[APP/WIP] Halo 2 Third Person Hack

[Skyline]

Updated August 11TH, 2007

Whoa! Massive update. Well seeing there are about 2 servers that have custom maps with only 1 person in each I decided to release the new version which has FOV for First Person :woop: (only for the default MP maps) <- I hope to change this in the future but for now it seems it is too difficult to figure out.

Images:

http://i207.photobucket.com/albums/bb62/TheSkyline13/program_ver_1.3.jpg

ScreenShots:

The MC in Third Person:
http://i207.photobucket.com/albums/bb62/TheSkyline13/00090copy.jpg

First Person FOV Before:
http://i207.photobucket.com/albums/bb62/TheSkyline13/00091copy.jpg
After:
http://i207.photobucket.com/albums/bb62/TheSkyline13/00092copy.jpg
Note: This was not taken on a widescreen resolution so the fov will be more then this which will actually be too far at times letting you see the end of the arm.

Video:

h0XNb5xluNM
I didn't have many songs so I used the first 2 I could find, one of which is from teekup.

Credits:

Bitterbanana for lots of help.
Patrickssj6 for help with my noob questions.
Conscars for testing/finding addresses with me.
&
Syuusuke - yes you tested this too.

Note: You will need Framework .Net 2.0
Link to Framework .Net 2.0: Here (http://www.microsoft.com/downloads/details.aspx?familyid=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en)

Download: Link (http://files.filefront.com/H2V+3P+++Beta+v13rar/;8286752;;/fileinfo.html)
Mirror: Link Thanks to Baturkin / Bacon (http://www.halonews.org/stuff/H2V_3P_-_Beta_v1.3.rar)

Updated: August 11th 2007 / Build 1.3

-Something many people doubted me about / couldn't figure out for themselves is Fov for First Person, I would have to agree it is/was quite hard to program/find, but it is included but for the Default multiplayer maps only.
-There are some know issues with the hotkeys (The on/off ones) but they should work fine unless you press them rapidly.
-Do not keep Third Person enabled otherwise it will crash the game if you exit / turn it on when not in a server so remember this.

Update(Old): August 1st 2007 / Build 1.2

-No longer creates it's own process for reading so the error message should not be displayed.
-Along with that the directory is no longer needed (Just plug and play?).

[Con]

Like I said, you fucking win :awesome:

[Pooky]

Awesome. I'll definitely be using this, or an improved version of this, when I get H2V.

[leorimolo]

I love the FoV hack out of the whole app.... very nice job

[Bossniak]

Nice.

But I can't get it to work. When I try and open the program it says invalid directory. But my halo2 is in the same spot as the directory in the program. D:

[randreach454]

works like a charm, cept when you use vehics, very nice!
edit: killer, put the fov hack program IN your h2 directory, i had that error first time too..

[Limited]

Why cant you just hook it to the halo2.exe process? Is it because you didnt find the base address (address always changes?)

Cant you just do halo2.exe + 36041 < address and get it that way?

[Bossniak]

I put it in my directory and still gives me the error. Directory is invalid.

[Skyline]

Nice.

But I can't get it to work. When I try and open the program it says invalid directory. But my halo2 is in the same spot as the directory in the program. D:
Ya that's partically my fault I'll code that differently next build. Try pressing the "..." button and setting the directory.

Why cant you just hook it to the halo2.exe process? Is it because you didnt find the base address (address always changes?)

Cant you just do halo2.exe + 36041 < address and get it that way?
See that's partially because visual basic is limited and maybe I just don't know how but I can't seem to get it to transmit the same data as it would if I created it as a new process it has more options; such as module which gets the main module (halo2.exe).

[Limited]

Ya that's partically my fault I'll code that differently next build.

See that's partially because visual basic is limited and maybe I just don't know how but I can't seem to get it to transmit the same data as it would if I created it as a new process it has more options; such as module which gets the main module (halo2.exe).
Hmm, I heard VB6 had problems with vista but I thought VB.net was good =\

I would try but I dont have halo 2 yet :( pats on holidays too =\

You got msn/aim/xfire :O?

[halo2poo]

Finally! A camera mod for H2V! Sweet dude!

[Bossniak]

I tried reseting directory by clicking the *...* still nothing. Ah well I'll wait for next build I guess. :)

[halo2poo]

Hmmm it doesn't work for me either. The program runs but I can't go in third person mode or change the FOV.

Wait do you have to have weapons?

[Stealth]

I might download it, but it'd be nice if it wasn't so bugy, but I think it fits in with H2V. :p

[Dr Dmoney]

I keep getting an error from .net Framework. I have got the newest version.

It states:
Unhandled exception has occurred in your app. If you click Continue the app will ignore this error and attempt to continue. If you Quit, the app will close.
Conversion from string ""to type 'Double' is not Valid

Then I went to details and this popped up.


See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.InvalidCastException: Conversion from string "" to type 'Double' is not valid. ---> System.FormatException: Input string was not in a correct format.
at Microsoft.VisualBasic.CompilerServices.Conversions .ParseDouble(String Value, NumberFormatInfo NumberFormat)
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
--- End of inner exception stack trace ---
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
at Skyline.Form1.Set_FoV_third()
at Skyline.Form1.Timer1_Tick(Object sender, EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndPr oc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll
----------------------------------------
Halo 2 Third Person - Beta
Assembly Version: 1.0.0.0
Win32 Version: 1.0.0.0
CodeBase: file:///D:/Programs/Microsoft%20Games/Halo%202/Halo%202%20Third%20Person%20-%20Beta.exe
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 8.0.0.0
Win32 Version: 8.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Runtime.Remoting
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1378 (REDBITSB2.050727-1300)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

I put the program in my Halo 2 folder, but it is in a different directory than what it would be by default. .

[Warningshot3]

well it works for me and im on xp. the worthog is fun when i hit 1st person mode.

[halo2poo]

well it works for me and im on xp. the worthog is fun when i hit 1st person mode.

Stop making me feel bad that I can't use it yet. :mad: You make me wanna use the warthog in 1st person mode.

[Dr Dmoney]

I get it to run now without that error, but Halo 2 crashes all the time.

[Dr Dmoney]

halo 2 crashes after 5 seconds of loading...

[wannabeapilot]

any screenshots?

[Warningshot3]

http://img292.imageshack.us/img292/9246/lol3phaloxp0.jpg

ty Stealth and Limited.

