\IjN dZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ejjdee ej!j"ddlmZmZddlmZmZe ej!j0dZed z Zd Zd Zd Zd ZdZdZ dZ!dZ"dZ#dZ$dZ%e!de"de#de$de%diZ&d(dZ'd)dZ(d*dZ)d+dZ*d,dZ+d-d.dZ,d/d Z-d0d!Z.d1d2d"Z/d3d#Z0d3d$Z1edfd4d%Z2d5d&Z3e4d'k(re3yy)6zPSummarize whether the opcode 0x24 payload table reaches the frontier leaf table.) annotationsN)Path)Any) read_sections va_to_offset)handler_for_opcodesection_name_for_vaoutmap1_01amap2_02di(Ti(Ti)Ti(Ti)Ti)Ti*Ti*Ti +Tzleaf-table-window-startzroot-table-pointerz wrapper-leafz frontier-leafzfrontier-readercp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks K/home/exedev/hwanse/tools/summarize_save_selector_opcode24_payload_table.py load_jsonr+s* ;;= ::dnngn6 77cd|dS)N0x08xvalues rhex32r!1s c{ rc"|r t|dSdS)N)intrs r parse_hexr%5s"3ub>,,rcvt||}||dzt|kDrytjd||dS)Nz:!(-=!> ' O <  "(E2G,,'F "5\M" J! U 5o 5*F "5\M,008QRO J - 'F "5\M,U3O J F "5\M&O J 2+% UV^$?F  JF Jrcg}t}|}t|D]:}||vr!|j|t|dd|S|j ||j |}|s!|j|t|dd|S|j d}||d|j d|j d|j dd } |j dd vrZt |trJ|j| |tvs |tk\r$|j|d zt|d d|S|}$d | d<|j| |S|S)Nloop)stepr1 stopReasonznot-in-payload-windowr r1r2r5r@)rVr1r2r5r@>rCr?rAr reached-frontier-targetznon-pointer-valuerW) setrangeappendr!addrK isinstancer$rNrL) rows_by_vastart_va max_stepsrowsseenr-rVsourcetargetitems rpointer_closurerfksm DUD Bi  : KKb P Q 8 K7  # KKb I`a b . K-G$G_ :.JJv&!::m4   ::f !] ]blmsuxby KK &&4D*D  1H"6]";  K B 0\ D K?> Krc  g}|D]}t|jd}| t|cxkr tkrnndnd}|tvr t|}nt |cxkr t krnnd}|j|d|d||dk(|dk7d|S)Nr@zpayload-windowexternalzleaf-table-windowr1) sourceVaHexr@ targetKindlocalPayloadEdgefrontierTargetEdge)r%rKrHrIrNrLrMr[) table_rowsedgesrOrd target_kinds rpayload_pointer_edgesrps E 377=12 > *76*P[*P&V` ] "'/K  :? :-K w<}-% +/? ?"-1A"A    Lrc i}i}|D]}|d}|d}|j|tj||j|tj||j|gj|g}t}t |D]!}||vr |g} t} | r^| j } | | vr| j| | j t |j| t| z | r^|j| t | Dcgc]}|j|gD]}|} }}t | Dchc]}|jds|dc}} td| D}|jt|t | | | | |d$|Scc}}wcc}w)Nrir@rkc3>K|]}|jdyw)rlNrK.0edges r z-payload_pointer_components..sZ$txx(<=Z) componentnodesrnexternalTargetsclosedInsidePayloadreachesFrontierTarget) setdefaultrYr\r[sortedpopextendrKrJanyr()rn adjacencyedge_by_sourcervrcrd componentsrbnodestackrzcurrentcomponent_edgesexternal_targetsreaches_frontiers rpayload_pointer_componentsrs%'I,.N;m$m$VSU+//7VSU+//7!!&"-44T: ;JUDy!  4< %iikG% IIg  LL gsu = EF G  E!- &**626     "'# 88./  #   Z/ZZZE]$/'7#7%5   / > ' # s 5 G!G ct|}tttdzdDcgc]}t |||}}|Dcic]}|d| }}|Dcgc]}|j ddk(s|}}|Dcgc]}|j ddvs|}}|Dcgc]}|j ddk(s|} }t |} t| } | D cgc]} | j d r| } } t|t}|Dcgc]8}|j d d k(s t|j d tvr|:}}td |xsgDi}d}idtdtdtt dttdttdttdtt"dtt$dtt&dtt(dtt*d|j dd|j dd|dt-|d|d t-|d!