[{"writerVaHex":"0x00542474","writerValueHex":"0x00200012","streamStartHex":"0x00542470","selectionBufferOffsetHex":"0x20","stateTable":"active branch-state table","rootHex":"0x00540714","rootLabels":["2:0"],"rootFieldMaps":["map1_01a","map2_02d","map2_18d","map2_09g","map2_10g","map2_11g","map2_12h","map2_17h","map2_14j","map2_15j","map2_16j"],"evidenceRefs":[{"path":"out/save_selector_selection_writers.json","fields":["currentFrontierRootWritersBeforeFirstReader","selectorRootContext","selectionBufferOffsetHex"]},{"path":"Hwanse2.exe","fields":["writer stream dwords","opcode handler table","activation context dwords"]}],"evidenceRefCount":2,"proofFound":false,"currentWriterPathProofFound":false,"failedCurrentWriterPathGateIds":["source-predecessor-current-producer","non-current-selected-pointer-store","runtime-branch-state-slot-proof","selected-root-execution"],"missingEvidence":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"remainingProofs":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"promotionStatus":"blocked-current-internal-only","setupSteps":[{"step":0,"va":5514352,"vaHex":"0x00542470","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""}],"followingSteps":[{"step":2,"va":5514360,"vaHex":"0x00542478","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":3,"va":5514364,"vaHex":"0x0054247c","value":2097171,"valueHex":"0x00200013","opcode":19,"opcodeHex":"0x13","entryVaHex":"0x0044076c","handlerVa":4241046,"handlerVaHex":"0x0040b696","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":"write matching party/runtime slot to selectionBuffer[0x20]"},{"step":4,"va":5514368,"vaHex":"0x00542480","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":5,"va":5514372,"vaHex":"0x00542484","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":6,"va":5514376,"vaHex":"0x00542488","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":7,"va":5514380,"vaHex":"0x0054248c","value":2097161,"valueHex":"0x00200009","opcode":9,"opcodeHex":"0x09","entryVaHex":"0x00440744","handlerVa":4238862,"handlerVaHex":"0x0040ae0e","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4,8],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040ae1f","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x39","vaHex":"0x0040ae47","streamOffset":4,"streamOffsetHex":"0x04"}],"stopReason":"multiple-advances","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"trace":[{"step":0,"va":5514352,"vaHex":"0x00542470","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":1,"va":5514356,"vaHex":"0x00542474","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":2,"va":5514360,"vaHex":"0x00542478","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":3,"va":5514364,"vaHex":"0x0054247c","value":2097171,"valueHex":"0x00200013","opcode":19,"opcodeHex":"0x13","entryVaHex":"0x0044076c","handlerVa":4241046,"handlerVaHex":"0x0040b696","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":"write matching party/runtime slot to selectionBuffer[0x20]"},{"step":4,"va":5514368,"vaHex":"0x00542480","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":5,"va":5514372,"vaHex":"0x00542484","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":6,"va":5514376,"vaHex":"0x00542488","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":7,"va":5514380,"vaHex":"0x0054248c","value":2097161,"valueHex":"0x00200009","opcode":9,"opcodeHex":"0x09","entryVaHex":"0x00440744","handlerVa":4238862,"handlerVaHex":"0x0040ae0e","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4,8],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040ae1f","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x39","vaHex":"0x0040ae47","streamOffset":4,"streamOffsetHex":"0x04"}],"stopReason":"multiple-advances","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"activationContext":{"contextRows":[{"vaHex":"0x0054243c","valueHex":"0x00542430","opcodeHex":"0x30","pointerHex":"0x00542430","meaning":""},{"vaHex":"0x0054244c","valueHex":"0x00542440","opcodeHex":"0x40","pointerHex":"0x00542440","meaning":""},{"vaHex":"0x00542454","valueHex":"0x00200010","opcodeHex":"0x10","meaning":"call