QIjZ6dZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ddl m Z ejjdee ej%j&ddlmZmZmZddlmZmZe ej%j6d Zed z Zd Zd Zd Z dZ!dZ"ededhZ#dddddddZ$d'dZ%d(dZ&d)dZ'd*dZ(d+dZ) d,dZ*d-dZ+d.dZ,d/d Z-d0d!Z.d1d"Z/d1d#Z0edfd2d$Z1d3d%Z2e3d&k(re2yy)4zJIndex opcode 0x24 mode-1 action payload patterns across selector VM roots.) annotationsN)Counter)Path)Any)find_cns_strings read_sections va_to_offset)handler_for_opcodesection_name_for_vaoutmap1_01amap2_02di(Ti.cnsz frontier leafzfrontier readerz#frontier reader false branch targetzleaf table startzcurrent root table pointerz wrapper leaf)i*Ti +TioSi)Ti)Ti*Tcp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks G/home/exedev/hwanse/tools/summarize_opcode24_action_payload_patterns.py load_jsonr,s* ;;= ::dnngn6 77cd|dS)N0x08xvalues rhex32r%2s c{ rc<t|tsyt|dS)Nr) isinstancestrintr#s r parse_hexr*6s eS ! ub>rcvt||}||dzt|kDrytjd||dS)Nzzroot_ranges..Qs W r)keyr r=end)r*getappendsort enumerater-MAX_ROOT_BYTES) selectorsrootsrowselectedrangesindexroot next_startrBs r root_rangesrPCs6 E  SWW%9:;    "www/0#''&/1BC! WW[17R WW[17R     JJ-J. F ', t27!)c%j2HU519%g.dSZm^lNl  $w- 3g#6#Gw-.0C **uc*+ , Mrc|dddS|tvrdt|t|dS|j|}|rA|tvrd}n'|j dr|j drd }nd }||t|dS||cxkr|krnnd d t|dSt ||}|rd |t|dS|dkrdddS|dz dkr |dzdkrdddSdddS)Nmissing-)kindmeaningroute-frontier)rTrU targetVaHex route-cnsmapr field-map-cnscnslocal-payload-pointerz%pointer inside local lookahead windowz exe-pointeriz small-scalarz small scalarriipairzpacked pair or script wordscalarznon-pointer scalar)FRONTIER_VALUESr%rC ROUTE_CNS startswithendswithr )r$r1 cns_strings local_start local_endr[rTsections rclassify_valuerg\s }!c22 (_U5K\abg\hii //% C ) D ^^E "s||F';"DDU5\JJe(y(/BB  56>g"=+GHH)= >>rc2djd|DS)N,c3&K|] }|d ywrTNr".0r?s r z row_signature..}s7TDL7)join) lookaheads r row_signaturerr|s 887Y7 77rc8t||}g}t|D]|}t|d|ddD]b}t|||}||dzdk7rt ||du}|dz dz} |dz} |t dzz} g} tdt dzD]} || dzz}t|||}t |||| | }||dznd}| t|||ni}| jd| dzd t|| t|nd|d |d |jd |d |dnd|jd|jdd td| D}|jid|ddt|ddt|dd|dd|dd|dt|dd||dz d d|dt|d| dd | ddd |d z dzdd!d |d"z dzdd#|d$| d%| xr| dk(d&|tk(t| tt|j!t#d'| Dt#d(| Dt#d)| Dt#d*| Dt%d+| Dt%d,| D| d- e|S).Nr=rBr,$r z+0xxrTrUrWr 02xhandlerSection isCodeHandler) offsetHexvaHexvalueHexrTrUrW lowByteHexlowByteHandlerSectionlowByteIsCodeHandlerc3&K|] }|d ywrkr"rls rrnzscan_roots..s!E4$v,!Eror< rootRangeHexz..r:r;r2r|relativeOffsetHexr$r}modemodeHexbyte2Hexrbyte3HexpointerCollisionopcodeCandidatemode1CandidatecurrentBoundaryc3,K|] }|ddk(yw)rTrVNr"rls rrnzscan_roots..s0hVZfAQ1Q0hc3,K|] }|ddk(yw)rTrXNr"rls rrnzscan_roots..s*]44<;+F*]rc3*K|] }|ddv yw)rT>rXrZNr"rls rrnzscan_roots..s-saed6l>\.