eaxhla/documentation/Instruction_reference.md
2024-07-17 00:47:45 +02:00

2.5 KiB

General

The following instructions are fully supported:

    ; XXX fillin

2 argument instructions (t6)

add, or, adc, sbb, and, sub, xor, cmp;

  • REG REG // This means that arg1 can only be REG or MEM.

  • REG MEM // And arg2 can only be REG, MEM or IMM, but:

  • REG IMM // You can't use MEM as both arguments.

  • MEM REG // This limitation stems from x64 encoding.

  • MEM IMM // Hardware we use can't encode that.

  • REG or MEM can use D8 ... D64, any size.

  • IMM in this case must be maximum 32 bit.

  • Examples:

add rax 0x11223344 // ADD D64 REG R0 IMM 0x11223344
or  ecx 0x11223344 // OR  D32 REG R1 IMM 0x11223344
adc dx  0x1122     // ADC D16 REG R2 IMM 0x1122
sbb bl  0x11       // SBB D8  REG R3 IMM 0x11

1 argument instructions (t4)

inc, dec, not, neg, mul, imul, div, idiv;

  • REG

  • MEM

  • REG or MEM can use D8 ... D64, any size.

  • IMM can't be used with these instructions.

  • Examples:

inc rsp // INC D64 REG R4
dec ebp // DEC D32 REG R5
not si  // NOT D16 REG R6
neg dil // NEG D8  REG R7

Examples

sysenter           // SYSENTER
sysexit            // SYSEXIT
syscall            // SYSCALL
sysret             // SYSRET
mov eax ebx        // MOV D32 REG R0 REG R3
mov eax [x]        // MOV D32 REG R0 MEM 69
mov eax 0x11223344 // MOV D32 REG R0 IMM 0x11223344
mov [x] eax        // MOV D32 MEM 69 REG R0
mov [x] 0x11223344 // MOV D32 MEM 69 IMM 0x11223344
mov eax x          // MOV D32 REG R0 REL 69
...
u32 x = 420        // ASMDIRMEM 69 ASMDIRIMM D32 420

As for core instructions we must support, no matter what, here's the list:

mov                               <REG/MEM> <REG/MEM/IMM> -- immediate value can be up to 64 bits.
add or adc sbb and sub xor cmp    <REG/MEM> <REG/MEM/IMM> -- immediate value can be up to 32 bits.
inc dec not neg mul imul div idiv <REG/MEM>               -- no immediates allowed here.
jmp jCC cmovCC                    <>        <>            -- conditional instructions, important!
enter leave pop push                                      -- stack focused instructions.
sysenter sysexit syscall sysret                           -- kernel/system focused instructions.
in out nop call bswap sal sar shr shl rol ror xchg loop   -- ease-of-use focused instructions.
  • Here is what's available to use, it's in the list below, there are 5 combinations, for 2 argument instructions.
ins REG REG -- mov, add, cmp, xor, and
ins REG MEM -- ^
ins REG IMM -- ^
ins MEM REG -- ^
ins MEM IMM -- ^
ins REG     -- inc, dec, not, div, mul
ins MEM     -- ^
ins         -- syscall, pause, hlt, ret, leave