UHjG*dZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ejjdee ej!j"ddlmZmZe ej!j*dZedz Zd Zd Zd Zd Zd ZdZdZdZdZ ddgZ!d#dZ"d$dZ#d%dZ$d&dZ%d'dZ&d(dZ'd)dZ(d*dZ) d+dZ* d, d-dZ+d.dZ,d.dZ-d/d Z.d0d!Z/e0d"k(re/yy)1zOScan direct bridge refs between predecessor 1:0 and current 2:0 selector roots.) annotationsN)Path)Any) read_sections va_to_offsetoutz1:0z2:0idGiEHiTix5Ti +TiD+Ti+TiDHiDHcd|dS)N0x08xvalues L/home/exedev/hwanse/tools/summarize_save_selector_predecessor_bridge_refs.pyhex32r!s c{ c4t|dt|S)Nz..)r)startends r range_hexr%sEl^2eCj\ **rcp|js|Stj|jdS)Nutf-8encoding)existsjsonloads read_text)pathfallbacks r load_jsonr!)s* ;;= ::dnngn6 77rcvt||}||dzt|kDrytjd||dS)Nz,,rc|jdd\}}t|t|tfd|DS)N:rc3rK|].}|jdk(r|jdk(r|0yw)groupslotN)get).0rowr3r4s r zselector_row..>s9 777 u $D)@ s47)splitr.next) selectorslabel group_text slot_textr3r4s @@r selector_rowr?:sD!KKQ/J  OE y>D   rci}|D]}|jd|k7r|jdxsgD] }|jt||d"t|jd}|m|j||d|S)Nr<rz selector pathrefVaHexz resource ref)r5 setdefaultr.r/) select_refsr<targetsr7path_varef_vas rcollect_path_targetsrGDs G@ 777 u $ wwv," GG   s7|wn-E F G377:./     v% '> ?@ Nrct|jDcgc]\}}|t||dc}}Scc}}w)N)r)vaHexr<)sorteditemsr)rDr)r<s rexact_target_rowsrLQs>  0  BE"I6  s:c fg}d}d} t||dD]l} t||| } | | dz } |dz }|| cxkxr|knc} |j| } | s| C|j| t | | t | | | dnt ||t |||| t |t||dS)Nrr#r)sourceVa sourceVaHexrvalueHexinsideTargetRootRange exactLabel)sourceRangeHextargetRootRangeHexreadableDwordCountunreadableDwordCounttargetExactValueshitCounthits)ranger+r5appendrrrLr$)exer( source_start source_end target_start target_end exact_targetsrYreadable_countunreadable_countr)rinside_target_range exact_labels rscan_dwords_for_bridgerfXs DNL*a0 C2. =  !  !*e@j@#''. "{':   9e %8%    &$L*=' jA, 0.}=I rc t|}||nttdz g}||nttdz g}||nttdz i}||nttdz i}t|t}t|t }t |jdxst}t |jdxst} t |jdxst} t} t|t} | j|ditD]} d| | < t|t }|j| d td t d t"d i|jd xs|jdxsgD]1}t |jd}| |j%|d3t'|||| | | |}t'||| | || | }|ddkD}|d}|Dcgc]}|dtvr|}}t)t}|Dcgc] }|d|kr|}}|Dcgc] }|d|k\r|}}|Dcgc] }|ddkr|}}|xs t+|}t+|xrt-|t-|k(}d}idtdt/|dt1|| d|jdxsgdt dt/| dt1| | d |jdxsgd!|d"|d#|d$|d%t-|d&t-|d't-|d(t-|d)t-||d*d+gd,gd-|d.Scc}wcc}wcc}wcc}w)/Nzsave_scene_selectors.jsonz#save_scene_selector_references.jsonz)save_selector_predecessor_tail_reset.jsonz.save_selector_current_root_frontier_paths.jsonselectedPointerHex nextRootHexzpredecessor root 1:0z%predecessor secondaryBranchState fillzcurrent root 2:0z%current frontier reader/resource gatez$current source scene record map1_01az$current target scene record map2_02d leafPathsleavesleafPointerHexzcurrent leaf pathrXrrYrrNi(Ta0The direct bridge scan found no predecessor->current dword edge. The reverse direction has current-root dwords that point back into the predecessor root, but all of those targets are before the predecessor secondary fill sites 0x004844d0/0x004844d8 and none targets the fill sites themselves. This looks like shared/reused script substructure rather than proof that selector 1:0 executes into selector 2:0 or leaves its fill state for the current frontier. Promotion remains blocked until runtime order/state persistence or a strict map1_01a hotspot is proven.predecessorSelectorpredecessorRootHexpredecessorRootRangeHexpredecessorFieldMaps fieldMapscurrentSelectorcurrentRootHexcurrentRootRangeHexcurrentFieldMapspredecessorToCurrentcurrentToPredecessor bridgeFoundforwardExecutionBridgeFoundreverseReuseHitCountreverseHitsToFillSiteCountreverseHitsBeforeFillCountreverseHitsAfterOrAtFillCount#reverseHitsBeforeCurrentWriterCountFblocked)zLThis scan covers direct dword values in the known selector root ranges only.zqIt does not rule out VM-dispatched execution order, save flag