Cheat Engine

[marco0999]

I like to add the force feedback on games that don't support it.

To do this I was thinked to intercept when the game open some specific audio wav file (ex. collision.wav , damage.wav, connon.wav, etc..)

I have tried with a memory scanner to see when the audio file will load. Here a part of code:

[atom0s]

You'd be better off hooking the function (or creating a code cave within it) that loads the sounds and working from there than relying on scanning for memory allocations for the clips.

[marco0999]

Hi atom0s,

many thanks for your response

To be honest at the moment I don't have the skill to do it, I suppose what you suggest can be done better in c++ ? Is correct ?

Do you known is exist a sample code ready to use that do a similar thing ? So I can modify it as well.

Thanks !

[atom0s]

The term 'better' is honestly subjective here and ultimately depends on what you are comfortable with handling. Doing this in C++ can be easy for some, impossible for others for example. You can accomplish this completely in CE's auto assembler as well.

In C++ it's generally a bit easier since you are able to write all the actual logic in normal code, vs. having to write out the assembly for it by hand.

There are various examples on this site in the coding section showing how to write code caves and function hooks/patches with various libraries that can help get you started if you decide to go the C++ route though. But, any language that can access the Win32 API and can create a standard DLL can handle this.

[marco0999]

Hi atom0s,

Your response is useful.

For now I have understand that what I like to do is not easy expecially if there is no experience in game hacking in general.

Probably know what are the best tools can be a good start point.

I ask you, what are the best debugger, exe patcher, and other tools, that can be useful for this porpues.

In short I think (and for this I ask your suggest) these are the steps:

1) Debug the game and find all assembly points (in my case there are minumum 7-10 points) where I must put the jump to my external DLL that excucute the force feedback.
2) patch the exe to force the calls to my external dll for each points.
3) Create the dll in c++ or C# with the code that I need (to begin is sufficient a message 'jump 1' , 'jump 2' , etc..). If work I can replace it with FFB code.
4) Becouse the force feedback need to initialize and clear, I must add other 2 jumps to my dll when the game start and close, and this value must be keeped in a dll variable until the game will not close.

These steps are correct in theory ? Or a different approch is better ?

Thanks !

[atom0s]

I'd suggest finding the function that is actually playing the wave files and not where they are being loaded/stored in memory. Hook onto the function that is playing them and you can do all the work needed from there to deal with the feedback and such instead of trying to specifically monitor for the chunks in memory.

So for your list of steps:

1. - I'd avoid doing it that way, unless absolutely required. This is just more work than needs to be done to get something like this accomplished.

2. - This would need to be done, yes. If you can narrow down things to the single function, you would only need 1 patch then.

3. - For basics to get started, yea that's generally a simple way to ensure things are working and your stuff is being called.

4. - Not really needed. You can use bool checks in your code to tell if the initialization has happened yet, if not, do it and set the flag to true. When the DLL is unloaded/game is unloaded you can handle the cleanup as needed. That'll allow things to work on the fly whenever you want.

[marco0999]

Hi atom0s,

Your suggest open my eyes to this world that until some days ago seem impossible but now all make more sense.

About hook directly the function that play the wav, you have right that is the best solution, but If I hook directly this function is possible known what audio file play ?

Apart this, if you are in my place, what tools you would use (patcher, debugger, etc..) ?

Many thanks again !!

[atom0s]

It would depend on the function parameters that it expects. You would need to reverse the function and see how it's being called and what parameters it takes. In some cases, this may involve hooking more than one function though.

For example, in a simple case, the function may be defined as:

[marco0999]

Hi atom0s,

Thank to your help I think we have do a progress.

Here there is function that I suppose play the wav file (or begin to do it)