SoftCPU.cpp 108 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072
  1. /*
  2. * Copyright (c) 2020, Andreas Kling <kling@serenityos.org>
  3. * Copyright (c) 2021, Leon Albrecht <leon2002.la@gmail.com>
  4. *
  5. * SPDX-License-Identifier: BSD-2-Clause
  6. */
  7. #include "SoftCPU.h"
  8. #include "Emulator.h"
  9. #include <AK/Assertions.h>
  10. #include <AK/BuiltinWrappers.h>
  11. #include <AK/Debug.h>
  12. #include <AK/Format.h>
  13. #include <stdio.h>
  14. #include <string.h>
  15. #include <unistd.h>
  16. #if defined(__GNUC__) && !defined(__clang__)
  17. # pragma GCC optimize("O3")
  18. #endif
  19. #define TODO_INSN() \
  20. do { \
  21. reportln("\n=={}== Unimplemented instruction: {}\n", getpid(), __FUNCTION__); \
  22. m_emulator.dump_backtrace(); \
  23. _exit(0); \
  24. } while (0)
  25. #define FPU_INSTRUCTION(name) \
  26. void SoftCPU::name(const X86::Instruction& insn) \
  27. { \
  28. m_fpu.name(insn); \
  29. }
  30. #define VPU_INSTRUCTION(name) \
  31. void SoftCPU::name(const X86::Instruction& insn) \
  32. { \
  33. m_vpu.name(insn); \
  34. }
  35. #define DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(mnemonic, op) \
  36. void SoftCPU::mnemonic##_RM8_1(const X86::Instruction& insn) { generic_RM8_1(op<ValueWithShadow<u8>>, insn); } \
  37. void SoftCPU::mnemonic##_RM8_CL(const X86::Instruction& insn) { generic_RM8_CL(op<ValueWithShadow<u8>>, insn); } \
  38. void SoftCPU::mnemonic##_RM8_imm8(const X86::Instruction& insn) { generic_RM8_imm8<true, false>(op<ValueWithShadow<u8>>, insn); } \
  39. void SoftCPU::mnemonic##_RM16_1(const X86::Instruction& insn) { generic_RM16_1(op<ValueWithShadow<u16>>, insn); } \
  40. void SoftCPU::mnemonic##_RM16_CL(const X86::Instruction& insn) { generic_RM16_CL(op<ValueWithShadow<u16>>, insn); } \
  41. void SoftCPU::mnemonic##_RM16_imm8(const X86::Instruction& insn) { generic_RM16_unsigned_imm8<true>(op<ValueWithShadow<u16>>, insn); } \
  42. void SoftCPU::mnemonic##_RM32_1(const X86::Instruction& insn) { generic_RM32_1(op<ValueWithShadow<u32>>, insn); } \
  43. void SoftCPU::mnemonic##_RM32_CL(const X86::Instruction& insn) { generic_RM32_CL(op<ValueWithShadow<u32>>, insn); } \
  44. void SoftCPU::mnemonic##_RM32_imm8(const X86::Instruction& insn) { generic_RM32_unsigned_imm8<true>(op<ValueWithShadow<u32>>, insn); }
  45. namespace UserspaceEmulator {
  46. template<typename T>
  47. ALWAYS_INLINE void warn_if_uninitialized(T value_with_shadow, char const* message)
  48. {
  49. if (value_with_shadow.is_uninitialized()) [[unlikely]] {
  50. reportln("\033[31;1mWarning! Use of uninitialized value: {}\033[0m\n", message);
  51. Emulator::the().dump_backtrace();
  52. }
  53. }
  54. ALWAYS_INLINE void SoftCPU::warn_if_flags_tainted(char const* message) const
  55. {
  56. if (m_flags_tainted) [[unlikely]] {
  57. reportln("\n=={}== \033[31;1mConditional depends on uninitialized data\033[0m ({})\n", getpid(), message);
  58. Emulator::the().dump_backtrace();
  59. }
  60. }
  61. template<typename T, typename U>
  62. constexpr T sign_extended_to(U value)
  63. {
  64. if (!(value & X86::TypeTrivia<U>::sign_bit))
  65. return value;
  66. return (X86::TypeTrivia<T>::mask & ~X86::TypeTrivia<U>::mask) | value;
  67. }
  68. SoftCPU::SoftCPU(Emulator& emulator)
  69. : m_emulator(emulator)
  70. , m_fpu(emulator, *this)
  71. , m_vpu(emulator, *this)
  72. {
  73. PartAddressableRegister empty_reg;
  74. explicit_bzero(&empty_reg, sizeof(empty_reg));
  75. for (auto& gpr : m_gpr)
  76. gpr = ValueWithShadow<PartAddressableRegister>::create_initialized(empty_reg);
  77. m_segment[(int)X86::SegmentRegister::CS] = 0x1b;
  78. m_segment[(int)X86::SegmentRegister::DS] = 0x23;
  79. m_segment[(int)X86::SegmentRegister::ES] = 0x23;
  80. m_segment[(int)X86::SegmentRegister::SS] = 0x23;
  81. m_segment[(int)X86::SegmentRegister::GS] = 0x2b;
  82. }
  83. void SoftCPU::dump() const
  84. {
  85. outln(" eax={:p} ebx={:p} ecx={:p} edx={:p} ebp={:p} esp={:p} esi={:p} edi={:p} o={:d} s={:d} z={:d} a={:d} p={:d} c={:d}",
  86. eax(), ebx(), ecx(), edx(), ebp(), esp(), esi(), edi(), of(), sf(), zf(), af(), pf(), cf());
  87. outln("#eax={:hex-dump} #ebx={:hex-dump} #ecx={:hex-dump} #edx={:hex-dump} #ebhex-dump={:hex-dump} #eshex-dump={:hex-dump} #esi={:hex-dump} #edi={:hex-dump} #f={}",
  88. eax().shadow().span(), ebx().shadow().span(), ecx().shadow().span(), edx().shadow().span(), ebp().shadow().span(), esp().shadow().span(), esi().shadow().span(), edi().shadow().span(), m_flags_tainted);
  89. fflush(stdout);
  90. }
  91. void SoftCPU::update_code_cache()
  92. {
  93. auto* region = m_emulator.mmu().find_region({ cs(), eip() });
  94. VERIFY(region);
  95. if (!region->is_executable()) {
  96. reportln("SoftCPU::update_code_cache: Non-executable region @ {:p}", eip());
  97. Emulator::the().dump_backtrace();
  98. TODO();
  99. }
  100. // FIXME: This cache needs to be invalidated if the code region is ever unmapped.
  101. m_cached_code_region = region;
  102. m_cached_code_base_ptr = region->data();
  103. }
  104. ValueWithShadow<u8> SoftCPU::read_memory8(X86::LogicalAddress address)
  105. {
  106. VERIFY(address.selector() == 0x1b || address.selector() == 0x23 || address.selector() == 0x2b);
  107. auto value = m_emulator.mmu().read8(address);
  108. outln_if(MEMORY_DEBUG, "\033[36;1mread_memory8: @{:#04x}:{:p} -> {:#02x} ({:#02x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  109. return value;
  110. }
  111. ValueWithShadow<u16> SoftCPU::read_memory16(X86::LogicalAddress address)
  112. {
  113. VERIFY(address.selector() == 0x1b || address.selector() == 0x23 || address.selector() == 0x2b);
  114. auto value = m_emulator.mmu().read16(address);
  115. outln_if(MEMORY_DEBUG, "\033[36;1mread_memory16: @{:#04x}:{:p} -> {:#04x} ({:#04x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  116. return value;
  117. }
  118. ValueWithShadow<u32> SoftCPU::read_memory32(X86::LogicalAddress address)
  119. {
  120. VERIFY(address.selector() == 0x1b || address.selector() == 0x23 || address.selector() == 0x2b);
  121. auto value = m_emulator.mmu().read32(address);
  122. outln_if(MEMORY_DEBUG, "\033[36;1mread_memory32: @{:#04x}:{:p} -> {:#08x} ({:#08x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  123. return value;
  124. }
  125. ValueWithShadow<u64> SoftCPU::read_memory64(X86::LogicalAddress address)
  126. {
  127. VERIFY(address.selector() == 0x1b || address.selector() == 0x23 || address.selector() == 0x2b);
  128. auto value = m_emulator.mmu().read64(address);
  129. outln_if(MEMORY_DEBUG, "\033[36;1mread_memory64: @{:#04x}:{:p} -> {:#016x} ({:#016x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  130. return value;
  131. }
  132. ValueWithShadow<u128> SoftCPU::read_memory128(X86::LogicalAddress address)
  133. {
  134. VERIFY(address.selector() == 0x1b || address.selector() == 0x23 || address.selector() == 0x2b);
  135. auto value = m_emulator.mmu().read128(address);
  136. outln_if(MEMORY_DEBUG, "\033[36;1mread_memory128: @{:#04x}:{:p} -> {:#032x} ({:#032x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  137. return value;
  138. }
  139. ValueWithShadow<u256> SoftCPU::read_memory256(X86::LogicalAddress address)
  140. {
  141. VERIFY(address.selector() == 0x1b || address.selector() == 0x23 || address.selector() == 0x2b);
  142. auto value = m_emulator.mmu().read256(address);
  143. outln_if(MEMORY_DEBUG, "\033[36;1mread_memory256: @{:#04x}:{:p} -> {:#064x} ({:#064x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  144. return value;
  145. }
  146. void SoftCPU::write_memory8(X86::LogicalAddress address, ValueWithShadow<u8> value)
  147. {
  148. VERIFY(address.selector() == 0x23 || address.selector() == 0x2b);
  149. outln_if(MEMORY_DEBUG, "\033[36;1mwrite_memory8: @{:#04x}:{:p} <- {:#02x} ({:#02x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  150. m_emulator.mmu().write8(address, value);
  151. }
  152. void SoftCPU::write_memory16(X86::LogicalAddress address, ValueWithShadow<u16> value)
  153. {
  154. VERIFY(address.selector() == 0x23 || address.selector() == 0x2b);
  155. outln_if(MEMORY_DEBUG, "\033[36;1mwrite_memory16: @{:#04x}:{:p} <- {:#04x} ({:#04x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  156. m_emulator.mmu().write16(address, value);
  157. }
  158. void SoftCPU::write_memory32(X86::LogicalAddress address, ValueWithShadow<u32> value)
  159. {
  160. VERIFY(address.selector() == 0x23 || address.selector() == 0x2b);
  161. outln_if(MEMORY_DEBUG, "\033[36;1mwrite_memory32: @{:#04x}:{:p} <- {:#08x} ({:#08x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  162. m_emulator.mmu().write32(address, value);
  163. }
  164. void SoftCPU::write_memory64(X86::LogicalAddress address, ValueWithShadow<u64> value)
  165. {
  166. VERIFY(address.selector() == 0x23 || address.selector() == 0x2b);
  167. outln_if(MEMORY_DEBUG, "\033[36;1mwrite_memory64: @{:#04x}:{:p} <- {:#016x} ({:#016x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  168. m_emulator.mmu().write64(address, value);
  169. }
  170. void SoftCPU::write_memory128(X86::LogicalAddress address, ValueWithShadow<u128> value)
  171. {
  172. VERIFY(address.selector() == 0x23 || address.selector() == 0x2b);
  173. outln_if(MEMORY_DEBUG, "\033[36;1mwrite_memory128: @{:#04x}:{:p} <- {:#032x} ({:#032x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  174. m_emulator.mmu().write128(address, value);
  175. }
  176. void SoftCPU::write_memory256(X86::LogicalAddress address, ValueWithShadow<u256> value)
  177. {
  178. VERIFY(address.selector() == 0x23 || address.selector() == 0x2b);
  179. outln_if(MEMORY_DEBUG, "\033[36;1mwrite_memory256: @{:#04x}:{:p} <- {:#064x} ({:#064x})\033[0m", address.selector(), address.offset(), value, value.shadow_as_value());
  180. m_emulator.mmu().write256(address, value);
  181. }
  182. void SoftCPU::push_string(StringView string)
  183. {
  184. u32 space_to_allocate = round_up_to_power_of_two(string.length() + 1, 16);
  185. set_esp({ esp().value() - space_to_allocate, esp().shadow() });
  186. m_emulator.mmu().copy_to_vm(esp().value(), string.characters_without_null_termination(), string.length());
  187. m_emulator.mmu().write8({ 0x23, esp().value() + string.length() }, shadow_wrap_as_initialized((u8)'\0'));
  188. }
  189. void SoftCPU::push_buffer(u8 const* data, size_t size)
  190. {
  191. set_esp({ esp().value() - size, esp().shadow() });
  192. warn_if_uninitialized(esp(), "push_buffer");
  193. m_emulator.mmu().copy_to_vm(esp().value(), data, size);
  194. }
  195. void SoftCPU::push32(ValueWithShadow<u32> value)
  196. {
  197. set_esp({ esp().value() - sizeof(u32), esp().shadow() });
  198. warn_if_uninitialized(esp(), "push32");
  199. write_memory32({ ss(), esp().value() }, value);
  200. }
  201. ValueWithShadow<u32> SoftCPU::pop32()
  202. {
  203. warn_if_uninitialized(esp(), "pop32");
  204. auto value = read_memory32({ ss(), esp().value() });
  205. set_esp({ esp().value() + sizeof(u32), esp().shadow() });
  206. return value;
  207. }
  208. void SoftCPU::push16(ValueWithShadow<u16> value)
  209. {
  210. warn_if_uninitialized(esp(), "push16");
  211. set_esp({ esp().value() - sizeof(u16), esp().shadow() });
  212. write_memory16({ ss(), esp().value() }, value);
  213. }
  214. ValueWithShadow<u16> SoftCPU::pop16()
  215. {
  216. warn_if_uninitialized(esp(), "pop16");
  217. auto value = read_memory16({ ss(), esp().value() });
  218. set_esp({ esp().value() + sizeof(u16), esp().shadow() });
  219. return value;
  220. }
  221. template<bool check_zf, typename Callback>
  222. void SoftCPU::do_once_or_repeat(const X86::Instruction& insn, Callback callback)
  223. {
  224. if (!insn.has_rep_prefix())
  225. return callback();
  226. while (loop_index(insn.a32()).value()) {
  227. callback();
  228. decrement_loop_index(insn.a32());
  229. if constexpr (check_zf) {
  230. warn_if_flags_tainted("repz/repnz");
  231. if (insn.rep_prefix() == X86::Prefix::REPZ && !zf())
  232. break;
  233. if (insn.rep_prefix() == X86::Prefix::REPNZ && zf())
  234. break;
  235. }
  236. }
  237. }
  238. template<typename T>
  239. ALWAYS_INLINE static T op_inc(SoftCPU& cpu, T data)
  240. {
  241. typename T::ValueType result;
  242. u32 new_flags = 0;
  243. if constexpr (sizeof(typename T::ValueType) == 4) {
  244. asm volatile("incl %%eax\n"
  245. : "=a"(result)
  246. : "a"(data.value()));
  247. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  248. asm volatile("incw %%ax\n"
  249. : "=a"(result)
  250. : "a"(data.value()));
  251. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  252. asm volatile("incb %%al\n"
  253. : "=a"(result)
  254. : "a"(data.value()));
  255. }
  256. asm volatile(
  257. "pushf\n"
  258. "pop %%ebx"
  259. : "=b"(new_flags));
  260. cpu.set_flags_oszap(new_flags);
  261. cpu.taint_flags_from(data);
  262. return shadow_wrap_with_taint_from(result, data);
  263. }
  264. template<typename T>
  265. ALWAYS_INLINE static T op_dec(SoftCPU& cpu, T data)
  266. {
  267. typename T::ValueType result;
  268. u32 new_flags = 0;
  269. if constexpr (sizeof(typename T::ValueType) == 4) {
  270. asm volatile("decl %%eax\n"
  271. : "=a"(result)
  272. : "a"(data.value()));
  273. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  274. asm volatile("decw %%ax\n"
  275. : "=a"(result)
  276. : "a"(data.value()));
  277. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  278. asm volatile("decb %%al\n"
  279. : "=a"(result)
  280. : "a"(data.value()));
  281. }
  282. asm volatile(
  283. "pushf\n"
  284. "pop %%ebx"
  285. : "=b"(new_flags));
  286. cpu.set_flags_oszap(new_flags);
  287. cpu.taint_flags_from(data);
  288. return shadow_wrap_with_taint_from(result, data);
  289. }
  290. template<typename T>
  291. ALWAYS_INLINE static T op_xor(SoftCPU& cpu, const T& dest, const T& src)
  292. {
  293. typename T::ValueType result;
  294. u32 new_flags = 0;
  295. if constexpr (sizeof(typename T::ValueType) == 4) {
  296. asm volatile("xorl %%ecx, %%eax\n"
  297. : "=a"(result)
  298. : "a"(dest.value()), "c"(src.value()));
  299. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  300. asm volatile("xor %%cx, %%ax\n"
  301. : "=a"(result)
  302. : "a"(dest.value()), "c"(src.value()));
  303. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  304. asm volatile("xorb %%cl, %%al\n"
  305. : "=a"(result)
