메뉴 descriptor stack 검토

ESC/X 상태창 후보를 더 파기 위해 공통 active descriptor stack과 window region 소비 경로를 분리한다.

요약

descriptor materializer grounded; normal-field ESC/X top-menu opener blocked
add/remove0x00431fe8 / 0x00432541
active count/order0x004576e8 / 0x004576e9
slot table0x00457750 stride 0xd8
max stack3
closure rows43
false opcodesASCII 38 / u16 12
top region hitsscript=0 closure=0
top object initexact 3 / candidates 5
top object script0x004ddc6c refs 1 (field 0) slots 3
parent context0x0047e624 -> 0x004a2d38
strict inventory722 scripts / stack 3 / 0x62 0 / 0x9f 0
materializer callersadd 1 (opcode 1 / non-opcode 0) · remove 1 (opcode 1 / non-opcode 0)

판정

항목상태근거
shared descriptor stackgrounded0x62/0x63/0x80/0x99/0x9f all converge on 0x4576e8, 0x4576e9, 0x457750, and 0x59db30.
materialized display object scriptsgroundedadd/remove routines load roots from 0x442d95[id], run descriptor+0 init scripts via 0x402360, and assign descriptor+8 to object+0x40.
normal-field menu openerblockedthe stack machinery and menu-like object construction sequence are grounded, but the exact field-controller trigger for ESC/X remains unisolated. The newly traced upper context overlaps intro/title resources, so it must not be promoted as the field menu opener.
descriptor materializer direct callersgrounded / opener not foundadd routine direct calls=1 (opcode-handler=1, non-opcode=0); remove routine direct calls=1 (opcode-handler=1, non-opcode=0). The only add/remove direct callers are opcode 0x62/0x63 handlers, so the field opener is not a direct call to these materializers.
top menu object direct refblocked for field openerthe only direct ref to 0x004ddc6c is 0x0047e6b0, reached through parent context 0x0047e624 -> 0x004a2d38. That dynamic table contains middata.mlk, compile.cns, aaa.cns, logo_00.cns, title.cns, map_k*, and btl_k* strings, so this is intro/title-adjacent evidence only.
top menu object construction sequencegrounded / upstream trigger pending0x0047e6b0 points to script 0x004ddc6c. In that script, opcode 0x07 creates 0x004dee18/#6, 0x004dee58/#3, and 0x004dee98/#4, and the following opcode 0x28 stores them into runtime object slots 7, 8, and 9.
right-menu content labelshandled in right-panel reviewUI/system strings and region #2/#3/#4 payloads around 0x004e8120..0x004e8e24 are covered by menu_right_panel_ui_review; this descriptor-stack report only tracks the stack/opener boundary.
upper context cautiongrounded cautionparent candidate 0x0047e624 uses opcode 0x81 at 0x0047e664 to select 0x004a2cb0[0] -> 0x004a2d38, then opcode 0x82 jumps to it. The table contains middata.mlk/compile.cns/aaa.cns/logo_00.cns/title.cns/map_k*/btl_k* strings, so this branch is title/intro-adjacent.
direct region draw consumersgrounded0x41b579 has direct callers: opcode 0x44 region0, opcode 0x45 stream region, fixed region #39/#40 text panels, and generic object bridge object+0x28.
descriptor root region commandspartialclosure scan found region opcode 0x44 in descriptor ids [12, 19, 26, 28, 31, 32, 36, 48, 49, 50, 56, 57, 58, 66, 77], but no descriptor-root 0x45 hit for top-menu regions #6/#3/#4.
descriptor closure ASCII false opcodesfiltered38 sampled false opcode hits inside asset strings such as cara_*.cns and btl_*.cns were excluded from closure opcode counts.
descriptor closure numeric table false opcodesfiltered12 sampled false opcode hits inside monotonic 16-bit numeric tables were excluded from closure opcode counts; this removes the previous zh_dai.cns 0x62 add-descriptor-looking false hit.
descriptor-root add-opener searchblockedafter filtering asset-string and numeric-table false positives, descriptor-root closure scan contains no valid opcode 0x62 add-descriptor command. The normal-field ESC/X opener must be searched in a field-controller or higher-level VM root outside these descriptor roots.
strict active-object inventory opener scanblocked / negative evidence722 strict active-object scripts were decoded; 3 contain stack helpers, but valid 0x62 add-descriptor scripts=0 and 0x9f cancel/back scripts=0. This path is therefore excluded as the normal-field ESC/X opener.

