re: the 147 ISL built-ins characterised; Stage 02 gates on units, not counts

Table at 0x8227226C is 147 big-endian absolute VAs (verified structurally: it
ends exactly where the first handler begins, all targets inside sub_82272220).
Arguments are not in the instruction -- every handler does c_str() on
[phase+20], a packed blob, which is what the local[] staging fills. Return 2 =
yield; five built-ins block by skipping the pc advance.

Recovered the ScriptPhase state layout: 32-entry float and flag register files,
int/double result registers, the timer block, and the runtime unit array at
+324 indexed by symbol-table-2 index -- a direct hook from bytecode call sites
to the two .ssb symbol tables.

Spot-checked two claims against the disassembly rather than trusting them: id 4
loads a DOUBLE into the thread countdown and returns 2 (wait_s), and id 24 reads
current/initial squadron member counts (squad_survival_pct). Both exact.

Counting Stage02.ssb: unit_state 255, hp_pct_test 167, dist_lt 92, unit_alive
71, unit_relation 52 -- and squad_survival_pct, group_ratio_pct and the two
global counters are NOT called at all. So Stage 02's phases are gated on named
units (destroyed / HP / proximity), never on an aggregate count, even though the
kill-counter primitives exist in the VM. That answers the standing 'next wave
after N kills or after an event?' question for this stage: specific units, not a
number.

isl.py now names the built-ins, so the run-up to the first END_PHASE reads
wait_cmds_drained / fade_sound(3) / builtin85(3) / wait_s(3) / END_PHASE.

Not settled: 3 handlers unresolved (55, 75, 105); the 1024-slot interpreter
command table is only partly recovered.
This commit is contained in:
Sylpheed RE agent
2026-08-25 12:36:02 +00:00
parent d434aafc6b
commit 56507e8c2d
3 changed files with 219 additions and 40 deletions

