AlliedModders Wiki - User contributions [en]

Metamod:Source Development

2007-07-10T00:37:43Z

Showdax: Restored full page

This article is an introduction to [[SourceMM]] coding.

{{qnotice|The majority of this documentation should be merged or moved into an article about [[SourceHook]].}}

{{qnotice|This article probably needs some better formatting.}}

=Requirements=
You must have the Valve [[HL2SDK]], available from your [[Steam]] Menu. For Windows, you must have [[Microsoft Visual Studio]] 7.0 or 7.1 (we have not tried 6.0). For [[Linux]], Valve requires you use at least [[GCC]] 3.4.1. You should also have a copy of the [[Metamod:Source]] source code, available [http://www.sourcemm.net/ here] (sourcemm/sourcehook and sourcemm/sourcemm).

For [[Microsoft Visual Studio]], you should make sure that you have the following HL2SDK paths in your include settings (Tools -> Options -> Projects, VC++ Directories, Include Files), as well as the "sourcehook" and "sourcemm" folders:
*dlls
*public
*public\vstdlib
*public\tier1
*public\tier0
*public\engine
*public\dlls
*tier1
*lib\public (this should be in your Library Paths!)

=Plugin API=
In order to write a plugin, you must implement the ISmmPlugin interface, similar to IServerPluginCallbacks. Each Metamod:Source release has a minimum required interface version and a current version. The minimum version is guaranteed to be upward compatible to the current, however, it may be lacking some features.

Once you've implemented the interface, you must also have a global singleton of your plugin available. There are a few macros to assist you in properly exposing the interface as a DLL and setting up the API states.

*{{bcode|PLUGIN_GLOBALVARS}}() - Place in header. Declares the global variables that some API calls require (such as g_SHPtr and g_PLAPI).
*{{bcode|PLUGIN_EXPOSE}}(class, singleton) - Place in .cpp file. Declares the external CreateInterface function which exposes the API.
*{{bcode|PLUGIN_SAVEVARS}}() - Use first thing in ISmmPlugin::Load(), saves the global variables sent from SourceMM.

The actual plugin API you must implement as of this writing is version 004. To see a description of each of the functions, you can view the doxygen information here. Note that the Load, Unload, Pause, and Unpause functions allow you to refuse the action and copy an error message (you should check to make sure error is not NULL - it can be).

=SourceHook (Hooking)=
SourceHook is the engine used to intercept function calls, much like Metamod. The difference with SourceHook is that it can intercept any virtual function in any class that, at compile time, you have the header for. SourceHook has the following steps of operation:

* Declare the prototype of the function you are going to hook. This generates compile-time code that is able to pinpoint exactly how to go about hooking the function.
* Hook the function - as a member function of another class or a regular static function.
* Before the hooked function is called, all of the "pre" hook handlers attached to it are called. Each hook can set a special flag, the highest of which is chosen as a final operation. This flag specifies whether the original function should be called or not.
* Once all the hooks have been called, SourceHook decides whether to call the original function. Another set of hooks are called directly after, called "post" hook handlers. You can specify whether each hook is a post or pre hook - it simply changes whether it's called before or after the original call is made.
* After you are done using a hook, you can safely remove it.

For example, let's say you wanted to intercept log messages in VEngineServer. Observe the prototype:
<pre>
virtual void LogPrint( const char *msg ) = 0;
</pre>
This is a virtual, public function of a class we have an instance of (let's say in IVEngineServer *m_Engine) and that we have the header for. It can be intercepted.

The first step is to figure out how to declare its prototype to SourceHook. This function is void, and has one parameter. The declaration macro follows these formats:

*{{bcode|SH_DECL_HOOK}}n - n is the number of parameters
**The parameters are: Class name, member function name, attributes, overloaded?, the return type, and a list of the parameter types.
*{{bcode|SH_DECL_HOOKn_void}} - n is the number of parameters
**_void specifies that the function does not return a value. The format is the same as above except the "return type" parameter is missing.
*'''Note:''' Not covered here are the SH_DECL_HOOKn[_void]_vafmt hooks. These can hook string-formattable variable argument lists. You do not pass the string format or ellipses parameter. SourceHook will automatically format the string for your hook.

Our macro will look like this:
<pre>
SH_DECL_HOOK1_void(IVEngineServer, LogPrint, SH_NOATTRIB, 0, const char *);
</pre>
This line must appear outside of a function. It means "Declare a hook prototype for LogPrint in IVEngineServer, which is a void function that has one parameter, which is a const char *".

Next we must actually hook the function. You can do this wherever you want to begin the interception. The two macros for hooking look like this:

*{{bcode|SH_ADD_HOOK_STATICFUNC}}(class, memberfunction, instance_pointer, handler, post) Hooks a virtual function to a static/global function.
**class - The name of the class
**memberfunction - The name of the member function
**instance - A pointer to an instance of the class
**handler - Your function that will be called on hooking
**post - true for post operation, false for pre operation
*{{bcode|SH_ADD_HOOK_MEMFUNC}}(class, memberfunction, instance, myinstance, myfunction, post) Hooks a virtual function to a member function of another class.
**class - The name of the class
**memberfunction - The name of the member function
**instance - An pointer to an instance of the class
**myinstance - A pointer to an instance of the class that has the handler member function
**myfunction - The name of the handler member function in your class
**post - true for post operation, false for pre-operation

Let's continue with the example. To hook LogPrint to a function in your class, CMetaHooks (instance, g_MetaHooks), you would use:
<pre>
SH_ADD_HOOK_MEMFUNC(IVEngineServer, LogPrint, m_Engine, &g_MetaHooks, &CMetaHooks::LogPrint, false);
</pre>
To remove the hook (either once it will no longer be unused, or at unload time):
<pre>
SH_REMOVE_HOOK_MEMFUNC(IVEngineServer, LogPrint, m_Engine &g_MetaHooks, &CMetaHooks::LogPrint, false);
</pre>
Now, your function contents will look something like this:
<pre>
void CMetaHooks::LogPrint(const char *msg)
{
//Code here
RETURN_META(MRES_IGNORED);
}
</pre>
Note this return statement. This style of returning is similar to Metamod's, where you can set four different flags to indicate how you would like SourceHook to proceed. In Metamod, this return statement was required. In SourceMM, it is only required if you wish to set a return state other than MRES_IGNORED.

*{{bcode|MRES_IGNORED}} - No states were changed, act as though nothing happened. Original function is still called.
*{{bcode|MRES_HANDLED}} - Something changed, but the original function was still called. This can be used to tell another plugin that you did something.
*{{bcode|MRES_OVERRIDE}} - The original function will still be called, but your return value will override whatever it returns.
*{{bcode|MRES_SUPERCEDE}} - The original function is not called, and your return value will be what is returned to the caller.

Note, that if you need to return a value, there is another macro. For example:
<pre>
RETURN_META_VALUE(MRES_SUPERCEDE, value);
</pre>
This is required for non-void functions, athough the return value is ignored using MRES_IGNORED or MRES_HANDLED.

Alternatively, you can hook to static member functions which has a slightly easier syntax. The DECL_HOOK line does not change. To add the hook:
<pre>
SH_ADD_HOOK_STATICFUNC(IVEngineServer, LogPrint, m_Engine, LogPrint_handler, false);
</pre>
Removing the hook:
<pre>
SH_REMOVE_HOOK_STATICFUNC(IVEngineServer, LogPrint, m_Engine, LogPrint_handler, false);
</pre>
Declaring the handler:
<pre>
void LogPrint_handler(const char *msg)
{
//Code here
RETURN_META(MRES_IGNORED);
}
</pre>
Note that vafmt functions hooked with SourceHook assume that the vafmt is for a printf style string, and that the vafmt occurs at the end. When setting the parameters, you do not include the '...' notation, and SourceHook will vafmt the input string for you (meaning you also don't specify ... in your hooked function).

=Calling Original Functions=
Often it will be necessary for you to call a function that's hooked, however, you don't want the hooks to be included in the calling. For example, if you want to entirely supercede a function and call it yourself from within a hook. To do this, you must request a call class. This is similar to MDLL_x() from Metamod for Half-Life 1.

Continuing with the above example, let's say we want to supercede the original call and log a different message. Assume we also have the pointer m_Engine which is a <tt>IVEngineServer *</tt>.
<cpp>
SourceHook::CallClass<IVEngineServer> *Engine_CC = SH_GET_CALLCLASS(m_Engine);

SH_CALL(Engine_CC, &IVEngineServer::LogPrint)("This is a log message!\n");

//When you are done with the pointer..
SH_RELEASE_CALLCLASS(Engine_CC);
</cpp>

Because of the complex nature of inheritance, instance pointers, and vtables, this syntax can be quite daunting. You may wish to make macros for specific functions or classes you use quite often, to reduce the amount of typing. For example:
<cpp>
//Assuming you have a global pointer g_Engine...
#define ENGCALL(func) SH_CALL(g_Engine, &IVEngineServer::func)

//Then you can do:
ENGCALL(LogPrint)("This is a test!");
</cpp>

The syntax of calling class construction is:
*<tt>SourceHook::CallClass<class> *ptr = SH_GET_CALLCLASS(instance);</tt>
**Returns an object which allows you to call the original function. Class is the name of the class which is the target, instance is an instance of that class.
*<tt>SH_CALL(cc_ptr, &class::func)([params])</tt>
**Pass the pointer returned from SH_GET_CALLCLASS as cc_ptr. The target function you call must be passed as a pointer-to-member-function, which takes the form &Class::Function as seen in previous examples. You must then complete the function call by adding a parenthetical parameter expression, even for void functions, which would be ().

=Other Macros=
All of the macros take g_PLAPI as the first parameter. For more information on this, see the global variables section.

*{{bcode|META_CONPRINT}}(const char *msg)
*{{bcode|META_CONPRINTF}}(const char *fmt, ...)
**These two functions are recommended over Msg() for printing to the server console. Msg() does not relay commands back through rcon, and as of this writing Valve does not expose the function which does. To be able to display text through the rcon console (much like HL1), you should use these functions. If SourceMM is unable to extract the function properly, it will automatically default to Msg.
*{{bcode|META_LOG}}(g_PLAPI, const char *msg, ...)
**Logs a message through IVEngineServer::LogPrint(). A newline is automatically added, and msg is formatted as a sprintf() style string. Logging is done by the game server and can be enabled by adding ''log on'' to server.cfg or typing it in the console. The log files are found in the logs directory of the particular MOD you are running.
*{{bcode|META_REGCVAR}}(var)
**Registers a ConCommandBase pointer through SourceMM. The correct way to use this is to create an IConCommandBaseAccessor, and inside RegisterConCommandBase, call the macro on the given ConComandBase. This will ensure that SourceMM correctly detects and unloads your cvars and concommands at the appopriate time. Otherwise, unloading your plugin will cause a crash.
*{{bcode|META_UNREGCVAR}}(var)
**Unregisters a ConCommandBase pointer. This is not needed if you have set up your IConCommandBaseAccessor correctly (and called ConCommandBaseMngr::OneTimeInit()).

=Events System=
The Events System is based on IMetamodListener. By implementing the IMetamodListener class and using g_SMAPI->AddListener, you can watch for certain, low-traffic events. These events are split into three categories:

*Plugin Events let you listen for plugin pauses and unloads. This is important if you're relying on information from another plugin, as you can handle cases where a live plugin has become invalid.
*Game Events are simple events that SourceMM is already hooking and makes available. These are LevelShutdown and LevelInit right now.
*Query Events occur when a factory is used. The four main factories (Engine, GameDLL, FileSystem, and Physics) are all overridable. You should simply return a non-NULL result to override, and fill the return code with IFACE_OK if available. There is no way to handle the case of two plugins overriding right now. The final factory is the Metamod Factory, which is the factory that Metamod:Source adds to the runtime space for plugins. By default, it only contains the interfaces for the PluginManager and SourceHook. Plugins can use this to add new interfaces. Other plugins request these interfaces through g_SMAPI->MetaFactory().

=Global Variables=
These global variables are saved by PLUGIN_EXPOSE and PLUGIN_SAVEVARS. They are declared with PLUGIN_GLOBALVARS.

*{{bcode|g_PLAPI}}
**ISmmPlugin * pointer to your global class singleton.
*{{bcode|g_PLID}}
**The internal PluginId of your plugin.
*{{bcode|g_SHPtr}}
**The SourceHook::ISourceHook * pointer to SourceHook's interface.
*{{bcode|g_SMAPI}}
**The ISmmAPI * pointer to SourceMM's interface.

=Compiling=
To see more about compiling, see the Sample Plugin Compiling section.

Modifying the default Makefiles for your own projects:

*<tt>OPT_FLAGS</tt> - Optimization flags
*<tt>DEBUG_FLAGS</tt> - Debug flags
*<tt>CPP</tt> - C++ Compiler
*<tt>OBJECTS</tt> - List of C++ files to compile
*<tt>LINK</tt> - Linker Options
*<tt>CFLAGS</tt> - Base Compiler Flags
*<tt>BINARY</tt> - Output Binary Name

Makefile commands:

*clean - Cleans all build files
*debug - Builds debug version

=1.1 Changes=
SourceMM 1.1 changed quite a few things internally, and externally made many breaking changes.
==Late Loading==
*ISmmPlugin::Load() has removed the factory list parameter (the factory system was replaced with the event system). Also, a boolean parameter was added, specifying whether the plugin was loaded late or not.
*ISmmPlugin::Load() is now called BEFORE DLLInit(), rather than after. This means it might not have all information it needs -- for example, IGameEvents won't be parsed yet. You will need to do things like this in ISmmPlugin:AllPluginsLoaded() instead, as it is guaranteed to occur when all DLLs are initialized.

==API Changes==
*ISmmPlugin now has default functions -- you don't have to implement all of them.
*SourceHook was modified to use interfaces rather than straight struct pointers. This breaking changes will ensure that future SourceHook modifications do not break older plugins.
*SourceHook was modified to be re-entrant.
*SourceHook now has a tiny template library with it. This removes the necessity to link against libstdc++.so.*, which harms binary compatibility across linux distributions.
*SourceMM's GameDLL code was completely rewritten. It will now work with newer mods much easier, and issues like the DoD:S release will be much easier to deal with (if at all). It also removes a few important speed bottlenecks.

==Event System==
*An events system was added. This lets Metamod:Source plugins listen for common internal SourceMM events, as well as intercommunicate primitively.

=1.2 Changes=
==Changing Parameters==
SourceMM 1.2 now supports changing the parameters in a hook chain. For example, say the GameDLL has a function called IGameDLL::PrintString(const char *str). You can hook this, let it continue, but change the "str" parameter passed in to the rest of the hooks and the GameDLL. To do this, use the following macros:

*<tt>RETURN_META_NEWPARAMS</tt>
*<tt>RETURN_META_VALUE_NEWPARAMS</tt>

Example:
<cpp>
class ISomething
{
virtual void Function1(int num) =0;
virtual bool Function2(bool what, int hi) =0;
}

void MyHook1(int num)
{
//if num is 0,
// we will change the num parameter in the rest of the hooks, and the gamedll, to be 1.
if (num == 0)
RETURN_META_NEWPARAMS(MRES_IGNORED, &ISomething::Function1, (1))
RETURN_META(MRES_SUPERCEDE);
}

bool MyHook2(bool what, int hi)
{
//change the "what" and "hi" parameters to be false and 3 respectively
//also, return true, but specify that the value is ignored
RETURN_META_VALUE_NEWPARAMS(MRES_IGNORED, true, &ISomething::Function2, (false, 3));
}
</cpp>

==Manual Hooks==
SourceHook also supports manual hooking of functions. This means you must know the virtual table index, the virtual table offset (for polymorphism), and the "this" pointer offset. Luckily, the polymorphic offsets are usually zero. This type of hook is ideal when supporting different ABI, for example, across different gamedlls. The API is almost identical:

*<tt>SH_DECL_MANUALHOOKn[_void|_vafamt]</tt> -
**Declares the manual hook. A unique name must be given to each manual hook.
*<tt>SH_[ADD|REMOVE]_MANUALHOOK_[STATIC|MEM]FUNC</tt> -
**Adds or removes a static or member function hook on a manually declared hook.
*<tt>SH_MANUALHOOK_RECONFIGURE</tt> -
**Reconfigures the indexes and offsets of a manual hook.

An example is below, using the ISomething class from above.

<cpp>
SH_DECL_MANUALHOOK2(_M_Function1, 1, 0, 0, bool, bool, int);

void OnLoad(ISomething *pSomething)
{
//we reference the static function by its unique handle we gave it
//the parameters are otherwise the same - this pointer, hook handler, and post/non-post
SH_ADD_MANUALHOOK_STATICFUNC(_M_Function1, pSomething, MyHook1, false);
}

void OnUnload(ISomething *pSomething)
{
SH_REMOVE_MANUALHOOK_STATICFUNC(_M_Function1, pSomething, MyHook1, false);
}
</cpp>

For more examples of the above features, you can look in SourceHook CVS's [http://www.tcwonline.org/cgi-bin/viewcvs.cgi/sourcemm/sourcehook/test/ test suite], which demonstrates a variety of hooking scenarios.

=1.2.2 Changes=
==Manual CallClasses==
SourceMM 1.2.2 adds support for manual callclasses. These can be used to call manually hooked functions without invoking the hook chain. Manual callclasses work just like other callclasses with the exception that the virtual table information must be known when creating them. Here is a quick example of how to create and use them:
<cpp>// Creating a manual callclass
SourceHook::ManualCallClass *mcc = SH_GET_CALLCLASS(interfacePtr, sizeof(void*));

// Assuming we have this manual hook
SH_DECL_MANUALHOOK0_void(Some_Hook, 1, 0, 0);

// We can call the original function like so
SH_MCALL(mcc, Some_Hook)();

// And when you are done with the pointer, you release the callclass like any other
SH_RELEASE_CALLCLASS(mcc);
</cpp>

It is also possible to call a function without having a hook declaration first. In order to this, you need a MFP (member function pointer) that corresponds to the function you wish to call. The class does not matter, but SourceHook::EmptyClass can be used for this purpose. For example, if the function takes two parameters (a const char * and and bool) and returns an int, you would do the following:
<cpp>// Member function pointer typedef
typedef int (SourceHook::EmptyClass::*MFP_MyFunc)(const char *, bool);

// Now to call the function, you do this
int ret = SH_MCALL2(mcc, MFP_MyFunc(), 1, 0, 0)("hello", true);
</cpp>

=1.2.3 Changes=
==Parameter Changes for Manual Hooks==
SourceMM 1.2.3 adds support for changing parameters in manually hooked functions with <tt>RETURN_META_(VALUE_)MNEWPARAMS</tt>. It is mostly the same as its non-manual counterpart except that it takes the unique name given when the manual hook was declared instead of a member function pointer. Here is an example using ISomething from above:
<cpp>SH_DECL_MANUALHOOK2(_M_Function2, 2, 0, 0, bool, bool, int);

void OnLoad(ISomething *pSomething)
{
SH_ADD_MANUALHOOK_STATICFUNC(_M_Function2, pSomething, MyHook2, false);
}

bool MyHook2(bool what, int hi)
{
// Change the "what" and "hi" parameters to be false and 3 respectively
RETURN_META_VALUE_MNEWPARAMS(MRES_SUPERCEDE, true, _M_Function2, (false, 3));
}</cpp>

=1.3 Changes=
==Returning References==
SourceMM 1.3 integrates SourceHook v4.6, which adds support for functions returning references. Luckily, this change is both backwards compatible and is transparent to the already existing macros. Thus, the code below is now valid. Note that if you don't want to actually return any reference, you can opt to use the new macro <tt>RETURN_META_NOREF</tt> instead.
<cpp>class Interface
{
public:
virtual int &GetMyInt() = 0;
};

SH_DECL_HOOK0(Interface, GetMyInt, SH_NOATTRIB, 0, int &);

int &Hook_GetMyInt()
{
static int gaben = 5;
RETURN_META_VALUE(MRES_SUPERCEDE, gaben);
}

int &Hook_GetMyInt2()
{
RETURN_META_NOREF(MRES_IGNORED, int &);
}

void AddHook(Interface *pFace)
{
SH_ADDHOOK_STATICFUNC(Interface, GetMyInt, pFace, Hook_GetMyInt, false);
SH_ADDHOOK_STATICFUNC(Interface, GetMyInt, pFace, Hook_GetMyInt2, true);
}</cpp>

==Interface Searching==
Yet another method of searching interfaces, <tt>ISmmAPI::VInterfaceMatch()</tt>, is now available. This simplified version corrects the design flaw in InterfaceSearch() whereby passing an unmodified INTERFACEVERSION string would only search interfaces later than or equal to that version. For example, <tt>INTERFACEVERSION_SERVERGAMEDLL</tt> being "ServerGameDLL005" would not find a GameDLL using ServerGameDLL004.