helper 0x00410c90 for primaryBranchState with out-of-range argument 0x20; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime state"},{"vaHex":"0x0054245c","valueHex":"0x00200011","opcodeHex":"0x11","meaning":"read primaryBranchState[selectionBuffer[0x20]] and gate next stream value"},{"vaHex":"0x00542464","valueHex":"0x00200010","opcodeHex":"0x10","meaning":"call helper 0x00410c90 for primaryBranchState with out-of-range argument 0x20; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime state"},{"vaHex":"0x0054246c","valueHex":"0x00200009","opcodeHex":"0x09","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"activators":[{"vaHex":"0x0054246c","valueHex":"0x00200009","kind":"opcode09Mode0NextStream","meaning":"opcode 0x09 mode 0 advances to the next dword and stores that stream pointer in 0x0059de30"}]},"writerAlgorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode12Algorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode13Algorithm":"0x13 clears selectionBuffer[stream+2], scans 12 runtime slots, compares 0x0059e344 bytes with slot fields +0x4a/+0x48, and stores the matching slot index back to selectionBuffer[stream+2].","opcode10HelperRule":"0x10 passes stream+2 to helper 0x00410c90. The helper dispatches only argument values 0x00..0x0b; out-of-range values such as 0x20 return without filling the 12-slot table.","classification":"primary local writer before current frontier reader","nextQuestion":"Resolve the branch-state table values produced by the preceding 0x10 helper calls, then identify which slot 0x12 stores into selectionBuffer[0x20]."},{"writerVaHex":"0x0054247c","writerValueHex":"0x00200013","streamStartHex":"0x00542470","selectionBufferOffsetHex":"0x20","stateTable":"runtime slot match","rootHex":"0x00540714","rootLabels":["2:0"],"rootFieldMaps":["map1_01a","map2_02d","map2_18d","map2_09g","map2_10g","map2_11g","map2_12h","map2_17h","map2_14j","map2_15j","map2_16j"],"evidenceRefs":[{"path":"out/save_selector_selection_writers.json","fields":["currentFrontierRootWritersBeforeFirstReader","selectorRootContext","selectionBufferOffsetHex"]},{"path":"Hwanse2.exe","fields":["writer stream dwords","opcode handler table","activation context dwords"]}],"evidenceRefCount":2,"proofFound":false,"currentWriterPathProofFound":false,"failedCurrentWriterPathGateIds":["source-predecessor-current-producer","non-current-selected-pointer-store","runtime-branch-state-slot-proof","selected-root-execution"],"missingEvidence":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"remainingProofs":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"promotionStatus":"blocked-current-internal-only","setupSteps":[{"step":0,"va":5514352,"vaHex":"0x00542470","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":1,"va":5514356,"vaHex":"0x00542474","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":2,"va":5514360,"vaHex":"0x00542478","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""}],"followingSteps":[{"step":4,"va":5514368,"vaHex":"0x00542480","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":5,"va":5514372,"vaHex":"0x00542484","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":6,"va":5514376,"vaHex":"0x00542488","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":7,"va":5514380,"vaHex":"0x0054248c","value":2097161,"valueHex":"0x00200009","opcode":9,"opcodeHex":"0x09","entryVaHex":"0x00440744","handlerVa":4238862,"handlerVaHex":"0x0040ae0e","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4,8],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040ae1f","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x39","vaHex":"0x0040ae47","streamOffset":4,"streamOffsetHex":"0x04"}],"stopReason":"multiple-advances","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"trace":[{"step":0,"va":5514352,"vaHex":"0x00542470","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":1,"va":5514356,"vaHex":"0x00542474","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":2,"va":5514360,"vaHex":"0x00542478","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":3,"va":5514364,"vaHex":"0x0054247c","value":2097171,"valueHex":"0x00200013","opcode":19,"opcodeHex":"0x13","entryVaHex":"0x0044076c","handlerVa":4241046,"handlerVaHex":"0x0040b696","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":"write