  306. : "a"(dest.value()), "c"(src.value()));
  307. } else {
  308. VERIFY_NOT_REACHED();
  309. }
  310. asm volatile(
  311. "pushf\n"
  312. "pop %%ebx"
  313. : "=b"(new_flags));
  314. cpu.set_flags_oszpc(new_flags);
  315. cpu.taint_flags_from(dest, src);
  316. return shadow_wrap_with_taint_from(result, dest, src);
  317. }
  318. template<typename T>
  319. ALWAYS_INLINE static T op_or(SoftCPU& cpu, const T& dest, const T& src)
  320. {
  321. typename T::ValueType result = 0;
  322. u32 new_flags = 0;
  323. if constexpr (sizeof(typename T::ValueType) == 4) {
  324. asm volatile("orl %%ecx, %%eax\n"
  325. : "=a"(result)
  326. : "a"(dest.value()), "c"(src.value()));
  327. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  328. asm volatile("or %%cx, %%ax\n"
  329. : "=a"(result)
  330. : "a"(dest.value()), "c"(src.value()));
  331. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  332. asm volatile("orb %%cl, %%al\n"
  333. : "=a"(result)
  334. : "a"(dest.value()), "c"(src.value()));
  335. } else {
  336. VERIFY_NOT_REACHED();
  337. }
  338. asm volatile(
  339. "pushf\n"
  340. "pop %%ebx"
  341. : "=b"(new_flags));
  342. cpu.set_flags_oszpc(new_flags);
  343. cpu.taint_flags_from(dest, src);
  344. return shadow_wrap_with_taint_from(result, dest, src);
  345. }
  346. template<typename T>
  347. ALWAYS_INLINE static T op_sub(SoftCPU& cpu, const T& dest, const T& src)
  348. {
  349. typename T::ValueType result = 0;
  350. u32 new_flags = 0;
  351. if constexpr (sizeof(typename T::ValueType) == 4) {
  352. asm volatile("subl %%ecx, %%eax\n"
  353. : "=a"(result)
  354. : "a"(dest.value()), "c"(src.value()));
  355. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  356. asm volatile("subw %%cx, %%ax\n"
  357. : "=a"(result)
  358. : "a"(dest.value()), "c"(src.value()));
  359. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  360. asm volatile("subb %%cl, %%al\n"
  361. : "=a"(result)
  362. : "a"(dest.value()), "c"(src.value()));
  363. } else {
  364. VERIFY_NOT_REACHED();
  365. }
  366. asm volatile(
  367. "pushf\n"
  368. "pop %%ebx"
  369. : "=b"(new_flags));
  370. cpu.set_flags_oszapc(new_flags);
  371. cpu.taint_flags_from(dest, src);
  372. return shadow_wrap_with_taint_from(result, dest, src);
  373. }
  374. template<typename T, bool cf>
  375. ALWAYS_INLINE static T op_sbb_impl(SoftCPU& cpu, const T& dest, const T& src)
  376. {
  377. typename T::ValueType result = 0;
  378. u32 new_flags = 0;
  379. if constexpr (cf)
  380. asm volatile("stc");
  381. else
  382. asm volatile("clc");
  383. if constexpr (sizeof(typename T::ValueType) == 4) {
  384. asm volatile("sbbl %%ecx, %%eax\n"
  385. : "=a"(result)
  386. : "a"(dest.value()), "c"(src.value()));
  387. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  388. asm volatile("sbbw %%cx, %%ax\n"
  389. : "=a"(result)
  390. : "a"(dest.value()), "c"(src.value()));
  391. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  392. asm volatile("sbbb %%cl, %%al\n"
  393. : "=a"(result)
  394. : "a"(dest.value()), "c"(src.value()));
  395. } else {
  396. VERIFY_NOT_REACHED();
  397. }
  398. asm volatile(
  399. "pushf\n"
  400. "pop %%ebx"
  401. : "=b"(new_flags));
  402. cpu.set_flags_oszapc(new_flags);
  403. cpu.taint_flags_from(dest, src);
  404. return shadow_wrap_with_taint_from<typename T::ValueType>(result, dest, src);
  405. }
  406. template<typename T>
  407. ALWAYS_INLINE static T op_sbb(SoftCPU& cpu, T& dest, const T& src)
  408. {
  409. cpu.warn_if_flags_tainted("sbb");
  410. if (cpu.cf())
  411. return op_sbb_impl<T, true>(cpu, dest, src);
  412. return op_sbb_impl<T, false>(cpu, dest, src);
  413. }
  414. template<typename T>
  415. ALWAYS_INLINE static T op_add(SoftCPU& cpu, T& dest, const T& src)
  416. {
  417. typename T::ValueType result = 0;
  418. u32 new_flags = 0;
  419. if constexpr (sizeof(typename T::ValueType) == 4) {
  420. asm volatile("addl %%ecx, %%eax\n"
  421. : "=a"(result)
  422. : "a"(dest.value()), "c"(src.value()));
  423. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  424. asm volatile("addw %%cx, %%ax\n"
  425. : "=a"(result)
  426. : "a"(dest.value()), "c"(src.value()));
  427. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  428. asm volatile("addb %%cl, %%al\n"
  429. : "=a"(result)
  430. : "a"(dest.value()), "c"(src.value()));
  431. } else {
  432. VERIFY_NOT_REACHED();
  433. }
  434. asm volatile(
  435. "pushf\n"
  436. "pop %%ebx"
  437. : "=b"(new_flags));
  438. cpu.set_flags_oszapc(new_flags);
  439. cpu.taint_flags_from(dest, src);
  440. return shadow_wrap_with_taint_from<typename T::ValueType>(result, dest, src);
  441. }
  442. template<typename T, bool cf>
  443. ALWAYS_INLINE static T op_adc_impl(SoftCPU& cpu, T& dest, const T& src)
  444. {
  445. typename T::ValueType result = 0;
  446. u32 new_flags = 0;
  447. if constexpr (cf)
  448. asm volatile("stc");
  449. else
  450. asm volatile("clc");
  451. if constexpr (sizeof(typename T::ValueType) == 4) {
  452. asm volatile("adcl %%ecx, %%eax\n"
  453. : "=a"(result)
  454. : "a"(dest.value()), "c"(src.value()));
  455. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  456. asm volatile("adcw %%cx, %%ax\n"
  457. : "=a"(result)
  458. : "a"(dest.value()), "c"(src.value()));
  459. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  460. asm volatile("adcb %%cl, %%al\n"
  461. : "=a"(result)
  462. : "a"(dest.value()), "c"(src.value()));
  463. } else {
  464. VERIFY_NOT_REACHED();
  465. }
  466. asm volatile(
  467. "pushf\n"
  468. "pop %%ebx"
  469. : "=b"(new_flags));
  470. cpu.set_flags_oszapc(new_flags);
  471. cpu.taint_flags_from(dest, src);
  472. return shadow_wrap_with_taint_from<typename T::ValueType>(result, dest, src);
  473. }
  474. template<typename T>
  475. ALWAYS_INLINE static T op_adc(SoftCPU& cpu, T& dest, const T& src)
  476. {
  477. cpu.warn_if_flags_tainted("adc");
  478. if (cpu.cf())
  479. return op_adc_impl<T, true>(cpu, dest, src);
  480. return op_adc_impl<T, false>(cpu, dest, src);
  481. }
  482. template<typename T>
  483. ALWAYS_INLINE static T op_and(SoftCPU& cpu, const T& dest, const T& src)
  484. {
  485. typename T::ValueType result = 0;
  486. u32 new_flags = 0;
  487. if constexpr (sizeof(typename T::ValueType) == 4) {
  488. asm volatile("andl %%ecx, %%eax\n"
  489. : "=a"(result)
  490. : "a"(dest.value()), "c"(src.value()));
  491. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  492. asm volatile("andw %%cx, %%ax\n"
  493. : "=a"(result)
  494. : "a"(dest.value()), "c"(src.value()));
  495. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  496. asm volatile("andb %%cl, %%al\n"
  497. : "=a"(result)
  498. : "a"(dest.value()), "c"(src.value()));
  499. } else {
  500. VERIFY_NOT_REACHED();
  501. }
  502. asm volatile(
  503. "pushf\n"
  504. "pop %%ebx"
  505. : "=b"(new_flags));
  506. cpu.set_flags_oszpc(new_flags);
  507. cpu.taint_flags_from(dest, src);
  508. return shadow_wrap_with_taint_from<typename T::ValueType>(result, dest, src);
  509. }
  510. template<typename T>
  511. ALWAYS_INLINE static void op_imul(SoftCPU& cpu, const T& dest, const T& src, T& result_high, T& result_low)
  512. {
  513. bool did_overflow = false;
  514. if constexpr (sizeof(T) == 4) {
  515. i64 result = (i64)src * (i64)dest;
  516. result_low = result & 0xffffffff;
  517. result_high = result >> 32;
  518. did_overflow = (result > NumericLimits<T>::max() || result < NumericLimits<T>::min());
  519. } else if constexpr (sizeof(T) == 2) {
  520. i32 result = (i32)src * (i32)dest;
  521. result_low = result & 0xffff;
  522. result_high = result >> 16;
  523. did_overflow = (result > NumericLimits<T>::max() || result < NumericLimits<T>::min());
  524. } else if constexpr (sizeof(T) == 1) {
  525. i16 result = (i16)src * (i16)dest;
  526. result_low = result & 0xff;
  527. result_high = result >> 8;
  528. did_overflow = (result > NumericLimits<T>::max() || result < NumericLimits<T>::min());
  529. }
  530. if (did_overflow) {
  531. cpu.set_cf(true);
  532. cpu.set_of(true);
  533. } else {
  534. cpu.set_cf(false);
  535. cpu.set_of(false);
  536. }
  537. }
  538. template<typename T>
  539. ALWAYS_INLINE static T op_shr(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  540. {
  541. if (steps.value() == 0)
  542. return shadow_wrap_with_taint_from(data.value(), data, steps);
  543. u32 result = 0;
  544. u32 new_flags = 0;
  545. if constexpr (sizeof(typename T::ValueType) == 4) {
  546. asm volatile("shrl %%cl, %%eax\n"
  547. : "=a"(result)
  548. : "a"(data.value()), "c"(steps.value()));
  549. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  550. asm volatile("shrw %%cl, %%ax\n"
  551. : "=a"(result)
  552. : "a"(data.value()), "c"(steps.value()));
  553. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  554. asm volatile("shrb %%cl, %%al\n"
  555. : "=a"(result)
  556. : "a"(data.value()), "c"(steps.value()));
  557. }
  558. asm volatile(
  559. "pushf\n"
  560. "pop %%ebx"
  561. : "=b"(new_flags));
  562. cpu.set_flags_oszapc(new_flags);
  563. cpu.taint_flags_from(data, steps);
  564. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  565. }
  566. template<typename T>
  567. ALWAYS_INLINE static T op_shl(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  568. {
  569. if (steps.value() == 0)
  570. return shadow_wrap_with_taint_from(data.value(), data, steps);
  571. u32 result = 0;
  572. u32 new_flags = 0;
  573. if constexpr (sizeof(typename T::ValueType) == 4) {
  574. asm volatile("shll %%cl, %%eax\n"
  575. : "=a"(result)
  576. : "a"(data.value()), "c"(steps.value()));
  577. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  578. asm volatile("shlw %%cl, %%ax\n"
  579. : "=a"(result)
  580. : "a"(data.value()), "c"(steps.value()));
  581. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  582. asm volatile("shlb %%cl, %%al\n"
  583. : "=a"(result)
  584. : "a"(data.value()), "c"(steps.value()));
  585. }
  586. asm volatile(
  587. "pushf\n"
  588. "pop %%ebx"
  589. : "=b"(new_flags));
  590. cpu.set_flags_oszapc(new_flags);
  591. cpu.taint_flags_from(data, steps);
  592. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  593. }
  594. template<typename T>
  595. ALWAYS_INLINE static T op_shrd(SoftCPU& cpu, T data, T extra_bits, ValueWithShadow<u8> steps)
  596. {
  597. if (steps.value() == 0)
  598. return shadow_wrap_with_taint_from(data.value(), data, steps);
  599. u32 result = 0;
  600. u32 new_flags = 0;
  601. if constexpr (sizeof(typename T::ValueType) == 4) {
  602. asm volatile("shrd %%cl, %%edx, %%eax\n"
  603. : "=a"(result)
  604. : "a"(data.value()), "d"(extra_bits.value()), "c"(steps.value()));
  605. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  606. asm volatile("shrd %%cl, %%dx, %%ax\n"
  607. : "=a"(result)
  608. : "a"(data.value()), "d"(extra_bits.value()), "c"(steps.value()));
  609. }
  610. asm volatile(
  611. "pushf\n"
  612. "pop %%ebx"
  613. : "=b"(new_flags));
  614. cpu.set_flags_oszapc(new_flags);
  615. cpu.taint_flags_from(data, steps);
  616. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  617. }
  618. template<typename T>
  619. ALWAYS_INLINE static T op_shld(SoftCPU& cpu, T data, T extra_bits, ValueWithShadow<u8> steps)
  620. {
  621. if (steps.value() == 0)
  622. return shadow_wrap_with_taint_from(data.value(), data, steps);
  623. u32 result = 0;
  624. u32 new_flags = 0;
  625. if constexpr (sizeof(typename T::ValueType) == 4) {
  626. asm volatile("shld %%cl, %%edx, %%eax\n"
  627. : "=a"(result)
  628. : "a"(data.value()), "d"(extra_bits.value()), "c"(steps.value()));
  629. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  630. asm volatile("shld %%cl, %%dx, %%ax\n"
  631. : "=a"(result)
  632. : "a"(data.value()), "d"(extra_bits.value()), "c"(steps.value()));
  633. }
  634. asm volatile(
  635. "pushf\n"
  636. "pop %%ebx"
  637. : "=b"(new_flags));
  638. cpu.set_flags_oszapc(new_flags);
  639. cpu.taint_flags_from(data, steps);
  640. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  641. }
  642. template<bool update_dest, bool is_or, typename Op>
  643. ALWAYS_INLINE void SoftCPU::generic_AL_imm8(Op op, const X86::Instruction& insn)
  644. {
  645. auto dest = al();
  646. auto src = shadow_wrap_as_initialized(insn.imm8());
  647. auto result = op(*this, dest, src);
  648. if (is_or && insn.imm8() == 0xff)
  649. result.set_initialized();
  650. if (update_dest)
  651. set_al(result);
  652. }
  653. template<bool update_dest, bool is_or, typename Op>
  654. ALWAYS_INLINE void SoftCPU::generic_AX_imm16(Op op, const X86::Instruction& insn)
  655. {
  656. auto dest = ax();
  657. auto src = shadow_wrap_as_initialized(insn.imm16());
  658. auto result = op(*this, dest, src);
  659. if (is_or && insn.imm16() == 0xffff)
  660. result.set_initialized();
  661. if (update_dest)
  662. set_ax(result);
  663. }
  664. template<bool update_dest, bool is_or, typename Op>
  665. ALWAYS_INLINE void SoftCPU::generic_EAX_imm32(Op op, const X86::Instruction& insn)
  666. {
  667. auto dest = eax();
  668. auto src = shadow_wrap_as_initialized(insn.imm32());
  669. auto result = op(*this, dest, src);
  670. if (is_or && insn.imm32() == 0xffffffff)
  671. result.set_initialized();
  672. if (update_dest)
  673. set_eax(result);
  674. }
  675. template<bool update_dest, bool is_or, typename Op>
  676. ALWAYS_INLINE void SoftCPU::generic_RM16_imm16(Op op, const X86::Instruction& insn)
  677. {
  678. auto dest = insn.modrm().read16(*this, insn);
  679. auto src = shadow_wrap_as_initialized(insn.imm16());
  680. auto result = op(*this, dest, src);
  681. if (is_or && insn.imm16() == 0xffff)
  682. result.set_initialized();
  683. if (update_dest)
  684. insn.modrm().write16(*this, insn, result);
  685. }
  686. template<bool update_dest, bool is_or, typename Op>
  687. ALWAYS_INLINE void SoftCPU::generic_RM16_imm8(Op op, const X86::Instruction& insn)
  688. {
  689. auto dest = insn.modrm().read16(*this, insn);
  690. auto src = shadow_wrap_as_initialized<u16>(sign_extended_to<u16>(insn.imm8()));
  691. auto result = op(*this, dest, src);
  692. if (is_or && src.value() == 0xffff)
  693. result.set_initialized();
  694. if (update_dest)
  695. insn.modrm().write16(*this, insn, result);
  696. }
  697. template<bool update_dest, typename Op>
  698. ALWAYS_INLINE void SoftCPU::generic_RM16_unsigned_imm8(Op op, const X86::Instruction& insn)
