From c0f142300b4f043ce9f74744bd53818697856900 Mon Sep 17 00:00:00 2001
From: SDD <sdd@local>
Date: Sun, 18 Oct 2026 13:49:19 +0300
Subject: [PATCH] dwt/screenshot.py: network screenshot over rdebug peek (VRAM
 -> PNG), verified against the live OS

---
 dwt/evidence/shot-canvas.png | Bin 0 -> 8628 bytes
 dwt/evidence/shot-screen.png | Bin 0 -> 9656 bytes
 dwt/screenshot.py            | 216 +++++++++++++++++++++++++++++++++++
 3 files changed, 216 insertions(+)
 create mode 100644 dwt/evidence/shot-canvas.png
 create mode 100644 dwt/evidence/shot-screen.png
 create mode 100644 dwt/screenshot.py

diff --git a/dwt/evidence/shot-canvas.png b/dwt/evidence/shot-canvas.png
new file mode 100644
index 0000000000000000000000000000000000000000..20b2312fdf8a6680ac7ef5dd9503073efed91b73
GIT binary patch
literal 8628
zcmc&(2Ut_tw%#W(Mu`GSbqGalC<E9DNXaOOVnd}$2{RTf2mz!B297#2Vg=M8cF?iR
z&_paq3lR|zR8W*q5)wf`2_Y1dP*UDL;GH*j=DxY#yYIX2@_pp&lbv1GTK`(>Uwa>S
z+vqY??JG3^z|^&CoVEZk0X8RqN$?YFi#k99U}oG}r*GV2nnk?RQ8%h}o!={zR{qi4
z`pw-zM}N66Ns?{fX~R3ds3LXF`diaynx4D;nB+9q5*^?t6wWrDo-(+D@2R*?bgSUu
zWa(7}B$K8LF9&yJX^E<(Q>9poBwk^G-UQ41>_T3S4qDYiaMOmLae#~_u0juJ2);3p
z7hf<jrELSpC)nkI;$XAz9D6jT43W#2zCq=+{M3_NQsD5Fm6|qdk)9TO;^WXp*_*`f
z`dbImWL75Ozv9fy4TcrycTHMmj}lTGtx!4YXgVLw_CkzwsYOJ=Fzv%WDah!OkF2V-
zMO_GP2`@4eP4CP{701B6yMO{xGIiKP3#jd&!C{_hkQoq9&@R}9^w=8I#R602*C@j{
zZ|;f2IZvFNki@D3`*5~xdKb57e}Dg=vo@M&2Buxigp*8*1Gmo4>$slimjSK~yGCD2
z#A&9Sq@Zb9Naki>x<rJOw@!2erh0Z060aH*;4}-`jHtg}Q;3kn7hRybgaEY?90zI|
z7_^VVsOCVQ)QJ&Y$NgR-v*UnljtcfpQBUX9dI8fx3i{rIJz{-Qn_v>YpXfGV4+tiU
z594!*CX0neRQFny!icI6s<;PD&)HyI_wf2EQ&VO%X!0r?bjtApMWt`9&I`9ErUR!Q
z#0;c-Qe)ppHyzYP6W8|ur*fk)so<u|ki<lLFb%eD0H^Qqnovfp1=TQ#XkscIYe6xm
zsZ-%RiCBwZVhZirh}TS^VTxI-M%~egs{^K6#Rx@v`b8cdT+oU}09evy33fT)=vIIX
zaVP+Q4xkPJU?X2%0E++e0s!&L3jpe0UH~?1>}71&_{*0$ewz@TNVf(<D^FA{D?^I!
z9WxE@)m9gDgikM6iO_*npGsX{cB^MoHK(UhEKhD9=8)NswbH?dOf?gJld(}Anf;9m
zqDEz9Li8$SY2O5>>`vIAoJY#2qh28V4Nd?84gkqU6qkHX7lp$O*|q+o+mIc4s$TV9
zL;d%jZ+qBMday(zXF%3_FG4cf3rDotstq0Vo<gAWm&9ZPC1Yo?^1^6=Pnhsd_pWTe
z_)3|p^;_w;o{D9c%vlLXr4>%GB`N$l{jb(p^>b@&<NJ@3Oj1xXd#1Wc24~BNOO?6C
z1r2Sg;!;PokZF+C7`BeN{{#Qt=6s&a$xeQInlJw&uS?vO(6GdaYu|{Uq%K%UOzuUd
zY&v|}wwSSFIHP0BDrBiwo&B9%X<`{Td#6!}lmtH$MMmZiDn+TjEISLnQQ*C8-ze%C
z43S8(`kjuVHrFrbHmgZt-^_dUIcS4&W@?LDN!7X5rY=iRIVh%}Qzuh`5s{@+r2Hp4
z535Q&U%i))js$zfh9W!ondazc(;B3shOp3YVN0A($)SX$MUg9xr9He!Yf!O2Jq$<(
z6g2t_?oq(Ro_zG>u{a+KG~0hzxu_s-tBTsXpBDP7%()>{;fgFBoxcgX?W*#l%DAe%
zP5XJ5%?Whex0j9j_(~fJI*ZKiG&r1LDDjS4xjqU#hWltV+@7j=Zy<{mJxa4crQU*D
zIQ^)$Xgz8IGgyRt$on=3IWNgBVomKbM_;{eFm40tVc@h+03UCrVST+{GqBcqyJ%0m
zbJ1Og-PWYQ#}ab`&shj<J{qIY6!gcxTSv$Zn?%2gquZ&%h;D6oLY>+(iC$gHow7rr
z@1y2?s_*N|Xsh0p%$hP(g)Gep3qs1bP21^W^;|?wXt+p1@iB_dIpU1QSRKKWnN;4)
z*LE(_yGBlm1C1>MOttjScg+qIX|%VlkBG>##+CFrpi<k>qMMB2>lUZ_sjLIW!jP^Z
z4Xvh{McD!Cb0liV0GS;`W?L065^d!#`c9Jkek)&kQRvUmiAc>Kwl_!eUrqb~UKJWq
z%PU#$S0jgdS{%Yk)C9MTt71W=El43{O)5vcwcN5MSN-kL6AfM|ne``e>Vm060W!PG
z3aATC^FT_y7;`D+xhjGhiWh+I@$5=6+ba^v|8$zV0J=u!Xk*lVrxs41+^eF-dhSSM
zQH5~I3Mv^8>q0!l`=?*#^wGm!%k4*9_~#E?SAP#tpj>}ndg{Jm=5vpE<?r?dHSBwn
zZC^j{&YL;H?#Q5r6}f?ZZs6tGM4_-do431k{$c!uO2jG8&)LVP-1O1Lw^h1)A+wfi
ziAvYMKWmxlwY+xkCbd9sFRSLl>d*%h1z>Ij;GGS>SJ3Ltnjvc$86;?~MQ+xF2kWq#
zzdQIe$u}xn-;B(D#wTh@P8jUR+j)TKsT?aE{gmE&U736A{KBILzp_qU_$i+IVYMu?
