本文へ移動
cccskills
無料GitHub で公開

find-CCSGameRules_PostCleanUp

Find and identify the CCSGameRules_PostCleanUp function in CS2 server binary using IDA Pro MCP. Use this skill when reverse engineering CS2 server.dll or libserver.so to locate the post-round entity-cleanup routine. It is non-virtual and has no unique string of its own, so it is found via the CCSGameRules_ResetRound predecessor: PostCleanUp is the entity-cleanup call ResetRound makes. Emits a unique IDA-style byte signature and a func YAML. Mirrors the find-CCSGameRules_PostCleanUp.py preprocessor (LLM_DECOMPILE CCSGameRules_ResetRound). Trigger: CCSGameRules_PostCleanUp, PostCleanUp, CGameRules::PostCleanUp

インストール方法を見る

含まれるファイル(1)

  • SKILL.md5.0 KB

SKILL.md(原文)

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Find CCSGameRules_PostCleanUp

Locate CCSGameRules_PostCleanUp in CS2 server.dll or libserver.so using IDA Pro MCP tools.

This is a non-virtual, direct-call member function (no vtable slot — emit a byte sig, not an offset). It has no unique string of its own: it references "cs_respawn", which is shared with another large function — so a pure string anchor is not unique. It is found via its predecessor CCSGameRules_ResetRound, which calls it.

Primary resolution = decompile the ResetRound predecessor and pick the entity-cleanup callee.

Concrete anchors for THIS target (use these first)

  • xrefs fra/kaldt af TerminateRound (kendt sig i CSSharp gamedata); post-round cleanup

KNOWN CONTAMINATION WARNING

VA 0x20c2700 (BuyState_OnUpdate) has WRONGLY been emitted for this target before. It is NOT this function. If your best candidate is 0x20c2700, you have NOT found the target - keep searching or report the shortlist instead of guessing.

Method

1. Reuse previous signature (fast path)

If a prior CCSGameRules_PostCleanUp.{platform}.yaml exists, try its func_sig via mcp__ida-pro-mcp__find_bytes. Single match → resolve to function start, skip to Step 5. Else continue.

2. Load CCSGameRules_ResetRound (the anchor)

ALWAYS use SKILL /get-func-from-yaml with func_name=CCSGameRules_ResetRound.

If it errors (not yet found), run SKILL /find-CCSGameRules_ResetRound first, then retry. Extract func_va of CCSGameRules_ResetRound.

3. Enumerate ResetRound's callees

mcp__ida-pro-mcp__callees   addrs="<ResetRound_func_va>"
mcp__ida-pro-mcp__decompile addr="<ResetRound_func_va>" include_addresses=false

4. Identify PostCleanUp among the callees

PostCleanUp is the callee of ResetRound that performs the post-round entity cleanup. Decompile the candidate and confirm ALL:

  1. Iterates the global entity list (walks entity handles via the entity-system helpers).
  2. dynamic-casts to CCSWeaponBase, CBombTarget, and CHostageRescueZone (RTTI typeinfo refs _ZTI13CCSWeaponBase, _ZTI11CBombTarget, _ZTI18CHostageRescueZone). ← key fingerprint.
  3. References the "cs_respawn" string (and the ai_network / ai_hint entity-name pointers).
  4. Frees/cleans up the matched entities (calls into the mem-free / entity-destroy path).

The "cs_respawn" string has two referencers; PostCleanUp is the one reached as a callee of ResetRound (the other is a much larger think/restart function, not called by ResetRound).

Record func_addr. Optionally rename to CCSGameRules_PostCleanUp.

5. Generate signature

ALWAYS use SKILL /generate-signature-for-function with addr=<func_addr>. Emit IDA style verbatim (space hex, ? wildcards) — do NOT convert to CSS \x2A unless a gamedata.json entry is explicitly requested.

