UHjZ"dZddlmZddlZddlZddlZddlZddlZddlm Z ejjde e e jjddlmZmZddlmZe e jj*dZedz Zd Zd Zd Zd Zd ZdZdZdZd%dZ d%dZ!d&dZ"d'dZ#d(dZ$d)dZ%d*dZ&d+dZ'd,dZ(d+dZ)d-dZ*d.dZ+ d/dZ,d0dZ-d1dZ.d2d Z/d2d!Z0d3d"Z1d4d#Z2e3d$k(re2yy)5zRCheck whether selector 1:0 rewrites secondaryBranchState after its strongest fill.) annotationsN)Path) read_sections va_to_offset) handler_entryout 0x00478364z2:0i +Ti*TiD+Ti+Ti)Ti*Tcd|dS)N0x08xvalues K/home/exedev/hwanse/tools/summarize_save_selector_predecessor_tail_reset.pyhex32r c{ cd|dS)Nr 02xrrs rhex8r"rrct|dS)N)intrs r parse_hexr&s ub>rcX|jdd\}}t|t|fS)N..r)splitr)rstartends r parse_ranger!*s*T1%JE3 U Ys^ ++rcvt||}||dzt|kDrytjd||dS)Nzz(find_selector_by_root..Ps"WSWW5I-Jh-VWs$$next) selectorsrPs `rfind_selector_by_rootrUOs W WY] ^^rc.tfd|DdS)Nc3@K|]}t|k(s|yw)N)rK)rOrJkeys rrQz'find_selector_by_key..TsF\#->#-EFsrR)rTrXs `rfind_selector_by_keyrYSs F F MMrct|}|Dcgc]+}t|jdtr |d|kDr|-}}|j d|r|dSdScc}w)NselectedPointerc |dS)Nr[rrIs rz%next_selector_by_va..]s s#45rrXr)r isinstancerHrsort)rTrProotrJlaters rnext_selector_by_varcWsr X D   cgg/0# 63?P;QTX;X  E  JJ5J658&$&  s0Ac\|y|D]$}|d}||dz}||cxkr|ksn|dcSy)Nr)raw_sizenamer)r(r)sectionrr s rsection_name_for_varhasM z# gj)) B  6? " # rc|||k(ry|tk(ry|tk(ry|tk(ry|tk(ryt|cxkr t kry|| ||cxkr|ksyy|tkryt|cxkr|kryy y ) Ncurrent-root-exactcurrent-reader frontier-leaf source-record target-recordleaf-table-windowzcurrent-root-before-readerzpost-reader-current-rootzcurrent-root-other)CURRENT_READER FRONTIER_LEAF SOURCE_RECORD TARGET_RECORDLEAF_TABLE_STARTLEAF_TABLE_END)r current_root current_ends rclassify_current_route_pointerrxlsE\$9#    51>1"2{2,%:]R]:];^ ~++ +), rcPdddddddddddddd i}g}g}t||dD]N} t||| } | t|| } | r2dxxdz cc<| dk(rdxxdz cc<n| dk(r d xxdz cc<t| ||} | rd xxdz cc<|j | ddz|| <| d k(rd xxdz cc<n^| d k(rdxxdz cc<nK| dk(rdxxdz cc<n8| dk(rdxxdz cc<n%| dk(rdxxdz cc<n| dk(r dxxdz cc<| dz} t ||| }|j ddk(r dxxdz cc<|j drdxxdz cc<t||| dz}| t|||nd}|rfdxxdz cc<t |dkrK|jt| t| t| |j dt||d| s| s|j ddk(st |d ks|jt| t| t| | | |j d|j dd!Qtfd"d#D}t| t|nd||t|d$t|ndttttttttd%t!t#|j%||||rd&d(Sd'd(S))Nr) pointerDwordCountdataPointerDwordCounttextPointerDwordCountcurrentRootRangePointerCountcurrentRootExactRefCountfrontierLeafRefCountcurrentReaderRefCountsourceRecordRefCounttargetRecordRefCountleafTableWindowPointerCountdataHandlerLowByteCountbranchCapableRowCountbranchToCurrentRouteCountr#rzrz.datar{z.textr|r}rjr~rlrrkrrmrrnrrorr-handlerSectionrcanJumpToDwordAtPlus4rrr/ handlerVaHex)vaHexr4 opcodeHexr targetVaHex targetClass )rr4 lowOpcodeHexpointerSectioncurrentRoutePointerClassrrc3.K|] }|dkDyw)rNr)rOrXcountss rrQz)route_bridge_tail_scan..s!   s a s)r~rrrrrr)currentSelectorcurrentRootHexcurrentRootRangeHexsourceRecordHextargetRecordHexfrontierLeafHexcurrentReaderHexztail-current-route-bridgezno-tail-current-route-bridge)currentRoutePointerClassesbranchTargetRows sampleRowsdirectCurrentRouteBridgeFoundclassification)ranger+rhrxrHrr$appendrranyCURRENT_SELECTORrrrsrqrpdictsorteditems)r'r( tail_starttail_endrvrwpointer_classesbranch_target_rowssamplesr)rpointer_section pointer_classopcodehandler branch_target target_classdirect_route_bridgers @rroute_bridge_tail_scanrs!"