eRjiUdZddlmZddlZddlZddlZddlZddlmZddl m Z ddl m Z ejjdee ej#j$ddlmZmZmZddlmZmZmZe ej#j6d Zed z Zed z Zed z Zed z Z edz Z!gdgdgdgdggdgdgdgdgdgdggdgdgdgdZ"de#d<d0dZ$d1d2d Z%d3d!Z&d4d"Z'd5d#Z(d6d$Z)d7d8d%Z* d9d&Z+ d:d'Z,d6d(Z-d6d)Z.d;d*Z/dd-Z2d?d.Z3e4d/k(re3yy)@aBuild a focused EXE evidence review for map animation. The map renderer has two different kinds of evidence that are easy to mix up: * visual source-tile shift previews used in ``web/map_review.html``; and * EXE-grounded dirty-redraw paths and generic palette VM candidates. This report keeps them separated. It also records a negative scan for simple tile-id replacement tables so future work does not keep re-testing the same assumption. ) annotationsN)Counter)Path)Any)build_palette_binding_contextpalette_command_alignmentpalette_root_resource_binding) offset_to_va read_sections va_to_offsetz Hwanse2.exeoutwebzmap_animation_tile_review.jsonz%map_palette_handler_trace_review.json)))))iii)iii)rrr)rrr)rrr)rrr):;<)UVW)i%i&i')zmap1_01a fire 4x3 row variantsz%map1_02b waterfall/water row variantsz(map1_02b bridge/static neighbor controlszdict[str, list[list[int]]]SUSPECTED_TILE_SEQUENCEScVtjt| |SdS)N)htmlescapestr)values /tools/build_map_animation_exe_pattern_review.pyescr*@s& ;;sE$55> ??2> ??c|yd|d|dS)Nr$0x0x)r(widths r)hxr2Ds" } awaZ !!r+cp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks r) load_jsonr=Js* ;;= ::dnngn6 77r+ct|sgSg}d} |j||}|dkr|S|j||dz}0)Nrr )findappend)blobneedlerstarthits r)all_occurrencesrEPsL  C E ii& 7J 3a r+c|dk(rtd|Dryt|S|dk(r+td|Drydjd|DS|dk(rdjd|DSt|) Nu8c34K|]}|dkxs|dkDyw)rNr0.0r(s r) z"encode_sequence.._s :Uuqy(EDL(:u16lec34K|]}|dkxs|dkDyw)riNr0rJs r)rLz"encode_sequence..cs .eBU D%0B "u32lec3HK|]}tjd|yw).grUrV)anybytesjoin ValueError)seqr1s r)encode_sequencer_]sz } :c: :Sz  << <xxBcBBB xxBcBBB U r+c*g}t}tjD]\}}|D]}|j|g}dD]o}t ||} | t || } |j || jdt| | ddD cgc]} tt|| c} dq|j ||djd|D|td|Ddg} t|D]} tjd | } t || } t!}g}| D]y} t|| }||j t||D]J}t#|d }|t#|d z}|| cxkr|ks.n1|t%|d xxd z cc<y{| j | | jdt| t'||dddddd|| t|td|DdScc} w)N)rGrNrW )r6 bytePatternhitCounthitVasz -> c32K|]}t|ywN)r'rJs r)rLz&scan_tile_sequences..s/LuE /Lc3&K|] }|d yw)rdNr0rKrows r)rLz&scan_tile_sequences..s2Xs3z?2Xs)familysequence sequenceText encodingstotalContiguousHitCountrQrawraw_sizenamer )tilerNrd sectionCountsrez2simple-contiguous-tile-replacement-table-not-foundzXknown fire/waterfall/waterfall-rope candidate tile-id triples and nearby static controlsznegative result only covers simple contiguous u8/u16/u32 encoded sequences, not compressed code, arithmetic generation, or palette-only animationc32K|]}|ddkDs dyw)rprr Nr0rjs r)rLz&scan_tile_sequences..s Ysc:S6TWX6X Y )statusscope limitation sequenceRowsindividualTileRowstotalSequenceRowscontiguousHitRows)setr"itemsupdater_rEr@hexlenr2r r\sumsortedrSrTrintr'dict)rAsectionsrowsindividual_tilesrlpatternsr^ror1encodedhitsrDindividual_rowsrusection_countshit_vasvasectionrCends r)scan_tile_sequencesrksI!