{"objective":"non-debugger process-memory snapshot for Hwanse2.exe selected-pointer proof","command":["xvfb-run","-a","wine","explorer","/desktop=hwanse,640x480","Hwanse2.exe"],"waitSeconds":20.0,"winePrefix":"/home/exedev/.cache/hwanse-wine32","linuxPid":739664,"tasklistStatus":0,"tasklistOutput":"\nImage Name PID Session Name Session# Mem Usage\n========================= ======== ================ =========== ============\nstart.exe 32 Console 1 32,012 K\nservices.exe 56 Console 1 34,928 K\nwinedevice.exe 68 Console 1 35,944 K\nexplorer.exe 76 Console 1 53,864 K\nwinedevice.exe 112 Console 1 51,292 K\nplugplay.exe 152 Console 1 34,464 K\nsvchost.exe 188 Console 1 23,192 K\nrpcss.exe 232 Console 1 30,796 K\nexplorer.exe 268 Console 1 60,304 K\nHwanse2.exe 284 Console 1 312,968 K\nstart.exe 324 Console 1 31,864 K\ntasklist.exe 332 Console 1 29,800 K\n","startupStatus":1,"startupOutput":"ALSA lib seq.c:935:(snd_seq_open_noupdate) Unknown SEQ default\nqemu: uncaught target signal 11 (Segmentation fault) - core dumped\nqemu: uncaught target signal 11 (Segmentation fault) - core dumped\n","imageBaseHex":"0x00400000","imageSizeHex":"0x001be000","loadedBaseHex":"0x00120000","hwanseMappings":[{"startHex":"0x00120000","endHex":"0x00121000","perms":"r--p","offsetHex":"0x00000000","path":"/home/exedev/hwanse/Hwanse2.exe"},{"startHex":"0x00121000","endHex":"0x0015c000","perms":"r--p","offsetHex":"0x00000000","path":""},{"startHex":"0x0015c000","endHex":"0x0027a000","perms":"rw-p","offsetHex":"0x0003a000","path":"/home/exedev/hwanse/Hwanse2.exe"},{"startHex":"0x0027a000","endHex":"0x002c2000","perms":"rw-p","offsetHex":"0x00000000","path":""},{"startHex":"0x002c2000","endHex":"0x002c3000","perms":"r--p","offsetHex":"0x00159000","path":"/home/exedev/hwanse/Hwanse2.exe"},{"startHex":"0x002c3000","endHex":"0x002de000","perms":"r--p","offsetHex":"0x00000000","path":""}],"memory":{"canReadProcessMemory":true,"selectedPointerRuntimeValueHex":"0x001c2d38","selectedPointerStaticValueHex":"0x004a2d38","currentRootRuntimeHex":"0x00260714","currentRootStaticHex":"0x00540714","selectedPointerEqualsCurrentRoot":false,"currentRootSecondLevelRuntimeValueHex":"0x002629dc","expectedSecondLevelRuntimeHex":"0x002629dc","currentRootRelocationLooksValid":true,"samples":[{"name":"selected-pointer-global","role":"runtime global that should contain the active selector stream pointer","staticVaHex":"0x0059de30","runtimeVaHex":"0x002bde30","size":16,"mapped":true,"readOk":true,"error":null,"bytesHex":"38 2d 1c 00 00 00 00 00 00 00 00 00 00 00 00 00","firstByte":56,"firstByteHex":"0x38","firstDwordHex":"0x001c2d38","firstDwordStaticHex":"0x004a2d38"},{"name":"current-selector-root-2:0","role":"selector 2:0 root used by the blocked map1_01a -> map2_02d frontier","staticVaHex":"0x00540714","runtimeVaHex":"0x00260714","size":32,"mapped":true,"readOk":true,"error":null,"bytesHex":"6d 01 00 00 5a 00 00 00 dc 29 26 00 4b 03 00 00 07 03 00 00 a8 0e 26 00 07 03 00 00 f4 0e 26 00","firstByte":109,"firstByteHex":"0x6d","firstDwordHex":"0x0000016d","firstDwordStaticHex":null},{"name":"current-second-level-table-2:0","role":"selector 2:0 second-level table containing current frontier leaves","staticVaHex":"0x005429dc","runtimeVaHex":"0x002629dc","size":32,"mapped":true,"readOk":true,"error":null,"bytesHex":"84 2a 26 00 80 2e 26 00 98 2a 26 00 80 2e 26 00 ac 2a 26 00 80 2e 26 00 c0 2a 26 00 80 2e 26 00","firstByte":132,"firstByteHex":"0x84","firstDwordHex":"0x00262a84","firstDwordStaticHex":"0x00542a84"},{"name":"current-frontier-reader-2:0","role":"frontier reader/resource gate before map1_01a/map2_02d scene records","staticVaHex":"0x00542b0c","runtimeVaHex":"0x00262b0c","size":24,"mapped":true,"readOk":true,"error":null,"bytesHex":"11 90 20 00 6f f4 25 00 fc f4 25 00 11 90 21 00 7b f4 25 00 1c f7 25 00","firstByte":17,"firstByteHex":"0x11","firstDwordHex":"0x00209011","firstDwordStaticHex":"0x004e9011"},{"name":"opcode24-current-object-index","role":"current runtime object index read by opcode 0x24 before object table lookup","staticVaHex":"0x0059e33e","runtimeVaHex":"0x002be33e","size":1,"mapped":true,"readOk":true,"error":null,"bytesHex":"00","firstByte":0,"firstByteHex":"0x00","firstDwordHex":null,"firstDwordStaticHex":null},{"name":"opcode24-mode2-source","role":"runtime byte consumed by opcode 0x24 mode 2","staticVaHex":"0x0059e347","runtimeVaHex":"0x002be347","size":1,"mapped":true,"readOk":true,"error":null,"bytesHex":"00","firstByte":0,"firstByteHex":"0x00","firstDwordHex":null,"firstDwordStaticHex":null},{"name":"opcode24-mode1-source","role":"runtime byte consumed by opcode 0x24 mode 1","staticVaHex":"0x0059e348","runtimeVaHex":"0x002be348","size":8,"mapped":true,"readOk":true,"error":null,"bytesHex":"00 00 00 00 00 00 00 00","firstByte":0,"firstByteHex":"0x00","firstDwordHex":"0x00000000","firstDwordStaticHex":null},{"name":"opcode24-runtime-enabled-flag","role":"runtime flag that must be 1 before opcode 0x24 enters mode dispatch","staticVaHex":"0x0059e34d","runtimeVaHex":"0x002be34d","size":1,"mapped":true,"readOk":true,"error":null,"bytesHex":"00","firstByte":0,"firstByteHex":"0x00","firstDwordHex":null,"firstDwordStaticHex":null},{"name":"secondary-branch-state","role":"secondaryBranchState gate table used by the current frontier reader","staticVaHex":"0x0059e360","runtimeVaHex":"0x002be360","size":16,"mapped":true,"readOk":true,"error":null,"bytesHex":"00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00","firstByte":0,"firstByteHex":"0x00","firstDwordHex":"0x00000000","firstDwordStaticHex":null}]},"snapshotStatus":"memory-readable-no-route-proof","routePromotionStatus":"blocked","conclusion":"A live Hwanse2.exe process can be started in Wine virtual desktop mode and sampled through /proc//mem without WineDbg. This gives a fallback way to inspect relocated globals such as 0x0059de30, but this idle snapshot is not a route-path watchpoint or strict hotspot proof, so map1_01a -> map2_02d remains blocked."}