x86-64 汇编相关笔记(一)

梦康 2019-08-20 00:00:00 37

#include <stdio.h>

int main() {
    int a = 1;
    int b = 2;
    printf("%d",a+b);
    return 0;
}

编译下

gcc main.c -save-temps -o main
[vagrant@10 01]$ cat main.s
    .file    "main.c"
    .section    .rodata
.LC0:
    .string    "%d"
    .text
    .globl    main
    .type    main, @function
main:
.LFB0:
    .cfi_startproc
    pushq    %rbp
    .cfi_def_cfa_offset 16
    .cfi_offset 6, -16
    movq    %rsp, %rbp
    .cfi_def_cfa_register 6
    subq    $16, %rsp
    movl    $1, -4(%rbp)
    movl    $2, -8(%rbp)
    movl    -8(%rbp), %eax
    movl    -4(%rbp), %edx
    addl    %edx, %eax
    movl    %eax, %esi
    movl    $.LC0, %edi
    movl    $0, %eax
    call    printf
    movl    $0, %eax
    leave
    .cfi_def_cfa 7, 8
    ret
    .cfi_endproc
.LFE0:
    .size    main, .-main
    .ident    "GCC: (GNU) 4.8.5 20150623 (Red Hat 4.8.5-36)"
    .section    .note.GNU-stack,"",@progbits
objdump -d main.o

反汇编

[vagrant@10 01]$ objdump -d main.o

main.o:     文件格式 elf64-x86-64


Disassembly of section .text:

0000000000000000 <main>:
   0:    55                       push   %rbp
   1:    48 89 e5                 mov    %rsp,%rbp
   4:    48 83 ec 10              sub    $0x10,%rsp
   8:    c7 45 fc 01 00 00 00     movl   $0x1,-0x4(%rbp)
   f:    c7 45 f8 02 00 00 00     movl   $0x2,-0x8(%rbp)
  16:    8b 45 f8                 mov    -0x8(%rbp),%eax
  19:    8b 55 fc                 mov    -0x4(%rbp),%edx
  1c:    01 d0                    add    %edx,%eax
  1e:    89 c6                    mov    %eax,%esi
  20:    bf 00 00 00 00           mov    $0x0,%edi
  25:    b8 00 00 00 00           mov    $0x0,%eax
  2a:    e8 00 00 00 00           callq  2f <main+0x2f>
  2f:    b8 00 00 00 00           mov    $0x0,%eax
  34:    c9                       leaveq
  35:    c3                       retq
objdump -d main
[vagrant@10 01]$ objdump -d main

main:     文件格式 elf64-x86-64


Disassembly of section .init:

00000000004003e0 <_init>:
  4003e0:    48 83 ec 08              sub    $0x8,%rsp
  4003e4:    48 8b 05 0d 0c 20 00     mov    0x200c0d(%rip),%rax        # 600ff8 <_DYNAMIC+0x1d0>
  4003eb:    48 85 c0                 test   %rax,%rax
  4003ee:    74 05                    je     4003f5 <_init+0x15>
  4003f0:    e8 3b 00 00 00           callq  400430 <__gmon_start__@plt>
  4003f5:    48 83 c4 08              add    $0x8,%rsp
  4003f9:    c3                       retq

Disassembly of section .plt:

0000000000400400 <printf@plt-0x10>:
  400400:    ff 35 02 0c 20 00        pushq  0x200c02(%rip)        # 601008 <_GLOBAL_OFFSET_TABLE_+0x8>
  400406:    ff 25 04 0c 20 00        jmpq   *0x200c04(%rip)        # 601010 <_GLOBAL_OFFSET_TABLE_+0x10>
  40040c:    0f 1f 40 00              nopl   0x0(%rax)

0000000000400410 <printf@plt>:
  400410:    ff 25 02 0c 20 00        jmpq   *0x200c02(%rip)        # 601018 <_GLOBAL_OFFSET_TABLE_+0x18>
  400416:    68 00 00 00 00           pushq  $0x0
  40041b:    e9 e0 ff ff ff           jmpq   400400 <_init+0x20>

0000000000400420 <__libc_start_main@plt>:
  400420:    ff 25 fa 0b 20 00        jmpq   *0x200bfa(%rip)        # 601020 <_GLOBAL_OFFSET_TABLE_+0x20>
  400426:    68 01 00 00 00           pushq  $0x1
  40042b:    e9 d0 ff ff ff           jmpq   400400 <_init+0x20>

0000000000400430 <__gmon_start__@plt>:
  400430:    ff 25 f2 0b 20 00        jmpq   *0x200bf2(%rip)        # 601028 <_GLOBAL_OFFSET_TABLE_+0x28>
  400436:    68 02 00 00 00           pushq  $0x2
  40043b:    e9 c0 ff ff ff           jmpq   400400 <_init+0x20>