|t-| t-| | | t-| t-| d"k(t/d#| Dt-| |t1|t1|d$gd%|d&Scc}wcc}wcc}wcc}wcc}wcc} wcc}w)'Nr r'r-r5r?>rCrAr=z.datarkrWrXr@c3K|]6}|jdtk(r|jdtk(r|8yw)rcrdN)rK ROUTE_SOURCE ROUTE_TARGET)rurOs rrwz build_summary..s9 wwx L0SWWX5F,5V  s<>aThe opcode 0x24 payload/action table immediately before the leaf table is pointer-local: its dword pointers stay inside 0x005428e8..0x005429a4, and none point at the leaf table start, the 2:0 root table pointer, wrapper leaf 0x00542a04, frontier leaf 0x00542ae8, or reader 0x00542b0c. The closure from the naive dispatch stop 0x005428f4 stops at 0x005428e8 on a non-pointer value. This rules out using the opcode 0x24 payload table as proof that the 0x005428bc writer path selects the frontier leaf; promotion remains blocked.rcrd opcode24VaHexdispatchStopVaHexpayloadWindowHexz..leafTableWindowStartHexrootTablePointerHexwrapperLeafHexfrontierLeafHexfrontierReaderHexgateDispatchStopHexgateFrontierLeafHexfrontierLeafPointerHex tableRowspayloadPointerCountpayloadPointersleafTablePointerCountleafTablePointersrc3>K|]}|jdyw)r}Nrs)rurys rrwz build_summary.. s0z\e?V1W0zrxblocked)zKdecode the selector/table index that chooses current 2:0 leaf table entrieszIprove wrapper 0x00542a04 executes into 0x00542ae8 during the normal routez3find a strict map1_01a source coordinate or hotspot)payloadGraphEdgeCountpayloadGraphComponentCountpayloadGraphEdgespayloadGraphComponentspayloadGraphExternalEdgeCountpayloadGraphAllEdgesLocal!payloadGraphReachesFrontierTargetdataLowByteCountdispatchStopClosureclosureReachesFrontierTargetpayloadDirectlyTargetsLeafTablepromotionStatusremainingProofs conclusion)rrZrHrIrSrKrprrfDISPATCH_STOP_REFr%rNnextrrr! OPCODE24_VArLLEAF_TABLE_ROOT WRAPPER_LEAF FRONTIER_LEAFrMr(rbool)r+ gate_pathsr,r-rmrOr^payload_pointersleaf_table_pointersdata_low_bytes graph_edgesgraph_componentsrvgraph_external_edgesclosurerereached_targets route_gaters r build_summaryrs.S!H6;M;YZ?\]6^_&h+_J_,67S#d)S.7J7'1ZSWWV_HY5YZZ*4u3Kt8t3uu%/_c377;R3SW^3^c_N_' 3K1+>-8]TI[@\D]]j*; > TXXm, - > O  &,"  J 8$ ,$ ,$  {+$  U#45 $  u]34Bu[7I6JK $  "5)9#: $  u_5$  % -$  5/$  U?3$  z~~.AB$  z~~.FG$  Z$  s#34$  +$  %8!9!$ " 0#$ $"%[!1&)*:&;("2),-A)B%()=%>!%C-00ziy0z-z/&(,_(=+/0C+D$ !G$ $;`7Zu_^sAJ) J.J3-J37J8J8J=4J=K+K=Kc$ddd|dd|dd|dd d |d d d |d d d|dd d|dd d|dd d|dd d|dd d|dd|dd|dd|dd |d!d"|d#d$|d%d&|d'd|d(dd)dd*d+g}|d,D]}|jd-|jd.d/|jd0d1|jd2xsd3d4|jd5xsd3d/|jd6xsd3d4|jd7xsd3d8 |jgd9|d:D]}d;jd<|jd=xsgD}|jd-|jd>d?