PDA

View Full Version : [APP/WIP] Halo 2 Third Person Hack



Skyline
July 31st, 2007, 08:30 PM
Updated August 11TH, 2007

Whoa! Massive update. Well seeing there are about 2 servers that have custom maps with only 1 person in each I decided to release the new version which has FOV for First Person :woop: (only for the default MP maps) <- I hope to change this in the future but for now it seems it is too difficult to figure out.

Images:

http://i207.photobucket.com/albums/bb62/TheSkyline13/program_ver_1.3.jpg

ScreenShots:

The MC in Third Person:
http://i207.photobucket.com/albums/bb62/TheSkyline13/00090copy.jpg

First Person FOV Before:
http://i207.photobucket.com/albums/bb62/TheSkyline13/00091copy.jpg
After:
http://i207.photobucket.com/albums/bb62/TheSkyline13/00092copy.jpg
Note: This was not taken on a widescreen resolution so the fov will be more then this which will actually be too far at times letting you see the end of the arm.

Video:

h0XNb5xluNM
I didn't have many songs so I used the first 2 I could find, one of which is from teekup.

Credits:

Bitterbanana for lots of help.
Patrickssj6 for help with my noob questions.
Conscars for testing/finding addresses with me.
&
Syuusuke - yes you tested this too.

Note: You will need Framework .Net 2.0
Link to Framework .Net 2.0: Here (http://www.microsoft.com/downloads/details.aspx?familyid=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en)

Download: Link (http://files.filefront.com/H2V+3P+++Beta+v13rar/;8286752;;/fileinfo.html)
Mirror: Link Thanks to Baturkin / Bacon (http://www.halonews.org/stuff/H2V_3P_-_Beta_v1.3.rar)

Updated: August 11th 2007 / Build 1.3

-Something many people doubted me about / couldn't figure out for themselves is Fov for First Person, I would have to agree it is/was quite hard to program/find, but it is included but for the Default multiplayer maps only.
-There are some know issues with the hotkeys (The on/off ones) but they should work fine unless you press them rapidly.
-Do not keep Third Person enabled otherwise it will crash the game if you exit / turn it on when not in a server so remember this.

Update(Old): August 1st 2007 / Build 1.2

-No longer creates it's own process for reading so the error message should not be displayed.
-Along with that the directory is no longer needed (Just plug and play?).

Con
July 31st, 2007, 09:34 PM
Like I said, you fucking win :awesome:

Pooky
July 31st, 2007, 09:37 PM
Awesome. I'll definitely be using this, or an improved version of this, when I get H2V.

leorimolo
July 31st, 2007, 09:44 PM
I love the FoV hack out of the whole app.... very nice job

Bossniak
July 31st, 2007, 09:57 PM
Nice.

But I can't get it to work. When I try and open the program it says invalid directory. But my halo2 is in the same spot as the directory in the program. D:

randreach454
July 31st, 2007, 09:58 PM
works like a charm, cept when you use vehics, very nice!
edit: killer, put the fov hack program IN your h2 directory, i had that error first time too..

Limited
July 31st, 2007, 10:00 PM
Why cant you just hook it to the halo2.exe process? Is it because you didnt find the base address (address always changes?)

Cant you just do halo2.exe + 36041 < address and get it that way?

Bossniak
July 31st, 2007, 10:06 PM
I put it in my directory and still gives me the error. Directory is invalid.

Skyline
July 31st, 2007, 10:07 PM
Nice.

But I can't get it to work. When I try and open the program it says invalid directory. But my halo2 is in the same spot as the directory in the program. D:
Ya that's partically my fault I'll code that differently next build. Try pressing the "..." button and setting the directory.

Why cant you just hook it to the halo2.exe process? Is it because you didnt find the base address (address always changes?)

Cant you just do halo2.exe + 36041 < address and get it that way?
See that's partially because visual basic is limited and maybe I just don't know how but I can't seem to get it to transmit the same data as it would if I created it as a new process it has more options; such as module which gets the main module (halo2.exe).

Limited
July 31st, 2007, 10:10 PM
Ya that's partically my fault I'll code that differently next build.

See that's partially because visual basic is limited and maybe I just don't know how but I can't seem to get it to transmit the same data as it would if I created it as a new process it has more options; such as module which gets the main module (halo2.exe).
Hmm, I heard VB6 had problems with vista but I thought VB.net was good =\

I would try but I dont have halo 2 yet :( pats on holidays too =\

You got msn/aim/xfire :O?

halo2poo
July 31st, 2007, 10:20 PM
Finally! A camera mod for H2V! Sweet dude!

Bossniak
July 31st, 2007, 10:22 PM
I tried reseting directory by clicking the *...* still nothing. Ah well I'll wait for next build I guess. :)

halo2poo
July 31st, 2007, 10:35 PM
Hmmm it doesn't work for me either. The program runs but I can't go in third person mode or change the FOV.

Wait do you have to have weapons?

Stealth
July 31st, 2007, 10:44 PM
I might download it, but it'd be nice if it wasn't so bugy, but I think it fits in with H2V. :p

Dr Dmoney
July 31st, 2007, 10:46 PM
I keep getting an error from .net Framework. I have got the newest version.

It states:
Unhandled exception has occurred in your app. If you click Continue the app will ignore this error and attempt to continue. If you Quit, the app will close.
Conversion from string ""to type 'Double' is not Valid

Then I went to details and this popped up.


See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.InvalidCastException: Conversion from string "" to type 'Double' is not valid. ---> System.FormatException: Input string was not in a correct format.
at Microsoft.VisualBasic.CompilerServices.Conversions .ParseDouble(String Value, NumberFormatInfo NumberFormat)
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
--- End of inner exception stack trace ---
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
at Skyline.Form1.Set_FoV_third()
at Skyline.Form1.Timer1_Tick(Object sender, EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndPr oc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll
----------------------------------------
Halo 2 Third Person - Beta
Assembly Version: 1.0.0.0
Win32 Version: 1.0.0.0
CodeBase: file:///D:/Programs/Microsoft%20Games/Halo%202/Halo%202%20Third%20Person%20-%20Beta.exe
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 8.0.0.0
Win32 Version: 8.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Runtime.Remoting
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

I put the program in my Halo 2 folder, but it is in a different directory than what it would be by default. .

Warningshot3
July 31st, 2007, 10:53 PM
well it works for me and im on xp. the worthog is fun when i hit 1st person mode.

halo2poo
July 31st, 2007, 10:58 PM
well it works for me and im on xp. the worthog is fun when i hit 1st person mode.

Stop making me feel bad that I can't use it yet. :mad: You make me wanna use the warthog in 1st person mode.

Dr Dmoney
July 31st, 2007, 11:13 PM
I get it to run now without that error, but Halo 2 crashes all the time.

Dr Dmoney
July 31st, 2007, 11:15 PM
halo 2 crashes after 5 seconds of loading...

wannabeapilot
July 31st, 2007, 11:19 PM
any screenshots?

