MUL

Unsigned Multiply

Opcodes

Hex	Mnemonic	Encoding	Long Mode	Legacy Mode	Description
REX.W + F7 /4	MUL r/m64	A	Valid	N.E.	Unsigned multiply (RDX:RAX  RAX  r/m64.
F7 /4	MUL r/m32	A	Valid	Valid	Unsigned multiply (EDX:EAX  EAX  r/m32).
F7 /4	MUL r/m16	A	Valid	Valid	Unsigned multiply (DX:AX  AX  r/m16).
REX + F6 /4	MUL r/m8 *	A	Valid	N.E.	Unsigned multiply (AX  AL  r/m8).
F6 /4	MUL r/m8	A	Valid	Valid	Unsigned multiply (AX  AL  r/m8).

Instruction Operand Encoding

Op/En	Operand 0	Operand 1	Operand 2	Operand 3
A	NA	NA	NA	ModRM:r/m (r)

Description

Performs an unsigned multiplication of the first operand (destination operand) and the second operand (source operand) and stores the result in the destination operand. The destination operand is an implied operand located in register AL, AX or EAX (depending on the size of the operand); the source operand is located in a general-purpose register or a memory location. The action of this instruction and the location of the result depends on the opcode and the operand size as shown in the following table.

The result is stored in register AX, register pair DX:AX, or register pair EDX:EAX (depending on the operand size), with the high-order bits of the product contained in register AH, DX, or EDX, respectively. If the high-order bits of the product are 0, the CF and OF flags are cleared; otherwise, the flags are set.

In 64-bit mode, the instruction's default operation size is 32 bits. Use of the REX.R prefix permits access to additional registers (R8 - R15). Use of the REX.W prefix promotes operation to 64 bits.

See the summary chart at the beginning of this section for encoding data and limits.

MUL Results
Operand Size	Source 1	Source 2	Destination
Byte	AL	r/m8	AX
Word	AX	r/m16	DX:AX
Doubleword	EAX	r/m32	EDX:EAX
Quadword	RAX	r/m64	RDX:RAX

Pseudo Code

IF (Byte operation)
	AX = AL * SRC;
ELSE
	(* Word or doubleword operation *)
	IF OperandSize = 16
		DX:AX = AX * SRC;
	ELSE
		IF OperandSize = 32
			EDX:EAX = EAX * SRC;
		FI;
	ELSE
		(* OperandSize = 64 *)
		RDX:RAX = RAX * SRC;
	FI;
FI;

Flags Affected

The OF and CF flags are set to 0 if the upper half of the result is 0; otherwise, they are set to 1. The SF, ZF, AF, and PF flags are undefined.

Exceptions

64-Bit Mode Exceptions

Exception	Description
#AC(0)	If alignment checking is enabled and an unaligned memory reference is made while the current privilege level is 3.
#PF(fault-code)	If a page fault occurs.
#GP(0)	If the memory address is in a non-canonical form.
#SS(0)	If a memory address referencing the SS segment is in a non-canonical form.

Compatibility Mode Exceptions

Same exceptions as in protected mode.

Virtual-8086 Mode Exceptions

Exception	Description
#UD	If the LOCK prefix is used.
#AC(0)	If alignment checking is enabled and an unaligned memory reference is made.
#PF(fault-code)	If a page fault occurs.
#SS(0)	If a memory operand effective address is outside the SS segment limit.
#GP(0)	If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit.

Real-Address Mode Exceptions

Exception	Description
#UD	If the LOCK prefix is used.
#SS	If a memory operand effective address is outside the SS segment limit.
#GP	If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit.

Protected Mode Exceptions

Exception	Description
#UD	If the LOCK prefix is used.
#AC(0)	If alignment checking is enabled and an unaligned memory reference is made while the current privilege level is 3.
#PF(fault-code)	If a page fault occurs.
#SS(0)	If a memory operand effective address is outside the SS segment limit.
#GP(0)	If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit. If the DS, ES, FS, or GS register contains a NULL segment selector.