During a security assessment, which option is most accurate about Function calls in assembly?

The correct answer is function calls transfer control to a routine and usually use stack/register conventions. This matches the course topic 'Function calls in assembly' in Vulnerability Assessment & Reverse Engineering.