<tt>VInterfaceMatch()</tt> removes the "max" parameter from <tt>InterfaceSearch()</tt> and adds an optional "chop" parameter, which specifices whether or not the interface should be searched from the beginning (default) or from the current version.

==Compiler Support==
Microsoft Visual Studio 2005 is now fully supported, as are versions of GCC up to 4.1.

=1.4 Changes=
==VSP Interface Hooking==
SourceMM 1.4 adds an API for hooking the [[Valve Server Plugin]] plugin interface. This might be useful for querying client convars if a game uses an interface version earlier than <tt>ServerGameDLL006</tt>. Another potential use is knowing when a user's Steam ID has been validated by hooking <tt>IServerPluginCallbacks::NetworkIDValidated()</tt>. This is demonstrated below:
<cpp>SH_DECL_HOOK2(IServerPluginCallbacks, NetworkIDValidated, SH_NOATTRIB, 0, PLUGIN_RESULT, const char *, const char *);

bool Plugin::Load(PluginId id, ISmmAPI *ismm, char *error, size_t maxlen, bool late)
{
ismm->EnableVSPListener();
ismm->AddListener(this, this);
}

void Plugin::OnVSPListening(IServerPluginCallbacks *iface)
{
SH_ADD_HOOK_MEMFUNC(IServerPluginCallbacks, NetworkIDValidated, iface, &g_Plugin, &Plugin::NetworkIDValidated, false);
}

PLUGIN_RESULT Plugin::NetworkIDValidated(const char *pszUserName, const char *pszNetworkID)
{
META_CONPRINTF("%s has been validated with Network ID %s\n", pszUserName, pszNetworkID);
RETURN_META_VALUE(MRES_SUPERCEDE, PLUGIN_CONTINUE);
}</cpp>

==User Message Enumeration==
API functions have also been added for the purpose of enumerating user messages. These serve to replace <tt>IServerGameDLL::GetUserMessageInfo()</tt> which can crash the server upon passing an invalid message index. The new functions include:
*<tt>GetUserMessageCount()</tt>
*<tt>FindUserMessage()</tt>
*<tt>GetUserMessage()</tt>

Here is a quick example of how to use them:
<cpp>// Get index of 'SayText' message
int msgSayText = g_SMAPI->FindUserMessage("SayText");

// Get number of user messages in GameDLL
int count = g_SMAPI->GetUserMessageCount();

const char *name;
int size;

// Print list of user message names and sizes
for (int i = 0; i < count; i++)
{
name = g_SMAPI->GetUserMessage(i, &size);

META_CONPRINTF("Message %d: (name \"%s\") (size %d)\n", i, name, size);
}</cpp>

[[Category:SourceHook]]
[[Category:Documentation (SourceMM)]]

CDODPlayer Offset List (Day of Defeat: Source)

2006-06-29T23:44:18Z

Showdax:

Also for use when using [[Vfunc_offsets_%28SourceMM%29|VFunc offsets]].

These are Linux offsets. Windows offsets are one less. These should be good as of 2006/06/29.

== The List ==

<pre>1 CDODPlayer::~CDODPlayer()
2 CBaseEntity::SetRefEHandle(CBaseHandle const&)
3 CBaseEntity::GetRefEHandle() const
4 CBaseEntity::GetCollideable()
5 CBaseEntity::GetNetworkable()
6 CBaseEntity::GetBaseEntity()
7 CBaseEntity::GetModelIndex() const
8 CBaseEntity::GetModelName() const
9 CBaseEntity::SetModelIndex(int)
10 CDODPlayer::_GetClassName()
11 CDODPlayer::GetServerClass()
12 CDODPlayer::GetClassName()
13 CDODPlayer::YouForgotToImplementOrDeclareServerClass()
14 CDODPlayer::GetDataDescMap()
15 CBaseAnimating::TestCollision(Ray_t const&, unsigned int, CGameTrace&)
16 CBaseAnimating::TestHitboxes(Ray_t const&, unsigned int, CGameTrace&)
17 CDODPlayer::ComputeWorldSpaceSurroundingBox(Vector*, Vector*)
18 CBaseEntity::ShouldCollide(int, int) const
19 CBaseEntity::SetOwnerEntity(CBaseEntity*)
20 CBasePlayer::ShouldTransmit(CCheckTransmitInfo const*)
21 CBasePlayer::UpdateTransmitState()
22 CBaseCombatCharacter::SetTransmit(CCheckTransmitInfo*, bool)
23 CBasePlayer::GetTracerType()
24 CDODPlayer::Spawn()
25 CDODPlayer::Precache()
26 CBaseFlex::SetModel(char const*)
27 CBaseEntity::PostConstructor(char const*)
28 CBaseEntity::PostClientActive()
29 CBaseEntity::ParseMapData(CEntityMapData*)
30 CBaseEntity::KeyValue(char const*, char const*)
31 CBaseEntity::KeyValue(char const*, float)
32 CBaseEntity::KeyValue(char const*, Vector)
33 CBasePlayer::Activate()
34 CBaseEntity::SetParent(CBaseEntity*, int)
35 CBasePlayer::ObjectCaps()
36 CBaseEntity::AcceptInput(char const*, CBaseEntity*, CBaseEntity*, variant_t, int)
37 CBaseAnimating::GetInputDispatchEffectPosition(char const*, Vector&, QAngle&)
38 CBasePlayer::DrawDebugGeometryOverlays()
39 CBaseAnimating::DrawDebugTextOverlays()
40 CBasePlayer::Save(ISave&)
41 CBasePlayer::Restore(IRestore&)
42 CBasePlayer::ShouldSavePhysics()
43 CBaseEntity::OnSave(IEntitySaveUtils*)
44 CBasePlayer::OnRestore()
45 CBasePlayer::RequiredEdictIndex()
46 CBaseEntity::MoveDone()
47 CBaseEntity::Think()
48 CBasePlayer::NetworkStateChanged_m_nNextThinkTick()
49 CBasePlayer::NetworkStateChanged_m_nNextThinkTick(void*)
50 CBaseAnimating::GetBaseAnimating()
51 CBaseEntity::GetResponseSystem()
52 CBaseEntity::DispatchResponse(char const*)
53 CBasePlayer::Classify()
54 CBaseEntity::DeathNotice(CBaseEntity*)
55 CBaseEntity::ShouldAttractAutoAim(CBaseEntity*)
56 CBaseEntity::GetAutoAimRadius()
57 CBaseEntity::GetAutoAimCenter()
58 CBaseEntity::PassesDamageFilter(CTakeDamageInfo const&)
59 CDODPlayer::TraceAttack(CTakeDamageInfo const&, Vector const&, CGameTrace*)
60 CBaseEntity::CanBeHitByMeleeAttack(CBaseEntity*)
61 CDODPlayer::OnTakeDamage(CTakeDamageInfo const&)
62 CBasePlayer::TakeHealth(float, int)
63 CDODPlayer::Event_Killed(CTakeDamageInfo const&)
64 CBaseEntity::Event_KilledOther(CBaseEntity*, CTakeDamageInfo const&)
65 CBaseCombatCharacter::BloodColor()
66 CBaseEntity::IsTriggered(CBaseEntity*)
67 CBaseEntity::IsNPC() const
68 CBaseCombatCharacter::MyCombatCharacterPointer()
69 CBaseEntity::GetDelay()
70 CBaseEntity::IsMoving()
71 CBaseEntity::DamageDecal(int, int)
72 CBaseEntity::DecalTrace(CGameTrace*, char const*)
73 CBaseEntity::ImpactTrace(CGameTrace*, int, char*)
74 CBaseEntity::OnControls(CBaseEntity*)
75 CBaseEntity::HasTarget(string_t)
76 CBasePlayer::IsPlayer() const
77 CBasePlayer::IsNetClient() const
78 CBaseEntity::IsTemplate()
79 CBaseEntity::IsBaseObject() const
80 CBaseEntity::GetServerVehicle()
81 CBaseEntity::IsViewable()
82 CDODPlayer::ChangeTeam(int)
83 CBaseEntity::OnEntityEvent(EntityEvent_t, void*)
84 CBaseEntity::CanStandOn(CBaseEntity*) const
85 CBaseEntity::CanStandOn(edict_t*) const
86 CBaseEntity::GetEnemy()
87 CBaseEntity::GetEnemy() const
88 CBaseEntity::Use(CBaseEntity*, CBaseEntity*, USE_TYPE, float)
89 CBaseEntity::StartTouch(CBaseEntity*)
90 CBasePlayer::Touch(CBaseEntity*)
91 CBaseEntity::EndTouch(CBaseEntity*)
92 CBaseEntity::StartBlocked(CBaseEntity*)
93 CBaseEntity::Blocked(CBaseEntity*)
94 CBaseEntity::EndBlocked()
95 CBasePlayer::PhysicsSimulate()
96 CBasePlayer::UpdateOnRemove()
97 CBaseEntity::StopLoopingSounds()
98 CBaseEntity::SUB_AllowedToFade()
99 CBaseAnimating::Teleport(Vector const*, QAngle const*, Vector const*)
100 CBaseEntity::NotifySystemEvent(CBaseEntity*, notify_system_event_t, notify_system_event_params_t const&)
101 CBasePlayer::MakeTracer(Vector const&, CGameTrace const&, int)
102 CDODPlayer::FireBullets(FireBulletsInfo_t const&)
103 CBasePlayer::DoImpactEffect(CGameTrace&, int)
104 CBaseEntity::Respawn()
105 CBaseEntity::IsLockedByMaster()
106 CBaseAnimating::ModifyOrAppendCriteria(AI_CriteriaSet&)
107 CBaseEntity::NetworkStateChanged_m_iMaxHealth()
108 CBaseEntity::NetworkStateChanged_m_iMaxHealth(void*)
109 CBasePlayer::NetworkStateChanged_m_iHealth()
110 CBasePlayer::NetworkStateChanged_m_iHealth(void*)
111 CBasePlayer::NetworkStateChanged_m_lifeState()
112 CBasePlayer::NetworkStateChanged_m_lifeState(void*)
113 CBaseEntity::NetworkStateChanged_m_takedamage()
114 CBaseEntity::NetworkStateChanged_m_takedamage(void*)
115 CBaseEntity::GetDamageType() const
116 CBaseEntity::GetDamage()
117 CBaseEntity::SetDamage(float)
118 CBasePlayer::EyePosition()
119 CBasePlayer::EyeAngles()
120 CBasePlayer::LocalEyeAngles()
121 CBaseEntity::EarPosition()
122 CBasePlayer::BodyTarget(Vector const&, bool)
123 CBaseEntity::HeadTarget(Vector const&)
124 CBaseEntity::GetVectors(Vector*, Vector*, Vector*) const
125 CBaseEntity::GetViewOffset()
126 CBasePlayer::GetSmoothedVelocity()
127 CBaseAnimating::GetVelocity(Vector*, Vector*)
128 CBaseCombatCharacter::FVisible(CBaseEntity*, int, CBaseEntity**)
129 CBaseCombatCharacter::FVisible(Vector const&, int, CBaseEntity**)
130 CBaseEntity::CanBeSeenBy(CAI_BaseNPC*)
131 CBaseEntity::GetAttackDamageScale(CBaseEntity*)
132 CBaseEntity::GetReceivedDamageScale(CBaseEntity*)
133 CBaseEntity::CanBePoweredUp()
134 CBaseEntity::AttemptToPowerup(int, float, float, CBaseEntity*, CDamageModifier*)
135 CBaseEntity::GetGroundVelocityToApply(Vector&)
136 CBaseEntity::PhysicsSplash(Vector const&, Vector const&, float, float)
137 CBaseEntity::Splash()
138 CBaseEntity::WorldSpaceCenter() const
139 CBaseEntity::GetSoundEmissionOrigin() const
140 CBaseEntity::CreateVPhysics()
141 CBaseEntity::ForceVPhysicsCollide(CBaseEntity*)
142 CBasePlayer::VPhysicsDestroyObject()
143 CBasePlayer::VPhysicsUpdate(IPhysicsObject*)
144 CBaseEntity::VPhysicsTakeDamage(CTakeDamageInfo const&)
145 CBaseCombatCharacter::VPhysicsShadowCollision(int, gamevcollisionevent_t*)
146 CDODPlayer::VPhysicsShadowUpdate(IPhysicsObject*)
147 CBasePlayer::VPhysicsCollision(int, gamevcollisionevent_t*)
148 CBaseEntity::VPhysicsFriction(IPhysicsObject*, float, int, int)
149 CBaseEntity::UpdatePhysicsShadowToCurrentPosition(float)
150 CBaseEntity::VPhysicsGetObjectList(IPhysicsObject**, int)
151 CBaseEntity::HasPhysicsAttacker(float)
152 CBasePlayer::PhysicsSolidMaskForEntity() const
153 CBaseEntity::ResolveFlyCollisionCustom(CGameTrace&, Vector&)
154 CBaseEntity::PerformCustomPhysics(Vector*, Vector*, QAngle*, QAngle*)
155 CBaseAnimating::GetStepOrigin() const
156 CBaseAnimating::GetStepAngles() const
157 CBaseEntity::ShouldDrawWaterImpacts()
158 CBaseEntity::NetworkStateChanged_m_fFlags()
159 CBaseEntity::NetworkStateChanged_m_fFlags(void*)
160 CBasePlayer::NetworkStateChanged_m_nWaterLevel()
161 CBasePlayer::NetworkStateChanged_m_nWaterLevel(void*)
162 CBasePlayer::NetworkStateChanged_m_hGroundEntity()
163 CBasePlayer::NetworkStateChanged_m_hGroundEntity(void*)
164 CBasePlayer::NetworkStateChanged_m_vecBaseVelocity()
165 CBasePlayer::NetworkStateChanged_m_vecBaseVelocity(void*)
166 CBasePlayer::NetworkStateChanged_m_flFriction()
167 CBasePlayer::NetworkStateChanged_m_flFriction(void*)
168 CBasePlayer::NetworkStateChanged_m_vecVelocity()
169 CBasePlayer::NetworkStateChanged_m_vecVelocity(void*)
170 CBasePlayer::NetworkStateChanged_m_vecViewOffset()
171 CBasePlayer::NetworkStateChanged_m_vecViewOffset(void*)
172 CBaseAnimating::GetIdealSpeed() const
173 CBaseAnimating::GetIdealAccel() const
174 CBaseAnimatingOverlay::StudioFrameAdvance()
175 CBaseAnimating::IsActivityFinished()
176 CBaseAnimating::ClampRagdollForce(Vector const&, Vector*)
177 CBaseAnimating::BecomeRagdollOnClient(Vector const&)
178 CBaseAnimating::IsRagdoll()
179 CBaseAnimating::CanBecomeRagdoll()
180 CBaseAnimatingOverlay::GetSkeleton(CStudioHdr*, Vector*, Quaternion*, int)
181 CBaseAnimating::GetBoneTransform(int, matrix3x4_t&)
182 CDODPlayer::SetupBones(matrix3x4_t*, int)
183 CBaseAnimating::CalculateIKLocks(float)
184 CBaseAnimatingOverlay::DispatchAnimEvents(CBaseAnimating*)
185 CBaseAnimating::HandleAnimEvent(animevent_t*)
186 CBaseAnimating::GetAttachment(int, matrix3x4_t&)
187 CBaseAnimating::InitBoneControllers()
188 CBaseAnimating::GetGroundSpeedVelocity()
189 CBaseAnimating::Ignite(float, bool, float, bool)
190 CBaseAnimating::Extinguish()
191 CBaseCombatCharacter::SetLightingOriginRelative(CBaseEntity*)
192 CBaseAnimating::SetLightingOrigin(CBaseEntity*)
193 CBaseFlex::SetViewtarget(Vector const&)
194 CBaseFlex::StartSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*, CChoreoActor*, CBaseEntity*)
195 CBaseFlex::ProcessSceneEvents()
196 CBaseFlex::ProcessSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*)
197 CBaseFlex::ClearSceneEvent(CSceneEventInfo*, bool, bool)
198 CBaseFlex::CheckSceneEventCompletion(CSceneEventInfo*, float, CChoreoScene*, CChoreoEvent*)
199 CBaseCombatCharacter::GetPhysicsImpactDamageTable()
200 CBaseCombatCharacter::FInViewCone(CBaseEntity*)
201 CBaseCombatCharacter::FInViewCone(Vector const&)
202 CBaseCombatCharacter::FInAimCone(CBaseEntity*)
203 CBaseCombatCharacter::FInAimCone(Vector const&)
204 CBaseCombatCharacter::ShouldShootMissTarget(CBaseCombatCharacter*)
205 CBaseCombatCharacter::FindMissTarget()
206 CBaseCombatCharacter::HandleInteraction(int, void*, CBaseCombatCharacter*)
207 CBasePlayer::BodyAngles()
208 CBaseCombatCharacter::BodyDirection2D()
209 CBaseCombatCharacter::BodyDirection3D()
210 CBaseCombatCharacter::HeadDirection2D()
211 CBaseCombatCharacter::HeadDirection3D()
212 CBaseCombatCharacter::EyeDirection2D()
213 CBaseCombatCharacter::EyeDirection3D()
214 CBaseCombatCharacter::GiveAmmo(int, int, bool)
215 CBaseCombatCharacter::NPC_TranslateActivity(Activity)
216 CBaseCombatCharacter::Weapon_TranslateActivity(Activity, bool*)
217 CBasePlayer::Weapon_CanUse(CBaseCombatWeapon*)
218 CBasePlayer::Weapon_Equip(CBaseCombatWeapon*)
219 CBaseCombatCharacter::Weapon_EquipAmmoOnly(CBaseCombatWeapon*)
220 CBasePlayer::Weapon_Drop(CBaseCombatWeapon*, Vector const*, Vector const*)
221 CBasePlayer::Weapon_Switch(CBaseCombatWeapon*, int)
222 CBasePlayer::Weapon_ShootPosition()
223 CDODPlayer::Weapon_CanSwitchTo(CBaseCombatWeapon*)
224 CBaseCombatCharacter::Weapon_SlotOccupied(CBaseCombatWeapon*)
225 CBaseCombatCharacter::Weapon_GetSlot(int) const
226 CBaseCombatCharacter::AddPlayerItem(CBaseCombatWeapon*)
227 CBasePlayer::RemovePlayerItem(CBaseCombatWeapon*)
228 CBaseCombatCharacter::CanBecomeServerRagdoll()
229 CDODPlayer::OnTakeDamage_Alive(CTakeDamageInfo const&)
230 CBaseCombatCharacter::OnTakeDamage_Dying(CTakeDamageInfo const&)
231 CBaseCombatCharacter::OnTakeDamage_Dead(CTakeDamageInfo const&)
232 CBaseCombatCharacter::OnFriendDamaged(CBaseCombatCharacter*, CBaseEntity*)
233 CBaseCombatCharacter::NotifyFriendsOfDamage(CBaseEntity*)
234 CBaseCombatCharacter::GetDeathActivity()
235 CBaseCombatCharacter::CorpseGib(CTakeDamageInfo const&)
236 CBaseCombatCharacter::CorpseFade()
237 CBaseCombatCharacter::HasHumanGibs()
238 CBaseCombatCharacter::HasAlienGibs()
239 CBaseCombatCharacter::ShouldGib(CTakeDamageInfo const&)
240 CBaseCombatCharacter::OnKilledNPC(CBaseCombatCharacter*)
241 CBaseCombatCharacter::Event_Gibbed(CTakeDamageInfo const&)
242 CBasePlayer::Event_Dying()
243 CBaseCombatCharacter::BecomeRagdoll(CTakeDamageInfo const&, Vector const&)
244 CBaseCombatCharacter::FixupBurningServerRagdoll(CBaseEntity*)
245 CBaseCombatCharacter::BecomeRagdollBoogie(CBaseEntity*, Vector const&, float, int)
246 CBaseCombatCharacter::CheckTraceHullAttack(float, Vector const&, Vector const&, int, int, float, bool)
247 CBaseCombatCharacter::CheckTraceHullAttack(Vector const&, Vector const&, Vector const&, Vector const&, int, int, float, bool)
248 CBaseCombatCharacter::PushawayTouch(CBaseEntity*)
249 CBaseCombatCharacter::IRelationType(CBaseEntity*)
250 CBaseCombatCharacter::IRelationPriority(CBaseEntity*)
251 CBaseCombatCharacter::IsInAVehicle()
252 CBasePlayer::GetVehicle()
253 CBasePlayer::GetVehicleEntity()
254 CBaseCombatCharacter::CalcWeaponProficiency(CBaseCombatWeapon*)
255 CBaseCombatCharacter::GetAttackSpread(CBaseCombatWeapon*, CBaseEntity*)
256 CBaseCombatCharacter::GetSpreadBias(CBaseCombatWeapon*, CBaseEntity*)
257 CBasePlayer::DoMuzzleFlash()
258 CBaseCombatCharacter::AddEntityRelationship(CBaseEntity*, Disposition_t, int)
259 CBaseCombatCharacter::RemoveEntityRelationship(CBaseEntity*)
260 CBaseCombatCharacter::AddClassRelationship(Class_T, Disposition_t, int)
261 CBaseCombatCharacter::OnChangeActiveWeapon(CBaseCombatWeapon*, CBaseCombatWeapon*)
262 CBasePlayer::NetworkStateChanged_m_iAmmo()
263 CBasePlayer::NetworkStateChanged_m_iAmmo(void*)
264 CDODPlayer::CreateViewModel(int)
265 CDODPlayer::SetupVisibility(CBaseEntity*, unsigned char*, int)
266 CDODPlayer::WantsLagCompensationOnEntity(CBasePlayer const*, CUserCmd const*, CBitVec<2048> const*) const
267 CDODPlayer::SharedSpawn()
268 CDODPlayer::InitialSpawn()
269 CBasePlayer::InitHUD()
270 CBasePlayer::ShowViewPortPanel(char const*, bool, KeyValues*)
271 CDODPlayer::PlayerDeathThink()
272 CBasePlayer::Jump()
273 CBasePlayer::Duck()
274 CDODPlayer::PreThink()
275 CDODPlayer::PostThink()
276 CBasePlayer::DamageEffect(float, int)
277 CDODPlayer::OnDamagedByExplosion(CTakeDamageInfo const&)
278 CBasePlayer::ShouldFadeOnDeath()
279 CBasePlayer::IsFakeClient() const
280 CDODPlayer::GetPlayerMins() const
281 CDODPlayer::GetPlayerMaxs() const
282 CBasePlayer::CalcRoll(QAngle const&, Vector const&, float, float)
283 CBasePlayer::PackDeadPlayerItems()
284 CBasePlayer::RemoveAllItems(bool)
285 CBasePlayer::Weapon_SetLast(CBaseCombatWeapon*)
286 CBasePlayer::Weapon_ShouldSetLast(CBaseCombatWeapon*, CBaseCombatWeapon*)
287 CBasePlayer::Weapon_ShouldSelectItem(CBaseCombatWeapon*)
288 CBasePlayer::UpdateClientData()
289 CBasePlayer::ExitLadder()
290 CDODPlayer::FlashlightIsOn()
291 CDODPlayer::FlashlightTurnOn()
292 CDODPlayer::FlashlightTurnOff()
293 CBasePlayer::IsIlluminatedByFlashlight(CBaseEntity*, float*)
294 CDODPlayer::UpdateStepSound(surfacedata_t*, Vector const&, Vector const&)
295 CDODPlayer::PlayStepSound(Vector&, surfacedata_t*, float, bool)
296 CDODPlayer::DeathSound(CTakeDamageInfo const&)
297 CDODPlayer::SetAnimation(PLAYER_ANIM)
298 CBasePlayer::ImpulseCommands()
299 CDODPlayer::CheatImpulseCommands(int)
300 CDODPlayer::ClientCommand(char const*)
301 CBasePlayer::StartObserverMode(int)
302 CBasePlayer::StopObserverMode()
303 CDODPlayer::SetObserverMode(int)
304 CBasePlayer::GetObserverMode()
305 CBasePlayer::SetObserverTarget(CBaseEntity*)
306 CBasePlayer::ObserverUse(bool)
307 CBasePlayer::GetObserverTarget()
308 CBasePlayer::FindNextObserverTarget(bool)
309 CBasePlayer::IsValidObserverTarget(CBaseEntity*)
310 CBasePlayer::CheckObserverSettings()
311 CBasePlayer::JumptoPosition(Vector const&, QAngle const&)
312 CBasePlayer::ForceObserverMode(int)
313 CBasePlayer::ResetObserverMode()
314 CDODPlayer::StartReplayMode(float, float, int)
315 CDODPlayer::StopReplayMode()
316 CBasePlayer::GetDelayTicks()
317 CBasePlayer::GetReplayEntity()
318 CBasePlayer::CreateCorpse()
319 CDODPlayer::EntSelectSpawnPoint()
320 CBasePlayer::GetInVehicle(IServerVehicle*, int)
321 CBasePlayer::LeaveVehicle(Vector const&, QAngle const&)
322 CBasePlayer::OnVehicleStart()
323 CBasePlayer::OnVehicleEnd(Vector&)
324 CDODPlayer::BumpWeapon(CBaseCombatWeapon*)
325 CBasePlayer::SelectLastItem()
326 CBasePlayer::SelectItem(char const*, int)
327 CBasePlayer::ItemPostFrame()
328 CDODPlayer::GiveNamedItem(char const*, int)
329 CDODPlayer::CheckTrainUpdate()
330 CBasePlayer::SetPlayerUnderwater(bool)
331 CBasePlayer::CanBreatheUnderwater() const
332 CBasePlayer::PlayerUse()
333 CBasePlayer::PlayUseDenySound()
334 CDODPlayer::FindUseEntity()
335 CBasePlayer::IsUseableEntity(CBaseEntity*, unsigned int)
336 CBasePlayer::PickupObject(CBaseEntity*, bool)
337 CBasePlayer::ForceDropOfCarriedPhysObjects(CBaseEntity*)
338 CBasePlayer::GetHeldObjectMass(IPhysicsObject*)
339 CDODPlayer::UpdateGeigerCounter()
340 CBasePlayer::GetAutoaimVector(float)
341 CBasePlayer::GetAutoaimVector(float, float)
342 CBasePlayer::GetAutoaimVector(autoaim_params_t&)
343 CBasePlayer::ShouldAutoaim()
344 CBasePlayer::ForceClientDllUpdate()
345 CBasePlayer::ProcessUsercmds(CUserCmd*, int, int, int, bool)
346 CDODPlayer::PlayerRunCommand(CUserCmd*, IMoveHelper*)
347 CBasePlayer::CanSpeak()
348 CBasePlayer::CanHearChatFrom(CBasePlayer*)
349 CBasePlayer::ModifyOrAppendPlayerCriteria(AI_CriteriaSet&)
350 CDODPlayer::CheckChatText(char*, int)
351 CBasePlayer::IsFollowingPhysics()
352 CDODPlayer::InitVCollision()
353 CBasePlayer::UpdatePhysicsShadowToCurrentPosition()
354 CBasePlayer::EquipSuit(bool)
355 CBasePlayer::RemoveSuit()
356 CDODPlayer::CommitSuicide()
357 CBasePlayer::IsBot() const
358 CBasePlayer::SpawnArmorValue() const
359 CBasePlayer::NetworkStateChanged_m_ArmorValue()
360 CBasePlayer::NetworkStateChanged_m_ArmorValue(void*)</pre>

