gate, more privel69
CALL ptr16:32 (PM, via gate, more privel77+4*p
CALL m16:32 17
CALL m16:32 (PM, direct segment) 20
CALL m16:32 (PM, via gate, same priveleg35
CALL m16:32 (PM, via gate, more priveleg69
CALL m16:32 (PM, via gate, more priveleg77+4*p
CBW 3
CWDE 3
CLC 2
CLD 2
CLI 5
CLTS 7
CMC 2
CMOVcc r16,r/m16 f
CMOVcc r32,r/m32 f
CMP AL,imm8 1
CMP AX,imm16 1
CMP EAX,imm32 1
CMP r/m8,imm8 1/2
CMP r/m16,imm8 1/2
CMP r/m32,imm8 1/2
CMP r/m16,imm16 1/2
CMP r/m32,imm32 1/2
CMP r/m8,r8 1/2
CMP r/m16,r16 1/2
CMP r/m32,r32 1/2
CMP r8,r/m8 1/3
CMP r16,r/m16 1/3
CMP r32,r/m32 1/3
CMPSB 8
CMPSW 8
CMPSD 8
CMPXCHG r/m8,r8 6/7 6/10
CMPXCHG r/m16,r16 6/7 6/10
CMPXCHG r/m32,r32 6/7 6/10
CPUID (SL Enhanced only)
CWD 3
CDQ 3
DAA 2
DAS 2
DEC r/m8 1/3
DEC r/m16 1/3
DEC r/m32 1/3
DEC r16 1
DEC r32 1
DIV r/m8 16/16
DIV r/m16 24/24
DIV r/m32 40/40
ESC imm4,r/m f
ENTER imm16,0 14
ENTER imm16,1 17
ENTER imm16,imm8 17+3*n
HLT 4
IDIV r/m8 19/20
IDIV r/m16 27/28
IDIV r/m32 43/44
IMUL r/m8 13-18/13-18
IMUL r/m16 13-26/13-26
IMUL r/m32 12-42/13-42
IMUL r16,r/m16 13-26/13-26
IMUL r32,r/m32 13-42/13-42
IMUL r16,imm8 13-26
IMUL r32,imm8 13-26
IMUL r16,imm16 13-26/13-26
IMUL r32,imm32 13-42/13-42
IMUL r16,r/m16,imm8 13-26/13-26
IMUL r32,r/m32,imm8 13-42/13-42
IMUL r16,r/m16,imm16 13-26/13-26
IMUL r32,r/m32,imm32 13-42/13-42
IN AL,imm8 14
IN AL,imm8 (PM, CPL <= IOPL) 8/28
IN AL,imm8 (VM) 27
IN AX,imm8 14
IN AX,imm8 (PM, CPL <= IOPL) 8/28
IN AX,imm8 (VM) 27
IN EAX,imm8 14
IN EAX,imm8 (PM, CPL <= IOPL) 8/28
IN EAX,imm8 (VM) 27
IN AL,DX 14
IN AL,DX (PM, CPL <= IOPL) 8/28
IN AL,DX (VM) 27
IN AX,DX 14
IN AX,DX (PM, CPL <= IOPL) 8/28
IN AX,DX (VM) 2
IN EAX,DX 14
IN EAX,DX (PM, CPL <= IOPL) 8/28
IN EAX,DX (VM) 27
INC r/m8 1/3
INC r/m16 1/3
INC r/m32 1/3
INC r16 1
INC r32 1
INSB 17
INSW 17
INSD 17
INT 3 26
INT 3 (PM, same privilege) 44
INT 3 (PM, more privelege) 71
INT imm8 30
INT imm8 (PM, same privilege) 44
INT imm8 (PM, more privelege) 71
INTO 3/28
INTO (PM, same privilege) 3/46
INTO (PM, more privelege) 3/73
INVD 4
INVLPG m 12
IRET 15
IRET (PM, to same privilege) 15
IRET (PM, to lesser privilege) 36
IRETD 15
IRETD (PM, to same privilege) 15
IRETD (PM, to lesser privilege) 36
Jcc rel8 3/1
Jcc rel16 3/1
Jcc rel32 3/1
JCXZ rel8 8/5
JECXZ rel8 8/5
JMP rel8 3
JMP rel16 3
JMP r/m16 5/5
JMP ptr16:16 17/19
JMP ptr16:16 (PM, direct segment) 17/19
JMP ptr16:16 (PM, via call gate, same pr32
JMP m16:16 13/18
JMP m16:16 (PM, direct segment) 13/18
JMP m16:16 (PM, via call gate, same priv31
JMP rel32 3
JMP r/m32 5/5
JMP ptr16:32 13/18
JMP ptr16:32 (PM, direct segment) 13/18
JMP ptr16:32 (PM, via call gate, same pr31
JMP m16:32 13/18
JMP m16:32 (PM, direct segment) 13/18
JMP m16:32 (PM, via call gate, same priv31
LAHF 3
LAR r16,r/m16 11/11
LAR r32,r/m32 11/11
LDS r16,m16:16 6/12p
LDS r32,m16:32 6/12p
LDS r16,m16:16 (PM) f
LDS r32,m16:32 (PM) f
LSS r16,m16:16 7/22p
LSS r32,m16:32 7/22p
LSS r16,m16:16 (PM) f
LSS r32,m16:32 (PM) f
LES r16,m16:16 7/22p
LES r32,m16:32 7/22p
LES r16,m16:16 (PM) f
LES r32,m16:32 (PM) f
LFS r16,m16:16 6/12p
LFS r32,m16:32 6/12p
LFS r16,m16:16 (PM) f
LFS r32,m16:32 (PM) f
LGS r16,m16:16 6/12p
LGS r32,m16:32 6/12p
LGS r16,m16:16 (PM) f
LGS r32,m16:32 (PM) f
LEA r16,m 1
LEA r32,m 1
LEAVE 5
LGDT m16&32 11
LIDT m16&32 11
LLDT r/m16 11/11
LMSW r/m16 13/13
LOADALL f
LODSB 5
LODSW 5
LODSD 5
LOOP rel8 2,6
LOOPE rel8 9,6
LOOPNE rel8 9,6
LSL r16,r/m16 10/10
LSL r32,r/m32 10/10
LTR r/m16 20/20
MOV r/m8,r8 1
MOV r/m16,r16 1
MOV r/m32,r32 1
MOV r8,r/m8 1
MOV r16,r/m16 1
MOV r32,r/m32 1
MOV r/m16,sreg 3/3
MOV sreg,r/m16 3/9
MOV sreg,r/m16 (PM) f
MOV AL,moffs8 1
MOV AX,moffs16 1
MOV EAX,moffs32 1
MOV moffs8,AL 1
MOV moffs16,AX 1
MOV moffs32,EAX 1
MOV r8,imm8 1
MOV r16,imm16 1
MOV r32,imm32 1
MOV r/m8,imm8 1
MOV r/m16,imm16 1
MOV r/m32,imm32 1
MOV CR0,r32 16
MOV CR2,r32 4
MOV CR3,r32 4
MOV CR4,r32 (SL Enhanced only)
MOV r32,CRi 4
MOV r32,DR0-DR3 10
MOV r32,DR4-DR5 9 (alias to DR6-DR7)
MOV r32,DR6-DR7 10
MOV DR0-DR3,r32 11
MOV DR4-DR5,r32 10 (alias to DR6-DR7)
MOV DR6-DR7,r32 11
MOV r32,TR4-TR7 4
MOV r32,TR3 4
MOV TR3,r32 6
MOV TR4-TR7,r32 f
MOVSB 7
MOVSW 7
MOVSD 7
MOVSX r16,r/m8 3/3
MOVSX r32,r/m8 3/3
MOVSX r32,r/m16 3/3
MOVZX r16,r/m8 3/3
MOVZX r32,r/m8 3/3
MOVZX r32,r/m16 3/3
MUL r/m8 13-18/
MUL r/m16 13-26/
MUL r/m32 13-42/
NEG r/m8 1/3
NEG r/m16 1/3
NEG r/m32 1/3
NOP 1
NOT r/m8 1/3
NOT r/m16 1/3
NOT r/m32 1/3
OR AL,imm8 1
OR AX,imm16 1
OR EAX,imm32 1
OR r/m8,imm8 1/3
OR r/m16,imm8 1/3
OR r/m32,imm8 1/3
OR r/m16,imm16 1/3
OR r/m32,imm32 1/3
OR r/m8,r8 1/3
OR r/m16,r16 1/3
OR r/m32,r32 1/3
OR r8,r/m8 1/2
OR r16,r/m16 1/2
OR r32,r/m32 1/2
OUT imm8,AL 16
OUT imm8,AL (PM, CPL <= IOPL) 11/31
OUT imm8,AL (VM) 25
OUT imm8,AX 16
OUT imm8,AX (PM, CPL <= IOPL) 11/31
OUT imm8,AX (VM) 25
OUT imm8,EAX 16
OUT imm8,EAX (PM, CPL <= IOPL) 11/31
OUT imm8,EAX (VM) 25
OUT DX,AL 16
OUT DX,AL (PM, CPL <= IOPL) 11/31
OUT DX,AL (VM) 25
OUT DX,AX 16
OUT DX,AX (PM, CPL <= IOPL) 11/31
OUT DX,AX (VM) 25
OUT DX,EAX 16
OUT DX,EAX (PM, CPL <= IOPL) 11/31
OUT DX,EAX (VM) 25
OUTSB 17
OUTSW 10/32
OUTSD 30
POP m16 6
POP m32 6
POP r16 4
POP r32 4
POP sreg 3
POP sreg (PM) f
POPA 9
POPAD 9
POPF 9/6p
POPF (PM) 6
POPF (VM) 9
POPFD 9/6p
POPFD (PM) 6
POPFD (VM) 9
PUSH r/m16 4
PUSH r/m32 4
PUSH r16 1
PUSH r32 1
PUSH imm8 1
PUSH imm16 1
PUSH imm32 1
PUSH sreg 3
PUSHA 11
PUSHAD 11
PUSHF 4/3p
PUSHF (PM) 3
PUSHF (VM) 4
PUSHFD 4/3p
PUSHFD (PM) 3
PUSHFD (VM) 4
RCL r/m8,1 3/4
RCL r/m16,1 3/4
RCL r/m32,1 3/4
RCL r/m8,CL 8-30/9-31
RCL r/m16,CL 8-30/9-31
RCL r/m32,CL 8-30/9-31
RCL r/m8,imm8 8-30/9-31
RCL r/m16,imm8 8-30/9-31
RCL r/m32,imm8 8-30/9-31
RCR r/m8,1 3/4
RCR r/m16,1 3/4
RCR r/m32,1 3/4
RCR r/m8,CL 8-30/9-31
RCR r/m16,CL 8-30/9-31
RCR r/m32,CL 8-30/9-31
RCR r/m8,imm8 8-30/9-31
RCR r/m16,imm8 8-30/9-31
RCR r/m32,imm8 8-30/9-31
ROL r/m8,1 3/4
ROL r/m16,1 3/4
ROL r/m32,1 3/4
ROL r/m8,CL 3/4
ROL r/m16,CL 3/4
ROL r/m32,CL 3/4
ROL r/m8,imm8 2/4
ROL r/m16,imm8 2/4
ROL r/m32,imm8 2/4
ROR r/m8,1 3/4
ROR r/m16,1 3/4
ROR r/m32,1 3/4
ROR r/m8,CL 3/4
ROR r/m16,CL 3/4
ROR r/m32,CL 3/4
ROR r/m8,imm8 2/4
ROR r/m16,imm8 2/4
ROR r/m32,imm8 2/4
RET (near) 5
RET (far) 13
RET (PM, far, same PL) 18
RET (PM, far, different PL) 33
RET imm16 (near) 5
RET imm16 (far) 14
RET imm16 (PM, far, same PL) f
RET imm16 (PM, far, different PL) f
SAHF 2
SAL r/m8,1 3/4
SAL r/m16,1 3/4
SAL r/m32,1 3/4
SAL r/m8,CL 3/4
SAL r/m16,CL 3/4
SAL r/m32,CL 3/4
SAL r/m8,imm8 2/4
SAL r/m16,imm8 2/4
SAL r/m32,imm8 2/4
SAR r/m8,1 3/4
SAR r/m16,1 3/4
SAR r/m32,1 3/4
SAR r/m8,CL 3/4
SAR r/m16,CL 3/4
SAR r/m32,CL 3/4
SAR r/m8,imm8 2/4
SAR r/m16,imm8 2/4
SAR r/m32,imm8 2/4
SHL r/m8,1 3/4
SHL r/m16,1 3/4
SHL r/m32,1 3/4
SHL r/m8,CL 3/4
SHL r/m16,CL 3/4
SHL r/m32,CL 3/4
SHL r/m8,imm8 2/4
SHL r/m16,imm8 2/4
SHL r/m32,imm8 2/4
SHR r/m8,1 3/4
SHR r/m16,1 3/4
SHR r/m32,1 3/4
SHR r/m8,CL 3/4
SHR r/m16,CL 3/4
SHR r/m32,CL 3/4
SHR r/m8,imm8 2/4
SHR r/m16,imm8 2/4
SHR r/m32,imm8 2/4
SBB AL,imm8 1
SBB AX,imm16 1
SBB EAX,imm32 1
SBB r/m8,imm8 1/3
SBB r/m16,imm8 1/3
SBB r/m32,imm8 1/3
SBB r/m16,imm16 1/3
SBB r/m32,imm32 1/3
SBB r/m8,r8 1/3
SBB r/m16,r16 1/3
SBB r/m32,r32 1/3
SBB r8,r/m8 1/2
SBB r16,r/m16 1/2
SBB r32,r/m32 1/2
SCASB 6
SCASW 6
SCASD 6
SETALC f
SETcc r/m8 4/3
SGDT m16&32 10
SIDT m16&32 10
SHLD r/m16,r16,imm8 2/3
SHLD r/m32,r32,imm8 2/3
SHLD r/m16,r16,CL 3/4
SHLD r/m32,r32,CL 3/4
SHRD r/m16,r16,imm8 2/3
SHRD r/m32,r32,imm8 2/3
SHRD r/m16,r16,CL 3/4
SHRD r/m32,r32,CL 3/4
SLDT r/m16 2/3
SLDT r/m32 2/3
SMINT f
SMSW r/m16 2/3
STC 2
STD 2
STI 5
STOSB 5
STOSW 5
STOSD 5
STR r/m16 2/3
SUB AL,imm8 1
SUB AX,imm16 1
SUB EAX,imm32 1
SUB r/m8,imm8 1/3
SUB r/m16,imm8 1/3
SUB r/m32,imm8 1/3
SUB r/m16,imm16 1/3
SUB r/m32,imm32 1/3
SUB r/m8,r8 1/3
SUB r/m16,r16 1/3
SUB r/m32,r32 1/3
SUB r8,r/m8 1/2
SUB r16,r/m16 1/2
SUB r32,r/m32 1/2
TEST AL,imm8 1
TEST AX,imm16 1
TEST EAX,imm32 1
TEST r/m8,imm8 1/2
TEST r/m16,imm16 1/2
TEST r/m32,imm32 1/2
TEST r/m8,r8 1/2
TEST r/m16,r16 1/2
TEST r/m32,r32 1/2
UMOV r8,r/m8 ??
UMOV r16,r/m16 ??
UMOV r32,r/m32 ??
UMOV r/m8,r8 ??
UMOV r/m16,r16 ??
UMOV r/m32,r32 ??