matching party/runtime slot to selectionBuffer[0x20]"},{"step":4,"va":5514368,"vaHex":"0x00542480","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":5,"va":5514372,"vaHex":"0x00542484","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":6,"va":5514376,"vaHex":"0x00542488","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":7,"va":5514380,"vaHex":"0x0054248c","value":2097161,"valueHex":"0x00200009","opcode":9,"opcodeHex":"0x09","entryVaHex":"0x00440744","handlerVa":4238862,"handlerVaHex":"0x0040ae0e","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4,8],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040ae1f","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x39","vaHex":"0x0040ae47","streamOffset":4,"streamOffsetHex":"0x04"}],"stopReason":"multiple-advances","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"activationContext":{"contextRows":[{"vaHex":"0x0054243c","valueHex":"0x00542430","opcodeHex":"0x30","pointerHex":"0x00542430","meaning":""},{"vaHex":"0x0054244c","valueHex":"0x00542440","opcodeHex":"0x40","pointerHex":"0x00542440","meaning":""},{"vaHex":"0x00542454","valueHex":"0x00200010","opcodeHex":"0x10","meaning":"call helper 0x00410c90 for primaryBranchState with out-of-range argument 0x20; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime state"},{"vaHex":"0x0054245c","valueHex":"0x00200011","opcodeHex":"0x11","meaning":"read primaryBranchState[selectionBuffer[0x20]] and gate next stream value"},{"vaHex":"0x00542464","valueHex":"0x00200010","opcodeHex":"0x10","meaning":"call helper 0x00410c90 for primaryBranchState with out-of-range argument 0x20; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime state"},{"vaHex":"0x0054246c","valueHex":"0x00200009","opcodeHex":"0x09","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"},{"vaHex":"0x00542474","valueHex":"0x00200012","opcodeHex":"0x12","meaning":"write selected active branch-state slot to selectionBuffer[0x20]"}],"activators":[{"vaHex":"0x0054246c","valueHex":"0x00200009","kind":"opcode09Mode0NextStream","meaning":"opcode 0x09 mode 0 advances to the next dword and stores that stream pointer in 0x0059de30"}]},"writerAlgorithm":"0x13 clears selectionBuffer[stream+2], scans 12 runtime slots, compares 0x0059e344 bytes with slot fields +0x4a/+0x48, and stores the matching slot index back to selectionBuffer[stream+2].","opcode12Algorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode13Algorithm":"0x13 clears selectionBuffer[stream+2], scans 12 runtime slots, compares 0x0059e344 bytes with slot fields +0x4a/+0x48, and stores the matching slot index back to selectionBuffer[stream+2].","opcode10HelperRule":"0x10 passes stream+2 to helper 0x00410c90. The helper dispatches only argument values 0x00..0x0b; out-of-range values such as 0x20 return without filling the 12-slot table.","classification":"runtime-slot local writer before current frontier reader","nextQuestion":"Treat this 0x13 value as an intermediate overwrite, then continue to the later 0x12 writer."},{"writerVaHex":"0x00542484","writerValueHex":"0x00200012","streamStartHex":"0x00542470","selectionBufferOffsetHex":"0x20","stateTable":"active branch-state table","rootHex":"0x00540714","rootLabels":["2:0"],"rootFieldMaps":["map1_01a","map2_02d","map2_18d","map2_09g","map2_10g","map2_11g","map2_12h","map2_17h","map2_14j","map2_15j","map2_16j"],"evidenceRefs":[{"path":"out/save_selector_selection_writers.json","fields":["currentFrontierRootWritersBeforeFirstReader","selectorRootContext","selectionBufferOffsetHex"]},{"path":"Hwanse2.exe","fields":["writer stream dwords","opcode handler table","activation context