BIj2dZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ejjdee ej!j"ddlmZmZmZe ej!j,dZedz Zd Zd Zd Zd Zd dddZddZd dZd!dZ d"dZ!d#dZ"d$dZ#d%dZ$d&dZ% d'dZ&d(dZ'd(dZ(d)d*dZ)d+dZ*e+dk(re*yy),zCScan opcode 0x24-looking rows inside the current selector 2:0 root.) annotationsN)Path)Any)find_cns_strings read_sections va_to_offsetoutmap1_01amap2_02diHYi(Tzfrontier leaf pointerzfrontier readerz#frontier reader false branch target)i*Ti +TioScd|dS)N0x08xvalues P/home/exedev/hwanse/tools/summarize_save_selector_opcode24_current_root_modes.pyhex32rs c{ cp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks r load_jsonr #s* ;;= ::dnngn6 77rc<t|tsyt|dS)N) isinstancestrintrs r parse_hexr&)s eS ! ub>rcvt||}||dzt|kDrytjd||dS)Nz?E2''/06B ;;+ , <N Irc|dddS|tvr dt|dS||vrd||dSt||dddS|dkrd d dSd d dS) Nmissing-)kindmeaningfrontiercnszexecutable-pointerzVA in executable imageiz small-scalarzsmall scalar or scene idscalarznon-pointer scalar)FRONTIER_VALUESr)rr- cns_stringss rclassify_valuerE>sz }!c22 "u/EFF +e*<==He$0,9QRR &3MNN)= >>rc.|ry|dk(ry|dk(ry|dk(ryy) Nz/low-byte collision inside an executable pointerrz&opcode 0x24 mode 0 object-state branchr z;opcode 0x24 mode 1 writes byte(0x0059e348)+3 to object+0x61z9opcode 0x24 mode 2 writes byte(0x0059e347) to object+0x61zQnon-dispatch mode; treat as opcode-like data until runtime trace proves executionr)modepointer_collisions r mode_meaningrJLs)@ qy7 qyL qyJ ^rc g}t||dD]@}t|||}||dzdk7r|dz dz}|dz dz} |dz dz} t||du} g} tdddD]U} t|||| z}t|||}| j | t || z| t |nd|d|d d W|j id t |d d ||z ddt |d|dd|dd| dd| dd| dd| dd| d| d|t k(d t|| d| dtd| Ddtd| DC|S) Nr($r"r>r?)r/vaHexvalueHexr>r?rQrelativeOffsetHexz+0xxrRrHmodeHexr02xbyte2byte2Hexbyte3byte3HexpointerCollisionopcodeCandidatecurrentBoundary lookaheadfrontierOperandc3,K|] }|ddk(yw)r>r@Nr.0items r zscan_rows..|s"T$4<:#="TsrouteCnsOperandc3*K|] }|ddv yw)r?> map1_01a.cns map2_02d.cnsNrras rrdzscan_rows..}s"m[_4 ?6V#V"ms) ranger0rrEappendrCURRENT_BOUNDARY_VArJany)r,r-rDstartendrowsr.rrHrWrYrIr^r/ item_value item_classs r scan_rowsrrXs) DE3"$ h+ =EDLD0  d""$"$(59E Ar1o F!#xf=J' HkJJ    rF{+1;1GE*-T"6*%i0     U2Y 3rEz!n!5  e   D  D:  U   "U3K(  U  "U3K(   1  #44  r%88  |D*;<    s"T)"TT s"mcl"mm!  '$ J Krc"t|}t||}t|}t|j d}t|j d}|| t dt |||||}|D cgc] } | ds |  } } | D cgc] } | ddk(s | } } |D cgc] } | ds |  } } | D cgc] } | ds |  } } | D cgc] } | d s |  }} td |Dd}td |Di}d }id ddtdtddd|j dd|j dd|j dd||z dttd|j dxsttd|j ddt|dt| dt| dt| d t| d!t|d"|du||| |d#|d$Scc} wcc} wcc} wcc} wcc} w)%N rangeStartHex rangeEndHexzQcurrent selector root range was not found in save_selector_selection_writers.jsonr\rHr r[r_rec3,K|] }|ds |yw)r]Nrrbr8s rrdz build_summary..sKSC8I4JSKs c3K|]I}|jdtk(r/|jdtk(r|jdxsiKyw)sourcetargetopcode24BoundaryN)r6CURRENT_SOURCECURRENT_TARGETrws rrdz build_summary..sK wwx N2swwx7HN7Z GG& ' -2 - sAAaThe current selector 2:0 root has multiple opcode-0x24-looking mode 1 rows. The known gate boundary 0x005428e4 is present, but no opcode candidate in this root carries a direct frontier leaf, frontier reader, false-branch target, or map1_01a/map2_02d CNS operand in the next four dwords. This keeps opcode 0x24 mode 1 classified as object-state code that still needs runtime producer/selection proof, not as a strict map1_01a->map2_02d transition.scopez3current selector 2:0 root low-byte opcode 0x24 scanryrzselectorz2:0r4 rootRangeHexz..rootByteLengthmode1SourceHexgateBoundaryVaHex opcodeVaHexgateBoundaryValueHexopcodeValueHexrowCountopcodeCandidateCountpointerCollisionCountmode1CandidateCountfrontierOperandCountrouteCnsOperandCountcurrentBoundaryFoundblocked)r]modeRowsfrontierOperandRowsrouteCnsOperandRowspromotionStatus conclusion)rrr:r&r6 ValueErrorrrnextr|r}r MODE1_SOURCErkr))r,r7 gate_pathsr-rDr9rmrnror8 opcode_rows mode1_rows pointer_rows frontier_rowsroute_cns_rowscurrent_boundary gate_boundaryrs r build_summaryrs S!H"31K"#45G gkk/2 3E GKK . /C } lmm S(K ?   7;;787;;};U:VW   #+  % -  ]..}=[GZA[   1 12B C  CI  K 0  \!2  s:  M 2  N 3! "  0 <# $,,-$ / +BACJKs<9 G8G8 G=G=& H1H; HH H H c\ddd|dddd|dd|d d d |d d |dd d|dd|ddd|dd d|dd|jdd d|dd|dd|dd |d!d"|d#d$|d%d&|d'd(|d)d*|d+dd,dd-d.g}|d/D]f}d0jd1|jd2xsgD}|jd3|d4d5|d6d5|d7d8|d9d:|d;d:|d:|d<d=h|jdd>j|S)?Nz.# Save Selector Opcode 0x24 Current Root ModeszScope: r~.z - route: `ryz -> rz`z - selector: `rz` / selected pointer `r4z- root range: `rz` (rz bytes)z- mode1 source: `rz- gate boundary: `rz ` value `rz- low-byte 0x24 rows: rz- opcode candidates: rz- pointer collisions: rz- mode1 candidates: rz- direct frontier operands: rz- route CNS operands: rz- current boundary found: rz- promotion status: rz- conclusion: rz## RowszC| va | value | mode | candidate | current | next dwords | meaning |z+| --- | --- | --- | --- | --- | --- | --- |r
c 3|K|]4}d|dd|ddtjt|d6yw)rrRz` r> r?Nhtmlescaper$ras rrdzmarkdown..sH Z !DL>4;;s4 ??S3T2U V s:<r^z| `rQz` | `rRrUz` | r\z | r]r?z | )r6joinrj)summarylinesr8r^s rmarkdownrs$8 ''"#1% WX&'tGH,=+>a@  +,,B7K_C`Baabc '.12#g>N6O5PPWX G$456a8 W%89:)GKKPfDgChhij !4 56 (> ?@A )@!A BC w'<=>? &w/E'F&GH )?!@ AB $W-C%D$EF w'89:; ./0  M5/ E2z" KK  ,2    #g,uS_$5U3y>:J$$%&c#.?*@)AYKsSVW`SaRbbd f   LL 99U rcdjd|dD}djddddtj|dd tj|d d tj|d d tj|dd dd|ddd|ddd|ddd|ddd|ddd|ddd|ddd |d!dd"d#tj|d$d%d&|d'gS)(Nrc3K|]}dtjt|ddtjt|ddtjt|dd|dd|ddd jd |j d xsgDdtjt|d d yw)zrQzrRrUzr\z r]rc3K|]r}dtjt|dzdztjt|dzdztjt|dztyw)zrRz r>rr?Nrras rrdz&html_page...sIfj8dkk#d:6F2G&HH:UX\XcXcdghlmshtduXvvy||@D@K@KLOPTU^P_L`@aaIsA8A:r^r?z N)rrr$rr6rws rrdzhtml_page..s    [[S\!2345[[S_!5678[[S^!4567$%&'$%&'{{InqnunuvAnBnHFHIIJJ{{3s9~./01  sC Crz`Save Selector Opcode 0x24 Current Root Modeszz5

