{"kind":"hwanse-field-rng-selector-opcode1c-review","source":["Hwanse2.exe","out/script_handler_table.json","tools/build_field_rng_selector_opcode1c_review.py"],"handler":{"handlerTableVaHex":"0x00440720","opcodeHex":"0x1c","handlerEntryVaHex":"0x00440790","handlerEntryValueHex":"0x0040bcc9","expectedHandlerVaHex":"0x0040bcc9","rngCallVaHex":"0x0040bdcc","activeCountGlobalHex":"0x004576e8","activeOrderGlobalHex":"0x004576e9","activeSlotWeightBaseHex":"0x00457756"},"semantics":[{"mode":0,"summary":"selects by active object count: if active count is nonzero, index = activeCount - 1; pointer count comes from byte2."},{"mode":1,"summary":"selects by active object/order aggregate. It reads active count 0x4576e8, active order 0x4576e9, and slot word values near 0x457756 before selecting a pointer range byte2..byte3."},{"mode":2,"summary":"calls RNG helper 0x00427730 with byte2 as range and selects one of the following dword command pointers."}],"summary":{"handlerEntryMatchesExpected":true,"wellFormedOpcode1cBlockCount":0,"wellFormedModeCounts":{},"scriptHandlerTableLowByteReferenceCount":3,"invalidLowByteReferenceCount":3,"directFieldEncounterBindingFound":false,"classification":"handler-only-unbound","decision":"Opcode 0x1c remains a handler-grounded selector primitive, but no well-formed command stream using it was found in the current static scan. The existing script_handler_table refs are low-byte pointer artifacts such as 1c f7 53 00, not executable opcode 0x1c commands. Do not promote it as field encounter evidence."},"wellFormedCandidates":[],"scriptHandlerTableLowByteRefs":[{"streamKind":"leaf","streamVaHex":"0x00542ac0","wordIndex":24,"wordVaHex":"0x00542b20","valueHex":"0x0053f71c","rawBytes":"1c f7 53 00","modeByteHex":"0xf7","modeValidForOpcode1c":false,"source":"map1_01a","target":"map2_02d","interpretation":"low-byte pointer artifact, not a valid opcode 0x1c command"},{"streamKind":"leaf","streamVaHex":"0x00542ad4","wordIndex":19,"wordVaHex":"0x00542b20","valueHex":"0x0053f71c","rawBytes":"1c f7 53 00","modeByteHex":"0xf7","modeValidForOpcode1c":false,"source":"map1_01a","target":"map2_02d","interpretation":"low-byte pointer artifact, not a valid opcode 0x1c command"},{"streamKind":"leaf","streamVaHex":"0x00542ae8","wordIndex":14,"wordVaHex":"0x00542b20","valueHex":"0x0053f71c","rawBytes":"1c f7 53 00","modeByteHex":"0xf7","modeValidForOpcode1c":false,"source":"map1_01a","target":"map2_02d","interpretation":"low-byte pointer artifact, not a valid opcode 0x1c command"}],"knownGaps":["A runtime trace could still prove a dynamically materialized stream reaches opcode 0x1c.","No static stream currently connects opcode 0x1c to walking step, map family, btl background, or monster formation data.","The mode 1 aggregate source is grounded to active object globals, but its game-facing meaning is still not named."]}