D_CMD |
Ordinary command, none
of the listed
below (DEC, IDIV, MOVSB, UD2, ...) |
D_MOV |
Move to or from integer register
(MOV, MOVZX, ...) |
D_MOVC |
Conditional move to integer register
(CMOVZ, ...) |
D_SETC |
Conditional set integer register
(SETBE, ...) |
D_TEST |
Used to
test data (CMP, TEST, BT, AND, ...) |
D_STRING |
String
command with REPxxx prefix (REP MOVSB, REP SCASB, ...) |
D_JMP |
Unconditional near jump (JMP) |
D_JMPFAR |
Unconditional far jump (JMP FAR) |
D_JMC |
Conditional jump depending only on
flags (JNZ, JPE, ...) |
D_JMCX |
Conditional jump
depending on (E)CX and maybe flags (JCXZ, LOOP,
LOOPNZ, ...) |
D_PUSH |
Pushes
exactly 1 (double)word of data (PUSH, PUSHF) |
D_POP |
Pops
exactly 1 (double)word of data (POP, POPF) |
D_CALL |
Plain
near call (CALL) |
D_CALLFAR |
Plain far call (CALL FAR) |
D_INT |
Interrupt (INT, INT0, INT3, ICEBP,
...) |
D_RET |
Plain
near return from call (RETN) |
D_RETFAR |
Far
return or IRET (RETF, IRET) |
D_FPU |
FPU
command (FABS, FADD, FINCSTP, ...) |
D_MMX |
MMX
instruction, including SSE extensions (MOVQ, PACKSSWB, ...) |
D_3DNOW |
AMD's 3DNow!
instruction (PF2ID, PFSUBR, ...) |
D_SSE |
SSE instruction (MOVQ, PACKSSWB, ...) |
D_IO |
Instruction that accesses I/O ports
(IN, INSB, REP OUTS, ...) |
D_SYS |
Instruction that is legal
on Ring3 but is useful only in system code (MONITOR, ARPL, RDTSC, ...) |
D_PRIVILEGED |
Privileged (non-Ring3) command
(CLTS, HLT, INVLPG, LGDT, ...) |
D_DATA |
Data
recognized by the Analyser |
D_PSEUDO |
Pseudocommand, used only
in search models (JCC, CMOVCC, ...) |
D_PREFIX |
Standalone prefix (recognized only
if command contains repeated or contradictory prefixes, like INC
[ES:FS:EAX]) |
D_BAD |
Bad or
unrecognized command. Note that UD2 is treated as a valid command
|