VERR r/m16 11/11
VERW r/m16 11/11
WAIT 1-3
WBINVD 5
XADD r/m8,r8 3/4
XADD r/m16,r16 3/4
XADD r/m32,r32 3/4
XCHG AX,r16 3
XCHG EAX,r32 3
XCHG r/m8,r8 3/5
XCHG r/m16,r16 3/5
XCHG r/m32,r32 3/5
XLAT 4
XOR AL,imm8 1
XOR AX,imm16 1
XOR EAX,imm32 1
XOR r/m8,imm8 1/3
XOR r/m16,imm8 1/3
XOR r/m32,imm8 1/3
XOR r/m16,imm16 1/3
XOR r/m32,imm32 1/3
XOR r/m8,r8 1/3
XOR r/m16,r16 1/3
XOR r/m32,r32 1/3
XOR r8,r/m8 1/2
XOR r16,r/m16 1/2
XOR r32,r/m32 1/2
(END)
----------------------------------------------------------
APPENDIX Y6 - Vendor Instruction Time for Cyrix Cx486DX CPU
AAA 4
AAD 4
AAD imm8 4
AAM 16
AAM imm8 16
AAS 4
ADC AL,imm8 1
ADC AX,imm16 1
ADC EAX,imm32 1
ADC r/m8,imm8 1/3
ADC r/m16,imm8 1/3
ADC r/m32,imm8 1/3
ADC r/m16,imm16 1/3
ADC r/m32,imm32 1/3
ADC r/m8,r8 1/3
ADC r/m16,r16 1/3
ADC r/m32,r32 1/3
ADC r8,r/m8 1/3
ADC r16,r/m16 1/3
ADC r32,r/m32 1/3
ADD AL,imm8 1
ADD AX,imm16 1
ADD EAX,imm32 1
ADD r/m8,imm8 1/3
ADD r/m16,imm8 1/3
ADD r/m32,imm8 1/3
ADD r/m16,imm16 1/3
ADD r/m32,imm32 1/3
ADD r/m8,r8 1/3
ADD r/m16,r16 1/3
ADD r/m32,r32 1/3
ADD r8,r/m8 1/3
ADD r16,r/m16 1/3
ADD r32,r/m32 1/3
AND AL,imm8 1
AND AX,imm16 1
AND EAX,imm32 1
AND r/m8,imm8 1/3
AND r/m16,imm8 1/3
AND r/m32,imm8 1/3
AND r/m16,imm16 1/3
AND r/m32,imm32 1/3
AND r/m8,r8 1/3
AND r/m16,r16 1/3
AND r/m32,r32 1/3
AND r8,r/m8 1/3
AND r16,r/m16 1/3
AND r32,r/m32 1/3
ARPL r/m16,r16 6/10
BOUND r16,m16&16 11 or 11+int
BOUND r32,m32&32 11 or 11+int
BSF r16,r/m16 5+n/7+n
BSF r32,r/m32 5+n/7+n
BSR r16,r/m16 5+n/7+n
BSR r32,r/m32 5+n/7+n
BSWAP r32 4
BT r/m16,r16 3/6
BT r/m32,r32 3/6
BT r/m16,imm8 3/4
BT r/m16,imm8 3/4
BTC r/m16,r16 5/8
BTC r/m32,r32 5/8
BTC r/m16,imm8 4/5
BTC r/m16,imm8 4/5
BTR r/m16,r16 5/8
BTR r/m32,r32 5/8
BTR r/m16,imm8 4/5
BTR r/m16,imm8 4/5
BTS r/m16,r16 4/7
BTS r/m32,r32 4/7
BTS r/m16,imm8 3/5
BTS r/m16,imm8 3/5
CALL rel16 7
CALL r/m16 8/9
CALL ptr16:16 12
CALL ptr16:16 (PM, direct segment) 30
CALL ptr16:16 (PM, via call gate, same p41
CALL ptr16:16 (PM, via call gate, more p83
CALL ptr16:16 (PM, via call gate, more p81+4*param
CALL m16:16 14
CALL m16:16 (PM, direct segment) 14
CALL m16:16 (PM, via gate, same priveleg43
CALL m16:16 (PM, via gate, more priveleg85
CALL m16:16 (PM, via gate, more priveleg86+4*param
CALL rel32 7
CALL r/m32 8/9
CALL ptr16:32 12
CALL ptr16:32 (PM, direct segment) 30
CALL ptr16:32 (PM, via gate, same privel41
CALL ptr16:32 (PM, via gate, more privel83
CALL ptr16:32 (PM, via gate, more privel81+4*param
CALL m16:32 14
CALL m16:32 (PM, direct segment) 14
CALL m16:32 (PM, via gate, same priveleg43
CALL m16:32 (PM, via gate, more priveleg85
CALL m16:32 (PM, via gate, more priveleg86+4*param
CBW 3
CWDE 3
CLC 1
CLD 1
CLI 7
CLTS 5
CMC 1
CMP AL,imm8 1
CMP AX,imm16 1
CMP EAX,imm32 1
CMP r/m8,imm8 1/3
CMP r/m16,imm8 1/3
CMP r/m32,imm8 1/3
CMP r/m16,imm16 1/3
CMP r/m32,imm32 1/3
CMP r/m8,r8 1/3
CMP r/m16,r16 1/3
CMP r/m32,r32 1/3
CMP r8,r/m8 1/3
CMP r16,r/m16 1/3
CMP r32,r/m32 1/3
CMPSB 7
CMPSW 7
CMPSD 7
CMPXCHG r/m8,r8 5/7
CMPXCHG r/m16,r16 5/7
CMPXCHG r/m32,r32 5/7
CWD 1
CDQ 1
DAA 4
DAS 4
DEC r/m8 1/3
DEC r/m16 1/3
DEC r/m32 1/3
DEC r16 1
DEC r32 1
DIV r/m8 14/15
DIV r/m16 22/23
DIV r/m32 38/39
ESC imm4,r/m n/a
ENTER imm16,0 7
ENTER imm16,1 10
ENTER imm16,imm8 6+4*level
HLT 3
IDIV r/m8 19/20
IDIV r/m16 27/28
IDIV r/m32 43/44
IMUL r/m8 3/5
IMUL r/m16 3/5
IMUL r/m32 7/9
IMUL r16,r/m16 3/5
IMUL r32,r/m32 7/9
IMUL r16,imm8 3/5
IMUL r32,imm8 7/9
IMUL r16,imm16 3/5
IMUL r32,imm32 7/9
IMUL r16,r/m16,imm8 3/5
IMUL r32,r/m32,imm8 7/9
IMUL r16,r/m16,imm16 3/5
IMUL r32,r/m32,imm32 7/9
IN AL,imm8 16
IN AL,imm8 (PM, CPL <= IOPL) 6
IN AL,imm8 (VM) 19
IN AX,imm8 16
IN AX,imm8 (PM, CPL <= IOPL) 6
IN AX,imm8 (VM) 19
IN EAX,imm8 16
IN EAX,imm8 (PM, CPL <= IOPL) 6
IN EAX,imm8 (VM) 19
IN AL,DX 16
IN AL,DX (PM, CPL <= IOPL) 6
IN AL,DX (VM) 19
IN AX,DX 16
IN AX,DX (PM, CPL <= IOPL) 6
IN AX,DX (VM) 19
IN EAX,DX 16
IN EAX,DX (PM, CPL <= IOPL) 6
IN EAX,DX (VM) 19
INC r/m8 1/3
INC r/m16 1/3
INC r/m32 1/3
INC r16 1
INC r32 1
INSB 20
INSW 20
INSD 20
INT 3 14
INT 3 (PM, same privilege) 49
INT 3 (PM, more privelege) 77
INT imm8 14
INT imm8 (PM, same privilege) 49
INT imm8 (PM, more privelege) 77
INTO 1 or 15
INTO (PM, same privilege) 1 or 49
INTO (PM, more privelege) 1 or 77
INVD 4
INVLPG m 4
IRET 14
IRET (PM, to same privilege) 31
IRET (PM, to lesser privilege) 66
IRETD 14
IRETD (PM, to same privilege) 31
IRETD (PM, to lesser privilege) 66
Jcc rel8 1 or 4
Jcc rel16 1 or 4
Jcc rel32 1 or 4
JCXZ rel8 3 or 7
JECXZ rel8 3 or 7
JMP rel8 4
JMP rel16 4
JMP r/m16 6/8
JMP ptr16:16 9
JMP ptr16:16 (PM, direct segment) 26
JMP ptr16:16 (PM, via call gate, same pr37
JMP m16:16 11
JMP m16:16 (PM, direct segment) 30
JMP m16:16 (PM, via call gate, same priv39
JMP rel32 4
JMP r/m32 6/8
JMP ptr16:32 9
JMP ptr16:32 (PM, direct segment) 26
JMP ptr16:32 (PM, via call gate, same pr37
JMP m16:32 11
JMP m16:32 (PM, direct segment) 30
JMP m16:32 (PM, via call gate, same priv39
LAHF 2
LAR r16,r/m16 11/12
LAR r32,r/m32 11/12
LDS r16,m16:16 6
LDS r32,m16:32 6
LDS r16,m16:16 (PM) 19
LDS r32,m16:32 (PM) 19
LSS r16,m16:16 6
LSS r32,m16:32 6
LSS r16,m16:16 (PM) 19
LSS r32,m16:32 (PM) 19
LES r16,m16:16 6
LES r32,m16:32 6
LES r16,m16:16 (PM) 19
LES r32,m16:32 (PM) 19
LFS r16,m16:16 6
LFS r32,m16:32 6
LFS r16,m16:16 (PM) 19
LFS r32,m16:32 (PM) 19
LGS r16,m16:16 6
LGS r32,m16:32 6
LGS r16,m16:16 (PM) 19
LGS r32,m16:32 (PM) 19
LEA r16,m 2 (w/o index)/3(with index)
LEA r32,m 2 (w/o index)/3(with index)
LEAVE 3
LGDT m16&32 9
LIDT m16&32 9
LLDT r/m16 16/17
LMSW r/m16 5
LODSB 4
LODSW 4
LODSD 4
LOOP rel8 3 or 7
LOOPE rel8 3 or 7
LOOPNE rel8 3 or 7
LSL r16,r/m16 14/15
LSL r32,r/m32 14/15
LTR r/m16 16/17
MOV r/m8,r8 1/2
MOV r/m16,r16 1/2
MOV r/m32,r32 1/2
MOV r8,r/m8 1/2
MOV r16,r/m16 1/2
MOV r32,r/m32 1/2
MOV r/m16,sreg 1/2
MOV sreg,r/m16 2/3
MOV sreg,r/m16 (PM) 15/16
MOV AL,moffs8 2
MOV AX,moffs16 2
MOV EAX,moffs32 2
MOV moffs8,AL 1/2
MOV moffs16,AX 1/2
MOV moffs32,EAX 1/2
MOV r8,imm8 1
MOV r16,imm16 1
MOV r32,imm32 1
MOV r/m8,imm8 1/2
MOV r/m16,imm16 1/2
MOV r/m32,imm32 1/2
MOV CR0,r32 11
MOV CR2,r32 3
MOV CR3,r32 3
MOV r32,CRi 1 (if CR0)/3 (if CR2,CR3)
MOV r32,DR0-DR3 3
MOV r32,DR4-DR5 3
MOV r32,DR6-DR7 3
MOV DR0-DR3,r32 1
MOV DR4-DR5,r32 1
MOV DR6-DR7,r32 1
MOV r32,TR4-TR7 3
MOV r32,TR3 5
MOV TR3,r32 5
MOV TR4-TR7,r32 1
MOVSB 5
MOVSW 5
MOVSD 5
MOVSX r16,r/m8 1/3
MOVSX r32,r/m8 1/3
MOVSX r32,r/m16 1/3
MOVZX r16,r/m8 2/3
MOVZX r32,r/m8 2/3
MOVZX r32,r/m16 2/3
MUL r/m8 3/5
MUL r/m16 3/5
MUL r/m32 7/9
NEG r/m8 1/3
NEG r/m16 1/3
NEG r/m32 1/3
NOP 1
NOT r/m8 1/3
NOT r/m16 1/3
NOT r/m32 1/3
OR AL,imm8 1
OR AX,imm16 1
OR EAX,imm32 1
OR r/m8,imm8 1/3
OR r/m16,imm8 1/3
OR r/m32,imm8 1/3
OR r/m16,imm16 1/3
OR r/m32,imm32 1/3
OR r/m8,r8 1/3
OR r/m16,r16 1/3
OR r/m32,r32 1/3
OR r8,r/m8 1/3
OR r16,r/m16 1/3
OR r32,r/m32 1/3
OUT imm8,AL 18
OUT imm8,AL (PM, CPL <= IOPL) 4
OUT imm8,AL (VM) 17
OUT imm8,AX 18
OUT imm8,AX (PM, CPL <= IOPL) 4
OUT imm8,AX (VM) 17
OUT imm8,EAX 18
OUT imm8,EAX (PM, CPL <= IOPL) 4
OUT imm8,EAX (VM) 17
OUT DX,AL 18
OUT DX,AL (PM, CPL <= IOPL) 4
OUT DX,AL (VM) 17
OUT DX,AX 18
OUT DX,AX (PM, CPL <= IOPL) 4
OUT DX,AX (VM) 17
OUT DX,EAX 18
OUT DX,EAX (PM, CPL <= IOPL) 4
OUT DX,EAX (VM) 17
OUTSB 20
OUTSW 20
OUTSD 20
POP m16 5
POP m32 5
POP r16 3
POP r32 3
POP sreg 4
POP sreg (PM) 18
POPA 18
POPAD 18
POPF 4
POPF (PM) 4
POPF (VM) 4
POPFD 4
POPFD (PM) 4
POPFD (VM) 4
PUSH r/m16 2/4
PUSH r/m32 2/4
PUSH r16 2
PUSH r32 2
PUSH imm8 2
PUSH imm16 2
PUSH imm32 2
PUSH sreg 2
PUSHA 17
PUSHAD 17
PUSHF 2
PUSHF (PM) 2
PUSHF (VM) 2
PUSHFD 2
PUSHFD (PM) 2
PUSHFD (VM) 2
RCL r/m8,1 9/9
RCL r/m16,1 9/9
RCL r/m32,1 9/9
RCL r/m8,CL 9/9
RCL r/m16,CL 9/9
RCL r/m32,CL 9/9
RCL r/m8,imm8 9/9
RCL r/m16,imm8 9/9
RCL r/m32,imm8 9/9
RCR r/m8,1 9/9
RCR r/m16,1 9/9
RCR r/m32,1 9/9
RCR r/m8,CL 9/9
RCR r/m16,CL 9/9
RCR r/m32,CL 9/9
RCR r/m8,imm8 9/9
RCR r/m16,imm8 9/9
RCR r/m32,imm8 9/9
ROL r/m8,1 2/4
ROL r/m16,1 2/4
ROL r/m32,1 2/4
ROL r/m8,CL 3/5
ROL r/m16,CL 3/5
ROL r/m32,CL 3/5
ROL r/m8,imm8 2/4
ROL r/m16,imm8 2/4
ROL r/m32,imm8 2/4
ROR r/m8,1 2/4
ROR r/m16,1 2/4
ROR r/m32,1 2/4
ROR r/m8,CL 3/5
ROR r/m16,CL 3/5
ROR r/m32,CL 3/5
ROR r/m8,imm8 2/4