dwords"]}],"evidenceRefCount":2,"proofFound":false,"currentWriterPathProofFound":false,"failedCurrentWriterPathGateIds":["source-predecessor-current-producer","non-current-selected-pointer-store","runtime-branch-state-slot-proof","selected-root-execution"],"missingEvidence":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"remainingProofs":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"promotionStatus":"blocked-current-internal-only","setupSteps":[{"step":0,"va":5514352,"vaHex":"0x00542470","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":1,"va":5514356,"vaHex":"0x00542474","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":2,"va":5514360,"vaHex":"0x00542478","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":3,"va":5514364,"vaHex":"0x0054247c","value":2097171,"valueHex":"0x00200013","opcode":19,"opcodeHex":"0x13","entryVaHex":"0x0044076c","handlerVa":4241046,"handlerVaHex":"0x0040b696","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":"write matching party/runtime slot to selectionBuffer[0x20]"},{"step":4,"va":5514368,"vaHex":"0x00542480","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""}],"followingSteps":[{"step":6,"va":5514376,"vaHex":"0x00542488","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":7,"va":5514380,"vaHex":"0x0054248c","value":2097161,"valueHex":"0x00200009","opcode":9,"opcodeHex":"0x09","entryVaHex":"0x00440744","handlerVa":4238862,"handlerVaHex":"0x0040ae0e","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4,8],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040ae1f","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x39","vaHex":"0x0040ae47","streamOffset":4,"streamOffsetHex":"0x04"}],"stopReason":"multiple-advances","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"trace":[{"step":0,"va":5514352,"vaHex":"0x00542470","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":1,"va":5514356,"vaHex":"0x00542474","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":2,"va":5514360,"vaHex":"0x00542478","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":3,"va":5514364,"vaHex":"0x0054247c","value":2097171,"valueHex":"0x00200013","opcode":19,"opcodeHex":"0x13","entryVaHex":"0x0044076c","handlerVa":4241046,"handlerVaHex":"0x0040b696","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":"write matching party/runtime slot to selectionBuffer[0x20]"},{"step":4,"va":5514368,"vaHex":"0x00542480","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":5,"va":5514372,"vaHex":"0x00542484","value":2097170,"valueHex":"0x00200012","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":6,"va":5514376,"vaHex":"0x00542488","value":65569,"valueHex":"0x00010021","opcode":33,"opcodeHex":"0x21","entryVaHex":"0x004407a4","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":7,"va":5514380,"vaHex":"0x0054248c","value":2097161,"valueHex":"0x00200009","opcode":9,"opcodeHex":"0x09","entryVaHex":"0x00440744","handlerVa":4238862,"handlerVaHex":"0x0040ae0e","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4,8],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040ae1f","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x39","vaHex":"0x0040ae47","streamOffset":4,"streamOffsetHex":"0x04"}],"stopReason":"multiple-advances","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"}],"activationContext":{"contextRows":[{"vaHex":"0x0054243c","valueHex":"0x00542430","opcodeHex":"0x30","pointerHex":"0x00542430","meaning":""},{"vaHex":"0x0054244c","valueHex":"0x00542440","opcodeHex":"0x40","pointerHex":"0x00542440","meaning":""},{"vaHex":"0x00542454","valueHex":"0x00200010","opcodeHex":"0x10","meaning":"call helper 0x00410c90 for primaryBranchState with out-of-range argument 0x20; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime state"},{"vaHex":"0x0054245c","valueHex":"0x00200011","opcodeHex":"0x11","meaning":"read primaryBranchState[selectionBuffer[0x20]] and gate next stream value"},{"vaHex":"0x00542464","valueHex":"0x00200010","opcodeHex":"0x10","meaning":"call helper 0x00410c90 for primaryBranchState with out-of-range argument 0x20; helper dispatch only handles 0x00..0x0b, so the table is left as inherited runtime state"},{"vaHex":"0x0054246c","valueHex":"0x00200009","opcodeHex":"0x09","meaning":"store runtime stream pointer mode 0x00 into 