Warningshot3
July 31st, 2007, 11:23 PM
http://img292.imageshack.us/img292/9246/lol3phaloxp0.jpg

ty Stealth and Limited.

Stealth
July 31st, 2007, 11:45 PM
>.>
check the IMG tag coding (http://www.h2vista.net/forums/misc.php?do=bbcode#imgcode).

edit | >.> nvm, you copyed and pasted the wrong link. try copying the address in the "Direct link to image" text box.
like this.


http://img510.imageshack.us/img510/2567/server1openedoa8.gif
http://img510.imageshack.us/img510/2567/server1openedoa8.gif

not the one above it that says "Show image to friends"

Limited
July 31st, 2007, 11:46 PM
Warningshot3 its because that isnt the direct link to image :P When you uploaded it get the link at the very bottom of the page :P Under the one you posted

Trinx
July 31st, 2007, 11:47 PM
http://img160.imageshack.us/img160/9050/h2vfpvehicleos6.jpg

http://img227.imageshack.us/img227/4064/h2v3phw0.png

and


http://img160.imageshack.us/img160/6642/h2vfpvehicle2lt1.jpg

Medium, 4xAA on 800 x 600.

halo2poo
July 31st, 2007, 11:50 PM
Now I REALLY want it to work now. Do you put the trainer in the halo 2 directory or something?

Warningshot3
July 31st, 2007, 11:54 PM
Try the gunner. get a hog, get on the turret, hit 1st person and fire. the camera spins around. lol

Yes you can put the "Halo 2 Third Person - Beta.exe" in the same folder as halo2 but not needed. there is shortcut keys so you dont need to alt + tab all the time.

Page up to set 3rd person
Page down to set 1st person

Numpad 8 and 2 to change the height of the camera

Con
August 1st, 2007, 12:02 AM
Now I REALLY want it to work now. Do you put the trainer in the halo 2 directory or something?
Mine's on the desktop. I start the application, then I start halo.

halo2poo
August 1st, 2007, 12:09 AM
I start the program then halo 2 but the program still doesn't work.

Dr Dmoney
August 1st, 2007, 12:11 AM
I can't get it to work, every time I try Halo 2 Crashes.

Warningshot3
August 1st, 2007, 12:15 AM
"Note: You will need Framework .Net 2.0"

do you have it?

could ppl who have vista and have it working post what stuff they have on their computers so, maybe its something they dont have or something they do have.

I have.

Microsoft .NET Framework 1.1
Microsoft .NET Framework Hotfix (kb928366)
Microsoft .NET Framework 2.0
Microsoft Kernel-mode driver framework feature pack 1.1
Microsoft User-Mode Driver Framework feature pack 1.0
Microsoft Visual C++ 2005 Redistributable
And alot of Updates for xp.

halo2poo
August 1st, 2007, 12:31 AM
How do I check if I have it?

Warningshot3
August 1st, 2007, 12:34 AM
Look at the installed programs list. like where you goto to uninstall a game or whatever.

halo2poo
August 1st, 2007, 12:37 AM
Look at the installed programs list. like where you goto to uninstall a game or whatever.
Yes I have .net framework 2.0

Dr Dmoney
August 1st, 2007, 12:37 AM
yeah, I have it, could it be an error with 64x verson of windows vista.

Limited
August 1st, 2007, 12:39 AM
Look at the installed programs list. like where you goto to uninstall a game or whatever.The program runs fine, so it isnt any thing your think it is.

Its to do with the memory address, just isnt working right for all people. Maybe theres a pointer instead and they havent found the end of it :P

Con
August 1st, 2007, 01:07 AM
No, it's not a pointer. The program is just buggy as this point.

JackRabbit72380
August 1st, 2007, 07:00 AM
Can someone help?
Im running windows vista ultamate 64 bit the most complet version of windows.

This app wont work for me no matter what I do halo2 crashes. &
I cant find a microsoft .NETFramework 2.0 installer for Vistax64bit systems
This is frustrating me alot. I'd Realy like to use this application any help from any0ne would be great thanx.

Skyline
August 1st, 2007, 08:38 AM
************** Exception Text **************
System.InvalidCastException: Conversion from string "" to type 'Double' is not valid. ---> System.FormatException: Input string was not in a correct format.
at Microsoft.VisualBasic.CompilerServices.Conversions .ParseDouble(String Value, NumberFormatInfo NumberFormat)
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
--- End of inner exception stack trace ---
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
at Skyline.Form1.Set_FoV_third()
at Skyline.Form1.Timer1_Tick(Object sender, EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndPr oc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)



For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

I put the program in my Halo 2 folder, but it is in a different directory than what it would be by default. .

This looks like it is caused because it isn't getting the base address which code be caused by the directory not being set right. "String to double"


The program runs fine, so it isnt any thing your think it is.

Its to do with the memory address, just isnt working right for all people. Maybe theres a pointer instead and they havent found the end of it :P
It doesn't have a pointer. I spent the last month using the same address without it changing even Conscars used it for a while.


No, im not sure why it was coded in VB in the first place. but i have looked at the source and its ok for beta code. i like this hack (no player advantages like trainers) but seriously its alittle slopy. im thinking it isant exactly in the code but the way it is packaged. you should make a dll (the hax) then make the program an injector. thats how i used to make hax (in C#) and it was alot faster
Yes indeed it is sloppy, I had an error with visual studios where I can't get it to create a new program so I had to use one of my existing programs as a project. It's also been a few weeks since I worked on it very much and VB is all I know right now.

Wakeboy1337
August 1st, 2007, 09:26 AM
OH HELL YES!

Skyline FTW!

CrippieBoy
August 1st, 2007, 10:17 AM
works great, i just put the exe on my desktop,the zoom dosnt work but i can live without it... great job!

Skyline
August 1st, 2007, 10:44 AM
First Post Updated August 1st 2007

This should fix most of your problems, instead of storing the directory in the program it stores it in the .txt file found in the new download link. Just keep the .txt file in the same folder as the .exe file and it should work fine. Let me know if this fixes your problem.

Enigma
August 1st, 2007, 11:05 AM
Very nice, works great for me.

Ki11a_FTW
August 1st, 2007, 11:24 AM
Sweet!


I remember you pwning me with all these hacks online :fail:.

+rep!

Skyline
August 1st, 2007, 11:42 AM
Sweet!


I remember you pwning me with all these hacks online :fail:.

+rep!
No lol, I was in a tank that time :V.

Bossniak
August 1st, 2007, 11:46 AM
Still can't get it to work. Same error message.

Skyline
August 1st, 2007, 11:49 AM
Your running windows vista right? If UAC is on turn it off and try running as admin. Do you have aim?

Fix to Killers problem: Run as admin (if you have UAC on).

Bossniak
August 1st, 2007, 12:04 PM
Haha, thanks skyline! :D

JackRabbit72380
August 1st, 2007, 12:48 PM
Still can't get it to work. Same error message.Same hear Still no luck & Microsoft.Net Framework Is part of the X64 Vista Os
I foundout something weard.
I can Download .Net Fw for x64 bit system's but its part of my Os. Um Wtf
Why is thare even a download ? but u dont have to anser that im just wanting to get the 3pView working.

