https://www.cnblogs.com/xiaojianliu/articles/8733560.html

文章目錄

• • `vi test.c`
  • `gcc test.c -g`
  • `objdump -dS a.out`
  • 查看關鍵部分：
  • esp 與 ebp

vi test.c

int bar(int c, int d) { int e = c + d;return e; }int foo(int a, int b) {return bar(a, b); }int main(void) {foo(2, 3);return 0; }

gcc test.c -g

objdump -dS a.out

注意大小寫

dontla@dontla-virtual-machine:~/桌面/test$ objdump -dS a.outa.out： 文件格式 elf64-x86-64Disassembly of section .init:0000000000001000 <_init>:1000: f3 0f 1e fa endbr64 1004: 48 83 ec 08 sub $0x8,%rsp1008: 48 8b 05 d9 2f 00 00 mov 0x2fd9(%rip),%rax # 3fe8 <__gmon_start__>100f: 48 85 c0 test %rax,%rax1012: 74 02 je 1016 <_init+0x16>1014: ff d0 callq *%rax1016: 48 83 c4 08 add $0x8,%rsp101a: c3 retq Disassembly of section .plt:0000000000001020 <.plt>:1020: ff 35 a2 2f 00 00 pushq 0x2fa2(%rip) # 3fc8 <_GLOBAL_OFFSET_TABLE_+0x8>1026: f2 ff 25 a3 2f 00 00 bnd jmpq *0x2fa3(%rip) # 3fd0 <_GLOBAL_OFFSET_TABLE_+0x10>102d: 0f 1f 00 nopl (%rax)Disassembly of section .plt.got:0000000000001030 <__cxa_finalize@plt>:1030: f3 0f 1e fa endbr64 1034: f2 ff 25 bd 2f 00 00 bnd jmpq *0x2fbd(%rip) # 3ff8 <__cxa_finalize@GLIBC_2.2.5>103b: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)Disassembly of section .text:0000000000001040 <_start>:1040: f3 0f 1e fa endbr64 1044: 31 ed xor %ebp,%ebp1046: 49 89 d1 mov %rdx,%r91049: 5e pop %rsi104a: 48 89 e2 mov %rsp,%rdx104d: 48 83 e4 f0 and $0xfffffffffffffff0,%rsp1051: 50 push %rax1052: 54 push %rsp1053: 4c 8d 05 a6 01 00 00 lea 0x1a6(%rip),%r8 # 1200 <__libc_csu_fini>105a: 48 8d 0d 2f 01 00 00 lea 0x12f(%rip),%rcx # 1190 <__libc_csu_init>1061: 48 8d 3d 02 01 00 00 lea 0x102(%rip),%rdi # 116a <main>1068: ff 15 72 2f 00 00 callq *0x2f72(%rip) # 3fe0 <__libc_start_main@GLIBC_2.2.5>106e: f4 hlt 106f: 90 nop0000000000001070 <deregister_tm_clones>:1070: 48 8d 3d 99 2f 00 00 lea 0x2f99(%rip),%rdi # 4010 <__TMC_END__>1077: 48 8d 05 92 2f 00 00 lea 0x2f92(%rip),%rax # 4010 <__TMC_END__>107e: 48 39 f8 cmp %rdi,%rax1081: 74 15 je 1098 <deregister_tm_clones+0x28>1083: 48 8b 05 4e 2f 00 00 mov 0x2f4e(%rip),%rax # 3fd8 <_ITM_deregisterTMCloneTable>108a: 48 85 c0 test %rax,%rax108d: 74 09 je 1098 <deregister_tm_clones+0x28>108f: ff e0 jmpq *%rax1091: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)1098: c3 retq 1099: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)00000000000010a0 <register_tm_clones>:10a0: 48 8d 3d 69 2f 00 00 lea 0x2f69(%rip),%rdi # 4010 <__TMC_END__>10a7: 48 8d 35 62 2f 00 00 lea 0x2f62(%rip),%rsi # 4010 <__TMC_END__>10ae: 48 29 fe sub %rdi,%rsi10b1: 48 89 f0 mov %rsi,%rax10b4: 48 c1 ee 3f shr $0x3f,%rsi10b8: 48 c1 f8 03 sar $0x3,%rax10bc: 48 01 c6 add %rax,%rsi10bf: 48 d1 fe sar %rsi10c2: 74 14 je 10d8 <register_tm_clones+0x38>10c4: 48 8b 05 25 2f 00 00 mov 0x2f25(%rip),%rax # 3ff0 <_ITM_registerTMCloneTable>10cb: 48 85 c0 test %rax,%rax10ce: 74 08 je 10d8 <register_tm_clones+0x38>10d0: ff e0 jmpq *%rax10d2: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)10d8: c3 retq 10d9: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)00000000000010e0 <__do_global_dtors_aux>:10e0: f3 0f 1e fa endbr64 10e4: 80 3d 25 2f 00 00 00 cmpb $0x0,0x2f25(%rip) # 4010 <__TMC_END__>10eb: 75 2b jne 1118 <__do_global_dtors_aux+0x38>10ed: 55 push %rbp10ee: 48 83 3d 02 2f 00 00 cmpq $0x0,0x2f02(%rip) # 3ff8 <__cxa_finalize@GLIBC_2.2.5>10f5: 00 10f6: 48 89 e5 mov %rsp,%rbp10f9: 74 0c je 1107 <__do_global_dtors_aux+0x27>10fb: 48 8b 3d 06 2f 00 00 mov 0x2f06(%rip),%rdi # 4008 <__dso_handle>1102: e8 29 ff ff ff callq 1030 <__cxa_finalize@plt>1107: e8 64 ff ff ff callq 1070 <deregister_tm_clones>110c: c6 05 fd 2e 00 00 01 movb $0x1,0x2efd(%rip) # 4010 <__TMC_END__>1113: 5d pop %rbp1114: c3 retq 1115: 0f 1f 00 nopl (%rax)1118: c3 retq 1119: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)0000000000001120 <frame_dummy>:1120: f3 0f 1e fa endbr64 1124: e9 77 ff ff ff jmpq 10a0 <register_tm_clones>0000000000001129 <bar>: int bar(int c, int d) {1129: f3 0f 1e fa endbr64 112d: 55 push %rbp112e: 48 89 e5 mov %rsp,%rbp1131: 89 7d ec mov %edi,-0x14(%rbp)1134: 89 75 e8 mov %esi,-0x18(%rbp)int e = c + d;1137: 8b 55 ec mov -0x14(%rbp),%edx113a: 8b 45 e8 mov -0x18(%rbp),%eax113d: 01 d0 add %edx,%eax113f: 89 45 fc mov %eax,-0x4(%rbp)return e;1142: 8b 45 fc mov -0x4(%rbp),%eax }1145: 5d pop %rbp1146: c3 retq 0000000000001147 <foo>:int foo(int a, int b) {1147: f3 0f 1e fa endbr64 114b: 55 push %rbp114c: 48 89 e5 mov %rsp,%rbp114f: 48 83 ec 08 sub $0x8,%rsp1153: 89 7d fc mov %edi,-0x4(%rbp)1156: 89 75 f8 mov %esi,-0x8(%rbp)return bar(a, b);1159: 8b 55 f8 mov -0x8(%rbp),%edx115c: 8b 45 fc mov -0x4(%rbp),%eax115f: 89 d6 mov %edx,%esi1161: 89 c7 mov %eax,%edi1163: e8 c1 ff ff ff callq 1129 <bar> }1168: c9 leaveq 1169: c3 retq 000000000000116a <main>:int main(void) {116a: f3 0f 1e fa endbr64 116e: 55 push %rbp116f: 48 89 e5 mov %rsp,%rbpfoo(2, 3);1172: be 03 00 00 00 mov $0x3,%esi1177: bf 02 00 00 00 mov $0x2,%edi117c: e8 c6 ff ff ff callq 1147 <foo>return 0;1181: b8 00 00 00 00 mov $0x0,%eax }1186: 5d pop %rbp1187: c3 retq 1188: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1)118f: 00 0000000000001190 <__libc_csu_init>:1190: f3 0f 1e fa endbr64 1194: 41 57 push %r151196: 4c 8d 3d 53 2c 00 00 lea 0x2c53(%rip),%r15 # 3df0 <__frame_dummy_init_array_entry>119d: 41 56 push %r14119f: 49 89 d6 mov %rdx,%r1411a2: 41 55 push %r1311a4: 49 89 f5 mov %rsi,%r1311a7: 41 54 push %r1211a9: 41 89 fc mov %edi,%r12d11ac: 55 push %rbp11ad: 48 8d 2d 44 2c 00 00 lea 0x2c44(%rip),%rbp # 3df8 <__do_global_dtors_aux_fini_array_entry>11b4: 53 push %rbx11b5: 4c 29 fd sub %r15,%rbp11b8: 48 83 ec 08 sub $0x8,%rsp11bc: e8 3f fe ff ff callq 1000 <_init>11c1: 48 c1 fd 03 sar $0x3,%rbp11c5: 74 1f je 11e6 <__libc_csu_init+0x56>11c7: 31 db xor %ebx,%ebx11c9: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)11d0: 4c 89 f2 mov %r14,%rdx11d3: 4c 89 ee mov %r13,%rsi11d6: 44 89 e7 mov %r12d,%edi11d9: 41 ff 14 df callq *(%r15,%rbx,8)11dd: 48 83 c3 01 add $0x1,%rbx11e1: 48 39 dd cmp %rbx,%rbp11e4: 75 ea jne 11d0 <__libc_csu_init+0x40>11e6: 48 83 c4 08 add $0x8,%rsp11ea: 5b pop %rbx11eb: 5d pop %rbp11ec: 41 5c pop %r1211ee: 41 5d pop %r1311f0: 41 5e pop %r1411f2: 41 5f pop %r1511f4: c3 retq 11f5: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)11fc: 00 00 00 00 0000000000001200 <__libc_csu_fini>:1200: f3 0f 1e fa endbr64 1204: c3 retq Disassembly of section .fini:0000000000001208 <_fini>:1208: f3 0f 1e fa endbr64 120c: 48 83 ec 08 sub $0x8,%rsp1210: 48 83 c4 08 add $0x8,%rsp1214: c3 retq