ze=>35vr+J4SJkc+2lK#L-pEzq@Vl1I&Py#xIblV>bqm;My@rC;tUyByMaNEh-}d#N
zO`05K-nE~xGt|_`!v1mi=_FG6aA4ucb$g&5SS>?N?Gyf#7rLw<F~p|3+ax=<SS?w#
z__B1}n`QTFj&gL~L@wGs6jswbkN}lVw?roq1%6<fIvXY}GAaR16tE9>!dojDuL;!&
zJ5a1qtU>*d|HVjv*f*~-z1J1?xPdZgK`lLY=O_24pVoQK>3|j(bOfQL>GAyU_IiHR
z2H$J+s3jMgV<$hB*+9E*AtYPe_AKmpHnMIqk&Rp_00RV<%%D4aQ`&mAV6!pjqwm^P
zQfq^^%;|6mN*Kb;@9-GqD{db>{qV*25GR%+Yb57u;ZL_Zy7TxD3?|q()4ys!OruqV
z_(h5B!(N7{Kd^ay-=0VxGCJY%)0JFs1W)-GjgNJIKCEWqN(Yq`R4iRFoJJdtEpS7e
z6hZ0&K%}d-ejSy2KI2KM*VM~Pn#I08gM@dk-tU+kPRZSa+UO2~=1Up{l^Ie?c5f)5
zZzwGmZ9+Z^xjXc7l-z`KJcHY~<eT7z!hqPv!Y7(NRh`2P$?o;GDWXbzK-}^dzj!tV
zOP4o?>PeLAij232ubUmt)S(99Y*0Lz>N#Qaay65H1!&9-kmvk><JmwP<%%kkNjg-;
zLN#@PH?hwA@b2^M+V@ZB<*LV^(7EqYWSIGeI`W=!hid80{i-Eo936;DHB1UE7UbEZ
zJI|d6FtBUIo4woHl$69B_4q8)p^9c?KY0c<Im##IW&+pG2E45Vw*Y94pkeRLx=)j4
zGBL;9K&&%Ucub}!Gfrw0tI<o>zs>xpVG#c?QYIXb(PnWLpdXX;4Qq{+4(OX@-rOkV
z_CW>^s+(*f=JvPo^7P)gszRPxiMrre1@5D<C7FGy3%8?4zIYE@TI(7~GmhqYexDAN
zVYHA){}h2ZoyF;op!i%P^o1W}e-f~x69OH=b#Vk7Kt|~>^<$`@0L=ZFhU_QLa^oX6
zc_mkGfw7F(fZuJMg}1)nSXgMtzY{>-(QZDXb!H@=;3(%dbo_vS`~a`tx-@}{PvDFy
zjrFLpIh&)L-_6H2mCZCr^DQl=0}f3qx5ppNoD#%+5Y+Wf{JPk9;%O#LYL~H$?RtOq
zdsk%kJY{)bg+T6iSQ=dJLI~7A@fUV)U@J)UY`>)yT2kwr!r_XSoYfH*uLIK}k58BI
zNhA|(0O5b0capxW@^z6VEB2ivDBrT)qL-Pib3uoCyr-u<>U7={<nyR4^t%fch}}cL
z*@e6nPUtm92XeuiSx0i9X$Kk4SspvqC7DCthZ>GXat7X>DMJX!wofXSW$92&tp|Aw
z0vmbJ1G?utF|uMy(!q^_#voGqO+vCbIV&Mk-hz$Iks&?aXyylD$TBPa2YLn#(`wXA
zidd&{X1s0fPX|myq1FcR&flnJ-89|`l^%h-u~tij_PR<E*e@zWyfvubV<wtJ41~;Y
zJed5^FP}TMjq<ndpARwQMyx9deKfl?Bwt?qFu~3z%EmlDR;-w3-71wEwfull9-2mA
z#K9{cYo|Axp?rq)ku{d$S2f_xo(|Z)D~NddoWVer>NVPds#H}svulmlWMQq|i8ZN9
zbYRekiML0GV4~ir(aXVSk^<un=h07`h0~si1_u#&^l&!rF)h8|O~)FuH@L*J*BVO0
zZ-+H`Z=+J+<|Hzh5Xw6D5&F1B)IECrLRLf()yKytcRdAEeipMd1e+0eofJKG?s85&
zp)Ru|JBUHRb~lSNfh<)N&0)EgH)MiPU8>@AGj0;Wq(;|xKLw@58dD|VwEVMCU!RPs
z?1hU&e@-h_TbOaY+c+-fhb_D2qc^8f(35GTKrN;S@__^her+^Z7hpQQIHEb`0~q2Z
z5bt9jUqBDkv3<ihtq$VIe+B<}BN3-Kr5hrS>+=JPhYPZ6NJRP`;=(H)5fJ{Pm!cs0
zUj;(+i<fPB71lh$9l`uVc?rGcK>GM-l2^jq_>vZffTccb4%qnb_U320r@c&_>}!F(
zZ*htq9N8#jE)rRfJjCTfV6T5LSI~UKcR1Ytx$`lrJ-V77t@wx9zg65_lmFr@KQC$>
z<2JwuHJQ3rPXJAvr)tae@=u5oE|!%te+o6&gSf9CthLFapz$;p_`7-v+8M0OS2JmA
z!kKB1OzcfRcK;mg$Y=KWJ{$6ZWg+{4df@hHIWga9q!%^*9{(IqZ7dKJtEW#t{QO70
zv4x`<YWCE&&Db10t4n3A%2Q?!gu;3bEodb!v@BcZV6|H6Yul_hrTL`fE)IH$KYulH
zKCD0Q^Fw787~#n8d(=VS75JfH_qE=GxpsQ&xbOZ1{_#wz4!uHvrBtjz$;Ri-zCZ^{
zu95=RE?jpc3~aqi{L;EV)-uO24k8cUgEKS@_Srx+K^!UFrm;vh%l4Y%p$*h^N9Lne
z7U;-u8lDo1y*A;8dU0z4T-v}HUoE=mV8hwKfoIUyi$&n;$-CC(MrczbCa@9mr~_Dc
z#AkYskd%HGuP$is!g)_$&w30+PD;bvci<%)1U>k+8LFJRXDr0twnsmlrjA2R0J4ZC
z94qt@5tE~H0Xkih1~WO<QaMJg%f?|Za~Ghy6nYSZ$<Ni&4`7?<22QVx)CG}5fsgY>
zmKXdc-@qhXiWNXs^HNAqg?%^hec&uf8*M-M8-mAq;5e|^$Rvm)`WVN+;yjk%;Xh=M
zf0gS07<PW+1y*tcmg*s&vy&fJgZX(aEWKJ^m(o5Lig!7A&PXV_$V(`F!{O!0JGlwW
zjgl0}iV;4ceH3zRN*X@qvkA9#(@+ksDx@}Am+CoLNQ<}ug?ZHp3o>Dgp}RuD@2W^@
z*!1A_p<#u}krq}ID0xmZNADKwd|JVE5AgyoMHx}ks`HXO6;B_iyrB$zN+ash%Uepe
zGVN<xjb18(m<_*Js$Qps!6HwYYQGii%NGWK8bU>aE*8|9kn;~;?%X+R+nLSL4F9i3
z@1<FycZ+r^&LlvckGSj(@fxfzZ;a%7LbwkbvIm6KO#c@>KcA+qH%{6ticg4Lktq|F
z3R9=LC|`%RZuju8f2Tto+0Lk31nJE#VzS+&8gFp)a`T~;dzV*gga#?DKbLXyJUE3O
zU`}EC#qL@Bp`KdA?-}y8cI6(V+!b+>sq*|-^0Ft=)rh>`A}$+LpM$1{M1z9vCIrs8
zyl#fWwhGSOS=GDmtf(|fbDUsy(M#3t+tB*5g;2*&@9;o3)=Mi%w7~_KLxGD+u*|YU
z3WHxL40-u5rwfs)x3DG|w>$<2h_x@l?$1z>KbuL-H+|Kblr-<!BXPFaQL9NpJ|x``
zP0EWz?$_>T^sp~`<She(zPSUc_m-J@J2J%W8r*y`+u4xa+;p=xp?HP=?ih!U4)H@r
zACwYAdun{sd{vF})Y4~1*WI5Yi=5ImLBW6m2GK!n$VWxjNab+MpqFRn3F%<v{ym>!