Microsoft .NET Framework Version 2.0 Redistributable Package (x64)
http://www.microsoft.com/downloads/thankyou.aspx?familyId=b44a0000-acf8-4fa1-affb-40e78d788b00&displayLang=en

Skyline
August 1st, 2007, 12:54 PM
Same hear Still no luck & Microsoft.Net Framework Is part of the X64 Vista Os
I foundout something weard.
I can Download .Net Fw for x64 bit system's but its part of my Os. Um Wtf
Why is thare even a download ? but u dont have to anser that im just wanting to get the 3pView working.

Microsoft .NET Framework Version 2.0 Redistributable Package (x64)
http://www.microsoft.com/downloads/thankyou.aspx?familyId=b44a0000-acf8-4fa1-affb-40e78d788b00&displayLang=en
What error does it bring up for you?

halo2poo
August 1st, 2007, 01:31 PM
I still get an error too when I start up the program. It says "The procedure entry point RegGetValueA could not be located in the dynamic link library ADVAPI32.dll."

Limited
August 1st, 2007, 01:32 PM
^ API problems, ones he declared, .NET framework problems perhaps

halo2poo
August 1st, 2007, 01:35 PM
So what should I do?

JackRabbit72380
August 1st, 2007, 02:07 PM
Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314
Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409
----------------------------------------------------------
Idk How to say this but I'll Try...
H2V may be instaled in the program files (x86) folder directory on x64 bit systems and "not in the program files folder" like xp.

The Program Files (x86) folder is ware v64 installs the 32bitapps
and buy defalt the halo2 installer installs H2V in the Program files (x86) Microsoft Games folder Directory.

I However have done a custom installation on my 64 bit system and have instaled H2V in the reguler Program Files/Microsoft Games. Directory.

Skyline
August 1st, 2007, 02:13 PM
I still get an error too when I start up the program. It says "The procedure entry point RegGetValueA could not be located in the dynamic link library ADVAPI32.dll."

Are you on windows XP?


Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314
Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409


When does this error happen?

halo2poo
August 1st, 2007, 02:14 PM
Yes, I'm on xp.

Dr Dmoney
August 1st, 2007, 02:15 PM
Yeah, I still get a problem. I start the program, Halo 2 boots up and crashes during loading. The error message states:



Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314

The only time I get Halo 2 and the progam to run at the same time is when I first Start halo 2 and i am in a game and the start the program, the program makes my game flicker all the time but no view changes.

I have Framework .net 2.0
64bit Vista Ultimate
Directory is located at: D:\Programs\Microsoft Games\Halo 2\halo2.exe
I have try to run as Admin, and Back Compatibility Mode
I have try everything logical to try but Halo 2 keeps crashing. Any help would be great full...

Skyline
August 1st, 2007, 02:16 PM
After this error happens did you use the wow launcher to run halo 2 and try to use it?

Dr Dmoney
August 1st, 2007, 02:17 PM
Me and jackrabbit have a common thing. We both have the same error and say os. Meaning it could be a 64bit problem.

halo2poo
August 1st, 2007, 02:24 PM
After this error happens did you use the wow launcher to run halo 2 and try to use it?
Are you talking o Dr Dmoney or me?

Skyline
August 1st, 2007, 02:30 PM
You, that happens because some of the data is missing which is in the Vista version. When you run halo 2 it should still work. And Dmoney that would seem to be the case, I know there are some games such as Command and Conquer 3 that can't run on the 64 bit version of windows vista.

jngrow
August 1st, 2007, 02:35 PM
Don't know if it has been said or not, yet, but in MP, this is cheating.

JackRabbit72380
August 1st, 2007, 02:37 PM
So what are you saying ?
Are you saying for the first time ever my 64bit system is gona limit my halo creation. Are you gona beable to fix this ?
0_o & can someone post a link to the wow loader? idk what that is.

Skyline
August 1st, 2007, 02:42 PM
Ops, its the Wow loader not launcher :/. http://www.h2vista.net/forums/showthread.php?t=3542&highlight=source

This can't be really considered cheating, that's like saying everytime you get into a vehicle your cheating :/. Would it be cheating if I had a higher resolution then you; Widescreen?

Vicky
August 1st, 2007, 02:55 PM
3rd person hacks are cheats, you can look over things that 1st person cannot... so you could start nading before the other players is even able to see you. It's a cheat.
I hoped this wouldn't happen on h2v but aperently vista/h2v isn't that good after all :P

halo2poo
August 1st, 2007, 03:21 PM
Ops, its the Wow loader not launcher :/. http://www.h2vista.net/forums/showthread.php?t=3542&highlight=source

This can't be really considered cheating, that's like saying everytime you get into a vehicle your cheating :/. Would it be cheating if I had a higher resolution then you; Widescreen?

How do I use that?

Skyline
August 1st, 2007, 04:00 PM
3rd person hacks are cheats, you can look over things that 1st person cannot... so you could start nading before the other players is even able to see you. It's a cheat.
I hoped this wouldn't happen on h2v but aperently vista/h2v isn't that good after all :P
So, you can't zoom in when in 3p. There are advantages and disadvantages as well. Anyways I still have to find out how to move the camera left and right.


How do I use that?
OOOOO_O, you can't play halo 2 on XP at all unless you use that.

JackRabbit72380
August 1st, 2007, 04:21 PM
You, that happens because some of the data is missing which is in the Vista version. When you run halo 2 it should still work. And Dmoney that would seem to be the case, I know there are some games such as Command and Conquer 3 that can't run on the 64 bit version of windows vista.So are you sayin the app wont work on vistax64? Or what?

Skyline
August 1st, 2007, 04:26 PM
Well I don't know why it wouldn't work but I am trying to reprogram the way it gets the base address right now.

Bossniak
August 1st, 2007, 04:53 PM
I wish it wouldn't turn off every time I died. But that's why it's a beta! :D

It's fun using it while just messing around doing stunts and such. Nice work.

Vicky
August 1st, 2007, 05:01 PM
So, you can't zoom in when in 3p. There are advantages and disadvantages as well. Anyways I still have to find out how to move the camera left and right.

So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...

JackRabbit72380
August 1st, 2007, 05:15 PM
Ok thats great good luck!

Pooky
August 1st, 2007, 05:18 PM
So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...

You can't compare third person mode to a wallhack, that's just stupid. Halo CE isn't ruined in any way because people use third person, and a lot of people do. I never use it and still win consistently against people who do. The same thing goes for games that have it included.

Skyline
August 1st, 2007, 05:19 PM
So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...
So, do you see me making bots, theres no need, just plug in a controller :haw:.

Vicky
August 1st, 2007, 05:37 PM
Yeah that's pathetic :P

Skyline
August 1st, 2007, 06:57 PM
Ok rabbit try this: This :/ (http://img170.imageshack.us/img170/3479/programupdatedkr8.jpg)

Updated first post.

