assembly-arm
AArch64 and ARM assembly skill for reading and writing ARM assembly code. Use when reading GCC/Clang output for AArch64 or ARM Thumb targets, writing inline asm in C/C++, understanding the ARM ABI (AAPCS64/AAPCS), or debugging register and stack state on ARM hardware or QEMU. Activates on queries about AArch64 assembly, ARM Thumb, NEON/SVE SIMD, ARM calling convention, inline asm for ARM, or reading ARM disassembly.
How do I install this agent skill?
npx skills add https://github.com/mohitmishra786/low-level-dev-skills --skill assembly-armIs this agent skill safe to install?
- Gen Agent Trust Hubpass
This skill provides a technical reference and workflow for working with ARM and AArch64 assembly language. It includes common registers, instructions, and calling conventions, along with standard command-line tools for compilation and debugging. No security issues were detected.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
- Runlayerwarn
2/2 files flagged
What does this agent skill do?
ARM / AArch64 Assembly
Purpose
Guide agents through AArch64 (64-bit) and ARM (32-bit Thumb) assembly: registers, calling conventions, inline asm, and NEON/SVE SIMD patterns.
Triggers
- "How do I read ARM64 assembly output?"
- "What are the AArch64 registers and calling convention?"
- "How do I write inline asm for ARM?"
- "What is the difference between AArch64 and ARM Thumb?"
- "How do I use NEON intrinsics?"
Workflow
1. Generate ARM assembly
# AArch64 (native or cross-compile)
aarch64-linux-gnu-gcc -S -O2 foo.c -o foo.s
# 32-bit ARM Thumb
arm-linux-gnueabihf-gcc -S -O2 -mthumb foo.c -o foo.s
# From objdump
aarch64-linux-gnu-objdump -d -S prog
# From GDB on target
(gdb) disassemble /s main
2. AArch64 registers (AAPCS64)
| Register | Alias | Role |
|---|---|---|
x0–x7 | — | Arguments 1–8 and return values |
x8 | xr | Indirect result location (struct return) |
x9–x15 | — | Caller-saved temporaries |
x16–x17 | ip0, ip1 | Intra-procedure-call temporaries (used by linker) |
x18 | pr | Platform register (reserved on some OS) |
x19–x28 | — | Callee-saved |
x29 | fp | Frame pointer (callee-saved) |
x30 | lr | Link register (return address) |
sp | — | Stack pointer (must be 16-byte aligned at call) |
pc | — | Program counter (not directly accessible) |
xzr | wzr | Zero register (reads as 0, writes discarded) |
v0–v7 | q0–q7 | FP/SIMD args and return |
v8–v15 | — | Callee-saved SIMD (lower 64 bits only) |
v16–v31 | — | Caller-saved temporaries |
Width variants: x0 (64-bit), w0 (32-bit, zero-extends to 64), h0 (16), b0 (8).
3. AAPCS64 calling convention
Integer/pointer args: x0–x7
Float/SIMD args: v0–v7
Return: x0 (int), x0+x1 (128-bit), v0 (float/SIMD)
Callee-saved: x19–x28, x29 (fp), x30 (lr), v8–v15 (lower 64 bits)
Caller-saved: everything else
Stack must be 16-byte aligned at any bl or blr instruction.
4. Common AArch64 instructions
| Instruction | Effect |
|---|---|
mov x0, x1 | Copy register |
mov x0, #42 | Load immediate |
movz x0, #0x1234, lsl #16 | Move zero-extended with shift |
movk x0, #0xabcd | Move with keep (partial update) |
ldr x0, [x1] | Load 64-bit from address in x1 |
ldr x0, [x1, #8] | Load from x1+8 |
str x0, [x1, #8] | Store x0 to x1+8 |
ldp x0, x1, [sp, #16] | Load pair (two regs at once) |
stp x29, x30, [sp, #-16]! | Store pair, pre-decrement sp |
add x0, x1, x2 | x0 = x1 + x2 |
add x0, x1, #8 | x0 = x1 + 8 |
sub x0, x1, x2 | x0 = x1 - x2 |
mul x0, x1, x2 | x0 = x1 * x2 |
sdiv x0, x1, x2 | Signed divide |
udiv x0, x1, x2 | Unsigned divide |
cmp x0, x1 | Set flags for x0 - x1 |
cbz x0, label | Branch if x0 == 0 |
cbnz x0, label | Branch if x0 != 0 |
bl func | Branch with link (call) |
blr x0 | Branch with link to address in x0 |
ret | Return (branch to x30) |
ret x0 | Return to address in x0 |
adrp x0, symbol | PC-relative page address |
add x0, x0, :lo12:symbol | Low 12 bits of symbol offset |
5. Typical function prologue/epilogue
// Non-leaf function
stp x29, x30, [sp, #-32]! // save fp, lr; allocate 32 bytes
mov x29, sp // set frame pointer
stp x19, x20, [sp, #16] // save callee-saved registers
// ... body ...