[Stealth]

>.>
check the IMG tag coding (http://www.h2vista.net/forums/misc.php?do=bbcode#imgcode).

edit | >.> nvm, you copyed and pasted the wrong link. try copying the address in the "Direct link to image" text box.
like this.


http://img510.imageshack.us/img510/2567/server1openedoa8.gif
http://img510.imageshack.us/img510/2567/server1openedoa8.gif

not the one above it that says "Show image to friends"

[Limited]

Warningshot3 its because that isnt the direct link to image :P When you uploaded it get the link at the very bottom of the page :P Under the one you posted

[Trinx]

http://img160.imageshack.us/img160/9050/h2vfpvehicleos6.jpg

http://img227.imageshack.us/img227/4064/h2v3phw0.png

and


http://img160.imageshack.us/img160/6642/h2vfpvehicle2lt1.jpg

Medium, 4xAA on 800 x 600.

[halo2poo]

Now I REALLY want it to work now. Do you put the trainer in the halo 2 directory or something?

[Warningshot3]

Try the gunner. get a hog, get on the turret, hit 1st person and fire. the camera spins around. lol

Yes you can put the "Halo 2 Third Person - Beta.exe" in the same folder as halo2 but not needed. there is shortcut keys so you dont need to alt + tab all the time.

Page up to set 3rd person
Page down to set 1st person

Numpad 8 and 2 to change the height of the camera

[Con]

Now I REALLY want it to work now. Do you put the trainer in the halo 2 directory or something?
Mine's on the desktop. I start the application, then I start halo.

[halo2poo]

I start the program then halo 2 but the program still doesn't work.

[Dr Dmoney]

I can't get it to work, every time I try Halo 2 Crashes.

[Warningshot3]

"Note: You will need Framework .Net 2.0"

do you have it?

could ppl who have vista and have it working post what stuff they have on their computers so, maybe its something they dont have or something they do have.

I have.

Microsoft .NET Framework 1.1
Microsoft .NET Framework Hotfix (kb928366)
Microsoft .NET Framework 2.0
Microsoft Kernel-mode driver framework feature pack 1.1
Microsoft User-Mode Driver Framework feature pack 1.0
Microsoft Visual C++ 2005 Redistributable
And alot of Updates for xp.

[halo2poo]

How do I check if I have it?

[Warningshot3]

Look at the installed programs list. like where you goto to uninstall a game or whatever.

[halo2poo]

Look at the installed programs list. like where you goto to uninstall a game or whatever.
Yes I have .net framework 2.0

[Dr Dmoney]

yeah, I have it, could it be an error with 64x verson of windows vista.

[Limited]

Look at the installed programs list. like where you goto to uninstall a game or whatever.The program runs fine, so it isnt any thing your think it is.

Its to do with the memory address, just isnt working right for all people. Maybe theres a pointer instead and they havent found the end of it :P

[Con]

No, it's not a pointer. The program is just buggy as this point.

[JackRabbit72380]

Can someone help?
Im running windows vista ultamate 64 bit the most complet version of windows.

This app wont work for me no matter what I do halo2 crashes. &
I cant find a microsoft .NETFramework 2.0 installer for Vistax64bit systems
This is frustrating me alot. I'd Realy like to use this application any help from any0ne would be great thanx.

[Skyline]

************** Exception Text **************
System.InvalidCastException: Conversion from string "" to type 'Double' is not valid. ---> System.FormatException: Input string was not in a correct format.
at Microsoft.VisualBasic.CompilerServices.Conversions .ParseDouble(String Value, NumberFormatInfo NumberFormat)
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
--- End of inner exception stack trace ---
at Microsoft.VisualBasic.CompilerServices.Conversions .ToDouble(String Value, NumberFormatInfo NumberFormat)
at Skyline.Form1.Set_FoV_third()
at Skyline.Form1.Timer1_Tick(Object sender, EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndPr oc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)



For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

I put the program in my Halo 2 folder, but it is in a different directory than what it would be by default. .

This looks like it is caused because it isn't getting the base address which code be caused by the directory not being set right. "String to double"


The program runs fine, so it isnt any thing your think it is.

Its to do with the memory address, just isnt working right for all people. Maybe theres a pointer instead and they havent found the end of it :P
It doesn't have a pointer. I spent the last month using the same address without it changing even Conscars used it for a while.


No, im not sure why it was coded in VB in the first place. but i have looked at the source and its ok for beta code. i like this hack (no player advantages like trainers) but seriously its alittle slopy. im thinking it isant exactly in the code but the way it is packaged. you should make a dll (the hax) then make the program an injector. thats how i used to make hax (in C#) and it was alot faster
Yes indeed it is sloppy, I had an error with visual studios where I can't get it to create a new program so I had to use one of my existing programs as a project. It's also been a few weeks since I worked on it very much and VB is all I know right now.

[Wakeboy1337]

OH HELL YES!

Skyline FTW!

[CrippieBoy]

works great, i just put the exe on my desktop,the zoom dosnt work but i can live without it... great job!

[Skyline]

First Post Updated August 1st 2007

This should fix most of your problems, instead of storing the directory in the program it stores it in the .txt file found in the new download link. Just keep the .txt file in the same folder as the .exe file and it should work fine. Let me know if this fixes your problem.

[Enigma]

Very nice, works great for me.

[Ki11a_FTW]

Sweet!


I remember you pwning me with all these hacks online :fail:.

+rep!

[Skyline]

Sweet!


I remember you pwning me with all these hacks online :fail:.

+rep!
No lol, I was in a tank that time :V.

[Bossniak]

Still can't get it to work. Same error message.

[Skyline]

Your running windows vista right? If UAC is on turn it off and try running as admin. Do you have aim?

Fix to Killers problem: Run as admin (if you have UAC on).

[Bossniak]

Haha, thanks skyline! :D

[JackRabbit72380]

Still can't get it to work. Same error message.Same hear Still no luck & Microsoft.Net Framework Is part of the X64 Vista Os
I foundout something weard.
I can Download .Net Fw for x64 bit system's but its part of my Os. Um Wtf
Why is thare even a download ? but u dont have to anser that im just wanting to get the 3pView working.