\-ssc3,K|] }|ddk(yw)rTr\Nr"rls rrnzscan_roots..s.m[_tF|?V/V.mrc3HK|]}|jddusdyw)rTr NrCrls rrnzscan_roots..s"+p$txxPfGgkoGoA+ps""c3JK|]}|jddk(sdyw)rz.datar Nrrls rrnzscan_roots..s"+t$txxPgGhlsGsA+ts##) kindSignaturelookaheadKindCountsdirectFrontierOperandrouteCnsOperandfieldMapCnsOperandlocalPayloadPointercodeLowByteCountdataLowByteCountrq)rrPranger4r LOOKAHEAD_DWORDSrgr rDr%rCrCURRENT_OPCODE24_VArrdictsorteditemsanysum)r0r1rHrcrowsrNr2r$pointer_collisionrrdrerqrMitem_va item_value item_classlow_bytehandler kind_countss r scan_rootsrs"31K DI&;W tE{A6: BS(B/E}  4 ,Xu =T I QJ$&Dq&K-11IIq"2Q"67 uqy.%c8W= +J+{\ef 0:0F:,DIQI],S(HEce  '*519Q-%8!&w9C9OE*$5UY *6 2#-i#8'1~~m'D=E=Q8C.&9W[18=M1N07 O0L    &"!E9!EEK KKZ 0"uT']';&R$S k!2 k!2  "  U2Y (3rDM/A!.D)EUe DD:"erkT%9#$> ?"erkT%9#$> ?'(9&+<'< %+<'<&K$!)!"&r-@'@#$&39%=+/{7H7H7J0K+L-00h^g0h-h'**]S\*]']*--sir-s*s+..mcl.m+m(++p)+p(p(++t)+t(t!*5 ;: ;x Krc|jd|jd|jd|jd|jd|jdxsg|jd|jdxsi|jd |jd |jd |jd |jd |jd|jdxsgdS)Nr<r|r}rrr:rrrrrrrrrq)r<r|r}rrr:rrrrrrrrrqr)rJs r brief_rowrsGGJ'!GGJ' WW%89/WW[)/R1"ww'<=C!$)@!A77#45!gg&:;"ww'<=GG$67GG$67WW[)/R rc(t|}t|||}|Dcgc] }|ds | }}|Dcgc] }|ds | }}td|Dd}|r|jdnd}|r|jdnd} |Dcgc]}||jd|k(r|} }|Dcgc]}| |jd| k(r|} }|Dcgc]:}t|jdxsgvst |jdxsgvr|<} }t d|D} | jdDcgc]-\}}||t|Dchc]}|d |k(r|d c}d /}}}}|Dcgc] }|d s | }}|Dcgc] }|d s | }}|Dcgc] }|ds | }}d}idddddtdt dttdtdtt|dt|dt|dt|t|z dt|dt|Dchc]}|d  c}dt| dt| Dchc]}|d  c}d t|d!t|d"t|id#td$|Dd%|dud&|r t|ndd't| d(t| Dchc]}|d  c}d)| dd*Dcgc] }t|c}d+t| d,t| Dchc]}|d  c}d-| ddDcgc] }t|c}d.|d/|ddDcgc] }t|c}d0|ddDcgc] }t|c}d1|ddDcgc] }t|c}d2d3d4d5d6gd7d8|Scc}wcc}wcc}wcc}wcc}wcc}wcc}}}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}w)9Nrrc3,K|] }|ds |yw)rNr"rmrJs rrnz build_summary..sBC3/@+ACB r$rr:c3&K|] }|d yw)r}Nr"rs rrnz build_summary..sAs3z?Aror}r<)r}count selectorCountrrraOpcode 0x24 mode 1 is common in selector VM roots, and the current route boundary's exact dword appears in many unrelated roots. Across all mode-1 candidates, the next 16 dwords do not contain direct frontier values or CNS filename operands. This supports treating the current 0x005428e4 region