Descriptor Routine Semantics

routineVA상태근거
opcode 0x07 create child object0x00402549groundedreads stream+1 as child object kind/count, calls 0x435b5b with handler 0x402321, writes stream+4 to child object+0x40, stores child at parent object+0x58, then advances +8
opcode 0x28 runtime object slot bridge0x0040570cgroundedmode 0 stores parent object+0x58 into 0x59dd70[stream+2]; mode 1 loads 0x59dd70[stream+2] into parent object+0xa8; command length 4 bytes
opcode 0x62 handler0x00407cc1groundedreads stream+1 and calls add routine 0x00431fe8; command length 4 bytes
add/materialize active descriptor0x00431fe8groundedrejects count >= 3, deduplicates existing object+0x16 id, appends id to 0x4576e9[count], writes 0x457750 + id*0xd8 to 0x59db30[count], increments 0x4576e8, then materializes descriptor-root scripts into VM/display objects
opcode 0x63 handler0x00407ce5groundedreads stream+1 and calls remove routine 0x00432541; command length 4 bytes
remove/rebuild active descriptor0x00432541groundedruns descriptor+4 teardown scripts for active objects, removes matching id from 0x4576e9, compacts 0x59db30, then rematerializes remaining descriptors from 0x442d95[id]
opcode 0x80 direct slot bind0x0040ad5egroundedstream byte2 selects id; stream byte1 selects destination stack slot; stores 0x457750 + id*0xd8 into 0x59db30[slot]
opcode 0x99 rebuild pointer array0x0040c2fcgroundedclears stack/object helper slots, then repopulates 0x59db30[i] from active id order 0x4576e9[i]
opcode 0x9f cancel/back0x0040c6ccgroundeduses cursor 0x59e33e over 0x59db30, consumes cancel edge bit 0x0200 in mode 1, skips entries whose +0x62 has 0x82, and dispatches entry+0x59 through 0x422093/0x4226e9 when entry+0x58 == 1
opcode 0x81 dynamic continuation select0x0040ad9bgroundedreads stream+1 as table index and stream+4 as dword table; stores table[index] into global 0x59de30; command length 8 bytes
opcode 0x82 dynamic continuation call0x0040adc9groundedif 0x59de30 is nonzero, pushes the current stream pointer to object return stack at object+0x44 + depth*4, increments object+0x5c, then sets object+0x40 to 0x59de30
opcode 0x86 object slot flag update0x0040aeccgroundedmode 0 writes 0x08000000 and mode 1 writes 0x10000000 to object pointed by 0x59dd70[stream+2]; in the top-menu sequence it touches slots 7, 8, 9, and 10

VM Opcode Bridge

opcodehandler역할bytes
0x070x00402549create child object; stream+4 becomes child object+0x40 script pointer55 8b ec 83 ec 04 53 56 57 8b 45 08 8b 40 40 8a 40 01 50 68 21 23 40 00 e8 f5 35 03
0x280x0040570cstore/load child object through runtime object pointer array 0x59dd7055 8b ec 83 ec 04 53 56 57 8b 45 08 8b 40 40 33 c9 8a 48 01 89 4d fc e9 42 00 00 00
0x450x00406528draw window/region id from command byte55 8b ec 53 56 57 8b 45 08 8b 40 40 66 0f b6 40 01 50 e8 3a 50 01 00 83 c4 04 8b 45
0x620x00407cc1add/materialize active descriptor id from stream+155 8b ec 53 56 57 8b 45 08 8b 40 40 8a 40 01 50 e8 12 a3 02 00 83 c4 04 8b 45 08 83
0x630x00407ce5remove/rebuild active descriptor id from stream+155 8b ec 53 56 57 8b 45 08 8b 40 40 8a 40 01 50 e8 47 a8 02 00 83 c4 04 8b 45 08 83
0x810x0040ad9bselect VM continuation pointer from a dword table into 0x59de3055 8b ec 53 56 57 8b 45 08 8b 40 40 33 c9 8a 48 01 8b 45 08 8b 40 40 8b 40 04 8b 04
0x820x0040adc9call/jump to selected VM continuation pointer 0x59de30 with return stack55 8b ec 53 56 57 8b 45 08 83 40 40 04 83 3d 30 de 59 00 00 0f 84 26 00 00 00 8b 45
0x860x0040aeccset runtime object-slot state flag through 0x59dd70[stream+2]55 8b ec 83 ec 04 53 56 57 8b 45 08 8b 40 40 33 c9 8a 48 01 89 4d fc e9 71 00 00 00
0x800x0040ad5ebind stack slot to slot table row 0x457750 + id*0xd855 8b ec 53 56 57 8b 45 08 8b 40 40 33 c9 8a 48 02 8d 04 49 c1 e0 03 8d 04 c0 05 50
0x990x0040c2fcrebuild stack pointer array from active id order55 8b ec 83 ec 04 53 56 57 c7 45 fc 00 00 00 00 e9 03 00 00 00 ff 45 fc 83 7d fc 07
0x9f0x0040c6cccancel/back controller over active descriptor cursor55 8b ec 83 ec 10 53 56 57 8b 45 08 8b 40 40 33 c9 8a 48 01 89 4d fc e9 42 02 00 00