Microsoft .NET Framework Version 2.0 Redistributable Package (x64)
http://www.microsoft.com/downloads/thankyou.aspx?familyId=b44a0000-acf8-4fa1-affb-40e78d788b00&displayLang=en

[Skyline]

Same hear Still no luck & Microsoft.Net Framework Is part of the X64 Vista Os
I foundout something weard.
I can Download .Net Fw for x64 bit system's but its part of my Os. Um Wtf
Why is thare even a download ? but u dont have to anser that im just wanting to get the 3pView working.

Microsoft .NET Framework Version 2.0 Redistributable Package (x64)
http://www.microsoft.com/downloads/thankyou.aspx?familyId=b44a0000-acf8-4fa1-affb-40e78d788b00&displayLang=en
What error does it bring up for you?

[halo2poo]

I still get an error too when I start up the program. It says "The procedure entry point RegGetValueA could not be located in the dynamic link library ADVAPI32.dll."

[Limited]

^ API problems, ones he declared, .NET framework problems perhaps

[halo2poo]

So what should I do?

[JackRabbit72380]

Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314
Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409
----------------------------------------------------------
Idk How to say this but I'll Try...
H2V may be instaled in the program files (x86) folder directory on x64 bit systems and "not in the program files folder" like xp.

The Program Files (x86) folder is ware v64 installs the 32bitapps
and buy defalt the halo2 installer installs H2V in the Program files (x86) Microsoft Games folder Directory.

I However have done a custom installation on my 64 bit system and have instaled H2V in the reguler Program Files/Microsoft Games. Directory.

[Skyline]

I still get an error too when I start up the program. It says "The procedure entry point RegGetValueA could not be located in the dynamic link library ADVAPI32.dll."

Are you on windows XP?


Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314
Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409


When does this error happen?

[halo2poo]

Yes, I'm on xp.

[Dr Dmoney]

Yeah, I still get a problem. I start the program, Halo 2 boots up and crashes during loading. The error message states:



Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314

The only time I get Halo 2 and the progam to run at the same time is when I first Start halo 2 and i am in a game and the start the program, the program makes my game flicker all the time but no view changes.

I have Framework .net 2.0
64bit Vista Ultimate
Directory is located at: D:\Programs\Microsoft Games\Halo 2\halo2.exe
I have try to run as Admin, and Back Compatibility Mode
I have try everything logical to try but Halo 2 keeps crashing. Any help would be great full...

[Skyline]

After this error happens did you use the wow launcher to run halo 2 and try to use it?

[Dr Dmoney]

Me and jackrabbit have a common thing. We both have the same error and say os. Meaning it could be a 64bit problem.

[halo2poo]

After this error happens did you use the wow launcher to run halo 2 and try to use it?
Are you talking o Dr Dmoney or me?

[Skyline]

You, that happens because some of the data is missing which is in the Vista version. When you run halo 2 it should still work. And Dmoney that would seem to be the case, I know there are some games such as Command and Conquer 3 that can't run on the 64 bit version of windows vista.

[jngrow]

Don't know if it has been said or not, yet, but in MP, this is cheating.

[JackRabbit72380]

So what are you saying ?
Are you saying for the first time ever my 64bit system is gona limit my halo creation. Are you gona beable to fix this ?
0_o & can someone post a link to the wow loader? idk what that is.

[Skyline]

Ops, its the Wow loader not launcher :/. http://www.h2vista.net/forums/showthread.php?t=3542&highlight=source

This can't be really considered cheating, that's like saying everytime you get into a vehicle your cheating :/. Would it be cheating if I had a higher resolution then you; Widescreen?

[Vicky]

3rd person hacks are cheats, you can look over things that 1st person cannot... so you could start nading before the other players is even able to see you. It's a cheat.
I hoped this wouldn't happen on h2v but aperently vista/h2v isn't that good after all :P

[halo2poo]

Ops, its the Wow loader not launcher :/. http://www.h2vista.net/forums/showthread.php?t=3542&highlight=source

This can't be really considered cheating, that's like saying everytime you get into a vehicle your cheating :/. Would it be cheating if I had a higher resolution then you; Widescreen?

How do I use that?

[Skyline]

3rd person hacks are cheats, you can look over things that 1st person cannot... so you could start nading before the other players is even able to see you. It's a cheat.
I hoped this wouldn't happen on h2v but aperently vista/h2v isn't that good after all :P
So, you can't zoom in when in 3p. There are advantages and disadvantages as well. Anyways I still have to find out how to move the camera left and right.


How do I use that?
OOOOO_O, you can't play halo 2 on XP at all unless you use that.

[JackRabbit72380]

You, that happens because some of the data is missing which is in the Vista version. When you run halo 2 it should still work. And Dmoney that would seem to be the case, I know there are some games such as Command and Conquer 3 that can't run on the 64 bit version of windows vista.So are you sayin the app wont work on vistax64? Or what?

[Skyline]

Well I don't know why it wouldn't work but I am trying to reprogram the way it gets the base address right now.

[Bossniak]

I wish it wouldn't turn off every time I died. But that's why it's a beta! :D

It's fun using it while just messing around doing stunts and such. Nice work.

[Vicky]

So, you can't zoom in when in 3p. There are advantages and disadvantages as well. Anyways I still have to find out how to move the camera left and right.

So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...

[JackRabbit72380]

Ok thats great good luck!

[Pooky]

So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...

You can't compare third person mode to a wallhack, that's just stupid. Halo CE isn't ruined in any way because people use third person, and a lot of people do. I never use it and still win consistently against people who do. The same thing goes for games that have it included.

[Skyline]

So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...
So, do you see me making bots, theres no need, just plug in a controller :haw:.

[Vicky]

Yeah that's pathetic :P

[Skyline]

Ok rabbit try this: This :/ (http://img170.imageshack.us/img170/3479/programupdatedkr8.jpg)

Updated first post.

[Dr Dmoney]

Ok rabbit try this: This :/ (http://img170.imageshack.us/img170/3479/programupdatedkr8.jpg)

Updated first post.


I imagine this goes for me too.. Yeah, it is actually worse. When I use it a 1000 error message comes up and says Halo 2 is not running. Also when I run halo 2 then the program halo 2 crashes. And states:


Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

[JackRabbit72380]

I imagine this goes for me too.. Yeah, it is actually worse. When I use it a 1000 error message comes up and says Halo 2 is not running. Also when I run halo 2 then the program halo 2 crashes. And states:


Problem signature:
Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0359
Additional Information 2: 33553b570856b014caebce4613fda449
Additional Information 3: 9c50
Additional Information 4: 1fc6e66eefffac8781231e359a822314

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409
Same hear! the app works If I start H2V first. but then halo2 crashed:confused::eek:.:(:confused2:?

