웹 런타임 HUD-open trace를 기존 EXE 정적 분석 앵커와 연결해 승격 가능한 항목만 모은 리포트입니다.
hud-open-consumer-runtime-confirmed-static-bridgehud-open-longruntime-confirms-x-opens-status-hud-selected-root-region-streams19010x100979C00x1004C4380x005a03b82723[1, 2, 3, 4, 6]top-menu-vm-graph-grounded-opener-still-pending| area | previous | new | evidence |
|---|---|---|---|
| normal field X/ESC status HUD opener | top-menu-vm-graph-grounded-opener-still-pending | runtime-confirmed | selectedRootExecutorSeen is true in the runtime trace top menu/context stream neighborhood appears after the input-edge write exact top context region initializers #6/#3/#4 execute in frame 277 status-window text markers are emitted in the same HUD-open trace |
| HUD region composition | layout grounded, runtime composition partial | runtime-confirmed for regions #1/#2/#3/#4/#6 | surface 0x100979C0 is copied to frame surface 0x1004C438 by exact region rectangles composition copies include 0,0,416,352; 416,0,640,96; 416,96,640,352; 0,352,416,480; 416,352,640,480 |
| HUD/menu Korean text draw sink | text tables known, draw sink separated | runtime-confirmed GDI TextOutA sink | 0x0041F293 and 0x0041B41D are direct calls through GDI32!TextOutA IAT 0x005a03b8 runtime TextOutA rows include character name, equipment names, stat labels, status comment, mode, category, and skill list labels |
| pc | function | role | count | texts | static notes |
|---|---|---|---|---|---|
0x0041B41D | 0x0041b369 | fixed-width immediate HUD/menu slot renderer | 8 | 명주·귀신살 백호 도복 선제 정권 돌려차기 던지기 다리후리기 마시기 | Uses object +0xd6/+0xda as output coordinates and +0xe0/+0xe2/+0xe4 as RGB text color bytes. The runtime strings are padded with full-width spaces, matching fixed list/equipment/menu slots. Calls GDI32!TextOutA through IAT 0x005a03b8 after SelectObject/SetTextColor/SetBkMode. |
0x0041F293 | 0x0041f073 | streamed HUD/status text renderer | 19 | 아타호 무기 방어구 레벨 체력 / 기력 / 경험 / 공격력 방어력 기술력 순발력 운 야호 해냈다! 마침내 환상의 수련장도 제패했다 음 상쾌한 기분이군 기본기 | Reads object +0xb0 as a text stream pointer. Uses +0xca/+0xcc and globals 0x0055b284/0x0055b288 as stream delay/width state. Calls GDI32!TextOutA through IAT 0x005a03b8 after SelectObject/SetTextColor/SetBkMode. |
| seq | frame | stream | region | rect | status |
|---|---|---|---|---|---|
| 565 | 478 | 0x004dee18 | #6 | 0,0 416x352 | exact-static-anchor-hit |
| 570 | 478 | 0x004dee58 | #3 | 416,0 224x96 | exact-static-anchor-hit |
| 575 | 478 | 0x004dee98 | #4 | 416,96 224x256 | exact-static-anchor-hit |
| seq | frame | region | src rect | dst rect | flags | repeat | detail |
|---|---|---|---|---|---|---|---|
| 160..1899 | 475..492 | #1 bottom left HUD window | 0,352,416,480 | | 0x00000010 | 18 | bltfast caller=0x00419F5C surface 0x100979C0 srcRect=0,352,416,480 -> 0x1004C438 at 0,352 flags=0x00000010 srcColorKey=16..16 appliedColorKey=none |
| 601..601 | 478..478 | #2 bottom right info window | 416,352,640,480 | | 0x00000011 | 1 | bltfast caller=0x00419F5C surface 0x100979C0 srcRect=416,352,640,480 -> 0x1004C438 at 416,352 flags=0x00000011 srcColorKey=16..16 appliedColorKey=16..16 |
| 603..603 | 478..478 | #3 right top menu window | 416,0,640,96 | | 0x00000011 | 1 | bltfast caller=0x00419F5C surface 0x100979C0 srcRect=416,0,640,96 -> 0x1004C438 at 416,0 flags=0x00000011 srcColorKey=16..16 appliedColorKey=16..16 |
| 604..604 | 478..478 | #4 right submenu window | 416,96,640,352 | | 0x00000011 | 1 | bltfast caller=0x00419F5C surface 0x100979C0 srcRect=416,96,640,352 -> 0x1004C438 at 416,96 flags=0x00000011 srcColorKey=16..16 appliedColorKey=16..16 |
| 602..602 | 478..478 | #6 left status window | 0,0,416,352 | | 0x00000011 | 1 | bltfast caller=0x00419F5C surface 0x100979C0 srcRect=0,0,416,352 -> 0x1004C438 at 0,0 flags=0x00000011 srcColorKey=16..16 appliedColorKey=16..16 |
| item | reason | next trace |
|---|---|---|
| menu navigation/deeper submenu state writes | This capture only opened the status HUD; it did not press arrows/confirm/cancel after the HUD was visible. | Capture Down/Up, Left/Right, Enter, ESC while the menu is open with mem-write/object-stream-change enabled. |
| asset-level source surface labels | Draw rows expose surface handles and source rects, but not yet the originating CNS filename for each surface handle. | Add surface creation/resource-label events or wrapper id labels when CNS assets are loaded. |
| dynamic status values | This trace proves label/text positions and surface composition. It does not yet prove the exact producer for HP/MP/EXP numeric CNS glyph values. | Capture status HUD with numeric glyph draw source labels and watched stat memory values. |