CDODPlayer Offset List (Day of Defeat: Source)

2006-06-29T15:42:35Z

Showdax:

Also for use when using [[Vfunc_offsets_%28SourceMM%29|VFunc offsets]].

These are Linux offsets. Windows offsets are one less. These should be good as of 2006/06/29.

== The List ==

<pre>1 CDODPlayer::~CDODPlayer()
2 CBaseEntity::SetRefEHandle(CBaseHandle const&)
3 CBaseEntity::GetRefEHandle() const
4 CBaseEntity::GetCollideable()
5 CBaseEntity::GetNetworkable()
6 CBaseEntity::GetBaseEntity()
7 CBaseEntity::GetModelIndex() const
8 CBaseEntity::GetModelName() const
9 CBaseEntity::SetModelIndex(int)
10 CDODPlayer::_GetClassName()
11 CDODPlayer::GetServerClass()
12 CDODPlayer::GetClassName()
13 CDODPlayer::YouForgotToImplementOrDeclareServerClass()
14 CDODPlayer::GetDataDescMap()
15 CBaseAnimating::TestCollision(Ray_t const&, unsigned int, CGameTrace&)
16 CBaseAnimating::TestHitboxes(Ray_t const&, unsigned int, CGameTrace&)
17 CDODPlayer::ComputeWorldSpaceSurroundingBox(Vector*, Vector*)
18 CBaseEntity::ShouldCollide(int, int) const
19 CBaseEntity::SetOwnerEntity(CBaseEntity*)
20 CBasePlayer::ShouldTransmit(CCheckTransmitInfo const*)
21 CBasePlayer::UpdateTransmitState()
22 CBaseCombatCharacter::SetTransmit(CCheckTransmitInfo*, bool)
23 CBasePlayer::GetTracerType()
24 CDODPlayer::Spawn()
25 CDODPlayer::Precache()
26 CBaseFlex::SetModel(char const*)
27 CBaseEntity::PostConstructor(char const*)
28 CBaseEntity::PostClientActive()
29 CBaseEntity::ParseMapData(CEntityMapData*)
30 CBaseEntity::KeyValue(char const*, char const*)
31 CBaseEntity::KeyValue(char const*, float)
32 CBaseEntity::KeyValue(char const*, Vector)
33 CBasePlayer::Activate()
34 CBaseEntity::SetParent(CBaseEntity*, int)
35 CBasePlayer::ObjectCaps()
36 CBaseEntity::AcceptInput(char const*, CBaseEntity*, CBaseEntity*, variant_t, int)
37 CBaseAnimating::GetInputDispatchEffectPosition(char const*, Vector&, QAngle&)
38 CBasePlayer::DrawDebugGeometryOverlays()
39 CBaseAnimating::DrawDebugTextOverlays()
40 CBasePlayer::Save(ISave&)
41 CBasePlayer::Restore(IRestore&)
42 CBasePlayer::ShouldSavePhysics()
43 CBaseEntity::OnSave(IEntitySaveUtils*)
44 CBasePlayer::OnRestore()
45 CBasePlayer::RequiredEdictIndex()
46 CBaseEntity::MoveDone()
47 CBaseEntity::Think()
48 CBasePlayer::NetworkStateChanged_m_nNextThinkTick()
49 CBasePlayer::NetworkStateChanged_m_nNextThinkTick(void*)
50 CBaseAnimating::GetBaseAnimating()
51 CBaseEntity::GetResponseSystem()
52 CBaseEntity::DispatchResponse(char const*)
53 CBasePlayer::Classify()
54 CBaseEntity::DeathNotice(CBaseEntity*)
55 CBaseEntity::ShouldAttractAutoAim(CBaseEntity*)
56 CBaseEntity::GetAutoAimRadius()
57 CBaseEntity::GetAutoAimCenter()
58 CBaseEntity::PassesDamageFilter(CTakeDamageInfo const&)
59 CDODPlayer::TraceAttack(CTakeDamageInfo const&, Vector const&, CGameTrace*)
60 CBaseEntity::CanBeHitByMeleeAttack(CBaseEntity*)
61 CDODPlayer::OnTakeDamage(CTakeDamageInfo const&)
62 CBasePlayer::TakeHealth(float, int)
63 CDODPlayer::Event_Killed(CTakeDamageInfo const&)
64 CBaseEntity::Event_KilledOther(CBaseEntity*, CTakeDamageInfo const&)
65 CBaseCombatCharacter::BloodColor()
66 CBaseEntity::IsTriggered(CBaseEntity*)
67 CBaseEntity::IsNPC() const
68 CBaseCombatCharacter::MyCombatCharacterPointer()
69 CBaseEntity::GetDelay()
70 CBaseEntity::IsMoving()
71 CBaseEntity::DamageDecal(int, int)
72 CBaseEntity::DecalTrace(CGameTrace*, char const*)
73 CBaseEntity::ImpactTrace(CGameTrace*, int, char*)
74 CBaseEntity::OnControls(CBaseEntity*)
75 CBaseEntity::HasTarget(string_t)
76 CBasePlayer::IsPlayer() const
77 CBasePlayer::IsNetClient() const
78 CBaseEntity::IsTemplate()
79 CBaseEntity::IsBaseObject() const
80 CBaseEntity::GetServerVehicle()
81 CBaseEntity::IsViewable()
82 CDODPlayer::ChangeTeam(int)
83 CBaseEntity::OnEntityEvent(EntityEvent_t, void*)
84 CBaseEntity::CanStandOn(CBaseEntity*) const
85 CBaseEntity::CanStandOn(edict_t*) const
86 CBaseEntity::GetEnemy()
87 CBaseEntity::GetEnemy() const
88 CBaseEntity::Use(CBaseEntity*, CBaseEntity*, USE_TYPE, float)
89 CBaseEntity::StartTouch(CBaseEntity*)
90 CBasePlayer::Touch(CBaseEntity*)
91 CBaseEntity::EndTouch(CBaseEntity*)
92 CBaseEntity::StartBlocked(CBaseEntity*)
93 CBaseEntity::Blocked(CBaseEntity*)
94 CBaseEntity::EndBlocked()
95 CBasePlayer::PhysicsSimulate()
96 CBasePlayer::UpdateOnRemove()
97 CBaseEntity::StopLoopingSounds()
98 CBaseEntity::SUB_AllowedToFade()
99 CBaseAnimating::Teleport(Vector const*, QAngle const*, Vector const*)
100 CBaseEntity::NotifySystemEvent(CBaseEntity*, notify_system_event_t, notify_system_event_params_t const&)
101 CBasePlayer::MakeTracer(Vector const&, CGameTrace const&, int)
102 CDODPlayer::FireBullets(FireBulletsInfo_t const&)
103 CBasePlayer::DoImpactEffect(CGameTrace&, int)
104 CBaseEntity::Respawn()
105 CBaseEntity::IsLockedByMaster()
106 CBaseAnimating::ModifyOrAppendCriteria(AI_CriteriaSet&)
107 CBaseEntity::NetworkStateChanged_m_iMaxHealth()
108 CBaseEntity::NetworkStateChanged_m_iMaxHealth(void*)
109 CBasePlayer::NetworkStateChanged_m_iHealth()
110 CBasePlayer::NetworkStateChanged_m_iHealth(void*)
111 CBasePlayer::NetworkStateChanged_m_lifeState()
112 CBasePlayer::NetworkStateChanged_m_lifeState(void*)
113 CBaseEntity::NetworkStateChanged_m_takedamage()
114 CBaseEntity::NetworkStateChanged_m_takedamage(void*)
115 CBaseEntity::GetDamageType() const
116 CBaseEntity::GetDamage()
117 CBaseEntity::SetDamage(float)
118 CBasePlayer::EyePosition()
119 CBasePlayer::EyeAngles()
120 CBasePlayer::LocalEyeAngles()
121 CBaseEntity::EarPosition()
122 CBasePlayer::BodyTarget(Vector const&, bool)
123 CBaseEntity::HeadTarget(Vector const&)
124 CBaseEntity::GetVectors(Vector*, Vector*, Vector*) const
125 CBaseEntity::GetViewOffset()
126 CBasePlayer::GetSmoothedVelocity()
127 CBaseAnimating::GetVelocity(Vector*, Vector*)
128 CBaseCombatCharacter::FVisible(CBaseEntity*, int, CBaseEntity**)
129 CBaseCombatCharacter::FVisible(Vector const&, int, CBaseEntity**)
130 CBaseEntity::CanBeSeenBy(CAI_BaseNPC*)
131 CBaseEntity::GetAttackDamageScale(CBaseEntity*)
132 CBaseEntity::GetReceivedDamageScale(CBaseEntity*)
133 CBaseEntity::CanBePoweredUp()
134 CBaseEntity::AttemptToPowerup(int, float, float, CBaseEntity*, CDamageModifier*)
135 CBaseEntity::GetGroundVelocityToApply(Vector&)
136 CBaseEntity::PhysicsSplash(Vector const&, Vector const&, float, float)
137 CBaseEntity::Splash()
138 CBaseEntity::WorldSpaceCenter() const
139 CBaseEntity::GetSoundEmissionOrigin() const
140 CBaseEntity::CreateVPhysics()
141 CBaseEntity::ForceVPhysicsCollide(CBaseEntity*)
142 CBasePlayer::VPhysicsDestroyObject()
143 CBasePlayer::VPhysicsUpdate(IPhysicsObject*)
144 CBaseEntity::VPhysicsTakeDamage(CTakeDamageInfo const&)
145 CBaseCombatCharacter::VPhysicsShadowCollision(int, gamevcollisionevent_t*)
146 CDODPlayer::VPhysicsShadowUpdate(IPhysicsObject*)
147 CBasePlayer::VPhysicsCollision(int, gamevcollisionevent_t*)
148 CBaseEntity::VPhysicsFriction(IPhysicsObject*, float, int, int)
149 CBaseEntity::UpdatePhysicsShadowToCurrentPosition(float)
150 CBaseEntity::VPhysicsGetObjectList(IPhysicsObject**, int)
151 CBaseEntity::HasPhysicsAttacker(float)
152 CBasePlayer::PhysicsSolidMaskForEntity() const
153 CBaseEntity::ResolveFlyCollisionCustom(CGameTrace&, Vector&)
154 CBaseEntity::PerformCustomPhysics(Vector*, Vector*, QAngle*, QAngle*)
155 CBaseAnimating::GetStepOrigin() const
156 CBaseAnimating::GetStepAngles() const
157 CBaseEntity::ShouldDrawWaterImpacts()
158 CBaseEntity::NetworkStateChanged_m_fFlags()
159 CBaseEntity::NetworkStateChanged_m_fFlags(void*)
160 CBasePlayer::NetworkStateChanged_m_nWaterLevel()
161 CBasePlayer::NetworkStateChanged_m_nWaterLevel(void*)
162 CBasePlayer::NetworkStateChanged_m_hGroundEntity()
163 CBasePlayer::NetworkStateChanged_m_hGroundEntity(void*)
164 CBasePlayer::NetworkStateChanged_m_vecBaseVelocity()
165 CBasePlayer::NetworkStateChanged_m_vecBaseVelocity(void*)
166 CBasePlayer::NetworkStateChanged_m_flFriction()
167 CBasePlayer::NetworkStateChanged_m_flFriction(void*)
168 CBasePlayer::NetworkStateChanged_m_vecVelocity()
169 CBasePlayer::NetworkStateChanged_m_vecVelocity(void*)
170 CBasePlayer::NetworkStateChanged_m_vecViewOffset()
171 CBasePlayer::NetworkStateChanged_m_vecViewOffset(void*)
172 CBaseAnimating::GetIdealSpeed() const
173 CBaseAnimating::GetIdealAccel() const
174 CBaseAnimatingOverlay::StudioFrameAdvance()
175 CBaseAnimating::IsActivityFinished()
176 CBaseAnimating::ClampRagdollForce(Vector const&, Vector*)
177 CBaseAnimating::BecomeRagdollOnClient(Vector const&)
178 CBaseAnimating::IsRagdoll()
179 CBaseAnimating::CanBecomeRagdoll()
180 CBaseAnimatingOverlay::GetSkeleton(CStudioHdr*, Vector*, Quaternion*, int)
181 CBaseAnimating::GetBoneTransform(int, matrix3x4_t&)
182 CDODPlayer::SetupBones(matrix3x4_t*, int)
183 CBaseAnimating::CalculateIKLocks(float)
184 CBaseAnimatingOverlay::DispatchAnimEvents(CBaseAnimating*)
185 CBaseAnimating::HandleAnimEvent(animevent_t*)
186 CBaseAnimating::GetAttachment(int, matrix3x4_t&)
187 CBaseAnimating::InitBoneControllers()
188 CBaseAnimating::GetGroundSpeedVelocity()
189 CBaseAnimating::Ignite(float, bool, float, bool)
190 CBaseAnimating::Extinguish()
191 CBaseCombatCharacter::SetLightingOriginRelative(CBaseEntity*)
192 CBaseAnimating::SetLightingOrigin(CBaseEntity*)
193 CBaseFlex::SetViewtarget(Vector const&)
194 CBaseFlex::StartSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*, CChoreoActor*, CBaseEntity*)
195 CBaseFlex::ProcessSceneEvents()
196 CBaseFlex::ProcessSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*)
197 CBaseFlex::ClearSceneEvent(CSceneEventInfo*, bool, bool)
198 CBaseFlex::CheckSceneEventCompletion(CSceneEventInfo*, float, CChoreoScene*, CChoreoEvent*)
199 CBaseCombatCharacter::GetPhysicsImpactDamageTable()
200 CBaseCombatCharacter::FInViewCone(CBaseEntity*)
201 CBaseCombatCharacter::FInViewCone(Vector const&)
202 CBaseCombatCharacter::FInAimCone(CBaseEntity*)
203 CBaseCombatCharacter::FInAimCone(Vector const&)
204 CBaseCombatCharacter::ShouldShootMissTarget(CBaseCombatCharacter*)
205 CBaseCombatCharacter::FindMissTarget()
206 CBaseCombatCharacter::HandleInteraction(int, void*, CBaseCombatCharacter*)
207 CBasePlayer::BodyAngles()
208 CBaseCombatCharacter::BodyDirection2D()
209 CBaseCombatCharacter::BodyDirection3D()
210 CBaseCombatCharacter::HeadDirection2D()
211 CBaseCombatCharacter::HeadDirection3D()
212 CBaseCombatCharacter::EyeDirection2D()
213 CBaseCombatCharacter::EyeDirection3D()
214 CBaseCombatCharacter::GiveAmmo(int, int, bool)
215 CBaseCombatCharacter::NPC_TranslateActivity(Activity)
216 CBaseCombatCharacter::Weapon_TranslateActivity(Activity, bool*)
217 CBasePlayer::Weapon_CanUse(CBaseCombatWeapon*)
218 CBasePlayer::Weapon_Equip(CBaseCombatWeapon*)
219 CBaseCombatCharacter::Weapon_EquipAmmoOnly(CBaseCombatWeapon*)
220 CBasePlayer::Weapon_Drop(CBaseCombatWeapon*, Vector const*, Vector const*)
221 CBasePlayer::Weapon_Switch(CBaseCombatWeapon*, int)
222 CBasePlayer::Weapon_ShootPosition()
223 CDODPlayer::Weapon_CanSwitchTo(CBaseCombatWeapon*)
224 CBaseCombatCharacter::Weapon_SlotOccupied(CBaseCombatWeapon*)
225 CBaseCombatCharacter::Weapon_GetSlot(int) const
226 CBaseCombatCharacter::AddPlayerItem(CBaseCombatWeapon*)
227 CBasePlayer::RemovePlayerItem(CBaseCombatWeapon*)
228 CBaseCombatCharacter::CanBecomeServerRagdoll()
229 CDODPlayer::OnTakeDamage_Alive(CTakeDamageInfo const&)
230 CBaseCombatCharacter::OnTakeDamage_Dying(CTakeDamageInfo const&)
231 CBaseCombatCharacter::OnTakeDamage_Dead(CTakeDamageInfo const&)
232 CBaseCombatCharacter::OnFriendDamaged(CBaseCombatCharacter*, CBaseEntity*)
233 CBaseCombatCharacter::NotifyFriendsOfDamage(CBaseEntity*)
234 CBaseCombatCharacter::GetDeathActivity()
235 CBaseCombatCharacter::CorpseGib(CTakeDamageInfo const&)
236 CBaseCombatCharacter::CorpseFade()
237 CBaseCombatCharacter::HasHumanGibs()
238 CBaseCombatCharacter::HasAlienGibs()
239 CBaseCombatCharacter::ShouldGib(CTakeDamageInfo const&)
240 CBaseCombatCharacter::OnKilledNPC(CBaseCombatCharacter*)
241 CBaseCombatCharacter::Event_Gibbed(CTakeDamageInfo const&)
242 CBasePlayer::Event_Dying()
243 CBaseCombatCharacter::BecomeRagdoll(CTakeDamageInfo const&, Vector const&)
244 CBaseCombatCharacter::FixupBurningServerRagdoll(CBaseEntity*)
245 CBaseCombatCharacter::BecomeRagdollBoogie(CBaseEntity*, Vector const&, float, int)
246 CBaseCombatCharacter::CheckTraceHullAttack(float, Vector const&, Vector const&, int, int, float, bool)
247 CBaseCombatCharacter::CheckTraceHullAttack(Vector const&, Vector const&, Vector const&, Vector const&, int, int, float, bool)
248 CBaseCombatCharacter::PushawayTouch(CBaseEntity*)
249 CBaseCombatCharacter::IRelationType(CBaseEntity*)
250 CBaseCombatCharacter::IRelationPriority(CBaseEntity*)
251 CBaseCombatCharacter::IsInAVehicle()
252 CBasePlayer::GetVehicle()
253 CBasePlayer::GetVehicleEntity()
254 CBaseCombatCharacter::CalcWeaponProficiency(CBaseCombatWeapon*)
255 CBaseCombatCharacter::GetAttackSpread(CBaseCombatWeapon*, CBaseEntity*)
256 CBaseCombatCharacter::GetSpreadBias(CBaseCombatWeapon*, CBaseEntity*)
257 CBasePlayer::DoMuzzleFlash()
258 CBaseCombatCharacter::AddEntityRelationship(CBaseEntity*, Disposition_t, int)
259 CBaseCombatCharacter::RemoveEntityRelationship(CBaseEntity*)
260 CBaseCombatCharacter::AddClassRelationship(Class_T, Disposition_t, int)
261 CBaseCombatCharacter::OnChangeActiveWeapon(CBaseCombatWeapon*, CBaseCombatWeapon*)
262 CBasePlayer::NetworkStateChanged_m_iAmmo()
263 CBasePlayer::NetworkStateChanged_m_iAmmo(void*)
264 CDODPlayer::CreateViewModel(int)
265 CDODPlayer::SetupVisibility(CBaseEntity*, unsigned char*, int)
266 CDODPlayer::WantsLagCompensationOnEntity(CBasePlayer const*, CUserCmd const*, CBitVec<2048> const*) const
267 CDODPlayer::SharedSpawn()
268 CDODPlayer::InitialSpawn()
269 CBasePlayer::InitHUD()
270 CBasePlayer::ShowViewPortPanel(char const*, bool, KeyValues*)
271 CDODPlayer::PlayerDeathThink()
272 CBasePlayer::Jump()
273 CBasePlayer::Duck()
274 CDODPlayer::PreThink()
275 CDODPlayer::PostThink()
276 CBasePlayer::DamageEffect(float, int)
277 CDODPlayer::OnDamagedByExplosion(CTakeDamageInfo const&)
278 CBasePlayer::ShouldFadeOnDeath()
279 CBasePlayer::IsFakeClient() const
280 CDODPlayer::GetPlayerMins() const
281 CDODPlayer::GetPlayerMaxs() const
282 CBasePlayer::CalcRoll(QAngle const&, Vector const&, float, float)
283 CBasePlayer::PackDeadPlayerItems()
284 CBasePlayer::RemoveAllItems(bool)
285 CBasePlayer::Weapon_SetLast(CBaseCombatWeapon*)
286 CBasePlayer::Weapon_ShouldSetLast(CBaseCombatWeapon*, CBaseCombatWeapon*)
287 CBasePlayer::Weapon_ShouldSelectItem(CBaseCombatWeapon*)
288 CBasePlayer::UpdateClientData()
289 CBasePlayer::ExitLadder()
290 CDODPlayer::FlashlightIsOn()
291 CDODPlayer::FlashlightTurnOn()
292 CDODPlayer::FlashlightTurnOff()
293 CBasePlayer::IsIlluminatedByFlashlight(CBaseEntity*, float*)
294 CDODPlayer::UpdateStepSound(surfacedata_t*, Vector const&, Vector const&)
295 CDODPlayer::PlayStepSound(Vector&, surfacedata_t*, float, bool)
296 CDODPlayer::DeathSound(CTakeDamageInfo const&)
297 CDODPlayer::SetAnimation(PLAYER_ANIM)
298 CBasePlayer::ImpulseCommands()
299 CDODPlayer::CheatImpulseCommands(int)
300 CDODPlayer::ClientCommand(char const*)
301 CBasePlayer::StartObserverMode(int)
302 CBasePlayer::StopObserverMode()
303 CDODPlayer::SetObserverMode(int)
304 CBasePlayer::GetObserverMode()
305 CBasePlayer::SetObserverTarget(CBaseEntity*)
306 CBasePlayer::ObserverUse(bool)
307 CBasePlayer::GetObserverTarget()
308 CBasePlayer::FindNextObserverTarget(bool)
309 CBasePlayer::IsValidObserverTarget(CBaseEntity*)
310 CBasePlayer::CheckObserverSettings()
311 CBasePlayer::JumptoPosition(Vector const&, QAngle const&)
312 CBasePlayer::ForceObserverMode(int)
313 CBasePlayer::ResetObserverMode()
314 CDODPlayer::StartReplayMode(float, float, int)
315 CDODPlayer::StopReplayMode()
316 CBasePlayer::GetDelayTicks()
317 CBasePlayer::GetReplayEntity()
318 CBasePlayer::CreateCorpse()
319 CDODPlayer::EntSelectSpawnPoint()
320 CBasePlayer::GetInVehicle(IServerVehicle*, int)
321 CBasePlayer::LeaveVehicle(Vector const&, QAngle const&)
322 CBasePlayer::OnVehicleStart()
323 CBasePlayer::OnVehicleEnd(Vector&)
324 CDODPlayer::BumpWeapon(CBaseCombatWeapon*)
325 CBasePlayer::SelectLastItem()
326 CBasePlayer::SelectItem(char const*, int)
327 CBasePlayer::ItemPostFrame()
328 CDODPlayer::GiveNamedItem(char const*, int)
329 CDODPlayer::CheckTrainUpdate()
330 CBasePlayer::SetPlayerUnderwater(bool)
331 CBasePlayer::CanBreatheUnderwater() const
332 CBasePlayer::PlayerUse()
333 CBasePlayer::PlayUseDenySound()
334 CDODPlayer::FindUseEntity()
335 CBasePlayer::IsUseableEntity(CBaseEntity*, unsigned int)
336 CBasePlayer::PickupObject(CBaseEntity*, bool)
337 CBasePlayer::ForceDropOfCarriedPhysObjects(CBaseEntity*)
338 CBasePlayer::GetHeldObjectMass(IPhysicsObject*)
339 CDODPlayer::UpdateGeigerCounter()
340 CBasePlayer::GetAutoaimVector(float)
341 CBasePlayer::GetAutoaimVector(float, float)
342 CBasePlayer::GetAutoaimVector(autoaim_params_t&)
343 CBasePlayer::ShouldAutoaim()
344 CBasePlayer::ForceClientDllUpdate()
345 CBasePlayer::ProcessUsercmds(CUserCmd*, int, int, int, bool)
346 CDODPlayer::PlayerRunCommand(CUserCmd*, IMoveHelper*)
347 CBasePlayer::CanSpeak()
348 ghostchat_mm::__SourceHook_MFHCls_CBasePlayer_CanHearChatFrom::Func(CBasePlayer*)
349 CBasePlayer::ModifyOrAppendPlayerCriteria(AI_CriteriaSet&)
350 CDODPlayer::CheckChatText(char*, int)
351 CBasePlayer::IsFollowingPhysics()
352 CDODPlayer::InitVCollision()
353 CBasePlayer::UpdatePhysicsShadowToCurrentPosition()
354 CBasePlayer::EquipSuit(bool)
355 CBasePlayer::RemoveSuit()
356 CDODPlayer::CommitSuicide()
357 CBasePlayer::IsBot() const
358 CBasePlayer::SpawnArmorValue() const
359 CBasePlayer::NetworkStateChanged_m_ArmorValue()
360 CBasePlayer::NetworkStateChanged_m_ArmorValue(void*)</pre>

CHL2MP Player Offset List (Half-Life 2: Deathmatch)

2006-05-19T00:57:12Z

Showdax:

Also for use when using [[Vfunc_offsets_%28SourceMM%29|VFunc offsets]].

These are Linux offsets. Windows offsets are one less. These should be good as of 2006/05/18.

