Module decoding 

Bounded Thumb argument tracing for receiver AES calls.

A nearby MOV #16 is not argument evidence. Trace each supported instruction from supplied incoming register facts to the actual call. Conditional branches, stores, unknown instructions and overflow stop analysis. Handler ownership and incoming facts remain separate obligations of the control-flow analyzer.

Structs

Call

Proven arguments at a direct Thumb BL call.

Enums

Value

Values sufficient to distinguish staging addresses from scratch outputs.

Functions

branch_link

Decode the legacy Thumb BL used by the audited MT19xx receivers. BLX and malformed/truncated instructions deliberately do not match.

trace_call

Trace an argument block and direct trampolines, at most 32 instructions. load supplies established values for nonliteral memory reads. It must not infer staging pointers from model strings or the target firmware identity.