8e709b0a24
Snapshot of every non-log artifact under audit-runs/ from audits 003 through 058: findings.md per audit, comparison CSVs, probe diffs, schema docs, register-dump txts, lr-trace JSONL streams, the saved canary patch diffs, etc. ~284 files / ~52 MB total. Excluded (per .gitignore): probe stdout/stderr/log streams (the raw firehose), guest-memory dumps under audit-026/027/029 (4.5 GB of .bin files; *.bin pattern added to .gitignore this commit). Also adds the orphan audit-058-sub825070F0-activation directory that a subagent accidentally created at project-root instead of under xenia-rs/audit-runs/; relocated to its proper home. Purpose: cross-machine continuity. With these summaries committed, a fresh clone gives the next session the full per-audit context (findings + tables + cascade predictions) without dependence on local-only working tree. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
80 lines
2.3 KiB
Plaintext
80 lines
2.3 KiB
Plaintext
=== ANGLE F (static-init driver) DB EVIDENCE ===
|
|
|
|
sub_824ACB38 (CRT static-init driver):
|
|
callers: [(2185934664,)]
|
|
static-reach: True
|
|
Iterates 0x82870010 - 0x828708C4 = 2228 bytes / 4 = 557 slots
|
|
|
|
arr=0x82870014 len=3
|
|
arr=0x82870024 len=9
|
|
arr=0x82870094 len=12
|
|
arr=0x828700c8 len=16
|
|
arr=0x8287016c len=13
|
|
arr=0x82870214 len=3
|
|
arr=0x82870238 len=3
|
|
arr=0x82870250 len=3
|
|
arr=0x828702a8 len=3
|
|
arr=0x828702c0 len=3
|
|
arr=0x828702e4 len=3
|
|
arr=0x828705a0 len=4
|
|
arr=0x8287062c len=4
|
|
arr=0x82870870 len=3
|
|
Total non-NULL: 82 fnptrs in 14 arrays
|
|
|
|
=== ANGLE E: sub_82452DC0 caller reachability ===
|
|
|
|
Direct callers: 27
|
|
0x82448538 static=0 indir=0
|
|
0x821cb030 static=0 indir=0 tid=13 worker creator (audit-049)
|
|
0x8229e878 static=0 indir=0
|
|
0x821d6350 static=0 indir=0
|
|
0x8229f018 static=0 indir=0
|
|
0x82452dc0 static=1 indir=1
|
|
0x82178f60 static=0 indir=0
|
|
0x82460b70 static=0 indir=0
|
|
0x8225ee20 static=0 indir=0
|
|
0x82446450 static=0 indir=0
|
|
0x8234a090 static=0 indir=0
|
|
0x82237ec8 static=0 indir=0
|
|
0x821a5150 static=0 indir=0
|
|
0x822a96e8 static=0 indir=0
|
|
0x821c4ae0 static=0 indir=0
|
|
0x8245ee98 static=0 indir=1
|
|
0x8217fd68 static=1 indir=1
|
|
0x8220e500 static=0 indir=0
|
|
0x823f5cc8 static=0 indir=0
|
|
0x822ae628 static=0 indir=1
|
|
0x82335200 static=0 indir=0
|
|
0x824480d0 static=1 indir=1
|
|
0x823df908 static=0 indir=0
|
|
0x821cbea8 static=0 indir=1
|
|
0x821d24a0 static=0 indir=0
|
|
0x823e3080 static=0 indir=1
|
|
0x823ec350 static=0 indir=0
|
|
Static-unreach=24, indir-unreach=20
|
|
|
|
=== ANGLE D: canary-only exports vs 5B run ===
|
|
|
|
Canary fired but ours did NOT (per audit-006 vs 5B-instr counters):
|
|
ExTerminateThread
|
|
NtCreateTimer
|
|
NtSetTimerEx
|
|
XamInputGetCapabilities
|
|
XamUserGetXUID
|
|
XamUserReadProfileSettings
|
|
0 0
|
|
0x8229e878 0 0
|
|
0x821d6350 0 0
|
|
0x821cb030 0 0 tid=13 worker creator (audit-049)
|
|
Total: static-unreach=24, indir-unreach=20
|
|
|
|
=== ANGLE D: canary-only kernel exports (audit-006 baseline) ===
|
|
|
|
Canary fired (audit-006 baseline) but ours did NOT in 5B-instr run:
|
|
ExTerminateThread
|
|
NtCreateTimer
|
|
NtSetTimerEx
|
|
XamInputGetCapabilities
|
|
XamUserGetXUID
|
|
XamUserReadProfileSettings
|