z3B2q$caYY&Xe|@8cz||>!xg8;;j8KL4R|`}3In1y;hS`+O`E~J@L@+wbf_AaSV>6c
zaTE;sRH(TtPmxny3ag;Zq|6P=f`0Z|xA)zhN70<E)wx3<OO4HldQ=vkYe?4E_v23z
z+FZIjl4WUsDZ3=uLamU?>Sguzwr|3ukr-0piPtaJf{g7{sVuiVi*|NoPs25Fr7u(Q
zVEFw=3L!ZQxu7)2vhYh4A#XdlU;hx>$EbmF@#=e4FM_lotCw+Tbv_fO|H}mWhtjf!
z>4BqUHa#s=n|i2|)d4KUK-!`_7B_Ll&2Oc^u>m<HoZ;Bjl#~!T@D8Uh9^^&^|3rk&
zOCE4QM>Lfp8FD_U2U)6nqowmluZF=SLq8zg2YO?T*)eJ27-Q<N5aV>P7I>`RcFA$Z
z7#JQmQ$QE4>cx0)+SNM7@h%oXP+$=FQ&{*TIL2#}-@O0-yFtHHxm($lUE?^q45Al{
ze#XOZ6#e3~p$oX7f@v$%*rf*W>qBc1vTTY!4N|+I=yn*AH|bEzht_is^++qDe&#9j
zI)xz#z0t<XQSL~jXWXQG7ly)r%mHE~o89B1j=Mfn#AmD}rQ6B#dbf+ZGI5DpsyjJn
z5-!M%Q=rBi+`({aOpAO0F*)>s$f!(rXJw>C3uA_w$!#lm@Iq#X5$G*X0(jfRMSU-O
zhlh4{Jn`5W2R1)iu9SM41bFGe&8LH}GFh@;i<&*e*3BigLocT}(?EYZ=w_0>I{E~n
z2A+8l`UIbByHAJmnfvX3&hMCJz%R62{Y#S57|Sj80k@`f+t>FiCPtSUd$F>DL+YNd
zOUUlaOq%V=p}sEO`vgJpL)n$wFiySxGyX`$n9Ae~gq!yCBn+~@)uF#Nlw9QdoMgT<
zYqYhi3Xvbd(_bBzzl>MB!VXe=;Fdpl<*Vk&ph7iP0D?(rp+a?KC&O{oN&JxSm)<)t
zunWKkTbxNq<u5Bp?0!3#=FCxh4LdB2ky5D#Z@`7c_+)ckwkQdUOfZpm;UMdMMSvwS
zOp3o1#8_JDOT|x03DqF>*$@Mhs4V6DH2lyNSRsd3U|cR4Yn4G!)FXfqExcmYIAI%)
zVgDW7exL5f%NjBcOM+%taRcRm>*Q_&8&{UJ{rX_cGGqER17lHFjf&X<#kpbeG98R}
zq4|#}W4&7)I~HJzUWmQpJ7%-DF1#@TZc9VPpSt3)r}y}5^&*_v*zX@AN1&dvhzrG&
zdsMvFy?*L~2kO+;*s9g9;cCl}d6r-*<PTc(?#e89Kte%3MNhzJkKKVE;O7_e^IHR+
zI8csa6aKzKjMp67Bc^b5>OUj|0kFdFicK;h(r@B5ZCcb3B0U{8zJ;Q=*npI+kS5bl
z!7sKWlxtm(Ape;g|BgaHe){-$d4mdLE;+@D(5G;g#bJ{%?TyKtOgcHR^JwYStp?2G
zvE)<RgK(7rsx)lhV@i(E83WH2HTLM(o^$q63~M9cBxAiVilNQmlz(5Lw!);rqI~{1
z_0~PvrS_}7GohL2-{WIOL^Cy5fx~ZmNvSo(Yn>_ReH(Q2SVsQI^PSn-9ceQZkD5zL
zXNU0Hy3Q(e=5h32`nu~tI#k*Vx<wD09E7FPP;>F}k6X@KUzWB=SH7Kd1Ij;yBjy&`
zyL_rOFR<_DFk^0mvm$?(Kl{AIcyB3>bFEHDt3T8dmejp;aPgrMoTj?qYcYP!MzV;M
zUO>Mui?>RCG9QB-i;uhw5XUE$9;je!KO-kq4@o@mPW!Y*AeiAYXJp8OySM}0p)oop
zwxf=R7;7!-LgkBC6K9qo6g^0L|8T?vvHo{%^GA}m#t^Og^b{$62v6Pz;1U6r^HR(q
zlm!HEk%OmPgNpqZ&idKY&^SZ@;NQP^D*%lQ{^FWpDOv>k|5x`6|71oe=I<u_zh7(o
zkIM=EEw?CtTkap<vHY!feC>bn(uRwN#st_@|Bgj;;MD&ftU$}6RpqrumnWngG^gSd
zU+};JYI#)Ps9uXBabZU%ZAUj9oU=wZVBvg8=?qsG58od*cN>f6e_s*(?&J#=G`_}9
zRQe7>JwFv6G#H}@Ly`@p7U<}v&o63qGMRh^@hS_DH6j4V3|*BbkEZdO#!}$Mp*lrA
zPeRB&6xd{#n3iObP^wZrLgb@yiccMvZYb7|mYx%@34>|gnG`tt$D~MFy?sZtadv6?
