SysV: rdi,rsi,rdx,rcx,r8,r9 | Win64: rcx,rdx,r8,r9; 128-byte shadow space
push rbp; mov rbp,rsp; sub rsp,N; ... ; leave; ret
call foo@PLT → resolver → GOT[foo] patched to direct address