Structure of UITree

Acronym · August 22, 2018, 2:03pm

Hello fellas,
I managed to re-write some of the example memory reader to C++ (repo was called optimat).
I managed to get the following result: 1a1cce10 1a2158c81a1cce70 1a2158501a1cceb0 1a2159181a1ccef0 1a2157b01a1c - Pastebin.com
The “names” are actually names of the types - not the objects themselves, I failed to extract these.

Basically, I managed to find the UITree PyObject, by enumerating for a type called UITree, which type is type. (Same as sanderling!)

Having that object, I am getting _childrenObjects from children (both are treated as Python Dictionaries).
Than, I preassume, that these are lists of PyObjects (more dictionaries, in fact…) and the loop strikes again - so I am getting _childrenObjects from children.

How, having these capabilities am I supposed to get values of certain stuff?
Like for example, If i wanted to read local, get nicknames and stuff.

Hopefully someoene will be willing to help,
Kind Regards,
Acronym.

Viir · August 22, 2018, 5:07pm

There is a guide about this:

Player names from the chat can be read like this:

github.com

Arcitectus/Sanderling/blob/7df1c20274687c198bb77dbd73e960282477493b/src/Sanderling/Sanderling.MemoryReading/Production/MemoryMeasurement/SictGbs/AuswertGbs.Window.Chat.Channel.cs#L95


      
          						FlagIcon.Color = FlagIcon.Color ?? childSprite?.Color;
          					}
          
          					return FlagIcon;
          				})
          				?.WhereNotDefault()
          				?.ToArrayIfNotEmpty();
          
          			return new ChatParticipantEntry(ListEntry)
          			{
          				NameLabel = ast.LargestLabelInSubtree().AsUIElementTextIfTextNotEmpty(),
          				StatusIcon = StatusIconSprite,
          				FlagIcon = SetFlagWithStateIcon,
          			};
          		}
          
          		override public void Berecne()
          		{
          			base.Berecne();
          
          			var AstMainContainer = base.AstMainContainer;

Acronym · August 22, 2018, 5:10pm

thats indeed what im trying to do - but there is no tp_name variable anywhere.

Viir · August 24, 2018, 3:09pm

I did some searching, and found the tp_name here:

github.com

Arcitectus/Sanderling/blob/06d196a66777bfd8313d6e36bc7f2925a2a7c840/src/Sanderling/Sanderling/MemoryReading/Python/PyType.cs#L26


      
          		readonly public string tp_name_Val;
          
          		public PyTypeObject(
          			Int64 BaseAddress,
          			IMemoryReader MemoryReader)
          			:
          			base(
          			BaseAddress,
          			MemoryReader)
          		{
          			tp_name = MemoryReader.ReadUInt32(BaseAddress + Offset_tp_name);
          
          			if (tp_name < int.MaxValue)
          			{
          				tp_name_Val = MemoryReader.ReadStringAsciiNullTerminated(tp_name.Value, 0x100);
          			}
          		}
          
          		/// <summary>
          		/// the enumerated set contains all addresses of Python Objects of the type with the given <paramref name="tp_name"/>.
          		///

Acronym · August 25, 2018, 7:40am

Yeah, I managed to find some stuff.
For reference:
directories have variables called “_name”. Enumarating through children objects (children is a dic which has _childrenObjects - which is a dic) allows to list names of immediate children of such an object. Than its as simple as enumerating through and traversing through the UITree