IjUdZddlmZddlZddlZddlZddlZddlZddlm Z ejjde e e jjddlmZmZmZddlmZe e jj,dZedz Zd gd d d gd d gZgdZgdZddZddZd dZd!dZd"dZ d#dZ!d$dZ"d%dZ#d&dZ$d'dZ%d'dZ&edfd(dZ'd)dZ(e)dk(re(yy)*zMTrace the current save-selector root writers that feed selectionBuffer[0x20].) annotationsN)Path)find_cns_strings read_sections va_to_offset) trace_streamoutz(out/save_selector_selection_writers.json)+currentFrontierRootWritersBeforeFirstReaderselectorRootContextselectionBufferOffsetHex)pathfields Hwanse2.exe)zwriter stream dwordszopcode handler tablezactivation context dwords)z#source-predecessor-current-producerz"non-current-selected-pointer-storezruntime-branch-state-slot-proofzselected-root-execution)zSsource or predecessor opcode path that produces current root 2:0 before route entryz^non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30zmruntime branch-state slot values proving current local writers choose the route slot on the normal route pathzOselected-root execution proof tying current writer paths to an external triggerc"|r t|dSdS)Nint)values I/home/exedev/hwanse/tools/summarize_save_selector_current_writer_paths.py parse_hexr5s"3ub>,,c,t|d|dzz dzS)Nrr) value_hexindexs r stream_plusr9s  2 519 - 55rcV|jd}|jdxsd}t|d}t|d}|dk(rdnd}|d k(r|d kDr d |d |d dSd|d|d S|dk(r d|d|d dS|dk(rd|d dS|dk(rd|d dS|dk(rt|d}d|d dS|dk(ryy) N opcodeHexvalueHex 0x00000000r rprimaryBranchStatesecondaryBranchState0x10 zcall helper 0x00410c90 for z with out-of-range argument 0x02xzZ; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime statezfill z using helper argument 0x0x11zread z[selectionBuffer[0xz]] and gate next stream value0x12z=write selected active branch-state slot to selectionBuffer[0x]0x13z7write matching party/runtime slot to selectionBuffer[0x0x09z$store runtime stream pointer mode 0xz into 0x0059de300x20z>dispatch/load runtime object or party-member script references)getr)stepopcoderstream1stream2tablemodes ropcode_meaningr7=s! XXk "F$4 I)Q'G)Q'G$+qL 6LE  T>-eW4RSZ[^R_`kk ug6wsmDD ug0 =Z[[ NwWZm[\]] HQT UVWW 9a(5d3Z?OPP O rcvt||}||dzt|kDrytjd||dS)Nzstringsr?rr2rows r context_wordrK_s S(B 'E } T\FbXs $&& C  U^E h & 2 s ,L#C(C N Jrc^g}ttd|dz |dD]X}t||||}|s|jds#|jds|jdsH|j |Zg}|D]}t |jd}t |jd} || <| d z} | d z d z} | d k(r)| dk(r$|dz|k(r|j |d|dd d d|jdd|dk(s|j |d|dddd||dS)Nr@r9rHrGrFrEr!rr opcode09Mode0NextStreamzZopcode 0x09 mode 0 advances to the next dword and stores that stream pointer in 0x0059de30)rEr!kindrHrCrDnearbyPointerToStreamStartz,nearby data word points at this stream start) contextRows activators)rangemaxrKr0appendr) r=r>rI stream_start writer_varowsr?rJrSrr2r6s