== The List ==

<pre>1 CHL2MP_Player::~CHL2MP_Player()
2 CBaseEntity::SetRefEHandle(CBaseHandle const&)
3 CBaseEntity::GetRefEHandle() const
4 CBaseEntity::GetCollideable()
5 CBaseEntity::GetNetworkable()
6 CBaseEntity::GetBaseEntity()
7 CBaseEntity::GetModelIndex() const
8 CBaseEntity::GetModelName() const
9 CBaseEntity::SetModelIndex(int)
10 CBasePlayer::GetPredDescMap()
11 CHL2MP_Player::GetServerClass()
12 CHL2MP_Player::GetClassName()
13 CHL2MP_Player::YouForgotToImplementOrDeclareServerClass()
14 CHL2MP_Player::GetDataDescMap()
15 CBaseAnimating::TestCollision(Ray_t const&, unsigned int, CGameTrace&)
16 CHL2_Player::TestHitboxes(Ray_t const&, unsigned int, CGameTrace&)
17 CBaseEntity::ComputeWorldSpaceSurroundingBox(Vector*, Vector*)
18 CBaseEntity::ShouldCollide(int, int) const
19 CBaseEntity::SetOwnerEntity(CBaseEntity*)
20 CBasePlayer::ShouldTransmit(CCheckTransmitInfo const*)
21 CBasePlayer::UpdateTransmitState()
22 CBaseCombatCharacter::SetTransmit(CCheckTransmitInfo*, bool)
23 CBasePlayer::GetTracerType()
24 CHL2MP_Player::Spawn()
25 CHL2MP_Player::Precache()
26 CBaseFlex::SetModel(char const*)
27 CBaseEntity::PostConstructor(char const*)
28 CBaseEntity::ParseMapData(CEntityMapData*)
29 CBaseEntity::KeyValue(char const*, char const*)
30 CBaseEntity::KeyValue(char const*, float)
31 CBaseEntity::KeyValue(char const*, Vector)
32 CBaseEntity::ValidateEntityConnections()
33 CBasePlayer::Activate()
34 CBasePlayer::ObjectCaps()
35 CBaseEntity::AcceptInput(char const*, CBaseEntity*, CBaseEntity*, variant_t, int)
36 CBaseAnimating::GetInputDispatchEffectPosition(char const*, Vector&, QAngle&)
37 CHL2_Player::DrawDebugGeometryOverlays()
38 CBaseAnimating::DrawDebugTextOverlays()
39 CBasePlayer::Save(ISave&)
40 CBasePlayer::Restore(IRestore&)
41 CBasePlayer::ShouldSavePhysics()
42 CBaseEntity::OnSave(IEntitySaveUtils*)
43 CHL2_Player::OnRestore()
44 CBasePlayer::RequiredEdictIndex()
45 CBaseEntity::MoveDone()
46 CBaseEntity::Think()
47 CBaseEntity::NetworkStateChanged_m_nNextThinkTick()
48 CBaseAnimating::GetBaseAnimating()
49 CBaseEntity::GetResponseSystem()
50 CBaseEntity::DispatchResponse(char const*)
51 CHL2_Player::Classify()
52 CBaseEntity::DeathNotice(CBaseEntity*)
53 CHL2_Player::PassesDamageFilter(CTakeDamageInfo const&)
54 CBasePlayer::TraceAttack(CTakeDamageInfo const&, Vector const&, CGameTrace*)
55 CHL2MP_Player::OnTakeDamage(CTakeDamageInfo const&)
56 CBasePlayer::TakeHealth(float, int)
57 CHL2MP_Player::Event_Killed(CTakeDamageInfo const&)
58 CBaseCombatCharacter::BloodColor()
59 CBaseEntity::IsTriggered(CBaseEntity*)
60 CBaseEntity::IsNPC() const
61 CBaseCombatCharacter::MyCombatCharacterPointer()
62 CBaseEntity::GetDelay()
63 CBaseEntity::IsMoving()
64 CBaseEntity::DamageDecal(int, int)
65 CBaseEntity::DecalTrace(CGameTrace*, char const*)
66 CBaseEntity::ImpactTrace(CGameTrace*, int, char*)
67 CBaseEntity::OnControls(CBaseEntity*)
68 CBaseEntity::HasTarget(string_t)
69 CBasePlayer::IsPlayer() const
70 CBasePlayer::IsNetClient()
71 CBaseEntity::IsTemplate()
72 CBaseEntity::IsBaseObject() const
73 CBaseEntity::GetServerVehicle()
74 CBaseEntity::IsViewable()
75 CHL2MP_Player::ChangeTeam(int)
76 CBaseEntity::OnEntityEvent(EntityEvent_t, void*)
77 CBaseEntity::CanStandOn(CBaseEntity*) const
78 CBaseEntity::CanStandOn(edict_t*) const
79 CBaseEntity::GetEnemy()
80 CBaseEntity::GetEnemy() const
81 CBaseEntity::Use(CBaseEntity*, CBaseEntity*, USE_TYPE, float)
82 CBaseEntity::StartTouch(CBaseEntity*)
83 CBasePlayer::Touch(CBaseEntity*)
84 CBaseEntity::EndTouch(CBaseEntity*)
85 CBaseEntity::StartBlocked(CBaseEntity*)
86 CBaseEntity::Blocked(CBaseEntity*)
87 CBaseEntity::EndBlocked()
88 CBasePlayer::PhysicsSimulate()
89 CHL2MP_Player::UpdateOnRemove()
90 CHL2_Player::StopLoopingSounds()
91 CBaseAnimating::Teleport(Vector const*, QAngle const*, Vector const*)
92 CBaseEntity::NotifySystemEvent(CBaseEntity*, notify_system_event_t, notify_system_event_params_t const&)
93 CBasePlayer::MakeTracer(Vector const&, CGameTrace const&, int)
94 CHL2MP_Player::FireBullets(FireBulletsInfo_t const&)
95 CBasePlayer::DoImpactEffect(CGameTrace&, int)
96 CBaseEntity::Respawn()
97 CBaseEntity::IsLockedByMaster()
98 CBaseAnimating::ModifyOrAppendCriteria(AI_CriteriaSet&)
99 CBasePlayer::NetworkStateChanged_m_lifeState()
100 CBaseEntity::NetworkStateChanged_m_takedamage()
101 CBaseEntity::NetworkStateChanged_m_iMaxHealth()
102 CBaseEntity::NetworkStateChanged_m_iHealth()
103 CBaseEntity::GetDamageType() const
104 CBaseEntity::GetDamage()
105 CBaseEntity::SetDamage(float)
106 CBasePlayer::EyePosition()
107 CBasePlayer::EyeAngles()
108 CBasePlayer::LocalEyeAngles()
109 CBaseEntity::EarPosition()
110 CBasePlayer::BodyTarget(Vector const&, bool)
111 CBaseEntity::HeadTarget(Vector const&)
112 CBaseEntity::GetVectors(Vector*, Vector*, Vector*) const
113 CBaseEntity::GetViewOffset()
114 CBasePlayer::GetSmoothedVelocity()
115 CBaseAnimating::GetVelocity(Vector*, Vector*)
116 CBaseEntity::FVisible(CBaseEntity*, int, CBaseEntity**)
117 CBaseEntity::FVisible(Vector const&, int, CBaseEntity**)
118 CBaseEntity::CanBeSeen()
119 CBaseEntity::GetAttackDamageScale(CBaseEntity*)
120 CBaseEntity::GetReceivedDamageScale(CBaseEntity*)
121 CBaseEntity::CanBePoweredUp()
122 CBaseEntity::AttemptToPowerup(int, float, float, CBaseEntity*, CDamageModifier*)
123 CBaseEntity::GetGroundVelocityToApply(Vector&)
124 CBaseEntity::PhysicsSplash(Vector const&, Vector const&, float, float)
125 CBaseEntity::Splash()
126 CBaseEntity::WorldSpaceCenter() const
127 CBaseEntity::GetSoundEmissionOrigin() const
128 CBaseEntity::CreateVPhysics()
129 CBaseEntity::ForceVPhysicsCollide(CBaseEntity*)
130 CBasePlayer::VPhysicsDestroyObject()
131 CBasePlayer::VPhysicsUpdate(IPhysicsObject*)
132 CBaseEntity::VPhysicsTakeDamage(CTakeDamageInfo const&)
133 CBaseCombatCharacter::VPhysicsShadowCollision(int, gamevcollisionevent_t*)
134 CBasePlayer::VPhysicsShadowUpdate(IPhysicsObject*)
135 CBasePlayer::VPhysicsCollision(int, gamevcollisionevent_t*)
136 CBaseEntity::VPhysicsFriction(IPhysicsObject*, float, int, int)
137 CBaseEntity::UpdatePhysicsShadowToCurrentPosition(float)
138 CBaseEntity::VPhysicsGetObjectList(IPhysicsObject**, int)
139 CBaseEntity::HasPhysicsAttacker(float)
140 CBasePlayer::PhysicsSolidMaskForEntity() const
141 CBaseEntity::ResolveFlyCollisionCustom(CGameTrace&, Vector&)
142 CBaseEntity::PerformCustomPhysics(Vector*, Vector*, QAngle*, QAngle*)
143 CBaseAnimating::GetStepOrigin() const
144 CBaseAnimating::GetStepAngles() const
145 CBaseEntity::ShouldDrawWaterImpacts()
146 CBaseEntity::NetworkStateChanged_m_fFlags()
147 CBasePlayer::NetworkStateChanged_m_hGroundEntity()
148 CBasePlayer::NetworkStateChanged_m_vecBaseVelocity()
149 CBaseEntity::NetworkStateChanged_m_nWaterLevel()
150 CBasePlayer::NetworkStateChanged_m_flFriction()
151 CBaseEntity::NetworkStateChanged_m_vecVelocity()
152 CBasePlayer::NetworkStateChanged_m_vecViewOffset()
153 CBaseAnimating::GetIdealSpeed() const
154 CBaseAnimating::GetIdealAccel() const
155 CBaseAnimatingOverlay::StudioFrameAdvance()
156 CBaseAnimating::IsActivityFinished()
157 CBaseAnimating::ClampRagdollForce(Vector const&, Vector*)
158 CHL2MP_Player::BecomeRagdollOnClient(Vector const&)
159 CBaseAnimating::IsRagdoll()
160 CBaseAnimating::CanBecomeRagdoll()
161 CBaseAnimatingOverlay::GetSkeleton(Vector*, Quaternion*, int)
162 CBaseAnimating::GetBoneTransform(int, matrix3x4_t&)
163 CBaseAnimating::SetupBones(matrix3x4_t*, int)
164 CBaseAnimating::CalculateIKLocks(float)
165 CBaseAnimatingOverlay::DispatchAnimEvents(CBaseAnimating*)
166 CBaseAnimating::HandleAnimEvent(animevent_t*)
167 CBaseAnimating::GetAttachment(int, matrix3x4_t&)
168 CBaseAnimating::InitBoneControllers()
169 CBaseAnimating::GetGroundSpeedVelocity()
170 CBaseAnimating::DrawServerHitboxes(float, bool)
171 CBaseAnimating::Ignite(float, bool, float, bool)
172 CBaseAnimating::Extinguish()
173 CBaseCombatCharacter::SetLightingOrigin(CBaseEntity*)
174 CBaseFlex::SetViewtarget(Vector const&)
175 CBaseFlex::StartSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*, CChoreoActor*, CBaseEntity*)
176 CBaseFlex::ProcessSceneEvents()
177 CBaseFlex::ProcessSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*)
178 CBaseFlex::ClearSceneEvent(CSceneEventInfo*, bool, bool)
179 CBaseFlex::CheckSceneEventCompletion(CSceneEventInfo*, float, CChoreoScene*, CChoreoEvent*)
180 CBaseCombatCharacter::GetPhysicsImpactDamageTable()
181 CBaseCombatCharacter::FInViewCone(CBaseEntity*)
182 CBaseCombatCharacter::FInViewCone(Vector const&)
183 CBaseCombatCharacter::FInAimCone(CBaseEntity*)
184 CBaseCombatCharacter::FInAimCone(Vector const&)
185 CHL2_Player::ShouldShootMissTarget(CBaseCombatCharacter*)
186 CBaseCombatCharacter::FindMissTarget()
187 CHL2_Player::HandleInteraction(int, void*, CBaseCombatCharacter*)
188 CBasePlayer::BodyAngles()
189 CBaseCombatCharacter::BodyDirection2D()
190 CBaseCombatCharacter::BodyDirection3D()
191 CBaseCombatCharacter::HeadDirection2D()
192 CBaseCombatCharacter::HeadDirection3D()
193 CHL2_Player::EyeDirection2D()
194 CHL2_Player::EyeDirection3D()
195 CHL2_Player::GiveAmmo(int, int, bool)
196 CBaseCombatCharacter::NPC_TranslateActivity(Activity)
197 CBaseCombatCharacter::Weapon_TranslateActivity(Activity, bool*)
198 CHL2_Player::Weapon_CanUse(CBaseCombatWeapon*)
199 CHL2_Player::Weapon_Equip(CBaseCombatWeapon*)
200 CBaseCombatCharacter::Weapon_EquipAmmoOnly(CBaseCombatWeapon*)
201 CHL2MP_Player::Weapon_Drop(CBaseCombatWeapon*, Vector const*, Vector const*)
202 CHL2MP_Player::Weapon_Switch(CBaseCombatWeapon*, int)
203 CBasePlayer::Weapon_ShootPosition()
204 CBaseCombatCharacter::Weapon_CanSwitchTo(CBaseCombatWeapon*)
205 CBaseCombatCharacter::Weapon_SlotOccupied(CBaseCombatWeapon*)
206 CBaseCombatCharacter::Weapon_GetSlot(int) const
207 CBaseCombatCharacter::AddPlayerItem(CBaseCombatWeapon*)
208 CBasePlayer::RemovePlayerItem(CBaseCombatWeapon*)
209 CBasePlayer::OnTakeDamage_Alive(CTakeDamageInfo const&)
210 CBaseCombatCharacter::OnTakeDamage_Dying(CTakeDamageInfo const&)
211 CBaseCombatCharacter::OnTakeDamage_Dead(CTakeDamageInfo const&)
212 CBaseCombatCharacter::OnFriendDamaged(CBaseCombatCharacter*, CBaseEntity*)
213 CHL2_Player::NotifyFriendsOfDamage(CBaseEntity*)
214 CBaseCombatCharacter::GetDeathActivity()
215 CBaseCombatCharacter::CorpseGib(CTakeDamageInfo const&)
216 CBaseCombatCharacter::CorpseFade()
217 CBaseCombatCharacter::HasHumanGibs()
218 CBaseCombatCharacter::HasAlienGibs()
219 CBaseCombatCharacter::ShouldGib(CTakeDamageInfo const&)
220 CBaseCombatCharacter::OnKilledNPC(CBaseCombatCharacter*)
221 CBaseCombatCharacter::Event_Gibbed(CTakeDamageInfo const&)
222 CBasePlayer::Event_Dying()
223 CBaseCombatCharacter::BecomeRagdoll(CTakeDamageInfo const&, Vector const&)
224 CBaseCombatCharacter::CheckTraceHullAttack(float, Vector const&, Vector const&, int, int, float, bool)
225 CBaseCombatCharacter::CheckTraceHullAttack(Vector const&, Vector const&, Vector const&, Vector const&, int, int, float, bool)
226 CBaseCombatCharacter::IRelationType(CBaseEntity*)
227 CBaseCombatCharacter::IRelationPriority(CBaseEntity*)
228 CHL2_Player::CalcWeaponProficiency(CBaseCombatWeapon*)
229 CHL2MP_Player::GetAttackSpread(CBaseCombatWeapon*, CBaseEntity*)
230 CBaseCombatCharacter::GetSpreadBias(CBaseCombatWeapon*, CBaseEntity*)
231 CBasePlayer::DoMuzzleFlash()
232 CBaseCombatCharacter::AddEntityRelationship(CBaseEntity*, Disposition_t, int)
233 CBaseCombatCharacter::AddClassRelationship(Class_T, Disposition_t, int)
234 CBaseCombatCharacter::OnChangeActiveWeapon(CBaseCombatWeapon*, CBaseCombatWeapon*)
235 CBasePlayer::NetworkStateChanged_m_iAmmo()
236 CHL2MP_Player::CreateViewModel(int)
237 CHL2_Player::SetupVisibility(CBaseEntity*, unsigned char*, int)
238 CHL2MP_Player::WantsLagCompensationOnEntity(CBasePlayer const*, CUserCmd const*, CBitVec<2048> const*) const
239 CBasePlayer::SharedSpawn()
240 CBasePlayer::InitialSpawn()
241 CBasePlayer::InitHUD()
242 CBasePlayer::ShowViewPortPanel(char const*, bool, KeyValues*)
243 CBasePlayer::PlayerDeathThink()
244 CBasePlayer::Jump()
245 CBasePlayer::Duck()
246 CHL2MP_Player::PreThink()
247 CHL2MP_Player::PostThink()
248 CBasePlayer::DamageEffect(float, int)
249 CHL2_Player::OnDamagedByExplosion(CTakeDamageInfo const&)
250 CBasePlayer::ShouldFadeOnDeath()
251 CBasePlayer::IsFakeClient()
252 CBasePlayer::GetPlayerMins() const
253 CBasePlayer::GetPlayerMaxs() const
254 CBasePlayer::CalcRoll(QAngle const&, Vector const&, float, float)
255 CBasePlayer::PackDeadPlayerItems()
256 CBasePlayer::RemoveAllItems(bool)
257 CBasePlayer::Weapon_SetLast(CBaseCombatWeapon*)
258 CBasePlayer::Weapon_ShouldSetLast(CBaseCombatWeapon*, CBaseCombatWeapon*)
259 CBasePlayer::Weapon_ShouldSelectItem(CBaseCombatWeapon*)
260 CHL2_Player::UpdateClientData()
261 CHL2_Player::ExitLadder()
262 CHL2MP_Player::FlashlightIsOn()
263 CHL2MP_Player::FlashlightTurnOn()
264 CHL2MP_Player::FlashlightTurnOff()
265 CBasePlayer::UpdateStepSound(surfacedata_t*, Vector const&, Vector const&)
266 CHL2MP_Player::PlayStepSound(Vector&, surfacedata_t*, float, bool)
267 CHL2MP_Player::DeathSound()
268 CHL2MP_Player::SetAnimation(PLAYER_ANIM)
269 CBasePlayer::ImpulseCommands()
270 CHL2MP_Player::CheatImpulseCommands(int)
271 CHL2MP_Player::ClientCommand(char const*)
272 CHL2MP_Player::StartObserverMode(int)
273 CBasePlayer::StopObserverMode()
274 CBasePlayer::SetObserverMode(int)
275 CBasePlayer::GetObserverMode()
276 CBasePlayer::SetObserverTarget(CBaseEntity*)
277 CBasePlayer::ObserverUse(bool)
278 CBasePlayer::GetObserverTarget()
279 CBasePlayer::FindNextObserverTarget(bool)
280 CBasePlayer::IsValidObserverTarget(CBaseEntity*)
281 CBasePlayer::CheckObserverSettings()
282 CBasePlayer::JumptoPosition(Vector const&, QAngle const&)
283 CBasePlayer::ForceObserverMode(int)
284 CBasePlayer::ResetObserverMode()
285 CHL2_Player::CreateCorpse()
286 CHL2MP_Player::EntSelectSpawnPoint()
287 CHL2_Player::GetInVehicle(IServerVehicle*, int)
288 CBasePlayer::LeaveVehicle(Vector const&, QAngle const&)
289 CBasePlayer::OnVehicleStart()
290 CBasePlayer::OnVehicleEnd(Vector&)
291 CHL2MP_Player::BumpWeapon(CBaseCombatWeapon*)
292 CBasePlayer::SelectLastItem()
293 CBasePlayer::SelectItem(char const*, int)
294 CHL2_Player::ItemPostFrame()
295 CBasePlayer::GiveNamedItem(char const*, int)
296 CBasePlayer::CheckTrainUpdate()
297 CHL2_Player::SetPlayerUnderwater(bool)
298 CHL2_Player::CanBreatheUnderwater() const
299 CHL2_Player::PlayerUse()
300 CHL2_Player::PlayUseDenySound()
301 CBasePlayer::FindUseEntity()
302 CBasePlayer::IsUseableEntity(CBaseEntity*, unsigned int)
303 CHL2MP_Player::PickupObject(CBaseEntity*, bool)
304 CHL2_Player::ForceDropOfCarriedPhysObjects(CBaseEntity*)
305 CHL2_Player::GetHeldObjectMass(IPhysicsObject*)
306 CBasePlayer::UpdateGeigerCounter()
307 CHL2_Player::GetAutoaimVector(float)
308 CBasePlayer::ShouldAutoaim()
309 CBasePlayer::ForceClientDllUpdate()
310 CBasePlayer::ProcessUsercmds(CUserCmd*, int, int, int, bool)
311 CHL2_Player::PlayerRunCommand(CUserCmd*, IMoveHelper*)
312 CBasePlayer::CanSpeak()
313 CBasePlayer::CanHearChatFrom(CBasePlayer*)
314 CHL2_Player::ModifyOrAppendPlayerCriteria(AI_CriteriaSet&)
315 CBasePlayer::CheckChatText(char*, int)
316 CHL2_Player::IsFollowingPhysics()
317 CHL2_Player::InitVCollision()
318 CBasePlayer::UpdatePhysicsShadowToCurrentPosition()
319 CHL2_Player::EquipSuit()
320 CBasePlayer::IsBot()
321 CBasePlayer::NetworkStateChanged_m_ArmorValue()
322 CHL2_Player::CommanderMode()
323 CHL2_Player::GetIdleTime() const
324 CHL2_Player::GetMoveTime() const
325 CHL2_Player::GetLastDamageTime() const
326 CHL2_Player::IsDucking() const
327 CHL2_Player::Weapon_Lower()
328 CHL2_Player::Weapon_Ready()
329 CHL2_Player::IsHoldingEntity(CBaseEntity*)
330 CHL2_Player::UpdateWeaponPosture()</pre>

Virtual Offsets (Source Mods)

2006-05-19T00:56:06Z

Showdax: /* HL2:DM */

[[Category:Documentation (SourceMM)]]
== Calling virtual functions ==
I got this method from [[User:Mani|Mani]], who I believe got it from [[User:PM|Pavol Marko]]. Thank you!

I hope to expand on an actual explantaion when I have the time (and understand it better). Hopefully, someone can expand on this, but for now I'll just post the examples and a list of the CCSPlayer virtual function table offsets.

== Offset Lists ==
==== CS:S ====
* [[CCSPlayer_offset_list_(SourceMM)|CCSPlayer]]

==== DOD:S ====
* [[CDODPlayer_offset_list_(SourceMM)|CDODPlayer]]

==== HL2:DM ====
* [[CHL2MP_Player_offset_list_(SourceMM)|CHL2MP_Player]]

== How to use the examples ==

Basically, this lets you call any [[virtual function]] by knowing it's offset. A table is created for each class that lists the address of the function for each virtual function. This method takes advantage of that to call those addresses.