|jd@d?|jdAd?d;j|jdBxsgd?|xsd3d8 |jgdC|dDD]}|jdE|d0d1|jd2d4|jd5d/|jd6xsd3dF|jdGxs|jdHxsdd/|jdIxsd3d1|jdJxsd3dF|jdKxsd3d8|jgdL|jdM|dND|jddOj|S)PNz)# Save Selector Opcode 0x24 Payload Tablez - route: rcz -> rdz- opcode 0x24: `r`z- dispatch stop ref: `rz- payload window: `rz- leaf table window start: `rz- root table pointer: `rz- wrapper leaf: `rz- frontier leaf: `rz- frontier reader: `rz- payload pointer count: rz- payload graph components: rz!- payload graph all edges local: rz)- payload graph reaches frontier target: rz- leaf table pointer count: rz#- closure reaches frontier target: rz'- payload directly targets leaf table: rz- promotion status: rrz## Dispatch Stop Closurez,| step | va | value | kind | target | stop |z&| ---: | --- | --- | --- | --- | --- |rz| rVz | `r1z` | `r2-z` | r5r@rWz |)rz## Payload Pointer GraphrzH| component | closed inside payload | reaches frontier | nodes | edges |z | ---: | --- | --- | --- | --- |r, c3fK|])}|jdd|jd+ywriz->r@Nrsrts rrwzmarkdown..D7 xx &'r$((=*A)B C /1rnryz | r|r}rz)rz## Payload Windowrz3| va | value | kind | target | low byte | handler |z%| --- | --- | --- | --- | --- | --- |rz| `z` rBrEr;r<r=)rz## Remaining Proofsrc3&K|] }d| yw)z- Nrrures rrwzmarkdown..[sD2dVDsr )r[rKrjoin)summarylinesrery edge_textrOs rmarkdownrs3 GH%&d78+<*=> 7?34A6 )a@ g&89:!< &w/H'I&J!L !'*?"@!AC G$456a8 W%678: w':; #G,A$B#CD &w/K'L&MN +G4O,P+QR 3G<_4`3ab &w/F'G&HI -g6T.U-VW 1':[2\1]^ w'89:;   " 605 E8-.  &!"$txx'8&9txx ?S?ZWZ>[[_xx&3'tDHH],C,Js+K4PTPXPXYePfPmjmOnnp r   LL56  II ! g.4"    {+,C >S0T/UUX}}456cyyw/5267s9;K:LB P   LL{#  #g,uSWWZ%8$9cggfo=NO &-#.b1I1kSWWUdMe1kik0lm %,-U377;P3Q3XUX2YY[\_\c\cd{\|]DAD\EEG H   LL01 LLD1B)CDD LL 99U rc0 g}|dD]}|jd|jddtjt |jddtjt |jdxsdd tjt |jd xsddtjt |jd xsdd tjt |jd xsdd  g}|dD]v}|jd xsdd|jdxs|jdxsd}|jdtj|ddtjt |jdd tjt |jd dtj|dtjt |jdxsddtjt |jdxsddtjt |jdxsdd yg}|dD]}dj d|jdxsgD}|jd|jddtjt |jddtjt |jddtjdj |jd xsgdtj|xsdd! dj d"|d#D} d$j gd%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5tj|d6d7tj|d8d9|d:d;|d<d= d>|d?d@|dAdB|dCdD|dEd= dF|dGdH|dIdJ|dKdL|dMdN|dOdP|dQdR|dSdTtj|dUdVdWtj|dXdVdYdZd[dj |d\d]d^d[dj |d\d_d`d[dj |d\dadb| dcdddedS)fNrzrVzr1zr2rzr5r@rWz r rBrErzr;r<z r=rrc3fK|])}|jdd|jd+ywrrsrts rrwzhtml_page..|rrrnryz r|r}rzzc3NK|]}dtj|dyw)z
  • z
    • N)htmlescapers rrwzhtml_page..s#adDT!2 359as#%rrzzzz zF z8 Save Selector Opcode 0x24 Payload Tablez zzz2