  699. {
  700. auto dest = insn.modrm().read16(*this, insn);
  701. auto src = shadow_wrap_as_initialized(insn.imm8());
  702. auto result = op(*this, dest, src);
  703. if (update_dest)
  704. insn.modrm().write16(*this, insn, result);
  705. }
  706. template<bool update_dest, bool dont_taint_for_same_operand, typename Op>
  707. ALWAYS_INLINE void SoftCPU::generic_RM16_reg16(Op op, const X86::Instruction& insn)
  708. {
  709. auto dest = insn.modrm().read16(*this, insn);
  710. auto src = const_gpr16(insn.reg16());
  711. auto result = op(*this, dest, src);
  712. if (dont_taint_for_same_operand && insn.modrm().is_register() && insn.modrm().register_index() == insn.register_index()) {
  713. result.set_initialized();
  714. m_flags_tainted = false;
  715. }
  716. if (update_dest)
  717. insn.modrm().write16(*this, insn, result);
  718. }
  719. template<bool update_dest, bool is_or, typename Op>
  720. ALWAYS_INLINE void SoftCPU::generic_RM32_imm32(Op op, const X86::Instruction& insn)
  721. {
  722. auto dest = insn.modrm().read32(*this, insn);
  723. auto src = insn.imm32();
  724. auto result = op(*this, dest, shadow_wrap_as_initialized(src));
  725. if (is_or && src == 0xffffffff)
  726. result.set_initialized();
  727. if (update_dest)
  728. insn.modrm().write32(*this, insn, result);
  729. }
  730. template<bool update_dest, bool is_or, typename Op>
  731. ALWAYS_INLINE void SoftCPU::generic_RM32_imm8(Op op, const X86::Instruction& insn)
  732. {
  733. auto dest = insn.modrm().read32(*this, insn);
  734. auto src = sign_extended_to<u32>(insn.imm8());
  735. auto result = op(*this, dest, shadow_wrap_as_initialized(src));
  736. if (is_or && src == 0xffffffff)
  737. result.set_initialized();
  738. if (update_dest)
  739. insn.modrm().write32(*this, insn, result);
  740. }
  741. template<bool update_dest, typename Op>
  742. ALWAYS_INLINE void SoftCPU::generic_RM32_unsigned_imm8(Op op, const X86::Instruction& insn)
  743. {
  744. auto dest = insn.modrm().read32(*this, insn);
  745. auto src = shadow_wrap_as_initialized(insn.imm8());
  746. auto result = op(*this, dest, src);
  747. if (update_dest)
  748. insn.modrm().write32(*this, insn, result);
  749. }
  750. template<bool update_dest, bool dont_taint_for_same_operand, typename Op>
  751. ALWAYS_INLINE void SoftCPU::generic_RM32_reg32(Op op, const X86::Instruction& insn)
  752. {
  753. auto dest = insn.modrm().read32(*this, insn);
  754. auto src = const_gpr32(insn.reg32());
  755. auto result = op(*this, dest, src);
  756. if (dont_taint_for_same_operand && insn.modrm().is_register() && insn.modrm().register_index() == insn.register_index()) {
  757. result.set_initialized();
  758. m_flags_tainted = false;
  759. }
  760. if (update_dest)
  761. insn.modrm().write32(*this, insn, result);
  762. }
  763. template<bool update_dest, bool is_or, typename Op>
  764. ALWAYS_INLINE void SoftCPU::generic_RM8_imm8(Op op, const X86::Instruction& insn)
  765. {
  766. auto dest = insn.modrm().read8(*this, insn);
  767. auto src = insn.imm8();
  768. auto result = op(*this, dest, shadow_wrap_as_initialized(src));
  769. if (is_or && src == 0xff)
  770. result.set_initialized();
  771. if (update_dest)
  772. insn.modrm().write8(*this, insn, result);
  773. }
  774. template<bool update_dest, bool dont_taint_for_same_operand, typename Op>
  775. ALWAYS_INLINE void SoftCPU::generic_RM8_reg8(Op op, const X86::Instruction& insn)
  776. {
  777. auto dest = insn.modrm().read8(*this, insn);
  778. auto src = const_gpr8(insn.reg8());
  779. auto result = op(*this, dest, src);
  780. if (dont_taint_for_same_operand && insn.modrm().is_register() && insn.modrm().register_index() == insn.register_index()) {
  781. result.set_initialized();
  782. m_flags_tainted = false;
  783. }
  784. if (update_dest)
  785. insn.modrm().write8(*this, insn, result);
  786. }
  787. template<bool update_dest, bool dont_taint_for_same_operand, typename Op>
  788. ALWAYS_INLINE void SoftCPU::generic_reg16_RM16(Op op, const X86::Instruction& insn)
  789. {
  790. auto dest = const_gpr16(insn.reg16());
  791. auto src = insn.modrm().read16(*this, insn);
  792. auto result = op(*this, dest, src);
  793. if (dont_taint_for_same_operand && insn.modrm().is_register() && insn.modrm().register_index() == insn.register_index()) {
  794. result.set_initialized();
  795. m_flags_tainted = false;
  796. }
  797. if (update_dest)
  798. gpr16(insn.reg16()) = result;
  799. }
  800. template<bool update_dest, bool dont_taint_for_same_operand, typename Op>
  801. ALWAYS_INLINE void SoftCPU::generic_reg32_RM32(Op op, const X86::Instruction& insn)
  802. {
  803. auto dest = const_gpr32(insn.reg32());
  804. auto src = insn.modrm().read32(*this, insn);
  805. auto result = op(*this, dest, src);
  806. if (dont_taint_for_same_operand && insn.modrm().is_register() && insn.modrm().register_index() == insn.register_index()) {
  807. result.set_initialized();
  808. m_flags_tainted = false;
  809. }
  810. if (update_dest)
  811. gpr32(insn.reg32()) = result;
  812. }
  813. template<bool update_dest, bool dont_taint_for_same_operand, typename Op>
  814. ALWAYS_INLINE void SoftCPU::generic_reg8_RM8(Op op, const X86::Instruction& insn)
  815. {
  816. auto dest = const_gpr8(insn.reg8());
  817. auto src = insn.modrm().read8(*this, insn);
  818. auto result = op(*this, dest, src);
  819. if (dont_taint_for_same_operand && insn.modrm().is_register() && insn.modrm().register_index() == insn.register_index()) {
  820. result.set_initialized();
  821. m_flags_tainted = false;
  822. }
  823. if (update_dest)
  824. gpr8(insn.reg8()) = result;
  825. }
  826. template<typename Op>
  827. ALWAYS_INLINE void SoftCPU::generic_RM8_1(Op op, const X86::Instruction& insn)
  828. {
  829. auto data = insn.modrm().read8(*this, insn);
  830. insn.modrm().write8(*this, insn, op(*this, data, shadow_wrap_as_initialized<u8>(1)));
  831. }
  832. template<typename Op>
  833. ALWAYS_INLINE void SoftCPU::generic_RM8_CL(Op op, const X86::Instruction& insn)
  834. {
  835. auto data = insn.modrm().read8(*this, insn);
  836. insn.modrm().write8(*this, insn, op(*this, data, cl()));
  837. }
  838. template<typename Op>
  839. ALWAYS_INLINE void SoftCPU::generic_RM16_1(Op op, const X86::Instruction& insn)
  840. {
  841. auto data = insn.modrm().read16(*this, insn);
  842. insn.modrm().write16(*this, insn, op(*this, data, shadow_wrap_as_initialized<u8>(1)));
  843. }
  844. template<typename Op>
  845. ALWAYS_INLINE void SoftCPU::generic_RM16_CL(Op op, const X86::Instruction& insn)
  846. {
  847. auto data = insn.modrm().read16(*this, insn);
  848. insn.modrm().write16(*this, insn, op(*this, data, cl()));
  849. }
  850. template<typename Op>
  851. ALWAYS_INLINE void SoftCPU::generic_RM32_1(Op op, const X86::Instruction& insn)
  852. {
  853. auto data = insn.modrm().read32(*this, insn);
  854. insn.modrm().write32(*this, insn, op(*this, data, shadow_wrap_as_initialized<u8>(1)));
  855. }
  856. template<typename Op>
  857. ALWAYS_INLINE void SoftCPU::generic_RM32_CL(Op op, const X86::Instruction& insn)
  858. {
  859. auto data = insn.modrm().read32(*this, insn);
  860. insn.modrm().write32(*this, insn, op(*this, data, cl()));
  861. }
  862. void SoftCPU::AAA(const X86::Instruction&) { TODO_INSN(); }
  863. void SoftCPU::AAD(const X86::Instruction&) { TODO_INSN(); }
  864. void SoftCPU::AAM(const X86::Instruction&) { TODO_INSN(); }
  865. void SoftCPU::AAS(const X86::Instruction&) { TODO_INSN(); }
  866. void SoftCPU::ARPL(const X86::Instruction&) { TODO_INSN(); }
  867. void SoftCPU::BOUND(const X86::Instruction&) { TODO_INSN(); }
  868. template<typename T>
  869. ALWAYS_INLINE static T op_bsf(SoftCPU&, T value)
  870. {
  871. return { (typename T::ValueType)bit_scan_forward(value.value()), value.shadow() };
  872. }
  873. template<typename T>
  874. ALWAYS_INLINE static T op_bsr(SoftCPU&, T value)
  875. {
  876. typename T::ValueType bit_index = 0;
  877. if constexpr (sizeof(typename T::ValueType) == 4) {
  878. asm volatile("bsrl %%eax, %%edx"
  879. : "=d"(bit_index)
  880. : "a"(value.value()));
  881. }
  882. if constexpr (sizeof(typename T::ValueType) == 2) {
  883. asm volatile("bsrw %%ax, %%dx"
  884. : "=d"(bit_index)
  885. : "a"(value.value()));
  886. }
  887. return shadow_wrap_with_taint_from(bit_index, value);
  888. }
  889. void SoftCPU::BSF_reg16_RM16(const X86::Instruction& insn)
  890. {
  891. auto src = insn.modrm().read16(*this, insn);
  892. set_zf(!src.value());
  893. if (src.value())
  894. gpr16(insn.reg16()) = op_bsf(*this, src);
  895. taint_flags_from(src);
  896. }
  897. void SoftCPU::BSF_reg32_RM32(const X86::Instruction& insn)
  898. {
  899. auto src = insn.modrm().read32(*this, insn);
  900. set_zf(!src.value());
  901. if (src.value()) {
  902. gpr32(insn.reg32()) = op_bsf(*this, src);
  903. taint_flags_from(src);
  904. }
  905. }
  906. void SoftCPU::BSR_reg16_RM16(const X86::Instruction& insn)
  907. {
  908. auto src = insn.modrm().read16(*this, insn);
  909. set_zf(!src.value());
  910. if (src.value()) {
  911. gpr16(insn.reg16()) = op_bsr(*this, src);
  912. taint_flags_from(src);
  913. }
  914. }
  915. void SoftCPU::BSR_reg32_RM32(const X86::Instruction& insn)
  916. {
  917. auto src = insn.modrm().read32(*this, insn);
  918. set_zf(!src.value());
  919. if (src.value()) {
  920. gpr32(insn.reg32()) = op_bsr(*this, src);
  921. taint_flags_from(src);
  922. }
  923. }
  924. void SoftCPU::BSWAP_reg32(const X86::Instruction& insn)
  925. {
  926. gpr32(insn.reg32()) = { __builtin_bswap32(gpr32(insn.reg32()).value()), __builtin_bswap32(gpr32(insn.reg32()).shadow_as_value()) };
  927. }
  928. template<typename T>
  929. ALWAYS_INLINE static T op_bt(T value, T)
  930. {
  931. return value;
  932. }
  933. template<typename T>
  934. ALWAYS_INLINE static T op_bts(T value, T bit_mask)
  935. {
  936. return value | bit_mask;
  937. }
  938. template<typename T>
  939. ALWAYS_INLINE static T op_btr(T value, T bit_mask)
  940. {
  941. return value & ~bit_mask;
  942. }
  943. template<typename T>
  944. ALWAYS_INLINE static T op_btc(T value, T bit_mask)
  945. {
  946. return value ^ bit_mask;
  947. }
  948. template<bool should_update, typename Op>
  949. ALWAYS_INLINE void BTx_RM16_reg16(SoftCPU& cpu, const X86::Instruction& insn, Op op)
  950. {
  951. if (insn.modrm().is_register()) {
  952. unsigned bit_index = cpu.const_gpr16(insn.reg16()).value() & (X86::TypeTrivia<u16>::bits - 1);
  953. auto original = insn.modrm().read16(cpu, insn);
  954. u16 bit_mask = 1 << bit_index;
  955. u16 result = op(original.value(), bit_mask);
  956. cpu.set_cf((original.value() & bit_mask) != 0);
  957. cpu.taint_flags_from(cpu.gpr16(insn.reg16()), original);
  958. if (should_update)
  959. insn.modrm().write16(cpu, insn, shadow_wrap_with_taint_from(result, cpu.gpr16(insn.reg16()), original));
  960. return;
  961. }
  962. // FIXME: Is this supposed to perform a full 16-bit read/modify/write?
  963. unsigned bit_offset_in_array = cpu.const_gpr16(insn.reg16()).value() / 8;
  964. unsigned bit_offset_in_byte = cpu.const_gpr16(insn.reg16()).value() & 7;
  965. auto address = insn.modrm().resolve(cpu, insn);
  966. address.set_offset(address.offset() + bit_offset_in_array);
  967. auto dest = cpu.read_memory8(address);
  968. u8 bit_mask = 1 << bit_offset_in_byte;
  969. u8 result = op(dest.value(), bit_mask);
  970. cpu.set_cf((dest.value() & bit_mask) != 0);
  971. cpu.taint_flags_from(cpu.gpr16(insn.reg16()), dest);
  972. if (should_update)
  973. cpu.write_memory8(address, shadow_wrap_with_taint_from(result, cpu.gpr16(insn.reg16()), dest));
  974. }
  975. template<bool should_update, typename Op>
  976. ALWAYS_INLINE void BTx_RM32_reg32(SoftCPU& cpu, const X86::Instruction& insn, Op op)
  977. {
  978. if (insn.modrm().is_register()) {
  979. unsigned bit_index = cpu.const_gpr32(insn.reg32()).value() & (X86::TypeTrivia<u32>::bits - 1);
  980. auto original = insn.modrm().read32(cpu, insn);
  981. u32 bit_mask = 1 << bit_index;
  982. u32 result = op(original.value(), bit_mask);
  983. cpu.set_cf((original.value() & bit_mask) != 0);
  984. cpu.taint_flags_from(cpu.gpr32(insn.reg32()), original);
  985. if (should_update)
  986. insn.modrm().write32(cpu, insn, shadow_wrap_with_taint_from(result, cpu.gpr32(insn.reg32()), original));
  987. return;
  988. }
  989. // FIXME: Is this supposed to perform a full 32-bit read/modify/write?
  990. unsigned bit_offset_in_array = cpu.const_gpr32(insn.reg32()).value() / 8;
  991. unsigned bit_offset_in_byte = cpu.const_gpr32(insn.reg32()).value() & 7;
  992. auto address = insn.modrm().resolve(cpu, insn);
  993. address.set_offset(address.offset() + bit_offset_in_array);
  994. auto dest = cpu.read_memory8(address);
  995. u8 bit_mask = 1 << bit_offset_in_byte;
  996. u8 result = op(dest.value(), bit_mask);
  997. cpu.set_cf((dest.value() & bit_mask) != 0);
  998. cpu.taint_flags_from(cpu.gpr32(insn.reg32()), dest);
  999. if (should_update)
  1000. cpu.write_memory8(address, shadow_wrap_with_taint_from(result, cpu.gpr32(insn.reg32()), dest));
  1001. }
  1002. template<bool should_update, typename Op>
  1003. ALWAYS_INLINE void BTx_RM16_imm8(SoftCPU& cpu, const X86::Instruction& insn, Op op)
  1004. {
  1005. unsigned bit_index = insn.imm8() & (X86::TypeTrivia<u16>::mask);
  1006. // FIXME: Support higher bit indices
  1007. VERIFY(bit_index < 16);
  1008. auto original = insn.modrm().read16(cpu, insn);
  1009. u16 bit_mask = 1 << bit_index;
  1010. auto result = op(original.value(), bit_mask);
  1011. cpu.set_cf((original.value() & bit_mask) != 0);
  1012. cpu.taint_flags_from(original);
  1013. if (should_update)
  1014. insn.modrm().write16(cpu, insn, shadow_wrap_with_taint_from(result, original));
  1015. }
  1016. template<bool should_update, typename Op>
  1017. ALWAYS_INLINE void BTx_RM32_imm8(SoftCPU& cpu, const X86::Instruction& insn, Op op)
  1018. {
  1019. unsigned bit_index = insn.imm8() & (X86::TypeTrivia<u32>::mask);
  1020. // FIXME: Support higher bit indices
  1021. VERIFY(bit_index < 32);
  1022. auto original = insn.modrm().read32(cpu, insn);
  1023. u32 bit_mask = 1 << bit_index;
  1024. auto result = op(original.value(), bit_mask);
  1025. cpu.set_cf((original.value() & bit_mask) != 0);
  1026. cpu.taint_flags_from(original);
  1027. if (should_update)