!"()$% !!" ! !'(#$!"%&F')OGJ!,8h+ = -h>  & '1 , '')./14/ G+./14/6ulKX  1 2a 7 2-<-@-@PQ-RUV-VOM * 4412a72/1-.!3."22./14//1-.!3./1-.!3."5545:5Xv6 ;;' (G 3 , - 2 - ;;. / * +q 0 +$S(BF;MgthA9-WbcGKL23q83)*R/&--!&r$)%L%)&\(/ N(C',]';'3 / Ow{{;K/LPW/W7|b "2Y %e $(L&50=$+KK$?&-kk2B&C a8r    ,1=1I% -t'K,C\"#2eK&8%9 : / / /!.1   '+6/2G2G2I+J&K.)<9L5# "Sq# rct|}td|jdxsgDd}|tdtt |d\}}t |jdxsgd}|s td|d }t|d } | d z} g} i} t| |d D]} t||| }|t|d z}| j|d dz| |<t|}t| t|||d}|s|dvsd|cxkrdksonr| j|| Dcgc]}|jds|}}|Dcgc])}|jdxsijds(|+}}t|t}t|t}t!|t"}|rt|dnd}|rt||dnd}|rt|dnd}t%||| |||}d|dd|dd|dd|dd|dd|dd|d d!}id"|r t'|ndd#td$|dd%|xsijd&xsgd'|r|jdn t|d(|r t'|ndd)t| d*t|d+|Dcgc]}|d  c}d,|d d-|d.d/t)d || z d zd0t+|d1t+|d2t-t | j/d3| d4|d5|d|d|d|d|d|d|d |d6t1|d7gd8|d9 Scc}wcc}wcc}w):Nc3RK|]}|jdtk(s|!yw)rootHexN)rHPREDECESSOR_ROOT_HEXrOrJs rrQz build_summary..s!d9KOc9cds''rootszmissing predecessor fill root rootRangeHexfillsct|dS)Nr)rrIs rr]zbuild_summary..s9SQX\CZrr^zpredecessor root has no fillsrr#r-rr)rr4rop10>$*@ri@i`rr;rNaDWithin selector root 1:0, the strongest secondaryBranchState fill sites are at 0x004844d0 and 0x004844d8. The tail from 0x004844dc to the next root boundary has no opcode 0x10 rows and no valid secondaryBranchState helper fill, so this root does not locally reset the predecessor fill after it is written. The same tail has r}z pointer(s) into the current 2:0 root range, but exact current-root/frontier-leaf/current-reader/source-record/target-record refs are r~/rrrrz;, and branch-capable rows targeting current-route data are rz. This narrows the persistence gap, but it still does not prove runtime execution order or rule out resets in untraced VM/helper paths outside this root.predecessorSelectorpredecessorRootHexpredecessorRootRangeHexpredecessorFieldMaps fieldMaps nextRootHexnextRootSelector tailRangeHexrpredecessorFillVas lastFillVaHexlastFillValueHexr4tailDwordCounttailOpcode10RowCounttailValidSecondaryFillCounttailLowOpcodeCountstailRowstailCurrentRouteBridge tailCurrentRootRangePointerCountrblocked)zJprove selector 1:0 executes before selector 2:0 in the normal runtime pathzjprove no global VM/helper reset outside the 1:0 root clears secondaryBranchState before the current readerz1find strict map1_01a source coordinate or hotspot) tailCurrentRootExactRefCounttailFrontierLeafRefCounttailCurrentReaderRefCounttailSourceRecordRefCounttailTargetRecordRefCounttailBranchToCurrentRouteCount!tailDirectCurrentRouteBridgeFoundlocalTailResetFoundpromotionStatusremainingProofs conclusion)rrSrH ValueErrorrr!rrrr+rrBrrrcrUrYrrrKmaxr$rrbool)r'rT fill_rootsr( predecessor root_startroot_endr last_fill last_fill_var tail_rowslow_opcode_countsr)r opcode_hexdecodedrJ op10_rowsvalid_secondary next_selectorpredecessor_selectorcurrent_selectorrv current_nextrwtail_route_bridgers r build_summaryrsS!Hd w/52d K9:N9OPQQ&{>'BCJ ;??7+1r7Z [E 899b IYw/0L!JI(*J!,"h+ = %$,' (9(=(=j!