.Lj<ddZddlmZddlZddlZddlZddlmZddlm Z ddl m Z m Z m Z mZddlmZmZmZeej)j*dZed z Zed z Zed z Zd Zd ZdZdZdZdZdZ dZ!dZ"dZ#dZ$d dZ%d!dZ&d"dZ'd#dZ(d$dZ)d%dZ*d&dZ+d'dZ,e-dk(r e.e,y)(aClassify direct selector/selected-root writers around scene route execution. The global mode/state frontier narrowed the next proof target to live writers of 0x004576da / 0x004576db / 0x0059de30. This pass is intentionally small and strict: it enumerates every direct EXE reference to those globals, separates save/load restore from VM command handlers, and records what is grounded versus what still does not promote to a live scene/event route producer. ) annotationsN)Path)Any) find_functionfunction_rangeshx text_refs) offset_to_va read_sections va_to_offsetz Hwanse2.exeoutwebi8Di DivEivEi0Yi5-Dim@i3Bi@iɭ@i@cVtj|ddSt|dS)NT)quote)htmlescapestr)values 8tools/build_selected_root_live_writer_frontier_review.pyhr/s% ;;U]r$ GGE $ GGcvt||}||dzt|kDrytjd||dS)N KKOhhvsQw' ) Krc t|||}|sy|d}|tz dz}|tz dz}t|t||tk\r|nd|tk\r t|dnd|tk\r|nd|tk\rt|ddSddS)Nrr) entryVaHex handlerVaHexgeneralDispatchIndexgeneralDispatchIndexHexsaveSelectorSliceIndexsaveSelectorSliceIndexHex)r-GENERAL_DISPATCH_TABLE_VASAVE_SELECTOR_DISPATCH_SLICE_VAr)r r! handler_var+entry_vaabsolute_indexsave_slice_indexs rdispatch_entry_forr<Fs c8Z 0D AwH!::q@N #BBqHl:2:>W2W]aBa6a"2gk@HLk@kR(8!%<   rv  rc|tk(r |dvrddddS|tk(rddddS|tk(rd dd dS|tk(rd dd dS|tk(rd dddSddd|ddS)N> selectorA selectorBselector-byte-writerzgrounded-vm-writer-primitivezgopcode handler copies stream operands +2/+3 into selector bytes, then switches to a fixed root pointer.)role promotionevidencesave-load-restorezexcluded-save-loadz`restore path reads selector bytes and writes selectedRoot after loading persistent state blocks.selected-root-indexed-writerz\selectedRoot = dword table[index] where table comes from stream +4 and index from stream +1.%selected-root-direct-or-inline-writerz\mode 0 sets selectedRoot to inline stream+4; mode 1 sets selectedRoot to stream dword at +4.selected-root-executorzgrounded-consumer-not-producerzUif selectedRoot is nonzero, push continuation and set current stream to selectedRoot.zunclassified-refreview-requiredzdirect z reference outside known rows.)SELECTOR_BYTE_HANDLER_VASAVE_LOAD_RESTORE_VASELECTED_ROOT_INDEXED_WRITER_VASELECTED_ROOT_DIRECT_WRITER_VASELECTED_ROOT_EXECUTOR_VA) function_varef_vanames r classify_refrQWs.. - -.;F  **'-z  5527v  44;7v  //,9o  #&dV#AB rc Vtj}t|}t||}t ||t t ||t t ||td}g}|jD]\}}|D]}t||}|rt|dn|} |t|t| |rtt|dndd} | jt| |||j| dttt!||tgdddtt"t!||t"d gdd tt$t!||t$d gdd tt&t!||t&d dgdg} g} t)|t*} | Mt-dD]?}t/j0d|| |dzzd}| j|t|dA|D cgc] } | ddk(s | }} |D cgc] } | ddvr|  }} |D cgc] } | ddk(s | }} |D cgc] } | ddk(s | }} t3d|j5Dt7|t7|t9d|Dt7|t7|t7|dk(t7|dk(ddd }d!d"d#|d$tt d%d&tt d%d'ttd%g| |tt*| d(gd)gd*d+ Scc} wcc} wcc} wcc} w),N)r>r? selectedRootstartVaendVa)rPrefVaHex functionVaHexfunctionEndVaHexzselector byte setter)z=case 0: push continuation stream+4; jump to dword[0x004dc518]zicase 1: selectorA=stream[+2], selectorB=stream[+3]; push continuation stream+4; jump to dword[0x004dc514]z9case 2/3: call save/load restore 0x00423319 with mode 0/1)labelr1dispatch semanticszselectedRoot indexed writerz-selectedRoot = streamTable[index]; advance +8zselectedRoot executorzNif selectedRoot != 0, push continuation and set current stream to selectedRootzselectedRoot direct writerz&mode 0: selectedRoot = inline stream+4z)mode 1: selectedRoot = stream dword at +4 rrr)index rootVaHexrAr@>rErFrDrBrHc32K|]}t|yw)N)r).0r+s r