z4lnGykjxhES0zco@|yJ6GAo|ca0BwzOZ(PRTJ%Mj`d%PcKBtTdGy{JIu3W3u%jMm^
zZ&wU&!0+H=(G;GGEJZI9+){ME@p0gWJUa~!c=X=VymG=PVG&esKH9JK{9Z!o9=>Di
z8pU-`ao2YQODhx<-q=dn4vV)lz2(y6^kyCJsLAoYcNZ7W%`GluV|3zGMqg?WmhdEg
z;Eo*@+p&X_v1*o#Wp6V2lJ-3w-ZGL=HO<S8!K&{@yFjq=25uZtU!u%k`~Ba0=@%gW
z5tZmHAjAFXmng{)Svo&|OXKD5PT7balTK|075aq0|I`CV*VF$QoLZ#D{!cyrbFzQY
wJZ@oy8Q6a6KlWIS=x^6X7yYxxMr#%RxUh^S;KZJWK?<yO-sqIGGVsWM0X}Sd`2YX_

literal 0
HcmV?d00001

diff --git a/dwt/evidence/shot-screen.png b/dwt/evidence/shot-screen.png
new file mode 100644
index 0000000000000000000000000000000000000000..664b02e2f5e5a8acf3cb65ac8d43978d769882aa
GIT binary patch
literal 9656
zcmeHNXH-+$y4^cP5S1bbC<G7`uz@Hd(t=1+K|mBxq#RU=f}qk-vN;})1q4)%BGLo}
z6%dd^FNxOz0uoVrOBCrPfzU!i^45;`zH!gH=iKtfyYKyZjzLC}wf2|2)|%g(^ZT|p
zY!6wi5?Ln#LC~uGmZpax2oK(3uL^@#NL*Pw9D+8I_M7fK652J<8+|Y1fV5dNi%%pN
zE;?+UTDE3qSYz+W*}NSR*1sHmwd{(p#J}$!`^pB*sOvor$jSx2%%cNCsuFu_O8i>Q
zk=`G+!#9&%k(9jfrL2b{On!a`xqX5tZ2N5nbBVXduw?W?rK&MTs=O3h8xNVqKtYI}
zu>?jNvlU<F@tSx3l*FE!kiLb1Z~zh3^E3Z;LWS}Xu2H4blGjeLN>AU;hVG|HWYq1)
zS(2P_vQtvsRN^}7X&xuyKr8h!#!Q%Lg0aHBH(YV`^oGO*n{QOS?q;qq^GPNp2eZ`z
zc}G&dwifn0S;JK&&|_67qdH#A*OSeWnbM<3p|#*nsuu0&8CdxxD^uZ*yZ4%YE5(=j
z=*TY9R!pzM<I5&g7bPVkNXp7Mb>$297aPu|Pf3=0*?HqE5oPqx1OWr35=z+B>DMLb
z6L`x9%D7NBxMsSZ&AcwI1mC<a%2dY0d?n%3J#e9l@H+=EQy6v)z?E5Fz^R)c?Q(FI
z?~E5tJp)_iER>iky}?*Qg%WWKlBqOQtB6aJ*}ToZp95mix0xf<gOTFs)nx3}`HRbK
zO@%_cSrBVWgBnIk3sZGLC~;8*Z1s9$!7C*?Qu5SVeya*)JZVS}zg<{x0{-1_2}uH+
zfm{p-JAyA`|HAqr(F}tn$f7Ue^c(nvX+zVWAWdcCzy2O9M;M(j41wQ{L0`~-KcQ~|
z(S0ySU;cAf^uVo1pm!pH0c%>1z9FC+BJr0n-?s-uc=J7snQ2?Ckt;@`oY9olZVY~4
z4WfL3tniVDfhKP*$U;(eBxoUy2Ypn;V%&{IaK=$wA%s6H1}$kRLCYQ+{~IQ#$MYek
z;u4%rT!y0{Qo;y^Ee7$M6`{qG#?VU3DCl=4Fz|QkcKwMoGc<9VbM91$=CVs`{o^~{
z$udj)seD4m<iU=#JFmw(&Q;yOuo)?$1(&Y~+lp?a@S4uCZVwO_yH9H-LIX}9dDt}m
zE+Iyw(c76?gwc^Nr2yCO$JZfJ3l2hw<bybMwKYokX<8+LPPG^_gy*D*CHq)j?S3u&
z)k8!VM*U_IV~u`0+5aKFjx;m>%9Tm=Y!+s+^{dn<r1_Zn((<(IHDW|Bo3jPnpKC{N
zKJRIKNj5M1I)qKIQLPxe#XGn<O+GxXJ+ghSNln^)Na?z0JRC9%sp#KN?=$J^bgxmO
zaFbJBvGwmN`i5pjtMG!bzs#Rec2Lyzm@`g`rMdE5s7~i{W1xLPmQngaNUwzZPTXeE
z6oYfeCX2VW3Kux--IX=ERHXn1|LiootlBB}gyXD1npmj;>$KBc2gTzlJ-qCGe)S3e
zQ!jE!*G`uwbA8(Ly=M(7$!CXdIi>Ckjwf?G(wq^13q}ZX_lnXjxPJYqHge$4XBv33
zzRjul@X9;R_>PF&14ysgJ(CeXSZBqYdH(BxF`ct>1`lbwf*20`KlK*78Y5f_5`%%K
z9=h^u)%M<=&$dXBOK12)`SF$)@>PlXy9Z7-PZcQ&7szJUY@p2DzrKc_zawF3yj5P9
zi4)4LxJv7v_z3Ty4-x1yro+A#yUei}O``59lrs(f*5X>St$wpKTV$Yy>5TCW_Sn6m
zAacK_3MI0$%ntGKE#>Y>wn198o&%0j!cTsLr7fguRVcqcj}Mj!ZOG7CH@Hf)QgnCM
zGw7igQT*U}@oxn99jB5q)<0T`)9u99#6p|m`87Ro*20fa19o%2<Z%5XThgx!PWwY-
z+mes&{AfI{omebdpxgG+4$)eD-k(v;GU%qwHetRI7b8M6%Pu;MjH@&2H3B9-s=u?G
zZSJqTwr{riQz<TSRHeR^SxERGZId0MJR>&*-y6$yyEDzaxT&$E?qI85E6bObI82Du
z6w4263%}~(zIc-2ABd2dZ-4SP^mr3+pY1HhsSm&AHPth4Rv}*jH<B!zLVE)+d`M`a
zR<60y&46QtxJ7ixv>inJmrMq+-^hmg#<y4adVmw@Qz)M@_vCmOx8o$bWwGHAuEWp=
zo?5o1ND#uE4;J#q-eIkX=MOU`en_tyu|Uu~2|{#~%6|k}g9$=1u#b&-oC89k>W;3Y
z9jBV%Pc+RCL`(9k>W#*B=AvQ$gqkE<q+!3<Zo^~fV6`5FN?xz;@_O{`FN?I!Ue2>X
zwase?O4z<?Y_8Y3O<wYy0lRManj~<$_Qr86F7JIbX;>t*nenM9K=A{<e;q7+_hU?c
zj#l`m7YVu8$CS!Ir1`;%ovT!*Vmf77BV=e#H5IjG-1pc!jJj@BvGyt+6D}x!VV+Pi
zN%UFP0#DQO^eCfuR%@mBSLYXY1?8{Uu7?>vbWl%{KJ2mfL;gb@7cD@vGa(}^NG0w3
zuiEs3m`e&jKh<2by1Dn{1XZ;n{C)ArIyL(;2lBb0{T6eNm)i=}A-ng86|7ZRlNxG=
zr1W;(YG>8;YF7__>smL2u_C~+sqw?mCgxXydl2D$YxF{3o@C038%G?Q5_^lzDYt7F
z?r`d_fTHCp9f?{P^d47Hv0KIR%?tJQ$VsNAL3`fiKHh&flQQwB&qH3fVsxV3j;>v%
zVXI9(x6Xxk1<3tONSY{+sybwT0x}Ckq(U16A4%Uo&V=NM+P=|whiWl^|0p_zn~jwM
z=aI&O%wjc+0kad*!9B+F0kHb^hHV0epN-vMjLr~cW?^Cyt<;*WXyUFU!SyyZa8{b$
z58ZEZjoNwGZ$tw9Ek4oB%6;qJ{2I}CULYc~+TAolD~g*0RX;&*OOL`5DImRi;v0C!
