-
Notifications
You must be signed in to change notification settings - Fork 9
/
Copy pathinstructions_E0.c
293 lines (276 loc) · 6.02 KB
/
instructions_E0.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
#include <stdint.h>
#include <string.h>
#include <stdio.h>
#include <stdlib.h>
#include <sys/types.h>
#include "instruction_defs.h"
#include "emulator_functions.h"
#include "modrm.h"
#include "io.h"
#include "gdt.h"
/*
* loopnz rel8: 2 bytes
* Jumps short after decrementing ECX (CX) if count != 0 and ZF==0.
* 1 byte: op (E0)
* 1 byte: rel8 value
* Address size is assumed to be 32 bits here.
*/
void loopnz(Emulator *emu)
{
uint32_t ecx_val = get_register32(emu, ECX);
if (is_zero(emu))
{
emu->eip += 2;
return;
}
if (ecx_val > 0)
{
ecx_val -= 1;
set_register32(emu, ECX, ecx_val);
}
if (ecx_val != 0)
{
int8_t offset = get_sign_code8(emu, 1);
emu->eip += (offset + 2);
return;
}
emu->eip += 2;
}
/*
* loopz rel8: 2 bytes
* Jumps short after decrementing ECX (CX) if count != 0 and ZF==1.
* 1 byte: op (E1)
* 1 byte: rel8 value
* Address size is assumed to be 32 bits here.
*/
void loopz(Emulator *emu)
{
uint32_t ecx_val = get_register32(emu, ECX);
if (!is_zero(emu))
{
emu->eip += 2;
return;
}
if (ecx_val > 0)
{
ecx_val -= 1;
set_register32(emu, ECX, ecx_val);
}
if (ecx_val != 0)
{
int8_t offset = get_sign_code8(emu, 1);
emu->eip += (offset + 2);
return;
}
emu->eip += 2;
}
/*
* loop rel8: 2 bytes
* Jumps short after decrementing ECX (CX) if count != 0.
* 1 byte: op (E2)
* 1 byte: rel8 value
* Address size is assumed to be 32 bits here.
*/
void loop(Emulator *emu)
{
uint32_t ecx_val = get_register32(emu, ECX);
if (ecx_val > 0)
{
ecx_val -= 1;
set_register32(emu, ECX, ecx_val);
}
if (ecx_val != 0)
{
int8_t offset = get_sign_code8(emu, 1);
emu->eip += (offset + 2);
return;
}
emu->eip += 2;
}
/*
* jecxz rel8: 2 bytes
* Jumps if ecx == 0.
* 1 byte: op (E3)
* 1 byte: rel8 value
*/
void jecxz(Emulator *emu)
{
uint32_t ecx_val = get_register32(emu, ECX);
if (ecx_val == 0)
{
int8_t offset = get_sign_code8(emu, 1);
emu->eip += (offset + 2);
}
else
{
emu->eip += 2;
}
}
/*
* in al imm8: 2 bytes
* Inputs a byte from port imm8 to AL.
* 1 byte: op (E4)
* 1 byte: imm8
*/
void in_al_imm8(Emulator *emu)
{
/* IO Port Address from imm8 */
uint16_t address = get_code8(emu, 1);
uint8_t value = io_in8(emu, address);
set_register8(emu, AL, value);
emu->eip += 2;
}
/*
* in eax imm8: 2 bytes
* Inputs a byte from port imm8 to EAX.
* 1 byte: op (E5)
* 1 byte: imm8
*/
void in_eax_imm8(Emulator *emu)
{
/* IO Port Address from imm8 */
uint16_t address = get_code8(emu, 1);
uint32_t value = io_in32(emu, address);
set_register32(emu, EAX, value);
emu->eip += 2;
}
/*
* out imm8 al: 2 bytes
* Outputs a byte on al to imm8 port.
