Field RNG Selector Opcode 0x1c Review

필드 인카운트 쪽에 마지막으로 남았던 RNG selector 0x0040bdcc를 handler/opcode 단위로 분리한 리뷰입니다.

yes

handler entry matches

well-formed blocks

low-byte refs

invalid low-byte refs

field binding

결론

Opcode 0x1c remains a handler-grounded selector primitive, but no well-formed command stream using it was found in the current static scan. The existing script_handler_table refs are low-byte pointer artifacts such as 1c f7 53 00, not executable opcode 0x1c commands. Do not promote it as field encounter evidence.

handler table: 0x00440720, opcode 0x1c, handler 0x0040bcc9
RNG call: 0x0040bdcc
active object globals: 0x004576e8, 0x004576e9, 0x00457756

Handler Semantics

mode 0: selects by active object count: if active count is nonzero, index = activeCount - 1; pointer count comes from byte2.
mode 1: selects by active object/order aggregate. It reads active count 0x4576e8, active order 0x4576e9, and slot word values near 0x457756 before selecting a pointer range byte2..byte3.
mode 2: calls RNG helper 0x00427730 with byte2 as range and selects one of the following dword command pointers.

Well-formed Opcode Blocks

stream	section	mode	pointer count	pointers
well-formed opcode 0x1c command block 없음

기존 low-byte refs 재검토

기존 script handler table의 refs는 dword low byte가 0x1c였다는 뜻일 뿐이다. 아래처럼 mode byte가 0xf7이면 opcode 0x1c handler가 정상 소비할 수 없다.

word	value	raw bytes	mode byte	source/target metadata	interpretation
`0x00542b20`	`0x0053f71c`	`1c f7 53 00`	0xf7	map1_01a → map2_02d	low-byte pointer artifact, not a valid opcode 0x1c command
`0x00542b20`	`0x0053f71c`	`1c f7 53 00`	0xf7	map1_01a → map2_02d	low-byte pointer artifact, not a valid opcode 0x1c command
`0x00542b20`	`0x0053f71c`	`1c f7 53 00`	0xf7	map1_01a → map2_02d	low-byte pointer artifact, not a valid opcode 0x1c command

Summary JSON

{
  "handlerEntryMatchesExpected": true,
  "wellFormedOpcode1cBlockCount": 0,
  "wellFormedModeCounts": {},
  "scriptHandlerTableLowByteReferenceCount": 3,
  "invalidLowByteReferenceCount": 3,
  "directFieldEncounterBindingFound": false,
  "classification": "handler-only-unbound",
  "decision": "Opcode 0x1c remains a handler-grounded selector primitive, but no well-formed command stream using it was found in the current static scan. The existing script_handler_table refs are low-byte pointer artifacts such as 1c f7 53 00, not executable opcode 0x1c commands. Do not promote it as field encounter evidence."
}