ROR r/m16,imm8 2/4
ROR r/m32,imm8 2/4
RET (near) 10
RET (far) 13
RET (PM, far, same PL) 26
RET (PM, far, different PL) 61
RET imm16 (near) 10
RET imm16 (far) 13
RET imm16 (PM, far, same PL) 26
RET imm16 (PM, far, different PL) 61
RSDC m80,sreg 10
RSLDT m80 10
RSM 76
RSTS m80 10
SAHF 2
SAL r/m8,1 2/4
SAL r/m16,1 2/4
SAL r/m32,1 2/4
SAL r/m8,CL 3/5
SAL r/m16,CL 3/5
SAL r/m32,CL 3/5
SAL r/m8,imm8 2/4
SAL r/m16,imm8 2/4
SAL r/m32,imm8 2/4
SAR r/m8,1 2/4
SAR r/m16,1 2/4
SAR r/m32,1 2/4
SAR r/m8,CL 3/5
SAR r/m16,CL 3/5
SAR r/m32,CL 3/5
SAR r/m8,imm8 2/4
SAR r/m16,imm8 2/4
SAR r/m32,imm8 2/4
SHL r/m8,1 1/3
SHL r/m16,1 1/3
SHL r/m32,1 1/3
SHL r/m8,CL 2/4
SHL r/m16,CL 2/4
SHL r/m32,CL 2/4
SHL r/m8,imm8 1/3
SHL r/m16,imm8 1/3
SHL r/m32,imm8 1/3
SHR r/m8,1 1/3
SHR r/m16,1 1/3
SHR r/m32,1 1/3
SHR r/m8,CL 2/4
SHR r/m16,CL 2/4
SHR r/m32,CL 2/4
SHR r/m8,imm8 1/3
SHR r/m16,imm8 1/3
SHR r/m32,imm8 1/3
SBB AL,imm8 1
SBB AX,imm16 1
SBB EAX,imm32 1
SBB r/m8,imm8 1/3
SBB r/m16,imm8 1/3
SBB r/m32,imm8 1/3
SBB r/m16,imm16 1/3
SBB r/m32,imm32 1/3
SBB r/m8,r8 1/3
SBB r/m16,r16 1/3
SBB r/m32,r32 1/3
SBB r8,r/m8 1/3
SBB r16,r/m16 1/3
SBB r32,r/m32 1/3
SCASB 5
SCASW 5
SCASD 5
SETALC n/a
SETcc r/m8 2/2
SGDT m16&32 6
SIDT m16&32 6
SHLD r/m16,r16,imm8 1/3
SHLD r/m32,r32,imm8 1/3
SHLD r/m16,r16,CL 3/5
SHLD r/m32,r32,CL 3/5
SHRD r/m16,r16,imm8 1/3
SHRD r/m32,r32,imm8 1/3
SHRD r/m16,r16,CL 3/5
SHRD r/m32,r32,CL 3/5
SLDT r/m16 1/2
SLDT r/m32 1/2
SMINT 24
SMSW r/m16 1/2
STC 1
STD 1
STI 7
STOSB 3
STOSW 3
STOSD 3
STR r/m16 1/2
SUB AL,imm8 1
SUB AX,imm16 1
SUB EAX,imm32 1
SUB r/m8,imm8 1/3
SUB r/m16,imm8 1/3
SUB r/m32,imm8 1/3
SUB r/m16,imm16 1/3
SUB r/m32,imm32 1/3
SUB r/m8,r8 1/3
SUB r/m16,r16 1/3
SUB r/m32,r32 1/3
SUB r8,r/m8 1/3
SUB r16,r/m16 1/3
SUB r32,r/m32 1/3
SVDC sreg,m80 18
SVLDT m80 18
SVTS m80 18
TEST AL,imm8 1
TEST AX,imm16 1
TEST EAX,imm32 1
TEST r/m8,imm8 1/3
TEST r/m16,imm16 1/3
TEST r/m32,imm32 1/3
TEST r/m8,r8 1/3
TEST r/m16,r16 1/3
TEST r/m32,r32 1/3
UMOV r8,r/m8 n/a
UMOV r16,r/m16 n/a
UMOV r32,r/m32 n/a
UMOV r/m8,r8 n/a
UMOV r/m16,r16 n/a
UMOV r/m32,r32 n/a
VERR r/m16 9/10
VERW r/m16 9/10
WAIT 5
WBINVD 4
XADD r/m8,r8 3/6
XADD r/m16,r16 3/6
XADD r/m32,r32 3/6
XCHG AX,r16 3
XCHG EAX,r32 3
XCHG r/m8,r8 3/4
XCHG r/m16,r16 3/4
XCHG r/m32,r32 3/4
XLAT 3
XOR AL,imm8 1
XOR AX,imm16 1
XOR EAX,imm32 1
XOR r/m8,imm8 1/3
XOR r/m16,imm8 1/3
XOR r/m32,imm8 1/3
XOR r/m16,imm16 1/3
XOR r/m32,imm32 1/3
XOR r/m8,r8 1/3
XOR r/m16,r16 1/3
XOR r/m32,r32 1/3
XOR r8,r/m8 1/3
XOR r16,r/m16 1/3
XOR r32,r/m32 1/3
(END)
----------------------------------------------------------
APPENDIX Y7 - Vendor Instruction Time for Intel Pentium Processor
AAA 3
AAD 10
AAD imm8 n/a
AAM 18
AAM imm8 n/a
AAS 3
ADC AL,imm8 1
ADC AX,imm16 1
ADC EAX,imm32 1
ADC r/m8,imm8 1/3
ADC r/m16,imm8 1/3
ADC r/m32,imm8 1/3
ADC r/m16,imm16 1/3
ADC r/m32,imm32 1/3
ADC r/m8,r8 1/3
ADC r/m16,r16 1/3
ADC r/m32,r32 1/3
ADC r8,r/m8 1/2
ADC r16,r/m16 1/2
ADC r32,r/m32 1/2
ADD AL,imm8 1
ADD AX,imm16 1
ADD EAX,imm32 1
ADD r/m8,imm8 1/3
ADD r/m16,imm8 1/3
ADD r/m32,imm8 1/3
ADD r/m16,imm16 1/3
ADD r/m32,imm32 1/3
ADD r/m8,r8 1/3
ADD r/m16,r16 1/3
ADD r/m32,r32 1/3
ADD r8,r/m8 1/2
ADD r16,r/m16 1/2
ADD r32,r/m32 1/2
AND AL,imm8 1
AND AX,imm16 1
AND EAX,imm32 1
AND r/m8,imm8 1/3
AND r/m16,imm8 1/3
AND r/m32,imm8 1/3
AND r/m16,imm16 1/3
AND r/m32,imm32 1/3
AND r/m8,r8 1/3
AND r/m16,r16 1/3
AND r/m32,r32 1/3
AND r8,r/m8 1/2
AND r16,r/m16 1/2
AND r32,r/m32 1/2
ARPL r/m16,r16 f
BOUND r16,m16&16 8/int+32
BOUND r32,m32&32 f
BSF r16,r/m16 6-34/6-35
BSF r32,r/m32 6-42/6-43
BSR r16,r/m16 7-39/7-40
BSR r32,r/m32 7-71/7-72
BSWAP r32 1
BT r/m16,r16 4/9
BT r/m32,r32 4/9
BT r/m16,imm8 4
BT r/m16,imm8 4
BTC r/m16,r16 7/13
BTC r/m32,r32 7/13
BTC r/m16,imm8 7/8
BTC r/m16,imm8 7/8
BTR r/m16,r16 7/13
BTR r/m32,r32 7/13
BTR r/m16,imm8 7/8
BTR r/m16,imm8 7/8
BTS r/m16,r16 7/13
BTS r/m32,r32 7/13
BTS r/m16,imm8 7/8
BTS r/m16,imm8 7/8
CALL rel16 1
CALL r/m16 2
CALL ptr16:16 4
CALL ptr16:16 (PM, direct segment) f
CALL ptr16:16 (PM, via call gate, same p22
CALL ptr16:16 (PM, via call gate, more p44
CALL ptr16:16 (PM, via call gate, more p45+2*x
CALL m16:16 5
CALL m16:16 (PM, direct segment) f
CALL m16:16 (PM, via gate, same priveleg22
CALL m16:16 (PM, via gate, more priveleg44
CALL m16:16 (PM, via gate, more priveleg45+2*x
CALL rel32 1
CALL r/m32 2
CALL ptr16:32 4
CALL ptr16:32 (PM, direct segment) f
CALL ptr16:32 (PM, via gate, same privel22
CALL ptr16:32 (PM, via gate, more privel44
CALL ptr16:32 (PM, via gate, more privel45+2*x
CALL m16:32 5
CALL m16:32 (PM, direct segment) f
CALL m16:32 (PM, via gate, same priveleg22
CALL m16:32 (PM, via gate, more priveleg44
CALL m16:32 (PM, via gate, more priveleg45+2*x
CBW 3
CWDE 3
CLC 2
CLD 2
CLI 7
CLTS 10
CMC 2
CMOVcc r16,r/m16 f
CMOVcc r32,r/m32 f
CMP AL,imm8 1
CMP AX,imm16 1
CMP EAX,imm32 1
CMP r/m8,imm8 1/2
CMP r/m16,imm8 1/2
CMP r/m32,imm8 1/2
CMP r/m16,imm16 1/2
CMP r/m32,imm32 1/2
CMP r/m8,r8 1/2
CMP r/m16,r16 1/2
CMP r/m32,r32 1/2
CMP r8,r/m8 1/2
CMP r16,r/m16 1/2
CMP r32,r/m32 1/2
CMPSB 5
CMPSW 5
CMPSD 5
CMPXCHG r/m8,r8 6
CMPXCHG r/m16,r16 6
CMPXCHG r/m32,r32 6
CMPXCHG8B r/m32 10
CPUID 14
CWD 2
CDQ 2
DAA 3
DAS 3
DEC r/m8 1/3
DEC r/m16 1/3
DEC r/m32 1/3
DEC r16 1
DEC r32 1
DIV r/m8 17
DIV r/m16 25
DIV r/m32 41
ESC imm4,r/m f
ENTER imm16,0 11
ENTER imm16,1 15
ENTER imm16,imm8 15+2*n
HLT imfinity
IBTS r/m16,AX,CL,r16 None
IBTS r/m32,EAX,CL,r32 f
IDIV r/m8 22
IDIV r/m16 30
IDIV r/m32 46
IMUL r/m8 11
IMUL r/m16 11
IMUL r/m32 10
IMUL r16,r/m16 10
IMUL r32,r/m32 10
IMUL r16,imm8 10
IMUL r32,imm8 10
IMUL r16,imm16 10
IMUL r32,imm32 10
IMUL r16,r/m16,imm8 10
IMUL r32,r/m32,imm8 10
IMUL r16,r/m16,imm16 10
IMUL r32,r/m32,imm32 10
IN AL,imm8 7
IN AL,imm8 (PM, CPL <= IOPL) 4/21
IN AL,imm8 (VM) 19
IN AX,imm8 7
IN AX,imm8 (PM, CPL <= IOPL) 4/21
IN AX,imm8 (VM) 19
IN EAX,imm8 7
IN EAX,imm8 (PM, CPL <= IOPL) 4/21
IN EAX,imm8 (VM) 19
IN AL,DX 7
IN AL,DX (PM, CPL <= IOPL) 4/21
IN AL,DX (VM) 19
IN AX,DX 7
IN AX,DX (PM, CPL <= IOPL) 4/21
IN AX,DX (VM) 19
IN EAX,DX 7
IN EAX,DX (PM, CPL <= IOPL) 4/21
IN EAX,DX (VM) 19
INC r/m8 1/3
INC r/m16 1/3
INC r/m32 1/3
INC r16 1
INC r32 1
INSB 9
INSW 9
INSD 9
INT 3 13
INT 3 (PM, same privilege) 27
INT 3 (PM, more privelege) 44
INT imm8 16
INT imm8 (PM, same privilege) 31
INT imm8 (PM, more privelege) 48
INTO 4/13
INTO (PM, same privilege) 4/27
INTO (PM, more privelege) 4/44
INVD 15
INVLPG m 25
IRET 10
IRET (PM, to same privilege) 10
IRET (PM, to lesser privilege) 27
IRETD 10
IRETD (PM, to same privilege) 10
IRETD (PM, to lesser privilege) 27
Jcc rel8 1
Jcc rel16 1
Jcc rel32 1
JCXZ rel8 6,5
JECXZ rel8 6,5
JMP rel8 1
JMP rel16 1
JMP r/m16 2
JMP ptr16:16 3
JMP ptr16:16 (PM, direct segment) 3
JMP ptr16:16 (PM, via call gate, same pr18
JMP m16:16 4
JMP m16:16 (PM, direct segment) 4
JMP m16:16 (PM, via call gate, same priv18
JMP rel32 1
JMP r/m32 2
JMP ptr16:32 3
JMP ptr16:32 (PM, direct segment) 3
JMP ptr16:32 (PM, via call gate, same pr18
JMP m16:32 4
JMP m16:32 (PM, direct segment) 4
JMP m16:32 (PM, via call gate, same priv18
LAHF 2
LAR r16,r/m16 8
LAR r32,r/m32 8
LDS r16,m16:16 4
LDS r32,m16:32 4
LDS r16,m16:16 (PM) f
LDS r32,m16:32 (PM) f
LSS r16,m16:16 4
LSS r32,m16:32 4
LSS r16,m16:16 (PM) 8
LSS r32,m16:32 (PM) 8
LES r16,m16:16 4
LES r32,m16:32 4
LES r16,m16:16 (PM) f
LES r32,m16:32 (PM) f
LFS r16,m16:16 4
LFS r32,m16:32 4
LFS r16,m16:16 (PM) f
LFS r32,m16:32 (PM) f
LGS r16,m16:16 4
LGS r32,m16:32 4
LGS r16,m16:16 (PM) f
LGS r32,m16:32 (PM) f
LEA r16,m 1
LEA r32,m 1
LEAVE 3
LGDT m16&32 6
LIDT m16&32 6
LLDT r/m16 9
LMSW r/m16 8
LOADALL f
LODSB 2
LODSW 2
LODSD 2
LOOP rel8 5/6
LOOPE rel8 7/8
LOOPNE rel8 7/8
LSL r16,r/m16 8
LSL r32,r/m32 8
LTR r/m16 10
MOV r/m8,r8 1
MOV r/m16,r16 1
MOV r/m32,r32 1
MOV r8,r/m8 1
MOV r16,r/m16 1
MOV r32,r/m32 1
MOV r/m16,sreg 1
MOV sreg,r/m16 2/3
MOV sreg,r/m16 (PM) f
MOV AL,moffs8 1
MOV AX,moffs16 1
MOV EAX,moffs32 1
MOV moffs8,AL 1
MOV moffs16,AX 1
MOV moffs32,EAX 1
MOV r8,imm8 1
MOV r16,imm16 1
MOV r32,imm32 1
MOV r/m8,imm8 1
MOV r/m16,imm16 1
MOV r/m32,imm32 1
MOV CR0,r32 22
MOV CR2,r32 12/21,46
MOV CR3,r32 12/21,46
MOV CR4,r32 14
MOV r32,CRi 4
