alex/sots-re
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
sots-re/verify/results/shim/watchpoints/w2-shim-log-excerpt.txt
alex 92ad44efb0 lane W2: multiplayer Tier 0 played end to end with no server; ModCount/Frame/Status watchpoints; rcex explained 
Multiplayer: two clients on one guest, joined by typed IP and by LAN browse, launched a
2-player game and played two turns in lockstep. 44,319 packets captured outside the guest,
ZERO to any GameSpy port. Availability check fails open exactly as lane G2 read it; Join
Manually is enabled with every gamespy.com name dead, falsifying G2's own caveat (a). The
shipped MOTD is fetched live from kerberos-productions.com and tells players to host in LAN
mode -- the developer's own statement of the same finding.

Watchpoints: a new shim module arms DR0-DR3 from StrategyServer::ApplyAllTurnCommands.
ModCount takes exactly 12 writes per End Turn (lane A2's prediction, confirmed twice, both
predicted addresses exact); Frame takes exactly one, from BeginProcessTurn+0x2a, settling the
ModCount-vs-Frame naming in A2's favour. The Player.Status writer between tail phase 31 and
the autosave EXISTS and is StrategyNetworkClient::OnMessage+0xa15 -- correcting lane T2.
Rule 19 control: the armed run reproduced the determinism oracle byte for byte.

rcex: closed from the corpus alone. It is sixteen 4-bit per-player counters; nibble p is set
to 1 on the turn the system enters player p's AFlags and ticked to 0 the next turn. 7/7
across two different games.
2026-09-08 15:23:52 -04:00

87 lines
8.1 KiB
Text
Raw Blame History

15:06:12.285 [tid 5928] ==== sots-engine shim (binkw32 proxy) build w2watch-3512c9a-dirty-20260908T1900Z ====
15:06:12.285 [tid 5928] config: watch=on
15:06:12.285 [tid 5928] config: watch.players=2
15:06:12.285 [tid 5928] config: watch.out=C:\SOTS\shim.watch.txt
15:06:12.769 [tid 5928] watch: VEH=006a8308 text=[0x00e81000,0x0145ca00) out=C:\SOTS\shim.watch.txt
15:06:12.785 [tid 5928] watch: arm hook StrategyServer::ApplyAllTurnCommands rva=0x0038f6a0 va=0120f6a0 create=MH_OK
enable=MH_OK
15:12:27.093 [tid 5928] watch: players vector @0e0b267c begin=0e163528 end=0e163548 count=8
15:12:27.093 [tid 5928] watch: SELFTEST canary writes=1 traps=1 dr7=0xdddd0055 PASS
15:12:27.093 [tid 5928] watch: slot 0 -> S+0x8 (A2:ModCount / T:PhaseCounter) = 0x0e0b2630
15:12:27.093 [tid 5928] watch: slot 1 -> S+0xc (A2:Frame / addresses.json:ModCount) = 0x0e0b2634
15:12:27.093 [tid 5928] watch: slot 2 -> player[0]+0x164 Status = 0x0e0cc2d4
15:12:27.093 [tid 5928] watch: slot 3 -> player[1]+0x164 Status = 0x0e0c5d44
15:12:27.093 [tid 5928] watch: ARMED on tid 5928 dr7=0xdddd0055, S=0e0b2628 (ApplyAllTurnCommands this)
15:12:27.578 [tid 5300] watchhit seq=0 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012ec3e9 value=13(0x0000000d) tid=5928
ebpret=0x0130fce2 ebpret2=0x0120f6e6 scan=0x0130fce2,0x013dad98,0x0120f6e6,0x01204909
