22 | 8086tiny is a tiny, free, open source, portable Intel PC emulator/VM, powerful enough to run DOS, Windows 3.0, Excel, MS Flight Simulator, AutoCAD, Lotus 1-2-3, and similar applications. 8086tiny emulates a "late 80's era" PC XT-type machine with the following features:
30 | 31 |-
32 |
- Intel 8086/186 CPU 33 |
- 1MB RAM 34 |
- 3.5" floppy disk controller (1.44MB/720KB) 35 |
- Fixed disk controller (supports a single hard drive up to 528MB) 36 |
- CGA/Hercules graphics card with 720x348 2-color and 320x200 4-color graphics (64KB video RAM), and CGA 80 x 25 16-color text mode support 37 |
- Accurate programmable interrupt timer (PIT) 38 |
- Keyboard controller with 83-key XT-style keyboard 39 |
- Real-time clock 40 |
- PC speaker 41 |
The emulator uses the SDL graphics library for portability, and compiles under a range of platforms (Windows, Mac OS X, Linux, Android, iOS, Raspberry Pi).
44 |While 8086tiny as supplied implements only the 8086 instruction set, it can be extended to more complex, modern instruction sets with relative ease.
45 | 46 |50 | The 8086tiny distribution includes a Makefile that will compile unchanged under most UNIX platforms. The 8086tiny source also compiles unchanged under Microsoft Visual Studio C/C++. 51 |
52 |-
53 |
- Running
makecompiles the full 8086tiny distribution, which includes audio and CGA/Hercules graphics support via SDL.
54 | - To compile for slower platforms (e.g. Raspberry Pi), build with
make 8086tiny_slowcputo increase the graphics emulation frame rate.
55 | - If your platform lacks SDL and/or you do not need support for graphics-mode applications, you can compile without graphics and audio support by running
make no_graphicsto produce a smaller binary.
56 |
8086tiny bios-image-file floppy-image-file [@][harddisk-image-file]
If harddisk-image-file is prefixed with @ then 8086tiny will boot from the hard disk image. Otherwise, 8086tiny will boot from the floppy disk image.
Under UNIXes, the keyboard must be set to raw mode using stty for the emulator to run. The distribution includes a script called runme which sets the keyboard mode appropriately and runs the emulator with floppy and/or hard disk images as appropriate:
69 | #!/bin/sh
70 | clear
71 | stty cbreak raw -echo min 0
72 | if [ -f hd.img ]
73 | then
74 | ./8086tiny bios fd.img hd.img
75 | else
76 | ./8086tiny bios fd.img
77 | fi
78 | stty cooked echo
79 |
80 |
87 | To create a hard disk image for use with the emulator, start by generating a flat file called, for example, hd.img of the required size (under 528MB), filled with zero bytes, made using mkfile or a similar tool.
88 |
90 | Preparing the hard disk image for use with the emulator under DOS is done just like a real PC: 91 |
-
92 |
- Boot the emulator, and use
FDISKto partition the hard disk. When it's done FDISK will reboot the emulator.
93 | - Use
FORMAT C:(orFORMAT C: /Sto create a bootable disk) to format the disk image, and you are done.
94 |
The resulting disk image is in the right format to be mounted on a real Windows PC using e.g. OSFMount, on a Mac using hdiutil, or on Linux using mount, providing an easy way to copy files and programs to and from the disk image. Or, you can install programs from within the emulator itself using regular floppy disk images (see "Floppy Drive Emulation" below).