* 1 byte: op (E6)
* 1 byte: imm8
*/
void out_imm8_al(Emulator *emu)
{
uint16_t address = get_code8(emu, 1);
uint8_t al_val = get_register8(emu, AL);
io_out8(emu, address, al_val);
emu->eip += 2;
}
/*
* out imm8 eax: 2 bytes
* Outputs dword on eax to imm8 port.
* 1 byte: op (E7)
* 1 byte: imm8
*/
void out_imm8_eax(Emulator *emu)
{
uint16_t address = get_code8(emu, 1);
uint32_t eax_val = get_register32(emu, EAX);
io_out32(emu, address, eax_val);
emu->eip += 2;
}
/*
* call rel32: 5 bytes
* Jumps by 32-bit number relatively from next address.
* 1 byte: op (E8)
* 4 bytes: relative number to jump.
*/
void call_rel32(Emulator *emu)
{
/* Offset value should be after the op code of 1 byte. */
int32_t offset = get_sign_code32(emu, 1);
/* Pushes the address after this call instruction. */
push32(emu, emu->eip + 5);
/* Adds the offset to EIP. */
emu->eip += (offset + 5);
}
/*
* jmp (near): 5 bytes
* Jumps with 32-bit signed offset.
* 1 byte: op (E9)
* 4 byte: offset from eip (32 bit signed)
*/
void near_jump(Emulator *emu)
{
int32_t diff = get_sign_code32(emu, 1);
emu->eip += (diff + 5);
}
/*
* jmp ptr16:16/32: 7 bytes
* Jumps in ptr16:16/32.
* 1 byte: op (EA)
* 2 byte: cs value
* 4 byte: eip
*/
void ptr_jump(Emulator *emu)
{
uint32_t eip_val;
uint16_t cs_val;
if (emu->is_pe)
{
eip_val = get_code32(emu, 1);
cs_val = get_code16(emu, 5);
}
else
{
eip_val = (uint32_t)get_code16(emu, 1);
cs_val = get_code16(emu, 3);
}
set_seg_register16(emu, CS, cs_val);
emu->eip = eip_val;
check_protected_mode_entry(emu);
}
/*
* jmp (short): 2 bytes
* Jumps with 8-bit signed offset.
* 1 byte: op (EB)
* 1 byte: offset from eip (8 bit signed) -127 ~ 127
*/
void short_jump(Emulator *emu)
{
int8_t offset = get_sign_code8(emu, 1);
emu->eip += (offset + 2);
}
/*
* in al dx: 1 byte
* Input data to AL from IO address specified on DX.
* 1 byte: op (EC)
*/
void in_al_dx(Emulator *emu)
{
/* IO Port Address from DX */
uint16_t address = get_register32(emu, EDX) & 0xffff;
uint8_t value = io_in8(emu, address);
set_register8(emu, AL, value);
emu->eip += 1;
}
/*
* in eax dx: 1 byte
* Input data to EAX from IO address specified on DX.
* 1 byte: op (ED)
*/
void in_eax_dx(Emulator *emu)
{
/* IO Port Address from DX */
uint16_t address = get_register32(emu, EDX) & 0xffff;
uint32_t value = io_in32(emu, address);
set_register32(emu, EAX, value);
emu->eip += 1;
}
/*
* out dx al: 1 byte
* Output data on AL to IO address specified on DX.
* 1 byte: op (EE)
*/
void out_dx_al(Emulator *emu)
{
/* IO Port Address from DX */
uint16_t address = get_register32(emu, EDX) & 0xffff;
uint8_t value = get_register8(emu, AL);
io_out8(emu, address, value);
emu->eip += 1;
}
/*
* out dx eax: 1 byte
* Output data on EAX to IO address specified on DX.
* 1 byte: op (EF)
*/
void out_dx_eax(Emulator *emu)
{
/* IO Port Address from DX */
uint16_t address = get_register32(emu, EDX) & 0xffff;
uint32_t value = get_register32(emu, EAX);
io_out32(emu, address, value);
emu->eip += 1;
}