23h: kernel-consumer hunt — no direct readers of FIR data outside 529fe0 (init-only xrefs); bp on loop end silent in render => duplicated chain instantiation suspected; active RIP sampler fnsample.py working (2.4k in-module samples, MSVC stackfill dominates steady state; core leads 52e1c0/534580 on param phase); yabridge stale socket dirs break respawn — documented

This commit is contained in:
2026-08-23 23:01:19 +03:00
parent c3656975dd
commit 05caf1eb44
8 changed files with 1894 additions and 16 deletions
+247
View File
@@ -0,0 +1,247 @@
; vt_54b600
/tmp/slice.bin: file format binary
Disassembly of section .data:
000000018054b600 <.data>:
18054b600: 8b f8 mov %eax,%edi
18054b602: 00 00 add %al,(%rax)
18054b604: 00 48 85 add %cl,-0x7b(%rax)
18054b607: c9 leave
18054b608: 74 07 je 0x18054b611
18054b60a: 48 8b 01 mov (%rcx),%rax
18054b60d: ff 50 10 call *0x10(%rax)
18054b610: 90 nop
18054b611: 48 8b cb mov %rbx,%rcx
18054b614: e8 07 f0 ff ff call 0x18054a620
18054b619: 90 nop
18054b61a: 40 f6 c7 01 test $0x1,%dil
18054b61e: 74 0e je 0x18054b62e
18054b620: ba 30 01 00 00 mov $0x130,%edx
18054b625: 48 8b cb mov %rbx,%rcx
18054b628: e8 c7 5a be 00 call 0x1811310f4
18054b62d: 90 nop
18054b62e: 48 8b c3 mov %rbx,%rax
18054b631: 48 8b 5c 24 40 mov 0x40(%rsp),%rbx
18054b636: 48 83 c4 30 add $0x30,%rsp
18054b63a: 5f pop %rdi
18054b63b: c3 ret
18054b63c: cc int3
18054b63d: cc int3
18054b63e: cc int3
18054b63f: cc int3
18054b640: 40 53 rex push %rbx
18054b642: 48 83 ec 20 sub $0x20,%rsp
18054b646: 48 8b d9 mov %rcx,%rbx
18054b649: 84 d2 test %dl,%dl
18054b64b: 74 1e je 0x18054b66b
18054b64d: b9 10 00 00 00 mov $0x10,%ecx
18054b652: e8 89 60 be 00 call 0x1811316e0
18054b657: 44 8b 43 2c mov 0x2c(%rbx),%r8d
18054b65b: 48 8d 0d 56 27 f6 01 lea 0x1f62756(%rip),%rcx # 0x1824addb8
18054b662: 48 89 08 mov %rcx,(%rax)
18054b665: 44 89 40 0c mov %r8d,0xc(%rax)
18054b669: eb 46 jmp 0x18054b6b1
18054b66b: 8b 81 9c 00 00 00 mov 0x9c(%rcx),%eax
18054b671: b9 10 00 00 00 mov $0x10,%ecx
18054b676: 83 f8 04 cmp $0x4,%eax
18054b679: 75 0e jne 0x18054b689
18054b67b: e8 60 60 be 00 call 0x1811316e0
18054b680: 48 8d 15 39 24 f6 01 lea 0x1f62439(%rip),%rdx # 0x1824adac0
18054b687: eb 1f jmp 0x18054b6a8
18054b689: 83 f8 03 cmp $0x3,%eax
18054b68c: 75 0e jne 0x18054b69c