ldp x19, x20, [sp, #16] // restore
ldp x29, x30, [sp], #32 // restore fp, lr; deallocate
ret
// Leaf function (no calls, no callee-saved regs needed)
// Can use red zone (no rsp adjustment) — but AArch64 has no red zone
sub sp, sp, #16 // allocate locals
// ... body ...
add sp, sp, #16
ret
6. Inline assembly (GCC/Clang)
// Barrier
__asm__ volatile ("dmb ish" ::: "memory");
// Load acquire
static inline int load_acquire(volatile int *p) {
int val;
__asm__ volatile ("ldar %w0, %1" : "=r"(val) : "Q"(*p));
return val;
}
// Store release
static inline void store_release(volatile int *p, int val) {
__asm__ volatile ("stlr %w1, %0" : "=Q"(*p) : "r"(val));
}
// Read system counter
static inline uint64_t read_cntvct(void) {
uint64_t val;
__asm__ volatile ("mrs %0, cntvct_el0" : "=r"(val));
return val;
}
AArch64-specific constraints:
"Q"— memory operand suitable for exclusive/acquire/release instructions"r"— any general-purpose register"w"— any FP/SIMD register
7. NEON SIMD intrinsics
#include <arm_neon.h>
// Add 4 floats at once
float32x4_t a = vld1q_f32(arr_a); // load 4 floats
float32x4_t b = vld1q_f32(arr_b);
float32x4_t c = vaddq_f32(a, b);
vst1q_f32(result, c);
// Horizontal sum
float32x4_t sum = vpaddq_f32(c, c);
sum = vpaddq_f32(sum, sum);
float total = vgetq_lane_f32(sum, 0);
Naming convention: v<op><q>_<type>
qsuffix: 128-bit (quad) vector_f32: float32,_s32: int32,_u8: uint8, etc.
8. Darwin vs Linux AArch64 ABI differences
| Aspect | Linux (AAPCS64) | Apple Darwin (arm64) |
|---|---|---|
| Stack alignment | 16 bytes at public interfaces | 16 bytes |
| Red zone | 128 bytes below SP | No red zone |
x18 register | Platform reserved (TLS) | Platform register (do not use) |
| Varargs | x0–x7, then stack | Same, but different objc_msgSend conventions |
| Name mangling | Itanium C++ ABI | Same + Apple blocks |
On macOS/iOS, avoid using x18; use _DARWIN_C_LEVEL headers for platform types.
9. AMX primer (Apple Silicon)
Apple Matrix coprocessor (AMX) is not exposed via public intrinsics. Access paths:
// Practical: Accelerate/vecLib uses AMX internally
#include <Accelerate/Accelerate.h>
// cblas_sgemm, vDSP_* dispatch to AMX on M-series
// Low-level: community-documented opcodes — not portable, avoid in production
Prefer Metal Performance Shaders or Accelerate for matrix workloads on Apple Silicon (skills/platform/apple-silicon).
10. 16KB page size on Apple M-series
macOS on Apple Silicon uses 16KB pages (not 4KB):
#include <unistd.h>
long page = sysconf(_SC_PAGESIZE); // 16384 on macOS arm64
// Align mmap and posix_memalign to page size
Code assuming PAGE_SIZE == 4096 may misalign buffers or fail mmap on macOS.
11. NEON → SVE2 migration hints
Porting checklist
├── Replace 128-bit fixed loops with svcnt*() strides on SVE hardware
├── Use predicates (svwhilelt) for tails instead of scalar epilogues
├── Guard SVE code with #ifdef __ARM_FEATURE_SVE
└── Keep NEON path for Apple M1–M3 (no SVE); use SVE2 on Graviton/M4+
See skills/platform/arm-sve for SVE intrinsics and auto-vectorization flags.
For a register reference, see references/reference.md.
Related skills
- Use
skills/low-level-programming/assembly-x86for x86-64 assembly - Use
skills/compilers/cross-gccfor cross-compilation toolchain - Use
skills/debuggers/gdbfor debugging ARM code with gdbserver - Use
skills/platform/arm-svefor SVE/SVE2 scalable vectors - Use
skills/platform/apple-siliconfor M-series unified memory and AMX
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/mohitmishra786/low-level-dev-skills/assembly-arm">View assembly-arm on skillZs</a>