z<?)Ns1n^U~LZK3{D2F^<|Bih)LlDFVzYy5T9QF@-(*OPh4<HK!-dK8MpAmq^DCA%D
zEWA1hk$Q^W__ScXmL$Q7z#zKlKO88t5K_MowJio{LAB^daoa=MU7rCIoBZSQ4jfVk
zUT6nh0mx?ka=h#&5C=@xJ##Na<9W84)_Bq8@>`G!zeqHmZ!`gAI(&&uy3skRW6;F%
z{=ikR%V(Xx|JCs!*SDlf{s3afH50NVr3E7&js$W17FfIdq}?w+EB<m*I<DBhl}gfa
zbp<M<&d<W0qS)wDt{<T~RQ1eN8P@l<1vg(1E>8CO>@vG!I%eRG$+KkL8coXJ4;kU%
z#h)8;ii$tUE&nLYypG9@{RstAzi2^x@5_T)@>^zQ{3h?Xt;#%B6H5PDW4HCQa6s^?
zK1aMPE>s6@<BN|$Z2xPb+dpX1dz;_CdwVUXiKOQ|$ez~@?HCr>E+-ZIO?Ma?E7X8f
zPs${ML<f<}JSQwLCmafoB0fivUc;{k(tM2i4pv{gIhSn?K(tutBP9F!yu(cybEMTn
zU$`K`>T$)wIX5KbivCis3&x-j<p$z7RD@kmm}>Rwya{DGjaOo<T;MsO$Nkqvi3YHO
z9YWpK5QcC|Sz$<!gu{(|l2loz+N}$Pi|PT6NcF5WuA_3{9ODEz6&kz98(m|jOi@V_
za!P@oU>}qHNirR~{01nP$HZma>5!-t$*n>X?ltE}z|L%;;idQFLUM|u5Sw}lx!?v*
zD=u9w#Y*j&7LMo1GAjw`b+=KC2Y3N!Mv(;4!2&=Dpj{E0`YU$)vdw%iCmLw+rht#I
zgWJ{U>4;OEjH%?i+c+Y}4z$WpGjxC0#nCw)spWwIG57>eBMLXVY^l>cbLUYL{kvAA
zxo0y?Qdpci*euQyHe|n!`X??ctidbPr+4?mNKL=AQ=1>IC-rYwTJo8`eB~HG&C0ST
z*zp_NKbay^_n>|}Jm(pyKuuiJ?~~`f4`h&3*)y!KX4*Z+ABmN<*8Qa#6pyWrv3OQe
zLC5FVcGVF@3Rr;1H}WhC%DmW{>4_^--<Y&QAukrPXJ8aw55Cy_XruyS^=~~i(}r${
zpP^X5U8v#4l$*4BxCQds&UNMHhQW4mg3^)}otvb@PFTpiqSRT(h_Hw%diJ#c>i)%?
z)AqW;8Q4?CB9|Bjl!SUosK1aU_n8IN65IpzDevEJ`CzrEmHe3aJd+%Y8AI7bW66ci
zyGk_^0`@568Us_?_W6t{x>(skbn~%?-4n&Y?t`O1x#o|P8kLQdx4N#q4I){-fFgI$
zCt2`4k50RtTF$*c*S=S?Na@K;4S2*m-ZM(|Y(S4rvj^63OX~H1O`EBv1;N2X$A|OO
zIrRblUt8W&-=R}5`91KUy<F}g<Ft&_^XbVc8|4ldPPRLP3~U^v*u34ie;H=n>XP^e
znf^uE8V#?^W0L6->3|4;e+V9QPqj8CI%#(;=cwjrD3q1?OEqX?V)}|koA#7xP?U_p
zMvg$GhfLgNydO#{zR=^3_&yl@s!)CQ>I^P%m5BZY`9NgW={_Lum7#Y<nNOAvXa8=>
z^*z}QB*rqTbR0x8PIFzSKB+{R)ViH<R(^TG#ei&b<w1~=yh?weM4KCABY5felFb^K
zoqGaE$B>H6jV@@y%}m(QJ=3)7-zJ64L}14A{FN!(2cB_l$6U5h`dZk%-NMXJ%(!eb
z1k!j6+MO1ocEJ=rti-=OUrA|Ney?8ybp)BBw%>XxDZml@`7r4+-vy=*B-<aIX3xTU
z9#_lfAu3v>Cxx6Y`{zDTG`i=%V7~JxWyhAIbG_aE^*PBjL?#9riG%wy8JK*lIQiMF
z%Ozpn<nRaYcxV+!@*>fK-B*up9z5iu8uAS9v~_zgJZVjGv$5$)*+@>+T%U1qk6JT&
z$JKg@?%X@j!;!*KHuECfq&6&OuPqKvkvBI9aWGsP%bl>1jJiY8WswR@OiN0e=HgDj
zC+}N+MCE7MrFjF&@QELW4dEIcjMadd!E+1OpH8eu0_7Mu5>ARxnJUHV_GMV-;%D+!