#D!$4::< C  # #C (.0I1 )#u5?&tW5  $)'.{{3'7$'INRSVTVi"Xs2l8S&A#B"X   KK$ #$*KK/L/L$L!*/22Xi2X/X  ! 6O'( ++dD)tW-'.y Ch,B~r"v&# GEN+c'*"566C%#%"3wv#78A=8     S)I!%n!5!#2,    4Gkj- Y Yd YY O#Ys Hcf |td||z tt|||z}g}t}|D]Z}d|cxkrdkrnn|j |#t|dk\r|j t ||j \t|dk\r|j t |g}|D]#} |j |jd%|D cgc] t fddDr } } dj| ddS#t$rYiwxYwcc} w) Nr ~asciic3BK|]}|jvywrg)lower)rKtokentexts r)rLz%ascii_token_around..sou $os)z.cnsz.mlkz.wlkmap_btl_cara_middataz | ) maxminr bytearrayr@r[cleardecodeUnicodeDecodeErrorrZr\) rAoffsetradiussegmentrunscurrentbyte text_runsrunr interestings ` r)ascii_token_aroundrs-3q&6/*STFVO-LMGDkG 4 4  NN4 7|q  E'N+ MMO  7|q E'N#I    SZZ0 1  o2no o K ::k"1o &&"   s D,D. D+*D+c |jdxsg}|Dchc]F}|jdgD]/}t|jdtrt|d1H}}}|Dchc]s}|jdgD]\}t|jdtr;t|jdtrt|dt|df^u}}}td|Dd}td |Dd} t |} t d |D} t| d } t t|d z | t| d z} t}d}g}g}g}g}t| | D]}||dk7r ||dz}|dvrtjd||dzd}tjd||dzd}tjd||dzd}|dkxr ||kxr|| k}||v}||f|v}|s|s|st||}|jdxsd}||xxdz cc<|dv}|r|r|dz }|jd}t|| } tt||||dk(rdnd||||||d zj!d|||jd|jdxsgdd | jd| jd | jd!gdd"D!cgc]{}!|!jd#|!jd$|!jd |!jdgdd |!jd%g|!jd&g|!jd'd(}c}!| jd)gdd"D!cgc]}!|!jd#|!jd$|!jd |!jd*|!jdgdd |!jd%g|!jd&g|!jd'd+c}!| jd,d-d. }t#||}"|"r(t|d/kr|j%i||"d0d1|r'|s%t|d/kr|j%i|d2d3i|r#|r!|rt|d4kr|j%||sK|rO|sS|sWt|d4ksg|jd5xsijd}#|"rd6}$n|#d7k(rd8}$n |#r|#d9k7rd:}$nd;}$|j%i||$dd?d@d dAgdBdCdDdEdFdGdHgdIdJdDdKdLdGdMgdNdJdDgt|t||| t't)|j+|t|t|t-dO|Dt-dP|Dt|t|dQ ||||gdRdSScc}}wcc}}wcc}!wcc}!w)TaScan opcode 0x58 tile-write command shapes against known 0x40 regions. Opcode 0x58 is grounded by disassembly as a real tile-grid write command, but a raw byte hit is not enough. This scan keeps three things separate: * handler semantics, which are confirmed from code; * plausible aligned 0x58 command streams; and * whether any such command directly writes a known animated source tile id. maps animatedCellslayer0r/yc3XK|]"}t|jdxsd$yw)r1rNrgetrjs r)rLz+scan_tile_write_commands..s#@CS).Q/@(*r)defaultc3XK|]"}t|jdxsd$yw)heightrNrrjs r)rLz+scan_tile_write_commands..s#Bcc#''(+0q1Brc32K|]}|ddk(s |yw)rsz.dataNr0)rKrs r)rLz+scan_tile_write_commands..sVG76?g;UVrxrqrrXr )rr rQriryunknown>vm-aligned-local-highvm-aligned-local-medium bestRootVaz!write layer0 tile grid 0x00595af0z!write layer1 flag grid 0x0058d7d0radirectReferenceCountpreviewN rootVaHexcontainingGroupsidselector animatedMapsanimatedTilesets linkClass)rrrrrrr nearestGroups distanceBytes)rrrrrrrrnote)ryrrrr) rmode modeMeaningrur/rrqalignmentStatusrrrresourceBindingrtzOcandidate overlaps asset/string bytes rather than an isolated VM command stream) asciiContextrejectedReasonrzoknown animated tile id appears, but x/y is outside known map dimensions; treated as false-positive byte