ractivation_contextrZqsd DC<$./A>3'26  779 !6#''%. KK   J swww' (#''*-. :  d" T>daiBFl,B   W O1w   77< bc(:$; ;   W O4I  ,  rc}t|||d}tdz dzdD]4}|dkr t||||d}tfd|Ds-|}|}||fS||fS)N0r r9rc3NK|]}|jdddk(yw)rErCrDNr0).0itemrXs r z%choose_trace_start..s(KTtxx b3$88Ks"%)rrTany)r=r>rIrX best_start best_tracestarttraces ` rchoose_trace_startrhsJc8WiDJy4'Q: 19 S(GUB? KUK KJJ  z !! z !!rcg}|xsijdxsgD],}|jd}|s||vs|j|.|S)N fieldRecordsmap)r0rV)contextmapsrecordnames r field_mapsrpsU D=b%%n5;zz%  D$ KK  Krct|}t||}|jdxsg}g}|D]tjd}|!tjdxsd}|dz}|dk(rdnd} t ||||\} } g} | D],} t | }t | |d <| j|.tfd t| Dd}|| d|ng}|| |d zdng}t|||| |}|jid jdd jddd| ddjddjddjdxsijddjdxsijdxsgdtjddtdttdddddtdtd td!d"d#||| || ddd$jdd%k(r|d&k(rd'n|dk(rd(nd)|dk(rd*nd+d,  |S)-Nr rEr!rrz0x13 clears selectionBuffer[stream+2], scans 12 runtime slots, compares 0x0059e344 bytes with slot fields +0x4a/+0x48, and stores the matching slot index back to selectionBuffer[stream+2].a0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].rHc3pK|]-\}}|jdjdk(s*|/yw)rENr_)r`rr1writers rrbzbuild_rows..s2 h{udtxx?PTZT^T^_fTg?gU hs+66r writerVaHexwriterValueHexstreamStartHexrCrDr stateTablerootHexr selectedPointerHex rootLabelslabels rootFieldMaps evidenceRefsevidenceRefCount proofFoundFcurrentWriterPathProofFoundfailedCurrentWriterPathGateIdsmissingEvidenceremainingProofspromotionStatuszblocked-current-internal-only setupStepsz0x10 passes stream+2 to helper 0x00410c90. The helper dispatches only argument values 0x00..0x0b; out-of-range values such as 0x20 return without filling the 12-slot table. 0x00200012z3primary local writer before current frontier readerz8runtime-slot local writer before current frontier readerz5secondary local writer before current frontier readerz[Treat this 0x13 value as an intermediate overwrite, then continue to the later 0x12 writer.zResolve the branch-state table values produced by the preceding 0x10 helper calls, then identify which slot 0x12 stores into selectionBuffer[0x20].) followingStepsrgactivationContextwriterAlgorithmopcode12Algorithmopcode13Algorithmopcode10HelperRuleclassification nextQuestion)rrr0rrhdictr7rVnext enumeraterZrp EVIDENCE_REFSr:#FAILED_CURRENT_WRITER_PATH_GATE_IDS$CURRENT_WRITER_PATH_MISSING_EVIDENCE)r=selection_writersr>rI writer_rowsrYrX writer_value writer_opcodewriter_algorithm trace_startrg trace_rowsr1ra writer_index setup_stepsfollowing_steps activationrts @r build_rowsrsS!HsH-G#''(UV\Z\K DQ fjj12    J!78=A $t+ $ r- 0Xw R U  $D:D,T2DO   d # $ hi &; h  4@3Kj,/QS !3 " +#3 $.!+/- vi ::j)\9mt>SF!D(PL!D(nW_3 3 =Q d Krcdddddttddddd jtd ttdd dg }tD]J}|j d |j d dd j|j dxsgL|jgd|jdtD|jgd|D]6}d jd|j dxsgDxsd}d jd|j dxsgDxsd}d jd|j dxsij dxsgDxsd}|j d|dd|dd|d d!