UHj; dZddlmZddlZddlZddlZddlZddlmZddl m Z m Z ee jjdZedz ZdZd Zd d d d d dd dZddddddddZdddddddddddd Zddd d!d!d"d#d$d%d& Zd4d'Zd5d(Zd6d)Zd7d*Zd8d+Zd9d,Z d:d-Zd;d.Zdd2Z"e#d3k(re"yy)?zTScan direct dword bridges between map1_01a confirmed and frontier selector contexts.) annotationsN)Path) read_sections va_to_offsetoutmap1_01amap2_02dzconfirmed entry selectorz0:0Pip5P2P)labelselectorrootVa scanStartVa scanEndVarecordRangeStartVarecordRangeEndVazselector-only frontierz2:0Ti.TD+Tix.Tzfrontier root 2:0zfrontier pointer nodezfrontier map1_01a leafzfrontier shared leafzfrontier reader/resource gatez%frontier source scene record map1_01az%frontier target scene record map2_02d) ri)Ti*Ti*Ti*Ti*Ti*Ti*Ti +Tri+Tzconfirmed root 0:0zconfirmed pointer nodezconfirmed map1_01a leafzconfirmed shared leafzconfirmed map1_02b leafz%confirmed entry scene record map1_01az%confirmed event scene record map1_02bz%confirmed event dispatch neighborhood) r i42PiD2Pi`2Pi|2Pi2Pr iP3Pi\3Pcd|dS)N0x08x)values D/home/exedev/hwanse/tools/summarize_map1_01a_selector_bridge_refs.pyva_hexr@s c{ c4t|dt|S)Nz..)r)start_vaend_vas r range_hexr!DsX r&.!1 22rcvt||}||dzt|kDrytjd||dS)Nz  0  BF2J7  s:c |Dcgc]<}|d|dt|d|dt|dt|d|dd>c}Scc}w)Nr startVaendVa)r r: startVaHexr;endVaHexrangeHexr0)rangesrows rtarget_range_rowsrAesg  \9~ Y0\s7|,!#i.#g,?     sAA c g}d}d}t|d|ddD]}t|||} | |dz }|dz }|j| } |D cgc]} | d| cxkr| dkrnn| d} } | | sY|j|t || t | | | dt |d|d||t |t|t||dScc} w) Nrr:r;r#rr )sourceVa sourceVaHexrvalueHex exactLabel rangeLabels) sourceRangereadableDwordCountunreadableDwordCount exactTargets targetRanges dwordHitCounthits) ranger+getappendrr!r8rAr$) r'r( source_range exact_targets target_rangesrNreadable_dwordsunreadable_dwordsr)r exact_labelr@ range_labelss rscan_range_for_targetsrYss& DOL+\'-BAF D(B/ =  "  1#''. % 9~5W5 L   |  !":u %'    .!i!8,w:OP- 1)-8)-8T  s Cc t|}dtdtddg}dtdtddg}t||tdtddt|}t||tdtddt |}|d d kDxs|d d kD}d }t ttttt|||d gd |d S)Nzconfirmed entry record clusterrr)r r:r;z%frontier selector-only record clusterrr)r:r;rMrajNo direct dword pointer/data bridge was found between the confirmed 0:0 map1_01a entry context and the selector-only 2:0 map1_01a -> map2_02d frontier context. This is not a full VM execution proof, but it keeps the contexts separated until a strict hotspot/source coordinate or a runtime state trace proves selector 2:0 is reached from the confirmed entry path.blocked)zUThis scan only checks direct dword values in the known selector/root context windows.zLIt does not prove dynamic VM execution order or runtime branch-state values.ztPromotion still requires a strict map1_01a hotspot/source coordinate or a confirmed runtime trace into selector 2:0.) mapfrontierTargetconfirmedContextfrontierContextconfirmedToFrontierfrontierToConfirmed bridgeFoundpromotionStatus limitations conclusion) rCONFIRMED_CONTEXTFRONTIER_CONTEXTrYFRONTIER_EXACT_TARGETSCONFIRMED_EXACT_TARGETSMAPFRONTIER_TARGETr2)exer(confirmed_target_rangesfrontier_target_rangesconfirmed_to_frontierfrontier_to_confirmed bridge_foundres r build_summaryrrsS!H6()=>&'9: ='(<=%&89 3 (7&{3   3 ' 6%k2    o.2 6  1A 5  T)+,=>*+;<44#$ ! rc|d}|d}|d}|d}ddd|dd d |d d d |d d|dd d|d d|dd d|dd|dd d|ddddddd|dd|d d|dd|dd|dd d!|dd|d d|dd|dd|dd dd"dd#dd$d%g}|d&D] }|jd'|d(d|d)d*"|jgd+|d&D] }|jd'|d(d|d)d*"|jgd,|d-s|d-s|jd.nyd/|fd0|ffD]n\}}|d-D]a} | jd1xsd2g| jd3xsgz} |jd4|d5| d6d7| d8d9d:j| d; cp|jgd<|jd=|d>D|jdd?j|S)@Nr^r_r`raz# map1_01a Selector Bridge Refsz- map: `r\`z- frontier target: `r]z- confirmed selector/root: `rz` / `r-z- frontier selector/root: `z- bridge found: rbz- promotion status: `rcrez## Scan Summaryz:| direction | source range | target context | dword hits |z| --- | --- | --- | ---: |z| confirmed -> frontier | `rHz` | `z` `r/z` | rMz hits |z| frontier -> confirmed | `z## Target Exact Valuesz### Frontier Targets| VA | label | | --- | --- |rKz| `r4r z |)rtz### Confirmed Targetsrtrvrw)rtz## HitsrtrNzT- 0 hits in both directions; known contexts remain different selector/root contexts.confirmed -> frontierfrontier -> confirmedrF-rG- z: `rDz` = `rEz` (, ))rtz## Limitationsrtc3&K|] }d| yw)r{Nr.0items r zmarkdown..s@2dV@srd )rQextendrPjoin) summary confirmedfrontierc2ff2clinesr@ directionscanhitlabelss rmarkdownrs*+I()H ' (C ' (C) 75>"!$ w'789; &y'<&=U9[CYBZZ[\ %hz&:%;5+AV@WWXY 7=123 (9 :;1=    D$)#m*<)=>$%S+)>(?uXN^E_D``d?#$G - *#m*<)=>*%&c)K*@)AyQaGbFccg?#$G -    A! ED>"? s3w<.S\N"=>? LLUV>"? s3w<.S\N"=>? LL$% v;s6{ kl!8# >AXZ]@^_ OItF| '',/637377=;Q;WUWX  3s='9&:%J?PPSTXT]T]^dTeSffgh    LL+, LL@)?@@ LL 99U rc&|d}|d}|d}|d}dtj|ddtj|dd tj|d d tj|d d |dd dtj|ddtj|dd tj|d d tj|d d |dd g}g}|dD]F}|jdtj|dd tj|ddH|dD]F}|jdtj|dd tj|ddH|ds|drg}d|fd|ffD]\} } | dD]} | jdxsdg| jdxsgz} |jdtj| dtj| dd tj| d!d"tjd#j | d$ d%d&j |zd'z} nd(} d&j d)|d*D}d+j gd,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@tj|dd tj|d dAtj|dd tj|d dB|dCdDtj|dEdF dGtj|dHdIdJdK|dLdMdN|dLdOdP| dQdR|d'dSdTd&S)UNr^r_r`raz/confirmed -> frontierrHzrz r-z / r/zrMz hitsz/frontier -> confirmedrKzfrontierr4r z z confirmedrNrxryrFrzrG
  • z: rDz = rEz (r|z)
    • z
      rtz
    zY

