HjSdZddlmZddlZddlZddlZddlZddlmZm Z m Z ddl m Z ejjdee ej#j$ddlmZmZe ej#j,dZedz Zed z Zed z Zd Zgd Zidd dd dd ddd ddd dddddd dd dd dd dd dd dd dd dd iddddddddd dd!dd"dd#dd$d d%d d&d d'd d(dd)d d*d d+dd,did-d d.d d/d d0d d1d d2d d3d d4d d5dd6d d7d d8d d9dd:dd;ddd d?d d@d dAddBd dCddDddEd dFd dGd dHd dId dJdd d dKd dLd dMd idNd dOd dPddQd dRd dSd dTddUd dVddWd dXd dYd dZd d[d d\dd]dd^d id_dd`ddad dbddcd dddded dfd dgddhd did djd dkd dld dmd dnddodidpddqddrddsd dtd duddvddwd dxddyd dzdd{dd|dd}dd~ddd ddidddd dd dd dd dddd dd dd dddd dd dd dd dddd ZddZddZddZ ddZ!ddZ"ddZ#ddZ$ddZ%ddZ&ddZ'ddZ(ddZ)ddZ*ddZ+ddZ,dddZ-ddZ.ddZ/ddZ0ddZ1ddZ2dddZ3ddZ4dddZ5ddZ6dddZ7ddZ8ddZ9ddZ:ddZ;ddZddZ?ddZ@ddZAddZBdddZCddZDddZEddZFddZGddZHeIdk(reHyy)zABuild a review page for layer1 0x40 animation-redraw map regions.) annotationsN)Counter defaultdictdeque)Path)decompress_cns parse_imageout extract_fldz Hwanse2.exe@))z.texti@ii)z.rdataiCiYi)z.dataCi  !"#$%&'()*+,-./0123456789:;<=>?ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ctdz jd}tj|j dddj j dS)Nzmaps.jsutf-8encoding=r ;)OUT read_textjsonloadssplitstriprstrip)texts z&connected_components..s"s4y#d)SYPSTXPY.Zrkey) setpoprpopleftremoverminmaxlensorted)rcellby_xypending componentsstartqueuecoordsrrneighborcoordcomponent_cellsxsyss rconnected_componentsrs6;  ? KKa%0 1  2 5Y5567  =sB=ctt|dz j}t|\}}}}}|||dz|dzdS)N.cnsr)rrcolumnsr)r EXTRACT_FLD read_bytesr )stemdecodedrr_palette_pixels_bpps r tileset_sizersMktfDM9EEGHG-8-A*E68Wdf"fXZl [[rctt|dz j}t|\}}}}}||zdzdzdz}g}t |D]} ||dz | z |z|| z |z} |dk(r|j t | d|:|dk(r[g} | d|dzdzD]9} | j | dz t| |ks&| j | dz;|j | td |||||fS) Nrr-r.rr rrrzunsupported tileset bpp: ) rrrr rrlistr ValueError) rrrrpalettepixelsbppstriderrrvaluesbytes rload_tileset_indicesrs1ktfDM9EEGHG*5g*>'E67FCs{RB&! +FD 6] @fqj1n.&1*1FG !8 KKS%[) * AXF.uqyQ./ / dai(v;&MM$+. / KK 8>? ? @ &'4 ''rc |sgSg}|dx}}|ddD]/}||dzk(r|}|j||d|dd|dd|x}}1|j||d|dd|dd|S)Nrr rrrendstartHexendHex)r)indicesrangesrpreviousrs rpalette_rangesrs  Fqz!EH! HqL H  hbs DTbdemnqdr`stu   !  MME("U3K@P^`aijm`n\opq Mrc@|sy t|dS#t$rYywxYw)Nr)intrvalues r parse_hex_var s+ 5"~ s  cN|jjdr|ddS|S)Nr)lowerendswith)names rnormalize_resource_namer )s& --f549?4?rctdz }|jsgStj|j d}g}|j dgD]p}t |j d}t |j d}|j dgDcgc] }t|}}t|j dxsg}|j d r(|j d d k7r|j|d |j|j d |j d |j d |j d|j d|j d||tt|tt||j d|j dd s|Scc}w)Nz*scene_seq_resource_record_link_review.jsonrrgroups rootVaHex rootEndVaHex resources fieldMapsmapunboundid contextKind contextLabelselector linkClassevidenceStatus) rrrrrrstartVaendVamapsrrr) rexistsrrrrrr rrrr) pathpayloadr groupstart_vaend_var rrs rload_scene_resource_groupsr#-s~ = =D ;;= jj9:G FXr*  + 67eii78?DyyVX?YZt,T2Z ZEIIk*0b1 99U  % 0I = KKe % iio$yy7 % . 9!IIj1"YY{3 % . 9#s4y)#C N3"YY{3"')),<"=   . M)[s!G cg}tdz }|jr tj|j dD]}|j d}t |ts%|j|j d||j dxsd|d|j d |j d gDcgc] }t|c}|j d gDcgc]/}|j d st|j d d 1c}di}|D]}|d|df}|||<t|jdScc}wcc}w)Nzscene_manifest.jsonrrrecordVar recordVaHexr08x sceneIdHextilesetsrr )rr%r&r(r)rc |dSNr%rrs rrz$load_scene_records..cs C Orr) rrrrrr isinstancerrr rr)recordsrr record_var itemdedupedrs rload_scene_recordsr2MsgG & &D {{}::dnngn>? C +Ii- NN775> )#&77=#9#Qr)C=Q"%'',"7KN77S]_aKb c4!8!> c\_\c\cdoqs\t"JTXx|yAyABHyI"9$((62:N"O"J   G5z3z?+  '.."(C DD!d"Js?E'E>Ec |jdxsg}|jdxsg}|jd|jdxsd|jdxsd|jdxsd|dd|ddtt||ztt||z|jd xsd|jd xsdd S) Nrrrrr*rrrrr) rrrrrr animatedMapsanimatedTilesetsrr)rrr)r  animated_mapsanimated_tilesetsrrs r group_summaryr8fs 99V  "D +&,"IiioIIj)/RYY{+1r .17RRar]s4y=89"3y>4E#EFYY{+1r))$45;  rcH|jd|jd|jdt||dz |jdgdd|jdgdd|jd|vtt|jdg|zd S) Nrr&r(r%r)rrr)rr&r( distanceBytesr)r animatedMapr5)rabsrr)recordr6r7root_vas rscene_record_summaryr?wszz% zz-0jj.Wvj'99:JJz2.r2ZZ R0!4zz%(M9"3vzz*b'A#BEV#VW  rc|Dchc]}|d c}|Dchc]}|d c}ttdScc}wcc}w)Nr sourceTileset)r4r5r  sceneRecords)r#r2)rrs rbuild_palette_binding_contextrCsC/34U4=ABcS1B,.