Add Rcon command directly in teknoMW3 source code 2.7.0.5

[benjahwest]

Hi,

I can't add my RCON command directly in the source code of Tekno.
In the source code, i find the hook for mw3 console, but this function is only called when a true command is entered.

Anybody have solution to add rcon command directly in source code of Teknogods ?

[hkKenshin]

Rcon commands usually would need parsing by the actual server. If that's the case, you'll need to reverse how the game finds and processes command.
If you're just talking about infinityscript, OnSay should help you a bit.

[benjahwest]

I'm very noob for reverse engineering and memory analysis, i just begin ! If you have an example somewhere for better hook than teknogods (Work for get text, even if this text entered in the console is not recognized by the game) ?

For InfinityScript, how i can include ? Where i can find source code for that ?

[hkKenshin]

I'm very noob for reverse engineering and memory analysis, i just begin ! If you have an example somewhere for better hook than teknogods (Work for get text, even if this text entered in the console is not recognized by the game) ?

For InfinityScript, how i can include ? Where i can find source code for that ?

What function are you hooking?

[benjahwest]

What function are you hooking?

Not me but Teknogods Team.

 

bool HookConsole()
{	VM("HookConsole");

	int addr = 0;
	__try  
	{
		DWORD oldp;
		int addr2 = 0x400000 + GetSectionPtr(0);
		VirtualProtect((void*)addr2, GetSectionSize(0), PAGE_EXECUTE_READWRITE, &oldp);

		addr = FindHexString(V("6A??E8????????8B44240C8A0883C40480F970740580F95075??8A480180F930"), 0);
		if (addr > 0)
		{
			hook_cdecl((void*)(addr), myConsoleFunc);
		}
		else
		{
			#ifdef DEBUGGING_ENABLED
			DebugOutValue("Error", 476);
			#endif
			return 0;
		}

	}
	__except ( EXCEPTION_EXECUTE_HANDLER )
	{
		#ifdef DEBUGGING_ENABLED
		DebugOutValue("Error", 477);
		#endif
		return 0;
	}
	return 1;

	VE();
}

[benjahwest]

Oops sorry, I understood "what function you hooked ?"
I'm french and my understanding of English is not perfect at all ^^

To answer your question, i don't know what function exactly, but what i want is to retrieve any strings when the user presses the "Enter" key in the RCON console. The above function works well, but is requested only when a true command is entered. Because i want to add a new RCON command, it is not good for me...

I managed to find a source code for infintyscript, but i would not use as a last resort. I prefer to use the code already available in Teknogods, and use the same kind of functions ...

Are there no not a memory address that allows to recover everything that happens in the console? I said "everything". (For the 1.4.382 version of course)

[hkKenshin]

>> Find the XRefs to that function
>> Reverse how it's called ( There must be a check to see if the command is "real" )
>> Disable it
>> Profit???

[benjahwest]

Profit ~

Sorry i need help again, do you know why strings appears as crypted, i use the debug function written in source.
And all parameters passed appears like that: ¡š±KFyƒ (=capture)

VMProtect ?

[Hitokiri~]

Don't think client DLL or server was protected either.
But yes, there's a method in VMProtect to encrypt registers before and after execution of functions.

Or simply you might be reading the incorrect pointer.

[SliceNDice]

What function?

[benjahwest]

In the console function.