1217 lines
42 KiB
C++
1217 lines
42 KiB
C++
/****************************************************************************
|
|
* dcc project procedure list builder
|
|
* (C) Cristina Cifuentes, Mike van Emmerik, Jeff Ledermann
|
|
****************************************************************************/
|
|
|
|
#include <string.h>
|
|
#include <stdlib.h> /* For exit() */
|
|
#include <sstream>
|
|
#include <stdio.h>
|
|
#include <algorithm>
|
|
|
|
#include "dcc.h"
|
|
using namespace std;
|
|
//static void FollowCtrl (Function * pProc, CALL_GRAPH * pcallGraph, STATE * pstate);
|
|
static boolT process_JMP (ICODE * pIcode, STATE * pstate, CALL_GRAPH * pcallGraph);
|
|
static void setBits(int16_t type, uint32_t start, uint32_t len);
|
|
static SYM * updateGlobSym(uint32_t operand, int size, uint16_t duFlag);
|
|
static void process_MOV(LLInst &ll, STATE * pstate);
|
|
static SYM * lookupAddr (LLOperand *pm, STATE * pstate, int size, uint16_t duFlag);
|
|
void interactDis(Function * initProc, int ic);
|
|
static uint32_t SynthLab;
|
|
|
|
/*constexpr */eReg subRegH(eReg reg)
|
|
{
|
|
return eReg((int)reg + (int)rAH-(int)rAX);
|
|
}
|
|
/*constexpr */eReg subRegL(eReg reg)
|
|
{
|
|
return eReg((int)reg + (int)rAL-(int)rAX);
|
|
}
|
|
|
|
/* Parses the program, builds the call graph, and returns the list of
|
|
* procedures found */
|
|
void parse (CALL_GRAPH * *pcallGraph)
|
|
{
|
|
STATE state;
|
|
|
|
/* Set initial state */
|
|
state.setState(rES, 0); /* PSP segment */
|
|
state.setState(rDS, 0);
|
|
state.setState(rCS, prog.initCS);
|
|
state.setState(rSS, prog.initSS);
|
|
state.setState(rSP, prog.initSP);
|
|
state.IP = ((uint32_t)prog.initCS << 4) + prog.initIP;
|
|
SynthLab = SYNTHESIZED_MIN;
|
|
|
|
// default-construct a Function object !
|
|
pProcList.push_back(Function::Create());
|
|
/* Check for special settings of initial state, based on idioms of the
|
|
startup code */
|
|
state.checkStartup();
|
|
Function &start_proc(pProcList.front());
|
|
/* Make a struct for the initial procedure */
|
|
if (prog.offMain != -1)
|
|
{
|
|
/* We know where main() is. Start the flow of control from there */
|
|
start_proc.procEntry = prog.offMain;
|
|
/* In medium and large models, the segment of main may (will?) not be
|
|
the same as the initial CS segment (of the startup code) */
|
|
state.setState(rCS, prog.segMain);
|
|
start_proc.name = "main";
|
|
state.IP = prog.offMain;
|
|
}
|
|
else
|
|
{
|
|
/* Create initial procedure at program start address */
|
|
start_proc.name="start";
|
|
start_proc.procEntry = (uint32_t)state.IP;
|
|
}
|
|
/* The state info is for the first procedure */
|
|
start_proc.state = state;
|
|
|
|
/* Set up call graph initial node */
|
|
*pcallGraph = new CALL_GRAPH;
|
|
(*pcallGraph)->proc = pProcList.begin();
|
|
|
|
/* This proc needs to be called to set things up for LibCheck(), which
|
|
checks a proc to see if it is a know C (etc) library */
|
|
SetupLibCheck();
|
|
|
|
/* Recursively build entire procedure list */
|
|
pProcList.front().FollowCtrl (*pcallGraph, &state);
|
|
|
|
/* This proc needs to be called to clean things up from SetupLibCheck() */
|
|
CleanupLibCheck();
|
|
}
|
|
|
|
|
|
/* Updates the type of the symbol in the symbol table. The size is updated
|
|
* if necessary (0 means no update necessary). */
|
|
static void updateSymType (uint32_t symbol, hlType symType, int size)
|
|
{ int i;
|
|
|
|
for (i = 0; i < symtab.size(); i++)
|
|
if (symtab[i].label == symbol)
|
|
{
|
|
symtab[i].type = symType;
|
|
if (size != 0)
|
|
symtab[i].size = size;
|
|
break;
|
|
}
|
|
}
|
|
|
|
|
|
/* Returns the size of the string pointed by sym and delimited by delim.
|
|
* Size includes delimiter. */
|
|
int strSize (uint8_t *sym, char delim)
|
|
{
|
|
int till_end = sym-prog.Image;
|
|
uint8_t *end_ptr=std::find(sym,sym+(prog.cbImage-(till_end)),delim);
|
|
return end_ptr-sym+1;
|
|
}
|
|
Function *fakeproc=Function::Create(0,0,"fake");
|
|
|
|
/* FollowCtrl - Given an initial procedure, state information and symbol table
|
|
* builds a list of procedures reachable from the initial procedure
|
|
* using a depth first search. */
|
|
void Function::FollowCtrl(CALL_GRAPH * pcallGraph, STATE *pstate)
|
|
{
|
|
ICODE _Icode, *pIcode; /* This gets copied to pProc->Icode[] later */
|
|
ICODE eIcode; /* extra icodes for iDIV, iIDIV, iXCHG */
|
|
SYM * psym;
|
|
uint32_t offset;
|
|
eErrorId err;
|
|
boolT done = FALSE;
|
|
|
|
if (name.find("chkstk") != string::npos)
|
|
{
|
|
// Danger! Dcc will likely fall over in this code.
