[DiscordArchive] Hey, I'm trying to reverse a retail wow.exe 10.02 using IDA. Upon completion of analysis, 80% of the
[DiscordArchive] Hey, I'm trying to reverse a retail wow.exe 10.02 using IDA. Upon completion of analysis, 80% of the
Original source
Hey, I'm trying to reverse a retail wow.exe 10.02 using IDA. Upon completion of analysis, 80% of the code segment is filled with a set of bytes. This's my first time trying to reverse a x64 bin. How can I fix it?
![[Image: image.png?ex=690c08b1&is=690ab731&hm=24d...5b625fe94&]](https://cdn.discordapp.com/attachments/376074396915335170/1063827905672642580/image.png?ex=690c08b1&is=690ab731&hm=24dc96072fdfc0f01e2554f63af172cb18576db2c8ce1fbdbf253f65b625fe94&)
rektbyfaith
01-14-2023, 02:32 PM #1Archived author: MaxWilson • Posted: 2023-01-14T14:32:17.638000+00:00
Original source
Hey, I'm trying to reverse a retail wow.exe 10.02 using IDA. Upon completion of analysis, 80% of the code segment is filled with a set of bytes. This's my first time trying to reverse a x64 bin. How can I fix it?
Original source
there should be a folder where worldserver.exe is with crashlogs
rektbyfaith
01-14-2023, 02:43 PM #2Archived author: jackpoz • Posted: 2023-01-14T14:43:01.332000+00:00
Original source
there should be a folder where worldserver.exe is with crashlogs
Original source
Whay exactly are you attempting to reverse or label?
rektbyfaith
01-14-2023, 02:50 PM #3Archived author: M'Dic • Posted: 2023-01-14T14:50:18.945000+00:00
Original source
Whay exactly are you attempting to reverse or label?
Original source
Well, for example, to find the definition of some lua function or the processing of a specific server packet. When reversing wotlk x32, I did not encounter such problems <:kek:868839618898960414>
rektbyfaith
01-14-2023, 02:56 PM #4Archived author: MaxWilson • Posted: 2023-01-14T14:56:24.096000+00:00
Original source
Well, for example, to find the definition of some lua function or the processing of a specific server packet. When reversing wotlk x32, I did not encounter such problems <:kek:868839618898960414>
Original source
this is not because its x64
rektbyfaith
01-14-2023, 02:58 PM #5Archived author: Tea • Posted: 2023-01-14T14:58:21.413000+00:00
Original source
this is not because its x64
Original source
its because wow exe is now obfuscated and encrypted
rektbyfaith
01-14-2023, 02:58 PM #6Archived author: Tea • Posted: 2023-01-14T14:58:39.367000+00:00
Original source
its because wow exe is now obfuscated and encrypted
Original source
<:funeral:770403424692469803>
rektbyfaith
01-14-2023, 03:00 PM #7Archived author: MaxWilson • Posted: 2023-01-14T15:00:43.941000+00:00
Original source
<:funeral:770403424692469803>
Original source
And has anyone figured out what to do with it?
rektbyfaith
01-14-2023, 03:00 PM #8Archived author: MaxWilson • Posted: 2023-01-14T15:00:52.781000+00:00
Original source
And has anyone figured out what to do with it?
Original source
Nothing no one is going to share openly. It should of been noticible to begin with
rektbyfaith
01-14-2023, 03:02 PM #9Archived author: M'Dic • Posted: 2023-01-14T15:02:47.303000+00:00
Original source
Nothing no one is going to share openly. It should of been noticible to begin with
Original source
just dump exe from memory
rektbyfaith
01-14-2023, 03:04 PM #10Archived author: Tea • Posted: 2023-01-14T15:04:20.222000+00:00
Original source
just dump exe from memory