PE & x64 Foundations

x64 assembly essentials

asm
; Conceptual x64 function shape
push rbp
mov  rbp, rsp
sub  rsp, 20h
; ...
mov  rsp, rbp
pop  rbp
ret
  • RAX commonly carries return values.
  • RSP tracks the stack pointer.
  • RBP may be used as a frame pointer depending on compiler choices.
  • Calling conventions determine argument registers and stack usage.
Lesson complete?Use the next lesson to continue the learning path.