HUD Menu Selected Root Frontier Review
selected-root/table scan과 global 0x62 add-descriptor command scan에서도 normal-field ESC/X opener는 아직 증명되지 않았다. 정확한 #6/#3/#4 top-menu 조립 패턴은 0x004ddc84 1건뿐이고, selected-root table 중 top-menu sequence나 exact region scripts로 승격되는 행은 없다. 기존 0x47/0x4d operand 후보는 4-byte command가 아니라 dword pointer table 내부 unaligned byte로 재분류했다.
statusnormal-field-opener-still-unproven
exact top pattern1
selected-root rows201
selected-root promotions0
0x62 commands151
0x62 rejected4
0x62 promoted0
Exact Top-Menu Pattern Hits
| start | decoded commands |
|---|---|
0x004ddc84 | [{"vaHex": "0x004ddc84", "opcodeHex": "0x07", "opcodeName": "create-child-object", "summary": "create child object kind=0x00 script=0x004dee18; handler advances +0x08"}, {"vaHex": "0x004ddc8c", "opcodeHex": "0x28", "opcodeName": "runtime-object-slot", "summary": "store current child object slot=7 through 0x0059dd70[7]; handler advances +0x04"}, {"vaHex": "0x004ddc90", "opcodeHex": "0x07", "opcodeName": "create-child-object", "summary": "create child object kind=0x00 script=0x004dee58; handler advances +0x08"}, {"vaHex": "0x004ddc98", "opcodeHex": "0x28", "opcodeName": "runtime-object-slot", "summary": "store current child object slot=8 through 0x0059dd70[8]; handler advances +0x04"}, {"vaHex": "0x004ddc9c", "opcodeHex": "0x07", "opcodeName": "create-child-object", "summary": "create child object kind=0x00 script=0x004dee98; handler advances +0x08"}, {"vaHex": "0x004ddca4", "opcodeHex": "0x28", "opcodeName": "runtime-object-slot", "summary": "store current child object slot=9 through 0x0059dd70[9]; handler advances +0x04"}, {"vaHex": "0x004ddca8", "opcodeHex": "0x07", "opcodeName": "create-child-object", "summary": "create child object kind=0x00 script=0x004deed8; handler advances +0x08"}, {"vaHex": "0x004ddcb0", "opcodeHex": "0x28", "opcodeName": "runtime-object-slot", "summary": "store current child object slot=11 through 0x0059dd70[11]; handler advances +0x04"}, {"vaHex": "0x004ddcb4", "opcodeHex": "0x07", "opcodeName": "create-child-object", "summary": "create child object kind=0x00 script=0x004def0c; handler advances +0x08"}, {"vaHex": "0x004ddcbc", "opcodeHex": "0x28", "opcodeName": "runtime-object-slot", "summary": "store current child object slot=12 through 0x0059dd70[12]; handler advances +0x04"}] |
0x62 Descriptor Add Contexts
| context | count |
|---|---|
| active-object-motion-context | 2 |
| generic-runtime-index-add | 6 |
| intro-title-selected-root | 100 |
| prompt/event-context | 43 |
Rejected 0x62 False Positives
| hit | reason | pointer table preview |
|---|---|---|
0x00457cda0x00 | unaligned-byte-inside-dword-table aligned 0x00457cd8 | [{"entryVaHex": "0x00457cc8", "valueHex": "0x00000000", "isVa": false, "section": null}, {"entryVaHex": "0x00457ccc", "valueHex": "0x00640000", "isVa": false, "section": null}, {"entryVaHex": "0x00457cd0", "valueHex": "0x00000000", "isVa": false, "section": null}, {"entryVaHex": "0x00457cd4", "valueHex": "0x00280101", "isVa": false, "section": null}, {"entryVaHex": "0x00457cd8", "valueHex": "0x00620055", "isVa": false, "section": null}, {"entryVaHex": "0x00457cdc", "valueHex": "0x00ff0000", "isVa": false, "section": null}, {"entryVaHex": "0x00457ce0", "valueHex": "0x00930032", "isVa": false, "section": null}, {"entryVaHex": "0x00457ce4", "valueHex": "0x007d00fa", "isVa": false, "section": null}] |
