When debugging with x64dbg I sometimes see mov ss:[address] 0xAA
, I know that this means: move 0xAA into memory at specified address.
But what does
mov ds:[address] 0xAA
mean?
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this communityThe ds
means "data segment" register in x86 architecture, while ss
states for "stack segment" register. You would probably want to read link for more comprehensive description. When you see
mov ds:[address], 0xAA,
it means "move 0xAA
to address address
in data segment", that is segment pointed by the current value of ds
register. Similarly with every other segment register.
In x64 architecture segment registers are ignored.