|
|
// So we act as though we have done with this proc
|
|
// pProc->flg &= ~TERMINATES; // Not sure about this
|
|
done = TRUE;
|
|
// And mark it as a library function, so structure() won't choke on it
|
|
flg |= PROC_ISLIB;
|
|
return;
|
|
}
|
|
if (option.VeryVerbose)
|
|
{
|
|
printf("Parsing proc %s at %lX\n", name.c_str(), pstate->IP);
|
|
}
|
|
|
|
while (! done && ! (err = scan(pstate->IP, _Icode)))
|
|
{
|
|
LLInst *ll = _Icode.ll();
|
|
pstate->IP += (uint32_t)ll->numBytes;
|
|
setBits(BM_CODE, ll->label, (uint32_t)ll->numBytes);
|
|
|
|
process_operands(_Icode,pstate);
|
|
|
|
/* Keep track of interesting instruction flags in procedure */
|
|
flg |= (ll->getFlag() & (NOT_HLL | FLOAT_OP));
|
|
|
|
/* Check if this instruction has already been parsed */
|
|
iICODE labLoc = Icode.labelSrch(ll->label);
|
|
if (Icode.end()!=labLoc)
|
|
{ /* Synthetic jump */
|
|
_Icode.type = LOW_LEVEL;
|
|
ll->set(iJMP,I | SYNTHETIC | NO_OPS);
|
|
ll->src.SetImmediateOp(labLoc->ll()->GetLlLabel());
|
|
ll->label = SynthLab++;
|
|
}
|
|
|
|
/* Copy Icode to Proc */
|
|
if ((_Icode.ll()->getOpcode() == iDIV) || (_Icode.ll()->getOpcode() == iIDIV))
|
|
{
|
|
/* MOV rTMP, reg */
|
|
eIcode = ICODE();
|
|
eIcode.type = LOW_LEVEL;
|
|
eIcode.ll()->set(iMOV,0);
|
|
eIcode.ll()->dst.regi = rTMP;
|
|
if (ll->testFlags(B) )
|
|
{
|
|
eIcode.ll()->setFlags( B );
|
|
eIcode.ll()->src.regi = rAX;
|
|
eIcode.setRegDU( rAX, eUSE);
|
|
}
|
|
else /* implicit dx:ax */
|
|
{
|
|
eIcode.ll()->setFlags( IM_SRC );
|
|
eIcode.setRegDU( rAX, eUSE);
|
|
eIcode.setRegDU( rDX, eUSE);
|
|
}
|
|
eIcode.setRegDU( rTMP, eDEF);
|
|
eIcode.ll()->setFlags( SYNTHETIC );
|
|
/* eIcode.ll()->label = SynthLab++; */
|
|
eIcode.ll()->label = _Icode.ll()->label;
|
|
Icode.addIcode(&eIcode);
|
|
|
|
/* iDIV, iIDIV */
|
|
Icode.addIcode(&_Icode);
|
|
|
|
/* iMOD */
|
|
eIcode = ICODE();
|
|
eIcode.type = LOW_LEVEL;
|
|
eIcode.ll()->set(iMOD,0);
|
|
eIcode.ll()->src = _Icode.ll()->src;
|
|
eIcode.du = _Icode.du;
|
|
eIcode.ll()->setFlags( ( ll->getFlag() | SYNTHETIC | IM_TMP_DST) );
|
|
eIcode.ll()->label = SynthLab++;
|
|
pIcode = Icode.addIcode(&eIcode);
|
|
}
|
|
else if (_Icode.ll()->getOpcode() == iXCHG)
|
|
{
|
|
/* MOV rTMP, regDst */
|
|
eIcode = ICODE();
|
|
eIcode.type = LOW_LEVEL;
|
|
eIcode.ll()->set(iMOV,SYNTHETIC);
|
|
eIcode.ll()->dst.regi = rTMP;
|
|
eIcode.ll()->src = _Icode.ll()->dst;
|
|
eIcode.setRegDU( rTMP, eDEF);
|
|
if(eIcode.ll()->src.regi)
|
|
{
|
|
eIcode.setRegDU( eIcode.ll()->src.regi, eUSE);
|
|
if((eIcode.ll()->src.regi>=rAL) && (eIcode.ll()->src.regi<=rBH))
|
|
eIcode.ll()->setFlags( B );
|
|
}
|
|
eIcode.ll()->label = _Icode.ll()->label;
|
|
Icode.addIcode(&eIcode);
|
|
|
|
/* MOV regDst, regSrc */
|
|
_Icode.ll()->set(iMOV,SYNTHETIC|_Icode.ll()->getFlag());
|
|
Icode.addIcode(&_Icode);
|
|
ll->setOpcode(iXCHG); /* for next case */
|
|
|
|
/* MOV regSrc, rTMP */
|
|
eIcode = ICODE();
|
|
eIcode.type = LOW_LEVEL;
|
|
eIcode.ll()->set(iMOV,SYNTHETIC);
|
|
eIcode.ll()->dst = ll->src;
|
|
if(eIcode.ll()->dst.regi)
|
|
{
|
|
if((eIcode.ll()->dst.regi>=rAL) && (eIcode.ll()->dst.regi<=rBH))
|
|
eIcode.ll()->setFlags( B );
|
|
eIcode.setRegDU( eIcode.ll()->dst.regi, eDEF);
|
|
}
|
|
eIcode.ll()->src.regi = rTMP;
|
|
eIcode.setRegDU( rTMP, eUSE);
|
|
eIcode.ll()->label = SynthLab++;
|
|
pIcode = Icode.addIcode(&eIcode);
|
|
}
|
|
else
|
|
pIcode = Icode.addIcode(&_Icode);
|
|
|
|
switch (ll->getOpcode()) {
|
|
/*** Conditional jumps ***/
|
|
case iLOOP: case iLOOPE: case iLOOPNE:
|
|
case iJB: case iJBE: case iJAE: case iJA:
|
|
case iJL: case iJLE: case iJGE: case iJG:
|
|
case iJE: case iJNE: case iJS: case iJNS:
|
|
case iJO: case iJNO: case iJP: case iJNP:
|
|
case iJCXZ:
|
|
{ STATE StCopy;
|
|
int ip = Icode.size()-1; /* Index of this jump */
|
|
ICODE &prev(Icode.back()); /* Previous icode */
|
|
boolT fBranch = FALSE;
|
|
|
|
pstate->JCond.regi = 0;
|
|
|
|
/* This sets up range check for indexed JMPs hopefully
|
|
* Handles JA/JAE for fall through and JB/JBE on branch
|
|
*/
|
|
if (ip > 0 && prev.ll()->getOpcode() == iCMP && (prev.ll()->testFlags(I)))
|
|
{
|
|
pstate->JCond.immed = (int16_t)prev.ll()->src.op();
|
|
if (ll->match(iJA) || ll->match(iJBE) )
|
|
pstate->JCond.immed++;
|
|
if (ll->getOpcode() == iJAE || ll->getOpcode() == iJA)
|
|
pstate->JCond.regi = prev.ll()->dst.regi;
|
|
fBranch = (boolT)
|
|
(ll->getOpcode() == iJB || ll->getOpcode() == iJBE);
|
|
}
|
|
StCopy = *pstate;
|
|
//memcpy(&StCopy, pstate, sizeof(STATE));
|
|
|
|
/* Straight line code */
|
|
this->FollowCtrl (pcallGraph, &StCopy); // recurrent ?