*,  4Bs : ?c t|dddS|jdxs t}|jdxs t}|jdxsg}|jdxsg}|Dcgc]:}|jd'|jd |dcxkr|d krnn|<}}|Dcgc]}t|||}}|Dcgc](}|jd|jd '|*} }g} | D]D}||vrt t |dz t |d z } | j | |fFg} t| d dd D](\} }t|||} | | d <| j | *t|fd ddDcgc]}t|||}}|Dcgc]}|ds|ds|}}|Dcgc]}|d dks |ds|ds|}}| Dcgc]}|d dks |ds|ds|}}|rd}d}n|rd}d}n|rd}d}n |rd}d}nd}d}|dd|| ||||dScc}wcc}wcc}wcc}wcc}wcc}wcc}w) Nz no-vm-rootz;No VM root was selected for this palette command candidate.statusnoter4r5r rBrrc |dS)Nrr)r0s rrz/palette_root_resource_binding..s 47rrrr:c&t|dz Sr,)r<)rr>s rrz/palette_root_resource_binding..sc'C O:S6Trrir;i@$resource-group-contains-animated-mapz[The VM root falls inside a selector-root group that also references animated map resources.z$resource-group-contained-nonanimatedzThe VM root falls inside a selector-root group, but that group does not reference the currently known 0x40 animated maps/tilesets.z%near-animated-scene-record-unverifiedz`The VM root is close to an animated scene/resource record, but not inside a selector-root range.z'near-animated-resource-group-unverifiedzeThe nearest selector-root group references animated resources, but the VM root is outside that group.zmap-binding-unprovenzZNo resource group or scene record currently binds this VM root to a specific animated map.rr')rFrcontainingGroups nearestGroupsnearestSceneRecordsnearestAnimatedSceneRecordsnearestAnimatedGroupsrG) rrrr8rr<rrr?) root_va_hexcontextr6r7r r.r  containingcontaining_summaries ranged_groupsnearest_groupsdistancenearest_group_summariessummaryr=nearest_recordsrcontained_animatednear_record_animatednear_group_animatedrFrGr>s @rpalette_root_resource_bindingr]sA;'G&0mnnKK/835M $67@35 [[ " (bFkk.)/RG  99Y  + '0B0NSXYbScgnSqvw~qS J akkW\M%@QRkk(.vu%))I2F2RW\W`W`ahWiWuUvMvN1 J  s7U9%556GeGn/BcJ\F]'#o*>&*HcR_N`dghzd{/#o2F&2PVYZhVimprDnE7l 7T 8q :v'k'#'00.';!4  g lv sT!`<5%UZ^_U_%,!`a ^$(%()>)>)@%A!'l"(1     %=D.7|$i &!& 1 1" 5 u2eC[)9U K i  "a( s D D D"cZtD]"\}}}}||cxkr ||zksn|||z zcSyN PE_SECTIONS)va_namevmasizeoffsets r va_to_offsetrs?$/' sD& " !sTz !R#X& &' rcZtD]"\}}}}||cxkr ||zksn|||z zcSyr{r|)rrrrsection_offsets r offset_to_var sA,73(sD. V ;nt&; ;&>12 23 rc t|}|yg}|}tdD]X}|t|k\ry||}|dk(r|cS|dzt|kDry|jt |||dz|dz }Zy)Nr)rrrrtuple)exeptrrentriescursor_rs rpalette_list_entriesrs # F ~/1G F 3Z  SX F  D=N A:C uS&1*567!   rc*|jdxsi}|jd}|jd}t|trt|tr ||k\r||z dznd}|ddddS|dk\s |d kr |d k\rd |d dS|d k\rd|ddSd|ddS)Nrrrr zunknown-palette-scopez>No bounded palette index range was available for this command.)classpaletteEntryCountrGrbroad-screen-palette-transitionzvTouches a broad palette range; treat as screen fade/transition evidence, not a localized map animation loop by itself.r>zmedium-palette-transitionzgTouches a medium palette range; this can be an effect/fade and needs map-root binding before promotion.zlocalized-palette-candidatezbTouches a relatively small palette range; still needs map-root execution binding before promotion.)rr-r)r palette_rangerrrs rpalette_effect_scoper$sGGG$*M   g &E   E "C)%5*S#:NSVZ_S_C%K!OeiE },!%T   | #+6!&M   {0!&}  /"t rctjd|}g}d} |j||dkr |St}|Bt fdt Dd}|j d|d|dt||k\r |Sdz}o) Nz#dword_references..LsII%DT3nWeioXHsADHsHXHDIs& &?rr')r~sectionr )structpackfindrnextr}rr) rr~limitneedlerefsrref_varrs @rdword_referencesrBs [[r "F D E &%( A:  Kf%  I IKNOG KKF3<0WE F4yE! K  rc:||}|dvr|dzt|kr||dznd}|dzt|kDr d|dd|dS|d k(r3|dk(r.