96 |
104 | The emulator simulates an XT-style keyboard controlled by an Intel 8042 chip on I/O port 0x60, generating interrupt 9 on each keypress. Because a real 8042 returns scan codes rather than the ASCII characters, for portability, the emulator BIOS does the reverse of a real PC BIOS and converts ASCII characters to scancodes, simulating press/release of the modifier keys (e.g. shift) as necessary to work like a "real" keyboard. The OS (DOS/Windows) then converts them back to ASCII characters and normally this process works seamlessly. 105 |
106 |
107 | The scan code table in the BIOS maps your local keyboard layout onto scan codes matching a US-layout QWERTY keyboard. If you are using an international keyboard layout everything will work fine with no changes, provided "United States 83-key XT keyboard" or similar is selected if your OS (e.g. Windows 3.0) gives the option. 108 |
109 | For console (text) applications, there are special key sequences to get Alt+xxx, Fxx and some Ctrl+xxx keys, since these are not returned directly by the standard C I/O functions: 110 |
-
111 |
- To send an Alt+xxx key combination, press Ctrl+A then the key, so for example to type Alt+F, press Ctrl+A then F. 112 |
- To send an Fxx key, press Ctrl+F then a number key. For example, to get the F4 key, press Ctrl+F then 4. To get F10, press Ctrl+F then 0. 113 |
- To send Ctrl+A, press Ctrl+F then Ctrl+A. To send Ctrl+F, press Ctrl+F then Ctrl+F. 114 |
- To send a Page Down key, press Ctrl+F then O. To send a Page Up key, press Ctrl+F then Q. 115 |
For graphics (SDL) applications, all keys will work as per a "real" PC without needing the special sequences above. 117 |
The keyboard is polled every KEYBOARD_TIMER_UPDATE_DELAY instructions. Decreasing this value will increase keyboard responsiveness, at the expense of emulated CPU speed, and vice versa. The default value of 20000 should be suitable for most platforms.
125 | Emulates a 3.5" high-density floppy drive. Can read, write and format 1.44MB disks (18 sectors per track, 2 heads) and 720KB disks (9 sectors per track, 2 heads). 126 |
127 | If you want to install your own software from a set of multiple floppy images (downloaded from e.g. Vetusware), the easiest way to "change disks" is to copy each disk image in turn over the floppy image file you specified on the command line, from a terminal other than the one running 8086tiny. Don't forget to put your original boot disk back at the end! 128 |
129 |136 | Supports up to 1023 cylinders, 63 sectors per track, 63 heads for disks up to 528MB. 137 |
138 | Disk image format used is a subset of the standard "raw" format used by most disk image mount tools. In general, disk images prepared by the emulator will work with disk image tools and other emulators, but not the other way around. 139 |
140 | The emulator uses an overly simplistic algorithm to derive a simulated cylinder/sector/head geometry from the disk image file's size. This algorithm often results in not all the space in the image file being available for disk partitions. For example, creating a 40,000,000 byte image file results in DOS FDISK seeing only 31.9MB as the volume size. 141 |
142 | 8086tiny will boot from a hard disk image if the HD image filename is prefixed with @ on the command line. For example: ./8086tiny bios fd.img @hd.img
143 |
151 | The emulator supports text output via the standard BIOS interrupt 0x10 interface, and also direct video memory access (one page, 4KB video RAM at segment B800) in 80 x 25 CGA 16-color text mode. 152 |
153 | BIOS text output calls are converted to simple writes to stdout. Direct video memory accesses for the 80 x 25 CGA color text mode are converted to ANSI terminal escape sequences. If you are using a terminal which does not support ANSI (e.g. you are compiling the emulator with MS VC++ and running in a Windows console window) then PC applications that directly write to video memory in text mode may be unusable. Please make sure your terminal window is at least 80 x 25 characters in size.
154 |
155 | Video memory in text mode is rendered to the terminal every 8 * KEYBOARD_TIMER_UPDATE_DELAY instructions. Decreasing this value will increase the text update rate, at the expense of emulated CPU speed, and vice versa. The default value of 20000 should be suitable for most platforms.
157 | The regular PC character code page (437) includes various extended ASCII characters for things like line drawing. You might want to set the font in your terminal program to something that includes these (for example, on Mac OS X there is a suitable freeware font called Perfect DOS VGA 437). Otherwise, extended characters may render incorrectly (for example as question mark symbols). 158 |
159 | Occasionally a DOS application on exit will leave the video hardware in an odd state which confuses the emulator, resulting in subsequent text output being invisible. If this happens, just use the DOS CLS command to clear the screen and all will be well again.