overlaprz-rejected-descriptor-or-resource-table-overlapz$resource-group-contains-animated-map4coordinate-correlation-inside-animated-resource-rootz no-vm-rootz$rejected-nonanimated-or-unbound-rootzcoordinate-correlation-onlyzThe command touches a coordinate that is animated in at least one map, but writes a non-animated tile id. This is not visible animation proof unless the root also binds to the animated map.)classificationrz6tile-write-handler-grounded-animation-binding-unproven0x58 0x00407686z!58 mode u16(tileId) u16(x) u16(y))zBmode 0 writes tileId to layer0 grid 0x00595af0 at y * mapWidth + xzGmode 1 writes tileId/flag to layer1 grid 0x0058d7d0 at y * mapWidth + xz?both modes call 0x004255eb(x, y) to invalidate the touched tilezconfirmed-handler)opcode handlerVa commandByteslayout semantics promotion0x6b 0x00408d10rbz96b mode actorFilter u16(xOffset) u16(yOffset) u16(tileId))z6iterates active descriptor slots 0x004576e8/0x0059dd70z!matches actor id or 0xff wildcardBwrites tileId at active-object base coordinate plus signed offsetsz!confirmed-handler-object-relative0x76 0x00409f23z976 mode actorFilter u16(xOffset) u16(yOffset) u16(tileId))z7iterates linked active object list rooted at 0x00574100z8matches actor id, 0xfe current context, or 0xff wildcardrc3HK|]}|jddk(rdyw)rrr N)rrjs r)rLz+scan_tile_write_commands..s+977+,0ff9rVc3tK|]0}t|jddjdrd2yw)rr$z rejected-r N)r'r startswithrjs r)rLz+scan_tile_write_commands..s7/sww/45@@M/s68) animatedTileIdCountanimatedCoordinatePairCountmaxAnimatedMapWidthmaxAnimatedMapHeightcandidateAlignmentCountsplausibleAlignedOpcode58CountdirectAnimatedTileWriteCountcoordinateOnlyAlignedHitCount%coordinateOnlyInsideAnimatedRootCountcoordinateOnlyRejectedCount'rawAnimatedTileFalsePositiveSampleCountasciiFalsePositiveSampleCount)z^Tile-grid mutation opcodes are real and their layouts are now separated from palette evidence.zNo aligned, plausible opcode 0x58 command was found that directly writes one of the current known 0x40 animated layer0 tile ids.zSome aligned tile writes touch coordinates that are animated in a known map, but the known hits either write ordinary tile ids from nonanimated/unbound roots or overlap resource/descriptor tables.zObject-relative tile write opcodes 0x6b/0x76 may matter for doors/NPC/event map edits, but they do not currently bind the fire/waterfall loop.)ryhandlerssummarydirectAnimatedTileWritescoordinateOnlyAlignedHits#rawAnimatedTileFalsePositiveSamplesasciiFalsePositiveSamples conclusion)r isinstancerrrnextrrrrangerS unpack_fromrr r2r rrr@rrrr)%rAranimation_reviewrrkcellanimated_tilesanimated_coord_pairs max_width max_heightbinding_context data_section data_startdata_endalignment_countsplausible_aligneddirect_animated_writescoordinate_only_hitsraw_animated_tile_hitsascii_false_hitsrrrur/r plausibletile_hit coord_hit alignmentryaligned best_rootbindinggroup ascii_contextbinding_statusrs% r)scan_tile_write_commandsrs    ' -2D GGOR0  dhhx(# . DNN GGOR0  dhhsmS )j#.L T#YT#Y(( @4@!LIBTBANJ3D9OVxVVL\%()J3t9q=*s< 3K/L"LMH%,Y351335-/ H-g <4  FQJ v  !!