Look at the examples below and edit to match the function you want to call:
Use the offset for the function you want to call in this line. ([[CCSPlayer_offset_list_(SourceMM)]])
<cpp>void *func = vtable[m_Off_GiveNamedItem];</cpp>
Change this line to match your return type and parameters:
<cpp>union {CBaseEntity *(VfuncEmptyClass::*mfpnew)(const char *, int );</cpp>
Call the original function with your parameters (change the return type to match the function you're calling):
<cpp>return (CBaseEntity *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ItemName, iSubType);</cpp>

You'll need to add an empty class for the union. Something like this:
<cpp>class VfuncEmptyClass {};</cpp>

== Examples ==

<cpp>datamap_t *VFuncs::GetDataDescMap(CBaseEntity *pThisPtr)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_GetDataDescMap];

union {datamap_t *(VfuncEmptyClass::*mfpnew)();
#ifndef __linux__
void *addr; } u; u.addr = func;
#else /* GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0 */
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (datamap_t *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)();

}

void VFuncs::SetModel(CBaseEntity *pThisPtr, const char *ModelName)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_SetModel];

union {void (VfuncEmptyClass::*mfpnew)(const char *);
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ModelName);

}

void VFuncs::Teleport(CBaseEntity *pThisPtr, const Vector *newPosition, const QAngle *newAngles, const Vector *newVelocity)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_Teleport];

union {void (VfuncEmptyClass::*mfpnew)(const Vector *, const QAngle *, const Vector *);
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(newPosition, newAngles, newVelocity);

}

Vector VFuncs::EyePosition( CBaseEntity *pThisPtr )
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_EyePosition];

union {Vector (VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (Vector) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)( );

}

QAngle &VFuncs::EyeAngles( CBaseEntity *pThisPtr )
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_EyeAngles];

union {QAngle& (VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (QAngle&) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)( );

}

void VFuncs::Ignite(CBaseEntity *pThisPtr, float flFlameLifetime, bool bNPCOnly, float flSize, bool bCalledByLevelDesigner)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_Ignite];

union {void (VfuncEmptyClass::*mfpnew)(float , bool , float , bool );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(flFlameLifetime, bNPCOnly, flSize, bCalledByLevelDesigner);

}

CBaseEntity *VFuncs::GiveNamedItem(CBaseEntity *pThisPtr, const char *ItemName, int iSubType)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_GiveNamedItem];

union {CBaseEntity *(VfuncEmptyClass::*mfpnew)(const char *, int );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (CBaseEntity *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ItemName, iSubType);
}

void VFuncs::CommitSuicide(CBaseEntity *pThisPtr)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_CommitSuicide];

union {CBaseEntity *(VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)();
}
</cpp>

Virtual Offsets (Source Mods)

2006-05-19T00:55:34Z

Showdax: /* Offset Lists */

[[Category:Documentation (SourceMM)]]
== Calling virtual functions ==
I got this method from [[User:Mani|Mani]], who I believe got it from [[User:PM|Pavol Marko]]. Thank you!

I hope to expand on an actual explantaion when I have the time (and understand it better). Hopefully, someone can expand on this, but for now I'll just post the examples and a list of the CCSPlayer virtual function table offsets.

== Offset Lists ==
==== CS:S ====
* [[CCSPlayer_offset_list_(SourceMM)|CCSPlayer]]

==== DOD:S ====
* [[CDODPlayer_offset_list_(SourceMM)|CDODPlayer]]

==== HL2:DM ====
* [[CHL2_Player_offset_list_(SourceMM)|CHL2_Player]]

== How to use the examples ==

Basically, this lets you call any [[virtual function]] by knowing it's offset. A table is created for each class that lists the address of the function for each virtual function. This method takes advantage of that to call those addresses.

Look at the examples below and edit to match the function you want to call:
Use the offset for the function you want to call in this line. ([[CCSPlayer_offset_list_(SourceMM)]])
<cpp>void *func = vtable[m_Off_GiveNamedItem];</cpp>
Change this line to match your return type and parameters:
<cpp>union {CBaseEntity *(VfuncEmptyClass::*mfpnew)(const char *, int );</cpp>
Call the original function with your parameters (change the return type to match the function you're calling):
<cpp>return (CBaseEntity *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ItemName, iSubType);</cpp>

You'll need to add an empty class for the union. Something like this:
<cpp>class VfuncEmptyClass {};</cpp>

== Examples ==

<cpp>datamap_t *VFuncs::GetDataDescMap(CBaseEntity *pThisPtr)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_GetDataDescMap];

union {datamap_t *(VfuncEmptyClass::*mfpnew)();
#ifndef __linux__
void *addr; } u; u.addr = func;
#else /* GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0 */
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (datamap_t *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)();

}

void VFuncs::SetModel(CBaseEntity *pThisPtr, const char *ModelName)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_SetModel];

union {void (VfuncEmptyClass::*mfpnew)(const char *);
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ModelName);

}

void VFuncs::Teleport(CBaseEntity *pThisPtr, const Vector *newPosition, const QAngle *newAngles, const Vector *newVelocity)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_Teleport];

union {void (VfuncEmptyClass::*mfpnew)(const Vector *, const QAngle *, const Vector *);
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(newPosition, newAngles, newVelocity);

}

Vector VFuncs::EyePosition( CBaseEntity *pThisPtr )
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_EyePosition];

union {Vector (VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (Vector) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)( );

}

QAngle &VFuncs::EyeAngles( CBaseEntity *pThisPtr )
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_EyeAngles];

union {QAngle& (VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (QAngle&) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)( );

}

void VFuncs::Ignite(CBaseEntity *pThisPtr, float flFlameLifetime, bool bNPCOnly, float flSize, bool bCalledByLevelDesigner)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_Ignite];

union {void (VfuncEmptyClass::*mfpnew)(float , bool , float , bool );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(flFlameLifetime, bNPCOnly, flSize, bCalledByLevelDesigner);

}

CBaseEntity *VFuncs::GiveNamedItem(CBaseEntity *pThisPtr, const char *ItemName, int iSubType)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_GiveNamedItem];

union {CBaseEntity *(VfuncEmptyClass::*mfpnew)(const char *, int );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (CBaseEntity *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ItemName, iSubType);
}

void VFuncs::CommitSuicide(CBaseEntity *pThisPtr)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_CommitSuicide];

union {CBaseEntity *(VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)();
}
</cpp>

Virtual Offsets (Source Mods)

2006-05-19T00:35:43Z

Showdax:

[[Category:Documentation (SourceMM)]]
== Calling virtual functions ==
I got this method from [[User:Mani|Mani]], who I believe got it from [[User:PM|Pavol Marko]]. Thank you!

I hope to expand on an actual explantaion when I have the time (and understand it better). Hopefully, someone can expand on this, but for now I'll just post the examples and a list of the CCSPlayer virtual function table offsets.

== Offset Lists ==
==== CS:S ====
* [[CCSPlayer_offset_list_(SourceMM)|CCSPlayer]]

==== DOD:S ====
* [[CDODPlayer_offset_list_(SourceMM)|CDODPlayer]]

== How to use the examples ==

Basically, this lets you call any [[virtual function]] by knowing it's offset. A table is created for each class that lists the address of the function for each virtual function. This method takes advantage of that to call those addresses.

Look at the examples below and edit to match the function you want to call:
Use the offset for the function you want to call in this line. ([[CCSPlayer_offset_list_(SourceMM)]])
<cpp>void *func = vtable[m_Off_GiveNamedItem];</cpp>
Change this line to match your return type and parameters:
<cpp>union {CBaseEntity *(VfuncEmptyClass::*mfpnew)(const char *, int );</cpp>
Call the original function with your parameters (change the return type to match the function you're calling):
<cpp>return (CBaseEntity *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ItemName, iSubType);</cpp>

You'll need to add an empty class for the union. Something like this:
<cpp>class VfuncEmptyClass {};</cpp>

== Examples ==

<cpp>datamap_t *VFuncs::GetDataDescMap(CBaseEntity *pThisPtr)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_GetDataDescMap];

union {datamap_t *(VfuncEmptyClass::*mfpnew)();
#ifndef __linux__
void *addr; } u; u.addr = func;
#else /* GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0 */
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (datamap_t *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)();

}

void VFuncs::SetModel(CBaseEntity *pThisPtr, const char *ModelName)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_SetModel];

union {void (VfuncEmptyClass::*mfpnew)(const char *);
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ModelName);

}

void VFuncs::Teleport(CBaseEntity *pThisPtr, const Vector *newPosition, const QAngle *newAngles, const Vector *newVelocity)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_Teleport];

union {void (VfuncEmptyClass::*mfpnew)(const Vector *, const QAngle *, const Vector *);
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(newPosition, newAngles, newVelocity);

}

Vector VFuncs::EyePosition( CBaseEntity *pThisPtr )
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_EyePosition];

union {Vector (VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (Vector) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)( );

}

QAngle &VFuncs::EyeAngles( CBaseEntity *pThisPtr )
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_EyeAngles];

union {QAngle& (VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (QAngle&) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)( );

}

void VFuncs::Ignite(CBaseEntity *pThisPtr, float flFlameLifetime, bool bNPCOnly, float flSize, bool bCalledByLevelDesigner)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_Ignite];

union {void (VfuncEmptyClass::*mfpnew)(float , bool , float , bool );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(void) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(flFlameLifetime, bNPCOnly, flSize, bCalledByLevelDesigner);

}

CBaseEntity *VFuncs::GiveNamedItem(CBaseEntity *pThisPtr, const char *ItemName, int iSubType)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_GiveNamedItem];

union {CBaseEntity *(VfuncEmptyClass::*mfpnew)(const char *, int );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

return (CBaseEntity *) (reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)(ItemName, iSubType);
}

void VFuncs::CommitSuicide(CBaseEntity *pThisPtr)
{
void **this_ptr = *(void ***)&pThisPtr;
void **vtable = *(void ***)pThisPtr;
void *func = vtable[m_Off_CommitSuicide];

union {CBaseEntity *(VfuncEmptyClass::*mfpnew)( void );
#ifndef __linux__
void *addr; } u; u.addr = func;
#else // GCC's member function pointers all contain a this pointer adjustor. You'd probably set it to 0
struct {void *addr; intptr_t adjustor;} s; } u; u.s.addr = func; u.s.adjustor = 0;
#endif

(reinterpret_cast<VfuncEmptyClass*>(this_ptr)->*u.mfpnew)();
}
</cpp>

CDODPlayer Offset List (Day of Defeat: Source)

2006-05-19T00:35:12Z

Showdax:

Also for use when using [[Vfunc_offsets_%28SourceMM%29|VFunc offsets]].

These are Linux offsets. Windows offsets are one less. These should be good as of 2006/05/18.