160 |
168 | Hercules 720x348 monochrome graphics mode and CGA 320x200 4-color graphics mode are emulated using SDL. Most CGA/Hercules features are supported via the normal I/O interface on ports 0x3Dx and 0x3Bx including video memory bank switching (segments B000/B800), which some games use for double-buffered graphics. Resolution reprogramming via the CRTC register is supported by 8086tiny 1.03 and later, as required by, for example, the ETEN Chinese System (which uses 640 x 408). The CGA 640x200 2-color mode is currently not supported. 169 |
170 | When an application enters graphics mode, the emulator will open an SDL window (which will be closed when the application goes back to text mode). On UNIXes, SDL will automatically output graphics via X11 if the DISPLAY environment variable is set up. 171 |
172 | The graphics display is updated every GRAPHICS_UPDATE_DELAY instructions. Decreasing this value will increase the graphics update rate, at the expense of emulated CPU speed, and vice versa. By default, GRAPHICS_UPDATE_DELAY is set to 360000 instructions, which gives good performance for faster platforms. On slower platforms like Raspberry Pi, a smaller value is suitable: building with make 8086tiny_slowcpu reduces GRAPHICS_UPDATE_DELAY to 50000 instructions.
173 |
174 | Some applications (e.g. AutoCAD) support a PC configuration with a CGA card and a Hercules card, for simultaneous text and graphics output on different displays. The emulator simulates this configuration, too, using separate windows for the (terminal) text and (SDL) graphics displays. 175 |
176 | If your application only requires text mode, you can compile 8086tiny without SDL by defining NO_GRAPHICS.
177 |
185 | Reading the RTC (both time and date) is emulated via the standard BIOS clock interface, pulling the time/date from the host computer. Setting the time or date is not supported. 186 |
187 |194 | Programmable interrupt timer channels 0 and 2 are emulated through the usual I/O port 0x40-0x43 interface. Only mode 3 (square wave generator) is currently supported, but this is what most applications use. Software that uses timers to control execution speed such as games should run at an accurate pace. 195 |
196 |203 | The PC speaker is emulated through the usual port 0x61 interface. The only PC speaker mode supported is via PIT channel 2, so you will hear most music but not non-musical sound effects. 204 |
205 |224 | The emulator simulates a hardware configuration with A20 address line wraparound disabled, making just over 1MB of RAM available to applications. 225 |
226 | Memory map is largely as per a real PC, with interrupt vector table at 0:0, BIOS data area including keyboard buffer at 40:0, CGA text video memory at B800:0, Hercules/CGA graphics memory at B000/B800:0, and BIOS at F000:0100. Unlike a real PC, in the emulator the CPU registers are memory-mapped (at F000:0), which enables considerable optimisation of the emulator's instruction execution unit by permitting the unification of memory and register operations, while remaining invisible to the running software.
227 |
235 | CPU supports the full 8086 instruction set (plus some 80186 extensions), including undocumented instructions (e.g. SALC) and flag behaviors (e.g. MUL/DIV), opcode bugs which some applications rely on (e.g. PUSH SP), and the trap flag for debugger support.
236 |
237 | The focus of 8086tiny is on minimizing code size without comproming emulation accuracy. Due to the complexities of the highly irregular Intel x86 instruction format, instruction decoding is assisted by a number of lookup tables which form part of the BIOS binary. For example, there are many different ways to encode a MOV instruction, depending on the types of the source and destination operands (immediate, register, or memory). There are sometimes even multiple ways to encode the same instruction (e.g. MOV AX, [1234] usually encodes as A1 34 12 but can also encode as 8B 06 34 12). To avoid having to implement similar functionality in the emulator multiple times for each instruction or encoding variant, look-up tables are used to map each instruction to an internal function and subfunction number.
238 |
239 | As an example, we illustrate how the emulator executes the instruction ADD AX, BX, which encodes as hex 01 D8.