  1028. insn.modrm().write32(cpu, insn, shadow_wrap_with_taint_from(result, original));
  1029. }
  1030. #define DEFINE_GENERIC_BTx_INSN_HANDLERS(mnemonic, op, update_dest) \
  1031. void SoftCPU::mnemonic##_RM32_reg32(const X86::Instruction& insn) { BTx_RM32_reg32<update_dest>(*this, insn, op<u32>); } \
  1032. void SoftCPU::mnemonic##_RM16_reg16(const X86::Instruction& insn) { BTx_RM16_reg16<update_dest>(*this, insn, op<u16>); } \
  1033. void SoftCPU::mnemonic##_RM32_imm8(const X86::Instruction& insn) { BTx_RM32_imm8<update_dest>(*this, insn, op<u32>); } \
  1034. void SoftCPU::mnemonic##_RM16_imm8(const X86::Instruction& insn) { BTx_RM16_imm8<update_dest>(*this, insn, op<u16>); }
  1035. DEFINE_GENERIC_BTx_INSN_HANDLERS(BTS, op_bts, true);
  1036. DEFINE_GENERIC_BTx_INSN_HANDLERS(BTR, op_btr, true);
  1037. DEFINE_GENERIC_BTx_INSN_HANDLERS(BTC, op_btc, true);
  1038. DEFINE_GENERIC_BTx_INSN_HANDLERS(BT, op_bt, false);
  1039. void SoftCPU::CALL_FAR_mem16(const X86::Instruction&)
  1040. {
  1041. TODO();
  1042. }
  1043. void SoftCPU::CALL_FAR_mem32(const X86::Instruction&) { TODO_INSN(); }
  1044. void SoftCPU::CALL_RM16(const X86::Instruction&) { TODO_INSN(); }
  1045. void SoftCPU::CALL_RM32(const X86::Instruction& insn)
  1046. {
  1047. auto address = insn.modrm().read32(*this, insn);
  1048. push32(shadow_wrap_as_initialized(eip()));
  1049. warn_if_uninitialized(address, "call rm32");
  1050. set_eip(address.value());
  1051. // FIXME: this won't catch at the moment due to us not having a way to set
  1052. // the watch point
  1053. m_emulator.call_callback(address.value());
  1054. }
  1055. void SoftCPU::CALL_imm16(const X86::Instruction&) { TODO_INSN(); }
  1056. void SoftCPU::CALL_imm16_imm16(const X86::Instruction&) { TODO_INSN(); }
  1057. void SoftCPU::CALL_imm16_imm32(const X86::Instruction&) { TODO_INSN(); }
  1058. void SoftCPU::CALL_imm32(const X86::Instruction& insn)
  1059. {
  1060. push32(shadow_wrap_as_initialized(eip()));
  1061. set_eip(eip() + (i32)insn.imm32());
  1062. // FIXME: this won't catch at the moment due to us not having a way to set
  1063. // the watch point
  1064. m_emulator.call_callback(eip() + (i32)insn.imm32());
  1065. }
  1066. void SoftCPU::CBW(const X86::Instruction&)
  1067. {
  1068. set_ah(shadow_wrap_with_taint_from<u8>((al().value() & 0x80) ? 0xff : 0x00, al()));
  1069. }
  1070. void SoftCPU::CDQ(const X86::Instruction&)
  1071. {
  1072. if (eax().value() & 0x80000000)
  1073. set_edx(shadow_wrap_with_taint_from<u32>(0xffffffff, eax()));
  1074. else
  1075. set_edx(shadow_wrap_with_taint_from<u32>(0, eax()));
  1076. }
  1077. void SoftCPU::CLC(const X86::Instruction&)
  1078. {
  1079. set_cf(false);
  1080. }
  1081. void SoftCPU::CLD(const X86::Instruction&)
  1082. {
  1083. set_df(false);
  1084. }
  1085. void SoftCPU::CLI(const X86::Instruction&) { TODO_INSN(); }
  1086. void SoftCPU::CLTS(const X86::Instruction&) { TODO_INSN(); }
  1087. void SoftCPU::CMC(const X86::Instruction&)
  1088. {
  1089. set_cf(!cf());
  1090. }
  1091. void SoftCPU::CMOVcc_reg16_RM16(const X86::Instruction& insn)
  1092. {
  1093. warn_if_flags_tainted("cmovcc reg16, rm16");
  1094. if (evaluate_condition(insn.cc()))
  1095. gpr16(insn.reg16()) = insn.modrm().read16(*this, insn);
  1096. }
  1097. void SoftCPU::CMOVcc_reg32_RM32(const X86::Instruction& insn)
  1098. {
  1099. warn_if_flags_tainted("cmovcc reg32, rm32");
  1100. if (evaluate_condition(insn.cc()))
  1101. gpr32(insn.reg32()) = insn.modrm().read32(*this, insn);
  1102. }
  1103. template<typename T>
  1104. ALWAYS_INLINE static void do_cmps(SoftCPU& cpu, const X86::Instruction& insn)
  1105. {
  1106. auto src_segment = cpu.segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS));
  1107. cpu.do_once_or_repeat<true>(insn, [&] {
  1108. auto src = cpu.read_memory<T>({ src_segment, cpu.source_index(insn.a32()).value() });
  1109. auto dest = cpu.read_memory<T>({ cpu.es(), cpu.destination_index(insn.a32()).value() });
  1110. op_sub(cpu, dest, src);
  1111. cpu.step_source_index(insn.a32(), sizeof(T));
  1112. cpu.step_destination_index(insn.a32(), sizeof(T));
  1113. });
  1114. }
  1115. void SoftCPU::CMPSB(const X86::Instruction& insn)
  1116. {
  1117. do_cmps<u8>(*this, insn);
  1118. }
  1119. void SoftCPU::CMPSD(const X86::Instruction& insn)
  1120. {
  1121. do_cmps<u32>(*this, insn);
  1122. }
  1123. void SoftCPU::CMPSW(const X86::Instruction& insn)
  1124. {
  1125. do_cmps<u16>(*this, insn);
  1126. }
  1127. void SoftCPU::CMPXCHG_RM16_reg16(const X86::Instruction& insn)
  1128. {
  1129. auto current = insn.modrm().read16(*this, insn);
  1130. taint_flags_from(current, ax());
  1131. if (current.value() == ax().value()) {
  1132. set_zf(true);
  1133. insn.modrm().write16(*this, insn, const_gpr16(insn.reg16()));
  1134. } else {
  1135. set_zf(false);
  1136. set_ax(current);
  1137. }
  1138. }
  1139. void SoftCPU::CMPXCHG_RM32_reg32(const X86::Instruction& insn)
  1140. {
  1141. auto current = insn.modrm().read32(*this, insn);
  1142. taint_flags_from(current, eax());
  1143. if (current.value() == eax().value()) {
  1144. set_zf(true);
  1145. insn.modrm().write32(*this, insn, const_gpr32(insn.reg32()));
  1146. } else {
  1147. set_zf(false);
  1148. set_eax(current);
  1149. }
  1150. }
  1151. void SoftCPU::CMPXCHG_RM8_reg8(const X86::Instruction& insn)
  1152. {
  1153. auto current = insn.modrm().read8(*this, insn);
  1154. taint_flags_from(current, al());
  1155. if (current.value() == al().value()) {
  1156. set_zf(true);
  1157. insn.modrm().write8(*this, insn, const_gpr8(insn.reg8()));
  1158. } else {
  1159. set_zf(false);
  1160. set_al(current);
  1161. }
  1162. }
  1163. void SoftCPU::CPUID(const X86::Instruction&)
  1164. {
  1165. if (eax().value() == 0) {
  1166. set_eax(shadow_wrap_as_initialized<u32>(1));
  1167. set_ebx(shadow_wrap_as_initialized<u32>(0x6c6c6548));
  1168. set_edx(shadow_wrap_as_initialized<u32>(0x6972466f));
  1169. set_ecx(shadow_wrap_as_initialized<u32>(0x73646e65));
  1170. return;
  1171. }
  1172. if (eax().value() == 1) {
  1173. u32 stepping = 0;
  1174. u32 model = 1;
  1175. u32 family = 3;
  1176. u32 type = 0;
  1177. set_eax(shadow_wrap_as_initialized<u32>(stepping | (model << 4) | (family << 8) | (type << 12)));
  1178. set_ebx(shadow_wrap_as_initialized<u32>(0));
  1179. set_edx(shadow_wrap_as_initialized<u32>((1 << 15))); // Features (CMOV)
  1180. set_ecx(shadow_wrap_as_initialized<u32>(0));
  1181. return;
  1182. }
  1183. dbgln("Unhandled CPUID with eax={:p}", eax().value());
  1184. }
  1185. void SoftCPU::CWD(const X86::Instruction&)
  1186. {
  1187. set_dx(shadow_wrap_with_taint_from<u16>((ax().value() & 0x8000) ? 0xffff : 0x0000, ax()));
  1188. }
  1189. void SoftCPU::CWDE(const X86::Instruction&)
  1190. {
  1191. set_eax(shadow_wrap_with_taint_from(sign_extended_to<u32>(ax().value()), ax()));
  1192. }
  1193. void SoftCPU::DAA(const X86::Instruction&) { TODO_INSN(); }
  1194. void SoftCPU::DAS(const X86::Instruction&) { TODO_INSN(); }
  1195. void SoftCPU::DEC_RM16(const X86::Instruction& insn)
  1196. {
  1197. insn.modrm().write16(*this, insn, op_dec(*this, insn.modrm().read16(*this, insn)));
  1198. }
  1199. void SoftCPU::DEC_RM32(const X86::Instruction& insn)
  1200. {
  1201. insn.modrm().write32(*this, insn, op_dec(*this, insn.modrm().read32(*this, insn)));
  1202. }
  1203. void SoftCPU::DEC_RM8(const X86::Instruction& insn)
  1204. {
  1205. insn.modrm().write8(*this, insn, op_dec(*this, insn.modrm().read8(*this, insn)));
  1206. }
  1207. void SoftCPU::DEC_reg16(const X86::Instruction& insn)
  1208. {
  1209. gpr16(insn.reg16()) = op_dec(*this, const_gpr16(insn.reg16()));
  1210. }
  1211. void SoftCPU::DEC_reg32(const X86::Instruction& insn)
  1212. {
  1213. gpr32(insn.reg32()) = op_dec(*this, const_gpr32(insn.reg32()));
  1214. }
  1215. void SoftCPU::DIV_RM16(const X86::Instruction& insn)
  1216. {
  1217. auto divisor = insn.modrm().read16(*this, insn);
  1218. if (divisor.value() == 0) {
  1219. reportln("Divide by zero");
  1220. TODO();
  1221. }
  1222. u32 dividend = ((u32)dx().value() << 16) | ax().value();
  1223. auto quotient = dividend / divisor.value();
  1224. if (quotient > NumericLimits<u16>::max()) {
  1225. reportln("Divide overflow");
  1226. TODO();
  1227. }
  1228. auto remainder = dividend % divisor.value();
  1229. auto original_ax = ax();
  1230. set_ax(shadow_wrap_with_taint_from<u16>(quotient, original_ax, dx()));
  1231. set_dx(shadow_wrap_with_taint_from<u16>(remainder, original_ax, dx()));
  1232. }
  1233. void SoftCPU::DIV_RM32(const X86::Instruction& insn)
  1234. {
  1235. auto divisor = insn.modrm().read32(*this, insn);
  1236. if (divisor.value() == 0) {
  1237. reportln("Divide by zero");
  1238. TODO();
  1239. }
  1240. u64 dividend = ((u64)edx().value() << 32) | eax().value();
  1241. auto quotient = dividend / divisor.value();
  1242. if (quotient > NumericLimits<u32>::max()) {
  1243. reportln("Divide overflow");
  1244. TODO();
  1245. }
  1246. auto remainder = dividend % divisor.value();
  1247. auto original_eax = eax();
  1248. set_eax(shadow_wrap_with_taint_from<u32>(quotient, original_eax, edx(), divisor));
  1249. set_edx(shadow_wrap_with_taint_from<u32>(remainder, original_eax, edx(), divisor));
  1250. }
  1251. void SoftCPU::DIV_RM8(const X86::Instruction& insn)
  1252. {
  1253. auto divisor = insn.modrm().read8(*this, insn);
  1254. if (divisor.value() == 0) {
  1255. reportln("Divide by zero");
  1256. TODO();
  1257. }
  1258. u16 dividend = ax().value();
  1259. auto quotient = dividend / divisor.value();
  1260. if (quotient > NumericLimits<u8>::max()) {
  1261. reportln("Divide overflow");
  1262. TODO();
  1263. }
  1264. auto remainder = dividend % divisor.value();
  1265. auto original_ax = ax();
  1266. set_al(shadow_wrap_with_taint_from<u8>(quotient, original_ax, divisor));
  1267. set_ah(shadow_wrap_with_taint_from<u8>(remainder, original_ax, divisor));
  1268. }
  1269. void SoftCPU::ENTER16(const X86::Instruction&) { TODO_INSN(); }
  1270. void SoftCPU::ENTER32(const X86::Instruction&) { TODO_INSN(); }
  1271. void SoftCPU::ESCAPE(const X86::Instruction&)
  1272. {
  1273. reportln("FIXME: x87 floating-point support");
  1274. m_emulator.dump_backtrace();
  1275. TODO();
  1276. }
  1277. FPU_INSTRUCTION(FADD_RM32);
  1278. FPU_INSTRUCTION(FMUL_RM32);
  1279. FPU_INSTRUCTION(FCOM_RM32);
  1280. FPU_INSTRUCTION(FCOMP_RM32);
  1281. FPU_INSTRUCTION(FSUB_RM32);
  1282. FPU_INSTRUCTION(FSUBR_RM32);
  1283. FPU_INSTRUCTION(FDIV_RM32);
  1284. FPU_INSTRUCTION(FDIVR_RM32);
  1285. FPU_INSTRUCTION(FLD_RM32);
  1286. FPU_INSTRUCTION(FXCH);
  1287. FPU_INSTRUCTION(FST_RM32);
  1288. FPU_INSTRUCTION(FNOP);
  1289. FPU_INSTRUCTION(FSTP_RM32);
  1290. FPU_INSTRUCTION(FLDENV);
  1291. FPU_INSTRUCTION(FCHS);
  1292. FPU_INSTRUCTION(FABS);
  1293. FPU_INSTRUCTION(FTST);
  1294. FPU_INSTRUCTION(FXAM);
  1295. FPU_INSTRUCTION(FLDCW);
  1296. FPU_INSTRUCTION(FLD1);
  1297. FPU_INSTRUCTION(FLDL2T);
  1298. FPU_INSTRUCTION(FLDL2E);
  1299. FPU_INSTRUCTION(FLDPI);
  1300. FPU_INSTRUCTION(FLDLG2);
  1301. FPU_INSTRUCTION(FLDLN2);
  1302. FPU_INSTRUCTION(FLDZ);
  1303. FPU_INSTRUCTION(FNSTENV);
  1304. FPU_INSTRUCTION(F2XM1);
  1305. FPU_INSTRUCTION(FYL2X);
  1306. FPU_INSTRUCTION(FPTAN);
  1307. FPU_INSTRUCTION(FPATAN);
  1308. FPU_INSTRUCTION(FXTRACT);
  1309. FPU_INSTRUCTION(FPREM1);
  1310. FPU_INSTRUCTION(FDECSTP);
  1311. FPU_INSTRUCTION(FINCSTP);
  1312. FPU_INSTRUCTION(FNSTCW);
  1313. FPU_INSTRUCTION(FPREM);
  1314. FPU_INSTRUCTION(FYL2XP1);
  1315. FPU_INSTRUCTION(FSQRT);
  1316. FPU_INSTRUCTION(FSINCOS);
  1317. FPU_INSTRUCTION(FRNDINT);
  1318. FPU_INSTRUCTION(FSCALE);
  1319. FPU_INSTRUCTION(FSIN);
  1320. FPU_INSTRUCTION(FCOS);
  1321. FPU_INSTRUCTION(FIADD_RM32);
  1322. FPU_INSTRUCTION(FCMOVB);
  1323. FPU_INSTRUCTION(FIMUL_RM32);
  1324. FPU_INSTRUCTION(FCMOVE);
  1325. FPU_INSTRUCTION(FICOM_RM32);
  1326. FPU_INSTRUCTION(FCMOVBE);
  1327. FPU_INSTRUCTION(FICOMP_RM32);
  1328. FPU_INSTRUCTION(FCMOVU);
  1329. FPU_INSTRUCTION(FISUB_RM32);
  1330. FPU_INSTRUCTION(FISUBR_RM32);
  1331. FPU_INSTRUCTION(FUCOMPP);
  1332. FPU_INSTRUCTION(FIDIV_RM32);
  1333. FPU_INSTRUCTION(FIDIVR_RM32);
  1334. FPU_INSTRUCTION(FILD_RM32);
  1335. FPU_INSTRUCTION(FCMOVNB);
  1336. FPU_INSTRUCTION(FISTTP_RM32);
  1337. FPU_INSTRUCTION(FCMOVNE);
  1338. FPU_INSTRUCTION(FIST_RM32);
  1339. FPU_INSTRUCTION(FCMOVNBE);
  1340. FPU_INSTRUCTION(FISTP_RM32);
  1341. FPU_INSTRUCTION(FCMOVNU);
  1342. FPU_INSTRUCTION(FNENI);
  1343. FPU_INSTRUCTION(FNDISI);
  1344. FPU_INSTRUCTION(FNCLEX);
  1345. FPU_INSTRUCTION(FNINIT);
  1346. FPU_INSTRUCTION(FNSETPM);
  1347. FPU_INSTRUCTION(FLD_RM80);
  1348. FPU_INSTRUCTION(FUCOMI);
  1349. FPU_INSTRUCTION(FCOMI);
  1350. FPU_INSTRUCTION(FSTP_RM80);
  1351. FPU_INSTRUCTION(FADD_RM64);
  1352. FPU_INSTRUCTION(FMUL_RM64);
  1353. FPU_INSTRUCTION(FCOM_RM64);
  1354. FPU_INSTRUCTION(FCOMP_RM64);
  1355. FPU_INSTRUCTION(FSUB_RM64);
  1356. FPU_INSTRUCTION(FSUBR_RM64);
  1357. FPU_INSTRUCTION(FDIV_RM64);
  1358. FPU_INSTRUCTION(FDIVR_RM64);
  1359. FPU_INSTRUCTION(FLD_RM64);
  1360. FPU_INSTRUCTION(FFREE);
  1361. FPU_INSTRUCTION(FISTTP_RM64);
  1362. FPU_INSTRUCTION(FST_RM64);
  1363. FPU_INSTRUCTION(FSTP_RM64);
  1364. FPU_INSTRUCTION(FRSTOR);
  1365. FPU_INSTRUCTION(FUCOM);
  1366. FPU_INSTRUCTION(FUCOMP);
  1367. FPU_INSTRUCTION(FNSAVE);
  1368. FPU_INSTRUCTION(FNSTSW);
  1369. FPU_INSTRUCTION(FIADD_RM16);
  1370. FPU_INSTRUCTION(FADDP);
  1371. FPU_INSTRUCTION(FIMUL_RM16);
  1372. FPU_INSTRUCTION(FMULP);
  1373. FPU_INSTRUCTION(FICOM_RM16);
  1374. FPU_INSTRUCTION(FICOMP_RM16);
  1375. FPU_INSTRUCTION(FCOMPP);
  1376. FPU_INSTRUCTION(FISUB_RM16);
  1377. FPU_INSTRUCTION(FSUBRP);
  1378. FPU_INSTRUCTION(FISUBR_RM16);
  1379. FPU_INSTRUCTION(FSUBP);
  1380. FPU_INSTRUCTION(FIDIV_RM16);
  1381. FPU_INSTRUCTION(FDIVRP);
  1382. FPU_INSTRUCTION(FIDIVR_RM16);
  1383. FPU_INSTRUCTION(FDIVP);
  1384. FPU_INSTRUCTION(FILD_RM16);
  1385. FPU_INSTRUCTION(FFREEP);
  1386. FPU_INSTRUCTION(FISTTP_RM16);
  1387. FPU_INSTRUCTION(FIST_RM16);
  1388. FPU_INSTRUCTION(FISTP_RM16);
  1389. FPU_INSTRUCTION(FBLD_M80);
  1390. FPU_INSTRUCTION(FNSTSW_AX);
  1391. FPU_INSTRUCTION(FILD_RM64);
  1392. FPU_INSTRUCTION(FUCOMIP);
  1393. FPU_INSTRUCTION(FBSTP_M80);
  1394. FPU_INSTRUCTION(FCOMIP);
  1395. FPU_INSTRUCTION(FISTP_RM64);