|
|
|
|
if (fBranch) /* Do branching code */
|
|
{
|
|
pstate->JCond.regi = prev.ll()->dst.regi;
|
|
}
|
|
/* Next icode. Note: not the same as GetLastIcode() because of the call
|
|
to FollowCtrl() */
|
|
pIcode = Icode.GetIcode(ip);
|
|
} /* Fall through to do the jump path */
|
|
|
|
/*** Jumps ***/
|
|
case iJMP:
|
|
case iJMPF: /* Returns TRUE if we've run into a loop */
|
|
done = process_JMP (*pIcode, pstate, pcallGraph);
|
|
break;
|
|
|
|
/*** Calls ***/
|
|
case iCALL:
|
|
case iCALLF:
|
|
done = process_CALL (*pIcode, pcallGraph, pstate);
|
|
break;
|
|
|
|
/*** Returns ***/
|
|
case iRET:
|
|
case iRETF:
|
|
this->flg |= (ll->getOpcode() == iRET)? PROC_NEAR:PROC_FAR;
|
|
/* Fall through */
|
|
case iIRET:
|
|
this->flg &= ~TERMINATES;
|
|
done = TRUE;
|
|
break;
|
|
|
|
case iINT:
|
|
if (ll->src.op() == 0x21 && pstate->f[rAH])
|
|
{
|
|
int funcNum = pstate->r[rAH];
|
|
int operand;
|
|
int size;
|
|
|
|
/* Save function number */
|
|
Icode.back().ll()->dst.off = (int16_t)funcNum;
|
|
//Icode.GetIcode(Icode.GetNumIcodes() - 1)->
|
|
|
|
/* Program termination: int21h, fn 00h, 31h, 4Ch */
|
|
done = (boolT)(funcNum == 0x00 || funcNum == 0x31 ||
|
|
funcNum == 0x4C);
|
|
|
|
/* String functions: int21h, fn 09h */
|
|
if (pstate->f[rDX]) /* offset goes into DX */
|
|
if (funcNum == 0x09)
|
|
{
|
|
operand = ((uint32_t)(uint16_t)pstate->r[rDS]<<4) +
|
|
(uint32_t)(uint16_t)pstate->r[rDX];
|
|
size = prog.fCOM ?
|
|
strSize (&prog.Image[operand], '$') :
|
|
strSize (&prog.Image[operand], '$'); // + 0x100
|
|
updateSymType (operand, TYPE_STR, size);
|
|
}
|
|
}
|
|
else if ((ll->src.op() == 0x2F) && (pstate->f[rAH]))
|
|
{
|
|
Icode.back().ll()->dst.off = pstate->r[rAH];
|
|
}
|
|
else /* Program termination: int20h, int27h */
|
|
done = (boolT)(ll->src.op() == 0x20 ||
|
|
ll->src.op() == 0x27);
|
|
if (done)
|
|
pIcode->ll()->setFlags(TERMINATES);
|
|
break;
|
|
|
|
case iMOV:
|
|
process_MOV(*pIcode->ll(), pstate);
|
|
break;
|
|
|
|
/* case iXCHG:
|
|
process_MOV (pIcode, pstate);
|
|
|
|
break; **** HERE ***/
|
|
|
|
case iSHL:
|
|
if (pstate->JCond.regi == ll->dst.regi)
|
|
if ((ll->testFlags(I)) && ll->src.op() == 1)
|
|
pstate->JCond.immed *= 2;
|
|
else
|
|
pstate->JCond.regi = 0;
|
|
break;
|
|
|
|
case iLEA:
|
|
if (ll->src.regi == 0) /* direct mem offset */
|
|
pstate->setState( ll->dst.regi, ll->src.off);
|
|
break;
|
|
|
|
case iLDS: case iLES:
|
|
if ((psym = lookupAddr(&ll->src, pstate, 4, eDuVal::USE))
|
|
/* && (Icode.ll()->flg & SEG_IMMED) */ ) {
|
|
offset = LH(&prog.Image[psym->label]);
|
|
pstate->setState( (ll->getOpcode() == iLDS)? rDS: rES,
|
|
LH(&prog.Image[psym->label + 2]));
|
|
pstate->setState( ll->dst.regi, (int16_t)offset);
|
|
psym->type = TYPE_PTR;
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (err) {
|
|
this->flg &= ~TERMINATES;
|
|
|
|
if (err == INVALID_386OP || err == INVALID_OPCODE)
|
|
{
|
|
fatalError(err, prog.Image[_Icode.ll()->label], _Icode.ll()->label);
|
|
this->flg |= PROC_BADINST;
|
|
}
|
|
else if (err == IP_OUT_OF_RANGE)
|
|
fatalError (err, _Icode.ll()->label);
|
|
else
|
|
reportError(err, _Icode.ll()->label);
|
|
}
|
|
}
|
|
|
|
|
|
/* process_JMP - Handles JMPs, returns TRUE if we should end recursion */
|
|
boolT Function::process_JMP (ICODE & pIcode, STATE *pstate, CALL_GRAPH * pcallGraph)
|
|
{
|
|
static uint8_t i2r[4] = {rSI, rDI, rBP, rBX};
|
|
ICODE _Icode;
|
|
uint32_t cs, offTable, endTable;
|
|
uint32_t i, k, seg, target;
|
|
uint32_t tmp;
|
|
|
|
if (pIcode.ll()->testFlags(I))
|
|
{
|
|
if (pIcode.ll()->getOpcode() == iJMPF)
|
|
pstate->setState( rCS, LH(prog.Image + pIcode.ll()->label + 3));
|
|
i = pstate->IP = pIcode.ll()->src.op();
|
|
if ((long)i < 0)
|
|
{
|
|
exit(1);
|
|
}
|
|
|
|
/* Return TRUE if jump target is already parsed */
|
|
return Icode.labelSrch(i, tmp);
|
|
}
|
|
|
|
/* We've got an indirect JMP - look for switch() stmt. idiom of the form
|
|
* JMP uint16_t ptr word_offset[rBX | rSI | rDI] */
|
|
seg = (pIcode.ll()->src.seg)? pIcode.ll()->src.seg: rDS;
|
|
|
|
/* Ensure we have a uint16_t offset & valid seg */
|
|
if (pIcode.ll()->match(iJMP) and (pIcode.ll()->testFlags(WORD_OFF)) &&
|
|
pstate->f[seg] &&
|
|
(pIcode.ll()->src.regi == INDEXBASE + 4 ||
|
|
pIcode.ll()->src.regi == INDEXBASE + 5 || /* Idx reg. BX, SI, DI */
|
|
pIcode.ll()->src.regi == INDEXBASE + 7))
|
|
{
|
|
|
|
offTable = ((uint32_t)(uint16_t)pstate->r[seg] << 4) + pIcode.ll()->src.off;
|
|
|
|
/* Firstly look for a leading range check of the form:-
|
|
* CMP {BX | SI | DI}, immed
|
|
* JA | JAE | JB | JBE
|
|
* This is stored in the current state as if we had just
|
|
* followed a JBE branch (i.e. [reg] lies between 0 - immed).
