Instruction
JCXZ
Jumps to a short relative target if CX is zero, without testing or changing the flags; not in 64-bit mode.
- Extensions
- Forms
- 1 (1 Legacy)
- Data
- Intel XED v2026.08.23
JCXZ jumps to a short relative target, -128 to +127 bytes from the next
instruction, if CX is zero, and changes neither CX nor any flag. It is
the 16-bit-address member of the opcode E3, beside JECXZ
and JRCXZ: the address size picks the register. In
16-bit code E3 alone is JCXZ; in 32-bit code it takes a 67 prefix, 67 E3. In 64-bit mode the 67 prefix gives a 32-bit address, so JCXZ cannot
be encoded there, and both manuals say so. JRCXZ’s page explains the
instruction’s use as a guard in front of a LOOP, which in
16-bit code counts in CX.
Address size and operand size
The prefix changes only what is tested, not how the target is computed.
The target is the address of the next instruction plus the sign-extended
displacement, truncated to the operand size: to 16 bits in 16-bit code,
so that a jump wraps within the 64 KB segment, and to 32 bits in 32-bit
code, where 67 E3 tests CX but jumps with a full EIP. A 66 prefix in
16-bit code makes the operand size 32, so the same E3 tests CX and keeps
all of EIP. A target beyond the code segment’s limit raises #GP(0).
Tools
GNU as 2.44 and Clang 23 encode jcxz as E3 in .code16 and as 67 E3
in .code32, and both reject it in 64-bit code, Clang 23 with
“instruction requires: Not 64-bit mode”. The probe that records this
site’s Zen 5 cases runs in 64-bit mode, so JCXZ has no case; JECXZ’s
page shows the 67 E3 form there.
Forms
| Instruction | Encoding | Requires |
|---|---|---|
JCXZ rel8 not in 64-bit mode
JCXZ_RELBRb | 67 E3 cb | Base instruction set |
Operation
What the forms do, in pseudocode that our tests run against results recorded on real processors. How to read.
if cx == 0: # CX: JCXZ is a 67 prefix outside 64-bit
rip = low(rip + sext(rel), OSIZE) # mode, where it does not exist
Not run on a processor: JCXZ does not exist in 64-bit mode, where the probe runs.
Operands
| Operand | Kind | Action |
|---|---|---|
JCXZ rel8 not in 64-bit mode | ||
rel8 | explicit | read |
CX | implicit | read |
IP | implicit | read, write |
Flags
None: XED records no flag that the forms test or change.
CPUID and processors
Each form belongs to an XED ISA set. A form can be used when the processor reports every CPUID bit of one of its ISA set's alternatives.
| ISA set | CPUID | Processors |
|---|---|---|
I386 | No CPUID bit: part of the base instruction set. | Every x86-64 processor in XED’s model and Zen 3 to Zen 6 |
More General-purpose instructions
Sources
- Intel XED v2026.08.23 (commit
0bcb6237345c): forms, encodings, operands, flags, exception classes, attributes, ISA sets, CPUID bits and chip model. - The CPU data of x86-64.net: Zen 3 to Zen 6, from GCC’s
-marchfeature sets and AMD’s Processor Programming References, which the page of each processor cites. - Intel 64 and IA-32 Architectures Software Developer's Manual, Volume 2 (325383-093, September 2026): Volume 2A, page 3-499 (Jcc)
- AMD64 Architecture Programmer's Manual, Volume 3: General-Purpose and System Instructions (24594, rev. 3.39, October 2026)
The tables are derived from Intel XED, Copyright Intel Corporation, licensed under the Apache License 2.0; x86-64.net converted and reformatted them. The text is our own.