  1396. void SoftCPU::HLT(const X86::Instruction&) { TODO_INSN(); }
  1397. void SoftCPU::IDIV_RM16(const X86::Instruction& insn)
  1398. {
  1399. auto divisor_with_shadow = insn.modrm().read16(*this, insn);
  1400. auto divisor = (i16)divisor_with_shadow.value();
  1401. if (divisor == 0) {
  1402. reportln("Divide by zero");
  1403. TODO();
  1404. }
  1405. i32 dividend = (i32)(((u32)dx().value() << 16) | (u32)ax().value());
  1406. i32 result = dividend / divisor;
  1407. if (result > NumericLimits<i16>::max() || result < NumericLimits<i16>::min()) {
  1408. reportln("Divide overflow");
  1409. TODO();
  1410. }
  1411. auto original_ax = ax();
  1412. set_ax(shadow_wrap_with_taint_from<u16>(result, original_ax, dx(), divisor_with_shadow));
  1413. set_dx(shadow_wrap_with_taint_from<u16>(dividend % divisor, original_ax, dx(), divisor_with_shadow));
  1414. }
  1415. void SoftCPU::IDIV_RM32(const X86::Instruction& insn)
  1416. {
  1417. auto divisor_with_shadow = insn.modrm().read32(*this, insn);
  1418. auto divisor = (i32)divisor_with_shadow.value();
  1419. if (divisor == 0) {
  1420. reportln("Divide by zero");
  1421. TODO();
  1422. }
  1423. i64 dividend = (i64)(((u64)edx().value() << 32) | (u64)eax().value());
  1424. i64 result = dividend / divisor;
  1425. if (result > NumericLimits<i32>::max() || result < NumericLimits<i32>::min()) {
  1426. reportln("Divide overflow");
  1427. TODO();
  1428. }
  1429. auto original_eax = eax();
  1430. set_eax(shadow_wrap_with_taint_from<u32>(result, original_eax, edx(), divisor_with_shadow));
  1431. set_edx(shadow_wrap_with_taint_from<u32>(dividend % divisor, original_eax, edx(), divisor_with_shadow));
  1432. }
  1433. void SoftCPU::IDIV_RM8(const X86::Instruction& insn)
  1434. {
  1435. auto divisor_with_shadow = insn.modrm().read8(*this, insn);
  1436. auto divisor = (i8)divisor_with_shadow.value();
  1437. if (divisor == 0) {
  1438. reportln("Divide by zero");
  1439. TODO();
  1440. }
  1441. i16 dividend = ax().value();
  1442. i16 result = dividend / divisor;
  1443. if (result > NumericLimits<i8>::max() || result < NumericLimits<i8>::min()) {
  1444. reportln("Divide overflow");
  1445. TODO();
  1446. }
  1447. auto original_ax = ax();
  1448. set_al(shadow_wrap_with_taint_from<u8>(result, divisor_with_shadow, original_ax));
  1449. set_ah(shadow_wrap_with_taint_from<u8>(dividend % divisor, divisor_with_shadow, original_ax));
  1450. }
  1451. void SoftCPU::IMUL_RM16(const X86::Instruction& insn)
  1452. {
  1453. i16 result_high;
  1454. i16 result_low;
  1455. auto src = insn.modrm().read16(*this, insn);
  1456. op_imul<i16>(*this, src.value(), ax().value(), result_high, result_low);
  1457. gpr16(X86::RegisterDX) = shadow_wrap_with_taint_from<u16>(result_high, src, ax());
  1458. gpr16(X86::RegisterAX) = shadow_wrap_with_taint_from<u16>(result_low, src, ax());
  1459. }
  1460. void SoftCPU::IMUL_RM32(const X86::Instruction& insn)
  1461. {
  1462. i32 result_high;
  1463. i32 result_low;
  1464. auto src = insn.modrm().read32(*this, insn);
  1465. op_imul<i32>(*this, src.value(), eax().value(), result_high, result_low);
  1466. gpr32(X86::RegisterEDX) = shadow_wrap_with_taint_from<u32>(result_high, src, eax());
  1467. gpr32(X86::RegisterEAX) = shadow_wrap_with_taint_from<u32>(result_low, src, eax());
  1468. }
  1469. void SoftCPU::IMUL_RM8(const X86::Instruction& insn)
  1470. {
  1471. i8 result_high;
  1472. i8 result_low;
  1473. auto src = insn.modrm().read8(*this, insn);
  1474. op_imul<i8>(*this, src.value(), al().value(), result_high, result_low);
  1475. gpr8(X86::RegisterAH) = shadow_wrap_with_taint_from<u8>(result_high, src, al());
  1476. gpr8(X86::RegisterAL) = shadow_wrap_with_taint_from<u8>(result_low, src, al());
  1477. }
  1478. void SoftCPU::IMUL_reg16_RM16(const X86::Instruction& insn)
  1479. {
  1480. i16 result_high;
  1481. i16 result_low;
  1482. auto src = insn.modrm().read16(*this, insn);
  1483. op_imul<i16>(*this, gpr16(insn.reg16()).value(), src.value(), result_high, result_low);
  1484. gpr16(insn.reg16()) = shadow_wrap_with_taint_from<u16>(result_low, src, gpr16(insn.reg16()));
  1485. }
  1486. void SoftCPU::IMUL_reg16_RM16_imm16(const X86::Instruction& insn)
  1487. {
  1488. i16 result_high;
  1489. i16 result_low;
  1490. auto src = insn.modrm().read16(*this, insn);
  1491. op_imul<i16>(*this, src.value(), insn.imm16(), result_high, result_low);
  1492. gpr16(insn.reg16()) = shadow_wrap_with_taint_from<u16>(result_low, src);
  1493. }
  1494. void SoftCPU::IMUL_reg16_RM16_imm8(const X86::Instruction& insn)
  1495. {
  1496. i16 result_high;
  1497. i16 result_low;
  1498. auto src = insn.modrm().read16(*this, insn);
  1499. op_imul<i16>(*this, src.value(), sign_extended_to<i16>(insn.imm8()), result_high, result_low);
  1500. gpr16(insn.reg16()) = shadow_wrap_with_taint_from<u16>(result_low, src);
  1501. }
  1502. void SoftCPU::IMUL_reg32_RM32(const X86::Instruction& insn)
  1503. {
  1504. i32 result_high;
  1505. i32 result_low;
  1506. auto src = insn.modrm().read32(*this, insn);
  1507. op_imul<i32>(*this, gpr32(insn.reg32()).value(), src.value(), result_high, result_low);
  1508. gpr32(insn.reg32()) = shadow_wrap_with_taint_from<u32>(result_low, src, gpr32(insn.reg32()));
  1509. }
  1510. void SoftCPU::IMUL_reg32_RM32_imm32(const X86::Instruction& insn)
  1511. {
  1512. i32 result_high;
  1513. i32 result_low;
  1514. auto src = insn.modrm().read32(*this, insn);
  1515. op_imul<i32>(*this, src.value(), insn.imm32(), result_high, result_low);
  1516. gpr32(insn.reg32()) = shadow_wrap_with_taint_from<u32>(result_low, src);
  1517. }
  1518. void SoftCPU::IMUL_reg32_RM32_imm8(const X86::Instruction& insn)
  1519. {
  1520. i32 result_high;
  1521. i32 result_low;
  1522. auto src = insn.modrm().read32(*this, insn);
  1523. op_imul<i32>(*this, src.value(), sign_extended_to<i32>(insn.imm8()), result_high, result_low);
  1524. gpr32(insn.reg32()) = shadow_wrap_with_taint_from<u32>(result_low, src);
  1525. }
  1526. void SoftCPU::INC_RM16(const X86::Instruction& insn)
  1527. {
  1528. insn.modrm().write16(*this, insn, op_inc(*this, insn.modrm().read16(*this, insn)));
  1529. }
  1530. void SoftCPU::INC_RM32(const X86::Instruction& insn)
  1531. {
  1532. insn.modrm().write32(*this, insn, op_inc(*this, insn.modrm().read32(*this, insn)));
  1533. }
  1534. void SoftCPU::INC_RM8(const X86::Instruction& insn)
  1535. {
  1536. insn.modrm().write8(*this, insn, op_inc(*this, insn.modrm().read8(*this, insn)));
  1537. }
  1538. void SoftCPU::INC_reg16(const X86::Instruction& insn)
  1539. {
  1540. gpr16(insn.reg16()) = op_inc(*this, const_gpr16(insn.reg16()));
  1541. }
  1542. void SoftCPU::INC_reg32(const X86::Instruction& insn)
  1543. {
  1544. gpr32(insn.reg32()) = op_inc(*this, const_gpr32(insn.reg32()));
  1545. }
  1546. void SoftCPU::INSB(const X86::Instruction&) { TODO_INSN(); }
  1547. void SoftCPU::INSD(const X86::Instruction&) { TODO_INSN(); }
  1548. void SoftCPU::INSW(const X86::Instruction&) { TODO_INSN(); }
  1549. void SoftCPU::INT1(const X86::Instruction&) { TODO_INSN(); }
  1550. void SoftCPU::INT3(const X86::Instruction&) { TODO_INSN(); }
  1551. void SoftCPU::INTO(const X86::Instruction&) { TODO_INSN(); }
  1552. void SoftCPU::INT_imm8(const X86::Instruction& insn)
  1553. {
  1554. VERIFY(insn.imm8() == 0x82);
  1555. // FIXME: virt_syscall should take ValueWithShadow and whine about uninitialized arguments
  1556. set_eax(shadow_wrap_as_initialized(m_emulator.virt_syscall(eax().value(), edx().value(), ecx().value(), ebx().value())));
  1557. }
  1558. void SoftCPU::INVLPG(const X86::Instruction&) { TODO_INSN(); }
  1559. void SoftCPU::IN_AL_DX(const X86::Instruction&) { TODO_INSN(); }
  1560. void SoftCPU::IN_AL_imm8(const X86::Instruction&) { TODO_INSN(); }
  1561. void SoftCPU::IN_AX_DX(const X86::Instruction&) { TODO_INSN(); }
  1562. void SoftCPU::IN_AX_imm8(const X86::Instruction&) { TODO_INSN(); }
  1563. void SoftCPU::IN_EAX_DX(const X86::Instruction&) { TODO_INSN(); }
  1564. void SoftCPU::IN_EAX_imm8(const X86::Instruction&) { TODO_INSN(); }
  1565. void SoftCPU::IRET(const X86::Instruction&) { TODO_INSN(); }
  1566. void SoftCPU::JCXZ_imm8(const X86::Instruction& insn)
  1567. {
  1568. if (insn.a32()) {
  1569. warn_if_uninitialized(ecx(), "jecxz imm8");
  1570. if (ecx().value() == 0)
  1571. set_eip(eip() + (i8)insn.imm8());
  1572. } else {
  1573. warn_if_uninitialized(cx(), "jcxz imm8");
  1574. if (cx().value() == 0)
  1575. set_eip(eip() + (i8)insn.imm8());
  1576. }
  1577. }
  1578. void SoftCPU::JMP_FAR_mem16(const X86::Instruction&) { TODO_INSN(); }
  1579. void SoftCPU::JMP_FAR_mem32(const X86::Instruction&) { TODO_INSN(); }
  1580. void SoftCPU::JMP_RM16(const X86::Instruction&) { TODO_INSN(); }
  1581. void SoftCPU::JMP_RM32(const X86::Instruction& insn)
  1582. {
  1583. set_eip(insn.modrm().read32(*this, insn).value());
  1584. }
  1585. void SoftCPU::JMP_imm16(const X86::Instruction& insn)
  1586. {
  1587. set_eip(eip() + (i16)insn.imm16());
  1588. }
  1589. void SoftCPU::JMP_imm16_imm16(const X86::Instruction&) { TODO_INSN(); }
  1590. void SoftCPU::JMP_imm16_imm32(const X86::Instruction&) { TODO_INSN(); }
  1591. void SoftCPU::JMP_imm32(const X86::Instruction& insn)
  1592. {
  1593. set_eip(eip() + (i32)insn.imm32());
  1594. }
  1595. void SoftCPU::JMP_short_imm8(const X86::Instruction& insn)
  1596. {
  1597. set_eip(eip() + (i8)insn.imm8());
  1598. }
  1599. void SoftCPU::Jcc_NEAR_imm(const X86::Instruction& insn)
  1600. {
  1601. warn_if_flags_tainted("jcc near imm32");
  1602. if (evaluate_condition(insn.cc()))
  1603. set_eip(eip() + (i32)insn.imm32());
  1604. }
  1605. void SoftCPU::Jcc_imm8(const X86::Instruction& insn)
  1606. {
  1607. warn_if_flags_tainted("jcc imm8");
  1608. if (evaluate_condition(insn.cc()))
  1609. set_eip(eip() + (i8)insn.imm8());
  1610. }
  1611. void SoftCPU::LAHF(const X86::Instruction&) { TODO_INSN(); }
  1612. void SoftCPU::LAR_reg16_RM16(const X86::Instruction&) { TODO_INSN(); }
  1613. void SoftCPU::LAR_reg32_RM32(const X86::Instruction&) { TODO_INSN(); }
  1614. void SoftCPU::LDS_reg16_mem16(const X86::Instruction&) { TODO_INSN(); }
  1615. void SoftCPU::LDS_reg32_mem32(const X86::Instruction&) { TODO_INSN(); }
  1616. void SoftCPU::LEAVE16(const X86::Instruction&) { TODO_INSN(); }
  1617. void SoftCPU::LEAVE32(const X86::Instruction&)
  1618. {
  1619. auto new_ebp = read_memory32({ ss(), ebp().value() });
  1620. set_esp({ ebp().value() + 4, ebp().shadow() });
  1621. set_ebp(new_ebp);
  1622. }
  1623. void SoftCPU::LEA_reg16_mem16(const X86::Instruction& insn)
  1624. {
  1625. // FIXME: Respect shadow values
  1626. gpr16(insn.reg16()) = shadow_wrap_as_initialized<u16>(insn.modrm().resolve(*this, insn).offset());
  1627. }
  1628. void SoftCPU::LEA_reg32_mem32(const X86::Instruction& insn)
  1629. {
  1630. // FIXME: Respect shadow values
  1631. gpr32(insn.reg32()) = shadow_wrap_as_initialized<u32>(insn.modrm().resolve(*this, insn).offset());
  1632. }
  1633. void SoftCPU::LES_reg16_mem16(const X86::Instruction&) { TODO_INSN(); }
  1634. void SoftCPU::LES_reg32_mem32(const X86::Instruction&) { TODO_INSN(); }
  1635. void SoftCPU::LFS_reg16_mem16(const X86::Instruction&) { TODO_INSN(); }
  1636. void SoftCPU::LFS_reg32_mem32(const X86::Instruction&) { TODO_INSN(); }
  1637. void SoftCPU::LGDT(const X86::Instruction&) { TODO_INSN(); }
  1638. void SoftCPU::LGS_reg16_mem16(const X86::Instruction&) { TODO_INSN(); }
  1639. void SoftCPU::LGS_reg32_mem32(const X86::Instruction&) { TODO_INSN(); }
  1640. void SoftCPU::LIDT(const X86::Instruction&) { TODO_INSN(); }
  1641. void SoftCPU::LLDT_RM16(const X86::Instruction&) { TODO_INSN(); }
  1642. void SoftCPU::LMSW_RM16(const X86::Instruction&) { TODO_INSN(); }
  1643. template<typename T>
  1644. ALWAYS_INLINE static void do_lods(SoftCPU& cpu, const X86::Instruction& insn)
  1645. {
  1646. auto src_segment = cpu.segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS));
  1647. cpu.do_once_or_repeat<true>(insn, [&] {
  1648. auto src = cpu.read_memory<T>({ src_segment, cpu.source_index(insn.a32()).value() });
  1649. cpu.gpr<T>(X86::RegisterAL) = src;
  1650. cpu.step_source_index(insn.a32(), sizeof(T));
  1651. });
  1652. }
  1653. void SoftCPU::LODSB(const X86::Instruction& insn)
  1654. {
  1655. do_lods<u8>(*this, insn);
  1656. }
  1657. void SoftCPU::LODSD(const X86::Instruction& insn)
  1658. {
  1659. do_lods<u32>(*this, insn);
  1660. }
  1661. void SoftCPU::LODSW(const X86::Instruction& insn)
  1662. {
  1663. do_lods<u16>(*this, insn);
  1664. }
  1665. void SoftCPU::LOOPNZ_imm8(const X86::Instruction& insn)
  1666. {
  1667. warn_if_flags_tainted("loopnz");
  1668. if (insn.a32()) {
  1669. set_ecx({ ecx().value() - 1, ecx().shadow() });
  1670. if (ecx().value() != 0 && !zf())
  1671. set_eip(eip() + (i8)insn.imm8());
  1672. } else {
  1673. set_cx({ (u16)(cx().value() - 1), cx().shadow() });
  1674. if (cx().value() != 0 && !zf())
  1675. set_eip(eip() + (i8)insn.imm8());
  1676. }
  1677. }
  1678. void SoftCPU::LOOPZ_imm8(const X86::Instruction& insn)
  1679. {
  1680. warn_if_flags_tainted("loopz");
  1681. if (insn.a32()) {
  1682. set_ecx({ ecx().value() - 1, ecx().shadow() });
  1683. if (ecx().value() != 0 && zf())
  1684. set_eip(eip() + (i8)insn.imm8());
  1685. } else {
  1686. set_cx({ (u16)(cx().value() - 1), cx().shadow() });
  1687. if (cx().value() != 0 && zf())
  1688. set_eip(eip() + (i8)insn.imm8());
  1689. }
  1690. }
  1691. void SoftCPU::LOOP_imm8(const X86::Instruction& insn)
  1692. {
  1693. if (insn.a32()) {
  1694. set_ecx({ ecx().value() - 1, ecx().shadow() });
  1695. if (ecx().value() != 0)
  1696. set_eip(eip() + (i8)insn.imm8());
  1697. } else {
  1698. set_cx({ (u16)(cx().value() - 1), cx().shadow() });
  1699. if (cx().value() != 0)
  1700. set_eip(eip() + (i8)insn.imm8());
  1701. }
  1702. }
  1703. void SoftCPU::LSL_reg16_RM16(const X86::Instruction&) { TODO_INSN(); }
  1704. void SoftCPU::LSL_reg32_RM32(const X86::Instruction&) { TODO_INSN(); }
  1705. void SoftCPU::LSS_reg16_mem16(const X86::Instruction&) { TODO_INSN(); }
  1706. void SoftCPU::LSS_reg32_mem32(const X86::Instruction&) { TODO_INSN(); }
  1707. void SoftCPU::LTR_RM16(const X86::Instruction&) { TODO_INSN(); }
  1708. template<typename T>
  1709. ALWAYS_INLINE static void do_movs(SoftCPU& cpu, const X86::Instruction& insn)