Disassembly of section .text:

0000000000400440 <_start>:
  400440:    31 ed                    xor    %ebp,%ebp
  400442:    49 89 d1                 mov    %rdx,%r9
  400445:    5e                       pop    %rsi
  400446:    48 89 e2                 mov    %rsp,%rdx
  400449:    48 83 e4 f0              and    $0xfffffffffffffff0,%rsp
  40044d:    50                       push   %rax
  40044e:    54                       push   %rsp
  40044f:    49 c7 c0 e0 05 40 00     mov    $0x4005e0,%r8
  400456:    48 c7 c1 70 05 40 00     mov    $0x400570,%rcx
  40045d:    48 c7 c7 2d 05 40 00     mov    $0x40052d,%rdi
  400464:    e8 b7 ff ff ff           callq  400420 <__libc_start_main@plt>
  400469:    f4                       hlt
  40046a:    66 0f 1f 44 00 00        nopw   0x0(%rax,%rax,1)

0000000000400470 <deregister_tm_clones>:
  400470:    b8 3f 10 60 00           mov    $0x60103f,%eax
  400475:    55                       push   %rbp
  400476:    48 2d 38 10 60 00        sub    $0x601038,%rax
  40047c:    48 83 f8 0e              cmp    $0xe,%rax
  400480:    48 89 e5                 mov    %rsp,%rbp
  400483:    77 02                    ja     400487 <deregister_tm_clones+0x17>
  400485:    5d                       pop    %rbp
  400486:    c3                       retq
  400487:    b8 00 00 00 00           mov    $0x0,%eax
  40048c:    48 85 c0                 test   %rax,%rax
  40048f:    74 f4                    je     400485 <deregister_tm_clones+0x15>
  400491:    5d                       pop    %rbp
  400492:    bf 38 10 60 00           mov    $0x601038,%edi
  400497:    ff e0                    jmpq   *%rax
  400499:    0f 1f 80 00 00 00 00     nopl   0x0(%rax)

00000000004004a0 <register_tm_clones>:
  4004a0:    b8 38 10 60 00           mov    $0x601038,%eax
  4004a5:    55                       push   %rbp
  4004a6:    48 2d 38 10 60 00        sub    $0x601038,%rax
  4004ac:    48 c1 f8 03              sar    $0x3,%rax
  4004b0:    48 89 e5                 mov    %rsp,%rbp
  4004b3:    48 89 c2                 mov    %rax,%rdx
  4004b6:    48 c1 ea 3f              shr    $0x3f,%rdx
  4004ba:    48 01 d0                 add    %rdx,%rax
  4004bd:    48 d1 f8                 sar    %rax
  4004c0:    75 02                    jne    4004c4 <register_tm_clones+0x24>
  4004c2:    5d                       pop    %rbp
  4004c3:    c3                       retq
  4004c4:    ba 00 00 00 00           mov    $0x0,%edx
  4004c9:    48 85 d2                 test   %rdx,%rdx
  4004cc:    74 f4                    je     4004c2 <register_tm_clones+0x22>
  4004ce:    5d                       pop    %rbp
  4004cf:    48 89 c6                 mov    %rax,%rsi
  4004d2:    bf 38 10 60 00           mov    $0x601038,%edi
  4004d7:    ff e2                    jmpq   *%rdx
  4004d9:    0f 1f 80 00 00 00 00     nopl   0x0(%rax)

00000000004004e0 <__do_global_dtors_aux>:
  4004e0:    80 3d 4d 0b 20 00 00     cmpb   $0x0,0x200b4d(%rip)        # 601034 <_edata>
  4004e7:    75 11                    jne    4004fa <__do_global_dtors_aux+0x1a>
  4004e9:    55                       push   %rbp
  4004ea:    48 89 e5                 mov    %rsp,%rbp
  4004ed:    e8 7e ff ff ff           callq  400470 <deregister_tm_clones>
  4004f2:    5d                       pop    %rbp
  4004f3:    c6 05 3a 0b 20 00 01     movb   $0x1,0x200b3a(%rip)        # 601034 <_edata>
  4004fa:    f3 c3                    repz retq
  4004fc:    0f 1f 40 00              nopl   0x0(%rax)

