?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
atapi: Move GET_EVENT_STATUS_NOTIFICATION command handling to its own function
[qemu.git] / target-i386 / translate.c
blob7d1340ed015515498417dc3bd2380daa7bb0e3a4
1 /*
2 * i386 translation
3 *
4 * Copyright (c) 2003 Fabrice Bellard
5 *
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
10 *
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
15 *
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
18 */
19 #include <stdarg.h>
20 #include <stdlib.h>
21 #include <stdio.h>
22 #include <string.h>
23 #include <inttypes.h>
24 #include <signal.h>
25
26 #include "cpu.h"
27 #include "exec-all.h"
28 #include "disas.h"
29 #include "tcg-op.h"
30
31 #include "helper.h"
32 #define GEN_HELPER 1
33 #include "helper.h"
34
35 #define PREFIX_REPZ 0x01
36 #define PREFIX_REPNZ 0x02
37 #define PREFIX_LOCK 0x04
38 #define PREFIX_DATA 0x08
39 #define PREFIX_ADR 0x10
40
41 #ifdef TARGET_X86_64
42 #define X86_64_ONLY(x) x
43 #define X86_64_DEF(...) __VA_ARGS__
44 #define CODE64(s) ((s)->code64)
45 #define REX_X(s) ((s)->rex_x)
46 #define REX_B(s) ((s)->rex_b)
47 /* XXX: gcc generates push/pop in some opcodes, so we cannot use them */
48 #if 1
49 #define BUGGY_64(x) NULL
50 #endif
51 #else
52 #define X86_64_ONLY(x) NULL
53 #define X86_64_DEF(...)
54 #define CODE64(s) 0
55 #define REX_X(s) 0
56 #define REX_B(s) 0
57 #endif
58
59 //#define MACRO_TEST 1
60
61 /* global register indexes */
62 static TCGv_ptr cpu_env;
63 static TCGv cpu_A0, cpu_cc_src, cpu_cc_dst, cpu_cc_tmp;
64 static TCGv_i32 cpu_cc_op;
65 static TCGv cpu_regs[CPU_NB_REGS];
66 /* local temps */
67 static TCGv cpu_T[2], cpu_T3;
68 /* local register indexes (only used inside old micro ops) */
69 static TCGv cpu_tmp0, cpu_tmp4;
70 static TCGv_ptr cpu_ptr0, cpu_ptr1;
71 static TCGv_i32 cpu_tmp2_i32, cpu_tmp3_i32;
72 static TCGv_i64 cpu_tmp1_i64;
73 static TCGv cpu_tmp5;
74
75 static uint8_t gen_opc_cc_op[OPC_BUF_SIZE];
76
77 #include "gen-icount.h"
78
79 #ifdef TARGET_X86_64
80 static int x86_64_hregs;
81 #endif
82
83 typedef struct DisasContext {
84 /* current insn context */
85 int override; /* -1 if no override */
86 int prefix;
87 int aflag, dflag;
88 target_ulong pc; /* pc = eip + cs_base */
89 int is_jmp; /* 1 = means jump (stop translation), 2 means CPU
90 static state change (stop translation) */
91 /* current block context */
92 target_ulong cs_base; /* base of CS segment */
93 int pe; /* protected mode */
94 int code32; /* 32 bit code segment */
95 #ifdef TARGET_X86_64
96 int lma; /* long mode active */
97 int code64; /* 64 bit code segment */
98 int rex_x, rex_b;
99 #endif
100 int ss32; /* 32 bit stack segment */
101 int cc_op; /* current CC operation */
102 int addseg; /* non zero if either DS/ES/SS have a non zero base */
103 int f_st; /* currently unused */
104 int vm86; /* vm86 mode */
105 int cpl;
106 int iopl;
107 int tf; /* TF cpu flag */
108 int singlestep_enabled; /* "hardware" single step enabled */
109 int jmp_opt; /* use direct block chaining for direct jumps */
110 int mem_index; /* select memory access functions */
111 uint64_t flags; /* all execution flags */
112 struct TranslationBlock *tb;
113 int popl_esp_hack; /* for correct popl with esp base handling */
114 int rip_offset; /* only used in x86_64, but left for simplicity */
115 int cpuid_features;
116 int cpuid_ext_features;
117 int cpuid_ext2_features;
118 int cpuid_ext3_features;
119 } DisasContext;
120
121 static void gen_eob(DisasContext *s);
122 static void gen_jmp(DisasContext *s, target_ulong eip);
123 static void gen_jmp_tb(DisasContext *s, target_ulong eip, int tb_num);
124
125 /* i386 arith/logic operations */
126 enum {
127 OP_ADDL,
128 OP_ORL,
129 OP_ADCL,
130 OP_SBBL,
131 OP_ANDL,
132 OP_SUBL,
133 OP_XORL,
134 OP_CMPL,
135 };
136
137 /* i386 shift ops */
138 enum {
139 OP_ROL,
140 OP_ROR,
141 OP_RCL,
142 OP_RCR,
143 OP_SHL,
144 OP_SHR,
145 OP_SHL1, /* undocumented */
146 OP_SAR = 7,
147 };
148
149 enum {
150 JCC_O,
151 JCC_B,
152 JCC_Z,
153 JCC_BE,
154 JCC_S,
155 JCC_P,
156 JCC_L,
157 JCC_LE,
158 };
159
160 /* operand size */
161 enum {
162 OT_BYTE = 0,
163 OT_WORD,
164 OT_LONG,
165 OT_QUAD,
166 };
167
168 enum {
169 /* I386 int registers */
170 OR_EAX, /* MUST be even numbered */
171 OR_ECX,
172 OR_EDX,
173 OR_EBX,
174 OR_ESP,
175 OR_EBP,
176 OR_ESI,
177 OR_EDI,
178
179 OR_TMP0 = 16, /* temporary operand register */
180 OR_TMP1,
181 OR_A0, /* temporary register used when doing address evaluation */
182 };
183
184 static inline void gen_op_movl_T0_0(void)
185 {
186 tcg_gen_movi_tl(cpu_T[0], 0);
187 }
188
189 static inline void gen_op_movl_T0_im(int32_t val)
190 {
191 tcg_gen_movi_tl(cpu_T[0], val);
192 }
193
194 static inline void gen_op_movl_T0_imu(uint32_t val)
195 {
196 tcg_gen_movi_tl(cpu_T[0], val);
197 }
198
199 static inline void gen_op_movl_T1_im(int32_t val)
200 {
201 tcg_gen_movi_tl(cpu_T[1], val);
202 }
203
204 static inline void gen_op_movl_T1_imu(uint32_t val)
205 {
206 tcg_gen_movi_tl(cpu_T[1], val);
207 }
208
209 static inline void gen_op_movl_A0_im(uint32_t val)
210 {
211 tcg_gen_movi_tl(cpu_A0, val);
212 }
213
214 #ifdef TARGET_X86_64
215 static inline void gen_op_movq_A0_im(int64_t val)
216 {
217 tcg_gen_movi_tl(cpu_A0, val);
218 }
219 #endif
220
221 static inline void gen_movtl_T0_im(target_ulong val)
222 {
223 tcg_gen_movi_tl(cpu_T[0], val);
224 }
225
226 static inline void gen_movtl_T1_im(target_ulong val)
227 {
228 tcg_gen_movi_tl(cpu_T[1], val);
229 }
230
231 static inline void gen_op_andl_T0_ffff(void)
232 {
233 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 0xffff);
234 }
235
236 static inline void gen_op_andl_T0_im(uint32_t val)
237 {
238 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], val);
239 }
240
241 static inline void gen_op_movl_T0_T1(void)
242 {
243 tcg_gen_mov_tl(cpu_T[0], cpu_T[1]);
244 }
245
246 static inline void gen_op_andl_A0_ffff(void)
247 {
248 tcg_gen_andi_tl(cpu_A0, cpu_A0, 0xffff);
249 }
250
251 #ifdef TARGET_X86_64
252
253 #define NB_OP_SIZES 4
254
255 #else /* !TARGET_X86_64 */
256
257 #define NB_OP_SIZES 3
258
259 #endif /* !TARGET_X86_64 */
260
261 #if defined(HOST_WORDS_BIGENDIAN)
262 #define REG_B_OFFSET (sizeof(target_ulong) - 1)
263 #define REG_H_OFFSET (sizeof(target_ulong) - 2)
264 #define REG_W_OFFSET (sizeof(target_ulong) - 2)
265 #define REG_L_OFFSET (sizeof(target_ulong) - 4)
266 #define REG_LH_OFFSET (sizeof(target_ulong) - 8)
267 #else
268 #define REG_B_OFFSET 0
269 #define REG_H_OFFSET 1
270 #define REG_W_OFFSET 0
271 #define REG_L_OFFSET 0
272 #define REG_LH_OFFSET 4
273 #endif
274
275 static inline void gen_op_mov_reg_v(int ot, int reg, TCGv t0)
276 {
277 switch(ot) {
278 case OT_BYTE:
279 if (reg < 4 X86_64_DEF( || reg >= 8 || x86_64_hregs)) {
280 tcg_gen_deposit_tl(cpu_regs[reg], cpu_regs[reg], t0, 0, 8);
281 } else {
282 tcg_gen_deposit_tl(cpu_regs[reg - 4], cpu_regs[reg - 4], t0, 8, 8);
283 }
284 break;
285 case OT_WORD:
286 tcg_gen_deposit_tl(cpu_regs[reg], cpu_regs[reg], t0, 0, 16);
287 break;
288 default: /* XXX this shouldn't be reached; abort? */
289 case OT_LONG:
290 /* For x86_64, this sets the higher half of register to zero.
291 For i386, this is equivalent to a mov. */
292 tcg_gen_ext32u_tl(cpu_regs[reg], t0);
293 break;
294 #ifdef TARGET_X86_64
295 case OT_QUAD:
296 tcg_gen_mov_tl(cpu_regs[reg], t0);
297 break;
298 #endif
299 }
300 }
301
302 static inline void gen_op_mov_reg_T0(int ot, int reg)
303 {
304 gen_op_mov_reg_v(ot, reg, cpu_T[0]);
305 }
306
307 static inline void gen_op_mov_reg_T1(int ot, int reg)
308 {
309 gen_op_mov_reg_v(ot, reg, cpu_T[1]);
310 }
311
312 static inline void gen_op_mov_reg_A0(int size, int reg)
313 {
314 switch(size) {
315 case 0:
316 tcg_gen_deposit_tl(cpu_regs[reg], cpu_regs[reg], cpu_A0, 0, 16);
317 break;
318 default: /* XXX this shouldn't be reached; abort? */
319 case 1:
320 /* For x86_64, this sets the higher half of register to zero.
321 For i386, this is equivalent to a mov. */
322 tcg_gen_ext32u_tl(cpu_regs[reg], cpu_A0);
323 break;
324 #ifdef TARGET_X86_64
325 case 2:
326 tcg_gen_mov_tl(cpu_regs[reg], cpu_A0);
327 break;
328 #endif
329 }
330 }
331
332 static inline void gen_op_mov_v_reg(int ot, TCGv t0, int reg)
333 {
334 switch(ot) {
335 case OT_BYTE:
336 if (reg < 4 X86_64_DEF( || reg >= 8 || x86_64_hregs)) {
337 goto std_case;
338 } else {
339 tcg_gen_shri_tl(t0, cpu_regs[reg - 4], 8);
340 tcg_gen_ext8u_tl(t0, t0);
341 }
342 break;
343 default:
344 std_case:
345 tcg_gen_mov_tl(t0, cpu_regs[reg]);
346 break;
347 }
348 }
349
350 static inline void gen_op_mov_TN_reg(int ot, int t_index, int reg)
351 {
352 gen_op_mov_v_reg(ot, cpu_T[t_index], reg);
353 }
354
355 static inline void gen_op_movl_A0_reg(int reg)
356 {
357 tcg_gen_mov_tl(cpu_A0, cpu_regs[reg]);
358 }
359
360 static inline void gen_op_addl_A0_im(int32_t val)
361 {
362 tcg_gen_addi_tl(cpu_A0, cpu_A0, val);
363 #ifdef TARGET_X86_64
364 tcg_gen_andi_tl(cpu_A0, cpu_A0, 0xffffffff);
365 #endif
366 }
367
368 #ifdef TARGET_X86_64
369 static inline void gen_op_addq_A0_im(int64_t val)
370 {
371 tcg_gen_addi_tl(cpu_A0, cpu_A0, val);
372 }
373 #endif
374
375 static void gen_add_A0_im(DisasContext *s, int val)
376 {
377 #ifdef TARGET_X86_64
378 if (CODE64(s))
379 gen_op_addq_A0_im(val);
380 else
381 #endif
382 gen_op_addl_A0_im(val);
383 }
384
385 static inline void gen_op_addl_T0_T1(void)
386 {
387 tcg_gen_add_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
388 }
389
390 static inline void gen_op_jmp_T0(void)
391 {
392 tcg_gen_st_tl(cpu_T[0], cpu_env, offsetof(CPUState, eip));
393 }
394
395 static inline void gen_op_add_reg_im(int size, int reg, int32_t val)
396 {
397 switch(size) {
398 case 0:
399 tcg_gen_addi_tl(cpu_tmp0, cpu_regs[reg], val);
400 tcg_gen_deposit_tl(cpu_regs[reg], cpu_regs[reg], cpu_tmp0, 0, 16);
401 break;
402 case 1:
403 tcg_gen_addi_tl(cpu_tmp0, cpu_regs[reg], val);
404 /* For x86_64, this sets the higher half of register to zero.
405 For i386, this is equivalent to a nop. */
406 tcg_gen_ext32u_tl(cpu_tmp0, cpu_tmp0);
407 tcg_gen_mov_tl(cpu_regs[reg], cpu_tmp0);
408 break;
409 #ifdef TARGET_X86_64
410 case 2:
411 tcg_gen_addi_tl(cpu_regs[reg], cpu_regs[reg], val);
412 break;
413 #endif
414 }
415 }
416
417 static inline void gen_op_add_reg_T0(int size, int reg)
418 {
419 switch(size) {
420 case 0:
421 tcg_gen_add_tl(cpu_tmp0, cpu_regs[reg], cpu_T[0]);
422 tcg_gen_deposit_tl(cpu_regs[reg], cpu_regs[reg], cpu_tmp0, 0, 16);
423 break;
424 case 1:
425 tcg_gen_add_tl(cpu_tmp0, cpu_regs[reg], cpu_T[0]);
426 /* For x86_64, this sets the higher half of register to zero.
427 For i386, this is equivalent to a nop. */
428 tcg_gen_ext32u_tl(cpu_tmp0, cpu_tmp0);
429 tcg_gen_mov_tl(cpu_regs[reg], cpu_tmp0);
430 break;
431 #ifdef TARGET_X86_64
432 case 2:
433 tcg_gen_add_tl(cpu_regs[reg], cpu_regs[reg], cpu_T[0]);
434 break;
435 #endif
436 }
437 }
438
439 static inline void gen_op_set_cc_op(int32_t val)
440 {
441 tcg_gen_movi_i32(cpu_cc_op, val);
442 }
443
444 static inline void gen_op_addl_A0_reg_sN(int shift, int reg)
445 {
446 tcg_gen_mov_tl(cpu_tmp0, cpu_regs[reg]);
447 if (shift != 0)
448 tcg_gen_shli_tl(cpu_tmp0, cpu_tmp0, shift);
449 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_tmp0);
450 /* For x86_64, this sets the higher half of register to zero.
451 For i386, this is equivalent to a nop. */
452 tcg_gen_ext32u_tl(cpu_A0, cpu_A0);
453 }
454
455 static inline void gen_op_movl_A0_seg(int reg)
456 {
457 tcg_gen_ld32u_tl(cpu_A0, cpu_env, offsetof(CPUState, segs[reg].base) + REG_L_OFFSET);
458 }
459
460 static inline void gen_op_addl_A0_seg(int reg)
461 {
462 tcg_gen_ld_tl(cpu_tmp0, cpu_env, offsetof(CPUState, segs[reg].base));
463 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_tmp0);
464 #ifdef TARGET_X86_64
465 tcg_gen_andi_tl(cpu_A0, cpu_A0, 0xffffffff);
466 #endif
467 }
468
469 #ifdef TARGET_X86_64
470 static inline void gen_op_movq_A0_seg(int reg)
471 {
472 tcg_gen_ld_tl(cpu_A0, cpu_env, offsetof(CPUState, segs[reg].base));
473 }
474
475 static inline void gen_op_addq_A0_seg(int reg)
476 {
477 tcg_gen_ld_tl(cpu_tmp0, cpu_env, offsetof(CPUState, segs[reg].base));
478 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_tmp0);
479 }
480
481 static inline void gen_op_movq_A0_reg(int reg)
482 {
483 tcg_gen_mov_tl(cpu_A0, cpu_regs[reg]);
484 }
485
486 static inline void gen_op_addq_A0_reg_sN(int shift, int reg)
487 {
488 tcg_gen_mov_tl(cpu_tmp0, cpu_regs[reg]);
489 if (shift != 0)
490 tcg_gen_shli_tl(cpu_tmp0, cpu_tmp0, shift);
491 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_tmp0);
492 }
493 #endif
494
495 static inline void gen_op_lds_T0_A0(int idx)
496 {
497 int mem_index = (idx >> 2) - 1;
498 switch(idx & 3) {
499 case 0:
500 tcg_gen_qemu_ld8s(cpu_T[0], cpu_A0, mem_index);
501 break;
502 case 1:
503 tcg_gen_qemu_ld16s(cpu_T[0], cpu_A0, mem_index);
504 break;
505 default:
506 case 2:
507 tcg_gen_qemu_ld32s(cpu_T[0], cpu_A0, mem_index);
508 break;
509 }
510 }
511
512 static inline void gen_op_ld_v(int idx, TCGv t0, TCGv a0)
513 {
514 int mem_index = (idx >> 2) - 1;
515 switch(idx & 3) {
516 case 0:
517 tcg_gen_qemu_ld8u(t0, a0, mem_index);
518 break;
519 case 1:
520 tcg_gen_qemu_ld16u(t0, a0, mem_index);
521 break;
522 case 2:
523 tcg_gen_qemu_ld32u(t0, a0, mem_index);
524 break;
525 default:
526 case 3:
527 /* Should never happen on 32-bit targets. */
528 #ifdef TARGET_X86_64
529 tcg_gen_qemu_ld64(t0, a0, mem_index);
530 #endif
531 break;
532 }
533 }
534
535 /* XXX: always use ldu or lds */
536 static inline void gen_op_ld_T0_A0(int idx)
537 {
538 gen_op_ld_v(idx, cpu_T[0], cpu_A0);
539 }
540
541 static inline void gen_op_ldu_T0_A0(int idx)
542 {
543 gen_op_ld_v(idx, cpu_T[0], cpu_A0);
544 }
545
546 static inline void gen_op_ld_T1_A0(int idx)
547 {
548 gen_op_ld_v(idx, cpu_T[1], cpu_A0);
549 }
550
551 static inline void gen_op_st_v(int idx, TCGv t0, TCGv a0)
552 {
553 int mem_index = (idx >> 2) - 1;
554 switch(idx & 3) {
555 case 0:
556 tcg_gen_qemu_st8(t0, a0, mem_index);
557 break;
558 case 1:
559 tcg_gen_qemu_st16(t0, a0, mem_index);
560 break;
561 case 2:
562 tcg_gen_qemu_st32(t0, a0, mem_index);
563 break;
564 default:
565 case 3:
566 /* Should never happen on 32-bit targets. */
567 #ifdef TARGET_X86_64
568 tcg_gen_qemu_st64(t0, a0, mem_index);
569 #endif
570 break;
571 }
572 }
573
574 static inline void gen_op_st_T0_A0(int idx)
575 {
576 gen_op_st_v(idx, cpu_T[0], cpu_A0);
577 }
578
579 static inline void gen_op_st_T1_A0(int idx)
580 {
581 gen_op_st_v(idx, cpu_T[1], cpu_A0);
582 }
583
584 static inline void gen_jmp_im(target_ulong pc)
585 {
586 tcg_gen_movi_tl(cpu_tmp0, pc);
587 tcg_gen_st_tl(cpu_tmp0, cpu_env, offsetof(CPUState, eip));
588 }
589
590 static inline void gen_string_movl_A0_ESI(DisasContext *s)
591 {
592 int override;
593
594 override = s->override;
595 #ifdef TARGET_X86_64
596 if (s->aflag == 2) {
597 if (override >= 0) {
598 gen_op_movq_A0_seg(override);
599 gen_op_addq_A0_reg_sN(0, R_ESI);
600 } else {
601 gen_op_movq_A0_reg(R_ESI);
602 }
603 } else
604 #endif
605 if (s->aflag) {
606 /* 32 bit address */
607 if (s->addseg && override < 0)
608 override = R_DS;
609 if (override >= 0) {
610 gen_op_movl_A0_seg(override);
611 gen_op_addl_A0_reg_sN(0, R_ESI);
612 } else {
613 gen_op_movl_A0_reg(R_ESI);
614 }
615 } else {
616 /* 16 address, always override */
617 if (override < 0)
618 override = R_DS;
619 gen_op_movl_A0_reg(R_ESI);
620 gen_op_andl_A0_ffff();
621 gen_op_addl_A0_seg(override);
622 }
623 }
624
625 static inline void gen_string_movl_A0_EDI(DisasContext *s)
626 {
627 #ifdef TARGET_X86_64
628 if (s->aflag == 2) {
629 gen_op_movq_A0_reg(R_EDI);
630 } else
631 #endif
632 if (s->aflag) {
633 if (s->addseg) {
634 gen_op_movl_A0_seg(R_ES);
635 gen_op_addl_A0_reg_sN(0, R_EDI);
636 } else {
637 gen_op_movl_A0_reg(R_EDI);
638 }
639 } else {
640 gen_op_movl_A0_reg(R_EDI);
641 gen_op_andl_A0_ffff();
642 gen_op_addl_A0_seg(R_ES);
643 }
644 }
645
646 static inline void gen_op_movl_T0_Dshift(int ot)
647 {
648 tcg_gen_ld32s_tl(cpu_T[0], cpu_env, offsetof(CPUState, df));
649 tcg_gen_shli_tl(cpu_T[0], cpu_T[0], ot);
650 };
651
652 static void gen_extu(int ot, TCGv reg)
653 {
654 switch(ot) {
655 case OT_BYTE:
656 tcg_gen_ext8u_tl(reg, reg);
657 break;
658 case OT_WORD:
659 tcg_gen_ext16u_tl(reg, reg);
660 break;
661 case OT_LONG:
662 tcg_gen_ext32u_tl(reg, reg);
663 break;
664 default:
665 break;
666 }
667 }
668
669 static void gen_exts(int ot, TCGv reg)
670 {
671 switch(ot) {
672 case OT_BYTE:
673 tcg_gen_ext8s_tl(reg, reg);
674 break;
675 case OT_WORD:
676 tcg_gen_ext16s_tl(reg, reg);
677 break;
678 case OT_LONG:
679 tcg_gen_ext32s_tl(reg, reg);
680 break;
681 default:
682 break;
683 }
684 }
685
686 static inline void gen_op_jnz_ecx(int size, int label1)
687 {
688 tcg_gen_mov_tl(cpu_tmp0, cpu_regs[R_ECX]);
689 gen_extu(size + 1, cpu_tmp0);
690 tcg_gen_brcondi_tl(TCG_COND_NE, cpu_tmp0, 0, label1);
691 }
692
693 static inline void gen_op_jz_ecx(int size, int label1)
694 {
695 tcg_gen_mov_tl(cpu_tmp0, cpu_regs[R_ECX]);
696 gen_extu(size + 1, cpu_tmp0);
697 tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_tmp0, 0, label1);
698 }
699
700 static void gen_helper_in_func(int ot, TCGv v, TCGv_i32 n)
701 {
702 switch (ot) {
703 case 0: gen_helper_inb(v, n); break;
704 case 1: gen_helper_inw(v, n); break;
705 case 2: gen_helper_inl(v, n); break;
706 }
707
708 }
709
710 static void gen_helper_out_func(int ot, TCGv_i32 v, TCGv_i32 n)
711 {
712 switch (ot) {
713 case 0: gen_helper_outb(v, n); break;
714 case 1: gen_helper_outw(v, n); break;
715 case 2: gen_helper_outl(v, n); break;
716 }
717
718 }
719
720 static void gen_check_io(DisasContext *s, int ot, target_ulong cur_eip,
721 uint32_t svm_flags)
722 {
723 int state_saved;
724 target_ulong next_eip;
725
726 state_saved = 0;
727 if (s->pe && (s->cpl > s->iopl || s->vm86)) {
728 if (s->cc_op != CC_OP_DYNAMIC)
729 gen_op_set_cc_op(s->cc_op);
730 gen_jmp_im(cur_eip);
731 state_saved = 1;
732 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
733 switch (ot) {
734 case 0: gen_helper_check_iob(cpu_tmp2_i32); break;
735 case 1: gen_helper_check_iow(cpu_tmp2_i32); break;
736 case 2: gen_helper_check_iol(cpu_tmp2_i32); break;
737 }
738 }
739 if(s->flags & HF_SVMI_MASK) {
740 if (!state_saved) {
741 if (s->cc_op != CC_OP_DYNAMIC)
742 gen_op_set_cc_op(s->cc_op);
743 gen_jmp_im(cur_eip);
744 }
745 svm_flags |= (1 << (4 + ot));
746 next_eip = s->pc - s->cs_base;
747 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
748 gen_helper_svm_check_io(cpu_tmp2_i32, tcg_const_i32(svm_flags),
749 tcg_const_i32(next_eip - cur_eip));
750 }
751 }
752
753 static inline void gen_movs(DisasContext *s, int ot)
754 {
755 gen_string_movl_A0_ESI(s);
756 gen_op_ld_T0_A0(ot + s->mem_index);
757 gen_string_movl_A0_EDI(s);
758 gen_op_st_T0_A0(ot + s->mem_index);
759 gen_op_movl_T0_Dshift(ot);
760 gen_op_add_reg_T0(s->aflag, R_ESI);
761 gen_op_add_reg_T0(s->aflag, R_EDI);
762 }
763
764 static inline void gen_update_cc_op(DisasContext *s)
765 {
766 if (s->cc_op != CC_OP_DYNAMIC) {
767 gen_op_set_cc_op(s->cc_op);
768 s->cc_op = CC_OP_DYNAMIC;
769 }
770 }
771
772 static void gen_op_update1_cc(void)
773 {
774 tcg_gen_discard_tl(cpu_cc_src);
775 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
776 }
777
778 static void gen_op_update2_cc(void)
779 {
780 tcg_gen_mov_tl(cpu_cc_src, cpu_T[1]);
781 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
782 }
783
784 static inline void gen_op_cmpl_T0_T1_cc(void)
785 {
786 tcg_gen_mov_tl(cpu_cc_src, cpu_T[1]);
787 tcg_gen_sub_tl(cpu_cc_dst, cpu_T[0], cpu_T[1]);
788 }
789
790 static inline void gen_op_testl_T0_T1_cc(void)
791 {
792 tcg_gen_discard_tl(cpu_cc_src);
793 tcg_gen_and_tl(cpu_cc_dst, cpu_T[0], cpu_T[1]);
794 }
795
796 static void gen_op_update_neg_cc(void)
797 {
798 tcg_gen_neg_tl(cpu_cc_src, cpu_T[0]);
799 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
800 }
801
802 /* compute eflags.C to reg */
803 static void gen_compute_eflags_c(TCGv reg)
804 {
805 gen_helper_cc_compute_c(cpu_tmp2_i32, cpu_cc_op);
806 tcg_gen_extu_i32_tl(reg, cpu_tmp2_i32);
807 }
808
809 /* compute all eflags to cc_src */
810 static void gen_compute_eflags(TCGv reg)
811 {
812 gen_helper_cc_compute_all(cpu_tmp2_i32, cpu_cc_op);
813 tcg_gen_extu_i32_tl(reg, cpu_tmp2_i32);
814 }
815
816 static inline void gen_setcc_slow_T0(DisasContext *s, int jcc_op)
817 {
818 if (s->cc_op != CC_OP_DYNAMIC)
819 gen_op_set_cc_op(s->cc_op);
820 switch(jcc_op) {
821 case JCC_O:
822 gen_compute_eflags(cpu_T[0]);
823 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 11);
824 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
825 break;
826 case JCC_B:
827 gen_compute_eflags_c(cpu_T[0]);
828 break;
829 case JCC_Z:
830 gen_compute_eflags(cpu_T[0]);
831 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 6);
832 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
833 break;
834 case JCC_BE:
835 gen_compute_eflags(cpu_tmp0);
836 tcg_gen_shri_tl(cpu_T[0], cpu_tmp0, 6);
837 tcg_gen_or_tl(cpu_T[0], cpu_T[0], cpu_tmp0);
838 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
839 break;
840 case JCC_S:
841 gen_compute_eflags(cpu_T[0]);
842 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 7);
843 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
844 break;
845 case JCC_P:
846 gen_compute_eflags(cpu_T[0]);
847 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 2);
848 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
849 break;
850 case JCC_L:
851 gen_compute_eflags(cpu_tmp0);
852 tcg_gen_shri_tl(cpu_T[0], cpu_tmp0, 11); /* CC_O */
853 tcg_gen_shri_tl(cpu_tmp0, cpu_tmp0, 7); /* CC_S */
854 tcg_gen_xor_tl(cpu_T[0], cpu_T[0], cpu_tmp0);
855 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
856 break;
857 default:
858 case JCC_LE:
859 gen_compute_eflags(cpu_tmp0);
860 tcg_gen_shri_tl(cpu_T[0], cpu_tmp0, 11); /* CC_O */
861 tcg_gen_shri_tl(cpu_tmp4, cpu_tmp0, 7); /* CC_S */
862 tcg_gen_shri_tl(cpu_tmp0, cpu_tmp0, 6); /* CC_Z */
863 tcg_gen_xor_tl(cpu_T[0], cpu_T[0], cpu_tmp4);
864 tcg_gen_or_tl(cpu_T[0], cpu_T[0], cpu_tmp0);
865 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 1);
866 break;
867 }
868 }
869
870 /* return true if setcc_slow is not needed (WARNING: must be kept in
871 sync with gen_jcc1) */
872 static int is_fast_jcc_case(DisasContext *s, int b)
873 {
874 int jcc_op;
875 jcc_op = (b >> 1) & 7;
876 switch(s->cc_op) {
877 /* we optimize the cmp/jcc case */
878 case CC_OP_SUBB:
879 case CC_OP_SUBW:
880 case CC_OP_SUBL:
881 case CC_OP_SUBQ:
882 if (jcc_op == JCC_O || jcc_op == JCC_P)
883 goto slow_jcc;
884 break;
885
886 /* some jumps are easy to compute */
887 case CC_OP_ADDB:
888 case CC_OP_ADDW:
889 case CC_OP_ADDL:
890 case CC_OP_ADDQ:
891
892 case CC_OP_LOGICB:
893 case CC_OP_LOGICW:
894 case CC_OP_LOGICL:
895 case CC_OP_LOGICQ:
896
897 case CC_OP_INCB:
898 case CC_OP_INCW:
899 case CC_OP_INCL:
900 case CC_OP_INCQ:
901
902 case CC_OP_DECB:
903 case CC_OP_DECW:
904 case CC_OP_DECL:
905 case CC_OP_DECQ:
906
907 case CC_OP_SHLB:
908 case CC_OP_SHLW:
909 case CC_OP_SHLL:
910 case CC_OP_SHLQ:
911 if (jcc_op != JCC_Z && jcc_op != JCC_S)
912 goto slow_jcc;
913 break;
914 default:
915 slow_jcc:
916 return 0;
917 }
918 return 1;
919 }
920
921 /* generate a conditional jump to label 'l1' according to jump opcode
922 value 'b'. In the fast case, T0 is guaranted not to be used. */
923 static inline void gen_jcc1(DisasContext *s, int cc_op, int b, int l1)
924 {
925 int inv, jcc_op, size, cond;
926 TCGv t0;
927
928 inv = b & 1;
929 jcc_op = (b >> 1) & 7;
930
931 switch(cc_op) {
932 /* we optimize the cmp/jcc case */
933 case CC_OP_SUBB:
934 case CC_OP_SUBW:
935 case CC_OP_SUBL:
936 case CC_OP_SUBQ:
937
938 size = cc_op - CC_OP_SUBB;
939 switch(jcc_op) {
940 case JCC_Z:
941 fast_jcc_z:
942 switch(size) {
943 case 0:
944 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_dst, 0xff);
945 t0 = cpu_tmp0;
946 break;
947 case 1:
948 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_dst, 0xffff);
949 t0 = cpu_tmp0;
950 break;
951 #ifdef TARGET_X86_64
952 case 2:
953 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_dst, 0xffffffff);
954 t0 = cpu_tmp0;
955 break;
956 #endif
957 default:
958 t0 = cpu_cc_dst;
959 break;
960 }
961 tcg_gen_brcondi_tl(inv ? TCG_COND_NE : TCG_COND_EQ, t0, 0, l1);
962 break;
963 case JCC_S:
964 fast_jcc_s:
965 switch(size) {
966 case 0:
967 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_dst, 0x80);
968 tcg_gen_brcondi_tl(inv ? TCG_COND_EQ : TCG_COND_NE, cpu_tmp0,
969 0, l1);
970 break;
971 case 1:
972 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_dst, 0x8000);
973 tcg_gen_brcondi_tl(inv ? TCG_COND_EQ : TCG_COND_NE, cpu_tmp0,
974 0, l1);
975 break;
976 #ifdef TARGET_X86_64
977 case 2:
978 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_dst, 0x80000000);
979 tcg_gen_brcondi_tl(inv ? TCG_COND_EQ : TCG_COND_NE, cpu_tmp0,
980 0, l1);
981 break;
982 #endif
983 default:
984 tcg_gen_brcondi_tl(inv ? TCG_COND_GE : TCG_COND_LT, cpu_cc_dst,
985 0, l1);
986 break;
987 }
988 break;
989
990 case JCC_B:
991 cond = inv ? TCG_COND_GEU : TCG_COND_LTU;
992 goto fast_jcc_b;
993 case JCC_BE:
994 cond = inv ? TCG_COND_GTU : TCG_COND_LEU;
995 fast_jcc_b:
996 tcg_gen_add_tl(cpu_tmp4, cpu_cc_dst, cpu_cc_src);
997 switch(size) {
998 case 0:
999 t0 = cpu_tmp0;
1000 tcg_gen_andi_tl(cpu_tmp4, cpu_tmp4, 0xff);
1001 tcg_gen_andi_tl(t0, cpu_cc_src, 0xff);
1002 break;
1003 case 1:
1004 t0 = cpu_tmp0;
1005 tcg_gen_andi_tl(cpu_tmp4, cpu_tmp4, 0xffff);
1006 tcg_gen_andi_tl(t0, cpu_cc_src, 0xffff);
1007 break;
1008 #ifdef TARGET_X86_64
1009 case 2:
1010 t0 = cpu_tmp0;
1011 tcg_gen_andi_tl(cpu_tmp4, cpu_tmp4, 0xffffffff);
1012 tcg_gen_andi_tl(t0, cpu_cc_src, 0xffffffff);
1013 break;
1014 #endif
1015 default:
1016 t0 = cpu_cc_src;
1017 break;
1018 }
1019 tcg_gen_brcond_tl(cond, cpu_tmp4, t0, l1);
1020 break;
1021
1022 case JCC_L:
1023 cond = inv ? TCG_COND_GE : TCG_COND_LT;
1024 goto fast_jcc_l;
1025 case JCC_LE:
1026 cond = inv ? TCG_COND_GT : TCG_COND_LE;
1027 fast_jcc_l:
1028 tcg_gen_add_tl(cpu_tmp4, cpu_cc_dst, cpu_cc_src);
1029 switch(size) {
1030 case 0:
1031 t0 = cpu_tmp0;
1032 tcg_gen_ext8s_tl(cpu_tmp4, cpu_tmp4);
1033 tcg_gen_ext8s_tl(t0, cpu_cc_src);
1034 break;
1035 case 1:
1036 t0 = cpu_tmp0;
1037 tcg_gen_ext16s_tl(cpu_tmp4, cpu_tmp4);
1038 tcg_gen_ext16s_tl(t0, cpu_cc_src);
1039 break;
1040 #ifdef TARGET_X86_64
1041 case 2:
1042 t0 = cpu_tmp0;
1043 tcg_gen_ext32s_tl(cpu_tmp4, cpu_tmp4);
1044 tcg_gen_ext32s_tl(t0, cpu_cc_src);
1045 break;
1046 #endif
1047 default:
1048 t0 = cpu_cc_src;
1049 break;
1050 }
1051 tcg_gen_brcond_tl(cond, cpu_tmp4, t0, l1);
1052 break;
1053
1054 default:
1055 goto slow_jcc;
1056 }
1057 break;
1058
1059 /* some jumps are easy to compute */
1060 case CC_OP_ADDB:
1061 case CC_OP_ADDW:
1062 case CC_OP_ADDL:
1063 case CC_OP_ADDQ:
1064
1065 case CC_OP_ADCB:
1066 case CC_OP_ADCW:
1067 case CC_OP_ADCL:
1068 case CC_OP_ADCQ:
1069
1070 case CC_OP_SBBB:
1071 case CC_OP_SBBW:
1072 case CC_OP_SBBL:
1073 case CC_OP_SBBQ:
1074
1075 case CC_OP_LOGICB:
1076 case CC_OP_LOGICW:
1077 case CC_OP_LOGICL:
1078 case CC_OP_LOGICQ:
1079
1080 case CC_OP_INCB:
1081 case CC_OP_INCW:
1082 case CC_OP_INCL:
1083 case CC_OP_INCQ:
1084
1085 case CC_OP_DECB:
1086 case CC_OP_DECW:
1087 case CC_OP_DECL:
1088 case CC_OP_DECQ:
1089
1090 case CC_OP_SHLB:
1091 case CC_OP_SHLW:
1092 case CC_OP_SHLL:
1093 case CC_OP_SHLQ:
1094
1095 case CC_OP_SARB:
1096 case CC_OP_SARW:
1097 case CC_OP_SARL:
1098 case CC_OP_SARQ:
1099 switch(jcc_op) {
1100 case JCC_Z:
1101 size = (cc_op - CC_OP_ADDB) & 3;
1102 goto fast_jcc_z;
1103 case JCC_S:
1104 size = (cc_op - CC_OP_ADDB) & 3;
1105 goto fast_jcc_s;
1106 default:
1107 goto slow_jcc;
1108 }
1109 break;
1110 default:
1111 slow_jcc:
1112 gen_setcc_slow_T0(s, jcc_op);
1113 tcg_gen_brcondi_tl(inv ? TCG_COND_EQ : TCG_COND_NE,
1114 cpu_T[0], 0, l1);
1115 break;
1116 }
1117 }
1118
1119 /* XXX: does not work with gdbstub "ice" single step - not a
1120 serious problem */
1121 static int gen_jz_ecx_string(DisasContext *s, target_ulong next_eip)
1122 {
1123 int l1, l2;
1124
1125 l1 = gen_new_label();
1126 l2 = gen_new_label();
1127 gen_op_jnz_ecx(s->aflag, l1);
1128 gen_set_label(l2);
1129 gen_jmp_tb(s, next_eip, 1);