  1710. {
  1711. auto src_segment = cpu.segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS));
  1712. cpu.do_once_or_repeat<false>(insn, [&] {
  1713. auto src = cpu.read_memory<T>({ src_segment, cpu.source_index(insn.a32()).value() });
  1714. cpu.write_memory<T>({ cpu.es(), cpu.destination_index(insn.a32()).value() }, src);
  1715. cpu.step_source_index(insn.a32(), sizeof(T));
  1716. cpu.step_destination_index(insn.a32(), sizeof(T));
  1717. });
  1718. }
  1719. void SoftCPU::MOVSB(const X86::Instruction& insn)
  1720. {
  1721. do_movs<u8>(*this, insn);
  1722. }
  1723. void SoftCPU::MOVSD(const X86::Instruction& insn)
  1724. {
  1725. do_movs<u32>(*this, insn);
  1726. }
  1727. void SoftCPU::MOVSW(const X86::Instruction& insn)
  1728. {
  1729. do_movs<u16>(*this, insn);
  1730. }
  1731. void SoftCPU::MOVSX_reg16_RM8(const X86::Instruction& insn)
  1732. {
  1733. auto src = insn.modrm().read8(*this, insn);
  1734. gpr16(insn.reg16()) = shadow_wrap_with_taint_from<u16>(sign_extended_to<u16>(src.value()), src);
  1735. }
  1736. void SoftCPU::MOVSX_reg32_RM16(const X86::Instruction& insn)
  1737. {
  1738. auto src = insn.modrm().read16(*this, insn);
  1739. gpr32(insn.reg32()) = shadow_wrap_with_taint_from<u32>(sign_extended_to<u32>(src.value()), src);
  1740. }
  1741. void SoftCPU::MOVSX_reg32_RM8(const X86::Instruction& insn)
  1742. {
  1743. auto src = insn.modrm().read8(*this, insn);
  1744. gpr32(insn.reg32()) = shadow_wrap_with_taint_from<u32>(sign_extended_to<u32>(src.value()), src);
  1745. }
  1746. void SoftCPU::MOVZX_reg16_RM8(const X86::Instruction& insn)
  1747. {
  1748. auto src = insn.modrm().read8(*this, insn);
  1749. gpr16(insn.reg16()) = ValueWithShadow<u16>(src.value(), 0x0100 | (src.shadow_as_value() & 0xff));
  1750. }
  1751. void SoftCPU::MOVZX_reg32_RM16(const X86::Instruction& insn)
  1752. {
  1753. auto src = insn.modrm().read16(*this, insn);
  1754. gpr32(insn.reg32()) = ValueWithShadow<u32>(src.value(), 0x01010000 | (src.shadow_as_value() & 0xffff));
  1755. }
  1756. void SoftCPU::MOVZX_reg32_RM8(const X86::Instruction& insn)
  1757. {
  1758. auto src = insn.modrm().read8(*this, insn);
  1759. gpr32(insn.reg32()) = ValueWithShadow<u32>(src.value(), 0x01010100 | (src.shadow_as_value() & 0xff));
  1760. }
  1761. void SoftCPU::MOV_AL_moff8(const X86::Instruction& insn)
  1762. {
  1763. set_al(read_memory8({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), insn.imm_address() }));
  1764. }
  1765. void SoftCPU::MOV_AX_moff16(const X86::Instruction& insn)
  1766. {
  1767. set_ax(read_memory16({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), insn.imm_address() }));
  1768. }
  1769. void SoftCPU::MOV_CR_reg32(const X86::Instruction&) { TODO_INSN(); }
  1770. void SoftCPU::MOV_DR_reg32(const X86::Instruction&) { TODO_INSN(); }
  1771. void SoftCPU::MOV_EAX_moff32(const X86::Instruction& insn)
  1772. {
  1773. set_eax(read_memory32({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), insn.imm_address() }));
  1774. }
  1775. void SoftCPU::MOV_RM16_imm16(const X86::Instruction& insn)
  1776. {
  1777. insn.modrm().write16(*this, insn, shadow_wrap_as_initialized(insn.imm16()));
  1778. }
  1779. void SoftCPU::MOV_RM16_reg16(const X86::Instruction& insn)
  1780. {
  1781. insn.modrm().write16(*this, insn, const_gpr16(insn.reg16()));
  1782. }
  1783. void SoftCPU::MOV_RM16_seg(const X86::Instruction&) { TODO_INSN(); }
  1784. void SoftCPU::MOV_RM32_imm32(const X86::Instruction& insn)
  1785. {
  1786. insn.modrm().write32(*this, insn, shadow_wrap_as_initialized(insn.imm32()));
  1787. }
  1788. void SoftCPU::MOV_RM32_reg32(const X86::Instruction& insn)
  1789. {
  1790. insn.modrm().write32(*this, insn, const_gpr32(insn.reg32()));
  1791. }
  1792. void SoftCPU::MOV_RM8_imm8(const X86::Instruction& insn)
  1793. {
  1794. insn.modrm().write8(*this, insn, shadow_wrap_as_initialized(insn.imm8()));
  1795. }
  1796. void SoftCPU::MOV_RM8_reg8(const X86::Instruction& insn)
  1797. {
  1798. insn.modrm().write8(*this, insn, const_gpr8(insn.reg8()));
  1799. }
  1800. void SoftCPU::MOV_moff16_AX(const X86::Instruction& insn)
  1801. {
  1802. write_memory16({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), insn.imm_address() }, ax());
  1803. }
  1804. void SoftCPU::MOV_moff32_EAX(const X86::Instruction& insn)
  1805. {
  1806. write_memory32({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), insn.imm_address() }, eax());
  1807. }
  1808. void SoftCPU::MOV_moff8_AL(const X86::Instruction& insn)
  1809. {
  1810. write_memory8({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), insn.imm_address() }, al());
  1811. }
  1812. void SoftCPU::MOV_reg16_RM16(const X86::Instruction& insn)
  1813. {
  1814. gpr16(insn.reg16()) = insn.modrm().read16(*this, insn);
  1815. }
  1816. void SoftCPU::MOV_reg16_imm16(const X86::Instruction& insn)
  1817. {
  1818. gpr16(insn.reg16()) = shadow_wrap_as_initialized(insn.imm16());
  1819. }
  1820. void SoftCPU::MOV_reg32_CR(const X86::Instruction&) { TODO_INSN(); }
  1821. void SoftCPU::MOV_reg32_DR(const X86::Instruction&) { TODO_INSN(); }
  1822. void SoftCPU::MOV_reg32_RM32(const X86::Instruction& insn)
  1823. {
  1824. gpr32(insn.reg32()) = insn.modrm().read32(*this, insn);
  1825. }
  1826. void SoftCPU::MOV_reg32_imm32(const X86::Instruction& insn)
  1827. {
  1828. gpr32(insn.reg32()) = shadow_wrap_as_initialized(insn.imm32());
  1829. }
  1830. void SoftCPU::MOV_reg8_RM8(const X86::Instruction& insn)
  1831. {
  1832. gpr8(insn.reg8()) = insn.modrm().read8(*this, insn);
  1833. }
  1834. void SoftCPU::MOV_reg8_imm8(const X86::Instruction& insn)
  1835. {
  1836. gpr8(insn.reg8()) = shadow_wrap_as_initialized(insn.imm8());
  1837. }
  1838. void SoftCPU::MOV_seg_RM16(const X86::Instruction&) { TODO_INSN(); }
  1839. void SoftCPU::MOV_seg_RM32(const X86::Instruction&) { TODO_INSN(); }
  1840. void SoftCPU::MUL_RM16(const X86::Instruction& insn)
  1841. {
  1842. auto src = insn.modrm().read16(*this, insn);
  1843. u32 result = (u32)ax().value() * (u32)src.value();
  1844. auto original_ax = ax();
  1845. set_ax(shadow_wrap_with_taint_from<u16>(result & 0xffff, src, original_ax));
  1846. set_dx(shadow_wrap_with_taint_from<u16>(result >> 16, src, original_ax));
  1847. taint_flags_from(src, original_ax);
  1848. set_cf(dx().value() != 0);
  1849. set_of(dx().value() != 0);
  1850. }
  1851. void SoftCPU::MUL_RM32(const X86::Instruction& insn)
  1852. {
  1853. auto src = insn.modrm().read32(*this, insn);
  1854. u64 result = (u64)eax().value() * (u64)src.value();
  1855. auto original_eax = eax();
  1856. set_eax(shadow_wrap_with_taint_from<u32>(result, src, original_eax));
  1857. set_edx(shadow_wrap_with_taint_from<u32>(result >> 32, src, original_eax));
  1858. taint_flags_from(src, original_eax);
  1859. set_cf(edx().value() != 0);
  1860. set_of(edx().value() != 0);
  1861. }
  1862. void SoftCPU::MUL_RM8(const X86::Instruction& insn)
  1863. {
  1864. auto src = insn.modrm().read8(*this, insn);
  1865. u16 result = (u16)al().value() * src.value();
  1866. auto original_al = al();
  1867. set_ax(shadow_wrap_with_taint_from(result, src, original_al));
  1868. taint_flags_from(src, original_al);
  1869. set_cf((result & 0xff00) != 0);
  1870. set_of((result & 0xff00) != 0);
  1871. }
  1872. void SoftCPU::NEG_RM16(const X86::Instruction& insn)
  1873. {
  1874. insn.modrm().write16(*this, insn, op_sub<ValueWithShadow<u16>>(*this, shadow_wrap_as_initialized<u16>(0), insn.modrm().read16(*this, insn)));
  1875. }
  1876. void SoftCPU::NEG_RM32(const X86::Instruction& insn)
  1877. {
  1878. insn.modrm().write32(*this, insn, op_sub<ValueWithShadow<u32>>(*this, shadow_wrap_as_initialized<u32>(0), insn.modrm().read32(*this, insn)));
  1879. }
  1880. void SoftCPU::NEG_RM8(const X86::Instruction& insn)
  1881. {
  1882. insn.modrm().write8(*this, insn, op_sub<ValueWithShadow<u8>>(*this, shadow_wrap_as_initialized<u8>(0), insn.modrm().read8(*this, insn)));
  1883. }
  1884. void SoftCPU::NOP(const X86::Instruction&)
  1885. {
  1886. }
  1887. void SoftCPU::NOT_RM16(const X86::Instruction& insn)
  1888. {
  1889. auto data = insn.modrm().read16(*this, insn);
  1890. insn.modrm().write16(*this, insn, ValueWithShadow<u16>(~data.value(), data.shadow()));
  1891. }
  1892. void SoftCPU::NOT_RM32(const X86::Instruction& insn)
  1893. {
  1894. auto data = insn.modrm().read32(*this, insn);
  1895. insn.modrm().write32(*this, insn, ValueWithShadow<u32>(~data.value(), data.shadow()));
  1896. }
  1897. void SoftCPU::NOT_RM8(const X86::Instruction& insn)
  1898. {
  1899. auto data = insn.modrm().read8(*this, insn);
  1900. insn.modrm().write8(*this, insn, ValueWithShadow<u8>(~data.value(), data.shadow()));
  1901. }
  1902. void SoftCPU::OUTSB(const X86::Instruction&) { TODO_INSN(); }
  1903. void SoftCPU::OUTSD(const X86::Instruction&) { TODO_INSN(); }
  1904. void SoftCPU::OUTSW(const X86::Instruction&) { TODO_INSN(); }
  1905. void SoftCPU::OUT_DX_AL(const X86::Instruction&) { TODO_INSN(); }
  1906. void SoftCPU::OUT_DX_AX(const X86::Instruction&) { TODO_INSN(); }
  1907. void SoftCPU::OUT_DX_EAX(const X86::Instruction&) { TODO_INSN(); }
  1908. void SoftCPU::OUT_imm8_AL(const X86::Instruction&) { TODO_INSN(); }
  1909. void SoftCPU::OUT_imm8_AX(const X86::Instruction&) { TODO_INSN(); }
  1910. void SoftCPU::OUT_imm8_EAX(const X86::Instruction&) { TODO_INSN(); }
  1911. FPU_INSTRUCTION(PACKSSDW_mm1_mm2m64);
  1912. FPU_INSTRUCTION(PACKSSWB_mm1_mm2m64);
  1913. FPU_INSTRUCTION(PACKUSWB_mm1_mm2m64);
  1914. FPU_INSTRUCTION(PADDB_mm1_mm2m64);
  1915. FPU_INSTRUCTION(PADDW_mm1_mm2m64);
  1916. FPU_INSTRUCTION(PADDD_mm1_mm2m64);
  1917. FPU_INSTRUCTION(PADDSB_mm1_mm2m64);
  1918. FPU_INSTRUCTION(PADDSW_mm1_mm2m64);
  1919. FPU_INSTRUCTION(PADDUSB_mm1_mm2m64);
  1920. FPU_INSTRUCTION(PADDUSW_mm1_mm2m64);
  1921. FPU_INSTRUCTION(PAND_mm1_mm2m64);
  1922. FPU_INSTRUCTION(PANDN_mm1_mm2m64);
  1923. FPU_INSTRUCTION(PCMPEQB_mm1_mm2m64);
  1924. FPU_INSTRUCTION(PCMPEQW_mm1_mm2m64);
  1925. FPU_INSTRUCTION(PCMPEQD_mm1_mm2m64);
  1926. FPU_INSTRUCTION(PCMPGTB_mm1_mm2m64);
  1927. FPU_INSTRUCTION(PCMPGTW_mm1_mm2m64);
  1928. FPU_INSTRUCTION(PCMPGTD_mm1_mm2m64);
  1929. FPU_INSTRUCTION(PMADDWD_mm1_mm2m64);
  1930. FPU_INSTRUCTION(PMULHW_mm1_mm2m64);
  1931. FPU_INSTRUCTION(PMULLW_mm1_mm2m64);
  1932. void SoftCPU::POPA(const X86::Instruction&)
  1933. {
  1934. set_di(pop16());
  1935. set_si(pop16());
  1936. set_bp(pop16());
  1937. pop16();
  1938. set_bx(pop16());
  1939. set_dx(pop16());
  1940. set_cx(pop16());
  1941. set_ax(pop16());
  1942. }
  1943. void SoftCPU::POPAD(const X86::Instruction&)
  1944. {
  1945. set_edi(pop32());
  1946. set_esi(pop32());
  1947. set_ebp(pop32());
  1948. pop32();
  1949. set_ebx(pop32());
  1950. set_edx(pop32());
  1951. set_ecx(pop32());
  1952. set_eax(pop32());
  1953. }
  1954. void SoftCPU::POPF(const X86::Instruction&)
  1955. {
  1956. auto popped_value = pop16();
  1957. m_eflags &= ~0xffff;
  1958. m_eflags |= popped_value.value();
  1959. taint_flags_from(popped_value);
  1960. }
  1961. void SoftCPU::POPFD(const X86::Instruction&)
  1962. {
  1963. auto popped_value = pop32();
  1964. m_eflags &= ~0x00fcffff;
  1965. m_eflags |= popped_value.value() & 0x00fcffff;
  1966. taint_flags_from(popped_value);
  1967. }
  1968. void SoftCPU::POP_DS(const X86::Instruction&) { TODO_INSN(); }
  1969. void SoftCPU::POP_ES(const X86::Instruction&) { TODO_INSN(); }
  1970. void SoftCPU::POP_FS(const X86::Instruction&) { TODO_INSN(); }
  1971. void SoftCPU::POP_GS(const X86::Instruction&) { TODO_INSN(); }
  1972. void SoftCPU::POP_RM16(const X86::Instruction& insn)
  1973. {
  1974. insn.modrm().write16(*this, insn, pop16());
  1975. }
  1976. void SoftCPU::POP_RM32(const X86::Instruction& insn)
  1977. {
  1978. insn.modrm().write32(*this, insn, pop32());
  1979. }
  1980. void SoftCPU::POP_SS(const X86::Instruction&) { TODO_INSN(); }
  1981. void SoftCPU::POP_reg16(const X86::Instruction& insn)
  1982. {
  1983. gpr16(insn.reg16()) = pop16();
  1984. }
  1985. void SoftCPU::POP_reg32(const X86::Instruction& insn)
  1986. {
  1987. gpr32(insn.reg32()) = pop32();
  1988. }
  1989. FPU_INSTRUCTION(POR_mm1_mm2m64);
  1990. FPU_INSTRUCTION(PSLLW_mm1_mm2m64);
  1991. FPU_INSTRUCTION(PSLLW_mm1_imm8);
  1992. FPU_INSTRUCTION(PSLLD_mm1_mm2m64);
  1993. FPU_INSTRUCTION(PSLLD_mm1_imm8);
  1994. FPU_INSTRUCTION(PSLLQ_mm1_mm2m64);
  1995. FPU_INSTRUCTION(PSLLQ_mm1_imm8);
  1996. FPU_INSTRUCTION(PSRAW_mm1_mm2m64);
  1997. FPU_INSTRUCTION(PSRAW_mm1_imm8);
  1998. FPU_INSTRUCTION(PSRAD_mm1_mm2m64);
  1999. FPU_INSTRUCTION(PSRAD_mm1_imm8);
  2000. FPU_INSTRUCTION(PSRLW_mm1_mm2m64);
  2001. FPU_INSTRUCTION(PSRLW_mm1_imm8);
  2002. FPU_INSTRUCTION(PSRLD_mm1_mm2m64);
  2003. FPU_INSTRUCTION(PSRLD_mm1_imm8);
  2004. FPU_INSTRUCTION(PSRLQ_mm1_mm2m64);
  2005. FPU_INSTRUCTION(PSRLQ_mm1_imm8);
  2006. FPU_INSTRUCTION(PSUBB_mm1_mm2m64);
  2007. FPU_INSTRUCTION(PSUBW_mm1_mm2m64);
  2008. FPU_INSTRUCTION(PSUBD_mm1_mm2m64);
  2009. FPU_INSTRUCTION(PSUBSB_mm1_mm2m64);
  2010. FPU_INSTRUCTION(PSUBSW_mm1_mm2m64);
  2011. FPU_INSTRUCTION(PSUBUSB_mm1_mm2m64);
  2012. FPU_INSTRUCTION(PSUBUSW_mm1_mm2m64);
  2013. FPU_INSTRUCTION(PUNPCKHBW_mm1_mm2m64);
  2014. FPU_INSTRUCTION(PUNPCKHWD_mm1_mm2m64);
  2015. FPU_INSTRUCTION(PUNPCKHDQ_mm1_mm2m64);
  2016. FPU_INSTRUCTION(PUNPCKLBW_mm1_mm2m32);
  2017. FPU_INSTRUCTION(PUNPCKLWD_mm1_mm2m32);
  2018. FPU_INSTRUCTION(PUNPCKLDQ_mm1_mm2m32);
  2019. void SoftCPU::PUSHA(const X86::Instruction&)
  2020. {
  2021. auto temp = sp();
  2022. push16(ax());
  2023. push16(cx());
  2024. push16(dx());
  2025. push16(bx());
  2026. push16(temp);
  2027. push16(bp());
  2028. push16(si());
  2029. push16(di());
  2030. }
  2031. void SoftCPU::PUSHAD(const X86::Instruction&)
  2032. {
  2033. auto temp = esp();
  2034. push32(eax());
  2035. push32(ecx());
  2036. push32(edx());
  2037. push32(ebx());
  2038. push32(temp);
  2039. push32(ebp());
  2040. push32(esi());
  2041. push32(edi());
  2042. }
  2043. void SoftCPU::PUSHF(const X86::Instruction&)
  2044. {
  2045. // FIXME: Respect shadow flags when they exist!
  2046. push16(shadow_wrap_as_initialized<u16>(m_eflags & 0xffff));
  2047. }
  2048. void SoftCPU::PUSHFD(const X86::Instruction&)
  2049. {
  2050. // FIXME: Respect shadow flags when they exist!