||d z}tjd ||d zd}d |dd|S|d k(r@|dk(r;||d z}||dz}t||d z|dz} ||dz}d|dd|d| d|S|d k(r)|d k(r$||d z}||dz}||d z}d|dd|d|S|dk(r(|dk(r#tjd ||d zd}d|dS|dk(r)|dk(r$||d z}||dz}||d z} d|dd|d| S|dk(r)|d k(r$||d z}||dz}||d z} d|dd|d| S|dk(r(|dk(r#tjd ||d zd}d|dS|dvrH|dk\rC|dzt|kr2tjd ||d zd}t | d|dd|dSd|dd||dz||zj dj S)NrFrGr rrrrz/mz truncatedrFrrrz0x38/m0 list-step ptr=0xr'z repeat=rrz0x38/m1 range-step-to-rgb 0x+z rgb=z0x38/m2 range-step-to-backup 0xrGz0x39/m0 list-set-current ptr=0xz!0x39/m1 range-set-current-gray 0xz value=z 0x39/m2 range-set-backup-gray 0xz0x39/m3 list-set-backup ptr=0xrrrr!r"r#z -> 0x )rr unpack_fromrrhexr) rrlengthopcodemoderepeatrrrvrgbrs rcommand_summaryrTs [F "(1*s3x"7s6A:Q A:C s|2dV:6 6 T>dai!_F$$T3 ;A>C-c#YhvhG G T>dai OE OEFQJ!45C!_F1%AeWE#hW]V^_ _ T>dai OE OE!_F4U3KqxPVxX X T>dai$$T3 ;A>C4SI> > T>dai OE OE OE6uSk5'QVPWX X T>dai OE OE OE5eC[%PUwW W T>dai$$T3 ;A>C3C9= = 55&A+&ST*X[\_X`J`  sFQJ7:   (s|6#c3 3 s|1S!fvo>BB3GH I P P RRrc :g}|}||krt||kr||}tj|}|||z|kDr |St|}|j |||d|dnd|d|d|t |||d|dk(r |S||z }||krt||kr|S)Nrr'r)rr~vaHexr opcodeHexrrXr)rVM_OPCODE_LENGTHSrrrr) r start_offset max_offset max_commandscommandsrrrr~s rparse_vm_streamrsH F : #h-,">V"&&v. >Vf_z9  O& ! *,.2bXd !&. *3?   T>  O &' : #h-,">( OrcBtdxsd}tt||dz}t||dz }t|dz|}g}t ||dzD]}t |||}t |D cgc]\} } | d|k(s| } } } | s:| d} | } tdt|| z dz }t|}|t||d ng}g}|D chc]} | d }} |D]|} | d d vs| ddzt|kDrtjd || dd zd}t|}|M|j| dd|d||vxs||cxkxr|kncd~t|| dzz|zt|d zztd|Ddzz}|d zdk(r|dz }|j|||d|dnd| t|| |t|||dd||ddD cgc]} | d c} d |sdddS|jdd|d}|ddk\r|ddk\r |d dk\rd!}n|dd k\r |d dk\rd"}nd#}||d$|d%|d|d|d |d&|d'|d(|d)|d*tdt|dz d+d, Scc} } wcc} wcc} w)-Nrrrrmr rr)rrrrrrrr')fromVatargetVainsideParsedWindowrc3,K|] }|ds dyw)rr Nrrrs rrz,palette_command_alignment..s)ICshkmAiBICs rrrX) rootOffsetrootVar commandIndex commandCountcommandsBefore commandsAfterdirectReferenceCountdirectReferences branchTargetsscorepreviewzunbound-static-candidatezNNo plausible local VM command stream alignment found around this byte pattern.rEc|d|d|dfS)Nrrrrrs rrz+palette_command_alignment..sS\3~3FL\H]$^rT)rreverserrrvm-aligned-local-highzvm-aligned-local-mediumzvm-aligned-local-weakrrrrrrrzLocal alignment proof only. This shows the palette bytes fit the generic VM command stream shape; it does not yet bind the stream to a specific map root.) rF bestRootVarrrrrrrrralternateRootCountrG)rrrrrrrrrrrrrpsort)rcommand_offset data_startdata_endrupper candidatesrrrcommandboundary_indexesboundary_indexbeforeafterr>rbranch_targetscommand_offsetsr target_offsetrbestrFs rpalette_command_alignmentrsj).QJ3s8Z(23H  NR/ 0E $h /EJunq01, "3u58A(8KsneWwW_O`drOrEss )!,As8}~59:u%:A:MWA6SU QJE#!3:3Fr'#/D . #H "(!&(+D $(!/!4>FsmL7GI.L  ;, Z 0d  OO^hlOm a=D Nq T*:%;q%@T/EZ^_E_( n  "tO'<'A*(;'^,^,/0o. $%; < !34o.g ?!!S_q%89l qtF>Ms6JJ J% J cj tjsdgdStj}|sdgdSt|t |g}t dxsd}|dz}t |tt|dz |D]U}||}|dvr||d z}t|} | $d} |d k(r|dk(rtjd ||d zd} t|| } | rvt| d krgt| D chc]} | d c} }tfd|Dr5d| dd|dd| dt| ||dzt|t |dt|ddt |dddd } n|d k(r|dvr||dz}||dz}||zd z }|r|dkr|kr|k\rd| dd||d k(rdnd||d|dd|dd|d k(r||dzn||d z|d k(rt||d z|dznd||d z|dzjddd } n?|d!k(rs|dvro||dz}||dz}||zd z }|r|dkr|kr|k\r d| dd"||d k(rd#nd$||d|dd|dd||d z||d z|dzjddd%} n|d!k(r|d&vrtjd ||d zd} t|| } | rt| d krt| D chc]} | d c} }tfd'|DrTd| dd"||dk(rd(nd)d| dt| t|t |dt|ddt |dddd*} | st!| | d+<t#|| }t|| d,<|| d-<t%||| d.<|r1t'| j)d.xsij)d/|| d0<|j+| Xt-d1|D}t-d2|D}t-d3|D}t/d4|D}d5dddddt|t1t|j3t1t|j3t1t|j3||dd6d7d8 Scc} wcc} w)9Nz exe-missing)rFrz no-indexesrrrrrr rFrrrqc3>K|]}|cxkxrkncywr{rrrmaximumminimums rrz'palette_command_scan..Huw%2722Hrr'0x38zlist-step-to-rgbrrrz&list-overlaps-animated-palette-indices) r~rrkind listPointer entryCount repeatCountrrF)r rrrzrange-step-to-rgbzrange-step-to-backuprrz'range-overlaps-animated-palette-indices) r~rrrrr targetRgb payloadHexrFrG0x39zrange-set-current-grayzrange-set-backup-gray)r~rrrrrrrF)rrc3>K|]}|cxkxrkncywr{rrs rrz'palette_command_scan..9rrzlist-set-currentzlist-set-backup)r~rrrrrrrF effectScoperrscriptAlignmentrresourceBindingc3fK|])}|jdxsijdd+yw)rrFnoneNrrrs rrz'palette_command_scan..Us.t`g ,= > D"II(TZ[t/1c3fK|])}|jdxsijdd+yw)rrFz not-scannedNrrs