1130 gen_set_label(l1);
1131 return l2;
1132 }
1133
1134 static inline void gen_stos(DisasContext *s, int ot)
1135 {
1136 gen_op_mov_TN_reg(OT_LONG, 0, R_EAX);
1137 gen_string_movl_A0_EDI(s);
1138 gen_op_st_T0_A0(ot + s->mem_index);
1139 gen_op_movl_T0_Dshift(ot);
1140 gen_op_add_reg_T0(s->aflag, R_EDI);
1141 }
1142
1143 static inline void gen_lods(DisasContext *s, int ot)
1144 {
1145 gen_string_movl_A0_ESI(s);
1146 gen_op_ld_T0_A0(ot + s->mem_index);
1147 gen_op_mov_reg_T0(ot, R_EAX);
1148 gen_op_movl_T0_Dshift(ot);
1149 gen_op_add_reg_T0(s->aflag, R_ESI);
1150 }
1151
1152 static inline void gen_scas(DisasContext *s, int ot)
1153 {
1154 gen_op_mov_TN_reg(OT_LONG, 0, R_EAX);
1155 gen_string_movl_A0_EDI(s);
1156 gen_op_ld_T1_A0(ot + s->mem_index);
1157 gen_op_cmpl_T0_T1_cc();
1158 gen_op_movl_T0_Dshift(ot);
1159 gen_op_add_reg_T0(s->aflag, R_EDI);
1160 }
1161
1162 static inline void gen_cmps(DisasContext *s, int ot)
1163 {
1164 gen_string_movl_A0_ESI(s);
1165 gen_op_ld_T0_A0(ot + s->mem_index);
1166 gen_string_movl_A0_EDI(s);
1167 gen_op_ld_T1_A0(ot + s->mem_index);
1168 gen_op_cmpl_T0_T1_cc();
1169 gen_op_movl_T0_Dshift(ot);
1170 gen_op_add_reg_T0(s->aflag, R_ESI);
1171 gen_op_add_reg_T0(s->aflag, R_EDI);
1172 }
1173
1174 static inline void gen_ins(DisasContext *s, int ot)
1175 {
1176 if (use_icount)
1177 gen_io_start();
1178 gen_string_movl_A0_EDI(s);
1179 /* Note: we must do this dummy write first to be restartable in
1180 case of page fault. */
1181 gen_op_movl_T0_0();
1182 gen_op_st_T0_A0(ot + s->mem_index);
1183 gen_op_mov_TN_reg(OT_WORD, 1, R_EDX);
1184 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[1]);
1185 tcg_gen_andi_i32(cpu_tmp2_i32, cpu_tmp2_i32, 0xffff);
1186 gen_helper_in_func(ot, cpu_T[0], cpu_tmp2_i32);
1187 gen_op_st_T0_A0(ot + s->mem_index);
1188 gen_op_movl_T0_Dshift(ot);
1189 gen_op_add_reg_T0(s->aflag, R_EDI);
1190 if (use_icount)
1191 gen_io_end();
1192 }
1193
1194 static inline void gen_outs(DisasContext *s, int ot)
1195 {
1196 if (use_icount)
1197 gen_io_start();
1198 gen_string_movl_A0_ESI(s);
1199 gen_op_ld_T0_A0(ot + s->mem_index);
1200
1201 gen_op_mov_TN_reg(OT_WORD, 1, R_EDX);
1202 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[1]);
1203 tcg_gen_andi_i32(cpu_tmp2_i32, cpu_tmp2_i32, 0xffff);
1204 tcg_gen_trunc_tl_i32(cpu_tmp3_i32, cpu_T[0]);
1205 gen_helper_out_func(ot, cpu_tmp2_i32, cpu_tmp3_i32);
1206
1207 gen_op_movl_T0_Dshift(ot);
1208 gen_op_add_reg_T0(s->aflag, R_ESI);
1209 if (use_icount)
1210 gen_io_end();
1211 }
1212
1213 /* same method as Valgrind : we generate jumps to current or next
1214 instruction */
1215 #define GEN_REPZ(op) \
1216 static inline void gen_repz_ ## op(DisasContext *s, int ot, \
1217 target_ulong cur_eip, target_ulong next_eip) \
1218 { \
1219 int l2;\
1220 gen_update_cc_op(s); \
1221 l2 = gen_jz_ecx_string(s, next_eip); \
1222 gen_ ## op(s, ot); \
1223 gen_op_add_reg_im(s->aflag, R_ECX, -1); \
1224 /* a loop would cause two single step exceptions if ECX = 1 \
1225 before rep string_insn */ \
1226 if (!s->jmp_opt) \
1227 gen_op_jz_ecx(s->aflag, l2); \
1228 gen_jmp(s, cur_eip); \
1229 }
1230
1231 #define GEN_REPZ2(op) \
1232 static inline void gen_repz_ ## op(DisasContext *s, int ot, \
1233 target_ulong cur_eip, \
1234 target_ulong next_eip, \
1235 int nz) \
1236 { \
1237 int l2;\
1238 gen_update_cc_op(s); \
1239 l2 = gen_jz_ecx_string(s, next_eip); \
1240 gen_ ## op(s, ot); \
1241 gen_op_add_reg_im(s->aflag, R_ECX, -1); \
1242 gen_op_set_cc_op(CC_OP_SUBB + ot); \
1243 gen_jcc1(s, CC_OP_SUBB + ot, (JCC_Z << 1) | (nz ^ 1), l2); \
1244 if (!s->jmp_opt) \
1245 gen_op_jz_ecx(s->aflag, l2); \
1246 gen_jmp(s, cur_eip); \
1247 }
1248
1249 GEN_REPZ(movs)
1250 GEN_REPZ(stos)
1251 GEN_REPZ(lods)
1252 GEN_REPZ(ins)
1253 GEN_REPZ(outs)
1254 GEN_REPZ2(scas)
1255 GEN_REPZ2(cmps)
1256
1257 static void gen_helper_fp_arith_ST0_FT0(int op)
1258 {
1259 switch (op) {
1260 case 0: gen_helper_fadd_ST0_FT0(); break;
1261 case 1: gen_helper_fmul_ST0_FT0(); break;
1262 case 2: gen_helper_fcom_ST0_FT0(); break;
1263 case 3: gen_helper_fcom_ST0_FT0(); break;
1264 case 4: gen_helper_fsub_ST0_FT0(); break;
1265 case 5: gen_helper_fsubr_ST0_FT0(); break;
1266 case 6: gen_helper_fdiv_ST0_FT0(); break;
1267 case 7: gen_helper_fdivr_ST0_FT0(); break;
1268 }
1269 }
1270
1271 /* NOTE the exception in "r" op ordering */
1272 static void gen_helper_fp_arith_STN_ST0(int op, int opreg)
1273 {
1274 TCGv_i32 tmp = tcg_const_i32(opreg);
1275 switch (op) {
1276 case 0: gen_helper_fadd_STN_ST0(tmp); break;
1277 case 1: gen_helper_fmul_STN_ST0(tmp); break;
1278 case 4: gen_helper_fsubr_STN_ST0(tmp); break;
1279 case 5: gen_helper_fsub_STN_ST0(tmp); break;
1280 case 6: gen_helper_fdivr_STN_ST0(tmp); break;
1281 case 7: gen_helper_fdiv_STN_ST0(tmp); break;
1282 }
1283 }
1284
1285 /* if d == OR_TMP0, it means memory operand (address in A0) */
1286 static void gen_op(DisasContext *s1, int op, int ot, int d)
1287 {
1288 if (d != OR_TMP0) {
1289 gen_op_mov_TN_reg(ot, 0, d);
1290 } else {
1291 gen_op_ld_T0_A0(ot + s1->mem_index);
1292 }
1293 switch(op) {
1294 case OP_ADCL:
1295 if (s1->cc_op != CC_OP_DYNAMIC)
1296 gen_op_set_cc_op(s1->cc_op);
1297 gen_compute_eflags_c(cpu_tmp4);
1298 tcg_gen_add_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1299 tcg_gen_add_tl(cpu_T[0], cpu_T[0], cpu_tmp4);
1300 if (d != OR_TMP0)
1301 gen_op_mov_reg_T0(ot, d);
1302 else
1303 gen_op_st_T0_A0(ot + s1->mem_index);
1304 tcg_gen_mov_tl(cpu_cc_src, cpu_T[1]);
1305 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
1306 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_tmp4);
1307 tcg_gen_shli_i32(cpu_tmp2_i32, cpu_tmp2_i32, 2);
1308 tcg_gen_addi_i32(cpu_cc_op, cpu_tmp2_i32, CC_OP_ADDB + ot);
1309 s1->cc_op = CC_OP_DYNAMIC;
1310 break;
1311 case OP_SBBL:
1312 if (s1->cc_op != CC_OP_DYNAMIC)
1313 gen_op_set_cc_op(s1->cc_op);
1314 gen_compute_eflags_c(cpu_tmp4);
1315 tcg_gen_sub_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1316 tcg_gen_sub_tl(cpu_T[0], cpu_T[0], cpu_tmp4);
1317 if (d != OR_TMP0)
1318 gen_op_mov_reg_T0(ot, d);
1319 else
1320 gen_op_st_T0_A0(ot + s1->mem_index);
1321 tcg_gen_mov_tl(cpu_cc_src, cpu_T[1]);
1322 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
1323 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_tmp4);
1324 tcg_gen_shli_i32(cpu_tmp2_i32, cpu_tmp2_i32, 2);
1325 tcg_gen_addi_i32(cpu_cc_op, cpu_tmp2_i32, CC_OP_SUBB + ot);
1326 s1->cc_op = CC_OP_DYNAMIC;
1327 break;
1328 case OP_ADDL:
1329 gen_op_addl_T0_T1();
1330 if (d != OR_TMP0)
1331 gen_op_mov_reg_T0(ot, d);
1332 else
1333 gen_op_st_T0_A0(ot + s1->mem_index);
1334 gen_op_update2_cc();
1335 s1->cc_op = CC_OP_ADDB + ot;
1336 break;
1337 case OP_SUBL:
1338 tcg_gen_sub_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1339 if (d != OR_TMP0)
1340 gen_op_mov_reg_T0(ot, d);
1341 else
1342 gen_op_st_T0_A0(ot + s1->mem_index);
1343 gen_op_update2_cc();
1344 s1->cc_op = CC_OP_SUBB + ot;
1345 break;
1346 default:
1347 case OP_ANDL:
1348 tcg_gen_and_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1349 if (d != OR_TMP0)
1350 gen_op_mov_reg_T0(ot, d);
1351 else
1352 gen_op_st_T0_A0(ot + s1->mem_index);
1353 gen_op_update1_cc();
1354 s1->cc_op = CC_OP_LOGICB + ot;
1355 break;
1356 case OP_ORL:
1357 tcg_gen_or_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1358 if (d != OR_TMP0)
1359 gen_op_mov_reg_T0(ot, d);
1360 else
1361 gen_op_st_T0_A0(ot + s1->mem_index);
1362 gen_op_update1_cc();
1363 s1->cc_op = CC_OP_LOGICB + ot;
1364 break;
1365 case OP_XORL:
1366 tcg_gen_xor_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1367 if (d != OR_TMP0)
1368 gen_op_mov_reg_T0(ot, d);
1369 else
1370 gen_op_st_T0_A0(ot + s1->mem_index);
1371 gen_op_update1_cc();
1372 s1->cc_op = CC_OP_LOGICB + ot;
1373 break;
1374 case OP_CMPL:
1375 gen_op_cmpl_T0_T1_cc();
1376 s1->cc_op = CC_OP_SUBB + ot;
1377 break;
1378 }
1379 }
1380
1381 /* if d == OR_TMP0, it means memory operand (address in A0) */
1382 static void gen_inc(DisasContext *s1, int ot, int d, int c)
1383 {
1384 if (d != OR_TMP0)
1385 gen_op_mov_TN_reg(ot, 0, d);
1386 else
1387 gen_op_ld_T0_A0(ot + s1->mem_index);
1388 if (s1->cc_op != CC_OP_DYNAMIC)
1389 gen_op_set_cc_op(s1->cc_op);
1390 if (c > 0) {
1391 tcg_gen_addi_tl(cpu_T[0], cpu_T[0], 1);
1392 s1->cc_op = CC_OP_INCB + ot;
1393 } else {
1394 tcg_gen_addi_tl(cpu_T[0], cpu_T[0], -1);
1395 s1->cc_op = CC_OP_DECB + ot;
1396 }
1397 if (d != OR_TMP0)
1398 gen_op_mov_reg_T0(ot, d);
1399 else
1400 gen_op_st_T0_A0(ot + s1->mem_index);
1401 gen_compute_eflags_c(cpu_cc_src);
1402 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
1403 }
1404
1405 static void gen_shift_rm_T1(DisasContext *s, int ot, int op1,
1406 int is_right, int is_arith)
1407 {
1408 target_ulong mask;
1409 int shift_label;
1410 TCGv t0, t1;
1411
1412 if (ot == OT_QUAD)
1413 mask = 0x3f;
1414 else
1415 mask = 0x1f;
1416
1417 /* load */
1418 if (op1 == OR_TMP0)
1419 gen_op_ld_T0_A0(ot + s->mem_index);
1420 else
1421 gen_op_mov_TN_reg(ot, 0, op1);
1422
1423 tcg_gen_andi_tl(cpu_T[1], cpu_T[1], mask);
1424
1425 tcg_gen_addi_tl(cpu_tmp5, cpu_T[1], -1);
1426
1427 if (is_right) {
1428 if (is_arith) {
1429 gen_exts(ot, cpu_T[0]);
1430 tcg_gen_sar_tl(cpu_T3, cpu_T[0], cpu_tmp5);
1431 tcg_gen_sar_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1432 } else {
1433 gen_extu(ot, cpu_T[0]);
1434 tcg_gen_shr_tl(cpu_T3, cpu_T[0], cpu_tmp5);
1435 tcg_gen_shr_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1436 }
1437 } else {
1438 tcg_gen_shl_tl(cpu_T3, cpu_T[0], cpu_tmp5);
1439 tcg_gen_shl_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
1440 }
1441
1442 /* store */
1443 if (op1 == OR_TMP0)
1444 gen_op_st_T0_A0(ot + s->mem_index);
1445 else
1446 gen_op_mov_reg_T0(ot, op1);
1447
1448 /* update eflags if non zero shift */
1449 if (s->cc_op != CC_OP_DYNAMIC)
1450 gen_op_set_cc_op(s->cc_op);
1451
1452 /* XXX: inefficient */
1453 t0 = tcg_temp_local_new();
1454 t1 = tcg_temp_local_new();
1455
1456 tcg_gen_mov_tl(t0, cpu_T[0]);
1457 tcg_gen_mov_tl(t1, cpu_T3);
1458
1459 shift_label = gen_new_label();
1460 tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_T[1], 0, shift_label);
1461
1462 tcg_gen_mov_tl(cpu_cc_src, t1);
1463 tcg_gen_mov_tl(cpu_cc_dst, t0);
1464 if (is_right)
1465 tcg_gen_movi_i32(cpu_cc_op, CC_OP_SARB + ot);
1466 else
1467 tcg_gen_movi_i32(cpu_cc_op, CC_OP_SHLB + ot);
1468
1469 gen_set_label(shift_label);
1470 s->cc_op = CC_OP_DYNAMIC; /* cannot predict flags after */
1471
1472 tcg_temp_free(t0);
1473 tcg_temp_free(t1);
1474 }
1475
1476 static void gen_shift_rm_im(DisasContext *s, int ot, int op1, int op2,
1477 int is_right, int is_arith)
1478 {
1479 int mask;
1480
1481 if (ot == OT_QUAD)
1482 mask = 0x3f;
1483 else
1484 mask = 0x1f;
1485
1486 /* load */
1487 if (op1 == OR_TMP0)
1488 gen_op_ld_T0_A0(ot + s->mem_index);
1489 else
1490 gen_op_mov_TN_reg(ot, 0, op1);
1491
1492 op2 &= mask;
1493 if (op2 != 0) {
1494 if (is_right) {
1495 if (is_arith) {
1496 gen_exts(ot, cpu_T[0]);
1497 tcg_gen_sari_tl(cpu_tmp4, cpu_T[0], op2 - 1);
1498 tcg_gen_sari_tl(cpu_T[0], cpu_T[0], op2);
1499 } else {
1500 gen_extu(ot, cpu_T[0]);
1501 tcg_gen_shri_tl(cpu_tmp4, cpu_T[0], op2 - 1);
1502 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], op2);
1503 }
1504 } else {
1505 tcg_gen_shli_tl(cpu_tmp4, cpu_T[0], op2 - 1);
1506 tcg_gen_shli_tl(cpu_T[0], cpu_T[0], op2);
1507 }
1508 }
1509
1510 /* store */
1511 if (op1 == OR_TMP0)
1512 gen_op_st_T0_A0(ot + s->mem_index);
1513 else
1514 gen_op_mov_reg_T0(ot, op1);
1515
1516 /* update eflags if non zero shift */
1517 if (op2 != 0) {
1518 tcg_gen_mov_tl(cpu_cc_src, cpu_tmp4);
1519 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
1520 if (is_right)
1521 s->cc_op = CC_OP_SARB + ot;
1522 else
1523 s->cc_op = CC_OP_SHLB + ot;
1524 }
1525 }
1526
1527 static inline void tcg_gen_lshift(TCGv ret, TCGv arg1, target_long arg2)
1528 {
1529 if (arg2 >= 0)
1530 tcg_gen_shli_tl(ret, arg1, arg2);
1531 else
1532 tcg_gen_shri_tl(ret, arg1, -arg2);
1533 }
1534
1535 static void gen_rot_rm_T1(DisasContext *s, int ot, int op1,
1536 int is_right)
1537 {
1538 target_ulong mask;
1539 int label1, label2, data_bits;
1540 TCGv t0, t1, t2, a0;
1541
1542 /* XXX: inefficient, but we must use local temps */
1543 t0 = tcg_temp_local_new();
1544 t1 = tcg_temp_local_new();
1545 t2 = tcg_temp_local_new();
1546 a0 = tcg_temp_local_new();
1547
1548 if (ot == OT_QUAD)
1549 mask = 0x3f;
1550 else
1551 mask = 0x1f;
1552
1553 /* load */
1554 if (op1 == OR_TMP0) {
1555 tcg_gen_mov_tl(a0, cpu_A0);
1556 gen_op_ld_v(ot + s->mem_index, t0, a0);
1557 } else {
1558 gen_op_mov_v_reg(ot, t0, op1);
1559 }
1560
1561 tcg_gen_mov_tl(t1, cpu_T[1]);
1562
1563 tcg_gen_andi_tl(t1, t1, mask);
1564
1565 /* Must test zero case to avoid using undefined behaviour in TCG
1566 shifts. */
1567 label1 = gen_new_label();
1568 tcg_gen_brcondi_tl(TCG_COND_EQ, t1, 0, label1);
1569
1570 if (ot <= OT_WORD)
1571 tcg_gen_andi_tl(cpu_tmp0, t1, (1 << (3 + ot)) - 1);
1572 else
1573 tcg_gen_mov_tl(cpu_tmp0, t1);
1574
1575 gen_extu(ot, t0);
1576 tcg_gen_mov_tl(t2, t0);
1577
1578 data_bits = 8 << ot;
1579 /* XXX: rely on behaviour of shifts when operand 2 overflows (XXX:
1580 fix TCG definition) */
1581 if (is_right) {
1582 tcg_gen_shr_tl(cpu_tmp4, t0, cpu_tmp0);
1583 tcg_gen_subfi_tl(cpu_tmp0, data_bits, cpu_tmp0);
1584 tcg_gen_shl_tl(t0, t0, cpu_tmp0);
1585 } else {
1586 tcg_gen_shl_tl(cpu_tmp4, t0, cpu_tmp0);
1587 tcg_gen_subfi_tl(cpu_tmp0, data_bits, cpu_tmp0);
1588 tcg_gen_shr_tl(t0, t0, cpu_tmp0);
1589 }
1590 tcg_gen_or_tl(t0, t0, cpu_tmp4);
1591
1592 gen_set_label(label1);
1593 /* store */
1594 if (op1 == OR_TMP0) {
1595 gen_op_st_v(ot + s->mem_index, t0, a0);
1596 } else {
1597 gen_op_mov_reg_v(ot, op1, t0);
1598 }
1599
1600 /* update eflags */
1601 if (s->cc_op != CC_OP_DYNAMIC)
1602 gen_op_set_cc_op(s->cc_op);
1603
1604 label2 = gen_new_label();
1605 tcg_gen_brcondi_tl(TCG_COND_EQ, t1, 0, label2);
1606
1607 gen_compute_eflags(cpu_cc_src);
1608 tcg_gen_andi_tl(cpu_cc_src, cpu_cc_src, ~(CC_O | CC_C));
1609 tcg_gen_xor_tl(cpu_tmp0, t2, t0);
1610 tcg_gen_lshift(cpu_tmp0, cpu_tmp0, 11 - (data_bits - 1));
1611 tcg_gen_andi_tl(cpu_tmp0, cpu_tmp0, CC_O);
1612 tcg_gen_or_tl(cpu_cc_src, cpu_cc_src, cpu_tmp0);
1613 if (is_right) {
1614 tcg_gen_shri_tl(t0, t0, data_bits - 1);
1615 }
1616 tcg_gen_andi_tl(t0, t0, CC_C);
1617 tcg_gen_or_tl(cpu_cc_src, cpu_cc_src, t0);
1618
1619 tcg_gen_discard_tl(cpu_cc_dst);
1620 tcg_gen_movi_i32(cpu_cc_op, CC_OP_EFLAGS);
1621
1622 gen_set_label(label2);
1623 s->cc_op = CC_OP_DYNAMIC; /* cannot predict flags after */
1624
1625 tcg_temp_free(t0);
1626 tcg_temp_free(t1);
1627 tcg_temp_free(t2);
1628 tcg_temp_free(a0);
1629 }
1630
1631 static void gen_rot_rm_im(DisasContext *s, int ot, int op1, int op2,
1632 int is_right)
1633 {
1634 int mask;
1635 int data_bits;
1636 TCGv t0, t1, a0;
1637
1638 /* XXX: inefficient, but we must use local temps */
1639 t0 = tcg_temp_local_new();
1640 t1 = tcg_temp_local_new();
1641 a0 = tcg_temp_local_new();
1642
1643 if (ot == OT_QUAD)
1644 mask = 0x3f;
1645 else
1646 mask = 0x1f;
1647
1648 /* load */
1649 if (op1 == OR_TMP0) {
1650 tcg_gen_mov_tl(a0, cpu_A0);
1651 gen_op_ld_v(ot + s->mem_index, t0, a0);
1652 } else {
1653 gen_op_mov_v_reg(ot, t0, op1);
1654 }
1655
1656 gen_extu(ot, t0);
1657 tcg_gen_mov_tl(t1, t0);
1658
1659 op2 &= mask;
1660 data_bits = 8 << ot;
1661 if (op2 != 0) {
1662 int shift = op2 & ((1 << (3 + ot)) - 1);
1663 if (is_right) {
1664 tcg_gen_shri_tl(cpu_tmp4, t0, shift);
1665 tcg_gen_shli_tl(t0, t0, data_bits - shift);
1666 }
1667 else {
1668 tcg_gen_shli_tl(cpu_tmp4, t0, shift);
1669 tcg_gen_shri_tl(t0, t0, data_bits - shift);
1670 }
1671 tcg_gen_or_tl(t0, t0, cpu_tmp4);
1672 }
1673
1674 /* store */
1675 if (op1 == OR_TMP0) {
1676 gen_op_st_v(ot + s->mem_index, t0, a0);
1677 } else {
1678 gen_op_mov_reg_v(ot, op1, t0);
1679 }
1680
1681 if (op2 != 0) {
1682 /* update eflags */
1683 if (s->cc_op != CC_OP_DYNAMIC)
1684 gen_op_set_cc_op(s->cc_op);
1685
1686 gen_compute_eflags(cpu_cc_src);
1687 tcg_gen_andi_tl(cpu_cc_src, cpu_cc_src, ~(CC_O | CC_C));
1688 tcg_gen_xor_tl(cpu_tmp0, t1, t0);
1689 tcg_gen_lshift(cpu_tmp0, cpu_tmp0, 11 - (data_bits - 1));
1690 tcg_gen_andi_tl(cpu_tmp0, cpu_tmp0, CC_O);
1691 tcg_gen_or_tl(cpu_cc_src, cpu_cc_src, cpu_tmp0);
1692 if (is_right) {
1693 tcg_gen_shri_tl(t0, t0, data_bits - 1);
1694 }
1695 tcg_gen_andi_tl(t0, t0, CC_C);
1696 tcg_gen_or_tl(cpu_cc_src, cpu_cc_src, t0);
1697
1698 tcg_gen_discard_tl(cpu_cc_dst);
1699 tcg_gen_movi_i32(cpu_cc_op, CC_OP_EFLAGS);
1700 s->cc_op = CC_OP_EFLAGS;
1701 }
1702
1703 tcg_temp_free(t0);
1704 tcg_temp_free(t1);
1705 tcg_temp_free(a0);
1706 }
1707
1708 /* XXX: add faster immediate = 1 case */
1709 static void gen_rotc_rm_T1(DisasContext *s, int ot, int op1,
1710 int is_right)
1711 {
1712 int label1;
1713
1714 if (s->cc_op != CC_OP_DYNAMIC)
1715 gen_op_set_cc_op(s->cc_op);
1716
1717 /* load */
1718 if (op1 == OR_TMP0)
1719 gen_op_ld_T0_A0(ot + s->mem_index);
1720 else
1721 gen_op_mov_TN_reg(ot, 0, op1);
1722
1723 if (is_right) {
1724 switch (ot) {
1725 case 0: gen_helper_rcrb(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1726 case 1: gen_helper_rcrw(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1727 case 2: gen_helper_rcrl(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1728 #ifdef TARGET_X86_64
1729 case 3: gen_helper_rcrq(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1730 #endif
1731 }
1732 } else {
1733 switch (ot) {
1734 case 0: gen_helper_rclb(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1735 case 1: gen_helper_rclw(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1736 case 2: gen_helper_rcll(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1737 #ifdef TARGET_X86_64
1738 case 3: gen_helper_rclq(cpu_T[0], cpu_T[0], cpu_T[1]); break;
1739 #endif
1740 }
1741 }
1742 /* store */
1743 if (op1 == OR_TMP0)
1744 gen_op_st_T0_A0(ot + s->mem_index);
1745 else
1746 gen_op_mov_reg_T0(ot, op1);
1747
1748 /* update eflags */
1749 label1 = gen_new_label();
1750 tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_cc_tmp, -1, label1);
1751
1752 tcg_gen_mov_tl(cpu_cc_src, cpu_cc_tmp);
1753 tcg_gen_discard_tl(cpu_cc_dst);
1754 tcg_gen_movi_i32(cpu_cc_op, CC_OP_EFLAGS);
1755
1756 gen_set_label(label1);
1757 s->cc_op = CC_OP_DYNAMIC; /* cannot predict flags after */
1758 }
1759
1760 /* XXX: add faster immediate case */
1761 static void gen_shiftd_rm_T1_T3(DisasContext *s, int ot, int op1,
1762 int is_right)
1763 {
1764 int label1, label2, data_bits;
1765 target_ulong mask;
1766 TCGv t0, t1, t2, a0;
1767
1768 t0 = tcg_temp_local_new();
1769 t1 = tcg_temp_local_new();
1770 t2 = tcg_temp_local_new();
1771 a0 = tcg_temp_local_new();
1772
1773 if (ot == OT_QUAD)
1774 mask = 0x3f;
1775 else
1776 mask = 0x1f;
1777
1778 /* load */
1779 if (op1 == OR_TMP0) {
1780 tcg_gen_mov_tl(a0, cpu_A0);
1781 gen_op_ld_v(ot + s->mem_index, t0, a0);
1782 } else {
1783 gen_op_mov_v_reg(ot, t0, op1);
1784 }
1785
1786 tcg_gen_andi_tl(cpu_T3, cpu_T3, mask);
1787
1788 tcg_gen_mov_tl(t1, cpu_T[1]);
1789 tcg_gen_mov_tl(t2, cpu_T3);
1790
1791 /* Must test zero case to avoid using undefined behaviour in TCG
1792 shifts. */
1793 label1 = gen_new_label();
1794 tcg_gen_brcondi_tl(TCG_COND_EQ, t2, 0, label1);
1795
1796 tcg_gen_addi_tl(cpu_tmp5, t2, -1);
1797 if (ot == OT_WORD) {
1798 /* Note: we implement the Intel behaviour for shift count > 16 */
1799 if (is_right) {
1800 tcg_gen_andi_tl(t0, t0, 0xffff);
1801 tcg_gen_shli_tl(cpu_tmp0, t1, 16);
1802 tcg_gen_or_tl(t0, t0, cpu_tmp0);
1803 tcg_gen_ext32u_tl(t0, t0);
1804
1805 tcg_gen_shr_tl(cpu_tmp4, t0, cpu_tmp5);
1806
1807 /* only needed if count > 16, but a test would complicate */
1808 tcg_gen_subfi_tl(cpu_tmp5, 32, t2);
1809 tcg_gen_shl_tl(cpu_tmp0, t0, cpu_tmp5);
1810
1811 tcg_gen_shr_tl(t0, t0, t2);
1812
1813 tcg_gen_or_tl(t0, t0, cpu_tmp0);
1814 } else {
1815 /* XXX: not optimal */
1816 tcg_gen_andi_tl(t0, t0, 0xffff);
1817 tcg_gen_shli_tl(t1, t1, 16);
1818 tcg_gen_or_tl(t1, t1, t0);
1819 tcg_gen_ext32u_tl(t1, t1);
1820
1821 tcg_gen_shl_tl(cpu_tmp4, t0, cpu_tmp5);
1822 tcg_gen_subfi_tl(cpu_tmp0, 32, cpu_tmp5);
1823 tcg_gen_shr_tl(cpu_tmp5, t1, cpu_tmp0);
1824 tcg_gen_or_tl(cpu_tmp4, cpu_tmp4, cpu_tmp5);
1825
1826 tcg_gen_shl_tl(t0, t0, t2);
1827 tcg_gen_subfi_tl(cpu_tmp5, 32, t2);
1828 tcg_gen_shr_tl(t1, t1, cpu_tmp5);
1829 tcg_gen_or_tl(t0, t0, t1);
1830 }
1831 } else {
1832 data_bits = 8 << ot;
1833 if (is_right) {
1834 if (ot == OT_LONG)
1835 tcg_gen_ext32u_tl(t0, t0);
1836
1837 tcg_gen_shr_tl(cpu_tmp4, t0, cpu_tmp5);
1838
1839 tcg_gen_shr_tl(t0, t0, t2);
1840 tcg_gen_subfi_tl(cpu_tmp5, data_bits, t2);
1841 tcg_gen_shl_tl(t1, t1, cpu_tmp5);
1842 tcg_gen_or_tl(t0, t0, t1);
1843
1844 } else {
1845 if (ot == OT_LONG)
1846 tcg_gen_ext32u_tl(t1, t1);
1847
1848 tcg_gen_shl_tl(cpu_tmp4, t0, cpu_tmp5);
1849
1850 tcg_gen_shl_tl(t0, t0, t2);
1851 tcg_gen_subfi_tl(cpu_tmp5, data_bits, t2);
1852 tcg_gen_shr_tl(t1, t1, cpu_tmp5);
1853 tcg_gen_or_tl(t0, t0, t1);
1854 }
1855 }
1856 tcg_gen_mov_tl(t1, cpu_tmp4);
1857
1858 gen_set_label(label1);
1859 /* store */
1860 if (op1 == OR_TMP0) {
1861 gen_op_st_v(ot + s->mem_index, t0, a0);
1862 } else {
1863 gen_op_mov_reg_v(ot, op1, t0);
1864 }
1865
1866 /* update eflags */
1867 if (s->cc_op != CC_OP_DYNAMIC)
1868 gen_op_set_cc_op(s->cc_op);
1869
1870 label2 = gen_new_label();
1871 tcg_gen_brcondi_tl(TCG_COND_EQ, t2, 0, label2);
1872
1873 tcg_gen_mov_tl(cpu_cc_src, t1);
1874 tcg_gen_mov_tl(cpu_cc_dst, t0);
1875 if (is_right) {
1876 tcg_gen_movi_i32(cpu_cc_op, CC_OP_SARB + ot);
1877 } else {
1878 tcg_gen_movi_i32(cpu_cc_op, CC_OP_SHLB + ot);
1879 }
1880 gen_set_label(label2);
1881 s->cc_op = CC_OP_DYNAMIC; /* cannot predict flags after */
1882
1883 tcg_temp_free(t0);
1884 tcg_temp_free(t1);
1885 tcg_temp_free(t2);
1886 tcg_temp_free(a0);
1887 }
1888
1889 static void gen_shift(DisasContext *s1, int op, int ot, int d, int s)
1890 {
1891 if (s != OR_TMP1)
1892 gen_op_mov_TN_reg(ot, 1, s);
1893 switch(op) {
1894 case OP_ROL:
1895 gen_rot_rm_T1(s1, ot, d, 0);
1896 break;
1897 case OP_ROR:
1898 gen_rot_rm_T1(s1, ot, d, 1);
1899 break;
1900 case OP_SHL:
1901 case OP_SHL1:
1902 gen_shift_rm_T1(s1, ot, d, 0, 0);
1903 break;
1904 case OP_SHR:
1905 gen_shift_rm_T1(s1, ot, d, 1, 0);
1906 break;
1907 case OP_SAR:
1908 gen_shift_rm_T1(s1, ot, d, 1, 1);
1909 break;
1910 case OP_RCL:
1911 gen_rotc_rm_T1(s1, ot, d, 0);
1912 break;
1913 case OP_RCR:
1914 gen_rotc_rm_T1(s1, ot, d, 1);
1915 break;
1916 }
1917 }
1918
1919 static void gen_shifti(DisasContext *s1, int op, int ot, int d, int c)
1920 {
1921 switch(op) {
1922 case OP_ROL:
1923 gen_rot_rm_im(s1, ot, d, c, 0);
1924 break;
1925 case OP_ROR:
1926 gen_rot_rm_im(s1, ot, d, c, 1);
1927 break;
1928 case OP_SHL:
1929 case OP_SHL1:
1930 gen_shift_rm_im(s1, ot, d, c, 0, 0);
1931 break;
1932 case OP_SHR:
1933 gen_shift_rm_im(s1, ot, d, c, 1, 0);
1934 break;
1935 case OP_SAR:
1936 gen_shift_rm_im(s1, ot, d, c, 1, 1);
1937 break;
1938 default:
1939 /* currently not optimized */
1940 gen_op_movl_T1_im(c);
1941 gen_shift(s1, op, ot, d, OR_TMP1);
1942 break;
1943 }
1944 }
1945
1946 static void gen_lea_modrm(DisasContext *s, int modrm, int *reg_ptr, int *offset_ptr)
1947 {
1948 target_long disp;
1949 int havesib;
1950 int base;
1951 int index;
1952 int scale;
1953 int opreg;
1954 int mod, rm, code, override, must_add_seg;
1955
1956 override = s->override;
1957 must_add_seg = s->addseg;
1958 if (override >= 0)
1959 must_add_seg = 1;
1960 mod = (modrm >> 6) & 3;
1961 rm = modrm & 7;
1962
1963 if (s->aflag) {
1964
1965 havesib = 0;
1966 base = rm;
1967 index = 0;
1968 scale = 0;
1969
1970 if (base == 4) {
1971 havesib = 1;
1972 code = ldub_code(s->pc++);
1973 scale = (code >> 6) & 3;
1974 index = ((code >> 3) & 7) | REX_X(s);
1975 base = (code & 7);
1976 }
1977 base |= REX_B(s);
1978
1979 switch (mod) {
1980 case 0:
1981 if ((base & 7) == 5) {
1982 base = -1;
1983 disp = (int32_t)ldl_code(s->pc);
1984 s->pc += 4;
1985 if (CODE64(s) && !havesib) {
1986 disp += s->pc + s->rip_offset;
1987 }
1988 } else {
1989 disp = 0;
1990 }
1991 break;
1992 case 1:
1993 disp = (int8_t)ldub_code(s->pc++);
1994 break;
1995 default:
1996 case 2:
1997 disp = (int32_t)ldl_code(s->pc);
1998 s->pc += 4;
1999 break;
2000 }
2001
2002 if (base >= 0) {
2003 /* for correct popl handling with esp */
2004 if (base == 4 && s->popl_esp_hack)
2005 disp += s->popl_esp_hack;
2006 #ifdef TARGET_X86_64
2007 if (s->aflag == 2) {
2008 gen_op_movq_A0_reg(base);
2009 if (disp != 0) {
2010 gen_op_addq_A0_im(disp);
2011 }
2012 } else
2013 #endif
2014 {
2015 gen_op_movl_A0_reg(base);
2016 if (disp != 0)
2017 gen_op_addl_A0_im(disp);
2018 }
2019 } else {
2020 #ifdef TARGET_X86_64
2021 if (s->aflag == 2) {
2022 gen_op_movq_A0_im(disp);
2023 } else
2024 #endif
2025 {
2026 gen_op_movl_A0_im(disp);
2027 }
2028 }
2029 /* index == 4 means no index */
2030 if (havesib && (index != 4)) {
2031 #ifdef TARGET_X86_64
2032 if (s->aflag == 2) {
2033 gen_op_addq_A0_reg_sN(scale, index);
2034 } else
2035 #endif
2036 {
2037 gen_op_addl_A0_reg_sN(scale, index);
2038 }
2039 }
2040 if (must_add_seg) {
2041 if (override < 0) {
2042 if (base == R_EBP || base == R_ESP)
2043 override = R_SS;
2044 else
2045 override = R_DS;
2046 }
2047 #ifdef TARGET_X86_64
2048 if (s->aflag == 2) {
2049 gen_op_addq_A0_seg(override);
2050 } else
2051 #endif
2052 {
2053 gen_op_addl_A0_seg(override);
2054 }
2055 }
2056 } else {
2057 switch (mod) {
2058 case 0:
2059 if (rm == 6) {
2060 disp = lduw_code(s->pc);
2061 s->pc += 2;
2062 gen_op_movl_A0_im(disp);
2063 rm = 0; /* avoid SS override */
2064 goto no_rm;
2065 } else {
2066 disp = 0;
2067 }
2068 break;
2069 case 1:
2070 disp = (int8_t)ldub_code(s->pc++);
2071 break;
2072 default:
2073 case 2:
2074 disp = lduw_code(s->pc);
2075 s->pc += 2;
2076 break;
2077 }
2078 switch(rm) {
2079 case 0:
2080 gen_op_movl_A0_reg(R_EBX);
2081 gen_op_addl_A0_reg_sN(0, R_ESI);
2082 break;
2083 case 1:
2084 gen_op_movl_A0_reg(R_EBX);
2085 gen_op_addl_A0_reg_sN(0, R_EDI);
2086 break;
2087 case 2:
2088 gen_op_movl_A0_reg(R_EBP);
2089 gen_op_addl_A0_reg_sN(0, R_ESI);
2090 break;
2091 case 3:
2092 gen_op_movl_A0_reg(R_EBP);
2093 gen_op_addl_A0_reg_sN(0, R_EDI);
2094 break;
2095 case 4:
2096 gen_op_movl_A0_reg(R_ESI);
2097 break;
2098 case 5:
2099 gen_op_movl_A0_reg(R_EDI);
2100 break;
2101 case 6:
2102 gen_op_movl_A0_reg(R_EBP);
2103 break;
2104 default:
2105 case 7:
2106 gen_op_movl_A0_reg(R_EBX);
2107 break;
2108 }
2109 if (disp != 0)
2110 gen_op_addl_A0_im(disp);
2111 gen_op_andl_A0_ffff();
2112 no_rm:
2113 if (must_add_seg) {
2114 if (override < 0) {
2115 if (rm == 2 || rm == 3 || rm == 6)
2116 override = R_SS;
2117 else
2118 override = R_DS;
2119 }
2120 gen_op_addl_A0_seg(override);
2121 }
2122 }
2123
2124 opreg = OR_A0;
2125 disp = 0;
2126 *reg_ptr = opreg;
2127 *offset_ptr = disp;
2128 }
2129
2130 static void gen_nop_modrm(DisasContext *s, int modrm)
2131 {
2132 int mod, rm, base, code;
2133
2134 mod = (modrm >> 6) & 3;
2135 if (mod == 3)
2136 return;
2137 rm = modrm & 7;
2138
2139 if (s->aflag) {
2140
2141 base = rm;
2142
2143 if (base == 4) {
2144 code = ldub_code(s->pc++);
2145 base = (code & 7);
2146 }
2147
2148 switch (mod) {
2149 case 0:
2150 if (base == 5) {
2151 s->pc += 4;
2152 }
2153 break;
2154 case 1:
2155 s->pc++;
2156 break;
2157 default:
2158 case 2:
2159 s->pc += 4;
2160 break;
2161 }
2162 } else {
2163 switch (mod) {
2164 case 0:
2165 if (rm == 6) {
2166 s->pc += 2;
2167 }
2168 break;
2169 case 1:
2170 s->pc++;
2171 break;
2172 default:
2173 case 2:
2174 s->pc += 2;
2175 break;
2176 }
2177 }
2178 }
2179
2180 /* used for LEA and MOV AX, mem */
2181 static void gen_add_A0_ds_seg(DisasContext *s)
2182 {
2183 int override, must_add_seg;
2184 must_add_seg = s->addseg;
2185 override = R_DS;
2186 if (s->override >= 0) {
2187 override = s->override;
2188 must_add_seg = 1;
2189 }
2190 if (must_add_seg) {
2191 #ifdef TARGET_X86_64
2192 if (CODE64(s)) {
2193 gen_op_addq_A0_seg(override);
2194 } else
2195 #endif
2196 {
2197 gen_op_addl_A0_seg(override);
2198 }
2199 }
2200 }
2201
2202 /* generate modrm memory load or store of 'reg'. TMP0 is used if reg ==
2203 OR_TMP0 */