  2051. push32(shadow_wrap_as_initialized(m_eflags & 0x00fcffff));
  2052. }
  2053. void SoftCPU::PUSH_CS(const X86::Instruction&) { TODO_INSN(); }
  2054. void SoftCPU::PUSH_DS(const X86::Instruction&) { TODO_INSN(); }
  2055. void SoftCPU::PUSH_ES(const X86::Instruction&) { TODO_INSN(); }
  2056. void SoftCPU::PUSH_FS(const X86::Instruction&) { TODO_INSN(); }
  2057. void SoftCPU::PUSH_GS(const X86::Instruction&) { TODO_INSN(); }
  2058. void SoftCPU::PUSH_RM16(const X86::Instruction& insn)
  2059. {
  2060. push16(insn.modrm().read16(*this, insn));
  2061. }
  2062. void SoftCPU::PUSH_RM32(const X86::Instruction& insn)
  2063. {
  2064. push32(insn.modrm().read32(*this, insn));
  2065. }
  2066. void SoftCPU::PUSH_SP_8086_80186(const X86::Instruction&) { TODO_INSN(); }
  2067. void SoftCPU::PUSH_SS(const X86::Instruction&) { TODO_INSN(); }
  2068. void SoftCPU::PUSH_imm16(const X86::Instruction& insn)
  2069. {
  2070. push16(shadow_wrap_as_initialized(insn.imm16()));
  2071. }
  2072. void SoftCPU::PUSH_imm32(const X86::Instruction& insn)
  2073. {
  2074. push32(shadow_wrap_as_initialized(insn.imm32()));
  2075. }
  2076. void SoftCPU::PUSH_imm8(const X86::Instruction& insn)
  2077. {
  2078. VERIFY(!insn.has_operand_size_override_prefix());
  2079. push32(shadow_wrap_as_initialized<u32>(sign_extended_to<i32>(insn.imm8())));
  2080. }
  2081. void SoftCPU::PUSH_reg16(const X86::Instruction& insn)
  2082. {
  2083. push16(gpr16(insn.reg16()));
  2084. }
  2085. void SoftCPU::PUSH_reg32(const X86::Instruction& insn)
  2086. {
  2087. push32(gpr32(insn.reg32()));
  2088. }
  2089. FPU_INSTRUCTION(PXOR_mm1_mm2m64);
  2090. template<typename T, bool cf>
  2091. ALWAYS_INLINE static T op_rcl_impl(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2092. {
  2093. if (steps.value() == 0)
  2094. return shadow_wrap_with_taint_from(data.value(), data, steps);
  2095. u32 result = 0;
  2096. u32 new_flags = 0;
  2097. if constexpr (cf)
  2098. asm volatile("stc");
  2099. else
  2100. asm volatile("clc");
  2101. if constexpr (sizeof(typename T::ValueType) == 4) {
  2102. asm volatile("rcll %%cl, %%eax\n"
  2103. : "=a"(result)
  2104. : "a"(data.value()), "c"(steps.value()));
  2105. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  2106. asm volatile("rclw %%cl, %%ax\n"
  2107. : "=a"(result)
  2108. : "a"(data.value()), "c"(steps.value()));
  2109. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  2110. asm volatile("rclb %%cl, %%al\n"
  2111. : "=a"(result)
  2112. : "a"(data.value()), "c"(steps.value()));
  2113. }
  2114. asm volatile(
  2115. "pushf\n"
  2116. "pop %%ebx"
  2117. : "=b"(new_flags));
  2118. cpu.set_flags_oc(new_flags);
  2119. cpu.taint_flags_from(data, steps);
  2120. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  2121. }
  2122. template<typename T>
  2123. ALWAYS_INLINE static T op_rcl(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2124. {
  2125. cpu.warn_if_flags_tainted("rcl");
  2126. if (cpu.cf())
  2127. return op_rcl_impl<T, true>(cpu, data, steps);
  2128. return op_rcl_impl<T, false>(cpu, data, steps);
  2129. }
  2130. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(RCL, op_rcl)
  2131. template<typename T, bool cf>
  2132. ALWAYS_INLINE static T op_rcr_impl(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2133. {
  2134. if (steps.value() == 0)
  2135. return shadow_wrap_with_taint_from(data.value(), data, steps);
  2136. u32 result = 0;
  2137. u32 new_flags = 0;
  2138. if constexpr (cf)
  2139. asm volatile("stc");
  2140. else
  2141. asm volatile("clc");
  2142. if constexpr (sizeof(typename T::ValueType) == 4) {
  2143. asm volatile("rcrl %%cl, %%eax\n"
  2144. : "=a"(result)
  2145. : "a"(data.value()), "c"(steps.value()));
  2146. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  2147. asm volatile("rcrw %%cl, %%ax\n"
  2148. : "=a"(result)
  2149. : "a"(data.value()), "c"(steps.value()));
  2150. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  2151. asm volatile("rcrb %%cl, %%al\n"
  2152. : "=a"(result)
  2153. : "a"(data.value()), "c"(steps.value()));
  2154. }
  2155. asm volatile(
  2156. "pushf\n"
  2157. "pop %%ebx"
  2158. : "=b"(new_flags));
  2159. cpu.set_flags_oc(new_flags);
  2160. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  2161. }
  2162. template<typename T>
  2163. ALWAYS_INLINE static T op_rcr(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2164. {
  2165. cpu.warn_if_flags_tainted("rcr");
  2166. if (cpu.cf())
  2167. return op_rcr_impl<T, true>(cpu, data, steps);
  2168. return op_rcr_impl<T, false>(cpu, data, steps);
  2169. }
  2170. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(RCR, op_rcr)
  2171. void SoftCPU::RDTSC(const X86::Instruction&) { TODO_INSN(); }
  2172. void SoftCPU::RET(const X86::Instruction& insn)
  2173. {
  2174. VERIFY(!insn.has_operand_size_override_prefix());
  2175. auto ret_address = pop32();
  2176. warn_if_uninitialized(ret_address, "ret");
  2177. set_eip(ret_address.value());
  2178. m_emulator.return_callback(ret_address.value());
  2179. }
  2180. void SoftCPU::RETF(const X86::Instruction&) { TODO_INSN(); }
  2181. void SoftCPU::RETF_imm16(const X86::Instruction&) { TODO_INSN(); }
  2182. void SoftCPU::RET_imm16(const X86::Instruction& insn)
  2183. {
  2184. VERIFY(!insn.has_operand_size_override_prefix());
  2185. auto ret_address = pop32();
  2186. warn_if_uninitialized(ret_address, "ret imm16");
  2187. set_eip(ret_address.value());
  2188. set_esp({ esp().value() + insn.imm16(), esp().shadow() });
  2189. m_emulator.return_callback(ret_address.value());
  2190. }
  2191. template<typename T>
  2192. ALWAYS_INLINE static T op_rol(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2193. {
  2194. if (steps.value() == 0)
  2195. return shadow_wrap_with_taint_from(data.value(), data, steps);
  2196. u32 result = 0;
  2197. u32 new_flags = 0;
  2198. if constexpr (sizeof(typename T::ValueType) == 4) {
  2199. asm volatile("roll %%cl, %%eax\n"
  2200. : "=a"(result)
  2201. : "a"(data.value()), "c"(steps.value()));
  2202. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  2203. asm volatile("rolw %%cl, %%ax\n"
  2204. : "=a"(result)
  2205. : "a"(data.value()), "c"(steps.value()));
  2206. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  2207. asm volatile("rolb %%cl, %%al\n"
  2208. : "=a"(result)
  2209. : "a"(data.value()), "c"(steps.value()));
  2210. }
  2211. asm volatile(
  2212. "pushf\n"
  2213. "pop %%ebx"
  2214. : "=b"(new_flags));
  2215. cpu.set_flags_oc(new_flags);
  2216. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  2217. }
  2218. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(ROL, op_rol)
  2219. template<typename T>
  2220. ALWAYS_INLINE static T op_ror(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2221. {
  2222. if (steps.value() == 0)
  2223. return shadow_wrap_with_taint_from(data.value(), data, steps);
  2224. u32 result = 0;
  2225. u32 new_flags = 0;
  2226. if constexpr (sizeof(typename T::ValueType) == 4) {
  2227. asm volatile("rorl %%cl, %%eax\n"
  2228. : "=a"(result)
  2229. : "a"(data.value()), "c"(steps.value()));
  2230. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  2231. asm volatile("rorw %%cl, %%ax\n"
  2232. : "=a"(result)
  2233. : "a"(data.value()), "c"(steps.value()));
  2234. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  2235. asm volatile("rorb %%cl, %%al\n"
  2236. : "=a"(result)
  2237. : "a"(data.value()), "c"(steps.value()));
  2238. }
  2239. asm volatile(
  2240. "pushf\n"
  2241. "pop %%ebx"
  2242. : "=b"(new_flags));
  2243. cpu.set_flags_oc(new_flags);
  2244. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  2245. }
  2246. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(ROR, op_ror)
  2247. void SoftCPU::SAHF(const X86::Instruction&)
  2248. {
  2249. // FIXME: Respect shadow flags once they exists!
  2250. set_al(shadow_wrap_as_initialized<u8>(eflags() & 0xff));
  2251. }
  2252. void SoftCPU::SALC(const X86::Instruction&)
  2253. {
  2254. // FIXME: Respect shadow flags once they exists!
  2255. set_al(shadow_wrap_as_initialized<u8>(cf() ? 0xff : 0x00));
  2256. }
  2257. template<typename T>
  2258. static T op_sar(SoftCPU& cpu, T data, ValueWithShadow<u8> steps)
  2259. {
  2260. if (steps.value() == 0)
  2261. return shadow_wrap_with_taint_from(data.value(), data, steps);
  2262. u32 result = 0;
  2263. u32 new_flags = 0;
  2264. if constexpr (sizeof(typename T::ValueType) == 4) {
  2265. asm volatile("sarl %%cl, %%eax\n"
  2266. : "=a"(result)
  2267. : "a"(data.value()), "c"(steps.value()));
  2268. } else if constexpr (sizeof(typename T::ValueType) == 2) {
  2269. asm volatile("sarw %%cl, %%ax\n"
  2270. : "=a"(result)
  2271. : "a"(data.value()), "c"(steps.value()));
  2272. } else if constexpr (sizeof(typename T::ValueType) == 1) {
  2273. asm volatile("sarb %%cl, %%al\n"
  2274. : "=a"(result)
  2275. : "a"(data.value()), "c"(steps.value()));
  2276. }
  2277. asm volatile(
  2278. "pushf\n"
  2279. "pop %%ebx"
  2280. : "=b"(new_flags));
  2281. cpu.set_flags_oszapc(new_flags);
  2282. return shadow_wrap_with_taint_from<typename T::ValueType>(result, data, steps);
  2283. }
  2284. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(SAR, op_sar)
  2285. template<typename T>
  2286. ALWAYS_INLINE static void do_scas(SoftCPU& cpu, const X86::Instruction& insn)
  2287. {
  2288. cpu.do_once_or_repeat<true>(insn, [&] {
  2289. auto src = cpu.const_gpr<T>(X86::RegisterAL);
  2290. auto dest = cpu.read_memory<T>({ cpu.es(), cpu.destination_index(insn.a32()).value() });
  2291. op_sub(cpu, dest, src);
  2292. cpu.step_destination_index(insn.a32(), sizeof(T));
  2293. });
  2294. }
  2295. void SoftCPU::SCASB(const X86::Instruction& insn)
  2296. {
  2297. do_scas<u8>(*this, insn);
  2298. }
  2299. void SoftCPU::SCASD(const X86::Instruction& insn)
  2300. {
  2301. do_scas<u32>(*this, insn);
  2302. }
  2303. void SoftCPU::SCASW(const X86::Instruction& insn)
  2304. {
  2305. do_scas<u16>(*this, insn);
  2306. }
  2307. void SoftCPU::SETcc_RM8(const X86::Instruction& insn)
  2308. {
  2309. warn_if_flags_tainted("setcc");
  2310. insn.modrm().write8(*this, insn, shadow_wrap_as_initialized<u8>(evaluate_condition(insn.cc())));
  2311. }
  2312. void SoftCPU::SGDT(const X86::Instruction&) { TODO_INSN(); }
  2313. void SoftCPU::SHLD_RM16_reg16_CL(const X86::Instruction& insn)
  2314. {
  2315. insn.modrm().write16(*this, insn, op_shld(*this, insn.modrm().read16(*this, insn), const_gpr16(insn.reg16()), cl()));
  2316. }
  2317. void SoftCPU::SHLD_RM16_reg16_imm8(const X86::Instruction& insn)
  2318. {
  2319. insn.modrm().write16(*this, insn, op_shld(*this, insn.modrm().read16(*this, insn), const_gpr16(insn.reg16()), shadow_wrap_as_initialized(insn.imm8())));
  2320. }
  2321. void SoftCPU::SHLD_RM32_reg32_CL(const X86::Instruction& insn)
  2322. {
  2323. insn.modrm().write32(*this, insn, op_shld(*this, insn.modrm().read32(*this, insn), const_gpr32(insn.reg32()), cl()));
  2324. }
  2325. void SoftCPU::SHLD_RM32_reg32_imm8(const X86::Instruction& insn)
  2326. {
  2327. insn.modrm().write32(*this, insn, op_shld(*this, insn.modrm().read32(*this, insn), const_gpr32(insn.reg32()), shadow_wrap_as_initialized(insn.imm8())));
  2328. }
  2329. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(SHL, op_shl)
  2330. void SoftCPU::SHRD_RM16_reg16_CL(const X86::Instruction& insn)
  2331. {
  2332. insn.modrm().write16(*this, insn, op_shrd(*this, insn.modrm().read16(*this, insn), const_gpr16(insn.reg16()), cl()));
  2333. }
  2334. void SoftCPU::SHRD_RM16_reg16_imm8(const X86::Instruction& insn)
  2335. {
  2336. insn.modrm().write16(*this, insn, op_shrd(*this, insn.modrm().read16(*this, insn), const_gpr16(insn.reg16()), shadow_wrap_as_initialized(insn.imm8())));
  2337. }
  2338. void SoftCPU::SHRD_RM32_reg32_CL(const X86::Instruction& insn)
  2339. {
  2340. insn.modrm().write32(*this, insn, op_shrd(*this, insn.modrm().read32(*this, insn), const_gpr32(insn.reg32()), cl()));
  2341. }
  2342. void SoftCPU::SHRD_RM32_reg32_imm8(const X86::Instruction& insn)
  2343. {
  2344. insn.modrm().write32(*this, insn, op_shrd(*this, insn.modrm().read32(*this, insn), const_gpr32(insn.reg32()), shadow_wrap_as_initialized(insn.imm8())));
  2345. }
  2346. DEFINE_GENERIC_SHIFT_ROTATE_INSN_HANDLERS(SHR, op_shr)
  2347. void SoftCPU::SIDT(const X86::Instruction&) { TODO_INSN(); }
  2348. void SoftCPU::SLDT_RM16(const X86::Instruction&) { TODO_INSN(); }
  2349. void SoftCPU::SMSW_RM16(const X86::Instruction&) { TODO_INSN(); }
  2350. void SoftCPU::STC(const X86::Instruction&)
  2351. {
  2352. set_cf(true);
  2353. }
  2354. void SoftCPU::STD(const X86::Instruction&)
  2355. {
  2356. set_df(true);
  2357. }
  2358. void SoftCPU::STI(const X86::Instruction&) { TODO_INSN(); }
  2359. void SoftCPU::STOSB(const X86::Instruction& insn)
  2360. {
  2361. if (insn.has_rep_prefix() && !df()) {
  2362. // Fast path for 8-bit forward memory fill.
  2363. if (m_emulator.mmu().fast_fill_memory8({ es(), destination_index(insn.a32()).value() }, ecx().value(), al())) {
  2364. if (insn.a32()) {
  2365. // FIXME: Should an uninitialized ECX taint EDI here?
  2366. set_edi({ (u32)(edi().value() + ecx().value()), edi().shadow() });
  2367. set_ecx(shadow_wrap_as_initialized<u32>(0));
  2368. } else {
  2369. // FIXME: Should an uninitialized CX taint DI here?
  2370. set_di({ (u16)(di().value() + cx().value()), di().shadow() });
  2371. set_cx(shadow_wrap_as_initialized<u16>(0));
  2372. }
  2373. return;
  2374. }
  2375. }
  2376. do_once_or_repeat<false>(insn, [&] {
  2377. write_memory8({ es(), destination_index(insn.a32()).value() }, al());
  2378. step_destination_index(insn.a32(), 1);
  2379. });
  2380. }
  2381. void SoftCPU::STOSD(const X86::Instruction& insn)
  2382. {
  2383. if (insn.has_rep_prefix() && !df()) {
  2384. // Fast path for 32-bit forward memory fill.
  2385. if (m_emulator.mmu().fast_fill_memory32({ es(), destination_index(insn.a32()).value() }, ecx().value(), eax())) {
  2386. if (insn.a32()) {
  2387. // FIXME: Should an uninitialized ECX taint EDI here?
  2388. set_edi({ (u32)(edi().value() + (ecx().value() * sizeof(u32))), edi().shadow() });
  2389. set_ecx(shadow_wrap_as_initialized<u32>(0));
  2390. } else {
  2391. // FIXME: Should an uninitialized CX taint DI here?
