Save Selector Opcode 0x20 Descriptor Scripts
route map1_01a -> map2_02d; descriptor table 0x00442d95; descriptor rows 12; descriptor+4 field-map CNS records 0; descriptor+4 current frontier direct refs 0; descriptor+4 selection-buffer opcode-shaped rows 126; all descriptor-script selection-buffer opcode-shaped rows 362; descriptor+4 context+0xa8 setter-shaped rows 37; descriptor+4 context+0xa8 non-pointer setter-shaped rows 16; descriptor+4 non-pointer context+0xa8 operand sources context-f2-runtime-object-pointer:16; descriptor+4 specific gate base proven False; descriptor+4 gate writers 0; descriptor+4 gate readers 0; all descriptor-script gate writers 0; all descriptor-script gate readers 0; all descriptor-script specific gate base proven False; proofFound False; promotion status blocked.
descriptor+4 encoded route-target scalars 0/0/0 (no-encoded-route-target-scalars-in-descriptor-scripts); all descriptor-script encoded route-target scalars 0/0/0 (no-encoded-route-target-scalars-in-descriptor-scripts).
The descriptor table reached by opcode 0x20 mode 0 resolves to character, battle, or object scripts, not field-map transition records. In the scanned descriptor+4 scripts there are zero field-map CNS records and zero direct or encoded-scalar references to the current map1_01a frontier leaf/reader/source/target addresses. They do contain base-selector opcode-shaped rows, but most 0x28/0x40/0x44 rows are pointer dwords whose low byte merely collides with a handler opcode. The non-pointer context+0xa8 setter-shaped rows are only 0x42 mode-0 context+0xf2 runtime object selection, not a fixed route/gate base or gate-specific setup. None of the descriptor+4 selection-buffer reader/writer rows targets gate offsets 0xe8 or 0xea, and the same gate-offset count is zero across descriptor+0, descriptor+4, and descriptor+8 scripts. So a specific gate base is not proven. This descriptor path therefore does not promote map1_01a -> map2_02d; runtime active order/count and strict hotspot evidence are still required.
Failed Gates
runtime-active-orderdescriptor-script-field-map-or-frontier-proofdescriptor-script-gate-base-proofstrict-source-hotspot
Missing Evidence
- runtime active order/count selecting the current descriptor+4 script
- field-map/frontier/encoded route-target evidence in descriptor scripts
- descriptor script reader/writer hitting gate offsets 0xe8/0xea with a specific base
- strict map1_01a source hotspot or equivalent route trigger
Evidence Refs
Hwanse2.exe: descriptor table, script dword, CNS, and gate-offset scansout/save_selector_opcode20_slot_descriptor_writers.json: descriptor table and runtime active-order writer pathout/save_selector_current_root_frontier_paths.json: current frontier/root/source/target reference addresses for encoded-target scans
Current Frontier Refs
| label | VA |
|---|
| currentRoot | 0x00540714 |
| frontierLeaf | 0x00542ae8 |
| frontierReader | 0x00542b0c |
| sourceRecord | 0x00542b44 |
| targetRecord | 0x00542bac |
Script Slot Aggregate
| slot | scripts | field maps | frontier refs | encoded raw/proof/promoting | selection opcodes | gate writers | gate readers | context+0xa8 setters | non-pointer context+0xa8 setters |
|---|
| script+0 | 12 | 0 | 0 | 0/0/0 | 127 | 0 | 0 | 36 | 16 |
| script+4 | 12 | 0 | 0 | 0/0/0 | 126 | 0 | 0 | 37 | 16 |
| script+8 | 12 | 0 | 0 | 0/0/0 | 109 | 0 | 0 | 48 | 8 |
Descriptor+4 Context Base Histogram
| base expression | shaped row count | non-pointer row count | last-shaped descriptor count | last-non-pointer descriptor count |
|---|
0x0059e310 | 12 | 0 | 3 | 0 |
dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 16 | 16 | 4 | 8 |
dword[0x0059dd70 + stream[2]*4] | 9 | 0 | 3 | 0 |
Descriptor+4 Non-Pointer Context+0xa8 Operand Sources
| operand source | row count |
|---|
context-f2-runtime-object-pointer | 16 |
Descriptor Rows
| index | descriptor | script+0 | script+0 CNS | script+4 | script+4 CNS | script+4 field maps | script+4 frontier refs | script+4 encoded raw/proof/promoting | script+4 context+0xa8 setters | script+4 non-pointer context+0xa8 setters | script+4 last non-pointer context+0xa8 base | script+4 gate writers | script+4 gate readers |
|---|
| 0 | 0x004f867c | 0x004f8dd8 | cara_at1.cns | 0x004f8df8 | - | 0 | 0 | 0/0/0 | 5 | 0 | - | 0 | 0 |
| 1 | 0x004e75a0 | 0x004e785c | cara_rs1.cns | 0x004e787c | - | 0 | 0 | 0/0/0 | 0 | 0 | - | 0 | 0 |
| 2 | 0x00546004 | 0x005462fc | cara_sm1.cns | 0x0054631c | - | 0 | 0 | 0/0/0 | 4 | 0 | - | 0 | 0 |
| 3 | 0x004b218c | 0x004b35d4 | btl_etc.cns, btl_efc.cns | 0x004b3604 | - | 0 | 0 | 0/0/0 | 0 | 0 | - | 0 | 0 |
| 4 | 0x004d5868 | 0x004d5ca8 | btl_at.cns | 0x004d5cc8 | - | 0 | 0 | 0/0/0 | 7 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 5 | 0x004da88c | 0x004dac1c | btl_rs.cns | 0x004dac3c | - | 0 | 0 | 0/0/0 | 6 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 6 | 0x00524060 | 0x00524350 | btl_sm.cns | 0x00524370 | - | 0 | 0 | 0/0/0 | 4 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 7 | 0x004d21c0 | 0x004d222c | zsa_saru.cns | 0x004d224c | - | 0 | 0 | 0/0/0 | 2 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 8 | 0x0048c094 | 0x0048c144 | zsl_yoi.cns | 0x0048c164 | - | 0 | 0 | 0/0/0 | 2 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 9 | 0x0055734c | 0x005573cc | zsa_mi.cns | 0x005573ec | - | 0 | 0 | 0/0/0 | 3 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 10 | 0x0052dad8 | 0x0052db58 | zsa_iwa.cns | 0x0052db7c | - | 0 | 0 | 0/0/0 | 2 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |
| 11 | 0x004aab00 | 0x004aab84 | zsa_kika.cns | 0x004aaba4 | - | 0 | 0 | 0/0/0 | 2 | 2 | dword[0x0059db30 + context[0xf2]*4] or dword[0x0059db30 + stream[2]*4] | 0 | 0 |