2204 static void gen_ldst_modrm(DisasContext *s, int modrm, int ot, int reg, int is_store)
2205 {
2206 int mod, rm, opreg, disp;
2207
2208 mod = (modrm >> 6) & 3;
2209 rm = (modrm & 7) | REX_B(s);
2210 if (mod == 3) {
2211 if (is_store) {
2212 if (reg != OR_TMP0)
2213 gen_op_mov_TN_reg(ot, 0, reg);
2214 gen_op_mov_reg_T0(ot, rm);
2215 } else {
2216 gen_op_mov_TN_reg(ot, 0, rm);
2217 if (reg != OR_TMP0)
2218 gen_op_mov_reg_T0(ot, reg);
2219 }
2220 } else {
2221 gen_lea_modrm(s, modrm, &opreg, &disp);
2222 if (is_store) {
2223 if (reg != OR_TMP0)
2224 gen_op_mov_TN_reg(ot, 0, reg);
2225 gen_op_st_T0_A0(ot + s->mem_index);
2226 } else {
2227 gen_op_ld_T0_A0(ot + s->mem_index);
2228 if (reg != OR_TMP0)
2229 gen_op_mov_reg_T0(ot, reg);
2230 }
2231 }
2232 }
2233
2234 static inline uint32_t insn_get(DisasContext *s, int ot)
2235 {
2236 uint32_t ret;
2237
2238 switch(ot) {
2239 case OT_BYTE:
2240 ret = ldub_code(s->pc);
2241 s->pc++;
2242 break;
2243 case OT_WORD:
2244 ret = lduw_code(s->pc);
2245 s->pc += 2;
2246 break;
2247 default:
2248 case OT_LONG:
2249 ret = ldl_code(s->pc);
2250 s->pc += 4;
2251 break;
2252 }
2253 return ret;
2254 }
2255
2256 static inline int insn_const_size(unsigned int ot)
2257 {
2258 if (ot <= OT_LONG)
2259 return 1 << ot;
2260 else
2261 return 4;
2262 }
2263
2264 static inline void gen_goto_tb(DisasContext *s, int tb_num, target_ulong eip)
2265 {
2266 TranslationBlock *tb;
2267 target_ulong pc;
2268
2269 pc = s->cs_base + eip;
2270 tb = s->tb;
2271 /* NOTE: we handle the case where the TB spans two pages here */
2272 if ((pc & TARGET_PAGE_MASK) == (tb->pc & TARGET_PAGE_MASK) ||
2273 (pc & TARGET_PAGE_MASK) == ((s->pc - 1) & TARGET_PAGE_MASK)) {
2274 /* jump to same page: we can use a direct jump */
2275 tcg_gen_goto_tb(tb_num);
2276 gen_jmp_im(eip);
2277 tcg_gen_exit_tb((tcg_target_long)tb + tb_num);
2278 } else {
2279 /* jump to another page: currently not optimized */
2280 gen_jmp_im(eip);
2281 gen_eob(s);
2282 }
2283 }
2284
2285 static inline void gen_jcc(DisasContext *s, int b,
2286 target_ulong val, target_ulong next_eip)
2287 {
2288 int l1, l2, cc_op;
2289
2290 cc_op = s->cc_op;
2291 gen_update_cc_op(s);
2292 if (s->jmp_opt) {
2293 l1 = gen_new_label();
2294 gen_jcc1(s, cc_op, b, l1);
2295
2296 gen_goto_tb(s, 0, next_eip);
2297
2298 gen_set_label(l1);
2299 gen_goto_tb(s, 1, val);
2300 s->is_jmp = DISAS_TB_JUMP;
2301 } else {
2302
2303 l1 = gen_new_label();
2304 l2 = gen_new_label();
2305 gen_jcc1(s, cc_op, b, l1);
2306
2307 gen_jmp_im(next_eip);
2308 tcg_gen_br(l2);
2309
2310 gen_set_label(l1);
2311 gen_jmp_im(val);
2312 gen_set_label(l2);
2313 gen_eob(s);
2314 }
2315 }
2316
2317 static void gen_setcc(DisasContext *s, int b)
2318 {
2319 int inv, jcc_op, l1;
2320 TCGv t0;
2321
2322 if (is_fast_jcc_case(s, b)) {
2323 /* nominal case: we use a jump */
2324 /* XXX: make it faster by adding new instructions in TCG */
2325 t0 = tcg_temp_local_new();
2326 tcg_gen_movi_tl(t0, 0);
2327 l1 = gen_new_label();
2328 gen_jcc1(s, s->cc_op, b ^ 1, l1);
2329 tcg_gen_movi_tl(t0, 1);
2330 gen_set_label(l1);
2331 tcg_gen_mov_tl(cpu_T[0], t0);
2332 tcg_temp_free(t0);
2333 } else {
2334 /* slow case: it is more efficient not to generate a jump,
2335 although it is questionnable whether this optimization is
2336 worth to */
2337 inv = b & 1;
2338 jcc_op = (b >> 1) & 7;
2339 gen_setcc_slow_T0(s, jcc_op);
2340 if (inv) {
2341 tcg_gen_xori_tl(cpu_T[0], cpu_T[0], 1);
2342 }
2343 }
2344 }
2345
2346 static inline void gen_op_movl_T0_seg(int seg_reg)
2347 {
2348 tcg_gen_ld32u_tl(cpu_T[0], cpu_env,
2349 offsetof(CPUX86State,segs[seg_reg].selector));
2350 }
2351
2352 static inline void gen_op_movl_seg_T0_vm(int seg_reg)
2353 {
2354 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 0xffff);
2355 tcg_gen_st32_tl(cpu_T[0], cpu_env,
2356 offsetof(CPUX86State,segs[seg_reg].selector));
2357 tcg_gen_shli_tl(cpu_T[0], cpu_T[0], 4);
2358 tcg_gen_st_tl(cpu_T[0], cpu_env,
2359 offsetof(CPUX86State,segs[seg_reg].base));
2360 }
2361
2362 /* move T0 to seg_reg and compute if the CPU state may change. Never
2363 call this function with seg_reg == R_CS */
2364 static void gen_movl_seg_T0(DisasContext *s, int seg_reg, target_ulong cur_eip)
2365 {
2366 if (s->pe && !s->vm86) {
2367 /* XXX: optimize by finding processor state dynamically */
2368 if (s->cc_op != CC_OP_DYNAMIC)
2369 gen_op_set_cc_op(s->cc_op);
2370 gen_jmp_im(cur_eip);
2371 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
2372 gen_helper_load_seg(tcg_const_i32(seg_reg), cpu_tmp2_i32);
2373 /* abort translation because the addseg value may change or
2374 because ss32 may change. For R_SS, translation must always
2375 stop as a special handling must be done to disable hardware
2376 interrupts for the next instruction */
2377 if (seg_reg == R_SS || (s->code32 && seg_reg < R_FS))
2378 s->is_jmp = DISAS_TB_JUMP;
2379 } else {
2380 gen_op_movl_seg_T0_vm(seg_reg);
2381 if (seg_reg == R_SS)
2382 s->is_jmp = DISAS_TB_JUMP;
2383 }
2384 }
2385
2386 static inline int svm_is_rep(int prefixes)
2387 {
2388 return ((prefixes & (PREFIX_REPZ | PREFIX_REPNZ)) ? 8 : 0);
2389 }
2390
2391 static inline void
2392 gen_svm_check_intercept_param(DisasContext *s, target_ulong pc_start,
2393 uint32_t type, uint64_t param)
2394 {
2395 /* no SVM activated; fast case */
2396 if (likely(!(s->flags & HF_SVMI_MASK)))
2397 return;
2398 if (s->cc_op != CC_OP_DYNAMIC)
2399 gen_op_set_cc_op(s->cc_op);
2400 gen_jmp_im(pc_start - s->cs_base);
2401 gen_helper_svm_check_intercept_param(tcg_const_i32(type),
2402 tcg_const_i64(param));
2403 }
2404
2405 static inline void
2406 gen_svm_check_intercept(DisasContext *s, target_ulong pc_start, uint64_t type)
2407 {
2408 gen_svm_check_intercept_param(s, pc_start, type, 0);
2409 }
2410
2411 static inline void gen_stack_update(DisasContext *s, int addend)
2412 {
2413 #ifdef TARGET_X86_64
2414 if (CODE64(s)) {
2415 gen_op_add_reg_im(2, R_ESP, addend);
2416 } else
2417 #endif
2418 if (s->ss32) {
2419 gen_op_add_reg_im(1, R_ESP, addend);
2420 } else {
2421 gen_op_add_reg_im(0, R_ESP, addend);
2422 }
2423 }
2424
2425 /* generate a push. It depends on ss32, addseg and dflag */
2426 static void gen_push_T0(DisasContext *s)
2427 {
2428 #ifdef TARGET_X86_64
2429 if (CODE64(s)) {
2430 gen_op_movq_A0_reg(R_ESP);
2431 if (s->dflag) {
2432 gen_op_addq_A0_im(-8);
2433 gen_op_st_T0_A0(OT_QUAD + s->mem_index);
2434 } else {
2435 gen_op_addq_A0_im(-2);
2436 gen_op_st_T0_A0(OT_WORD + s->mem_index);
2437 }
2438 gen_op_mov_reg_A0(2, R_ESP);
2439 } else
2440 #endif
2441 {
2442 gen_op_movl_A0_reg(R_ESP);
2443 if (!s->dflag)
2444 gen_op_addl_A0_im(-2);
2445 else
2446 gen_op_addl_A0_im(-4);
2447 if (s->ss32) {
2448 if (s->addseg) {
2449 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2450 gen_op_addl_A0_seg(R_SS);
2451 }
2452 } else {
2453 gen_op_andl_A0_ffff();
2454 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2455 gen_op_addl_A0_seg(R_SS);
2456 }
2457 gen_op_st_T0_A0(s->dflag + 1 + s->mem_index);
2458 if (s->ss32 && !s->addseg)
2459 gen_op_mov_reg_A0(1, R_ESP);
2460 else
2461 gen_op_mov_reg_T1(s->ss32 + 1, R_ESP);
2462 }
2463 }
2464
2465 /* generate a push. It depends on ss32, addseg and dflag */
2466 /* slower version for T1, only used for call Ev */
2467 static void gen_push_T1(DisasContext *s)
2468 {
2469 #ifdef TARGET_X86_64
2470 if (CODE64(s)) {
2471 gen_op_movq_A0_reg(R_ESP);
2472 if (s->dflag) {
2473 gen_op_addq_A0_im(-8);
2474 gen_op_st_T1_A0(OT_QUAD + s->mem_index);
2475 } else {
2476 gen_op_addq_A0_im(-2);
2477 gen_op_st_T0_A0(OT_WORD + s->mem_index);
2478 }
2479 gen_op_mov_reg_A0(2, R_ESP);
2480 } else
2481 #endif
2482 {
2483 gen_op_movl_A0_reg(R_ESP);
2484 if (!s->dflag)
2485 gen_op_addl_A0_im(-2);
2486 else
2487 gen_op_addl_A0_im(-4);
2488 if (s->ss32) {
2489 if (s->addseg) {
2490 gen_op_addl_A0_seg(R_SS);
2491 }
2492 } else {
2493 gen_op_andl_A0_ffff();
2494 gen_op_addl_A0_seg(R_SS);
2495 }
2496 gen_op_st_T1_A0(s->dflag + 1 + s->mem_index);
2497
2498 if (s->ss32 && !s->addseg)
2499 gen_op_mov_reg_A0(1, R_ESP);
2500 else
2501 gen_stack_update(s, (-2) << s->dflag);
2502 }
2503 }
2504
2505 /* two step pop is necessary for precise exceptions */
2506 static void gen_pop_T0(DisasContext *s)
2507 {
2508 #ifdef TARGET_X86_64
2509 if (CODE64(s)) {
2510 gen_op_movq_A0_reg(R_ESP);
2511 gen_op_ld_T0_A0((s->dflag ? OT_QUAD : OT_WORD) + s->mem_index);
2512 } else
2513 #endif
2514 {
2515 gen_op_movl_A0_reg(R_ESP);
2516 if (s->ss32) {
2517 if (s->addseg)
2518 gen_op_addl_A0_seg(R_SS);
2519 } else {
2520 gen_op_andl_A0_ffff();
2521 gen_op_addl_A0_seg(R_SS);
2522 }
2523 gen_op_ld_T0_A0(s->dflag + 1 + s->mem_index);
2524 }
2525 }
2526
2527 static void gen_pop_update(DisasContext *s)
2528 {
2529 #ifdef TARGET_X86_64
2530 if (CODE64(s) && s->dflag) {
2531 gen_stack_update(s, 8);
2532 } else
2533 #endif
2534 {
2535 gen_stack_update(s, 2 << s->dflag);
2536 }
2537 }
2538
2539 static void gen_stack_A0(DisasContext *s)
2540 {
2541 gen_op_movl_A0_reg(R_ESP);
2542 if (!s->ss32)
2543 gen_op_andl_A0_ffff();
2544 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2545 if (s->addseg)
2546 gen_op_addl_A0_seg(R_SS);
2547 }
2548
2549 /* NOTE: wrap around in 16 bit not fully handled */
2550 static void gen_pusha(DisasContext *s)
2551 {
2552 int i;
2553 gen_op_movl_A0_reg(R_ESP);
2554 gen_op_addl_A0_im(-16 << s->dflag);
2555 if (!s->ss32)
2556 gen_op_andl_A0_ffff();
2557 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2558 if (s->addseg)
2559 gen_op_addl_A0_seg(R_SS);
2560 for(i = 0;i < 8; i++) {
2561 gen_op_mov_TN_reg(OT_LONG, 0, 7 - i);
2562 gen_op_st_T0_A0(OT_WORD + s->dflag + s->mem_index);
2563 gen_op_addl_A0_im(2 << s->dflag);
2564 }
2565 gen_op_mov_reg_T1(OT_WORD + s->ss32, R_ESP);
2566 }
2567
2568 /* NOTE: wrap around in 16 bit not fully handled */
2569 static void gen_popa(DisasContext *s)
2570 {
2571 int i;
2572 gen_op_movl_A0_reg(R_ESP);
2573 if (!s->ss32)
2574 gen_op_andl_A0_ffff();
2575 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2576 tcg_gen_addi_tl(cpu_T[1], cpu_T[1], 16 << s->dflag);
2577 if (s->addseg)
2578 gen_op_addl_A0_seg(R_SS);
2579 for(i = 0;i < 8; i++) {
2580 /* ESP is not reloaded */
2581 if (i != 3) {
2582 gen_op_ld_T0_A0(OT_WORD + s->dflag + s->mem_index);
2583 gen_op_mov_reg_T0(OT_WORD + s->dflag, 7 - i);
2584 }
2585 gen_op_addl_A0_im(2 << s->dflag);
2586 }
2587 gen_op_mov_reg_T1(OT_WORD + s->ss32, R_ESP);
2588 }
2589
2590 static void gen_enter(DisasContext *s, int esp_addend, int level)
2591 {
2592 int ot, opsize;
2593
2594 level &= 0x1f;
2595 #ifdef TARGET_X86_64
2596 if (CODE64(s)) {
2597 ot = s->dflag ? OT_QUAD : OT_WORD;
2598 opsize = 1 << ot;
2599
2600 gen_op_movl_A0_reg(R_ESP);
2601 gen_op_addq_A0_im(-opsize);
2602 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2603
2604 /* push bp */
2605 gen_op_mov_TN_reg(OT_LONG, 0, R_EBP);
2606 gen_op_st_T0_A0(ot + s->mem_index);
2607 if (level) {
2608 /* XXX: must save state */
2609 gen_helper_enter64_level(tcg_const_i32(level),
2610 tcg_const_i32((ot == OT_QUAD)),
2611 cpu_T[1]);
2612 }
2613 gen_op_mov_reg_T1(ot, R_EBP);
2614 tcg_gen_addi_tl(cpu_T[1], cpu_T[1], -esp_addend + (-opsize * level));
2615 gen_op_mov_reg_T1(OT_QUAD, R_ESP);
2616 } else
2617 #endif
2618 {
2619 ot = s->dflag + OT_WORD;
2620 opsize = 2 << s->dflag;
2621
2622 gen_op_movl_A0_reg(R_ESP);
2623 gen_op_addl_A0_im(-opsize);
2624 if (!s->ss32)
2625 gen_op_andl_A0_ffff();
2626 tcg_gen_mov_tl(cpu_T[1], cpu_A0);
2627 if (s->addseg)
2628 gen_op_addl_A0_seg(R_SS);
2629 /* push bp */
2630 gen_op_mov_TN_reg(OT_LONG, 0, R_EBP);
2631 gen_op_st_T0_A0(ot + s->mem_index);
2632 if (level) {
2633 /* XXX: must save state */
2634 gen_helper_enter_level(tcg_const_i32(level),
2635 tcg_const_i32(s->dflag),
2636 cpu_T[1]);
2637 }
2638 gen_op_mov_reg_T1(ot, R_EBP);
2639 tcg_gen_addi_tl(cpu_T[1], cpu_T[1], -esp_addend + (-opsize * level));
2640 gen_op_mov_reg_T1(OT_WORD + s->ss32, R_ESP);
2641 }
2642 }
2643
2644 static void gen_exception(DisasContext *s, int trapno, target_ulong cur_eip)
2645 {
2646 if (s->cc_op != CC_OP_DYNAMIC)
2647 gen_op_set_cc_op(s->cc_op);
2648 gen_jmp_im(cur_eip);
2649 gen_helper_raise_exception(tcg_const_i32(trapno));
2650 s->is_jmp = DISAS_TB_JUMP;
2651 }
2652
2653 /* an interrupt is different from an exception because of the
2654 privilege checks */
2655 static void gen_interrupt(DisasContext *s, int intno,
2656 target_ulong cur_eip, target_ulong next_eip)
2657 {
2658 if (s->cc_op != CC_OP_DYNAMIC)
2659 gen_op_set_cc_op(s->cc_op);
2660 gen_jmp_im(cur_eip);
2661 gen_helper_raise_interrupt(tcg_const_i32(intno),
2662 tcg_const_i32(next_eip - cur_eip));
2663 s->is_jmp = DISAS_TB_JUMP;
2664 }
2665
2666 static void gen_debug(DisasContext *s, target_ulong cur_eip)
2667 {
2668 if (s->cc_op != CC_OP_DYNAMIC)
2669 gen_op_set_cc_op(s->cc_op);
2670 gen_jmp_im(cur_eip);
2671 gen_helper_debug();
2672 s->is_jmp = DISAS_TB_JUMP;
2673 }
2674
2675 /* generate a generic end of block. Trace exception is also generated
2676 if needed */
2677 static void gen_eob(DisasContext *s)
2678 {
2679 if (s->cc_op != CC_OP_DYNAMIC)
2680 gen_op_set_cc_op(s->cc_op);
2681 if (s->tb->flags & HF_INHIBIT_IRQ_MASK) {
2682 gen_helper_reset_inhibit_irq();
2683 }
2684 if (s->tb->flags & HF_RF_MASK) {
2685 gen_helper_reset_rf();
2686 }
2687 if (s->singlestep_enabled) {
2688 gen_helper_debug();
2689 } else if (s->tf) {
2690 gen_helper_single_step();
2691 } else {
2692 tcg_gen_exit_tb(0);
2693 }
2694 s->is_jmp = DISAS_TB_JUMP;
2695 }
2696
2697 /* generate a jump to eip. No segment change must happen before as a
2698 direct call to the next block may occur */
2699 static void gen_jmp_tb(DisasContext *s, target_ulong eip, int tb_num)
2700 {
2701 if (s->jmp_opt) {
2702 gen_update_cc_op(s);
2703 gen_goto_tb(s, tb_num, eip);
2704 s->is_jmp = DISAS_TB_JUMP;
2705 } else {
2706 gen_jmp_im(eip);
2707 gen_eob(s);
2708 }
2709 }
2710
2711 static void gen_jmp(DisasContext *s, target_ulong eip)
2712 {
2713 gen_jmp_tb(s, eip, 0);
2714 }
2715
2716 static inline void gen_ldq_env_A0(int idx, int offset)
2717 {
2718 int mem_index = (idx >> 2) - 1;
2719 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_A0, mem_index);
2720 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, offset);
2721 }
2722
2723 static inline void gen_stq_env_A0(int idx, int offset)
2724 {
2725 int mem_index = (idx >> 2) - 1;
2726 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env, offset);
2727 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_A0, mem_index);
2728 }
2729
2730 static inline void gen_ldo_env_A0(int idx, int offset)
2731 {
2732 int mem_index = (idx >> 2) - 1;
2733 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_A0, mem_index);
2734 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, offset + offsetof(XMMReg, XMM_Q(0)));
2735 tcg_gen_addi_tl(cpu_tmp0, cpu_A0, 8);
2736 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_tmp0, mem_index);
2737 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, offset + offsetof(XMMReg, XMM_Q(1)));
2738 }
2739
2740 static inline void gen_sto_env_A0(int idx, int offset)
2741 {
2742 int mem_index = (idx >> 2) - 1;
2743 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env, offset + offsetof(XMMReg, XMM_Q(0)));
2744 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_A0, mem_index);
2745 tcg_gen_addi_tl(cpu_tmp0, cpu_A0, 8);
2746 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env, offset + offsetof(XMMReg, XMM_Q(1)));
2747 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_tmp0, mem_index);
2748 }
2749
2750 static inline void gen_op_movo(int d_offset, int s_offset)
2751 {
2752 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env, s_offset);
2753 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, d_offset);
2754 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env, s_offset + 8);
2755 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, d_offset + 8);
2756 }
2757
2758 static inline void gen_op_movq(int d_offset, int s_offset)
2759 {
2760 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env, s_offset);
2761 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, d_offset);
2762 }
2763
2764 static inline void gen_op_movl(int d_offset, int s_offset)
2765 {
2766 tcg_gen_ld_i32(cpu_tmp2_i32, cpu_env, s_offset);
2767 tcg_gen_st_i32(cpu_tmp2_i32, cpu_env, d_offset);
2768 }
2769
2770 static inline void gen_op_movq_env_0(int d_offset)
2771 {
2772 tcg_gen_movi_i64(cpu_tmp1_i64, 0);
2773 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env, d_offset);
2774 }
2775
2776 #define SSE_SPECIAL ((void *)1)
2777 #define SSE_DUMMY ((void *)2)
2778
2779 #define MMX_OP2(x) { gen_helper_ ## x ## _mmx, gen_helper_ ## x ## _xmm }
2780 #define SSE_FOP(x) { gen_helper_ ## x ## ps, gen_helper_ ## x ## pd, \
2781 gen_helper_ ## x ## ss, gen_helper_ ## x ## sd, }
2782
2783 static void *sse_op_table1[256][4] = {
2784 /* 3DNow! extensions */
2785 [0x0e] = { SSE_DUMMY }, /* femms */
2786 [0x0f] = { SSE_DUMMY }, /* pf... */
2787 /* pure SSE operations */
2788 [0x10] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movups, movupd, movss, movsd */
2789 [0x11] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movups, movupd, movss, movsd */
2790 [0x12] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movlps, movlpd, movsldup, movddup */
2791 [0x13] = { SSE_SPECIAL, SSE_SPECIAL }, /* movlps, movlpd */
2792 [0x14] = { gen_helper_punpckldq_xmm, gen_helper_punpcklqdq_xmm },
2793 [0x15] = { gen_helper_punpckhdq_xmm, gen_helper_punpckhqdq_xmm },
2794 [0x16] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movhps, movhpd, movshdup */
2795 [0x17] = { SSE_SPECIAL, SSE_SPECIAL }, /* movhps, movhpd */
2796
2797 [0x28] = { SSE_SPECIAL, SSE_SPECIAL }, /* movaps, movapd */
2798 [0x29] = { SSE_SPECIAL, SSE_SPECIAL }, /* movaps, movapd */
2799 [0x2a] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* cvtpi2ps, cvtpi2pd, cvtsi2ss, cvtsi2sd */
2800 [0x2b] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movntps, movntpd, movntss, movntsd */
2801 [0x2c] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* cvttps2pi, cvttpd2pi, cvttsd2si, cvttss2si */
2802 [0x2d] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* cvtps2pi, cvtpd2pi, cvtsd2si, cvtss2si */
2803 [0x2e] = { gen_helper_ucomiss, gen_helper_ucomisd },
2804 [0x2f] = { gen_helper_comiss, gen_helper_comisd },
2805 [0x50] = { SSE_SPECIAL, SSE_SPECIAL }, /* movmskps, movmskpd */
2806 [0x51] = SSE_FOP(sqrt),
2807 [0x52] = { gen_helper_rsqrtps, NULL, gen_helper_rsqrtss, NULL },
2808 [0x53] = { gen_helper_rcpps, NULL, gen_helper_rcpss, NULL },
2809 [0x54] = { gen_helper_pand_xmm, gen_helper_pand_xmm }, /* andps, andpd */
2810 [0x55] = { gen_helper_pandn_xmm, gen_helper_pandn_xmm }, /* andnps, andnpd */
2811 [0x56] = { gen_helper_por_xmm, gen_helper_por_xmm }, /* orps, orpd */
2812 [0x57] = { gen_helper_pxor_xmm, gen_helper_pxor_xmm }, /* xorps, xorpd */
2813 [0x58] = SSE_FOP(add),
2814 [0x59] = SSE_FOP(mul),
2815 [0x5a] = { gen_helper_cvtps2pd, gen_helper_cvtpd2ps,
2816 gen_helper_cvtss2sd, gen_helper_cvtsd2ss },
2817 [0x5b] = { gen_helper_cvtdq2ps, gen_helper_cvtps2dq, gen_helper_cvttps2dq },
2818 [0x5c] = SSE_FOP(sub),
2819 [0x5d] = SSE_FOP(min),
2820 [0x5e] = SSE_FOP(div),
2821 [0x5f] = SSE_FOP(max),
2822
2823 [0xc2] = SSE_FOP(cmpeq),
2824 [0xc6] = { gen_helper_shufps, gen_helper_shufpd },
2825
2826 [0x38] = { SSE_SPECIAL, SSE_SPECIAL, NULL, SSE_SPECIAL }, /* SSSE3/SSE4 */
2827 [0x3a] = { SSE_SPECIAL, SSE_SPECIAL }, /* SSSE3/SSE4 */
2828
2829 /* MMX ops and their SSE extensions */
2830 [0x60] = MMX_OP2(punpcklbw),
2831 [0x61] = MMX_OP2(punpcklwd),
2832 [0x62] = MMX_OP2(punpckldq),
2833 [0x63] = MMX_OP2(packsswb),
2834 [0x64] = MMX_OP2(pcmpgtb),
2835 [0x65] = MMX_OP2(pcmpgtw),
2836 [0x66] = MMX_OP2(pcmpgtl),
2837 [0x67] = MMX_OP2(packuswb),
2838 [0x68] = MMX_OP2(punpckhbw),
2839 [0x69] = MMX_OP2(punpckhwd),
2840 [0x6a] = MMX_OP2(punpckhdq),
2841 [0x6b] = MMX_OP2(packssdw),
2842 [0x6c] = { NULL, gen_helper_punpcklqdq_xmm },
2843 [0x6d] = { NULL, gen_helper_punpckhqdq_xmm },
2844 [0x6e] = { SSE_SPECIAL, SSE_SPECIAL }, /* movd mm, ea */
2845 [0x6f] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movq, movdqa, , movqdu */
2846 [0x70] = { gen_helper_pshufw_mmx,
2847 gen_helper_pshufd_xmm,
2848 gen_helper_pshufhw_xmm,
2849 gen_helper_pshuflw_xmm },
2850 [0x71] = { SSE_SPECIAL, SSE_SPECIAL }, /* shiftw */
2851 [0x72] = { SSE_SPECIAL, SSE_SPECIAL }, /* shiftd */
2852 [0x73] = { SSE_SPECIAL, SSE_SPECIAL }, /* shiftq */
2853 [0x74] = MMX_OP2(pcmpeqb),
2854 [0x75] = MMX_OP2(pcmpeqw),
2855 [0x76] = MMX_OP2(pcmpeql),
2856 [0x77] = { SSE_DUMMY }, /* emms */
2857 [0x78] = { NULL, SSE_SPECIAL, NULL, SSE_SPECIAL }, /* extrq_i, insertq_i */
2858 [0x79] = { NULL, gen_helper_extrq_r, NULL, gen_helper_insertq_r },
2859 [0x7c] = { NULL, gen_helper_haddpd, NULL, gen_helper_haddps },
2860 [0x7d] = { NULL, gen_helper_hsubpd, NULL, gen_helper_hsubps },
2861 [0x7e] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movd, movd, , movq */
2862 [0x7f] = { SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL }, /* movq, movdqa, movdqu */
2863 [0xc4] = { SSE_SPECIAL, SSE_SPECIAL }, /* pinsrw */
2864 [0xc5] = { SSE_SPECIAL, SSE_SPECIAL }, /* pextrw */
2865 [0xd0] = { NULL, gen_helper_addsubpd, NULL, gen_helper_addsubps },
2866 [0xd1] = MMX_OP2(psrlw),
2867 [0xd2] = MMX_OP2(psrld),
2868 [0xd3] = MMX_OP2(psrlq),
2869 [0xd4] = MMX_OP2(paddq),
2870 [0xd5] = MMX_OP2(pmullw),
2871 [0xd6] = { NULL, SSE_SPECIAL, SSE_SPECIAL, SSE_SPECIAL },
2872 [0xd7] = { SSE_SPECIAL, SSE_SPECIAL }, /* pmovmskb */
2873 [0xd8] = MMX_OP2(psubusb),
2874 [0xd9] = MMX_OP2(psubusw),
2875 [0xda] = MMX_OP2(pminub),
2876 [0xdb] = MMX_OP2(pand),
2877 [0xdc] = MMX_OP2(paddusb),
2878 [0xdd] = MMX_OP2(paddusw),
2879 [0xde] = MMX_OP2(pmaxub),
2880 [0xdf] = MMX_OP2(pandn),
2881 [0xe0] = MMX_OP2(pavgb),
2882 [0xe1] = MMX_OP2(psraw),
2883 [0xe2] = MMX_OP2(psrad),
2884 [0xe3] = MMX_OP2(pavgw),
2885 [0xe4] = MMX_OP2(pmulhuw),
2886 [0xe5] = MMX_OP2(pmulhw),
2887 [0xe6] = { NULL, gen_helper_cvttpd2dq, gen_helper_cvtdq2pd, gen_helper_cvtpd2dq },
2888 [0xe7] = { SSE_SPECIAL , SSE_SPECIAL }, /* movntq, movntq */
2889 [0xe8] = MMX_OP2(psubsb),
2890 [0xe9] = MMX_OP2(psubsw),
2891 [0xea] = MMX_OP2(pminsw),
2892 [0xeb] = MMX_OP2(por),
2893 [0xec] = MMX_OP2(paddsb),
2894 [0xed] = MMX_OP2(paddsw),
2895 [0xee] = MMX_OP2(pmaxsw),
2896 [0xef] = MMX_OP2(pxor),
2897 [0xf0] = { NULL, NULL, NULL, SSE_SPECIAL }, /* lddqu */
2898 [0xf1] = MMX_OP2(psllw),
2899 [0xf2] = MMX_OP2(pslld),
2900 [0xf3] = MMX_OP2(psllq),
2901 [0xf4] = MMX_OP2(pmuludq),
2902 [0xf5] = MMX_OP2(pmaddwd),
2903 [0xf6] = MMX_OP2(psadbw),
2904 [0xf7] = MMX_OP2(maskmov),
2905 [0xf8] = MMX_OP2(psubb),
2906 [0xf9] = MMX_OP2(psubw),
2907 [0xfa] = MMX_OP2(psubl),
2908 [0xfb] = MMX_OP2(psubq),
2909 [0xfc] = MMX_OP2(paddb),
2910 [0xfd] = MMX_OP2(paddw),
2911 [0xfe] = MMX_OP2(paddl),
2912 };
2913
2914 static void *sse_op_table2[3 * 8][2] = {
2915 [0 + 2] = MMX_OP2(psrlw),
2916 [0 + 4] = MMX_OP2(psraw),
2917 [0 + 6] = MMX_OP2(psllw),
2918 [8 + 2] = MMX_OP2(psrld),
2919 [8 + 4] = MMX_OP2(psrad),
2920 [8 + 6] = MMX_OP2(pslld),
2921 [16 + 2] = MMX_OP2(psrlq),
2922 [16 + 3] = { NULL, gen_helper_psrldq_xmm },
2923 [16 + 6] = MMX_OP2(psllq),
2924 [16 + 7] = { NULL, gen_helper_pslldq_xmm },
2925 };
2926
2927 static void *sse_op_table3[4 * 3] = {
2928 gen_helper_cvtsi2ss,
2929 gen_helper_cvtsi2sd,
2930 X86_64_ONLY(gen_helper_cvtsq2ss),
2931 X86_64_ONLY(gen_helper_cvtsq2sd),
2932
2933 gen_helper_cvttss2si,
2934 gen_helper_cvttsd2si,
2935 X86_64_ONLY(gen_helper_cvttss2sq),
2936 X86_64_ONLY(gen_helper_cvttsd2sq),
2937
2938 gen_helper_cvtss2si,
2939 gen_helper_cvtsd2si,
2940 X86_64_ONLY(gen_helper_cvtss2sq),
2941 X86_64_ONLY(gen_helper_cvtsd2sq),
2942 };
2943
2944 static void *sse_op_table4[8][4] = {
2945 SSE_FOP(cmpeq),
2946 SSE_FOP(cmplt),
2947 SSE_FOP(cmple),
2948 SSE_FOP(cmpunord),
2949 SSE_FOP(cmpneq),
2950 SSE_FOP(cmpnlt),
2951 SSE_FOP(cmpnle),
2952 SSE_FOP(cmpord),
2953 };
2954
2955 static void *sse_op_table5[256] = {
2956 [0x0c] = gen_helper_pi2fw,
2957 [0x0d] = gen_helper_pi2fd,
2958 [0x1c] = gen_helper_pf2iw,
2959 [0x1d] = gen_helper_pf2id,
2960 [0x8a] = gen_helper_pfnacc,
2961 [0x8e] = gen_helper_pfpnacc,
2962 [0x90] = gen_helper_pfcmpge,
2963 [0x94] = gen_helper_pfmin,
2964 [0x96] = gen_helper_pfrcp,
2965 [0x97] = gen_helper_pfrsqrt,
2966 [0x9a] = gen_helper_pfsub,
2967 [0x9e] = gen_helper_pfadd,
2968 [0xa0] = gen_helper_pfcmpgt,
2969 [0xa4] = gen_helper_pfmax,
2970 [0xa6] = gen_helper_movq, /* pfrcpit1; no need to actually increase precision */
2971 [0xa7] = gen_helper_movq, /* pfrsqit1 */
2972 [0xaa] = gen_helper_pfsubr,
2973 [0xae] = gen_helper_pfacc,
2974 [0xb0] = gen_helper_pfcmpeq,
2975 [0xb4] = gen_helper_pfmul,
2976 [0xb6] = gen_helper_movq, /* pfrcpit2 */
2977 [0xb7] = gen_helper_pmulhrw_mmx,
2978 [0xbb] = gen_helper_pswapd,
2979 [0xbf] = gen_helper_pavgb_mmx /* pavgusb */
2980 };
2981
2982 struct sse_op_helper_s {
2983 void *op[2]; uint32_t ext_mask;
2984 };
2985 #define SSSE3_OP(x) { MMX_OP2(x), CPUID_EXT_SSSE3 }
2986 #define SSE41_OP(x) { { NULL, gen_helper_ ## x ## _xmm }, CPUID_EXT_SSE41 }
2987 #define SSE42_OP(x) { { NULL, gen_helper_ ## x ## _xmm }, CPUID_EXT_SSE42 }
2988 #define SSE41_SPECIAL { { NULL, SSE_SPECIAL }, CPUID_EXT_SSE41 }
2989 static struct sse_op_helper_s sse_op_table6[256] = {
2990 [0x00] = SSSE3_OP(pshufb),
2991 [0x01] = SSSE3_OP(phaddw),
2992 [0x02] = SSSE3_OP(phaddd),
2993 [0x03] = SSSE3_OP(phaddsw),
2994 [0x04] = SSSE3_OP(pmaddubsw),
2995 [0x05] = SSSE3_OP(phsubw),
2996 [0x06] = SSSE3_OP(phsubd),
2997 [0x07] = SSSE3_OP(phsubsw),
2998 [0x08] = SSSE3_OP(psignb),
2999 [0x09] = SSSE3_OP(psignw),
3000 [0x0a] = SSSE3_OP(psignd),
3001 [0x0b] = SSSE3_OP(pmulhrsw),
3002 [0x10] = SSE41_OP(pblendvb),
3003 [0x14] = SSE41_OP(blendvps),
3004 [0x15] = SSE41_OP(blendvpd),
3005 [0x17] = SSE41_OP(ptest),
3006 [0x1c] = SSSE3_OP(pabsb),
3007 [0x1d] = SSSE3_OP(pabsw),
3008 [0x1e] = SSSE3_OP(pabsd),
3009 [0x20] = SSE41_OP(pmovsxbw),
3010 [0x21] = SSE41_OP(pmovsxbd),
3011 [0x22] = SSE41_OP(pmovsxbq),
3012 [0x23] = SSE41_OP(pmovsxwd),
3013 [0x24] = SSE41_OP(pmovsxwq),
3014 [0x25] = SSE41_OP(pmovsxdq),
3015 [0x28] = SSE41_OP(pmuldq),
3016 [0x29] = SSE41_OP(pcmpeqq),
3017 [0x2a] = SSE41_SPECIAL, /* movntqda */
3018 [0x2b] = SSE41_OP(packusdw),
3019 [0x30] = SSE41_OP(pmovzxbw),
3020 [0x31] = SSE41_OP(pmovzxbd),
3021 [0x32] = SSE41_OP(pmovzxbq),
3022 [0x33] = SSE41_OP(pmovzxwd),
3023 [0x34] = SSE41_OP(pmovzxwq),
3024 [0x35] = SSE41_OP(pmovzxdq),
3025 [0x37] = SSE42_OP(pcmpgtq),
3026 [0x38] = SSE41_OP(pminsb),
3027 [0x39] = SSE41_OP(pminsd),
3028 [0x3a] = SSE41_OP(pminuw),
3029 [0x3b] = SSE41_OP(pminud),
3030 [0x3c] = SSE41_OP(pmaxsb),
3031 [0x3d] = SSE41_OP(pmaxsd),
3032 [0x3e] = SSE41_OP(pmaxuw),
3033 [0x3f] = SSE41_OP(pmaxud),
3034 [0x40] = SSE41_OP(pmulld),
3035 [0x41] = SSE41_OP(phminposuw),
3036 };
3037
3038 static struct sse_op_helper_s sse_op_table7[256] = {
3039 [0x08] = SSE41_OP(roundps),
3040 [0x09] = SSE41_OP(roundpd),
3041 [0x0a] = SSE41_OP(roundss),
3042 [0x0b] = SSE41_OP(roundsd),
3043 [0x0c] = SSE41_OP(blendps),
3044 [0x0d] = SSE41_OP(blendpd),
3045 [0x0e] = SSE41_OP(pblendw),
3046 [0x0f] = SSSE3_OP(palignr),
3047 [0x14] = SSE41_SPECIAL, /* pextrb */
3048 [0x15] = SSE41_SPECIAL, /* pextrw */
3049 [0x16] = SSE41_SPECIAL, /* pextrd/pextrq */
3050 [0x17] = SSE41_SPECIAL, /* extractps */
3051 [0x20] = SSE41_SPECIAL, /* pinsrb */
3052 [0x21] = SSE41_SPECIAL, /* insertps */
3053 [0x22] = SSE41_SPECIAL, /* pinsrd/pinsrq */
3054 [0x40] = SSE41_OP(dpps),
3055 [0x41] = SSE41_OP(dppd),
3056 [0x42] = SSE41_OP(mpsadbw),
3057 [0x60] = SSE42_OP(pcmpestrm),
3058 [0x61] = SSE42_OP(pcmpestri),
3059 [0x62] = SSE42_OP(pcmpistrm),
3060 [0x63] = SSE42_OP(pcmpistri),
3061 };
3062
3063 static void gen_sse(DisasContext *s, int b, target_ulong pc_start, int rex_r)
3064 {
3065 int b1, op1_offset, op2_offset, is_xmm, val, ot;
3066 int modrm, mod, rm, reg, reg_addr, offset_addr;
3067 void *sse_op2;
3068
3069 b &= 0xff;
3070 if (s->prefix & PREFIX_DATA)
3071 b1 = 1;
3072 else if (s->prefix & PREFIX_REPZ)
3073 b1 = 2;
3074 else if (s->prefix & PREFIX_REPNZ)
3075 b1 = 3;
3076 else
3077 b1 = 0;
3078 sse_op2 = sse_op_table1[b][b1];
3079 if (!sse_op2)
3080 goto illegal_op;
