_gpu_dxg_r4b_recon.nx source

1// _gpu_dxg_r4b_recon.nx -- SOVEREIGN-GPU ladder R4b RECON (read the REAL VRAM budget of the 5080). 2// 3// LX_DXQUERYVIDEOMEMORYINFO (nr=0x0a in the dxgkrnl table -- consistent with every confirmed code: 4// open=0x01, device=0x02, ctxvirtual=0x04, queryadapterinfo=0x09, enum=0x14) returns the adapter's REAL 5// video-memory budget/usage -- an UNFAKEABLE number (~tens of GB) proving we read the actual GPU state, 6// far beyond opaque handle allocation. Best-guess struct: 7// d3dkmt_queryvideomemoryinfo: process @0 (u64, 0=current); adapter @8 (d3dkmthandle, in); 8// memory_segment_group @12 (u32, 0=LOCAL/VRAM); budget @16 (u64, out); current_usage @24 (out); 9// current_reservation @32 (out); available_for_reservation @40 (out); physical_adapter_index @48 (in). ~56B 10// No uapi header -> discover live: sweep sizes for nr=0x0a, adapter at offset 8, and on ret==0 DUMP all 11// u64 slots so the budget (a large value) is located. raw syscalls only. No log writes. license_tier: ORIGINAL 12import "nx_syscalls.nx" 13 14const ENUM2_CODE: i64 = 0xC0104714 15const QAI_CODE: i64 = 0xC0184709 16 17func p(s: *u8) -> i64 { var nn: i64=0; while s[nn]!=(0 as u8){nn=nn+1} sys_write(1,s,nn); return 0 } 18func n(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 19func x(v: i64) -> i64 { p("0x" as *u8); let bb:*u8=sys_mmap(20); var k:i64=0; var m:i64=v; if m==0{bb[0]=48;k=1}; while m>0{ let d:i64=m&15; if d<10{bb[k]=(48+d) as u8}else{bb[k]=(87+d) as u8}; m=(m>>4); k=k+1 } var i:i64=0; let o:*u8=sys_mmap(20); while i<k{o[i]=bb[k-1-i];i=i+1} sys_write(1,o,k); return 0 } 20func iowr(nr: i64, size: i64) -> i64 { return (3 << 30) | ((size & 0x3fff) << 16) | (0x47 << 8) | (nr & 0xff) } 21func rd32(buf: *u8, off: i64) -> i64 { return (buf[off] as i64)|((buf[off+1] as i64)<<8)|((buf[off+2] as i64)<<16)|((buf[off+3] as i64)<<24) } 22func rd64(buf: *u8, off: i64) -> i64 { let q: *i64 = (buf as i64 + off) as *i64; return q[0] } 23 24func query_type(fd: i64, handle: i64, qtype: i64, psize: i64, outv: *i64) -> i64 { 25 let priv: *u8 = sys_mmap(64); var zz: i64 = 0; while zz < 64 { priv[zz] = 0 as u8; zz = zz + 1 } 26 let req: *u8 = sys_mmap(64); var y: i64 = 0; while y < 64 { req[y] = 0 as u8; y = y + 1 } 27 let h: *i64 = (req as i64 + 0) as *i64; h[0] = (handle & 0xffffffff) | ((qtype & 0xffffffff) << 32) 28 let pd: *i64 = (req as i64 + 8) as *i64; pd[0] = priv as i64 29 let pds: *i64 = (req as i64 + 16) as *i64; pds[0] = psize & 0xffffffff 30 let ret: i64 = sys_ioctl(fd, QAI_CODE, req as i64); outv[0] = rd32(priv, 0); return ret 31} 32 33func main() -> i64 { 34 p("=== R4b RECON: LX_DXQUERYVIDEOMEMORYINFO -> read the real 5080 VRAM budget (raw /dev/dxg) ===\n" as *u8) 35 let fd: i64 = sys_openat_rd("/dev/dxg" as *u8) 36 if fd < 0 { p("open(/dev/dxg) failed\n" as *u8); sys_exit(1); return 1 } 37 let ainfo: *u8 = sys_mmap(4096); var z: i64 = 0; while z < 4096 { ainfo[z] = 0 as u8; z = z + 1 } 38 let ereq: *u8 = sys_mmap(64); ereq[0] = 8 as u8; let r8: *i64 = (ereq as i64 + 8) as *i64; r8[0] = ainfo as i64 39 sys_ioctl(fd, ENUM2_CODE, ereq as i64) 40 let nc: i64 = rd32(ereq, 0) 41 let v: *i64 = sys_mmap(16); var disc_eh: i64 = 0 42 var ai: i64 = 0 43 while ai < nc { 44 let base: i64 = ai * 20; let eh: i64 = rd32(ainfo, base) 45 let qret: i64 = query_type(fd, eh, 15, 4, v); let t: i64 = v[0] 46 if qret == 0 { if ((t>>4)&1) == 1 { if ((t>>2)&1) == 0 { disc_eh = eh } } } 47 ai = ai + 1 48 } 49 p(" discrete enum_handle=" as *u8); x(disc_eh); p("\n" as *u8) 50 51 // sweep sizes for nr=0x0a; adapter @8, process @0 = 0, segment @12 = 0 (LOCAL). 52 let sizes: *i64 = sys_mmap(256) 53 sizes[0]=40; sizes[1]=48; sizes[2]=52; sizes[3]=56; sizes[4]=64; sizes[5]=72; sizes[6]=0 54 var si: i64 = 0 55 while sizes[si] != 0 { 56 let sz: i64 = sizes[si] 57 let buf: *u8 = sys_mmap(512); var bz: i64 = 0; while bz < 512 { buf[bz] = 0 as u8; bz = bz + 1 } 58 let a8: *i64 = (buf as i64 + 8) as *i64; a8[0] = disc_eh & 0xffffffff // adapter @8 (in); process @0 = 0 59 let code: i64 = iowr(0x0a, sz) 60 let ret: i64 = sys_ioctl(fd, code, buf as i64) 61 p(" size=" as *u8); n(sz); p(" code=" as *u8); x(code); p(" ret=" as *u8); n(ret) 62 if ret == 0 { 63 p(" DUMP u64[@0,8,16,24,32,40,48]= " as *u8) 64 x(rd64(buf,0)); p(" " as *u8); x(rd64(buf,8)); p(" " as *u8); x(rd64(buf,16)); p(" " as *u8) 65 x(rd64(buf,24)); p(" " as *u8); x(rd64(buf,32)); p(" " as *u8); x(rd64(buf,40)); p(" " as *u8); x(rd64(buf,48)) 66 p("\n budget@16 (bytes)=" as *u8); n(rd64(buf,16)); p(" =~ MB " as *u8); n(rd64(buf,16)/1048576) 67 p(" | usage@24=" as *u8); n(rd64(buf,24)); p(" =~ MB " as *u8); n(rd64(buf,24)/1048576) 68 } 69 p("\n" as *u8) 70 si = si + 1 71 } 72 sys_close(fd) 73 p("=== R4b RECON DONE ===\n" as *u8) 74 return 0 75}