zbuild_report..sJDc$iJsc3,K|] }|ddk(yw)rArGNr`rows rrazbuild_report..s(aUXV8P)P(asr/Fzselector bytes and selectedRoot writer/executor VM primitives are grounded. This proves how a decoded stream can choose and execute a selected root, but it still does not prove which live field/scene route produces that stream in normal gameplay.) directRefCountselectorByteWriterRefCountselectedRootWriterRefCountselectedRootExecutorFoundsaveLoadRestoreRefCountreviewRequiredCountselectorByteWriterGroundedselectedRootWriterGroundedrouteProducerPromoteddecisionz0hwanse-selected-root-live-writer-frontier-reviewz8tools/build_selected_root_live_writer_frontier_review.pyz?selected-root-writer-primitives-grounded-route-producer-pendingr>)rPvaHexr?rS) tableVaHexfirst32)ze0x00406dbb is a real VM handler table entry and writes selectorA/B from stream operands in subcase 1.z=0x0040ad9b and 0x0040ae0e are selectedRoot writer primitives.z10x0040adc9 is the selectedRoot executor/consumer.zO0x00423319 remains a save/load restore bridge and is not a live route producer.)zcFind the live scene/field root that reaches the selector byte setter with a normal gameplay stream.zgProve a current stream/root in actual play is dispatched through the selectedRoot writer/executor path.zqConnect this selected-root layer upward to map transition, dialogue branch, or encounter setup producer evidence.) kindsourcestatussummarywatchedGlobals handlerRowsdirectReferenceRowsselectorRootTable newEvidenceremainingProofs)EXE read_bytesr rr SELECTOR_A_VA SELECTOR_B_VASELECTED_ROOT_VAitemsrintrupdaterQr)rIr<rKrMrLr SELECTOR_ROOT_TABLE_VArangerrsumvaluesrany)r r! functions refs_by_namerowsrPr+rOfunctionrNre handler_rowsselector_rootsroot_table_offr]rootselector_byte_writer_refsselected_root_writerssave_load_rowsreview_requiredrws r build_reportr~s{ .. CS!HX.IsHm<sHm<!#x1ABL "$D"((*  d F$Y7H6>#hy12FKvJ!#KBJBs8G+<'=$>PT C JJ|K> ? KK   ,78*3:RS 3>?*3:YZIJ  -89*3:STjk  2=>*3:XYBDop  /L>N!(,BCN!2Y KE%%dC%!)1KLQOD  ! !E4"I J K15 ^F G]8] ^ ^ v;c c &*PcS[BS.SsTOTJL4G4G4IJJ&)*C&D&)*?&@%((a\`(a%a#&~#6"?3&)*C&D&I&)*?&@A&E!& TG$CLS 2m+< = 2m+< =#b1A.B C $#34%   - 1!_QTs*2 LL L L!.L!8 L&L&c|d}d|dfd|dfd|dfd|dfd |d fg}d jd |D}d jd |dD}d jd|dD}d jd|dD}d jd|dD}tj|d}dt|dd|d|d|d|d|d|dS) Nrwrvz direct refsrgzselector writer refsrhzselectedRoot writersrizreview requiredrlrc3XK|]"\}}dt|dt|d$yw)z
z z
Nr)r`kvs rrazrender_html..s/fX\XY[\/!vZ!v]Sfs(*c3RK|]}dt|ddt|ddt|jdxsijddttj|jdd d d j d |d Dd yw)rY
r1rZr0
F ensure_ascii rc3:K|]}dt|dyw)z
z
Nrr`items rraz(render_html...sL4qwiv.Lr[z N)rgetjsondumpsjoinrds rrazrender_html..s   Wz!C,?*@)AB +1r66|DEFkRSTXT^T^_b_f_fgq_rBGUHSIRJJwwL3{;KLLMN sB%B'ryc3K|]a}dt|ddt|ddt|ddt|ddt|d d t|d d cy w)rrPrrVrrWrrArrBz
rCzNrrds rrazrender_html..s   V~j3z?);(<=s?+,-[3v;8HI[!"##:1S_;M:NO sA'A)rzc3:K|]}dt|dywz
  • z
    • Nrrs rrazrender_html.. sT$$qwiu-Trr}c3:K|]}dt|dywrrrs rrazrender_html.. sOagYe,Orr|Fra{ Selected Root Live Writer Frontier
    index remaining work mode/state frontier text consumer selected root consumer JSON

    Selected Root Live Writer Frontier

    rpz

    z5

    New Evidence

      z

    Handler Rows

    z
    handlerdispatch entrysemantics

    Direct References

    zP
    global/reffunctionclassification

    Remaining Proofs

      z

    Raw JSON

    
  
    

    



)rrrr)	reportrwcards	card_htmlrref_rows	remainingrCpayloads	         rrender_htmlrswYG	6(#$	 012	)E!FG	)E!FG	G$9:;
Ef`effI77-(
Lww/0
HT&AR:STTIwwO
9NOOHjje4G$H
!{#	

deqcqrfgoeop	
;rs#
MLH~''*
]
Ul
Ul&",

#%!",&!+H1	"$Nqh^B

z
TV
r