Computer/Program Analysis

calling convention in Windows x64 binary

holycall 2015. 6. 19. 18:42

Visual Studio compiled programs use fastcall calling convention. 

Functions use RCX, RDX, R8, R9 first. 

After using them, functions use the stack. 

In variable argument functions such as printf, stack values are used. 


저작자표시 비영리 동일조건 (새창열림)