|
|
*/
|
|
if (pstate->JCond.regi == i2r[pIcode.ll()->src.regi-(INDEXBASE+4)])
|
|
endTable = offTable + pstate->JCond.immed;
|
|
else
|
|
endTable = (uint32_t)prog.cbImage;
|
|
|
|
/* Search for first uint8_t flagged after start of table */
|
|
for (i = offTable; i <= endTable; i++)
|
|
if (BITMAP(i, BM_CODE | BM_DATA))
|
|
break;
|
|
endTable = i & ~1; /* Max. possible table size */
|
|
|
|
/* Now do some heuristic pruning. Look for ptrs. into the table
|
|
* and for addresses that don't appear to point to valid code.
|
|
*/
|
|
cs = (uint32_t)(uint16_t)pstate->r[rCS] << 4;
|
|
for (i = offTable; i < endTable; i += 2)
|
|
{
|
|
target = cs + LH(&prog.Image[i]);
|
|
if (target < endTable && target >= offTable)
|
|
endTable = target;
|
|
else if (target >= (uint32_t)prog.cbImage)
|
|
endTable = i;
|
|
}
|
|
|
|
for (i = offTable; i < endTable; i += 2)
|
|
{
|
|
target = cs + LH(&prog.Image[i]);
|
|
/* Be wary of 00 00 as code - it's probably data */
|
|
if (! (prog.Image[target] || prog.Image[target+1]) ||
|
|
scan(target, _Icode))
|
|
endTable = i;
|
|
}
|
|
|
|
/* Now for each entry in the table take a copy of the current
|
|
* state and recursively call FollowCtrl(). */
|
|
if (offTable < endTable)
|
|
{
|
|
STATE StCopy;
|
|
int ip;
|
|
uint32_t *psw;
|
|
|
|
setBits(BM_DATA, offTable, endTable - offTable);
|
|
|
|
pIcode.ll()->setFlags(SWITCH);
|
|
pIcode.ll()->caseTbl.numEntries = (endTable - offTable) / 2;
|
|
psw = (uint32_t*)allocMem(pIcode.ll()->caseTbl.numEntries*sizeof(uint32_t));
|
|
pIcode.ll()->caseTbl.entries = psw;
|
|
|
|
for (i = offTable, k = 0; i < endTable; i += 2)
|
|
{
|
|
memcpy(&StCopy, pstate, sizeof(STATE));
|
|
StCopy.IP = cs + LH(&prog.Image[i]);
|
|
iICODE last_current_insn = (++Icode.rbegin()).base();
|
|
ip = Icode.size();
|
|
|
|
FollowCtrl (pcallGraph, &StCopy);
|
|
++last_current_insn;
|
|
last_current_insn->ll()->caseTbl.numEntries = k++;
|
|
last_current_insn->ll()->setFlags(CASE);
|
|
*psw++ = last_current_insn->ll()->GetLlLabel();
|
|
|
|
}
|
|
return TRUE;
|
|
}
|
|
}
|
|
|
|
/* Can't do anything with this jump */
|
|
|
|
flg |= PROC_IJMP;
|
|
flg &= ~TERMINATES;
|
|
interactDis(this, this->Icode.size()-1);
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
/* Process procedure call.
|
|
* Note: We assume that CALL's will return unless there is good evidence to
|
|
* the contrary - thus we return FALSE unless all paths in the called
|
|
* procedure end in DOS exits. This is reasonable since C procedures
|
|
* will always include the epilogue after the call anyway and it's to
|
|
* be assumed that if an assembler program contains a CALL that the
|
|
* programmer expected it to come back - otherwise surely a JMP would
|
|
* have been used. */
|
|
|
|
boolT Function::process_CALL (ICODE & pIcode, CALL_GRAPH * pcallGraph, STATE *pstate)
|
|
{
|
|
ICODE &last_insn(Icode.back());
|
|
STATE localState; /* Local copy of the machine state */
|
|
uint32_t off;
|
|
boolT indirect;
|
|
|
|
/* For Indirect Calls, find the function address */
|
|
indirect = FALSE;
|
|
//pIcode.ll()->immed.proc.proc=fakeproc;
|
|
if ( not pIcode.ll()->testFlags(I) )
|
|
{
|
|
/* Not immediate, i.e. indirect call */
|
|
|
|
if (pIcode.ll()->dst.regi && (!option.Calls))
|
|
{
|
|
/* We have not set the brave option to attempt to follow
|
|
the execution path through register indirect calls.
|
|
So we just exit this function, and ignore the call.
|
|
We probably should not have parsed this deep, anyway.
