ARM

Advanced RISC Machines

The ARM Instruction Set

The ARM Instruction Set - ARM University Program - V1.0

 Main features of the
ARM Instruction Set
* All instructions are 32 bits long.
* Most instructions execute in a single cycle.
* Every instruction can be conditionally executed.
* A load/store architecture
• Data processing instructions act only on registers
– Three operand format
– Combined ALU and shifter for high speed bit manipulation
• Specific memory access instructions with powerful auto-indexing
addressing modes.
– 32 bit and 8 bit data types
 and also 16 bit data types on ARM Architecture v4.

– Flexible multiple register load and store instructions

* Instruction set extension via coprocessors

The ARM Instruction Set - ARM University Program - V1.0

The ARM Instruction Set - ARM University Program - V1.0
The ARM Instruction Set - ARM University Program - V1.0
 Processor Modes
* The ARM has six operating modes:
• User (unprivileged mode under which most tasks run)
• FIQ (entered when a high priority (fast) interrupt is raised)
• IRQ (entered when a low priority (normal) interrupt is raised)
• Supervisor (entered on reset and when a Software Interrupt instruction is
executed)
• Abort (used to handle memory access violations)
• Undef (used to handle undefined instructions)
* ARM Architecture Version 4 adds a seventh mode:
• System (privileged mode using the same registers as user mode)

The ARM Instruction Set - ARM University Program - V1.0

 The Registers

* ARM has 37 registers in total, all of which are 32-bits long.

• 1 dedicated program counter
• 1 dedicated current program status register
• 5 dedicated saved program status registers
• 30 general purpose registers
* However these are arranged into several banks, with the accessible bank
being governed by the processor mode. Each mode can access
• a particular set of r0-r12 registers
• a particular r13 (the stack pointer) and r14 (link register)
• r15 (the program counter)
• cpsr (the current program status register)
and privileged modes can also access
• a particular spsr (saved program status register)

The ARM Instruction Set - ARM University Program - V1.0

 Register Organisation
General registers and Program Counter
User32 / System FIQ32 Supervisor32 Abort32 IRQ32 Undefined32

r0 r0 r0 r0 r0 r0
r1 r1 r1 r1 r1 r1
r2 r2 r2 r2 r2 r2
r3 r3 r3 r3 r3 r3
r4 r4 r4 r4 r4 r4
r5 r5 r5 r5 r5 r5
r6 r6 r6 r6 r6 r6
r7 r7 r7 r7 r7 r7
r8 r8_fiq r8 r8 r8 r8
r9 r9_fiq r9 r9 r9 r9
r10 r10_fiq r10 r10 r10 r10
r11 r11_fiq r11 r11 r11 r11
r12 r12_fiq r12 r12 r12 r12
r13 (sp) r13_fiq r13_svc r13_abt r13_irq r13_undef
r14 (lr) r14_fiq r14_svc r14_abt r14_irq r14_undef
r15 (pc) r15 (pc) r15 (pc) r15 (pc) r15 (pc) r15 (pc)

Program Status Registers

cpsr cpsr cpsr cpsr cpsr cpsr
sprsr_fiq
spsr_fiq spsr_svc spsr_abt sprsr_fiq
spsr_irq spsr_undef
sprsr_fiq

The ARM Instruction Set - ARM University Program - V1.0

 Register Example:
User to FIQ Mode
Registers in use Registers in use

User Mode FIQ Mode

r0 r0
r1 r1
r2 r2
r3 r3
r4 r4
r5 r5
r6 r6
r7 r7
r8 r8_fiq EXCEPTION r8 r8_fiq
r9 r9_fiq r9 r9_fiq
r10 r10_fiq r10 r10_fiq
r11 r11_fiq r11 r11_fiq
r12 r12_fiq r12 r12_fiq
r13 (sp) r13_fiq r13 (sp) r13_fiq
r14 (lr) r14_fiq r14 (lr) r14_fiq
r15 (pc) r15 (pc)
Return address calculated from User mode
cpsr
PC value and stored in FIQ mode LR cpsr
spsr_fiq spsr_fiq

User mode CPSR copied to FIQ mode SPSR

The ARM Instruction Set - ARM University Program - V1.0

 The Program Status Registers
(CPSR and SPSRs)
31 28 8 4 0

N Z CV I F T Mode

Copies of the ALU status flags (latched if the

instruction has the "S" bit set).

* Condition Code Flags * Interrupt Disable bits.

N = Negative result from ALU flag. I = 1, disables the IRQ.
Z = Zero result from ALU flag. F = 1, disables the FIQ.
C = ALU operation Carried out
V = ALU operation oVerflowed * T Bit (Architecture v4T only)
T = 0, Processor in ARM state
* Mode Bits T = 1, Processor in Thumb state
M[4:0] define the processor mode.

