6LjKdZddlmZddlZddlZddlZddlmZddlm Z ddl m Z m Z m Z ddlmZeej#j$dZed z Zed z Zed z Zd Zd ZdZdZdZdZdZdZdZdZ dZ!dZ"d#d$dZ#d%dZ$d&dZ%d'dZ&d'dZ'd(d)dZ( d* d+dZ)d,dZ*d-d Z+d.d!Z,e-d"k(r e.e,y)/aClassify the parent context of the grounded HUD top-menu sequence. The top menu object sequence at 0x004ddc6c draws/attaches the #6/#3/#4 HUD menu regions. Earlier scans proved the payload, but not the normal-field ESC/X opener that schedules it. This review keeps those two facts separate: * 0x004ddc6c is the grounded top-menu construction sequence. * Its only direct pointer reference is the operand of a VM call command inside 0x0047e6a0, whose own parent context is not referenced as a normal field input/open-menu root. ) annotationsN)Path)Any) offset_to_va read_sections va_to_offset) decode_streamz Hwanse2.exeoutwebilMiGiGi|GiGiGi$Gi,JiMiXMiMihMc|dSd|d|dS)N-0x0x)valuewidths 3tools/build_hud_menu_top_sequence_context_review.pyhxr,s#-3;r%%z):%;;cVtj|ddSt|dS)NT)quote)htmlescapestr)rs rhr0s% ;;U]r$ GGE $ GGrc^t||}|tdt|d||||zS)NzVA z is outside raw sections)r ValueErrorr)exesectionsvasizeoffsets rread_atr&4s= (B 'F ~3r"vh&>?@@ vv} %%rctjd|}g}|j|}|dk7r:t||}||j ||j||dz}|dk7r:|S)N KKOhhvsQw' ) KrcTtjd|}g}|D]}|jddk7rt|d}|t|dz}|j |||}|dk7sPt ||} | |j | |j ||dz|}|dk7r;|S)Nr(namez.textrawraw_sizer)r )r*r+getintr,rr-) r!r"rr.r/sectionstartendr0r#s r text_refsr;Gs [[u %FD 1 ;;v ' ) GEN#c'*-..hhvuc*Rih,B~ B((637C0C Ri 1 Krcjt||||d}|t||jdd|jdgDcgc]e}|jd|jd|jd|jd |jd |jd d gc}d Scc}w)Ni`) max_commands max_bytesdecodedCommandCountrcommandsvaHex opcodeHex opcodeNamelengthsummaryrawHex)rArBrCrDrErF)startVa startVaHexr?r@)r rr6)r!r"start_var=decodedcommands rcommand_digestrLXsC8,Z_`Gl&{{+@!D#;;z26  !W-$[[5%kk,7!++h/";;y1!++h/       sA*B0 ct||}|gS|||z||z|z}g}|jdD]} | s|r|S t| dk(rtjd| ddkDr6t d| Dr|S | j d} d| vrd | vr| js|S|j| t||k\s|S|S#t$rY|SwxYw) Nr(ri@c34K|]}|dkxs|dkDyw) ~Nr).0bytes r z c_string_list..s C CCcz tj}t|}t||t}t||t }t||t }t||t}t||t}t||t}t||t}t||t} t||t} t||td} t||t d} t#j$d| dd} | dddk(xr| tk(xrt&|v}|t&gk(}d}idt)td t+|d |Dcgc] }t)|c}d t+t-||td t)t d t+|d|Dcgc] }t)|c}dt)t dt+|d|Dcgc] }t)|c}dt)tdt+|d|Dcgc] }t)|c}dt)tdt+|d|Dcgc] }t)|c}dt)t t)| ||t+|t+|t+| t+| t)t| hdj/t1| rdnd|dd }ddd |t3||td!"t3||t d"t3||td"t3||t d#"t3||td!"d$d%t)t|Dcgc] }t)|c}d&d'd(t)t |Dcgc] }t)|c}d)d'd*t)t|Dcgc] }t)|c}d+d'd,t)t |Dcgc] }t)|c}d-d'd.t)t|Dcgc] }t)|c}d/d'd0t)tt||tDcgc] }t)|c}d1j5| dd2d'd3t)t|Dcgc] }t)|c}d4d'd5t)t|Dcgc] }t)|c}d4d'd6t)t| Dcgc] }t)|c}d4d'd7t)t| Dcgc] }t)|c}d8d'g gd9gd:d;Scc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}wcc}w)aaa.cns title.cns compile.cns logo_00.cnszintro/title-resource-contextzunclassified-parent-contexta0x004ddc6c top-menu sequence is grounded as the #6/#3/#4 menu construction stream, but its only direct reference is the inline operand of the 0x04 call command at 0x0047e6ac. The immediate pre-wrapper gate at 0x0047e688 is now decoded as two 0x6e active group-key branches and one 0xe6 active-descriptor-count branch, all targeting the stop/jump loop at 0x0047e67c when the gate fails. The nearby parent resource list contains intro/title assets such as compile.cns, aaa.cns, logo_00.cns, title.cns, and btl_k*. The wrapper 0x0047e6a0 and parent context 0x0047e624 have no direct pointer refs, so this pass does not prove the normal-field ESC/X opener.) wrapperCallOperandVaHexwrapperCallsTopMenuSequence"topSequenceRefIsWrapperOperandOnly statusRegion6ChildScriptRefCount$rightPanelRegion3ChildScriptRefCount$rightPanelRegion4ChildScriptRefCountrightPanelPageScriptRefCountintroTitleResourceListVaHexintroTitleResourceListPreviewparentContextClassificationnormalFieldEscOpenerProvendecisionz+hwanse-hud-menu-top-sequence-context-reviewz3tools/build_hud_menu_top_sequence_context_review.pyz*top-menu-sequence-grounded-opener-unproven)r=) parentContextpreWrapperGate