as generic action/state payload evidence, not as a strict map1_01a->map2_02d transition proof.titlez(Opcode 0x24 Action Payload Pattern IndexscopezRselector VM roots from original EXE scene-selector table; no savedata slot parsingsourcetargetcurrentOpcode24VaHexlookaheadDwordsselectorRootCountlowByte24RowCountopcodeCandidateCountpointerCollisionCountmode1CandidateCountmode1SelectorCountmode1CurrentRouteScopeRowCount#mode1CurrentRouteScopeSelectorCountdirectFrontierOperandCountrouteCnsOperandCountfieldMapCnsOperandCountlocalPayloadPointerRowCountc3,K|] }|ds dyw)rr Nr"rs rrnz build_summary..s*acJ_F`1*arcurrentBoundaryFoundrcurrentValuePeerCountcurrentValuePeerSelectorCountcurrentValuePeerSamples(currentSignaturePeerCount!currentSignaturePeerSelectorCountcurrentSignaturePeerSamplestopMode1ValuesfrontierOperandSamplesrouteCnsOperandSamplesfieldMapCnsOperandSamplespromotionStatusblockedclassificationzgeneric-action-state-payloadremainingProofs)zCruntime producer trace for opcode 0x24 mode1 source byte 0x0059e348z,strict map1_01a source coordinate or hotspotzScontrol-flow proof that selector leaf/wrapper execution reaches the frontier reader conclusion)rrnextrC ROUTE_SOURCE ROUTE_TARGETr most_commonr-r%rrrPrr)r0rHr1rrJ opcode_rows mode1_rowscurrent current_valuecurrent_signaturecurrent_value_peerscurrent_signature_peersroute_scope_rows value_counts value_hexr top_valuesdirect_frontier route_cns field_map_cnsrs r build_summaryrs?S!H c8Y /D"&A3#.?*@3AKA!%?#-=)>#?J?B4BDIG,3GKK(M8? O4T!  $)9])J  "  (SWW_-EIZ-Z  " CGGK06B 7*?'  .sO_3`C O3`/a'  %c/&:'  I!' " "3}#5#' $ &s*a *a'a%' & t 3'' ( 9W-d)' * %8!9+' , (I\-]#c*o-])^-' . ">QRUSU>V#WsIcN#W/' 0 $S)@%A1' 2 ,SMd1ec#j/1e-f3' 4 &BYZ][]B^'_3 #'_5' 6 *7' 8 !_Sb=Q"Rc9S>"R9' : !Ys^"Lc9S>"L;' < $ cr@R%Sin%S=' > 9?' @ 8A' B  C' L jM' 'MB?" REL&#J3`.^#W1e'_"R"L%Ss N3N3 N8N8N=)O?O6O O  O0 O;O OO O"%O"4 O'  O,  O1.O6  O;4P P 1P P OcTddd|dddd|dd|d d d |d d d |ddd|dd|dd|dd|dd|dd|ddd|dd|ddd |d!d"|d#d$|d%d&|d'd(|d)d*|d+d,|d-dd.|d/d,|d0dd1|d2d3|d4d|d5dd6dg}|jd7xsi}|r|jd8|jd9d d:|jd;d d<|jd=d>|jd?d d@dAj|jdBxsgxsdCdDtj|jdExsidFGd ddHdIg|jdJxsgD]}|j dK|jdLdM|jd=dM|jd?dN|jdOdPt jt|jdQdP|jdRxsdCdS |j d|jgdT|dUD]&}|j dK|d?dN|dVdP|dWdS(|jgdX|dYD]}dAj|jdBxsgxsdC}|j dK|jd9dM|jd=dM|jd?dN|dP|jdZdP|jd[dP|jd\dS|jgd]|jd^|d_D|j dd`j|S)aNz*# Opcode 0x24 Action Payload Pattern IndexzScope: r.z- route under test: `rz -> r`z!