Each game object's .rdata starts with a header's static int[5]
{2000,2500,3000,4000,10000}: 261 blocks. config/eqgame/tus.txt maps
each block to the code referencing its own (non-pooled) strings and vtables.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
PROGRESSION/BRANCH/TEMPLATE parser over std::istringstream into nested
std::lists; 1.6 KB of parser code plus ~100 STL instances byte-exact.
ReadKeyword is NONMATCHING (block layout).
Findings: the client was compiled with /MT (Dinkumware locking code differs
without _MT). Tools: diff disassembles compiled bytes directly; pair
auto-annotates template/compiler-generated instances by unique byte match,
classifying std:: members as LIBRARY via undname and checking relocations
to tell ICF-folded twins apart.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Compile a probe of common Dinkumware instantiations and find byte-identical
copies in .text (relocations masked; every callee must itself be library/CRT
code). 255 functions reclassified from fn to lib. Known gap: some stringbuf
members (e.g. seekoff 0x40224b) differ slightly from the probe and remain fn.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Drop the names taken from an external offset header (functions and
globals), keeping only names the binary itself proves: _WinMain@16 from
the CRT entry call, and Class::Method names from the client's own log
strings. The six functions Ghidra missed stay in the map under neutral
FUN_ names, justified by vtable/pointer references. NAMES.md, README
and ROADMAP no longer point at third-party offset lists.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
- // FUNCTION: / GLOBAL: / LIBRARY: annotations in source name symbols, so
decompiling never needs edits to the shared symbols.txt
- check follows compiler-generated EH handlers into .text$x and verifies
string literals / float constants by content
- link rebuilds eqgame.exe from compiled objects with relocations resolved
through the map and checks the SHA1 (currently identical)
- Ghidra pseudo-C export script; docs/ROADMAP.md for the full-relink plan
- /GS confirmed; 0x401022-0x4013e1 (13 functions, spell casting particle
points) match byte-for-byte
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Seed names from the MacroQuest2 eqgame.h for the Oct 31 2005 10:33:37 build
(version-string address matches this binary), validated against function
starts, plus names proven by self-referencing log strings. Sources,
confidence and unconfirmed candidates in config/eqgame/NAMES.md.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
MSVC 7.1 (cl 13.10.3077) under Wine, PE/COFF matcher with relocation
verification, side-by-side diff, progress, Ghidra-seeded symbol map
(15,323 functions), and the first three matched functions (/O1).
Co-Authored-By: Claude Opus 5.5 <[email protected]>
SalastilandClaude Opus 5.5