Find CCSGameRules_PostCleanUp
Locate CCSGameRules_PostCleanUp in CS2 server.dll or libserver.so using IDA Pro MCP tools.
This is a non-virtual, direct-call member function (no vtable slot — emit a byte sig, not an
offset). It has no unique string of its own: it references "cs_respawn", which is shared with
another large function — so a pure string anchor is not unique. It is found via its predecessor
CCSGameRules_ResetRound, which calls it.
Primary resolution = decompile the ResetRound predecessor and pick the entity-cleanup callee.
Concrete anchors for THIS target (use these first)
xrefs fra/kaldt af TerminateRound (kendt sig i CSSharp gamedata); post-round cleanup
KNOWN CONTAMINATION WARNING
VA 0x20c2700 (BuyState_OnUpdate) has WRONGLY been emitted for this target before.
It is NOT this function. If your best candidate is 0x20c2700, you have NOT found
the target - keep searching or report the shortlist instead of guessing.
Method
1. Reuse previous signature (fast path)
If a prior CCSGameRules_PostCleanUp.{platform}.yaml exists, try its func_sig via
mcp__ida-pro-mcp__find_bytes. Single match → resolve to function start, skip to Step 5. Else continue.
2. Load CCSGameRules_ResetRound (the anchor)
ALWAYS use SKILL /get-func-from-yaml with func_name=CCSGameRules_ResetRound.
If it errors (not yet found), run SKILL /find-CCSGameRules_ResetRound first, then retry.
Extract func_va of CCSGameRules_ResetRound.
3. Enumerate ResetRound's callees
mcp__ida-pro-mcp__callees addrs="<ResetRound_func_va>"
mcp__ida-pro-mcp__decompile addr="<ResetRound_func_va>" include_addresses=false
4. Identify PostCleanUp among the callees
PostCleanUp is the callee of ResetRound that performs the post-round entity cleanup. Decompile the
candidate and confirm ALL:
- Iterates the global entity list (walks entity handles via the entity-system helpers).
- dynamic-casts to
CCSWeaponBase, CBombTarget, and CHostageRescueZone (RTTI typeinfo refs
_ZTI13CCSWeaponBase, _ZTI11CBombTarget, _ZTI18CHostageRescueZone). ← key fingerprint.
- References the
"cs_respawn" string (and the ai_network / ai_hint entity-name pointers).
- Frees/cleans up the matched entities (calls into the mem-free / entity-destroy path).
The "cs_respawn" string has two referencers; PostCleanUp is the one reached as a callee of
ResetRound (the other is a much larger think/restart function, not called by ResetRound).
Record func_addr. Optionally rename to CCSGameRules_PostCleanUp.
5. Generate signature
ALWAYS use SKILL /generate-signature-for-function with addr=<func_addr>. Emit IDA style
verbatim (space hex, ? wildcards) — do NOT convert to CSS \x2A unless a gamedata.json entry
is explicitly requested.
Reference sig (build 14165 — sanity check only, regenerate per binary):
- linux:
55 48 89 E5 41 57 49 89 FF 41 56 41 55 41 54 53 48 81 EC ? ? ? ? E8 ? ? ? ? 66 83 F8
6. Write func YAML
ALWAYS use SKILL /write-func-as-yaml:
func_name: CCSGameRules_PostCleanUpfunc_addr: <func_addr>func_sig: validated sig from step 5
Function Characteristics
- Linkage: non-virtual, direct-call (no vtable entry)
- Binary:
server.dll / libserver.so
- Caller:
CCSGameRules_ResetRound (and one other round-restart path)
- Distinguishing trait: entity-list walk + dynamic_cast to CCSWeaponBase/CBombTarget/
CHostageRescueZone +
"cs_respawn" reference
Discovery Strategy (why this is stable across updates)
ResetRound is the durable anchor (found via the unique "GMR_ResetRound\n" string).- PostCleanUp is pinned as ResetRound's entity-cleanup callee — deterministic, not address-based.
- The final byte sig is regenerated per binary, so it self-heals each game update once the
functions are re-resolved.
Preprocessor pipeline equivalent
find-CCSGameRules_ResetRound [xref_strings "GMR_ResetRound\n"]
-> find-CCSGameRules_PostCleanUp [LLM_DECOMPILE ResetRound, entity-cleanup callee]
Reference YAML lives in references/server/CCSGameRules_ResetRound.{platform}.yaml.
Output YAML Format
server.dll -> CCSGameRules_PostCleanUp.windows.yamllibserver.so -> CCSGameRules_PostCleanUp.linux.yaml