UHj(dZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ejjdee ej!j"ddlmZmZe ej!j*dZedz Zd Zd Zd Zd Zd ZdZddZddZddZ ddZ!ddZ"ddZ#ddZ$ddZ%ddZ&e'dk(re&yy) z5Document the save-selector opcode 0x24 handler modes.) annotationsN)Path)Any) read_sections va_to_offsetouti@i@is@i@iL@id@cp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks E/home/exedev/hwanse/tools/summarize_save_selector_opcode24_handler.py load_jsonrs* ;;= ::dnngn6 77ct||}||dzt|kDrtd|dtjd||dS)Nunreadable VA 0x08xzz build_summary..qsUSV 9TSUs aThe current map1_01a->map2_02d boundary uses opcode 0x24 mode 1. That mode updates the current runtime object's +0x61 field from global 0x0059e348 and then advances by +4; it does not by itself prove that the following pointer/table payload selects save-selector leaf 0x00542ae8. The next reverse-engineering step is to identify the producer/meaning of 0x0059e348 and the consumer of object+0x61/context+0x58. 0x0059e34d 0x0059e33e 0x0059db30 0x0059e348 0x0059e347)runtimeEnabledFlagcurrentObjectIndexruntimeObjectTablemode1SourceBytemode2SourceByte)selectorTableVaHextargetTableVaHexrows) handlerVaHexmodeDispatchVaHexfinalAdvanceVaHexglobalscurrentBoundary currentModemodesobjectStateSwitch conclusion)rranger$OBJECT_STATE_TABLE_VAr&OBJECT_STATE_SELECTOR_VA enumerateappendr@r:next HANDLER_VAMODE_DISPATCH_VAFINAL_ADVANCE_VA)r r<r!indexobject_state_tableobject_state_selectorsobject_state_rows object_staterFr*rH mode_rowscurrentcurrent_mode_rowrhrQs @r build_summaryrzBsS!HbghibjkY^(32G%RS)2STkkfklnfop]biX7ORW7WXpp"+,B!"L  h#H- Z cG z !EG z !*G z !*G z !HG8G  ' s|, "   ,'N  'a '_ I(J'G;;}-LUIUWYZ LZ,-!"23!78!"23!78".".".++  #'$&'?&D"E"$%:3$? @% !' ilps EE c f|jdxsi}|jdxsi}ddd|jdddd|jd d |jd d d |jdd d|jdd d|jdxsdd|jddddg }|jdxsijD]\}}|jd|d|d |jgd|jdxsgD]J}|jd|jdd|jdd|jdd L|jgd!|jd"xsijd#xsgD]\}|jd|jd$d%|jd&d|jdd|jdd ^|jdd'j |S)(Nrdrez## Save Selector Opcode 0x24 Handlerz Handler: `r`z`.z- current boundary: `r0z ` value `r-`z- current mode byte: `r7z- current mode target: `rGz- current mode meaning: rH-z- conclusion: rhz ## Globalsrcz- z: `)r|z## Mode Dispatchr|z| mode | target | meaning |z| ---: | --- | --- |rfz| rJz | `z` | z |)r|z!## Object State Switch For Mode 0r|z3| object+0x67 state | selector | target | meaning |z| ---: | ---: | --- | --- |rgr_rEz | rF )r:itemsrmextendjoin)summaryrxrQlinesnamer?r=s rmarkdownrsMkk+,2G;;}-3L- W[[014  M :;9W[[QaEbDccde -=!> ?qA "<#3#3M#B"C1E "<#3#3I#>#E#"FG \234   E I.4";;=- e r$s5'+,- LL{{7#)rc r#''&/*$sww}/E.Fd377S\K]J^^`abc LL017R<rJrGrH Nr:htmlescapestrrPr=s rrRzhtml_page..sv   wwv [[SWW]%;!<=>?{{3swwy12345 sA;A=rfc3"K|]}d|jdd|jddtjt|jddtjt|jdd y w) rrEz rFrrGrrHrNrrs rrRzhtml_page..s   ww}%&'wwz"#$[[SWW]%;!<=>?{{3swwy12345  sB Brgr_c 3K|]?\}}dtj|dtjt|dAyw)
  • z:
    • N)rrr)rPrr?s rrRzhtml_page..sC D% t{{4 !$++c%j*A)B,OsAArczUSave Selector Opcode 0x24 Handlerzz*

    Save Selector Opcode 0x24 Handler

    z

    Handler: r`z .

    z
      z
    • current boundary: r0z value r-rz
    • current mode byte: r7z
    • current mode target: rGz
    • current mode meaning: rHr~z
      • rrhz
    z

    Globals

      z

      Mode Dispatch

      zRz
      modetargetmeaning
      z'

      Object State Switch For Mode 0

      zp)r:rrrrr)rrxrQrw state_rows global_itemss r html_pagersFkk+,2G;;}-3L  ;;w'-2 I[[!45;@@HNBJ99#KK 28b??AL 99a L4 T[[W[[-H)IJK<X &t{{3w{{=7Q3R'S&TThimitituxzAzEzEFVzWvXjYiZZf g ' C DT8U4V(W'XXde )$++c,:J:J=:Y6Z*[)\\hi $T[[\5E5Ei5P5WTW1X%Y$ZZ_` t{{3w{{<89:;5A \1z- rc|jdd|dz jtj|dddzd y) NT)parentsexist_ok#save_selector_opcode24_handler.jsonFrL) ensure_asciiindentrr r )mkdir write_textrdumps)rout_dirs r write_outputsrsD MM$M. 44@@ 7q9D@Arctj}|jdttdz |jdtt |j }t|jjt|jdz g}t||jtd|jdz y)Nz--exez Hwanse2.exe)typedefaultz --out-dirzsave_selector_gate_paths.jsonz%wrote opcode 0x24 handler summary -> r)argparseArgumentParser add_argumentrROOTOUT parse_argsrzr read_bytesrrrprint)parserargsrs rmainrs  $ $ &F dD=4HI  $<    D $,,!@@"EG'4<<( 1$,,Af2f1g hir__main__)rrrrreturnr)r bytesr! list[dict]r"r;rr;)r<rrdict)r rr<rrr)rrrr)rrrrrNone)rr)(__doc__ __future__rrrrrsyspathlibrtypingrrinsertr__file__resolveparentprobe_exe_scene_tablesrrrrrrorpMODE1_TARGET_VArqrjrkrr$r&r@rzrrrr__name__rOrrrs;" 3tH~--/6678> H~''* Ul  "%8 4$JZ(V/d j zFr
      object+0x67 stateselectortargetmeaning