查看關鍵部分：

0000000000001129 <bar>: int bar(int c, int d) {1129: f3 0f 1e fa endbr64 112d: 55 push %rbp112e: 48 89 e5 mov %rsp,%rbp1131: 89 7d ec mov %edi,-0x14(%rbp)1134: 89 75 e8 mov %esi,-0x18(%rbp)int e = c + d;1137: 8b 55 ec mov -0x14(%rbp),%edx113a: 8b 45 e8 mov -0x18(%rbp),%eax113d: 01 d0 add %edx,%eax113f: 89 45 fc mov %eax,-0x4(%rbp)return e;1142: 8b 45 fc mov -0x4(%rbp),%eax }1145: 5d pop %rbp1146: c3 retq 0000000000001147 <foo>:int foo(int a, int b) {1147: f3 0f 1e fa endbr64 114b: 55 push %rbp114c: 48 89 e5 mov %rsp,%rbp114f: 48 83 ec 08 sub $0x8,%rsp1153: 89 7d fc mov %edi,-0x4(%rbp)1156: 89 75 f8 mov %esi,-0x8(%rbp)return bar(a, b);1159: 8b 55 f8 mov -0x8(%rbp),%edx115c: 8b 45 fc mov -0x4(%rbp),%eax115f: 89 d6 mov %edx,%esi1161: 89 c7 mov %eax,%edi1163: e8 c1 ff ff ff callq 1129 <bar> }1168: c9 leaveq 1169: c3 retq 000000000000116a <main>:int main(void) {116a: f3 0f 1e fa endbr64 116e: 55 push %rbp116f: 48 89 e5 mov %rsp,%rbpfoo(2, 3);1172: be 03 00 00 00 mov $0x3,%esi1177: bf 02 00 00 00 mov $0x2,%edi117c: e8 c6 ff ff ff callq 1147 <foo>return 0;1181: b8 00 00 00 00 mov $0x0,%eax }1186: 5d pop %rbp1187: c3 retq 1188: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1)118f: 00

esp 與 ebp

esp是堆棧指針　
ebp是基址指針

esp和ebp詳解

總結(jié)

以上是生活随笔為你收集整理的C语言函数调用过程的汇编分析（停更）的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。