Reversing Diablo3.exe

[dowigr]

Has anybody had problems reversing Dialbo3.exe with IDA? I have not downloaded the game client yet, and am wondering if anybody has had problems with the RAM and process scans Bilz is doing while you are reversing?
I heard rumors that they are using Warden for diablo3 now.

Please share your experience reversing with IDA.

d

[Sychotix]

Don't you typically not have the game running (at least not running like normal) when reversing with IDA/Ollydbg?

[dowigr]

well yeah...very true! You wouldn't have the game client running while IDA is reversing. I guess I am just getting paranoid in my age.

Thanks for the pwn

[Valtharak]

+ you can debug using the emulator so theres no warden involve.

and i'm not sure that warden is even loaded on the beta.

also unless you hook D3 functions and modify the code, they don't really have anyway to match your injected code if it's private. Atleast it's how i understand warden

[CreditCraft]

I would think it is most certainly going to use Warden, if it doesnt already.

[Nesox]

You really don't have to worry for static reversing like you do with IDA.
If you are gonna debug it the only thing i've noticed is that it pops an assert if you try to login with a debugger attached.

[Muaziz]

I've been using WinDbg to debug the running game client code with no issues (other than the fact that there is some horribly inefficient code).

I can have WinDbg launch the app, or I can attach to it after I login. I've had no issues with doing either. I have not experienced the "assert" that Nesox mentioned in the previous post.

--Muaziz
D3Inferno.com

[Nesox]

I have not experienced the "assert" that Nesox mentioned in the previous post.

--Muaziz
D3Inferno.com

They removed it in the last patch i think.

[jeremie_bs]

They're surely using warden for diablo3 ...

[JordanD3]

Yup Warden is being used in my opinion.