Dr Dmoney
August 1st, 2007, 11:22 PM
Ok rabbit try this: This :/ (http://img170.imageshack.us/img170/3479/programupdatedkr8.jpg)

Updated first post.


I imagine this goes for me too.. Yeah, it is actually worse. When I use it a 1000 error message comes up and says Halo 2 is not running. Also when I run halo 2 then the program halo 2 crashes. And states:


Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

JackRabbit72380
August 2nd, 2007, 12:41 AM
I imagine this goes for me too.. Yeah, it is actually worse. When I use it a 1000 error message comes up and says Halo 2 is not running. Also when I run halo 2 then the program halo 2 crashes. And states:


Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409
Same hear! the app works If I start H2V first. but then halo2 crashed:confused::eek:.:(:confused2:?

Dr Dmoney
August 2nd, 2007, 01:44 AM
Yeah, I can get the program and Halo 2 run at the same time but only while I am in game. The program make my screen flicker. What is happening is that ever few seconds it pull to 3rd person and back to 1st person, but you can't tell by the naked eye. I recorded it and and went frame by frame and I was in 3rd person for about .1 of a second as a time. Then it pushes back to 1st person. So that is why it flickers. This is the only way i can get it to run while Halo 2 in running. Every time I boot it up Halo 2 crashes when I am not inside a game.

Skyline
August 2nd, 2007, 01:38 PM
Ok,
1: Stop ripping the source code.
2: If it is so sloppy please make a better one.

Sorry Rabbit it must just be something with vista's 64 bit.

JackRabbit72380
August 2nd, 2007, 01:52 PM
I got a very sloppy 1p but no 3p view With the ghost and warthog but the game Crashes before I can see the mainmenu and then gives a bunch of erorrs

So whats the curent status on the program anyway?

Btw im useing an xbox3601337 controller idk if that matters of not.

Limited
August 2nd, 2007, 02:26 PM
I think i have figured out what this problem is. The game doesent have direct POV unlike halo CE. in english it means that you have to keep on reseting it back to 3rd person instead of just overwriting the default witch is 1st person. This is caused because we donot have all of the access addresses. :) also the way it is haxed is alittle slopy because it is set to all of the default.Well why dont we have full access to the address?


it means that you have to keep on reseting it back to 3rd person instead of just overwriting the default witch is 1st person. Theres LOTS of things in CE where you have to keep writing to the address, it doesnt make it harder to code

Skyline
August 2nd, 2007, 02:32 PM
Ya limited get on aim we can discuss this mb. Rabbit you can try to use it with out the controller but I don't think it will affect it. There are many things that don't even come close to halo 1 hacking, although there are some similarities.

stunt_man
August 2nd, 2007, 02:38 PM
Korn? Help? lol.


Don't know if it has been said or not, yet, but in MP, this is cheating.Prude.


So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...What's my future? You can tell the future, right?

A little thirdperson hack is nothing compared to a wallhack/aimbot. On top of that, if those were to be released, Microsoft/Bungie/Hired Gun/GFWL/Whoever will be on top of it, I'm sure.

Besides, the only thing I want to use this for is the FOV. I don't care at all for thirdperson shenanigans, I find it too hard to play like that (which kind of eliminates the purpose of using it to cheat). Also, Skyline, would it be possible to make it so the app remembers settings? With no hotkey to change the FOV, I'm finding it annoying to have to load up Halo 2, open your hack, and change the settings everytime I want to play. Just a suggestion. I know bitterbanana was able to do this with his CE hack...

Good job, I can't wait to see this in its complete form!

EDIT: WHOA, just realized the FOV changes only apply to vehicles! Dude...

Skyline
August 2nd, 2007, 04:03 PM
Korn? Help? lol.

Prude.

What's my future? You can tell the future, right?

A little thirdperson hack is nothing compared to a wallhack/aimbot. On top of that, if those were to be released, Microsoft/Bungie/Hired Gun/GFWL/Whoever will be on top of it, I'm sure.

Besides, the only thing I want to use this for is the FOV. I don't care at all for thirdperson shenanigans, I find it too hard to play like that (which kind of eliminates the purpose of using it to cheat). Also, Skyline, would it be possible to make it so the app remembers settings? With no hotkey to change the FOV, I'm finding it annoying to have to load up Halo 2, open your hack, and change the settings everytime I want to play. Just a suggestion. I know bitterbanana was able to do this with his CE hack...

Good job, I can't wait to see this in its complete form!

EDIT: WHOA, just realized the FOV changes only apply to vehicles! Dude...

Yes I plan on this but first I would like to find the addresses for the position of the camera left/right and back/forth (3P fov simulates this). There is a seperate Fov for first person and third person. I managed to find the first person but it has a pointer and that pointer has a pointer etc, so it is harder to get. Third person did not have a pointer like many of it's other values. I've never really tried hacking halo 1 so I'm not too sure how it works on halo 1.

Anyways yes, since it's the fov for 3p it also works on vehicles. Pretty much right becide this address I found that you can also change the rotation speed (I remember someone complaining that the speed is lowered when you enter a vehicle) lol trust me it's better to have it slower then fast like halo 1 and have all kinds of troubles driving, the ghost mainly.

Kornman00
August 2nd, 2007, 05:22 PM
The camera shit has changed a bit from Halo 1, but it was for some cinematic effects. I'm sure I could easily port the Yelo Halo 2 Xbox director code to Vista but I have no intentions on doing so right now because Yelo H2V isn't being worked on right now.

Skyline
August 2nd, 2007, 05:28 PM
Yes, I'm talking about the third person view such as bitterbanana's program for halo 1 where it could move the camera in all directions.

Dr Dmoney
August 2nd, 2007, 07:16 PM
http://www.youtube.com/watch?v=Nmkz8gBKUVU
http://files.filefront.com/Halo+++Angleswmv/;8213430;;/fileinfo.html - for Higher Quality
When I get it to work, I only get this. The only way I can get it this way is when I am in game and then I start the program. The program doesn't menus or lobbys.

t3h m00kz
August 2nd, 2007, 07:50 PM
I'm totally gonna try this with the campaign, since Multiplayer doesn't work for XP yet. :<

Limited
August 2nd, 2007, 08:22 PM
http://www.youtube.com/watch?v=Nmkz8gBKUVU
http://files.filefront.com/Halo+++Angleswmv/;8213430;;/fileinfo.html - for Higher Quality
When I get it to work, I only get this. The only way I can get it this way is when I am in game and then I start the program. The program doesn't menus or lobbys.Flickers because of sloppy code :D

flibitijibibo
August 2nd, 2007, 09:08 PM
This is awesome right now. Because of GoW, I've gotten used to TPS. Will there be a way to move the camera left and right in later versions? To me, its easier to have the model off to one side.

Dr Dmoney
August 2nd, 2007, 09:10 PM
Flickers because of sloppy code :D

But that is all I can use. I can't get it to work like others. i can't get to 3rd person.