240 |
-
242 |
- The emulator begins by retrieving index
01hex (the first byte of the instruction) fromTABLE_XLAT_OPCODEandTABLE_XLAT_SUBFUNCTION, giving a translated opcode ID of decimal 9 (which corresponds to the Intel instruction templatearithmetic_function reg, r/m) and a subfunction ID of 0 (which corresponds to theADDfunction), respectively.
243 | - The
OPCODEchain in the source uses the translated opcode ID and subfunction ID to determine the operation to execute, in this case calling theOP(+=)macro followed byset_CF()to set the carry flag in accordance with the result of the addition.
244 | - Next, instruction length is computed. Because Intel x86 instructions are of arbitrary length (and, sometimes, multiple encodings of the same instruction can have different lengths), tables are used to determine the instruction length to move IP to the next instruction. The opcode index
01hex is used as an index intoTABLE_BASE_INST_SIZE,TABLE_I_MOD_SIZE, andTABLE_I_W_SIZEand these numbers are added to compute the total instruction length.
245 | - Finally, flags are set. The opcode index
01hex is then used as an index intoTABLE_STD_FLAGSto give a bitmask of 3, which isFLAGS_UPDATE_SZP | FLAGS_UPDATE_AO_ARITH.
246 | FLAGS_UPDATE_SZP(1) signifies that this instruction sets the sign, zero and parity flags according to the operation's result in the standard way. Sign and zero flags are set directly from the result, and the parity flag is set by looking up the result inTABLE_PARITY_FLAG.
247 | FLAGS_UPDATE_AO_ARITH(2) signifies that this instruction sets the auxiliary and overflow flags as standard for arithmetic operations.
248 | - If
FLAGS_UPDATE_OC_LOGIC(4) were set in the bitmask (it is not here), the overflow and carry flags would be set to 0, as standard for logic operations.
The CPU also implements some "special" two-byte opcodes to help the emulator talk with the outside world. These are: 252 |
-
253 |
0F 00(PUTCHAR_AL) - output character in registerALto terminal
254 | 0F 01(GET_RTC) - write real-time clock data (as returned bylocaltime) to memory locationES:BX
255 | 0F 02(READ_DISK) - readAXbytes from disk at offset512*(16*SI+BP)into memory location ES:BX. Disk is specified inDL(0 = hard disk, 1 = floppy disk)
256 | 0F 03(WRITE_DISK) - writeAXbytes at memory locationES:BXto disk at offset512*(16*SI+BP). Disk is specified inDLas per0F 02
257 |
Emulator exit is triggered by a JMP 0:0 instruction, to allow the user to easily quit the emulator without shutting down the terminal.
Extension of the instruction set supported by 8086tiny can be implemented by appropriate modification to the tables described above in the BIOS source, and addition of a corresponding new OPCODE block in the C source.
269 | The emulator will run practically any software a real PC (of the spec listed at the top of this page) can. 270 |
271 | The author has successfully tested a range of software on the emulator. 272 |
-
273 |
- OSes/GUIs 274 |
- MS-DOS 6.22 275 |
- FreeDOS 0.82pl3 276 |
- Linux/ELKS 0.1.4 277 |
- Windows 3.0 278 |
- DESQview 2.8 279 |
- ETEN Chinese System
- Professional software 281 |
- Lotus 1-2-3 R2.4 282 |
- AsEasyAs 5.7 283 |
- Excel 2.1 for Windows 284 |
- AutoCAD 2.5 285 |
- WordStar 4
- Programming languages 287 |
- QBASIC 288 |
- GWBASIC 289 |
- Turbo C++
- Games 291 |
- Carrier Command 292 |
- Police Quest 293 |
- SimCity 294 |
- Alley Cat 295 |
- MS Flight Simulator 4 296 |
- Lots of freeware Windows games
- Diagnostic/benchmark software 298 |
- Manifest 299 |
- Microsoft MSD 300 |
- InfoSpot 301 |
- CheckIt
322 | adrian.cable@gmail.com
323 | 324 |
If 8086tiny brings you joy or profit, the author welcomes modest donations as a token of appreciation.
325 | 326 |