The ARM Instruction Set - ARM University Program - V1.0

 The Program Counter (R15)
* When the processor is executing in ARM state:
• All instructions are 32 bits in length
• All instructions must be word aligned
• Therefore the PC value is stored in bits [31:2] with bits [1:0] equal to
zero (as instruction cannot be halfword or byte aligned).
* R14 is used as the subroutine link register (LR) and stores the return
address when Branch with Link operations are performed,
calculated from the PC.
* Thus to return from a linked branch
• MOV r15,r14
or
• MOV pc,lr

The ARM Instruction Set - ARM University Program - V1.0

 ARM Instruction Set Format
31
Instruction type
* Data processing
* Multiply
* Long Multiply
* Swap
* Load/Store Byte/Word
* Load/Store Multiple
* Halfword transfer : Immediate offset

* Halfword transfer: Register offset

* Branch
* Branch Exchange (v4T only)
* Coprocessor data transfer
* Coprocessor data operation
* Coprocessor register transfer
*The ARM
Software interrupt
Instruction Set - ARM University Program - V1.0
 Conditional Execution
* Most instruction sets only allow branches to be executed conditionally.
* However by reusing the condition evaluation hardware, ARM effectively
increases number of instructions.
• All instructions contain a condition field which determines whether the
CPU will execute them.
• Non-executed instructions soak up 1 cycle.
– Still have to complete cycle so as to allow fetching and decoding of
following instructions.
* This removes the need for many branches, which stall the pipeline (3
cycles to refill).
• Allows very dense in-line code, without branches.
• The Time penalty of not executing several conditional instructions is
frequently less than overhead of the branch
or subroutine call that would otherwise be needed.

The ARM Instruction Set - ARM University Program - V1.0

 The Condition Field

31 28 24 20 16 12 8 4 0

Cond

0000 = EQ - Z set (equal) 1001 = LS - C clear or Z (set unsigned

lower or same)
0001 = NE - Z clear (not equal)
1010 = GE - N set and V set, or N clear
0010 = HS / CS - C set (unsigned and V clear (>or =)
higher or same)
1011 = LT - N set and V clear, or N clear
0011 = LO / CC - C clear (unsigned and V set (>)
lower)
1100 = GT - Z clear, and either N set and
0100 = MI -N set (negative) V set, or N clear and V set (>)
0101 = PL - N clear (positive or 1101 = LE - Z set, or N set and V clear,or
zero) N clear and V set (<, or =)
0110 = VS - V set (overflow)
1110 = AL - always
0111 = VC - V clear (no overflow)
1111 = NV - reserved.
1000 = HI - C set and Z clear
(unsigned higher)
The ARM Instruction Set - ARM University Program - V1.0
 The Program Status Registers
(CPSR and SPSRs)
31 28 8 4 0

N Z CV I F T Mode

Copies of the ALU status flags (latched if the

instruction has the "S" bit set).

* Condition Code Flags * Interrupt Disable bits.

N = Negative result from ALU flag. I = 1, disables the IRQ.
Z = Zero result from ALU flag. F = 1, disables the FIQ.
C = ALU operation Carried out
V = ALU operation oVerflowed * T Bit (Architecture v4T only)
T = 0, Processor in ARM state
* Mode Bits T = 1, Processor in Thumb state
M[4:0] define the processor mode.

The ARM Instruction Set - ARM University Program - V1.0

 Using and updating the
Condition Field
* To execute an instruction conditionally, simply postfix it with the
appropriate condition:
• For example an add instruction takes the form:
– ADD r0,r1,r2 ; r0 = r1 + r2 (ADDAL)
• To execute this only if the zero flag is set:
– ADDEQ r0,r1,r2 ; If zero flag set then…
; ... r0 = r1 + r2
* By default, data processing operations do not affect the condition flags
(apart from the comparisons where this is the only effect). To cause the
condition flags to be updated, the S bit of the instruction needs to be set
by postfixing the instruction (and any condition code) with an “S”.
• For example to add two numbers and set the condition flags:
– ADDS r0,r1,r2; r0 = r1 + r2
; ... and set flags

The ARM Instruction Set - ARM University Program - V1.0

 Branch instructions (1)
* Branch : B{<cond>} label
* Branch with Link : BL{<cond>}
sub_routine_label
31 28 27 25 24 23 0

Cond 1 0 1 L Offset

Link bit 0 = Branch

1 = Branch with link
Condition field

* The offset for branch instructions is calculated by the assembler:

• By taking the difference between the branch instruction and the
target address minus 8 (to allow for the pipeline).
• This gives a 26 bit offset which is right shifted 2 bits (as the
bottom two bits are always zero as instructions are word –
aligned) and stored into the instruction encoding.
• This gives a range of ± 32 Mbytes.
The ARM Instruction Set - ARM University Program - V1.0
 Branch instructions (2)
* When executing the instruction, the processor:
• shifts the offset left two bits, sign extends it to 32 bits, and adds it to PC.
* Execution then continues from the new PC, once the pipeline has been
refilled.
* The "Branch with link" instruction implements a subroutine call by writing
PC-4 into the LR of the current bank.
• i.e. the address of the next instruction following the branch with link
(allowing for the pipeline).
* To return from subroutine, simply need to restore the PC from the LR:
• MOV pc, lr
• Again, pipeline has to refill before execution continues.
* The "Branch" instruction does not affect LR.
* Note: Architecture 4T offers a further ARM branch instruction, BX
• See Thumb Instruction Set Module for details.