z%Hqd&zAY9A?kR9sOD~px8s|9J_heu1w4;mR6N$E)04h)mL`xM)Oqo3FvVX_DXoq)$
zAYsq&^(>;g&+HhBNZJ`F$dAwu42*p;O7xXzK?lI<-wEFwhS-c6LOQ4tfW|8883RKD
zz5`MUDqEn!e>DIK)v_Yl+MI}EuM*H2oY#HXh;n$V{ux!zoNlJB9kp;*WTM9nZ?gOD
zrB2^4a9Xsh`V>!xs3jdPJ4t6nfxefOzgcu`_(g-pNFZCNB^nS7c<_KelvTT7X4dKw
z``p<|?;(=|aqa0Yk!!<(hsc_PX6pD31FIu8`N83r*Jd9NSAo~T3bsh=AmD5YRiDzt
zZO}>%ea^OvnLKQz<fQ3l5U`VfIq*ZmA~jdLbqi)C#^3=I{j#5}iegPqkv^ImQSD>f
zF7xO78KQlr|B$(b;%nP+yFVS9TU&t(HH8QJi6Ge~T43oS_T>$f(`%gZi4ORVUX>R!
z4+i_ITOyu%lg{8mec|9H6;NdMWMh-9OcXU^pq#hC;_mZ_mRdMjG?l!xGqvGV(0;Lu
zQVd2qqvB&1MoWCnklRUP-jUYGvn>=J63De(x~4|KiWGEU0guvBhu}6dr;RndKj+hE
zCIyIG+inSWo>h^>!QPRX2$}R8g_jX>u)<-aSQMaset?0g<i^W8p<ddJr%`b6$ALNw
zU{%l#=`luTm$Sif?F8?=a2<Ojl0c#X#X^sKvKziBZ-zV(5}2R_{pH)ucwRt#MxcR1
z7%tyy_rNt1P`d{r7vx}R7Ht$-3xH9&+Wk2WEofbV2jcz313fi4WVE>jU{US0@$I4&
zs4RXE{kUv{qd4GXx-%htm8FIfkQ0C@fH^d#ARPeQP*DV7QLXvyAbL$8vQl8e4yS*&
zp8`4nGzi?;KQ-|CevZjr%j4G6USyw7djQyXm=PBeMRHA*>RuyZc$$~z8L3k<{wi*|
zanWXoUD$YTE%_r~I;LN+C|?4-%UoAcP2nI?J#^6uo=ecJq256EBlLwRleUlOnm(S-
zk8JBp68klyjKd-m=R>z9E-~A2p^08?b-4>_*{j{Bs$Q=5IR0+9Q_jBT7+81<9I1zi
zG1<sIWbL0Y+mSSurqR}Tk3Y)LT}`JEiyU#f;jT8Y#)@D4fye+u?H`QzJdTbsy%&4t
z^O8qr9H#^ln{ON?&{`zj=TxPrISYOnK}*e``?fN4PLx@G|KWtk?73~C>4BxSb-_gP
z#Dh!ZIVWna4=<z5IcK!-^Dj^(xlL;>3g95LPqd&&BFh1>-c2OLOX)4X^cr<x^&1p@
zDa?8R*&pGsI=5NKgCk%w))Cx|L`FomFT=!)l6{UDEtz!cNYE9DMf12sS1DB20ufN-
z+bKZrMRl@TdXl<W?aGHE0$=LATWlp1--h_S2ft{tP9U?A$73;$*Pe|o4ZN1eXAzef
z9774{F{L{gB_$rq#T}FxOTBrh3hWR-!7@q!1prk5g&9HV@p}UyFGaU=Uiwr8L}<I|
zZzDT9^EZT#b%xDFjjol7(`9##mk`n%MqRLv`74+4{aj!A?s|Kcd$rvG_@n#dkVVm^
z>d1&)E+#t_o}Qy!R>@1-yT`A6+^fI4W<8}PEXwssSYGA>$uA7l{DpEwnMa#ji8-aL
zxe+nXvvJcyoCjI@Za>V9x8W9UMfrq?aIG=EZY<B$4_?JMP3;yGkH_>V)1Ovrifs22
zcVBsre-eJT9xpqF8Lw`eJ$ng<`l^&iSl^+gh${2y&bH{z;g_2RSkES&&pvKBacSF4
zxlc`)aR%ft;M6-`Ts+7l(3zhOR+q~}$e0~Zb(=lzm_N1K)fxCA*J^Bxp9;k{xp)Wf
zK(TFv=k<;W<h6HIyHRDIe|P@aoRmA;rf$Jd*1Cr#2M_Xf*WCZHi(T9bgUl<C^|XGY
zyV`xFMH+2SPm(Ie${wC%Ycyt2Xl<}gJ{uU!6m-i-G7P9xal(bL_MEQwr)~<U6<J<-
ztLfvqV?3{+sx6ecU5wI{ongR6+X$7t4nxAO&QFCQBU@A`8CP?YKPMk+C;NH9Mzvm7
zRLq>4_|Y;{tQE-+wd4kSh15y+7IJPL0xJ3a<k=bpD2FwoNI3<HP4EG94^X&#Mm222
z=I;yuK}9ba{;Q4yxCo^Ja20UaCx1KmT`&QfLG(pIbd(4IK)?U&zcBDyP5nc${W}Ax
zKgdn+!%Db0^B@(_(wo>B7d|$-FfYwep`@u5?nU}`3n*M{J!Q$<n_ZEGnW-5;w_||-
zoByg(__d@~@u1HKhC>fyYAAeRfku5d)@Xh`F3*Sr4D^y#x+t?cPkm|S4f}Vjpn8zr
zd3|{mdE78nisdG2MmO)vpnry7tKB5rX{KUJrwHzD#|MPZn|BqwcpLFd!o9~8ZSLt&
zs&NY)ujIQ%%U3v$r<Q~q+>$d23f~Xk94A-Qa$27V=mD2VINGZh*bsd5tdAdIYE48-
zF?7-lVSo9W@d~JkA}GW|B<S@4+b*zuE4zJ79qV_hilt1b3`KlJIrk}+Yl&>yb<H*6
z+R3wD4BTp8^?o|yonr4+k5yo&20mXY|JLs8_mYemQc}LuW-o8Y&JzMUn`Y>a;hqIp
z3%G$A=06mf1q*_Ez!UD=`7A%$Md1JF?fS;F^84h@{9bjmIs#OTQzws-Wh~H&&us$u
zxX4x#u_(sS>nYj>aQpN4{qOZ*LXH$NHSDb;5|05npzbJ1zbBR|Fkct;EYFfb8GG2k
zxI7h7B(;FlV_>3zT2e!zP?8&}q@WHB74;LSr9jI|;A#K^qQ%gBxX|#byZ!$5U<&uJ
zkhiJ&HN|PPdIi}J*RRD}MsZ6I3Rxl-Oi)q*-lnVOTa3VKqj3aC0<DH9w2K4a(=4cA
zft~oxAo_4XfUV`A#QHC!OF5OA+i+<eX!BT*@<Wim{h+A&MDx=(_TK;l<G?H-q?g_X
zTa6aUXiEzGfH1JUpvHV4ckTQ4Ra5cN;2pSys;NV2;3@#x(Ehet-w&v2>bwxR5bzPR
z1Y__f`YGBc{0#S%;6XG+AV_>;z3+KVH(VvF2g)UUk{I)aWXICHNyK>&b|^_Hr00|h
z0C+s_gygpp;E(_@rj}w8;!2MJGDag0V)qK_jE`Ac{$8pBK`QURm-#omBZA&EH4HHU
z`vxM4{KI{H0R(PnF&1zae{KviYtm6dckLW#C@jaL6+FPmg#&1m$!74t&Q6e6XkCl0
z7wrt8z(uQGpoyU91zGpkgL=ktAGb+K6!E_sxAs|@yr9`OP_p_r2T(p7^~o$$!j9{R