View File

@@ -1,4 +1,4 @@
# Stage02.ssb — ISL built-in call sites
# Stage02.ssb — ISL disassembly artefacts
2846 call sites, 73 distinct built-ins
builtin 11 372 site(s)
@@ -75,28 +75,63 @@
builtin 99 1 site(s)
builtin 28 1 site(s)
## the phase-control built-ins, by site
builtin 6 END PHASE 12 site(s): 0x51e4 0x5828 0x6010 0x6260 0x19640 0x19934 0x1ac44 0x2b96c 0x2bfb0 0x2c1e0 0x2cf74 0x2d1dc
builtin 62 force-end 3 site(s): 0x1482c 0x249f0 0x34a10
builtin 39 mark LAST phase 8 site(s): 0x4dfc 0x52c8 0x60fc 0x19258 0x19724 0x2b584 0x2ba50 0x2c054
builtin 40 result=1 4 site(s): 0x5a10 0x1a270 0x2c578 0x2d06c
## phase-control sites
6 END_PHASE 12: 0x51e4 0x5828 0x6010 0x6260 0x19640 0x19934 0x1ac44 0x2b96c 0x2bfb0 0x2c1e0 0x2cf74 0x2d1dc
62 FORCE_END_PHASE 3: 0x1482c 0x249f0 0x34a10
39 MARK_LAST_PHASE 8: 0x4dfc 0x52c8 0x60fc 0x19258 0x19724 0x2b584 0x2ba50 0x2c054
40 mark_not_last 4: 0x5a10 0x1a270 0x2c578 0x2d06c
## disassembly into the first END PHASE
## condition vocabulary actually used by Stage 02
11 yield 372
69 unit_state 255
1 start_coroutine 216
30 objective_marker 179
20 hp_pct_test 167
18 dist_lt 92
5 await_label 83
70 unit_alive 71
56 unit_relation 52
4 wait_s 34
26 damage_unit 33
3 move_order 20
124 timer_stop 15
120 wait_cmds_drained 14
8 set_flag 12
100 push_trigger 12
93 clear_flag 12
59 fade_sound 12
6 END_PHASE 12
9 read_freg 12
95 unit_hp_pct 9
115 named_event 9
39 MARK_LAST_PHASE 8
90 camera_at_route 8
17 wait_frames 6
10 random 6
123 timer_resume 5
40 mark_not_last 4
137 wait_units_ready 3
52 play_stream 3
14 play_bgm 3
62 FORCE_END_PHASE 3
127 timer_set 1
## disassembly into the first END_PHASE
resync from 0x5058
005058: 0000080C jmp len=8 k=00,00 0000507C -> code+0x507C (file 0x50A0)
005060: 01020C00 set.i len=12 k=01,02 00000000 00000042
00506C: 02030C00 set.i len=12 k=02,03 00000000 00000000
005078: 01020C00 set.i len=12 k=01,02 00000000 00000002
005084: 02030C00 set.i len=12 k=02,03 00000004 00000000
005090: 01020C00 set.i len=12 k=01,02 00000000 00000001
00509C: 02030C00 set.i len=12 k=02,03 00000008 00000000
0050A8: 01020C00 set.i len=12 k=01,02 00000000 00000009
0050B4: 02030C00 set.i len=12 k=02,03 0000000C 00000000
0050C0: 01020C00 set.i len=12 k=01,02 00000000 00000001
0050CC: 02030C00 set.i len=12 k=02,03 00000010 00000000
0050D8: 01021001 set.f len=16 k=01,02 00000000 BFF00000 00000000
0050E8: 02030C01 set.f len=12 k=02,03 00000018 00000000
0050F4: 00000C13 call len=12 k=00,00 00000040 00000245 builtin=64
005060: 01020C00 set.i len=12 k=01,02 00000000 00000042 special[0] = imm 0x42
00506C: 02030C00 set.i len=12 k=02,03 00000000 00000000 local[0] = special[0]
005078: 01020C00 set.i len=12 k=01,02 00000000 00000002 special[0] = imm 0x2
005084: 02030C00 set.i len=12 k=02,03 00000004 00000000 local[4] = special[0]
005090: 01020C00 set.i len=12 k=01,02 00000000 00000001 special[0] = imm 0x1
00509C: 02030C00 set.i len=12 k=02,03 00000008 00000000 local[8] = special[0]
0050A8: 01020C00 set.i len=12 k=01,02 00000000 00000009 special[0] = imm 0x9
0050B4: 02030C00 set.i len=12 k=02,03 0000000C 00000000 local[12] = special[0]
0050C0: 01020C00 set.i len=12 k=01,02 00000000 00000001 special[0] = imm 0x1
0050CC: 02030C00 set.i len=12 k=02,03 00000010 00000000 local[16] = special[0]
0050D8: 01021001 set.f len=16 k=01,02 00000000 BFF00000 00000000 special[0] = imm -1
0050E8: 02030C01 set.f len=12 k=02,03 00000018 00000000 local[24] = special[0]
0050F4: 00000C13 call len=12 k=00,00 00000040 00000245 builtin64(0x42, 0x2, 0x1, 0x9, 0x1, -1)
005100: 0000080C jmp len=8 k=00,00 0000507C -> code+0x507C (file 0x50A0)
005108: 0000080C jmp len=8 k=00,00 0000507C -> code+0x507C (file 0x50A0)
005110: 01020C0A op10 len=12 k=01,02 00000000 00000000
@@ -107,24 +142,24 @@ resync from 0x5058
005144: 0000080D op13 len=8 k=00,00 00004ED4
00514C: 01020C0A op10 len=12 k=01,02 00000000 00000003
005158: 0000080D op13 len=8 k=00,00 00004F7C
005160: 00000C13 call len=12 k=00,00 00000078 00000248 builtin=120
00516C: 01021001 set.f len=16 k=01,02 00000000 40080000 00000000
00517C: 02030C01 set.f len=12 k=02,03 00000000 00000000
005188: 00000C13 call len=12 k=00,00 0000003B 0000024A builtin=59
005194: 01021001 set.f len=16 k=01,02 00000000 40080000 00000000
0051A4: 02030C01 set.f len=12 k=02,03 00000000 00000000
0051B0: 00000C13 call len=12 k=00,00 00000055 0000024B builtin=85
0051BC: 01021001 set.f len=16 k=01,02 00000000 40080000 00000000
0051CC: 02030C01 set.f len=12 k=02,03 00000000 00000000
0051D8: 00000C13 call len=12 k=00,00 00000004 0000024C builtin=4
0051E4: 00000C13 call len=12 k=00,00 00000006 0000024D builtin=6
0051F0: 00000C13 call len=12 k=00,00 0000000B 0000024E builtin=11
0051FC: 01030C00 set.i len=12 k=01,03 00000000 00000001
005208: 01030C00 set.i len=12 k=01,03 00000004 00000056
005214: 01021001 set.f len=16 k=01,02 00000000 00000000 00000000
005224: 02030C01 set.f len=12 k=02,03 00000008 00000000
005230: 00000C13 call len=12 k=00,00 00000014 00000252 builtin=20
005160: 00000C13 call len=12 k=00,00 00000078 00000248 wait_cmds_drained
00516C: 01021001 set.f len=16 k=01,02 00000000 40080000 00000000 special[0] = imm 3
00517C: 02030C01 set.f len=12 k=02,03 00000000 00000000 local[0] = special[0]
005188: 00000C13 call len=12 k=00,00 0000003B 0000024A fade_sound(3)
005194: 01021001 set.f len=16 k=01,02 00000000 40080000 00000000 special[0] = imm 3
0051A4: 02030C01 set.f len=12 k=02,03 00000000 00000000 local[0] = special[0]
0051B0: 00000C13 call len=12 k=00,00 00000055 0000024B builtin85(3)
0051BC: 01021001 set.f len=16 k=01,02 00000000 40080000 00000000 special[0] = imm 3
0051CC: 02030C01 set.f len=12 k=02,03 00000000 00000000 local[0] = special[0]
0051D8: 00000C13 call len=12 k=00,00 00000004 0000024C wait_s(3)
0051E4: 00000C13 call len=12 k=00,00 00000006 0000024D END_PHASE
0051F0: 00000C13 call len=12 k=00,00 0000000B 0000024E yield
0051FC: 01030C00 set.i len=12 k=01,03 00000000 00000001 local[0] = imm 0x1
005208: 01030C00 set.i len=12 k=01,03 00000004 00000056 local[4] = imm 0x56
005214: 01021001 set.f len=16 k=01,02 00000000 00000000 00000000 special[0] = imm 0
005224: 02030C01 set.f len=12 k=02,03 00000008 00000000 local[8] = special[0]
005230: 00000C13 call len=12 k=00,00 00000014 00000252 hp_pct_test(0)
00523C: 01020C0A op10 len=12 k=01,02 00000000 00000001
005248: 0000080E op14 len=8 k=00,00 0000575C
005250: 01020C00 set.i len=12 k=01,02 00000000 00000000
00525C: 02030C00 set.i len=12 k=02,03 00000000 00000000
005250: 01020C00 set.i len=12 k=01,02 00000000 00000000 special[0] = imm 0x0
00525C: 02030C00 set.i len=12 k=02,03 00000000 00000000 local[0] = special[0]