Skyline
August 3rd, 2007, 05:27 PM
But that is all I can use. I can't get it to work like others. i can't get to 3rd person.
Dmoney, it's not because it's a 64 bit version of vista, but it seems as though it doesn't work at all on Vista Ultimate. Kiwi has windows vista ultimate but in 32 bit, they must of done something different then the other versions of vista.

StankBacon
August 4th, 2007, 06:51 AM
good job :D




mirror because filefront blows.

http://www.halonews.org/stuff/Halo_2_Third_Beta_1.2.rar

Dr Dmoney
August 4th, 2007, 07:41 AM
Dmoney, it's not because it's a 64 bit version of vista, but it seems as though it doesn't work at all on Vista Ultimate. Kiwi has windows vista ultimate but in 32 bit, they must of done something different then the other versions of vista.

They must have, can't wait until you work out the kinks.

JackRabbit72380
August 4th, 2007, 12:47 PM
Yes windows vista ultamate has Windows bitlocker drive encryption.
The other windows vista versions dont have it.
It says on my windows vista ultamate box
Better protect your data against loss or theft with windows bitlocker drive encryption.
Maby this service is the cause idk? just thought i'd say that.

Also*
I just had a look at it.
It says...

BitLocker Drive Encryption Encrypts and Protects your data
BitLocker Drive Encryption helps prevent unauthorized access to any files stored on the volume shown

Below.You are able to use the comuter normally, but unauthorized users cannot read or use your files.

Skyline
August 4th, 2007, 01:50 PM
That sounds like it would cause it to stop working. Is there any way for you to turn it off for halo 2 or the application?

JackRabbit72380
August 4th, 2007, 05:53 PM
Its not even able to work on my system due to the way I have my hdd's partition'ed.

This is what it looks like to me.
http://i18.photobucket.com/albums/b108/jackrabbitlight/vvol.jpg

And this is what help says wen I click on the blue link.

mshelp://Help/?id=Microsoft.Windows.Resources.CollapseArrow Show all (mshelp:///)
mshelp://Help/?id=Microsoft.Windows.Resources.ExpandArrow Hide all (mshelp:///)

Set up your hard disk for BitLocker Drive Encryption


Before you can turn on BitLocker Drive Encryption you need to make sure that your computer's hard disk (mshelp://windows/?id=5a2fccaa-2424-4646-b571-97b557e2c87b#gtmt_hard_disk_def) has the following:

<LI class=listItem>At least two volumes (mshelp://windows/?id=df2c7238-4d51-40e7-97eb-21244c3fd130#gtmt_volume_def). If you create a new volume after you have already installed Windows, you will have to reinstall Windows before turning on BitLocker.
One volume is for the operating system drive (typically drive C) that BitLocker will encrypt, and one is for the active volume, which must remain unencrypted to start the computer. The size of the active volume must be at least 1.5 gigabytes (GB). Both partitions must be formatted with the NTFS file system (mshelp://windows/?id=561480ce-050b-4273-9d2a-809d76c93ac1#gtmt_ntfs_file_system_def).
Note
The terms partition and volume are often used interchangeably. On most computers, they are the same: one partition equals one volume. On larger computer systems, however, it is possible to have a single volume span several partitions. BitLocker installs on a simple volume, where one volume equals one partition.If you do not already have two partitions, you can use the BitLocker Drive Preparation Tool to help get your system ready for BitLocker by creating the required second partition.
If you are using Windows Vista Ultimate, you can download and install the BitLocker drive preparation tool from Ultimate Extras. For more information about getting Ultimate Extras, see How do I get Windows Ultimate Extras downloads and services? (mshelp://windows/?id=c6f1b6f2-c14b-4aa8-a12e-1de36da56649) Download and install the Ultimate extra called BitLocker and EFS enhancements. After you have installed this tool, type BitLocker into the Start menu search box, and then double-click BitLocker Drive Preparation Tool to run the tool. After the tool runs, you must restart your computer before turning on BitLocker.
If you are using Windows Vista Enterprise, you can get the BitLocker drive preparation tool through these standard support channels:

Microsoft Volume Licensing Services (http://go.microsoft.com/fwlink/?LinkId=85742)
Microsoft Services Premier Support (http://go.microsoft.com/fwlink/?LinkId=85743)Additional information about the BitLocker drive preparation tool is available in Knowledge base article KB# 930063 (http://go.microsoft.com/fwlink/?LinkId=85744).
If your computer meets these requirements, you can turn on BitLocker.

Dr Dmoney
August 4th, 2007, 10:14 PM
I also don't use bitlocker.

Con
August 5th, 2007, 10:48 AM
I don't see why bitlocker would cause the problem if it's protecting your files, not your ram.

Skyline
August 5th, 2007, 11:06 AM
It's not reading the ram when it exceptions, it's reading the module which is what exceptions.


Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033

bitterbanana
August 5th, 2007, 12:22 PM
It's not reading the ram when it exceptions, it's reading the module which is what exceptions.
Modules and processes are always loaded into ram so they can be quickly executed by the processor.

JackRabbit72380
August 5th, 2007, 05:00 PM
I did some more testing today with the app & I found some more weard bug's.
For some resion the app just dosent work at all sometimes but.
What I did is I start'ed the app wile I was in a custom mp map and messed with the settings a little bit.
Then I went in halo2 and got the weard glichy view.
Then I hit the winkey to get back to the desktop and exit'ed out of the app
Then I exited the map & wen I got to the main menu I relized that the hack or settings weare still in effect even though I exit'ed the 3pview.
In other words the hack stay'ed in efect untill I restarted halo2
But.. wen I went back into my map I found that my weapon's and the veachal's in the map weare invisable including the weapon I started with.
strange but true.
Im hopeing you will get the kinks out very badly lol! as I could realy use this app to test out weapons and more.
If only I could get the 3p view to work but I can't and the glich is so anoying gosh!

et_cg
August 5th, 2007, 07:16 PM
I can't use the application due to DEP (Data Execution Prevention). I've added the 3p program to the list, but Windows prevents me from adding Halo 2 to the list. :(

stunt_man
August 7th, 2007, 02:29 AM
How's this coming along? Worked out the FOV problem yet?

Patrickssj6
August 7th, 2007, 11:01 AM
How's this coming along? Worked out the FOV problem yet?
He confused something in ArtMoney.

He thought that ArtMoney searches for the offset when searching for pointers. It searches for the final value.

Limited
August 7th, 2007, 11:09 AM
I told him :P He said it wasnt a pointer, this is why Cheat engine > artmoney

Patrickssj6
August 7th, 2007, 11:18 AM
That explains why he suddenly used Cheat Engine again. XD

Skyline
August 7th, 2007, 11:24 AM
You misunderstood me

1- The fov for third person is NOT a pointer and neither are the addresses that change the view from third to first.

2- The fov for first person has a pointer and that is what I was looking for to add to this program.

and stuntman it is coming along.

