hl2h, branch masterSimple internal C++ cheat for HL2 for GNU/Linux.
https://git.2137697.xyz/hl2h/atom?h=master2026-11-06T15:30:21Zdocs: record the settings table in the plan2026-11-06T15:30:21Zsalmoniksalmonik@tuta.io2026-11-06T15:30:21Zurn:sha1:7ddd5c680a28b32c0ba864699864e8b6b090d664Config: generate save/load/reset from one settings table2026-11-06T15:30:10Zsalmoniksalmonik@tuta.io2026-11-06T15:30:10Zurn:sha1:e339d1dc45b3113648552b0002e0c15f55e61cb2
Every persisted setting now lives in a single descriptor table
(config_table.cpp) with its section, key, type, default and clamp range.
config_save(), config_load() and config_reset_defaults() iterate it, so the
three functions can no longer disagree about defaults or bounds, and the old
hand-written 350-line parser is gone.
Section and key names are unchanged, so existing config files keep loading, and
the duplicated [view] scalar clamp block is replaced by per-entry limits.
docs: record the esp.cpp split in the plan2026-11-06T15:26:47Zsalmoniksalmonik@tuta.io2026-11-06T15:26:47Zurn:sha1:181fee4681e3ec65536dafd8a2093c44bdf8fdbaESP: finish the split into entity, combat, item and projectile units2026-11-06T15:25:48Zsalmoniksalmonik@tuta.io2026-11-06T15:25:48Zurn:sha1:c43cb2e42a5ac1cc09f83cd72fa7e568c9ef37e1
esp.cpp keeps the scan and drawing (~1000 lines, down from 3665). Entity
lookups and NPC classification move to entity_query.cpp together with the
per-map caches and the session reset; combat (aimbot, silent aim, melee,
spread, triggerbot) moves to combat.cpp. Shared helpers are declared in
esp_internal.h.
ESP: extract item ESP into its own translation unit2026-11-06T15:23:29Zsalmoniksalmonik@tuta.io2026-11-06T15:23:29Zurn:sha1:5a9fd14f9424d7f66b0454464be95b40b10ee5c4
Second slice of the esp.cpp split. Model-name lookup joins the shared helpers in
esp_internal.h.
ESP: extract projectile ESP into its own translation unit2026-11-06T15:23:01Zsalmoniksalmonik@tuta.io2026-11-06T15:23:01Zurn:sha1:7352766582e140483ebcc1d8660a76e1bccbec0d
First slice of the esp.cpp split. Shared helpers move to esp_internal.h
(entity lookups, screen size, surf primitives, segment projection); esp.cpp
keeps the definitions and drops their static qualifiers.
Headers: split the shared header by declaration group2026-11-06T15:21:27Zsalmoniksalmonik@tuta.io2026-11-06T15:21:27Zurn:sha1:3c27e7ce262e612fa75c6e6f090e04041a688861
hl2h.h becomes an umbrella over core.h (logging, init stage, module snapshots,
interfaces, netvars, CUserCmd, engine constants, vector math), settings.h
(feature ids, feature state, user settings) and features.h (cross-module
declarations). Translation units keep including hl2h.h, so this only moves
declarations.
Hooks: central vtable install with restore support2026-11-06T15:19:25Zsalmoniksalmonik@tuta.io2026-11-06T15:19:25Zurn:sha1:9f0724dcd25a06c5674d30d045dc485a341253b1
Move vtable patching into hooks.cpp: one call clones the table, validates every
slot, records the originals and installs the clone. Installs happen from the
setup, game and paint threads, so the bookkeeping is mutex-protected.
Client, CInput, IVModelRender, IStudioRender and ISurface all use it, and
hooks_restore_all() can now put every interface back (previously impossible).
Chams: leave engine-forced material passes alone2026-11-06T15:17:02Zsalmoniksalmonik@tuta.io2026-11-06T15:17:02Zurn:sha1:8a5efe20e6e077e10592aa427d704836d2a08dd1
Shadow-depth and reflection passes call DrawModelExecute with a material
already forced via IVModelRender::ForcedMaterialOverride. Chams could not tell
that apart from a free draw, substituted its own material (putting chams into
the shadow map) and then cleared the override to null, which broke the shadow
material for every model drawn afterwards.
Hook slot 1 as a tracker so the current forced material is known, and skip the
chams substitution whenever one is active.
Fix audit findings: crash safety, correctness, rendering, performance2026-11-06T15:09:55Zsalmoniksalmonik@tuta.io2026-11-06T15:09:55Zurn:sha1:33f5ed9ef58f26c6b3b52cf605dd4311d658a60d
Crash/UB:
- gate every hook behind an init-stage flag until config/surface/input are ready
- publish module maps as immutable atomic snapshots instead of reallocating
shared vectors under unlocked readers
- validate the %ebp walk in the RandomSeed/RandomFloat hooks against the stack
- bounds-check every RecvTable/RecvProp/string dereference with module_range()
- preserve the Itanium vtable header when cloning (client, CInput, model render,
studio render)
- reject negative usercmd sequence numbers; guard config_load against a null
section target; cap the bone parent walk; check mprotect; drop PROT_EXEC on
the GOT patch; absorb server.so .bss tail
Correctness:
- filter dormant entities across ESP, aimbot, triggerbot, melee, items and
projectiles (slot self-tested against the local player)
- reset the server-health latch per map and only latch on valid model indices
- bone cache sized for the 128-target scan; set valid=false on every failure;
head_position keeps searching past an invalid bone
- vischeck steps past glass by probing until clear, and ignores entities owned
by the target (held weapons, bone followers)
- aimbot: maxs no longer disables it, AABB-aware FOV prefilter, lock hysteresis,
lead point re-checked for FOV and visibility
- spread: seed hook arms on the no-spread toggle alone; engine toggle only
controls the RandomFloat zeroing
- resolve m_hOwnerEntity/m_hOwner; NPC lead velocity from the server entity
- vector_angles pitch range, point_ground normal test, underwater jump+duck no
longer skips combat, semi-auto press/release edge for synthetic fire
- item/projectile markers and blast rings refresh origin per frame while
discovery stays at 10 Hz; trajectory uses the real m_DmgRadius and honours
the blast-radius toggle
Rendering/GUI:
- one overlay draw per engine frame (FRAME_RENDER_START boundary), fixing
alpha stacking and the speed-graph flicker
- clipped lines/outlines and ellipsised text instead of drawing past the
content pane or shifting over neighbours
- dropdown dismissal consumes the click; hover ignores hidden controls
- chams: reset AlphaModulate, reference shared materials once, restore prop
tint colour; fonts created once per handle
- projection uses Source's 4:3 aspect scaling and roll; screen size refreshed
each frame; FOV circle gated on the aim toggles, not the bind
Performance:
- TTL caches for NPC relation, friendly/neutral and damage class
- model names memoised per model index
- entity pointer -> index cache for the triggerbot (was a 4096-slot walk/tick)
Build:
- real Makefile with -MMD dependency tracking, debug/release objects and an
always-relink rule; build.sh kept as a thin wrapper