Map Animation EXE Pattern Review

타일 교체/offset 가설과 EXE animation dirty redraw 근거를 분리한 요약이다.

승격/미승격

Known Tile Sequence Scan

Individual Tile ID Occurrences

개별 u16 값은 EXE 안에 흩어져 있지만, 순차 치환 테이블 형태로는 잡히지 않는다.

Tile-Write VM Command Scan

tile-grid write handler 자체는 확정이지만, 현재 known 0x40 source tile id를 직접 써서 모닥불/폭포를 재생한다는 증거는 없다.

Coordinate-only aligned hits

좌표만 0x40 영역과 겹치는 경우다. tile id가 animated source tile이 아니므로 animation proof로 승격하지 않는다.

Rejected raw animated tile hits

known animated tile id처럼 보이나 좌표가 맵 범위를 벗어난 raw byte overlap 샘플이다.

Rejected ASCII/resource overlaps

리소스 문자열 주변에 걸린 0x58 byte는 command로 승격하지 않는다.

Surface Self-Blit / Cache Command Scan

0x40 dirty redraw가 아니라, 실제 CNS surface 내부 cache를 갱신하는 경로다. map_a/map_b에는 강한 근거가 있으나 map_c 해변은 아직 이 경로에 묶이지 않았다.

map_a / map_b rect tables

map_a promoted-like command samples

map_c root candidates, not promoted

map_c root의 0x65/0x02 행들은 trailing 값이 local pointer처럼 보이며, 아직 0x004256D1 self-blit helper 소비자로 연결되지 않았다.

map6_26c / map_c3 Whirlpool Object Animation

이 섹션은 layer1 0x40 타일 strip이 아니라, map_c3.cns extra-object 프레임 루프 근거다.

source rect table 0x0052df6c

slot 0x0c frame loop hits

resource refs

map1 Palette Candidates

후보 command stream shape는 맞지만 map root 실행 연결은 아직 증명되지 않았다.

Carried EXE Evidence

{
  "source": "out/map_animation_tile_review.json",
  "status": "animation-redraw-consumer-confirmed",
  "summary": "EXE consumers for layer1 0x40, dirty redraw, and palette mutation were found. 0x40 marks cells that must be redrawn because their pixels can change without changing the layer0 tile id at the redraw consumer. Palette-only does not explain the observed spatial motion, so the per-map visible motion stream remains unproven.",
  "confirmed": [
    "layer1 bit 0x40 is read by EXE during viewport redraw preparation.",
    "The 0x40 consumer marks the same map cells dirty every redraw pass; it does not choose alternate tile ids.",
    "The map draw path uses the current layer0 tile id directly, while 0x40 only affects redraw invalidation.",
    "The EXE has palette VM handlers and a deferred DirectDrawPalette SetEntries path.",
    "Generic VM palette opcodes are now length/mode grounded: 0x38 and 0x39 are 8-byte commands, while 0x3a and 0x3b are 4-byte commands.",
    "Opcode 0x38 is a palette step family: mode 0 steps a list toward target RGB, mode 1 steps a range toward stream RGB, and mode 2 steps a range toward backup palette bytes.",
    "Opcode 0x39 is a palette set family: mode 0 sets current palette list, mode 1 fills current palette range, mode 2 fills backup palette range, and mode 3 sets backup palette list.",
    "The non-transparent palette indices used by the current 0x40 layer0 source tiles have been mapped from CNS pixels.",
    "A stricter local VM alignment scan promotes a subset of raw 0x38/0x39 byte-pattern hits to VM-shaped palette script candidates.",
    "VM-aligned palette script roots are now cross-checked against scene/resource groups and nearby map resource records.",
    "The animated fire/waterfall/water regions sit on ordinary layer0 tile ids; 0x40 dirty redraw is grounded, but the visible motion stream is still unbound."
  ],
  "unresolved": [
    "The exact executed palette command for each map animation has not been bound to a specific map root yet.",
    "The palette-cycle timing/order is not fully tied to a specific map root yet.",
    "Resource binding is a correlation layer only. A contained or nearby resource group does not by itself prove runtime execution for that map.",
    "Broad static palette-command scans contain false positives unless tied to an executed VM command stream; local alignment reduces but does not eliminate this risk.",
    "Generic VM tile-write handlers still exist, but current 0x40 map animation evidence does not require them."
  ],
  "keyAddresses": {}
}