[Dr Dmoney]

Yeah, I can get the program and Halo 2 run at the same time but only while I am in game. The program make my screen flicker. What is happening is that ever few seconds it pull to 3rd person and back to 1st person, but you can't tell by the naked eye. I recorded it and and went frame by frame and I was in 3rd person for about .1 of a second as a time. Then it pushes back to 1st person. So that is why it flickers. This is the only way i can get it to run while Halo 2 in running. Every time I boot it up Halo 2 crashes when I am not inside a game.

[Skyline]

Ok,
1: Stop ripping the source code.
2: If it is so sloppy please make a better one.

Sorry Rabbit it must just be something with vista's 64 bit.

[JackRabbit72380]

I got a very sloppy 1p but no 3p view With the ghost and warthog but the game Crashes before I can see the mainmenu and then gives a bunch of erorrs

So whats the curent status on the program anyway?

Btw im useing an xbox3601337 controller idk if that matters of not.

[Limited]

I think i have figured out what this problem is. The game doesent have direct POV unlike halo CE. in english it means that you have to keep on reseting it back to 3rd person instead of just overwriting the default witch is 1st person. This is caused because we donot have all of the access addresses. :) also the way it is haxed is alittle slopy because it is set to all of the default.Well why dont we have full access to the address?


it means that you have to keep on reseting it back to 3rd person instead of just overwriting the default witch is 1st person. Theres LOTS of things in CE where you have to keep writing to the address, it doesnt make it harder to code

[Skyline]

Ya limited get on aim we can discuss this mb. Rabbit you can try to use it with out the controller but I don't think it will affect it. There are many things that don't even come close to halo 1 hacking, although there are some similarities.

[stunt_man]

Korn? Help? lol.


Don't know if it has been said or not, yet, but in MP, this is cheating.Prude.


So it's just a matter of time before all the hacks/bots and wallhacks are made for h2v. That's what ruins online games...What's my future? You can tell the future, right?

A little thirdperson hack is nothing compared to a wallhack/aimbot. On top of that, if those were to be released, Microsoft/Bungie/Hired Gun/GFWL/Whoever will be on top of it, I'm sure.

Besides, the only thing I want to use this for is the FOV. I don't care at all for thirdperson shenanigans, I find it too hard to play like that (which kind of eliminates the purpose of using it to cheat). Also, Skyline, would it be possible to make it so the app remembers settings? With no hotkey to change the FOV, I'm finding it annoying to have to load up Halo 2, open your hack, and change the settings everytime I want to play. Just a suggestion. I know bitterbanana was able to do this with his CE hack...

Good job, I can't wait to see this in its complete form!

EDIT: WHOA, just realized the FOV changes only apply to vehicles! Dude...

[Skyline]

Korn? Help? lol.

Prude.

What's my future? You can tell the future, right?

A little thirdperson hack is nothing compared to a wallhack/aimbot. On top of that, if those were to be released, Microsoft/Bungie/Hired Gun/GFWL/Whoever will be on top of it, I'm sure.

Besides, the only thing I want to use this for is the FOV. I don't care at all for thirdperson shenanigans, I find it too hard to play like that (which kind of eliminates the purpose of using it to cheat). Also, Skyline, would it be possible to make it so the app remembers settings? With no hotkey to change the FOV, I'm finding it annoying to have to load up Halo 2, open your hack, and change the settings everytime I want to play. Just a suggestion. I know bitterbanana was able to do this with his CE hack...

Good job, I can't wait to see this in its complete form!

EDIT: WHOA, just realized the FOV changes only apply to vehicles! Dude...

Yes I plan on this but first I would like to find the addresses for the position of the camera left/right and back/forth (3P fov simulates this). There is a seperate Fov for first person and third person. I managed to find the first person but it has a pointer and that pointer has a pointer etc, so it is harder to get. Third person did not have a pointer like many of it's other values. I've never really tried hacking halo 1 so I'm not too sure how it works on halo 1.

Anyways yes, since it's the fov for 3p it also works on vehicles. Pretty much right becide this address I found that you can also change the rotation speed (I remember someone complaining that the speed is lowered when you enter a vehicle) lol trust me it's better to have it slower then fast like halo 1 and have all kinds of troubles driving, the ghost mainly.

[Kornman00]

The camera shit has changed a bit from Halo 1, but it was for some cinematic effects. I'm sure I could easily port the Yelo Halo 2 Xbox director code to Vista but I have no intentions on doing so right now because Yelo H2V isn't being worked on right now.

[Skyline]

Yes, I'm talking about the third person view such as bitterbanana's program for halo 1 where it could move the camera in all directions.

[Dr Dmoney]

http://www.youtube.com/watch?v=Nmkz8gBKUVU
http://files.filefront.com/Halo+++Angleswmv/;8213430;;/fileinfo.html - for Higher Quality
When I get it to work, I only get this. The only way I can get it this way is when I am in game and then I start the program. The program doesn't menus or lobbys.

[t3h m00kz]

I'm totally gonna try this with the campaign, since Multiplayer doesn't work for XP yet. :<

[Limited]

http://www.youtube.com/watch?v=Nmkz8gBKUVU
http://files.filefront.com/Halo+++Angleswmv/;8213430;;/fileinfo.html - for Higher Quality
When I get it to work, I only get this. The only way I can get it this way is when I am in game and then I start the program. The program doesn't menus or lobbys.Flickers because of sloppy code :D

[flibitijibibo]

This is awesome right now. Because of GoW, I've gotten used to TPS. Will there be a way to move the camera left and right in later versions? To me, its easier to have the model off to one side.

[Dr Dmoney]

Flickers because of sloppy code :D

But that is all I can use. I can't get it to work like others. i can't get to 3rd person.

[Skyline]

But that is all I can use. I can't get it to work like others. i can't get to 3rd person.
Dmoney, it's not because it's a 64 bit version of vista, but it seems as though it doesn't work at all on Vista Ultimate. Kiwi has windows vista ultimate but in 32 bit, they must of done something different then the other versions of vista.