15:12:27.578 [tid 5300] watchhit seq=1 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=14(0x0000000e) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:12:27.578 [tid 5300] watchhit seq=2 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=15(0x0000000f) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:12:27.578 [tid 5300] watchhit seq=3 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=16(0x00000010) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:12:27.578 [tid 5300] watchhit seq=4 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=17(0x00000011) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:12:27.578 [tid 5300] watchhit seq=5 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012c946e value=18(0x00000012) tid=5928
ebpret=0x013100a4 ebpret2=0x0120f6e6 scan=0x013100a4,0x013dad98,0x0120f6e6,0x01204909
15:12:27.578 [tid 5300] watchhit seq=6 mark=1 slot=0 dr6=0xffff0ff1 eip=0x0130bf01 value=19(0x00000013) tid=5928
ebpret=0x013102b4 ebpret2=0x0120f6e6 scan=0x01402148,0x012c9514,0x0141bb08,0x013102b4
15:12:27.578 [tid 5300] watchhit seq=7 mark=1 slot=0 dr6=0xffff0ff1 eip=0x0131046f value=20(0x00000014) tid=5928
ebpret=0x0120f6e6 ebpret2=0x0139dfa1 scan=0x013dad98,0x0120f6e6,0x01204909,0x00000000
15:12:27.578 [tid 5300] watchhit seq=8 mark=1 slot=0 dr6=0xffff0ff1 eip=0x0131046f value=21(0x00000015) tid=5928
ebpret=0x0120f6e6 ebpret2=0x0139dfa1 scan=0x013dad98,0x0120f6e6,0x01204909,0x00000000
15:12:27.578 [tid 5300] watchhit seq=9 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012e57ad value=22(0x00000016) tid=5928
ebpret=0x01310652 ebpret2=0x0120f6e6 scan=0x01339285,0x013fb198,0x01310652,0x013dad98
15:12:27.578 [tid 5300] watchhit seq=10 mark=1 slot=0 dr6=0xffff0ff1 eip=0x0125c6f3 value=23(0x00000017) tid=5928
ebpret=0x72433b04 ebpret2=0x724337d4 scan=0x0141005c,0x012e57ad,0x00000000,0x00000000
15:12:27.578 [tid 5300] watchhit seq=11 mark=1 slot=2 dr6=0xffff0ff4 eip=0x0125cc94 value=1(0x00000001) tid=5928
ebpret=0x72433b04 ebpret2=0x724337d4 scan=0x0141005c,0x012e57ad,0x00000000,0x00000000
15:12:27.578 [tid 5300] watchhit seq=12 mark=1 slot=2 dr6=0xffff0ff4 eip=0x01205055 value=4(0x00000004) tid=5928
ebpret=0x0139dfa1 ebpret2=0x013a5651 scan=0x012317aa,0x0140c080,0x0124cac1,0x0124cad9
15:12:27.578 [tid 5300] watchhit seq=13 mark=1 slot=0 dr6=0xffff0ff1 eip=0x012592cd value=24(0x00000018) tid=5928
ebpret=0x72406104 ebpret2=0x72405dd4 scan=0x0140fca0,0x00e81000,0x01205055,0x00000000
15:12:27.578 [tid 5300] watchhit seq=14 mark=1 slot=2 dr6=0xffff0ff4 eip=0x0125dd49 value=0(0x00000000) tid=5928
ebpret=0x01204fe4 ebpret2=0x0139dfa1 scan=0x01410138,0x01204fe4,0x010345f4,0x012290be
15:12:27.578 [tid 5300] watchhit seq=15 mark=1 slot=3 dr6=0xffff0ff8 eip=0x0125dd49 value=0(0x00000000) tid=5928
ebpret=0x01204fe4 ebpret2=0x0139dfa1 scan=0x01410138,0x01204fe4,0x010345f4,0x012290be
15:15:26.531 [tid 5928] watchhit seq=16 mark=1 slot=3 dr6=0xffff0ff8 eip=0x012a1a75 value=4(0x00000004) tid=5928
ebpret=0x01259b2a ebpret2=0x0120481b scan=0x01259b2a,0x0140fd08,0x0120481b,0x0135e74a
15:15:26.531 [tid 5928] watchhit seq=17 mark=1 slot=2 dr6=0xffff0ff4 eip=0x012a1a75 value=4(0x00000004) tid=5928
ebpret=0x01259b2a ebpret2=0x0120481b scan=0x01259b2a,0x0140fd08,0x0120481b,0x0135e74a
15:15:26.531 [tid 5928] watchhit seq=18 mark=1 slot=1 dr6=0xffff0ff2 eip=0x0125990d value=4(0x00000004) tid=5928
ebpret=0x012048dd ebpret2=0x0139dfa1 scan=0x0140fce0,0x012048dd,0x00000000,0x00000000