rrz'palette_command_scan..Vs.yelgkk*;<BGGR_`yrc3fK|])}|jdxsijdd+yw)rrunknownNrrs rrz'palette_command_scan..Ws,nZaGKK 6<"AA'9Unrc3K|]Q}|jdxsijddk(r(|jdxsijdrdSyw)rrrrrNr Nrrs rrz'palette_command_scan..XsX/  KK & ," 1 1' :>_ _ [[* + 1r 6 67T U /sAAzcandidate-static-scanr]zThis is a broad static scan over .data for palette VM command forms. It proves matching command shapes exist, not that a specific map root executes them.) rF indexRangeralignmentCountsresourceBindingCountseffectScopeCounts nearAnimatedBroadTransitionCountrrG)EXErrrrrrrrrrrranyrrrrrr]rrrrpdictrn)indexes_of_interestbinding_contextrr data_offsetrrrrr~rrrentryrrrvrralignment_countsbinding_counts scope_counts$near_animated_broad_transition_countrrs @@rpalette_command_scanrs ::<'R88 .. C &B77%&G%&GHz*/aKX%H SSAx%@A^!V  % 6A: & ! :  T>dai$$T3 ;A>C*34G3w<3. !@u%(!@AHHH "2c(m"( $ 2)+C9~&)'l'*6A:%(\#&w<*,S\#,>(?(*3w<*<&= " #KC t^ OE OE%-!#Cu')9cWnr#h-$ 3719/BX',S5QT+FVdfgjknfobpq6:ai3vz?SRS_GKqyc&1*vz&B!CVZ"%fqj6A:">"B"B3"GG t^ OE OE%-!#Cu')9cWnr#h-$ 8< 4G^',S5QT+FVdfgjknfobpq !_"%fqj6A:">"B"B3"GG t^$$T3 ;A>C*34G3w<3. !@u%(!@AHHH "2c(m"( $6:ai 2EV)+C9~&)'l%(\#&w<*,S\#,>(?(*3w<*<&= " #KC !5c!:C #C,D*-d)C& '&*C" #%>sF%KC! ")FWW./52::<H#*%& OOC }^!~tksttypxyyNnemnnL+.//,(*WSM*73-(  H '7'='='? @A!%f^-A-A-C&D!E!&););)=">?,PSbMl w"Aj"As 9 R+  R0 c|jdsy|ddd}|r|dy|d}||z}||z}||dz|kDryt|dD].\}}t|dD]\}} |||zz|z} | | k7sy0d|||d|d|dS)Nrrrrzrectangular-source-blockr)rFsourceXsourceYrrbaseTile)rr) rr first_row base_tilesource_xsource_yy_offset placement_rowx_offsetr`expecteds rcomponent_source_blockrps == &!!$W-I  ! ,! I7"HG#H)G$$w.#,Yv->#?-' g(>? NHd 8g#55@Hx  -7#H%  rc 6|jd}|sgS|d}|d}|d}|dks|dks ||z|dkDrgS|d|zdk(rtd|d|z dz|}ntd|d|z dz}|Dcgc]}||||||z|z||d k(d c}Scc}w) N sourceBlockrrrrrrr r)rrrrrisPlacedBaseBlock)rr) rr source_sizeblockrrrsource_x_valuesrs rsource_block_candidatesr&s MM- (E  'NE 8_FYH zVq[Hv$5 F8K$K 9%*;y#9E#AA#EuM;y#9E#AA#EF(    7*X5!)U9-=!=     s7Bc  tt}|D]}|d}||z|xxdz cc<g}t|jD]\}}t| t dk\xrt  fd D} Dcgc] }| dz z} }|rd} d} nd} d } |j | Dcgc]}|| c}| | | d |Scc}wcc}w) Nrr rc3:K|]}|dz zdk(yw)rNr)rr`rrs rrz)summarize_frame_groups..s%0dVZ$q/W1LPQ1Q0dsr!same-column-static-source-clusterzlsame source-column layer0 tiles inside 0x40 cells; this is static tile coverage, not an animation frame listzsingle-layer0-tilezY0x40 cell source tile; 0x40 marks redraw coverage; final motion source is not proven here)columnrrdrowOffsetsFromFirstTile confidencerG)rrrrnrallr) rr by_columnrr`r r*rdhas_alternates row_offsetsr,rGrs ` @rsummarize_frame_groupsr1s $/$8I-H~$.!$'1,'-F !23 vUqdS0d^c0d-d@EFuQxG3F F d*d?d@dAdBd*dCdDdEdFd*dGdDdHdId*dJdKdLdMd*dNdOdPdQd*dRdSdTdUd*dVdWdXdYd*dZd[d\d]d*d^d_d`dad*dbdcddded*dfdgdhdid*djdkdldmd*ggdngdodpt|t|t!dq|Dt!dr|Dt!ds|Dt!dt|Dt| t#| |j dud|j dvi|j dvij dwd|j dxi|j dxij dyd|j dzi|j d{dd||gd}|d~Scc} wcc} wcc} wcc} } w)NtilesetColumnsr6 layerTilesetstilesetrr!sourceBlockCandidatesrrrtileSizerrAsourceTilesetSizeanimatedCellCountcomponentCountrplacementComponents animatedCellsuniqueLayer0TileCountruniqueLayer0Tiles frameGroups paletteUsageevidencezlayer1 bit 0x40z#layer0 tile id at each flagged cellzBsame tile column in a 40-column map tileset, separated by +40 rowsz@non-zero palette indices used by the flagged layer0 source tilesznot detected here) flagSource tileSourcesourceGrouping paletteSourcetimingrr z,hwanse-map-layer1-0x40-animation-tile-review0x40z#animation-redraw-consumer-confirmedaAEXE consumers for layer1 0x40, dirty redraw, and palette mutation were found. 0x40 marks cells that must be redrawn because their pixels can change without changing the layer0 tile id at the redraw consumer. Palette-only does not explain the observed spatial motion, so the per-map visible motion stream remains unproven. 