secondaryBranchState 0x0059e360..0x0059e36b; scan 0x0059e300..0x0059e36b; promotion status blocked.
rows: 356; address-like touching bases: 5; direct overlap writes: 0; touch block write candidates: 0; full-cover block write candidates: 0.
No broad block write candidate was found for secondaryBranchState 0x0059e360..0x0059e36b. The scan covers dword immediates in 0x0059e300..0x0059e36b and checks address-like uses with nearby size immediates plus call/rep/stos transfer instructions, as well as direct stores that overlap the 12-byte table. It found 5 address-like base ref(s) that could point at or before the table, but none has a nearby size immediate large enough to touch the table, so they are not block-write candidates. This removes the obvious static memset/memcpy-style reset shape, but it still does not prove selector runtime order or a strict map1_01a source hotspot.
| address | ref | kind | access | touch size | cover size | sizes | transfers | touch candidate | full cover | instruction |
|---|---|---|---|---|---|---|---|---|---|---|
0x0059e310 | 0x004232a4 | mov-reg-imm32 | address | 0x00000051 | 0x0000005c | - | call-iat@0x004232b1, call-iat@0x004232c3, call-rel32@0x004232cb, call-iat@0x004232e8 | False | False | mov eax, imm32 |
0x0059e310 | 0x004232db | mov-reg-imm32 | address | 0x00000051 | 0x0000005c | - | call-iat@0x004232b1, call-iat@0x004232c3, call-rel32@0x004232cb, call-iat@0x004232e8, call-iat@0x004232fa, call-rel32@0x00423302, call-iat@0x0042330e | False | False | mov eax, imm32 |
0x0059e360 | 0x0040b4ae | mov-reg-imm32 | address | 0x00000001 | 0x0000000c | - | call-rel32@0x0040b4d2 | False | False | mov eax, imm32 |
0x0059e360 | 0x0040b502 | mov-stack-imm32 | address | 0x00000001 | 0x0000000c | - | call-rel32@0x0040b4d2 | False | False | mov dword ptr [ebp+disp8], imm32 |
0x0059e360 | 0x0040b57b | mov-stack-imm32 | address | 0x00000001 | 0x0000000c | - | - | False | False | mov dword ptr [ebp+disp8], imm32 |