Dr Dmoney
August 7th, 2007, 12:39 PM
I can't wait untill I will beable to use it. If you need help testing (for vista Ulrimate x64)it My aim is DrXmoney

stunt_man
August 7th, 2007, 05:57 PM
Cool, cool. You're going to be a hero if this works out, I hope you know that. ;)

Skyline
August 10th, 2007, 12:44 PM
Cool, cool. You're going to be a hero if this works out, I hope you know that. ;)

Well I'm still trying to get the FOV for 1p to work but I got a new layout for the program.

http://img364.imageshack.us/img364/786/blah2cv7.jpg

stunt_man
August 10th, 2007, 02:11 PM
Nice! Shortcut keys!

Rockin', man.

Patrickssj6
August 10th, 2007, 02:34 PM
No wai...even though my version is a bit older :D
http://img253.imageshack.us/img253/7158/awddwawdar2.png


Good job! :)

Limited
August 10th, 2007, 02:36 PM
Pointers in halo 2 is a bitch :( stupid anti cheat protection

Skyline
August 10th, 2007, 03:09 PM
I could release it by the end of today but it would only work for defualt maps until I can get it to work properly.

Edit: Yes you can set your own hotkey but since I'm not as leet as bitterbanana mine is alot simplier to code lol, you choose the button you want and set it but if its not there you have to go through the bytes to see which one you want. As you can see there is an LButton although I'm not sure if this is a button on the keyboard or for the controller.

http://img461.imageshack.us/img461/1503/hotkey2zf7.jpg

Syuusuke
August 10th, 2007, 11:04 PM
I'm not in the credits for all the times you sent me the app and it didn't work for me?

Bossniak
August 10th, 2007, 11:52 PM
I'm not in the credits for all the times you sent me the app and it didn't work for me?

You aren't important enough. :)

Anyway cant wait for newer version! :D

Dr Dmoney
August 11th, 2007, 12:54 AM
I hope this version will work for me.

Skyline
August 11th, 2007, 12:44 PM
Updated First Post!
Build 1.3 is released.


I hope this version will work for me.
This is highly unlikely seeing you never came on Aim or you gave me the wrong one but you can try :P.

Patrickssj6
August 11th, 2007, 12:45 PM
Really good stuff! :)

stunt_man
August 11th, 2007, 05:43 PM
I'm about to try this for myself!

Skyline
August 11th, 2007, 07:20 PM
I have a video I recorded not too long ago. I don't have very many songs so I put on the first 2 I found. Yes teekup you gave me this song.
h0XNb5xluNM

I am still working on changing the camera angles and such, bitterbanana guided me a bit here and I just need to find some pointers for it.

Dr Dmoney
August 11th, 2007, 08:00 PM
It seems to be a little better. I can only get it to work when I am not in a lobby or just loading the game. So I have to be in game. I get more flickering, but it is more of a back and forth in motion. I get this crash if I am in a lobby or loading the game.

Problem signature:
Problem Event Name: BEX
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Offset: 0039040a
Exception Code: c0000409
Exception Data: 00000000
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: ed9a
Additional Information 2: 905bac31ff5cdd17a85cdb788bee0b71
Additional Information 3: 33c6
Additional Information 4: 7f4776ff019f960de962c1c9b09f35d8

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409


Also to make sure: My aim is DrXmoney

I am on all the time. Tell me your name, please.

Roostervier
August 11th, 2007, 10:25 PM
That song is win, and it won't let me rep you D:

Ernegien
August 12th, 2007, 12:52 AM
FYI, you shouldn't need to find any pointers for camera editation. They should all be stored in static locations after the exe code segment. Yesterday I got a chance to look at the h2v disassembly and here's what I've found so far...

Perspective Pointer Address - 0x8A5288 (Holds pointer to a particular perspective function)
Example: poke address 0x8A5288 with data 0x00000000 to detach camera from biped, 0x81D64C00 for first person, 0xCFD94C00 for dead, 0xE4CF4C00 for scripted etc...

The code below is what should directly modify the 3rd camera array for Player 1...

.text:00482F6D mov eax, [esp+68h+var_40] ; get base address
.text:00482F71 movss xmm0, dword ptr [eax]
.text:00482F75 subss xmm0, dword_8BD4F0
.text:00482F7D comiss xmm0, xmm5
.text:00482F80 ja short loc_482FC0
.text:00482F82 test byte ptr [ebp+8], 1
.text:00482F86 jz short loc_482FB7
.text:00482F88 xor ecx, ecx
.text:00482F8A cmp CameraDefinitions[esi], cx
.text:00482F91 jle loc_4830EB
.text:00482F97 lea ebx, [ebx]
.text:00482F99
.text:00482F99 loc_482F99: ; CODE XREF: sub_482EEC+C4j
.text:00482F99 movsx eax, cx
.text:00482F9C add eax, eax ; calculate index (item number * 4)
.text:00482F9E add eax, eax
.text:00482FA0 add ecx, 1 ; next definition
.text:00482FA3 fld dword ptr [eax+edx] ; get data
.text:00482FA6 fstp dword ptr [eax+ebx] ; store data in 3rd camera array
.text:00482FA9 cmp cx, CameraDefinitions[esi]
.text:00482FB0 jl short loc_482F99
.text:00482FB2 jmp loc_4830EB


You will want to hook into 0x482FA3 if you plan on modifying the camera...do a quick lookup in the camera definitions table (based on the current registers ecx and esi) to determine what value its modifying, then substitute your own...

stunt_man
August 12th, 2007, 02:52 AM
Nice first post. And nice work, skyline, it works great! Could be better, though, don't give up on the next version!

Can't wait!

Skyline
August 12th, 2007, 12:51 PM
FYI, you shouldn't need to find any pointers for camera editation. They should all be stored in static locations after the exe code segment. Yesterday I got a chance to look at the h2v disassembly and here's what I've found so far...

Perspective Pointer Address - 0x8A5288 (Holds pointer to a particular perspective function)
Example: poke address 0x8A5288 with data 0x00000000 to detach camera from biped, 0x81D64C00 for first person, 0xCFD94C00 for dead, 0xE4CF4C00 for scripted etc...

The code below is what should directly modify the 3rd camera array for Player 1...

.text:00482F6D mov eax, [esp+68h+var_40] ; get base address
.text:00482F71 movss xmm0, dword ptr [eax]
.text:00482F75 subss xmm0, dword_8BD4F0
.text:00482F7D comiss xmm0, xmm5
.text:00482F80 ja short loc_482FC0
.text:00482F82 test byte ptr [ebp+8], 1
.text:00482F86 jz short loc_482FB7
.text:00482F88 xor ecx, ecx
.text:00482F8A cmp CameraDefinitions[esi], cx
.text:00482F91 jle loc_4830EB
.text:00482F97 lea ebx, [ebx]
.text:00482F99
.text:00482F99 loc_482F99: ; CODE XREF: sub_482EEC+C4j
.text:00482F99 movsx eax, cx
.text:00482F9C add eax, eax ; calculate index (item number * 4)
.text:00482F9E add eax, eax
.text:00482FA0 add ecx, 1 ; next definition
.text:00482FA3 fld dword ptr [eax+edx] ; get data
.text:00482FA6 fstp dword ptr [eax+ebx] ; store data in 3rd camera array
.text:00482FA9 cmp cx, CameraDefinitions[esi]
.text:00482FB0 jl short loc_482F99
.text:00482FB2 jmp loc_4830EB


You will want to hook into 0x482FA3 if you plan on modifying the camera...do a quick lookup in the camera definitions table (based on the current registers ecx and esi) to determine what value its modifying, then substitute your own...
Hey lol, are you that guy from youtube posting on the video? About the camera, I'm not sure how bitterbanana did it for halo 1 but theres a camera track that is in the map file so it always changes. I'll look into this later but for now I sleep.

