dword ptr ss:[esp+0xA] Isn't it correct to get the syntax corresponding to the esp+0xA address?

126 views Asked by At

If the address is like this

esp == 00000000

esp + 5 = 00000005

esp + A = 0000000A

00000005 can contain only one byte character.

Isn't it correct that only one byte of text can be included in 0000000A?

enter image description here
This syntax takes the value in esp+0x5 and compares it with 61.
There must be something in 00000005.

enter image description here
But why does the comment show a string when I got the esp+A address and put it in ecx?
Shouldn't ecx have an address corresponding to esp+A annotated or just one byte value corresponding to 0000000A?

0

There are 0 answers