progression, or indirect runtime state transitions.zEIt does not replace the strict hotspot/source-coordinate requirement.)zJprove selector 1:0 executes before selector 2:0 in the normal runtime pathzKprove secondaryBranchState persists from predecessor fill to current readerz1find strict map1_01a source coordinate or hotspot)reverseHitsOnlyBeforeFillrouteOrderProvenpromotionStatus limitationsremainingProofs conclusion)rr!OUTr?PREDECESSOR_SELECTORCURRENT_SELECTORr/r5PREDECESSOR_ROOT CURRENT_ROOTPREDECESSOR_END CURRENT_ENDrGupdatePREDECESSOR_FILL_SITESCURRENT_FRONTIER_READERCURRENT_SOURCE_RECORDCURRENT_TARGET_RECORDrBrfminboolr$rr)r\save_scene_selectorssave_scene_selector_refspredecessor_tail_resetcurrent_root_pathsr(predecessor_row current_rowpredecessor_root current_rootpredecessor_end current_endpredecessor_exact_targetsfill_vacurrent_exact_targetsleafleaf_vapredecessor_to_currentcurrent_to_predecessorforward_execution_bridge_foundreverse_reuse_hitsr7reverse_hits_to_fill first_fillreverse_hits_before_fillreverse_hits_after_or_at_fill"reverse_hits_before_current_writer bridge_foundreverse_hits_only_before_fillrs r build_summaryrsS!H3G3S/Yb )) Z> T ##79MNO35EFK !4!45I!JK_O_[__-ABCS|L 6 : := IJ]oOK 45MOc d$$0&*U-T!'*U01IK[\  (!HEE " #&&{3]7I7M7Mh7W][]KDHH%567   ! , ,W6I JK 4 4 !&B   6   6  |  &'E  $6 7  %c*>&?  %c*B&C  (-J)K! " .s3U/V# $&C!$  !?  =  %*s+M M+MMc T|d}|d}gddd|dd|dd |d d d |d d|dd |dd d|dd|dd|dd|dd|dd|dd|dd|dd d|ddd dd!d"d#|d$d%|d&d'|d(d)|dd* d+|d$d%|d&d'|d(d)|dd* dd,dd-d.d/|d0d*d1|d2d*d3|d4d*d5|dd*d6|d7d*d8|dd*dd9dd:dd;d<}|d=rE|d=D]<}|jd>|d?d%|d@d'|dAd)|jdBxsdCd* >n|jdD|jgdE|d=rE|d=D]<}|jd>|d?d%|d@d'|dAd)|jdBxsdCd* >n|jdD|jgdF|jdG|dHD|jddIj|S)JNrvrwz'# Save Selector Predecessor Bridge Refsz- predecessor: `rmz` root `rnz ` range `ro`z - current: `rrrsrtz- predecessor -> current hits: rXz- current -> predecessor hits: z- bridge found: rxz"- forward execution bridge found: ryz- reverse hits to fill sites: r{z!- reverse hits only before fill: rz- route order proven: rz- promotion status: `rrz## Scan SummaryzI| direction | source range | target root range | readable dwords | hits |z!| --- | --- | --- | ---: | ---: |z| predecessor -> current | `rSz` | `rTz` | rUz | z |z| current -> predecessor | `z## Reverse Hit Classificationz| metric | count/status |z| --- | ---: |z| reverse reuse hits | rzz)| reverse hits before predecessor fill | r|z+| reverse hits at/after predecessor fill | r}z%| reverse hits to exact fill sites | z2| reverse hits before current writer 0x005428bc | r~z"| reverse hits only before fill | z## Hitsz### Predecessor -> Current6| source | value | inside target range | exact label || --- | --- | --- | --- |rYz| `rOrPrQrR-z| - | - | - | - |)rz### Current -> Predecessorrrr)rz## Remaining Proofsrc3&K|] }d| yw)z- Nr r6items rr8zmarkdown..JsD2dVDsr )r[r5extendjoin)summaryp2cc2plinesr7s rmarkdownrs ( )C ( )C( 1(  (  7#89:(7K_C`BaajkrtMlNkOOP Q(  w012(7CS;T:UU^_fg|_}^~~ A (  *#j/):; (  *#j/):; (  7=123(  -W5R-S,TU(  )1M)N(OP(  ,G4O,P+QR(  !);!< =>(  (9 :;1=(  (   (  (  !( " #( $ T%( & ,'( ( 's+;'<&=U3G[C\B]]abefzb{a||ADEOAP@QQS T)( * 's+;'<&=U3G[C\B]]abefzb{a||ADEOAP@QQS T+( , -( . (/( 0 1( 2 $3( 4 5( 6 "'*@"A!B"E7( 8 4G]6^5__ab;( < 08T0U/VVXY=( > =WEj=k|d?d2d@|d$d2d4dAdB||dCd4dDdB||dCd4dEdF|dGdHdF|dGS)JNc8|sydjd|DS)Nz&No hits.rc 3K|]h}dtj|ddtj|dd|ddtj|jdxsdd jy w) zrOrPrQ rRr N)htmlescaper5)r6r7s rr8z.html_page..hit_rows..Ss   S%789:S_567./01;;sww|4;<=>   sA.A0)r)rowss rhit_rowszhtml_page..hit_rowsPs(;yy    rrvrwrc3NK|]}dtj|dywz
  • z
    • Nrrrs rr8zhtml_page.._s#_D$t{{4017_#%rc3NK|]}dtj|dywrrrs rr8zhtml_page..`s#]dDT!2 359]rrrzYSave Selector Predecessor Bridge Refsa(z.

