#include <stdio.h>
#include <assert.h>
#include <string.h>
/* Test case supplied by Sergei Trofimovich */
/*
* Real life example (MSDOS file INFO.EXE) has code like this
*
* I don't know why author/compiler done code like this. Only guess:
* guess 1 (strong :]):
* This archaic code was used by dynamic memory regeneration
* handler (according to code around it's called from
* interrupt handler).
*
* guess 2: cache flush (whether processors had caches at that time?)
*
* a disasmed snippet:
*
* mov byte ptr [bx], 0FFh
* sti
* mov cx, 0FFFFh ; 65535
* rep lods byte ptr es:[si]
* jcxz short somewhere_1 ; it seems code could be
* ; interrupted here
*
* call something_2
* cmp dx, 4
* mov byte ptr [bx], 0
* jmp somewhere_3
*/
#define GET_BIT(var, bit_no) ((var >> bit_no) & 1)
static char sz_eflags[] = " "; // 8 spaces
static void pp_eflags (unsigned int _8bits_eflags)
{
assert (_8bits_eflags >= 0);
assert (_8bits_eflags <= 0xFF);
sz_eflags[0] = GET_BIT(_8bits_eflags, 7) ? 'S' : ' ';
sz_eflags[1] = GET_BIT(_8bits_eflags, 6) ? 'Z' : ' ';
sz_eflags[3] = GET_BIT(_8bits_eflags, 4) ? 'A' : ' ';
sz_eflags[5] = GET_BIT(_8bits_eflags, 2) ? 'P' : ' ';
sz_eflags[7] = GET_BIT(_8bits_eflags, 0) ? 'C' : ' ';
}
#define EMIT_CALL(dir_insn, insn, in_eax, in_esi, in_eflags, out_eax, out_esi, out_eflags, count) \
asm volatile( \
"movl %3, %%eax \t\n" \
"sahf \t\n" /* loading our eflags */ \
"movl %4, %%eax \t\n" \
"movl %5, %%esi \t\n" \
"movl %6, %%ecx \t\n" \
\
dir_insn "\t\n" \
insn "\t\n" \
\
/* return result */ \
"movl %%eax, %0 \t\n" \
"lahf \t\n" \
"movl %%eax, %1 \t\n" \
"movl %%esi, %2 \t\n" \
"cld \t\n" \
: "=d"(out_eax), \
"=b"(out_eflags), \
"=r"(out_esi) \
\
: "m"(in_eflags), \
"m"(in_eax), \
"m"(in_esi), \
"q"(count) \
\
: "%eax", "%esi", "%ecx", "cc" /* we mess up EFLAGS */);
const signed char b_mem_buff[] = {-4, -3, -2, -1, 0xaa, 1, 2, 3, 4};
const signed long l_mem_buff[] = {-4, -3, -2, -1, 0xaa, 1, 2, 3, 4};
const signed short w_mem_buff[] = {-4, -3, -2, -1, 0xaa, 1, 2, 3, 4};
const int lens[] = { 4, 3, 2, 1, 0, 0, 1, 2, 3, 4};
int main ()
{
const signed char * b_center = (signed char *) memchr(b_mem_buff, 0xaa, sizeof (b_mem_buff));
const signed char * w_center = (signed char *) memchr(w_mem_buff, 0xaa, sizeof (w_mem_buff));
const signed char * l_center = (signed char *) memchr(l_mem_buff, 0xaa, sizeof (l_mem_buff));
int insn;
for (insn = 0; insn < 4; ++insn) //b,w[rep/addr],d,w[addr/rep]
{
int idx;
for (idx = 0; idx < sizeof (lens)/sizeof(lens[0]); ++idx)
{
unsigned int eflags;
unsigned int eax = 0x12348765;
unsigned int esi;
const char * i_name = NULL;
unsigned int resulting_eflags;
unsigned int resulting_eax;
unsigned int resulting_esi;
int len;
int df;
switch (insn)
{
case 0: //b
esi = (unsigned int) b_center;
i_name = "lodsb";
break;
case 1: //w
esi = (unsigned int) w_center;
i_name = "lodsw[rep/addr]";
break;
case 2: //d
esi = (unsigned int) l_center;
i_name = "lodsl";
break;
case 3: //w
esi = (unsigned int) w_center;
i_name = "lodsw[addr/rep]";
break;
}
eflags = 0;
pp_eflags ((eflags >> 8) & 0xFF); // scratching off AH
printf ("REP %s (EAX = %08X, EFLAGS = %s) => ", i_name, eax, sz_eflags);
resulting_eflags = 0;
resulting_eax = 0;
len = lens[idx];
df = (idx >= (sizeof(lens)/sizeof(lens[0]))/2);
switch (insn)
{
case 0: //b
if (df)
{
EMIT_CALL("cld",
"rep lodsb",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
else
{
EMIT_CALL("std",
"rep lodsb",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
break;
case 1: //w[rep/addr]
if (df)
{
EMIT_CALL("cld",
// "rep lodsw",
// explicit: rep-pref addr-pref op
".byte 0x66,0xf3,0xad",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
else
{
EMIT_CALL("std",
// "rep lodsw",
// explicit: rep-pref addr-pref op
".byte 0x66,0xf3,0xad",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
break;
case 2: //d
if (df)
{
EMIT_CALL("cld",
"rep lodsl",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
else
{
EMIT_CALL("std",
"rep lodsl",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
break;
case 3: //w[addr/rep]
if (df)
{
EMIT_CALL("cld",
// "rep lodsw",
// explicit: rep-pref addr-pref op
".byte 0xf3,0x66,0xad",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
else
{
EMIT_CALL("std",
// "rep lodsw",
// explicit: rep-pref addr-pref op
".byte 0xf3,0x66,0xad",
eax, esi, eflags, resulting_eax, resulting_esi, resulting_eflags,
len);
}
break;
}
printf ("DF = %d, count = %2d ", df, len);
pp_eflags ((resulting_eflags >> 8) & 0xFF); // scratching off AH
printf ("(EAX = %08X, EFLAGS = %s)\n", resulting_eax, sz_eflags);
}
}
return 0;
}