[mac] 4.1.0 Build 13850 release w/debug info?

[Tanaris4]

So I fired up IDA to reverse this binary: http://dump.tanaris4.com/WoWBinaries/WoW410_13850.zip

And it seems a LOT of the functions have their name auto-populated in the functions list, and this has NEVER occurred before.

Anyone know why?

It's interesting to compare it to my 4.0.6 version, seems I'm spot on for some functions, and horribly incorrect in others.

Not sure if this is a fluke, bug, or what? Anyone have any ideas?

Edit: It's about 6MB larger than 4.0.6: http://dump.tanaris4.com/WoWBinaries/WoW406_13623.zip

Example list of the functions:

[TOM_RUS]

PTR builds compiled with different compiler options then live builds. Have you tried other PTR builds? Do they have such info as well?

[Tanaris4]

I've only tried one (the original 4.x option), and they had NO function names. Literally about 75% of the function names are populated...

Would it be helpful for me to post the entire list for people? Sucks it's mac vs. windows, but maybe a list could be helpful?

[sitnspinlock]

strange because I have been analyzing the same client as you (13850) enUS, however not with debug info, my subroutines are unnamed however.

I use IDA 5.5 im asusming you use the same? also, are you analyzing an enUS client like me?

but a function dump would be great

[MaiN]

strange because I have been analyzing the same client as you (13850) enUS, however not with debug info, my subroutines are unnamed however.

I use IDA 5.5 im asusming you use the same? also, are you analyzing an enUS client like me?

but a function dump would be great

For Mac too?
I downloaded yours Tanaris, and indeed I get the names as well. This is ****ing huge.

[Robske]

Sexy

Unfortunatly the pc version of this executable doesn't have the names, still a very very awesome and valuable source of information.

[sitnspinlock]

For Mac too?
I downloaded yours Tanaris, and indeed I get the names as well. This is ****ing huge.

no Im on windows, i guess I missed the part where he said he was on Mac :P

Im going to do a reanalysis of the client and see what happens ;p

[Tanaris4]

This is ridiculous, if only there was an easy way to port it for windows for you guys :/

I tried turbodiff and patchdiff in the past and it was pretty full of fail (which makes sense, things are quite different on a mac).

Most base functions are the same, but there are a LOT of inlined functions on mac, it's horrible irritating. You should see the IDA script I had to write to dump the descriptors vs. what you guys get :/

[Evieh]

TF2 Mac binaries also have function names & what not.

[JuJuBoSc]

This if fu****** awesome!

[Tanaris4]

Just posted the full list (tried to clean them up, didn't go so well )

4.1.0 (Build 13850) debug information released (mac) – 0x126A90C

[namreeb]

Posting in epic thread.

Edit: Incidentally, where is the Battle.Net stuff in the Mac client? Did you check that file, too? What about Warden modules, etc?

[sitnspinlock]

thanks for the list, much <3

ive been to make a few general comparisons for windows using the hex rays plugin, so ill post those up for windows users in a bit.

its not alot though =/

[Tanaris4]

Interesting...


---------- Post added at 04:39 PM ---------- Previous post was at 04:25 PM ----------

Is it possible to pull out the names of different dwords using something like PatchDiff? I can't get over how many of them are defined

[Nesox]

I was here to witness this epic thread.
****ing awesome! i think i jizzed in my pants.