|
|
*/
|
|
return FALSE;
|
|
}
|
|
|
|
/* Offset into program image is seg:off of read input */
|
|
/* Note: this assumes that the pointer itself is at
|
|
es:0 where es:0 is the start of the image. This is
|
|
usually wrong! Consider also CALL [BP+0E] in which the
|
|
segment for the pointer is in SS! - Mike */
|
|
|
|
off = (uint32_t)(uint16_t)pIcode.ll()->dst.off +
|
|
((uint32_t)(uint16_t)pIcode.ll()->dst.segValue << 4);
|
|
|
|
/* Address of function is given by 4 (CALLF) or 2 (CALL) bytes at
|
|
* previous offset into the program image */
|
|
uint32_t tgtAddr=0;
|
|
if (pIcode.ll()->getOpcode() == iCALLF)
|
|
tgtAddr= LH(&prog.Image[off]) + (uint32_t)(LH(&prog.Image[off+2])) << 4;
|
|
else
|
|
tgtAddr= LH(&prog.Image[off]) + (uint32_t)(uint16_t)state.r[rCS] << 4;
|
|
pIcode.ll()->src.SetImmediateOp( tgtAddr );
|
|
pIcode.ll()->setFlags(I);
|
|
indirect = TRUE;
|
|
}
|
|
|
|
/* Process CALL. Function address is located in pIcode.ll()->immed.op */
|
|
if (pIcode.ll()->testFlags(I))
|
|
{
|
|
/* Search procedure list for one with appropriate entry point */
|
|
ilFunction iter= std::find_if(pProcList.begin(),pProcList.end(),
|
|
[pIcode](const Function &f) ->
|
|
bool { return f.procEntry==pIcode.ll()->src.op(); });
|
|
|
|
/* Create a new procedure node and save copy of the state */
|
|
if (iter==pProcList.end())
|
|
{
|
|
pProcList.push_back(Function::Create());
|
|
Function &x(pProcList.back());
|
|
iter = (++pProcList.rbegin()).base();
|
|
x.procEntry = pIcode.ll()->src.op();
|
|
LibCheck(x);
|
|
|
|
if (x.flg & PROC_ISLIB)
|
|
{
|
|
/* A library function. No need to do any more to it */
|
|
pcallGraph->insertCallGraph (this, iter);
|
|
iter = (++pProcList.rbegin()).base();
|
|
last_insn.ll()->src.proc.proc = &x;
|
|
return false;
|
|
}
|
|
|
|
if (indirect)
|
|
x.flg |= PROC_ICALL;
|
|
|
|
if (x.name.empty()) /* Don't overwrite existing name */
|
|
{
|
|
ostringstream os;
|
|
os<<"proc_"<< ++prog.cProcs;
|
|
x.name = os.str();
|
|
}
|
|
x.depth = x.depth + 1;
|
|
x.flg |= TERMINATES;
|
|
|
|
/* Save machine state in localState, load up IP and CS.*/
|
|
localState = *pstate;
|
|
pstate->IP = pIcode.ll()->src.op();
|
|
if (pIcode.ll()->getOpcode() == iCALLF)
|
|
pstate->setState( rCS, LH(prog.Image + pIcode.ll()->label + 3));
|
|
x.state = *pstate;
|
|
|
|
/* Insert new procedure in call graph */
|
|
pcallGraph->insertCallGraph (this, iter);
|
|
|
|
/* Process new procedure */
|
|
x.FollowCtrl (pcallGraph, pstate);
|
|
|
|
/* Restore segment registers & IP from localState */
|
|
pstate->IP = localState.IP;
|
|
pstate->setState( rCS, localState.r[rCS]);
|
|
pstate->setState( rDS, localState.r[rDS]);
|
|
pstate->setState( rES, localState.r[rES]);
|
|
pstate->setState( rSS, localState.r[rSS]);
|
|
|
|
}
|
|
else
|
|
pcallGraph->insertCallGraph (this, iter);
|
|
|
|
last_insn.ll()->src.proc.proc = &(*iter); // ^ target proc
|
|
|
|
/* return ((p->flg & TERMINATES) != 0); */
|
|
}
|
|
return false; // Cristina, please check!!
|
|
}
|
|
|
|
|
|
/* process_MOV - Handles state changes due to simple assignments */
|
|
static void process_MOV(LLInst & ll, STATE * pstate)
|
|
{
|
|
SYM * psym, *psym2; /* Pointer to symbol in global symbol table */
|
|
uint8_t dstReg = ll.dst.regi;
|
|
uint8_t srcReg = ll.src.regi;
|
|
if (dstReg > 0 && dstReg < INDEXBASE)
|
|
{
|
|
if (ll.testFlags(I))
|
|
pstate->setState( dstReg, (int16_t)ll.src.op());
|
|
else if (srcReg == 0) /* direct memory offset */
|
|
{
|
|
psym = lookupAddr(&ll.src, pstate, 2, eDuVal::USE);
|
|
if (psym && ((psym->flg & SEG_IMMED) || psym->duVal.val))
|
|
pstate->setState( dstReg, LH(&prog.Image[psym->label]));
|
|
}
|
|
else if (srcReg < INDEXBASE && pstate->f[srcReg]) /* reg */
|
|
{
|
|
pstate->setState( dstReg, pstate->r[srcReg]);
|
|
|
|
/* Follow moves of the possible index register */
|
|
if (pstate->JCond.regi == srcReg)
|
|
pstate->JCond.regi = dstReg;
|
|
}
|
|
}
|
|
else if (dstReg == 0) { /* direct memory offset */
|
|
int size=2;
|
|
if((ll.src.regi>=rAL)&&(ll.src.regi<=rBH))
|
|
size=1;
|
|
psym = lookupAddr (&ll.dst, pstate, size, eDEF);
|
|
if (psym && ! (psym->duVal.val)) /* no initial value yet */
|
|
if (ll.testFlags(I)) /* immediate */
|
|
{
|
|
prog.Image[psym->label] = (uint8_t)ll.src.op();
|
|
if(psym->size>1)
|
|
prog.Image[psym->label+1] = (uint8_t)(ll.src.op()>>8);
|
|
psym->duVal.val = 1;
|
|
}
|
|
else if (srcReg == 0) /* direct mem offset */
|
|
{
|
|
psym2 = lookupAddr (&ll.src, pstate, 2, eDuVal::USE);
|
|
if (psym2 && ((psym->flg & SEG_IMMED) || (psym->duVal.val)))
|
|
{
|
|
prog.Image[psym->label] = (uint8_t)prog.Image[psym2->label];
|
|
if(psym->size>1)
|
|
prog.Image[psym->label+1] = (uint8_t)(prog.Image[psym2->label+1] >> 8);
|
|
psym->duVal.setFlags(eDuVal::DEF);
|
|
psym2->duVal.setFlags(eDuVal::USE);
|
|
}
|
|
}
|
|
else if (srcReg < INDEXBASE && pstate->f[srcReg]) /* reg */
|
|
{
|
|
prog.Image[psym->label] = (uint8_t)pstate->r[srcReg];
|
|
if(psym->size>1)
|
|
prog.Image[psym->label+1] = (uint8_t)(pstate->r[srcReg] >> 8);
|
|
psym->duVal.setFlags(eDuVal::DEF);
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
/* Type of the symbol according to the number of bytes it uses */
|
|
static hlType cbType[] = {TYPE_UNKNOWN, TYPE_BYTE_UNSIGN, TYPE_WORD_SIGN,
|
|
TYPE_UNKNOWN, TYPE_LONG_SIGN};
|
|
|
|
/* Creates an entry in the global symbol table (symtab) if the variable
|
|
* is not there yet. If it is part of the symtab, the size of the variable
|
|
* is checked and updated if the old size was less than the new size (ie.
