JjQdZddlmZddlZddlZddlZddlZddlmZddl m Z ddl m Z m Z mZddlmZmZddlmZmZmZdd lmZmZmZeej5j6d Zed z Zd Zd ZgdZ gdZ!dgdddgddgZ"d!dZ#d"dZ$d#dZ%d$dZ& d% d&dZ'd'dZ(d(dZ)d)dZ*d)dZ+edfd*dZ,d+dZ-e.d k(re-yy),z@Explain opcode 0x2c stops on the current route-pair descriptors.) annotationsN)Path)Any)find_cns_strings read_sections va_to_offset)DEFAULT_HANDLER_VAHANDLER_TABLE_VA)analyze_stream_effectdword_atsection_name_for_va)byte_at handler_entryu32_atout, 0x00542b0c)z!normal-route-descriptor-selectionzfrontier-reader-target-linkagezstrict-source-hotspot)zQnormal runtime selector/root execution selecting corrected route-pair descriptorszPfrontier reader branch outcome and field-map target linkage on a real route pathz,strict map1_01a source coordinate or hotspot Hwanse2.exe).textz handler tablez opcode 0x2c)pathfieldsz4out/save_selector_route_pair_descriptor_context.json)rowsfrontierReaderHexdescriptorTracegeometryExitWordHitCountcp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)rfallbacks P/home/exedev/hwanse/tools/summarize_save_selector_opcode2c_route_pair_context.py load_jsonr',s* ;;= ::dnngn6 77cg}tdD]=}t||t|dzz}|t||dk(s-|j |?t t |S)Nr)ranger r r appendsortedset)exesectionshandlersopcodehandlers r&table_handler_vasr52sdH*%3*:VaZ*GH  #6x#IW#T OOG $% #h-  r(cvt||}||dzt|kDrytjd||dS)Nr+zz$scan_full_handler..PsErR*_Es i)defaultrr()vaHex offsetHexrzCbyte is the first displacement byte of a near jmp, not a ret opcode )rNrOreasoninstructionVaHexinstructionBytesHexs@@)rNrObytesrV scanBytes fixedAdvancesr3rBrC handlerVarDrEnextHandlerVaHexoldAnalyzerScanBytesfullHandlerSpanBytesoldAnalyzerFixedAdvancesfullHandlerFixedAdvancescorrectedFixedAdvancescorrectedFixedAdvanceBytesretSites trueRetVaHexrN falseRetSites"oldNoFixedAdvanceIsScannerArtifact)r OPCODEr r rr5minmaxr enumerater-hexr,r7r.get)r0r1entry_vahandler_sectionr; all_handlers next_handlercode old_effectfixed_advances ret_sitesfalse_ret_sitesindexbyter:itemcorrected_fixed_advancesold_scan_bytesold_fixed_advancestrue_retrJs @r&scan_full_handlerr|Bs&1*,H#x2JCMCY)(J?_cO_7fS\*xn-5?5KbC 01QU-(   (J /F$S(3LE\Ez\aOabLFLFX3vvA|j'@ AA B^aD&sHjAJNIO   t %  4<   Bs8}Rc{CST UqyT%!)_4&&!"S]#%eC[!1c*,Z%-?!-CC,H(I+/ %!)+D+H+H+M ( s1c$i!m,- %  eai O 3  ! !bX!%-eai#  &"'  88G  W '   ^^K0NNN?B7!  88G  ! !*y}tH & r&&  8C.)  Z   "Z,-   /   bc 23    D   #$6  #N  !":  %E]bcadEd&>q&Ajn  I   W-t  ! " -.@B.F.jKchigjKj# ' !s J%-)J*cg}t}|}t|d} t|D]} ||vr|j| d|ddd|S|j |t |||} t |||} | | |j| d|ddd|St||| } | jdxsg}d}| tk(rdg}d }| |d|d| d| dd | ||d }| |vr || |d <nt|| d |d<d| d|d<| jdr)t|||dz}|d|dnd|d<d|dzd|d<|j||| k(rd|d<|St|dk(r| jds ||dz }`t|dk(r| jdrd|d<|S|sd|d<|Sd|d<|S|S)Nr>r@loop)steprN stopReason unreadablerXr+zhfull handler scan finds add [context+0x40], +4 after the old analyzer clipped on a jmp displacement byte)rr:rNvaluevalueHex)rXoverrideReasoncnsTpointer pointerHexcanJumpToDwordAtPlus4branchTargetHexfallthroughVaHexzfrontier-readerrrrzbranch-or-fallthroughno-fixed-advancezmultiple-advances) r/intr,r-addrrrrkrfrr<r7)r0r1strings stream_vastop_reader_hex max_stepsrseenr: stop_readerrr3rr4advancesoverride_reasonrowtargets r&corrected_tracers D 5D Bor*Ki 1 : KK"RH VT U ^ K]  h+sHb) >U] KK"RH \Z [ R KQ Xv6;;/52 V sHIO"S]U3K(    &-   G  CJ (E * 6!C N"$U3K 0C  ;;. /c8R!V4F:@:Lr&%6RVC! "(*26#,&7C" # C   1C   K x=A gkk2I&J (1+ B  x=A '++.E"F 7C   K  2C   K0L Ke1d Kr(c |Dcgc]}|jd|k(r|}}|r|dni}t||Dcgc]%}|jds|jd'c}t||r|djdnd|jd|jd|jddScc}wcc}w)NrNrYrBrrr) stepCountopcodesreachesFrontierReaderfrontierReaderStep stopVaHex stopOpcodeHexr)rkr7bool)trace reader_hexr reader_stepsstops r& trace_summaryrs 777 z ) L592DZ49RSSWW[=QCGGK(R!