3081 if ((b <= 0x5f && b >= 0x10) || b == 0xc6 || b == 0xc2) {
3082 is_xmm = 1;
3083 } else {
3084 if (b1 == 0) {
3085 /* MMX case */
3086 is_xmm = 0;
3087 } else {
3088 is_xmm = 1;
3089 }
3090 }
3091 /* simple MMX/SSE operation */
3092 if (s->flags & HF_TS_MASK) {
3093 gen_exception(s, EXCP07_PREX, pc_start - s->cs_base);
3094 return;
3095 }
3096 if (s->flags & HF_EM_MASK) {
3097 illegal_op:
3098 gen_exception(s, EXCP06_ILLOP, pc_start - s->cs_base);
3099 return;
3100 }
3101 if (is_xmm && !(s->flags & HF_OSFXSR_MASK))
3102 if ((b != 0x38 && b != 0x3a) || (s->prefix & PREFIX_DATA))
3103 goto illegal_op;
3104 if (b == 0x0e) {
3105 if (!(s->cpuid_ext2_features & CPUID_EXT2_3DNOW))
3106 goto illegal_op;
3107 /* femms */
3108 gen_helper_emms();
3109 return;
3110 }
3111 if (b == 0x77) {
3112 /* emms */
3113 gen_helper_emms();
3114 return;
3115 }
3116 /* prepare MMX state (XXX: optimize by storing fptt and fptags in
3117 the static cpu state) */
3118 if (!is_xmm) {
3119 gen_helper_enter_mmx();
3120 }
3121
3122 modrm = ldub_code(s->pc++);
3123 reg = ((modrm >> 3) & 7);
3124 if (is_xmm)
3125 reg |= rex_r;
3126 mod = (modrm >> 6) & 3;
3127 if (sse_op2 == SSE_SPECIAL) {
3128 b |= (b1 << 8);
3129 switch(b) {
3130 case 0x0e7: /* movntq */
3131 if (mod == 3)
3132 goto illegal_op;
3133 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3134 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,fpregs[reg].mmx));
3135 break;
3136 case 0x1e7: /* movntdq */
3137 case 0x02b: /* movntps */
3138 case 0x12b: /* movntps */
3139 if (mod == 3)
3140 goto illegal_op;
3141 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3142 gen_sto_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg]));
3143 break;
3144 case 0x3f0: /* lddqu */
3145 if (mod == 3)
3146 goto illegal_op;
3147 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3148 gen_ldo_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg]));
3149 break;
3150 case 0x22b: /* movntss */
3151 case 0x32b: /* movntsd */
3152 if (mod == 3)
3153 goto illegal_op;
3154 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3155 if (b1 & 1) {
3156 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,
3157 xmm_regs[reg]));
3158 } else {
3159 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,
3160 xmm_regs[reg].XMM_L(0)));
3161 gen_op_st_T0_A0(OT_LONG + s->mem_index);
3162 }
3163 break;
3164 case 0x6e: /* movd mm, ea */
3165 #ifdef TARGET_X86_64
3166 if (s->dflag == 2) {
3167 gen_ldst_modrm(s, modrm, OT_QUAD, OR_TMP0, 0);
3168 tcg_gen_st_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,fpregs[reg].mmx));
3169 } else
3170 #endif
3171 {
3172 gen_ldst_modrm(s, modrm, OT_LONG, OR_TMP0, 0);
3173 tcg_gen_addi_ptr(cpu_ptr0, cpu_env,
3174 offsetof(CPUX86State,fpregs[reg].mmx));
3175 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
3176 gen_helper_movl_mm_T0_mmx(cpu_ptr0, cpu_tmp2_i32);
3177 }
3178 break;
3179 case 0x16e: /* movd xmm, ea */
3180 #ifdef TARGET_X86_64
3181 if (s->dflag == 2) {
3182 gen_ldst_modrm(s, modrm, OT_QUAD, OR_TMP0, 0);
3183 tcg_gen_addi_ptr(cpu_ptr0, cpu_env,
3184 offsetof(CPUX86State,xmm_regs[reg]));
3185 gen_helper_movq_mm_T0_xmm(cpu_ptr0, cpu_T[0]);
3186 } else
3187 #endif
3188 {
3189 gen_ldst_modrm(s, modrm, OT_LONG, OR_TMP0, 0);
3190 tcg_gen_addi_ptr(cpu_ptr0, cpu_env,
3191 offsetof(CPUX86State,xmm_regs[reg]));
3192 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
3193 gen_helper_movl_mm_T0_xmm(cpu_ptr0, cpu_tmp2_i32);
3194 }
3195 break;
3196 case 0x6f: /* movq mm, ea */
3197 if (mod != 3) {
3198 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3199 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,fpregs[reg].mmx));
3200 } else {
3201 rm = (modrm & 7);
3202 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env,
3203 offsetof(CPUX86State,fpregs[rm].mmx));
3204 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env,
3205 offsetof(CPUX86State,fpregs[reg].mmx));
3206 }
3207 break;
3208 case 0x010: /* movups */
3209 case 0x110: /* movupd */
3210 case 0x028: /* movaps */
3211 case 0x128: /* movapd */
3212 case 0x16f: /* movdqa xmm, ea */
3213 case 0x26f: /* movdqu xmm, ea */
3214 if (mod != 3) {
3215 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3216 gen_ldo_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg]));
3217 } else {
3218 rm = (modrm & 7) | REX_B(s);
3219 gen_op_movo(offsetof(CPUX86State,xmm_regs[reg]),
3220 offsetof(CPUX86State,xmm_regs[rm]));
3221 }
3222 break;
3223 case 0x210: /* movss xmm, ea */
3224 if (mod != 3) {
3225 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3226 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
3227 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)));
3228 gen_op_movl_T0_0();
3229 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(1)));
3230 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(2)));
3231 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(3)));
3232 } else {
3233 rm = (modrm & 7) | REX_B(s);
3234 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)),
3235 offsetof(CPUX86State,xmm_regs[rm].XMM_L(0)));
3236 }
3237 break;
3238 case 0x310: /* movsd xmm, ea */
3239 if (mod != 3) {
3240 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3241 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3242 gen_op_movl_T0_0();
3243 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(2)));
3244 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(3)));
3245 } else {
3246 rm = (modrm & 7) | REX_B(s);
3247 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)),
3248 offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)));
3249 }
3250 break;
3251 case 0x012: /* movlps */
3252 case 0x112: /* movlpd */
3253 if (mod != 3) {
3254 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3255 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3256 } else {
3257 /* movhlps */
3258 rm = (modrm & 7) | REX_B(s);
3259 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)),
3260 offsetof(CPUX86State,xmm_regs[rm].XMM_Q(1)));
3261 }
3262 break;
3263 case 0x212: /* movsldup */
3264 if (mod != 3) {
3265 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3266 gen_ldo_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg]));
3267 } else {
3268 rm = (modrm & 7) | REX_B(s);
3269 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)),
3270 offsetof(CPUX86State,xmm_regs[rm].XMM_L(0)));
3271 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(2)),
3272 offsetof(CPUX86State,xmm_regs[rm].XMM_L(2)));
3273 }
3274 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(1)),
3275 offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)));
3276 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(3)),
3277 offsetof(CPUX86State,xmm_regs[reg].XMM_L(2)));
3278 break;
3279 case 0x312: /* movddup */
3280 if (mod != 3) {
3281 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3282 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3283 } else {
3284 rm = (modrm & 7) | REX_B(s);
3285 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)),
3286 offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)));
3287 }
3288 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(1)),
3289 offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3290 break;
3291 case 0x016: /* movhps */
3292 case 0x116: /* movhpd */
3293 if (mod != 3) {
3294 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3295 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(1)));
3296 } else {
3297 /* movlhps */
3298 rm = (modrm & 7) | REX_B(s);
3299 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(1)),
3300 offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)));
3301 }
3302 break;
3303 case 0x216: /* movshdup */
3304 if (mod != 3) {
3305 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3306 gen_ldo_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg]));
3307 } else {
3308 rm = (modrm & 7) | REX_B(s);
3309 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(1)),
3310 offsetof(CPUX86State,xmm_regs[rm].XMM_L(1)));
3311 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(3)),
3312 offsetof(CPUX86State,xmm_regs[rm].XMM_L(3)));
3313 }
3314 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)),
3315 offsetof(CPUX86State,xmm_regs[reg].XMM_L(1)));
3316 gen_op_movl(offsetof(CPUX86State,xmm_regs[reg].XMM_L(2)),
3317 offsetof(CPUX86State,xmm_regs[reg].XMM_L(3)));
3318 break;
3319 case 0x178:
3320 case 0x378:
3321 {
3322 int bit_index, field_length;
3323
3324 if (b1 == 1 && reg != 0)
3325 goto illegal_op;
3326 field_length = ldub_code(s->pc++) & 0x3F;
3327 bit_index = ldub_code(s->pc++) & 0x3F;
3328 tcg_gen_addi_ptr(cpu_ptr0, cpu_env,
3329 offsetof(CPUX86State,xmm_regs[reg]));
3330 if (b1 == 1)
3331 gen_helper_extrq_i(cpu_ptr0, tcg_const_i32(bit_index),
3332 tcg_const_i32(field_length));
3333 else
3334 gen_helper_insertq_i(cpu_ptr0, tcg_const_i32(bit_index),
3335 tcg_const_i32(field_length));
3336 }
3337 break;
3338 case 0x7e: /* movd ea, mm */
3339 #ifdef TARGET_X86_64
3340 if (s->dflag == 2) {
3341 tcg_gen_ld_i64(cpu_T[0], cpu_env,
3342 offsetof(CPUX86State,fpregs[reg].mmx));
3343 gen_ldst_modrm(s, modrm, OT_QUAD, OR_TMP0, 1);
3344 } else
3345 #endif
3346 {
3347 tcg_gen_ld32u_tl(cpu_T[0], cpu_env,
3348 offsetof(CPUX86State,fpregs[reg].mmx.MMX_L(0)));
3349 gen_ldst_modrm(s, modrm, OT_LONG, OR_TMP0, 1);
3350 }
3351 break;
3352 case 0x17e: /* movd ea, xmm */
3353 #ifdef TARGET_X86_64
3354 if (s->dflag == 2) {
3355 tcg_gen_ld_i64(cpu_T[0], cpu_env,
3356 offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3357 gen_ldst_modrm(s, modrm, OT_QUAD, OR_TMP0, 1);
3358 } else
3359 #endif
3360 {
3361 tcg_gen_ld32u_tl(cpu_T[0], cpu_env,
3362 offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)));
3363 gen_ldst_modrm(s, modrm, OT_LONG, OR_TMP0, 1);
3364 }
3365 break;
3366 case 0x27e: /* movq xmm, ea */
3367 if (mod != 3) {
3368 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3369 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3370 } else {
3371 rm = (modrm & 7) | REX_B(s);
3372 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)),
3373 offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)));
3374 }
3375 gen_op_movq_env_0(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(1)));
3376 break;
3377 case 0x7f: /* movq ea, mm */
3378 if (mod != 3) {
3379 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3380 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,fpregs[reg].mmx));
3381 } else {
3382 rm = (modrm & 7);
3383 gen_op_movq(offsetof(CPUX86State,fpregs[rm].mmx),
3384 offsetof(CPUX86State,fpregs[reg].mmx));
3385 }
3386 break;
3387 case 0x011: /* movups */
3388 case 0x111: /* movupd */
3389 case 0x029: /* movaps */
3390 case 0x129: /* movapd */
3391 case 0x17f: /* movdqa ea, xmm */
3392 case 0x27f: /* movdqu ea, xmm */
3393 if (mod != 3) {
3394 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3395 gen_sto_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg]));
3396 } else {
3397 rm = (modrm & 7) | REX_B(s);
3398 gen_op_movo(offsetof(CPUX86State,xmm_regs[rm]),
3399 offsetof(CPUX86State,xmm_regs[reg]));
3400 }
3401 break;
3402 case 0x211: /* movss ea, xmm */
3403 if (mod != 3) {
3404 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3405 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)));
3406 gen_op_st_T0_A0(OT_LONG + s->mem_index);
3407 } else {
3408 rm = (modrm & 7) | REX_B(s);
3409 gen_op_movl(offsetof(CPUX86State,xmm_regs[rm].XMM_L(0)),
3410 offsetof(CPUX86State,xmm_regs[reg].XMM_L(0)));
3411 }
3412 break;
3413 case 0x311: /* movsd ea, xmm */
3414 if (mod != 3) {
3415 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3416 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3417 } else {
3418 rm = (modrm & 7) | REX_B(s);
3419 gen_op_movq(offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)),
3420 offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3421 }
3422 break;
3423 case 0x013: /* movlps */
3424 case 0x113: /* movlpd */
3425 if (mod != 3) {
3426 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3427 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3428 } else {
3429 goto illegal_op;
3430 }
3431 break;
3432 case 0x017: /* movhps */
3433 case 0x117: /* movhpd */
3434 if (mod != 3) {
3435 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3436 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(1)));
3437 } else {
3438 goto illegal_op;
3439 }
3440 break;
3441 case 0x71: /* shift mm, im */
3442 case 0x72:
3443 case 0x73:
3444 case 0x171: /* shift xmm, im */
3445 case 0x172:
3446 case 0x173:
3447 if (b1 >= 2) {
3448 goto illegal_op;
3449 }
3450 val = ldub_code(s->pc++);
3451 if (is_xmm) {
3452 gen_op_movl_T0_im(val);
3453 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_t0.XMM_L(0)));
3454 gen_op_movl_T0_0();
3455 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_t0.XMM_L(1)));
3456 op1_offset = offsetof(CPUX86State,xmm_t0);
3457 } else {
3458 gen_op_movl_T0_im(val);
3459 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,mmx_t0.MMX_L(0)));
3460 gen_op_movl_T0_0();
3461 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,mmx_t0.MMX_L(1)));
3462 op1_offset = offsetof(CPUX86State,mmx_t0);
3463 }
3464 sse_op2 = sse_op_table2[((b - 1) & 3) * 8 + (((modrm >> 3)) & 7)][b1];
3465 if (!sse_op2)
3466 goto illegal_op;
3467 if (is_xmm) {
3468 rm = (modrm & 7) | REX_B(s);
3469 op2_offset = offsetof(CPUX86State,xmm_regs[rm]);
3470 } else {
3471 rm = (modrm & 7);
3472 op2_offset = offsetof(CPUX86State,fpregs[rm].mmx);
3473 }
3474 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op2_offset);
3475 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op1_offset);
3476 ((void (*)(TCGv_ptr, TCGv_ptr))sse_op2)(cpu_ptr0, cpu_ptr1);
3477 break;
3478 case 0x050: /* movmskps */
3479 rm = (modrm & 7) | REX_B(s);
3480 tcg_gen_addi_ptr(cpu_ptr0, cpu_env,
3481 offsetof(CPUX86State,xmm_regs[rm]));
3482 gen_helper_movmskps(cpu_tmp2_i32, cpu_ptr0);
3483 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
3484 gen_op_mov_reg_T0(OT_LONG, reg);
3485 break;
3486 case 0x150: /* movmskpd */
3487 rm = (modrm & 7) | REX_B(s);
3488 tcg_gen_addi_ptr(cpu_ptr0, cpu_env,
3489 offsetof(CPUX86State,xmm_regs[rm]));
3490 gen_helper_movmskpd(cpu_tmp2_i32, cpu_ptr0);
3491 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
3492 gen_op_mov_reg_T0(OT_LONG, reg);
3493 break;
3494 case 0x02a: /* cvtpi2ps */
3495 case 0x12a: /* cvtpi2pd */
3496 gen_helper_enter_mmx();
3497 if (mod != 3) {
3498 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3499 op2_offset = offsetof(CPUX86State,mmx_t0);
3500 gen_ldq_env_A0(s->mem_index, op2_offset);
3501 } else {
3502 rm = (modrm & 7);
3503 op2_offset = offsetof(CPUX86State,fpregs[rm].mmx);
3504 }
3505 op1_offset = offsetof(CPUX86State,xmm_regs[reg]);
3506 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
3507 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
3508 switch(b >> 8) {
3509 case 0x0:
3510 gen_helper_cvtpi2ps(cpu_ptr0, cpu_ptr1);
3511 break;
3512 default:
3513 case 0x1:
3514 gen_helper_cvtpi2pd(cpu_ptr0, cpu_ptr1);
3515 break;
3516 }
3517 break;
3518 case 0x22a: /* cvtsi2ss */
3519 case 0x32a: /* cvtsi2sd */
3520 ot = (s->dflag == 2) ? OT_QUAD : OT_LONG;
3521 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 0);
3522 op1_offset = offsetof(CPUX86State,xmm_regs[reg]);
3523 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
3524 sse_op2 = sse_op_table3[(s->dflag == 2) * 2 + ((b >> 8) - 2)];
3525 if (ot == OT_LONG) {
3526 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
3527 ((void (*)(TCGv_ptr, TCGv_i32))sse_op2)(cpu_ptr0, cpu_tmp2_i32);
3528 } else {
3529 ((void (*)(TCGv_ptr, TCGv))sse_op2)(cpu_ptr0, cpu_T[0]);
3530 }
3531 break;
3532 case 0x02c: /* cvttps2pi */
3533 case 0x12c: /* cvttpd2pi */
3534 case 0x02d: /* cvtps2pi */
3535 case 0x12d: /* cvtpd2pi */
3536 gen_helper_enter_mmx();
3537 if (mod != 3) {
3538 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3539 op2_offset = offsetof(CPUX86State,xmm_t0);
3540 gen_ldo_env_A0(s->mem_index, op2_offset);
3541 } else {
3542 rm = (modrm & 7) | REX_B(s);
3543 op2_offset = offsetof(CPUX86State,xmm_regs[rm]);
3544 }
3545 op1_offset = offsetof(CPUX86State,fpregs[reg & 7].mmx);
3546 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
3547 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
3548 switch(b) {
3549 case 0x02c:
3550 gen_helper_cvttps2pi(cpu_ptr0, cpu_ptr1);
3551 break;
3552 case 0x12c:
3553 gen_helper_cvttpd2pi(cpu_ptr0, cpu_ptr1);
3554 break;
3555 case 0x02d:
3556 gen_helper_cvtps2pi(cpu_ptr0, cpu_ptr1);
3557 break;
3558 case 0x12d:
3559 gen_helper_cvtpd2pi(cpu_ptr0, cpu_ptr1);
3560 break;
3561 }
3562 break;
3563 case 0x22c: /* cvttss2si */
3564 case 0x32c: /* cvttsd2si */
3565 case 0x22d: /* cvtss2si */
3566 case 0x32d: /* cvtsd2si */
3567 ot = (s->dflag == 2) ? OT_QUAD : OT_LONG;
3568 if (mod != 3) {
3569 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3570 if ((b >> 8) & 1) {
3571 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_t0.XMM_Q(0)));
3572 } else {
3573 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
3574 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_t0.XMM_L(0)));
3575 }
3576 op2_offset = offsetof(CPUX86State,xmm_t0);
3577 } else {
3578 rm = (modrm & 7) | REX_B(s);
3579 op2_offset = offsetof(CPUX86State,xmm_regs[rm]);
3580 }
3581 sse_op2 = sse_op_table3[(s->dflag == 2) * 2 + ((b >> 8) - 2) + 4 +
3582 (b & 1) * 4];
3583 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op2_offset);
3584 if (ot == OT_LONG) {
3585 ((void (*)(TCGv_i32, TCGv_ptr))sse_op2)(cpu_tmp2_i32, cpu_ptr0);
3586 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
3587 } else {
3588 ((void (*)(TCGv, TCGv_ptr))sse_op2)(cpu_T[0], cpu_ptr0);
3589 }
3590 gen_op_mov_reg_T0(ot, reg);
3591 break;
3592 case 0xc4: /* pinsrw */
3593 case 0x1c4:
3594 s->rip_offset = 1;
3595 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
3596 val = ldub_code(s->pc++);
3597 if (b1) {
3598 val &= 7;
3599 tcg_gen_st16_tl(cpu_T[0], cpu_env,
3600 offsetof(CPUX86State,xmm_regs[reg].XMM_W(val)));
3601 } else {
3602 val &= 3;
3603 tcg_gen_st16_tl(cpu_T[0], cpu_env,
3604 offsetof(CPUX86State,fpregs[reg].mmx.MMX_W(val)));
3605 }
3606 break;
3607 case 0xc5: /* pextrw */
3608 case 0x1c5:
3609 if (mod != 3)
3610 goto illegal_op;
3611 ot = (s->dflag == 2) ? OT_QUAD : OT_LONG;
3612 val = ldub_code(s->pc++);
3613 if (b1) {
3614 val &= 7;
3615 rm = (modrm & 7) | REX_B(s);
3616 tcg_gen_ld16u_tl(cpu_T[0], cpu_env,
3617 offsetof(CPUX86State,xmm_regs[rm].XMM_W(val)));
3618 } else {
3619 val &= 3;
3620 rm = (modrm & 7);
3621 tcg_gen_ld16u_tl(cpu_T[0], cpu_env,
3622 offsetof(CPUX86State,fpregs[rm].mmx.MMX_W(val)));
3623 }
3624 reg = ((modrm >> 3) & 7) | rex_r;
3625 gen_op_mov_reg_T0(ot, reg);
3626 break;
3627 case 0x1d6: /* movq ea, xmm */
3628 if (mod != 3) {
3629 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3630 gen_stq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3631 } else {
3632 rm = (modrm & 7) | REX_B(s);
3633 gen_op_movq(offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)),
3634 offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)));
3635 gen_op_movq_env_0(offsetof(CPUX86State,xmm_regs[rm].XMM_Q(1)));
3636 }
3637 break;
3638 case 0x2d6: /* movq2dq */
3639 gen_helper_enter_mmx();
3640 rm = (modrm & 7);
3641 gen_op_movq(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(0)),
3642 offsetof(CPUX86State,fpregs[rm].mmx));
3643 gen_op_movq_env_0(offsetof(CPUX86State,xmm_regs[reg].XMM_Q(1)));
3644 break;
3645 case 0x3d6: /* movdq2q */
3646 gen_helper_enter_mmx();
3647 rm = (modrm & 7) | REX_B(s);
3648 gen_op_movq(offsetof(CPUX86State,fpregs[reg & 7].mmx),
3649 offsetof(CPUX86State,xmm_regs[rm].XMM_Q(0)));
3650 break;
3651 case 0xd7: /* pmovmskb */
3652 case 0x1d7:
3653 if (mod != 3)
3654 goto illegal_op;
3655 if (b1) {
3656 rm = (modrm & 7) | REX_B(s);
3657 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, offsetof(CPUX86State,xmm_regs[rm]));
3658 gen_helper_pmovmskb_xmm(cpu_tmp2_i32, cpu_ptr0);
3659 } else {
3660 rm = (modrm & 7);
3661 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, offsetof(CPUX86State,fpregs[rm].mmx));
3662 gen_helper_pmovmskb_mmx(cpu_tmp2_i32, cpu_ptr0);
3663 }
3664 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
3665 reg = ((modrm >> 3) & 7) | rex_r;
3666 gen_op_mov_reg_T0(OT_LONG, reg);
3667 break;
3668 case 0x138:
3669 if (s->prefix & PREFIX_REPNZ)
3670 goto crc32;
3671 case 0x038:
3672 b = modrm;
3673 modrm = ldub_code(s->pc++);
3674 rm = modrm & 7;
3675 reg = ((modrm >> 3) & 7) | rex_r;
3676 mod = (modrm >> 6) & 3;
3677 if (b1 >= 2) {
3678 goto illegal_op;
3679 }
3680
3681 sse_op2 = sse_op_table6[b].op[b1];
3682 if (!sse_op2)
3683 goto illegal_op;
3684 if (!(s->cpuid_ext_features & sse_op_table6[b].ext_mask))
3685 goto illegal_op;
3686
3687 if (b1) {
3688 op1_offset = offsetof(CPUX86State,xmm_regs[reg]);
3689 if (mod == 3) {
3690 op2_offset = offsetof(CPUX86State,xmm_regs[rm | REX_B(s)]);
3691 } else {
3692 op2_offset = offsetof(CPUX86State,xmm_t0);
3693 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3694 switch (b) {
3695 case 0x20: case 0x30: /* pmovsxbw, pmovzxbw */
3696 case 0x23: case 0x33: /* pmovsxwd, pmovzxwd */
3697 case 0x25: case 0x35: /* pmovsxdq, pmovzxdq */
3698 gen_ldq_env_A0(s->mem_index, op2_offset +
3699 offsetof(XMMReg, XMM_Q(0)));
3700 break;
3701 case 0x21: case 0x31: /* pmovsxbd, pmovzxbd */
3702 case 0x24: case 0x34: /* pmovsxwq, pmovzxwq */
3703 tcg_gen_qemu_ld32u(cpu_tmp0, cpu_A0,
3704 (s->mem_index >> 2) - 1);
3705 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_tmp0);
3706 tcg_gen_st_i32(cpu_tmp2_i32, cpu_env, op2_offset +
3707 offsetof(XMMReg, XMM_L(0)));
3708 break;
3709 case 0x22: case 0x32: /* pmovsxbq, pmovzxbq */
3710 tcg_gen_qemu_ld16u(cpu_tmp0, cpu_A0,
3711 (s->mem_index >> 2) - 1);
3712 tcg_gen_st16_tl(cpu_tmp0, cpu_env, op2_offset +
3713 offsetof(XMMReg, XMM_W(0)));
3714 break;
3715 case 0x2a: /* movntqda */
3716 gen_ldo_env_A0(s->mem_index, op1_offset);
3717 return;
3718 default:
3719 gen_ldo_env_A0(s->mem_index, op2_offset);
3720 }
3721 }
3722 } else {
3723 op1_offset = offsetof(CPUX86State,fpregs[reg].mmx);
3724 if (mod == 3) {
3725 op2_offset = offsetof(CPUX86State,fpregs[rm].mmx);
3726 } else {
3727 op2_offset = offsetof(CPUX86State,mmx_t0);
3728 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3729 gen_ldq_env_A0(s->mem_index, op2_offset);
3730 }
3731 }
3732 if (sse_op2 == SSE_SPECIAL)
3733 goto illegal_op;
3734
3735 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
3736 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
3737 ((void (*)(TCGv_ptr, TCGv_ptr))sse_op2)(cpu_ptr0, cpu_ptr1);
3738
3739 if (b == 0x17)
3740 s->cc_op = CC_OP_EFLAGS;
3741 break;
3742 case 0x338: /* crc32 */
3743 crc32:
3744 b = modrm;
3745 modrm = ldub_code(s->pc++);
3746 reg = ((modrm >> 3) & 7) | rex_r;
3747
3748 if (b != 0xf0 && b != 0xf1)
3749 goto illegal_op;
3750 if (!(s->cpuid_ext_features & CPUID_EXT_SSE42))
3751 goto illegal_op;
3752
3753 if (b == 0xf0)
3754 ot = OT_BYTE;
3755 else if (b == 0xf1 && s->dflag != 2)
3756 if (s->prefix & PREFIX_DATA)
3757 ot = OT_WORD;
3758 else
3759 ot = OT_LONG;
3760 else
3761 ot = OT_QUAD;
3762
3763 gen_op_mov_TN_reg(OT_LONG, 0, reg);
3764 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
3765 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 0);
3766 gen_helper_crc32(cpu_T[0], cpu_tmp2_i32,
3767 cpu_T[0], tcg_const_i32(8 << ot));
3768
3769 ot = (s->dflag == 2) ? OT_QUAD : OT_LONG;
3770 gen_op_mov_reg_T0(ot, reg);
3771 break;
3772 case 0x03a:
3773 case 0x13a:
3774 b = modrm;
3775 modrm = ldub_code(s->pc++);
3776 rm = modrm & 7;
3777 reg = ((modrm >> 3) & 7) | rex_r;
3778 mod = (modrm >> 6) & 3;
3779 if (b1 >= 2) {
3780 goto illegal_op;
3781 }
3782
3783 sse_op2 = sse_op_table7[b].op[b1];
3784 if (!sse_op2)
3785 goto illegal_op;
3786 if (!(s->cpuid_ext_features & sse_op_table7[b].ext_mask))
3787 goto illegal_op;
3788
3789 if (sse_op2 == SSE_SPECIAL) {
3790 ot = (s->dflag == 2) ? OT_QUAD : OT_LONG;
3791 rm = (modrm & 7) | REX_B(s);
3792 if (mod != 3)
3793 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3794 reg = ((modrm >> 3) & 7) | rex_r;
3795 val = ldub_code(s->pc++);
3796 switch (b) {
3797 case 0x14: /* pextrb */
3798 tcg_gen_ld8u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,
3799 xmm_regs[reg].XMM_B(val & 15)));
3800 if (mod == 3)
3801 gen_op_mov_reg_T0(ot, rm);
3802 else
3803 tcg_gen_qemu_st8(cpu_T[0], cpu_A0,
3804 (s->mem_index >> 2) - 1);
3805 break;
3806 case 0x15: /* pextrw */
3807 tcg_gen_ld16u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,
3808 xmm_regs[reg].XMM_W(val & 7)));
3809 if (mod == 3)
3810 gen_op_mov_reg_T0(ot, rm);
3811 else
3812 tcg_gen_qemu_st16(cpu_T[0], cpu_A0,
3813 (s->mem_index >> 2) - 1);
3814 break;
3815 case 0x16:
3816 if (ot == OT_LONG) { /* pextrd */
3817 tcg_gen_ld_i32(cpu_tmp2_i32, cpu_env,
3818 offsetof(CPUX86State,
3819 xmm_regs[reg].XMM_L(val & 3)));
3820 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
3821 if (mod == 3)
3822 gen_op_mov_reg_v(ot, rm, cpu_T[0]);
3823 else
3824 tcg_gen_qemu_st32(cpu_T[0], cpu_A0,
3825 (s->mem_index >> 2) - 1);
3826 } else { /* pextrq */
3827 #ifdef TARGET_X86_64
3828 tcg_gen_ld_i64(cpu_tmp1_i64, cpu_env,
3829 offsetof(CPUX86State,
3830 xmm_regs[reg].XMM_Q(val & 1)));
3831 if (mod == 3)
3832 gen_op_mov_reg_v(ot, rm, cpu_tmp1_i64);
3833 else
3834 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_A0,
3835 (s->mem_index >> 2) - 1);
3836 #else
3837 goto illegal_op;
3838 #endif
3839 }
3840 break;
3841 case 0x17: /* extractps */
3842 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,
3843 xmm_regs[reg].XMM_L(val & 3)));
3844 if (mod == 3)
3845 gen_op_mov_reg_T0(ot, rm);
3846 else
3847 tcg_gen_qemu_st32(cpu_T[0], cpu_A0,
3848 (s->mem_index >> 2) - 1);
3849 break;
3850 case 0x20: /* pinsrb */
3851 if (mod == 3)
3852 gen_op_mov_TN_reg(OT_LONG, 0, rm);
3853 else
3854 tcg_gen_qemu_ld8u(cpu_tmp0, cpu_A0,
3855 (s->mem_index >> 2) - 1);
3856 tcg_gen_st8_tl(cpu_tmp0, cpu_env, offsetof(CPUX86State,
3857 xmm_regs[reg].XMM_B(val & 15)));
3858 break;
3859 case 0x21: /* insertps */
3860 if (mod == 3) {
3861 tcg_gen_ld_i32(cpu_tmp2_i32, cpu_env,
3862 offsetof(CPUX86State,xmm_regs[rm]
3863 .XMM_L((val >> 6) & 3)));
3864 } else {
3865 tcg_gen_qemu_ld32u(cpu_tmp0, cpu_A0,
3866 (s->mem_index >> 2) - 1);
3867 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_tmp0);
3868 }
3869 tcg_gen_st_i32(cpu_tmp2_i32, cpu_env,
3870 offsetof(CPUX86State,xmm_regs[reg]
3871 .XMM_L((val >> 4) & 3)));
3872 if ((val >> 0) & 1)
3873 tcg_gen_st_i32(tcg_const_i32(0 /*float32_zero*/),
3874 cpu_env, offsetof(CPUX86State,
3875 xmm_regs[reg].XMM_L(0)));
3876 if ((val >> 1) & 1)
3877 tcg_gen_st_i32(tcg_const_i32(0 /*float32_zero*/),
3878 cpu_env, offsetof(CPUX86State,
3879 xmm_regs[reg].XMM_L(1)));
3880 if ((val >> 2) & 1)
3881 tcg_gen_st_i32(tcg_const_i32(0 /*float32_zero*/),
3882 cpu_env, offsetof(CPUX86State,
3883 xmm_regs[reg].XMM_L(2)));
3884 if ((val >> 3) & 1)
3885 tcg_gen_st_i32(tcg_const_i32(0 /*float32_zero*/),
3886 cpu_env, offsetof(CPUX86State,
3887 xmm_regs[reg].XMM_L(3)));
3888 break;
3889 case 0x22:
3890 if (ot == OT_LONG) { /* pinsrd */
3891 if (mod == 3)
3892 gen_op_mov_v_reg(ot, cpu_tmp0, rm);
3893 else
3894 tcg_gen_qemu_ld32u(cpu_tmp0, cpu_A0,
3895 (s->mem_index >> 2) - 1);
3896 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_tmp0);
3897 tcg_gen_st_i32(cpu_tmp2_i32, cpu_env,
3898 offsetof(CPUX86State,
3899 xmm_regs[reg].XMM_L(val & 3)));
3900 } else { /* pinsrq */
3901 #ifdef TARGET_X86_64
3902 if (mod == 3)
3903 gen_op_mov_v_reg(ot, cpu_tmp1_i64, rm);
3904 else
3905 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_A0,
3906 (s->mem_index >> 2) - 1);
3907 tcg_gen_st_i64(cpu_tmp1_i64, cpu_env,
3908 offsetof(CPUX86State,
3909 xmm_regs[reg].XMM_Q(val & 1)));
3910 #else
3911 goto illegal_op;
3912 #endif
3913 }
3914 break;
3915 }
3916 return;
3917 }
3918
3919 if (b1) {
3920 op1_offset = offsetof(CPUX86State,xmm_regs[reg]);
3921 if (mod == 3) {
3922 op2_offset = offsetof(CPUX86State,xmm_regs[rm | REX_B(s)]);
3923 } else {
3924 op2_offset = offsetof(CPUX86State,xmm_t0);
3925 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3926 gen_ldo_env_A0(s->mem_index, op2_offset);