[StankBacon]

good job :D




mirror because filefront blows.

http://www.halonews.org/stuff/Halo_2_Third_Beta_1.2.rar

[Dr Dmoney]

Dmoney, it's not because it's a 64 bit version of vista, but it seems as though it doesn't work at all on Vista Ultimate. Kiwi has windows vista ultimate but in 32 bit, they must of done something different then the other versions of vista.

They must have, can't wait until you work out the kinks.

[JackRabbit72380]

Yes windows vista ultamate has Windows bitlocker drive encryption.
The other windows vista versions dont have it.
It says on my windows vista ultamate box
Better protect your data against loss or theft with windows bitlocker drive encryption.
Maby this service is the cause idk? just thought i'd say that.

Also*
I just had a look at it.
It says...

BitLocker Drive Encryption Encrypts and Protects your data
BitLocker Drive Encryption helps prevent unauthorized access to any files stored on the volume shown

Below.You are able to use the comuter normally, but unauthorized users cannot read or use your files.

[Skyline]

That sounds like it would cause it to stop working. Is there any way for you to turn it off for halo 2 or the application?

[JackRabbit72380]

Its not even able to work on my system due to the way I have my hdd's partition'ed.

This is what it looks like to me.
http://i18.photobucket.com/albums/b108/jackrabbitlight/vvol.jpg

And this is what help says wen I click on the blue link.

mshelp://Help/?id=Microsoft.Windows.Resources.CollapseArrow Show all (mshelp:///)
mshelp://Help/?id=Microsoft.Windows.Resources.ExpandArrow Hide all (mshelp:///)

Set up your hard disk for BitLocker Drive Encryption


Before you can turn on BitLocker Drive Encryption you need to make sure that your computer's hard disk (mshelp://windows/?id=5a2fccaa-2424-4646-b571-97b557e2c87b#gtmt_hard_disk_def) has the following:

<LI class=listItem>At least two volumes (mshelp://windows/?id=df2c7238-4d51-40e7-97eb-21244c3fd130#gtmt_volume_def). If you create a new volume after you have already installed Windows, you will have to reinstall Windows before turning on BitLocker.
One volume is for the operating system drive (typically drive C) that BitLocker will encrypt, and one is for the active volume, which must remain unencrypted to start the computer. The size of the active volume must be at least 1.5 gigabytes (GB). Both partitions must be formatted with the NTFS file system (mshelp://windows/?id=561480ce-050b-4273-9d2a-809d76c93ac1#gtmt_ntfs_file_system_def).
Note
The terms partition and volume are often used interchangeably. On most computers, they are the same: one partition equals one volume. On larger computer systems, however, it is possible to have a single volume span several partitions. BitLocker installs on a simple volume, where one volume equals one partition.If you do not already have two partitions, you can use the BitLocker Drive Preparation Tool to help get your system ready for BitLocker by creating the required second partition.
If you are using Windows Vista Ultimate, you can download and install the BitLocker drive preparation tool from Ultimate Extras. For more information about getting Ultimate Extras, see How do I get Windows Ultimate Extras downloads and services? (mshelp://windows/?id=c6f1b6f2-c14b-4aa8-a12e-1de36da56649) Download and install the Ultimate extra called BitLocker and EFS enhancements. After you have installed this tool, type BitLocker into the Start menu search box, and then double-click BitLocker Drive Preparation Tool to run the tool. After the tool runs, you must restart your computer before turning on BitLocker.
If you are using Windows Vista Enterprise, you can get the BitLocker drive preparation tool through these standard support channels:

Microsoft Volume Licensing Services (http://go.microsoft.com/fwlink/?LinkId=85742)
Microsoft Services Premier Support (http://go.microsoft.com/fwlink/?LinkId=85743)Additional information about the BitLocker drive preparation tool is available in Knowledge base article KB# 930063 (http://go.microsoft.com/fwlink/?LinkId=85744).
If your computer meets these requirements, you can turn on BitLocker.

[Dr Dmoney]

I also don't use bitlocker.

[Con]

I don't see why bitlocker would cause the problem if it's protecting your files, not your ram.

[Skyline]

It's not reading the ram when it exceptions, it's reading the module which is what exceptions.


Problem Event Name: APPCRASH
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Code: c0000005
Exception Offset: 0009d7d7
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033

[bitterbanana]

It's not reading the ram when it exceptions, it's reading the module which is what exceptions.
Modules and processes are always loaded into ram so they can be quickly executed by the processor.

[JackRabbit72380]

I did some more testing today with the app & I found some more weard bug's.
For some resion the app just dosent work at all sometimes but.
What I did is I start'ed the app wile I was in a custom mp map and messed with the settings a little bit.
Then I went in halo2 and got the weard glichy view.
Then I hit the winkey to get back to the desktop and exit'ed out of the app
Then I exited the map & wen I got to the main menu I relized that the hack or settings weare still in effect even though I exit'ed the 3pview.
In other words the hack stay'ed in efect untill I restarted halo2
But.. wen I went back into my map I found that my weapon's and the veachal's in the map weare invisable including the weapon I started with.
strange but true.
Im hopeing you will get the kinks out very badly lol! as I could realy use this app to test out weapons and more.
If only I could get the 3p view to work but I can't and the glich is so anoying gosh!

[et_cg]

I can't use the application due to DEP (Data Execution Prevention). I've added the 3p program to the list, but Windows prevents me from adding Halo 2 to the list. :(

[stunt_man]

How's this coming along? Worked out the FOV problem yet?

[Patrickssj6]

How's this coming along? Worked out the FOV problem yet?
He confused something in ArtMoney.

He thought that ArtMoney searches for the offset when searching for pointers. It searches for the final value.

[Limited]

I told him :P He said it wasnt a pointer, this is why Cheat engine > artmoney

[Patrickssj6]

That explains why he suddenly used Cheat Engine again. XD

[Skyline]

You misunderstood me

1- The fov for third person is NOT a pointer and neither are the addresses that change the view from third to first.

2- The fov for first person has a pointer and that is what I was looking for to add to this program.

and stuntman it is coming along.

[Dr Dmoney]

I can't wait untill I will beable to use it. If you need help testing (for vista Ulrimate x64)it My aim is DrXmoney

[stunt_man]

Cool, cool. You're going to be a hero if this works out, I hope you know that. ;)

[Skyline]

Cool, cool. You're going to be a hero if this works out, I hope you know that. ;)

Well I'm still trying to get the FOV for 1p to work but I got a new layout for the program.

http://img364.imageshack.us/img364/786/blah2cv7.jpg

[stunt_man]

Nice! Shortcut keys!

