̩Lj&WdZddlmZddlZddlZddlZddlmZddlm Z ddl m Z ddl m Z mZmZddlmZmZmZdd lmZmZmZmZmZe ej7j8d Zed z Zed z Zed z Z dZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ)dZ*d'd(dZ+d)dZ,d*dZ-d+dZ.d,d-dZ/d.dZ0d/dZ1d0dZ2d1d Z3d2d!Z4d3d"Z5d4d#Z6d5d$Z7d6d%Z8e9d&k(r e:e8y)7aReview selected-root/add-descriptor candidates for the normal HUD menu opener. The descriptor stack is grounded and the previous frontier excluded direct input/descriptor intersections as the normal-field ESC/X opener. This pass checks the next static frontier: * Is the top menu object-construction sequence duplicated anywhere else? * Do selected-root tables point at that sequence or at its exact region child initializers? * Do runtime descriptor add commands (opcode 0x62) occur in a context that also reaches the top menu object sequence? Promotion is intentionally strict. A row is not considered an opener unless it connects descriptor add/root selection to the exact #6/#3/#4 top-menu construction sequence, not merely to a prompt/event stream. ) annotationsN)Counter)Path)Any)is_asset_ascii_false_opcodemonotonic_u16_table_aroundscript_data_sections) offset_to_va read_sections va_to_offset)c_string_previewdecode_command decode_streamis_vasection_name_forz Hwanse2.exeoutwebilMiMiXMiMiHMiM8-Js$M(XM(M( sXM(M( sHM(M( c|dSd|d|dS)N-0x0x)valuewidths 5tools/build_hud_menu_selected_root_frontier_review.pyhxrMs#-3;r%%z):%;;cVtj|ddSt|dS)NT)quote)htmlescapestr)rs rhr'Qs% ;;U]r$ GGE $ GGr cg}t|D]u}t|d}|t|dz}|j|||}|dk7s;t||}||j ||j||dz|}|dk7r;w|S)Nrawraw_sizer)r intfindr append) exesectionspatternhitssectionstartendposvas r scan_patternr8UsD'12GEN#c'*-..hhws+Rih,B~ B((7C!GS1C Ri 2 Kr ctjd|}g}|j|}|dk7r:t||}||j ||j||dz}|dk7r:|S)N KKOhhvsQw' ) Kr c t||}|gSg}t|D]K}||dzzdzt|kDr|S|jt j d|||dzzdM|S)Nr:r)r rangelenr.r; unpack_from)r/r0table_va max_valuesoffvaluesindexs rread_table_valuesrJos x *C { Fz"I ?Q S )  M  f((sC%!)ODQGHI Mr c|t|t||t||d}|drt|||}|r||d<|S)N)rvalueHexr3isVarMtext)rrrr )r/r0rrowrNs r preview_valuerP{sOuI#He4h& C  6{Xu5 CK Jr cg}t|D]V}t|d}|t|dz}|jd||}|dk7s$>$>!" #, !,=(((7C!GS1CARi $2J K9!C-js E*E<* E98E9c dt||}|(|td|dz tt||dztt tdtdz Dcgc]!}t jd||dzd#c}vrytfd tttfDry d |cxkrd kry dvrdvrytfddDryycc}w)Nr r`r:rAtop-menu-pointer-nearbyc3NK|]}tjd|vyw)r:N)r;r<).0rwindows r z'classify_add_context..s' Q%6;;tU #v - Qs"%top-menu-region-script-nearbyri.s 9d46> 9s)dfrzactive-object-motion-contextzgeneric-runtime-index-add) r maxminrCrfrBr;unpackanyrirjrk)r/r0r7rGrIrxs @rclassify_add_contextrs F x $C SC"H%s3s8S3Y'?@]bcfghjmntjuxyjycz]{|TY dF54K LQ O||( QsHb$QM&} &()+B+20273-.@+?Xr+R+;Hb+I  ((7C!GS1CIRi (2R >r cg}|D]} t|||d}|jdg}|j|t ||ddDcgc]E}|jd|jd|jd|jdd Gc}d |S#t$r1}|j|t |t |dYd}~d}~wwxYwcc}w) N) max_commandscommands)startVa startVaHexerrorr opcodeHex opcodeNamesummary)rrrr)rrr)rrdrar.rr&) r/r0startsrlr4streamrexccommands rdecode_hit_contextsrs!#D  "3%bIFzz*b1H   i$,CR= ")W!5%,[[%=&-kk,&?#*;;y#9    , K%  KKEESQTXV W  s!BA C C''CCctj}t|}t||t}t||t }t||t }t||}t||\}}td|D}td|D} td|D} |D cgc] } | ddvr|  } } |D cgc]} | ds| dr| } } |D cgc]} | ds| d d k(r| }} id t|d |Dcgc] }t|c}d t|d|Dcgc] }t|c}dt|d|Dcgc] }t|c}dt|dt| dt|dt|dt|dt| dtt|jdtt| jdtt| jdt||t Dcgc] }t|c}dd}ddd|t#|||t#|||t#|||d | || |t|D cic]}||D cgc] } | d|k(s | c} dd!!c} }gd"gd#d$ Scc} wcc} wcc} wcc}wcc}wcc}wcc}wcc} wcc} }w)%Nc3&K|] }|d yw)rNrrwrOs rryzbuild_report..