Ernegien
August 12th, 2007, 03:36 PM
No I'm not the youtube guy or whatever...but my previous post outlined exactly what bitterbanana did for his camera hack :P

Since you don't seem too familiar with assembly, you might want to try a different route (the one I started with) by nulling every command that writes to the 3rd camera array of whatever player you're using, then you can manually poke in whatever camera values you need, based on user input.

Digikid
August 12th, 2007, 04:41 PM
I am unable to understand why you would want to do a crappy perspective such as 3rd Person. 1st person perspective is the better perspective....

Dr Dmoney
August 12th, 2007, 05:30 PM
But you can make first person better aswell.

Anthony
August 12th, 2007, 07:39 PM
I am unable to understand why you would want to do a crappy perspective such as 3rd Person. 1st person perspective is the better perspective....

And I am unable to understand why you can't see this isn't really for game play. Its more of something to do for fun, and of course its a step forward for making trainers....


and btw a flycam owns all
http://img507.imageshack.us/img507/871/flycamge2.jpg

Anthony
August 12th, 2007, 07:55 PM
ive gotten 3rd person realtime ^^ only workz on xp so never got around to relaseing it (stupid vista backwards comaptablity)

3rd person realtime? Does that mean you can follow around the person in realtime? >_> thats exactly what 3rd person is...

Con
August 12th, 2007, 08:12 PM
what? it works fine, whatever problem you're getting with skyline's app is because you're on XP or something.

Anthony
August 12th, 2007, 08:13 PM
Im not trying to be a dick but it sounds like you are just talking out of your ass and have no idea what your talking about... What do you mean by it switches between realtime and hardcoded?

Skyline
August 12th, 2007, 08:30 PM
He probly means that mine just keeps sending a value to an address while his permanently changes it to third person.

Anthony
August 12th, 2007, 08:34 PM
He probly means that mine just keeps sending a value to an address while his permanently changes it to third person.

to tell the truth I highly doubt that this guy knows what hes talking about and I am pretty sure that he doesn't have a trainer

Patrickssj6
August 14th, 2007, 01:27 PM
to tell the truth I highly doubt that this guy knows what hes talking about and I am pretty sure that he doesn't have a trainer
No he is right...

"Look what writes to this value"...you null everything out that access that address...the only prob is that there is anti debugger protection in H2V.

Ernegien
August 14th, 2007, 01:52 PM
sorta his switches between realtime and hardcoded(not his fault...hired guns fault...noway to prevent it unless you programed the camera and know EXACT addresses and code name(name of the bool/sring/vector)...nuffsaid)
LAWL, I'm going to have to side with Anthony on this one...you guys really don't know what you're talking about...besides maybe patrick :P

I can however verify that anthony does have a working flycam for h2v, and much much more ;)

Kornman00
August 14th, 2007, 02:41 PM
Right...

wannabeapilot
August 14th, 2007, 02:55 PM
And I am unable to understand why you can't see this isn't really for game play. Its more of something to do for fun, and of course its a step forward for making trainers....


and btw a flycam owns all
http://img507.imageshack.us/img507/871/flycamge2.jpg

hey man is your fly cam available for download? :)

Skyline
August 14th, 2007, 03:30 PM
[Edit] No comment, i dont want to explain myself to n00bs.
Maybe because you can't. As I recall you said FOV was entirely impossible and yet I have managed to make a somewhat working one; no you are not part of an anti-cheat team for halo 2 vista, this much is clear.

Thank you for helping me Ernegien. There might be something more to this in a weeks time. Memory hacking won't work here anymore.

Limited
August 15th, 2007, 05:32 AM
Halo 2 regulary checks the intergrity of its memory, if you change a vlaue (such as FOV) while it does it's checks, the game will crash. Debugging in cheat engine also crashes the game. Perhaps thats why skyline said "Memory hacking wont work here anymore."

Oh and anthony's stuff does indeed own :D

Also, I heard rumors theres a very evil program out there, hope THAT one gets patched asap.

bitterbanana
August 17th, 2007, 10:16 PM
FYI, you shouldn't need to find any pointers for camera editation. They should all be stored in static locations after the exe code segment. Yesterday I got a chance to look at the h2v disassembly and here's what I've found so far...

Perspective Pointer Address - 0x8A5288 (Holds pointer to a particular perspective function)
Example: poke address 0x8A5288 with data 0x00000000 to detach camera from biped, 0x81D64C00 for first person, 0xCFD94C00 for dead, 0xE4CF4C00 for scripted etc...

The code below is what should directly modify the 3rd camera array for Player 1...

.text:00482F6D mov eax, [esp+68h+var_40] ; get base address
.text:00482F71 movss xmm0, dword ptr [eax]
.text:00482F75 subss xmm0, dword_8BD4F0
.text:00482F7D comiss xmm0, xmm5
.text:00482F80 ja short loc_482FC0
.text:00482F82 test byte ptr [ebp+8], 1
.text:00482F86 jz short loc_482FB7
.text:00482F88 xor ecx, ecx
.text:00482F8A cmp CameraDefinitions[esi], cx
.text:00482F91 jle loc_4830EB
.text:00482F97 lea ebx, [ebx]
.text:00482F99
.text:00482F99 loc_482F99: ; CODE XREF: sub_482EEC+C4j
.text:00482F99 movsx eax, cx
.text:00482F9C add eax, eax ; calculate index (item number * 4)
.text:00482F9E add eax, eax
.text:00482FA0 add ecx, 1 ; next definition
.text:00482FA3 fld dword ptr [eax+edx] ; get data
.text:00482FA6 fstp dword ptr [eax+ebx] ; store data in 3rd camera array
.text:00482FA9 cmp cx, CameraDefinitions[esi]
.text:00482FB0 jl short loc_482F99
.text:00482FB2 jmp loc_4830EB


You will want to hook into 0x482FA3 if you plan on modifying the camera...do a quick lookup in the camera definitions table (based on the current registers ecx and esi) to determine what value its modifying, then substitute your own...

No I'm not the youtube guy or whatever...but my previous post outlined exactly what bitterbanana did for his camera hack :P
Don't ignore this information. It looks correct to me. :)

Kornman00
August 18th, 2007, 06:21 AM
Except the way he explains it makes me question his level of knowledge...

JackRabbit72380
August 22nd, 2007, 04:25 AM
Ok the new version of the app 1.3 had the same glich.
None of the apps seam to work on vista64 ultamate.
However I have just done a fresh installation of vista32 ultamate and the app works with one small prob it still crashes the game wen I get to mm or cutscene.