The ARM Instruction Set - ARM University Program - V1.0

The ARM Instruction Set - ARM University Program - V1.0
 Data processing Instructions
* Largest family of ARM instructions, all sharing the same instruction
format.
* Contains:
• Arithmetic operations
• Comparisons (no results - just set condition codes)
• Logical operations
• Data movement between registers
* Remember, this is a load / store architecture
• These instruction only work on registers, NOT memory.
* They each perform a specific operation on one or two operands.
• First operand always a register - Rn
• Second operand sent to the ALU via barrel shifter.
* We will examine the barrel shifter shortly.

The ARM Instruction Set - ARM University Program - V1.0

 Arithmetic Operations
* Operations are:
• ADD operand1 + operand2
• ADC operand1 + operand2 + carry
• SUB operand1 - operand2
• SBC operand1 - operand2 + carry -1
• RSB operand2 - operand1
• RSC operand2 - operand1 + carry - 1
* Syntax:
• <Operation>{<cond>}{S} Rd, Rn, Operand2
* Examples
• ADD r0, r1, r2
• SUBGT r3, r3, #1
• RSBLES r4, r5, #5

The ARM Instruction Set - ARM University Program - V1.0

 Comparisons
* The only effect of the comparisons is to
• UPDATE THE CONDITION FLAGS. FLAGS Thus no need to set S bit.
* Operations are:
• CMP operand1 - operand2, but result not written
• CMN operand1 + operand2, but result not written
• TST operand1 AND operand2, but result not written
• TEQ operand1 EOR operand2, but result not written
* Syntax:
• <Operation>{<cond>} Rn, Operand2
* Examples:
• CMP r0, r1
• TSTEQ r2, #5

The ARM Instruction Set - ARM University Program - V1.0

 Logical Operations
* Operations are:
• AND operand1 AND operand2
• EOR operand1 EOR operand2
• ORR operand1 OR operand2
• BIC operand1 AND NOT operand2 [ie bit clear]
* Syntax:
• <Operation>{<cond>}{S} Rd, Rn, Operand2
* Examples:
• AND r0, r1, r2
• BICEQ r2, r3, #7
• EORS r1,r3,r0

The ARM Instruction Set - ARM University Program - V1.0

 Data Movement
* Operations are:
• MOV operand2
• MVN NOT operand2
Note that these make no use of operand1.
* Syntax:
• <Operation>{<cond>}{S} Rd, Operand2
* Examples:
• MOV r0, r1
• MOVS r2, #10
• MVNEQ r1,#0

The ARM Instruction Set - ARM University Program - V1.0

 The Barrel Shifter
* The ARM doesn’t have actual shift instructions.

* Instead it has a barrel shifter which provides a mechanism to carry out

shifts as part of other instructions.

* So what operations does the barrel shifter support?

The ARM Instruction Set - ARM University Program - V1.0

 Barrel Shifter - Left Shift
* Shifts left by the specified amount (multiplies by powers of two) e.g.
LSL #5 = multiply by 32

Logical Shift Left (LSL)

CF Destination 0

The ARM Instruction Set - ARM University Program - V1.0

 Barrel Shifter - Right Shifts
Logical Shift Right
Logical Shift Right
• Shifts right by the
specified amount
(divides by powers of ...0 Destination CF
two) e.g.
LSR #5 = divide by 32

Arithmetic Shift Right Arithmetic Shift Right

• Shifts right (divides by
powers of two) and
preserves the sign bit, Destination CF
for 2's complement
operations. e.g. Sign bit shifted in
ASR #5 = divide by 32

The ARM Instruction Set - ARM University Program - V1.0

 Barrel Shifter - Rotations
Rotate Right (ROR) Rotate Right
• Similar to an ASR but the
bits wrap around as they
leave the LSB and appear as Destination CF
the MSB.
e.g. ROR #5
• Note the last bit rotated is
also used as the Carry Out.

Rotate Right Extended (RRX)

Rotate Right through Carry
• This operation uses the
CPSR C flag as a 33rd bit.
• Rotates right by 1 bit. Destination CF
Encoded as ROR #0.