0x004762650x47 | unaligned-byte-inside-dword-table aligned 0x00476264 | [{"entryVaHex": "0x00476254", "valueHex": "0x00628011", "isVa": false, "section": null}, {"entryVaHex": "0x00476258", "valueHex": "0x00000001", "isVa": false, "section": null}, {"entryVaHex": "0x0047625c", "valueHex": "0x686ca010", "isVa": false, "section": null}, {"entryVaHex": "0x00476260", "valueHex": "0x00000003", "isVa": false, "section": null}, {"entryVaHex": "0x00476264", "valueHex": "0x00476238", "isVa": true, "section": ".data"}, {"entryVaHex": "0x00476268", "valueHex": "0x00000000", "isVa": false, "section": null}, {"entryVaHex": "0x0047626c", "valueHex": "0x0000016d", "isVa": false, "section": null}, {"entryVaHex": "0x00476270", "valueHex": "0x6864a018", "isVa": false, "section": null}] |
0x004d5df10x4d | unaligned-byte-inside-dword-table aligned 0x004d5df0 | [{"entryVaHex": "0x004d5de0", "valueHex": "0x004d6190", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5de4", "valueHex": "0x004d61d4", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5de8", "valueHex": "0x004d627c", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5dec", "valueHex": "0x004d62a8", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5df0", "valueHex": "0x004d62d4", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5df4", "valueHex": "0x004d5f00", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5df8", "valueHex": "0x004d6398", "isVa": true, "section": ".data"}, {"entryVaHex": "0x004d5dfc", "valueHex": "0x004d6398", "isVa": true, "section": ".data"}] |
0x00523f810x00 | unaligned-byte-inside-dword-table aligned 0x00523f80 | [{"entryVaHex": "0x00523f70", "valueHex": "0x0022900c", "isVa": false, "section": null}, {"entryVaHex": "0x00523f74", "valueHex": "0x0026900c", "isVa": false, "section": null}, {"entryVaHex": "0x00523f78", "valueHex": "0x00000010", "isVa": false, "section": null}, {"entryVaHex": "0x00523f7c", "valueHex": "0x0051c4e7", "isVa": true, "section": ".data"}, {"entryVaHex": "0x00523f80", "valueHex": "0x00006218", "isVa": false, "section": null}, {"entryVaHex": "0x00523f84", "valueHex": "0x00000000", "isVa": false, "section": null}, {"entryVaHex": "0x00523f88", "valueHex": "0x000a3012", "isVa": false, "section": null}, {"entryVaHex": "0x00523f8c", "valueHex": "0x0051c410", "isVa": true, "section": ".data"}] |
Intro/Title Selected-Root Rows
| command | table | values |
|---|---|---|
0x0047e664slot 0 | 0x004a2cb0 | [{"value": 4861240, "valueHex": "0x004a2d38", "section": ".data", "isVa": true}, {"value": 1684302189, "valueHex": "0x6464696d", "section": null, "isVa": false}, {"value": 778138721, "valueHex": "0x2e617461", "section": null, "isVa": false}, {"value": 7040109, "valueHex": "0x006b6c6d", "section": null, "isVa": false}, {"value": 1886220131, "valueHex": "0x706d6f63", "section": null, "isVa": false}, {"value": 778398825, "valueHex": "0x2e656c69", "section": null, "isVa": false}] |
Negative Evidence
- 0x004ddc6c direct dword ref remains data-context only.
- Exact #6/#3/#4 top-menu construction pattern is not duplicated in another data stream.
- Selected-root tables do not contain 0x004ddc6c or the exact #6/#3/#4 child initializer addresses.
- 0x62 add-descriptor command-like hits exist, but none occur in a top-menu pointer/region context.
- High operands 0x47 and 0x4d are rejected as unaligned bytes inside dword pointer tables, not real opcode 0x62 commands.
Next Frontier
- Trace the producer of the mode/state byte that chooses a selected-root table before descriptor add commands execute.
- Follow VM opcode 0x81 table selectors whose selected entries later execute 0x62, but do not promote them unless they connect to the exact menu region construction.
- Inspect higher-level field mode dispatcher roots that call or schedule command streams after cancel/ESC edge handling.