3927 }
3928 } else {
3929 op1_offset = offsetof(CPUX86State,fpregs[reg].mmx);
3930 if (mod == 3) {
3931 op2_offset = offsetof(CPUX86State,fpregs[rm].mmx);
3932 } else {
3933 op2_offset = offsetof(CPUX86State,mmx_t0);
3934 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3935 gen_ldq_env_A0(s->mem_index, op2_offset);
3936 }
3937 }
3938 val = ldub_code(s->pc++);
3939
3940 if ((b & 0xfc) == 0x60) { /* pcmpXstrX */
3941 s->cc_op = CC_OP_EFLAGS;
3942
3943 if (s->dflag == 2)
3944 /* The helper must use entire 64-bit gp registers */
3945 val |= 1 << 8;
3946 }
3947
3948 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
3949 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
3950 ((void (*)(TCGv_ptr, TCGv_ptr, TCGv_i32))sse_op2)(cpu_ptr0, cpu_ptr1, tcg_const_i32(val));
3951 break;
3952 default:
3953 goto illegal_op;
3954 }
3955 } else {
3956 /* generic MMX or SSE operation */
3957 switch(b) {
3958 case 0x70: /* pshufx insn */
3959 case 0xc6: /* pshufx insn */
3960 case 0xc2: /* compare insns */
3961 s->rip_offset = 1;
3962 break;
3963 default:
3964 break;
3965 }
3966 if (is_xmm) {
3967 op1_offset = offsetof(CPUX86State,xmm_regs[reg]);
3968 if (mod != 3) {
3969 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3970 op2_offset = offsetof(CPUX86State,xmm_t0);
3971 if (b1 >= 2 && ((b >= 0x50 && b <= 0x5f && b != 0x5b) ||
3972 b == 0xc2)) {
3973 /* specific case for SSE single instructions */
3974 if (b1 == 2) {
3975 /* 32 bit access */
3976 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
3977 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,xmm_t0.XMM_L(0)));
3978 } else {
3979 /* 64 bit access */
3980 gen_ldq_env_A0(s->mem_index, offsetof(CPUX86State,xmm_t0.XMM_D(0)));
3981 }
3982 } else {
3983 gen_ldo_env_A0(s->mem_index, op2_offset);
3984 }
3985 } else {
3986 rm = (modrm & 7) | REX_B(s);
3987 op2_offset = offsetof(CPUX86State,xmm_regs[rm]);
3988 }
3989 } else {
3990 op1_offset = offsetof(CPUX86State,fpregs[reg].mmx);
3991 if (mod != 3) {
3992 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
3993 op2_offset = offsetof(CPUX86State,mmx_t0);
3994 gen_ldq_env_A0(s->mem_index, op2_offset);
3995 } else {
3996 rm = (modrm & 7);
3997 op2_offset = offsetof(CPUX86State,fpregs[rm].mmx);
3998 }
3999 }
4000 switch(b) {
4001 case 0x0f: /* 3DNow! data insns */
4002 if (!(s->cpuid_ext2_features & CPUID_EXT2_3DNOW))
4003 goto illegal_op;
4004 val = ldub_code(s->pc++);
4005 sse_op2 = sse_op_table5[val];
4006 if (!sse_op2)
4007 goto illegal_op;
4008 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
4009 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
4010 ((void (*)(TCGv_ptr, TCGv_ptr))sse_op2)(cpu_ptr0, cpu_ptr1);
4011 break;
4012 case 0x70: /* pshufx insn */
4013 case 0xc6: /* pshufx insn */
4014 val = ldub_code(s->pc++);
4015 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
4016 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
4017 ((void (*)(TCGv_ptr, TCGv_ptr, TCGv_i32))sse_op2)(cpu_ptr0, cpu_ptr1, tcg_const_i32(val));
4018 break;
4019 case 0xc2:
4020 /* compare insns */
4021 val = ldub_code(s->pc++);
4022 if (val >= 8)
4023 goto illegal_op;
4024 sse_op2 = sse_op_table4[val][b1];
4025 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
4026 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
4027 ((void (*)(TCGv_ptr, TCGv_ptr))sse_op2)(cpu_ptr0, cpu_ptr1);
4028 break;
4029 case 0xf7:
4030 /* maskmov : we must prepare A0 */
4031 if (mod != 3)
4032 goto illegal_op;
4033 #ifdef TARGET_X86_64
4034 if (s->aflag == 2) {
4035 gen_op_movq_A0_reg(R_EDI);
4036 } else
4037 #endif
4038 {
4039 gen_op_movl_A0_reg(R_EDI);
4040 if (s->aflag == 0)
4041 gen_op_andl_A0_ffff();
4042 }
4043 gen_add_A0_ds_seg(s);
4044
4045 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
4046 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
4047 ((void (*)(TCGv_ptr, TCGv_ptr, TCGv))sse_op2)(cpu_ptr0, cpu_ptr1, cpu_A0);
4048 break;
4049 default:
4050 tcg_gen_addi_ptr(cpu_ptr0, cpu_env, op1_offset);
4051 tcg_gen_addi_ptr(cpu_ptr1, cpu_env, op2_offset);
4052 ((void (*)(TCGv_ptr, TCGv_ptr))sse_op2)(cpu_ptr0, cpu_ptr1);
4053 break;
4054 }
4055 if (b == 0x2e || b == 0x2f) {
4056 s->cc_op = CC_OP_EFLAGS;
4057 }
4058 }
4059 }
4060
4061 /* convert one instruction. s->is_jmp is set if the translation must
4062 be stopped. Return the next pc value */
4063 static target_ulong disas_insn(DisasContext *s, target_ulong pc_start)
4064 {
4065 int b, prefixes, aflag, dflag;
4066 int shift, ot;
4067 int modrm, reg, rm, mod, reg_addr, op, opreg, offset_addr, val;
4068 target_ulong next_eip, tval;
4069 int rex_w, rex_r;
4070
4071 if (unlikely(qemu_loglevel_mask(CPU_LOG_TB_OP)))
4072 tcg_gen_debug_insn_start(pc_start);
4073 s->pc = pc_start;
4074 prefixes = 0;
4075 aflag = s->code32;
4076 dflag = s->code32;
4077 s->override = -1;
4078 rex_w = -1;
4079 rex_r = 0;
4080 #ifdef TARGET_X86_64
4081 s->rex_x = 0;
4082 s->rex_b = 0;
4083 x86_64_hregs = 0;
4084 #endif
4085 s->rip_offset = 0; /* for relative ip address */
4086 next_byte:
4087 b = ldub_code(s->pc);
4088 s->pc++;
4089 /* check prefixes */
4090 #ifdef TARGET_X86_64
4091 if (CODE64(s)) {
4092 switch (b) {
4093 case 0xf3:
4094 prefixes |= PREFIX_REPZ;
4095 goto next_byte;
4096 case 0xf2:
4097 prefixes |= PREFIX_REPNZ;
4098 goto next_byte;
4099 case 0xf0:
4100 prefixes |= PREFIX_LOCK;
4101 goto next_byte;
4102 case 0x2e:
4103 s->override = R_CS;
4104 goto next_byte;
4105 case 0x36:
4106 s->override = R_SS;
4107 goto next_byte;
4108 case 0x3e:
4109 s->override = R_DS;
4110 goto next_byte;
4111 case 0x26:
4112 s->override = R_ES;
4113 goto next_byte;
4114 case 0x64:
4115 s->override = R_FS;
4116 goto next_byte;
4117 case 0x65:
4118 s->override = R_GS;
4119 goto next_byte;
4120 case 0x66:
4121 prefixes |= PREFIX_DATA;
4122 goto next_byte;
4123 case 0x67:
4124 prefixes |= PREFIX_ADR;
4125 goto next_byte;
4126 case 0x40 ... 0x4f:
4127 /* REX prefix */
4128 rex_w = (b >> 3) & 1;
4129 rex_r = (b & 0x4) << 1;
4130 s->rex_x = (b & 0x2) << 2;
4131 REX_B(s) = (b & 0x1) << 3;
4132 x86_64_hregs = 1; /* select uniform byte register addressing */
4133 goto next_byte;
4134 }
4135 if (rex_w == 1) {
4136 /* 0x66 is ignored if rex.w is set */
4137 dflag = 2;
4138 } else {
4139 if (prefixes & PREFIX_DATA)
4140 dflag ^= 1;
4141 }
4142 if (!(prefixes & PREFIX_ADR))
4143 aflag = 2;
4144 } else
4145 #endif
4146 {
4147 switch (b) {
4148 case 0xf3:
4149 prefixes |= PREFIX_REPZ;
4150 goto next_byte;
4151 case 0xf2:
4152 prefixes |= PREFIX_REPNZ;
4153 goto next_byte;
4154 case 0xf0:
4155 prefixes |= PREFIX_LOCK;
4156 goto next_byte;
4157 case 0x2e:
4158 s->override = R_CS;
4159 goto next_byte;
4160 case 0x36:
4161 s->override = R_SS;
4162 goto next_byte;
4163 case 0x3e:
4164 s->override = R_DS;
4165 goto next_byte;
4166 case 0x26:
4167 s->override = R_ES;
4168 goto next_byte;
4169 case 0x64:
4170 s->override = R_FS;
4171 goto next_byte;
4172 case 0x65:
4173 s->override = R_GS;
4174 goto next_byte;
4175 case 0x66:
4176 prefixes |= PREFIX_DATA;
4177 goto next_byte;
4178 case 0x67:
4179 prefixes |= PREFIX_ADR;
4180 goto next_byte;
4181 }
4182 if (prefixes & PREFIX_DATA)
4183 dflag ^= 1;
4184 if (prefixes & PREFIX_ADR)
4185 aflag ^= 1;
4186 }
4187
4188 s->prefix = prefixes;
4189 s->aflag = aflag;
4190 s->dflag = dflag;
4191
4192 /* lock generation */
4193 if (prefixes & PREFIX_LOCK)
4194 gen_helper_lock();
4195
4196 /* now check op code */
4197 reswitch:
4198 switch(b) {
4199 case 0x0f:
4200 /**************************/
4201 /* extended op code */
4202 b = ldub_code(s->pc++) | 0x100;
4203 goto reswitch;
4204
4205 /**************************/
4206 /* arith & logic */
4207 case 0x00 ... 0x05:
4208 case 0x08 ... 0x0d:
4209 case 0x10 ... 0x15:
4210 case 0x18 ... 0x1d:
4211 case 0x20 ... 0x25:
4212 case 0x28 ... 0x2d:
4213 case 0x30 ... 0x35:
4214 case 0x38 ... 0x3d:
4215 {
4216 int op, f, val;
4217 op = (b >> 3) & 7;
4218 f = (b >> 1) & 3;
4219
4220 if ((b & 1) == 0)
4221 ot = OT_BYTE;
4222 else
4223 ot = dflag + OT_WORD;
4224
4225 switch(f) {
4226 case 0: /* OP Ev, Gv */
4227 modrm = ldub_code(s->pc++);
4228 reg = ((modrm >> 3) & 7) | rex_r;
4229 mod = (modrm >> 6) & 3;
4230 rm = (modrm & 7) | REX_B(s);
4231 if (mod != 3) {
4232 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4233 opreg = OR_TMP0;
4234 } else if (op == OP_XORL && rm == reg) {
4235 xor_zero:
4236 /* xor reg, reg optimisation */
4237 gen_op_movl_T0_0();
4238 s->cc_op = CC_OP_LOGICB + ot;
4239 gen_op_mov_reg_T0(ot, reg);
4240 gen_op_update1_cc();
4241 break;
4242 } else {
4243 opreg = rm;
4244 }
4245 gen_op_mov_TN_reg(ot, 1, reg);
4246 gen_op(s, op, ot, opreg);
4247 break;
4248 case 1: /* OP Gv, Ev */
4249 modrm = ldub_code(s->pc++);
4250 mod = (modrm >> 6) & 3;
4251 reg = ((modrm >> 3) & 7) | rex_r;
4252 rm = (modrm & 7) | REX_B(s);
4253 if (mod != 3) {
4254 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4255 gen_op_ld_T1_A0(ot + s->mem_index);
4256 } else if (op == OP_XORL && rm == reg) {
4257 goto xor_zero;
4258 } else {
4259 gen_op_mov_TN_reg(ot, 1, rm);
4260 }
4261 gen_op(s, op, ot, reg);
4262 break;
4263 case 2: /* OP A, Iv */
4264 val = insn_get(s, ot);
4265 gen_op_movl_T1_im(val);
4266 gen_op(s, op, ot, OR_EAX);
4267 break;
4268 }
4269 }
4270 break;
4271
4272 case 0x82:
4273 if (CODE64(s))
4274 goto illegal_op;
4275 case 0x80: /* GRP1 */
4276 case 0x81:
4277 case 0x83:
4278 {
4279 int val;
4280
4281 if ((b & 1) == 0)
4282 ot = OT_BYTE;
4283 else
4284 ot = dflag + OT_WORD;
4285
4286 modrm = ldub_code(s->pc++);
4287 mod = (modrm >> 6) & 3;
4288 rm = (modrm & 7) | REX_B(s);
4289 op = (modrm >> 3) & 7;
4290
4291 if (mod != 3) {
4292 if (b == 0x83)
4293 s->rip_offset = 1;
4294 else
4295 s->rip_offset = insn_const_size(ot);
4296 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4297 opreg = OR_TMP0;
4298 } else {
4299 opreg = rm;
4300 }
4301
4302 switch(b) {
4303 default:
4304 case 0x80:
4305 case 0x81:
4306 case 0x82:
4307 val = insn_get(s, ot);
4308 break;
4309 case 0x83:
4310 val = (int8_t)insn_get(s, OT_BYTE);
4311 break;
4312 }
4313 gen_op_movl_T1_im(val);
4314 gen_op(s, op, ot, opreg);
4315 }
4316 break;
4317
4318 /**************************/
4319 /* inc, dec, and other misc arith */
4320 case 0x40 ... 0x47: /* inc Gv */
4321 ot = dflag ? OT_LONG : OT_WORD;
4322 gen_inc(s, ot, OR_EAX + (b & 7), 1);
4323 break;
4324 case 0x48 ... 0x4f: /* dec Gv */
4325 ot = dflag ? OT_LONG : OT_WORD;
4326 gen_inc(s, ot, OR_EAX + (b & 7), -1);
4327 break;
4328 case 0xf6: /* GRP3 */
4329 case 0xf7:
4330 if ((b & 1) == 0)
4331 ot = OT_BYTE;
4332 else
4333 ot = dflag + OT_WORD;
4334
4335 modrm = ldub_code(s->pc++);
4336 mod = (modrm >> 6) & 3;
4337 rm = (modrm & 7) | REX_B(s);
4338 op = (modrm >> 3) & 7;
4339 if (mod != 3) {
4340 if (op == 0)
4341 s->rip_offset = insn_const_size(ot);
4342 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4343 gen_op_ld_T0_A0(ot + s->mem_index);
4344 } else {
4345 gen_op_mov_TN_reg(ot, 0, rm);
4346 }
4347
4348 switch(op) {
4349 case 0: /* test */
4350 val = insn_get(s, ot);
4351 gen_op_movl_T1_im(val);
4352 gen_op_testl_T0_T1_cc();
4353 s->cc_op = CC_OP_LOGICB + ot;
4354 break;
4355 case 2: /* not */
4356 tcg_gen_not_tl(cpu_T[0], cpu_T[0]);
4357 if (mod != 3) {
4358 gen_op_st_T0_A0(ot + s->mem_index);
4359 } else {
4360 gen_op_mov_reg_T0(ot, rm);
4361 }
4362 break;
4363 case 3: /* neg */
4364 tcg_gen_neg_tl(cpu_T[0], cpu_T[0]);
4365 if (mod != 3) {
4366 gen_op_st_T0_A0(ot + s->mem_index);
4367 } else {
4368 gen_op_mov_reg_T0(ot, rm);
4369 }
4370 gen_op_update_neg_cc();
4371 s->cc_op = CC_OP_SUBB + ot;
4372 break;
4373 case 4: /* mul */
4374 switch(ot) {
4375 case OT_BYTE:
4376 gen_op_mov_TN_reg(OT_BYTE, 1, R_EAX);
4377 tcg_gen_ext8u_tl(cpu_T[0], cpu_T[0]);
4378 tcg_gen_ext8u_tl(cpu_T[1], cpu_T[1]);
4379 /* XXX: use 32 bit mul which could be faster */
4380 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4381 gen_op_mov_reg_T0(OT_WORD, R_EAX);
4382 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4383 tcg_gen_andi_tl(cpu_cc_src, cpu_T[0], 0xff00);
4384 s->cc_op = CC_OP_MULB;
4385 break;
4386 case OT_WORD:
4387 gen_op_mov_TN_reg(OT_WORD, 1, R_EAX);
4388 tcg_gen_ext16u_tl(cpu_T[0], cpu_T[0]);
4389 tcg_gen_ext16u_tl(cpu_T[1], cpu_T[1]);
4390 /* XXX: use 32 bit mul which could be faster */
4391 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4392 gen_op_mov_reg_T0(OT_WORD, R_EAX);
4393 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4394 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 16);
4395 gen_op_mov_reg_T0(OT_WORD, R_EDX);
4396 tcg_gen_mov_tl(cpu_cc_src, cpu_T[0]);
4397 s->cc_op = CC_OP_MULW;
4398 break;
4399 default:
4400 case OT_LONG:
4401 #ifdef TARGET_X86_64
4402 gen_op_mov_TN_reg(OT_LONG, 1, R_EAX);
4403 tcg_gen_ext32u_tl(cpu_T[0], cpu_T[0]);
4404 tcg_gen_ext32u_tl(cpu_T[1], cpu_T[1]);
4405 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4406 gen_op_mov_reg_T0(OT_LONG, R_EAX);
4407 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4408 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 32);
4409 gen_op_mov_reg_T0(OT_LONG, R_EDX);
4410 tcg_gen_mov_tl(cpu_cc_src, cpu_T[0]);
4411 #else
4412 {
4413 TCGv_i64 t0, t1;
4414 t0 = tcg_temp_new_i64();
4415 t1 = tcg_temp_new_i64();
4416 gen_op_mov_TN_reg(OT_LONG, 1, R_EAX);
4417 tcg_gen_extu_i32_i64(t0, cpu_T[0]);
4418 tcg_gen_extu_i32_i64(t1, cpu_T[1]);
4419 tcg_gen_mul_i64(t0, t0, t1);
4420 tcg_gen_trunc_i64_i32(cpu_T[0], t0);
4421 gen_op_mov_reg_T0(OT_LONG, R_EAX);
4422 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4423 tcg_gen_shri_i64(t0, t0, 32);
4424 tcg_gen_trunc_i64_i32(cpu_T[0], t0);
4425 gen_op_mov_reg_T0(OT_LONG, R_EDX);
4426 tcg_gen_mov_tl(cpu_cc_src, cpu_T[0]);
4427 }
4428 #endif
4429 s->cc_op = CC_OP_MULL;
4430 break;
4431 #ifdef TARGET_X86_64
4432 case OT_QUAD:
4433 gen_helper_mulq_EAX_T0(cpu_T[0]);
4434 s->cc_op = CC_OP_MULQ;
4435 break;
4436 #endif
4437 }
4438 break;
4439 case 5: /* imul */
4440 switch(ot) {
4441 case OT_BYTE:
4442 gen_op_mov_TN_reg(OT_BYTE, 1, R_EAX);
4443 tcg_gen_ext8s_tl(cpu_T[0], cpu_T[0]);
4444 tcg_gen_ext8s_tl(cpu_T[1], cpu_T[1]);
4445 /* XXX: use 32 bit mul which could be faster */
4446 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4447 gen_op_mov_reg_T0(OT_WORD, R_EAX);
4448 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4449 tcg_gen_ext8s_tl(cpu_tmp0, cpu_T[0]);
4450 tcg_gen_sub_tl(cpu_cc_src, cpu_T[0], cpu_tmp0);
4451 s->cc_op = CC_OP_MULB;
4452 break;
4453 case OT_WORD:
4454 gen_op_mov_TN_reg(OT_WORD, 1, R_EAX);
4455 tcg_gen_ext16s_tl(cpu_T[0], cpu_T[0]);
4456 tcg_gen_ext16s_tl(cpu_T[1], cpu_T[1]);
4457 /* XXX: use 32 bit mul which could be faster */
4458 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4459 gen_op_mov_reg_T0(OT_WORD, R_EAX);
4460 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4461 tcg_gen_ext16s_tl(cpu_tmp0, cpu_T[0]);
4462 tcg_gen_sub_tl(cpu_cc_src, cpu_T[0], cpu_tmp0);
4463 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 16);
4464 gen_op_mov_reg_T0(OT_WORD, R_EDX);
4465 s->cc_op = CC_OP_MULW;
4466 break;
4467 default:
4468 case OT_LONG:
4469 #ifdef TARGET_X86_64
4470 gen_op_mov_TN_reg(OT_LONG, 1, R_EAX);
4471 tcg_gen_ext32s_tl(cpu_T[0], cpu_T[0]);
4472 tcg_gen_ext32s_tl(cpu_T[1], cpu_T[1]);
4473 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4474 gen_op_mov_reg_T0(OT_LONG, R_EAX);
4475 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4476 tcg_gen_ext32s_tl(cpu_tmp0, cpu_T[0]);
4477 tcg_gen_sub_tl(cpu_cc_src, cpu_T[0], cpu_tmp0);
4478 tcg_gen_shri_tl(cpu_T[0], cpu_T[0], 32);
4479 gen_op_mov_reg_T0(OT_LONG, R_EDX);
4480 #else
4481 {
4482 TCGv_i64 t0, t1;
4483 t0 = tcg_temp_new_i64();
4484 t1 = tcg_temp_new_i64();
4485 gen_op_mov_TN_reg(OT_LONG, 1, R_EAX);
4486 tcg_gen_ext_i32_i64(t0, cpu_T[0]);
4487 tcg_gen_ext_i32_i64(t1, cpu_T[1]);
4488 tcg_gen_mul_i64(t0, t0, t1);
4489 tcg_gen_trunc_i64_i32(cpu_T[0], t0);
4490 gen_op_mov_reg_T0(OT_LONG, R_EAX);
4491 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4492 tcg_gen_sari_tl(cpu_tmp0, cpu_T[0], 31);
4493 tcg_gen_shri_i64(t0, t0, 32);
4494 tcg_gen_trunc_i64_i32(cpu_T[0], t0);
4495 gen_op_mov_reg_T0(OT_LONG, R_EDX);
4496 tcg_gen_sub_tl(cpu_cc_src, cpu_T[0], cpu_tmp0);
4497 }
4498 #endif
4499 s->cc_op = CC_OP_MULL;
4500 break;
4501 #ifdef TARGET_X86_64
4502 case OT_QUAD:
4503 gen_helper_imulq_EAX_T0(cpu_T[0]);
4504 s->cc_op = CC_OP_MULQ;
4505 break;
4506 #endif
4507 }
4508 break;
4509 case 6: /* div */
4510 switch(ot) {
4511 case OT_BYTE:
4512 gen_jmp_im(pc_start - s->cs_base);
4513 gen_helper_divb_AL(cpu_T[0]);
4514 break;
4515 case OT_WORD:
4516 gen_jmp_im(pc_start - s->cs_base);
4517 gen_helper_divw_AX(cpu_T[0]);
4518 break;
4519 default:
4520 case OT_LONG:
4521 gen_jmp_im(pc_start - s->cs_base);
4522 gen_helper_divl_EAX(cpu_T[0]);
4523 break;
4524 #ifdef TARGET_X86_64
4525 case OT_QUAD:
4526 gen_jmp_im(pc_start - s->cs_base);
4527 gen_helper_divq_EAX(cpu_T[0]);
4528 break;
4529 #endif
4530 }
4531 break;
4532 case 7: /* idiv */
4533 switch(ot) {
4534 case OT_BYTE:
4535 gen_jmp_im(pc_start - s->cs_base);
4536 gen_helper_idivb_AL(cpu_T[0]);
4537 break;
4538 case OT_WORD:
4539 gen_jmp_im(pc_start - s->cs_base);
4540 gen_helper_idivw_AX(cpu_T[0]);
4541 break;
4542 default:
4543 case OT_LONG:
4544 gen_jmp_im(pc_start - s->cs_base);
4545 gen_helper_idivl_EAX(cpu_T[0]);
4546 break;
4547 #ifdef TARGET_X86_64
4548 case OT_QUAD:
4549 gen_jmp_im(pc_start - s->cs_base);
4550 gen_helper_idivq_EAX(cpu_T[0]);
4551 break;
4552 #endif
4553 }
4554 break;
4555 default:
4556 goto illegal_op;
4557 }
4558 break;
4559
4560 case 0xfe: /* GRP4 */
4561 case 0xff: /* GRP5 */
4562 if ((b & 1) == 0)
4563 ot = OT_BYTE;
4564 else
4565 ot = dflag + OT_WORD;
4566
4567 modrm = ldub_code(s->pc++);
4568 mod = (modrm >> 6) & 3;
4569 rm = (modrm & 7) | REX_B(s);
4570 op = (modrm >> 3) & 7;
4571 if (op >= 2 && b == 0xfe) {
4572 goto illegal_op;
4573 }
4574 if (CODE64(s)) {
4575 if (op == 2 || op == 4) {
4576 /* operand size for jumps is 64 bit */
4577 ot = OT_QUAD;
4578 } else if (op == 3 || op == 5) {
4579 ot = dflag ? OT_LONG + (rex_w == 1) : OT_WORD;
4580 } else if (op == 6) {
4581 /* default push size is 64 bit */
4582 ot = dflag ? OT_QUAD : OT_WORD;
4583 }
4584 }
4585 if (mod != 3) {
4586 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4587 if (op >= 2 && op != 3 && op != 5)
4588 gen_op_ld_T0_A0(ot + s->mem_index);
4589 } else {
4590 gen_op_mov_TN_reg(ot, 0, rm);
4591 }
4592
4593 switch(op) {
4594 case 0: /* inc Ev */
4595 if (mod != 3)
4596 opreg = OR_TMP0;
4597 else
4598 opreg = rm;
4599 gen_inc(s, ot, opreg, 1);
4600 break;
4601 case 1: /* dec Ev */
4602 if (mod != 3)
4603 opreg = OR_TMP0;
4604 else
4605 opreg = rm;
4606 gen_inc(s, ot, opreg, -1);
4607 break;
4608 case 2: /* call Ev */
4609 /* XXX: optimize if memory (no 'and' is necessary) */
4610 if (s->dflag == 0)
4611 gen_op_andl_T0_ffff();
4612 next_eip = s->pc - s->cs_base;
4613 gen_movtl_T1_im(next_eip);
4614 gen_push_T1(s);
4615 gen_op_jmp_T0();
4616 gen_eob(s);
4617 break;
4618 case 3: /* lcall Ev */
4619 gen_op_ld_T1_A0(ot + s->mem_index);
4620 gen_add_A0_im(s, 1 << (ot - OT_WORD + 1));
4621 gen_op_ldu_T0_A0(OT_WORD + s->mem_index);
4622 do_lcall:
4623 if (s->pe && !s->vm86) {
4624 if (s->cc_op != CC_OP_DYNAMIC)
4625 gen_op_set_cc_op(s->cc_op);
4626 gen_jmp_im(pc_start - s->cs_base);
4627 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
4628 gen_helper_lcall_protected(cpu_tmp2_i32, cpu_T[1],
4629 tcg_const_i32(dflag),
4630 tcg_const_i32(s->pc - pc_start));
4631 } else {
4632 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
4633 gen_helper_lcall_real(cpu_tmp2_i32, cpu_T[1],
4634 tcg_const_i32(dflag),
4635 tcg_const_i32(s->pc - s->cs_base));
4636 }
4637 gen_eob(s);
4638 break;
4639 case 4: /* jmp Ev */
4640 if (s->dflag == 0)
4641 gen_op_andl_T0_ffff();
4642 gen_op_jmp_T0();
4643 gen_eob(s);
4644 break;
4645 case 5: /* ljmp Ev */
4646 gen_op_ld_T1_A0(ot + s->mem_index);
4647 gen_add_A0_im(s, 1 << (ot - OT_WORD + 1));
4648 gen_op_ldu_T0_A0(OT_WORD + s->mem_index);
4649 do_ljmp:
4650 if (s->pe && !s->vm86) {
4651 if (s->cc_op != CC_OP_DYNAMIC)
4652 gen_op_set_cc_op(s->cc_op);
4653 gen_jmp_im(pc_start - s->cs_base);
4654 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
4655 gen_helper_ljmp_protected(cpu_tmp2_i32, cpu_T[1],
4656 tcg_const_i32(s->pc - pc_start));
4657 } else {
4658 gen_op_movl_seg_T0_vm(R_CS);
4659 gen_op_movl_T0_T1();
4660 gen_op_jmp_T0();
4661 }
4662 gen_eob(s);
4663 break;
4664 case 6: /* push Ev */
4665 gen_push_T0(s);
4666 break;
4667 default:
4668 goto illegal_op;
4669 }
4670 break;
4671
4672 case 0x84: /* test Ev, Gv */
4673 case 0x85:
4674 if ((b & 1) == 0)
4675 ot = OT_BYTE;
4676 else
4677 ot = dflag + OT_WORD;
4678
4679 modrm = ldub_code(s->pc++);
4680 reg = ((modrm >> 3) & 7) | rex_r;
4681
4682 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 0);
4683 gen_op_mov_TN_reg(ot, 1, reg);
4684 gen_op_testl_T0_T1_cc();
4685 s->cc_op = CC_OP_LOGICB + ot;
4686 break;
4687
4688 case 0xa8: /* test eAX, Iv */
4689 case 0xa9:
4690 if ((b & 1) == 0)
4691 ot = OT_BYTE;
4692 else
4693 ot = dflag + OT_WORD;
4694 val = insn_get(s, ot);
4695
4696 gen_op_mov_TN_reg(ot, 0, OR_EAX);
4697 gen_op_movl_T1_im(val);
4698 gen_op_testl_T0_T1_cc();
4699 s->cc_op = CC_OP_LOGICB + ot;
4700 break;
4701
4702 case 0x98: /* CWDE/CBW */
4703 #ifdef TARGET_X86_64
4704 if (dflag == 2) {
4705 gen_op_mov_TN_reg(OT_LONG, 0, R_EAX);
4706 tcg_gen_ext32s_tl(cpu_T[0], cpu_T[0]);
4707 gen_op_mov_reg_T0(OT_QUAD, R_EAX);
4708 } else
4709 #endif
4710 if (dflag == 1) {
4711 gen_op_mov_TN_reg(OT_WORD, 0, R_EAX);
4712 tcg_gen_ext16s_tl(cpu_T[0], cpu_T[0]);
4713 gen_op_mov_reg_T0(OT_LONG, R_EAX);
4714 } else {
4715 gen_op_mov_TN_reg(OT_BYTE, 0, R_EAX);
4716 tcg_gen_ext8s_tl(cpu_T[0], cpu_T[0]);
4717 gen_op_mov_reg_T0(OT_WORD, R_EAX);
4718 }
4719 break;
4720 case 0x99: /* CDQ/CWD */
4721 #ifdef TARGET_X86_64
4722 if (dflag == 2) {
4723 gen_op_mov_TN_reg(OT_QUAD, 0, R_EAX);
4724 tcg_gen_sari_tl(cpu_T[0], cpu_T[0], 63);
4725 gen_op_mov_reg_T0(OT_QUAD, R_EDX);
4726 } else
4727 #endif
4728 if (dflag == 1) {
4729 gen_op_mov_TN_reg(OT_LONG, 0, R_EAX);
4730 tcg_gen_ext32s_tl(cpu_T[0], cpu_T[0]);
4731 tcg_gen_sari_tl(cpu_T[0], cpu_T[0], 31);
4732 gen_op_mov_reg_T0(OT_LONG, R_EDX);
4733 } else {
4734 gen_op_mov_TN_reg(OT_WORD, 0, R_EAX);
4735 tcg_gen_ext16s_tl(cpu_T[0], cpu_T[0]);
4736 tcg_gen_sari_tl(cpu_T[0], cpu_T[0], 15);
4737 gen_op_mov_reg_T0(OT_WORD, R_EDX);
4738 }
4739 break;
4740 case 0x1af: /* imul Gv, Ev */
4741 case 0x69: /* imul Gv, Ev, I */
4742 case 0x6b:
4743 ot = dflag + OT_WORD;
4744 modrm = ldub_code(s->pc++);
4745 reg = ((modrm >> 3) & 7) | rex_r;
4746 if (b == 0x69)
4747 s->rip_offset = insn_const_size(ot);
4748 else if (b == 0x6b)
4749 s->rip_offset = 1;
4750 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 0);
4751 if (b == 0x69) {
4752 val = insn_get(s, ot);
4753 gen_op_movl_T1_im(val);
4754 } else if (b == 0x6b) {
4755 val = (int8_t)insn_get(s, OT_BYTE);
4756 gen_op_movl_T1_im(val);
4757 } else {
4758 gen_op_mov_TN_reg(ot, 1, reg);
4759 }
4760
4761 #ifdef TARGET_X86_64
4762 if (ot == OT_QUAD) {
4763 gen_helper_imulq_T0_T1(cpu_T[0], cpu_T[0], cpu_T[1]);
4764 } else
4765 #endif
4766 if (ot == OT_LONG) {
4767 #ifdef TARGET_X86_64
4768 tcg_gen_ext32s_tl(cpu_T[0], cpu_T[0]);
4769 tcg_gen_ext32s_tl(cpu_T[1], cpu_T[1]);
4770 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4771 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4772 tcg_gen_ext32s_tl(cpu_tmp0, cpu_T[0]);
4773 tcg_gen_sub_tl(cpu_cc_src, cpu_T[0], cpu_tmp0);
4774 #else
4775 {
4776 TCGv_i64 t0, t1;
4777 t0 = tcg_temp_new_i64();
4778 t1 = tcg_temp_new_i64();
4779 tcg_gen_ext_i32_i64(t0, cpu_T[0]);
4780 tcg_gen_ext_i32_i64(t1, cpu_T[1]);
4781 tcg_gen_mul_i64(t0, t0, t1);
4782 tcg_gen_trunc_i64_i32(cpu_T[0], t0);
4783 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4784 tcg_gen_sari_tl(cpu_tmp0, cpu_T[0], 31);
4785 tcg_gen_shri_i64(t0, t0, 32);
4786 tcg_gen_trunc_i64_i32(cpu_T[1], t0);
4787 tcg_gen_sub_tl(cpu_cc_src, cpu_T[1], cpu_tmp0);
4788 }
4789 #endif
4790 } else {
4791 tcg_gen_ext16s_tl(cpu_T[0], cpu_T[0]);
4792 tcg_gen_ext16s_tl(cpu_T[1], cpu_T[1]);
4793 /* XXX: use 32 bit mul which could be faster */
4794 tcg_gen_mul_tl(cpu_T[0], cpu_T[0], cpu_T[1]);
4795 tcg_gen_mov_tl(cpu_cc_dst, cpu_T[0]);
4796 tcg_gen_ext16s_tl(cpu_tmp0, cpu_T[0]);
4797 tcg_gen_sub_tl(cpu_cc_src, cpu_T[0], cpu_tmp0);
4798 }
4799 gen_op_mov_reg_T0(ot, reg);
4800 s->cc_op = CC_OP_MULB + ot;
4801 break;
4802 case 0x1c0:
4803 case 0x1c1: /* xadd Ev, Gv */
4804 if ((b & 1) == 0)
4805 ot = OT_BYTE;
4806 else
4807 ot = dflag + OT_WORD;
4808 modrm = ldub_code(s->pc++);
4809 reg = ((modrm >> 3) & 7) | rex_r;
4810 mod = (modrm >> 6) & 3;
4811 if (mod == 3) {
4812 rm = (modrm & 7) | REX_B(s);
4813 gen_op_mov_TN_reg(ot, 0, reg);
4814 gen_op_mov_TN_reg(ot, 1, rm);
4815 gen_op_addl_T0_T1();
4816 gen_op_mov_reg_T1(ot, reg);
4817 gen_op_mov_reg_T0(ot, rm);
4818 } else {
4819 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4820 gen_op_mov_TN_reg(ot, 0, reg);
4821 gen_op_ld_T1_A0(ot + s->mem_index);
4822 gen_op_addl_T0_T1();
4823 gen_op_st_T0_A0(ot + s->mem_index);
4824 gen_op_mov_reg_T1(ot, reg);
4825 }
4826 gen_op_update2_cc();
4827 s->cc_op = CC_OP_ADDB + ot;
4828 break;
4829 case 0x1b0:
4830 case 0x1b1: /* cmpxchg Ev, Gv */
4831 {
4832 int label1, label2;
4833 TCGv t0, t1, t2, a0;
4834
4835 if ((b & 1) == 0)
4836 ot = OT_BYTE;
4837 else
4838 ot = dflag + OT_WORD;
4839 modrm = ldub_code(s->pc++);
4840 reg = ((modrm >> 3) & 7) | rex_r;
4841 mod = (modrm >> 6) & 3;
4842 t0 = tcg_temp_local_new();
4843 t1 = tcg_temp_local_new();
4844 t2 = tcg_temp_local_new();
4845 a0 = tcg_temp_local_new();
4846 gen_op_mov_v_reg(ot, t1, reg);
4847 if (mod == 3) {
4848 rm = (modrm & 7) | REX_B(s);
4849 gen_op_mov_v_reg(ot, t0, rm);
4850 } else {
4851 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4852 tcg_gen_mov_tl(a0, cpu_A0);
4853 gen_op_ld_v(ot + s->mem_index, t0, a0);
4854 rm = 0; /* avoid warning */
4855 }
4856 label1 = gen_new_label();
4857 tcg_gen_sub_tl(t2, cpu_regs[R_EAX], t0);
4858 gen_extu(ot, t2);
4859 tcg_gen_brcondi_tl(TCG_COND_EQ, t2, 0, label1);
4860 if (mod == 3) {
4861 label2 = gen_new_label();
4862 gen_op_mov_reg_v(ot, R_EAX, t0);
4863 tcg_gen_br(label2);
4864 gen_set_label(label1);
4865 gen_op_mov_reg_v(ot, rm, t1);
4866 gen_set_label(label2);
4867 } else {
4868 tcg_gen_mov_tl(t1, t0);
4869 gen_op_mov_reg_v(ot, R_EAX, t0);
4870 gen_set_label(label1);
4871 /* always store */
4872 gen_op_st_v(ot + s->mem_index, t1, a0);
4873 }
4874 tcg_gen_mov_tl(cpu_cc_src, t0);
4875 tcg_gen_mov_tl(cpu_cc_dst, t2);
4876 s->cc_op = CC_OP_SUBB + ot;
4877 tcg_temp_free(t0);
4878 tcg_temp_free(t1);
4879 tcg_temp_free(t2);
4880 tcg_temp_free(a0);
4881 }
4882 break;
4883 case 0x1c7: /* cmpxchg8b */
4884 modrm = ldub_code(s->pc++);
4885 mod = (modrm >> 6) & 3;
4886 if ((mod == 3) || ((modrm & 0x38) != 0x8))
4887 goto illegal_op;
4888 #ifdef TARGET_X86_64
4889 if (dflag == 2) {
4890 if (!(s->cpuid_ext_features & CPUID_EXT_CX16))
4891 goto illegal_op;
4892 gen_jmp_im(pc_start - s->cs_base);
4893 if (s->cc_op != CC_OP_DYNAMIC)
4894 gen_op_set_cc_op(s->cc_op);
4895 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4896 gen_helper_cmpxchg16b(cpu_A0);
4897 } else
4898 #endif
4899 {
4900 if (!(s->cpuid_features & CPUID_CX8))
4901 goto illegal_op;
4902 gen_jmp_im(pc_start - s->cs_base);
4903 if (s->cc_op != CC_OP_DYNAMIC)
4904 gen_op_set_cc_op(s->cc_op);
4905 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
4906 gen_helper_cmpxchg8b(cpu_A0);
4907 }
4908 s->cc_op = CC_OP_EFLAGS;
4909 break;
4910
4911 /**************************/
4912 /* push/pop */
4913 case 0x50 ... 0x57: /* push */
4914 gen_op_mov_TN_reg(OT_LONG, 0, (b & 7) | REX_B(s));
4915 gen_push_T0(s);
4916 break;
4917 case 0x58 ... 0x5f: /* pop */
4918 if (CODE64(s)) {
4919 ot = dflag ? OT_QUAD : OT_WORD;
4920 } else {
4921 ot = dflag + OT_WORD;
4922 }
4923 gen_pop_T0(s);
4924 /* NOTE: order is important for pop %sp */
4925 gen_pop_update(s);
4926 gen_op_mov_reg_T0(ot, (b & 7) | REX_B(s));
4927 break;
4928 case 0x60: /* pusha */
4929 if (CODE64(s))
4930 goto illegal_op;
4931 gen_pusha(s);
4932 break;
4933 case 0x61: /* popa */
4934 if (CODE64(s))
4935 goto illegal_op;