- current opcode 0x24 boundary: `rz - lookahead: rz dwordsz- selector roots scanned: rz- low-byte 0x24 rows: rz- opcode candidates: rz- pointer collisions: rz- mode 1 candidates: r across rz selector rootsz!- route-scope mode 1 candidates: rrz0- direct frontier operands in mode 1 lookahead: rz*- route CNS operands in mode 1 lookahead: rz.- field-map CNS operands in mode 1 lookahead: rz+- mode 1 rows with local payload pointers: rz- current boundary found: rz- current value peers: r rows across rz- current signature peers: rrz- classification: rz- promotion status: rrz## Current Boundaryrz - selector: `r<z- root range: `rz - va/value: `r|z` / `r}z- field maps: , r:rSz- lookahead kind counts: `rT) sort_keysz;| offset | va | value | kind | meaning | low byte handler |z%| --- | --- | --- | --- | --- | --- |rqz| `r{z` | `z` | rTz | rUrz |)z## Top Mode 1 Valuesrz!| value | rows | selector roots |z| --- | ---: | ---: |rrr)rz## Current Value Peer Samplesrza| selector | va | value | route maps | local payload ptr | frontier operand | route CNS operand |z+| --- | --- | --- | --- | --- | --- | --- |rrrr)rz## Remaining Proofsrc3&K|] }d| yw)z- Nr"rls rrnzmarkdown..psD2dVDror ) rCextendrprdumpsrDhtmlescaper()summarylinesrr?rJ route_mapss rmarkdownr)s4 ''"#1%  12$wx7H6IK +G4J,K+LAN  1237; $W-@%A$BC )? (> ?@A )@!A BC (= >?xPdHeGffuv +G4T,U+VV^_fhM`N_OO^ _ :7C_;`:ab 4W=S5T4UV 8AZ9[8\] 5g>[6\5]^ $W-C%D$EF !'*A"B!C=QXYxQyPz{J K %g.I&J%K=Y`bEZFYGGV W W%5678 w'89:;    7 E:kk+,2G GKK 34A 6gkk.9:! <GKK01w{{:7N6Oq QTYYw{{;'?'E2FM#N O(GKK@U4V4\Z\hl)m(nno p  I 3  KK ,2 D LLdhh{+,E$((72C1DE$((S]J^I__c88F#$C C8K4L(M'Nc8834;d:|d?d<d@tj|dAd)dBtj|dCd)dDdEtj|dFdGdHdItjt |jdJdKtjt |jdLdMtjt |jdNdOdPdQ|dRdSdTdQ|dRdUdVdQ|dRdWd|dXdYdZdS)[Nrrc3VK|] }dtjt|jddtjt|jddtjt|jddtjt|jddtjt|jddtjt|jd xsd d #y w) r{r|r}rT rUrrS N)rrr(rCrls rrnzhtml_page..ys   S+)>%?@ABS'):%;<=>S*)=%>?@A;;s488F#34567;;s488I#6789:;;s488,C#D#KLMNO    sD'D)rqc3lK|],}dtj|dd|dd|dd.yw)rr}rrrrrNrrrs rrnzhtml_page..sU   [[Z1237|n?#$% s24rc3K|]X}dtjt|jddtjt|jddtjt|jddtjdj |jdxsgxsdd tjt|jd d tjt|jd d tjt|jd d [yw)rr<rr|r}rrr:rSrrrrrN)rrr(rCrprs rrnzhtml_page..s!   [[SWWZ%8!9:;<[[SWWW%5!6789[[SWWZ%8!9:;<{{499SWW[%9%?R@GCHIJ{{3sww'<=>?@A{{3sww'>?@ABC{{3sww'89:;<=  sEE!rc3NK|]}dtj|dyw)z
  • 
    • Nr rls rrnzhtml_page..s#adDT!2 359as#%rrzzzz zF z9 Opcode 0x24 Action Payload Pattern Indexz zzz3