$fqj9!<   tT6A: 6q 9   tT6A: 6q 94KDA MDa*n >)F22 X -dF; x(5I A% PP   " MM,/ / ?K\(F34BF!)>Qt!,005%#$-MM2H$I! i06B;!++h/$[[5")-?!DRa!H %$iio$)IIj$9%*YY{%; % &" 5bq 9(- ."(E,1II6H",M%*YY{%; %.")_b!A"1!E "$iio$)IIj$9%*YY{%;).?)C % &" 5bq 9(- ."(E,1II6H",M%*YY{%;  " F+9 * V+48 #$r) ''(5*{  I#.D*E*J " ) )$'X   g#6L2MPR2R " ) )# . X)CH\D]`bDb!gg&78>BCCHMN!P#II!WNl$B!G!> ' '&4\ CgTK!) != 1 !) "U A !) "U A 3% N$'~#6+./C+D#,$.(,V4D4J4J4L-M(N->,/0F,G-01E-F589/96 ,////, 8;;Q7R-01A-B) ,%;%9/E%5 EH HI x % "sA W0.A8W6BW< BX"c t||}|gSg}t|D]k}||dzz}|dzt|kDr|Stjd||\}} } } |j |t ||dzz|| | | g| |z | | z gdm|S)Nrtz<4i)indexrrectsize)r rrrSrr@r2) rArbase_vacountrrr! item_offsetlefttoprightbottoms r)read_rect_tabler+s (G ,F ~ Du  urz)  c$i '  K$*#5#5eT;#O c5& 52:-.sE62v|4     Kr+c^d3d4fd }|dddh}|dddh}dd d d d d ddd dddd gddtdddddtdddddtdddg||ddd d!d"ggd#gd$gd%gd&gd'gd(gd)gd*gd+gd,gd-g d.d/t|t|d0gd1d2S)5aTRecord the self-blit command path separately from tile-id mutation. Runtime traces already prove that map_a updates a live cache area through surface self-blits. Static evidence shows the generic helper that performs those self-blits, but map_c's beach rows have not been tied to the same executed command family yet. c 8t |}t |}||gSg}t|t|t dz D]} |}||vs |dzdk7rt j d |dzd} t j d |dzd} t j d |d zd} |j tt |t|dd | | t|  ||dzjd d t||k\s|S|S) Nrbr rrQrrrrYr0x02ra)rrsubmodeword4word6 ptrOrArg8rq) r rrrrSrr@r2r r)start_vaend_vaopcodeslimitrCrrrrr0r1ptr8rArs r)sample_commandsz6scan_rect_copy_command_family..sample_commandss=Xx08V, =CKIE3sCIN#;< F&\FW$VaZ(8D(@&&tT6A:>qAE&&tT6A:>qAE%%dD&1*=a@D KK\(F;< m%""!#D"599#> 4yE! ) ( r+i*Di,D]iEiFez7self-blit-helper-grounded-map-c-beach-runtime-confirmed 0x004256D1zsurface self-blit helperzkcalls BltFast wrapper twice, surface 0x0a -> 0x0a and surface 0x0b -> 0x0b, using rectBase + wordIndex * 16)rroleevidence 0x0040791Fz%stream consumer into self-blit helperzreads current stream pointer from context+0x40, rect table base from context+0xa8, then forwards two stream words into 0x004256D1 0x00417750zDirectDraw Blt/BltFast wrapperzBfinal DirectDraw surface copy wrapper used by the self-blit helper 0x00442761z'map_a 64x48 cache block + source framesia'Dr)baseVar<rects 0x004427A1z.map_b/map_a strip-style cache source candidatei'D 0x004427B1zstrip cache rect continuationi'DzMcaptures/runtime/hwanse-runtime-trace-2026-07-11T15-18-27-318Z-ani-wave.jsonl 0x004177DA 0x00419BC7z map_c1.cnsz map_c2.cns)iPi)rrG0rH)rIrG`rH)rJrGrH)rKrGrHrH)rHrGrH)rLrG rH)rMrGPrH)rNrGrH)rOrGrH)rPrGirHz1every 4 runtime frames, roughly 200ms in ani-wave)traceselfBlitCallerscreenConsumerCallersurfaces