18054b68e: e8 4d 60 be 00 call 0x1811316e0
18054b693: 48 8d 15 0e 1f f6 01 lea 0x1f61f0e(%rip),%rdx # 0x1824ad5a8
18054b69a: eb 0c jmp 0x18054b6a8
18054b69c: e8 3f 60 be 00 call 0x1811316e0
18054b6a1: 48 8d 15 30 1f f6 01 lea 0x1f61f30(%rip),%rdx # 0x1824ad5d8
18054b6a8: 8b 4b 2c mov 0x2c(%rbx),%ecx
18054b6ab: 89 48 0c mov %ecx,0xc(%rax)
18054b6ae: 48 89 10 mov %rdx,(%rax)
18054b6b1: c7 40 08 01 00 00 00 movl $0x1,0x8(%rax)
18054b6b8: 48 8b 8b 00 01 00 00 mov 0x100(%rbx),%rcx
18054b6bf: 48 89 83 00 01 00 00 mov %rax,0x100(%rbx)
18054b6c6: 48 89 44 24 40 mov %rax,0x40(%rsp)
18054b6cb: 48 85 c9 test %rcx,%rcx
18054b6ce: 74 10 je 0x18054b6e0
18054b6d0: 48 8b 01 mov (%rcx),%rax
18054b6d3: ba 01 00 00 00 mov $0x1,%edx
18054b6d8: 48 83 c4 20 add $0x20,%rsp
18054b6dc: 5b pop %rbx
18054b6dd: 48 ff 20 rex.W jmp *(%rax)
18054b6e0: 48 83 c4 20 add $0x20,%rsp
18054b6e4: 5b pop %rbx
18054b6e5: c3 ret
18054b6e6: cc int3
18054b6e7: cc int3
18054b6e8: cc int3
18054b6e9: cc int3
18054b6ea: cc int3
18054b6eb: cc int3
18054b6ec: cc int3
18054b6ed: cc int3
18054b6ee: cc int3
18054b6ef: cc int3
18054b6f0: 40 53 rex push %rbx
18054b6f2: 48 83 ec 20 sub $0x20,%rsp
18054b6f6: 83 79 28 00 cmpl $0x0,0x28(%rcx)
18054b6fa: 48 8b d9 mov %rcx,%rbx
18054b6fd: 7f 08 jg 0x18054b707
18054b6ff: 33 c0 xor %eax,%eax
18054b701: 48 83 c4 20 add $0x20,%rsp
18054b705: 5b pop %rbx
18054b706: c3 ret
18054b707: 80 79 40 00 cmpb $0x0,0x40(%rcx)
18054b70b: 75 2b jne 0x18054b738
18054b70d: 48 8b 49 10 mov 0x10(%rcx),%rcx
18054b711: 48 8d 54 24 30 lea 0x30(%rsp),%rdx
18054b716: c7 44 24 30 00 00 00 movl $0x0,0x30(%rsp)
18054b71d: 00
18054b71e: 48 8b 01 mov (%rcx),%rax
18054b721: ff 50 30 call *0x30(%rax)
18054b724: 85 c0 test %eax,%eax
18054b726: 78 10 js 0x18054b738
18054b728: 8b 83 98 00 00 00 mov 0x98(%rbx),%eax
18054b72e: 2b 44 24 30 sub 0x30(%rsp),%eax
18054b732: 48 83 c4 20 add $0x20,%rsp
18054b736: 5b pop %rbx
18054b737: c3 ret
18054b738: 8b 83 98 00 00 00 mov 0x98(%rbx),%eax
18054b73e: 48 83 c4 20 add $0x20,%rsp
18054b742: 5b pop %rbx
18054b743: c3 ret
18054b744: cc int3
18054b745: cc int3
18054b746: cc int3
18054b747: cc int3
18054b748: cc int3
18054b749: cc int3
18054b74a: cc int3
18054b74b: cc int3
18054b74c: cc int3
18054b74d: cc int3
18054b74e: cc int3
18054b74f: cc int3