    Opcode 0x24 Action Payload Pattern Index

    z

    Scope: rz.

    z
      z
    • route: rz -> rz
      • z,
    • current opcode 0x24 boundary: rz
    • selector roots scanned: rr z
    • mode 1 candidates: rrrz selector roots
      • z'
    • route-scope mode 1 candidates: rrz"
    • direct frontier operands: rz
    • route CNS operands: rz
    • field-map CNS operands: rz
    • current value peers: rrrz roots
      • z!
    • current signature peers: rrz
    • classification: rz
    • promotion status: rz
    z

    rz

    z

    Current Boundary

    z

    selector r<z; root rz; value r}z .

    z z z
    offsetvavaluekindmeaninglow-byte handler section
    z

    Top Mode 1 Values

    zS z%

    Current Value Peer Samples

    z
    valuerowsselector roots
    z

    Remaining Proofs

    zzz)rCrprrr()rr current_rows value_rows peer_rows proof_itemss r html_pagerus?kk+,2GLww   K06B    +, J 45  I''agN_F`aaK 99000 0 # 0 Q 0 D 0 0 f0 U0 [0 D0 '0 0 0 0 >!0" t{{77#345U;#0$ %0&  GH,= >?wt{{SZ[cSdGeFffrs'0( 7w?U7V6WWcd)0* +73F+G*HN+0, &g.C&D%EXgVjNkMlmA B-0. 2':Z2[1\\delnSfTeUUi j/00 -W5Q-R,SSXY102 'w/E'F&GuM304 +73L+M*NeT506 (0G(H'IW^_~WWAAL M708 ,G4O,P+QQ^_fhK`L_MMX Y90: #4;;w7G/H#I"J%P;0< %T[[9J1K%L$MUS=0> ?0@  GL12348A0B &C0D t{{3w{{:/F+GHII]^b^i^ijmnunyny{IoJkK_L^MMbcgcncnorszs~s~IsJoKcLbMMY ZE0F RG0H L>!12I0J 'K0L ^M0N J</0O0P 0Q0R nS0T I;./U0V &W0X  U#Y0Z [0\ ]0^ _00 0rc|jdd|dz jtj|ddd|:|jjdd|jt |dyy) NT)parentsexist_ok%opcode24_action_payload_patterns.jsonF)rir8) ensure_ascii separatorsrr)mkdir write_textrrparentr)rout_dirhtml_outs r write_outputsrs{ MM$M. 66BB 7:FCdT:Ig.Arc&tjt}|jdtt dz |jdtt dz |jdtt |jdtdd |j}t|jjt|jg}t||j|jt!d |jd z y) N) descriptionz--exez Hwanse2.exe)typedefaultz --selectorszsave_scene_selectors.jsonz --out-dirz --html-outz!Optional HTML report output path.)r r!helpz*wrote opcode24 action payload patterns -> r)argparseArgumentParser__doc__ add_argumentrROOTOUT parse_argsrr0 read_bytesrrHrrrprint)parserargsrs rmainr.s  $ $ 9F dD=4HI  D#@[:[\  $<  4Dgh    D $.."%G'4<<7 6t||Fm7m6n opr__main__)rrrrreturnr)r$r)r0r()r$z str | Noner0 int | None)r0bytesr1 list[dict]r2r)r0r1)rHr3r0r3) r$r1r1r3rczdict[int, str]rdr)rer)r0r)rqr3r0r()r0r2r1r3rHr3r0r3)rJrr0r)r0r2rHr3r0r)rrr0r()rrrrrz Path | Noner0None)r0r4)4r% __future__rr#rrr.sys collectionsrpathlibrtypingrrinsertr(__file__resolverprobe_exe_scene_tablesrrr summarize_script_handler_tabler r rr'r(rrrrrGr`r_rr%r*r4rPrgrrrrrrrrr.__name__r"rrr@stP" 3tH~--/6678PPR H~''* Ul   nDnD   !5", 8  42? ?? ? ?  ?  ?@8?D(PfIXTn25dB q zFr
    selectorvavaluefield mapslocal ptrfrontier operandroute CNS operand