0

When debugging with x64dbg I sometimes see mov ss:[address] 0xAA, I know that this means: move 0xAA into memory at specified address.

But what does

mov ds:[address] 0xAA

mean?

2

The ds means "data segment" register in x86 architecture, while ss states for "stack segment" register. You would probably want to read link for more comprehensive description. When you see

mov ds:[address], 0xAA,

it means "move 0xAA to address address in data segment", that is segment pointed by the current value of ds register. Similarly with every other segment register.

In x64 architecture segment registers are ignored.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.