- Linux x86 run-time process manipulation by skape
- Runtime Process Infection by anonymous
- Chapter 8. Behind the process
- System V ABI Documentation
Type | Stack Cleanup | Parameters |
cdecl | caller | on stack in reverse order (right to left) |
stdcall | callee | on stack in reverse order (right to left) |
fastcall | callee | in registers (ECX, EDX) then on stack in reverse order (right to left) |
thiscall | callee | on stack; this pointer in ECX |
Microsoft x64 | caller | in registers (RCX, RDX, R8, R9) then on stack in reverse order (right to left) |
System V AMD64 ABI | caller | in registers (RDI, RSI, RDX, RCX, R8, R9) then on stack in reverse order (right to left) |