Halo 3 Retail Game Research

[kornman00]

Every byte xor'ed together after the header.

*every 4 bytes

or every 32 bits

[edinajughead]

How do you use it?

- First apply the ppf to zanzibar.map with ppf-o-matic
- Now download the program XDVDMulleter Beta 10
- Use it to rebuild your Halo 3 ISO with the patched zanzibar.map in place of the old.
- Burn and test then report back here with the results and if possible some screenshots or a vid

Ill do it for you, but I've patched zanzibar and im clueless on how to build it back into the iso, if you let me know how i'll do it.

[Digital Marine]

Edinajughead, first download ISO Injector. I'm sure there is a link on here or on Google. If you can't find a link for whatever reason PM me and I'll be happy to upload it.

First open up your Halo 3 ISO file in a hex editor and goto (Ctrl + G) to 3517530112 in decimal and beginning of file. If it's correct that should say "head" with Zanzibar internal name and scenario path beneath it. So, if that's correct then open the Config.xml that was included with ISO Injector and insert this into it:

Code: Select all

  </game>
    <game name="Halo 3">
    <file name="zanzibar.map" offset="3517530112" size="129523712" />
  </game>

Save the .XML and open the ISO Injector program. From there it should be self explanatory

[edinajughead]

Thanks for that post , ill try it when im home in a few hours, im quite familiar with the injector so it should be a snap. One question though, do i still need to rebuild it after ive injrcted the map with this method?

[Prey]

Thanks for that post , ill try it when im home in a few hours, im quite familiar with the injector so it should be a snap. One question though, do i still need to rebuild it after ive injrcted the map with this method?

No. And marine you accidentally put a two closing 'game' tags.

[edinajughead]

so do I need to change that before I add it to the XML?

[Prey]

Code: Select all

  <game name="Halo 3">
    <file name="zanzibar.map" offset="3517530112" size="129523712" />
  </game>

[Digital Marine]

Opps, sorry about that. Thanks for fixing it. I was sleepy when I posted that.

One you inject the map (it should be signed and all that already), you should just be able to burn the ISO. I'd try it myself but it took two hours for the last disk I burned. I guess it could be because I was running so many processes at once. But still...

[edinajughead]

Burning it now, thanks for the help guys! I swung by radio shack and picked up a capture card on my way home to, so i'll post a vid if it works, should i post one even if it dosnt?

[shade45]

Thanks alot man your a great help! Yes even if it doesn't work a vid would be amazing

[edinajughead]

Alright, well the game loaded, so did last resort, but when in-game, there were no changes to the shotgun I'll upload a vid still if you want it though, nothing really to see.

[Digital Marine]

Edina, try to take out the hard drive if you haven't already. It may of not changed because the cache. So either clear the cache via the System Blade or just remove the HDD.

[shade45]

^Yes try it without the HDD

[edinajughead]

Wow, cant belive i didnt think of that, last resort was my last map played to so hah, oops. Any way, i tried it without the HDD and it failed to load the map, so im gonna say that you got the encryption wrong

[GametagAeonFlux]

shade, just an idea. Halo 2's maps didn't change their signature if you swapped things, so did you try giving the Shotgun the Rocket bullets and the Rocket Launcher Shotgun bullets? It's at least worth a try I think.

[shade45]

Wow, cant belive i didnt think of that, last resort was my last map played to so hah, oops. Any way, i tried it without the HDD and it failed to load the map, so im gonna say that you got the encryption wrong

Thanks alot for taking your time and testing. The signature isn't wrong all this means is there's another form of protection being used on the maps.

shade, just an idea. Halo 2's maps didn't change their signature if you swapped things, so did you try giving the Shotgun the Rocket bullets and the Rocket Launcher Shotgun bullets? It's at least worth a try I think.

Yeah I never even thought of that it is worth a try

[Shadow LAG]

Epic immediate Phail. Last time when I forgot to sign the signature it loaded up a percentage and stopped around 30% to indicate failed map. When I resigned it this time it went to 0% then failed. Which tells me there is a "checks and balances" protocol in place. Both times my hdd was in SATA mode meaning the 360 did not detect my hdd and there was no cachee stored. I edited shrine (sandtrap) and changed the flip text of the elephant to "Halomods, Fuck yeah!"

Simple answer is it doesn't work when resigning. ;_;

[Digital Marine]

That hash in the header, I think that has to do with all the data above it. So, if you change the internal name or scenario path, or even the map type, or the CRC checksum then you'll invalidate the hash that is there. Most likely that hash is SHA or RSA. If it's RSA then the we need the private key which would be difficult to get. I hope it's SHA

[Anthony]

has anyone checked to see if the signature of the map is in the info file?

[Digital Marine]

Doesn't look like it is.

EDIT:
Looks like there is some hash on the bottom of the info file to? I don't see any relation to the .map file though.