The ARM Instruction Set - ARM University Program - V1.0

 Using the Barrel Shifter:
The Second Operand
Operand Operand * Register, optionally with shift
1 2 operation applied.
* Shift value can be either be:
• 5 bit unsigned integer
• Specified in bottom byte of
Barrel another register.
Shifter
* Immediate value
• 8 bit number
• Can be rotated right through
an even number of
ALU positions.
• Assembler will calculate
rotate for you from
constant.
Result
The ARM Instruction Set - ARM University Program - V1.0
 Second Operand :
Shifted Register
* The amount by which the register is to be shifted is contained in
either:
• the immediate 5-bit field in the instruction
– NO OVERHEAD
– Shift is done for free - executes in single cycle.
• the bottom byte of a register (not PC)
– Then takes extra cycle to execute
– ARM doesn’t have enough read ports to read 3 registers at
once.
– Then same as on other processors where shift is
separate instruction.
* If no shift is specified then a default shift is applied: LSL #0
• i.e. barrel shifter has no effect on value in register.

The ARM Instruction Set - ARM University Program - V1.0

 Second Operand :
Using a Shifted Register
* Using a multiplication instruction to multiply by a constant means first
loading the constant into a register and then waiting a number of
internal cycles for the instruction to complete.
* A more optimum solution can often be found by using some combination
of MOVs, ADDs, SUBs and RSBs with shifts.
• Multiplications by a constant equal to a ((power of 2) ± 1) can be done in
one cycle.
* Example: r0 = r1 * 5
Example: r0 = r1 + (r1 * 4)
ADD r0, r1, r1, LSL #2
* Example: r2 = r3 * 105
Example: r2 = r3 * 15 * 7
Example: r2 = r3 * (16 - 1) * (8 - 1)
RSB r2, r3, r3, LSL #4 ; r2 = r3 * 15
RSB r2, r2, r2, LSL #3 ; r2 = r2 * 7

The ARM Instruction Set - ARM University Program - V1.0

 Second Operand :
Immediate Value (1)
* There is no single instruction which will load a 32 bit immediate constant
into a register without performing a data load from memory.
• All ARM instructions are 32 bits long
• ARM instructions do not use the instruction stream as data.
* The data processing instruction format has 12 bits available for
operand2
• If used directly this would only give a range of 4096.
* Instead it is used to store 8 bit constants, giving a range of 0 - 255.
* These 8 bits can then be rotated right through an even number of
positions (ie RORs by 0, 2, 4,..30).
• This gives a much larger range of constants that can be directly loaded,
though some constants will still need to be loaded
from memory.

The ARM Instruction Set - ARM University Program - V1.0

 Second Operand :
Immediate Value (2)
* This gives us:
• 0 - 255 [0 - 0xff]
• 256,260,264,..,1020 [0x100-0x3fc, step 4, 0x40-0xff ror 30]
• 1024,1040,1056,..,4080 [0x400-0xff0, step 16, 0x40-0xff ror 28]
• 4096,4160, 4224,..,16320 [0x1000-0x3fc0, step 64, 0x40-0xff ror 26]
* These can be loaded using, for example:
• MOV r0, #0x40, 26 ; => MOV r0, #0x1000 (ie 4096)
* To make this easier, the assembler will convert to this form for us if simply
given the required constant:
• MOV r0, #4096 ; => MOV r0, #0x1000 (ie 0x40 ror 26)
* The bitwise complements can also be formed using MVN:
• MOV r0, #0xFFFFFFFF ; assembles to MVN r0, #0
* If the required constant cannot be generated, an error will
be reported.

The ARM Instruction Set - ARM University Program - V1.0

 Loading full 32 bit constants
* Although the MOV/MVN mechansim will load a large range of constants
into a register, sometimes this mechansim will not generate the required
constant.
* Therefore, the assembler also provides a method which will load ANY 32
bit constant:
• LDR rd,=numeric constant
* If the constant can be constructed using either a MOV or MVN then this
will be the instruction actually generated.
* Otherwise, the assembler will produce an LDR instruction with a PC-
relative address to read the constant from a literal pool.
• LDR r0,=0x42 ; generates MOV r0,#0x42
• LDR r0,=0x55555555 ; generate LDR r0,[pc, offset to lit
pool]
* As this mechanism will always generate the best instruction for a given
case, it is the recommended way of loading constants.

The ARM Instruction Set - ARM University Program - V1.0

 Multiplication Instructions
* The Basic ARM provides two multiplication instructions.
* Multiply
• MUL{<cond>}{S} Rd, Rm, Rs ; Rd = Rm * Rs
* Multiply Accumulate - does addition for free
• MLA{<cond>}{S} Rd, Rm, Rs,Rn ; Rd = (Rm * Rs) + Rn
* Restrictions on use:
• Rd and Rm cannot be the same register
– Can be avoid by swapping Rm and Rs around. This works because
multiplication is commutative.
• Cannot use PC.
These will be picked up by the assembler if overlooked.
* Operands can be considered signed or unsigned
• Up to user to interpret correctly.

