docs+tools: dump the CardsDLL route table; narrow Q2 to one candidate by elimination

Re-entry discriminator came back a CONFIRMED BUG: an unlisted transfer-list item does not survive a fresh FUT session, so our representation cannot reconstruct trade-pile membership. Evidence acquisition per instruction, corpus and PE first, no guessing. Adds route_table_dump.py: static read-only dump of CardsDLL's route table from the on-disk PE, resolving VA->file offset through the real section table instead of assuming a single .text mapping. Output preserved as evidence. It settles "is /tradePile the only relevant route?" -- the table holds 45 routes plus 3 empty admin slots, and row 30 `ut/%s/tradePile` is the ONLY trade-pile route. There is no trade-pile items route. That plus three existing PE facts narrows the representation to exactly one candidate by ELIMINATION rather than choice: the route carries only twelve-atom auction records; `pile` (0x226) has no arm in the item deserializer so membership is conferred by the owning list and cannot be added as a field; of the twelve atoms only tradeState expresses lifecycle; and tradeState's closed vocabulary (active=1 inactive=2 expired=3 closed=4) has exactly one value not already spoken for. So an unlisted item can only be an auctionInfo record with tradeState "inactive". Tagged INFERRED-BY-ELIMINATION, not CONFIRMED: the remaining unknown is whether the Flash Transfer List RENDERS such a record in the unlisted section. Records the acceptance test (survive a full FUT reload) and the revised invariant that a transition is complete only when a fresh session reconstructs the same visible state. No behaviour change in this commit.
2026-08-17 20:10:26 +00:00
parent 7f37b37be3
commit 2e97ff1461
3 changed files with 207 additions and 0 deletions
@@ -0,0 +1,61 @@
+image_base=0x180000000 sections=7
+  .text    rva=0x00001000 vsize=0x1e3f62 rawptr=0x00000400 rawsize=0x1e4000
+  .rdata   rva=0x001e5000 vsize=0xa4094 rawptr=0x001e4400 rawsize=0xa4200
+  .data    rva=0x0028a000 vsize=0x65c08 rawptr=0x00288600 rawsize=0x54000
+  .pdata   rva=0x002f0000 vsize=0x132cc rawptr=0x002dc600 rawsize=0x13400
+  .tls     rva=0x00304000 vsize=0x9 rawptr=0x002efa00 rawsize=0x200
+  .rsrc    rva=0x00305000 vsize=0x4e8 rawptr=0x002efc00 rawsize=0x600
+  .reloc   rva=0x00306000 vsize=0x16bc4 rawptr=0x002f0200 rawsize=0x16c00
+
+route table VA 0x18021df80 -> file offset 0x21d380
+
+#    field A                            field B
+0    'ut/%s/auctionhouse'               'AUCTIONHOUSE'
+1    'ut/%s/clubUser'                   'CLUB_USER'
+2    'ut/%s/user/list'                  'CLUB_INFO'
+3    'ut/%s/club'                       'CLUB'
+4    'ut/%s/defid'                      'DREAM'
+5    'ut/%s/squad'                      'SQUAD'
+6    'ut/delete/%s/squad'               'DELETE_SQUAD'
+7    'ut/%s/leaderboards/options'       'LBOPTIONS'
+8    'ut/%s/leaderboards'               'LBDEFAULT'
+9    'ut/%s/activeMessage'              'PAFPRACTICE'
+10   'ut/%s'                            'UT'
+11   'ut/%s/user'                       'USER'
+12   'ut/delete/%s/user'                'DELETEUSER'
+13   'ut/%s/item'                       'ITEMS'
+14   'ut/%s/item/resource'              'ITEMS_BY_RES'
+15   'ut/delete/%s/item'                'DELETEITEMS'
+16   'ut/%s/match'                      'MATCH'
+17   'ut/%s/sbs'                        'SBC'
+18   'ut/%s/tournament'                 'TOURNAMENT'
+19   'ut/%s/tournament/user'            'TOURNAMENTUSER'
+20   'ut/delete/%s/tournament/user'     'TOURNAMENTQUIT'
+21   'ut/%s/season'                     'SEASON'
+22   'ut/%s/season/user'                'SEASONUSER'
+23   'ut/%s/season/%%s/user'            'SEASONUSER_ALTER'
+24   'ut/%s/season/%%s/reset'           'SEASONRESET'
+25   'ut/%s/season/friendly'            'FRIENDLYSEASON'
+26   'ut/%s/purchased'                  'PURCHASED'
+27   'ut/%s/store'                      'STORE'
+28   'ut/%s/watchList'                  'WATCHLIST'
+29   'ut/delete/%s/watchList'           'DELETEWATCHLIST'
+30   'ut/%s/tradePile'                  'TRADEPILE'
+31   'ut/%s/trade'                      'TRADE'
+32   'ut/delete/%s/trade'               'DELETETRADE'
+33   'ut/%s/marketdata'                 'MARKETDATA'
+34   'ut/%s/clientdata'                 'CLIENTDATA'
+35   'ut/auth'                          'AUTH'
+36   'ut/delete/auth'                   'DELETE_AUTH'
+37   'ut/%s/phishing'                   'PHISHING'
+38   'ut/%s/captcha'                    'CAPTCHA'
+39   'ut/%s/tfa'                        'TFA'
+40   'ut/%s/squad/mode'                 'SQUADMODE'
+41   'ut/%s/draft/mode'                 'DRAFT'
+42   'ut/%s/champion'                   'CHAMPIONS'
+43   'ut/v2/%s/store'                   'V2STORE'
+44   'ut/%s/livemessage'                'LIVEMESSAGE'
+45   ''                                 'ADMIN'
+46   ''                                 'DEBUG'
+47   ''                                 'MAINTENANCE'
+-- table ends after 48 rows --