I have an assignment and i tried solving it. However i can't seem to solve it, despite double checking everything and investing multiple hours.

My task is to reverse engineer the following functions to high-level C-code and determine the return value of f(1,2,3) enter image description here

THIS IS MY APPROACH enter image description here

THE PROBLEM f(1,2,3) can not be determined, because line 6 in f results in a jump to loc_56C, where g(2,3) is called. In line 14 [ebp+Ch]is used, however only 2 parameter are supplied for b (8 Byte), meaning we do not know what lies on that memory location (12 Byte above base pointer). As a result, the return value can not be determined

Is it true, that f(1,2,3) can not be determined?

  • call puts something on the stack too... – Paweł Łukasik May 9 at 19:36
  • maybe think like what will ebp+8 be when f is called like f(1,2,3) and on what condition g() would be called ? or may be cheat for the sake of learning put this in an assembly file assemble and singlestep :) – blabb May 9 at 20:02

The control flow of the above program goes in following order main -> f -> g -> f -> main

main calls f with 1,2,3.


Notice the push instructions and calling convention. f checks whether 1 == 0 (ebp - 8). The answer is no. So, it calls g. This is the major hint for you. I am sure you will be able to figure rest of it :-)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.