When debugging with x64dbg I sometimes see
mov ss:[address] 0xAA, I know that this means: move 0xAA into memory at specified address.
But what does
mov ds:[address] 0xAA
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.Sign up to join this community
ds means "data segment" register in x86 architecture, while
ss states for "stack segment" register. You would probably want to read link for more comprehensive description. When you see
mov ds:[address], 0xAA,
it means "move
0xAA to address
address in data segment", that is segment pointed by the current value of
ds register. Similarly with every other segment register.
In x64 architecture segment registers are ignored.