uIj>dZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ejjdee ej!j"ddlmZe ej!j(dZedz Zd d d d d ZdZdZddZddZddZddZddZddZddZ d d!dZ!d"dZ"e#dk(re"yy)#zBSummarize globals used by save-selector opcode 0x24 mode dispatch.) annotationsN)Path)Any) read_sectionsoutzopcode24 mode1 source bytezopcode24 mode2 source bytezcurrent runtime object indexz!runtime object/event enabled flag) 0x0059e348 0x0059e347 0x0059e33e 0x0059e34di0YiPYcp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks E/home/exedev/hwanse/tools/summarize_save_selector_opcode24_globals.py load_jsonr s* ;;= ::dnngn6 77c`|td|dz |}||dz|dz}|jdrdddS|jd rd d dS|jd rdd dS|jdrdddS|jdrd ddS|jdrd ddS|r|rdddSdddS)Nr readzmov al, ds:[addr])kind instructionwritezmov ds:[addr], al zmov cl, byte ptr ds:[addr]zmov dl, byte ptr ds:[addr] zmov byte ptr ds:[addr], clzmov byte ptr ds:[addr], dlunknownz%unclassified direct address reference unclassified)maxendswith) section_dataposbeforeafters rclassify_accessr0&s #aq/# .F qr *E w/BCC w0CDD {#/KLL {#/KLL {#0LMM {#0LMM !2YZZn ==rctjd|}g}|D]}|jddk7r|d}||dz}|||}|j|} | dk\sAt || } |j d|d| zd d|dt d| t|| z zd | d | d d |j|| d z} | dk\rn|S)Nzz)instruction_prefix_len..Us!U&tC$Js3v=Usr)any)rIr-suffixesrSs`` @rr@r@PsN @A Wg h $;3UHUUK  rc t|}g}tjD]]\}}t||t |d}|j ||t |td|Dtd|D|d_g}tttD]m}d|d} t|||}|s|j | tj| dt |td|Dtd |D|dotd |D} td |D} td |D} td |D} |Dcgc]}|jdddkDr|}}td|D}t dd}|Dcgc] }||ks | }}|Dcgc] }||kDs | }}|r t|nd}|r t|nd}| ddk(xr |duxr|du}| jdxsgDcgc]'}|jddk(r|jd)c}ddtddtdt!d| jdxsgDxr%t!d| jdxsgDddd }d}idd d!|jd"xsijd#d$|d%dtdd&tdd'|d(| d)d*| dd+| dd,| dd-|Dcgc]}d|d c}d.|d|dndd/|d|dndd0|d1| ddk(xr| ddk(d2|d3|Scc}wcc}wcc}wcc}wcc}w)4Nc3JK|]}|jddk(sdywr:rrNr=rQrefs rrTz build_summary..c!"X 8MQW8W1"X##c3JK|]}|jddk(sdywr:r#rNr[r\s rrTz build_summary..d!#Z#9NRY9YA#Zr_) globalVaHexmeaningdirectTextRefCountdirectReadCountdirectWriteCountrEr5r7c3JK|]}|jddk(sdywrZr[r\s rrTz build_summary..qr^r_c3JK|]}|jddk(sdywrar[r\s rrTz build_summary..rrbr_c32K|]}|ddk(s |ywrcr NrPrQrows rrTz build_summary..uKM(:l(JK c32K|]}|ddk(s |yw)rcr NrPrms rrTz build_summary..vrorpc32K|]}|ddk(s |yw)rcr NrPrms rrTz build_summary..wsT#]1C|1S#Trpc32K|]}|ddk(s |ywrlrPrms rrTz build_summary..xsec#mBTXdBdcerprgrc3\K|]$}|jdrt|dd&yw)rcrXN)r=intrms rrTz build_summary..}s0$  77= ! C #$s*,r rEr:r#r9 0x0040fb1cr r c3DK|]}|jddk(yw)r9rvNr[r\s rrTz build_summary..s'/  GG& '< 7/ s c3lK|],}|jddk(r|jddk(.yw)r:r#r9 0x0040fb21Nr[r\s rrTz build_summary..s8 ww|$/ GG& '< 7 s24z0mov al, ds:[0x0059e33e]; mov ds:[0x0059e347], alzBadjacent mode2 object-index cache, not a mode1 0x0059e348 producer) writerInstructionVaHexessourceReadInstructionVaHexsourceGlobalVaHex sourceMeaningtargetGlobalVaHex targetMeaningcopiesCurrentRuntimeObjectIndexinstructionSummarypromotionImpactaOpcode 0x24 mode 1 reads 0x0059e348, but no direct .text write to 0x0059e348 was found. The adjacent mode 2 byte 0x0059e347 does have a direct writer at 0x0040fb1c that copies the current runtime object index 0x0059e33e. A wider 0x0059e330..0x0059e34f neighborhood scan shows that nearby object/status bytes are heavily referenced while 0x0059e348 still has only that single read and no direct writer. Direct writes are present on both sides of the mode1 source, so the scan is seeing adjacent runtime bytes but leaves 0x0059e348 as