Rockin', man.

[Patrickssj6]

No wai...even though my version is a bit older :D
http://img253.imageshack.us/img253/7158/awddwawdar2.png


Good job! :)

[Limited]

Pointers in halo 2 is a bitch :( stupid anti cheat protection

[Skyline]

I could release it by the end of today but it would only work for defualt maps until I can get it to work properly.

Edit: Yes you can set your own hotkey but since I'm not as leet as bitterbanana mine is alot simplier to code lol, you choose the button you want and set it but if its not there you have to go through the bytes to see which one you want. As you can see there is an LButton although I'm not sure if this is a button on the keyboard or for the controller.

http://img461.imageshack.us/img461/1503/hotkey2zf7.jpg

[Syuusuke]

I'm not in the credits for all the times you sent me the app and it didn't work for me?

[Bossniak]

I'm not in the credits for all the times you sent me the app and it didn't work for me?

You aren't important enough. :)

Anyway cant wait for newer version! :D

[Dr Dmoney]

I hope this version will work for me.

[Skyline]

Updated First Post!
Build 1.3 is released.


I hope this version will work for me.
This is highly unlikely seeing you never came on Aim or you gave me the wrong one but you can try :P.

[Patrickssj6]

Really good stuff! :)

[stunt_man]

I'm about to try this for myself!

[Skyline]

I have a video I recorded not too long ago. I don't have very many songs so I put on the first 2 I found. Yes teekup you gave me this song.
h0XNb5xluNM

I am still working on changing the camera angles and such, bitterbanana guided me a bit here and I just need to find some pointers for it.

[Dr Dmoney]

It seems to be a little better. I can only get it to work when I am not in a lobby or just loading the game. So I have to be in game. I get more flickering, but it is more of a back and forth in motion. I get this crash if I am in a lobby or loading the game.

Problem signature:
Problem Event Name: BEX
Application Name: halo2.exe
Application Version: 1.0.0.11091
Application Timestamp: 4644b5fc
Fault Module Name: halo2.exe
Fault Module Version: 1.0.0.11091
Fault Module Timestamp: 4644b5fc
Exception Offset: 0039040a
Exception Code: c0000409
Exception Data: 00000000
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: ed9a
Additional Information 2: 905bac31ff5cdd17a85cdb788bee0b71
Additional Information 3: 33c6
Additional Information 4: 7f4776ff019f960de962c1c9b09f35d8

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409


Also to make sure: My aim is DrXmoney

I am on all the time. Tell me your name, please.

[Roostervier]

That song is win, and it won't let me rep you D:

[Ernegien]

FYI, you shouldn't need to find any pointers for camera editation. They should all be stored in static locations after the exe code segment. Yesterday I got a chance to look at the h2v disassembly and here's what I've found so far...

Perspective Pointer Address - 0x8A5288 (Holds pointer to a particular perspective function)
Example: poke address 0x8A5288 with data 0x00000000 to detach camera from biped, 0x81D64C00 for first person, 0xCFD94C00 for dead, 0xE4CF4C00 for scripted etc...

The code below is what should directly modify the 3rd camera array for Player 1...

.text:00482F6D mov eax, [esp+68h+var_40] ; get base address
.text:00482F71 movss xmm0, dword ptr [eax]
.text:00482F75 subss xmm0, dword_8BD4F0
.text:00482F7D comiss xmm0, xmm5
.text:00482F80 ja short loc_482FC0
.text:00482F82 test byte ptr [ebp+8], 1
.text:00482F86 jz short loc_482FB7
.text:00482F88 xor ecx, ecx
.text:00482F8A cmp CameraDefinitions[esi], cx
.text:00482F91 jle loc_4830EB
.text:00482F97 lea ebx, [ebx]
.text:00482F99
.text:00482F99 loc_482F99: ; CODE XREF: sub_482EEC+C4j
.text:00482F99 movsx eax, cx
.text:00482F9C add eax, eax ; calculate index (item number * 4)
.text:00482F9E add eax, eax
.text:00482FA0 add ecx, 1 ; next definition
.text:00482FA3 fld dword ptr [eax+edx] ; get data
.text:00482FA6 fstp dword ptr [eax+ebx] ; store data in 3rd camera array
.text:00482FA9 cmp cx, CameraDefinitions[esi]
.text:00482FB0 jl short loc_482F99
.text:00482FB2 jmp loc_4830EB


You will want to hook into 0x482FA3 if you plan on modifying the camera...do a quick lookup in the camera definitions table (based on the current registers ecx and esi) to determine what value its modifying, then substitute your own...

[stunt_man]

Nice first post. And nice work, skyline, it works great! Could be better, though, don't give up on the next version!

Can't wait!

[Skyline]

FYI, you shouldn't need to find any pointers for camera editation. They should all be stored in static locations after the exe code segment. Yesterday I got a chance to look at the h2v disassembly and here's what I've found so far...

Perspective Pointer Address - 0x8A5288 (Holds pointer to a particular perspective function)
Example: poke address 0x8A5288 with data 0x00000000 to detach camera from biped, 0x81D64C00 for first person, 0xCFD94C00 for dead, 0xE4CF4C00 for scripted etc...

The code below is what should directly modify the 3rd camera array for Player 1...

.text:00482F6D mov eax, [esp+68h+var_40] ; get base address
.text:00482F71 movss xmm0, dword ptr [eax]
.text:00482F75 subss xmm0, dword_8BD4F0
.text:00482F7D comiss xmm0, xmm5
.text:00482F80 ja short loc_482FC0
.text:00482F82 test byte ptr [ebp+8], 1
.text:00482F86 jz short loc_482FB7
.text:00482F88 xor ecx, ecx
.text:00482F8A cmp CameraDefinitions[esi], cx
.text:00482F91 jle loc_4830EB
.text:00482F97 lea ebx, [ebx]
.text:00482F99
.text:00482F99 loc_482F99: ; CODE XREF: sub_482EEC+C4j
.text:00482F99 movsx eax, cx
.text:00482F9C add eax, eax ; calculate index (item number * 4)
.text:00482F9E add eax, eax
.text:00482FA0 add ecx, 1 ; next definition
.text:00482FA3 fld dword ptr [eax+edx] ; get data
.text:00482FA6 fstp dword ptr [eax+ebx] ; store data in 3rd camera array
.text:00482FA9 cmp cx, CameraDefinitions[esi]
.text:00482FB0 jl short loc_482F99
.text:00482FB2 jmp loc_4830EB


You will want to hook into 0x482FA3 if you plan on modifying the camera...do a quick lookup in the camera definitions table (based on the current registers ecx and esi) to determine what value its modifying, then substitute your own...
Hey lol, are you that guy from youtube posting on the video? About the camera, I'm not sure how bitterbanana did it for halo 1 but theres a camera track that is in the map file so it always changes. I'll look into this later but for now I sleep.

