UHj7dZddlmZddlZddlZddlZddlZddlmZejjde ee jjddlmZee jj"dZedz Zdd d d d Zd ddddddZddZddZddZddZddZddZedk(reyy) zCScan object field references relevant to opcode 0x24 state updates.) annotationsN)Path) read_sectionsoutzobject/context statezobject action/resource selectorz opcode24 object slot/state fieldzobject state switch input)XYagz9opcode24 mode0 writes current object index to object+0x61z;opcode24 mode0 writes first available slot+3 to object+0x61z1opcode24 mode1 writes 0x0059e348+3 to object+0x61z/opcode24 mode2 writes 0x0059e347 to object+0x61z3opcode24 mode0 reads object+0x67 state switch inputz&opcode24 mode0 reads object+0x58 state)i@i@i@i@i@im@c(|dk(ry|dk(ry|dk(ryy)Nreadwritezwrite-immediateunknown)opcodemodrms F/home/exedev/hwanse/tools/summarize_save_selector_object_field_refs.pyinstruction_kindr"s# ~ ~ ~ c dt|}td|D}||d|d|dz}g}tt|dz D]}||}|dvr ||dz}|tvr|d|z}|dk7rdnd } |j d |d d |d |t|t |||d z|||| zjdtj|di} tD]X} |D cgc] } | d| k(s | } } t| t| td| Dtd| Dd| d | d <ZtD cic] } d | d |D cgc] } | d| k(s | c} "}} } |d}d}d| |||D cgc]} | jds| c} |dScc} wcc} wcc} } wcc} w)Nc32K|]}|ddk(s |yw)namez.textNr).0sections r zscan_refs...sNG76?g3MN rawraw_size>rr rvar0x08x02xr )vaHex offsetHexoffsetfieldaccessrawHex routeNoter,c32K|]}|ddk(s dyw)r.rrNrrrows rrzscan_refs..IsMsS]f5LMrc3JK|]}|djdsdyw)r.rrN) startswithr2s rrzscan_refs..Js!Xc(m6N6Nw6W!Xs##)r-totalreadswrites0x61anThe current opcode 0x24 mode 1 write at 0x0040c680 is one of several object+0x61 writes. There are also object+0x61 readers in nearby object/runtime handlers, but this static field-reference scan does not identify a direct save-selector leaf jump. It narrows the next task to consumers around 0x0040cc6d..0x0040ef09 and helper routines around 0x004334a3..0x004355f0.zJsimple .text scan for byte object-field references with 8-bit displacementr0)scope offsetSummaryfieldRefsByOffset object61RefsrouteRelevantRefs conclusion) rnextrangelenOFFSETSappendrhexROUTE_RELEVANT_VASgetsum)exesectionstextdatarowsposr displacementr$raw_len by_offsetr,r3 offset_rowsrefs_by_offsetobject61r?s r scan_refsrU,s*S!H NxN ND tE{DK$z*:: ;D DSY]# c + + C!G} w &  $Z# ~!1 "S]l3/0"\*&vtC!G}=3sW}-11#6+//3   $I &*Fsc(mv.EsF FV_%MkMMX{XX ( Bvcl#$   VCL4KC3x=F3JCKKNf%H T^"+ -1JcSWW[5IcJ  %GL Ks6( F6FF' F"!F"%F'<F- F- "F'cddd|jdddd|jddddd d g }|jd xsijD]b\}}|jd |d |jdd|jdd|jdd|jdd d|jgd|jdxsgD]`}|jd |jdd |jdd|jdd |jdxsdd b|jdxsijdxsg}|jgd|D]`}|jd |jdd |jdd|jdd |jdxsdd b|jddj |S) Nz'# Save Selector Object Field ReferenceszScope: r:.z- conclusion: r?z## Offset Summaryz*| offset | field | refs | reads | writes |z"| --- | --- | ---: | ---: | ---: |r;z| `z` | r-z | r6r7r8z |)rWz## object+0x61 ReferencesrW"| va | access | raw | route note || --- | --- | --- | --- |r=r*r.z | `r/r0-r<0x58)rWz!## object/context+0x58 ReferencesrWrYrZ )rGitemsrDextendjoin)summarylinesr,r3 context58s rmarkdownrdas)1 '++g&'q) \234  4, E O4:AAC}  s6($swww'7&8CGGG*0b  #'''"#4(9':$swwx?P>QQUVYV]V]^iVjVqnqUrrt u  ++128b==fEKI LL  #'''"#4(9':$swwx?P>QQUVYV]V]^iVjVqnqUrrt u   LL 99U rcFdjd|jdxsijD}djd|jdxsgD}djd|jdxsijdxsgD}djd d d d tjt |jd ddtjt |jdddd|ddd|ddd|dgS)Nr]c 3.K|]\}}dtjt|dtjt|jdd|jdd|jdd|jdd yw) r-z r6r7r8 NhtmlescapestrrG)rr,r3s rrzhtml_page..s  FC [[V-./{{3swww/0123www !www !wwx !"   sBBr;c3K|]}dtjt|jddtjt|jddtjt|jddtjt|jdxsdd y w rgr*rhr.zr/r0r[riNrjr2s rrzhtml_page..s   [[SWWW%5!6789{{3swwx01234[[SWWX%6!789:{{3sww{3:s;<=>  C C r=c3K|]}dtjt|jddtjt|jddtjt|jddtjt|jdxsdd y wrorjr2s rrzhtml_page..s   [[SWWW%5!6789{{3swwx01234[[SWWX%6!789:{{3sww{3:s;<=>  rpr<r\zYSave Selector Object Field Referenceszz.

Save Selector Object Field References

z

Scope: r:z.

z

r?z

z

Offset Summary

zmz
offsetfieldrefsreadswrites
z

object+0x61 References

z_z'

object/context+0x58 References

)r`rGr^rkrlrm)ra summary_rowsref_rowscontext58_rowss r html_pagerus199 $KK8>BEEG  Lyy;;~.4"HYY[[!45;@@HNBN 99e L8 T[[W[[%9!:; ry) argparseArgumentParser add_argumentrROOTOUT parse_argsrUrI read_bytesrrprint)parserargsras rmainrs  $ $ &F dD=4HI  $<    D++-.G'4<<( ' 7](]'^ _`r__main__)rintrrreturnrm)rIbytesrdict)rarrrm)rarrrrNone)rr)__doc__ __future__rrrkrsyspathlibrpathinsertrm__file__resolveparentprobe_exe_scene_tablesrrwrrrCrFrrUrdrurr__name__rrrrsI" 3tH~--/66780 H~''* Ul + , %  LMCAE8 2j'T/da zFr
vaaccessrawroute note