CS2_VibeSignatures: Skill for Claude Code

Find CBaseEntity_GetChangeAccessorPathInfo_1

Locate CBaseEntity_GetChangeAccessorPathInfo_1 vfunc in CS2 server.dll or libserver.so using IDA Pro MCP tools.

Background

CBaseEntity overrides two separate CEntityInstance interface methods, GetChangeAccessorPathInfo_1 and GetChangeAccessorPathInfo_2, with byte-for-byte identical implementations (both simply forward to the same internal lazy-init helper at the same member offset). Because the source bodies are identical, the compiler may fold both vtable slots onto the exact same function address, or it may still emit two separate but structurally identical functions. CBaseEntity_GetChangeAccessorPathInfo_2 is already resolved (it inherits its vtable slot from CEntityInstance_GetChangeAccessorPathInfo_2); CBaseEntity_GetChangeAccessorPathInfo_1 occupies a different slot within +/-2 entries of it in the same CBaseEntity vtable.

Method

1. Load CBaseEntity_GetChangeAccessorPathInfo_2 from YAML

ALWAYS Use SKILL /get-func-from-yaml with func_name=CBaseEntity_GetChangeAccessorPathInfo_2.

If the skill returns an error, STOP and report to user.

Otherwise, extract:

• func_va (the reference implementation address)
• vfunc_index
• vfunc_offset
• vtable_name (should be CBaseEntity)

2. Load CBaseEntity VTable from YAML

ALWAYS Use SKILL /get-vtable-from-yaml with class_name=CBaseEntity.

If the skill returns an error, STOP and report to user.

Otherwise, extract:

• vtable_numvfunc
• vtable_entries

3. Enumerate Candidate Slots

Compute the scan window around the known slot:

• window_start = max(0, CBaseEntity_GetChangeAccessorPathInfo_2.vfunc_index - 2)
• window_end = min(vtable_numvfunc - 1, CBaseEntity_GetChangeAccessorPathInfo_2.vfunc_index + 2)

For every index i in [window_start, window_end] except CBaseEntity_GetChangeAccessorPathInfo_2.vfunc_index itself, read the candidate function address vtable_entries[i].

4. Check for Identical-Address Folding First