cdecl和stdcall调用约定的汇编代码对比

cdecl和stdcall调用约定的汇编代码对比

 

 

--- d:\projects\lab\call_type\call_type.cpp ------------------------------------

#include <stdio.h>

int __stdcall add(int a, int b)

{

013D13B0 push ebp

013D13B1 mov ebp,esp

013D13B3 sub esp,0C0h

013D13B9 push ebx

013D13BA push esi

013D13BB push edi

013D13BC lea edi,[ebp-0C0h]

013D13C2 mov ecx,30h

013D13C7 mov eax,0CCCCCCCCh

013D13CC rep stos dword ptr es:[edi]

return a+b;

013D13CE mov eax,dword ptr [a]

013D13D1 add eax,dword ptr [b]

}

013D13D4 pop edi

013D13D5 pop esi

013D13D6 pop ebx

013D13D7 mov esp,ebp

013D13D9 pop ebp

013D13DA ret 8

---------------

--- d:\projects\lab\call_type\call_type.cpp ------------------------------------

int main()

{

013D13F0 push ebp

013D13F1 mov ebp,esp

013D13F3 sub esp,0C0h

013D13F9 push ebx

013D13FA push esi

013D13FB push edi

013D13FC lea edi,[ebp-0C0h]

013D1402 mov ecx,30h

013D1407 mov eax,0CCCCCCCCh

013D140C rep stos dword ptr es:[edi]

printf("%d\n", add(1,2));

013D140E push 2

013D1410 push 1

013D1412 call add (13D1109h)

013D1417 mov esi,esp

013D1419 push eax

013D141A push offset string "%d\n" (13D573Ch)

013D141F call dword ptr [__imp__printf (13D82BCh)]

013D1425 add esp,8

013D1428 cmp esi,esp

013D142A call @ILT+315(__RTC_CheckEsp) (13D1140h)

return 0;

013D142F xor eax,eax

}

013D1431 pop edi

013D1432 pop esi

013D1433 pop ebx

013D1434 add esp,0C0h

013D143A cmp ebp,esp

013D143C call @ILT+315(__RTC_CheckEsp) (13D1140h)

013D1441 mov esp,ebp

013D1443 pop ebp

013D1444 ret

=====================================

--- d:\projects\lab\call_type\call_type.cpp ------------------------------------

#include <stdio.h>

int add(int a, int b)

{

00D513B0 push ebp

00D513B1 mov ebp,esp

00D513B3 sub esp,0C0h

00D513B9 push ebx

00D513BA push esi

00D513BB push edi

00D513BC lea edi,[ebp-0C0h]

00D513C2 mov ecx,30h

00D513C7 mov eax,0CCCCCCCCh

00D513CC rep stos dword ptr es:[edi]

return a+b;

00D513CE mov eax,dword ptr [a]

00D513D1 add eax,dword ptr [b]

}

00D513D4 pop edi

00D513D5 pop esi

00D513D6 pop ebx

00D513D7 mov esp,ebp

00D513D9 pop ebp

00D513DA ret

---------------------

--- d:\projects\lab\call_type\call_type.cpp ------------------------------------

int main()

{

00D513F0 push ebp

00D513F1 mov ebp,esp

00D513F3 sub esp,0C0h

00D513F9 push ebx

00D513FA push esi

00D513FB push edi

00D513FC lea edi,[ebp-0C0h]

00D51402 mov ecx,30h

00D51407 mov eax,0CCCCCCCCh

00D5140C rep stos dword ptr es:[edi]

printf("%d\n", add(1,2));

00D5140E push 2

00D51410 push 1

00D51412 call add (0D51096h)

00D51417 add esp,8

00D5141A mov esi,esp

00D5141C push eax

00D5141D push offset string "%d\n" (0D5573Ch)

00D51422 call dword ptr [__imp__printf (0D582BCh)]

00D51428 add esp,8

00D5142B cmp esi,esp

00D5142D call @ILT+315(__RTC_CheckEsp) (0D51140h)

return 0;

00D51432 xor eax,eax

}

00D51434 pop edi

00D51435 pop esi

00D51436 pop ebx

00D51437 add esp,0C0h

00D5143D cmp ebp,esp

00D5143F call @ILT+315(__RTC_CheckEsp) (0D51140h)

00D51444 mov esp,ebp

00D51446 pop ebp

00D51447 ret

---------------------------------------------------

我们的thunkCode如下：

const unsigned char thunkCodeTemplate[] = 
{ 
    0x55, // push ebp
    0x8B, 0xEC, // mov ebp, esp
    0xB8, 0x00, 0x00, 0x00, 0x00, // mov eax, [new_addr]
    0xB9, 0x00, 0x00, 0x00, 0x00, // mov ecx, [old_addr]
    0x51, // push ecx
    0xFF, 0xD0, // call eax
    0xC9, // leave
    0xC3 // ret
};