So it's not only an ultamate version issue I beleve that the app wont work on any of the vista64's due to a glich that I beleve could be fixed because it seams like a small glich ! anyway good thang all vista's come with 32&64bit os discs huh!

Ok next I'll say that I wish the left & right movement of the Fov worked but i bet your alredy working on that.?idk but I hope so!

Now for the realy inportent part. Makeing the app not crash!!!
Idk all the tech stuff or even how this app was made im no programer but
I hacked the exe of h2v and found this line of code that I think may have some effect as to why the app is crashing & I beleve its a security protection bult in to the game some how it may only be in the exe it self but idk.

Hear is the code I have extracted with an app called rezhacker...

<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="AsInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>


Intresting huh?
Im just wondering what changing false to true would do even if it didnt work ?

Kornman00
August 22nd, 2007, 05:59 AM
Thats just for allowing a developer to specify if the user executing the app needs to have admin properties.

Patrickssj6
August 22nd, 2007, 09:05 AM
also the app crashes h2v(but no bsod) if you leave 3rd person enabled
Protection....read Limited's post on it.

Skyline
August 22nd, 2007, 09:44 AM
Don't ignore this information. It looks correct to me. :)
I did not ignore this, I actually just got IDA and am learning.

And yes kiwi I have heard you many times already.

jngrow
August 22nd, 2007, 01:49 PM
pretty cool, and also

SUPAH HEROW STATIK SHOK :woop:

I just really wished this was for SP. :/

Limited
August 22nd, 2007, 08:59 PM
*cough*speed hack found*cough* but yea what you say is true because whenever i try to use the speed hack i run bout half of coag then the h2 just quits and cheatengine displays "??" where the values were.
Like I said a billion times, h2v protects its memory, trying to stop cheaters. It detects your cheating and crashes halo. the ?? is shown in cheat engine due to the fact the process halo 2 has closed, so it cant read halo 2's memory because there is no memory of it to read. It doesnt exist.

Ernegien
August 22nd, 2007, 09:51 PM
Like I said a billion times, h2v protects its memory, trying to stop cheaters. It detects your cheating and crashes halo. the ?? is shown in cheat engine due to the fact the process halo 2 has closed, so it cant read halo 2's memory because there is no memory of it to read. It doesnt exist.
That's a very vague description at best...you cant magically keep track of every byte allocated by the game and protect them from being edited by figuring out when and where, all at once :P

You can however easily bypass any debugger checks by patching your trainer code into the executable...

Limited
August 23rd, 2007, 12:34 AM
That's a very vague description at best...you cant magically keep track of every byte allocated by the game and protect them from being edited by figuring out when and where, all at once :P

You can however easily bypass any debugger checks by patching your trainer code into the executable...
Thats true, but then again KIWIDOGGIE says he knows things but doesnt actually so I dont want to confuse him :)

Also yes that is possible but its a bit annoying having to do that every single time you want to test it :D

Kornman00
August 23rd, 2007, 01:22 AM
You can however easily bypass any debugger checks by patching your trainer code into the executable...
Assuming one could bypass the protection on the executable itself

Patrickssj6
August 23rd, 2007, 09:05 AM
I did not ignore this, I actually just got IDA and am learning.

And yes kiwi I have heard you many times already.

IDA has basically nothing to do with the stuff he posted ;)

Either you find a code cave in your app or you ASM it...with MASM or whatever you like.

Kornman00
August 23rd, 2007, 11:50 AM
True, and i know that if a process closes it shows ??. and i dont think that there is too much protection on h2v. I know theres some for online play. I have even gotten a text hack so my gamertag doesent say KIWIDOGGIE whenever you hold back on your pad to display the names(host only) but once again it works for about 20 seconds then i get the "Halo 2 Has Crashed" so yes there is some protection. Not very good one tho
I'm sorry, I can't take it any longer, just please, stop posting in this thread :/

Limited
August 23rd, 2007, 12:59 PM
True, and i know that if a process closes it shows ??. and i dont think that there is too much protection on h2v. I know theres some for online play. I have even gotten a text hack so my gamertag doesent say KIWIDOGGIE whenever you hold back on your pad to display the names(host only) but once again it works for about 20 seconds then i get the "Halo 2 Has Crashed" so yes there is some protection. Not very good one tho
It crashed the game right tho? Thats what it is suppose to freaking do, omg.

Dr Dmoney
August 23rd, 2007, 08:59 PM
Yeah, the game searches for things that shouldn't be there. If you have it turned an 100&#37; of the time it will aventually crash...

Con
August 24th, 2007, 09:37 PM
It only crashes when you use the 3rd person in places it's not supposed to be used in, like menus.

Dr Dmoney
August 24th, 2007, 11:46 PM
That whats happens to me... I use vista ultimate 64x and it has been having problems.

Ernegien
August 25th, 2007, 11:59 AM
It only crashes when you use the 3rd person in places it's not supposed to be used in, like menus.
That's because if he's achieving a 3p view by any other way other than moving a value into 0x8A5288...he's not doing it right :P

Also, you don't need to be continuously connected to the h2v process to actively "train" it. You really just need to obtain the base address at which it's loaded into memory, from there you can do the rest unconnected...and if you edit things the right way I'm assuming the game wouldn't know the difference :?

Skyline
August 25th, 2007, 12:48 PM
That's because if he's achieving a 3p view by any other way other than moving a value into 0x8A5288...he's not doing it right :P

Also, you don't need to be continuously connected to the h2v process to actively "train" it. You really just need to obtain the base address at which it's loaded into memory, from there you can do the rest unconnected...and if you edit things the right way I'm assuming the game wouldn't know the difference :?
Then I guess I'm doing it wrong :P. I tried what you said but there is nothing at that address.

Kornman00
August 26th, 2007, 09:49 AM
mabe that h1 talk? that address seems to be null
I'm pretty sure I told you to stop posting in this thread.

xExus
August 26th, 2007, 02:34 PM
Oh hey skyline I had no idea it was you that made this wonderful hack.
I thank you a lot since I used it in my vid :)

Skyline
August 26th, 2007, 02:35 PM
I'm pretty sure I told you to stop posting in this thread.
I don't see why you care so much.

Anyways, I don't see this going anywhere anymore.

Kornman00
August 26th, 2007, 04:02 PM
You obviously can't see it seems :v

Skyline
August 26th, 2007, 04:23 PM
You obviously can't see it seems :v
"You" Is in italics for a reason.

Kornman00
August 26th, 2007, 04:36 PM
':v' is there for a reason.

Not my fault if he wants to keep talking out of his ass

Skyline
August 26th, 2007, 06:13 PM
':v' is there for a reason.

Not my fault if he wants to keep talking out of his ass
:smithicide: You don't get it, I was talking to you -Kornman00- why do you care so much if he posts in this thread so much.

Kornman00
August 26th, 2007, 06:40 PM
because its locked! clearly, if hes posting in a locked thread, there is a problem at hand :v

oshi-