Crysis Console Echo Function

[disco]

Posted by Longpoke.






omg mudkips I just found the console printing function for Crysis. This whole time I was using a memory searcher and trying to trace up from there which was a big no-no

Anyways all I did was opened CrySystem.dll and searched for text referencing the word "console" and I eventually traced my way to this:

CrySystem.dll+749EB

365749EB  |. 6A 01          PUSH 1                                   ; /Arg2 = 00000001
365749ED  |. 57             PUSH EDI                                 ; |Arg1
365749EE  |. 8BCE           MOV ECX,ESI                              ; |
365749F0  |. E8 9BF0FFFF    CALL CrySyste.36573A90                   ; \CrySyste.36573A90

I dunno what the ECX argument is needed for, but it seems static so you can just use MOV ECX,02A4A8F0. If not, just put a breakpoint on the original function and see what is given to ECX.

So this is what my call looked like in the end:

PUSH 1
PUSH szString  ;  ASCII "$1$2W$2$5EE $5$7 COLORS"
MOV ECX,02A4A8F0
CALL CrySystem.dll+73A90

I posted this to save time for coders. You are free to use this in ANY hacks weather you release them or not, just give me credit. Or not, I really don't care.

-EDIT-
It's also a good idea to cancel out this entire block while printing your text because it will say unknown command, although it's wierd, it didn't do that for me at first..
CrySystem.dll+73EAE

36573EAE  |. 51             PUSH ECX
36573EAF  |. 68 A4856C36    PUSH CrySyste.366C85A4                   ;  ASCII "Unknown command: %s"
36573EB4  |. 53             PUSH EBX
36573EB5  |. E8 669CFFFF    CALL CrySyste.3656DB20
36573EBA  |. 83C4 0C        ADD ESP,0C

So the pseudo code will look sort of like this:

NopUnkownCommandFunction()
ConsolePrint(1,szString...)
RestoreUnkownCommandFunction()

-EDIT2-
You can also steal the incoming messages from CrySystem.dll+749EB and use them to toggle different hax


-EDIT3-
When you bind keys to your custom commands using the game engine, they will need to intercept from a different function which is located at CrySystem.dll+75230. The Param will be stored as a pointer to a string with the command in EDI just like the other function.