Skip to content
Back to skills

215 Name Skill 3d61b53c

ASecurity

Find and identify the NetworkStateChanged function in CS2 binary using IDA Pro MCP. Use this skill when reverse engineering CS2 server.dll or libserver.so to locate the NetworkStateChanged function by searching for the "light_capsule" string reference and analyzing cross-references.

  • 9 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added October 11, 2026
design

Works with

  • mcp

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 215-name-skill_3d61b53c --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 215 Name Skill 3d61b53c?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 215 Name Skill 3d61b53c
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-215-name-skill-3d61b53c/badge)](https://www.skillsdirectory.com/skills/tools-only-215-name-skill-3d61b53c)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: find-NetworkStateChanged
description: Find and identify the NetworkStateChanged function in CS2 binary using IDA Pro MCP. Use this skill when reverse engineering CS2 server.dll or libserver.so to locate the NetworkStateChanged function by searching for the "light_capsule" string reference and analyzing cross-references.
disable-model-invocation: true
---

# Find NetworkStateChanged

Locate `NetworkStateChanged` in CS2 server.dll or libserver.so using IDA Pro MCP tools.

## Method

1. Search for the string:
   ```
   mcp__ida-pro-mcp__find_regex pattern="light_capsule"
   ```

2. Get cross-references to the string:
   ```
   mcp__ida-pro-mcp__xrefs_to addrs="<string_addr>"
   ```

3. Decompile the referencing function:
   ```
   mcp__ida-pro-mcp__decompile addr="<function_addr>"
   ```

   The target function should contain:
   - Multiple `V_stricmp_fast` calls comparing against light type strings:
     - `"light_omni"`
     - `"light_capsule"`
     - `"light_spot"`
     - `"light_ortho"`
     - `"light_directional"`
     - `"light_environment"`
   - Sets a light type value (1-4) based on the string comparison
   - Contains a network state notification call at the end

   Example pattern:
   ```cpp
   if ( (unsigned int)V_stricmp_fast(v6, "light_omni") )
   {
       if ( (unsigned int)V_stricmp_fast(v6, "light_capsule") )
       {
           // ... more light type checks
       }
       else
       {
           v7 = 1;
       }
   }
   // ...
   *(_DWORD *)(a1 + 112) = v7;
   // ...
   v11 = V_stricmp_fast(v3, "light_capsule");
   *(_BYTE *)(a1 + 116) = v11 == 0;
   if ( v12 && ... )
   {
       sub_XXXXXXXX(a1 + 413, -1, -1);  // Internal notification call
       *(_BYTE *)(a1 + 413) = 1;
   }
   ```

4. Rename the function:
   ```
   mcp__ida-pro-mcp__rename batch={"func": [{"addr": "<function_addr>", "name": "NetworkStateChanged"}]}
   ```

5. Generate and validate unique signature:

   **ALWAYS** Use SKILL `/generate-signature-for-function` to generate a robust and unique signature for the function.

6. Write IDA analysis output as YAML beside the binary:

   **ALWAYS** Use SKILL `/write-func-as-yaml` to write the analysis results.

   Required parameters:
   - `func_name`: `NetworkStateChanged`
   - `func_addr`: The function address from step 3
   - `func_sig`: The validated signature from step 5

## Function Characteristics

- **Prototype**: `void NetworkStateChanged(void *chainEntity, int offset, int a3)`
- **Parameters**:
  - `chainEntity`: Pointer to the entity/component being updated
  - `offset`: Offset parameter for network state tracking
- **Return**: char (1 on success)

## Key Behaviors

1. Compares input string against various light type names
2. Sets appropriate light type enum value (0-4)
3. Stores `light_capsule` comparison result as a flag
4. Triggers internal network state notification when conditions are met
5. Called when light entity properties change to notify the network system

## DLL Information

- **DLL**: `server.dll` (Windows) / `libserver.so` (Linux)

## Notes

- This is NOT a virtual function
- The function handles light type classification and network state updates
- Contains multiple string comparisons for different light types

## Output YAML Format

The output YAML filename depends on the platform:
- `server.dll` → `NetworkStateChanged.windows.yaml`
- `libserver.so` → `NetworkStateChanged.linux.yaml`

Files in this skill

  • README.md873 B
  • skill.md3.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.