|
|
* the maximum size is always saved). */
|
|
static SYM * updateGlobSym (uint32_t operand, int size, uint16_t duFlag)
|
|
{
|
|
int i;
|
|
|
|
/* Check for symbol in symbol table */
|
|
for (i = 0; i < symtab.size(); i++)
|
|
if (symtab[i].label == operand)
|
|
{
|
|
if (symtab[i].size < size)
|
|
symtab[i].size = size;
|
|
break;
|
|
}
|
|
|
|
/* New symbol, not in symbol table */
|
|
if (i == symtab.size())
|
|
{
|
|
SYM v;
|
|
sprintf (v.name, "var%05lX", operand);
|
|
v.label = operand;
|
|
v.size = size;
|
|
v.type = cbType[size];
|
|
if (duFlag == eDuVal::USE) /* must already have init value */
|
|
{
|
|
v.duVal.use =1; // USEVAL;
|
|
v.duVal.val =1;
|
|
}
|
|
else
|
|
{
|
|
v.duVal.setFlags(duFlag);
|
|
}
|
|
symtab.push_back(v);
|
|
}
|
|
return (&symtab[i]);
|
|
}
|
|
|
|
|
|
/* Updates the offset entry to the stack frame table (arguments),
|
|
* and returns a pointer to such entry. */
|
|
static void updateFrameOff (STKFRAME * ps, int16_t off, int size, uint16_t duFlag)
|
|
{
|
|
int i;
|
|
|
|
/* Check for symbol in stack frame table */
|
|
for (i = 0; i < ps->sym.size(); i++)
|
|
{
|
|
if (ps->sym[i].off == off)
|
|
{
|
|
if (ps->sym[i].size < size)
|
|
{
|
|
ps->sym[i].size = size;
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
/* New symbol, not in table */
|
|
if (i == ps->sym.size())
|
|
{
|
|
STKSYM new_sym;
|
|
sprintf (new_sym.name, "arg%ld", i);
|
|
new_sym.off = off;
|
|
new_sym.size = size;
|
|
new_sym.type = cbType[size];
|
|
if (duFlag == eDuVal::USE) /* must already have init value */
|
|
{
|
|
new_sym.duVal.use=1;
|
|
//new_sym.duVal.val=1;
|
|
}
|
|
else
|
|
{
|
|
new_sym.duVal.setFlags(duFlag);
|
|
}
|
|
ps->sym.push_back(new_sym);
|
|
ps->numArgs++;
|
|
}
|
|
|
|
/* Save maximum argument offset */
|
|
if ((uint32_t)ps->maxOff < (off + (uint32_t)size))
|
|
ps->maxOff = off + (int16_t)size;
|
|
}
|
|
|
|
|
|
/* lookupAddr - Looks up a data reference in the symbol table and stores it
|
|
* if necessary.
|
|
* Returns a pointer to the symbol in the
|
|
* symbol table, or Null if it's not a direct memory offset. */
|
|
static SYM * lookupAddr (LLOperand *pm, STATE *pstate, int size, uint16_t duFlag)
|
|
{
|
|
int i;
|
|
SYM * psym;
|
|
uint32_t operand;
|
|
|
|
if (pm->regi == 0) { /* Global var */
|
|
if (pm->segValue) { /* there is a value in the seg field */
|
|
operand = opAdr (pm->segValue, pm->off);
|
|
psym = updateGlobSym (operand, size, duFlag);
|
|
|
|
/* Check for out of bounds */
|
|
if (psym->label >= (uint32_t)prog.cbImage)
|
|
return (NULL);
|
|
return (psym);
|
|
}
|
|
else if (pstate->f[pm->seg]) { /* new value */
|
|
pm->segValue = pstate->r[pm->seg];
|
|
operand = opAdr(pm->segValue, pm->off);
|
|
i = symtab.size();
|
|
psym = updateGlobSym (operand, size, duFlag);
|
|
|
|
/* Flag new memory locations that are segment values */
|
|
if (symtab.size() > i)
|
|
{
|
|
if (size == 4)
|
|
operand += 2; /* High uint16_t */
|
|
for (i = 0; i < prog.cReloc; i++)
|
|
if (prog.relocTable[i] == operand) {
|
|
psym->flg = SEG_IMMED;
|
|
break;
|
|
}
|
|
}
|
|
|
|
/* Check for out of bounds */
|
|
if (psym->label >= (uint32_t)prog.cbImage)
|
|
return (NULL);
|
|
return (psym);
|
|
}
|
|
}
|
|
return (NULL);
|
|
}
|
|
|
|
|
|
/* setState - Assigns a value to a reg. */
|
|
void STATE::setState(uint16_t reg, int16_t value)
|
|
{
|
|
value &= 0xFFFF;
|
|
r[reg] = value;
|
|
f[reg] = TRUE;
|
|
switch (reg) {
|
|
case rAX: case rCX: case rDX: case rBX:
|
|
r[reg + rAL - rAX] = value & 0xFF;
|
|
f[reg + rAL - rAX] = TRUE;
|
|
r[reg + rAH - rAX] = (value >> 8) & 0xFF;
|
|
f[reg + rAH - rAX] = TRUE;
|
|
break;
|
|
|
|
case rAL: case rCL: case rDL: case rBL:
|
|
if (f[reg - rAL + rAH]) {
|
|
r[reg - rAL + rAX] =(r[reg - rAL + rAH] << 8) + (value & 0xFF);
|
|
f[reg - rAL + rAX] = TRUE;
|
|
}
|
|
break;
|
|
|
|
case rAH: case rCH: case rDH: case rBH:
|
|
if (f[reg - rAH + rAL])
|
|
{
|
|
r[reg - rAH + rAX] = r[reg - rAH + rAL] + ((value & 0xFF) << 8);
|
|
f[reg - rAH + rAX] = TRUE;
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
|
|
/* labelSrchRepl - Searches Icode for instruction with label = target, and
|
|
replaces *pIndex with an icode index */
|
|
|
|
|
|
|
|
static void setBits(int16_t type, uint32_t start, uint32_t len)
|
|
/* setBits - Sets memory bitmap bits for BM_CODE or BM_DATA (additively) */
|
|
{
|
|
uint32_t i;
|
|
|
|
if (start < (uint32_t)prog.cbImage)
|
|
{
|
|
if (start + len > (uint32_t)prog.cbImage)
|
|
len = (uint32_t)(prog.cbImage - start);
|
|
|
|
for (i = start + len - 1; i >= start; i--)
|
|
{
|
|
prog.map[i >> 2] |= type << ((i & 3) << 1);
|
|
if (i == 0) break; // Fixes inf loop!
|
|
}
|
|
}
|
|
}
|
|
|
|
/* DU bit definitions for each reg value - including index registers */
|
|
std::bitset<32> duReg[] = { 0x00,
|
|
//AH AL . . AX, BH
|
|
0x11001, 0x22002, 0x44004, 0x88008, /* uint16_t regs */
|
|
0x10, 0x20, 0x40, 0x80,
|
|
0x100, 0x200, 0x400, 0x800, /* seg regs */
|
|
0x1000, 0x2000, 0x4000, 0x8000, /* uint8_t regs */
|
|
0x10000, 0x20000, 0x40000, 0x80000,
|
|
0x100000, /* tmp reg */
|
|
0x48, 0x88, 0x60, 0xA0, /* index regs */
|
|
0x40, 0x80, 0x20, 0x08 };
|
|
|
|
|
|
/* Checks which registers where used and updates the du.u flag.