MOV r32,DR0-DR3 11
MOV r32,DR4-DR5 11
MOV r32,DR6-DR7 11
MOV DR0-DR3,r32 11
MOV DR4-DR5,r32 12
MOV DR6-DR7,r32 11
MOV r32,TR4-TR7 None
MOV r32,TR3 None
MOV TR3,r32 None
MOV TR4-TR7,r32 None
MOVSB 4
MOVSW 4
MOVSD 4
MOVSX r16,r/m8 3
MOVSX r32,r/m8 3
MOVSX r32,r/m16 3
MOVZX r16,r/m8 3
MOVZX r32,r/m8 3
MOVZX r32,r/m16 3
MUL r/m8 11
MUL r/m16 11
MUL r/m32 10
NEG r/m8 1/3
NEG r/m16 1/3
NEG r/m32 1/3
NOP 1
NOT r/m8 1/3
NOT r/m16 1/3
NOT r/m32 1/3
OR AL,imm8 1
OR AX,imm16 1
OR EAX,imm32 1
OR r/m8,imm8 1/3
OR r/m16,imm8 1/3
OR r/m32,imm8 1/3
OR r/m16,imm16 1/3
OR r/m32,imm32 1/3
OR r/m8,r8 1/3
OR r/m16,r16 1/3
OR r/m32,r32 1/3
OR r8,r/m8 1/2
OR r16,r/m16 1/2
OR r32,r/m32 1/2
OUT imm8,AL 12
OUT imm8,AL (PM, CPL <= IOPL) 9/25
OUT imm8,AL (VM) 24
OUT imm8,AX 12
OUT imm8,AX (PM, CPL <= IOPL) 9/25
OUT imm8,AX (VM) 24
OUT imm8,EAX 12
OUT imm8,EAX (PM, CPL <= IOPL) 9/25
OUT imm8,EAX (VM) 24
OUT DX,AL 12
OUT DX,AL (PM, CPL <= IOPL) 9/25
OUT DX,AL (VM) 24
OUT DX,AX 12
OUT DX,AX (PM, CPL <= IOPL) 9/25
OUT DX,AX (VM) 24
OUT DX,EAX 12
OUT DX,EAX (PM, CPL <= IOPL) 9/25
OUT DX,EAX (VM) 24
OUTSB 13
OUTSW 13
OUTSD 13
POP m16 3
POP m32 3
POP r16 1
POP r32 1
POP sreg 3
POP sreg (PM) f
POPA 5
POPAD 5
POPF f
POPF (PM) 4
POPF (VM) 6
POPFD f
POPFD (PM) 4
POPFD (VM) 6
PUSH r/m16 2
PUSH r/m32 2
PUSH r16 1
PUSH r32 1
PUSH imm8 1
PUSH imm16 1
PUSH imm32 1
PUSH sreg 1
PUSHA 5
PUSHAD 5
PUSHF f
PUSHF (PM) 3
PUSHF (VM) 4
PUSHFD f
PUSHFD (PM) 3
PUSHFD (VM) 4
RCL r/m8,1 1/3
RCL r/m16,1 1/3
RCL r/m32,1 1/3
RCL r/m8,CL 7-24/9-26
RCL r/m16,CL 7-24/9-26
RCL r/m32,CL 7-24/9-26
RCL r/m8,imm8 8-25/10-27
RCL r/m16,imm8 8-25/10-27
RCL r/m32,imm8 8-25/10-27
RCR r/m8,1 1/3
RCR r/m16,1 1/3
RCR r/m32,1 1/3
RCR r/m8,CL 7-24/9-26
RCR r/m16,CL 7-24/9-26
RCR r/m32,CL 7-24/9-26
RCR r/m8,imm8 8-25/10-27
RCR r/m16,imm8 8-25/10-27
RCR r/m32,imm8 8-25/10-27
ROL r/m8,1 1/3
ROL r/m16,1 1/3
ROL r/m32,1 1/3
ROL r/m8,CL 4
ROL r/m16,CL 4
ROL r/m32,CL 4
ROL r/m8,imm8 1/3
ROL r/m16,imm8 1/3
ROL r/m32,imm8 1/3
ROR r/m8,1 1/3
ROR r/m16,1 1/3
ROR r/m32,1 1/3
ROR r/m8,CL 4
ROR r/m16,CL 4
ROR r/m32,CL 4
ROR r/m8,imm8 1/3
ROR r/m16,imm8 1/3
ROR r/m32,imm8 1/3
RDMSR 20-24
RDTSC f
RET (near) 3
RET (far) 4
RET (PM, far, same PL) 4
RET (PM, far, different PL) 23
RET imm16 (near) 4
RET imm16 (far) 4
RET imm16 (PM, far, same PL) 4
RET imm16 (PM, far, different PL) 23
RSDC m80,sreg f
RSLDT m80 f
RSM 83
RSTS m80 f
SAHF 2
SAL r/m8,1 1/3
SAL r/m16,1 1/3
SAL r/m32,1 1/3
SAL r/m8,CL 4
SAL r/m16,CL 4
SAL r/m32,CL 4
SAL r/m8,imm8 1/3
SAL r/m16,imm8 1/3
SAL r/m32,imm8 1/3
SAR r/m8,1 1/3
SAR r/m16,1 1/3
SAR r/m32,1 1/3
SAR r/m8,CL 4
SAR r/m16,CL 4
SAR r/m32,CL 4
SAR r/m8,imm8 1/3
SAR r/m16,imm8 1/3
SAR r/m32,imm8 1/3
SHL r/m8,1 1/3
SHL r/m16,1 1/3
SHL r/m32,1 1/3
SHL r/m8,CL 4
SHL r/m16,CL 4
SHL r/m32,CL 4
SHL r/m8,imm8 1/3
SHL r/m16,imm8 1/3
SHL r/m32,imm8 1/3
SHR r/m8,1 1/3
SHR r/m16,1 1/3
SHR r/m32,1 1/3
SHR r/m8,CL 4
SHR r/m16,CL 4
SHR r/m32,CL 4
SHR r/m8,imm8 1/3
SHR r/m16,imm8 1/3
SHR r/m32,imm8 1/3
SBB AL,imm8 1
SBB AX,imm16 1
SBB EAX,imm32 1
SBB r/m8,imm8 1/3
SBB r/m16,imm8 1/3
SBB r/m32,imm8 1/3
SBB r/m16,imm16 1/3
SBB r/m32,imm32 1/3
SBB r/m8,r8 1/3
SBB r/m16,r16 1/3
SBB r/m32,r32 1/3
SBB r8,r/m8 1/2
SBB r16,r/m16 1/2
SBB r32,r/m32 1/2
SCASB 4
SCASW 4
SCASD 4
SETALC f
SETcc r/m8 1/2
SGDT m16&32 4
SIDT m16&32 4
SHLD r/m16,r16,imm8 4
SHLD r/m32,r32,imm8 4
SHLD r/m16,r16,CL 4/5
SHLD r/m32,r32,CL 4/5
SHRD r/m16,r16,imm8 4
SHRD r/m32,r32,imm8 4
SHRD r/m16,r16,CL 4/5
SHRD r/m32,r32,CL 4/5
SLDT r/m16 2
SLDT r/m32 f
SMINT f
SMSW r/m16 4
STC 2
STD 2
STI 7
STOSB 3
STOSW 3
STOSD 3
STR r/m16 2
SUB AL,imm8 1
SUB AX,imm16 1
SUB EAX,imm32 1
SUB r/m8,imm8 1/3
SUB r/m16,imm8 1/3
SUB r/m32,imm8 1/3
SUB r/m16,imm16 1/3
SUB r/m32,imm32 1/3
SUB r/m8,r8 1/3
SUB r/m16,r16 1/3
SUB r/m32,r32 1/3
SUB r8,r/m8 1/2
SUB r16,r/m16 1/2
SUB r32,r/m32 1/2
SVDC sreg,m80 f
SVLDT m80 f
SVTS m80 f
TEST AL,imm8 1
TEST AX,imm16 1
TEST EAX,imm32 1
TEST r/m8,imm8 1/2
TEST r/m16,imm16 1/2
TEST r/m32,imm32 1/2
TEST r/m8,r8 1/2
TEST r/m16,r16 1/2
TEST r/m32,r32 1/2
UMOV r8,r/m8 f
UMOV r16,r/m16 f
UMOV r32,r/m32 f
UMOV r/m8,r8 f
UMOV r/m16,r16 f
UMOV r/m32,r32 f
VERR r/m16 7
VERW r/m16 7
WAIT 1
WBINVD 2000+
WRMSR 30-45
XADD r/m8,r8 3/4
XADD r/m16,r16 3/4
XADD r/m32,r32 3/4
XCHG AX,r16 2
XCHG EAX,r32 2
XCHG r/m8,r8 3
XCHG r/m16,r16 3
XCHG r/m32,r32 3
XLAT 4
XOR AL,imm8 1
XOR AX,imm16 1
XOR EAX,imm32 1
XOR r/m8,imm8 1/3
XOR r/m16,imm8 1/3
XOR r/m32,imm8 1/3
XOR r/m16,imm16 1/3
XOR r/m32,imm32 1/3
XOR r/m8,r8 1/3
XOR r/m16,r16 1/3
XOR r/m32,r32 1/3
XOR r8,r/m8 1/2
XOR r16,r/m16 1/2
XOR r32,r/m32 1/2
(END)
----------------------------------------------------------
APPENDIX Y8 - Vendor Instruction Time for Cyrix Cx6x86 (M1) CPU
AAA 7
AAD 7
AAD imm8 7
AAM 13-21
AAM imm8 13-21??
AAS 7
ADC AL,imm8 1
ADC AX,imm16 1
ADC EAX,imm32 1
ADC r/m8,imm8 1
ADC r/m16,imm8 1
ADC r/m32,imm8 1
ADC r/m16,imm16 1
ADC r/m32,imm32 1
ADC r/m8,r8 1
ADC r/m16,r16 1
ADC r/m32,r32 1
ADC r8,r/m8 1
ADC r16,r/m16 1
ADC r32,r/m32 1
ADD AL,imm8 1
ADD AX,imm16 1
ADD EAX,imm32 1
ADD r/m8,imm8 1
ADD r/m16,imm8 1
ADD r/m32,imm8 1
ADD r/m16,imm16 1
ADD r/m32,imm32 1
ADD r/m8,r8 1
ADD r/m16,r16 1
ADD r/m32,r32 1
ADD r8,r/m8 1
ADD r16,r/m16 1
ADD r32,r/m32 1
AND AL,imm8 1
AND AX,imm16 1
AND EAX,imm32 1
AND r/m8,imm8 1
AND r/m16,imm8 1
AND r/m32,imm8 1
AND r/m16,imm16 1
AND r/m32,imm32 1
AND r/m8,r8 1
AND r/m16,r16 1
AND r/m32,r32 1
AND r8,r/m8 1
AND r16,r/m16 1
AND r32,r/m32 1
ARPL r/m16,r16 9
BOUND r16,m16&16 11 or 20
BOUND r32,m32&32 11 or 20
BSF r16,r/m16 3
BSF r32,r/m32 3
BSR r16,r/m16 3
BSR r32,r/m32 3
BSWAP r32 4
BT r/m16,r16 5/6
BT r/m32,r32 5/6
BT r/m16,imm8 2
BT r/m16,imm8 2
BTC r/m16,r16 5/6
BTC r/m32,r32 5/6
BTC r/m16,imm8 3
BTC r/m16,imm8 3
BTR r/m16,r16 5/6
BTR r/m32,r32 5/6
BTR r/m16,imm8 3
BTR r/m16,imm8 3
BTS r/m16,r16 5/6
BTS r/m32,r32 5/6
BTS r/m16,imm8 3
BTS r/m16,imm8 3
CALL rel16 1
CALL r/m16 1/3
CALL ptr16:16 3
CALL ptr16:16 (PM, direct segment) 4
CALL ptr16:16 (PM, via call gate, same p15
CALL ptr16:16 (PM, via call gate, more p26
CALL ptr16:16 (PM, via call gate, more p35+2*param
CALL m16:16 5
CALL m16:16 (PM, direct segment) 8
CALL m16:16 (PM, via gate, same priveleg20
CALL m16:16 (PM, via gate, more priveleg31
CALL m16:16 (PM, via gate, more priveleg40+2*param
CALL rel32 1
CALL r/m32 1/3
CALL ptr16:32 3
CALL ptr16:32 (PM, direct segment) 4
CALL ptr16:32 (PM, via gate, same privel15
CALL ptr16:32 (PM, via gate, more privel26
CALL ptr16:32 (PM, via gate, more privel35+2*param
CALL m16:32 5
CALL m16:32 (PM, direct segment) 8
CALL m16:32 (PM, via gate, same priveleg20
CALL m16:32 (PM, via gate, more priveleg31
CALL m16:32 (PM, via gate, more priveleg40+2*param
CBW 3
CWDE 2
CLC 1
CLD 7
CLI 7
CLTS 10
CMC 2
CMP AL,imm8 1
CMP AX,imm16 1
CMP EAX,imm32 1
CMP r/m8,imm8 1
CMP r/m16,imm8 1
CMP r/m32,imm8 1
CMP r/m16,imm16 1
CMP r/m32,imm32 1
CMP r/m8,r8 1
CMP r/m16,r16 1
CMP r/m32,r32 1
CMP r8,r/m8 1
CMP r16,r/m16 1
CMP r32,r/m32 1
CMPSB 5
CMPSW 5
CMPSD 5
CMPXCHG r/m8,r8 11
CMPXCHG r/m16,r16 11
CMPXCHG r/m32,r32 11
CPUID 12
CWD 2
CDQ 2
DAA 9
DAS 9
DEC r/m8 1
DEC r/m16 1
DEC r/m32 1
DEC r16 1
DEC r32 1
DIV r/m8 13-17
DIV r/m16 13-25
DIV r/m32 13-41
ENTER imm16,0 10
ENTER imm16,1 13
ENTER imm16,imm8 10+level*3
HLT 5
IDIV r/m8 16-20
IDIV r/m16 16-28
IDIV r/m32 17-45
IMUL r/m8 4
IMUL r/m16 4
IMUL r/m32 10
IMUL r16,r/m16 4
IMUL r32,r/m32 10
IMUL r16,imm8 ??
IMUL r32,imm8 ??
IMUL r16,imm16 ??
IMUL r32,imm32 ??
IMUL r16,r/m16,imm8 5
IMUL r32,r/m32,imm8 11
IMUL r16,r/m16,imm16 5
IMUL r32,r/m32,imm32 11
IN AL,imm8 14
IN AL,imm8 (PM, CPL <= IOPL) 14
IN AL,imm8 (VM) 28
IN AX,imm8 14
IN AX,imm8 (PM, CPL <= IOPL) 14
IN AX,imm8 (VM) 28
IN EAX,imm8 14
IN EAX,imm8 (PM, CPL <= IOPL) 14
IN EAX,imm8 (VM) 28
IN AL,DX 14
IN AL,DX (PM, CPL <= IOPL) 14
IN AL,DX (VM) 28
IN AX,DX 14
IN AX,DX (PM, CPL <= IOPL) 14
IN AX,DX (VM) 28
IN EAX,DX 14
IN EAX,DX (PM, CPL <= IOPL) 14
IN EAX,DX (VM) 28
INC r/m8 1
INC r/m16 1
INC r/m32 1
INC r16 1
INC r32 1
INSB 14
INSW 14
INSD 14
INT 3 9
INT 3 (PM, same privilege) 21
INT 3 (PM, more privelege) 32
INT imm8 9
INT imm8 (PM, same privilege) 21
INT imm8 (PM, more privelege) 32
INTO 6 or ??