rejectLoopwrappertopMenuSequenceztop menu object sequencez.grounded sequence; only ref is wrapper operand)labelrArefsHexclassificationzpre-wrapper gatezQactive group-key / active-descriptor-count gate; target refs point to reject loopzpre-wrapper reject loopz2stop-tick then jump back toward selected-root callztop menu wrapperz&unreferenced wrapper; not opener proofztop menu parent contextzKunreferenced parent context; adjacent resource list is intro/title-orientedzintro/title resource list, zregion #6 child scriptzreferenced by top-menu sequencezregion #3 child scriptzregion #4 child scriptzshifted/right-panel page scriptz6secondary page/menu payload context; not normal opener)z;No direct pointer refs to the wrapper stream at 0x0047e6a0.zBNo direct pointer refs to the parent context stream at 0x0047e624.zjThe sole 0x004ddc6c ref is 0x0047e6b0, an operand address inside the 0x04 command beginning at 0x0047e6ac.zThe repeated 7c e6 47 00 bytes before the wrapper are not opcode 0x7c commands; they are little-endian target pointers to 0x0047e67c.zfThe adjacent resource list at 0x004a2cb0 is intro/title-oriented, not a normal-field HUD menu context.zThis review does not find an input-edge, field-mode, or descriptor-add producer that schedules the wrapper from normal field state.)zFind the upstream selector/descriptor producer that schedules 0x0047e6a0 or its parent context without relying on direct pointer refs.zePrioritize field mode/state transitions after ESC/X edge handling, not menu-internal cursor handlers.zSDo not promote 0x004ddc6c itself as the opener; it is the menu construction callee.)kindsourcestatusrEcontextsreferenceSurfacesnegativeEvidence nextFrontier)EXE read_bytesrr1TOP_MENU_OBJECT_SEQUENCE_VATOP_MENU_WRAPPER_VATOP_MENU_PRE_WRAPPER_GATE_VATOP_MENU_REJECT_LOOP_VATOP_MENU_PARENT_CONTEXT_VASTATUS_REGION6_CHILD_SCRIPT_VA#RIGHT_PANEL_REGION3_CHILD_SCRIPT_VA#RIGHT_PANEL_REGION4_CHILD_SCRIPT_VA"RIGHT_PANEL_REGION4_PAGE_SCRIPT_VAreINTRO_TITLE_RESOURCE_LIST_VAr& TOP_MENU_WRAPPER_CALL_COMMAND_VAr* unpack_from TOP_MENU_WRAPPER_CALL_OPERAND_VArrZr;issubsetsetrLjoin)r!r"top_refs wrapper_refspre_wrapper_refsreject_loop_refs parent_refs region6_refs region3_refs region4_refs page_refsintro_title_resource_nameswrapper_call_rawwrapper_call_operandwrapper_calls_top_menutop_ref_is_operandnormal_field_esc_opener_provenrefrEs r build_reportrs~ .. CS!HX'BCHC+>?LX/KLX/FG3*DEKC+IJLC+NOLC+NOLh(JKI!.sH>Zab!csH.NPQR!--d4DaHK! 33 9 $? ? 9 , 8 "&F%GG%*"+$b)D&E+$c(m+ $%B#bg%B+ &s9S(D_+`'a + r"56 + 'L(9 + &<'HC3'H+ %b)E&F+ .s3C/D+ -BR.S3r#w.S+ !"%<"=+ *3/?+@+ )>N*Os2c7*O+ $R(B%C+ &s;'7+ %+&F3r#w&F!+" "2&F#G#+$$&&:#;'=.@,/ ,=03L0A03L0A(+I')*F'G)CFNNsSmOno +.&D IE+G\>G>+C;Udfg,S(?/89BsG9"Z  o= |  eW WU&C(I/T+P'GZ9 A A = < f = = = :sZS2S7 S<T6T6T  T T4TTT$T)=T. 'T3"T8$cp|d}d|dfd|dfd|dfd|dfd |d fd |d fd |dfd|dfg}djd|D}d,d}d}dD](\}}|d|}|dt|d||dz }*djd|dD} djd|dD} djd|dD} tj|d } d!t|d"d#|d$| d%|d&| d'| d(| d)} d*jd+| j Dd*zS)-NrErztop seqrhztop refsriz pre-gate refsrpz wrapper refsrmz parent refsrvz parent classropenerrrc3XK|]"\}}dt|dt|d$yw)z
z z
Nr)rSkvs rrUzrender_html..;s/gTXTUWX+AaD6AaD6Ogs(*cRdjd|jdgDS)Nrc30K|]}dt|jddt|jddt|jddt|jddt|jd d y w) zrAzrBz
rCz rErFN)rr6)rSrKs rrUz7render_html..render_commands..>s   7;;w/0127;;{345[7;;|C\A]@^_W[[+,-.7;;x0123   sBBr@)rr6)contexts rrender_commandsz$render_html..render_commands=s-ww #;;z26   r))rzParent Context 0x0047e624)rzReject Loop 0x0047e67c)rzPre-wrapper Gate 0x0047e688)rzWrapper 0x0047e6a0)rzTop Menu Sequence 0x004ddc6crz!