0x00425494zlayer1-grid-readz!reads WORD [0x0058d7d0 + index*2]z-viewport scan over layer1 collision/flag grid)r~rrAmeaning 0x0042549czlayer1-0x40-consumerz test cl, 0x40z\flags 0x40 cells into the redraw/dirty byte grid; does not choose alternate frame tiles here 0x0040234cz vm-dispatchz&call DWORD PTR [opcode*4 + 0x00440538]z7command stream dispatch table used by the game/event VM 0x00407686ztile-write-handlerzJhandler table entry at 0x00440698; writes WORD to 0x00595af0 or 0x0058d7d0zTcommand layout uses layer selector, tile id, x, y; then invalidates the touched tile 0x00408d10z!active-object-relative-tile-writezQiterates active object list and writes tile id at object-relative map coordinatesz6variant for object/NPC/event-relative map-grid changes 0x00409f23zactive-object-list-tile-writezXiterates linked active object list and writes tile id at object-relative map coordinatesz0another object-list variant for map-grid changes 0x004255ebztile-invalidatez(called after tile-grid mutation with x/yz%marks one touched map tile for redraw 0x004060dbzpalette-vm-handlerz%dispatch table 0x00440538 opcode 0x38za8-byte palette step command: list-step to RGB, range-step to RGB, or range-step to backup palette 0x00406206z%dispatch table 0x00440538 opcode 0x39z\8-byte palette set command: set current palette list/range or seed backup palette list/range 0x00401036zpalette-list-setterzYreads entries until 0xff terminator and writes RGB nibbles into 0x004676e8 palette bufferzFsets palette entries immediately and marks palette dirty at 0x00559d98 0x004010d2zpalette-list-stepperzEuses 0x0040118e to increment/decrement RGB bytes toward target valuesz&gradual palette transition/fade helper 0x00401518zpalette-range-stepperzKcalled by opcode 0x38 mode 1; walks a palette range toward stream RGB bytesz-range fade helper for current palette entries 0x0040146azpalette-range-step-to-backupzWcalled by opcode 0x38 mode 2; walks a palette range toward backup bytes at 0x00559da1..z#range restore/fade-to-backup helper 0x004015b9zpalette-current-range-setterzOcalled by opcode 0x39 mode 1; writes one gray/RGB byte to current palette rangez(direct current palette range fill helper 0x00401632zpalette-backup-range-setterzNcalled by opcode 0x39 mode 2; writes one gray/RGB byte to backup palette rangez backup palette range fill helper 0x00401699zpalette-backup-list-setterz@called by opcode 0x39 mode 3; reads 0xff-terminated palette listzbackup palette list seed helper 0x00401000zdeferred-palette-applyz^if 0x00559d98 is set, calls 0x00416677 with start 0 and count 0x100 then clears the dirty flagzGapplies changed palette buffer to DirectDraw before presentation/update 0x00416677zdirectdraw-palette-setentriesz?calls IDirectDrawPalette::SetEntries through vtable offset 0x18zIpushes a palette range from 0x004676e8 into the active DirectDraw palette) zBlayer1 bit 0x40 is read by EXE during viewport redraw preparation.zjThe 0x40 consumer marks the same map cells dirty every redraw pass; it does not choose alternate tile ids.zhThe map draw path uses the current layer0 tile id directly, while 0x40 only affects redraw invalidation.zQThe EXE has palette VM handlers and a deferred DirectDrawPalette SetEntries path.zGeneric VM palette opcodes are now length/mode grounded: 0x38 and 0x39 are 8-byte commands, while 0x3a and 0x3b are 4-byte commands.zOpcode 0x38 is a palette step family: mode 0 steps a list toward target RGB, mode 1 steps a range toward stream RGB, and mode 2 steps a range toward backup palette bytes.zOpcode 0x39 is a palette set family: mode 0 sets current palette list, mode 1 fills current palette range, mode 2 fills backup palette range, and mode 3 sets backup palette list.zrThe non-transparent palette indices used by the current 0x40 layer0 source