|d!|j d"d#d$j|j d%xsgd!d j|j d&xsgxsdd!|d!|d!|d'd(9|s|j d)|jgd*|D]}|jd+|dd|j d,xs|j d-xsdd|j d.xsddd/dd0d1g |j dxsij d2xsgD]}|j d3xs|j d4xsd}|j d|j d5d6|j d7d8|j d9d|j d:xsdd!|d( |j dxsij d2s|j d;|jgd<|j d=xsgD]} |j d| j d>d!| j d5d6| j d7d8| j d9d8| j d?d| j d:xsdd!| j d@xsdd(|j d!dAj|S)BNz$# Save Selector Current Writer Pathsr/zqLocal traces for the current selector-root writers that appear before the `map1_01a -> map2_02d` frontier reader.z- evidence refs: ``z3- promotion status: `blocked-current-internal-only`z- proof found: Falsez- failed current-writer gates: , z- missing evidence count: z## Evidence Refsz- `rz`: r)r/z## Missing Evidencer/c3&K|] }d| yw)z- Nr`ras rrbzmarkdown..sN2dVNs)r/z## Writer Summaryr/zX| writer | stream start | activation | root | maps | setup | following | next question |z1| --- | --- | --- | --- | --- | --- | --- | --- |c3K|]@}|jdr-|dd|jdd|jdBywrHrE r Nr_r`r1s rrbzmarkdown..'sM xx "G}oQtxx 45Qtxx 7J6K L sAAr-c3K|]v}|jds|jdrR|dd|jdd|jdxs|jdxsdjxywrH stopReasonrErr r/N)r0striprs rrbzmarkdown..,sv xx "dhh|&<G}oQtxx 45Qtxx 7J7jdhhWcNd7jhj6k l r r t sArc36K|]}|dd|dyw)rErrPNrrs rrbzmarkdown..1s+ G}oQtF|n - srrSz| ruz `rvz` | rwz | ryr,r{r}rz |z!| - | - | - | - | - | - | - | - |)r/z## Full Tracesr/z### rrrzActivation context:z/| va | value | opcode | meaning | pointer/cns |z| --- | --- | --- | --- | --- |rRrGrFrEz | `r!z` | `r rHz| - | - | - | - | - |)r/z9| step | va | value | opcode | handler | meaning | stop |z,| ---: | --- | --- | --- | --- | --- | --- |rgr1 handlerVaHexr )r:rjoinrrrVr0extend) rYlinesrefrJsetup followingrrapointerr1s rmarkdownr s. { S/02= )$))4W*X)YZ $S)M%N$OP   EU s3776?+3tyy9J9Pb/Q.RSTU LL01 LLN)MNN LL    -3    II  017R    YY !45;@@NTRT     ]#$Bs+;'<&=T#FVBWAXX[l#wwy!"!CHHSWW\-B-Hb$I#J#yy17R8?C@E7#i[X[>"#2  '  ,  89 LL+,  3}%& '  GG% & L#''2E*F L"  GG( ) /R  !  = -  WW017R<<]KQr Dhh|,FF3G LLTXXg&'tDHHZ,@+AtxxP[G\F]]a88I&-#.c'">   +,277 F LL0 1   GGG$* D LLTXXf%&c$((7*;)d?d@dAdBdCdDdEt tdFdGdHt j djtdIt tdFdJ|dKdLdMd3jdNtDdOdPdQdRdj|xsdSd2d3j|dTdUdS)VNr/c 3K|]m}dtjt|jddtjdj |jdxsgdoyw)z
  • rz : rr
    • N)htmlescapestrr0r)r`rs rrbzhtml_page..dsf   S1239 ;;tyy!2!8b9 : ; sA3A5z
    c 3K|]S}|jdr@tj|dd|jdd|jdUywr)r0rrrs rrbzhtml_page..nsV xx " KK4=/488K+@*A488ICVBWX Y sAArrc 3&K|]}|jds|jdretj|dd|jdd|jdxs|jdxsdjywr)r0rrrrs rrbzhtml_page..ss xx "dhh|&< KK4=/488K+@*A488ICVCvZ^ZbZbcoZpCvtvBwx~~A B sBBrc 3hK|]*}tj|dd|dd|d,yw)rErrPz: rHNrrrs rrbzhtml_page..xs?!  KK4=/4<.4 ?:KL M! s02rrSzruz
    rvzrwzzryz
    rr{z rr}rz rRrGrFrEr!r rHrgzr1rrz