INTO (PM, same privilege) 6 or 15+21
INTO (PM, more privelege) 6 or 15+32
INVD 12
INVLPG m 13
IRET 7
IRET (PM, to same privilege) 10
IRET (PM, to lesser privilege) 26
IRETD 7
IRETD (PM, to same privilege) 10
IRETD (PM, to lesser privilege) 26
Jcc rel8 1 or 1
Jcc rel16 1 or 1
Jcc rel32 1 or 1
JCXZ rel8 1 or 1
JECXZ rel8 1 or 1
JMP rel8 1
JMP rel16 1
JMP r/m16 1/3
JMP ptr16:16 1
JMP ptr16:16 (PM, direct segment) 4
JMP ptr16:16 (PM, via call gate, same pr14
JMP m16:16 5
JMP m16:16 (PM, direct segment) 7
JMP m16:16 (PM, via call gate, same priv17
JMP rel32 1
JMP r/m32 1/3
JMP ptr16:32 1
JMP ptr16:32 (PM, direct segment) 4
JMP ptr16:32 (PM, via call gate, same pr14
JMP m16:32 5
JMP m16:32 (PM, direct segment) 7
JMP m16:32 (PM, via call gate, same priv17
LAHF 2
LAR r16,r/m16 8
LAR r32,r/m32 8
LDS r16,m16:16 2
LDS r32,m16:32 2
LDS r16,m16:16 (PM) 4
LDS r32,m16:32 (PM) 4
LSS r16,m16:16 2
LSS r32,m16:32 2
LSS r16,m16:16 (PM) 4
LSS r32,m16:32 (PM) 4
LES r16,m16:16 2
LES r32,m16:32 2
LES r16,m16:16 (PM) 4
LES r32,m16:32 (PM) 4
LFS r16,m16:16 2
LFS r32,m16:32 2
LFS r16,m16:16 (PM) 4
LFS r32,m16:32 (PM) 4
LGS r16,m16:16 2
LGS r32,m16:32 2
LGS r16,m16:16 (PM) 4
LGS r32,m16:32 (PM) 4
LEA r16,m 1
LEA r32,m 1
LEAVE 4
LGDT m16&32 8
LIDT m16&32 8
LLDT r/m16 5
LMSW r/m16 13
LOADALL None
LODSB 3
LODSW 3
LODSD 3
LOOP rel8 1
LOOPE rel8 1
LOOPNE rel8 1
LSL r16,r/m16 8
LSL r32,r/m32 8
LTR r/m16 7
MOV r/m8,r8 1
MOV r/m16,r16 1
MOV r/m32,r32 1
MOV r8,r/m8 1
MOV r16,r/m16 1
MOV r32,r/m32 1
MOV r/m16,sreg 1
MOV sreg,r/m16 1
MOV sreg,r/m16 (PM) 1/3
MOV AL,moffs8 1
MOV AX,moffs16 1
MOV EAX,moffs32 1
MOV moffs8,AL 1
MOV moffs16,AX 1
MOV moffs32,EAX 1
MOV r8,imm8 1
MOV r16,imm16 1
MOV r32,imm32 1
MOV r/m8,imm8 1
MOV r/m16,imm16 1
MOV r/m32,imm32 1
MOV CR0,r32 20
MOV CR2,r32 5
MOV CR3,r32 5
MOV r32,CRi 6
MOV r32,DR0-DR3 14
MOV r32,DR4-DR5 14
MOV r32,DR6-DR7 14
MOV DR0-DR3,r32 16
MOV DR4-DR5,r32 16
MOV DR6-DR7,r32 16
MOV r32,TR4-TR7 6
MOV r32,TR3 5
MOV TR3,r32 10
MOV TR4-TR7,r32 10
MOVSB 4
MOVSW 4
MOVSD 4
MOVSX r16,r/m8 1
MOVSX r32,r/m8 1
MOVSX r32,r/m16 1
MOVZX r16,r/m8 1
MOVZX r32,r/m8 1
MOVZX r32,r/m16 1
MUL r/m8 4
MUL r/m16 4
MUL r/m32 10
NEG r/m8 1
NEG r/m16 1
NEG r/m32 1
NOP 1
NOT r/m8 1
NOT r/m16 1
NOT r/m32 1
OR AL,imm8 1
OR AX,imm16 1
OR EAX,imm32 1
OR r/m8,imm8 1
OR r/m16,imm8 1
OR r/m32,imm8 1
OR r/m16,imm16 1
OR r/m32,imm32 1
OR r/m8,r8 1
OR r/m16,r16 1
OR r/m32,r32 1
OR r8,r/m8 1
OR r16,r/m16 1
OR r32,r/m32 1
OUT imm8,AL 14
OUT imm8,AL (PM, CPL <= IOPL) 14
OUT imm8,AL (VM) 28
OUT imm8,AX 14
OUT imm8,AX (PM, CPL <= IOPL) 14
OUT imm8,AX (VM) 28
OUT imm8,EAX 14
OUT imm8,EAX (PM, CPL <= IOPL) 14
OUT imm8,EAX (VM) 28
OUT DX,AL 14
OUT DX,AL (PM, CPL <= IOPL) 14
OUT DX,AL (VM) 28
OUT DX,AX 14
OUT DX,AX (PM, CPL <= IOPL) 14
OUT DX,AX (VM) 28
OUT DX,EAX 14
OUT DX,EAX (PM, CPL <= IOPL) 14
OUT DX,EAX (VM) 28
OUTSB 14
OUTSW 14
OUTSD 14
POP m16 1
POP m32 1
POP r16 1
POP r32 1
POP sreg 1
POP sreg (PM) 3
POPA 6
POPAD 6
POPF 9
POPF (PM) 9
POPF (VM) 9
POPFD 9
POPFD (PM) 9
POPFD (VM) 9
PUSH r/m16 1
PUSH r/m32 1
PUSH r16 1
PUSH r32 1
PUSH imm8 1
PUSH imm16 1
PUSH imm32 1
PUSH sreg 1
PUSHA 6
PUSHAD 6
PUSHF 2
PUSHF (PM) 2
PUSHF (VM) 2
PUSHFD 2
PUSHFD (PM) 2
PUSHFD (VM) 2
RCL r/m8,1 3
RCL r/m16,1 3
RCL r/m32,1 3
RCL r/m8,CL 8
RCL r/m16,CL 8
RCL r/m32,CL 8
RCL r/m8,imm8 8
RCL r/m16,imm8 8
RCL r/m32,imm8 8
RCR r/m8,1 4
RCR r/m16,1 4
RCR r/m32,1 4
RCR r/m8,CL 9
RCR r/m16,CL 9
RCR r/m32,CL 9
RCR r/m8,imm8 9
RCR r/m16,imm8 9
RCR r/m32,imm8 9
ROL r/m8,1 1
ROL r/m16,1 1
ROL r/m32,1 1
ROL r/m8,CL 2
ROL r/m16,CL 2
ROL r/m32,CL 2
ROL r/m8,imm8 1
ROL r/m16,imm8 1
ROL r/m32,imm8 1
ROR r/m8,1 1
ROR r/m16,1 1
ROR r/m32,1 1
ROR r/m8,CL 2
ROR r/m16,CL 2
ROR r/m32,CL 2
ROR r/m8,imm8 1
ROR r/m16,imm8 1
ROR r/m32,imm8 1
RET (near) 3
RET (far) 4
RET (PM, far, same PL) 7
RET (PM, far, different PL) 23
RET imm16 (near) 4
RET imm16 (far) 4
RET imm16 (PM, far, same PL) 7
RET imm16 (PM, far, different PL) 23
RSDC m80,sreg 6
RSLDT m80 6
RSM 40
RSTS m80 6
SAHF 1
SAL r/m8,1 1
SAL r/m16,1 1
SAL r/m32,1 1
SAL r/m8,CL 2
SAL r/m16,CL 2
SAL r/m32,CL 2
SAL r/m8,imm8 1
SAL r/m16,imm8 1
SAL r/m32,imm8 1
SAR r/m8,1 1
SAR r/m16,1 1
SAR r/m32,1 1
SAR r/m8,CL 2
SAR r/m16,CL 2
SAR r/m32,CL 2
SAR r/m8,imm8 1
SAR r/m16,imm8 1
SAR r/m32,imm8 1
SHL r/m8,1 1
SHL r/m16,1 1
SHL r/m32,1 1
SHL r/m8,CL 2
SHL r/m16,CL 2
SHL r/m32,CL 2
SHL r/m8,imm8 1
SHL r/m16,imm8 1
SHL r/m32,imm8 1
SHR r/m8,1 1
SHR r/m16,1 1
SHR r/m32,1 1
SHR r/m8,CL 2
SHR r/m16,CL 2
SHR r/m32,CL 2
SHR r/m8,imm8 1
SHR r/m16,imm8 1
SHR r/m32,imm8 1
SBB AL,imm8 1
SBB AX,imm16 1
SBB EAX,imm32 1
SBB r/m8,imm8 1
SBB r/m16,imm8 1
SBB r/m32,imm8 1
SBB r/m16,imm16 1
SBB r/m32,imm32 1
SBB r/m8,r8 1
SBB r/m16,r16 1
SBB r/m32,r32 1
SBB r8,r/m8 1
SBB r16,r/m16 1
SBB r32,r/m32 1
SCASB 2
SCASW 2
SCASD 2
SETALC n/a
SETcc r/m8 1
SGDT m16&32 4
SIDT m16&32 4
SHLD r/m16,r16,imm8 4
SHLD r/m32,r32,imm8 4
SHLD r/m16,r16,CL 5
SHLD r/m32,r32,CL 5
SHRD r/m16,r16,imm8 4
SHRD r/m32,r32,imm8 4
SHRD r/m16,r16,CL 5
SHRD r/m32,r32,CL 5
SLDT r/m16 1
SLDT r/m32 1
SMINT 55
SMSW r/m16 6
STC 1
STD 7
STI 7
STOSB 2
STOSW 2
STOSD 2
STR r/m16 4
SUB AL,imm8 1
SUB AX,imm16 1
SUB EAX,imm32 1
SUB r/m8,imm8 1
SUB r/m16,imm8 1
SUB r/m32,imm8 1
SUB r/m16,imm16 1
SUB r/m32,imm32 1
SUB r/m8,r8 1
SUB r/m16,r16 1
SUB r/m32,r32 1
SUB r8,r/m8 1
SUB r16,r/m16 1
SUB r32,r/m32 1
SVDC sreg,m80 12
SVLDT m80 12
SVTS m80 14
TEST AL,imm8 1
TEST AX,imm16 1
TEST EAX,imm32 1
TEST r/m8,imm8 1
TEST r/m16,imm16 1
TEST r/m32,imm32 1
TEST r/m8,r8 1
TEST r/m16,r16 1
TEST r/m32,r32 1
VERR r/m16 7
VERW r/m16 7
WAIT 5
WBINVD 15
XADD r/m8,r8 2
XADD r/m16,r16 2
XADD r/m32,r32 2
XCHG AX,r16 2
XCHG EAX,r32 2
XCHG r/m8,r8 2
XCHG r/m16,r16 2
XCHG r/m32,r32 2
XLAT 4
XOR AL,imm8 1
XOR AX,imm16 1
XOR EAX,imm32 1
XOR r/m8,imm8 1
XOR r/m16,imm8 1
XOR r/m32,imm8 1
XOR r/m16,imm16 1
XOR r/m32,imm32 1
XOR r/m8,r8 1
XOR r/m16,r16 1
XOR r/m32,r32 1
XOR r8,r/m8 1
XOR r16,r/m16 1
XOR r32,r/m32 1
(END)
---------------------------------------------------------------
APPENDIX Z0 - Execution time for Intel 8087 FPU
FLD1 26
FLDZ 21
FLDPI 26
FLDLG2 26
FLDL2T 26
FLDL2E 26
FLDLN2 26
FLD ST(0) 31
FST ST(1) 26
FSTP ST(0) 26
FSTP ST(1) 21
FLD ST(1) 26
FXCH ST(1) 21
FILD m16 58
FILD m32 64
FILD m64 74
FLD m32 49
FLD m64 54
FLD m80 59
FBLD m80 309
FIST m16 79
FIST m32 84
FST m32 89
FST m64 99
FISTP m16 79
FISTP m32 79
FISTP m64 88
FSTP m32 89
FSTP m64 93
FSTP m80 49
FBSTP m80 528
FINIT 11
FCLEX 11
FCHS 21
FABS 21
FXAM 21
FTST 51
FSTENV 54
FLDENV 48
FSAVE 214
FRSTOR 209
FSTSW [mem] 28
FSTSW AX
FSTCW [mem] 28
FLDCW [mem] 19
FADD ST,ST(0) 86
FADD ST,ST(1) 85
FADD ST(1),ST 92
FADDP ST(1),ST 92
FADD m32 105
FADD m64 115
FIADD m16 115
FIADD m32 125
FSUB ST(1),ST 88
FSUBR ST(1),ST 96
FSUBRP ST(1),ST 99
FSUB m32 119
FSUB m64 129
FISUB m16 115
FISUB m32 125
FMUL ST,ST(1) 145
FMUL ST(1),ST 145
FMULP ST(1),ST 148
FIMUL m16 132
FIMUL m32 141
FMUL m32 125
FMUL m64 175
FDIV ST,ST(0) 201
FDIV ST,ST(1) 203
FDIV ST(1),ST 207
FDIVR ST(1),ST 201
FDIVRP ST(1),ST 201
FIDIV m16 237
FIDIV m32 246
FDIV m32 229
FDIV m64 236
FSQRT (0 0) 21
FSQRT (1 0) 186
FSQRT (L2T) 186
FXTRACT (L2T) 51
FSCALE (PI,5) 41
FRNDINT (PI) 51
FPREM (99,PI) 81
FPREM1(99,PI) N/A
FCOM 56
FCOMP 61
FCOMPP 61
FICOM m16 79
FICOM m32 89
FCOM m32 74
FCOM m64 74
FSIN (0 0) N/A
FSIN (1 0) N/A
FSIN (PI) N/A
FSIN (LG2) N/A
FSIN (L2T) N/A
FCOS (0 0) N/A
FCOS (1 0) N/A
FCOS (PI) N/A
FCOS (LG2) N/A
FCOS (L2T) N/A
FSINCOS (0 0) N/A
FSINCOS (1 0) N/A
FSINCOS (PI) N/A
FSINCOS (LG2) N/A
FSINCOS (L2T) N/A
FPTAN (0 0) 41
FPTAN (1 0) 581
FPTAN (PI) 606
FPTAN (LG2) 516
FPTAN (L2T) 576
FPATAN (0 0) 41
FPATAN (1 0) 736
FPATAN (PI) 206
FPATAN (LG2) 756
FPATAN (L2T) 206
F2XM1 (0 0) 16
F2XM1 (LN2) 631
F2XM1 (LG2) 611
FYL2X (1 0) 56
FYL2X (PI) 946
FYL2X (LG2) 1081
FYL2X (L2T) 926
FYL2XP1 (LG2) 1026
---------------------------------------------------------------
APPENDIX Z1 - Execution time for Intel 80287 FPU
FLD1 26
FLDZ 21
FLDPI 26
FLDLG2 26
FLDL2T 26
FLDL2E 26
FLDLN2 26
FLD ST(0) 31
FST ST(1) 26
FSTP ST(0) 26
FSTP ST(1) 21
FLD ST(1) 26
FXCH ST(1) 21
FILD m16 58
FILD m32 64
FILD m64 74
FLD m32 49
FLD m64 54
FLD m80 59
FBLD m80 309
FIST m16 79
FIST m32 84
FST m32 89
FST m64 99
FISTP m16 79
FISTP m32 79
FISTP m64 88
FSTP m32 89
FSTP m64 93
FSTP m80 49
FBSTP m80 528
FINIT 11
FCLEX 11
FCHS 21
FABS 21
FXAM 21
FTST 51
FSTENV 54
FLDENV 48
FSAVE 214
FRSTOR 209
FSTSW [mem] 28
FSTSW AX
FSTCW [mem] 28
FLDCW [mem] 19
FADD ST,ST(0) 86
FADD ST,ST(1) 85
FADD ST(1),ST 92
FADDP ST(1),ST 92
FADD m32 105
FADD m64 115
FIADD m16 115
FIADD m32 125
FSUB ST(1),ST 88
FSUBR ST(1),ST 96
FSUBRP ST(1),ST 99
FSUB m32 119
FSUB m64 129
FISUB m16 115
FISUB m32 125
FMUL ST,ST(1) 145
FMUL ST(1),ST 145
FMULP ST(1),ST 148
FIMUL m16 132
FIMUL m32 141
FMUL m32 125
FMUL m64 175
FDIV ST,ST(0) 201
FDIV ST,ST(1) 203
FDIV ST(1),ST 207
FDIVR ST(1),ST 201
FDIVRP ST(1),ST 201
FIDIV m16 237
FIDIV m32 246
FDIV m32 229
FDIV m64 236
FSQRT (0 0) 21
FSQRT (1 0) 186
FSQRT (L2T) 186
FXTRACT (L2T) 51
FSCALE (PI,5) 41
FRNDINT (PI) 51
FPREM (99,PI) 81
FPREM1(99,PI) N/A
FCOM 56
FCOMP 61
FCOMPP 61
FICOM m16 79
FICOM m32 89
FCOM m32 74
FCOM m64 74
FSIN (0 0) N/A
FSIN (1 0) N/A
FSIN (PI) N/A
FSIN (LG2) N/A
FSIN (L2T) N/A
FCOS (0 0) N/A
FCOS (1 0) N/A
FCOS (PI) N/A
FCOS (LG2) N/A
FCOS (L2T) N/A
FSINCOS (0 0) N/A
FSINCOS (1 0) N/A
FSINCOS (PI) N/A
FSINCOS (LG2) N/A
FSINCOS (L2T) N/A
FPTAN (0 0) 41
FPTAN (1 0) 581
FPTAN (PI) 606
FPTAN (LG2) 516
FPTAN (L2T) 576
FPATAN (0 0) 41
FPATAN (1 0) 736
FPATAN (PI) 206
FPATAN (LG2) 756
FPATAN (L2T) 206
F2XM1 (0 0) 16
F2XM1 (LN2) 631
F2XM1 (LG2) 611
FYL2X (1 0) 56
FYL2X (PI) 946
FYL2X (LG2) 1081
FYL2X (L2T) 926
FYL2XP1 (LG2) 1026
---------------------------------------------------------------
APPENDIX Z2 - Execution time for Intel 80387 FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z3 - Execution time for Intel 387DX FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z4 - Execution time for IIT 3C87 FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z5 - Execution time for ULSI 83C87 FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z6 - Execution time for ULSI DX/DLC FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z7 - Execution time for C&T 38700 FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z8 - Execution time for Cyrix 387+ FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z9 - Execution time for Cyrix 83D87 FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z10 - Execution time for Intel RapidCAD FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z11 - Execution time for Intel i486 FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------------
APPENDIX Z12 - Execution time for Intel Pentium FPU
FLD1 1
FLDZ 1
FLDPI 3
FLDLG2 3
FLDL2T 3
FLDL2E 3
FLDLN2 3
FLD ST(0) 1
FST ST(1) 2
FSTP ST(0) 2
FSTP ST(1) 3
FLD ST(1) 1
FXCH ST(1) 1
FILD m16 1
FILD m32 1
FILD m64 1
FLD m32 1
FLD m64 1
FLD m80 3
FBLD m80 46
FIST m16 5
FIST m32 5
FST m32 1
FST m64 1
FISTP m16 8
FISTP m32 9
FISTP m64 8
FSTP m32 5
FSTP m64 5
FSTP m80 6
FBSTP m80 155
FINIT 21
FCLEX 8
FCHS 1
FABS 1
FXAM 16
FTST 1
FSTENV 60
FLDENV 37
FSAVE 154
FRSTOR 74
FSTSW [mem] 4
FSTSW AX 4
FSTCW [mem] 2
FLDCW [mem] 7
FADD ST,ST(0) 2
FADD ST,ST(1) 3
FADD ST(1),ST 3
FADDP ST(1),ST 3
FADD m32 1
FADD m64 1
FIADD m16 3
FIADD m32 3
FSUB ST(1),ST 3
FSUBR ST(1),ST 2
FSUBRP ST(1),ST 2
FSUB m32 2
FSUB m64 2
FISUB m16 3
FISUB m32 3
FMUL ST,ST(1) 2
FMUL ST(1),ST 3
FMULP ST(1),ST 2
FIMUL m16 3
FIMUL m32 3
FMUL m32 2
FMUL m64 2
FDIV ST,ST(0) 38
FDIV ST,ST(1) 38
FDIV ST(1),ST 38
FDIVR ST(1),ST 38
FDIVRP ST(1),ST 38
FIDIV m16 39
FIDIV m32 39
FDIV m32 38
FDIV m64 38
FSQRT (0 0) 4
FSQRT (1 0) 70
FSQRT (L2T) 70
FXTRACT (L2T) 12
FSCALE (PI,5) 31
FRNDINT (PI) 19
FPREM (99,PI) 27
FPREM1(99,PI) 41
FCOM 1
FCOMP 2
FCOMPP 2
FICOM m16
FICOM m32
FCOM m32
FCOM m64
FSIN (0 0) 17
FSIN (1 0) 98
FSIN (PI) 73
FSIN (LG2) 82
FSIN (L2T) 72
FCOS (0 0) 18
FCOS (1 0) 96
FCOS (PI) 72
FCOS (LG2) 83
FCOS (L2T) 72
FSINCOS (0 0) 15
FSINCOS (1 0) 107
FSINCOS (PI) 93
FSINCOS (LG2) 91
FSINCOS (L2T) 93
FPTAN (0 0) 15
FPTAN (1 0) 142
FPTAN (PI) 125
FPTAN (LG2) 126
FPTAN (L2T) 125
FPATAN (0 0) 25
FPATAN (1 0) 93
FPATAN (PI) 132
FPATAN (LG2) 129
FPATAN (L2T) 135
F2XM1 (0 0) 14
F2XM1 (LN2) 52
F2XM1 (LG2) 52
FYL2X (1 0) 39
FYL2X (PI) 104
FYL2X (LG2) 104
FYL2X (L2T) 104
FYL2XP1 (LG2) 103
---------------------------------------------------------
APPENDIX _A PENTIUM PRO/PENTIUM II RISC-CORE INSTRUCTIONS INFO & TIMES
Format of Data Below:
---------------------------------
H: Name of x86 Instruction
N: Number of RISC operation per this x86 instruction
(in case of comlex microcode = 0)
{
D:destination regs | retry this data for each
P:port | RISC core instruction
O:operation |
L:latency |
A:arguments |
}
\n
---------------------------------
Example:
H:ADD r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
----------------------------------
Means: ADD r8,r/m8 Latency
ROP1: REG_ddd = ALU.port(1 or 0)(REG_ddd,REG_sss) 1
----------------------------------
H:ADD r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:ADD r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:ADD r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:SUB r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:SUB r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:SUB r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:AND r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:AND r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:AND r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:OR r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:OR r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:OR r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:XOR r8,r/m8
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:XOR r16,r/m16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:XOR r32,r/m32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, REG_sss
H:ADD r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:ADD r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:ADD r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:SUB r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:SUB r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:SUB r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:AND r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:AND r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:AND r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:OR r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:OR r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:OR r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:XOR r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:XOR r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:XOR r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, TMP0
H:ADC r8,r/m8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:ADC r16,r/m16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:ADC r32,r/m32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:SBB r8,r/m8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:SBB r16,r/m16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:SBB r32,r/m32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_sss
H:ADC r8,m8
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:ADC r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:ADC r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:SBB r8,m8
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:SBB r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:SBB r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:01
L:1
A: ArithFLAGS, REG_ddd
D: REG_ddd
O:
P:01
L:1
A: TMP1, TMP0
H:ADD r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:ADD r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:ADD r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:SUB r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:SUB r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:SUB r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:AND r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:AND r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:AND r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:OR r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:OR r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:OR r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:XOR r/m8,r8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:XOR r/m16,r16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:XOR r/m32,r32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, REG_ddd
H:ADD m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m8,r8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m16,r16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m32,r32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, REG_ddd
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK ADD m8,r8
N:0
H:LOCK ADD m16,r16
N:0
H:LOCK ADD m32,r32
N:0
H:LOCK SUB m8,r8
N:0
H:LOCK SUB m16,r16
N:0
H:LOCK SUB m32,r32
N:0
H:LOCK AND m8,r8
N:0
H:LOCK AND m16,r16
N:0
H:LOCK AND m32,r32
N:0
H:LOCK OR m8,r8
N:0
H:LOCK OR m16,r16
N:0
H:LOCK OR m32,r32
N:0
H:LOCK XOR m8,r8
N:0
H:LOCK XOR m16,r16
N:0
H:LOCK XOR m32,r32
N:0
H:ADC r/m8,r8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:ADC r/m16,r16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:ADC r/m32,r32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:SBB r/m8,r8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:SBB r/m16,r16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:SBB r/m32,r32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, REG_ddd
H:ADC m8,r8
N:0
H:ADC m16,r16
N:0
H:ADC m32,r32
N:0
H:SBB m8,r8
N:0
H:SBB m16,r16
N:0
H:SBB m32,r32
N:0
H:LOCK ADC m8,r8
N:0
H:LOCK ADC m16,r16
N:0
H:LOCK ADC m32,r32
N:0
H:LOCK SBB m8,r8
N:0
H:LOCK SBB m16,r16
N:0
H:LOCK SBB m32,r32
N:0
H:ADD r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:SUB r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:AND r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:OR r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r8,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r16,imm16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r32,imm32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r16,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:XOR r32,imm8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, IMM