(Lq(P*%e$2Ye &   e::zU?`V`?`   S !"!*=SWWV_=I=&/esCGGFO4Ir3N3NOc3dseOe' 3GHM0?UYK.sHj(T`bmn //MNOPd 7 8 9;LMc;d:eef 4 5 6a8IJ`8a7bbc 3 4 55p 8 9 :;6 6! EY|,@A_c! 2!  ";~#>!  !5!; @ @ M SQS !  -}(()=>UZ[cUd !  =L7d !  5,-Rh/@A!  u=s7|=!  7+!  Ij1!  #a(Z"7A!=>!  I!  &s?';!  tF+<+B+B+D$EF!  I!  !"3!! " +,=>\,]#! $)::T(U$56L$M%67N%O$56L$M$56L$M):;V)W->?^-_#O4$ !A! !->e:>s7MM)MM2 M cVdjd|jDxsdS)N, c30K|]\}}|d|yw)rENr)rOrXrs rrQz format_counts..PsG*#uuAeW%Gs-)joinr)rs r format_countsrOs" 99G G G N3Nrc@gddd|dd|ddd|d dd |d d |d dddjd|dDd|ddd|dd|dd|dd|dd|dd|dd|d dd!dt|d"dd#dd$|d%d&d |d%d'dd(|d%d)d*|d%d+d,|d%d-d.d/|dd0|d1d2|d3d2|d4d2|d5d2|d6 d7|d%d8d9|d%d:d;|d<d=|d%d>ddd?d@}|d%dAD]~}|jdB|dCdD|dEdD|dFdG|jdHxsdIdJ|jdKxsdIdL|jdMxsdIdN|jdOxsdIdP|j gdQ|dRD]}}|jdSxsi}|jdB|dCdD|dEdD|dFdG|jdTxsdIdJ|jdUxsdIdJ|r|jdVndIdP |j gdW|j dX|dYD|jddZj|S)[Nz&# Save Selector Predecessor Tail Resetz- predecessor: `rz` root `r`z- root range: `rz- next root: `rz` `rz- fill sites: rc3(K|] }d|d yw)rNr)rOr)s rrQzmarkdown..Zs"UQrd!9"Usrz- tail range after last fill: `rz- tail opcode 0x10 rows: rz- tail valid secondary fills: rz- local tail reset found: rz$- tail current-root-range pointers: rz*- tail direct current-route bridge found: rz- promotion status: rrz## Tail Opcode Countsrz!## Tail Current-Route Bridge Scanz- current selector/root: `rrrz- pointer dwords: rz (data r{, text r|)z- current root range pointers: zJ- exact current/frontier/current-reader/source-record/target-record refs: rrrrrrz- leaf-table window pointers: rz;- branch-capable rows / branch targets into current route: rz / rz- classification: `rzM| va | value | low opcode | pointer section | current route class | handler |%| --- | --- | --- | --- | --- | --- |rz| `rz` | `r4rz` | rrz | rz | `rz` rz |)rz## Tail Evidence RowsrzM| va | value | low opcode | op10 table | op10 helper | valid secondary fill |rrrr8r6r;)rz## Remaining Proofsrc3&K|] }d| yw)z- NrrOitems rrQzmarkdown..sD2dVDsr )rrrrHextend)summarylinesrJrs rmarkdownr Ss! 0!  !  7#89:(7K_C`Baabc!  '";<=Q? !  !345S9O8PPQR !  "Uw?S7T"UUVW !  *'.*A)B!D!  $G,B$C#DE!  )1N)O(PQ!  %W-B%C$DE!  /w7Y/Z.[\!  5W=`5a4bc!  w'89:;!  !   !  !! " #! $ %! & g345'! ( )! * ,+! , -! . %W-E%FGX%Y$ZZ]^ef~^AV_W^XXY Z/! 0 W%=>?RSTT[\cd|\}V]W\XX_`gh@`ABY`Z_[[\ ]1! 2 *'2T*U)VW3! 4 UU\]{U|T}}~@GHb@cddefmnIfJeKKLMTUoMpLqqrsz{UsVrW X5! 6 )1I)JKh)i(jk7! 8 FgNfFghGAFBBEFMNmFnEo p9! : g&>?@PQRRST;! < =! > X?! @ 0A! ED/0>  #g,uS_$5U3~;N:Otww'(/C0CGGdd?|d@dA|d@dB|dCgS)DNrc3TK|]}dtj|ddtj|ddtj|ddtj|jdxsijdxsdd tj|jdxsijd xsdd tjt|jdr$|jdxsijd ndd "y w)rr4rrr8r r6r; N)htmlescaperHstrrs rrQzhtml_page..s   [[W./0[[Z123[[^!4567{{CGGFO1r66|DKLMN{{CGGFO1r667JKRsSTU{{3TWT[T[\bTc 52::;OPilmnop   sD&D(rrc3NK|]}dtj|dyw)z
  • z
    • N)rrrs rrQzhtml_page..s#\tDKK-.e4\s#%rrc3K|]}dtj|ddtj|ddtj|ddtj|jdxsddtj|jd xsdd tj|jd xsdd tj|jd xsddyw)r rrr4rrrrrrzrz rrN)rrrHrs rrQzhtml_page..s   [[W./0[[Z123[[^!4567{{377#34;<=>{{377#=>E#FGH[[!8!?C@A$++VYV]V]^nVoVvsvJwIxy   sCrzXSave Selector Predecessor Tail Resetzz-