  2392. set_di({ (u16)(di().value() + (cx().value() * sizeof(u32))), di().shadow() });
  2393. set_cx(shadow_wrap_as_initialized<u16>(0));
  2394. }
  2395. return;
  2396. }
  2397. }
  2398. do_once_or_repeat<false>(insn, [&] {
  2399. write_memory32({ es(), destination_index(insn.a32()).value() }, eax());
  2400. step_destination_index(insn.a32(), 4);
  2401. });
  2402. }
  2403. void SoftCPU::STOSW(const X86::Instruction& insn)
  2404. {
  2405. do_once_or_repeat<false>(insn, [&] {
  2406. write_memory16({ es(), destination_index(insn.a32()).value() }, ax());
  2407. step_destination_index(insn.a32(), 2);
  2408. });
  2409. }
  2410. void SoftCPU::STR_RM16(const X86::Instruction&) { TODO_INSN(); }
  2411. void SoftCPU::UD0(const X86::Instruction&) { TODO_INSN(); }
  2412. void SoftCPU::UD1(const X86::Instruction&) { TODO_INSN(); }
  2413. void SoftCPU::UD2(const X86::Instruction&) { TODO_INSN(); }
  2414. void SoftCPU::VERR_RM16(const X86::Instruction&) { TODO_INSN(); }
  2415. void SoftCPU::VERW_RM16(const X86::Instruction&) { TODO_INSN(); }
  2416. void SoftCPU::WAIT(const X86::Instruction&) { TODO_INSN(); }
  2417. void SoftCPU::WBINVD(const X86::Instruction&) { TODO_INSN(); }
  2418. void SoftCPU::XADD_RM16_reg16(const X86::Instruction& insn)
  2419. {
  2420. auto dest = insn.modrm().read16(*this, insn);
  2421. auto src = const_gpr16(insn.reg16());
  2422. auto result = op_add(*this, dest, src);
  2423. gpr16(insn.reg16()) = dest;
  2424. insn.modrm().write16(*this, insn, result);
  2425. }
  2426. void SoftCPU::XADD_RM32_reg32(const X86::Instruction& insn)
  2427. {
  2428. auto dest = insn.modrm().read32(*this, insn);
  2429. auto src = const_gpr32(insn.reg32());
  2430. auto result = op_add(*this, dest, src);
  2431. gpr32(insn.reg32()) = dest;
  2432. insn.modrm().write32(*this, insn, result);
  2433. }
  2434. void SoftCPU::XADD_RM8_reg8(const X86::Instruction& insn)
  2435. {
  2436. auto dest = insn.modrm().read8(*this, insn);
  2437. auto src = const_gpr8(insn.reg8());
  2438. auto result = op_add(*this, dest, src);
  2439. gpr8(insn.reg8()) = dest;
  2440. insn.modrm().write8(*this, insn, result);
  2441. }
  2442. void SoftCPU::XCHG_AX_reg16(const X86::Instruction& insn)
  2443. {
  2444. auto temp = gpr16(insn.reg16());
  2445. gpr16(insn.reg16()) = ax();
  2446. set_ax(temp);
  2447. }
  2448. void SoftCPU::XCHG_EAX_reg32(const X86::Instruction& insn)
  2449. {
  2450. auto temp = gpr32(insn.reg32());
  2451. gpr32(insn.reg32()) = eax();
  2452. set_eax(temp);
  2453. }
  2454. void SoftCPU::XCHG_reg16_RM16(const X86::Instruction& insn)
  2455. {
  2456. auto temp = insn.modrm().read16(*this, insn);
  2457. insn.modrm().write16(*this, insn, const_gpr16(insn.reg16()));
  2458. gpr16(insn.reg16()) = temp;
  2459. }
  2460. void SoftCPU::XCHG_reg32_RM32(const X86::Instruction& insn)
  2461. {
  2462. auto temp = insn.modrm().read32(*this, insn);
  2463. insn.modrm().write32(*this, insn, const_gpr32(insn.reg32()));
  2464. gpr32(insn.reg32()) = temp;
  2465. }
  2466. void SoftCPU::XCHG_reg8_RM8(const X86::Instruction& insn)
  2467. {
  2468. auto temp = insn.modrm().read8(*this, insn);
  2469. insn.modrm().write8(*this, insn, const_gpr8(insn.reg8()));
  2470. gpr8(insn.reg8()) = temp;
  2471. }
  2472. void SoftCPU::XLAT(const X86::Instruction& insn)
  2473. {
  2474. if (insn.a32())
  2475. warn_if_uninitialized(ebx(), "xlat ebx");
  2476. else
  2477. warn_if_uninitialized(bx(), "xlat bx");
  2478. warn_if_uninitialized(al(), "xlat al");
  2479. u32 offset = (insn.a32() ? ebx().value() : bx().value()) + al().value();
  2480. set_al(read_memory8({ segment(insn.segment_prefix().value_or(X86::SegmentRegister::DS)), offset }));
  2481. }
  2482. #define DEFINE_GENERIC_INSN_HANDLERS_PARTIAL(mnemonic, op, update_dest, is_zero_idiom_if_both_operands_same, is_or) \
  2483. void SoftCPU::mnemonic##_AL_imm8(const X86::Instruction& insn) { generic_AL_imm8<update_dest, is_or>(op<ValueWithShadow<u8>>, insn); } \
  2484. void SoftCPU::mnemonic##_AX_imm16(const X86::Instruction& insn) { generic_AX_imm16<update_dest, is_or>(op<ValueWithShadow<u16>>, insn); } \
  2485. void SoftCPU::mnemonic##_EAX_imm32(const X86::Instruction& insn) { generic_EAX_imm32<update_dest, is_or>(op<ValueWithShadow<u32>>, insn); } \
  2486. void SoftCPU::mnemonic##_RM16_imm16(const X86::Instruction& insn) { generic_RM16_imm16<update_dest, is_or>(op<ValueWithShadow<u16>>, insn); } \
  2487. void SoftCPU::mnemonic##_RM16_reg16(const X86::Instruction& insn) { generic_RM16_reg16<update_dest, is_zero_idiom_if_both_operands_same>(op<ValueWithShadow<u16>>, insn); } \
  2488. void SoftCPU::mnemonic##_RM32_imm32(const X86::Instruction& insn) { generic_RM32_imm32<update_dest, is_or>(op<ValueWithShadow<u32>>, insn); } \
  2489. void SoftCPU::mnemonic##_RM32_reg32(const X86::Instruction& insn) { generic_RM32_reg32<update_dest, is_zero_idiom_if_both_operands_same>(op<ValueWithShadow<u32>>, insn); } \
  2490. void SoftCPU::mnemonic##_RM8_imm8(const X86::Instruction& insn) { generic_RM8_imm8<update_dest, is_or>(op<ValueWithShadow<u8>>, insn); } \
  2491. void SoftCPU::mnemonic##_RM8_reg8(const X86::Instruction& insn) { generic_RM8_reg8<update_dest, is_zero_idiom_if_both_operands_same>(op<ValueWithShadow<u8>>, insn); }
  2492. #define DEFINE_GENERIC_INSN_HANDLERS(mnemonic, op, update_dest, is_zero_idiom_if_both_operands_same, is_or) \
  2493. DEFINE_GENERIC_INSN_HANDLERS_PARTIAL(mnemonic, op, update_dest, is_zero_idiom_if_both_operands_same, is_or) \
  2494. void SoftCPU::mnemonic##_RM16_imm8(const X86::Instruction& insn) { generic_RM16_imm8<update_dest, is_or>(op<ValueWithShadow<u16>>, insn); } \
  2495. void SoftCPU::mnemonic##_RM32_imm8(const X86::Instruction& insn) { generic_RM32_imm8<update_dest, is_or>(op<ValueWithShadow<u32>>, insn); } \
  2496. void SoftCPU::mnemonic##_reg16_RM16(const X86::Instruction& insn) { generic_reg16_RM16<update_dest, is_zero_idiom_if_both_operands_same>(op<ValueWithShadow<u16>>, insn); } \
  2497. void SoftCPU::mnemonic##_reg32_RM32(const X86::Instruction& insn) { generic_reg32_RM32<update_dest, is_zero_idiom_if_both_operands_same>(op<ValueWithShadow<u32>>, insn); } \
  2498. void SoftCPU::mnemonic##_reg8_RM8(const X86::Instruction& insn) { generic_reg8_RM8<update_dest, is_zero_idiom_if_both_operands_same>(op<ValueWithShadow<u8>>, insn); }
  2499. DEFINE_GENERIC_INSN_HANDLERS(XOR, op_xor, true, true, false)
  2500. DEFINE_GENERIC_INSN_HANDLERS(OR, op_or, true, false, true)
  2501. DEFINE_GENERIC_INSN_HANDLERS(ADD, op_add, true, false, false)
  2502. DEFINE_GENERIC_INSN_HANDLERS(ADC, op_adc, true, false, false)
  2503. DEFINE_GENERIC_INSN_HANDLERS(SUB, op_sub, true, true, false)
  2504. DEFINE_GENERIC_INSN_HANDLERS(SBB, op_sbb, true, false, false)
  2505. DEFINE_GENERIC_INSN_HANDLERS(AND, op_and, true, false, false)
  2506. DEFINE_GENERIC_INSN_HANDLERS(CMP, op_sub, false, false, false)
  2507. DEFINE_GENERIC_INSN_HANDLERS_PARTIAL(TEST, op_and, false, false, false)
  2508. FPU_INSTRUCTION(MOVQ_mm1_mm2m64);
  2509. FPU_INSTRUCTION(MOVQ_mm1m64_mm2);
  2510. FPU_INSTRUCTION(MOVD_mm1_rm32);
  2511. FPU_INSTRUCTION(MOVQ_mm1_rm64); // long mode
  2512. FPU_INSTRUCTION(MOVD_rm32_mm2);
  2513. FPU_INSTRUCTION(MOVQ_rm64_mm2); // long mode
  2514. FPU_INSTRUCTION(EMMS);
  2515. void SoftCPU::CMPXCHG8B_m64(X86::Instruction const&) { TODO_INSN(); }
  2516. void SoftCPU::RDRAND_reg(X86::Instruction const&) { TODO_INSN(); }
  2517. void SoftCPU::RDSEED_reg(X86::Instruction const&) { TODO_INSN(); }
  2518. VPU_INSTRUCTION(PREFETCHTNTA);
  2519. VPU_INSTRUCTION(PREFETCHT0);
  2520. VPU_INSTRUCTION(PREFETCHT1);
  2521. VPU_INSTRUCTION(PREFETCHT2);
  2522. VPU_INSTRUCTION(LDMXCSR);
  2523. VPU_INSTRUCTION(STMXCSR);
  2524. VPU_INSTRUCTION(MOVUPS_xmm1_xmm2m128);
  2525. VPU_INSTRUCTION(MOVSS_xmm1_xmm2m32);
  2526. VPU_INSTRUCTION(MOVUPS_xmm1m128_xmm2);
  2527. VPU_INSTRUCTION(MOVSS_xmm1m32_xmm2);
  2528. VPU_INSTRUCTION(MOVLPS_xmm1_xmm2m64);
  2529. VPU_INSTRUCTION(MOVLPS_m64_xmm2);
  2530. VPU_INSTRUCTION(UNPCKLPS_xmm1_xmm2m128);
  2531. VPU_INSTRUCTION(UNPCKHPS_xmm1_xmm2m128);
  2532. VPU_INSTRUCTION(MOVHPS_xmm1_xmm2m64);
  2533. VPU_INSTRUCTION(MOVHPS_m64_xmm2);
  2534. VPU_INSTRUCTION(MOVAPS_xmm1_xmm2m128);
  2535. VPU_INSTRUCTION(MOVAPS_xmm1m128_xmm2);
  2536. VPU_INSTRUCTION(CVTTPS2PI_mm1_xmm2m64);
  2537. VPU_INSTRUCTION(CVTTSS2SI_r32_xmm2m32);
  2538. VPU_INSTRUCTION(CVTPI2PS_xmm1_mm2m64);
  2539. VPU_INSTRUCTION(CVTSI2SS_xmm1_rm32);
  2540. VPU_INSTRUCTION(MOVNTPS_xmm1m128_xmm2);
  2541. VPU_INSTRUCTION(CVTPS2PI_xmm1_mm2m64);
  2542. VPU_INSTRUCTION(CVTSS2SI_r32_xmm2m32);
  2543. VPU_INSTRUCTION(UCOMISS_xmm1_xmm2m32);
  2544. VPU_INSTRUCTION(COMISS_xmm1_xmm2m32);
  2545. VPU_INSTRUCTION(MOVMSKPS_reg_xmm);
  2546. VPU_INSTRUCTION(SQRTPS_xmm1_xmm2m128);
  2547. VPU_INSTRUCTION(SQRTSS_xmm1_xmm2m32);
  2548. VPU_INSTRUCTION(RSQRTPS_xmm1_xmm2m128);
  2549. VPU_INSTRUCTION(RSQRTSS_xmm1_xmm2m32);
  2550. VPU_INSTRUCTION(RCPPS_xmm1_xmm2m128);
  2551. VPU_INSTRUCTION(RCPSS_xmm1_xmm2m32);
  2552. VPU_INSTRUCTION(ANDPS_xmm1_xmm2m128);
  2553. VPU_INSTRUCTION(ANDNPS_xmm1_xmm2m128);
  2554. VPU_INSTRUCTION(ORPS_xmm1_xmm2m128);
  2555. VPU_INSTRUCTION(XORPS_xmm1_xmm2m128);
  2556. VPU_INSTRUCTION(ADDPS_xmm1_xmm2m128);
  2557. VPU_INSTRUCTION(ADDSS_xmm1_xmm2m32);
  2558. VPU_INSTRUCTION(MULPS_xmm1_xmm2m128);
  2559. VPU_INSTRUCTION(MULSS_xmm1_xmm2m32);
  2560. VPU_INSTRUCTION(SUBPS_xmm1_xmm2m128);
  2561. VPU_INSTRUCTION(SUBSS_xmm1_xmm2m32);
  2562. VPU_INSTRUCTION(MINPS_xmm1_xmm2m128);
  2563. VPU_INSTRUCTION(MINSS_xmm1_xmm2m32);
  2564. VPU_INSTRUCTION(DIVPS_xmm1_xmm2m128);
  2565. VPU_INSTRUCTION(DIVSS_xmm1_xmm2m32);
  2566. VPU_INSTRUCTION(MAXPS_xmm1_xmm2m128);
  2567. VPU_INSTRUCTION(MAXSS_xmm1_xmm2m32);
  2568. VPU_INSTRUCTION(PSHUFW_mm1_mm2m64_imm8);
  2569. VPU_INSTRUCTION(CMPPS_xmm1_xmm2m128_imm8);
  2570. VPU_INSTRUCTION(CMPSS_xmm1_xmm2m32_imm8);
  2571. VPU_INSTRUCTION(PINSRW_mm1_r32m16_imm8);
  2572. VPU_INSTRUCTION(PINSRW_xmm1_r32m16_imm8);
  2573. VPU_INSTRUCTION(PEXTRW_reg_mm1_imm8);
  2574. VPU_INSTRUCTION(PEXTRW_reg_xmm1_imm8);
  2575. VPU_INSTRUCTION(SHUFPS_xmm1_xmm2m128_imm8);
  2576. VPU_INSTRUCTION(PMOVMSKB_reg_mm1);
  2577. VPU_INSTRUCTION(PMOVMSKB_reg_xmm1);
  2578. VPU_INSTRUCTION(PMINUB_mm1_mm2m64);
  2579. VPU_INSTRUCTION(PMINUB_xmm1_xmm2m128);
  2580. VPU_INSTRUCTION(PMAXUB_mm1_mm2m64);
  2581. VPU_INSTRUCTION(PMAXUB_xmm1_xmm2m128);
  2582. VPU_INSTRUCTION(PAVGB_mm1_mm2m64);
  2583. VPU_INSTRUCTION(PAVGB_xmm1_xmm2m128);
  2584. VPU_INSTRUCTION(PAVGW_mm1_mm2m64);
  2585. VPU_INSTRUCTION(PAVGW_xmm1_xmm2m128);
  2586. VPU_INSTRUCTION(PMULHUW_mm1_mm2m64);
  2587. VPU_INSTRUCTION(PMULHUW_xmm1_xmm2m64);
  2588. VPU_INSTRUCTION(MOVNTQ_m64_mm1);
  2589. VPU_INSTRUCTION(PMINSB_mm1_mm2m64);
  2590. VPU_INSTRUCTION(PMINSB_xmm1_xmm2m128);
  2591. VPU_INSTRUCTION(PMAXSB_mm1_mm2m64);
  2592. VPU_INSTRUCTION(PMAXSB_xmm1_xmm2m128);
  2593. VPU_INSTRUCTION(PSADBB_mm1_mm2m64);
  2594. VPU_INSTRUCTION(PSADBB_xmm1_xmm2m128);
  2595. VPU_INSTRUCTION(MASKMOVQ_mm1_mm2m64);
  2596. void SoftCPU::MOVUPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2597. void SoftCPU::MOVSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2598. void SoftCPU::MOVUPD_xmm1m128_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2599. void SoftCPU::MOVSD_xmm1m32_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2600. void SoftCPU::MOVLPD_xmm1_m64(X86::Instruction const&) { TODO_INSN(); }
  2601. void SoftCPU::MOVLPD_m64_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2602. void SoftCPU::UNPCKLPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2603. void SoftCPU::UNPCKHPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2604. void SoftCPU::MOVHPD_xmm1_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2605. void SoftCPU::MOVAPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2606. void SoftCPU::MOVAPD_xmm1m128_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2607. void SoftCPU::CVTPI2PD_xmm1_mm2m64(X86::Instruction const&) { TODO_INSN(); }
  2608. void SoftCPU::CVTSI2SD_xmm1_rm32(X86::Instruction const&) { TODO_INSN(); }
  2609. void SoftCPU::CVTTPD2PI_mm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2610. void SoftCPU::CVTTSS2SI_r32_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2611. void SoftCPU::CVTPD2PI_xmm1_mm2m128(X86::Instruction const&) { TODO_INSN(); }
  2612. void SoftCPU::CVTSD2SI_xmm1_rm64(X86::Instruction const&) { TODO_INSN(); }
  2613. void SoftCPU::UCOMISD_xmm1_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2614. void SoftCPU::COMISD_xmm1_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2615. void SoftCPU::MOVMSKPD_reg_xmm(X86::Instruction const&) { TODO_INSN(); }
  2616. void SoftCPU::SQRTPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2617. void SoftCPU::SQRTSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2618. void SoftCPU::ANDPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2619. void SoftCPU::ANDNPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2620. void SoftCPU::ORPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2621. void SoftCPU::XORPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2622. void SoftCPU::ADDPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2623. void SoftCPU::ADDSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2624. void SoftCPU::MULPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2625. void SoftCPU::MULSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2626. void SoftCPU::CVTPS2PD_xmm1_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2627. void SoftCPU::CVTPD2PS_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2628. void SoftCPU::CVTSS2SD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2629. void SoftCPU::CVTSD2SS_xmm1_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2630. void SoftCPU::CVTDQ2PS_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2631. void SoftCPU::CVTPS2DQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2632. void SoftCPU::CVTTPS2DQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2633. void SoftCPU::SUBPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); };
  2634. void SoftCPU::SUBSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); };
  2635. void SoftCPU::MINPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2636. void SoftCPU::MINSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2637. void SoftCPU::DIVPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2638. void SoftCPU::DIVSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2639. void SoftCPU::MAXPD_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2640. void SoftCPU::MAXSD_xmm1_xmm2m32(X86::Instruction const&) { TODO_INSN(); }
  2641. void SoftCPU::PUNPCKLQDQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2642. void SoftCPU::PUNPCKHQDQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2643. void SoftCPU::MOVDQA_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2644. void SoftCPU::MOVDQU_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2645. void SoftCPU::PSHUFD_xmm1_xmm2m128_imm8(X86::Instruction const&) { TODO_INSN(); }
  2646. void SoftCPU::PSHUFHW_xmm1_xmm2m128_imm8(X86::Instruction const&) { TODO_INSN(); }
  2647. void SoftCPU::PSHUFLW_xmm1_xmm2m128_imm8(X86::Instruction const&) { TODO_INSN(); }
  2648. void SoftCPU::PSRLQ_xmm1_imm8(X86::Instruction const&) { TODO_INSN(); }
  2649. void SoftCPU::PSRLDQ_xmm1_imm8(X86::Instruction const&) { TODO_INSN(); }
  2650. void SoftCPU::PSLLQ_xmm1_imm8(X86::Instruction const&) { TODO_INSN(); }
  2651. void SoftCPU::PSLLDQ_xmm1_imm8(X86::Instruction const&) { TODO_INSN(); }
  2652. void SoftCPU::MOVD_rm32_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2653. void SoftCPU::MOVQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2654. void SoftCPU::MOVDQA_xmm1m128_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2655. void SoftCPU::MOVDQU_xmm1m128_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2656. void SoftCPU::CMPPD_xmm1_xmm2m128_imm8(X86::Instruction const&) { TODO_INSN(); }
  2657. void SoftCPU::CMPSD_xmm1_xmm2m32_imm8(X86::Instruction const&) { TODO_INSN(); }
  2658. void SoftCPU::SHUFPD_xmm1_xmm2m128_imm8(X86::Instruction const&) { TODO_INSN(); }
  2659. void SoftCPU::PADDQ_mm1_mm2m64(X86::Instruction const&) { TODO_INSN(); }
  2660. void SoftCPU::MOVQ_xmm1m128_xmm2(X86::Instruction const&) { TODO_INSN(); }
  2661. void SoftCPU::MOVQ2DQ_xmm_mm(X86::Instruction const&) { TODO_INSN(); }
  2662. void SoftCPU::MOVDQ2Q_mm_xmm(X86::Instruction const&) { TODO_INSN(); }
  2663. void SoftCPU::CVTTPD2DQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2664. void SoftCPU::CVTPD2DQ_xmm1_xmm2m128(X86::Instruction const&) { TODO_INSN(); }
  2665. void SoftCPU::CVTDQ2PD_xmm1_xmm2m64(X86::Instruction const&) { TODO_INSN(); }
  2666. void SoftCPU::PMULUDQ_mm1_mm2m64(X86::Instruction const&) { TODO_INSN(); }
  2667. void SoftCPU::PMULUDQ_mm1_mm2m128(X86::Instruction const&) { TODO_INSN(); }
  2668. void SoftCPU::PSUBQ_mm1_mm2m64(X86::Instruction const&) { TODO_INSN(); }
  2669. void SoftCPU::wrap_0xC0(const X86::Instruction&) { TODO_INSN(); }
  2670. void SoftCPU::wrap_0xC1_16(const X86::Instruction&) { TODO_INSN(); }
  2671. void SoftCPU::wrap_0xC1_32(const X86::Instruction&) { TODO_INSN(); }
  2672. void SoftCPU::wrap_0xD0(const X86::Instruction&) { TODO_INSN(); }
  2673. void SoftCPU::wrap_0xD1_16(const X86::Instruction&) { TODO_INSN(); }
  2674. void SoftCPU::wrap_0xD1_32(const X86::Instruction&) { TODO_INSN(); }
  2675. void SoftCPU::wrap_0xD2(const X86::Instruction&) { TODO_INSN(); }
  2676. void SoftCPU::wrap_0xD3_16(const X86::Instruction&) { TODO_INSN(); }
  2677. void SoftCPU::wrap_0xD3_32(const X86::Instruction&) { TODO_INSN(); }
  2678. }