== The List ==

<pre>1 CDODPlayer::~CDODPlayer()
2 CBaseEntity::SetRefEHandle(CBaseHandle const&)
3 CBaseEntity::GetRefEHandle() const
4 CBaseEntity::GetCollideable()
5 CBaseEntity::GetNetworkable()
6 CBaseEntity::GetBaseEntity()
7 CBaseEntity::GetModelIndex() const
8 CBaseEntity::GetModelName() const
9 CBaseEntity::SetModelIndex(int)
10 CDODPlayer::GetServerClass()
11 CDODPlayer::GetClassName()
12 CDODPlayer::YouForgotToImplementOrDeclareServerClass()
13 CDODPlayer::GetDataDescMap()
14 CBaseAnimating::TestCollision(Ray_t const&, unsigned int, CGameTrace&)
15 CBaseAnimating::TestHitboxes(Ray_t const&, unsigned int, CGameTrace&)
16 CBaseEntity::ComputeWorldSpaceSurroundingBox(Vector*, Vector*)
17 CBaseEntity::ShouldCollide(int, int) const
18 CBaseEntity::SetOwnerEntity(CBaseEntity*)
19 CBasePlayer::ShouldTransmit(CCheckTransmitInfo const*)
20 CBasePlayer::UpdateTransmitState()
21 CBaseCombatCharacter::SetTransmit(CCheckTransmitInfo*, bool)
22 CBasePlayer::GetTracerType()
23 CDODPlayer::Spawn()
24 CDODPlayer::Precache()
25 CBaseFlex::SetModel(char const*)
26 CBaseEntity::PostConstructor(char const*)
27 CBaseEntity::ParseMapData(CEntityMapData*)
28 CBaseEntity::KeyValue(char const*, char const*)
29 CBaseEntity::KeyValue(char const*, float)
30 CBaseEntity::KeyValue(char const*, Vector)
31 CBaseEntity::ValidateEntityConnections()
32 CBasePlayer::Activate()
33 CBasePlayer::ObjectCaps()
34 CBaseEntity::AcceptInput(char const*, CBaseEntity*, CBaseEntity*, variant_t, int)
35 CBaseAnimating::GetInputDispatchEffectPosition(char const*, Vector&, QAngle&)
36 CBasePlayer::DrawDebugGeometryOverlays()
37 CBaseAnimating::DrawDebugTextOverlays()
38 CBasePlayer::Save(ISave&)
39 CBasePlayer::Restore(IRestore&)
40 CBasePlayer::ShouldSavePhysics()
41 CBaseEntity::OnSave(IEntitySaveUtils*)
42 CBasePlayer::OnRestore()
43 CBasePlayer::RequiredEdictIndex()
44 CBaseEntity::MoveDone()
45 CBaseEntity::Think()
46 CBaseEntity::NetworkStateChanged_m_nNextThinkTick()
47 CBaseAnimating::GetBaseAnimating()
48 CBaseEntity::GetResponseSystem()
49 CBaseEntity::DispatchResponse(char const*)
50 CBasePlayer::Classify()
51 CBaseEntity::DeathNotice(CBaseEntity*)
52 CBaseEntity::PassesDamageFilter(CTakeDamageInfo const&)
53 CDODPlayer::TraceAttack(CTakeDamageInfo const&, Vector const&, CGameTrace*)
54 CBaseEntity::CanBeHitByMeleeAttack(CBaseEntity*)
55 CDODPlayer::OnTakeDamage(CTakeDamageInfo const&)
56 CBasePlayer::TakeHealth(float, int)
57 CDODPlayer::Event_Killed(CTakeDamageInfo const&)
58 CBaseEntity::Event_KilledOther(CBaseEntity*)
59 CBaseCombatCharacter::BloodColor()
60 CBaseEntity::IsTriggered(CBaseEntity*)
61 CBaseEntity::IsNPC() const
62 CBaseCombatCharacter::MyCombatCharacterPointer()
63 CBaseEntity::GetDelay()
64 CBaseEntity::IsMoving()
65 CBaseEntity::DamageDecal(int, int)
66 CBaseEntity::DecalTrace(CGameTrace*, char const*)
67 CBaseEntity::ImpactTrace(CGameTrace*, int, char*)
68 CBaseEntity::OnControls(CBaseEntity*)
69 CBaseEntity::HasTarget(string_t)
70 CBasePlayer::IsPlayer() const
71 CBasePlayer::IsNetClient() const
72 CBaseEntity::IsTemplate()
73 CBaseEntity::IsBaseObject() const
74 CBaseEntity::GetServerVehicle()
75 CBaseEntity::IsViewable()
76 CDODPlayer::ChangeTeam(int)
77 CBaseEntity::OnEntityEvent(EntityEvent_t, void*)
78 CBaseEntity::CanStandOn(CBaseEntity*) const
79 CBaseEntity::CanStandOn(edict_t*) const
80 CBaseEntity::GetEnemy()
81 CBaseEntity::GetEnemy() const
82 CBaseEntity::Use(CBaseEntity*, CBaseEntity*, USE_TYPE, float)
83 CBaseEntity::StartTouch(CBaseEntity*)
84 CBasePlayer::Touch(CBaseEntity*)
85 CBaseEntity::EndTouch(CBaseEntity*)
86 CBaseEntity::StartBlocked(CBaseEntity*)
87 CBaseEntity::Blocked(CBaseEntity*)
88 CBaseEntity::EndBlocked()
89 CBasePlayer::PhysicsSimulate()
90 CBasePlayer::UpdateOnRemove()
91 CBaseEntity::StopLoopingSounds()
92 CBaseEntity::SUB_AllowedToFade()
93 CBaseAnimating::Teleport(Vector const*, QAngle const*, Vector const*)
94 CBaseEntity::NotifySystemEvent(CBaseEntity*, notify_system_event_t, notify_system_event_params_t const&)
95 CBasePlayer::MakeTracer(Vector const&, CGameTrace const&, int)
96 CDODPlayer::FireBullets(FireBulletsInfo_t const&)
97 CBasePlayer::DoImpactEffect(CGameTrace&, int)
98 CBaseEntity::Respawn()
99 CBaseEntity::IsLockedByMaster()
100 CBaseAnimating::ModifyOrAppendCriteria(AI_CriteriaSet&)
101 CBasePlayer::NetworkStateChanged_m_lifeState()
102 CBaseEntity::NetworkStateChanged_m_takedamage()
103 CBaseEntity::NetworkStateChanged_m_iMaxHealth()
104 CBaseEntity::NetworkStateChanged_m_iHealth()
105 CBaseEntity::GetDamageType() const
106 CBaseEntity::GetDamage()
107 CBaseEntity::SetDamage(float)
108 CBasePlayer::EyePosition()
109 CBasePlayer::EyeAngles()
110 CBasePlayer::LocalEyeAngles()
111 CBaseEntity::EarPosition()
112 CBasePlayer::BodyTarget(Vector const&, bool)
113 CBaseEntity::HeadTarget(Vector const&)
114 CBaseEntity::GetVectors(Vector*, Vector*, Vector*) const
115 CBaseEntity::GetViewOffset()
116 CBasePlayer::GetSmoothedVelocity()
117 CBaseAnimating::GetVelocity(Vector*, Vector*)
118 CBaseEntity::FVisible(CBaseEntity*, int, CBaseEntity**)
119 CBaseEntity::FVisible(Vector const&, int, CBaseEntity**)
120 CBaseEntity::CanBeSeen()
121 CBaseEntity::GetAttackDamageScale(CBaseEntity*)
122 CBaseEntity::GetReceivedDamageScale(CBaseEntity*)
123 CBaseEntity::CanBePoweredUp()
124 CBaseEntity::AttemptToPowerup(int, float, float, CBaseEntity*, CDamageModifier*)
125 CBaseEntity::GetGroundVelocityToApply(Vector&)
126 CBaseEntity::PhysicsSplash(Vector const&, Vector const&, float, float)
127 CBaseEntity::Splash()
128 CBaseEntity::WorldSpaceCenter() const
129 CBaseEntity::GetSoundEmissionOrigin() const
130 CBaseEntity::CreateVPhysics()
131 CBaseEntity::ForceVPhysicsCollide(CBaseEntity*)
132 CBasePlayer::VPhysicsDestroyObject()
133 CBasePlayer::VPhysicsUpdate(IPhysicsObject*)
134 CBaseEntity::VPhysicsTakeDamage(CTakeDamageInfo const&)
135 CBaseCombatCharacter::VPhysicsShadowCollision(int, gamevcollisionevent_t*)
136 CDODPlayer::VPhysicsShadowUpdate(IPhysicsObject*)
137 CBasePlayer::VPhysicsCollision(int, gamevcollisionevent_t*)
138 CBaseEntity::VPhysicsFriction(IPhysicsObject*, float, int, int)
139 CBaseEntity::UpdatePhysicsShadowToCurrentPosition(float)
140 CBaseEntity::VPhysicsGetObjectList(IPhysicsObject**, int)
141 CBaseEntity::HasPhysicsAttacker(float)
142 CBasePlayer::PhysicsSolidMaskForEntity() const
143 CBaseEntity::ResolveFlyCollisionCustom(CGameTrace&, Vector&)
144 CBaseEntity::PerformCustomPhysics(Vector*, Vector*, QAngle*, QAngle*)
145 CBaseAnimating::GetStepOrigin() const
146 CBaseAnimating::GetStepAngles() const
147 CBaseEntity::ShouldDrawWaterImpacts()
148 CBaseEntity::NetworkStateChanged_m_fFlags()
149 CBasePlayer::NetworkStateChanged_m_hGroundEntity()
150 CBasePlayer::NetworkStateChanged_m_vecBaseVelocity()
151 CBaseEntity::NetworkStateChanged_m_nWaterLevel()
152 CBasePlayer::NetworkStateChanged_m_flFriction()
153 CBaseEntity::NetworkStateChanged_m_vecVelocity()
154 CBasePlayer::NetworkStateChanged_m_vecViewOffset()
155 CBaseAnimating::GetIdealSpeed() const
156 CBaseAnimating::GetIdealAccel() const
157 CBaseAnimatingOverlay::StudioFrameAdvance()
158 CBaseAnimating::IsActivityFinished()
159 CBaseAnimating::ClampRagdollForce(Vector const&, Vector*)
160 CBaseAnimating::BecomeRagdollOnClient(Vector const&)
161 CBaseAnimating::IsRagdoll()
162 CBaseAnimating::CanBecomeRagdoll()
163 CBaseAnimatingOverlay::GetSkeleton(CStudioHdr*, Vector*, Quaternion*, int)
164 CBaseAnimating::GetBoneTransform(int, matrix3x4_t&)
165 CDODPlayer::SetupBones(matrix3x4_t*, int)
166 CBaseAnimating::CalculateIKLocks(float)
167 CBaseAnimatingOverlay::DispatchAnimEvents(CBaseAnimating*)
168 CBaseAnimating::HandleAnimEvent(animevent_t*)
169 CBaseAnimating::GetAttachment(int, matrix3x4_t&)
170 CBaseAnimating::InitBoneControllers()
171 CBaseAnimating::GetGroundSpeedVelocity()
172 CBaseAnimating::DrawServerHitboxes(float, bool)
173 CBaseAnimating::Ignite(float, bool, float, bool)
174 CBaseAnimating::Extinguish()
175 CBaseCombatCharacter::SetLightingOriginRelative(CBaseEntity*)
176 CBaseAnimating::SetLightingOrigin(CBaseEntity*)
177 CBaseFlex::SetViewtarget(Vector const&)
178 CBaseFlex::StartSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*, CChoreoActor*, CBaseEntity*)
179 CBaseFlex::ProcessSceneEvents()
180 CBaseFlex::ProcessSceneEvent(CSceneEventInfo*, CChoreoScene*, CChoreoEvent*)
181 CBaseFlex::ClearSceneEvent(CSceneEventInfo*, bool, bool)
182 CBaseFlex::CheckSceneEventCompletion(CSceneEventInfo*, float, CChoreoScene*, CChoreoEvent*)
183 CBaseCombatCharacter::GetPhysicsImpactDamageTable()
184 CBaseCombatCharacter::FInViewCone(CBaseEntity*)
185 CBaseCombatCharacter::FInViewCone(Vector const&)
186 CBaseCombatCharacter::FInAimCone(CBaseEntity*)
187 CBaseCombatCharacter::FInAimCone(Vector const&)
188 CBaseCombatCharacter::ShouldShootMissTarget(CBaseCombatCharacter*)
189 CBaseCombatCharacter::FindMissTarget()
190 CBaseCombatCharacter::HandleInteraction(int, void*, CBaseCombatCharacter*)
191 CBasePlayer::BodyAngles()
192 CBaseCombatCharacter::BodyDirection2D()
193 CBaseCombatCharacter::BodyDirection3D()
194 CBaseCombatCharacter::HeadDirection2D()
195 CBaseCombatCharacter::HeadDirection3D()
196 CBaseCombatCharacter::EyeDirection2D()
197 CBaseCombatCharacter::EyeDirection3D()
198 CBaseCombatCharacter::GiveAmmo(int, int, bool)
199 CBaseCombatCharacter::NPC_TranslateActivity(Activity)
200 CBaseCombatCharacter::Weapon_TranslateActivity(Activity, bool*)
201 CBasePlayer::Weapon_CanUse(CBaseCombatWeapon*)
202 CBasePlayer::Weapon_Equip(CBaseCombatWeapon*)
203 CBaseCombatCharacter::Weapon_EquipAmmoOnly(CBaseCombatWeapon*)
204 CBasePlayer::Weapon_Drop(CBaseCombatWeapon*, Vector const*, Vector const*)
205 CBasePlayer::Weapon_Switch(CBaseCombatWeapon*, int)
206 CBasePlayer::Weapon_ShootPosition()
207 CDODPlayer::Weapon_CanSwitchTo(CBaseCombatWeapon*)
208 CBaseCombatCharacter::Weapon_SlotOccupied(CBaseCombatWeapon*)
209 CBaseCombatCharacter::Weapon_GetSlot(int) const
210 CBaseCombatCharacter::AddPlayerItem(CBaseCombatWeapon*)
211 CBasePlayer::RemovePlayerItem(CBaseCombatWeapon*)
212 CBaseCombatCharacter::CanBecomeServerRagdoll()
213 CDODPlayer::OnTakeDamage_Alive(CTakeDamageInfo const&)
214 CBaseCombatCharacter::OnTakeDamage_Dying(CTakeDamageInfo const&)
215 CBaseCombatCharacter::OnTakeDamage_Dead(CTakeDamageInfo const&)
216 CBaseCombatCharacter::OnFriendDamaged(CBaseCombatCharacter*, CBaseEntity*)
217 CBaseCombatCharacter::NotifyFriendsOfDamage(CBaseEntity*)
218 CBaseCombatCharacter::GetDeathActivity()
219 CBaseCombatCharacter::CorpseGib(CTakeDamageInfo const&)
220 CBaseCombatCharacter::CorpseFade()
221 CBaseCombatCharacter::HasHumanGibs()
222 CBaseCombatCharacter::HasAlienGibs()
223 CBaseCombatCharacter::ShouldGib(CTakeDamageInfo const&)
224 CBaseCombatCharacter::OnKilledNPC(CBaseCombatCharacter*)
225 CBaseCombatCharacter::Event_Gibbed(CTakeDamageInfo const&)
226 CBasePlayer::Event_Dying()
227 CBaseCombatCharacter::BecomeRagdoll(CTakeDamageInfo const&, Vector const&)
228 CBaseCombatCharacter::FixupBurningServerRagdoll(CBaseEntity*)
229 CBaseCombatCharacter::CheckTraceHullAttack(float, Vector const&, Vector const&, int, int, float, bool)
230 CBaseCombatCharacter::CheckTraceHullAttack(Vector const&, Vector const&, Vector const&, Vector const&, int, int, float, bool)
231 CBaseCombatCharacter::PushawayTouch(CBaseEntity*)
232 CBaseCombatCharacter::IRelationType(CBaseEntity*)
233 CBaseCombatCharacter::IRelationPriority(CBaseEntity*)
234 CBaseCombatCharacter::CalcWeaponProficiency(CBaseCombatWeapon*)
235 CBaseCombatCharacter::GetAttackSpread(CBaseCombatWeapon*, CBaseEntity*)
236 CBaseCombatCharacter::GetSpreadBias(CBaseCombatWeapon*, CBaseEntity*)
237 CBasePlayer::DoMuzzleFlash()
238 CBaseCombatCharacter::AddEntityRelationship(CBaseEntity*, Disposition_t, int)