%l!3=Il1o11&9tXXg&+.hh|,  SsB;CCcrt|}t||}t||}g}|jdxsgD]}|jdr|jds'|jd}t |d}t |||||jdxst } |jdxsi} |j|jd|jd ||jd | t| |jdxst | |jd |jd d td|D} td|D} d} id|jdd|jdd|jdd|jdd|jdxst d|dt|d| d| dt|xr| t|k(dddddddddtd td!tttd"|| td#S)$NrinsideCurrentRootEntryRundescriptorHasRoutePair descriptorHexr~rrrurCchildPointerHexrsourceToTargetAdjacent) rurCrroldDescriptorTracecorrectedTracecorrectedTraceRowsrrc3jK|]+}|jdxsijds(d-yw)rrrNrkrIrs r&rKz build_summary..s.tccgg>N6O6USU5Z5Z[r5sts)33c3nK|]-}|jdxsijddk(rd/yw)rrrrNrrs r&rKz build_summary..s;  GG( ) /R 4 4\ BFX X s35a^The previous route-pair descriptor traces stopped at opcode 0x2c because the generic handler scanner clipped the handler at a 0xc3 byte inside a near-jump displacement. A full handler-span scan shows opcode 0x2c ends by advancing the stream pointer by four bytes. With that local correction, both non-negative current route-pair descriptors can be linearly traced to the frontier reader 0x00542b0c. This removes opcode 0x2c as the immediate trace blocker, but it does not promote map1_01a -> map2_02d because a strict source coordinate/hotspot and normal runtime selector execution proof are still missing.sourcerselectorrootHexopcode2cHandlerroutePairDescriptorCountoldNoFixedAdvanceStopCount correctedTraceReachesReaderCount0correctedTraceAllRoutePairDescriptorsReachReaderstrictHotspotFoundFruntimeSelectionProven proofFoundopcode2cRoutePairProofFoundfailedOpcode2cRoutePairGateIdsmissingEvidence evidenceRefsrA)evidenceRefCountrFr conclusionremainingProofs)rrr|rkrrFRONTIER_READER_HEXr-rsumr7r#FAILED_OPCODE2C_ROUTE_PAIR_GATE_IDS$OPCODE2C_ROUTE_PAIR_MISSING_EVIDENCE!OPCODE2C_ROUTE_PAIR_EVIDENCE_REFS)r0route_pair_descriptor_contextr1rr4rrdescriptor_hex descriptor_var old_tracecorrected_reader_hitsold_no_fixed_countrs r& build_summaryrsS!HsH-GX.G D,008>B ww23377C[;\ 1NB/      ) - -.A B YFY  GG-.4"  WWW%'',/+"ww'89"++E3P3T3TUh3i4AnAB"'(+0J(K&)gg.F&G   0 tTtt  > /33H= /33H=  155jA  044Y?   :>>?RSjWj   7   #CI  %&8  +,A  ;DJ|jd?d@:|jdAr6|jdB|jdAdC|jdDdE|j gdF|jdGxsgD]}|jdHxsi}|jdIxsi}|jdJ|jdKdL|jdMdN|jdOd9|jdPd5|jdQdR|jdSdR|jdTdL|jdOd9|jdPdE|j gdU|j dV|jdWxsgD|jddXj|S)YNrz.# Save Selector Opcode 0x2c Route-Pair Contextz - route: `rz -> r`z - selector: `rz` root `rz- frontier reader: `rz- opcode 0x2c handler: `rDz- old analyzer scan bytes: r\z- full handler span bytes: r]z- old fixed advances: r^z- corrected fixed advances: r`z- old no-fixed-advance stops: rz/- corrected route-pair traces reaching reader: r/rz- strict hotspot found: rz- runtime selection proven: rz- proof found: rz'- failed opcode 0x2c route-pair gates: z, rz- missing evidence count: rz- evidence refs: rz- promotion status: `rFrz## Handler Spanz| kind | va | detail |z| --- | --- | --- |rdz| false ret byte | `rNz` | rRz (`rTz` at `rSz`) |r_z| fixed advance | `z` | `+rVz ` bytes |rcz| true ret | `z!` | final handler return before `r[z` |)rz## Corrected Route-Pair Tracesrzc| index | descriptor | old stop | corrected steps | reaches reader | reader step | corrected stop |z.| ---: | --- | --- | ---: | --- | ---: | --- |rrrz| ruz | `rz` | `rrrz | rr)rz## Remaining Proofsrc3&K|] }d| yw)z- NrHrIrws r&rKzmarkdown..ZsN2dVNsr )rkjoinr7r-extend)summaryr4linessiterr correcteds r&markdownr#skk+,2G8 W[[*+4 H0E/FaH  J/0Y9O8PPQR w{{+>?@B "7;;~#>"?qA %gkk2H&I%JK %gkk2H&I%JK -G!H IJ &w{{3K'L&MN (5Q)R(ST 9'++Fh:i9jjklslwlwySmTlU V "7;;/C#D"EF &w{{3K'L&MN '++l345 1$))GKKHh?qA  L!'R   5 E8 O,2  "488G#4"5T$((8:L9MSQUQYQYZoQpPqqwx|yAyABTyUxVVZ [   67=2b *488G+<*=VDHHWDUCVV_`ab{{>" ~gkk.&A%BBcdkdodoqCeDdEEHI J LL{{6"(b GG017R GG,-3  !"$sww'?&@A l+,F9==3M2Nd}}[)*#immtjt |jd?d@dA|jdBdCtjdDj |jdExsgdFt |jdGxsgdH|jdId@ dJtj|jdKxsd$dLdMdNdOd$j |dPdQdRdOd$j |dPdSdT|dUdVdWd$gS)XNrrdz%false ret byterNzrRz (rTz at rSz)r_z$fixed advancez+rVz bytesrcztrue retz2final handler return before r[zrrrzruzrzrrrz rrrc3NK|]}dtj|dyw)z
  • z
    • N)htmlescapers r&rKzhtml_page..s#ftDKK-.e4fs#%rrzzzz zF z= Save Selector Opcode 0x2c Route-Pair Contexta$ zzz7