-sKS^Kc3&K|] }|d ywrNrrs rryzbuild_report...sN3S.Nrc3&K|] }|d ywrrrs rryzbuild_report../s%`Cc,&7%`rr>rurzr^r`r_rYidGexactTopMenuPatternHitCountexactTopMenuPatternHitsHexexactRightPanelPatternHitCountexactRightPanelPatternHitsHex shiftedRightPanelPatternHitCountshiftedRightPanelPatternHitsHexselectedRootStoreCountselectedRootPromotionCountintroTitleSelectedRootRowsdescriptorAddCommandCount#descriptorAddRejectedUnalignedCount!descriptorAddPromotedContextCountdescriptorAddContextCountsdescriptorAddOperandCounts"descriptorAddRejectedOperandCountstopMenuSequenceAllRefsHexdecisionuselected-root/table scan과 global 0x62 add-descriptor command scan에서도 normal-field ESC/X opener는 아직 증명되지 않았다. 정확한 #6/#3/#4 top-menu 조립 패턴은 0x004ddc84 1건뿐이고, selected-root table 중 top-menu sequence나 exact region scripts로 승격되는 행은 없다. 기존 0x47/0x4d operand 후보는 4-byte command가 아니라 dword pointer table 내부 unaligned byte로 재분류했다.z-hwanse-hud-menu-selected-root-frontier-reviewz5tools/build_hud_menu_selected_root_frontier_review.pyz"normal-field-opener-still-unproven) exactTopMenuexactRightPanelshiftedRightPanel )z60x004ddc6c direct dword ref remains data-context only.zVExact #6/#3/#4 top-menu construction pattern is not duplicated in another data stream.zaSelected-root tables do not contain 0x004ddc6c or the exact #6/#3/#4 child initializer addresses.za0x62 add-descriptor command-like hits exist, but none occur in a top-menu pointer/region context.zwHigh operands 0x47 and 0x4d are rejected as unaligned bytes inside dword pointer tables, not real opcode 0x62 commands.)ztTrace the producer of the mode/state byte that chooses a selected-root table before descriptor add commands execute.zFollow VM opcode 0x81 table selectors whose selected entries later execute 0x62, but do not promote them unless they connect to the exact menu region construction.zvInspect higher-level field mode dispatcher roots that call or schedule command streams after cancel/ESC edge handling.) kindsourcestatusrpatternHitContexts#selectedRootRowsWithTopMenuEvidencer descriptorAddPromotedContextRows#rejectedDescriptorAddFalsePositivesdescriptorAddSamplesByContextnegativeEvidence nextFrontier)EXE read_bytesr r8EXACT_TOP_MENU_PATTERNEXACT_RIGHT_PANEL_PATTERNSHIFTED_RIGHT_PANEL_PATTERNrprrrCrrcsorteditemsr?rfr)r/r0exact_top_hitsexact_right_hitsshifted_right_hitsselected_root_rowsdescriptor_add_rowsrejected_descriptor_add_rowscontext_countsoperand_countsrejected_operand_countsrOpromoted_add_rowsselected_root_promotionsintro_parent_rowshitrefrrs r build_reportr#s .. CS!H!#x1GHN#C3LM%c85PQ23A8TUXZb8c55K7JKKNN:MNNN%%`C_%``'  y>Y Y &   ( )S1O-P   &  4 5[9IZ9W  %s>':$.&I3r#w&I )#.>*? (=M)Nc"S')N  +C0B,C  *?Q+RBsG+R  !#&8"9 %c*B&C %c*;&< $S)<%= .s3O/P ,S1B-C %d6.2F2F2H+I&J %d6.2F2F2H+I&J -d6:Q:W:W:Y3Z.[ $XWk9l%m#bg%m!"  K%G4@I6/X~N23BRS!4S(DV!W 0H&7,=/K".1*  %8VcC NgJ1J6J;'K K'K < K K K KKc|d}d|dfd|dfd|dfd|dfd |d fd |d fd |dfg}djd|D}djd|ddD}djd|djD}djd|dddD}djd|dD}djd|dD}djd|dD} tj|d } d!t |d"d#|d$|xsd%d&|d'|xsd(d)|xsd*d+|d,| d-| d.S)/Nrrzexact top patternrzselected-root rowsrzselected-root promotionsrz 0x62 commandsrz 0x62 rejectedrz 0x62 promotedrr"c3XK|]"\}}dt|dt|d$yw)z
z z
Nr')rwkvs rryzrender_html..s/gTXTUWX+AaD6AaD6Og(*c 3K|]J}dt|ddttj|jdgddddLyw) rrNrVF ensure_ascii )r'jsondumpsrdrs rryzrender_html..sb   s<()*+CGGJ3CR8uMNOP sAArrc3XK|]"\}}dt|dt|d$yw)z rNr)rwkeyrs rryzrender_html..s3 C 1S6()AeH:Z8rrc3K|]g}dt|ddt|jddt|ddttj|ddd d d iyw) rrZz
slot rWzr\rr]NFrr)r'rdrrrs rryzrender_html..s   s>*+,,
rrrz
aligned rrrNrXFrr)r'rrrs rryzrender_html..s   s7|_%[3|3D1E0FGX 21S5H3I2JKC 56r:OPQR sA0A2rc3:K|]}dt|dywz
  • z
    • Nrrwitems rryzrender_html..sU$$qwiu-Urc3:K|]}dt|dywrrrs rryzrender_html..sPagYe,PrrFra HUD Menu Selected Root Frontier Review
    index opener frontier HUD menu preview descriptor stack JSON