|
|
* Places local variables on the local symbol table.
|
|
* Arguments: d : SRC or DST icode operand
|
|
* pIcode: ptr to icode instruction
|
|
* pProc : ptr to current procedure structure
|
|
* pstate: ptr to current procedure state
|
|
* size : size of the operand
|
|
* ix : current index into icode array */
|
|
static void use (opLoc d, ICODE & pIcode, Function * pProc, STATE * pstate, int size, int ix)
|
|
{
|
|
LLOperand * pm = (d == SRC)? &pIcode.ll()->src: &pIcode.ll()->dst;
|
|
SYM * psym;
|
|
|
|
if (pm->regi == 0 || pm->regi >= INDEXBASE)
|
|
{
|
|
if (pm->regi == INDEXBASE + 6) /* indexed on bp */
|
|
{
|
|
if (pm->off >= 2)
|
|
updateFrameOff (&pProc->args, pm->off, size, eDuVal::USE);
|
|
else if (pm->off < 0)
|
|
pProc->localId.newByteWordStk (TYPE_WORD_SIGN, pm->off, 0);
|
|
}
|
|
|
|
else if (pm->regi == INDEXBASE + 2 || pm->regi == INDEXBASE + 3)
|
|
pProc->localId.newByteWordStk (TYPE_WORD_SIGN, pm->off,
|
|
(uint8_t)((pm->regi == INDEXBASE + 2) ? rSI : rDI));
|
|
|
|
else if ((pm->regi >= INDEXBASE + 4) && (pm->regi <= INDEXBASE + 7))
|
|
{
|
|
if ((pm->seg == rDS) && (pm->regi == INDEXBASE + 7)) /* bx */
|
|
{
|
|
if (pm->off > 0) /* global indexed variable */
|
|
pProc->localId.newIntIdx(pm->segValue, pm->off, rBX,ix, TYPE_WORD_SIGN);
|
|
}
|
|
pIcode.du.use |= duReg[pm->regi];
|
|
}
|
|
|
|
else if (psym = lookupAddr(pm, pstate, size, eDuVal::USE))
|
|
{
|
|
setBits (BM_DATA, psym->label, (uint32_t)size);
|
|
pIcode.ll()->setFlags(SYM_USE);
|
|
pIcode.ll()->caseTbl.numEntries = psym - &symtab[0];
|
|
}
|
|
}
|
|
|
|
/* Use of register */
|
|
else if ((d == DST) || ((d == SRC) && (not pIcode.ll()->testFlags(I))))
|
|
pIcode.du.use |= duReg[pm->regi];
|
|
}
|
|
|
|
|
|
/* Checks which registers were defined (ie. got a new value) and updates the
|
|
* du.d flag.
|
|
* Places local variables in the local symbol table. */
|
|
static void def (opLoc d, ICODE & pIcode, Function * pProc, STATE * pstate, int size,
|
|
int ix)
|
|
{
|
|
LLOperand *pm = (d == SRC)? &pIcode.ll()->src: &pIcode.ll()->dst;
|
|
SYM * psym;
|
|
|
|
if (pm->regi == 0 || pm->regi >= INDEXBASE)
|
|
{
|
|
if (pm->regi == INDEXBASE + 6) /* indexed on bp */
|
|
{
|
|
if (pm->off >= 2)
|
|
updateFrameOff (&pProc->args, pm->off, size, eDEF);
|
|
else if (pm->off < 0)
|
|
pProc->localId.newByteWordStk (TYPE_WORD_SIGN, pm->off, 0);
|
|
}
|
|
|
|
else if (pm->regi == INDEXBASE + 2 || pm->regi == INDEXBASE + 3)
|
|
{
|
|
pProc->localId.newByteWordStk(TYPE_WORD_SIGN, pm->off,
|
|
(uint8_t)((pm->regi == INDEXBASE + 2) ? rSI : rDI));
|
|
}
|
|
|
|
else if ((pm->regi >= INDEXBASE + 4) && (pm->regi <= INDEXBASE + 7))
|
|
{
|
|
if ((pm->seg == rDS) && (pm->regi == INDEXBASE + 7)) /* bx */
|
|
{
|
|
if (pm->off > 0) /* global var */
|
|
pProc->localId.newIntIdx(pm->segValue, pm->off, rBX,ix, TYPE_WORD_SIGN);
|
|
}
|
|
pIcode.du.use |= duReg[pm->regi];
|
|
}
|
|
|
|
else if (psym = lookupAddr(pm, pstate, size, eDEF))
|
|
{
|
|
setBits(BM_DATA, psym->label, (uint32_t)size);
|
|
pIcode.ll()->setFlags(SYM_DEF);
|
|
pIcode.ll()->caseTbl.numEntries = psym - &symtab[0];
|
|
}
|
|
}
|
|
|
|
/* Definition of register */
|
|
else if ((d == DST) || ((d == SRC) && (not pIcode.ll()->testFlags(I))))
|
|
{
|
|
pIcode.du.def |= duReg[pm->regi];
|
|
pIcode.du1.numRegsDef++;
|
|
}
|
|
}
|
|
|
|
|
|
/* use_def - operand is both use and def'd.
