From 31fd9d2ea9b7fb01a952eef38a2af31eceebbe86 Mon Sep 17 00:00:00 2001 From: Valentin Popov Date: Tue, 20 Oct 2026 04:11:35 +0400 Subject: fix(runtime): execute the first supported Init event --- .../tests/handler19_init_native_oracle.cs | 284 +++++++++++++++++++++ 1 file changed, 284 insertions(+) create mode 100644 crates/fparkan-runtime/tests/handler19_init_native_oracle.cs (limited to 'crates/fparkan-runtime/tests/handler19_init_native_oracle.cs') diff --git a/crates/fparkan-runtime/tests/handler19_init_native_oracle.cs b/crates/fparkan-runtime/tests/handler19_init_native_oracle.cs new file mode 100644 index 0000000..5dc319a --- /dev/null +++ b/crates/fparkan-runtime/tests/handler19_init_native_oracle.cs @@ -0,0 +1,284 @@ +using System; +using System.Collections.Generic; +using System.IO; +using System.Runtime.InteropServices; +using System.Security.Cryptography; +using System.Text; + +internal static class Handler19DispatchOracle { + private const uint LoadWithAlteredSearchPath = 0x00000008; + private const string ExpectedAiSha256 = "c19cd6cd31cd2896f8c4ba0f0e700dd3408aec8182daaf4863d98a7d233a2abc"; + private const string ExpectedScriptSha256 = "db1c6fde57aff43181619f19e19e1cacf7301ebb859e8cb883db6b4b7181eced"; + private const int EventLookupRva = 0x11f40; + private const int EventDispatchRva = 0x11f10; + private const int Handler19Rva = 0x0aa38; + private const int EventStride = 0x14; + private const int InstructionStride = 0x20; + private const int VarSetStride = 0x30; + + [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)] + private static extern IntPtr LoadLibraryEx(string fileName, IntPtr file, uint flags); + [DllImport("kernel32.dll", SetLastError = true)] private static extern bool FreeLibrary(IntPtr module); + + [UnmanagedFunctionPointer(CallingConvention.ThisCall)] private delegate int FindEvent(IntPtr vm, IntPtr name); + [UnmanagedFunctionPointer(CallingConvention.ThisCall)] private delegate uint DispatchEvent(IntPtr vm, int eventIndex); + [UnmanagedFunctionPointer(CallingConvention.ThisCall)] private delegate uint ReadVariable(IntPtr record); + [UnmanagedFunctionPointer(CallingConvention.ThisCall)] private delegate void SetDwordPosition(IntPtr record, uint x, uint y); + + private sealed class Instruction { + public readonly uint[] Words; + public readonly uint[] References; + public Instruction(uint[] words, uint[] references) { Words = words; References = references; } + } + private sealed class Event { + public readonly byte[] Name; + public readonly uint EventWord; + public readonly Instruction[] Instructions; + public Event(byte[] name, uint eventWord, Instruction[] instructions) { Name = name; EventWord = eventWord; Instructions = instructions; } + } + private sealed class Package { + public readonly uint HandlerCount; + public readonly Event[] Events; + public Package(uint handlerCount, Event[] events) { HandlerCount = handlerCount; Events = events; } + } + private sealed class Instance : IDisposable { + private readonly List allocations = new List(); + public IntPtr Ai; + public IntPtr EventTable; + public IntPtr HandlerTable; + public IntPtr VarRecords; + public IntPtr Cells; + public void Dispose() { for (int i = allocations.Count - 1; i >= 0; --i) Marshal.FreeHGlobal(allocations[i]); } + public IntPtr Allocate(int length) { + IntPtr p = Marshal.AllocHGlobal(length); + if (p == IntPtr.Zero) throw new OutOfMemoryException(); + Zero(p, length); allocations.Add(p); return p; + } + } + + private static int Main() { + if (IntPtr.Size != 4) { Console.Error.WriteLine("Build with /platform:x86."); return 2; } + string aiPath = Environment.GetEnvironmentVariable("FPARKAN_ORIGINAL_AI_DLL"); + string scriptPath = Environment.GetEnvironmentVariable("FPARKAN_ORIGINAL_DEFAULT_SCR"); + if (String.IsNullOrEmpty(aiPath) || !File.Exists(aiPath) || String.IsNullOrEmpty(scriptPath) || !File.Exists(scriptPath)) { + Console.Error.WriteLine("Set FPARKAN_ORIGINAL_AI_DLL and FPARKAN_ORIGINAL_DEFAULT_SCR to the installed GOG files."); return 3; + } + if (Hash(aiPath) != ExpectedAiSha256) { Console.Error.WriteLine("Unexpected ai.dll SHA-256: " + Hash(aiPath)); return 4; } + if (Hash(scriptPath) != ExpectedScriptSha256) { Console.Error.WriteLine("Unexpected default.scr SHA-256: " + Hash(scriptPath)); return 5; } + Package package = ReadPackage(scriptPath); + if (package.HandlerCount != 73 || package.Events.Length != 9) throw new InvalidDataException("Unexpected default.scr header."); + if (package.Events[0].Name.Length != 5 || Encoding.ASCII.GetString(package.Events[0].Name) != "Init\0" || package.Events[0].Instructions.Length != 1) + throw new InvalidDataException("Expected a single-instruction Init event at index 0."); + Instruction init = package.Events[0].Instructions[0]; + if (init.Words[0] != 19 || init.Words[1] != 0xffffffff || init.Words[2] != 0xffffffff || init.References.Length != 3 || init.References[0] != 224 || init.References[1] != 225 || init.References[2] != 226) + throw new InvalidDataException("Init instruction no longer matches the recovered Handler(19) shape."); + + IntPtr module = LoadLibraryEx(aiPath, IntPtr.Zero, LoadWithAlteredSearchPath); + if (module == IntPtr.Zero) { Console.Error.WriteLine("LoadLibraryEx(ai.dll) failed: " + Marshal.GetLastWin32Error()); return 6; } + try { + FindEvent find = (FindEvent)Marshal.GetDelegateForFunctionPointer(IntPtr.Add(module, EventLookupRva), typeof(FindEvent)); + DispatchEvent dispatch = (DispatchEvent)Marshal.GetDelegateForFunctionPointer(IntPtr.Add(module, EventDispatchRva), typeof(DispatchEvent)); + ReadVariable readVariable = (ReadVariable)Marshal.GetDelegateForFunctionPointer(IntPtr.Add(module, 0x13570), typeof(ReadVariable)); + SetDwordPosition setDwordPosition = (SetDwordPosition)Marshal.GetDelegateForFunctionPointer(IntPtr.Add(module, 0x5c70), typeof(SetDwordPosition)); + VerifyEventLookupVectors(package, find, dispatch, module); + RunInstance(package, find, dispatch, readVariable, module, 500.2857f, 752.0f, 0, 500, 752); + RunInstance(package, find, dispatch, readVariable, module, 728.0f, 449.0f, 1, 728, 449); + RunDwordToHandlerRoundTrip(package, find, dispatch, readVariable, setDwordPosition, module); + Console.WriteLine("original ai.dll dispatcher passed for default.scr Init instances and DWORD-to-handler round-trip; code bytes were not modified"); + return 0; + } + finally { FreeLibrary(module); } + } + + private static void VerifyEventLookupVectors(Package package, FindEvent find, DispatchEvent dispatch, IntPtr module) { + var duplicateEvents = new Event[package.Events.Length + 1]; + Array.Copy(package.Events, duplicateEvents, package.Events.Length); + duplicateEvents[duplicateEvents.Length - 1] = new Event( + Encoding.ASCII.GetBytes("Init\0"), 0xabcdef01, + new Instruction[] { new Instruction(new uint[] { 19, 0xffffffff, 0xffffffff, 0, 0, 3, 0 }, new uint[] { 224, 225, 226 }) }); + var duplicatePackage = new Package(package.HandlerCount, duplicateEvents); + using (Instance instance = BuildInstance(duplicatePackage, 500.2857f, 752.0f, 0, IntPtr.Add(module, Handler19Rva))) { + Expect(LookupEvent(find, IntPtr.Add(instance.Ai, 8), "Init") == 0, "native lookup chooses first exact duplicate event"); + } + + var embeddedNulEvents = (Event[])package.Events.Clone(); + for (int i = 0; i < embeddedNulEvents.Length; i++) { + if (Encoding.ASCII.GetString(embeddedNulEvents[i].Name) == "Init\0") { + embeddedNulEvents[i] = new