cacheDestRectsourceFrameRectsobservedCadence)mapACommandSampleCountmapCRootCandidateCount)zThe self-blit/cache mechanism is real and is strong evidence for map_a/map_b style animation when paired with runtime surface traces.zani-wave runtime binds map_c beach motion to the same cache-consumer model: map_c1/map_c2 self-blit 48x32 source frames into cache 592,160..640,192, then 0x00419BC7 draws those cache cells.zThe older map_c 0x65/0x02 local-root rows remain unpromoted and should not be used as the animation model now that the runtime cache path is known.)ryconfirmedHelperPathmapARectTablesmapACommandSamplesmapCRootCommandCandidatesmapCRuntimeTraceEvidencerr)r) r3rr4rr5zset[int]r6rreturnlist[dict[str, Any]])r+r)rArr8 map_a_samples map_c_sampless`` r)scan_rect_copy_command_familyrcs18$J TFCM#J TFCMK#2J  #?`  #8`  &'A(xQG  'H(xQG  '7(xQG  ",%2d*$0%|41!"#$$$$$$$ ! S%% *'*-&8&)-&8  }C Cr+cLdjdtdD}g}t||D]Y}t||}|t d|dz }|||t |zdz}t tjdd t |d zzz|dt |d zd z}g} tdt dt |d z D]P} || d k(s || d zd k(s|| dz} || d z} | dks.| dks4| j| | d| dd| ddR|jt||||t |zjdgdd| tt|||ddD cgc]} d| d c} d\t||dd}ddddddd d!d"d#ddd$d g}|Dcgc]C}|jd%gD],}|jd&d'k(r|jd(dk(r|.E}}}d)dd!d*|||d'dd+d,t |d-d.gd/d0 Scc} wcc}}w)1aRecord the map_c3 whirlpool source-rect and frame-loop evidence. This is intentionally separate from layer1 0x40 tile animation. map_c3 is loaded as an extra tileset/object resource and has its own 4-frame source rect table. The map-space placement still needs a direct draw consumer trace, so the review labels the position as a candidate rather than a final promotion. r+c3NK|]}tjddd|dyw)z.9s![&++gtQtD[s#%rNrrJ@<Hrriir zword-pairs e802 04xz, ea02 )r/rr=ra)rr rr0x000crIr-)rrqframesslotHexnearbyPlacementCandidates contextVa contextWordsilRmap2_13c 0x00531fc4 0x00531fecz map_c3.cnsz6resource-ref-only; candidate x=53 exceeds map width 37)maprecordVa resourceRefVarnstringplacementStatusmap6_26c 0x0053207c 0x005320a4zBsource-rect-and-frame-loop-confirmed; placement candidate x=53,y=4ror/5rzCsource-rect-table-and-slot-frame-loop-confirmed-placement-candidate 0x0052df6c rzMnearby-active-object-position-word-pairs; direct draw consumer still unproven)r/rwhrdevidenceStatus)zamap_c3.cns is a four-frame 160x128 whirlpool sheet, grounded by EXE source rect table 0x0052df6c.z_The slot 0x0c frame loop 0,1,2,3 appears exactly twice in the EXE at 0x005314f0 and 0x00531bc8.zBoth loop contexts carry nearby e802/ea02 word pairs with x=53,y=4, which is plausible for map6_26c and out of bounds for map2_13c; map_review therefore renders map6_26c at tile 53,4 as a placement candidate.zThe final unresolved item is a direct map-space draw consumer/runtime trace tying those word pairs to the visible object position.) ryassetrusourceRectTableVa sourceRects frameLoopHits resourceRefscandidatePlacementr)r\rrEr rrlistrSunpackr@r2rr+r)rAr frame_looprrr context_startcontext context_wordsplacement_candidatesr!r/rword source_rects resource_refsrD candidatecandidate_positionss r)scan_map_c3_whirlpoolr/s[RWXYRZ[[J D!