    Save Selector Opcode 0x24 Payload Table

    z

    route: rcz -> rdz; opcode 0x24 rz; payload window rz .

    z$

    leaf table window start: rz; wrapper leaf rz; frontier leaf rz; frontier reader rz

    payload pointer count: rz; graph components: rz; graph all edges local: rz!; graph reaches frontier target: rz; leaf table pointer count: rz#; closure reaches frontier target: rz'; payload directly targets leaf table: rz; promotion status: rz

    z

    rz

    Dispatch Stop Closure

    zp z z
    stepvavaluekindtargetstop
    z

    Payload Pointer Graph

    z z

    Payload Window

    zw
    componentclosed inside payloadreaches frontiernodesedges
    z

    Remaining Proofs

    z
      z
    zz)r[rKrrstrr) r closure_rowsrermrOrd graph_rowsryr proof_itemss r html_pager`sL-.   88F#$%S'):%;<=>S*)=)D%EFGH;;s488F#3#:s;<=>S-)@)GC%HIJK;;s488L#9#@SABCD     J{#  GGM*1c2!CGGO4L4nPSPWPWXgPh4nln3op S\234S)<%=>?@;;s3776?3456V,-.S)>)E#%FGHIS1F)G)N3%OPQQYZ^ZeZefijmjqjqsJkKkRORgS[TZUU     J56  II ! g.4"    ==-./;;s9==1F#GHIJK;;s9==1H#IJKLMTYYy}}W/E/K%LMNOY%5#678    ''agN_F`aaK 99### # # # Q # C # # f# U# [# D# '# # # # =!#" t{{78#456gdkk'RZJ[>\=]]qry{JsKrLLjkrsEkFjGGS T##$ /w7P/Q.RRnovxHpIoJJghopAhBgCCbcjk~cb@@L M%#& 'w/D'E&FFZ[bc\A[BB[\cd\@[AAbcjkNcObPPlmtuLmMlNNqryzXrYqZZABIJkBlAmmABFBMBMNUVgNhBiAjjn o'#(  GL12348)#* ++#, {-#. BGGL)**:;/#0 +1#2 Q3#4 BGGJ'((895#6 $7#8 B9#: BGGJ'((89;#< &=#>  U#?#@ A#B C#D E## #rc|jdd|dz jtj|ddd|:|jjdd|jt |dyy) NT)parentsexist_ok)save_selector_opcode24_payload_table.jsonF),:) ensure_ascii separatorsrr)mkdir write_textrdumpsparentr)rout_dirhtml_outs r write_outputsrs{ MM$M. ::FF 7:FGdT:Ig.Arctj}|jdttdz |jdtt |jdtdd|j }t|jjt|jdz g}t||j|jtd |jd z y) Nz--exez Hwanse2.exe)typedefaultz --out-dirz --html-outz!Optional HTML report output path.)rrhelpzsave_selector_gate_paths.jsonz#wrote opcode 0x24 payload table -> r)argparseArgumentParser add_argumentrROOTOUT parse_argsrr+ read_bytesrrrrprint)parserargsrs rmainrs  $ $ &F dD=4HI  $<  4Dgh    D $,,!@@"EG'4<<7 / ?j0j/k lmr__main__)rrrrreturnr)r r$rr)r z str | Noner int | None)r+bytesr, list[dict]r-r$rr)r+rr,rr-r$rdict) )r^zdict[int, dict]r_r$r`r$rr)rmrrr)rnrrr)N)r+rrzlist[dict] | Nonerr)rrrr)rrrrrz Path | NonerNone)rr)5__doc__ __future__rrrrr)syspathlibrtypingrrinsertr__file__resolverprobe_exe_scene_tablesrrsummarize_script_handler_tablerr rrrrrrrHrIrrLrrrrMrNrr!r%r/rSrfrprrrrrr__name__rrrrs=V" 3tH~--/6678>R H~''* Ul       /).?&  8 -4(V#L*+\CLCLM`25dB n zFr
    vavaluekindtargetlow bytehandler