239 CBaseCombatCharacter::AddClassRelationship(Class_T, Disposition_t, int)
240 CBaseCombatCharacter::OnChangeActiveWeapon(CBaseCombatWeapon*, CBaseCombatWeapon*)
241 CBasePlayer::NetworkStateChanged_m_iAmmo()
242 CDODPlayer::CreateViewModel(int)
243 CDODPlayer::SetupVisibility(CBaseEntity*, unsigned char*, int)
244 CDODPlayer::WantsLagCompensationOnEntity(CBasePlayer const*, CUserCmd const*, CBitVec<2048> const*) const
245 CDODPlayer::SharedSpawn()
246 CDODPlayer::InitialSpawn()
247 CBasePlayer::InitHUD()
248 CBasePlayer::ShowViewPortPanel(char const*, bool, KeyValues*)
249 CDODPlayer::PlayerDeathThink()
250 CBasePlayer::Jump()
251 CBasePlayer::Duck()
252 CDODPlayer::PreThink()
253 CDODPlayer::PostThink()
254 CBasePlayer::DamageEffect(float, int)
255 CDODPlayer::OnDamagedByExplosion(CTakeDamageInfo const&)
256 CBasePlayer::ShouldFadeOnDeath()
257 CBasePlayer::IsFakeClient() const
258 CDODPlayer::GetPlayerMins() const
259 CDODPlayer::GetPlayerMaxs() const
260 CBasePlayer::CalcRoll(QAngle const&, Vector const&, float, float)
261 CBasePlayer::PackDeadPlayerItems()
262 CBasePlayer::RemoveAllItems(bool)
263 CBasePlayer::Weapon_SetLast(CBaseCombatWeapon*)
264 CBasePlayer::Weapon_ShouldSetLast(CBaseCombatWeapon*, CBaseCombatWeapon*)
265 CBasePlayer::Weapon_ShouldSelectItem(CBaseCombatWeapon*)
266 CBasePlayer::UpdateClientData()
267 CBasePlayer::ExitLadder()
268 CDODPlayer::FlashlightIsOn()
269 CDODPlayer::FlashlightTurnOn()
270 CDODPlayer::FlashlightTurnOff()
271 CBasePlayer::IsIlluminatedByFlashlight(CBaseEntity*, float*)
272 CDODPlayer::UpdateStepSound(surfacedata_t*, Vector const&, Vector const&)
273 CDODPlayer::PlayStepSound(Vector&, surfacedata_t*, float, bool)
274 CDODPlayer::DeathSound()
275 CDODPlayer::SetAnimation(PLAYER_ANIM)
276 CBasePlayer::ImpulseCommands()
277 CDODPlayer::CheatImpulseCommands(int)
278 CDODPlayer::ClientCommand(char const*)
279 CBasePlayer::StartObserverMode(int)
280 CBasePlayer::StopObserverMode()
281 CDODPlayer::SetObserverMode(int)
282 CBasePlayer::GetObserverMode()
283 CBasePlayer::SetObserverTarget(CBaseEntity*)
284 CBasePlayer::ObserverUse(bool)
285 CBasePlayer::GetObserverTarget()
286 CBasePlayer::FindNextObserverTarget(bool)
287 CBasePlayer::IsValidObserverTarget(CBaseEntity*)
288 CBasePlayer::CheckObserverSettings()
289 CBasePlayer::JumptoPosition(Vector const&, QAngle const&)
290 CBasePlayer::ForceObserverMode(int)
291 CBasePlayer::ResetObserverMode()
292 CDODPlayer::StartReplayMode(float, float, int)
293 CDODPlayer::StopReplayMode()
294 CBasePlayer::GetDelayTicks()
295 CBasePlayer::GetReplayEntity()
296 CBasePlayer::CreateCorpse()
297 CDODPlayer::EntSelectSpawnPoint()
298 CBasePlayer::GetInVehicle(IServerVehicle*, int)
299 CBasePlayer::LeaveVehicle(Vector const&, QAngle const&)
300 CBasePlayer::OnVehicleStart()
301 CBasePlayer::OnVehicleEnd(Vector&)
302 CDODPlayer::BumpWeapon(CBaseCombatWeapon*)
303 CBasePlayer::SelectLastItem()
304 CBasePlayer::SelectItem(char const*, int)
305 CBasePlayer::ItemPostFrame()
306 CDODPlayer::GiveNamedItem(char const*, int)
307 CDODPlayer::CheckTrainUpdate()
308 CBasePlayer::SetPlayerUnderwater(bool)
309 CBasePlayer::CanBreatheUnderwater() const
310 CBasePlayer::PlayerUse()
311 CBasePlayer::PlayUseDenySound()
312 CDODPlayer::FindUseEntity()
313 CBasePlayer::IsUseableEntity(CBaseEntity*, unsigned int)
314 CBasePlayer::PickupObject(CBaseEntity*, bool)
315 CBasePlayer::ForceDropOfCarriedPhysObjects(CBaseEntity*)
316 CBasePlayer::GetHeldObjectMass(IPhysicsObject*)
317 CDODPlayer::UpdateGeigerCounter()
318 CBasePlayer::GetAutoaimVector(float)
319 CBasePlayer::GetAutoaimVector(float, autoaim_params_t&)
320 CBasePlayer::ShouldAutoaim()
321 CBasePlayer::ForceClientDllUpdate()
322 CBasePlayer::ProcessUsercmds(CUserCmd*, int, int, int, bool)
323 CDODPlayer::PlayerRunCommand(CUserCmd*, IMoveHelper*)
324 CBasePlayer::CanSpeak()
325 CDODPlayer::CanHearChatFrom(CBasePlayer*)
326 CBasePlayer::ModifyOrAppendPlayerCriteria(AI_CriteriaSet&)
327 CDODPlayer::CheckChatText(char*, int)
328 CBasePlayer::IsFollowingPhysics()
329 CDODPlayer::InitVCollision()
330 CBasePlayer::UpdatePhysicsShadowToCurrentPosition()
331 CBasePlayer::EquipSuit()
332 CDODPlayer::CommitSuicide()
333 CBasePlayer::IsBot() const
334 CBasePlayer::SpawnArmorValue() const
335 CBasePlayer::NetworkStateChanged_m_ArmorValue()</pre>

User:Showdax

2006-03-25T21:45:21Z

Showdax:

Signature Scanning

2006-03-23T23:52:04Z

Showdax:

[[Category:Documentation (SourceMM)]]

== Introduction ==

This article demonstrates a technique developed by Lance Vorgin known as "Signature Scanning", or sigscanning for short.

== What is Sigscanning? ==

Sigscanning is a multi-step process involving extracting function signatures from a binary and then scanning for them at run-time to locate an otherwise-hidden function. A signature for a function is a set of bytes unique to a function. These bytes are the instructions a program uses to operate. These sets of bytes are what make up functions (or subroutines as they are called in Assembly). When we have enough of these bytes to form a unique set, we can then match them again to the function in memory.

Why is this useful for plugins? Each time Valve releases an update for their mods, they may change classes such as CBaseEntity used by many plugin coders to interact with a player’s entity. Due to the fact that we do not have the appropriate class headers for each of these changes, we may be using virtual functions that now exist at different addresses. This would cause a crash at run-time. To avoid this, the following solutions are available:
*rely on manual offsets into the class' vtable
*modify the provided class headers by inserting dummy virtual functions to fix the offsets
*sigscanning

Each have their pros and cons, but it turns out that although sigscanning is the most tedious out of the three, it is the most reliable. The first two choices are typically broken by updates.

== Assembly and Memory ==

To understand all of this, one must first understand how the code of a C++ program is compiled into a binary file.

When you hit "Build Solution" on your IDE or run a makefile, your compiler does a multitude of operations. First it takes the code and runs it through a preprocessor. The preprocessor takes all the "#" directives (e.g. #define, #include, etc.) and substitutes them with normal C++ code. After the preprocessor has done its job, the code is passed on to the parser. In simplified terms, the parser basically takes C++ code and turns it into Assembly (asm) code. After the parser has parsed the code into Assembly code, the assembler "assembles" the code into mostly machine (byte) code which is put into object files that carry the .obj or .o extension. Then the linker gathers all the object files where it looks for function calls and sets the "links" to them (static linking) as well as external calls to functions outside the scope of the assembled code (dynamic linking) and finally maps any runtime calls (runtime linking). After this, it finally outputs the finished product (a binary file, i.e. an executable or library). When a server loads your plugin, it uses runtime calls to call functions from within your plugin, and likewise your plugin calls functions from the server.

Now where this all comes into play in sigscanning is where you will be taking the server module (.dll or .so file) from memory and scanning it in its machine-code form for those functions that you need. This is done by first disassembling the server module back into Assembly form and finding the instructions that make up that function you want.

Assembly is the "lowest-level" language in programming terms. It is easy to flip-flop between Assembly and machine code because they are basically the same, except Assembly uses something called "Mnemonics" before every instruction. These are the human-readable keywords push, pop, mov, call, etc. that define what the instruction does. As C++ code is translated into Assembly, you can imagine the very structured syntax of C++ flattened out into primitive simple Assembly instructions. I won’t go into further detail on Assembly due to its complex nature. The best way to learn more about it (which is recommended) is to read one of the reference links provided at the bottom of this writing.

== Before We Go Further ==

Read BAILOPAN’s three DevLogs on sigscanning to gain an understanding of the proceeding sections.
*Oh, you’ve not hacked yet? – http://www.sourcemod.net/devlog/?p=55
*Finding Functions, Part 2 – http://www.sourcemod.net/devlog/?p=56
*Finding Functions, Part 3 – http://www.sourcemod.net/devlog/?p=57

== Scanning for Signatures at Run-time ==

This is the complete code for a basic sigscanner. All functions and variables are described with comments.

=== sigscan.h ===

<cpp>#ifndef SIGSCAN_H
#define SIGSCAN_H

class CSigScan {
private:
/* Private Variables */
/* Base Address of the server module in memory */
static unsigned char *base_addr;
/* The length to the module's ending address */
static size_t base_len;

/* The signature to scan for */
unsigned char *sig_str;
/* A mask to ignore certain bytes in the signature such as addresses
The mask should be as long as all the bytes in the signature string
Use '?' to ignore a byte and 'x' to check it
Example: "xxx????xx" - The first 3 bytes are checked, then the next 4 are
ignored, then the last 2 are checked */
char *sig_mask;
/* The length of sig_str and sig_mask (not including a terminating null for sig_mask) */
size_t sig_len;

/* Private Functions */
void* FindSignature(void);

public:
/* Public Variables */

/* sigscan_dllfunc is a pointer of something that resides inside the gamedll so we can get
the base address of it. From a SourceMM plugin, just set this to ismm->serverFactory(0)
in Load(). From a Valve Server Plugin, you must set this to an actual factory returned
from gameServerFactory and hope that a SourceMM plugin did not override it. */
static void *(*sigscan_dllfunc)(const char *pName, int *pReturnCode);

/* If the scan was successful or not */
char is_set;
/* Starting address of the found function */
void *sig_addr;

/* Public Functions */
CSigScan(void)sig_str(NULL), sig_mask(NULL), sig_len(0), sig_addr(NULL) {}
~CSigScan(void);

static bool GetDllMemInfo(void);
void Init(unsigned char *sig, char *mask, size_t len);
};

/* Sigscanned member functions are casted to member function pointers of this class
and called with member function pointer syntax */
class EmptyClass { };

void InitSigs(void);

/* Sig Functions */
class CBaseAnimating;
void CBaseAnimating_Ignite(CBaseAnimating *cba, float flFlameLifetime);

#endif</cpp>

=== sigscan.cpp ===

<cpp>#include <stdio.h>

#ifdef WIN32
#define WIN32_LEAN_AND_MEAN
#include <windows.h>
#else
#include <dlfcn.h>
#include <sys/types.h>
#include <sys/stat.h>
#endif

#include "sigscan.h"

/* There is no ANSI ustrncpy */
unsigned char* ustrncpy(unsigned char *dest, const unsigned char *src, int len) {
while(len--)
dest[len] = src[len];

return dest;
}

/* //////////////////////////////////////
CSigScan Class
////////////////////////////////////// */
unsigned char* CSigScan::base_addr;
size_t CSigScan::base_len;
void *(*CSigScan::sigscan_dllfunc)(const char *pName, int *pReturnCode);

/* Initialize the Signature Object */
void CSigScan::Init(unsigned char *sig, char *mask, size_t len) {
is_set = 0;

sig_len = len;
sig_str = new unsigned char[sig_len];
ustrncpy(sig_str, sig, sig_len);

sig_mask = new char[sig_len+1];
strncpy(sig_mask, mask, sig_len);
sig_mask[sig_len+1] = 0;

if(!base_addr)
return ; // GetDllMemInfo() Failed

if((sig_addr = FindSignature()) == NULL)
return ; // FindSignature() Failed

is_set = 1;
// SigScan Successful!
}

/* Destructor frees sig-string allocated memory */
CSigScan::~CSigScan(void) {
delete[] sig_str;
delete[] sig_mask;
}