z

z7
VAopcodesummaryraw
c3K|]V}dt|ddt|ddt|ddtdj|dxsd d Xy w) zrz
rAzrrrrrrN)rr)rSrows rrUzrender_html..[sy   Wz!CL/):;%&'()tyyY07C89: sAArc3:K|]}dt|dywz
  • z
    • NrrSitems rrUzrender_html..csU$$qwiu-Urc3:K|]}dt|dywrrrs rrUzrender_html..dsUdd1T7)51UrrF) ensure_asciia HUD Menu Top Sequence Context Review
    index opener frontier selected-root frontier HUD menu preview JSON

    HUD Menu Top Sequence Context Review

    rz

    z

    Reference Surfaces

    z
    surfaceclassificationrefs
    z4

    Negative Evidence

      zB

    Next Frontier

      z

    Raw JSON

    
  
    

    




c3<K|]}|jyw)N)rstrip)rSlines  rrUzrender_html..sEtT[[]Es)rdict[str, Any]returnr)rrjsondumps
splitlines)reportrE
card_itemscardsrcontext_tableskeytitlerref_rows	negatives
next_frontierpayloadhtml_docs              rrender_htmlr/sYG	6(#$	G89:	W9:;	'"GHI	!?@A	 =>?	!>?@	7789	J
GGg\fggE	
N
U$S)xj$G,-.		$ww-.
HU&AS:TUUIGGUf^>TUUMjje4G"D
w_`h^hi	
	
67>Y?o<Hz99Ex/B/B/DEELLrc2t}tjdtjdtdzj	tj|dddzd	td
zj	t|d	tdy)
NT)exist_okz)hud_menu_top_sequence_context_review.jsonF)rindentrzutf-8)encodingz)hud_menu_top_sequence_context_review.htmlz'hud_menu_top_sequence_context_review okr)	rOUTmkdirWEB
write_textrrrprint)rs rmainrs
^FIItIIItI66BB

6a84?C	66BB;vCVahBi	
34r__main__)rg)rz
int | Nonerr7rr)rrrr)
r!bytesr"list[dict[str, Any]]r#r7r$r7rr)r!rr"rrr7rz	list[int]))
r!rr"rrIr7r=r7rr)rr)r!rr"rr#r7r$r7r`r7rar7rz	list[str])rr)rrrr)rr7)/__doc__
__future__rrrr*pathlibrtypingrprobe_exe_scene_tablesrrr'summarize_object_payload_442c75_callersr	__file__resolveparentsROOTrrrrrrrrrrrrrrrrrr&r1r;rLrerrr__name__
SystemExitrrrrsL
#
LLAH~''*
]
Ul
Ul( )$#- #- ')!+&0#&0#%/"<H&	"0
	"		

D^BtMn

z
TV
r