a direct-write hole. This makes 0x0059e348 an unresolved runtime/global source rather than a proven selector leaf chooser.scopez6direct .text references to opcode 0x24 runtime globalscurrentOpcode24ModecurrentBoundarystreamPlus1HexrowsneighborhoodRangeHexz..0xneighborhoodRows mode1NeighborhoodDirectReadCountrf!mode1NeighborhoodDirectWriteCountmode1DirectWriteCountmode2DirectWriteCount#neighborhoodDirectWriteAddressHexesmode1NearestLowerDirectWriteHex mode1NearestHigherDirectWriteHex)mode1DirectWriteHoleBetweenNeighborWrites!mode1UnwrittenRuntimeGlobalSourcemode2WriterContext conclusion)rGLOBALSitemsrKrur?lensumrangeNEIGHBORHOOD_STARTNEIGHBORHOOD_ENDr=nextsortedr*minrU)rAhandler_summaryrBr value_hexrdrEneighborhood_rowsaddress address_hexmode1mode2current_objectmode1_neighborhoodrndirect_write_rowsdirect_write_addresses mode1_address lower_writes higher_writesnearest_lower_writenearest_higher_writemode1_direct_write_holer]mode2_writer_contextrs r build_summaryrZs~S!H D%mmo   7c8SB-?@ $"%d)""X"XX ##Z#Z Z     +-=>  73-( c8W5   &{{;3"%d)""X"XX ##Z#Z Z "    KK KE KK KETTTNe->ee( 77%q )A - $$$$  b)M+A]W}E\G]L],B^gP]F]W^M^/;#l+1>3}-D-.!3 - t + -  ,yy(.B% ww|$/ GG& '% '3) .) .+./ %))&17R/ , ,  yy(.B  Q_). L I  3 34E F L"QQRbc    "%7$?P,Q   ,-?@R-S  '9!:  '9!:  ..D0 #*b 0   *.A.Mb$S) *SW  +/C/Ob%c* +UY# & 45L' ( ,U3E-F!-K-{PbcuPvz{P{) * 2+ , j- e^^% P0 s*L: L?!L?+ M6M,M 7 Mc"ddd|jdddd|jddd |jd d |jd d |jdd|jdxsijdd|jdxsijdd|jddd|jdd|jdddj|jdxsgxsdd|jdd |jd!dd"|jd#d$|jd%dd&d'g}|jd(xsgD]}d)jd*|jd+xsgDxsd}|jd,|jd-d.|jd/d0|jd1d0|jd2d0|jd3d0|d4 |jgd5|jd6xsgD]}d)jd7|jd+xsgdd8Dxsd}|jd,|jd-d.|jd/xsdd0|jd1d0|jd2d0|jd3d0|d4 |jdd9j|S):Nz## Save Selector Opcode 0x24 GlobalsrhzScope: r.z- current opcode 0x24 mode: `r`z- mode1 direct writes: rz- mode2 direct writes: rz)- mode1 unwritten runtime/global source: rz- mode2 writer context: rrz- mode2 promotion impact: rz- neighborhood range: `rz#- mode1 neighborhood reads/writes: r / rz'- neighborhood direct-write addresses: , r-z-- mode1 nearest lower/higher direct writes: `rz` / `rz3- mode1 direct-write hole between neighbor writes: rz- conclusion: rz:| global | meaning | refs | reads | writes | direct refs |(| --- | --- | ---: | ---: | ---: | --- |r
c3K|];}|jdd|jdd|jd=ywr9 r:r!Nr[r\s rrTzmarkdown..H ww)*+1SWW\-B,C1SWW]E[D\ ] AArEz| `rcz` | rdz | rerfrgz |)rhz## Neighborhood Direct Refsrhz:| global | meaning | refs | reads | writes | sample refs |rrc3K|];}|jdd|jdd|jd=ywrr[r\s rrTzmarkdown..rrr )r=joinr?extend)summarylinesrnrEs rmarkdownrs- '++g&'q) ' 4I(J'K1M !'++.E"F!GH !'++.E"F!GH 3GKK@c4d3ef "W[[1E%F%L"$Q$QRf$g"ij $w{{3G'H'NB&S&STe&f$hi !'++.D"E!FaH -gkk:\.]-^^abibmbmoRcSbT U 1$))GKKHmv=wx \234 D2' E*{{6"(b {{ wwv,"     #''-()cggi.@-ASWWMaEbDccfww()*#cgg6H.I-J#dVSU W   LL{{-.4" {{ -2r2     #''-()cggi.@.GC-HCGGThLiKjjmww()*#cgg6H.I-J#dVSU W   LL 99U rcg}|jdxsgD]}djd|jdxsgDxsd}|jdtjt |jddtjt |jd d |jd d |jd d |jd d |d g}|jdxsgD]}djd|jdxsgddDxsd}|jdtjt |jddtjt |jd xsdd |jd d |jd d |jd d |d djddddtjt |jddddtjt |jddd|jddd |jd!dd"|jd#dd$tjt |jd%xsijd&dd'tjt |jd%xsijd(dd)tjt |jd*dd+|jd,d-|jd.dd/tjd0j|jd1xsgxsddd2tjt |jd3d4tjt |jd5dd6|jd7dd8tjt |jd9dd:d;dj|ddj|d.U  KK377#567q9N8OqQTQXQXYfQgPhi j AArErzrczrdz rerfrgz rc 3K|]N}tj|jdd|jdd|jdPywrrr\s rrTzhtml_page.. rrrrzUSave Selector Opcode 0x24 Globalszz*