Event(Encoding.ASCII.GetBytes("Init\0suffix\0"), embeddedNulEvents[i].EventWord, embeddedNulEvents[i].Instructions); + break; + } + } + var embeddedNulPackage = new Package(package.HandlerCount, embeddedNulEvents); + using (Instance instance = BuildInstance(embeddedNulPackage, 500.2857f, 752.0f, 0, IntPtr.Add(module, Handler19Rva))) { + Expect(LookupEvent(find, IntPtr.Add(instance.Ai, 8), "Init") == 0, "native lookup stops at an embedded NUL and ignores trailing name bytes"); + } + + var missingEvents = (Event[])package.Events.Clone(); + for (int i = 0; i < missingEvents.Length; i++) { + if (Encoding.ASCII.GetString(missingEvents[i].Name) == "Init\0") { + missingEvents[i] = new Event(Encoding.ASCII.GetBytes("NoInit\0"), missingEvents[i].EventWord, missingEvents[i].Instructions); + } + } + var missingPackage = new Package(package.HandlerCount, missingEvents); + using (Instance instance = BuildInstance(missingPackage, 500.2857f, 752.0f, 0, IntPtr.Add(module, Handler19Rva))) { + IntPtr vm = IntPtr.Add(instance.Ai, 8); + int eventIndex = LookupEvent(find, vm, "Init"); + Expect(eventIndex == -1, "native lookup reports missing exact event"); + Expect((dispatch(vm, eventIndex) & 0xff) == 0, "dispatching missing event performs no callback"); + Expect(Marshal.ReadInt32(instance.Cells, 0) == 0 && Marshal.ReadInt32(instance.Cells, 4) == 0 && Marshal.ReadInt32(instance.Cells, 8) == 0, + "missing event makes no varset writes"); + } + Console.WriteLine("original event lookup: first duplicate wins; Init\\0suffix also matches; missing Init returns -1 without writes"); + } + + private static int LookupEvent(FindEvent find, IntPtr vm, string nameText) { + byte[] nameBytes = Encoding.ASCII.GetBytes(nameText + "\0"); + IntPtr name = Marshal.AllocHGlobal(nameBytes.Length); + try { + Marshal.Copy(nameBytes, 0, name, nameBytes.Length); + return find(vm, name); + } + finally { Marshal.FreeHGlobal(name); } + } + + private static void RunDwordToHandlerRoundTrip(Package package, FindEvent find, DispatchEvent dispatch, ReadVariable readVariable, SetDwordPosition setDwordPosition, IntPtr module) { + IntPtr position = Marshal.AllocHGlobal(12); + try { + Zero(position, 12); + setDwordPosition(position, UInt32.MaxValue, 10001); + float x = BitConverter.ToSingle(BitConverter.GetBytes(ReadWord(position, 1)), 0); + float y = BitConverter.ToSingle(BitConverter.GetBytes(ReadWord(position, 2)), 0); + Expect(x == 4294967296.0f && y == 10001.0f, "FUN_10005c70 converts DWORD coordinates to the expected single-precision fields"); + Console.WriteLine("FUN_10005c70 input=({0:X8}, {1}) fields=({2:R}, {3:R})", UInt32.MaxValue, 10001, x, y); + RunInstance(package, find, dispatch, readVariable, module, x, y, 2, 0, 10001); + } + finally { Marshal.FreeHGlobal(position); } + } + + private static void RunInstance(Package package, FindEvent find, DispatchEvent dispatch, ReadVariable readVariable, IntPtr module, float x, float y, uint clanId, uint expectedX, uint expectedY) { + using (Instance instance = BuildInstance(package, x, y, clanId, IntPtr.Add(module, Handler19Rva))) { + IntPtr vm = IntPtr.Add(instance.Ai, 8); + IntPtr name = Marshal.AllocHGlobal(5); + try { + Marshal.Copy(Encoding.ASCII.GetBytes("Init\0"), 0, name, 5); + int eventIndex = find(vm, name); + Expect(eventIndex == 0, "original name lookup returns Init index 0"); + uint result = dispatch(vm, eventIndex); + uint first = ReadWord(instance.Cells, 0); + uint second = ReadWord(instance.Cells, 1); + uint third = ReadWord(instance.Cells, 2); + uint getterX = readVariable(IntPtr.Add(instance.VarRecords, 224 * VarSetStride)); + uint getterY = readVariable(IntPtr.Add(instance.VarRecords, 225 * VarSetStride)); + uint getterClan = readVariable(IntPtr.Add(instance.VarRecords, 226 * VarSetStride)); + Console.WriteLine("probe clan={0}: cell_words=({1:X8}, {2:X8}, {3:X8}), native_getter=({4:X8}, {5:X8}, {6:X8})", clanId, first, second, third, getterX, getterY, getterClan); + Expect((result & 0xff) == 1, "dispatcher reports completion"); + Expect(Marshal.ReadInt32(vm, 0x40) == 0, "current event field +0x48 is Init index"); + Expect(Marshal.ReadInt32(vm, 0x44) == 1, "current instruction field +0x4c advanced once"); + Expect(Marshal.ReadInt32(vm, 0x6c) == 0, "condition stack depth reset to zero"); + Expect(Marshal.ReadInt32(instance.Ai, 0x50) == 0, "handler result slot +0x50 cleared"); + Expect(first == expectedX && second == expectedY && third == clanId, "Handler(19) writes the three referenced DWORD cells in order"); + Expect(getterX == first && getterY == second && getterClan == third, "native DWORD getter reads the values written by Handler(19)"); + Console.WriteLine("clan={0}: Init={1}, instruction={2}, result={3}, stack={4}, result_slot={5}, cell_words=({6:X8}, {7:X8}, {8:X8}), typed_getters=({9:X8}, {10:X8}, {11:X8})", + clanId, eventIndex, Marshal.ReadInt32(vm, 0x44), result, Marshal.ReadInt32(vm, 0x6c), Marshal.ReadInt32(instance.Ai, 0x50), first, second, third, getterX, getterY, getterClan); + } + finally { Marshal.FreeHGlobal(name); } + } + } + + private static Instance BuildInstance(Package package, float x, float y, uint clanId, IntPtr handler19) { + var instance = new Instance(); + try { + instance.Ai = instance.Allocate(0x8b0); + instance.EventTable = instance.Allocate(package.Events.Length * EventStride); + instance.HandlerTable = instance.Allocate((int)package.HandlerCount * 4); + instance.VarRecords = instance.Allocate(227 * VarSetStride); + instance.Cells = instance.Allocate(3 * 4); + IntPtr vm = IntPtr.Add(instance.Ai, 8); + Marshal.WriteInt32(vm, 0, package.Events.Length); + Marshal.WriteInt32(vm, 4, instance.EventTable.ToInt32()); + Marshal.WriteInt32(vm, 8, (int)package.HandlerCount); + Marshal.WriteInt32(vm, 0x0c, instance.HandlerTable.ToInt32()); + Marshal.WriteInt32(vm, 0x3c, instance.Ai.ToInt32()); + Marshal.WriteInt32(instance.HandlerTable, 19 * 4, handler19.ToInt32()); + for (int eventIndex = 0; eventIndex < package.Events.Length; eventIndex++) { + Event sourceEvent = package.Events[eventIndex]; + IntPtr name = instance.Allocate(sourceEvent.Name.Length); + Marshal.Copy(sourceEvent.Name, 0, name, sourceEvent.Name.Length); + IntPtr records = sourceEvent.Instructions.Length == 0 ? IntPtr.Zero : instance.Allocate(sourceEvent.Instructions.Length * InstructionStride); + int eventOffset = eventIndex * EventStride; + Marshal.WriteInt32(instance.EventTable, eventOffset, name.ToInt32()); + Marshal.WriteInt32(instance.EventTable, eventOffset + 4, sourceEvent.Name.Length - 1); + Marshal.WriteInt32(instance.EventTable, eventOffset + 8, unchecked((int)sourceEvent.EventWord)); + Marshal.WriteInt32(instance.EventTable, eventOffset + 0x0c, sourceEvent.Instructions.Length); + Marshal.WriteInt32(instance.EventTable, eventOffset + 0x10, records.ToInt32()); + for (int instructionIndex = 0; instructionIndex < sourceEvent.Instructions.Length; instructionIndex++) { + Instruction sourceInstruction = sourceEvent.Instructions[instructionIndex]; + IntPtr refs = sourceInstruction.References.Length == 0 ? IntPtr.Zero : instance.Allocate(sourceInstruction.References.Length * 4); + for (int referenceIndex = 0; referenceIndex < sourceInstruction.References.Length; referenceIndex++) + Marshal.WriteInt32(refs, referenceIndex * 4, unchecked((int)sourceInstruction.References[referenceIndex])); + IntPtr instruction = IntPtr.Add(records, instructionIndex * InstructionStride); + for (int word = 0; word < 5; word++) Marshal.WriteInt32(instruction, word * 4, unchecked((int)sourceInstruction.Words[word])); + Marshal.WriteInt32(instruction, 0x14, refs.ToInt32()); + Marshal.WriteInt32(instruction, 0x18, sourceInstruction.References.Length); + Marshal.WriteInt32(instruction, 0x1c, unchecked((int)sourceInstruction.Words[6])); + } + } + Marshal.WriteInt32(instance.Ai, 0x7c, unchecked((int)clanId)); + Marshal.WriteInt32(instance.Ai, 0x80, BitConverter.ToInt32(BitConverter.GetBytes(x), 0)); + Marshal.WriteInt32(instance.Ai, 0x84, BitConverter.ToInt32(BitConverter.GetBytes(y), 0)); + // AI+0x18 is the original varset vector object: +4=count and +0xc=record array. + Marshal.WriteInt32(instance.Ai, 0x1c, 227); + Marshal.WriteInt32(instance.Ai, 0x24, instance.VarRecords.ToInt32()); + uint[] targets = { 224, 225, 226 }; + for (int i = 0; i < targets.Length; i++) { + IntPtr record = IntPtr.Add(instance.VarRecords, checked((int)targets[i] * VarSetStride)); + IntPtr cell = IntPtr.Add(instance.Cells, i * 4); + Marshal.WriteInt32(record, 8, 5); // original parser's DWORD type tag + Marshal.WriteInt32(record, 0x20, cell.ToInt32()); + } + return instance; + } + catch { instance.Dispose(); throw; } + } + + private static Package ReadPackage(string path) { + using (BinaryReader reader = new BinaryReader(File.OpenRead(path), Encoding.ASCII)) { + uint handlerCount = reader.ReadUInt32(); + uint eventCount = reader.ReadUInt32(); + if (eventCount > 4096 || handlerCount > 4096) throw new InvalidDataException("Unreasonable package header."); + var events = new Event[eventCount]; + for (int e = 0; e < events.Length; e++) { + uint nameLength = reader.ReadUInt32(); + if (nameLength > 1024) throw new InvalidDataException("Unreasonable event name length."); + byte[] name = reader.ReadBytes(checked((int)nameLength + 1)); + if (name.Length != nameLength + 1 || name[name.Length - 1] != 0) throw new InvalidDataException("Bad event name."); + uint eventWord = reader.ReadUInt32(); + uint instructionCount = reader.ReadUInt32(); + if (instructionCount > 65536) throw new InvalidDataException("Unreasonable event instruction count."); + var instructions = new Instruction[instructionCount]; + for (int i = 0; i < instructions.Length; i++) { + uint[] words = new uint[6]; + for (int w = 0; w < words.Length; w++) words[w] = reader.ReadUInt32(); + if (words[5] > 4096) throw new InvalidDataException("Unreasonable reference count."); + uint[] refs = new uint[words[5]]; + for (int r = 0; r < refs.Length; r++) refs[r] = reader.ReadUInt32(); + uint trailing = reader.ReadUInt32(); + instructions[i] = new Instruction(new uint[] { words[0], words[1], words[2], words[3], words[4], words[5], trailing }, refs); + } + events[e] = new Event(name, eventWord, instructions); + } + if (reader.BaseStream.Position != reader.BaseStream.Length) throw new InvalidDataException("Trailing bytes in default.scr."); + return new Package(handlerCount, events); + } + } + + private static uint ReadWord(IntPtr cells, int index) { return unchecked((uint)Marshal.ReadInt32(cells, index * 4)); } + private static string Hash(string path) { + using (SHA256 sha = SHA256.Create()) using (FileStream input = File.OpenRead(path)) { + byte[] digest = sha.ComputeHash(input); var hex = new StringBuilder(); + foreach (byte value in digest) hex.Append(value.ToString("x2")); return hex.ToString(); + } + } + private static void Expect(bool value, string message) { if (!value) throw new InvalidOperationException("original dispatcher oracle failed: " + message); } + private static void Zero(IntPtr buffer, int length) { for (int offset = 0; offset < length; offset++) Marshal.WriteByte(buffer, offset, 0); } +} -- cgit v1.2.3