Save Selector Opcode 0x24 Current Root Modes

z

Route ryz -> rzz, selector rz, root rz .

z
    z
  • low-byte 0x24 rows: rz
    • z
  • opcode candidates: rz
  • pointer collisions: rz
  • mode1 candidates: rz
  • direct frontier operands: rz
  • route CNS operands: rz
  • current boundary found: rz
  • promotion status: rz
z

rz

zz
vavaluemodecandidatecurrentnext dwordsmeaning
)rrr)rros r html_pagers 99 :&  D 99l y? $++gh&789WU]M^A_@``xy}zEzEFMNXFYzZy[[optp{p{|CDR|SpToUUa b "7:#6"7u= !'*@"A!B%H "7+B#C"DEJ )>!? @F (1G)H(IO "7+A#B"C5I &w/E'F&GuM ):!; r)argparseArgumentParser add_argumentrROOTOUT parse_argsrr, read_bytesr r7rrrrprint)parserargsrs rmainrs  $ $ &F dD=4HI -D#HnBno T3A`;`a  $<  4Dgh    D $(("-$//2&G '4<<7 1$,,Aq2q1r str__main__)rr%returnr$)rrrrrr)rz str | Noner int | None)r,bytesr- list[dict]r.r%rr)r7dictrr)rrr-rrDdict[int, str]rr)rHr%rIboolrr$) r,rr-rrDrrmr%rnr%rr)r,rr7rrrrr)rrrr$)N)rrrrrz Path | NonerNone)rr),__doc__ __future__rrrrr*syspathlibrtypingrrinsertr$__file__resolverprobe_exe_scene_tablesrrrrrrr|r}rrkrCrr r&r0r:rErJrrrrrrr__name__rrrrsI" 3tH~--/6678PP H~''* Ul  '!58  4 ? _'T: ::: :z$N FBu" zFr