4936 gen_popa(s);
4937 break;
4938 case 0x68: /* push Iv */
4939 case 0x6a:
4940 if (CODE64(s)) {
4941 ot = dflag ? OT_QUAD : OT_WORD;
4942 } else {
4943 ot = dflag + OT_WORD;
4944 }
4945 if (b == 0x68)
4946 val = insn_get(s, ot);
4947 else
4948 val = (int8_t)insn_get(s, OT_BYTE);
4949 gen_op_movl_T0_im(val);
4950 gen_push_T0(s);
4951 break;
4952 case 0x8f: /* pop Ev */
4953 if (CODE64(s)) {
4954 ot = dflag ? OT_QUAD : OT_WORD;
4955 } else {
4956 ot = dflag + OT_WORD;
4957 }
4958 modrm = ldub_code(s->pc++);
4959 mod = (modrm >> 6) & 3;
4960 gen_pop_T0(s);
4961 if (mod == 3) {
4962 /* NOTE: order is important for pop %sp */
4963 gen_pop_update(s);
4964 rm = (modrm & 7) | REX_B(s);
4965 gen_op_mov_reg_T0(ot, rm);
4966 } else {
4967 /* NOTE: order is important too for MMU exceptions */
4968 s->popl_esp_hack = 1 << ot;
4969 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 1);
4970 s->popl_esp_hack = 0;
4971 gen_pop_update(s);
4972 }
4973 break;
4974 case 0xc8: /* enter */
4975 {
4976 int level;
4977 val = lduw_code(s->pc);
4978 s->pc += 2;
4979 level = ldub_code(s->pc++);
4980 gen_enter(s, val, level);
4981 }
4982 break;
4983 case 0xc9: /* leave */
4984 /* XXX: exception not precise (ESP is updated before potential exception) */
4985 if (CODE64(s)) {
4986 gen_op_mov_TN_reg(OT_QUAD, 0, R_EBP);
4987 gen_op_mov_reg_T0(OT_QUAD, R_ESP);
4988 } else if (s->ss32) {
4989 gen_op_mov_TN_reg(OT_LONG, 0, R_EBP);
4990 gen_op_mov_reg_T0(OT_LONG, R_ESP);
4991 } else {
4992 gen_op_mov_TN_reg(OT_WORD, 0, R_EBP);
4993 gen_op_mov_reg_T0(OT_WORD, R_ESP);
4994 }
4995 gen_pop_T0(s);
4996 if (CODE64(s)) {
4997 ot = dflag ? OT_QUAD : OT_WORD;
4998 } else {
4999 ot = dflag + OT_WORD;
5000 }
5001 gen_op_mov_reg_T0(ot, R_EBP);
5002 gen_pop_update(s);
5003 break;
5004 case 0x06: /* push es */
5005 case 0x0e: /* push cs */
5006 case 0x16: /* push ss */
5007 case 0x1e: /* push ds */
5008 if (CODE64(s))
5009 goto illegal_op;
5010 gen_op_movl_T0_seg(b >> 3);
5011 gen_push_T0(s);
5012 break;
5013 case 0x1a0: /* push fs */
5014 case 0x1a8: /* push gs */
5015 gen_op_movl_T0_seg((b >> 3) & 7);
5016 gen_push_T0(s);
5017 break;
5018 case 0x07: /* pop es */
5019 case 0x17: /* pop ss */
5020 case 0x1f: /* pop ds */
5021 if (CODE64(s))
5022 goto illegal_op;
5023 reg = b >> 3;
5024 gen_pop_T0(s);
5025 gen_movl_seg_T0(s, reg, pc_start - s->cs_base);
5026 gen_pop_update(s);
5027 if (reg == R_SS) {
5028 /* if reg == SS, inhibit interrupts/trace. */
5029 /* If several instructions disable interrupts, only the
5030 _first_ does it */
5031 if (!(s->tb->flags & HF_INHIBIT_IRQ_MASK))
5032 gen_helper_set_inhibit_irq();
5033 s->tf = 0;
5034 }
5035 if (s->is_jmp) {
5036 gen_jmp_im(s->pc - s->cs_base);
5037 gen_eob(s);
5038 }
5039 break;
5040 case 0x1a1: /* pop fs */
5041 case 0x1a9: /* pop gs */
5042 gen_pop_T0(s);
5043 gen_movl_seg_T0(s, (b >> 3) & 7, pc_start - s->cs_base);
5044 gen_pop_update(s);
5045 if (s->is_jmp) {
5046 gen_jmp_im(s->pc - s->cs_base);
5047 gen_eob(s);
5048 }
5049 break;
5050
5051 /**************************/
5052 /* mov */
5053 case 0x88:
5054 case 0x89: /* mov Gv, Ev */
5055 if ((b & 1) == 0)
5056 ot = OT_BYTE;
5057 else
5058 ot = dflag + OT_WORD;
5059 modrm = ldub_code(s->pc++);
5060 reg = ((modrm >> 3) & 7) | rex_r;
5061
5062 /* generate a generic store */
5063 gen_ldst_modrm(s, modrm, ot, reg, 1);
5064 break;
5065 case 0xc6:
5066 case 0xc7: /* mov Ev, Iv */
5067 if ((b & 1) == 0)
5068 ot = OT_BYTE;
5069 else
5070 ot = dflag + OT_WORD;
5071 modrm = ldub_code(s->pc++);
5072 mod = (modrm >> 6) & 3;
5073 if (mod != 3) {
5074 s->rip_offset = insn_const_size(ot);
5075 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5076 }
5077 val = insn_get(s, ot);
5078 gen_op_movl_T0_im(val);
5079 if (mod != 3)
5080 gen_op_st_T0_A0(ot + s->mem_index);
5081 else
5082 gen_op_mov_reg_T0(ot, (modrm & 7) | REX_B(s));
5083 break;
5084 case 0x8a:
5085 case 0x8b: /* mov Ev, Gv */
5086 if ((b & 1) == 0)
5087 ot = OT_BYTE;
5088 else
5089 ot = OT_WORD + dflag;
5090 modrm = ldub_code(s->pc++);
5091 reg = ((modrm >> 3) & 7) | rex_r;
5092
5093 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 0);
5094 gen_op_mov_reg_T0(ot, reg);
5095 break;
5096 case 0x8e: /* mov seg, Gv */
5097 modrm = ldub_code(s->pc++);
5098 reg = (modrm >> 3) & 7;
5099 if (reg >= 6 || reg == R_CS)
5100 goto illegal_op;
5101 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
5102 gen_movl_seg_T0(s, reg, pc_start - s->cs_base);
5103 if (reg == R_SS) {
5104 /* if reg == SS, inhibit interrupts/trace */
5105 /* If several instructions disable interrupts, only the
5106 _first_ does it */
5107 if (!(s->tb->flags & HF_INHIBIT_IRQ_MASK))
5108 gen_helper_set_inhibit_irq();
5109 s->tf = 0;
5110 }
5111 if (s->is_jmp) {
5112 gen_jmp_im(s->pc - s->cs_base);
5113 gen_eob(s);
5114 }
5115 break;
5116 case 0x8c: /* mov Gv, seg */
5117 modrm = ldub_code(s->pc++);
5118 reg = (modrm >> 3) & 7;
5119 mod = (modrm >> 6) & 3;
5120 if (reg >= 6)
5121 goto illegal_op;
5122 gen_op_movl_T0_seg(reg);
5123 if (mod == 3)
5124 ot = OT_WORD + dflag;
5125 else
5126 ot = OT_WORD;
5127 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 1);
5128 break;
5129
5130 case 0x1b6: /* movzbS Gv, Eb */
5131 case 0x1b7: /* movzwS Gv, Eb */
5132 case 0x1be: /* movsbS Gv, Eb */
5133 case 0x1bf: /* movswS Gv, Eb */
5134 {
5135 int d_ot;
5136 /* d_ot is the size of destination */
5137 d_ot = dflag + OT_WORD;
5138 /* ot is the size of source */
5139 ot = (b & 1) + OT_BYTE;
5140 modrm = ldub_code(s->pc++);
5141 reg = ((modrm >> 3) & 7) | rex_r;
5142 mod = (modrm >> 6) & 3;
5143 rm = (modrm & 7) | REX_B(s);
5144
5145 if (mod == 3) {
5146 gen_op_mov_TN_reg(ot, 0, rm);
5147 switch(ot | (b & 8)) {
5148 case OT_BYTE:
5149 tcg_gen_ext8u_tl(cpu_T[0], cpu_T[0]);
5150 break;
5151 case OT_BYTE | 8:
5152 tcg_gen_ext8s_tl(cpu_T[0], cpu_T[0]);
5153 break;
5154 case OT_WORD:
5155 tcg_gen_ext16u_tl(cpu_T[0], cpu_T[0]);
5156 break;
5157 default:
5158 case OT_WORD | 8:
5159 tcg_gen_ext16s_tl(cpu_T[0], cpu_T[0]);
5160 break;
5161 }
5162 gen_op_mov_reg_T0(d_ot, reg);
5163 } else {
5164 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5165 if (b & 8) {
5166 gen_op_lds_T0_A0(ot + s->mem_index);
5167 } else {
5168 gen_op_ldu_T0_A0(ot + s->mem_index);
5169 }
5170 gen_op_mov_reg_T0(d_ot, reg);
5171 }
5172 }
5173 break;
5174
5175 case 0x8d: /* lea */
5176 ot = dflag + OT_WORD;
5177 modrm = ldub_code(s->pc++);
5178 mod = (modrm >> 6) & 3;
5179 if (mod == 3)
5180 goto illegal_op;
5181 reg = ((modrm >> 3) & 7) | rex_r;
5182 /* we must ensure that no segment is added */
5183 s->override = -1;
5184 val = s->addseg;
5185 s->addseg = 0;
5186 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5187 s->addseg = val;
5188 gen_op_mov_reg_A0(ot - OT_WORD, reg);
5189 break;
5190
5191 case 0xa0: /* mov EAX, Ov */
5192 case 0xa1:
5193 case 0xa2: /* mov Ov, EAX */
5194 case 0xa3:
5195 {
5196 target_ulong offset_addr;
5197
5198 if ((b & 1) == 0)
5199 ot = OT_BYTE;
5200 else
5201 ot = dflag + OT_WORD;
5202 #ifdef TARGET_X86_64
5203 if (s->aflag == 2) {
5204 offset_addr = ldq_code(s->pc);
5205 s->pc += 8;
5206 gen_op_movq_A0_im(offset_addr);
5207 } else
5208 #endif
5209 {
5210 if (s->aflag) {
5211 offset_addr = insn_get(s, OT_LONG);
5212 } else {
5213 offset_addr = insn_get(s, OT_WORD);
5214 }
5215 gen_op_movl_A0_im(offset_addr);
5216 }
5217 gen_add_A0_ds_seg(s);
5218 if ((b & 2) == 0) {
5219 gen_op_ld_T0_A0(ot + s->mem_index);
5220 gen_op_mov_reg_T0(ot, R_EAX);
5221 } else {
5222 gen_op_mov_TN_reg(ot, 0, R_EAX);
5223 gen_op_st_T0_A0(ot + s->mem_index);
5224 }
5225 }
5226 break;
5227 case 0xd7: /* xlat */
5228 #ifdef TARGET_X86_64
5229 if (s->aflag == 2) {
5230 gen_op_movq_A0_reg(R_EBX);
5231 gen_op_mov_TN_reg(OT_QUAD, 0, R_EAX);
5232 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 0xff);
5233 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_T[0]);
5234 } else
5235 #endif
5236 {
5237 gen_op_movl_A0_reg(R_EBX);
5238 gen_op_mov_TN_reg(OT_LONG, 0, R_EAX);
5239 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], 0xff);
5240 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_T[0]);
5241 if (s->aflag == 0)
5242 gen_op_andl_A0_ffff();
5243 else
5244 tcg_gen_andi_tl(cpu_A0, cpu_A0, 0xffffffff);
5245 }
5246 gen_add_A0_ds_seg(s);
5247 gen_op_ldu_T0_A0(OT_BYTE + s->mem_index);
5248 gen_op_mov_reg_T0(OT_BYTE, R_EAX);
5249 break;
5250 case 0xb0 ... 0xb7: /* mov R, Ib */
5251 val = insn_get(s, OT_BYTE);
5252 gen_op_movl_T0_im(val);
5253 gen_op_mov_reg_T0(OT_BYTE, (b & 7) | REX_B(s));
5254 break;
5255 case 0xb8 ... 0xbf: /* mov R, Iv */
5256 #ifdef TARGET_X86_64
5257 if (dflag == 2) {
5258 uint64_t tmp;
5259 /* 64 bit case */
5260 tmp = ldq_code(s->pc);
5261 s->pc += 8;
5262 reg = (b & 7) | REX_B(s);
5263 gen_movtl_T0_im(tmp);
5264 gen_op_mov_reg_T0(OT_QUAD, reg);
5265 } else
5266 #endif
5267 {
5268 ot = dflag ? OT_LONG : OT_WORD;
5269 val = insn_get(s, ot);
5270 reg = (b & 7) | REX_B(s);
5271 gen_op_movl_T0_im(val);
5272 gen_op_mov_reg_T0(ot, reg);
5273 }
5274 break;
5275
5276 case 0x91 ... 0x97: /* xchg R, EAX */
5277 do_xchg_reg_eax:
5278 ot = dflag + OT_WORD;
5279 reg = (b & 7) | REX_B(s);
5280 rm = R_EAX;
5281 goto do_xchg_reg;
5282 case 0x86:
5283 case 0x87: /* xchg Ev, Gv */
5284 if ((b & 1) == 0)
5285 ot = OT_BYTE;
5286 else
5287 ot = dflag + OT_WORD;
5288 modrm = ldub_code(s->pc++);
5289 reg = ((modrm >> 3) & 7) | rex_r;
5290 mod = (modrm >> 6) & 3;
5291 if (mod == 3) {
5292 rm = (modrm & 7) | REX_B(s);
5293 do_xchg_reg:
5294 gen_op_mov_TN_reg(ot, 0, reg);
5295 gen_op_mov_TN_reg(ot, 1, rm);
5296 gen_op_mov_reg_T0(ot, rm);
5297 gen_op_mov_reg_T1(ot, reg);
5298 } else {
5299 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5300 gen_op_mov_TN_reg(ot, 0, reg);
5301 /* for xchg, lock is implicit */
5302 if (!(prefixes & PREFIX_LOCK))
5303 gen_helper_lock();
5304 gen_op_ld_T1_A0(ot + s->mem_index);
5305 gen_op_st_T0_A0(ot + s->mem_index);
5306 if (!(prefixes & PREFIX_LOCK))
5307 gen_helper_unlock();
5308 gen_op_mov_reg_T1(ot, reg);
5309 }
5310 break;
5311 case 0xc4: /* les Gv */
5312 if (CODE64(s))
5313 goto illegal_op;
5314 op = R_ES;
5315 goto do_lxx;
5316 case 0xc5: /* lds Gv */
5317 if (CODE64(s))
5318 goto illegal_op;
5319 op = R_DS;
5320 goto do_lxx;
5321 case 0x1b2: /* lss Gv */
5322 op = R_SS;
5323 goto do_lxx;
5324 case 0x1b4: /* lfs Gv */
5325 op = R_FS;
5326 goto do_lxx;
5327 case 0x1b5: /* lgs Gv */
5328 op = R_GS;
5329 do_lxx:
5330 ot = dflag ? OT_LONG : OT_WORD;
5331 modrm = ldub_code(s->pc++);
5332 reg = ((modrm >> 3) & 7) | rex_r;
5333 mod = (modrm >> 6) & 3;
5334 if (mod == 3)
5335 goto illegal_op;
5336 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5337 gen_op_ld_T1_A0(ot + s->mem_index);
5338 gen_add_A0_im(s, 1 << (ot - OT_WORD + 1));
5339 /* load the segment first to handle exceptions properly */
5340 gen_op_ldu_T0_A0(OT_WORD + s->mem_index);
5341 gen_movl_seg_T0(s, op, pc_start - s->cs_base);
5342 /* then put the data */
5343 gen_op_mov_reg_T1(ot, reg);
5344 if (s->is_jmp) {
5345 gen_jmp_im(s->pc - s->cs_base);
5346 gen_eob(s);
5347 }
5348 break;
5349
5350 /************************/
5351 /* shifts */
5352 case 0xc0:
5353 case 0xc1:
5354 /* shift Ev,Ib */
5355 shift = 2;
5356 grp2:
5357 {
5358 if ((b & 1) == 0)
5359 ot = OT_BYTE;
5360 else
5361 ot = dflag + OT_WORD;
5362
5363 modrm = ldub_code(s->pc++);
5364 mod = (modrm >> 6) & 3;
5365 op = (modrm >> 3) & 7;
5366
5367 if (mod != 3) {
5368 if (shift == 2) {
5369 s->rip_offset = 1;
5370 }
5371 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5372 opreg = OR_TMP0;
5373 } else {
5374 opreg = (modrm & 7) | REX_B(s);
5375 }
5376
5377 /* simpler op */
5378 if (shift == 0) {
5379 gen_shift(s, op, ot, opreg, OR_ECX);
5380 } else {
5381 if (shift == 2) {
5382 shift = ldub_code(s->pc++);
5383 }
5384 gen_shifti(s, op, ot, opreg, shift);
5385 }
5386 }
5387 break;
5388 case 0xd0:
5389 case 0xd1:
5390 /* shift Ev,1 */
5391 shift = 1;
5392 goto grp2;
5393 case 0xd2:
5394 case 0xd3:
5395 /* shift Ev,cl */
5396 shift = 0;
5397 goto grp2;
5398
5399 case 0x1a4: /* shld imm */
5400 op = 0;
5401 shift = 1;
5402 goto do_shiftd;
5403 case 0x1a5: /* shld cl */
5404 op = 0;
5405 shift = 0;
5406 goto do_shiftd;
5407 case 0x1ac: /* shrd imm */
5408 op = 1;
5409 shift = 1;
5410 goto do_shiftd;
5411 case 0x1ad: /* shrd cl */
5412 op = 1;
5413 shift = 0;
5414 do_shiftd:
5415 ot = dflag + OT_WORD;
5416 modrm = ldub_code(s->pc++);
5417 mod = (modrm >> 6) & 3;
5418 rm = (modrm & 7) | REX_B(s);
5419 reg = ((modrm >> 3) & 7) | rex_r;
5420 if (mod != 3) {
5421 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5422 opreg = OR_TMP0;
5423 } else {
5424 opreg = rm;
5425 }
5426 gen_op_mov_TN_reg(ot, 1, reg);
5427
5428 if (shift) {
5429 val = ldub_code(s->pc++);
5430 tcg_gen_movi_tl(cpu_T3, val);
5431 } else {
5432 tcg_gen_mov_tl(cpu_T3, cpu_regs[R_ECX]);
5433 }
5434 gen_shiftd_rm_T1_T3(s, ot, opreg, op);
5435 break;
5436
5437 /************************/
5438 /* floats */
5439 case 0xd8 ... 0xdf:
5440 if (s->flags & (HF_EM_MASK | HF_TS_MASK)) {
5441 /* if CR0.EM or CR0.TS are set, generate an FPU exception */
5442 /* XXX: what to do if illegal op ? */
5443 gen_exception(s, EXCP07_PREX, pc_start - s->cs_base);
5444 break;
5445 }
5446 modrm = ldub_code(s->pc++);
5447 mod = (modrm >> 6) & 3;
5448 rm = modrm & 7;
5449 op = ((b & 7) << 3) | ((modrm >> 3) & 7);
5450 if (mod != 3) {
5451 /* memory op */
5452 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
5453 switch(op) {
5454 case 0x00 ... 0x07: /* fxxxs */
5455 case 0x10 ... 0x17: /* fixxxl */
5456 case 0x20 ... 0x27: /* fxxxl */
5457 case 0x30 ... 0x37: /* fixxx */
5458 {
5459 int op1;
5460 op1 = op & 7;
5461
5462 switch(op >> 4) {
5463 case 0:
5464 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
5465 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5466 gen_helper_flds_FT0(cpu_tmp2_i32);
5467 break;
5468 case 1:
5469 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
5470 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5471 gen_helper_fildl_FT0(cpu_tmp2_i32);
5472 break;
5473 case 2:
5474 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_A0,
5475 (s->mem_index >> 2) - 1);
5476 gen_helper_fldl_FT0(cpu_tmp1_i64);
5477 break;
5478 case 3:
5479 default:
5480 gen_op_lds_T0_A0(OT_WORD + s->mem_index);
5481 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5482 gen_helper_fildl_FT0(cpu_tmp2_i32);
5483 break;
5484 }
5485
5486 gen_helper_fp_arith_ST0_FT0(op1);
5487 if (op1 == 3) {
5488 /* fcomp needs pop */
5489 gen_helper_fpop();
5490 }
5491 }
5492 break;
5493 case 0x08: /* flds */
5494 case 0x0a: /* fsts */
5495 case 0x0b: /* fstps */
5496 case 0x18 ... 0x1b: /* fildl, fisttpl, fistl, fistpl */
5497 case 0x28 ... 0x2b: /* fldl, fisttpll, fstl, fstpl */
5498 case 0x38 ... 0x3b: /* filds, fisttps, fists, fistps */
5499 switch(op & 7) {
5500 case 0:
5501 switch(op >> 4) {
5502 case 0:
5503 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
5504 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5505 gen_helper_flds_ST0(cpu_tmp2_i32);
5506 break;
5507 case 1:
5508 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
5509 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5510 gen_helper_fildl_ST0(cpu_tmp2_i32);
5511 break;
5512 case 2:
5513 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_A0,
5514 (s->mem_index >> 2) - 1);
5515 gen_helper_fldl_ST0(cpu_tmp1_i64);
5516 break;
5517 case 3:
5518 default:
5519 gen_op_lds_T0_A0(OT_WORD + s->mem_index);
5520 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5521 gen_helper_fildl_ST0(cpu_tmp2_i32);
5522 break;
5523 }
5524 break;
5525 case 1:
5526 /* XXX: the corresponding CPUID bit must be tested ! */
5527 switch(op >> 4) {
5528 case 1:
5529 gen_helper_fisttl_ST0(cpu_tmp2_i32);
5530 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5531 gen_op_st_T0_A0(OT_LONG + s->mem_index);
5532 break;
5533 case 2:
5534 gen_helper_fisttll_ST0(cpu_tmp1_i64);
5535 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_A0,
5536 (s->mem_index >> 2) - 1);
5537 break;
5538 case 3:
5539 default:
5540 gen_helper_fistt_ST0(cpu_tmp2_i32);
5541 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5542 gen_op_st_T0_A0(OT_WORD + s->mem_index);
5543 break;
5544 }
5545 gen_helper_fpop();
5546 break;
5547 default:
5548 switch(op >> 4) {
5549 case 0:
5550 gen_helper_fsts_ST0(cpu_tmp2_i32);
5551 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5552 gen_op_st_T0_A0(OT_LONG + s->mem_index);
5553 break;
5554 case 1:
5555 gen_helper_fistl_ST0(cpu_tmp2_i32);
5556 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5557 gen_op_st_T0_A0(OT_LONG + s->mem_index);
5558 break;
5559 case 2:
5560 gen_helper_fstl_ST0(cpu_tmp1_i64);
5561 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_A0,
5562 (s->mem_index >> 2) - 1);
5563 break;
5564 case 3:
5565 default:
5566 gen_helper_fist_ST0(cpu_tmp2_i32);
5567 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5568 gen_op_st_T0_A0(OT_WORD + s->mem_index);
5569 break;
5570 }
5571 if ((op & 7) == 3)
5572 gen_helper_fpop();
5573 break;
5574 }
5575 break;
5576 case 0x0c: /* fldenv mem */
5577 if (s->cc_op != CC_OP_DYNAMIC)
5578 gen_op_set_cc_op(s->cc_op);
5579 gen_jmp_im(pc_start - s->cs_base);
5580 gen_helper_fldenv(
5581 cpu_A0, tcg_const_i32(s->dflag));
5582 break;
5583 case 0x0d: /* fldcw mem */
5584 gen_op_ld_T0_A0(OT_WORD + s->mem_index);
5585 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
5586 gen_helper_fldcw(cpu_tmp2_i32);
5587 break;
5588 case 0x0e: /* fnstenv mem */
5589 if (s->cc_op != CC_OP_DYNAMIC)
5590 gen_op_set_cc_op(s->cc_op);
5591 gen_jmp_im(pc_start - s->cs_base);
5592 gen_helper_fstenv(cpu_A0, tcg_const_i32(s->dflag));
5593 break;
5594 case 0x0f: /* fnstcw mem */
5595 gen_helper_fnstcw(cpu_tmp2_i32);
5596 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5597 gen_op_st_T0_A0(OT_WORD + s->mem_index);
5598 break;
5599 case 0x1d: /* fldt mem */
5600 if (s->cc_op != CC_OP_DYNAMIC)
5601 gen_op_set_cc_op(s->cc_op);
5602 gen_jmp_im(pc_start - s->cs_base);
5603 gen_helper_fldt_ST0(cpu_A0);
5604 break;
5605 case 0x1f: /* fstpt mem */
5606 if (s->cc_op != CC_OP_DYNAMIC)
5607 gen_op_set_cc_op(s->cc_op);
5608 gen_jmp_im(pc_start - s->cs_base);
5609 gen_helper_fstt_ST0(cpu_A0);
5610 gen_helper_fpop();
5611 break;
5612 case 0x2c: /* frstor mem */
5613 if (s->cc_op != CC_OP_DYNAMIC)
5614 gen_op_set_cc_op(s->cc_op);
5615 gen_jmp_im(pc_start - s->cs_base);
5616 gen_helper_frstor(cpu_A0, tcg_const_i32(s->dflag));
5617 break;
5618 case 0x2e: /* fnsave mem */
5619 if (s->cc_op != CC_OP_DYNAMIC)
5620 gen_op_set_cc_op(s->cc_op);
5621 gen_jmp_im(pc_start - s->cs_base);
5622 gen_helper_fsave(cpu_A0, tcg_const_i32(s->dflag));
5623 break;
5624 case 0x2f: /* fnstsw mem */
5625 gen_helper_fnstsw(cpu_tmp2_i32);
5626 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5627 gen_op_st_T0_A0(OT_WORD + s->mem_index);
5628 break;
5629 case 0x3c: /* fbld */
5630 if (s->cc_op != CC_OP_DYNAMIC)
5631 gen_op_set_cc_op(s->cc_op);
5632 gen_jmp_im(pc_start - s->cs_base);
5633 gen_helper_fbld_ST0(cpu_A0);
5634 break;
5635 case 0x3e: /* fbstp */
5636 if (s->cc_op != CC_OP_DYNAMIC)
5637 gen_op_set_cc_op(s->cc_op);
5638 gen_jmp_im(pc_start - s->cs_base);
5639 gen_helper_fbst_ST0(cpu_A0);
5640 gen_helper_fpop();
5641 break;
5642 case 0x3d: /* fildll */
5643 tcg_gen_qemu_ld64(cpu_tmp1_i64, cpu_A0,
5644 (s->mem_index >> 2) - 1);
5645 gen_helper_fildll_ST0(cpu_tmp1_i64);
5646 break;
5647 case 0x3f: /* fistpll */
5648 gen_helper_fistll_ST0(cpu_tmp1_i64);
5649 tcg_gen_qemu_st64(cpu_tmp1_i64, cpu_A0,
5650 (s->mem_index >> 2) - 1);
5651 gen_helper_fpop();
5652 break;
5653 default:
5654 goto illegal_op;
5655 }
5656 } else {
5657 /* register float ops */
5658 opreg = rm;
5659
5660 switch(op) {
5661 case 0x08: /* fld sti */
5662 gen_helper_fpush();
5663 gen_helper_fmov_ST0_STN(tcg_const_i32((opreg + 1) & 7));
5664 break;
5665 case 0x09: /* fxchg sti */
5666 case 0x29: /* fxchg4 sti, undocumented op */
5667 case 0x39: /* fxchg7 sti, undocumented op */
5668 gen_helper_fxchg_ST0_STN(tcg_const_i32(opreg));
5669 break;
5670 case 0x0a: /* grp d9/2 */
5671 switch(rm) {
5672 case 0: /* fnop */
5673 /* check exceptions (FreeBSD FPU probe) */
5674 if (s->cc_op != CC_OP_DYNAMIC)
5675 gen_op_set_cc_op(s->cc_op);
5676 gen_jmp_im(pc_start - s->cs_base);
5677 gen_helper_fwait();
5678 break;
5679 default:
5680 goto illegal_op;
5681 }
5682 break;
5683 case 0x0c: /* grp d9/4 */
5684 switch(rm) {
5685 case 0: /* fchs */
5686 gen_helper_fchs_ST0();
5687 break;
5688 case 1: /* fabs */
5689 gen_helper_fabs_ST0();
5690 break;
5691 case 4: /* ftst */
5692 gen_helper_fldz_FT0();
5693 gen_helper_fcom_ST0_FT0();
5694 break;
5695 case 5: /* fxam */
5696 gen_helper_fxam_ST0();
5697 break;
5698 default:
5699 goto illegal_op;
5700 }
5701 break;
5702 case 0x0d: /* grp d9/5 */
5703 {
5704 switch(rm) {
5705 case 0:
5706 gen_helper_fpush();
5707 gen_helper_fld1_ST0();
5708 break;
5709 case 1:
5710 gen_helper_fpush();
5711 gen_helper_fldl2t_ST0();
5712 break;
5713 case 2:
5714 gen_helper_fpush();
5715 gen_helper_fldl2e_ST0();
5716 break;
5717 case 3:
5718 gen_helper_fpush();
5719 gen_helper_fldpi_ST0();
5720 break;
5721 case 4:
5722 gen_helper_fpush();
5723 gen_helper_fldlg2_ST0();
5724 break;
5725 case 5:
5726 gen_helper_fpush();
5727 gen_helper_fldln2_ST0();
5728 break;
5729 case 6:
5730 gen_helper_fpush();
5731 gen_helper_fldz_ST0();
5732 break;
5733 default:
5734 goto illegal_op;
5735 }
5736 }
5737 break;
5738 case 0x0e: /* grp d9/6 */
5739 switch(rm) {
5740 case 0: /* f2xm1 */
5741 gen_helper_f2xm1();
5742 break;
5743 case 1: /* fyl2x */
5744 gen_helper_fyl2x();
5745 break;
5746 case 2: /* fptan */
5747 gen_helper_fptan();
5748 break;
5749 case 3: /* fpatan */
5750 gen_helper_fpatan();
5751 break;
5752 case 4: /* fxtract */
5753 gen_helper_fxtract();
5754 break;
5755 case 5: /* fprem1 */
5756 gen_helper_fprem1();
5757 break;
5758 case 6: /* fdecstp */
5759 gen_helper_fdecstp();
5760 break;
5761 default:
5762 case 7: /* fincstp */
5763 gen_helper_fincstp();
5764 break;
5765 }
5766 break;
5767 case 0x0f: /* grp d9/7 */
5768 switch(rm) {
5769 case 0: /* fprem */
5770 gen_helper_fprem();
5771 break;
5772 case 1: /* fyl2xp1 */
5773 gen_helper_fyl2xp1();
5774 break;
5775 case 2: /* fsqrt */
5776 gen_helper_fsqrt();
5777 break;
5778 case 3: /* fsincos */
5779 gen_helper_fsincos();
5780 break;
5781 case 5: /* fscale */
5782 gen_helper_fscale();
5783 break;
5784 case 4: /* frndint */
5785 gen_helper_frndint();
5786 break;
5787 case 6: /* fsin */
5788 gen_helper_fsin();
5789 break;
5790 default:
5791 case 7: /* fcos */
5792 gen_helper_fcos();
5793 break;
5794 }
5795 break;
5796 case 0x00: case 0x01: case 0x04 ... 0x07: /* fxxx st, sti */
5797 case 0x20: case 0x21: case 0x24 ... 0x27: /* fxxx sti, st */
5798 case 0x30: case 0x31: case 0x34 ... 0x37: /* fxxxp sti, st */
5799 {
5800 int op1;
5801
5802 op1 = op & 7;
5803 if (op >= 0x20) {
5804 gen_helper_fp_arith_STN_ST0(op1, opreg);
5805 if (op >= 0x30)
5806 gen_helper_fpop();
5807 } else {
5808 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5809 gen_helper_fp_arith_ST0_FT0(op1);
5810 }
5811 }
5812 break;
5813 case 0x02: /* fcom */
5814 case 0x22: /* fcom2, undocumented op */
5815 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5816 gen_helper_fcom_ST0_FT0();
5817 break;
5818 case 0x03: /* fcomp */
5819 case 0x23: /* fcomp3, undocumented op */
5820 case 0x32: /* fcomp5, undocumented op */
5821 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5822 gen_helper_fcom_ST0_FT0();
5823 gen_helper_fpop();
5824 break;
5825 case 0x15: /* da/5 */
5826 switch(rm) {
5827 case 1: /* fucompp */
5828 gen_helper_fmov_FT0_STN(tcg_const_i32(1));
5829 gen_helper_fucom_ST0_FT0();
5830 gen_helper_fpop();
5831 gen_helper_fpop();
5832 break;
5833 default:
5834 goto illegal_op;
5835 }
5836 break;
5837 case 0x1c:
5838 switch(rm) {
5839 case 0: /* feni (287 only, just do nop here) */
5840 break;
5841 case 1: /* fdisi (287 only, just do nop here) */
5842 break;
5843 case 2: /* fclex */
5844 gen_helper_fclex();
5845 break;
5846 case 3: /* fninit */
5847 gen_helper_fninit();
5848 break;
5849 case 4: /* fsetpm (287 only, just do nop here) */
5850 break;
5851 default:
5852 goto illegal_op;
5853 }
5854 break;
5855 case 0x1d: /* fucomi */
5856 if (s->cc_op != CC_OP_DYNAMIC)
5857 gen_op_set_cc_op(s->cc_op);
5858 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5859 gen_helper_fucomi_ST0_FT0();
5860 s->cc_op = CC_OP_EFLAGS;
5861 break;
5862 case 0x1e: /* fcomi */
5863 if (s->cc_op != CC_OP_DYNAMIC)
5864 gen_op_set_cc_op(s->cc_op);
5865 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5866 gen_helper_fcomi_ST0_FT0();
5867 s->cc_op = CC_OP_EFLAGS;
5868 break;
5869 case 0x28: /* ffree sti */
5870 gen_helper_ffree_STN(tcg_const_i32(opreg));
5871 break;
5872 case 0x2a: /* fst sti */
5873 gen_helper_fmov_STN_ST0(tcg_const_i32(opreg));
5874 break;
5875 case 0x2b: /* fstp sti */
5876 case 0x0b: /* fstp1 sti, undocumented op */
5877 case 0x3a: /* fstp8 sti, undocumented op */
5878 case 0x3b: /* fstp9 sti, undocumented op */
5879 gen_helper_fmov_STN_ST0(tcg_const_i32(opreg));
5880 gen_helper_fpop();
5881 break;
5882 case 0x2c: /* fucom st(i) */
5883 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5884 gen_helper_fucom_ST0_FT0();
5885 break;
5886 case 0x2d: /* fucomp st(i) */
5887 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5888 gen_helper_fucom_ST0_FT0();
5889 gen_helper_fpop();
5890 break;
5891 case 0x33: /* de/3 */
5892 switch(rm) {
5893 case 1: /* fcompp */
5894 gen_helper_fmov_FT0_STN(tcg_const_i32(1));
5895 gen_helper_fcom_ST0_FT0();
5896 gen_helper_fpop();
5897 gen_helper_fpop();
5898 break;
5899 default:
5900 goto illegal_op;
5901 }
5902 break;
5903 case 0x38: /* ffreep sti, undocumented op */
5904 gen_helper_ffree_STN(tcg_const_i32(opreg));
5905 gen_helper_fpop();
5906 break;
5907 case 0x3c: /* df/4 */
5908 switch(rm) {
5909 case 0:
5910 gen_helper_fnstsw(cpu_tmp2_i32);
5911 tcg_gen_extu_i32_tl(cpu_T[0], cpu_tmp2_i32);
5912 gen_op_mov_reg_T0(OT_WORD, R_EAX);
5913 break;
5914 default:
5915 goto illegal_op;
5916 }
5917 break;
5918 case 0x3d: /* fucomip */
5919 if (s->cc_op != CC_OP_DYNAMIC)
5920 gen_op_set_cc_op(s->cc_op);
5921 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5922 gen_helper_fucomi_ST0_FT0();
5923 gen_helper_fpop();
5924 s->cc_op = CC_OP_EFLAGS;
5925 break;
5926 case 0x3e: /* fcomip */
5927 if (s->cc_op != CC_OP_DYNAMIC)
5928 gen_op_set_cc_op(s->cc_op);
5929 gen_helper_fmov_FT0_STN(tcg_const_i32(opreg));
5930 gen_helper_fcomi_ST0_FT0();
5931 gen_helper_fpop();
5932 s->cc_op = CC_OP_EFLAGS;
5933 break;
5934 case 0x10 ... 0x13: /* fcmovxx */
5935 case 0x18 ... 0x1b:
5936 {
5937 int op1, l1;
5938 static const uint8_t fcmov_cc[8] = {
5939 (JCC_B << 1),
5940 (JCC_Z << 1),
5941 (JCC_BE << 1),
5942 (JCC_P << 1),
5943 };
5944 op1 = fcmov_cc[op & 3] | (((op >> 3) & 1) ^ 1);
5945 l1 = gen_new_label();
5946 gen_jcc1(s, s->cc_op, op1, l1);
5947 gen_helper_fmov_ST0_STN(tcg_const_i32(opreg));
5948 gen_set_label(l1);
5949 }
5950 break;
5951 default:
5952 goto illegal_op;
5953 }
5954 }
5955 break;
5956 /************************/
5957 /* string ops */
5958
5959 case 0xa4: /* movsS */
5960 case 0xa5:
5961 if ((b & 1) == 0)
5962 ot = OT_BYTE;
5963 else
5964 ot = dflag + OT_WORD;
5965
5966 if (prefixes & (PREFIX_REPZ | PREFIX_REPNZ)) {
5967 gen_repz_movs(s, ot, pc_start - s->cs_base, s->pc - s->cs_base);
5968 } else {
5969 gen_movs(s, ot);
5970 }
5971 break;
5972
5973 case 0xaa: /* stosS */
5974 case 0xab:
5975 if ((b & 1) == 0)
5976 ot = OT_BYTE;
5977 else
5978 ot = dflag + OT_WORD;
5979
5980 if (prefixes & (PREFIX_REPZ | PREFIX_REPNZ)) {
5981 gen_repz_stos(s, ot, pc_start - s->cs_base, s->pc - s->cs_base);
5982 } else {
5983 gen_stos(s, ot);
5984 }
5985 break;
5986 case 0xac: /* lodsS */
5987 case 0xad:
5988 if ((b & 1) == 0)
5989 ot = OT_BYTE;
5990 else
5991 ot = dflag + OT_WORD;
5992 if (prefixes & (PREFIX_REPZ | PREFIX_REPNZ)) {
5993 gen_repz_lods(s, ot, pc_start - s->cs_base, s->pc - s->cs_base);
5994 } else {
5995 gen_lods(s, ot);
5996 }
5997 break;
5998 case 0xae: /* scasS */
5999 case 0xaf:
6000 if ((b & 1) == 0)
6001 ot = OT_BYTE;
6002 else
6003 ot = dflag + OT_WORD;
6004 if (prefixes & PREFIX_REPNZ) {