    0 hits in both directions; known contexts remain different selector/root contexts.

    c3NK|]}dtj|dyw)rzN)htmlescapers rrzhtml_page..Us#]dDT!2 359]s#%rdrzzzz zF z. map1_01a Selector Bridge Refsz zzz(

    map1_01a Selector Bridge Refs

    z#

    confirmed selector/root z&; frontier selector/root z; bridge found: rbz; promotion status rcz

    z

    rez

    z

    Scan Summary

    zy z
    directionsource rangetarget contextdword hits
    z

    Target Exact Values

    zQ z

    Hits

    z z

    Limitations

    z
      zz)rrrQrPr)rrrrr scan_rows target_rowsr@ hit_itemsrrrrhit_htmlrds r html_pagersl*+I()H ' (C ' (C S%789:Xj%9:;<[[+!6789[[*:!;<=>'()   S%789:Yz%:;<=[[;!789:[[+;!<=>?'()  I,K>"  S\234;;s7|,-.   >"  S\234;;s7|,-.    6{c&k !8# >AXZ]@^_ OItF| '',/637377=;Q;WUWX  {{9-.ht{{3}CU7V6WX![[Z9:; DIIf$5678  BGGI..8n'']gmF\]]K 99*** * # * Q * 9 * * r* 1* 7* :* G* f* t* Q* '!*" #*$ %*& '*( 3)** .dkk)J:O.P-QRY{3456Xj123>$++hWbNcBdAef /01W%6789  F+*4  GL123485*6 "7*8 D9*: ;*< =*> )?*@ \A*B C*D E*F G*H XJI*J !K*L  U#M*N O*P Q*R S** *rc|jdd|dz jtj|dddzd y) NT)parentsexist_ok"map1_01a_selector_bridge_refs.jsonF) ensure_asciiindentrzutf-8)encoding)mkdir write_textjsondumps)rout_dirs r write_outputsrsD MM$M. 33?? 7q9D@@rcvtjt}|jdtt dz |jdtt |j}t|jj}t||jtd|jdz y)N) descriptionz--exez Hwanse2.exe)typedefaultz --out-dirz'wrote map1_01a selector bridge refs -> r)argparseArgumentParser__doc__ add_argumentrROOTOUT parse_argsrrrl read_bytesrrprint)parserargsrs rmainrs  $ $ 9F dD=4HI  $<    DDHH//12G'4<<( 3DLLCg4g3h ijr__main__)rintreturnstr)rrr rrr)r'bytesr( list[dict]r)rrz int | None)r1dictrr)r7dict[int, str]rr)r?rrr) r'rr(rrRrrSrrTrrr)rlrrr)rrrr)rrrrrNone)rr)$r __future__rrrrr%pathlibrprobe_exe_scene_tablesrr__file__resolverrrrjrkrfrgrhrirr!r+r2r8rArYrrrrrr__name__rrrrspZ" > H~''* Ul($"&$"$'(((&&&/77 %()'')777 35  ( (((" (  (  (V=@9xfR25k zFr
    contextVAlabel