LjrIdZddlmZddlZddlZddlZddlmZddlm Z ddl m Z m Z m Z ddlmZeej#j$dZed z Zed z Zed z Zd Zd ZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$dZ%dZ&dZ'd1d2dZ(d3dZ)d4dZ*d5d Z+d6d!Z,d6d"Z-d7d#Z.d8d$Z/d9d%Z0d:d&Z1d;d'Z2dd)Z4d?d@d*Z5dAd+Z6dBdCd,Z7dDd-Z8dEd.Z9dFd/Z:e;d0k(r e<e:y)GaReview producers/consumers of the active group gate used before HUD menus. The stream at 0x0047e688 gates the grounded top-menu wrapper with two VM commands: * 0x6e compares command bytes with globals 0x00574544/0x00574543. * 0xe6 branches on the active descriptor count at 0x004576e8. This pass intentionally stays below "opener proof". It asks whether those globals are a normal-field ESC/X opener signal, or a more general active object/descriptor control surface that the menu wrapper also uses. ) annotationsN)Path)Any) offset_to_va read_sections va_to_offset) decode_streamz Hwanse2.exeoutwebiDEWiCEWivEivEiPwEiJ@ix@i9Ai-CiCi##Ci!#@imAiGi|GiGilMc|dSd|d|dS)N-0x0x)valuewidths 4tools/build_hud_active_group_gate_frontier_review.pyhxr5s#-3;r%%z):%;;cVtj|ddSt|dS)NT)quote)htmlescapestr)rs rhr9s% ;;U]r$ GGE $ GGrc^t||}|tdt|d||||zS)NzVA z is outside raw sections)r ValueErrorr)exesectionsvasizeoffsets rread_atr&=s= (B 'F ~3r"vh&>?@@ vv} %%rc|D]?}t|d}|t|dz}||cxkr|ks.n1t|dcSy)Nr#raw_sizenamer)intr)r"r#sectionstartends rsection_name_forr.DsT(GDM"c'*-.. B  wv' ' ( rctjd|}g}|j|}|dk7r:t||}||j ||j||dz}|dk7r:|S)N KKOhhvsQw' ) KrcTg}tjd|}|D]}|jddk7rt|d}|t|dz}|j |||}|dk7sPt ||} | |j | |j ||dz|}|dk7r;|S)Nr0r).textrawr(r1r )r2r3getr*r4rr5) r!r"rr7r6r+r,r-r8r#s r text_refsr>YsD [[u %F 1 ;;v ' ) GEN#c'*-..hhvuc*Rih,B~ B((637C0C Ri 1 Krc `g}|D]}|jddk7rt|d}|t|dz}t|t||dz D]T}||dk7r t ||}|t j d||dzd } |dz| z|k(sD|j|V|S) Nr)r;r<r(zt t |}g} t|D]\} } t|| } | | dzt|kr|| dznt|dt|dz} | dzt|kr t|| n|}||}| j | | | t| |td|| z d| S) Nc3JK|]}|jddk(s|yw)r)r;N)r=).0r+s r z"function_ranges..~s RG7;;v3F'3QRs##r<r(sUrr r#)startVaendVastartOffendOffr$) nextr*r4rr5sortedset enumeraterlenrC)r!r"text raw_startraw_endstartsr8hitr#rowsindexstart_va start_offnext_vanext_offs rfunction_rangesrc}sf RxR RDDK I#d:.//GF C hhW5 7  (C ( > MM" Ag CK F!#D$V, x 84   ',qy3v;'>&#CT OVYZ^_iZjVkDk6;ai#f+6M<'2SZ  H # %i2Ax)34    " Krcd|D]+}t|d|cxkrt|dks'|cS-y)NrOrP)r*) functionsr#functions rowner_functionrgsB x " #r BC0A,B BO C rc|tk(ry|tk(ry|tk(ry|tk(ry|tk(ry|t k(ry|t k(ry|tk(ryd |cxkrd kry d |cxkrd kryyy)NzVM opcode 0x6d handlerzVM opcode 0x6e handlerzVM opcode 0xe6 handler&field actor input/collision controllerfield collision response helperz&active descriptor rebuild/materializerzgeneric display VM rootztext/status display handleriCi/C(field active-object/descriptor subsystemi@iAzgeneric VM handler layer unclassified)GROUP_STORE_HANDLER_VAGROUP_BRANCH_HANDLER_VACOUNT_BRANCH_HANDLER_VAFIELD_ACTOR_CONTROLLER_VAFIELD_COLLISION_RESPONSE_VADESCRIPTOR_REBUILD_VADISPLAY_VM_ROOT_VATEXT_STATUS_HANDLER_VA)r_s rclassify_functionrus))'**'**',,7..0((7%%()),X++9,X++), rct||}|y|}gd}|D])\}}}||z } | dk\s|| | t|z|k(s'|cSy)Nunknown) )szdirect byte store imm8)rxszdirect dword store imm32)r zread byte into AL)r write AL)rxsfzread word into AX)rxsfzwrite AX)rxszindexed byte read)rxsfzword read/indexed operand)sf zindexed word read)r|szindexed dword readrzraw dword reference)rrW) r!r"ref_varGdatachecksbackprefixlabelr,s rclassify_ref_instructionrsk x (C { D F &fed  A:$uUS[%89VCL !rct||}|ytd||z }tt|||z}|||j dS)Nrr )rrCminrWhex)r!r"r#beforeafterrGr,r-s r context_bytesrsQ x $C { 3< E c#he $C uS>  c ""rc0g}t|||D]}t||}|rt|dnd}|j|t |t ||t || t |ndt |||t||t|||d |S)NrOr) refVarefVaHex targetVaHex ownerStartVaownerStartVaHex ownerClassinstructionClassr+ contextBytes) r>rgr*r5rrurr.r)r!r"rerEr]refowner owner_starts rref_rowsrs!