6005 gen_repz_scas(s, ot, pc_start - s->cs_base, s->pc - s->cs_base, 1);
6006 } else if (prefixes & PREFIX_REPZ) {
6007 gen_repz_scas(s, ot, pc_start - s->cs_base, s->pc - s->cs_base, 0);
6008 } else {
6009 gen_scas(s, ot);
6010 s->cc_op = CC_OP_SUBB + ot;
6011 }
6012 break;
6013
6014 case 0xa6: /* cmpsS */
6015 case 0xa7:
6016 if ((b & 1) == 0)
6017 ot = OT_BYTE;
6018 else
6019 ot = dflag + OT_WORD;
6020 if (prefixes & PREFIX_REPNZ) {
6021 gen_repz_cmps(s, ot, pc_start - s->cs_base, s->pc - s->cs_base, 1);
6022 } else if (prefixes & PREFIX_REPZ) {
6023 gen_repz_cmps(s, ot, pc_start - s->cs_base, s->pc - s->cs_base, 0);
6024 } else {
6025 gen_cmps(s, ot);
6026 s->cc_op = CC_OP_SUBB + ot;
6027 }
6028 break;
6029 case 0x6c: /* insS */
6030 case 0x6d:
6031 if ((b & 1) == 0)
6032 ot = OT_BYTE;
6033 else
6034 ot = dflag ? OT_LONG : OT_WORD;
6035 gen_op_mov_TN_reg(OT_WORD, 0, R_EDX);
6036 gen_op_andl_T0_ffff();
6037 gen_check_io(s, ot, pc_start - s->cs_base,
6038 SVM_IOIO_TYPE_MASK | svm_is_rep(prefixes) | 4);
6039 if (prefixes & (PREFIX_REPZ | PREFIX_REPNZ)) {
6040 gen_repz_ins(s, ot, pc_start - s->cs_base, s->pc - s->cs_base);
6041 } else {
6042 gen_ins(s, ot);
6043 if (use_icount) {
6044 gen_jmp(s, s->pc - s->cs_base);
6045 }
6046 }
6047 break;
6048 case 0x6e: /* outsS */
6049 case 0x6f:
6050 if ((b & 1) == 0)
6051 ot = OT_BYTE;
6052 else
6053 ot = dflag ? OT_LONG : OT_WORD;
6054 gen_op_mov_TN_reg(OT_WORD, 0, R_EDX);
6055 gen_op_andl_T0_ffff();
6056 gen_check_io(s, ot, pc_start - s->cs_base,
6057 svm_is_rep(prefixes) | 4);
6058 if (prefixes & (PREFIX_REPZ | PREFIX_REPNZ)) {
6059 gen_repz_outs(s, ot, pc_start - s->cs_base, s->pc - s->cs_base);
6060 } else {
6061 gen_outs(s, ot);
6062 if (use_icount) {
6063 gen_jmp(s, s->pc - s->cs_base);
6064 }
6065 }
6066 break;
6067
6068 /************************/
6069 /* port I/O */
6070
6071 case 0xe4:
6072 case 0xe5:
6073 if ((b & 1) == 0)
6074 ot = OT_BYTE;
6075 else
6076 ot = dflag ? OT_LONG : OT_WORD;
6077 val = ldub_code(s->pc++);
6078 gen_op_movl_T0_im(val);
6079 gen_check_io(s, ot, pc_start - s->cs_base,
6080 SVM_IOIO_TYPE_MASK | svm_is_rep(prefixes));
6081 if (use_icount)
6082 gen_io_start();
6083 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6084 gen_helper_in_func(ot, cpu_T[1], cpu_tmp2_i32);
6085 gen_op_mov_reg_T1(ot, R_EAX);
6086 if (use_icount) {
6087 gen_io_end();
6088 gen_jmp(s, s->pc - s->cs_base);
6089 }
6090 break;
6091 case 0xe6:
6092 case 0xe7:
6093 if ((b & 1) == 0)
6094 ot = OT_BYTE;
6095 else
6096 ot = dflag ? OT_LONG : OT_WORD;
6097 val = ldub_code(s->pc++);
6098 gen_op_movl_T0_im(val);
6099 gen_check_io(s, ot, pc_start - s->cs_base,
6100 svm_is_rep(prefixes));
6101 gen_op_mov_TN_reg(ot, 1, R_EAX);
6102
6103 if (use_icount)
6104 gen_io_start();
6105 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6106 tcg_gen_andi_i32(cpu_tmp2_i32, cpu_tmp2_i32, 0xffff);
6107 tcg_gen_trunc_tl_i32(cpu_tmp3_i32, cpu_T[1]);
6108 gen_helper_out_func(ot, cpu_tmp2_i32, cpu_tmp3_i32);
6109 if (use_icount) {
6110 gen_io_end();
6111 gen_jmp(s, s->pc - s->cs_base);
6112 }
6113 break;
6114 case 0xec:
6115 case 0xed:
6116 if ((b & 1) == 0)
6117 ot = OT_BYTE;
6118 else
6119 ot = dflag ? OT_LONG : OT_WORD;
6120 gen_op_mov_TN_reg(OT_WORD, 0, R_EDX);
6121 gen_op_andl_T0_ffff();
6122 gen_check_io(s, ot, pc_start - s->cs_base,
6123 SVM_IOIO_TYPE_MASK | svm_is_rep(prefixes));
6124 if (use_icount)
6125 gen_io_start();
6126 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6127 gen_helper_in_func(ot, cpu_T[1], cpu_tmp2_i32);
6128 gen_op_mov_reg_T1(ot, R_EAX);
6129 if (use_icount) {
6130 gen_io_end();
6131 gen_jmp(s, s->pc - s->cs_base);
6132 }
6133 break;
6134 case 0xee:
6135 case 0xef:
6136 if ((b & 1) == 0)
6137 ot = OT_BYTE;
6138 else
6139 ot = dflag ? OT_LONG : OT_WORD;
6140 gen_op_mov_TN_reg(OT_WORD, 0, R_EDX);
6141 gen_op_andl_T0_ffff();
6142 gen_check_io(s, ot, pc_start - s->cs_base,
6143 svm_is_rep(prefixes));
6144 gen_op_mov_TN_reg(ot, 1, R_EAX);
6145
6146 if (use_icount)
6147 gen_io_start();
6148 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6149 tcg_gen_andi_i32(cpu_tmp2_i32, cpu_tmp2_i32, 0xffff);
6150 tcg_gen_trunc_tl_i32(cpu_tmp3_i32, cpu_T[1]);
6151 gen_helper_out_func(ot, cpu_tmp2_i32, cpu_tmp3_i32);
6152 if (use_icount) {
6153 gen_io_end();
6154 gen_jmp(s, s->pc - s->cs_base);
6155 }
6156 break;
6157
6158 /************************/
6159 /* control */
6160 case 0xc2: /* ret im */
6161 val = ldsw_code(s->pc);
6162 s->pc += 2;
6163 gen_pop_T0(s);
6164 if (CODE64(s) && s->dflag)
6165 s->dflag = 2;
6166 gen_stack_update(s, val + (2 << s->dflag));
6167 if (s->dflag == 0)
6168 gen_op_andl_T0_ffff();
6169 gen_op_jmp_T0();
6170 gen_eob(s);
6171 break;
6172 case 0xc3: /* ret */
6173 gen_pop_T0(s);
6174 gen_pop_update(s);
6175 if (s->dflag == 0)
6176 gen_op_andl_T0_ffff();
6177 gen_op_jmp_T0();
6178 gen_eob(s);
6179 break;
6180 case 0xca: /* lret im */
6181 val = ldsw_code(s->pc);
6182 s->pc += 2;
6183 do_lret:
6184 if (s->pe && !s->vm86) {
6185 if (s->cc_op != CC_OP_DYNAMIC)
6186 gen_op_set_cc_op(s->cc_op);
6187 gen_jmp_im(pc_start - s->cs_base);
6188 gen_helper_lret_protected(tcg_const_i32(s->dflag),
6189 tcg_const_i32(val));
6190 } else {
6191 gen_stack_A0(s);
6192 /* pop offset */
6193 gen_op_ld_T0_A0(1 + s->dflag + s->mem_index);
6194 if (s->dflag == 0)
6195 gen_op_andl_T0_ffff();
6196 /* NOTE: keeping EIP updated is not a problem in case of
6197 exception */
6198 gen_op_jmp_T0();
6199 /* pop selector */
6200 gen_op_addl_A0_im(2 << s->dflag);
6201 gen_op_ld_T0_A0(1 + s->dflag + s->mem_index);
6202 gen_op_movl_seg_T0_vm(R_CS);
6203 /* add stack offset */
6204 gen_stack_update(s, val + (4 << s->dflag));
6205 }
6206 gen_eob(s);
6207 break;
6208 case 0xcb: /* lret */
6209 val = 0;
6210 goto do_lret;
6211 case 0xcf: /* iret */
6212 gen_svm_check_intercept(s, pc_start, SVM_EXIT_IRET);
6213 if (!s->pe) {
6214 /* real mode */
6215 gen_helper_iret_real(tcg_const_i32(s->dflag));
6216 s->cc_op = CC_OP_EFLAGS;
6217 } else if (s->vm86) {
6218 if (s->iopl != 3) {
6219 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6220 } else {
6221 gen_helper_iret_real(tcg_const_i32(s->dflag));
6222 s->cc_op = CC_OP_EFLAGS;
6223 }
6224 } else {
6225 if (s->cc_op != CC_OP_DYNAMIC)
6226 gen_op_set_cc_op(s->cc_op);
6227 gen_jmp_im(pc_start - s->cs_base);
6228 gen_helper_iret_protected(tcg_const_i32(s->dflag),
6229 tcg_const_i32(s->pc - s->cs_base));
6230 s->cc_op = CC_OP_EFLAGS;
6231 }
6232 gen_eob(s);
6233 break;
6234 case 0xe8: /* call im */
6235 {
6236 if (dflag)
6237 tval = (int32_t)insn_get(s, OT_LONG);
6238 else
6239 tval = (int16_t)insn_get(s, OT_WORD);
6240 next_eip = s->pc - s->cs_base;
6241 tval += next_eip;
6242 if (s->dflag == 0)
6243 tval &= 0xffff;
6244 else if(!CODE64(s))
6245 tval &= 0xffffffff;
6246 gen_movtl_T0_im(next_eip);
6247 gen_push_T0(s);
6248 gen_jmp(s, tval);
6249 }
6250 break;
6251 case 0x9a: /* lcall im */
6252 {
6253 unsigned int selector, offset;
6254
6255 if (CODE64(s))
6256 goto illegal_op;
6257 ot = dflag ? OT_LONG : OT_WORD;
6258 offset = insn_get(s, ot);
6259 selector = insn_get(s, OT_WORD);
6260
6261 gen_op_movl_T0_im(selector);
6262 gen_op_movl_T1_imu(offset);
6263 }
6264 goto do_lcall;
6265 case 0xe9: /* jmp im */
6266 if (dflag)
6267 tval = (int32_t)insn_get(s, OT_LONG);
6268 else
6269 tval = (int16_t)insn_get(s, OT_WORD);
6270 tval += s->pc - s->cs_base;
6271 if (s->dflag == 0)
6272 tval &= 0xffff;
6273 else if(!CODE64(s))
6274 tval &= 0xffffffff;
6275 gen_jmp(s, tval);
6276 break;
6277 case 0xea: /* ljmp im */
6278 {
6279 unsigned int selector, offset;
6280
6281 if (CODE64(s))
6282 goto illegal_op;
6283 ot = dflag ? OT_LONG : OT_WORD;
6284 offset = insn_get(s, ot);
6285 selector = insn_get(s, OT_WORD);
6286
6287 gen_op_movl_T0_im(selector);
6288 gen_op_movl_T1_imu(offset);
6289 }
6290 goto do_ljmp;
6291 case 0xeb: /* jmp Jb */
6292 tval = (int8_t)insn_get(s, OT_BYTE);
6293 tval += s->pc - s->cs_base;
6294 if (s->dflag == 0)
6295 tval &= 0xffff;
6296 gen_jmp(s, tval);
6297 break;
6298 case 0x70 ... 0x7f: /* jcc Jb */
6299 tval = (int8_t)insn_get(s, OT_BYTE);
6300 goto do_jcc;
6301 case 0x180 ... 0x18f: /* jcc Jv */
6302 if (dflag) {
6303 tval = (int32_t)insn_get(s, OT_LONG);
6304 } else {
6305 tval = (int16_t)insn_get(s, OT_WORD);
6306 }
6307 do_jcc:
6308 next_eip = s->pc - s->cs_base;
6309 tval += next_eip;
6310 if (s->dflag == 0)
6311 tval &= 0xffff;
6312 gen_jcc(s, b, tval, next_eip);
6313 break;
6314
6315 case 0x190 ... 0x19f: /* setcc Gv */
6316 modrm = ldub_code(s->pc++);
6317 gen_setcc(s, b);
6318 gen_ldst_modrm(s, modrm, OT_BYTE, OR_TMP0, 1);
6319 break;
6320 case 0x140 ... 0x14f: /* cmov Gv, Ev */
6321 {
6322 int l1;
6323 TCGv t0;
6324
6325 ot = dflag + OT_WORD;
6326 modrm = ldub_code(s->pc++);
6327 reg = ((modrm >> 3) & 7) | rex_r;
6328 mod = (modrm >> 6) & 3;
6329 t0 = tcg_temp_local_new();
6330 if (mod != 3) {
6331 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
6332 gen_op_ld_v(ot + s->mem_index, t0, cpu_A0);
6333 } else {
6334 rm = (modrm & 7) | REX_B(s);
6335 gen_op_mov_v_reg(ot, t0, rm);
6336 }
6337 #ifdef TARGET_X86_64
6338 if (ot == OT_LONG) {
6339 /* XXX: specific Intel behaviour ? */
6340 l1 = gen_new_label();
6341 gen_jcc1(s, s->cc_op, b ^ 1, l1);
6342 tcg_gen_mov_tl(cpu_regs[reg], t0);
6343 gen_set_label(l1);
6344 tcg_gen_ext32u_tl(cpu_regs[reg], cpu_regs[reg]);
6345 } else
6346 #endif
6347 {
6348 l1 = gen_new_label();
6349 gen_jcc1(s, s->cc_op, b ^ 1, l1);
6350 gen_op_mov_reg_v(ot, reg, t0);
6351 gen_set_label(l1);
6352 }
6353 tcg_temp_free(t0);
6354 }
6355 break;
6356
6357 /************************/
6358 /* flags */
6359 case 0x9c: /* pushf */
6360 gen_svm_check_intercept(s, pc_start, SVM_EXIT_PUSHF);
6361 if (s->vm86 && s->iopl != 3) {
6362 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6363 } else {
6364 if (s->cc_op != CC_OP_DYNAMIC)
6365 gen_op_set_cc_op(s->cc_op);
6366 gen_helper_read_eflags(cpu_T[0]);
6367 gen_push_T0(s);
6368 }
6369 break;
6370 case 0x9d: /* popf */
6371 gen_svm_check_intercept(s, pc_start, SVM_EXIT_POPF);
6372 if (s->vm86 && s->iopl != 3) {
6373 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6374 } else {
6375 gen_pop_T0(s);
6376 if (s->cpl == 0) {
6377 if (s->dflag) {
6378 gen_helper_write_eflags(cpu_T[0],
6379 tcg_const_i32((TF_MASK | AC_MASK | ID_MASK | NT_MASK | IF_MASK | IOPL_MASK)));
6380 } else {
6381 gen_helper_write_eflags(cpu_T[0],
6382 tcg_const_i32((TF_MASK | AC_MASK | ID_MASK | NT_MASK | IF_MASK | IOPL_MASK) & 0xffff));
6383 }
6384 } else {
6385 if (s->cpl <= s->iopl) {
6386 if (s->dflag) {
6387 gen_helper_write_eflags(cpu_T[0],
6388 tcg_const_i32((TF_MASK | AC_MASK | ID_MASK | NT_MASK | IF_MASK)));
6389 } else {
6390 gen_helper_write_eflags(cpu_T[0],
6391 tcg_const_i32((TF_MASK | AC_MASK | ID_MASK | NT_MASK | IF_MASK) & 0xffff));
6392 }
6393 } else {
6394 if (s->dflag) {
6395 gen_helper_write_eflags(cpu_T[0],
6396 tcg_const_i32((TF_MASK | AC_MASK | ID_MASK | NT_MASK)));
6397 } else {
6398 gen_helper_write_eflags(cpu_T[0],
6399 tcg_const_i32((TF_MASK | AC_MASK | ID_MASK | NT_MASK) & 0xffff));
6400 }
6401 }
6402 }
6403 gen_pop_update(s);
6404 s->cc_op = CC_OP_EFLAGS;
6405 /* abort translation because TF flag may change */
6406 gen_jmp_im(s->pc - s->cs_base);
6407 gen_eob(s);
6408 }
6409 break;
6410 case 0x9e: /* sahf */
6411 if (CODE64(s) && !(s->cpuid_ext3_features & CPUID_EXT3_LAHF_LM))
6412 goto illegal_op;
6413 gen_op_mov_TN_reg(OT_BYTE, 0, R_AH);
6414 if (s->cc_op != CC_OP_DYNAMIC)
6415 gen_op_set_cc_op(s->cc_op);
6416 gen_compute_eflags(cpu_cc_src);
6417 tcg_gen_andi_tl(cpu_cc_src, cpu_cc_src, CC_O);
6418 tcg_gen_andi_tl(cpu_T[0], cpu_T[0], CC_S | CC_Z | CC_A | CC_P | CC_C);
6419 tcg_gen_or_tl(cpu_cc_src, cpu_cc_src, cpu_T[0]);
6420 s->cc_op = CC_OP_EFLAGS;
6421 break;
6422 case 0x9f: /* lahf */
6423 if (CODE64(s) && !(s->cpuid_ext3_features & CPUID_EXT3_LAHF_LM))
6424 goto illegal_op;
6425 if (s->cc_op != CC_OP_DYNAMIC)
6426 gen_op_set_cc_op(s->cc_op);
6427 gen_compute_eflags(cpu_T[0]);
6428 /* Note: gen_compute_eflags() only gives the condition codes */
6429 tcg_gen_ori_tl(cpu_T[0], cpu_T[0], 0x02);
6430 gen_op_mov_reg_T0(OT_BYTE, R_AH);
6431 break;
6432 case 0xf5: /* cmc */
6433 if (s->cc_op != CC_OP_DYNAMIC)
6434 gen_op_set_cc_op(s->cc_op);
6435 gen_compute_eflags(cpu_cc_src);
6436 tcg_gen_xori_tl(cpu_cc_src, cpu_cc_src, CC_C);
6437 s->cc_op = CC_OP_EFLAGS;
6438 break;
6439 case 0xf8: /* clc */
6440 if (s->cc_op != CC_OP_DYNAMIC)
6441 gen_op_set_cc_op(s->cc_op);
6442 gen_compute_eflags(cpu_cc_src);
6443 tcg_gen_andi_tl(cpu_cc_src, cpu_cc_src, ~CC_C);
6444 s->cc_op = CC_OP_EFLAGS;
6445 break;
6446 case 0xf9: /* stc */
6447 if (s->cc_op != CC_OP_DYNAMIC)
6448 gen_op_set_cc_op(s->cc_op);
6449 gen_compute_eflags(cpu_cc_src);
6450 tcg_gen_ori_tl(cpu_cc_src, cpu_cc_src, CC_C);
6451 s->cc_op = CC_OP_EFLAGS;
6452 break;
6453 case 0xfc: /* cld */
6454 tcg_gen_movi_i32(cpu_tmp2_i32, 1);
6455 tcg_gen_st_i32(cpu_tmp2_i32, cpu_env, offsetof(CPUState, df));
6456 break;
6457 case 0xfd: /* std */
6458 tcg_gen_movi_i32(cpu_tmp2_i32, -1);
6459 tcg_gen_st_i32(cpu_tmp2_i32, cpu_env, offsetof(CPUState, df));
6460 break;
6461
6462 /************************/
6463 /* bit operations */
6464 case 0x1ba: /* bt/bts/btr/btc Gv, im */
6465 ot = dflag + OT_WORD;
6466 modrm = ldub_code(s->pc++);
6467 op = (modrm >> 3) & 7;
6468 mod = (modrm >> 6) & 3;
6469 rm = (modrm & 7) | REX_B(s);
6470 if (mod != 3) {
6471 s->rip_offset = 1;
6472 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
6473 gen_op_ld_T0_A0(ot + s->mem_index);
6474 } else {
6475 gen_op_mov_TN_reg(ot, 0, rm);
6476 }
6477 /* load shift */
6478 val = ldub_code(s->pc++);
6479 gen_op_movl_T1_im(val);
6480 if (op < 4)
6481 goto illegal_op;
6482 op -= 4;
6483 goto bt_op;
6484 case 0x1a3: /* bt Gv, Ev */
6485 op = 0;
6486 goto do_btx;
6487 case 0x1ab: /* bts */
6488 op = 1;
6489 goto do_btx;
6490 case 0x1b3: /* btr */
6491 op = 2;
6492 goto do_btx;
6493 case 0x1bb: /* btc */
6494 op = 3;
6495 do_btx:
6496 ot = dflag + OT_WORD;
6497 modrm = ldub_code(s->pc++);
6498 reg = ((modrm >> 3) & 7) | rex_r;
6499 mod = (modrm >> 6) & 3;
6500 rm = (modrm & 7) | REX_B(s);
6501 gen_op_mov_TN_reg(OT_LONG, 1, reg);
6502 if (mod != 3) {
6503 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
6504 /* specific case: we need to add a displacement */
6505 gen_exts(ot, cpu_T[1]);
6506 tcg_gen_sari_tl(cpu_tmp0, cpu_T[1], 3 + ot);
6507 tcg_gen_shli_tl(cpu_tmp0, cpu_tmp0, ot);
6508 tcg_gen_add_tl(cpu_A0, cpu_A0, cpu_tmp0);
6509 gen_op_ld_T0_A0(ot + s->mem_index);
6510 } else {
6511 gen_op_mov_TN_reg(ot, 0, rm);
6512 }
6513 bt_op:
6514 tcg_gen_andi_tl(cpu_T[1], cpu_T[1], (1 << (3 + ot)) - 1);
6515 switch(op) {
6516 case 0:
6517 tcg_gen_shr_tl(cpu_cc_src, cpu_T[0], cpu_T[1]);
6518 tcg_gen_movi_tl(cpu_cc_dst, 0);
6519 break;
6520 case 1:
6521 tcg_gen_shr_tl(cpu_tmp4, cpu_T[0], cpu_T[1]);
6522 tcg_gen_movi_tl(cpu_tmp0, 1);
6523 tcg_gen_shl_tl(cpu_tmp0, cpu_tmp0, cpu_T[1]);
6524 tcg_gen_or_tl(cpu_T[0], cpu_T[0], cpu_tmp0);
6525 break;
6526 case 2:
6527 tcg_gen_shr_tl(cpu_tmp4, cpu_T[0], cpu_T[1]);
6528 tcg_gen_movi_tl(cpu_tmp0, 1);
6529 tcg_gen_shl_tl(cpu_tmp0, cpu_tmp0, cpu_T[1]);
6530 tcg_gen_not_tl(cpu_tmp0, cpu_tmp0);
6531 tcg_gen_and_tl(cpu_T[0], cpu_T[0], cpu_tmp0);
6532 break;
6533 default:
6534 case 3:
6535 tcg_gen_shr_tl(cpu_tmp4, cpu_T[0], cpu_T[1]);
6536 tcg_gen_movi_tl(cpu_tmp0, 1);
6537 tcg_gen_shl_tl(cpu_tmp0, cpu_tmp0, cpu_T[1]);
6538 tcg_gen_xor_tl(cpu_T[0], cpu_T[0], cpu_tmp0);
6539 break;
6540 }
6541 s->cc_op = CC_OP_SARB + ot;
6542 if (op != 0) {
6543 if (mod != 3)
6544 gen_op_st_T0_A0(ot + s->mem_index);
6545 else
6546 gen_op_mov_reg_T0(ot, rm);
6547 tcg_gen_mov_tl(cpu_cc_src, cpu_tmp4);
6548 tcg_gen_movi_tl(cpu_cc_dst, 0);
6549 }
6550 break;
6551 case 0x1bc: /* bsf */
6552 case 0x1bd: /* bsr */
6553 {
6554 int label1;
6555 TCGv t0;
6556
6557 ot = dflag + OT_WORD;
6558 modrm = ldub_code(s->pc++);
6559 reg = ((modrm >> 3) & 7) | rex_r;
6560 gen_ldst_modrm(s,modrm, ot, OR_TMP0, 0);
6561 gen_extu(ot, cpu_T[0]);
6562 t0 = tcg_temp_local_new();
6563 tcg_gen_mov_tl(t0, cpu_T[0]);
6564 if ((b & 1) && (prefixes & PREFIX_REPZ) &&
6565 (s->cpuid_ext3_features & CPUID_EXT3_ABM)) {
6566 switch(ot) {
6567 case OT_WORD: gen_helper_lzcnt(cpu_T[0], t0,
6568 tcg_const_i32(16)); break;
6569 case OT_LONG: gen_helper_lzcnt(cpu_T[0], t0,
6570 tcg_const_i32(32)); break;
6571 case OT_QUAD: gen_helper_lzcnt(cpu_T[0], t0,
6572 tcg_const_i32(64)); break;
6573 }
6574 gen_op_mov_reg_T0(ot, reg);
6575 } else {
6576 label1 = gen_new_label();
6577 tcg_gen_movi_tl(cpu_cc_dst, 0);
6578 tcg_gen_brcondi_tl(TCG_COND_EQ, t0, 0, label1);
6579 if (b & 1) {
6580 gen_helper_bsr(cpu_T[0], t0);
6581 } else {
6582 gen_helper_bsf(cpu_T[0], t0);
6583 }
6584 gen_op_mov_reg_T0(ot, reg);
6585 tcg_gen_movi_tl(cpu_cc_dst, 1);
6586 gen_set_label(label1);
6587 tcg_gen_discard_tl(cpu_cc_src);
6588 s->cc_op = CC_OP_LOGICB + ot;
6589 }
6590 tcg_temp_free(t0);
6591 }
6592 break;
6593 /************************/
6594 /* bcd */
6595 case 0x27: /* daa */
6596 if (CODE64(s))
6597 goto illegal_op;
6598 if (s->cc_op != CC_OP_DYNAMIC)
6599 gen_op_set_cc_op(s->cc_op);
6600 gen_helper_daa();
6601 s->cc_op = CC_OP_EFLAGS;
6602 break;
6603 case 0x2f: /* das */
6604 if (CODE64(s))
6605 goto illegal_op;
6606 if (s->cc_op != CC_OP_DYNAMIC)
6607 gen_op_set_cc_op(s->cc_op);
6608 gen_helper_das();
6609 s->cc_op = CC_OP_EFLAGS;
6610 break;
6611 case 0x37: /* aaa */
6612 if (CODE64(s))
6613 goto illegal_op;
6614 if (s->cc_op != CC_OP_DYNAMIC)
6615 gen_op_set_cc_op(s->cc_op);
6616 gen_helper_aaa();
6617 s->cc_op = CC_OP_EFLAGS;
6618 break;
6619 case 0x3f: /* aas */
6620 if (CODE64(s))
6621 goto illegal_op;
6622 if (s->cc_op != CC_OP_DYNAMIC)
6623 gen_op_set_cc_op(s->cc_op);
6624 gen_helper_aas();
6625 s->cc_op = CC_OP_EFLAGS;
6626 break;
6627 case 0xd4: /* aam */
6628 if (CODE64(s))
6629 goto illegal_op;
6630 val = ldub_code(s->pc++);
6631 if (val == 0) {
6632 gen_exception(s, EXCP00_DIVZ, pc_start - s->cs_base);
6633 } else {
6634 gen_helper_aam(tcg_const_i32(val));
6635 s->cc_op = CC_OP_LOGICB;
6636 }
6637 break;
6638 case 0xd5: /* aad */
6639 if (CODE64(s))
6640 goto illegal_op;
6641 val = ldub_code(s->pc++);
6642 gen_helper_aad(tcg_const_i32(val));
6643 s->cc_op = CC_OP_LOGICB;
6644 break;
6645 /************************/
6646 /* misc */
6647 case 0x90: /* nop */
6648 /* XXX: correct lock test for all insn */
6649 if (prefixes & PREFIX_LOCK) {
6650 goto illegal_op;
6651 }
6652 /* If REX_B is set, then this is xchg eax, r8d, not a nop. */
6653 if (REX_B(s)) {
6654 goto do_xchg_reg_eax;
6655 }
6656 if (prefixes & PREFIX_REPZ) {
6657 gen_svm_check_intercept(s, pc_start, SVM_EXIT_PAUSE);
6658 }
6659 break;
6660 case 0x9b: /* fwait */
6661 if ((s->flags & (HF_MP_MASK | HF_TS_MASK)) ==
6662 (HF_MP_MASK | HF_TS_MASK)) {
6663 gen_exception(s, EXCP07_PREX, pc_start - s->cs_base);
6664 } else {
6665 if (s->cc_op != CC_OP_DYNAMIC)
6666 gen_op_set_cc_op(s->cc_op);
6667 gen_jmp_im(pc_start - s->cs_base);
6668 gen_helper_fwait();
6669 }
6670 break;
6671 case 0xcc: /* int3 */
6672 gen_interrupt(s, EXCP03_INT3, pc_start - s->cs_base, s->pc - s->cs_base);
6673 break;
6674 case 0xcd: /* int N */
6675 val = ldub_code(s->pc++);
6676 if (s->vm86 && s->iopl != 3) {
6677 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6678 } else {
6679 gen_interrupt(s, val, pc_start - s->cs_base, s->pc - s->cs_base);
6680 }
6681 break;
6682 case 0xce: /* into */
6683 if (CODE64(s))
6684 goto illegal_op;
6685 if (s->cc_op != CC_OP_DYNAMIC)
6686 gen_op_set_cc_op(s->cc_op);
6687 gen_jmp_im(pc_start - s->cs_base);
6688 gen_helper_into(tcg_const_i32(s->pc - pc_start));
6689 break;
6690 #ifdef WANT_ICEBP
6691 case 0xf1: /* icebp (undocumented, exits to external debugger) */
6692 gen_svm_check_intercept(s, pc_start, SVM_EXIT_ICEBP);
6693 #if 1
6694 gen_debug(s, pc_start - s->cs_base);
6695 #else
6696 /* start debug */
6697 tb_flush(cpu_single_env);
6698 cpu_set_log(CPU_LOG_INT | CPU_LOG_TB_IN_ASM);
6699 #endif
6700 break;
6701 #endif
6702 case 0xfa: /* cli */
6703 if (!s->vm86) {
6704 if (s->cpl <= s->iopl) {
6705 gen_helper_cli();
6706 } else {
6707 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6708 }
6709 } else {
6710 if (s->iopl == 3) {
6711 gen_helper_cli();
6712 } else {
6713 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6714 }
6715 }
6716 break;
6717 case 0xfb: /* sti */
6718 if (!s->vm86) {
6719 if (s->cpl <= s->iopl) {
6720 gen_sti:
6721 gen_helper_sti();
6722 /* interruptions are enabled only the first insn after sti */
6723 /* If several instructions disable interrupts, only the
6724 _first_ does it */
6725 if (!(s->tb->flags & HF_INHIBIT_IRQ_MASK))
6726 gen_helper_set_inhibit_irq();
6727 /* give a chance to handle pending irqs */
6728 gen_jmp_im(s->pc - s->cs_base);
6729 gen_eob(s);
6730 } else {
6731 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6732 }
6733 } else {
6734 if (s->iopl == 3) {
6735 goto gen_sti;
6736 } else {
6737 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6738 }
6739 }
6740 break;
6741 case 0x62: /* bound */
6742 if (CODE64(s))
6743 goto illegal_op;
6744 ot = dflag ? OT_LONG : OT_WORD;
6745 modrm = ldub_code(s->pc++);
6746 reg = (modrm >> 3) & 7;
6747 mod = (modrm >> 6) & 3;
6748 if (mod == 3)
6749 goto illegal_op;
6750 gen_op_mov_TN_reg(ot, 0, reg);
6751 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
6752 gen_jmp_im(pc_start - s->cs_base);
6753 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6754 if (ot == OT_WORD)
6755 gen_helper_boundw(cpu_A0, cpu_tmp2_i32);
6756 else
6757 gen_helper_boundl(cpu_A0, cpu_tmp2_i32);
6758 break;
6759 case 0x1c8 ... 0x1cf: /* bswap reg */
6760 reg = (b & 7) | REX_B(s);
6761 #ifdef TARGET_X86_64
6762 if (dflag == 2) {
6763 gen_op_mov_TN_reg(OT_QUAD, 0, reg);
6764 tcg_gen_bswap64_i64(cpu_T[0], cpu_T[0]);
6765 gen_op_mov_reg_T0(OT_QUAD, reg);
6766 } else
6767 #endif
6768 {
6769 gen_op_mov_TN_reg(OT_LONG, 0, reg);
6770 tcg_gen_ext32u_tl(cpu_T[0], cpu_T[0]);
6771 tcg_gen_bswap32_tl(cpu_T[0], cpu_T[0]);
6772 gen_op_mov_reg_T0(OT_LONG, reg);
6773 }
6774 break;
6775 case 0xd6: /* salc */
6776 if (CODE64(s))
6777 goto illegal_op;
6778 if (s->cc_op != CC_OP_DYNAMIC)
6779 gen_op_set_cc_op(s->cc_op);
6780 gen_compute_eflags_c(cpu_T[0]);
6781 tcg_gen_neg_tl(cpu_T[0], cpu_T[0]);
6782 gen_op_mov_reg_T0(OT_BYTE, R_EAX);
6783 break;
6784 case 0xe0: /* loopnz */
6785 case 0xe1: /* loopz */
6786 case 0xe2: /* loop */
6787 case 0xe3: /* jecxz */
6788 {
6789 int l1, l2, l3;
6790
6791 tval = (int8_t)insn_get(s, OT_BYTE);
6792 next_eip = s->pc - s->cs_base;
6793 tval += next_eip;
6794 if (s->dflag == 0)
6795 tval &= 0xffff;
6796
6797 l1 = gen_new_label();
6798 l2 = gen_new_label();
6799 l3 = gen_new_label();
6800 b &= 3;
6801 switch(b) {
6802 case 0: /* loopnz */
6803 case 1: /* loopz */
6804 if (s->cc_op != CC_OP_DYNAMIC)
6805 gen_op_set_cc_op(s->cc_op);
6806 gen_op_add_reg_im(s->aflag, R_ECX, -1);
6807 gen_op_jz_ecx(s->aflag, l3);
6808 gen_compute_eflags(cpu_tmp0);
6809 tcg_gen_andi_tl(cpu_tmp0, cpu_tmp0, CC_Z);
6810 if (b == 0) {
6811 tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_tmp0, 0, l1);
6812 } else {
6813 tcg_gen_brcondi_tl(TCG_COND_NE, cpu_tmp0, 0, l1);
6814 }
6815 break;
6816 case 2: /* loop */
6817 gen_op_add_reg_im(s->aflag, R_ECX, -1);
6818 gen_op_jnz_ecx(s->aflag, l1);
6819 break;
6820 default:
6821 case 3: /* jcxz */
6822 gen_op_jz_ecx(s->aflag, l1);
6823 break;
6824 }
6825
6826 gen_set_label(l3);
6827 gen_jmp_im(next_eip);
6828 tcg_gen_br(l2);
6829
6830 gen_set_label(l1);
6831 gen_jmp_im(tval);
6832 gen_set_label(l2);
6833 gen_eob(s);
6834 }
6835 break;
6836 case 0x130: /* wrmsr */
6837 case 0x132: /* rdmsr */
6838 if (s->cpl != 0) {
6839 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6840 } else {
6841 if (s->cc_op != CC_OP_DYNAMIC)
6842 gen_op_set_cc_op(s->cc_op);
6843 gen_jmp_im(pc_start - s->cs_base);
6844 if (b & 2) {
6845 gen_helper_rdmsr();
6846 } else {
6847 gen_helper_wrmsr();
6848 }
6849 }
6850 break;
6851 case 0x131: /* rdtsc */
6852 if (s->cc_op != CC_OP_DYNAMIC)
6853 gen_op_set_cc_op(s->cc_op);
6854 gen_jmp_im(pc_start - s->cs_base);
6855 if (use_icount)
6856 gen_io_start();
6857 gen_helper_rdtsc();
6858 if (use_icount) {
6859 gen_io_end();
6860 gen_jmp(s, s->pc - s->cs_base);
6861 }
6862 break;
6863 case 0x133: /* rdpmc */
6864 if (s->cc_op != CC_OP_DYNAMIC)
6865 gen_op_set_cc_op(s->cc_op);
6866 gen_jmp_im(pc_start - s->cs_base);
6867 gen_helper_rdpmc();
6868 break;
6869 case 0x134: /* sysenter */
6870 /* For Intel SYSENTER is valid on 64-bit */
6871 if (CODE64(s) && cpu_single_env->cpuid_vendor1 != CPUID_VENDOR_INTEL_1)
6872 goto illegal_op;
6873 if (!s->pe) {
6874 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6875 } else {
6876 gen_update_cc_op(s);
6877 gen_jmp_im(pc_start - s->cs_base);
6878 gen_helper_sysenter();
6879 gen_eob(s);
6880 }
6881 break;
6882 case 0x135: /* sysexit */
6883 /* For Intel SYSEXIT is valid on 64-bit */
6884 if (CODE64(s) && cpu_single_env->cpuid_vendor1 != CPUID_VENDOR_INTEL_1)
6885 goto illegal_op;
6886 if (!s->pe) {
6887 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6888 } else {
6889 gen_update_cc_op(s);
6890 gen_jmp_im(pc_start - s->cs_base);
6891 gen_helper_sysexit(tcg_const_i32(dflag));
6892 gen_eob(s);
6893 }
6894 break;
6895 #ifdef TARGET_X86_64
6896 case 0x105: /* syscall */
6897 /* XXX: is it usable in real mode ? */
6898 gen_update_cc_op(s);
6899 gen_jmp_im(pc_start - s->cs_base);
6900 gen_helper_syscall(tcg_const_i32(s->pc - pc_start));
6901 gen_eob(s);
6902 break;
6903 case 0x107: /* sysret */
6904 if (!s->pe) {
6905 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6906 } else {
6907 gen_update_cc_op(s);
6908 gen_jmp_im(pc_start - s->cs_base);
6909 gen_helper_sysret(tcg_const_i32(s->dflag));
6910 /* condition codes are modified only in long mode */
6911 if (s->lma)
6912 s->cc_op = CC_OP_EFLAGS;
6913 gen_eob(s);
6914 }
6915 break;
6916 #endif
6917 case 0x1a2: /* cpuid */
6918 if (s->cc_op != CC_OP_DYNAMIC)
6919 gen_op_set_cc_op(s->cc_op);
6920 gen_jmp_im(pc_start - s->cs_base);
6921 gen_helper_cpuid();
6922 break;
6923 case 0xf4: /* hlt */
6924 if (s->cpl != 0) {
6925 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6926 } else {
6927 if (s->cc_op != CC_OP_DYNAMIC)
6928 gen_op_set_cc_op(s->cc_op);
6929 gen_jmp_im(pc_start - s->cs_base);
6930 gen_helper_hlt(tcg_const_i32(s->pc - pc_start));
6931 s->is_jmp = DISAS_TB_JUMP;
6932 }
6933 break;
6934 case 0x100:
6935 modrm = ldub_code(s->pc++);
6936 mod = (modrm >> 6) & 3;
6937 op = (modrm >> 3) & 7;
6938 switch(op) {
6939 case 0: /* sldt */
6940 if (!s->pe || s->vm86)
6941 goto illegal_op;
6942 gen_svm_check_intercept(s, pc_start, SVM_EXIT_LDTR_READ);
6943 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,ldt.selector));
6944 ot = OT_WORD;
6945 if (mod == 3)
6946 ot += s->dflag;
6947 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 1);
6948 break;
6949 case 2: /* lldt */
6950 if (!s->pe || s->vm86)
6951 goto illegal_op;
6952 if (s->cpl != 0) {
6953 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6954 } else {
6955 gen_svm_check_intercept(s, pc_start, SVM_EXIT_LDTR_WRITE);
6956 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
6957 gen_jmp_im(pc_start - s->cs_base);
6958 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6959 gen_helper_lldt(cpu_tmp2_i32);
6960 }
6961 break;
6962 case 1: /* str */
6963 if (!s->pe || s->vm86)
6964 goto illegal_op;
6965 gen_svm_check_intercept(s, pc_start, SVM_EXIT_TR_READ);
6966 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,tr.selector));
6967 ot = OT_WORD;
6968 if (mod == 3)
6969 ot += s->dflag;
6970 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 1);
6971 break;
6972 case 3: /* ltr */
6973 if (!s->pe || s->vm86)
6974 goto illegal_op;
6975 if (s->cpl != 0) {
6976 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
6977 } else {
6978 gen_svm_check_intercept(s, pc_start, SVM_EXIT_TR_WRITE);
6979 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
6980 gen_jmp_im(pc_start - s->cs_base);
6981 tcg_gen_trunc_tl_i32(cpu_tmp2_i32, cpu_T[0]);
6982 gen_helper_ltr(cpu_tmp2_i32);
6983 }
6984 break;
6985 case 4: /* verr */
6986 case 5: /* verw */
6987 if (!s->pe || s->vm86)