Save Selector Opcode 0x24 Globals

z

Scope: rz.

z
    z$
  • current opcode 0x24 mode: rz
    • z
  • mode1 direct writes: rz
    • z
  • mode2 direct writes: rz+
  • mode1 unwritten runtime/global source: rz
  • mode2 writer context: rrz
  • mode2 promotion impact: rz
  • neighborhood range: rz%
  • mode1 neighborhood reads/writes: rrrz)
  • neighborhood direct-write addresses: rrz4
  • mode1 nearest lower/higher direct writes: rz / rz5
  • mode1 direct-write hole between neighbor writes: rz
  • rz
zz
globalmeaningrefsreadswritesdirect refs
z!

Neighborhood Direct Refs

z)r=rr?rrstr)rbodyrnrEneighborhood_bodys r html_pagers D{{6"(b {{ wwv,"     S)?%@ABC;;s3779#5678977/01277,-./77-./0&    {{-.4" {{ -2r2       S)?%@ABC;;s3779#5#<=>?@77/01277,-./77-./0&     99a L4 T[[W[[%9!:;t{{3w{{[|O}K~??AAQRVR]R]^abibmbmnPbQ^RRSQTT` a ? Lw@x?yy~ t{{3w{{<89:;5A N $+ N #$3 rc|jdd|dz jtj|ddd|:|jjdd|jt |dyy) NT)parentsexist_ok#save_selector_opcode24_globals.jsonF),:) ensure_ascii separatorsrr)mkdir write_textrdumpsparentr)rout_dirhtml_outs r write_outputsr6s{ MM$M. 44@@ 7:FAdT:Ig.Arctj}|jdttdz |jdtt |jdtdd|j }t|jjt|jdz i}t||j|jtd |jd z y) Nz--exez Hwanse2.exe)typedefaultz --out-dirz --html-outz!Optional HTML report output path.)rrhelpz#save_selector_opcode24_handler.jsonz%wrote opcode 0x24 globals summary -> r)argparseArgumentParser add_argumentrROOTOUT parse_argsrrA read_bytesrrrrprint)parserargsrs rmainrAs  $ $ &F dD=4HI  $<  4Dgh    D $,,!FFKG'4<<7 1$,,Af2f1g hir__main__)rrrrreturnr)r,bytesr-rurdict)rArrB list[dict]rCrurr)rIrr-rurru)rArrrrr)rrrrrO)rrrrrz Path | NonerNone)rr)$__doc__ __future__rrrrr;syspathlibrtypingrrinsertr__file__resolverprobe_exe_scene_tablesrrrrrrrrr0rKr@rrrrr__name__rPrrrsH" 3tH~--/66780 H~''* Ul/.05   8 >(, hV0f;|B j zFr
globalmeaningrefsreadswritessample refs