The ARM Instruction Set - ARM University Program - V1.0

 Multiplication Implementation
* The ARM makes use of Booth’s Algorithm to perform integer
multiplication.
* On non-M ARMs this operates on 2 bits of Rs at a time.
• For each pair of bits this takes 1 cycle (plus 1 cycle to start with).
• However when there are no more 1’s left in Rs, the multiplication will early-
terminate.
* Example: Multiply 18 and -1 : Rd = Rm * Rs

Rm 18 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 18 Rs

Rs -1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 -1 Rm

17 cycles 4 cycles
* Note: Compiler does not use early termination criteria to
decide on which order to place operands.

The ARM Instruction Set - ARM University Program - V1.0

 Extended Multiply Instructions
* M variants of ARM cores contain extended multiplication hardware.
This provides three enhancements:
• An 8 bit Booth’s Algorithm is used
– Multiplication is carried out faster (maximum for standard
instructions is now 5 cycles).
• Early termination method improved so that now completes
multiplication when all remaining bit sets contain
– all zeroes (as with non-M ARMs), or
– all ones.
Thus the previous example would early terminate in 2 cycles in both
cases.
• 64 bit results can now be produced from two 32bit operands
– Higher accuracy.
– Pair of registers used to store result.

The ARM Instruction Set - ARM University Program - V1.0

 Multiply-Long and
Multiply-Accumulate Long
* Instructions are
• MULL which gives RdHi,RdLo:=Rm*Rs
• MLAL which gives RdHi,RdLo:=(Rm*Rs)+RdHi,RdLo
* However the full 64 bit of the result now matter (lower precision multiply
instructions simply throws top 32bits away)
• Need to specify whether operands are signed or unsigned
* Therefore syntax of new instructions are:
• UMULL{<cond>}{S} RdLo,RdHi,Rm,Rs
• UMLAL{<cond>}{S} RdLo,RdHi,Rm,Rs
• SMULL{<cond>}{S} RdLo, RdHi, Rm, Rs
• SMLAL{<cond>}{S} RdLo, RdHi, Rm, Rs
* Not generated by the compiler.
Warning : Unpredictable on non-M ARMs.

The ARM Instruction Set - ARM University Program - V1.0

 Load / Store Instructions
* The ARM is a Load / Store Architecture:
• Does not support memory to memory data processing operations.
• Must move data values into registers before using them.
* This might sound inefficient, but in practice isn’t:
• Load data values from memory into registers.
• Process data in registers using a number of data processing
instructions which are not slowed down by memory access.
• Store results from registers out to memory.
* The ARM has three sets of instructions which interact with main
memory. These are:
• Single register data transfer (LDR / STR).
• Block data transfer (LDM/STM).
• Single Data Swap (SWP).

The ARM Instruction Set - ARM University Program - V1.0

 Single register data transfer
* The basic load and store instructions are:
• Load and Store Word or Byte
– LDR / STR / LDRB / STRB
* ARM Architecture Version 4 also adds support for halfwords and signed data.
• Load and Store Halfword
– LDRH / STRH
• Load Signed Byte or Halfword - load value and sign extend it to 32 bits.
– LDRSB / LDRSH
* All of these instructions can be conditionally executed by inserting the
appropriate condition code after STR / LDR.
• e.g. LDREQB
* Syntax:
• <LDR|STR>{<cond>}{<size>} Rd, <address>

The ARM Instruction Set - ARM University Program - V1.0

 Load and Store Word or Byte:
Base Register
* The memory location to be accessed is held in a base register
• STR r0, [r1] ; Store contents of r0 to location pointed to
; by contents of r1.
• LDR r2, [r1] ; Load r2 with contents of memory location
; pointed to by contents of r1.

r0 Memory
Source
Register 0x5
for STR

r1 r2
Base Destination
Register 0x200 0x200 0x5 0x5 Register
for LDR

The ARM Instruction Set - ARM University Program - V1.0

 Load and Store Word or Byte:
Offsets from the Base Register
* As well as accessing the actual location contained in the base register, these
instructions can access a location offset from the base register pointer.
* This offset can be
• An unsigned 12bit immediate value (ie 0 - 4095 bytes).
• A register, optionally shifted by an immediate value
* This can be either added or subtracted from the base register:
• Prefix the offset value or register with ‘+’ (default) or ‘-’.
* This offset can be applied:
• before the transfer is made: Pre-indexed addressing
– optionally auto-incrementing the base register, by postfixing the instruction
with an ‘!’.
• after the transfer is made: Post-indexed addressing
– causing the base register to be auto-incremented.
auto-incremented