0x0059de30"},{"vaHex":"0x00542474","valueHex":"0x00200012","opcodeHex":"0x12","meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"vaHex":"0x0054247c","valueHex":"0x00200013","opcodeHex":"0x13","meaning":"write matching party/runtime slot to selectionBuffer[0x20]"}],"activators":[{"vaHex":"0x0054246c","valueHex":"0x00200009","kind":"opcode09Mode0NextStream","meaning":"opcode 0x09 mode 0 advances to the next dword and stores that stream pointer in 0x0059de30"}]},"writerAlgorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode12Algorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode13Algorithm":"0x13 clears selectionBuffer[stream+2], scans 12 runtime slots, compares 0x0059e344 bytes with slot fields +0x4a/+0x48, and stores the matching slot index back to selectionBuffer[stream+2].","opcode10HelperRule":"0x10 passes stream+2 to helper 0x00410c90. The helper dispatches only argument values 0x00..0x0b; out-of-range values such as 0x20 return without filling the 12-slot table.","classification":"primary local writer before current frontier reader","nextQuestion":"Resolve the branch-state table values produced by the preceding 0x10 helper calls, then identify which slot 0x12 stores into selectionBuffer[0x20]."},{"writerVaHex":"0x005428bc","writerValueHex":"0x00208212","streamStartHex":"0x005428b4","selectionBufferOffsetHex":"0x20","stateTable":"active branch-state table","rootHex":"0x00540714","rootLabels":["2:0"],"rootFieldMaps":["map1_01a","map2_02d","map2_18d","map2_09g","map2_10g","map2_11g","map2_12h","map2_17h","map2_14j","map2_15j","map2_16j"],"evidenceRefs":[{"path":"out/save_selector_selection_writers.json","fields":["currentFrontierRootWritersBeforeFirstReader","selectorRootContext","selectionBufferOffsetHex"]},{"path":"Hwanse2.exe","fields":["writer stream dwords","opcode handler table","activation context dwords"]}],"evidenceRefCount":2,"proofFound":false,"currentWriterPathProofFound":false,"failedCurrentWriterPathGateIds":["source-predecessor-current-producer","non-current-selected-pointer-store","runtime-branch-state-slot-proof","selected-root-execution"],"missingEvidence":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"remainingProofs":["source or predecessor opcode path that produces current root 2:0 before route entry","non-current opcode 0x09/store path writing current root/range into selected pointer 0x0059de30","runtime branch-state slot values proving current local writers choose the route slot on the normal route path","selected-root execution proof tying current writer paths to an external trigger"],"promotionStatus":"blocked-current-internal-only","setupSteps":[{"step":0,"va":5515444,"vaHex":"0x005428b4","value":1868050,"valueHex":"0x001c8112","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x1c]"},{"step":1,"va":5515448,"vaHex":"0x005428b8","value":1048576,"valueHex":"0x00100000","opcode":0,"opcodeHex":"0x00","entryVaHex":"0x00440720","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""}],"followingSteps":[{"step":3,"va":5515456,"vaHex":"0x005428c0","value":2097152,"valueHex":"0x00200000","opcode":0,"opcodeHex":"0x00","entryVaHex":"0x00440720","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":4,"va":5515460,"vaHex":"0x005428c4","value":15237393,"valueHex":"0x00e88111","opcode":17,"opcodeHex":"0x11","entryVaHex":"0x00440764","handlerVa":4240614,"handlerVaHex":"0x0040b4e6","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[8],"canJumpToDwordAtPlus4":true,"writesStream":true,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b4f7","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x37","vaHex":"0x0040b51d","streamOffset":2,"streamOffsetHex":"0x02"},{"handlerOffsetHex":"0x5f","vaHex":"0x0040b545","streamOffset":4,"streamOffsetHex":"0x04"}],"branchTargetHex":"0x00000001","fallthroughVaHex":"0x005428cc","branchNote":"if table[(context+0xa8)[stream+2]] == 1 then fall through +8; table is 0x59e370 when stream+1 is 0, otherwise 0x59e360; else jump to dword [stream+4]","stopReason":"branch-or-fallthrough","meaning":"read secondaryBranchState[selectionBuffer[0xe8]] and gate next