Containers??????

[crackgm]

Hello
I was trying to find out container pointer address, but I wasted whole day and once I found pointer which was working only with 3 bps, second time I tried to find it - i couldn't, pointer scan result is 0 everytime I try to scan...
I'm learning on Tibia 10.90
Can anyone help with this? :/
I don't mean "do it", just tell what am I doing wrong...

Thank you!!

[Brunocg]

I'll tell you what I gather from MSVC std library source code plus the help of a few guys here (Ty DarkStar and Stiju).

Tibia containers are stored in a red black tree (msvc std::map implementation) as mentioned by DarkStar here and Stiju here.

The container address, points to the address of a structure with the following format (Delphi syntax):

  TTreeEntry = record
    Proxy, Head: longword; //Head's node address
    Count: longint; //Tree's node count
  end;

The head points to a tree node, which is another structure with the following format:

  TTreeNode = record
    Left, Parent, Right: longword; //Address of Left, Parent and Right nodes.
    Color: byte; //Red or black color
    IsNil: boolean;
    ContainerData: record //Key/Value pair
      Key, Address: longword; //Key is the container index, Address is the container address.
    end;
  end;

The head is not the tree root, instead, head's parent is.
Now, with the root address (Head.Parent) in hands, you'll be able create a method to traverse the whole tree. All nodes uses the same structure as the head does. The leaf node points to the tree head. So, to check whether a leaf has been reached, you can either use the IsNil value, as well as compare the right and left with the head address.

[crackgm]

Thank you for your reply,
After reading posts in thread from link in your post I'm thinking if my Visual Studio Enterprise 2015 will work too. Im using C#.
Another problem is that...how to find address. Once I have found it, on second try I had 0 result from pointer scan...

[Brunocg]

Well, If I was able to do it with Delphi, Im pretty sure you can do it with C# or almost any other language.

Btw, the current container address is:

Containers_PointerAddress = $B7A2A4;

Check whether you are finding the right address.

I hope that helps.

[Blequi]

Thank you for your reply,
After reading posts in thread from link in your post I'm thinking if my Visual Studio Enterprise 2015 will work too. Im using C#.
Another problem is that...how to find address. Once I have found it, on second try I had 0 result from pointer scan...

How to find Container pointer:

1. Search for the number of opened containers:
   
   1. Close all containers and search for 0
   2. Open a single container and search for 1
   3. Open another container and search for 2
   4. Repeat this process until you find a single address
   
   
2. Pointer scan for this address with Max level = 1, increasing this number until you find a single pointer

[crackgm]

Ok so I've found single address which actually works - shows the number of opened containers, that's good. But when I'm looking for pointer I get result = 0...
(Tibia 10.90)
http://postimg.org/image/ct5qqlfen/
http://postimg.org/image/fk38euc5t/
http://postimg.org/image/pnpzit6s7/

I started from max level 1, up to 10... and nothing. What am I doing wrong?

[Blequi]

using Cheat Engine 6.4, with this config at pointer scan window


I get this result

[crackgm]

Ohh, I got it, so the pointer address to containers is this without any offset?
And this address is pointer to this structure?
C#

  struct TTreeEntry {
	  UInt32 Proxy, Head;
	  Int32 count;
  }

And how to "use" this addres with it?
like this:

  TTreeEntry tr = new TTreeEntry();
  tr.Head = 0x77A2A4;

OR like this:

  TTreeEntry *tr = 0x77A2A4;

Because I don't really get the idea how it's possible to get whole structure from one address :/





AAAAAAAnd another thing - I have to inject dll into tibia?

[Blequi]

Because I don't really get the idea how it's possible to get whole structure from one address :/

First, you must read about data structures like trees using nodes (not arrays) https://en.wikipedia.org/wiki/Binary_tree to understand the inner work of similar structures.

AAAAAAAnd another thing - I have to inject dll into tibia?

No, you don't need to inject into Tibia. If you understand how the std::map structure works to iterate through the nodes collection, doesn't matter if you are injected or not, because you can code it to work in both ways.

Advice: I would say it's a bit advanced for your current skills, so be prepared for the challenge.

[crackgm]

First, you must read about data structures like trees using nodes (not arrays) https://en.wikipedia.org/wiki/Binary_tree to understand the inner work of similar structures.



No, you don't need to inject into Tibia. If you understand how the std::map structure works to iterate through the nodes collection, doesn't matter if you are injected or not, because you can code it to work in both ways.

Advice: I would say it's a bit advanced for your current skills, so be prepared for the challenge.

Thank you
actually I know what is binary tree/blackred tree etc. I'm studying informatics etc, but I'm not good at reverse engineering :P