Reference sig (build 14165 — sanity check only, regenerate per binary):

  • linux: 55 48 89 E5 41 57 49 89 FF 41 56 41 55 41 54 53 48 81 EC ? ? ? ? E8 ? ? ? ? 66 83 F8

6. Write func YAML

ALWAYS use SKILL /write-func-as-yaml:

  • func_name: CCSGameRules_PostCleanUp
  • func_addr: <func_addr>
  • func_sig: validated sig from step 5

Function Characteristics

  • Linkage: non-virtual, direct-call (no vtable entry)
  • Binary: server.dll / libserver.so
  • Caller: CCSGameRules_ResetRound (and one other round-restart path)
  • Distinguishing trait: entity-list walk + dynamic_cast to CCSWeaponBase/CBombTarget/ CHostageRescueZone + "cs_respawn" reference

Discovery Strategy (why this is stable across updates)

  1. ResetRound is the durable anchor (found via the unique "GMR_ResetRound\n" string).
  2. PostCleanUp is pinned as ResetRound's entity-cleanup callee — deterministic, not address-based.
  3. The final byte sig is regenerated per binary, so it self-heals each game update once the functions are re-resolved.

Preprocessor pipeline equivalent

find-CCSGameRules_ResetRound        [xref_strings "GMR_ResetRound\n"]
 -> find-CCSGameRules_PostCleanUp    [LLM_DECOMPILE ResetRound, entity-cleanup callee]

Reference YAML lives in references/server/CCSGameRules_ResetRound.{platform}.yaml.

Output YAML Format

  • server.dll -> CCSGameRules_PostCleanUp.windows.yaml
  • libserver.so -> CCSGameRules_PostCleanUp.linux.yaml

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

同じリポジトリのスキル

概要と使いどころ

Clean up the local workspace after a dev branch has been merged into main. Verifies the current dev branch is fully merged into origin/main, then switches to main, pulls the latest, deletes the local dev branch, and deletes the remote dev branch if it still exists. STOPS and warns the user if the current branch is not yet merged. Triggers: cleanup workspace, cleanup branch, delete merged branch, finish dev branch, post-merge cleanup

日本語の概要は準備中です。原文の説明を表示しています。

mrc4tt/CS2_VibeSignatures32026年10月13日 更新

Convert an existing find-XXXX SKILL.md into a preprocessor Python script, updating configs/<GAMEVER>.yaml and removing the old SKILL.md. Covers xref-string-based and LLM_DECOMPILE-based discovery patterns.

日本語の概要は準備中です。原文の説明を表示しています。

mrc4tt/CS2_VibeSignatures32026年10月13日 更新

Create an Agent SKILL.md fallback for an existing find-XXXX finder that relies on a fragile discovery foundation — above all LLM_DECOMPILE (patterns C/D/E), which matches the decompiled shape of a predecessor function against a stored reference and breaks when a symbol is inlined or de-inlined in a way the reference does not cover. The generated fallback coexists with the preprocessor and runs only when it returns failure, recovering every target robustly by decompiling the predecessor and following the inline/de-inline boundary with semantic anchors. Use when a finder broke on a game update, or you want to durably backstop one before it does. The recipe generalizes to any finder foundation. Triggers: create agent skill fallback, add SKILL.md fallback, robust fallback for finder, backstop LLM_DECOMPILE finder, final guarantee skill

日本語の概要は準備中です。原文の説明を表示しています。

mrc4tt/CS2_VibeSignatures32026年10月13日 更新

Create a new cpp_tests entry for validating a C++ interface vtable layout against binary reference YAMLs. Creates the .cpp test file in cpp_tests/ and appends a configs/<GAMEVER>.yaml entry under cpp_tests:. Use when a user asks to add vtable layout validation for a new hl2sdk_cs2 interface class.

日本語の概要は準備中です。原文の説明を表示しています。

mrc4tt/CS2_VibeSignatures32026年10月13日 更新

create-pr

無料

Create a GitHub pull request from staged task changes or an already-committed current branch. Deliver source/config/ reference changes together with their computed source-owned `bin_artifacts` closure. PR validation routing is owned by the default-branch trusted workflow; snapshots, gamedata, and manifests are Release-derived only.

日本語の概要は準備中です。原文の説明を表示しています。

mrc4tt/CS2_VibeSignatures32026年10月13日 更新

Create a new find-XXXX preprocessor Python script from scratch (no existing SKILL.md), add configs/<GAMEVER>.yaml skill and symbol entries. Covers xref-string-based and LLM_DECOMPILE-based discovery patterns. Use when a GitHub issue or user instruction specifies a new function to find.

日本語の概要は準備中です。原文の説明を表示しています。

mrc4tt/CS2_VibeSignatures32026年10月13日 更新

mrc4tt のスキルをすべて見る

このスキルの問題を報告する