H:ADD m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ADD m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SUB m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:AND m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:OR m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m16,imm16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:XOR m32,imm32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK ADD m8,imm8
N:0
H:LOCK ADD m16,imm16
N:0
H:LOCK ADD m32,imm32
N:0
H:LOCK SUB m8,imm8
N:0
H:LOCK SUB m16,imm16
N:0
H:LOCK SUB m32,imm32
N:0
H:LOCK AND m8,imm8
N:0
H:LOCK AND m16,imm16
N:0
H:LOCK AND m32,imm32
N:0
H:LOCK OR m8,imm8
N:0
H:LOCK OR m16,imm16
N:0
H:LOCK OR m32,imm32
N:0
H:LOCK XOR m8,imm8
N:0
H:LOCK XOR m16,imm16
N:0
H:LOCK XOR m32,imm32
N:0
H:ADC r8,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:ADC r16,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:ADC r32,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:SBB r8,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:SBB r16,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:SBB r32,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:01
L:1
A: TMP0, IMM
H:ADC m8,imm8
N:0
H:ADC m16,imm16
N:0
H:ADC m32,imm32
N:0
H:SBB m8,imm8
N:0
H:SBB m16,imm16
N:0
H:SBB m32,imm32
N:0
H:LOCK ADC m8,imm8
N:0
H:LOCK ADC m16,imm16
N:0
H:LOCK ADC m32,imm32
N:0
H:LOCK SBB m8,imm8
N:0
H:LOCK SBB m16,imm16
N:0
H:LOCK SBB m32,imm32
N:0
H:ADD AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:SUB AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:AND AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:OR AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:XOR AL,imm8
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:ADD eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:ADD eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:SUB eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:SUB eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:AND eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:AND eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:OR eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:OR eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:XOR eAX,imm16
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:XOR eAX,imm32
N:1
D: EAX
O:
P:01
L:1
A: EAX, IMM
H:ADC AL,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:SBB AL,imm8
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:ADC eAX,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:ADC eAX,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:SBB eAX,imm16
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:SBB eAX,imm32
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, EAX
D: EAX
O:
P:01
L:1
A: TMP0, IMM
H:INC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:INC r/m16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:INC r/m32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:DEC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:DEC r/m16
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:DEC r/m32
N:1
D: REG_sss
O:
P:01
L:1
A: REG_sss, CONST
H:INC m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:INC m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:INC m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:DEC m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:DEC m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:DEC m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK INC m8
N:0
H:LOCK INC m16
N:0
H:LOCK INC m32
N:0
H:LOCK DEC m8
N:0
H:LOCK DEC m16
N:0
H:LOCK DEC m32
N:0
H:INC r16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:INC r32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:DEC r16
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:DEC r32
N:1
D: REG_ddd
O:
P:01
L:1
A: REG_ddd, CONST
H:NOT r/m8
N:1
D: REG_sss
O: xor
P:01
L:1
A: REG_sss, CONST
H:NOT r/m16
N:1
D: REG_sss
O: xor
P:01
L:1
A: REG_sss, CONST
H:NOT r/m32
N:1
D: REG_sss
O: xor
P:01
L:1
A: REG_sss, CONST
H:NOT m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: xor
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NOT m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: xor
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NOT m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: xor
P:01
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK NOT m8
N:0
H:LOCK NOT m16
N:0
H:LOCK NOT m32
N:0
H:NEG r/m8
N:1
D: REG_sss
O: sub
P:01
L:1
A: CONST, REG_sss
H:NEG r/m16
N:1
D: REG_sss
O: sub
P:01
L:1
A: CONST, REG_sss
H:NEG r/m32
N:1
D: REG_sss
O: sub
P:01
L:1
A: CONST, REG_sss
H:NEG m8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: sub
P:01
L:1
A: CONST, TMP0
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NEG m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: sub
P:01
L:1
A: CONST, TMP0
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:NEG m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O: sub
P:01
L:1
A: CONST, TMP0
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK NEG m8
N:0
H:LOCK NEG m16
N:0
H:LOCK NEG m32
N:0
H:AAS
N:1
D: AX
O:
P:1
L:1
A: ArithFLAGS, AX
H:DAA
N:1
D: AL
O:
P:1
L:1
A: ArithFLAGS, AL
H:DAS
N:1
D: AL
O:
P:1
L:1
A: ArithFLAGS, AL
H:AAD
N:3
D: TMP0
O: mul
P:0
L:4
A: AH, IMM
D: AH
O: move
P:01
L:1
A: CONST
D: AL
O: add
P:01
L:1
A: AL, TMP0
H:AAM
N:4
D: TMP0
O: div
P:0
L:99
A: AL, IMM
D: AH
O: move
P:01
L:1
A: TMP0
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: AL
O: add
P:01
L:1
A: TMP0, CONST
H:INVD
N:0
H:WBINVD
N:0
H:INVLPG m
N:0
H:CMP AL,imm8
N:1
D: sink
O: sub
P:01
L:1
A: EAX, IMM
H:CMP eAX,imm16
N:1
D: sink
O: sub
P:01
L:1
A: EAX, IMM
H:CMP eAX,imm32
N:1
D: sink
O: sub
P:01
L:1
A: EAX, IMM
H:CMP r/m8,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m8,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m16,imm16
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m32,imm32
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m16,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP r/m32,imm8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, IMM
H:CMP m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m16,imm16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m32,imm32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m16,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP m32,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, IMM)
H:CMP r/m8,r8
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, REG_ddd
H:CMP r/m16,r16
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, REG_ddd
H:CMP r/m32,r32
N:1
D: sink
O: sub
P:01
L:1
A: REG_sss, REG_ddd
H:CMP m8,r8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, REG_ddd
H:CMP m16,r16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, REG_ddd
H:CMP m32,r32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: TMP0, REG_ddd
H:CMP r8,r/m8
N:1
D: sink
O: sub
P:01
L:1
A: REG_ddd, REG_sss
H:CMP r16,r/m16
N:1
D: sink
O: sub
P:01
L:1
A: REG_ddd, REG_sss
H:CMP r32,r/m32
N:1
D: sink
O: sub
P:01
L:1
A: REG_ddd, REG_sss
H:CMP r8,m8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: REG_ddd, TMP0
H:CMP r16,m16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: REG_ddd, TMP0
H:CMP r32,m32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: sub
P:01
L:1
A: REG_ddd, TMP0
H:TEST r/m8,r8
N:1
D: sink
O: and
P:01
L:1
A: REG_ddd, REG_sss
H:TEST r/m16,r16
N:1
D: sink
O: and
P:01
L:1
A: REG_ddd, REG_sss
H:TEST r/m32,r32
N:1
D: sink
O: and
P:01
L:1
A: REG_ddd, REG_sss
H:TEST m8,r8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: REG_ddd, TMP0
H:TEST m16,r16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: REG_ddd, TMP0
H:TEST m32,r32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: REG_ddd, TMP0
H:TEST AL,imm8
N:1
D: sink
O: and
P:01
L:1
A: EAX, IMM
H:TEST eAX,imm16
N:1
D: sink
O: and
P:01
L:1
A: EAX, IMM
H:TEST eAX,imm32
N:1
D: sink
O: and
P:01
L:1
A: EAX, IMM
H:TEST r/m8,imm8
N:1
D: sink
O: and
P:01
L:1
A: REG_sss, IMM
H:TEST r/m16,imm16
N:1
D: sink
O: and
P:01
L:1
A: REG_sss, IMM
H:TEST r/m32,imm32
N:1
D: sink
O: and
P:01
L:1
A: REG_sss, IMM
H:TEST m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m8,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m16,imm16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m32,imm32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m16,imm16
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:TEST m32,imm32
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: and
P:01
L:1
A: TMP0, IMM
H:SETO r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNO r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETB r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNAE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNB r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETAE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNC r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETZ r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNZ r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETBE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNA r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNBE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNA r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETS r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNS r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETP r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETPE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNP r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETPO r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETL r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNGE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNL r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETGE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETLE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNG r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETNLE r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETG r/m8
N:1
D: REG_sss
O:
P:01
L:1
A: ArithFLAGS, CONST
H:SETO m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNO m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETB m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNAE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETC m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNB m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETAE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNC m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETZ m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNZ m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETBE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNA m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNBE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNA m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETS m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNS m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETP m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETPE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNP m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETPO m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETL m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNGE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNL m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETGE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETLE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNG m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETNLE m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SETG m8
N:3
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:BT r/m16,r16
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, REG_ddd
H:BT r/m32,r32
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, REG_ddd
H:BT m16,r16
N:0
H:BT m32,r32
N:0
H:BT r/m16,imm8
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, IMM
H:BT r/m32,imm8
N:1
D: sink
O: test_bit
P:01
L:1
A: REG_sss, IMM
H:BT m16,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: test_bit
P:01
L:1
A: TMP0, IMM
H:BT m32,imm8
N:2
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: test_bit
P:01
L:1
A: TMP0, IMM
H:BTC r/m16,r16
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTC r/m32,r32
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTR r/m16,r16
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTR r/m32,r32
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTS r/m16,r16
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTS r/m32,r32
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, REG_ddd
H:BTC m16,r16
N:0
H:BTC m32,r32
N:0
H:BTR m16,r16
N:0
H:BTR m32,r32
N:0
H:BTS m16,r16
N:0
H:BTS m32,r32
N:0
H:LOCK BTC m16,r16
N:0
H:LOCK BTC m32,r32
N:0
H:LOCK BTR m16,r16
N:0
H:LOCK BTR m32,r32
N:0
H:LOCK BTS m16,r16
N:0
H:LOCK BTS m32,r32
N:0
H:BTC r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTC r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTS r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTS r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:BTC m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTC m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTR m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTR m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTS m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:BTS m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:0
L:1
A: TMP0, IMM)
D: sink
O: store_data
P:4
L:1
A: TMP1)
D: sink
O: store_address
P:3
L:1
A: MEM
H:LOCK BTC m16,imm8
N:0
H:LOCK BTC m32,imm8
N:0
H:LOCK BTR m16,imm8
N:0
H:LOCK BTR m32,imm8
N:0
H:LOCK BTS m16,imm8
N:0
H:LOCK BTS m32,imm8
N:0
H:BSF r16,r/m16
N:2
D: TMP0
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd
H:BSF r32,r/m32
N:2
D: TMP0
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd
H:BSF r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSF r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r16,r/m16
N:2
D: TMP1
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r32,r/m32
N:2
D: TMP1
O:
P:1
L:1
A: REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:BSR r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP1
O:
P:1
L:1
A: TMP0
D: REG_ddd
O:
P:01
L:1
A: TMP1, REG_ddd
H:PUSHF
N:0
H:PUSHFD
N:0
H:POPFD
N:0
H:POPF
N:0
H:CLC
N:1
D: sink
O: add
P:01
L:1
A: CONST, CONST_0
H:CMC
N:1
D: sink
O:
P:01
L:1
A: ArithFLAGS, CONST
H:STC
N:1
D: sink
O:
P:01
L:1
A:CONST, CONST
H:SAHF
N:1
D: sink
O:
P:01
L:1
A: AH
H:LAHF
N:1
D: AH
O:
P:01
L:1
A: ArithFLAGS, CONST
H:CLI
N:0
H:STI
N:0
H:CLD
N:4
D: TMP5
O:
P:01
L:1
A: ArithFLAGS, SystemFlags
D: sink
O: move
P:01
L:1
A: CONST
D: SystemFlags
O: and
P:01
L:1
A: TMP5, CONST
D: sink
O: move
P:01
L:1
A: CONST
H:STD
N:4
D: TMP5
O:
P:01
L:1
A: ArithFLAGS, SystemFlags
D: TMP5
O:
P:01
L:1
A: TMP5, 000010000
D: SystemFlags
O:
P:01
L:1
A: TMP5, 000001010
D: sink
O: move
P:01
L:1
A: CONST
H:SALC
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, CONST
D: AL
O:
P:01
L:1
A: TMP0, CONST
H:Call rel16 near
N:3
D: sink
O: M_call
P:1
L:1
A: virt_ip
D: sink
O: store_data
P:4
L:1
A: next_virt_ip
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Call rel32 near
N:3
D: sink
O: M_call
P:1
L:1
A: virt_ip
D: sink
O: store_data
P:4
L:1
A: next_virt_ip
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Call r16 near
N:0
H:Call r32 near
N:0
H:Call m16 near
N:0
H:Call m32 near
N:0
H:Ret near
N:4
D: TMP0
O: load
P:2
L:1
A: (ESP
D: sink
O:
P:01
L:1
A: TMP0, CONST
D: ESP
O: add
P:01
L:1
A: ESP,
D: sink
O:
P:1
L:1
A: virt_ip, TMP0
H:RET near iw
N:0
H:JO rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNO rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JB rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNAE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JC rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNB rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JAE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNC rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JZ rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNZ rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JBE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNBE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JS rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNS rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JP rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNP rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPO rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JL rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNGE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNL rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JGE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JLE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNG rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNLE rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JG rel8