    z

    rrz

    rz

    Activation Context

    z4z
    vavalueopcodemeaningpointer/cns
    No activation context.

    Trace

    z
    stepvavalueopcodehandlermeaningstop
    rzzzz zF z3 Save Selector Current Writer Pathsz zzz-

    Save Selector Current Writer Paths

    z

    Local traces for the current selector-root writers that appear before the map1_01a -> map2_02d frontier reader.

    z

    Evidence refs: z.

    zM

    promotion status: blocked-current-internal-only.

    zJ

    proof found: False; failed current-writer gates: z"; missing evidence: z

    Evidence Refs

      z
    z

    Missing Evidence

    z
      c3NK|]}dtj|dyw)z
    • rNrrs rrbzhtml_page..s#g$HT[[./u5gs#%z
    z

    Writer Summary

    z z z-zz) rrr0rVrrr:rr) rY evidence_refs summary_rowstrace_sectionsrJrrr trace_bodyactivation_rowsrarr1s r html_pagercsGG ! MLN>    -3    KK  017R    [[! !45;@@NTRT!     S%7899J4;;WZ[kWlKmJnoS)9%:;<=,SWWY%7%>3?@ DKKX[X`X`adahahiuava|z|X}L~K@;;tyy)A)GRHOCPQR'+;;s>2345   WW017R<<]KQr Dhh|,FF3G  " "![['):)AcBCD![[*)=)DEFG![[+)>)E#FGH{{488I#6#=#>?@{{7+,-   GGG$* D   xx'()![['):)AcBCD![[*)=)DEFG![[+)>)E#FGH![[.)A)HSIJK{{488I#6#=#>?@{{488L#9#@SABC   4;;s=1234++cgg&78^CGGDW ~ 99!!! ! # ! Q ! > ! ! i! U! X! D! '! ! ! ! 8!!" P#!$ &c-&8%9?%!& X'!( UUYU`U`adaiaikNbOVPUQQstwx\t]s^^c d)!* '}oU;+!, &-!. /!0 gBfgg1!2 3!4 $5!6 s7!8 BGGL)^-^__op9!: .!;!< =!> ?!@ A!! !rc|jdd|dz jtj|dddzd |:|jjdd|jt |d yy) NT)parentsexist_ok'save_selector_current_writer_paths.jsonF)r:) ensure_ascii separatorsrutf-8encoding)mkdir write_textjsondumpsparentr)rYout_dirhtml_outs r write_outputsrs MM$M. 88DD 4e CdJEdT:IdOg>rcptjt}|jdtt dz |jdtt dz |jdtt |jdtdd |j}t|jjtj|jjd }t||j |j"t%d t'|d|j dz y)N) descriptionz--exer)typedefaultz--selection-writersz$save_selector_selection_writers.jsonz --out-dirz --html-outz!Optional HTML report output path.)rrhelprrzwrote z current writer path rows -> r)argparseArgumentParser__doc__ add_argumentrROOTOUT parse_argsrr= read_bytesrloadsr read_textrrrprintr:)parserargsrYs rmainrs  $ $ 9F dD=4HI -D#HnBno  $<  4Dgh    D   4))33W3EF D$ dmm4 F3t9+:4< list[dict]r?rrr) r=rr>rrIdict[int, str]r?rr dict | None) r=rr>rrIrrWrrXrrr) r=rr>rrIrrXrrztuple[int, list[dict]])rlrrz list[str])r=rrrrr)rYrrr)rYrrrrz Path | NonerNone)rr)*r __future__rrrrr;syspathlibrrinsertr__file__resolverprobe_exe_scene_tablesrrr%summarize_save_selector_stream_tracesrrrrrrrrrr7rArKrZrhrprrrrr__name__rrrrsJS" 3tH~--/6678PP> H~''* Ul;   $'# ($-664$' ''' '  '  'T "WtTnjZ58QU? w zFr
    writerstream startactivationrootmapssetupfollowingnext question
    No writer rows.