"""The edge payloads carry the plane's constant as FIXED-POINT screen coordinates, not floats (0x0000ec00 = 60416 = 236.0*256, a screen-x). Dump the edge SEND payloads reading each word as float AND as fixed-point (/256, /65536), and flag values that fall in the object's screen range x[126,255] y[0,93] — those are the C / vertex terms.""" import sys, time, struct, pickle sys.path.insert(0, r'C:\VWE\TeslaRel410\emulator\firmware-decomp') import emu860, dis860, emu_main emu860.Mem.log = lambda self, *a, **k: None S = r'C:\Users\cyd\AppData\Local\Temp\claude\c--VWE-TeslaRel410\4e848c76-6e89-4034-8047-d8d491cb32d8\scratchpad' snap = pickle.load(open(S + r'\snapv2.pkl', 'rb')) r = emu_main.MainRunner(r'C:\VWE\TeslaRel410\dpl3-revive\patha\cap7.raw.bin', fw='capfw7', max_cmds=6000) cpu = r.cpu cpu.mem.pages = {k: bytearray(v) for k, v in snap['pages'].items()} cpu.ctrl.clear(); cpu.ctrl.update(snap['ctrl']) cpu.r = list(snap['r']); cpu.f = list(snap['f']); cpu.cr = dict(snap['cr']); cpu.pc = snap['pc'] cpu._apipe = list(snap['apipe']); cpu._mpipe = list(snap['mpipe']); cpu._fp_pipes() cpu._lpipe = list(snap['lpipe']); cpu._gpipe = list(snap['gpipe']) cpu._kr, cpu._ki, cpu._t = snap['kr'], snap['ki'], snap['t'] cpu.lcc = snap['lcc']; r.qi = snap['qi']; r.heap = list(snap['heap']) t0 = time.time(); startq = r.qi while time.time() - t0 < 60: if r.qi >= startq + 2: break h = r.hooks.get(cpu.pc) if h: if h(cpu) == 'done': break continue if not cpu.step(): break def rw(a): return cpu.mem.r32(a & 0xffffffff) def asf(w): return struct.unpack('> 23) & 0xff if 1e-4 < abs(f) < 1e6 and 1 < e < 254: out.append("f=%.5g" % f) for div, tag in [(256.0, '/256'), (65536.0, '/65536')]: v = w / div if 0 < v < 900: # plausible screen coord out.append("%s=%.2f" % (tag, v)) lo = w & 0xffff; hi = (w >> 16) & 0xffff for name, val in [('lo', lo), ('hi', hi)]: if 100 < val < 60000: vv = val / 256.0 if 0 < vv < 600: out.append("%s/256=%.1f" % (name, vv)) return " ".join(out) for base, n, tag in [(0x08015000, 4, 'SEND(4) edge'), (0x08015260, 0x21, 'SEND(0x21)'), (0x08015380, 0x29, 'SEND(0x29)')]: print("\n===== %s @ %#010x =====" % (tag, base)) for i in range(n): w = rw(base + i * 4) print(" +%03x %08x %s" % (i * 4, w, flags(w)))