The ARM Instruction Set - ARM University Program - V1.0

 Load and Store Word or Byte:
Pre-indexed Addressing
r0
* Example: STR r0, [r1,#12] Memory Source
0x5 Register
for STR
Offset
12 0x20c 0x5

r1
Base
Register 0x200 0x200

* To store to location 0x1f4 instead use: STR r0, [r1,#-12]

* To auto-increment base pointer to 0x20c use: STR r0, [r1, #12]!
* If r2 contains 3, access 0x20c by multiplying this by 4:
• STR r0, [r1, r2, LSL #2]

The ARM Instruction Set - ARM University Program - V1.0

 Load and Store Word or Byte:
Post-indexed Addressing
* Example: STR r0, [r1], #12 Memory

r1 Offset r0
Updated Source
Base 0x20c 12 0x5 Register
0x20c
Register for STR

0x200 0x5
r1
Original
Base 0x200
Register
* To auto-increment the base register to location 0x1f4 instead use:
• STR r0, [r1], #-12
* If r2 contains 3, auto-incremenet base register to 0x20c by multiplying
this by 4:
• STR r0, [r1], r2, LSL #2

The ARM Instruction Set - ARM University Program - V1.0

 Load and Stores
with User Mode Privilege
* When using post-indexed addressing, there is a further form of
Load/Store Word/Byte:
• <LDR|STR>{<cond>}{B}T Rd, <post_indexed_address>

* When used in a privileged mode, this does the load/store with user mode
privilege.
• Normally used by an exception handler that is emulating a memory
access instruction that would normally execute in user mode.

The ARM Instruction Set - ARM University Program - V1.0

 Example Usage of
Addressing Modes
* Imagine an array, the first element of which is pointed to by the contents of
r0.
Memory
* If we want to access a particular element, element Offset
then we can use pre-indexed addressing:
• r1 is element we want.
• LDR r2, [r0, r1, LSL #2] 3 12
Pointer to 2 8
* If we want to step through every start of array
1 4
element of the array, for instance r0 0 0
to produce sum of elements in the
array, then we can use post-indexed addressing within a loop:
• r1 is address of current element (initially equal to r0).
• LDR r2, [r1], #4
Use a further register to store the address of final element,
so that the loop can be correctly terminated.

The ARM Instruction Set - ARM University Program - V1.0

 Offsets for Halfword and
Signed Halfword / Byte Access
* The Load and Store Halfword and Load Signed Byte or Halfword
instructions can make use of pre- and post-indexed addressing in much
the same way as the basic load and store instructions.
* However the actual offset formats are more constrained:
• The immediate value is limited to 8 bits (rather than 12 bits) giving an
offset of 0-255 bytes.
• The register form cannot have a shift applied to it.

The ARM Instruction Set - ARM University Program - V1.0

 Effect of endianess
* The ARM can be set up to access its data in either little or big
endian format.
* Little endian:
• Least significant byte of a word is stored in bits 0-7 of an addressed
word.
* Big endian:
• Least significant byte of a word is stored in bits 24-31 of an
addressed word.
* This has no real relevance unless data is stored as words and then
accessed in smaller sized quantities (halfwords or bytes).
• Which byte / halfword is accessed will depend on the endianess of
the system involved.

The ARM Instruction Set - ARM University Program - V1.0

 Endianess Example
r0 = 0x11223344
31 24 23 16 15 87 0

11 22 33 44

STR r0, [r1]

31 24 23 16 15 87 0 31 24 23 16 15 87
0
r1 = 0x100 11 22 33 44 Memory 44 33 22 11 r1 = 0x100

Little-endian LDRB r2, [r1] Big-endian

31 24 23 16 15 87 0 31 24 23 16 15 87
0
00 00 00 44 00 00 00 11

r2 = 0x44 r2 = 0x11

The ARM Instruction Set - ARM University Program - V1.0

 Little- and big-endian memory
organizations
bit 31 bit 0 bit 31 bit 0
23 22 21 20 20 21 22 23

19 18 17 16 16 17 18 19
word16 word16
15 14 13 12 12 13 14 15
half-word14 half-word12 half-word12 half-word14
11 10 9 8 8 9 10 11
word8 word8
7 6 5 4 byte 4 5 6 7
byte
byte6 half-word4 address byte5 half-word6 address
3 2 1 0 0 1 2 3
byte3 byte2 byte1 byte0 byte0 byte1 byte2 byte3

(a) Little-endian memory (b) Big-endian memory

organization organization

The ARM Instruction Set - ARM University Program - V1.0

 Block Data Transfer (1)
* The Load and Store Multiple instructions (LDM / STM) allow betweeen
1 and 16 registers to be transferred to or from memory.
* The transferred registers can be either:
• Any subset of the current bank of registers (default).
• Any subset of the user mode bank of registers when in a priviledged
mode (postfix instruction with a ‘^’).
31 28 27 24 23 22 21 20 19 16 15 0