Globals

globalVArefs의미sample refs
active descriptor count0x004576e886byte count; add maxes out at 30x00406b91 0x00406cce 0x00407d24 0x004081de 0x00408372 0x0040849d 0x00408782 0x00408a1d
active descriptor id order0x004576e930order bytes selected by opcode 0x62/0x630x0040b6aa 0x0040b788 0x0040b7a9 0x0040b7e8 0x0040b80a 0x0040bd4b 0x0040be7e 0x0040bfa7
descriptor root pointer table0x00442d953id -> descriptor root pointer0x004321bf 0x004323cf 0x00432711
slot table0x0045775039runtime rows; id*0xd8 stride0x00406436 0x0040ad79 0x0040b6b8 0x0040be8c 0x0040c3d5 0x0040c43b 0x0040c499 0x0040dec6
slot pointer array0x0059db30260active stack pointer array used by cursor/cancel0x00406479 0x00406499 0x0040ad8b 0x0040c04b 0x0040c362 0x0040c3df 0x0040c542 0x0040c6f2
runtime object pointer array0x0059dd7064materialized VM/display object pointers0x0040573c 0x00405753 0x004057a3 0x004057bc 0x004057d7 0x00405d0b 0x00405d21 0x00405d2c
object index table0x0057453834maps active order to object pointer slots0x00407b14 0x00407b2a 0x00407b51 0x00407b67 0x00407d3a 0x004081f4 0x00408388 0x004084b3
saved descriptor state0x0057455017x/y/state save-restore scratch for objects0x00408142 0x00408977 0x00408991 0x00408a73 0x00408a9f 0x0042350a 0x004301fd 0x00430360

Call Targets

targetVAcallsopcode/non-opcodecall sites
add/materialize descriptor0x00431fe811 / 00x00407cd1 opcode 0x62 handler: add/materialize active descriptor id from stream+1
rebuild descriptor stack0x0043232310 / 10x0042349c direct non-opcode caller
remove/rebuild descriptor0x0043254111 / 00x00407cf5 opcode 0x63 handler: remove/rebuild active descriptor id from stream+1
VM object create0x00435b5b851 / 840x00402300 direct non-opcode caller
0x00402561 opcode 0x07 handler: create child object; stream+4 becomes child object+0x40 script pointer
0x00406b15 direct non-opcode caller
0x00406ede direct non-opcode caller
0x00407973 direct non-opcode caller
0x00407a93 direct non-opcode caller
0x0040e92d direct non-opcode caller
0x0040e950 direct non-opcode caller
0x0040e9b5 direct non-opcode caller
0x0040ef6c direct non-opcode caller
0x004117a9 direct non-opcode caller
0x00411815 direct non-opcode caller
VM run script0x00402360190 / 190x004077d6 direct non-opcode caller
0x00407889 direct non-opcode caller
0x004078d7 direct non-opcode caller
0x0040790b direct non-opcode caller
0x00407beb direct non-opcode caller
0x0040c070 direct non-opcode caller
0x0040c447 direct non-opcode caller
0x0040c466 direct non-opcode caller
0x0040c4a4 direct non-opcode caller
0x0040ca37 direct non-opcode caller
0x0040cc56 direct non-opcode caller
0x0040cca9 direct non-opcode caller
VM object destroy0x00435c9d150 / 150x004023bb direct non-opcode caller
0x004057c1 direct non-opcode caller
0x004067c4 direct non-opcode caller
0x00406a1f direct non-opcode caller
0x00406b56 direct non-opcode caller
0x0040794e direct non-opcode caller
0x00407a45 direct non-opcode caller
0x0040c386 direct non-opcode caller
0x0041b717 direct non-opcode caller
0x0041fe81 direct non-opcode caller
0x00432137 direct non-opcode caller
0x00432316 direct non-opcode caller