/* Get base address of the server module (base_addr) and get its ending offset (base_len) */
bool CSigScan::GetDllMemInfo(void) {
void *pAddr = (void*)sigscan_dllfunc;
base_addr = 0;
base_len = 0;

#ifdef WIN32
MEMORY_BASIC_INFORMATION mem;

if(!pAddr)
return false; // GetDllMemInfo failed!pAddr

if(!VirtualQuery(pAddr, &mem, sizeof(mem)))
return false;

base_addr = (unsigned char*)mem.AllocationBase;

IMAGE_DOS_HEADER *dos = (IMAGE_DOS_HEADER*)mem.AllocationBase;
IMAGE_NT_HEADERS *pe = (IMAGE_NT_HEADERS*)((unsigned long)dos+(unsigned long)dos->e_lfanew);

if(pe->Signature != IMAGE_NT_SIGNATURE) {
base_addr = 0;
return false; // GetDllMemInfo failedpe points to a bad location
}

base_len = (size_t)pe->OptionalHeader.SizeOfImage;

#else

Dl_info info;
struct stat buf;

if(!dladdr(pAddr, &info))
return false;

if(!info.dli_fbase || !info.dli_fname)
return false;

if(stat(info.dli_fname, &buf) != 0)
return false;

base_addr = (unsigned char*)info.dli_fbase;
base_len = buf.st_size;
#endif

return true;
}

/* Scan for the signature in memory then return the starting position's address */
void* CSigScan::FindSignature(void) {
unsigned char *pBasePtr = base_addr;
unsigned char *pEndPtr = base_addr+base_len;
size_t i;

while(pBasePtr < pEndPtr) {
for(i = 0;i < sig_len;i++) {
if((sig_mask[i] != '?') && (sig_str[i] != pBasePtr[i]))
break;
}

// If 'i' reached the end, we know we have a match!
if(i == sig_len)
return (void*)pBasePtr;

pBasePtr++;
}

return NULL;
}

/* Signature Objects */
CSigScan CBaseAnimating_Ignite_Sig;

/* Set the static base_addr and base_len variables then initialize all Signature Objects */
void InitSigs(void) {
CSigScan::GetDllMemInfo();

/* void CBaseAnimating::Ignite(float flFlameLifetime, bool bNPCOnly, float flSize,
bool bCalledByLevelDesigner);
Last Address: 0x220BC7A0
Signature: 56 8B F1 8B? 86? BC? 00? 00? 00? C1? E8? 1B? A8? 01? 0F? 85?
9A? 00? 00? 00? 8B 16 FF 92? F0? 00? 00? 00? 80? 7C? 24? 0C?
00? 74? 08? 84 C0 0F? 84? 83? 00? 00? 00? 3C 01 75? 20? 80
7C 24 14 00 75? 19? 8B CE E8 83? 1A? 01? 00? 85? C0? 74?
0E? 8B 10 8B C8 FF 92? 08? 05? 00? 00? 84 C0 74? 5F? 57
6A 01 56 E8 48? EA? 07? 00? 8B F8 83 C4 08 85 FF 74?
3D? 8B 44 24 0C 50 8B CF E8 83? E5? 07? 00? 68 00 00
00 08 8B CE
*/
CBaseAnimating_Ignite_Sig.Init((unsigned char*)
"\x56\x8B\xF1\x8B\x86\xBC\x00\x00\x00\xC1\xE8\x1B\xA8\x01\x0F\x85\x9A\x00\x00\x00"
"\x8B\x16\xFF\x92\xF0\x00\x00\x00\x80\x7C\x24\x0C\x00\x74\x08\x84\xC0\x0F\x84\x83"
"\x00\x00\x00\x3C\x01\x75\x20\x80\x7C\x24\x14\x00\x75\x19\x8B\xCE\xE8\x83\x1A\x01"
"\x00\x85\xC0\x74\x0E\x8B\x10\x8B\xC8\xFF\x92\x08\x05\x00\x00\x84\xC0\x74\x5F\x57"
"\x6A\x01\x56\xE8\x48\xEA\x07\x00\x8B\xF8\x83\xC4\x08\x85\xFF\x74\x3D\x8B\x44\x24"
"\x0C\x50\x8B\xCF\xE8\x83\xE5\x07\x00\x68\x00\x00\x00\x08\x8B\xCE"
,
"xxx?????????????????"
"xxx????????????xx???"
"???xx??xxxxx??xxx???"
"?????xxxxx?????xx??x"
"xxxx????xxxxxxx??xxx"
"xxxxx????xxxxxxx"
,
116);

return ;
}

/* Example of a sig-scanned method function */
void CBaseAnimating_Ignite(CBaseAnimating *cba, float flFlameLifetime) {
int bNPCOnly = false, bCalledByLevelDesigner = false;
float flSize = 0.0f;

if(!CBaseAnimating_Ignite_Sig.is_set)
return ; // sigscan failed

union {
void (EmptyClass::*mfpnew)(float, bool, float, bool);
void* addr;
} u;
u.addr = CBaseAnimating_Ignite_Sig.sig_addr;

(reinterpret_cast<EmptyClass*>(cba)->*u.mfpnew)(flFlameLifetime, (bool)bNPCOnly, flSize,
(bool)bCalledByLevelDesigner);

return;
}</cpp>
This will find the signature of a function at runtime, however it is useless unless you already have or know how to find signatures for which it can scan.

== Finding the Signature of a Function ==

To find a signature for a function, we need a Disassembler to disassemble the server module. Here are links to free Disassemblers that seem to work well:
* [http://www.datarescue.com/idabase/idadown.htm IDA Pro Freeware Version (Windows)]
* [http://www.smidgeonsoft.prohosting.com/pebrowse-pro-file-viewer.html PEBrowse Professional (Windows)]
* [http://pvdasm.reverse-engineering.net/index.php?Section=1 Proview “PVDasm” Disassembler (Windows)]
* [http://www.gnu.org/software/binutils/manual/html_chapter/binutils_4.html GNU objdump (Linux)]
* [http://www.gnu.org/software/ddd/ Data Display Debugger (Linux)]

=== Linux ===

Showdax pointed out a very helpful way that makes finding signatures under Linux much easier than under Windows. The GNU tool "objdump" can be used against the server module to disassemble the binary into AT&T Assembly code with each subroutine given its name from the source code. Here is an example of how to use the objdump tool:
<pre>~/usr/srcds/dod/bin$ objdump -d server_i486.so > server_i486.so.objdump</pre>
This dumps the disassembled code into the file "server_i486.so.objdump". You can then simply open up that file and search for the function name that corresponds to its subroutine then extract its bytes to create a signature (discussed later in [[#Creating a Searchable Signature]]).

=== Windows ===

Under Windows, finding a signature becomes much more complicated as PE-format binaries do not include symbol names for each subroutine. I suggest using the IDA Pro Freeware Disassembler since I will be using a method I have found to find signatures that I only know how to do in IDA Pro (although you may be able to find a way to do my method in the other disassemblers).

The rest of this section will assume you are running Windows, have a copy of Microsoft Visual Studio C++ and are using the IDA Pro Freeware Disassembler. First what you need to do is compile the HL2:DM server module. So navigate your way to the "hl2src/dlls" directory and open up "hl_sdk.vcproj". Once open inside MSVC++, go to the Build menu and select Configuration Manager. Set the configuration to "Release" and press OK. Go to the Build menu again and select Build. This may take a bit as everything is compiled together. Once finished, you should have a new directory named "Release_hl2." Inside, there will be the compiled server.dll file and a server.pdb file. The PDB file is key to finding the subroutines in Assembly for the function you want to use.

Now open IDA Pro and go to the File menu and open the server.dll file you just compiled. When you open it, a dialog will pop up. Just press "OK" and everything will start to load. Eventually IDA Pro will say something akin to "There is a PDB file located in the same directory for this binary." Click "Yes" and it will use that PDB file to name the subroutines which will make this process much easier. As things load, IDA Pro will go through the DLL, disassembling it and naming everything to their corresponding function or variable name. This may take a while and may even appear that IDA has frozen, but it has not so don't close it or you will have to start over.

After some time, everything will have finished. Before we continue, however, we have to open up yet another IDA Pro again (don't close the other IDA Pro) and load the server.dll for the mod we will be sigscanning (in this case, Counter-Strike: Source). This file is located in "cstrike/bin" in your game installation directory. Again, do the same procedure, except this time we won't have a PDB file for it. This should take a shorter time than last time since there is no PDB file. After both IDA Pro processes have finished disassembling, we are ready to start finding signatures.

To start looking for a signature, switch over to the HL2:DM server module IDA Pro window. Above, we have the signature for CBaseAnimating::Ignite in the [[#sigscan.cpp]] section. As a new example, let's try to find the signature for Teleporting an entity. This is the prototype for its method from the source code:
<cpp>virtual void CBaseEntity::Teleport(const Vector *newPosition, const QAngle *newAngles,
const Vector *newVelocity);</cpp>
Now in IDA Pro look for CBaseEntity::Teleport in the Names list then double click it. You should be brought to the location of CBaseEntity::Teleport in the disassembly, however, its internal name is given as CBaseEntity_Teleport. As you can see, IDA Pro lists all the local and parameter variables near the top (lines starting with var_ and arg_), and then the actual code is listed below with its corresponding byte representation. (Tip: I had to actually set IDA Pro to list the opcode bytes from the Options menu, in "General" then under the tab "Disassembly"). At first, it seems feasible to just use the bytes here for the signature, but Valve decided to change almost all the CBase* methods (that I've seen) for Counter-Strike: Source from the Half-Life 2: Deathmatch code. Due to this fact, we will have to use the HL2:DM disassembly as clues for finding the same function/method in the CS:S disassembly. To find our Teleport function, we will have to find a unique set of instructions that wouldn't be repeated in another subroutine. I had to do some trial and error with this function since Valve had changed or moved various pieces of code. If you try looking over the subroutine for something unique, you may see a group of repeated mov instructions:
<asm>.text:220C96CF 89 44 24 18 mov [esp+30h+var_18], eax
.text:220C96D3 89 74 24 1C mov [esp+30h+var_14], esi
.text:220C96D7 89 74 24 20 mov [esp+30h+var_10], esi
.text:220C96DB 89 74 24 24 mov [esp+30h+var_C], esi
.text:220C96DF 89 74 24 28 mov [esp+30h+var_8], esi
.text:220C96E3 89 74 24 2C mov [esp+30h+var_4], esi</asm>
Try searching for part of this in the CS:S disassembly. If you get results, search for the next item to make sure there isn't another set of the same instructions. Then to verify this is the correct subroutine for the function Teleport(), compare the two subroutines to see if they have similar instructions in the same places. If they do then it is most likely correct and now you can use some of the instructions from your find in machine-code form to create a signature, which is discussed in the next section.

== Creating a Searchable Signature ==

Once we have found the subroutine for the function we want, we can start extracting the bytes for use in a signature. Here is part of the assembly for CBaseEntity::Teleport:
<asm>220D9940 CBaseEntity_Teleport proc near ; CODE XREFsub_220B6330+14 p
220D9940 ; sub_22143900+A p ...
220D9940
220D9940 83 EC 18 sub esp, 18h
220D9943 53 push ebx
220D9944 56 push esi
220D9945 8B D9 mov ebx, ecx
220D9947 8B 0D 78 B2 46 22 mov ecx, dword_2246B278
220D994D 33 F6 xor esi, esi
220D994F 33 C0 xor eax, eax
220D9951 3B CE cmp ecx, esi
220D9953 7E 21 jle short loc_220D9976
220D9955 8B 15 6C B2 46 22 mov edx, dword_2246B26C
220D995B EB 03 jmp short loc_220D9960
220D995B ; ---------------------------------------------------------------------------
220D995D 8D 49 00 align 10h
220D9960
220D9960 loc_220D9960 ; CODE XREFCBaseEntity_Teleport+1B j
220D9960 ; CBaseEntity_Teleport+2A j
220D9960 39 1C 82 cmp [edx+eax*4], ebx
220D9963 74 09 jz short loc_220D996E
220D9965 83 C0 01 add eax, 1
220D9968 3B C1 cmp eax, ecx
220D996A 7C F4 jl short loc_220D9960
220D996C EB 08 jmp short loc_220D9976
220D996E ; ---------------------------------------------------------------------------
220D996E
220D996E loc_220D996E ; CODE XREFCBaseEntity_Teleport+23 j
220D996E 3B C6 cmp eax, esi
220D9970 0F 8D 17 01 00 00 jge loc_220D9A8D
220D9976
220D9976 loc_220D9976 ; CODE XREFCBaseEntity_Teleport+13 j
220D9976 ; CBaseEntity_Teleport+2C j
220D9976 55 push ebp
220D9977 57 push edi
220D9978 8D 44 24 10 lea eax, [esp+28h+var_18]
220D997C 50 push eax
220D997D 51 push ecx
220D997E B9 6C B2 46 22 mov ecx, offset dword_2246B26C
220D9983 89 5C 24 18 mov [esp+30h+var_18], ebx
220D9987 E8 B4 88 F9 FF call sub_22072240
220D998C 8D 4C 24 14 lea ecx, [esp+28h+var_14]
220D9990 51 push ecx
220D9991 53 push ebx
220D9992 89 44 24 18 mov [esp+30h+var_18], eax
220D9996 89 74 24 1C mov [esp+30h+var_14], esi
220D999A 89 74 24 20 mov [esp+30h+var_10], esi</asm>
I have written a small C program for which I use to create a signature string and signature mask from. It is not necessary to use, but it can help to reduce the amount of tedious work you have to do to create a signature.

=== sigcreator.c ===

<cpp>#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <ctype.h>

int main() {
int i, len, out_i = 0, mask_i = 0;
char *sig, *out, *mask;

sig = (char*)calloc(1024, sizeof(char));

printf("?");
fgets(sig, 1022, stdin);
len = strlen(sig);

out = (char*)calloc(len*2, sizeof(char));
mask = (char*)calloc(len*2, sizeof(char));

for(i = 0;i < len;i++) {
if(isalnum(sig[i]) && isalnum(sig[i+1])) {
out[out_i++] = '\\';
out[out_i++] = 'x';
out[out_i++] = sig[i];
out[out_i++] = sig[i+1];
if(sig[i+2] == '?') {
mask[mask_i++] = '?';
i += 2;
}
else {
mask[mask_i++] = 'x';
i++;
}
}
}

printf("\n\nSize%d\n\nSig:\n%s\n\nMask:\n%s", strlen(mask), out, mask);
getchar();

free(sig);
free(out);
free(mask);
return 0;
}</cpp>
It takes an input string of hexadecimal characters just as they appear in bold in the Assembly above. For each byte that should be ignored, a question mark after a hexadecimal byte will tell the program where a "?" should be in the signature mask. I will give an example of what the input and output should look like near the end of this section.

When creating a signature, you must also create a signature mask as well. A signature mask tells the sigscanner which bytes to ignore, such as addresses which may change at runtime. The signature mask is the same length as the signature. A question mark ("?") in the mask signifies the position of the byte in the signature string to be ignored. Any other character corresponding to a byte in the signature string will be checked (usually we use "x" to represent these).

For the Teleport() function we found in the last section, we will build our signature from the bold hexadecimal characters in the Assembly above. I will be using the format of my "Sig Creator" for developing a signature string and mask for the sigscanner. The first three instructions in the subroutine are called the "function prologue." These instructions will most likely never change as long as the variable declarations are not changed. So to start off, input "83 EC 18 53 56" into the sigcreator. Next is a mov instruction that probably won’t change "8B D9". After that is another mov instruction, but this mov instruction contains an address in it, so add this to the input "8B? 0D? 78? B2? 46? 22?". This will appear as question marks in the signature mask. The next set of xor instructions don’t reference an address so they’re safe to add normally to the input "33 F6 33 C0". From here on, continue to input each segment of bytes into the sigcreator, where any segment referencing an address should have question marks following each hexadecimal character pairs (like I did for the mov instruction). Eventually you’ll end at those last mov instructions. This isn’t the end of the subroutine, but it’s enough to develop a worthy signature. So press enter in the sigcreator, and it should output something like this:
<pre>?83 EC 18 53 56 8B D9 8B? 0D? 78? B2? 46? 22? 33 F6 33 C0 3B CE 7E? 21? 8B? 15?
6C? B2? 46? 22? EB? 03? 8D? 49? 00? 39 1C 82 74? 09? 83? C0? 01? 3B C1 7C? F4?
EB? 08? 3B C6 0F? 8D? 17? 01? 00? 00? 55 57? 8D? 44? 24? 10? 50 51 B9? 6C? B2?
46? 22? 89 5C 24 18 E8? B4? 88? F9? FF? 8D? 4C? 24? 14? 51 53 89 44 24 18 89
74 24 1C 89 74 24 20 89 74 24 24 89 74 24 28 89 74 24 2C

Size106

Sig:
\x83\xEC\x18\x53\x56\x8B\xD9\x8B\x0D\x78\xB2\x46\x22\x33\xF6\x33\xC0\x3B\xCE\x7E
\x21\x8B\x15\x6C\xB2\x46\x22\xEB\x03\x8D\x49\x00\x39\x1C\x82\x74\x09\x83\xC0\x01
\x3B\xC1\x7C\xF4\xEB\x08\x3B\xC6\x0F\x8D\x17\x01\x00\x00\x55\x57\x8D\x44\x24\x10
\x50\x51\xB9\x6C\xB2\x46\x22\x89\x5C\x24\x18\xE8\xB4\x88\xF9\xFF\x8D\x4C\x24\x14
\x51\x53\x89\x44\x24\x18\x89\x74\x24\x1C\x89\x74\x24\x20\x89\x74\x24\x24\x89\x74
\x24\x28\x89\x74\x24\x2C

Mask:
xxxxxxx??????xxxxxx?????????????xxx?????xx????xx??????x?????xx?????xxxx?????????
xxxxxxxxxxxxxxxxxxxxxxxxxx</pre>
Now you have a nice signature and mask you can use for your sigscanner and it also gives you the length of the signature as well. Cheers!

== Contributors ==

Thank you to those who contributed to this document directly and/or indirectly:
*Lance Vorgin – Forefather of sigscanners, posted his sigscanner on the [[SourceMod]] forums somewhere
*BAILOPAN – Created his DevLogs on how to create a sigscanner, also gave tips as well as other useful information
*Showdax – Suggested the objdump command for disassembly on Linux
*CyberMind – Examples of how to use a different method of calling sig functions
*Jacob Lojo – Posted a thread on how to develop a signature from disassembly (I was having trouble finding sigs with my scanner before his post). Also contributed a link to another disassembler
*SeLfkiLL – Revision and completed code for the sigscanner and sigcreator

== References ==

*Oh, you’ve not hacked yet? – http://www.sourcemod.net/devlog/?p=55
*Finding Functions, Part 2 – http://www.sourcemod.net/devlog/?p=56
*Finding Functions, Part 3 – http://www.sourcemod.net/devlog/?p=57
*Introduction to Reverse Engineering Software - http://www.acm.uiuc.edu/sigmil/RevEng/index.html
*The Art of Assembly Language Programming - http://maven.smith.edu/~thiebaut/ArtOfAssembly/artofasm.html

== See Also ==

* [[Signatures]]