Cond 1 0 0 P U S W L Rn Register list

Condition field Base register Each bit corresponds to a particular

Up/Down bit register. For example:
Load/Store bit • Bit 0 set causes r0 to be transferred.
0 = Down; subtract offset from base 0 = Store to memory • Bit 0 unset causes r0 not to be transferred.
1 = Up ; add offset to base 1 = Load from memory
At least one register must be
Pre/Post indexing bit Write- back bit transferred as the list cannot be empty.
0 = Post; add offset after transfer, 0 = no write-back
1 = Pre ; add offset before transfer 1 = write address into base
PSR and force user bit
0 = don’t load PSR or force user mode
1 = load PSR or force user mode

The ARM Instruction Set - ARM University Program - V1.0

 Block Data Transfer (2)
* Base register used to determine where memory access should occur.
• 4 different addressing modes allow increment and decrement inclusive or
exclusive of the base register location.
• Base register can be optionally updated following the transfer (by
appending it with an ‘!’.
• Lowest register number is always transferred to/from lowest memory
location accessed.
* These instructions are very efficient for
• Saving and restoring context
– For this useful to view memory as a stack.
• Moving large blocks of data around memory
– For this useful to directly represent functionality of the instructions.

The ARM Instruction Set - ARM University Program - V1.0

 Stacks
* A stack is an area of memory which grows as new data is “pushed” onto
the “top” of it, and shrinks as data is “popped” off the top.
* Two pointers define the current limits of the stack.
• A base pointer
– used to point to the “bottom” of the stack (the first location).
• A stack pointer
– used to point the current “top” of the stack.
PUSH
{1,2,3} POP
SP 3 Result of
2 SP 2 pop = 3
1 1
SP
BASE BASE
BASE

The ARM Instruction Set - ARM University Program - V1.0

 Stack Operation
* Traditionally, a stack grows down in memory, with the last “pushed” value at
the lowest address. The ARM also supports ascending stacks, where the stack
structure grows up through memory.
* The value of the stack pointer can either:
• Point to the last occupied address (Full stack)
– and so needs pre-decrementing (ie before the push)
• Point to the next occupied address (Empty stack)
– and so needs post-decrementing (ie after the push)
* The stack type to be used is given by the postfix to the instruction:
• STMFD / LDMFD : Full Descending stack
• STMFA / LDMFA : Full Ascending stack.
• STMED / LDMED : Empty Descending stack
• STMEA / LDMEA : Empty Ascending stack
* Note: ARM Compiler will always use a Full descending stack.

The ARM Instruction Set - ARM University Program - V1.0

 Stack Examples
STMFD sp!, STMED sp!, STMFA sp!, STMEA sp!,
{r0,r1,r3-r5} {r0,r1,r3-r5} {r0,r1,r3-r5} {r0,r1,r3-r5}

0x418
SP r5 SP
r4 r5
r3 r4
r1 r3
r0 r1
Old SP Old SP r5 Old SP Old SP r0 0x400
r5 r4
r4 r3
r3 r1
r1 r0
SP r0 SP
0x3e8

The ARM Instruction Set - ARM University Program - V1.0

 Stacks and Subroutines
* One use of stacks is to create temporary register workspace for
subroutines. Any registers that are needed can be pushed onto the stack
at the start of the subroutine and popped off again at the end so as to
restore them before return to the caller :
STMFD sp!,{r0-r12, lr} ; stack all registers
........ ; and the return address
........
LDMFD sp!,{r0-r12, pc} ; load all the registers
; and return automatically
* See the chapter on the ARM Procedure Call Standard in the SDT
Reference Manual for further details of register usage within
subroutines.
* If the pop instruction also had the ‘S’ bit set (using ‘^’) then the transfer
of the PC when in a priviledged mode would also cause the SPSR to be
copied into the CPSR (see exception handling module).

The ARM Instruction Set - ARM University Program - V1.0

 Direct functionality of
Block Data Transfer
* When LDM / STM are not being used to implement stacks, it is clearer to
specify exactly what functionality of the instruction is:
• i.e. specify whether to increment / decrement the base pointer, before or
after the memory access.
* In order to do this, LDM / STM support a further syntax in addition to
the stack one:
• STMIA / LDMIA : Increment After
• STMIB / LDMIB : Increment Before
• STMDA / LDMDA : Decrement After
• STMDB / LDMDB : Decrement Before

The ARM Instruction Set - ARM University Program - V1.0

 Example: Block Copy
• Copy a block of memory, which is an exact multiple of 12 words long
from the location pointed to by r12 to the location pointed to by r13. r14
points to the end of block to be copied.