#Dh 2 y#./4c% *+$  sG!)} +#%k?@K@W/ <]_$rjrirk)rFzEactive-group/descriptor gate grounded; opener producer still unprovena0x574544/0x574543 are not a narrow ESC/X opener flag. They are written by the 0x6d VM handler and by descriptor/display setup code, and consumed heavily by the field actor/collision subsystem. 0x4576e8 is the active descriptor count. The 0x0047e688 gate is therefore a grounded active-object/display gate before the top menu wrapper, but it does not by itself identify the normal-field menu opener.)activeGroupARefCountactiveGroupBRefCountactiveDescriptorCountRefCountdirectGroupWriteCountdescriptorCountDirectWriteCountfieldGroupConsumerCountdescriptorRebuildCallCountdisplayVmRootCallCounttopMenuGateVaHextopMenuRejectLoopVaHextopMenuWrapperVaHextopMenuSequenceVaHexnormalFieldEscOpenerPromotedclassificationdecisionr z,hwanse-hud-active-group-gate-frontier-review) activeGroupA activeGroupBactiveDescriptorCountactiveDescriptorOrderactiveDescriptorSlotTable<x)descriptorRebuild displayVmRoot)zxactive group globals are consumed inside the field actor/collision controller, so they are broader than menu-open state.zkdescriptor count 0x004576e8 is shared by save/object/battle/menu descriptor loops and is not unique to HUD.zZthe top-menu wrapper still has no direct pointer ref from a normal-field ESC/X input root.zvthe 0x0047e688 gate proves wrapper admission conditions, not the producer that schedules this wrapper from field mode.)zbtrace writers that attach or schedule the stream containing 0x0047e688/0x0047e6a0 from field mode.zdseparate descriptor/display setup calls that use 0x402321 from normal field vs intro/title contexts.zAdo not promote active group key writes alone as the ESC/X opener.)versionkindr addressespreWrapperGatedirectGroupWritesdescriptorCountDirectWritesfieldGroupConsumersactiveGroupARefsactiveGroupBRefsactiveDescriptorCountRefs callSitesnegativeEvidence nextFrontier)EXE read_bytesrrcrACTIVE_GROUP_A_VAACTIVE_GROUP_B_VAACTIVE_DESCRIPTOR_COUNT_VArTOP_MENU_PRE_WRAPPER_GATE_VArJrrrsrWrTOP_MENU_REJECT_LOOP_VATOP_MENU_WRAPPER_VATOP_MENU_SEQUENCE_VAACTIVE_DESCRIPTOR_ORDER_VAACTIVE_DESCRIPTOR_SLOT_TABLE_VA)r!r"re group_a_rows group_b_rows count_rowsrdirect_group_writesdescriptor_count_direct_writesfield_group_consumersdescriptor_rebuild_contextdescriptor_rebuild_callsdisplay_vm_root_callsrr#reports r build_reportrsy .. CS!HX.IC96GHLC96GHL#x4NOJ$l2 c,- -5G1HJ1V  "& c,- -5G1HJ1V &"& $l2 | !   "0X?[jk!l)#x9NO&sH6HI!$L 1 #L 1),Z!$%8!9+./M+N#&'<#=&)*B&C"%&;"<;<"$%<"=!"56 "#7 8(-a ]!G2>0101%'(B%C%'(B%C)+,K)L  50'E4Sb9((%/3K!LR"R&!L/DTc/JKbfK   9!FD M_&p"MKs)HH(HH!1H&c|d|}djd|D}t||kDr|dt||z dz }|S)Nrc3K|]R}dt|ddt|ddt|ddt|ddt|d d Ty w) rr
r rrNrrMrs rrNz#render_ref_table..es   s:'()s,-./{1S=N;O:PQ'()*+s>*+,-  sAAz... z more rows in JSON)joinrW)r]limitshownbodys rrender_ref_tablercs\ %LE 77 D 4y5 *3t9u+<*==YZZ KrcRdjd|jdgDS)Nrc30K|]}dt|jddt|jddt|jddt|jddt|jd d y w) rrrrrrrrrrrN)rr=rs rrNz'render_command_table..ts   swww'()*sww{+,-[377<;P9Q8RS#$%&swwx()*+  sBBr)rr=)contexts rrender_command_tablerss- 77;;z2. rc|d}tj|d}djd|jD}djd|dD}djd|d D}d t |d d |d t |ddt |ddt |ddt |dd|d|d|d}djd|jDdzS)NrF) ensure_asciirc3bK|]'\}}|dk7rdt|dt|d)yw)rz
z z
Nr)rMkeyrs rrNzrender_html..s; C *  #xz!E(=Is-/c3:K|]}dt|dywz
  • z
    • NrrMitems rrNzrender_html..sU$$qwiu-Urc3:K|]}dt|dywrrrs rrNzrender_html..sUdd1T7)51Urra HUD Active Group Gate Frontier Review