[Ernegien]

No I'm not the youtube guy or whatever...but my previous post outlined exactly what bitterbanana did for his camera hack :P

Since you don't seem too familiar with assembly, you might want to try a different route (the one I started with) by nulling every command that writes to the 3rd camera array of whatever player you're using, then you can manually poke in whatever camera values you need, based on user input.

[Digikid]

I am unable to understand why you would want to do a crappy perspective such as 3rd Person. 1st person perspective is the better perspective....

[Dr Dmoney]

But you can make first person better aswell.

[Anthony]

I am unable to understand why you would want to do a crappy perspective such as 3rd Person. 1st person perspective is the better perspective....

And I am unable to understand why you can't see this isn't really for game play. Its more of something to do for fun, and of course its a step forward for making trainers....


and btw a flycam owns all
http://img507.imageshack.us/img507/871/flycamge2.jpg

[Anthony]

ive gotten 3rd person realtime ^^ only workz on xp so never got around to relaseing it (stupid vista backwards comaptablity)

3rd person realtime? Does that mean you can follow around the person in realtime? >_> thats exactly what 3rd person is...

[Con]

what? it works fine, whatever problem you're getting with skyline's app is because you're on XP or something.

[Anthony]

Im not trying to be a dick but it sounds like you are just talking out of your ass and have no idea what your talking about... What do you mean by it switches between realtime and hardcoded?

[Skyline]

He probly means that mine just keeps sending a value to an address while his permanently changes it to third person.

[Anthony]

He probly means that mine just keeps sending a value to an address while his permanently changes it to third person.

to tell the truth I highly doubt that this guy knows what hes talking about and I am pretty sure that he doesn't have a trainer

[Patrickssj6]

to tell the truth I highly doubt that this guy knows what hes talking about and I am pretty sure that he doesn't have a trainer
No he is right...

"Look what writes to this value"...you null everything out that access that address...the only prob is that there is anti debugger protection in H2V.

[Ernegien]

sorta his switches between realtime and hardcoded(not his fault...hired guns fault...noway to prevent it unless you programed the camera and know EXACT addresses and code name(name of the bool/sring/vector)...nuffsaid)
LAWL, I'm going to have to side with Anthony on this one...you guys really don't know what you're talking about...besides maybe patrick :P

I can however verify that anthony does have a working flycam for h2v, and much much more ;)

[Kornman00]

Right...

[wannabeapilot]

And I am unable to understand why you can't see this isn't really for game play. Its more of something to do for fun, and of course its a step forward for making trainers....


and btw a flycam owns all
http://img507.imageshack.us/img507/871/flycamge2.jpg

hey man is your fly cam available for download? :)

[Skyline]

[Edit] No comment, i dont want to explain myself to n00bs.
Maybe because you can't. As I recall you said FOV was entirely impossible and yet I have managed to make a somewhat working one; no you are not part of an anti-cheat team for halo 2 vista, this much is clear.

Thank you for helping me Ernegien. There might be something more to this in a weeks time. Memory hacking won't work here anymore.

[Limited]

Halo 2 regulary checks the intergrity of its memory, if you change a vlaue (such as FOV) while it does it's checks, the game will crash. Debugging in cheat engine also crashes the game. Perhaps thats why skyline said "Memory hacking wont work here anymore."

Oh and anthony's stuff does indeed own :D

Also, I heard rumors theres a very evil program out there, hope THAT one gets patched asap.

[bitterbanana]

FYI, you shouldn't need to find any pointers for camera editation. They should all be stored in static locations after the exe code segment. Yesterday I got a chance to look at the h2v disassembly and here's what I've found so far...

Perspective Pointer Address - 0x8A5288 (Holds pointer to a particular perspective function)
Example: poke address 0x8A5288 with data 0x00000000 to detach camera from biped, 0x81D64C00 for first person, 0xCFD94C00 for dead, 0xE4CF4C00 for scripted etc...

The code below is what should directly modify the 3rd camera array for Player 1...

.text:00482F6D mov eax, [esp+68h+var_40] ; get base address
.text:00482F71 movss xmm0, dword ptr [eax]
.text:00482F75 subss xmm0, dword_8BD4F0
.text:00482F7D comiss xmm0, xmm5
.text:00482F80 ja short loc_482FC0
.text:00482F82 test byte ptr [ebp+8], 1
.text:00482F86 jz short loc_482FB7
.text:00482F88 xor ecx, ecx
.text:00482F8A cmp CameraDefinitions[esi], cx
.text:00482F91 jle loc_4830EB
.text:00482F97 lea ebx, [ebx]
.text:00482F99
.text:00482F99 loc_482F99: ; CODE XREF: sub_482EEC+C4j
.text:00482F99 movsx eax, cx
.text:00482F9C add eax, eax ; calculate index (item number * 4)
.text:00482F9E add eax, eax
.text:00482FA0 add ecx, 1 ; next definition
.text:00482FA3 fld dword ptr [eax+edx] ; get data
.text:00482FA6 fstp dword ptr [eax+ebx] ; store data in 3rd camera array
.text:00482FA9 cmp cx, CameraDefinitions[esi]
.text:00482FB0 jl short loc_482F99
.text:00482FB2 jmp loc_4830EB


You will want to hook into 0x482FA3 if you plan on modifying the camera...do a quick lookup in the camera definitions table (based on the current registers ecx and esi) to determine what value its modifying, then substitute your own...

No I'm not the youtube guy or whatever...but my previous post outlined exactly what bitterbanana did for his camera hack :P
Don't ignore this information. It looks correct to me. :)

[Kornman00]

Except the way he explains it makes me question his level of knowledge...