$ 3"  (F + : Av{+ }vJ'?"'DEV]]3G 8I1J+JGTmWZ[bWcghWhlmVmLnop !1c!S%7!%;<= E U#v-- 2Jf2T!%!),!%!),s7q3w(//!"!"*:1S'3(P  fFVc*o%=>BB3G&#-A X} EF=J3B=O PT2d3Z P  1" H#4:qAL$)"W  $)"c  M( !> DT"H !5r:2B7M#D(3I.tX?OPO24BN,T8<#'' 6<"L""9-3G!%%i06BM23CDO9Om LNR&hb@   ,> ? -@!A  )'++6R*S  &y1D'E  1){  ' (9(9:T(U  +M,=,=>\,]  / 0A0ABd0e  5oi6PQp6q  4_Y5OPn5o  5oi6PQp6q  =oi>XZA?B 3OI4NOl4m! " -nY.GH`.a# $/=Y.GH`.a/23CO3T/U' ,.::4@A"&&x0#'' 2%))+r:&**<<(,,^R@ ! .::4@A$&**;;'++L"= $ ) /&4)9!0B<7| $ k; ;r+cg}|D]/}|jddjd|Dzdz1ddjd|Dzdzdj|zd zS) Nzr$c3(K|] }d|d yw)zzNr0)rKrs r)rLzrender_table..s$HDtD6%7$Hszzc3:K|]}dt|dyw)zNr*)rKheaders r)rLzrender_table..sBDV U+Bz z
z
)r@r\)headersrbodyrks r) render_tablers DT FRWW$HC$HHH7RST  ''B'B B C  ! ))D/    r+c|d}|d}|d}|dDcgc]k}dt|dddt|ddt|d dt|d dd jd |d Dt|dgm}}|jdgDcgc].}dt|ddt|dt|dt|ddt|dt|ddt|jdddt|jddt|jdxsijddd jd|jdxsijdxsgDxsd d jd!|jd"gdd#Dg 1}}|jd$gDcgc]f}dt|ddt|dt|ddt|dt|dt|jd%gh}}|jd&gDcgc]}dt|ddt|dd't|ddt|dt|dt|jd(t|jd%g}}|jd)gDcgc]S}dt|jddt|jd*t|jd+gU} }g} |jd,gD]} | jd-gD]} | jdt| jd.dt| jd*t| jd/dt| jddt| jd0t| jd1g|jd2gDcgc]}dt|jdddt|jddt|jd3t|jd4dt|jd5ddt|jd6dg} }|jd7gDcgc]}dt|jdddt|jddt|jd3t|jd4dt|jd5ddt|jd6dg}}|jd8gD cgc]l} t| jd/dt| jddt| jd0t| jd1gn}} |jd9gDcgc]}dt|jddt|jd:t|jd;d jd<|jd=gDxsd dt|jd6dg}}|jd>gDcgc]}t|jd?dt|jd@ddt|jdAdt|jd:t|jdBg}}g}|dCdDD]M}d jdE|dFD}|jt|dGdt|dHd|gOg}|dCdID][}|jdt|ddt|dJt|dKdLjdM|dNddODg]g}|dPD]d}|dQ}|d}|jdRxsg}d jdS|D}|jdt|jddt|jddTt|jdt|jdUt|jdVxsijdWdXt|jdVxsijdYdt|jddZt|jdt|jd|gg|d[}|d\}d]jgd^t|d_d`t|dadbt|jdcddt|jdedft|jdgdht|jdidjt|jdkdlt|jdmdnt|jdodpt|jdqdrt|jdsdtt|jdudvt|jdwdxt|jdydzt|d{dLt|d|dLt|d}d~t|ddt|dadt|dddt|dddt gd|dt gd|dt|d\dd]jd|d[Ddt gd|dt gd|xsgdgdt gd|xsgdgdt gd|xsgdgdt|jddd]jd|jd[gDdt gd| dt gd| xsgdgdt gd| xsgdgdt gd|xsgdgdt|jddt|jddd]jd|jd[gDdt gd|xsgdgdt gd|xsgdgdt gd|xsgdgdt gd|dtt j |dddd}|Scc}wcc}wcc}wcc}wcc}wcc}wcc}wcc} wcc}wcc}w)Nrrrrrrrrz
c32K|]}t|ywrgrrKitems r)rLzrender_html..(s?dD ?rhrrrrrrur/,rrrzrz
rryc 3K|]g}t|jddt|jdddjd|jdgddDiyw)rrarc32K|]}t|ywrgr)rKmap_names r)rLz(render_html...9sThCMTrhrNr)r*rr\)rKrs r)rLzrender_html..7spuyy'(#eii .C*D)EQ88T%))FB:OPRQR:STTUWsA-A/rz-c32K|]}t|ywrgrrs r)rLzrender_html..=sIdD Irhrrrrz @ rrZr<r=r[rBrAr!r"r#r\r0r1r2rqr]rrrnrmc 3K|]W}t|jddt|jddt|jddYyw)r/rrz r=rNr*rrs r)rLzrender_html..s]txx}%&aDHHSM(:';;PQTUYU]U]^hUiQjPkkrssAArorrurvrwryrr|c3ZK|]#}t|ddt|d%yw)r6z: rdNrrs r)rLzrender_html..s9 4 #$%RD,<(='> ? s)+rorlrnr}rdrvrac3:K|]}dt|dyw)rrNr)rKrs r)rLzrender_html..sOr6#b''2Orrerrrrc 3K|]V}t|jddt|jddt|jdXyw)ruz recordVaHexz dist=rNrrs r)rLzrender_html..sZ# 488E?#$GC0G,H+IWZ[_[c[cds[tWuVv w# sAAz/mrrstartHexz..endHexz
rrr$u Map Animation EXE Pattern Review