0000000000400500 <frame_dummy>:
  400500:    48 83 3d 18 09 20 00     cmpq   $0x0,0x200918(%rip)        # 600e20 <__JCR_END__>
  400507:    00
  400508:    74 1e                    je     400528 <frame_dummy+0x28>
  40050a:    b8 00 00 00 00           mov    $0x0,%eax
  40050f:    48 85 c0                 test   %rax,%rax
  400512:    74 14                    je     400528 <frame_dummy+0x28>
  400514:    55                       push   %rbp
  400515:    bf 20 0e 60 00           mov    $0x600e20,%edi
  40051a:    48 89 e5                 mov    %rsp,%rbp
  40051d:    ff d0                    callq  *%rax
  40051f:    5d                       pop    %rbp
  400520:    e9 7b ff ff ff           jmpq   4004a0 <register_tm_clones>
  400525:    0f 1f 00                 nopl   (%rax)
  400528:    e9 73 ff ff ff           jmpq   4004a0 <register_tm_clones>

000000000040052d <main>:
  40052d:    55                       push   %rbp
  40052e:    48 89 e5                 mov    %rsp,%rbp
  400531:    48 83 ec 10              sub    $0x10,%rsp
  400535:    c7 45 fc 01 00 00 00     movl   $0x1,-0x4(%rbp)
  40053c:    c7 45 f8 02 00 00 00     movl   $0x2,-0x8(%rbp)
  400543:    8b 45 f8                 mov    -0x8(%rbp),%eax
  400546:    8b 55 fc                 mov    -0x4(%rbp),%edx
  400549:    01 d0                    add    %edx,%eax
  40054b:    89 c6                    mov    %eax,%esi
  40054d:    bf 00 06 40 00           mov    $0x400600,%edi
  400552:    b8 00 00 00 00           mov    $0x0,%eax
  400557:    e8 b4 fe ff ff           callq  400410 <printf@plt>
  40055c:    b8 00 00 00 00           mov    $0x0,%eax
  400561:    c9                       leaveq
  400562:    c3                       retq
  400563:    66 2e 0f 1f 84 00 00     nopw   %cs:0x0(%rax,%rax,1)
  40056a:    00 00 00
  40056d:    0f 1f 00                 nopl   (%rax)

0000000000400570 <__libc_csu_init>:
  400570:    41 57                    push   %r15
  400572:    41 89 ff                 mov    %edi,%r15d
  400575:    41 56                    push   %r14
  400577:    49 89 f6                 mov    %rsi,%r14
  40057a:    41 55                    push   %r13
  40057c:    49 89 d5                 mov    %rdx,%r13
  40057f:    41 54                    push   %r12
  400581:    4c 8d 25 88 08 20 00     lea    0x200888(%rip),%r12        # 600e10 <__frame_dummy_init_array_entry>
  400588:    55                       push   %rbp
  400589:    48 8d 2d 88 08 20 00     lea    0x200888(%rip),%rbp        # 600e18 <__init_array_end>
  400590:    53                       push   %rbx
  400591:    4c 29 e5                 sub    %r12,%rbp
  400594:    31 db                    xor    %ebx,%ebx
  400596:    48 c1 fd 03              sar    $0x3,%rbp
  40059a:    48 83 ec 08              sub    $0x8,%rsp
  40059e:    e8 3d fe ff ff           callq  4003e0 <_init>
  4005a3:    48 85 ed                 test   %rbp,%rbp
  4005a6:    74 1e                    je     4005c6 <__libc_csu_init+0x56>
  4005a8:    0f 1f 84 00 00 00 00     nopl   0x0(%rax,%rax,1)
  4005af:    00
  4005b0:    4c 89 ea                 mov    %r13,%rdx
  4005b3:    4c 89 f6                 mov    %r14,%rsi
  4005b6:    44 89 ff                 mov    %r15d,%edi
  4005b9:    41 ff 14 dc              callq  *(%r12,%rbx,8)
  4005bd:    48 83 c3 01              add    $0x1,%rbx
  4005c1:    48 39 eb                 cmp    %rbp,%rbx
  4005c4:    75 ea                    jne    4005b0 <__libc_csu_init+0x40>
  4005c6:    48 83 c4 08              add    $0x8,%rsp
  4005ca:    5b                       pop    %rbx
  4005cb:    5d                       pop    %rbp
  4005cc:    41 5c                    pop    %r12
  4005ce:    41 5d                    pop    %r13
  4005d0:    41 5e                    pop    %r14
  4005d2:    41 5f                    pop    %r15
  4005d4:    c3                       retq
  4005d5:    90                       nop
  4005d6:    66 2e 0f 1f 84 00 00     nopw   %cs:0x0(%rax,%rax,1)
  4005dd:    00 00 00

00000000004005e0 <__libc_csu_fini>:
  4005e0:    f3 c3                    repz retq

Disassembly of section .fini:

00000000004005e4 <_fini>:
  4005e4:    48 83 ec 08              sub    $0x8,%rsp
  4005e8:    48 83 c4 08              add    $0x8,%rsp
  4005ec:    c3                       retq