Search⌘ K
AI Features
Home
Courses
Foundations of Linux ARM64: Debug, Disassemble, and Reverse

Summary of Code

Explore ARM64 function prologs, epilogs, and parameter passing in this summary lesson. Understand how to interpret disassembly output, access local variables, and verify backtraces to enhance your debugging skills.

We'll cover the following...

Here is a summary of the concepts we encountered in this course. Let’s start with function prologs and function epilogs.

Function prolog

The function prolog is composed of these instructions:

C++
stp   x29, x30, [sp,#-48]!
mov   x29, sp

Some code may omit stp if there are no nested calls inside:

C++
sub   sp, sp, #0x10

The function epilog

The function epilog is composed of these instructions:

C++
ldp   x29, x30, [sp],#48 
ret

Some code may omit to restore x29/x30 if there are no nested calls inside:

C++
add   sp, sp, #0x10
ret

Knowing the prolog can help identify ...