cs2-dumper/src/analysis/buttons.rs

use std::collections::BTreeMap;

use anyhow::{Result, bail};

use log::debug;

use memflow::prelude::v1::*;

use pelite::pattern;
use pelite::pe64::{Pe, PeView};

use crate::source2::KeyButton;

pub type ButtonMap = BTreeMap<String, imem>;

pub fn buttons<P: Process + MemoryView>(process: &mut P) -> Result<ButtonMap> {
    let module = process.module_by_name("client.dll")?;

    let buf = process
        .read_raw(module.base, module.size as _)
        .data_part()?;

    let view = PeView::from_bytes(&buf)?;

    let mut save = [0; 2];

    if !view
        .scanner()
        .finds_code(pattern!("488b15${'} 4885d2 74? 488b02 4885c0"), &mut save)
    {
        bail!("outdated button list pattern");
    }

    read_buttons(process, &module, module.base + save[1])
}

fn read_buttons(
    mem: &mut impl MemoryView,
    module: &ModuleInfo,
    list_addr: Address,
) -> Result<ButtonMap> {
    let mut map = ButtonMap::new();

    let mut cur_button = Pointer64::<KeyButton>::from(mem.read_addr64(list_addr).data_part()?);

    while !cur_button.is_null() {
        let button = mem.read_ptr(cur_button).data_part()?;
        let name = mem.read_utf8(button.name.address(), 32).data_part()?;
        let rva = (cur_button.address() - module.base) + offset_of!(KeyButton.state) as imem;

        debug!(
            "found button: {} at {:#X} ({} + {:#X})",
            name,
            cur_button.to_umem() + offset_of!(KeyButton.state) as umem,
            module.name,
            rva
        );

        map.insert(name, rva);

        cur_button = button.next;
    }

    Ok(map)
}