1 year ago
#350137

Wonlf
dword ptr ss:[esp+0xA] Isn't it correct to get the syntax corresponding to the esp+0xA address?
If the address is like this
esp == 00000000
esp + 5 = 00000005
esp + A = 0000000A
00000005 can contain only one byte character.
Isn't it correct that only one byte of text can be included in 0000000A?
This syntax takes the value in esp+0x5 and compares it with 61.
There must be something in 00000005.
But why does the comment show a string when I got the esp+A address and put it in ecx?
Shouldn't ecx have an address corresponding to esp+A annotated or just one byte value corresponding to 0000000A?
assembly
memory
x86
cpu-word
dbg
0 Answers
Your Answer