    HUD Active Group Gate Frontier Review

    rz

    z

    Pre-wrapper Gate Decode

    rz
    VAopcodesummaryraw

    Direct Group Writes

    rz
    refownerinstructionbytes

    Descriptor Count Direct Writes

    rz
    refownerinstructionbytes

    Field Group Consumers

    rzQ
    refownerinstructionbytes

    Negative Evidence

      zB

    Next Frontier

      z

    Raw JSON

    
  
    

    




c3<K|]}|jyw)N)rstrip)rMlines  rrNzrender_html..sEtT[[]Es)jsondumpsritemsrrr
splitlines)rrpayloadcards	negatives
next_frontierhtml_docs       rrender_htmlrsYGjje4GGG!--/
E
U&AS:TUUIGGUf^>TUUM:
Wabvv|~NwObPaQQghxx~@SyThUgVVghxx~@]y^h_g``ghxx~@UyVhWgXX	
	
78?i@{BHF99Ex/B/B/DEELLrc2t}tjdtjdtdzj	tj|dddzd	td
zj	t|d	tdy)
NT)exist_okz*hud_active_group_gate_frontier_review.jsonFrx)rindentrzutf-8)encodingz*hud_active_group_gate_frontier_review.htmlz(hud_active_group_gate_frontier_review okr)	rOUTmkdirWEB
write_textrrrprint)rs rmainrs
^FIItIIItI77CC

6a84?D	77CCKPVDWbiCj	
45r__main__)r)rz
int | Nonerr*returnr)rrrr)
r!bytesr"list[dict[str, Any]]r#r*r$r*rr)r"rr#r*rr)r!rr"rrr*r	list[int])r!rr"rrEr*rr)r!rr"rrr)rerr#r*rzdict[str, Any] | None)r_r*rr)r!rr"rr}r*rr)r)r!rr"rr#r*rr*rr*rr)
r!rr"rrerrEr*rr)r)
r!rr"rr_r*rr*rdict[str, Any])rr)P)r]rrr*rr)rrrr)rrrr)rr*)=__doc__
__future__rrrr2pathlibrtypingrprobe_exe_scene_tablesrrr'summarize_object_payload_442c75_callersr	__file__resolveparentsROOTrrrrrrrrrmrnrorprqrrrsrtrrrrrrr&r.r9r>rJrcrgrurrrrrrrrr__name__
SystemExitrrrr-sJ#
LLAH~''*
]
Ul
Ul''",#$$&("#)$ !<H&	"&!H0!0#*$Xv
 	MM`

z
TV
r