Map Animation EXE Pattern Review

타일 교체/offset 가설과 EXE animation dirty redraw 근거를 분리한 요약이다.

결론: rz
rz@
rzM0x40 animated maps
rzE0x40 cells
r/rzYtile replacement sequence hits
rzWmap1-near palette candidates
rzVdirect animated tile writes
rzZcoordinate-only tile-write hits
rz\coordinate hits in animated roots
rzScoordinate hits rejected
rzZmap_a self-blit command samples
rzVmap_c unpromoted candidates
rumap_c3 whirlpool frame loops

승격/미승격

확정: rrru,

부정 증거: ruN

미확정: u=

map_review 미리보기 의미: rrz. ruT의 증거로 쓰지 않는다.

Known Tile Sequence Scan

)rlrmzcontiguous hits by encodingu

Individual Tile ID Occurrences

개별 u16 값은 EXE 안에 흩어져 있지만, 순차 치환 테이블 형태로는 잡히지 않는다.

)ruz u16 hit countrz sample VAsu

Tile-Write VM Command Scan

tile-grid write handler 자체는 확정이지만, 현재 known 0x40 source tile id를 직접 써서 모닥불/폭포를 재생한다는 증거는 없다.

summary: z

    c3:K|]}dt|dywz
  • z
    • Nrrs r)rLzrender_html..sNT4D {%(Nrz
)rhandlerr[rrru

Coordinate-only aligned hits

좌표만 0x40 영역과 겹치는 경우다. tile id가 animated source tile이 아니므로 animation proof로 승격하지 않는다.

) VArrux,yr best rootrzcontaining root groupr) r$r$r$r$r$r$r$r$noneu

Rejected raw animated tile hits

known animated tile id처럼 보이나 좌표가 맵 범위를 벗어난 raw byte overlap 샘플이다.

)rrur rreason)r$r$r$r$r u

Rejected ASCII/resource overlaps

리소스 문자열 주변에 걸린 0x58 byte는 command로 승격하지 않는다.

)rz tile @ x,yrz ascii contextr uE

Surface Self-Blit / Cache Command Scan

0x40 dirty redraw가 아니라, 실제 CNS surface 내부 cache를 갱신하는 경로다. map_a/map_b에는 강한 근거가 있으나 map_c 해변은 아직 이 경로에 묶이지 않았다.

status: c3:K|]}dt|dywrrrs r)rLzrender_html..(sUT4D {%(Ur)rr<r=z(

map_a / map_b rect tables

)baser<r!rect VAr"r#)r$r$r$r$r$r z2

map_a promoted-like command samples

)rrr0r1zptr/arg8rqu

map_c root candidates, not promoted

map_c root의 0x65/0x02 행들은 trailing 값이 local pointer처럼 보이며, 아직 0x004256D1 self-blit helper 소비자로 연결되지 않았다.

u

map6_26c / map_c3 Whirlpool Object Animation

이 섹션은 layer1 0x40 타일 strip이 아니라, map_c3.cns extra-object 프레임 루프 근거다.

status: z2

candidate placement: rc3:K|]}dt|dywrrrs r)rLzrender_html..8sRT4D {%(Rrz9

source rect table 0x0052df6c

)r!rr"r#)r$r$r$r z(

slot 0x0c frame loop hits

)rslotrmznearby x,y candidatesrqz

resource refs

)rurz resource refrzplacement statusu

map1 Palette Candidates

후보 command stream shape는 맞지만 map root 실행 연결은 아직 증명되지 않았다.