; r12 points to the start of the source data

; r14 points to the end of the source data
; r13 points to the start of the destination data
r13
loop LDMIA r12!, {r0-r11} ; load 48 bytes
STMIA r13!, {r0-r11} ; and store them r14 Increasing
CMP r12, r14 ; check for the end Memory

BNE loop ; and loop until done

r12
• This loop transfers 48 bytes in 31 cycles
• Over 50 Mbytes/sec at 33 MHz

The ARM Instruction Set - ARM University Program - V1.0

 Atomic data swap

 Exchanges a word or byte between a register and a memory location

 This operation cannot be interrupted, not even by DMA
 Main use: Operating System semaphores
 Syntax:
 SWP {<cond>} Rd, Rm, [Rn]
 SWPB{<cond>} Rd, Rm, [Rn]

Rd=[Rn]; [Rn]=Rm (Rd and Rm can be the same)

The ARM Instruction Set - ARM University Program - V1.0

 Swap and Swap Byte
Instructions
* Atomic operation of a memory read followed by a memory write
which moves byte or word quantities between registers and
memory.
* Syntax:
• SWP{<cond>}{B} Rd, Rm, [Rn]

1
Rn
temp

2 3
Memory
Rm Rd

* Thus to implement an actual swap of contents make Rd = Rm.

* The compiler cannot produce this instruction.

The ARM Instruction Set - ARM University Program - V1.0

 Software Interrupt (SWI)
31 28 27 24 23 0

Cond 1 1 1 1 SWI number (ignored by processor)

Condition Field
 Causes an exception trap to the SWI hardware vector
 The SWI handler can examine the SWI number to decide what operation has
been requested.
 By using the SWI mechanism, an operating system can implement a set of
privileged operations which applications running in user mode can request
(System Calls).
 Syntax:
 SWI{<cond>} #<SWI number>

The ARM Instruction Set - ARM University Program - V1.0

 Software Interrupt (SWI)
31 28 27 24 23 0

Cond 1 1 1 1 Comment field (ignored by Processor)

Condition Field

* In effect, a SWI is a user-defined instruction.

* It causes an exception trap to the SWI hardware vector (thus causing a change
to supervisor mode, plus the associated state saving), thus causing the SWI
exception handler to be called.
* The handler can then examine the comment field of the instruction to decide
what operation has been requested.
* By making use of the SWI mechansim, an operating system can implement a
set of privileged operations which applications running in user mode can
request.
* See Exception Handling Module for further details.

The ARM Instruction Set - ARM University Program - V1.0

 FlagRegister - PSR Transfer Instructions
31 28 27 24 23 16 15 8 7 6 5 4 0

N Z C V undefined I F T mode

f s x c
 MRS and MSR allow contents of CPSR / SPSR to be transferred to / from a
general purpose register.
 Syntax:
 MRS{<cond>} Rd,<psr> ; Rd = <psr>
 MSR{<cond>} <psr[_fields]>,Rm ; <psr[_fields]> = Rm

where
 <psr> = CPSR or SPSR
 [_fields] = any combination of ‘fsxc’
 Also an immediate form
 MSR{<cond>} <psr_fields>,#Immediate
 In User Mode, all bits can be read but only the condition flags (_f) can be
written.

The ARM Instruction Set - ARM University Program - V1.0

 Coprocessors

 Coprocessor instructions:
 Coprocessor data operation: CDP
 Coprocessor Load/Store: LDC, STC
 Coprocessor register transfer: MRC, MCR
(some coprocessors, like P14 and P15, only support MRC and MCR)
 A 4-bit coprocessor number (Pxx) has to be specified in these
instructions.
 Result in UNDEF exceptions if coprocessor is missing
 The most common coprocessors:
 P15: System control (cache, MMU, …)
 P14: Debug (Debug Communication Channel)
 P1, P4, P10: Floating point (FPA, FPE, Maverick, VFP, …)
 The assembler can translate the floating-point mnemonics into
coprocessor instructions.

The ARM Instruction Set - ARM University Program - V1.0

 Thumb State
 Thumb is a 16-bit instruction set
 Optimized for code density from C code (~65% of ARM code size)

 Improved performance from memory with a narrow data bus

 Subset of the functionality of the ARM instruction set

 Core has additional execution state - Thumb

 Switch between ARM and Thumb via the BX Rn instruction (Branch and eXchange). If Rn.0 is 1 (odd
address) the processor will change to thumb state.
15 0

ADD r2,#1
Thumb instruction set limitations:
16-bit Thumb Instruction
 Conditional execution only for branches
 Source and destination registers identical
 Only Low registers (R0-R7) used
 Constants are of limited size
31 0  Inline barrel shifter not used
ADDS r2,r2,#1  No MSR, MRS instructions
32-bit ARM Instruction
The ARM Instruction Set - ARM University Program - V1.0