    HUD Menu Selected Root Frontier Review

    rz

    z

    Exact Top-Menu Pattern Hits

    z=z
    startdecoded commands
    No exact top-menu pattern hits.

    0x62 Descriptor Add Contexts

    z
    contextcount

    Rejected 0x62 False Positives

    z8z
    hitreasonpointer table preview
    No rejected unaligned hits

    Intro/Title Selected-Root Rows

    z"zQ
    commandtablevalues
    None

    Negative Evidence

      zB

    Next Frontier

      z

    Raw JSON

    
  
    

    



)joinrrrr')reportr
card_itemscards
exact_rowscontext_rows
selected_rows
rejected_rows	negativesfrontierpayloads           rrender_htmlrzsHYG	6(#$	g&CDE	w'?@A	#W-I%JK	'"=>?	'"GHI	'"EFGJ
GGg\fggE
./?J77!">?EEGLGG67<
MGG?@
MU&AS:TUUIwwP9OPPHjje4G"D
wRS]S`a`RaaIJVWderepvpdqqXYfYNjNXOO	
	

89@yAEGGr c2t}tjdtjdtdzj	tj|dddzd	td
zj	t|d	tdy)
NT)exist_okz+hud_menu_selected_root_frontier_review.jsonFr)rindent
zutf-8)encodingz+hud_menu_selected_root_frontier_review.htmlz)hud_menu_selected_root_frontier_review okr)	rOUTmkdirWEB
write_textrrrprint)rs rmainrs
^FIItIIItI88DD

6a84?E	88DD[QWEXcjDk	
56r __main__)rX)rz
int | Nonerr,returnr&)rrrr&)r/bytesr0list[dict[str, Any]]r1rr	list[int])r/rr0rrr,rr)r)
r/rr0rrEr,rFr,rr)r/rr0rrr,rdict[str, Any])r/rr0rrr)r/rr0rr7r,rr&)r/rr0rr7r,rr)r/rr0rrz1tuple[list[dict[str, Any]], list[dict[str, Any]]])r/rr0rrrrr)rr)rrrr&)rr,);__doc__
__future__rr$rr;collectionsrpathlibrtypingr"build_menu_descriptor_stack_reviewrrr	probe_exe_scene_tablesr
rr'summarize_object_payload_442c75_callersr
rrrr__file__resolveparentsROOTrrrrfrirjrkSHIFTED_REGION3_SCRIPT_VASHIFTED_REGION4_SCRIPT_VArgrrrrr'r8r?rJrPrprrrrrrr__name__
SystemExitrr rr0s* #

MLH~''*
]
Ul
Ul!'''&&%/"<H		'T'$(,^6Tnqh

z
TV
r