Region Draw Consumers

0x0041b579 call sites
call역할fixed region
0x00406514opcode 0x44: conditional region 0 draw after 0x421509 refresh helper#0 0,0 352x80 0x00090005
0x0040653aopcode 0x45: draw stream+1 region iddynamic
0x00414fc9fixed region #39 draw, then text from skill/action table#39 0,64 224x48 0x0009000e
0x004150d2fixed region #40 draw, then text from item/skill table#40 0,112 224x48 0x0009000f
0x0041bb59generic object bridge: draw region id from object/context +0x28dynamic

Top Menu Region Probe

script data only
regionpatternscript-data hitsrect/templatesamples
#645 0600,0 416x352 tpl 0
#345 030416,0 224x96 tpl 2
#445 040416,96 224x256 tpl 3

Strict Active Object Inventory Probe

negative-evidence-no-field-opener-in-strict-inventory

The strict active-object +0xec inventory contains only 0x80/0x60 stack helpers and 0x88 input-like list helpers. It contains no 0x62 add-descriptor command and no 0x9f cancel/back command, so the normal-field ESC/X opener is outside this inventory or in a higher-level field controller.

script분류cmdsstack opsinput-like ops
0x0047c610text/prompt-interaction130x0047c63c 0x80 80 c6 47 00 cache descriptor base into 0x0059db30 slot table; slot=0xc6 descriptorIndex=0x47 descriptorBase=0x0045b338-
0x00515d38text/prompt-interaction140x00515d5c 0x80 80 5d 51 00 cache descriptor base into 0x0059db30 slot table; slot=0x5d descriptorIndex=0x51 descriptorBase=0x0045bba8-
0x0053cff0text/prompt-interaction130x0053d01c 0x60 60 d0 53 00 reset runtime descriptor index queue at 0x004576e8; handler advances +0x04-
0x004f3740text/prompt-interaction14-0x004f3764 0x88 88 37 4f 00
0x0053d604text/prompt-interaction13-0x0053d644 0x88 88 b2 53 00

Top Menu Object Sequence

object construction grounded; upstream trigger of intermediate record still pending

중간 record 0x0047e6a0 안의 포인터 0x0047e6b0가 스크립트 0x004ddc6c를 가리킨다. 이 record 자체의 상위 선택자는 아직 미확정이다.

direct refs: 0x0047e6b0

상위 context 경고

상위 후보 0x0047e624는 동적 continuation을 통해 0x004a2d38로 점프한다. 이 테이블은 인트로/타이틀 자원 문자열과 겹치므로, 아직 필드 ESC 메뉴 opener로 승격하지 않는다.

항목값
parent script0x0047e624
parent refs-
dynamic select0x0047e664
dynamic call0x0047e66c
dynamic table0x004a2cb0
table refs0x0047e668
selected script0x004a2d38
ascii stringsmiddata.mlk
compile.cns
aaa.cns
logo_00.cns
title.cns
map_k1.cns
map_k2.cns
btl_k1.cns
statuscontext overlaps title/intro resource flow; not promoted as field ESC opener

동적 selected script 디코드

이 디코드는 상태/메뉴 화면 자체의 object/descriptor 흐름 증거다. 다만 상위 opener가 필드 controller의 ESC/X와 직접 연결되지는 않았으므로 opener 확정으로 보지는 않는다.