)rrrrr rznearest animated scene recordsz)

Carried EXE Evidence

rFr)rindentz
)r*r\rr@rr8r)data tile_write rect_copymap_c3rktile_write_handler_rowstile_write_coord_rowstile_write_false_rowstile_write_ascii_false_rowsrect_copy_helper_rowsrect_copy_rect_rowstabler"rect_copy_map_a_rowsrect_copy_map_c_rowsmap_c3_rect_rowsmap_c3_loop_rowsmap_c3_resource_rows sequence_rowsencrcandidate_rowsscriptrr nearest_textrrdocs r) render_htmlr)s},-J12I 1 2Fj)  SX'( 0S[)*+7 3 N# $SX'( 0 KK?c+.>? ? K !    :>>"=rB%$ !ST^$G , F  F 3s8}oQs3s8}o . %& 'S./0 8S!12345##&0A(B(Hb'M'Mh'W#X"YY` b KK #ww'89?RDDEWX^\^  . . KKIcggi.DRa.HI I 8>>"GL   ST^$G , F 3s8}oQs3s8}o . %& ' () *    $>>"=rB #  ST^$G ,3v; CCM?!CCM? C %& ' ' ( () *   # # ==!6;   S'( 0   # $ /4 IIgr* D  & &S8!456g> &)*)*S$019()()    *==!5r:  S'( 0S*+,G 4  !  !S-./w 7S() 1    (==!:  kk K(   CM"S012':   O)*+?@ S[)*'2C O$C()OS]2A=NOO    N+, &''(++;<B{{# #   SWWT]+,G4swwx()*"S-A,BCCGGFO$(.B33J?@ACQXIYI_]_HdHdemHnDoCpqVZZ 567{3vzzRZG[C\B]^GKK)*   (l#J9oGw w w >"*W"567?w >8 ?w @ Z ' ()Aw @*Aw F #7;;/A#BCDGw FEGw H #7;;/B#CDEIw HFIw J #7;;/S#TUVKw JWXKw JY\\c\g\giB]CYDXEKw JEKw L #7;;/J#KLMMw LNMw N #7;;/V#WXYOw NZOw P #7;;/W#XYZQw P[Qw R #7;;/_#`abSw RcSw T #7;;/U#VWXUw TYUw V #7;;/O#PQRWw VSWw X #7;;/O#PQRYw XSYw Z #7;;/P#QRS[w ZT![w d"%Z %>!? @ew dABew dCFjQ\F]B^A_ew d`aew dbeeop}e~aaAew dA(ew f),J7H,I(J'Kgw fL$gw l%( >(B$C#Dmw lE9mw n:=TB[=\]f=g9h8iow njlow nmpptvOqPQ]q^m_l`ow n`ow vE}UVww vWww ~C_UVw ~W"w H#&j&;" Iw J NZ 5MN NOKw JPKw NRTklmOw NnOw T}@U@CZBYCDEUw TEUw Z<>S>qXpWqrs[w Zt[w `LNiOHoGnHIJaw `J!aw j"%Y]]8%kw j? kw l UY]]> 4e CdJ?D!I 22>>ySZ>[  I'KLMQ  ?4 5 6 8r+__main__)r(rr_r')r)r(z int | Noner1rr_r')r;rr<rr_r)rAr[rBr[r_ list[int])r^r6r1r'r_z bytes | None)rAr[rr`r_dict[str, Any])rg)rAr[rrrrr_r')rAr[rr`rr7r_r7) rAr[rr`r$rr%rr_r`)rr7r_r`)r_r7)rz list[str]rzlist[list[Any]]r_r')rr7r_r')r_None)5__doc__ __future__rr%r8rSsys collectionsrpathlibrtypingrr;insertr'__file__resolveparentbuild_map_animation_tile_reviewrrr probe_exe_scene_tablesr r r parentsrrr.r0rrr"__annotations__r*r2r=rEr_rrrr+rcrrrrr)r4__name__r0r+r)rHs # 3tH~--/6678 ML H~''* ] Ul Ul==DD  '  . 184.@" 8  AH'6[ ["[%[ [| "    4jZ_D0fJZ l^ " zFr+