#1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Dec 2006
    Posts
    21
    Rep Power
    0

    [x86 asm] PUSH of immediate address


    Consider the following output in OllyDbg

    Code:
    7743A4B8  /$ 68 FA993F77     PUSH ntdll.773F99FA
    As I understand it, the program pushes the value found at the address 0x773F99FA onto the stack.

    However, does it push a 8-, 16- or 32-bit value?
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Dec 2009
    Posts
    383
    Rep Power
    0
    I guess that simply depends on the processor's word size... like with (all?) other instructions
    Last edited by delnan; June 7th, 2010 at 10:39 AM.
  4. #3
  5. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2006
    Posts
    25
    Rep Power
    0
    In your case, since the address is 32-bit sized, your stack might be in 32-bits.

IMN logo majestic logo threadwatch logo seochat tools logo