•[ebp-XXX] local variable
•[ebp+XXX] function parameter
•Mnemonic: first push
parameters (+, up ) then use local variables (-, down)
•
•push 0x427034
•Address of static/global variable. But more likely string
constant (db 0x427034)
•
•mov reg,[ebp-XXX]
•push reg ; local
variable
•…
•call func
•
•
•lea reg,[ebp-XXX]
•push reg ; address
of local variable
•…
•call func