find-CCSGameRules_TerminateRound-AND-CEntityInstance_AcceptInput

Find CCSGameRules_TerminateRound and CEntityInstance_AcceptInput

Locate CCSGameRules_TerminateRound and CEntityInstance_AcceptInput in CS2 server.dll or server.so using IDA Pro MCP tools.

Method

1. Search for the debug string:

   mcp__ida-pro-mcp__find_regex pattern="TerminateRound"
   

   Expected matches:

   • TerminateRound - Plain string reference
   • TerminateRound: unknown round end ID %i\n - Error message

2. Get cross-references to the plain string TerminateRound:

   mcp__ida-pro-mcp__xrefs_to addrs="<string_addr>"
   

3. Decompile the referencing function to verify:

   mcp__ida-pro-mcp__decompile addr="<function_addr>"
   

4. Rename the function:

   mcp__ida-pro-mcp__rename batch={"func": [{"addr": "<function_addr>", "name": "CCSGameRules_TerminateRound"}]}
   

5. In the decompiled code of CCSGameRules_TerminateRound, look for calls with "CTsWin" or "TerroristsWin" string parameters:

   if ( v11 == 1 )
   {
     v28 = 0;
     if ( dword_181D5DB68 > 0 )
     {
       v29 = 0LL;
       do
       {
         sub_XXXXXXX(*(_QWORD *)(v29 + qword_181D5DB70), (__int64)"CTsWin", 0, 0, (__int64)&v123, 0, 0LL);  // <-- CEntityInstance_AcceptInput
         ++v28;
         v29 += 8LL;
       }
       while ( v28 < dword_181D5DB68 );
     }
   }
   else if ( v11 == 2 )
   {
     v30 = 0;
     if ( dword_181D5DB68 > 0 )
     {
       v31 = 0LL;
       do
       {
         sub_XXXXXXX(*(_QWORD *)(v31 + qword_181D5DB70), (__int64)"TerroristsWin", 0, 0, (__int64)&v123, 0, 0LL);  // <-- CEntityInstance_AcceptInput
         ++v30;
         v31 += 8LL;
       }
       while ( v30 < dword_181D5DB68 );
     }
   }
   

   The function being called with "CTsWin" or "TerroristsWin" is CEntityInstance_AcceptInput.

6. Rename CEntityInstance_AcceptInput:

   mcp__ida-pro-mcp__rename batch={"func": [{"addr": "<acceptinput_func_addr>", "name": "CEntityInstance_AcceptInput"}]}
   

7. Generate and validate unique signature for CCSGameRules_TerminateRound:

   ALWAYS Use SKILL /generate-signature-for-function to generate a robust and unique signature for the function.

8. Write IDA analysis output for CCSGameRules_TerminateRound as YAML beside the binary:

   ALWAYS Use SKILL /write-func-as-yaml to write the analysis results.

   Required parameters:

   • func_name: CCSGameRules_TerminateRound
   • func_addr: The function address from step 3
   • func_sig: The validated signature from step 7

   Note: This is NOT a virtual function, so no vtable parameters are needed.

9. Generate and validate unique signature for CEntityInstance_AcceptInput:

   ALWAYS Use SKILL /generate-signature-for-function to generate a robust and unique signature for the function.

10. Write IDA analysis output for CEntityInstance_AcceptInput as YAML beside the binary:

ALWAYS Use SKILL /write-func-as-yaml to write the analysis results.

Required parameters:

• func_name: CEntityInstance_AcceptInput
• func_addr: The function address of CEntityInstance_AcceptInput from step 5
• func_sig: The validated signature from step 9

Note: This is NOT a virtual function, so no vtable parameters are needed.

Function Characteristics

CCSGameRules_TerminateRound

• Purpose: Terminates the current round with a specified reason and delay
• Prototype: void CCSGameRules_TerminateRound(CCSGameRules* this, float delay, int reason, ...)
• Parameters:
  • this - CCSGameRules pointer
  • delay (xmm1) - Float delay before round ends
  • reason (r8d) - Round end reason ID
  • Additional parameters for legacy support

CEntityInstance_AcceptInput

• Purpose: Handles entity input events (like "CTsWin", "TerroristsWin")
• Prototype: void CEntityInstance_AcceptInput(CEntityInstance* this, const char* inputName, int param1, int param2, variant_t* value, int param4, void* reserved)
• Parameters:
  • this - CEntityInstance pointer
  • inputName - Name of the input event (e.g., "CTsWin", "TerroristsWin")
  • param1 - Additional parameter (usually 0)
  • param2 - Additional parameter (usually 0)
  • value - Variant value pointer
  • param4 - Additional parameter (usually 0)
  • reserved - Reserved parameter (usually NULL)

Round End Reason IDs

Common values (may vary by game version):

• 1: CTs win (triggers "CTsWin" input)
• 2: Terrorists win (triggers "TerroristsWin" input)
• 0: Target bombed
• 3: Terrorists escaped
• 4: CTs prevented escape
• 5: Escaping terrorists neutralized
• 6: Bomb defused
• 7: CTs win (alternative)
• 8: Terrorists win (alternative)
• 9: Round draw
• 10: All hostages rescued
• 11: Target saved
• 12: Hostages not rescued
• 13: Terrorists not escaped
• 14: VIP not escaped
• 15: Game commencing
• 16: Terrorists surrender
• 17: CTs surrender

DLL Information

• DLL: server.dll (Windows) / server.so (Linux)

Notes

• Both functions are regular functions, NOT virtual functions
• CEntityInstance_AcceptInput is called within CCSGameRules_TerminateRound to notify entities about round results
• The "CTsWin" input is sent when reason == 1 (CTs win)
• The "TerroristsWin" input is sent when reason == 2 (Terrorists win)

Output YAML Format

The output YAML filename depends on the platform:

• server.dll -> CCSGameRules_TerminateRound.windows.yaml, CEntityInstance_AcceptInput.windows.yaml
• server.so -> CCSGameRules_TerminateRound.linux.yaml, CEntityInstance_AcceptInput.linux.yaml

func_va: 0x180XXXXXX      # Virtual address of the function - This can change when game updates.
func_rva: 0xXXXXXX        # Relative virtual address (VA - image base) - This can change when game updates.
func_size: 0xXXX          # Function size in bytes - This can change when game updates.
func_sig: XX XX XX XX XX  # Unique byte signature for pattern scanning - This can change when game updates.