|
|
* Note: the destination will always be a register, stack variable, or global
|
|
* variable. */
|
|
static void use_def(opLoc d, ICODE & pIcode, Function * pProc, STATE * pstate, int cb,
|
|
int ix)
|
|
{
|
|
LLOperand * pm = (d == SRC)? &pIcode.ll()->src: &pIcode.ll()->dst;
|
|
|
|
use (d, pIcode, pProc, pstate, cb, ix);
|
|
|
|
if (pm->regi < INDEXBASE) /* register */
|
|
{
|
|
pIcode.du.def |= duReg[pm->regi];
|
|
pIcode.du1.numRegsDef++;
|
|
}
|
|
}
|
|
|
|
|
|
/* Set DU vector, local variables and arguments, and DATA bits in the
|
|
* bitmap */
|
|
void Function::process_operands(ICODE & pIcode, STATE * pstate)
|
|
{
|
|
int ix=Icode.size();
|
|
int i;
|
|
int sseg = (pIcode.ll()->src.seg)? pIcode.ll()->src.seg: rDS;
|
|
int cb = pIcode.ll()->testFlags(B) ? 1: 2;
|
|
uint32_t Imm = (pIcode.ll()->testFlags(I));
|
|
|
|
switch (pIcode.ll()->getOpcode()) {
|
|
case iAND: case iOR: case iXOR:
|
|
case iSAR: case iSHL: case iSHR:
|
|
case iRCL: case iRCR: case iROL: case iROR:
|
|
case iADD: case iADC: case iSUB: case iSBB:
|
|
if (! Imm) {
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
}
|
|
case iINC: case iDEC: case iNEG: case iNOT:
|
|
case iAAA: case iAAD: case iAAM: case iAAS:
|
|
case iDAA: case iDAS:
|
|
use_def(DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iXCHG:
|
|
/* This instruction is replaced by 3 instructions, only need
|
|
* to define the src operand and use the destination operand
|
|
* in the mean time. */
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
def(DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iTEST: case iCMP:
|
|
if (! Imm)
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
use(DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iDIV: case iIDIV:
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
if (cb == 1)
|
|
pIcode.du.use |= duReg[rTMP];
|
|
break;
|
|
|
|
case iMUL: case iIMUL:
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
if (! Imm)
|
|
{
|
|
use (DST, pIcode, this, pstate, cb, ix);
|
|
if (cb == 1)
|
|
{
|
|
pIcode.du.def |= duReg[rAX];
|
|
pIcode.du1.numRegsDef++;
|
|
}
|
|
else
|
|
{
|
|
pIcode.du.def |= (duReg[rAX] | duReg[rDX]);
|
|
pIcode.du1.numRegsDef += 2;
|
|
}
|
|
}
|
|
else
|
|
def (DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iSIGNEX:
|
|
cb = pIcode.ll()->testFlags(SRC_B) ? 1 : 2;
|
|
if (cb == 1) /* uint8_t */
|
|
{
|
|
pIcode.du.def |= duReg[rAX];
|
|
pIcode.du1.numRegsDef++;
|
|
pIcode.du.use |= duReg[rAL];
|
|
}
|
|
else /* uint16_t */
|
|
{
|
|
pIcode.du.def |= (duReg[rDX] | duReg[rAX]);
|
|
pIcode.du1.numRegsDef += 2;
|
|
pIcode.du.use |= duReg[rAX];
|
|
}
|
|
break;
|
|
|
|
case iCALLF: /* Ignore def's on CS for now */
|
|
cb = 4;
|
|
case iCALL: case iPUSH: case iPOP:
|
|
if (! Imm) {
|
|
if (pIcode.ll()->getOpcode() == iPOP)
|
|
def(DST, pIcode, this, pstate, cb, ix);
|
|
else
|
|
use(DST, pIcode, this, pstate, cb, ix);
|
|
}
|
|
break;
|
|
|
|
case iESC: /* operands may be larger */
|
|
use(DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iLDS: case iLES:
|
|
pIcode.du.def |= duReg[(pIcode.ll()->getOpcode() == iLDS) ? rDS : rES];
|
|
pIcode.du1.numRegsDef++;
|
|
cb = 4;
|
|
case iMOV:
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
def(DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iLEA:
|
|
use(SRC, pIcode, this, pstate, 2, ix);
|
|
def(DST, pIcode, this, pstate, 2, ix);
|
|
break;
|
|
|
|
case iBOUND:
|
|
use(SRC, pIcode, this, pstate, 4, ix);
|
|
use(DST, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iJMPF:
|
|
cb = 4;
|
|
case iJMP:
|
|
if (! Imm)
|
|
use(SRC, pIcode, this, pstate, cb, ix);
|
|
break;
|
|
|
|
case iLOOP: case iLOOPE: case iLOOPNE:
|
|
pIcode.du.def |= duReg[rCX];
|
|
pIcode.du1.numRegsDef++;
|
|
case iJCXZ:
|
|
pIcode.du.use |= duReg[rCX];
|
|
break;
|
|
|
|
case iREPNE_CMPS: case iREPE_CMPS: case iREP_MOVS:
|
|
pIcode.du.def |= duReg[rCX];
|
|
pIcode.du1.numRegsDef++;
|
|
pIcode.du.use |= duReg[rCX];
|
|
case iCMPS: case iMOVS:
|
|
pIcode.du.def |= duReg[rSI] | duReg[rDI];
|
|
pIcode.du1.numRegsDef += 2;
|
|
pIcode.du.use |= duReg[rSI] | duReg[rDI] | duReg[rES] | duReg[sseg];
|
|
break;
|
|
|
|
case iREPNE_SCAS: case iREPE_SCAS: case iREP_STOS: case iREP_INS:
|
|
pIcode.du.def |= duReg[rCX];
|
|
pIcode.du1.numRegsDef++;
|
|
pIcode.du.use |= duReg[rCX];
|
|
case iSCAS: case iSTOS: case iINS:
|
|
pIcode.du.def |= duReg[rDI];
|
|
pIcode.du1.numRegsDef++;
|
|
if (pIcode.ll()->getOpcode() == iREP_INS || pIcode.ll()->getOpcode()== iINS)
|
|
{
|
|
pIcode.du.use |= duReg[rDI] | duReg[rES] | duReg[rDX];
|
|
}
|
|
else
|
|
{
|
|
pIcode.du.use |= duReg[rDI] | duReg[rES] | duReg[(cb == 2)? rAX: rAL];
|
|
}
|
|
break;
|
|
|
|
case iREP_LODS:
|
|
pIcode.du.def |= duReg[rCX];
|
|
pIcode.du1.numRegsDef++;
|
|
pIcode.du.use |= duReg[rCX];
|
|
case iLODS:
|
|
pIcode.du.def |= duReg[rSI] | duReg[(cb==2)? rAX: rAL];
|
|
pIcode.du1.numRegsDef += 2;
|
|
pIcode.du.use |= duReg[rSI] | duReg[sseg];
|
|
break;
|
|
|
|
case iREP_OUTS:
|
|
pIcode.du.def |= duReg[rCX];
|
|
pIcode.du1.numRegsDef++;
|
|
pIcode.du.use |= duReg[rCX];
|
|
case iOUTS:
|
|
pIcode.du.def |= duReg[rSI];
|
|
pIcode.du1.numRegsDef++;
|
|
pIcode.du.use |= duReg[rSI] | duReg[rDX] | duReg[sseg];
|
|
break;
|
|
|
|
case iIN: case iOUT:
|
|
def(DST, pIcode, this, pstate, cb, ix);
|
|
if (! Imm)
|
|
{
|
|
pIcode.du.use |= duReg[rDX];
|
|
}
|
|
break;
|
|
}
|
|
|
|
for (i = rSP; i <= rBH; i++) /* Kill all defined registers */
|
|
if (pIcode.ll()->flagDU.d & (1 << i))
|
|
pstate->f[i] = FALSE;
|
|
}
|
|
|