tiles have been mapped from CNS pixels.zA stricter local VM alignment scan promotes a subset of raw 0x38/0x39 byte-pattern hits to VM-shaped palette script candidates.ztVM-aligned palette script roots are now cross-checked against scene/resource groups and nearby map resource records.zThe animated fire/waterfall/water regions sit on ordinary layer0 tile ids; 0x40 dirty redraw is grounded, but the visible motion stream is still unbound.)zhThe exact executed palette command for each map animation has not been bound to a specific map root yet.zLThe palette-cycle timing/order is not fully tied to a specific map root yet.zResource binding is a correlation layer only. A contained or nearby resource group does not by itself prove runtime execution for that map.zBroad static palette-command scans contain false positives unless tied to an executed VM command stream; local alignment reduces but does not eliminate this risk.zjGeneric VM tile-write handlers still exist, but current 0x40 map animation evidence does not require them.)rFrX addresses confirmed unresolvedc3&K|] }|d yw)r9Nrrs rrzbuild_review..s$N#S)<%=$Nc3&K|] }|d yw)r:Nrrs rrzbuild_review..s!HC#&6"7!Hr_c3DK|]}|dD]}|ddk(rdyw)r?r,r)r Nr)rrr s rrzbuild_review..s@4 /4&*MM44s c3VK|]!}|dD]}|jdrd#yw)r;r!r Nr)rrrs rrzbuild_review..s?8!$%:!;8==/88')rrrrrJrr)mapCountanimatedMapCountr9r: sameColumnStaticSourceGroupCount$rectangularSourceBlockComponentCountanimatedPaletteIndexCountanimatedPaletteIndexRangespaletteCommandCandidateCountpaletteCommandAlignmentCounts paletteCommandHighAlignmentCount#paletteCommandResourceBindingCounts"paletteCommandAnimatedBindingCountpaletteCommandEffectScopeCounts.paletteCommandNearAnimatedBroadTransitionCount)zThis review is CNS-grounded: layer1 0x40 identifies animated cells and layer0 identifies the visible source tile used by those cells.zEXE analysis found that layer1 0x40 feeds redraw/dirty marking and that palette changes are deferred into DirectDrawPalette::SetEntries.zPalette index usage is CNS-grounded. Palette command candidates are broad EXE static-scan evidence and must not be promoted to per-map execution proof yet.zPalette command local alignment now checks whether the bytes sit on generic VM command boundaries near 0x00440538 command lengths. High alignment is stronger than a raw byte-pattern hit, but still not a per-map execution binding.zResource binding now shows whether the selected VM root is inside a selector-root resource group or only near scene records. This is a prioritization aid, not final execution proof.zuSame-column tile groups are static source coverage inside flagged cells, not complete animation frames by themselves.zThe old alternate-source-rect model is now demoted for these map animations; keep tile-write VM evidence separate for doors/objects/event changes.z\This does not yet prove the exact palette cycle range, timing, or per-map activation script.)versionranimatedFlagHex exeEvidencerXpaletteCommandScannotesr)rrrnrrrrrr&rrrr1ryrCrrpr)rrr rrrsource_tilesetr#rrrrrall_palette_indicesr  palette_scans r build_reviewrysU ;D D .& hx( ,,/06B",,7THLL2 )%0 # jI'=i'QIm $1HT[]h1iI- . j  t '* (8, HLLR8       $[   o!>!D" !' $SZ !#&:5&A"B 259 &z   (-Od8n-O)P $V,NT(^,N%O  5eWE! " nfafEgY]d8nEg>hjq r# $"3"G&j%g1 %  & N!4!dCSEXYbEc!dE%!d%!de3D9O'(;_ML>!;f'. CN '2 /} ') HX '0 lu '? sW '; zQ '- JF '0 G C '0 G} '1 {g '2 gG '3 mN ': yD ': qI '9 pA '8 b@ '4!Ah '; aj Om\ GJ XD #D !$$N$N!N!!H4!HH03441 58885 *--@)A*89L*M,8,<,<^Q,O-9-=-=>OQS-T0<0@0@ARTV0W0[0[\suv0w3?3C3CD[]_3`2>2B2BCZ\^2_2c2ceKMN3O/;/?/?@SUW/X>J>N>NOqst>u3 6+  kv v!.P,NEg"es> M; N N?N c>tjt|Sr{)htmlescapestrrs rescr~s ;;s5z ""rcg}|dD]}|d}|d}g}t||ddD]5\}}|jdt|dd |d d |d |d |d 7|jd|dk(rdnddt|d|dddj|dt|dd dj|S)Nr?r,rrdT)strictzb#zxzz/
z col r*z+
z

