Jj:fdZddlmZddlZddlZddlZddlZddlmZddl m Z ddl m Z m Z mZddlmZmZmZmZeej+j,dZed z Zed z Zd Zdd Z d dd ZddZddZddZ ddZ ddZ!ddZ"ddZ#e$dk(re#yy) aInventory strict active-object initializers and their +0xec scripts. This is the broader follow-up to the 0x442c75 caller trace. It scans only valid command-boundary ``opcode 0x08`` object initializers that: * write a valid VA into ``object +0xec`` * write the active/scripted gate ``object +0x14 = 0x0101`` The scan is intentionally strict to avoid the old false-positive raw-byte candidate problem. It classifies decoded ``+0xec`` scripts by evidence: text/prompt payloads, map CNS operands, and direct map-loader references. ) annotationsN)Path)Any)find_cns_strings read_sections va_to_offset)decode_initializer decode_streamhex32is_vaoutz Hwanse2.exeiDBc^t||}|tdt|d||||zS)NzVA z is outside raw sections)r ValueErrorr )exesectionsvasizeoffsets 1tools/summarize_active_object_script_inventory.pyread_atr&s= (B 'F ~3uRyk)ABCC vv} %%c : t||||}g}tdtt |dz dD]S}t j d||d}||vs"|j||zt||z|t|||dU|S#t$rgcYSwxYw)Nrz l +E ,5<tZ_Zk5QT+FVtqstrc g}|D]}|ddvr t|d}|t|dz}|||}d} |jd|}|dkrJt|d|z} t||| } | r`| dD cgc]} t|t| d r| } } t | d } | r&| r$t | }|d|d <|j ||d z}|Scc} w) Nr >.data.rdatarawraw_sizersrecWritesr+activeGateWritessectionr )r0findr r booldictr&)rrrowsrA raw_startraw_endr)indexhitrr1r3 ec_writes active_gaterows rscan_initializersrMRs%!#D 6?"5 5 ' c'*"5669W%))/7CQwWT]#c)B%c8R8D"&j!1Xs5>':;  #4(:#;< t*C%,V_C NKK$!GE#2 Ks6!Cc<t|||dd}t||||d}g}|dD]R}|jdgD];}|jd} | |vs|j|d|d| |d || d =T|d } |D cgc]} | d j d s| } } |t ||dt | | ddD cgc] } | d | ddc} t | t |D cgc]} | d j d s| c} |dd|dd|d|d|drdn | rdn| rdnd|dddD cgc]F} | jd| jd| jd| jdddHc} d Scc} wcc} wcc} wcc} w) NPi@) max_commands max_bytescommandspointerOperandsr+rvaHexvalueHexrtextPayloadRefsr mapdecodedCommandCount textPreview)rUpreview mapLoaderRefFoundrouteProofFoundz route-prooftext/prompt-interactionmap-cns-operand-candidatescript-no-text-no-map-proof opcodeHex opcodeNamesummaryr8)rTrcrdre) scriptVa scriptVaHexrXtextPayloadRefCounttextPayloadPreviewsmapCnsOperandRefCountmapCnsNearbyRefCountoperandCnsRefs nearbyCnsRefsr]r^classification firstCommands)r r,getr& startswithr r#)rrr' script_vastream span_cns_refsoperand_cns_refscommandoperandtarget text_refsrefmap_operand_refscmds r script_rowr}ps 3)"PU VF$S(KERM*% {{#4b9 G[[)F$ ''#DM&w/ &#*:#6'/ )  ()I'7Y3v;;Q;QRW;XYYY'%&;<"9~ !!}   O}-  "%%5!6 #M$cSS[E[E[\aEbS$c d*3B/&s+#$78!"34'( + -.j)#2.  ) WW[1!ggl3779b1   7$ $Z  %d s%F F F ,FF:A Fc|j}t|}t||}t||}t |Dchc]2}|dD](}t |t |drt |d*4c}}}|Dcic]}|t||||} }g} |D]}t |ddd} | | } | jid|dd|dd| d t| d t|d d t|d dt|ddt|ddt|ddt|ddt|dd| dd| dd| dd| dd| di} | jD] }| j|dddz| |d<"| jDcgc] }|ds | }}| jDcgc] }|ddk(s |}}| jDcgc] }|dd k(s |}}| jDcgc] }|dd!k(s |}}d"t|t|t|t|t|t|| ttd#d$d% | |Dcgc]}| | c}||dd|dd|dd&gd'd( Scc}}wcc}wcc}wcc}wcc}wcc}wcc}w))Nr?r+r initializerVarinitializerVaHexrTrfrg xCandidate yCandidate wCandidate hCandidate field0x28Hex( field0x2cHex, field0x16HexscriptClassificationrnrhrjrkr^r r`r_razActive object script inventoryFT) strictInitializerCountuniqueObjectEcScriptCountrouteProofScriptCount!mapCnsOperandCandidateScriptCounttextPromptScriptCountunknownScriptCountclassificationCountsmapLoaderFunctionHexsceneAutoTransitionClaimmanualMovementAssumptionrO)zIA strict active object initializer is not automatically a map transition.zKText/prompt scripts prove manual interaction scripting, not route behavior.z}Map CNS proximity is only a context candidate unless the decoded script writes a selected map/root or reaches the map loader.) titlere inventoryscriptsrouteProofScriptsmapCnsOperandCandidateScriptstextPromptScriptsunknownScripts nonClaims) read_bytesrrrMsortedr r0r}r&r r4r9valuesrpr#MAP_LOADER_FUNCTION)exe_pathrrr' initializersr1r3unique_script_vasrrr ec_targetscript class_countsrL route_scriptsmap_context_scripts text_scriptsunknown_scriptss r build_summaryrs    CS!H"31K$S(3L   *%   3uW~. / E'N   IZZ"r:c8["==ZGZI Z(+G45 # T$Z W      5+  +dD1  +dD1   +dD1  +dD1  OD$7  OD$7  OD$7  #F+;$<  "6*?#@  $V,C%D  #F+A$B v&78!   ,$&L~~].:.>.>sCS?TVW.X[\.\ S)*+]$+NN$4OSSWr>r3ss#*>>#3jCs;K7LPi7iCjLj&-nn&6qs#>N:OSp:psqOq2&),&7),->)?%(%7145H1I%(%6"%o"6$0$)*=$>(-(,  *;J5 J:$J:? J? c |d}dLd}|dDcgc] }|| }}|dddDcgc] }|| }}|dddDcgc] }|| }}|dddDcgc] }|| }}d jd t|d jD}d jgd dddddddddddddddd|ddd |d!dd"|d#dd$|d%dd&|d'dd(|d)dd*|d+dd,|d-dd.d/d0d1|dd2d3|d!d2d4|d#d2d5|d%d2d6|d'd2d7|d)d2d8t|d+j d9d:d;d<|d=d>d?|xsd@gdAdBd?|dAdCd?|dAdDd?|dAdEd<|dFD cgc]} dGt j | dHc} dIdJdKScc}wcc}wcc}wcc}wcc} w)MNrec djd|dddD}d|ddtj|dd |d d |d d |d S) Nz
c 3K|]l}dtjt|ddtjt|ddtjt|dnyw)zrcz rd reN)htmlescapestr).0r|s r z2render_html..row_script..s T[[S%5!678SQTUaQbMcAd@eefgkgrgrsvwz|ExFtGhHgI J sA2A4rozrgzrnz rhrjz )joinrr)rLrRs r row_scriptzrender_html..row_scripts;; ?+BQ/    ]+,-;;s#34567,-././01*   rrrrrrrOr8c3ZK|]#\}}dtj|d|d%yw)z
  • z: 
    • N)rr)rkeyr+s rrzrender_html.. s5 C t{{3 5'/s)+r zzzz z/ Active Object Script Inventoryz zzz)