[JackRabbit72380]

Ok the new version of the app 1.3 had the same glich.
None of the apps seam to work on vista64 ultamate.
However I have just done a fresh installation of vista32 ultamate and the app works with one small prob it still crashes the game wen I get to mm or cutscene.

So it's not only an ultamate version issue I beleve that the app wont work on any of the vista64's due to a glich that I beleve could be fixed because it seams like a small glich ! anyway good thang all vista's come with 32&64bit os discs huh!

Ok next I'll say that I wish the left & right movement of the Fov worked but i bet your alredy working on that.?idk but I hope so!

Now for the realy inportent part. Makeing the app not crash!!!
Idk all the tech stuff or even how this app was made im no programer but
I hacked the exe of h2v and found this line of code that I think may have some effect as to why the app is crashing & I beleve its a security protection bult in to the game some how it may only be in the exe it self but idk.

Hear is the code I have extracted with an app called rezhacker...

<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="AsInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>


Intresting huh?
Im just wondering what changing false to true would do even if it didnt work ?

[Kornman00]

Thats just for allowing a developer to specify if the user executing the app needs to have admin properties.

[Patrickssj6]

also the app crashes h2v(but no bsod) if you leave 3rd person enabled
Protection....read Limited's post on it.

[Skyline]

Don't ignore this information. It looks correct to me. :)
I did not ignore this, I actually just got IDA and am learning.

And yes kiwi I have heard you many times already.

[jngrow]

pretty cool, and also

SUPAH HEROW STATIK SHOK :woop:

I just really wished this was for SP. :/

[Limited]

*cough*speed hack found*cough* but yea what you say is true because whenever i try to use the speed hack i run bout half of coag then the h2 just quits and cheatengine displays "??" where the values were.
Like I said a billion times, h2v protects its memory, trying to stop cheaters. It detects your cheating and crashes halo. the ?? is shown in cheat engine due to the fact the process halo 2 has closed, so it cant read halo 2's memory because there is no memory of it to read. It doesnt exist.

[Ernegien]

Like I said a billion times, h2v protects its memory, trying to stop cheaters. It detects your cheating and crashes halo. the ?? is shown in cheat engine due to the fact the process halo 2 has closed, so it cant read halo 2's memory because there is no memory of it to read. It doesnt exist.
That's a very vague description at best...you cant magically keep track of every byte allocated by the game and protect them from being edited by figuring out when and where, all at once :P

You can however easily bypass any debugger checks by patching your trainer code into the executable...

[Limited]

That's a very vague description at best...you cant magically keep track of every byte allocated by the game and protect them from being edited by figuring out when and where, all at once :P

You can however easily bypass any debugger checks by patching your trainer code into the executable...
Thats true, but then again KIWIDOGGIE says he knows things but doesnt actually so I dont want to confuse him :)

Also yes that is possible but its a bit annoying having to do that every single time you want to test it :D

[Kornman00]

You can however easily bypass any debugger checks by patching your trainer code into the executable...
Assuming one could bypass the protection on the executable itself

[Patrickssj6]

I did not ignore this, I actually just got IDA and am learning.

And yes kiwi I have heard you many times already.

IDA has basically nothing to do with the stuff he posted ;)

Either you find a code cave in your app or you ASM it...with MASM or whatever you like.

[Kornman00]

True, and i know that if a process closes it shows ??. and i dont think that there is too much protection on h2v. I know theres some for online play. I have even gotten a text hack so my gamertag doesent say KIWIDOGGIE whenever you hold back on your pad to display the names(host only) but once again it works for about 20 seconds then i get the "Halo 2 Has Crashed" so yes there is some protection. Not very good one tho
I'm sorry, I can't take it any longer, just please, stop posting in this thread :/

[Limited]

True, and i know that if a process closes it shows ??. and i dont think that there is too much protection on h2v. I know theres some for online play. I have even gotten a text hack so my gamertag doesent say KIWIDOGGIE whenever you hold back on your pad to display the names(host only) but once again it works for about 20 seconds then i get the "Halo 2 Has Crashed" so yes there is some protection. Not very good one tho
It crashed the game right tho? Thats what it is suppose to freaking do, omg.

[Dr Dmoney]

Yeah, the game searches for things that shouldn't be there. If you have it turned an 100&#37; of the time it will aventually crash...

[Con]

It only crashes when you use the 3rd person in places it's not supposed to be used in, like menus.

[Dr Dmoney]

That whats happens to me... I use vista ultimate 64x and it has been having problems.

[Ernegien]

It only crashes when you use the 3rd person in places it's not supposed to be used in, like menus.
That's because if he's achieving a 3p view by any other way other than moving a value into 0x8A5288...he's not doing it right :P

Also, you don't need to be continuously connected to the h2v process to actively "train" it. You really just need to obtain the base address at which it's loaded into memory, from there you can do the rest unconnected...and if you edit things the right way I'm assuming the game wouldn't know the difference :?

[Skyline]

That's because if he's achieving a 3p view by any other way other than moving a value into 0x8A5288...he's not doing it right :P

Also, you don't need to be continuously connected to the h2v process to actively "train" it. You really just need to obtain the base address at which it's loaded into memory, from there you can do the rest unconnected...and if you edit things the right way I'm assuming the game wouldn't know the difference :?
Then I guess I'm doing it wrong :P. I tried what you said but there is nothing at that address.

[Kornman00]

mabe that h1 talk? that address seems to be null
I'm pretty sure I told you to stop posting in this thread.

[xExus]

Oh hey skyline I had no idea it was you that made this wonderful hack.
I thank you a lot since I used it in my vid :)

[Skyline]

I'm pretty sure I told you to stop posting in this thread.
I don't see why you care so much.

Anyways, I don't see this going anywhere anymore.

[Kornman00]

You obviously can't see it seems :v

[Skyline]

You obviously can't see it seems :v
"You" Is in italics for a reason.

[Kornman00]

':v' is there for a reason.

Not my fault if he wants to keep talking out of his ass

[Skyline]

':v' is there for a reason.

Not my fault if he wants to keep talking out of his ass
:smithicide: You don't get it, I was talking to you -Kornman00- why do you care so much if he posts in this thread so much.

[Kornman00]

because its locked! clearly, if hes posting in a locked thread, there is a problem at hand :v

oshi-