    Save Selector Predecessor Tail Reset

    z

    Predecessor rz root rz; next root rz rz .

    z

    Tail range rz ; tail opcode 0x10 rows: rz; tail valid secondary fills: rz; local tail reset found: rz$; tail current-root-range pointers: rz*; tail direct current-route bridge found: rz; promotion status: rz

    z

    rz

    Tail opcode counts: rz'

    Tail Current-Route Bridge Scan

    z

    Current selector/root: rrz. Pointer dwords: rzrr{rr|z ); current root range pointers: zJ; exact current/frontier/current-reader/source-record/target-record refs: rrrrrrz%; branch targets into current route: rz; classification: rzz
    vavaluelow opcodepointer sectioncurrent route classhandler
    zz

    Remaining Proofs

      z
    )rrrrr)rrowsproofsbridge bridge_rowss r html_pagersO 99 :&  DWW\IZA[\ \F - .F)) ,'  K 99d n7 (= >??RSZ[oSpRqrKLSTfLgKhhvw~LwMvNNZ [ w~677WX_`vXwWxyWX_`}X~WYZabwZxYyy]^efH^I]JJtu|}`uatbbvw{wBwBCJK\C]w^v__c d dkk',/0 16 !$++mGDYO7P+Q*RR`aealalmpqwyNrOnPbQaRRklrsFlGkHHOPVWnPoOppwx~VxWwXXxy@AcydxeeopwxVpWoXXYZab|Z}Y~~@GHc@deefgnoI gJ fK K L M T U o M p L q q V W ^ _ ~ W  V @ @ X Y ] Y d Y d e k l | e } Y ~ X   K L  a a  'xu5! rc|jdd|dz jtj|dddzd |d z jt |d y) NT)parentsexist_okz)save_selector_predecessor_tail_reset.jsonFr3) ensure_asciiindentrutf-8encoding)save_selector_predecessor_tail_reset.html)mkdir write_textjsondumpsr)rout_dirs r write_outputsr*sf MM$M. ::FF 7q9D@G ::FFyQXGYdkFlrc tj}|jdttdz |jdtt dz |jdtt dz |jdtt |j }t|jjtj|jjd tj|jjd }t||j t#d |j d z y) Nz--exez Hwanse2.exe)typedefaultz --selectorszsave_scene_selectors.jsonz --fill-rootsz'save_selector_secondary_fill_roots.jsonz --out-dirr!r"z wrote predecessor tail reset -> r$)argparseArgumentParser add_argumentrROOTOUT parse_argsrr' read_bytesr'loadsrT read_textrr*r)print)parserargsrs rmainr:s  $ $ &F dD=4HI  D#@[:[\ T3Aj;jk  $<    D  4>>++W+=> 4??,,g,>?G '4<<( ,T\\rPrr<r@)rTr>rXrr<r@)r(r>r)r?r< str | None)rrrvr?rwr?r<rA)r'r=r(r>rrrrrvr?rwr?r<r)r'r=rTr>rrr<r)rzdict[str, int]r<r)rrr<r)rrr)rr<None)r<rB)4__doc__ __future__rr.rr'r%syspathlibrpathinsertr__file__resolveparentprobe_exe_scene_tablesrr%summarize_save_selector_stream_tracesrrr1r2rrrprqrrrsrtrurrrr!r+rBrKrUrYrcrhrxrrrr rr*r:__name__rrrrOsgX" 3tH~--/6678>? H~''* Ul#   , 4*3_N' ,p ppp p  p  p pfWtO:z*Zm k  zFr
    vavaluelow opcodeop10 tableop10 helpervalid secondary fill