    Active Object Script Inventory

    z.

    strict initializer count: rz

    z6

    unique object +0xec script count: rz.

    route proof script count: rz<

    map CNS operand candidate script count: rz.

    text/prompt script count: rz*

    unknown script count: rz1

    scene auto transition claim: rz0

    manual movement assumption: rz

    This page inventories strict active-object initializers. It does not promote any script to a route without map-loader/root evidence.

    z z

    Classification Counts

    z
      z
    z

    Route Proof Scripts

    z z"z
    scriptclasstext refsmap CNS refsfirst commands
    none
    z%

    Map CNS Operand Candidates

    z

    Text/Prompt Scripts

    z

    Unknown Scripts

    u

    하지 않는 주장

    rz
  • rz zz)rLdict[str, Any]returnr)rritemsrlowerrr) resrrL route_rowsmap_rows text_rows unknown_rows class_itemsitems r render_htmlrs A  .55H-IJc*S/JJJ+23R+STWUW+XYC 3YHY,34G,H",MNSCNIN/67G/H"/MNJsONLN'' #9!:!@!@!BCK 99=== = % = : =  = I= I= ]= ]= %= 4= = = = 4!=" ;1=U;V:WW[\#=$ C1E`CaBbbfg%=& ;1=T;U:VVZ['=( IKnIoHpptu)=* ;1=T;U:VVZ[+=, 7q9M7N6OtT-=. >a@Z>[=\\`a/=0 =Q?Y=Z<[[_`1=2 X3=4 5=6 ?7=8 )+C)D(EQG9=: ,A.I,J+K1M;=< (*A(B'C1E==> 4A6Y4Z3[[\]?=@ (*A(B'C1EA=B %Q';%<$=Q?C=D +3q1K/L+M+S+S+U*VWE=F G=H I=J +K=L  U#M=N )O=P NQ=R  @?@S=T U=V 0W=X NY=Z [=\ ]=^ )_=` Na=b c=d e=f %g=h Ni=j k=l m=n *o=p q=r;B+:N O$HT[[&'u - Os=t u=v w=x y== =KYNN| PsGG#G("G-0 G2 cxtjt}|jdtt |jdtdd|j }tjdt|j}td z jtj|d d d zd|jM|jjjdd|jjt!|dt#tj|dd dy)N) descriptionz--exe)typedefaultz --html-outzHOptional HTML review path. By default only the JSON evidence is written.)rrhelpT)exist_okz#active_object_script_inventory.jsonF)r:) ensure_ascii separatorsrzutf-8)encoding)parentsrre)rindent)argparseArgumentParser__doc__ add_argumentrEXE parse_argsOUTmkdirrr write_textjsondumpshtml_outparentrprint)parserargsres rmainrPs  $ $ 9F dC8   W     DIItIDHH%G 00<< 7:FM= }}  ""4$"?   W!5 H $**WY'eA FGr__main__) rbytesr list[dict]rr0rr0rr)i) rrrrr'dict[int, str]r(r0rr0rlist[dict[str, Any]])r1rr2r0rz int | None)r1rr2r0rr)rrrrrr) rrrrr'rrrr0rr)rrrr)rerrr)rNone)%r __future__rrrrr$pathlibrtypingrprobe_exe_scene_tablesrrr'summarize_object_payload_442c75_callersr r r r __file__resolverROOTrrrrr,r4r9rMr}rrr__name__rrrs # PP H~''* Ul ] &        2u <: :: : :  :zFRWtH. zFr