    Save Selector Predecessor Bridge Refs

    z

    predecessor rmz root rnz range roz; current rrrsrtz .

    z

    predecessor -> current hits: rXz; current -> predecessor hits: z; bridge found: rxz; promotion status rz#

    forward execution bridge found: ryz; reverse hits to fill sites: r{z!; reverse hits only before fill: rz.

    z

    rz

    z

    Scan Summary

    zz0
    directionsource rangetarget root rangereadable dwordshits
    predecessor -> currentrSrrTrrUrrz0
    current -> predecessorz
    z#

    Reverse Hit Classification

    zJz#
    metriccount/status
    reverse reuse hitsrzz5
    reverse hits before predecessor fillr|z7
    reverse hits at/after predecessor fillr}z1
    reverse hits to exact fill sitesz>
    reverse hits before current writer 0x005428bcr~z.
    reverse hits only before fillz'

    Predecessor -> Current Hits

    zsrYz'

    Current -> Predecessor Hits

    z

    Remaining Proofs

    z
      z
    z

    Limitations

    )r list[dict]returnstr)rrr)rrrr remainingrs r html_pagerOs   ( )C ( )C_GL]D^__I'']gmF\]]K 99"e" s" 9" (= >??RSZ[oSpRqrFGNOhGiFjjABIJ[B\A]]pqxyIqJpKK_`gh}`~_K L " +3z?*;;Z[^_i[jZkk{}DER}S|TTmnuvGnHmIIU V " .g6S.T-UUst{}YuZt[[|}DE`}a|bbg h " dkk',/0 16" " W" ;3?O;P:QQghkmAiBhCCSTWXlTmSnnwx{|FxGwHHR S" ;3?O;P:QQghkmAiBhCCSTWXlTmSnnwx{|FxGwHHR S" " ." U" .g6L.M-NjY" @Hd@e?ffpq!"" B'JiBjAkkuv#"$ r) argparseArgumentParser add_argumentrROOTr parse_argsrr\ read_bytesrrprint)parserargsrs rmainrs  $ $ &F dD=4HI  $<    DDHH//12G'4<<( -dll=i.i-j klr__main__)rr.rr)rr.rr.rr)rrr rrr)r'bytesr(rr)r.r int | None)rz str | Nonerr)r;rr<rrdict)rCrr<rrdict[int, str])rDrrr)r\rr(rr]r.r^r.r_r.r`r.rarrr)NNNN) r\rrlist[dict] | Nonerrr dict | Nonerrrr)rrrr)rrrrrNone)rr)1__doc__ __future__rrrrr%syspathlibrtypingrrinsertr__file__resolveparentprobe_exe_scene_tablesrrrrrrrrrrrrrrrrrr!r+r/r?rGrLrfrrrrr__name__r rrrsU" 3tH~--/6678> H~''* Ul  $""$j1+8 5- & &&& &  &  &"& &V/326*.&* D D+D0D( D $ D  DNDN4nnm zFr
    sourcevalueinside target rangeexact label