18054b750: 48 8b c4 mov %rsp,%rax
18054b753: 48 89 50 10 mov %rdx,0x10(%rax)
18054b757: 55 push %rbp
18054b758: 57 push %rdi
18054b759: 48 83 ec 68 sub $0x68,%rsp
18054b75d: 83 79 28 00 cmpl $0x0,0x28(%rcx)
18054b761: 41 8b e9 mov %r9d,%ebp
18054b764: 48 8b f9 mov %rcx,%rdi
18054b767: 0f 8e b6 01 00 00 jle 0x18054b923
18054b76d: 48 89 70 e8 mov %rsi,-0x18(%rax)
18054b771: 33 f6 xor %esi,%esi
18054b773: 4c 89 60 e0 mov %r12,-0x20(%rax)
18054b777: 44 8b e6 mov %esi,%r12d
18054b77a: 4c 89 68 d8 mov %r13,-0x28(%rax)
18054b77e: 4d 63 e8 movslq %r8d,%r13
18054b781: 45 85 c9 test %r9d,%r9d
18054b784: 0f 8e 8a 01 00 00 jle 0x18054b914
18054b78a: 48 89 58 18 mov %rbx,0x18(%rax)
18054b78e: 4c 89 70 d0 mov %r14,-0x30(%rax)
18054b792: 4c 89 78 c8 mov %r15,-0x38(%rax)
18054b796: 4c 8b bc 24 a0 00 00 mov 0xa0(%rsp),%r15
18054b79d: 00
18054b79e: 66 90 xchg %ax,%ax
18054b7a0: 80 7f 40 00 cmpb $0x0,0x40(%rdi)
18054b7a4: 75 1d jne 0x18054b7c3
18054b7a6: 4d 85 ff test %r15,%r15
18054b7a9: 74 18 je 0x18054b7c3
18054b7ab: 49 8b 4f 58 mov 0x58(%r15),%rcx
18054b7af: 33 d2 xor %edx,%edx
18054b7b1: ff 15 69 ed 65 01 call *0x165ed69(%rip) # 0x181baa520
18054b7b7: 85 c0 test %eax,%eax
18054b7b9: 75 08 jne 0x18054b7c3
18054b7bb: 49 8b cf mov %r15,%rcx
18054b7be: e8 7d fc ff ff call 0x18054b440
18054b7c3: 83 7f 28 00 cmpl $0x0,0x28(%rdi)
18054b7c7: 7f 04 jg 0x18054b7cd
18054b7c9: 8b de mov %esi,%ebx
18054b7cb: eb 38 jmp 0x18054b805
18054b7cd: 80 7f 40 00 cmpb $0x0,0x40(%rdi)
18054b7d1: 75 2c jne 0x18054b7ff
18054b7d3: 48 8b 4f 10 mov 0x10(%rdi),%rcx
18054b7d7: 48 8d 94 24 80 00 00 lea 0x80(%rsp),%rdx
18054b7de: 00
18054b7df: 89 b4 24 80 00 00 00 mov %esi,0x80(%rsp)
18054b7e6: 48 8b 01 mov (%rcx),%rax
18054b7e9: ff 50 30 call *0x30(%rax)
18054b7ec: 85 c0 test %eax,%eax
18054b7ee: 78 0f js 0x18054b7ff
18054b7f0: 8b 9f 98 00 00 00 mov 0x98(%rdi),%ebx
18054b7f6: 2b 9c 24 80 00 00 00 sub 0x80(%rsp),%ebx
18054b7fd: eb 06 jmp 0x18054b805
18054b7ff: 8b 9f 98 00 00 00 mov 0x98(%rdi),%ebx
18054b805: 3b eb cmp %ebx,%ebp
18054b807: 0f 4c dd cmovl %ebp,%ebx
18054b80a: 85 db test %ebx,%ebx
18054b80c: 75 32 jne 0x18054b840
18054b80e: 48 8b 84 24 a8 00 00 mov 0xa8(%rsp),%rax
18054b815: 00
18054b816: 8b 80 b8 01 00 00 mov 0x1b8(%rax),%eax
18054b81c: 85 c0 test %eax,%eax
