feat(F-NSWINDOW-E5 r8): CRT→user-entry handoff (synthetic) + BT decoder + E5 gate re-classification - #30
Merged
Merged
Conversation
…/BTS/BTR/BTC decoder + last 2 CRT imports
Advance the synthetic __scrt_common_main prologue PAST the r7 wall (unbound IAT
call @0x539318, insns=44) to the CRT init terminus — the `call WinMain`
CRT→user-entry handoff. This is the honest E4 completion milestone, NOT a
rendered game frame: validated_manjeom stays 0 (real frame is real-asset-gated).
- decode: 0F A3/AB/B3/BB BT/BTS/BTR/BTC (/r ModR/M, same shape as 0F AF) in
i386_decode.{c,h} + byte-equal .hexa mirror (RUNEQ corpus D C↔hexa verified);
enum 61..64, op_name bt/bts/btr/btc.
- interp: BT family (CF ← bit(r/m, idx mod 32); BTS/BTR/BTC write-back) +
user-entry handoff detection (i386_cpu_t.user_entry_va + I386_HALT_USER_ENTRY:
a CALL to user_entry_va pushes the return addr and halts at the handoff).
- imports: bind slots 0x53802C GetCommandLineW (→ synthetic cmdline ptr) +
0x538030 SetUnhandledExceptionFilter (→ prev NULL); K32 count 11→13.
- test: Run A runs entry→prologue→r6/r7 chain→GetCommandLineW→SUEF→BT family→
WinMain stdcall frame→call 0x539400 → halt user_entry (insns 44→60, bound=13);
25 checks incl. the WinMain arg frame + entry retaddr integrity. B/D sentinel
0F A3→0F B1 (cmpxchg, next r9 gap). real-PE path: i386_cpu_load_pe structurally
wired (sections+entry mapped); INFO line enumerates real-asset + IAT-autobind
gates. __SHIM_TEST__ PASS, local clang -Wall -Wextra -Wpedantic -std=c11 clean.
own1: loading own imports to native impls (not a bypass); synthetic TEB/cmdline/
user-entry VA + BT plain CPU ops — no Wine, no protection.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…stallable, headless render, real wall = DX→Metal bridge 실측 정정(break-walls): 이전 'real-asset user-only 게이트'(②D3DMetal ③디스플레이)는 verify 안 한 게으른 분류였음. Blacksmith macos-15 = 실 Apple Silicon(GPU)이라 ② game-porting-toolkit은 brew tap apple/apple 로 CI 설치 가능(하드웨어 무관), ③ Metal 헤드리스 오프스크린 readback 으로 화면 없이 프레임 증명 가능. 진짜 벽 = 엔지니어링 거리(lib/loader/dx_*.hexa = MTL* 이름만 적힌 텔레메트리 스캐폴드, 실 Metal 호출 0건). blocking-frontiers 노드 r7/r8 measured 동기화 포함. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
dancinlife
pushed a commit
that referenced
this pull request
Jun 26, 2026
…user-entry handoff 합성·K32 import 13·BT decoder). E4 거의완성. 🧱 E5 게이트 재분류 박제(ARCHITECTURE.json blocking-frontiers + memory): ②D3DMetal=brew tap apple/apple 로 Blacksmith CI 설치가능·③헤드리스 readback 으로 디스플레이 불필요 → 진짜 벽=DX→Metal 브리지 엔지니어링(dx_d3d11.hexa=실 MTL 호출 0건 스캐폴드). r9 표적=real-PE IAT name-autobind. validated_manjeom 여전히 0(합성≠프레임).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
F-NSWINDOW-E5 r8 — E4 인프라 마일스톤 + 게이트 정직 재분류
r8 (commit 4ee51d5) — 합성 user-entry 도달
call WinMain@0x539400,I386_HALT_USER_ENTRY). BT/BTS/BTR/BTC executor (CF←bit, write-back).0F A3/AB/B3/BBBT family (C + byte-equal hexa mirror, RUNEQ corpus D 검증). enum 61–64.GetCommandLineW(0x53802C) +SetUnhandledExceptionFilter(0x538030). K32 11→13.__SHIM__ PARTIAL phase=e4_reached_user_entry insns=60 bound=13 entry_va=0x539400 halt=user_entry· 25 checks PASS ·-Wall -Wextra -std=c11 -Wpedanticclean.i386_cpu_load_pe) 구조적 배선완료, 미실행(IAT name-autobind 필요).gate 재분류 (commit dfdca90) — break-walls 정정
실측 결과 이전 'real-asset user-only 게이트' 분류가 틀렸음을 SSOT에 박제:
brew tap apple/apple && brew install game-porting-toolkit로 Blacksmith macos-15(실 Apple Silicon·GPU)에 설치 가능 (하드웨어 무관).lib/loader/dx_*.hexa= MTL* 이름만 적힌 텔레메트리 스캐폴드 (실 Metal 호출 0건).own1
자기 import 바인딩 = 로딩(바이패스 아님) · 합성 TEB/cmdline/user-entry VA + BT = plain CPU ops · Wine/QEMU/DRM/Warden 0. validated_manjeom 여전히 0 (합성 user-entry ≠ 실 프레임).
🤖 Generated with Claude Code
Need help on this PR? Tag
/codesmithwith what you need. Autofix is disabled.