find-CNetworkGameServerBase_CheckTimeouts-decompiles

Find CNetworkGameServerBase_IsHLTV (Agent fallback)

Locate the CNetworkGameServerBase_IsHLTV virtual function in CS2 engine2.dll / libengine2.so using IDA Pro MCP tools. This is the Agent fallback for the find-CNetworkGameServerBase_CheckTimeouts-decompiles preprocessor: it runs only when the preprocessor script returned failure. It reproduces the LLM_DECOMPILE step by hand — collecting the virtual-call reference to IsHLTV inside its caller CNetworkGameServerBase_CheckTimeouts.

The output is a virtual dispatch (found_vcall): the YAML records the vtable slot and a vfunc_sig that pins the call instruction. There is no concrete implementation address — do not resolve or emit func_va.

Realworld Function Reference

Read the platform-relevant reference YAML before searching in IDA. It provides concrete disassembly, decompiler output, and the annotated call site. Treat its addresses and offsets as reference-build values only; verify every result against the current binary.

• Windows: ida_preprocessor_scripts/references/engine/CNetworkGameServerBase_CheckTimeouts.windows.yaml
• Linux: ida_preprocessor_scripts/references/engine/CNetworkGameServerBase_CheckTimeouts.linux.yaml

Background — where IsHLTV is called

CNetworkGameServerBase_CheckTimeouts(this) loops over connected clients. For each timed-out client it decides how to disconnect. In that decision it makes a virtual call on the server object itself to test whether the server is an HLTV/relay server:

// Linux reference (offset 0x258)
if ( !(*(unsigned __int8 (__fastcall **)(__int64))(*(_QWORD *)a1 + 600LL))(a1)   // IsHLTV(this)
     && g_pSource2Server
     && ... )
// Windows reference (offset 0x230)
if ( !(*(unsigned __int8 (__fastcall **)(__int64))(*(_QWORD *)a1 + 560LL))(a1) ) // IsHLTV(this)

IsHLTV takes only this and returns a bool. When it returns false the routine takes the g_pSource2Server "server-decided timeout" path. That semantic role — the vcall on the server object whose negated result gates the g_pSource2Server branch — is the anchor, not the raw offset, which changes across updates.