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JO rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JO rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNO rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNO rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JB rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNAE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JC rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JB rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNAE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JC rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNB rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JAE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNC rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNB rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JAE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNC rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JZ rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JZ rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNZ rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNZ rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JBE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JBE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNBE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNBE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNA rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JS rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JS rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNS rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNS rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JP rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JP rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNP rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPO rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNP rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JPO rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JL rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNGE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JL rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNGE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNL rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JGE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNL rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JGE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JLE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNG rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JLE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNG rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNLE rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JG rel16
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JNLE rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JG rel32
N:1
D: sink
O:
P:1
L:1
A: ArithFLAGS, virt_ip
H:JCXZ rel8
N:2
D: TMP0
O: sub
P:01
L:1
A: ECX, CONST
D: sink
O:
P:1
L:1
A: TMP0, virt_ip)
H:JECXZ rel8
N:2
D: TMP0
O: sub
P:01
L:1
A: ECX, CONST
D: sink
O:
P:1
L:1
A: TMP0, virt_ip)
H:JMP rel8
N:1
D: sink
O:
P:1
L:1
A: virt_ip
H:JMP rel16
N:1
D: sink
O:
P:1
L:1
A: virt_ip
H:JMP rel32
N:1
D: sink
O:
P:1
L:1
A: virt_ip
H:JMP near reg16
N:1
D: sink
O:
P:1
L:1
A: virt_ip, REG_sss
H:JMP near reg32
N:1
D: sink
O:
P:1
L:1
A: virt_ip, REG_sss
H:JMP near m16
N:0
H:JMP near m32
N:0
H:LOOP rel8
N:0
H:LOOPE rel8
N:0
H:LOOPNE rel8
N:0
H:Halt
N:0
H:BOUND r16,m16& 16
N:0
H:BOUND r16,m32& 32
N:0
H:INTn
N:3
D: TMP0
O: move
P:01
L:1
A: IMM
D: TMP1
O: move
P:01
L:1
A: 000110101
D: sink
O:
P:0
L:1
A: TMP0, TMP1) 1
H:INTO
N:0
H:INT3
N:0
H:INT1
N:0
H:IN eAX,imm8
N:0
H:IN eAX,DX
N:0
H:OUT imm8,eAX
N:0
H:OUT DX,eAX
N:0
H:INSB m8,DX
N:0
H:INSB m16,DX
N:0
H:INSB m32,DX
N:0
H:INSW m8,DX
N:0
H:INSW m16,DX
N:0
H:INSW m32,DX
N:0
H:INSD m8,DX
N:0
H:INSD m16,DX
N:0
H:INSD m32,DX
N:0
H:OUTSB DX,m8
N:0
H:OUTSB DX,m16
N:0
H:OUTSB DX,m32
N:0
H:OUTSW DX,m8
N:0
H:OUTSW DX,m16
N:0
H:OUTSW DX,m32
N:0
H:OUTSD DX,m8
N:0
H:OUTSD DX,m16
N:0
H:OUTSD DX,m32
N:0
H:REP INSB m8,DX
N:0
H:REP INSB m16,DX
N:0
H:REP INSB m32,DX
N:0
H:REP INSW m8,DX
N:0
H:REP INSW m16,DX
N:0
H:REP INSW m32,DX
N:0
H:REP INSD m8,DX
N:0
H:REP INSD m16,DX
N:0
H:REP INSD m32,DX
N:0
H:REP OUTSB DX,m8
N:0
H:REP OUTSB DX,m16
N:0
H:REP OUTSB DX,m32
N:0
H:REP OUTSW DX,m8
N:0
H:REP OUTSW DX,m16
N:0
H:REP OUTSW DX,m32
N:0
H:REP OUTSD DX,m8
N:0
H:REP OUTSD DX,m16
N:0
H:REP OUTSD DX,m32
N:0
H:LEA r16,m
N:1
D: REG_ddd
O: load_ea
P:0
L:1
A:base_BBB
H:LEA r32,m
N:1
D: REG_ddd
O: load_ea
P:0
L:1
A:base_BBB
H:NOP
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:BSWAP r32
N:2
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O:
P:0
L:1
A: TMP0)
H:XADD r/m8,r8
N:4
D: TMP0
O: move
P:01
L:1
A: REG_sss
D: TMP1
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: TMP0)
D: REG_sss
O: add
P:01
L:1
A: TMP0, TMP1) 1
H:XADD r/m16,r16
N:4
D: TMP0
O: move
P:01
L:1
A: REG_sss
D: TMP1
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: TMP0)
D: REG_sss
O: add
P:01
L:1
A: TMP0, TMP1) 1
H:XADD r/m32,r32
N:4
D: TMP0
O: move
P:01
L:1
A: REG_sss
D: TMP1
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: TMP0)
D: REG_sss
O: add
P:01
L:1
A: TMP0, TMP1) 1
H:XADD m8,r8
N:0
H:XADD m16,r16
N:0
H:XADD m32,r32
N:0
H:LOCK XADD m8,r8
N:0
H:LOCK XADD m16,r16
N:0
H:LOCK XADD m32,r32
N:0
H:CMPXCHG r/m8,r8
N:0
H:CMPXCHG r/m16,r16
N:0
H:CMPXCHG r/m32,r32
N:0
H:CMPXCHG m8,r8
N:0
H:CMPXCHG m16,r16
N:0
H:CMPXCHG m32,r32
N:0
H:LOCK CMPXCHG m8,r8
N:0
H:LOCK CMPXCHG m16,r16
N:0
H:LOCK CMPXCHG m32,r32
N:0
H:CMPXCHG8B r/m64
N:0
H:LOCK CMPXCHG8B r/m64
N:0
H:XLAT
N:2
D: TMP0
O: move
P:01
L:1
A: AL
D: AL
O: load
P:2
L:1
A: EBX
H:XLATB
N:2
D: TMP0
O: move
P:01
L:1
A: AL
D: AL
O: load
P:2
L:1
A: EBX
H:CMOVO r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVO r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNO r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNO r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVB r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNAE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVC r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVB r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNAE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVC r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNB r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVAE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNC r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNB r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVAE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNC r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVZ r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVZ r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNZ r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNZ r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVBE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVBE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNBE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNBE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNA r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVS r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVS r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNS r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNS r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVP r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVP r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNP r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPO r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNP r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVPO r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVL r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNGE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVL r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNGE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNL r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVGE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNL r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVGE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVLE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNG r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVLE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNG r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNLE r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVG r16,r16
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVNLE r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVG r32,r32
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, REG_sss
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd)
H:CMOVO r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVO r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNO r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNO r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVB r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNAE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVC r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVB r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNAE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVC r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNB r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVAE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNC r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNB r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVAE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNC r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVZ r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVZ r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNZ r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNZ r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVBE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVBE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNBE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNBE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNA r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVS r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVS r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNS r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNS r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVP r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVP r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNP r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPO r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNP r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVPO r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVL r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNGE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVL r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNGE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNL r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVGE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNL r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVGE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVLE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNG r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVLE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNG r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNLE r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVG r16,m16
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVNLE r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CMOVG r32,m32
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: ArithFLAGS, TMP0)
D: REG_ddd
O:
P:01
L:1
A: TMP0, REG_ddd) 1
H:CPUID
N:0
H:MOV r/m8,r8
N:1
D: REG_sss
O: move
P:01
L:1
A: REG_ddd
H:MOV r/m16,r16
N:1
D: REG_sss
O: move
P:01
L:1
A: REG_ddd
H:MOV r/m32,r32
N:1
D: REG_sss
O: move
P:01
L:1
A: REG_ddd
H:MOV m8,r8
N:2
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m16,r16
N:2
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m32,r32
N:2
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV r8,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOV r16,r/m16
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOV r32,r/m32
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOV r8,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOV r16,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOV r32,m32
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOV r/m8,imm8
N:1
D: REG_sss
O: move
P:01
L:1
A: IMM
H:MOV r/m16,imm16
N:1
D: REG_sss
O: move
P:01
L:1
A: IMM
H:MOV r/m32,imm32
N:1
D: REG_sss
O: move
P:01
L:1
A: IMM
H:MOV m8,imm8
N:2
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m16,imm16
N:2
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV m32,imm32
N:2
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: MEM
H:MOV r8,imm8
N:1
D: REG_ddd
O: move
P:01
L:1
A: IMM
H:MOV r16,imm16
N:1
D: REG_ddd
O: move
P:01
L:1
A: IMM
H:MOV r32,imm32
N:1
D: REG_ddd
O: move
P:01
L:1
A: IMM
H:MOV AL,moffs8
N:1
D: EAX
O: load
P:2
L:1
A: SEG+ DISP
H:MOV EAX,moffs16
N:1
D: EAX
O: load
P:2
L:1
A: SEG+ DISP
H:MOV EAX,moffs32
N:1
D: EAX
O: load
P:2
L:1
A: SEG+ DISP
H:MOV moffs8,AL
N:2
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: SEG+ DISP
H:MOV moffs16,EAX
N:2
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: SEG+ DISP
H:MOV moffs32,EAX
N:2
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: SEG+ DISP
H:XCHG r/m8,r8
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
D: REG_sss
O: move
P:01
L:1
A: TMP0)
H:XCHG r/m16,r16
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
D: REG_sss
O: move
P:01
L:1
A: TMP0)
H:XCHG r/m32,r32
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
D: REG_sss
O: move
P:01
L:1
A: TMP0)
H:XCHG eAX,r16
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: EAX
D: EAX
O: move
P:01
L:1
A: TMP0)
H:XCHG eAX,r32
N:3
D: TMP0
O: move
P:01
L:1
A: REG_ddd
D: REG_ddd
O: move
P:01
L:1
A: EAX
D: EAX
O: move
P:01
L:1
A: TMP0)
H:XCHG m8,r8
N:0
H:XCHG m16,r16
N:0
H:XCHG m32,r32
N:0
H:LOCK XCHG m8,r8
N:0
H:LOCK XCHG m16,r16
N:0
H:LOCK XCHG m32,r32
N:0
H:MOV CR0,r32
N:0
H:MOV CR2,r32
N:0
H:MOV CR3,r32
N:0
H:MOV CR4,r32
N:0
H:LMSW r16
N:0
H:LMSW m16
N:0
H:SMSW m16
N:0
H:MOV DRx,r32
N:0
H:MOV r32,CR0
N:0
H:MOV r32,CR2
N:0
H:MOV r32,CR3
N:0
H:MOV r32,CR4
N:0
H:MOV r32,DRx
N:0
H:WRMSR
N:0
H:RDTSC
N:0
H:RDPMC
N:0
H:RDMSR
N:0
H:CLTS
N:0
H:IMUL r16,r/m16
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, REG_sss
H:IMUL r32,r/m32
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, REG_sss
H:IMUL r16,m16
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, TMP1
H:IMUL r32,m32
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_ddd, TMP1
H:IMUL r16,r/m16,imm8
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r32,r/m32,imm8
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r16,r/m16,imm16
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r32,r/m32,imm16
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r16,r/m16,imm32
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r32,r/m32,imm32
N:1
D: REG_ddd
O: int_mul
P:0
L:4
A: REG_sss, IMM
H:IMUL r16,r/m16,imm8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r32,r/m32,imm8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r16,r/m16,imm16
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r32,r/m32,imm16
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r16,r/m16,imm32
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r32,r/m32,imm32
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: REG_ddd
O: int_mul
P:0
L:4
A: TMP1, IMM
H:IMUL r/m8
N:1
D: AX
O: int_mul
P:0
L:4
A: AL, REG_sss
H:IMUL m8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: AX
O: int_mul
P:0
L:4
A: AL, TMP1
H:IMUL r/m16
N:3
D: TMP0
O: int_mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IMUL m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: int_mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:IMUL r/m32
N:3
D: TMP0
O: int_mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IMUL m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: int_mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:MUL AL,r/m8
N:1
D: AX
O: mul
P:0
L:4
A: AL, REG_sss
H:MUL AL,m8
N:2
D: TMP1
O: load
P:2
L:1
A: MEM
D: AX
O: mul
P:0
L:4
A: AL, TMP1
H:MUL AX,r/m16
N:3
D: TMP0
O: mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:MUL AX,m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:MUL EAX,r/m32
N:3
D: TMP0
O: mul
P:0
L:4
A: EAX, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:MUL EAX,m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: mul
P:0
L:4
A: EAX, TMP1
D: EDX
O:
P:0
L:1
A: TMP0, CONST
D: EAX
O: move
P:01
L:1
A: TMP0
H:IDIV AL,r/m8
N:3
D: TMP0
O: int_div
P:0
L:99
A: AX, REG_sss
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:IDIV AX,m8
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: int_div
P:0
L:99
A: AX, TMP1
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:IDIV eAX,r/m16
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IDIV eAX,r/m32
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:IDIV AX,m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:IDIV AX,m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: int_div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:DIV AL,r/m8
N:3
D: TMP0
O: div
P:0
L:99
A: AX, REG_sss
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,m8
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP0
O: div
P:0
L:99
A: AX, TMP1
D: AL
O: move
P:01
L:1
A: TMP0
D: AH
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,r/m16
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,r/m32
N:4
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, REG_sss
D: EAX
O: move
P:01
L:1
A: TMP0
D: EDX
O:
P:0
L:1
A: TMP0, CONST
H:DIV AX,m16
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:DIV AX,m32
N:4
D: TMP1
O: load
P:2
L:1
A: MEM
D: TMP2
O:
P:0
L:1
A: EDX, EAX
D: TMP0
O: div
P:0
L:99
A: TMP2, TMP1
D: EAX
O: move
P:01
L:1
A: TMP0
H:SHL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAR r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAR r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAR r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHR r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHR r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHR r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SAL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:SHL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAR r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAR r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAR r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHR r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHR r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHR r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SAL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:SHL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAR r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHR r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SAL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:SHL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAR m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHR m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m8,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m16,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SHL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:SAL m32,imm8
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, IMM
