H2UnlockPatcher: Halo 2 Beta Unlocker

Here’s a little side project that I didn’t have very much time to fully complete. It is a unlocked Halo 2 Beta! Currently when you sign in, just select “do not sign in” and then from there you can use System Link, Split Screen, Xbox Live (arranged game).

Just a note, the System Link is missing some code to allow xbox’s to see each other, I am slowly working on a fix for this. I spent a few weeks a few months ago working on my own xbe (Xbox Executable) patcher and patch creation system, which allowed me to build patched executable really quickly. In this time I recoded the entire main menu in assembly to “unlock” everything, I even had force loading which is disabled in this patcher due to unforeseen crashes.

Features List:

  • Removal of the EULA screen
  • Removal of all watermarking
  • Removal of all main menu limitations (if code is still there)
  • Re-linking of System Link, Xbox Live, and System Link screens.
  • Controller input hook (not active)

Pictures:

Unlocked Main Menu
Unlocked Main Menu

Halo 2 Beta Ingame

You will need the executable matching SHA1: C42E58FA8EEDCD4F46707C2FD0D8CEFCC61A6410

This will not be redistributed.

Download (Requires .NET Framework):

H2UnlockPatcher

peace,
-kiwidog

Unlocking Brink’s Console on Xbox 360

Xbox 360 Brink Unlocked Console

Brink, one of the newer id Tech games running under the engine idTech4 still keeps to the original roots of the idTech engine. I had a hunch that the console would be easily unlocked with just a keyboard. Well they did better than that to leave a console fully enabled in the game…or did they?

I started to mess around with Brink, reversing the engine and comparing it to the previous idTech games. They are very similar with huge improvements and very good work done by the guys at id software. Just for personal use I wanted to be able to run my console commands just like on the PC version.

The console command that gets pushed through the engine to “show” the console is “com_allowConsole” or “com_allowFullConsole”. With experimenting with this engine, I found out that the button binds are re-loaded from a .cfg file within the files inside of the games archives. I did not to very much research into the game archives, BUT all hope is not lost. If you were to search for the string “com_allowFullConsole” you can find where a cvar list is generated with defaults and pointers to game code to execute similar to Call of Duty (Quake 3 Engine). The engines are similar in the way that they handle cvars.

Continue reading “Unlocking Brink’s Console on Xbox 360”

Call of Duty Series Console Unlocking on All Platforms

DOGBIT.IN Call of Duty Console

Since Call of Duty 4 was released on PC, I wished that there would be some way or form to enable console for the Xbox 360 and PlayStation 3 platforms. There were findings in the way of removing the RSA Security checks on the executable on both platforms when the appropriate tools were released publicly. Mainly that method was used for cheating, unlocking everything online and changing leaderboard stats. This is not what I wanted to be done. Some cool things did come out of it like a CoDJumper mod and a few other zombie mods but most of the time it was just for “10th Prestige Lobbies” and for cheating.

In early of 2007 Infinity Ward and Activision Released a open public beta of Call of Duty 4 for the masses to play, then pulled the servers after the beta went down. This left a collector that wanted to play the game again unable due to the LIVE servers being taken down and getting signed out of live when they wanted to play.

Continue reading “Call of Duty Series Console Unlocking on All Platforms”

Call of Duty: Modern Warfare 2 Debug Output

Some patches were created to have all of the debug output that gets suppressed in the retail versions of Call of Duty to get spit out over a custom console. This is just an output that was created. The patch is also included with the debug output. You will need xorloser’s xextool and TheFallen93’s xepatcher tools to compile this patch on to a clean xex. The patches were created by kiwidog (http://allenthinks.com)

Here is the patch.

# ============================================================================
#   Call of Duty Modern Warfare 2 Multiplayer Debug Output Patches by kiwidog
# ============================================================================
		.globl _start
_start:
		.set DisableChecks, 0x821AF044
		.set InstallHook,	0x8227EB58
		.set Hook,			0x820C8390
		.set DbgPrint,		0x8242CCA4
# ============================================================================
#	Hook
# ============================================================================
		.long Hook-0x8000
		.long (9f - 0f) / 4
0:
		mflr	%r23
		mr		%r3, %r4
		li		%r4, 0
8:		bl		DbgPrint-((8b-0b)+Hook)		
		mtlr	%r23
		blr
9:
# ============================================================================
#	Disable RSA/Sha256 Checks
# ============================================================================
		.long DisableChecks-0x8000
		.long (9f - 0f) / 4
0:
		li	%r3,	1
9:
# ============================================================================
#	Install Hook
# ============================================================================
		.long InstallHook-0x8000
		.long (9f - 0f) / 4
0:
		bl		Hook-InstallHook
9:
# ============================================================================
		.long 0xffffffff
		.end
# ============================================================================

Have fun and good luck 😉

Continue reading “Call of Duty: Modern Warfare 2 Debug Output”

ReachUnlock 1.2

Hey everyone, I have been getting so many good reviews about ReachUnlock and why I didn’t support the gravity and all this other blarhargy so I created an update to it.

This tool will remove restrictions that are on the xex (Xbox 360 executable) format for Halo Reach. A list of the current features are…

  • Remove Header Check
  • Enable Debug Camera
  • Remove Map Version Check
  • Remove Header/Footer Check
  • Remove XDK Version Check
  • Remove Tag Name Check
  • No BINK Playback
  • Remove .map RSA Check
  • Modify Single-player Gravity

Continue reading “ReachUnlock 1.2”

Brink Research – Developers Console Enabled on Consoles (Xbox360/PS3)

I finally worked out all of the bugs in the patcher for Brink. I will post the main patches source and the compiled binary for people on windows to use. If you want to post this, PLEASE link back to this site.

 

The above patches will enable the developers console on startup. If you decompress the lzx pk2 files then modify the default_button_layout_xenon.cfg to bind the console or anything else you could get the console more than once. But for now that is all I can give you all.

Continue reading “Brink Research – Developers Console Enabled on Consoles (Xbox360/PS3)”