18054b81e: 0f 85 de 00 00 00 jne 0x18054b902
18054b824: 48 8b 4f 58 mov 0x58(%rdi),%rcx
18054b828: ba e8 03 00 00 mov $0x3e8,%edx
18054b82d: ff 15 ed ec 65 01 call *0x165eced(%rip) # 0x181baa520
18054b833: 85 c0 test %eax,%eax
18054b835: 0f 85 c7 00 00 00 jne 0x18054b902
18054b83b: e9 ba 00 00 00 jmp 0x18054b8fa
18054b840: 80 7f 40 00 cmpb $0x0,0x40(%rdi)
18054b844: 74 1a je 0x18054b860
18054b846: 48 8b 4f 58 mov 0x58(%rdi),%rcx
18054b84a: ba e8 03 00 00 mov $0x3e8,%edx
18054b84f: ff 15 cb ec 65 01 call *0x165eccb(%rip) # 0x181baa520
18054b855: 3d 02 01 00 00 cmp $0x102,%eax
18054b85a: 0f 84 a2 00 00 00 je 0x18054b902
18054b860: 48 8b 8f f8 00 00 00 mov 0xf8(%rdi),%rcx
18054b867: 4c 8d 44 24 30 lea 0x30(%rsp),%r8
18054b86c: 48 89 74 24 30 mov %rsi,0x30(%rsp)
18054b871: 8b d3 mov %ebx,%edx
18054b873: 48 8b 01 mov (%rcx),%rax
18054b876: ff 50 18 call *0x18(%rax)
18054b879: 85 c0 test %eax,%eax
18054b87b: 78 78 js 0x18054b8f5
18054b87d: 4d 85 ed test %r13,%r13
18054b880: 7e 5f jle 0x18054b8e1
18054b882: 4c 8b bc 24 88 00 00 mov 0x88(%rsp),%r15
18054b889: 00
18054b88a: 49 63 c4 movslq %r12d,%rax
18054b88d: 4c 8d 34 85 00 00 00 lea 0x0(,%rax,4),%r14
18054b894: 00
18054b895: 66 66 66 0f 1f 84 00 data16 data16 nopw 0x0(%rax,%rax,1)
18054b89c: 00 00 00 00
18054b8a0: 48 8b 8f 00 01 00 00 mov 0x100(%rdi),%rcx
18054b8a7: 48 8b 87 88 00 00 00 mov 0x88(%rdi),%rax
18054b8ae: 4d 8b 0c f7 mov (%r15,%rsi,8),%r9
18054b8b2: 48 8b 54 24 30 mov 0x30(%rsp),%rdx
18054b8b7: 4d 03 ce add %r14,%r9
18054b8ba: 4c 8b 11 mov (%rcx),%r10
18054b8bd: 44 8b 04 b0 mov (%rax,%rsi,4),%r8d
18054b8c1: 89 5c 24 28 mov %ebx,0x28(%rsp)
18054b8c5: c7 44 24 20 00 00 00 movl $0x0,0x20(%rsp)
18054b8cc: 00
18054b8cd: 41 ff 52 08 call *0x8(%r10)
18054b8d1: 48 ff c6 inc %rsi
18054b8d4: 49 3b f5 cmp %r13,%rsi
18054b8d7: 7c c7 jl 0x18054b8a0
18054b8d9: 4c 8b bc 24 a0 00 00 mov 0xa0(%rsp),%r15
18054b8e0: 00
18054b8e1: 48 8b 8f f8 00 00 00 mov 0xf8(%rdi),%rcx
18054b8e8: 45 33 c0 xor %r8d,%r8d
18054b8eb: 8b d3 mov %ebx,%edx
18054b8ed: 48 8b 01 mov (%rcx),%rax
18054b8f0: ff 50 20 call *0x20(%rax)
18054b8f3: 33 f6 xor %esi,%esi
18054b8f5: 2b eb sub %ebx,%ebp
18054b8f7: 44 03 e3 add %ebx,%r12d
18054b8fa: 85 ed test %ebp,%ebp
18054b8fc: 0f .byte 0xf
18054b8fd: 8f (bad)
18054b8fe: 9e sahf
18054b8ff: fe .byte 0xfe