zHr9;G8-$rt^IWpPn4l{{k&2ezD5c6ggHq7u!BcF)S%oi;&=aWlL!VV-V-q;BXn_@k
zHc0*kPc&x&Jx9$V_wu97B`@|Eg-HwSAGZp7i9OTti~d$(SCxB3<Nk^aY{JDLg!=I1
z=hOC6tx;(a<`d6Hxm}?KZ>V=>Z|a|o`MTve+63Wo21K{dAN`We&7W;Qu;tN{7WT`d
z6D3#cHXcBoC7H;8t{FuiA?5S5m<{(s%@6`j0_A(Ae-rk^oQnmvqAvE5LGX#RQnM*X
z6xI0DQ3FcToBhR5^wsF<_H5&ahi(fp%Yp%#9P6kz{m&2Ddp48zonfS{-CnO#C@t9Y
znUJ4YP(voA^-<iQdcYA2(nC&m6Q-D(VYqA?s!O1CgtA7yKs!XLPNTB%jm#1Fntx78
zD4&6<4bk2JBVJ{Aq5oFn+*`ySd{v^gtjY_(<CX&8l7IMo>z|nLuRSpPCj$P1M{a@$
z#-x?P2)s!g!cQwgyi6hlI0urA$H2Bqe3(vL#Qr-b3`s)UmGGE!V;+`5nh`>Hvf>c-
zuo46+5D3s0G#m%R|ML@&1!3s_;Atr3fBpF@`iS>meg67C0jK{5@c#*bhn8fzqp0N4
z-fqnjd>V;SVS{u?U*c6y7-2m0ne6$R2>#n(I*Z{)q;{u$Ybz9LL`rp(@PfvG9}y#E
zjLb!`86^xN`05Xg$KSXT%09nWeD8CYf;K7|34Iqp=KWSj5hh!%dOG550Q-aH#}T}@
zVj}S7j^gweSI8f7^eewN9<sXw`C-}8^b4<d$j790-y;+GoP`ZsP6V(2w6z`YF_-#Y
z=+hhmEPm*IxWx3Lb5PouI>+85+WJ`s(DFpfb>2OGn>k{?))QNEguP7!9^7&>;U>q$
z99;?UEcM$$PRoQUQ>3VG$5b|T?)#=+eie?0%Lgqr!1=r`iTG#G&I)C#h7V8P-W1)w
zE2NHb|HaD{R;Zj;{RDL@23C-d`%$~2uT<QEx;fh-TfYk`-w8QgC{wK>oswBLpmAPD
z>cr1K5%V3-#4gvgxDTuq>bg~)e{uxf6+mP2Tn(mmq_x1)vr#ESq`Zy3d&UQ7j~q<t
zi!9u>z}=aSo><j@6ws!b|2(bvxoE#vL$pfK|0Q}x7FPau$yapv^-R}_yId-t%lMVg
c(dJ`mh7*k&7785D|B|)e?2zdT6Zaqg1D@yh@Bjb+

literal 0
HcmV?d00001

diff --git a/dwt/screenshot.py b/dwt/screenshot.py
new file mode 100644
index 0000000..17b6187
--- /dev/null
+++ b/dwt/screenshot.py
@@ -0,0 +1,216 @@
+#!/usr/bin/env python3
+"""Network screenshot of a running VT1200, using rdebug `peek` over TCP 771.
+
+No debugger, no ROM patch, no agent on the terminal: it reads the framebuffer
+out of video RAM one `peek` at a time and writes a PNG.
+
+The memory layout is the one the harness renderer uses
+(`render_active_line()` in harness/mame/vt1200.cpp):
+
+  * base   bit 0x04000000   (video RAM)
+  * pitch  1024 bits = 128 bytes per row
+  * bit order  LSB-first within each byte/word
+  * active  1024 x 1024 pixels; on the emulated screen it appears at
+            x 192..1215, y 36..900 (MAME-derived blanking; see --screen)
+
+Examples:
+
+  # the raw 1024x1024 OS canvas
+  python3 dwt/screenshot.py --host 192.168.99.2 --out shot.png
+
+  # compose the emulator's visible 1280x901 screen, for comparison with MAME dumps
+  python3 dwt/screenshot.py --host 192.168.99.2 --screen --out screen.png
+
+  # only the top of the canvas, and keep the raw framebuffer too
+  python3 dwt/screenshot.py --host 192.168.99.2 --rows 0:256 \\
+      --out top.png --raw vram.bin
+
+  # a second grab 1 s later (tearing check)
+  python3 dwt/screenshot.py --host 192.168.99.2 --repeat 2 --interval 1.0
+
+The peek limit is 1024 bytes, i.e. exactly 8 rows per request, so a full
+1024-row grab is 128 round trips.
+"""
+from __future__ import annotations
+
+import argparse
+import struct
+import sys
+import time
+import zlib
+
+import exploit
+
+VRAM_BASE_BITS = 0x04000000
+PITCH_BITS = 1024
+ROW_BYTES = PITCH_BITS // 8          # 128
+WIDTH = 1024
+HEIGHT = 1024
+CHUNK = exploit.MAX_XFER             # 1024 bytes = 8 rows
+ROWS_PER_CHUNK = CHUNK // ROW_BYTES  # 8
+
+# Defaults for the emulated screen; the real unit's blanking may differ, which
+# is why the raw canvas is the primary artifact and --screen is opt-in.