6988 goto illegal_op;
6989 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
6990 if (s->cc_op != CC_OP_DYNAMIC)
6991 gen_op_set_cc_op(s->cc_op);
6992 if (op == 4)
6993 gen_helper_verr(cpu_T[0]);
6994 else
6995 gen_helper_verw(cpu_T[0]);
6996 s->cc_op = CC_OP_EFLAGS;
6997 break;
6998 default:
6999 goto illegal_op;
7000 }
7001 break;
7002 case 0x101:
7003 modrm = ldub_code(s->pc++);
7004 mod = (modrm >> 6) & 3;
7005 op = (modrm >> 3) & 7;
7006 rm = modrm & 7;
7007 switch(op) {
7008 case 0: /* sgdt */
7009 if (mod == 3)
7010 goto illegal_op;
7011 gen_svm_check_intercept(s, pc_start, SVM_EXIT_GDTR_READ);
7012 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7013 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State, gdt.limit));
7014 gen_op_st_T0_A0(OT_WORD + s->mem_index);
7015 gen_add_A0_im(s, 2);
7016 tcg_gen_ld_tl(cpu_T[0], cpu_env, offsetof(CPUX86State, gdt.base));
7017 if (!s->dflag)
7018 gen_op_andl_T0_im(0xffffff);
7019 gen_op_st_T0_A0(CODE64(s) + OT_LONG + s->mem_index);
7020 break;
7021 case 1:
7022 if (mod == 3) {
7023 switch (rm) {
7024 case 0: /* monitor */
7025 if (!(s->cpuid_ext_features & CPUID_EXT_MONITOR) ||
7026 s->cpl != 0)
7027 goto illegal_op;
7028 if (s->cc_op != CC_OP_DYNAMIC)
7029 gen_op_set_cc_op(s->cc_op);
7030 gen_jmp_im(pc_start - s->cs_base);
7031 #ifdef TARGET_X86_64
7032 if (s->aflag == 2) {
7033 gen_op_movq_A0_reg(R_EAX);
7034 } else
7035 #endif
7036 {
7037 gen_op_movl_A0_reg(R_EAX);
7038 if (s->aflag == 0)
7039 gen_op_andl_A0_ffff();
7040 }
7041 gen_add_A0_ds_seg(s);
7042 gen_helper_monitor(cpu_A0);
7043 break;
7044 case 1: /* mwait */
7045 if (!(s->cpuid_ext_features & CPUID_EXT_MONITOR) ||
7046 s->cpl != 0)
7047 goto illegal_op;
7048 gen_update_cc_op(s);
7049 gen_jmp_im(pc_start - s->cs_base);
7050 gen_helper_mwait(tcg_const_i32(s->pc - pc_start));
7051 gen_eob(s);
7052 break;
7053 default:
7054 goto illegal_op;
7055 }
7056 } else { /* sidt */
7057 gen_svm_check_intercept(s, pc_start, SVM_EXIT_IDTR_READ);
7058 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7059 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State, idt.limit));
7060 gen_op_st_T0_A0(OT_WORD + s->mem_index);
7061 gen_add_A0_im(s, 2);
7062 tcg_gen_ld_tl(cpu_T[0], cpu_env, offsetof(CPUX86State, idt.base));
7063 if (!s->dflag)
7064 gen_op_andl_T0_im(0xffffff);
7065 gen_op_st_T0_A0(CODE64(s) + OT_LONG + s->mem_index);
7066 }
7067 break;
7068 case 2: /* lgdt */
7069 case 3: /* lidt */
7070 if (mod == 3) {
7071 if (s->cc_op != CC_OP_DYNAMIC)
7072 gen_op_set_cc_op(s->cc_op);
7073 gen_jmp_im(pc_start - s->cs_base);
7074 switch(rm) {
7075 case 0: /* VMRUN */
7076 if (!(s->flags & HF_SVME_MASK) || !s->pe)
7077 goto illegal_op;
7078 if (s->cpl != 0) {
7079 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7080 break;
7081 } else {
7082 gen_helper_vmrun(tcg_const_i32(s->aflag),
7083 tcg_const_i32(s->pc - pc_start));
7084 tcg_gen_exit_tb(0);
7085 s->is_jmp = DISAS_TB_JUMP;
7086 }
7087 break;
7088 case 1: /* VMMCALL */
7089 if (!(s->flags & HF_SVME_MASK))
7090 goto illegal_op;
7091 gen_helper_vmmcall();
7092 break;
7093 case 2: /* VMLOAD */
7094 if (!(s->flags & HF_SVME_MASK) || !s->pe)
7095 goto illegal_op;
7096 if (s->cpl != 0) {
7097 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7098 break;
7099 } else {
7100 gen_helper_vmload(tcg_const_i32(s->aflag));
7101 }
7102 break;
7103 case 3: /* VMSAVE */
7104 if (!(s->flags & HF_SVME_MASK) || !s->pe)
7105 goto illegal_op;
7106 if (s->cpl != 0) {
7107 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7108 break;
7109 } else {
7110 gen_helper_vmsave(tcg_const_i32(s->aflag));
7111 }
7112 break;
7113 case 4: /* STGI */
7114 if ((!(s->flags & HF_SVME_MASK) &&
7115 !(s->cpuid_ext3_features & CPUID_EXT3_SKINIT)) ||
7116 !s->pe)
7117 goto illegal_op;
7118 if (s->cpl != 0) {
7119 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7120 break;
7121 } else {
7122 gen_helper_stgi();
7123 }
7124 break;
7125 case 5: /* CLGI */
7126 if (!(s->flags & HF_SVME_MASK) || !s->pe)
7127 goto illegal_op;
7128 if (s->cpl != 0) {
7129 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7130 break;
7131 } else {
7132 gen_helper_clgi();
7133 }
7134 break;
7135 case 6: /* SKINIT */
7136 if ((!(s->flags & HF_SVME_MASK) &&
7137 !(s->cpuid_ext3_features & CPUID_EXT3_SKINIT)) ||
7138 !s->pe)
7139 goto illegal_op;
7140 gen_helper_skinit();
7141 break;
7142 case 7: /* INVLPGA */
7143 if (!(s->flags & HF_SVME_MASK) || !s->pe)
7144 goto illegal_op;
7145 if (s->cpl != 0) {
7146 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7147 break;
7148 } else {
7149 gen_helper_invlpga(tcg_const_i32(s->aflag));
7150 }
7151 break;
7152 default:
7153 goto illegal_op;
7154 }
7155 } else if (s->cpl != 0) {
7156 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7157 } else {
7158 gen_svm_check_intercept(s, pc_start,
7159 op==2 ? SVM_EXIT_GDTR_WRITE : SVM_EXIT_IDTR_WRITE);
7160 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7161 gen_op_ld_T1_A0(OT_WORD + s->mem_index);
7162 gen_add_A0_im(s, 2);
7163 gen_op_ld_T0_A0(CODE64(s) + OT_LONG + s->mem_index);
7164 if (!s->dflag)
7165 gen_op_andl_T0_im(0xffffff);
7166 if (op == 2) {
7167 tcg_gen_st_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,gdt.base));
7168 tcg_gen_st32_tl(cpu_T[1], cpu_env, offsetof(CPUX86State,gdt.limit));
7169 } else {
7170 tcg_gen_st_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,idt.base));
7171 tcg_gen_st32_tl(cpu_T[1], cpu_env, offsetof(CPUX86State,idt.limit));
7172 }
7173 }
7174 break;
7175 case 4: /* smsw */
7176 gen_svm_check_intercept(s, pc_start, SVM_EXIT_READ_CR0);
7177 #if defined TARGET_X86_64 && defined HOST_WORDS_BIGENDIAN
7178 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,cr[0]) + 4);
7179 #else
7180 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,cr[0]));
7181 #endif
7182 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 1);
7183 break;
7184 case 6: /* lmsw */
7185 if (s->cpl != 0) {
7186 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7187 } else {
7188 gen_svm_check_intercept(s, pc_start, SVM_EXIT_WRITE_CR0);
7189 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
7190 gen_helper_lmsw(cpu_T[0]);
7191 gen_jmp_im(s->pc - s->cs_base);
7192 gen_eob(s);
7193 }
7194 break;
7195 case 7:
7196 if (mod != 3) { /* invlpg */
7197 if (s->cpl != 0) {
7198 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7199 } else {
7200 if (s->cc_op != CC_OP_DYNAMIC)
7201 gen_op_set_cc_op(s->cc_op);
7202 gen_jmp_im(pc_start - s->cs_base);
7203 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7204 gen_helper_invlpg(cpu_A0);
7205 gen_jmp_im(s->pc - s->cs_base);
7206 gen_eob(s);
7207 }
7208 } else {
7209 switch (rm) {
7210 case 0: /* swapgs */
7211 #ifdef TARGET_X86_64
7212 if (CODE64(s)) {
7213 if (s->cpl != 0) {
7214 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7215 } else {
7216 tcg_gen_ld_tl(cpu_T[0], cpu_env,
7217 offsetof(CPUX86State,segs[R_GS].base));
7218 tcg_gen_ld_tl(cpu_T[1], cpu_env,
7219 offsetof(CPUX86State,kernelgsbase));
7220 tcg_gen_st_tl(cpu_T[1], cpu_env,
7221 offsetof(CPUX86State,segs[R_GS].base));
7222 tcg_gen_st_tl(cpu_T[0], cpu_env,
7223 offsetof(CPUX86State,kernelgsbase));
7224 }
7225 } else
7226 #endif
7227 {
7228 goto illegal_op;
7229 }
7230 break;
7231 case 1: /* rdtscp */
7232 if (!(s->cpuid_ext2_features & CPUID_EXT2_RDTSCP))
7233 goto illegal_op;
7234 if (s->cc_op != CC_OP_DYNAMIC)
7235 gen_op_set_cc_op(s->cc_op);
7236 gen_jmp_im(pc_start - s->cs_base);
7237 if (use_icount)
7238 gen_io_start();
7239 gen_helper_rdtscp();
7240 if (use_icount) {
7241 gen_io_end();
7242 gen_jmp(s, s->pc - s->cs_base);
7243 }
7244 break;
7245 default:
7246 goto illegal_op;
7247 }
7248 }
7249 break;
7250 default:
7251 goto illegal_op;
7252 }
7253 break;
7254 case 0x108: /* invd */
7255 case 0x109: /* wbinvd */
7256 if (s->cpl != 0) {
7257 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7258 } else {
7259 gen_svm_check_intercept(s, pc_start, (b & 2) ? SVM_EXIT_INVD : SVM_EXIT_WBINVD);
7260 /* nothing to do */
7261 }
7262 break;
7263 case 0x63: /* arpl or movslS (x86_64) */
7264 #ifdef TARGET_X86_64
7265 if (CODE64(s)) {
7266 int d_ot;
7267 /* d_ot is the size of destination */
7268 d_ot = dflag + OT_WORD;
7269
7270 modrm = ldub_code(s->pc++);
7271 reg = ((modrm >> 3) & 7) | rex_r;
7272 mod = (modrm >> 6) & 3;
7273 rm = (modrm & 7) | REX_B(s);
7274
7275 if (mod == 3) {
7276 gen_op_mov_TN_reg(OT_LONG, 0, rm);
7277 /* sign extend */
7278 if (d_ot == OT_QUAD)
7279 tcg_gen_ext32s_tl(cpu_T[0], cpu_T[0]);
7280 gen_op_mov_reg_T0(d_ot, reg);
7281 } else {
7282 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7283 if (d_ot == OT_QUAD) {
7284 gen_op_lds_T0_A0(OT_LONG + s->mem_index);
7285 } else {
7286 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
7287 }
7288 gen_op_mov_reg_T0(d_ot, reg);
7289 }
7290 } else
7291 #endif
7292 {
7293 int label1;
7294 TCGv t0, t1, t2, a0;
7295
7296 if (!s->pe || s->vm86)
7297 goto illegal_op;
7298 t0 = tcg_temp_local_new();
7299 t1 = tcg_temp_local_new();
7300 t2 = tcg_temp_local_new();
7301 ot = OT_WORD;
7302 modrm = ldub_code(s->pc++);
7303 reg = (modrm >> 3) & 7;
7304 mod = (modrm >> 6) & 3;
7305 rm = modrm & 7;
7306 if (mod != 3) {
7307 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7308 gen_op_ld_v(ot + s->mem_index, t0, cpu_A0);
7309 a0 = tcg_temp_local_new();
7310 tcg_gen_mov_tl(a0, cpu_A0);
7311 } else {
7312 gen_op_mov_v_reg(ot, t0, rm);
7313 TCGV_UNUSED(a0);
7314 }
7315 gen_op_mov_v_reg(ot, t1, reg);
7316 tcg_gen_andi_tl(cpu_tmp0, t0, 3);
7317 tcg_gen_andi_tl(t1, t1, 3);
7318 tcg_gen_movi_tl(t2, 0);
7319 label1 = gen_new_label();
7320 tcg_gen_brcond_tl(TCG_COND_GE, cpu_tmp0, t1, label1);
7321 tcg_gen_andi_tl(t0, t0, ~3);
7322 tcg_gen_or_tl(t0, t0, t1);
7323 tcg_gen_movi_tl(t2, CC_Z);
7324 gen_set_label(label1);
7325 if (mod != 3) {
7326 gen_op_st_v(ot + s->mem_index, t0, a0);
7327 tcg_temp_free(a0);
7328 } else {
7329 gen_op_mov_reg_v(ot, rm, t0);
7330 }
7331 if (s->cc_op != CC_OP_DYNAMIC)
7332 gen_op_set_cc_op(s->cc_op);
7333 gen_compute_eflags(cpu_cc_src);
7334 tcg_gen_andi_tl(cpu_cc_src, cpu_cc_src, ~CC_Z);
7335 tcg_gen_or_tl(cpu_cc_src, cpu_cc_src, t2);
7336 s->cc_op = CC_OP_EFLAGS;
7337 tcg_temp_free(t0);
7338 tcg_temp_free(t1);
7339 tcg_temp_free(t2);
7340 }
7341 break;
7342 case 0x102: /* lar */
7343 case 0x103: /* lsl */
7344 {
7345 int label1;
7346 TCGv t0;
7347 if (!s->pe || s->vm86)
7348 goto illegal_op;
7349 ot = dflag ? OT_LONG : OT_WORD;
7350 modrm = ldub_code(s->pc++);
7351 reg = ((modrm >> 3) & 7) | rex_r;
7352 gen_ldst_modrm(s, modrm, OT_WORD, OR_TMP0, 0);
7353 t0 = tcg_temp_local_new();
7354 if (s->cc_op != CC_OP_DYNAMIC)
7355 gen_op_set_cc_op(s->cc_op);
7356 if (b == 0x102)
7357 gen_helper_lar(t0, cpu_T[0]);
7358 else
7359 gen_helper_lsl(t0, cpu_T[0]);
7360 tcg_gen_andi_tl(cpu_tmp0, cpu_cc_src, CC_Z);
7361 label1 = gen_new_label();
7362 tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_tmp0, 0, label1);
7363 gen_op_mov_reg_v(ot, reg, t0);
7364 gen_set_label(label1);
7365 s->cc_op = CC_OP_EFLAGS;
7366 tcg_temp_free(t0);
7367 }
7368 break;
7369 case 0x118:
7370 modrm = ldub_code(s->pc++);
7371 mod = (modrm >> 6) & 3;
7372 op = (modrm >> 3) & 7;
7373 switch(op) {
7374 case 0: /* prefetchnta */
7375 case 1: /* prefetchnt0 */
7376 case 2: /* prefetchnt0 */
7377 case 3: /* prefetchnt0 */
7378 if (mod == 3)
7379 goto illegal_op;
7380 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7381 /* nothing more to do */
7382 break;
7383 default: /* nop (multi byte) */
7384 gen_nop_modrm(s, modrm);
7385 break;
7386 }
7387 break;
7388 case 0x119 ... 0x11f: /* nop (multi byte) */
7389 modrm = ldub_code(s->pc++);
7390 gen_nop_modrm(s, modrm);
7391 break;
7392 case 0x120: /* mov reg, crN */
7393 case 0x122: /* mov crN, reg */
7394 if (s->cpl != 0) {
7395 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7396 } else {
7397 modrm = ldub_code(s->pc++);
7398 if ((modrm & 0xc0) != 0xc0)
7399 goto illegal_op;
7400 rm = (modrm & 7) | REX_B(s);
7401 reg = ((modrm >> 3) & 7) | rex_r;
7402 if (CODE64(s))
7403 ot = OT_QUAD;
7404 else
7405 ot = OT_LONG;
7406 if ((prefixes & PREFIX_LOCK) && (reg == 0) &&
7407 (s->cpuid_ext3_features & CPUID_EXT3_CR8LEG)) {
7408 reg = 8;
7409 }
7410 switch(reg) {
7411 case 0:
7412 case 2:
7413 case 3:
7414 case 4:
7415 case 8:
7416 if (s->cc_op != CC_OP_DYNAMIC)
7417 gen_op_set_cc_op(s->cc_op);
7418 gen_jmp_im(pc_start - s->cs_base);
7419 if (b & 2) {
7420 gen_op_mov_TN_reg(ot, 0, rm);
7421 gen_helper_write_crN(tcg_const_i32(reg), cpu_T[0]);
7422 gen_jmp_im(s->pc - s->cs_base);
7423 gen_eob(s);
7424 } else {
7425 gen_helper_read_crN(cpu_T[0], tcg_const_i32(reg));
7426 gen_op_mov_reg_T0(ot, rm);
7427 }
7428 break;
7429 default:
7430 goto illegal_op;
7431 }
7432 }
7433 break;
7434 case 0x121: /* mov reg, drN */
7435 case 0x123: /* mov drN, reg */
7436 if (s->cpl != 0) {
7437 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7438 } else {
7439 modrm = ldub_code(s->pc++);
7440 if ((modrm & 0xc0) != 0xc0)
7441 goto illegal_op;
7442 rm = (modrm & 7) | REX_B(s);
7443 reg = ((modrm >> 3) & 7) | rex_r;
7444 if (CODE64(s))
7445 ot = OT_QUAD;
7446 else
7447 ot = OT_LONG;
7448 /* XXX: do it dynamically with CR4.DE bit */
7449 if (reg == 4 || reg == 5 || reg >= 8)
7450 goto illegal_op;
7451 if (b & 2) {
7452 gen_svm_check_intercept(s, pc_start, SVM_EXIT_WRITE_DR0 + reg);
7453 gen_op_mov_TN_reg(ot, 0, rm);
7454 gen_helper_movl_drN_T0(tcg_const_i32(reg), cpu_T[0]);
7455 gen_jmp_im(s->pc - s->cs_base);
7456 gen_eob(s);
7457 } else {
7458 gen_svm_check_intercept(s, pc_start, SVM_EXIT_READ_DR0 + reg);
7459 tcg_gen_ld_tl(cpu_T[0], cpu_env, offsetof(CPUX86State,dr[reg]));
7460 gen_op_mov_reg_T0(ot, rm);
7461 }
7462 }
7463 break;
7464 case 0x106: /* clts */
7465 if (s->cpl != 0) {
7466 gen_exception(s, EXCP0D_GPF, pc_start - s->cs_base);
7467 } else {
7468 gen_svm_check_intercept(s, pc_start, SVM_EXIT_WRITE_CR0);
7469 gen_helper_clts();
7470 /* abort block because static cpu state changed */
7471 gen_jmp_im(s->pc - s->cs_base);
7472 gen_eob(s);
7473 }
7474 break;
7475 /* MMX/3DNow!/SSE/SSE2/SSE3/SSSE3/SSE4 support */
7476 case 0x1c3: /* MOVNTI reg, mem */
7477 if (!(s->cpuid_features & CPUID_SSE2))
7478 goto illegal_op;
7479 ot = s->dflag == 2 ? OT_QUAD : OT_LONG;
7480 modrm = ldub_code(s->pc++);
7481 mod = (modrm >> 6) & 3;
7482 if (mod == 3)
7483 goto illegal_op;
7484 reg = ((modrm >> 3) & 7) | rex_r;
7485 /* generate a generic store */
7486 gen_ldst_modrm(s, modrm, ot, reg, 1);
7487 break;
7488 case 0x1ae:
7489 modrm = ldub_code(s->pc++);
7490 mod = (modrm >> 6) & 3;
7491 op = (modrm >> 3) & 7;
7492 switch(op) {
7493 case 0: /* fxsave */
7494 if (mod == 3 || !(s->cpuid_features & CPUID_FXSR) ||
7495 (s->prefix & PREFIX_LOCK))
7496 goto illegal_op;
7497 if ((s->flags & HF_EM_MASK) || (s->flags & HF_TS_MASK)) {
7498 gen_exception(s, EXCP07_PREX, pc_start - s->cs_base);
7499 break;
7500 }
7501 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7502 if (s->cc_op != CC_OP_DYNAMIC)
7503 gen_op_set_cc_op(s->cc_op);
7504 gen_jmp_im(pc_start - s->cs_base);
7505 gen_helper_fxsave(cpu_A0, tcg_const_i32((s->dflag == 2)));
7506 break;
7507 case 1: /* fxrstor */
7508 if (mod == 3 || !(s->cpuid_features & CPUID_FXSR) ||
7509 (s->prefix & PREFIX_LOCK))
7510 goto illegal_op;
7511 if ((s->flags & HF_EM_MASK) || (s->flags & HF_TS_MASK)) {
7512 gen_exception(s, EXCP07_PREX, pc_start - s->cs_base);
7513 break;
7514 }
7515 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7516 if (s->cc_op != CC_OP_DYNAMIC)
7517 gen_op_set_cc_op(s->cc_op);
7518 gen_jmp_im(pc_start - s->cs_base);
7519 gen_helper_fxrstor(cpu_A0, tcg_const_i32((s->dflag == 2)));
7520 break;
7521 case 2: /* ldmxcsr */
7522 case 3: /* stmxcsr */
7523 if (s->flags & HF_TS_MASK) {
7524 gen_exception(s, EXCP07_PREX, pc_start - s->cs_base);
7525 break;
7526 }
7527 if ((s->flags & HF_EM_MASK) || !(s->flags & HF_OSFXSR_MASK) ||
7528 mod == 3)
7529 goto illegal_op;
7530 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7531 if (op == 2) {
7532 gen_op_ld_T0_A0(OT_LONG + s->mem_index);
7533 tcg_gen_st32_tl(cpu_T[0], cpu_env, offsetof(CPUX86State, mxcsr));
7534 } else {
7535 tcg_gen_ld32u_tl(cpu_T[0], cpu_env, offsetof(CPUX86State, mxcsr));
7536 gen_op_st_T0_A0(OT_LONG + s->mem_index);
7537 }
7538 break;
7539 case 5: /* lfence */
7540 case 6: /* mfence */
7541 if ((modrm & 0xc7) != 0xc0 || !(s->cpuid_features & CPUID_SSE))
7542 goto illegal_op;
7543 break;
7544 case 7: /* sfence / clflush */
7545 if ((modrm & 0xc7) == 0xc0) {
7546 /* sfence */
7547 /* XXX: also check for cpuid_ext2_features & CPUID_EXT2_EMMX */
7548 if (!(s->cpuid_features & CPUID_SSE))
7549 goto illegal_op;
7550 } else {
7551 /* clflush */
7552 if (!(s->cpuid_features & CPUID_CLFLUSH))
7553 goto illegal_op;
7554 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7555 }
7556 break;
7557 default:
7558 goto illegal_op;
7559 }
7560 break;
7561 case 0x10d: /* 3DNow! prefetch(w) */
7562 modrm = ldub_code(s->pc++);
7563 mod = (modrm >> 6) & 3;
7564 if (mod == 3)
7565 goto illegal_op;
7566 gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
7567 /* ignore for now */
7568 break;
7569 case 0x1aa: /* rsm */
7570 gen_svm_check_intercept(s, pc_start, SVM_EXIT_RSM);
7571 if (!(s->flags & HF_SMM_MASK))
7572 goto illegal_op;
7573 gen_update_cc_op(s);
7574 gen_jmp_im(s->pc - s->cs_base);
7575 gen_helper_rsm();
7576 gen_eob(s);
7577 break;
7578 case 0x1b8: /* SSE4.2 popcnt */
7579 if ((prefixes & (PREFIX_REPZ | PREFIX_LOCK | PREFIX_REPNZ)) !=
7580 PREFIX_REPZ)
7581 goto illegal_op;
7582 if (!(s->cpuid_ext_features & CPUID_EXT_POPCNT))
7583 goto illegal_op;
7584
7585 modrm = ldub_code(s->pc++);
7586 reg = ((modrm >> 3) & 7);
7587
7588 if (s->prefix & PREFIX_DATA)
7589 ot = OT_WORD;
7590 else if (s->dflag != 2)
7591 ot = OT_LONG;
7592 else
7593 ot = OT_QUAD;
7594
7595 gen_ldst_modrm(s, modrm, ot, OR_TMP0, 0);
7596 gen_helper_popcnt(cpu_T[0], cpu_T[0], tcg_const_i32(ot));
7597 gen_op_mov_reg_T0(ot, reg);
7598
7599 s->cc_op = CC_OP_EFLAGS;
7600 break;
7601 case 0x10e ... 0x10f:
7602 /* 3DNow! instructions, ignore prefixes */
7603 s->prefix &= ~(PREFIX_REPZ | PREFIX_REPNZ | PREFIX_DATA);
7604 case 0x110 ... 0x117:
7605 case 0x128 ... 0x12f:
7606 case 0x138 ... 0x13a:
7607 case 0x150 ... 0x179:
7608 case 0x17c ... 0x17f:
7609 case 0x1c2:
7610 case 0x1c4 ... 0x1c6:
7611 case 0x1d0 ... 0x1fe:
7612 gen_sse(s, b, pc_start, rex_r);
7613 break;
7614 default:
7615 goto illegal_op;
7616 }
7617 /* lock generation */
7618 if (s->prefix & PREFIX_LOCK)
7619 gen_helper_unlock();
7620 return s->pc;
7621 illegal_op:
7622 if (s->prefix & PREFIX_LOCK)
7623 gen_helper_unlock();
7624 /* XXX: ensure that no lock was generated */
7625 gen_exception(s, EXCP06_ILLOP, pc_start - s->cs_base);
7626 return s->pc;
7627 }
7628
7629 void optimize_flags_init(void)
7630 {
7631 #if TCG_TARGET_REG_BITS == 32
7632 assert(sizeof(CCTable) == (1 << 3));
7633 #else
7634 assert(sizeof(CCTable) == (1 << 4));
7635 #endif
7636 cpu_env = tcg_global_reg_new_ptr(TCG_AREG0, "env");
7637 cpu_cc_op = tcg_global_mem_new_i32(TCG_AREG0,
7638 offsetof(CPUState, cc_op), "cc_op");
7639 cpu_cc_src = tcg_global_mem_new(TCG_AREG0, offsetof(CPUState, cc_src),
7640 "cc_src");
7641 cpu_cc_dst = tcg_global_mem_new(TCG_AREG0, offsetof(CPUState, cc_dst),
7642 "cc_dst");
7643 cpu_cc_tmp = tcg_global_mem_new(TCG_AREG0, offsetof(CPUState, cc_tmp),
7644 "cc_tmp");
7645
7646 #ifdef TARGET_X86_64
7647 cpu_regs[R_EAX] = tcg_global_mem_new_i64(TCG_AREG0,
7648 offsetof(CPUState, regs[R_EAX]), "rax");
7649 cpu_regs[R_ECX] = tcg_global_mem_new_i64(TCG_AREG0,
7650 offsetof(CPUState, regs[R_ECX]), "rcx");
7651 cpu_regs[R_EDX] = tcg_global_mem_new_i64(TCG_AREG0,
7652 offsetof(CPUState, regs[R_EDX]), "rdx");
7653 cpu_regs[R_EBX] = tcg_global_mem_new_i64(TCG_AREG0,
7654 offsetof(CPUState, regs[R_EBX]), "rbx");
7655 cpu_regs[R_ESP] = tcg_global_mem_new_i64(TCG_AREG0,
7656 offsetof(CPUState, regs[R_ESP]), "rsp");
7657 cpu_regs[R_EBP] = tcg_global_mem_new_i64(TCG_AREG0,
7658 offsetof(CPUState, regs[R_EBP]), "rbp");
7659 cpu_regs[R_ESI] = tcg_global_mem_new_i64(TCG_AREG0,
7660 offsetof(CPUState, regs[R_ESI]), "rsi");
7661 cpu_regs[R_EDI] = tcg_global_mem_new_i64(TCG_AREG0,
7662 offsetof(CPUState, regs[R_EDI]), "rdi");
7663 cpu_regs[8] = tcg_global_mem_new_i64(TCG_AREG0,
7664 offsetof(CPUState, regs[8]), "r8");
7665 cpu_regs[9] = tcg_global_mem_new_i64(TCG_AREG0,
7666 offsetof(CPUState, regs[9]), "r9");
7667 cpu_regs[10] = tcg_global_mem_new_i64(TCG_AREG0,
7668 offsetof(CPUState, regs[10]), "r10");
7669 cpu_regs[11] = tcg_global_mem_new_i64(TCG_AREG0,
7670 offsetof(CPUState, regs[11]), "r11");
7671 cpu_regs[12] = tcg_global_mem_new_i64(TCG_AREG0,
7672 offsetof(CPUState, regs[12]), "r12");
7673 cpu_regs[13] = tcg_global_mem_new_i64(TCG_AREG0,
7674 offsetof(CPUState, regs[13]), "r13");
7675 cpu_regs[14] = tcg_global_mem_new_i64(TCG_AREG0,
7676 offsetof(CPUState, regs[14]), "r14");
7677 cpu_regs[15] = tcg_global_mem_new_i64(TCG_AREG0,
7678 offsetof(CPUState, regs[15]), "r15");
7679 #else
7680 cpu_regs[R_EAX] = tcg_global_mem_new_i32(TCG_AREG0,
7681 offsetof(CPUState, regs[R_EAX]), "eax");
7682 cpu_regs[R_ECX] = tcg_global_mem_new_i32(TCG_AREG0,
7683 offsetof(CPUState, regs[R_ECX]), "ecx");
7684 cpu_regs[R_EDX] = tcg_global_mem_new_i32(TCG_AREG0,
7685 offsetof(CPUState, regs[R_EDX]), "edx");
7686 cpu_regs[R_EBX] = tcg_global_mem_new_i32(TCG_AREG0,
7687 offsetof(CPUState, regs[R_EBX]), "ebx");
7688 cpu_regs[R_ESP] = tcg_global_mem_new_i32(TCG_AREG0,
7689 offsetof(CPUState, regs[R_ESP]), "esp");
7690 cpu_regs[R_EBP] = tcg_global_mem_new_i32(TCG_AREG0,
7691 offsetof(CPUState, regs[R_EBP]), "ebp");
7692 cpu_regs[R_ESI] = tcg_global_mem_new_i32(TCG_AREG0,
7693 offsetof(CPUState, regs[R_ESI]), "esi");
7694 cpu_regs[R_EDI] = tcg_global_mem_new_i32(TCG_AREG0,
7695 offsetof(CPUState, regs[R_EDI]), "edi");
7696 #endif
7697
7698 /* register helpers */
7699 #define GEN_HELPER 2
7700 #include "helper.h"
7701 }
7702
7703 /* generate intermediate code in gen_opc_buf and gen_opparam_buf for
7704 basic block 'tb'. If search_pc is TRUE, also generate PC
7705 information for each intermediate instruction. */
7706 static inline void gen_intermediate_code_internal(CPUState *env,
7707 TranslationBlock *tb,
7708 int search_pc)
7709 {
7710 DisasContext dc1, *dc = &dc1;
7711 target_ulong pc_ptr;
7712 uint16_t *gen_opc_end;
7713 CPUBreakpoint *bp;
7714 int j, lj;
7715 uint64_t flags;
7716 target_ulong pc_start;
7717 target_ulong cs_base;
7718 int num_insns;
7719 int max_insns;
7720
7721 /* generate intermediate code */
7722 pc_start = tb->pc;
7723 cs_base = tb->cs_base;
7724 flags = tb->flags;
7725
7726 dc->pe = (flags >> HF_PE_SHIFT) & 1;
7727 dc->code32 = (flags >> HF_CS32_SHIFT) & 1;
7728 dc->ss32 = (flags >> HF_SS32_SHIFT) & 1;
7729 dc->addseg = (flags >> HF_ADDSEG_SHIFT) & 1;
7730 dc->f_st = 0;
7731 dc->vm86 = (flags >> VM_SHIFT) & 1;
7732 dc->cpl = (flags >> HF_CPL_SHIFT) & 3;
7733 dc->iopl = (flags >> IOPL_SHIFT) & 3;
7734 dc->tf = (flags >> TF_SHIFT) & 1;
7735 dc->singlestep_enabled = env->singlestep_enabled;
7736 dc->cc_op = CC_OP_DYNAMIC;
7737 dc->cs_base = cs_base;
7738 dc->tb = tb;
7739 dc->popl_esp_hack = 0;
7740 /* select memory access functions */
7741 dc->mem_index = 0;
7742 if (flags & HF_SOFTMMU_MASK) {
7743 if (dc->cpl == 3)
7744 dc->mem_index = 2 * 4;
7745 else
7746 dc->mem_index = 1 * 4;
7747 }
7748 dc->cpuid_features = env->cpuid_features;
7749 dc->cpuid_ext_features = env->cpuid_ext_features;
7750 dc->cpuid_ext2_features = env->cpuid_ext2_features;
7751 dc->cpuid_ext3_features = env->cpuid_ext3_features;
7752 #ifdef TARGET_X86_64
7753 dc->lma = (flags >> HF_LMA_SHIFT) & 1;
7754 dc->code64 = (flags >> HF_CS64_SHIFT) & 1;
7755 #endif
7756 dc->flags = flags;
7757 dc->jmp_opt = !(dc->tf || env->singlestep_enabled ||
7758 (flags & HF_INHIBIT_IRQ_MASK)
7759 #ifndef CONFIG_SOFTMMU
7760 || (flags & HF_SOFTMMU_MASK)
7761 #endif
7762 );
7763 #if 0
7764 /* check addseg logic */
7765 if (!dc->addseg && (dc->vm86 || !dc->pe || !dc->code32))
7766 printf("ERROR addseg\n");
7767 #endif
7768
7769 cpu_T[0] = tcg_temp_new();
7770 cpu_T[1] = tcg_temp_new();
7771 cpu_A0 = tcg_temp_new();
7772 cpu_T3 = tcg_temp_new();
7773
7774 cpu_tmp0 = tcg_temp_new();
7775 cpu_tmp1_i64 = tcg_temp_new_i64();
7776 cpu_tmp2_i32 = tcg_temp_new_i32();
7777 cpu_tmp3_i32 = tcg_temp_new_i32();
7778 cpu_tmp4 = tcg_temp_new();
7779 cpu_tmp5 = tcg_temp_new();
7780 cpu_ptr0 = tcg_temp_new_ptr();
7781 cpu_ptr1 = tcg_temp_new_ptr();
7782
7783 gen_opc_end = gen_opc_buf + OPC_MAX_SIZE;
7784
7785 dc->is_jmp = DISAS_NEXT;
7786 pc_ptr = pc_start;
7787 lj = -1;
7788 num_insns = 0;
7789 max_insns = tb->cflags & CF_COUNT_MASK;
7790 if (max_insns == 0)
7791 max_insns = CF_COUNT_MASK;
7792
7793 gen_icount_start();
7794 for(;;) {
7795 if (unlikely(!QTAILQ_EMPTY(&env->breakpoints))) {
7796 QTAILQ_FOREACH(bp, &env->breakpoints, entry) {
7797 if (bp->pc == pc_ptr &&
7798 !((bp->flags & BP_CPU) && (tb->flags & HF_RF_MASK))) {
7799 gen_debug(dc, pc_ptr - dc->cs_base);
7800 break;
7801 }
7802 }
7803 }
7804 if (search_pc) {
7805 j = gen_opc_ptr - gen_opc_buf;
7806 if (lj < j) {
7807 lj++;
7808 while (lj < j)
7809 gen_opc_instr_start[lj++] = 0;
7810 }
7811 gen_opc_pc[lj] = pc_ptr;
7812 gen_opc_cc_op[lj] = dc->cc_op;
7813 gen_opc_instr_start[lj] = 1;
7814 gen_opc_icount[lj] = num_insns;
7815 }
7816 if (num_insns + 1 == max_insns && (tb->cflags & CF_LAST_IO))
7817 gen_io_start();
7818
7819 pc_ptr = disas_insn(dc, pc_ptr);
7820 num_insns++;
7821 /* stop translation if indicated */
7822 if (dc->is_jmp)
7823 break;
7824 /* if single step mode, we generate only one instruction and
7825 generate an exception */
7826 /* if irq were inhibited with HF_INHIBIT_IRQ_MASK, we clear
7827 the flag and abort the translation to give the irqs a
7828 change to be happen */
7829 if (dc->tf || dc->singlestep_enabled ||
7830 (flags & HF_INHIBIT_IRQ_MASK)) {
7831 gen_jmp_im(pc_ptr - dc->cs_base);
7832 gen_eob(dc);
7833 break;
7834 }
7835 /* if too long translation, stop generation too */
7836 if (gen_opc_ptr >= gen_opc_end ||
7837 (pc_ptr - pc_start) >= (TARGET_PAGE_SIZE - 32) ||
7838 num_insns >= max_insns) {
7839 gen_jmp_im(pc_ptr - dc->cs_base);
7840 gen_eob(dc);
7841 break;
7842 }
7843 if (singlestep) {
7844 gen_jmp_im(pc_ptr - dc->cs_base);
7845 gen_eob(dc);
7846 break;
7847 }
7848 }
7849 if (tb->cflags & CF_LAST_IO)
7850 gen_io_end();
7851 gen_icount_end(tb, num_insns);
7852 *gen_opc_ptr = INDEX_op_end;
7853 /* we don't forget to fill the last values */
7854 if (search_pc) {
7855 j = gen_opc_ptr - gen_opc_buf;
7856 lj++;
7857 while (lj <= j)
7858 gen_opc_instr_start[lj++] = 0;
7859 }
7860
7861 #ifdef DEBUG_DISAS
7862 if (qemu_loglevel_mask(CPU_LOG_TB_IN_ASM)) {
7863 int disas_flags;
7864 qemu_log("----------------\n");
7865 qemu_log("IN: %s\n", lookup_symbol(pc_start));
7866 #ifdef TARGET_X86_64
7867 if (dc->code64)
7868 disas_flags = 2;
7869 else
7870 #endif
7871 disas_flags = !dc->code32;
7872 log_target_disas(pc_start, pc_ptr - pc_start, disas_flags);
7873 qemu_log("\n");
7874 }
7875 #endif
7876
7877 if (!search_pc) {
7878 tb->size = pc_ptr - pc_start;
7879 tb->icount = num_insns;
7880 }
7881 }
7882
7883 void gen_intermediate_code(CPUState *env, TranslationBlock *tb)
7884 {
7885 gen_intermediate_code_internal(env, tb, 0);
7886 }
7887
7888 void gen_intermediate_code_pc(CPUState *env, TranslationBlock *tb)
7889 {
7890 gen_intermediate_code_internal(env, tb, 1);
7891 }
7892
7893 void gen_pc_load(CPUState *env, TranslationBlock *tb,
7894 unsigned long searched_pc, int pc_pos, void *puc)
7895 {
7896 int cc_op;
7897 #ifdef DEBUG_DISAS
7898 if (qemu_loglevel_mask(CPU_LOG_TB_OP)) {
7899 int i;
7900 qemu_log("RESTORE:\n");
7901 for(i = 0;i <= pc_pos; i++) {
7902 if (gen_opc_instr_start[i]) {
7903 qemu_log("0x%04x: " TARGET_FMT_lx "\n", i, gen_opc_pc[i]);
7904 }
7905 }
7906 qemu_log("spc=0x%08lx pc_pos=0x%x eip=" TARGET_FMT_lx " cs_base=%x\n",
7907 searched_pc, pc_pos, gen_opc_pc[pc_pos] - tb->cs_base,
7908 (uint32_t)tb->cs_base);
7909 }
7910 #endif
7911 env->eip = gen_opc_pc[pc_pos] - tb->cs_base;
7912 cc_op = gen_opc_cc_op[pc_pos];
7913 if (cc_op != CC_OP_DYNAMIC)
7914 env->cc_op = cc_op;
7915 }
QEmu