2e97ff1461
Re-entry discriminator came back a CONFIRMED BUG: an unlisted transfer-list item does not survive a fresh FUT session, so our representation cannot reconstruct trade-pile membership. Evidence acquisition per instruction, corpus and PE first, no guessing. Adds route_table_dump.py: static read-only dump of CardsDLL's route table from the on-disk PE, resolving VA->file offset through the real section table instead of assuming a single .text mapping. Output preserved as evidence. It settles "is /tradePile the only relevant route?" -- the table holds 45 routes plus 3 empty admin slots, and row 30 `ut/%s/tradePile` is the ONLY trade-pile route. There is no trade-pile items route. That plus three existing PE facts narrows the representation to exactly one candidate by ELIMINATION rather than choice: the route carries only twelve-atom auction records; `pile` (0x226) has no arm in the item deserializer so membership is conferred by the owning list and cannot be added as a field; of the twelve atoms only tradeState expresses lifecycle; and tradeState's closed vocabulary (active=1 inactive=2 expired=3 closed=4) has exactly one value not already spoken for. So an unlisted item can only be an auctionInfo record with tradeState "inactive". Tagged INFERRED-BY-ELIMINATION, not CONFIRMED: the remaining unknown is whether the Flash Transfer List RENDERS such a record in the unlisted section. Records the acceptance test (survive a full FUT reload) and the revised invariant that a transition is complete only when a fresh session reconstructs the same visible state. No behaviour change in this commit.
62 lines
3.1 KiB
Plaintext
62 lines
3.1 KiB
Plaintext
image_base=0x180000000 sections=7
|
|
.text rva=0x00001000 vsize=0x1e3f62 rawptr=0x00000400 rawsize=0x1e4000
|
|
.rdata rva=0x001e5000 vsize=0xa4094 rawptr=0x001e4400 rawsize=0xa4200
|
|
.data rva=0x0028a000 vsize=0x65c08 rawptr=0x00288600 rawsize=0x54000
|
|
.pdata rva=0x002f0000 vsize=0x132cc rawptr=0x002dc600 rawsize=0x13400
|
|
.tls rva=0x00304000 vsize=0x9 rawptr=0x002efa00 rawsize=0x200
|
|
.rsrc rva=0x00305000 vsize=0x4e8 rawptr=0x002efc00 rawsize=0x600
|
|
.reloc rva=0x00306000 vsize=0x16bc4 rawptr=0x002f0200 rawsize=0x16c00
|
|
|
|
route table VA 0x18021df80 -> file offset 0x21d380
|
|
|
|
# field A field B
|
|
0 'ut/%s/auctionhouse' 'AUCTIONHOUSE'
|
|
1 'ut/%s/clubUser' 'CLUB_USER'
|
|
2 'ut/%s/user/list' 'CLUB_INFO'
|
|
3 'ut/%s/club' 'CLUB'
|
|
4 'ut/%s/defid' 'DREAM'
|
|
5 'ut/%s/squad' 'SQUAD'
|
|
6 'ut/delete/%s/squad' 'DELETE_SQUAD'
|
|
7 'ut/%s/leaderboards/options' 'LBOPTIONS'
|
|
8 'ut/%s/leaderboards' 'LBDEFAULT'
|
|
9 'ut/%s/activeMessage' 'PAFPRACTICE'
|
|
10 'ut/%s' 'UT'
|
|
11 'ut/%s/user' 'USER'
|
|
12 'ut/delete/%s/user' 'DELETEUSER'
|
|
13 'ut/%s/item' 'ITEMS'
|
|
14 'ut/%s/item/resource' 'ITEMS_BY_RES'
|
|
15 'ut/delete/%s/item' 'DELETEITEMS'
|
|
16 'ut/%s/match' 'MATCH'
|
|
17 'ut/%s/sbs' 'SBC'
|
|
18 'ut/%s/tournament' 'TOURNAMENT'
|
|
19 'ut/%s/tournament/user' 'TOURNAMENTUSER'
|
|
20 'ut/delete/%s/tournament/user' 'TOURNAMENTQUIT'
|
|
21 'ut/%s/season' 'SEASON'
|
|
22 'ut/%s/season/user' 'SEASONUSER'
|
|
23 'ut/%s/season/%%s/user' 'SEASONUSER_ALTER'
|
|
24 'ut/%s/season/%%s/reset' 'SEASONRESET'
|
|
25 'ut/%s/season/friendly' 'FRIENDLYSEASON'
|
|
26 'ut/%s/purchased' 'PURCHASED'
|
|
27 'ut/%s/store' 'STORE'
|
|
28 'ut/%s/watchList' 'WATCHLIST'
|
|
29 'ut/delete/%s/watchList' 'DELETEWATCHLIST'
|
|
30 'ut/%s/tradePile' 'TRADEPILE'
|
|
31 'ut/%s/trade' 'TRADE'
|
|
32 'ut/delete/%s/trade' 'DELETETRADE'
|
|
33 'ut/%s/marketdata' 'MARKETDATA'
|
|
34 'ut/%s/clientdata' 'CLIENTDATA'
|
|
35 'ut/auth' 'AUTH'
|
|
36 'ut/delete/auth' 'DELETE_AUTH'
|
|
37 'ut/%s/phishing' 'PHISHING'
|
|
38 'ut/%s/captcha' 'CAPTCHA'
|
|
39 'ut/%s/tfa' 'TFA'
|
|
40 'ut/%s/squad/mode' 'SQUADMODE'
|
|
41 'ut/%s/draft/mode' 'DRAFT'
|
|
42 'ut/%s/champion' 'CHAMPIONS'
|
|
43 'ut/v2/%s/store' 'V2STORE'
|
|
44 'ut/%s/livemessage' 'LIVEMESSAGE'
|
|
45 '' 'ADMIN'
|
|
46 '' 'DEBUG'
|
|
47 '' 'MAINTENANCE'
|
|
-- table ends after 48 rows --
|