    Save Selector Opcode 0x2c Route-Pair Context

    z

    route rz -> rz; selector rz; handler rDz;; corrected route-pair traces reaching reader rrrz ; promotion status rFz .

    z

    proof found rz3; failed opcode 0x2c route-pair gates ,rz ; missing evidence rz; evidence refs rz

    rz

    z

    Handler Span

    zH z z
    kindvadetail
    z&

    Corrected Route-Pair Traces

    z z

    Remaining Proofs

    z
      z
    zz)rkr-rrstrrr7) rr4 span_rowsr trace_rowsrrrproofss r& html_pager_s'kk+,2GI O,2  S'):%;<=>;;s488H#5678SQUQYQYZoQpMqAr@stEFJFQFQRUVZV^V^_qVrRsFtEuu    67=2  S'):%;<=>++c$((7*;&<=>?   {{>" S^)D%EFGH559[[W[[QcEdAe5f4gh  J{{6"(b  GG017R GG,-3  777#$%S)A%BCDES|)D%EFGGXY]YdYdehirivivxCjDfEZFYGG==-./==!89:;==!5678S|)D%EFGGXY]YdYdehirivivxCjDfEZFYGG    WWfM^A_Aecef fF 99"PG oA DKKGKK,A(BCDGDKKX[\c\g\ghp\qXrLsKtuMNRNYNYZ]^e^i^ijt^uZvNwMxxOPTP[P[\_`g`k`klz`{\|P}O~~yzAzEzEFhziyjjklslwlwxRlSkTTtuyu@u@ADELEPEPQbEcAduetffr s !'++l";!< )argparseArgumentParser add_argumentrROOTOUT parse_argsrr0 read_bytesr' route_pairrrrprint)parserargsrrs r&mainrs  $ $ &F dD=4HI  $< T3As;st  40    D $//2&GWdllDMMBH 4XJ ?@r(__main__)rrr%rreturnr)r0rVr1 list[dict]rz list[int])r0rVr1r r:rrz int | None)r0rVr1r rdict)0)r0rVr1r rzdict[int, str]rrrrrrrr )rr rrrr )r0rVrr rr )rr rr)rr rrrz Path | Nonerr)rNone)/__doc__ __future__rrrr"r8pathlibrtypingrprobe_exe_scene_tablesrrrsummarize_script_handler_tabler r r r r %summarize_save_selector_stream_tracesrrr__file__resolverrrrfrrrrr'r5r<r|rrrrrrr__name__rHr(r&rs:F" PPO__PP H~''* Ul "'# ($; G^ %!8 !4F^ > >>> >  >  >>B"CL9xDN25d  A zFr(
    indexdescriptorold stopcorrected stepsreaches readerreader stepcorrected stop