rGz

)ziprr~join)rpartsr r,r canvas_listr`rvs rrender_group_previewsrs3 E]# <( g ueHodC KD%   ""%c/&:";!<=""%&6"7!89#f%=eWE      &0:>a0afgi%jjmnqr|n}m~)).x(9://1ww{/C.DEeFm$%&    , 775>rc8djd|dDS)Nz
c3vK|]1}d|dd|dd|dd|dd|dd |d d |d d 3yw)z(r,r)-(rrz ) rrru · r cellsNr)rrs rrz$render_components..st  )D/"!IdO#4C $7H)TX/IZZc W  a ( 34D;9O8PPV Xs79rrrs rrender_componentsrs' ;;\* rcg}t|ddD]\}}g}|dD]h}|d}t|dD]P\}}|d|z} ||jd"||d zd zd z} |jd | d | d|d|d|d Rj|jd|d|dd|dd|dd|dd|dddj|dddj|dS) Nr;r rrrrrz-.r3r-ihz/

region z : (rrrrrzN)

r*z
zx
0x40 placement grid: flagged map cells and current layer0 tile ids
)rrr) rsectionsrrrrrrr`rhues rrender_placement_gridrsH%c*?&@J y&v. Mc"A )-*@ A  dOf,<LL!PQs#344:cA HN!!"4s/$s4&Q     )D/):!IdO;LCPYZ^P_O``abklpbqarsSS\]dSeRffqrtryryzsArBB   * ` 778   rcfg}t|ddD]\}}|jd}|s|jd|d/|jd|d|dd |d d |d d |ddt|dd|dd|d d|d d|dd|ddddj |dS)Nr;r rr!ru

이 영역은 소스 타일셋의 단일 직사각형 블록으로 떨어지지 않는다. 폭포처럼 넓은 영역은 여러 정적 layer0 tile을 0x40 redraw 대상으로 묶는다.

z!: static source footprint (rrrz) rrrzecurrent layer0 block

현재 맵에 놓인 정적 layer0 블록이다. 대체 프레임 rect 후보가 아니라 animation redraw 대상 footprint로 본다.

zm
source footprint: current layer0 block or grouped tilesr*r)rrrr~r)rrrrr$s rrender_source_block_candidatesrsLH%c*?&@J y m, OO#W%    A% BRASSTUZ[dUeTffhinoviwhxxyzAI{JzKK"#o"6789#I./0#I./0#Gn-.#Ho./J'()   4 U 778   rc2djd|DS)N, c3VK|]!}|d|dk(r|dn |dd|d#yw)rrr-rNrrs rrz render_ranges..sG w<3u:5Jc*o=NaPST\P];__rcr)rs r render_rangesrs 99 rc |d}djd|dddD}d|ddtt|d xsd d t|xsd d S) Nr@rc38K|]}|dd|ddyw)ri(r)Nrrr0s rrz'render_palette_usage..s(atJ'($x.)9;asrlrzj
palette indices used by 0x40 source tiles

rhu+ non-transparent indices · rrz.

top pixel counts: z

)rr~r)rusagetops rrender_palette_usagers  E ))alH[\_]_H`a aC L)*+]5?3:s;<=003CJ3/@A  rc||sy|d|}t||kDrdt||z nd}dj||zS)Nr +r*r)rr)rrshownsuffixs r compact_listr$sJ  6ENE+.v;+>r#f+%& 'BF 99U f $$rc |jdd}|dk(rdnd}d|dt|dd t|jd dd g}|jd xsg}|r|d }t|jdxs|jdxsg}t|jdxsg}|jdt|jdddt|jdddt|dt|d |jdxsg}|rg} |ddD]p} | jds| jdrdnd} | j| jd| d| jdd| jdr|jd td!j | d|jd"xsg} | rg} | ddD]^}|jds|jdrdnd} | j|jd| d|jd`|jd#td!j | d|jd$t|jd%dddj |S)&NrFrrJrr*zcontains rrru · animated: u · maps: rMrr;*r@r&rr:z$
near scene: z; rLz$
near group: z
rG)rr~rrr)bindingrFtaglinesrRr animatedrrY record_partsr=markerrU group_partss rrender_resource_bindingr,s [[3 'FDD&"C SES[M9 S[#678@ E/06BJ1  . 9 `UYYGY=Z `^`aEIIf-34 1#eiic6J2K1LA599Z,-.nS]O:VYZ^V_U``g i kk"78>BO %bq) {F"JJ}5DV9WS]_F   6::e#4"5fXQvzz-?X>YY[\b\f\fgv\w[x y z {  =c$))LBY>Z=[[bcd[[17RN #BQ' [E!IIn5CU9VS\^F   %))D/!26("UYY=WY=ZZabc LL-c'++fb2I.J-K7ST 775>rc^ |jdxsi}g}|jdgddD]}|jdxsi}|jdxsi}|jdd}|dk(rd nd }d j|jd gdd }djd|jdgddD} |jdxsi} |jdxsi} |jd jgdt|jdddt|jdddt|jdddt|jdddt|jdddt|jdddt| jd dd!t| jd"dd#t| jd$d d%t|jd&xs|jd'xsdd(|d)t|d*t|jd+dd,t|jd-dd.t|jd/dd0t| xsdd#t|xs|jd$dd%t | d1|s|jd2|jd3xsi} |jd4xsi} |jd5xsi}|jd6xsi}djd7| j Dxsd}djd8|j Dxsd}djd9|j Dxsd}d:t| jdddt| jddd;t|jd/d<d=t|d>t|d?t|d@t|jdAd<dBt|jd$d dCd j|dDS)ENrtrr6rrrFrrrr*z / rrrc3fK|])}|jdd|jd+yw)r~:rNr)rrefs rrz.render_palette_command_scan..Ws-vSCGGDM?!CGGI,>+?@vrrrrrr~rz / mode r rzrrz"rz(
entries: rz
rGrrzidx rz / cmds rz%
refs: zVNo overlapping palette command candidates.rrrrc30K|]\}}|d|ywz: Nrrrrs rrz.render_palette_command_scan..rs!_ USEE7"3!_c30K|]\}}|d|ywrrrs rrz.render_palette_command_scan..ss[jc53%r% 1[rc30K|]\}}|d|ywrrrs rrz.render_palette_command_scan..tsWJCRw/Wrz{