stream value"}],"trace":[{"step":0,"va":5515444,"vaHex":"0x005428b4","value":1868050,"valueHex":"0x001c8112","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x1c]"},{"step":1,"va":5515448,"vaHex":"0x005428b8","value":1048576,"valueHex":"0x00100000","opcode":0,"opcodeHex":"0x00","entryVaHex":"0x00440720","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":2,"va":5515452,"vaHex":"0x005428bc","value":2130450,"valueHex":"0x00208212","opcode":18,"opcodeHex":"0x12","entryVaHex":"0x00440768","handlerVa":4240735,"handlerVaHex":"0x0040b55f","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b570","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x46","vaHex":"0x0040b5a5","streamOffset":2,"streamOffsetHex":"0x02"}],"meaning":"write selected active branch-state slot to selectionBuffer[0x20]"},{"step":3,"va":5515456,"vaHex":"0x005428c0","value":2097152,"valueHex":"0x00200000","opcode":0,"opcodeHex":"0x00","entryVaHex":"0x00440720","handlerVa":4203423,"handlerVaHex":"0x0040239f","handlerSection":".text","isDefaultHandler":true,"fixedAdvances":[4],"canJumpToDwordAtPlus4":false,"writesStream":false,"streamReads":[],"meaning":""},{"step":4,"va":5515460,"vaHex":"0x005428c4","value":15237393,"valueHex":"0x00e88111","opcode":17,"opcodeHex":"0x11","entryVaHex":"0x00440764","handlerVa":4240614,"handlerVaHex":"0x0040b4e6","handlerSection":".text","isDefaultHandler":false,"fixedAdvances":[8],"canJumpToDwordAtPlus4":true,"writesStream":true,"streamReads":[{"handlerOffsetHex":"0x11","vaHex":"0x0040b4f7","streamOffset":1,"streamOffsetHex":"0x01"},{"handlerOffsetHex":"0x37","vaHex":"0x0040b51d","streamOffset":2,"streamOffsetHex":"0x02"},{"handlerOffsetHex":"0x5f","vaHex":"0x0040b545","streamOffset":4,"streamOffsetHex":"0x04"}],"branchTargetHex":"0x00000001","fallthroughVaHex":"0x005428cc","branchNote":"if table[(context+0xa8)[stream+2]] == 1 then fall through +8; table is 0x59e370 when stream+1 is 0, otherwise 0x59e360; else jump to dword [stream+4]","stopReason":"branch-or-fallthrough","meaning":"read secondaryBranchState[selectionBuffer[0xe8]] and gate next stream value"}],"activationContext":{"contextRows":[{"vaHex":"0x00542880","valueHex":"0x00210012","opcodeHex":"0x12","meaning":"write selected active branch-state slot to selectionBuffer[0x21]"},{"vaHex":"0x00542888","valueHex":"0x00210013","opcodeHex":"0x13","meaning":"write matching party/runtime slot to selectionBuffer[0x21]"},{"vaHex":"0x00542890","valueHex":"0x00210012","opcodeHex":"0x12","meaning":"write selected active branch-state slot to selectionBuffer[0x21]"},{"vaHex":"0x005428a0","valueHex":"0x0054285c","opcodeHex":"0x5c","pointerHex":"0x0054285c","meaning":""},{"vaHex":"0x005428a8","valueHex":"0x00200020","opcodeHex":"0x20","meaning":"dispatch/load runtime object or party-member script references"},{"vaHex":"0x005428b0","valueHex":"0x005428a4","opcodeHex":"0xa4","pointerHex":"0x005428a4","meaning":""},{"vaHex":"0x005428b4","valueHex":"0x001c8112","opcodeHex":"0x12","meaning":"write selected active branch-state slot to selectionBuffer[0x1c]"}],"activators":[]},"writerAlgorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode12Algorithm":"0x12 selects primaryBranchState when stream+1 is 0, otherwise secondaryBranchState. If runtime flag 0x00457744 is set it starts from the existing selectionBuffer[stream+2], then searches the 12-slot table for a nonzero state and stores that slot index back to selectionBuffer[stream+2].","opcode13Algorithm":"0x13 clears selectionBuffer[stream+2], scans 12 runtime slots, compares 0x0059e344 bytes with slot fields +0x4a/+0x48, and stores the matching slot index back to selectionBuffer[stream+2].","opcode10HelperRule":"0x10 passes stream+2 to helper 0x00410c90. The helper dispatches only argument values 0x00..0x0b; out-of-range values such as 0x20 return without filling the 12-slot table.","classification":"secondary local writer before current frontier reader","nextQuestion":"Resolve the branch-state table values produced by the preceding 0x10 helper calls, then identify which slot 0x12 stores into selectionBuffer[0x20]."}]