15:15:26.968 [tid 5300] watchhit seq=19 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012ec3e9 value=25(0x00000019) tid=5928
ebpret=0x0130fce2 ebpret2=0x0120f6e6 scan=0x0130fce2,0x013dad98,0x0120f6e6,0x01204909
15:15:26.968 [tid 5300] watchhit seq=20 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=26(0x0000001a) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:15:26.968 [tid 5300] watchhit seq=21 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=27(0x0000001b) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:15:26.968 [tid 5300] watchhit seq=22 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=28(0x0000001c) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:15:26.968 [tid 5300] watchhit seq=23 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012a1a87 value=29(0x0000001d) tid=5928
ebpret=0x0130ffcb ebpret2=0x0120f6e6 scan=0x0130ffcb,0x013dad98,0x0120f6e6,0x01204909
15:15:26.968 [tid 5300] watchhit seq=24 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012c946e value=30(0x0000001e) tid=5928
ebpret=0x013100a4 ebpret2=0x0120f6e6 scan=0x013100a4,0x013dad98,0x0120f6e6,0x01204909
15:15:26.968 [tid 5300] watchhit seq=25 mark=2 slot=0 dr6=0xffff0ff1 eip=0x0130bf01 value=31(0x0000001f) tid=5928
ebpret=0x013102b4 ebpret2=0x0120f6e6 scan=0x01402148,0x012c9514,0x0141bb08,0x013102b4
15:15:26.968 [tid 5300] watchhit seq=26 mark=2 slot=0 dr6=0xffff0ff1 eip=0x0131046f value=32(0x00000020) tid=5928
ebpret=0x0120f6e6 ebpret2=0x0139dfa1 scan=0x013dad98,0x0120f6e6,0x01204909,0x00000000
15:15:26.968 [tid 5300] watchhit seq=27 mark=2 slot=0 dr6=0xffff0ff1 eip=0x0131046f value=33(0x00000021) tid=5928
ebpret=0x0120f6e6 ebpret2=0x0139dfa1 scan=0x013dad98,0x0120f6e6,0x01204909,0x00000000
15:15:26.968 [tid 5300] watchhit seq=28 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012e57ad value=34(0x00000022) tid=5928
ebpret=0x01310652 ebpret2=0x0120f6e6 scan=0x01339285,0x013fb198,0x01310652,0x013dad98
15:15:26.968 [tid 5300] watchhit seq=29 mark=2 slot=0 dr6=0xffff0ff1 eip=0x0125c6f3 value=35(0x00000023) tid=5928
ebpret=0x72433b04 ebpret2=0x724337d4 scan=0x0141005c,0x012e57ad,0x00000000,0x00000000
15:15:26.968 [tid 5300] watchhit seq=30 mark=2 slot=2 dr6=0xffff0ff4 eip=0x0125cc94 value=1(0x00000001) tid=5928
ebpret=0x72433b04 ebpret2=0x724337d4 scan=0x0141005c,0x012e57ad,0x00000000,0x00000000
15:15:26.968 [tid 5300] watchhit seq=31 mark=2 slot=2 dr6=0xffff0ff4 eip=0x01205055 value=4(0x00000004) tid=5928
ebpret=0x0139dfa1 ebpret2=0x013a5651 scan=0x012317aa,0x0140c080,0x0124cac1,0x0124cad9
15:15:26.968 [tid 5300] watchhit seq=32 mark=2 slot=0 dr6=0xffff0ff1 eip=0x012592cd value=36(0x00000024) tid=5928
ebpret=0x72406104 ebpret2=0x72405dd4 scan=0x0140fca0,0x00e81000,0x01205055,0x00000000
15:15:26.968 [tid 5300] watchhit seq=33 mark=2 slot=2 dr6=0xffff0ff4 eip=0x0125dd49 value=0(0x00000000) tid=5928
ebpret=0x01204fe4 ebpret2=0x0139dfa1 scan=0x01410138,0x01204fe4,0x010345f4,0x012290be
15:15:26.968 [tid 5300] watchhit seq=34 mark=2 slot=3 dr6=0xffff0ff8 eip=0x0125dd49 value=0(0x00000000) tid=5928
ebpret=0x01204fe4 ebpret2=0x0139dfa1 scan=0x01410138,0x01204fe4,0x010345f4,0x012290be
Reference in a new issue View git blame Copy permalink