+SCREEN_W = 1280
+SCREEN_H = 901
+OFFSET_X = 192
+OFFSET_Y = 36
+
+
+def parse_rows(text: str) -> tuple[int, int]:
+    if ":" in text:
+        a, b = text.split(":", 1)
+        start, end = int(a, 0), int(b, 0)
+    else:
+        start, end = 0, int(text, 0)
+    if not (0 <= start < end <= HEIGHT):
+        raise argparse.ArgumentTypeError(
+            f"rows must satisfy 0 <= start < end <= {HEIGHT}")
+    return start, end
+
+
+def decode(data: bytes, width: int = WIDTH) -> bytearray:
+    """LSB-first bits -> 8-bit grayscale (bit 1 = white)."""
+    rows = len(data) // ROW_BYTES
+    out = bytearray(rows * width)
+    for r in range(rows):
+        src = r * ROW_BYTES
+        dst = r * width
+        for x in range(width):
+            v = (data[src + (x >> 3)] >> (x & 7)) & 1
+            out[dst + x] = 255 if v else 0
+    return out
+
+
+def compose_screen(gray: bytearray, rows: int, sw: int, sh: int,
+                   ox: int, oy: int) -> bytearray:
+    canvas = bytearray(sw * sh)
+    for r in range(rows):
+        y = r + oy
+        if 0 <= y < sh:
+            xs = max(0, ox)
+            xe = min(sw, ox + WIDTH)
+            if xe > xs:
+                canvas[y * sw + xs:y * sw + xe] = \
+                    gray[r * WIDTH + (xs - ox):r * WIDTH + (xe - ox)]
+    return canvas
+
+
+def write_png(path: str, width: int, height: int, gray: bytes) -> None:
+    raw = bytearray()
+    for y in range(height):
+        raw.append(0)                      # filter: none
+        raw += gray[y * width:(y + 1) * width]
+    comp = zlib.compress(bytes(raw), 9)
+
+    def chunk(tag: bytes, data: bytes) -> bytes:
+        return (struct.pack(">I", len(data)) + tag + data +
+                struct.pack(">I", zlib.crc32(tag + data) & 0xFFFFFFFF))
+
+    png = b"\x89PNG\r\n\x1a\n"
+    png += chunk(b"IHDR", struct.pack(">IIBBBBB", width, height, 8, 0, 0, 0, 0))
+    png += chunk(b"IDAT", comp)
+    png += chunk(b"IEND", b"")
+    with open(path, "wb") as f:
+        f.write(png)
+
+
+def grab(rd: exploit.RDebug, row_start: int, row_end: int,
+         quiet: bool) -> bytes:
+    start = row_start * ROW_BYTES
+    end = row_end * ROW_BYTES
+    data = bytearray()
+    pos = start
+    nchunks = (end - start + CHUNK - 1) // CHUNK
+    done = 0
+    while pos < end:
+        n = min(CHUNK, end - pos)
+        data += rd.peek(VRAM_BASE_BITS + pos * 8, n)
+        pos += n
+        done += 1
+        if not quiet and nchunks > 8 and (done % 16 == 0 or done == nchunks):
+            print(f"\r[.] {done}/{nchunks} chunks", end="", file=sys.stderr,
+                  flush=True)
+    if not quiet and nchunks > 8:
+        print(file=sys.stderr)
+    return bytes(data)
+
+
+def one(rd: exploit.RDebug, a: argparse.Namespace, tag: str) -> None:
+    data = grab(rd, a.rows[0], a.rows[1], a.quiet)
+    rows = len(data) // ROW_BYTES
+    gray = decode(data)
+    if a.invert:
+        gray = bytearray(255 - v for v in gray)
+
+    out = a.out
+    if a.repeat > 1:
+        root, dot, ext = out.rpartition(".")
+        out = f"{root}-{tag}.{ext}" if dot else f"{out}-{tag}"
+    if a.screen:
+        canvas = compose_screen(gray, rows, a.screen_width, a.screen_height,
+                                a.offset_x, a.offset_y)
+        write_png(out, a.screen_width, a.screen_height, canvas)
+        print(f"[+] {out}: {a.screen_width}x{a.screen_height} "
+              f"(canvas {WIDTH}x{HEIGHT}, rows {a.rows[0]}..{a.rows[1]-1})")
+    else:
+        write_png(out, WIDTH, rows, gray)
+        print(f"[+] {out}: {WIDTH}x{rows} (rows {a.rows[0]}..{a.rows[1]-1})")
+
+    if a.raw:
+        rp = a.raw
+        if a.repeat > 1:
+            root, dot, ext = rp.rpartition(".")
+            rp = f"{root}-{tag}.{ext}" if dot else f"{rp}-{tag}"
+        with open(rp, "wb") as f:
+            f.write(data)
+        print(f"[+] {rp}: {len(data)} bytes of VRAM")
+
+
+def main(argv: list[str]) -> int:
+    ap = argparse.ArgumentParser(
+        description=__doc__,
+        formatter_class=argparse.RawDescriptionHelpFormatter)
+    ap.add_argument("--host", default="192.168.99.2")
+    ap.add_argument("--port", type=int, default=771)
+    ap.add_argument("--timeout", type=float, default=8.0)
+    ap.add_argument("--out", default="shot.png")
+    ap.add_argument("--rows", type=parse_rows, default=(0, HEIGHT),
+                    metavar="A:B", help=f"row range to read (default 0:{HEIGHT})")
+    ap.add_argument("--screen", action="store_true",
+                    help="compose the visible screen instead of the raw canvas")
+    ap.add_argument("--screen-width", type=int, default=SCREEN_W)
+    ap.add_argument("--screen-height", type=int, default=SCREEN_H)
+    ap.add_argument("--offset-x", type=int, default=OFFSET_X)
+    ap.add_argument("--offset-y", type=int, default=OFFSET_Y)
+    ap.add_argument("--invert", action="store_true", help="white <-> black")
+    ap.add_argument("--raw", metavar="FILE", help="also write the raw VRAM bytes")
+    ap.add_argument("--repeat", type=int, default=1, help="grab N times")
+    ap.add_argument("--interval", type=float, default=0.0,
+                    help="seconds between repeats")
+    ap.add_argument("--quiet", action="store_true")
+    ap.add_argument("--verbose", action="store_true")
+    a = ap.parse_args(argv[1:])
+
+    rd = exploit.RDebug(a.host, a.port, a.timeout, a.verbose)
+    rd.connect()
+    try:
+        rd.liveness(7)                 # cheap reachability check
+        for i in range(max(1, a.repeat)):
+            if i:
+                time.sleep(a.interval)
+            one(rd, a, time.strftime("%H%M%S") if a.repeat > 1 else "1")
+    finally:
+        rd.close()
+    return 0
+
+
+if __name__ == "__main__":
+    try:
+        sys.exit(main(sys.argv))
+    except exploit.ProtocolError as exc:
+        print(f"error: {exc}", file=sys.stderr)
+        sys.exit(1)
+    except OSError as exc:
+        print(f"error: {exc}", file=sys.stderr)
+        sys.exit(2)