Palette command static scan

animated source tile palette index range: u · candidates rz&

local VM alignment: z+

resource binding: z'

effect scope: u2 · near animated broad transitions: rz!

a{

candidate palette commands touching animated tile indices
C
VAopcode/modekindrangeeffect scopepayload/listlocal VM alignmentresource binding
)rrrr~rrn)reviewscanrr range_row alignmentalignment_status alignment_tagrrrscope index_rangerrralignment_summarybinding_summary scope_summarys rrender_palette_command_scanrNs ::* + 1rD D88J+CR0 KK(.B KK 128b $==37"26M"MSU **Y]]9b9"1=>yyvIMMZlnpLqrtstLuvv++/06B M*0b     W[[s345 6 w{{8S123 3; ?  @C9==QY[^C_?`>a  b'   (+599Wc+B'C&D   E.   /2%))%?$@ A w{{=1UW[[5NURUVW X% &3O 47 8;;K7L6M N |S9:; <) *-Y]]>3-O)P(Q RZ [^^g^k^klz|_A[BZC C/ 034;3/?.@ A) *-W-R fc8R)S(T U +734 5   6  lm((<(.BKxx 128bXX56<"N88/06BL !_FVF\F\F^!__fcfii[NDXDXDZ[[b_bOIIW,BTBTBVWW^[^M89zNr~rs rrz&render_exe_evidence..sRD$s4yk/Rr\c3:K|]}dt|dywrrrs rrz&render_exe_evidence..sTT4D {%0Trr]zE

EXE consumer evidence

rXzS

confirmed

    zG

unresolved

    a
address evidence
r)rr~r)rrA address_rowsrr\r]s rrender_exe_evidencersm$HL $  SY()s6{#$%s:'()s9~&'(    RH[
VAkindevidencemeaning
zrAz
rr4rr9z cells
r:z components
r=z layer0 tiles		rru 맵 애니메이션 0x40 redraw 리뷰

맵 애니메이션 0x40 redraw 리뷰

layer1 0x40 플래그 셀에서 실제로 표시되는 layer0 타일을 뽑고, EXE의 redraw/palette consumer 근거와 함께 정리했다.

현재 결론: layer1 0x40 dirty redraw 대상은 확정이지만, 불꽃/폭포/물결의 실제 움직임 stream은 아직 미확정이다. palette-only는 시각적으로 맞지 않는다.

rezY0x40 flag maps
zYanimated cells
z\connected regions
rfzdsame-column source groups
rgzkrectangular source block regions
rhzcanimated palette indices
rjzepalette command candidates
rlzehigh VM-aligned candidates
rnzRanimated resource bindings
 z
r*a
mapsource tilesetcoverageflagged regionlayer0 source / animation redraw footprint
zmap_animation_tile_review.htmlrr) rr~rrrrrrrrr write_text)rrX rows_htmlrdocs r write_htmlrs8YGIf~   88;CJ7HH~@CDGHMDN@OPPS1233TUXY]YbYbcfgvcwYxUyTz{*+,Js;K7L6M_]`ax]y\z{$S)*+(-./CC/H.IJ_`cJdIegEFIgJfKK     3!f"));!< =>!!()?!!()9!: ;P,Q+RRY ) 0 1 2& :r__main__)returnr )rr r list[dict])rrrr)rr}rr )rr}rzrrr )rrrr )rPrrQr rr )r) r_zlist[list[int]]r`rrrrarrr)rr}rrrrrr )r~rrr)rrrr)rbytesrrrz&list[tuple[int, int, int, int]] | None)rr rr )r)rrr~rrrrr)rrrrrrrr})r>) rrrrrrrrrr)rrrrrr r{)r rr  dict | Nonerr )rr rrrr)rr rrr#r rr)rrrrrr)rr})rr rr})rrrr})r)rz list[str]rrrr})rr rr})rr rr})rr rNone)rr)J__doc__ __future__rr{rrsys collectionsrrrpathlibrrinsertr}__file__resolveparent decode_cnsrr parentsROOTrrrrr}rrrrrrrrrr r#r2r8r?rCr]reryrrrrrrrrrrr&r1ryr~rrrrrrrrrrrr__name__rrrrsK G" 333tH~--/66782 H~''* Ul]"  ] H!H!H !H ! H  ! H  ! H !H !H !H !H !H !H !H !H !H  !!H" !#H$ !%H& !'H( !)H* !+H, !-H. !/H0 !1H2 !3H4 !5H6 !7H8 !9H: !;H< "=H> !?H@ !AHB !CHD !EHF !GHH !IHJ !KHL !MHN !OHP !QHR !SHT !UHV !WHX !YHZ ![H\ !]H^ "_H` !aHb !cHd !eHf !gHh !iHj !kHl !mHn !oHp !qHr !sHt !uHv !wHx !yHz !{H| !}H~ !H@ !AHB !CHD !EHF !GHH !IHJ !KHL !MHN "OHP !QHR !SHT !UHV !WHX !YHZ "[H\ !]H^ !_H` !aHb !cHd !eHf !gHh "iHj !kHl !mHn !oHp !qHr !sHt !uHv !wHx !yHz !{H| !}H~ !H@ !AHB !CHD !EHF !GHH !IHJ !KHL "MHN !OHP !QHR !SHT !UHV !WHX "YHZ "[H\ !]H^ !_H` !aHb !cHd "eHf !gHh !iHj !kHl !mHn "oHp "qHr !sHt !uHv !wHx !yHz !{H| !}H~ !H@ !AHB !CHD !EHF !GHH !IHJ !KHL !MHN !OHVA (\D  \ (* @@E2" FR F&<$)SX4NbBJ44