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROL r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROL r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROR r/m8,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROR r/m16,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROR r/m32,1
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CONST
H:ROL m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m8,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m16,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m32,1
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROL r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROL r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROR r/m8,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROR r/m16,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROR r/m32,CL
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, CL
H:ROL m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m8,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m16,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROR m32,CL
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: TMP0
O:
P:0
L:1
A: TMP0, CL
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:ROL r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROL r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROL r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROR r/m8,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROR r/m16,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROR r/m32,imm8
N:1
D: REG_sss
O:
P:0
L:1
A: REG_sss, IMM
H:ROL m8,imm8
N:0
H:ROL m16,imm8
N:0
H:ROL m32,imm8
N:0
H:ROR m8,imm8
N:0
H:ROR m16,imm8
N:0
H:ROR m32,imm8
N:0
H:RCL r/m8,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCL r/m16,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCL r/m32,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCR r/m8,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCR r/m16,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCR r/m32,1
N:2
D: TMP0
O:
P:01
L:1
A: ArithFLAGS, REG_sss
D: REG_sss
O:
P:0
L:1
A: TMP0, CONST
H:RCL m8,1
N:0
H:RCL m16,1
N:0
H:RCL m32,1
N:0
H:RCR m8,1
N:0
H:RCR m16,1
N:0
H:RCR m32,1
N:0
H:RCL r/m8,CL
N:0
H:RCL r/m16,CL
N:0
H:RCL r/m32,CL
N:0
H:RCR r/m8,CL
N:0
H:RCR r/m16,CL
N:0
H:RCR r/m32,CL
N:0
H:RCL m8,CL
N:0
H:RCL m16,CL
N:0
H:RCL m32,CL
N:0
H:RCR m8,CL
N:0
H:RCR m16,CL
N:0
H:RCR m32,CL
N:0
H:RCL r/m8,imm8
N:0
H:RCL r/m16,imm8
N:0
H:RCL r/m32,imm8
N:0
H:RCR r/m8,imm8
N:0
H:RCR r/m16,imm8
N:0
H:RCR r/m32,imm8
N:0
H:RCL m8,imm8
N:0
H:RCL m16,imm8
N:0
H:RCL m32,imm8
N:0
H:RCR m8,imm8
N:0
H:RCR m16,imm8
N:0
H:RCR m32,imm8
N:0
H:SHLD r/m16,r16,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD r/m32,r32,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD r/m16,r16,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD r/m32,r32,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shl_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHLD m16,r16,imm8
N:0
H:SHLD m32,r32,imm8
N:0
H:SHLD m16,r16,CL
N:0
H:SHLD m32,r32,CL
N:0
H:SHRD r/m16,r16,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD r/m32,r32,imm8
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, IMM
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD r/m16,r16,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD r/m32,r32,CL
N:2
D: TMP0
O:
P:0
L:1
A: REG_sss, CL
D: REG_sss
O: shr_double
P:0
L:1
A: TMP0, REG_ddd)
H:SHRD m16,r16,imm8
N:0
H:SHRD m32,r32,imm8
N:0
H:SHRD m16,r16,CL
N:0
H:SHRD m32,r32,CL
N:0
H:Push r16
N:3
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push r32
N:3
D: sink
O: store_data
P:4
L:1
A: REG_ddd
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push r16
N:3
D: sink
O: store_data
P:4
L:1
A: REG_sss
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push r32
N:3
D: sink
O: store_data
P:4
L:1
A: REG_sss
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push m16
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: store_data
P:4
L:1
A: TMP0)
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push m32
N:4
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O: store_data
P:4
L:1
A: TMP0)
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push imm8
N:3
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push imm16
N:3
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Push imm32
N:3
D: sink
O: store_data
P:4
L:1
A: IMM
D: sink
O: store_address
P:3
L:1
A: (ESP
D: ESP
O: sub
P:01
L:1
A: ESP, REG_OP_Size
H:Pop r16
N:2
D: REG_ddd
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop r32
N:2
D: REG_ddd
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop eSP
N:3
D: TMP0
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
D: ESP
O: move
P:01
L:1
A: TMP0
H:Pop r16
N:2
D: REG_sss
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop r32
N:2
D: REG_sss
O: load
P:2
L:1
A: (ESP
D: ESP
O: add
P:01
L:1
A: ESP, REG_OP_Size
H:Pop m16
N:0
H:Pop m32
N:0
H:PUSHA
N:0
H:PUSHAD
N:0
H:POPA
N:0
H:POPAD
N:0
H:ENTER
N:0
H:leave
N:3
D: TMP0
O: move
P:01
L:1
A: EBP
D: EBP
O: load
P:2
L:1
A: (TMP0
D: ESP
O: add
P:01
L:1
A: TMP0, REG_OP_Size
H:MOVSB m8,m8
N:0
H:MOVSB m16,m16
N:0
H:MOVSB m32,m32
N:0
H:MOVSW m8,m8
N:0
H:MOVSW m16,m16
N:0
H:MOVSW m32,m32
N:0
H:MOVSD m8,m8
N:0
H:MOVSD m16,m16
N:0
H:MOVSD m32,m32
N:0
H:CMPSB m8,m8
N:0
H:CMPSB m16,m16
N:0
H:CMPSB m32,m32
N:0
H:CMPSW m8,m8
N:0
H:CMPSW m16,m16
N:0
H:CMPSW m32,m32
N:0
H:CMPSD m8,m8
N:0
H:CMPSD m16,m16
N:0
H:CMPSD m32,m32
N:0
H:SCASB m8,m8
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASB m16,m16
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASB m32,m32
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASW m8,m8
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASW m16,m16
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASW m32,m32
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASD m8,m8
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASD m16,m16
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:SCASD m32,m32
N:3
D: TMP1
O: load
P:2
L:1
A:EDI
D: TMP2
O: sub
P:01
L:1
A: EAX, TMP1
D: EDI
O:
P:2
L:1
A: LINSEG_SUPOVR: (EDI
H:LODSB m8,m8
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSB m16,m16
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSB m32,m32
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSW m8,m8
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSW m16,m16
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSW m32,m32
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSD m8,m8
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSD m16,m16
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:LODSD m32,m32
N:2
D: EAX
O: load
P:2
L:1
A: ESI
D: ESI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (ESI
H:STOSB m8,m8
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSB m16,m16
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSB m32,m32
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSW m8,m8
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSW m16,m16
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSW m32,m32
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSD m8,m8
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSD m16,m16
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:STOSD m32,m32
N:3
D: sink
O: store_data
P:4
L:1
A: EAX
D: sink
O: store_address
P:3
L:1
A: EDI
D: EDI
O:
P:2
L:1
A:* LINSEG_SUPOVR: (EDI
H:REP MOVSB m8,m8
N:0
H:REP MOVSB m16,m16
N:0
H:REP MOVSB m32,m32
N:0
H:REP MOVSW m8,m8
N:0
H:REP MOVSW m16,m16
N:0
H:REP MOVSW m32,m32
N:0
H:REP MOVSD m8,m8
N:0
H:REP MOVSD m16,m16
N:0
H:REP MOVSD m32,m32
N:0
H:REP CMPSB m8,m8
N:0
H:REP CMPSB m16,m16
N:0
H:REP CMPSB m32,m32
N:0
H:REP CMPSW m8,m8
N:0
H:REP CMPSW m16,m16
N:0
H:REP CMPSW m32,m32
N:0
H:REP CMPSD m8,m8
N:0
H:REP CMPSD m16,m16
N:0
H:REP CMPSD m32,m32
N:0
H:REP SCASB m8,m8
N:0
H:REP SCASB m16,m16
N:0
H:REP SCASB m32,m32
N:0
H:REP SCASW m8,m8
N:0
H:REP SCASW m16,m16
N:0
H:REP SCASW m32,m32
N:0
H:REP SCASD m8,m8
N:0
H:REP SCASD m16,m16
N:0
H:REP SCASD m32,m32
N:0
H:REP LODSB m8,m8
N:0
H:REP LODSB m16,m16
N:0
H:REP LODSB m32,m32
N:0
H:REP LODSW m8,m8
N:0
H:REP LODSW m16,m16
N:0
H:REP LODSW m32,m32
N:0
H:REP LODSD m8,m8
N:0
H:REP LODSD m16,m16
N:0
H:REP LODSD m32,m32
N:0
H:REP STOSB m8,m8
N:0
H:REP STOSB m16,m16
N:0
H:REP STOSB m32,m32
N:0
H:REP STOSW m8,m8
N:0
H:REP STOSW m16,m16
N:0
H:REP STOSW m32,m32
N:0
H:REP STOSD m8,m8
N:0
H:REP STOSD m16,m16
N:0
H:REP STOSD m32,m32
N:0
H:MOVSX r16,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVSX r32,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVSX r32,r/m16
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVSX r16,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVSX r32,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVSX r16,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVSX r32,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVZX r16,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVZX r32,r/m8
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVZX r32,r/m16
N:1
D: REG_ddd
O: move
P:01
L:1
A: REG_sss
H:MOVZX r16,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVZX r32,m8
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:MOVZX r32,m16
N:1
D: REG_ddd
O: load
P:2
L:1
A: MEM
H:CWD
N:1
D: EDX
O: sar
P:0
L:1
A: EAX, CONST
H:CDQ
N:1
D: EDX
O: sar
P:0
L:1
A: EAX, CONST
H:CBW
N:1
D: AX
O: move
P:01
L:1
A: AL
H:CWDE
N:1
D: EAX
O: move
P:01
L:1
A: AX
H:FADD ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FMUL ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FSUB ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FDIV ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FADD ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FMUL ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FSUBR ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FDIVR ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FADDP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUBP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FMULP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FDIVP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUB ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FDIV ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUBR ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FDIVR ST,ST( i)
N:1
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST( i), ST0
H:FSUBRP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FDIVRP ST( i),ST
N:1
D: ST( i)
O:
P:0
L:4_or_5_or_99
A: ST0, ST( i)
H:FADD m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FADD m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FSUB m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FSUB m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FMUL m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FMUL m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FDIV m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FDIV m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: ST0, TMP0)
H:FSUBR m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FSUBR m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FDIVR m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FDIVR m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: ST0
O:
P:0
L:4_or_5_or_99
A: TMP0, ST0)
H:FIADD m32int
N:0
H:FIADD m16int
N:0
H:FISUB m32int
N:0
H:FISUB m16int
N:0
H:FIMUL m32int
N:0
H:FIMUL m16int
N:0
H:FIDIV m32int
N:0
H:FIDIV m16int
N:0
H:FISUBR m32int
N:0
H:FISUBR m16int
N:0
H:FIDIVR m32int
N:0
H:FIDIVR m16int
N:0
H:FSQRT
N:1
D: ST0
O: fp_sqrt
P:0
L:66
A: ST0, CONST
H:FCOM m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOM m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOM STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOM2 STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMP m32real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOMP m64real
N:2
D: TMP0
O: fp_load
P:2
L:1
A: MEM
D: sink
O: fp_compare
P:0
L:1
A: ST0, TMP0
H:FCOMP STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMP3 STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMP5 STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FCOMPP
N:2
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST1
D: sink
O: move
P:01
L:1
A: ST0
H:FICOM m32int
N:0
H:FICOM m16int
N:0
H:FICOMP m32int
N:0
H:FICOMP m16int
N:0
H:FTST
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, CONST
H:FUCOM STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FUCOMP STi
N:1
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST( i)
H:FUCOMPP
N:2
D: sink
O: fp_compare
P:0
L:1
A: ST0, ST1
D: sink
O: move
P:01
L:1
A: ST0
H:FXAM
N:1
D: sink
O: fp_examine
P:0
L:3
A: ST0
H:FCOMI STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FCOMIP STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FUCOMI STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FUCOMIP STi
N:1
D: sink
O: fp_compare
P:( not found)
L:1
A: ST0, ST( i)
H:FLDZ
N:1
D: ST7
O: fp_move
P:0
L:1
A: CONST
H:FLD1
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_move
P:0
L:1
A: TMP0)
H:FLDPI
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDL2T
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDL2E
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDLG2
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FLDLN2
N:2
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: ST7
O: fp_normalize
P:0
L:3
A: TMP0
H:FNINIT
N:0
H:FNSTCW m2byte
N:3
D: TMP0
O:
P:( not found)
L:1
A: CONST, CONST
D: sink
O: store_data
P:4
L:1
A: TMP0)
D: sink
O: store_address
P:3
L:1
A: MEM
H:FNSTENV m14byte
N:0
H:FNSTENV m28byte
N:0
H:FNSAVE m94byte
N:0
H:FNSAVE m108byte
N:0
H:FLDCW m2byte
N:3
D: TMP0
O: load
P:2
L:1
A: MEM
D: sink
O:
P:( not found)
L:1
A: CONST, TMP0
D: sink
O: move
P:01
L:1
A: CONST
H:FRSTOR m14byte
N:0
H:FRSTOR m28byte
N:0
H:FRSTOR m94byte
N:0
H:FRSTOR m108byte
N:0
H:FNCLEX
N:3
D: sink
O: move
P:01
L:1
A: CONST
D: FSW
O: and
P:01
L:1
A: FSW, CONST
D: sink
O: move
P:01
L:1
A: CONST
H:FNSTSW m2byte
N:3
D: TMP0
O:
P:0
L:1
A: FCC, FSW
D: sink
O: store_data
P:4
L:1
A: TMP0
D: sink
O: store_address
P:3
L:1
A: MEM
H:FNSTSW AX
N:3
D: TMP0
O:
P:0
L:1
A: FCC, FSW
D: TMP1
O: shr
P:0
L:1
A: EAX, CONST
D: EAX
O:
P:0
L:1
A: TMP1, TMP0
H:FDISI
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:FENI
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:FSETPM
N:1
D: sink
O: move
P:01
L:1
A: CONST
H:FINCSTP
N:1
D: sink
O: fp_move
P:0
L:1
A: CONST
H:FDECSTP
N:1
D: sink
O: fp_move
P:0
L:1
A: CONST
H:FFREE ST( i)
N:1
D: sink
O: fp_move
P:0
L:1
A: ST( i)
H:FFREEP ST( i)
N:2
D: sink
O: fp_move
P:0
L:1
A: ST( i)
D: sink
O: fp_move
P:0
L:1
A: ST0
H:FNOP
N:1
D: sink
O: fp_move
P:0
L:1
A: CONST
H:FWAIT
N:2
D: sink
O: move
P:01
L:1
A: CONST
D: sink
O: move
P:01
L:1
A: CONST
H:FILD m16int
N:4
D: TMP1
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP2
O:
P:0
L:1
A: TMP1
D: ST7
O: fp_convert
P:0
L:3
A: TMP0, TMP2
H:FILD m32int
N:4
D: TMP1
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP2
O:
P:0
L:1
A: TMP1
D: ST7
O: fp_convert
P:0
L:3
A: TMP0, TMP2
H:FILD m64int
N:4
D: TMP1
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP2
O:
P:0
L:1
A: TMP1
D: ST7
O: fp_convert
P:0
L:3
A: TMP0, TMP2
H:FLD m32real
N:1
D: ST7
O: fp_load
P:2
L:1
A: MEM
H:FLD m64real
N:1
D: ST7
O: fp_load
P:2
L:1
A: MEM
H:FLD m80real
N:4
D: TMP2
O: fp_load
P:2
L:1
A: MEM
D: TMP0
O: load_ea
P:0
L:1
A: base_BBB
D: TMP3
O: fp_load
P:2
L:1
A: TMP0
D: ST7
O: merge
P:0
L:1
A: TMP3, TMP2
H:FLD STi
N:1
D: ST7
O: fp_move
P:0
L:1
A: ST( i)
H:FIST m16int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FIST m32int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FISTP m16int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: ST0, TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FISTP m32int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: ST0, TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FISTP m64int
N:4
D: TMP0
O: freadrom
P:( not found)
L:1
A: CONST
D: TMP1
O: fp_convert
P:0
L:3
A: TMP0, ST0
D: sink
O: fp_store_data
P:4
L:1
A: ST0, TMP1
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FST m32real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FST m64real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FST STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP m32real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FSTP m64real
N:2
D: sink
O: fp_store_data
P:4
L:1
A: ST0
D: sink
O: fp_store_address
P:3
L:1
A: MEM
H:FSTP m80real
N:0
H:FSTP STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP8 STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP9 STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FSTP1 STi
N:1
D: ST( i)
O: fp_move
P:0
L:1
A: ST0
H:FXCH STi
N:1
D: sink
O: fp_exchange
P:( none*)
L:1
A: ST0, ST( i)
H:FXCH4 STi
N:1
D: sink
O: fp_exchange
P:( none*)
L:1
A: ST0, ST( i)
H:FXCH7 STi
N:1
D: sink
O: fp_exchange
P:( none*)
L:1
A: ST0, ST( i)
H:FCMOVB STi
N:2
D: MP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVBE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVU STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNB STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNBE STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FCMOVNU STi
N:2
D: TMP0
O: merge
P:0
L:1
A: ArithFLAGS, ST( i)
D: ST0
O: fp_select
P:0
L:1
A: TMP0, ST0
H:FABS
N:1
D: ST0
O: fp_xor_sign
P:0
L:1
A: ST0, ST0
H:FCHS
N:3
D: TMP0
O: fp_move
P:0
L:1
A: ST0
D: TMP1
O: freadrom
P:( not found)
L:1
A: CONST
D: ST0
O: fp_xor
P:0
L:1
A: TMP0, TMP1
H:FPREM
N:0
H:FPREM1
N:0
H:FBLD m80dec
N:0
H:FBSTP m80dec
N:0
H:FRNDINT
N:0
H:FSCALE
N:0
H:FXTRACT
N:0
H:F2XM1
N:0
H:FCOS
N:0
H:FPATAN
N:0
H:FPTAN
N:0
H:FSIN
N:0
H:FSINCOS
N:0
H:FYL2X
N:0
H:FYL2XP1
N:0
---------------------------------------------------------
---------------------------------------------------------
[Credits & Info]:
So Long and Thaks for All the Fish, guys ;)
----------------------------------------------------------
Q&A:
Q. - How to find latest version of OPCODE.LST ?
A. - You may find it within Ralf's INTERxx.ZIP.
Q. - Did PHG have WWW page, where placed OPCODE.LST ?
A. - http://www.chat.ru/~phg
-----------------------------------------------------------
[2 All]
If You found some errors or incorrections in this text
please send info 'bout it.
-----------------------------------------------------------
Sorry, But EOF