Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Learn lf2.exe from C
#3
Quote:So is that actually the process of allocation of data (variables and objects)? We just subtract the stack pointer?
Yes, we subtract the stack pointer.
Another reason is that we don't know if this function calls another function, so we subtract the stack pointer to prevent the local variables from ruining by the function called in this function.
[Image: cBEiqWK.png]

Quote:There ^; lea together with dword ptr ds seems to actually store the sum value of ecx + edx + 7A4 into ecx; not fetch data of that address (right?)

Right, so imul ecx,ecx,178 and lea ecx,dword ptr ds:[ecx+edx+7A4] means lea address_of_frame,dword ptr ds:[frame_id * 178 + file + 7A4]
[Image: tFAiqKZ.png]
Decompiled functions: [documented] Functions decompiled
Decompile lf2.exe project for documentation: https://github.com/xsoameix/lf2
Decompile lf2.exe project for implementation: https://github.com/xsoameix/openlf2
Once any function fully engineer reversed in documentation project, then we implement it in implementation project.

lf2 data structure: Updated spreadsheet, many changes made by o_g349/xsoameix, I have two different nick names.

A old project: lf2-MS
Reply
Thanks given by: A-Man


Messages In This Thread
Learn lf2.exe from C - by o_g349 - 08-23-2014, 06:22 AM
RE: Learn lf2.exe from C - by A-Man - 08-24-2014, 04:35 AM
RE: Learn lf2.exe from C - by o_g349 - 08-24-2014, 06:30 AM
RE: Learn lf2.exe from C - by A-Man - 08-24-2014, 08:27 AM
RE: Learn lf2.exe from C - by o_g349 - 08-24-2014, 11:01 AM
RE: Learn lf2.exe from C - by MH-LABEEB - 02-20-2015, 04:07 AM
RE: Learn lf2.exe from C - by A-Man - 02-20-2015, 04:34 AM
RE: Learn lf2.exe from C - by MH-LABEEB - 02-20-2015, 04:40 AM
RE: Learn lf2.exe from C - by Memento - 02-20-2015, 06:35 AM
RE: Learn lf2.exe from C - by A-Man - 02-20-2015, 07:23 AM
RE: Learn lf2.exe from C - by MH-LABEEB - 02-20-2015, 07:41 AM
RE: Learn lf2.exe from C - by o_g349 - 02-21-2015, 01:14 PM



Users browsing this thread: 1 Guest(s)