VAoplenbytes해석
0x004a2d380x4a84a 01 00 00 00 00 00 80active-object flag set; filter object+0x14 mask=0x0000; flags=0x80000000
0x004a2d400x12812 80 00 00 00 00 00 00dword field arithmetic/write command; group=0x80 field=+0x0000 literal=0
0x004a2d480x4e44e 32 00 00store byte 0x32 into global 0x0059e37c; handler advances +0x04
0x004a2d4c0x40440 00 00 00bind/input-base
0x004a2d500x10410 c0 1c 00byte-store/expression
0x004a2d540x10410 c0 1d 00byte-store/expression
0x004a2d580x39839 01 30 c0 00 00 00 00render/palette command mode=1; args=0x30,0xc0,0x00; calls 0x004015b9; handler advances +0x08
0x004a2d600x3f83f 00 00 00 c4 3c 4a 00resource mini-stream runner via 0x00423a2f payload=0x004a3cc4; handler advances +0x08; load-resource/draw-op-0x12 slot=0x30 resource=0x0020 name=compile.cns args=0x0280,0x01e0
0x004a2d680x07807 00 00 00 fc 33 4a 00create child object kind=0x00 script=0x004a33fc; handler advances +0x08
0x004a2d700x28428 00 1b 00store current child object slot=27 through 0x0059dd70[27]; handler advances +0x04
0x004a2d740x04804 00 00 00 58 3c 4a 00call/push-continuation -> 0x004a3c58; pushes return address 0x004a2d7c to object return stack object+0x44[object+0x5c], increments object+0x5c, then jumps to target
0x004a2d7c0x01401 00 00 00stop-tick
0x004a2d800x1d121d 01 64 00 00 01 00 00 7c 2d 4a 00input-mask branch mode=0x01 mask=0x00000100 target=0x004a2d7c; handler either advances +0x0c or jumps to target
0x004a2d8c0x04804 00 00 00 40 3c 4a 00call/push-continuation -> 0x004a3c40; pushes return address 0x004a2d94 to object return stack object+0x44[object+0x5c], increments object+0x5c, then jumps to target
0x004a2d940x29429 1b 00 00destroy/clear runtime object slot=27 through 0x0059dd70[27]; handler advances +0x04
0x004a2d980x3f83f 00 00 00 d4 3c 4a 00resource mini-stream runner via 0x00423a2f payload=0x004a3cd4; handler advances +0x08; release/clear-resource resource=0x0020
0x004a2da00x3f83f 00 00 00 dc 3c 4a 00resource mini-stream runner via 0x00423a2f payload=0x004a3cdc; handler advances +0x08; load-resource/draw-op-0x12 slot=0x30 resource=0x0020 name=aaa.cns args=0x0280,0x01e0
0x004a2da80x07807 00 00 00 fc 33 4a 00create child object kind=0x00 script=0x004a33fc; handler advances +0x08
0x004a2db00x28428 00 1b 00store current child object slot=27 through 0x0059dd70[27]; handler advances +0x04
0x004a2db40x04804 00 00 00 58 3c 4a 00call/push-continuation -> 0x004a3c58; pushes return address 0x004a2dbc to object return stack object+0x44[object+0x5c], increments object+0x5c, then jumps to target
0x004a2dbc0x01401 00 00 00stop-tick
0x004a2dc00x1d121d 01 64 00 00 01 00 00 bc 2d 4a 00input-mask branch mode=0x01 mask=0x00000100 target=0x004a2dbc; handler either advances +0x0c or jumps to target
0x004a2dcc0x04804 00 00 00 40 3c 4a 00call/push-continuation -> 0x004a3c40; pushes return address 0x004a2dd4 to object return stack object+0x44[object+0x5c], increments object+0x5c, then jumps to target
0x004a2dd40x29429 1b 00 00destroy/clear runtime object slot=27 through 0x0059dd70[27]; handler advances +0x04
0x004a2dd80x3f83f 00 00 00 ec 3c 4a 00resource mini-stream runner via 0x00423a2f payload=0x004a3cec; handler advances +0x08; release/clear-resource resource=0x0020
0x004a2de00x461246 00 01 00 00 00 00 00 80 02 e0 01draw/fill rect mode=0x00 resource=0x0001 rect=(0,0)-(640,480); handler advances +0x0c
0x004a2dec0x3f83f 00 00 00 f4 3c 4a 00resource mini-stream runner via 0x00423a2f payload=0x004a3cf4; handler advances +0x08; load-resource/draw-op-1 slot=0xf0 resource=0x0021 name=logo_00.cns tail=0x004a2d16 / resource-region/draw mode=0x01 resource=0x0022 args=(440,480,440,480)
0x004a2df40x26826 30 00 0a b4 2c 4a 00resource list install/load mode=0x30 sub=0x00 high=0x00 aux=0x0a payload=0x004a2cb4; handler stores payload to 0x0059e2d4 and calls resource loader 0x0042cf5a; resources: middata.mlk, compile.cns, aaa.cns, logo_00.cns, title.cns ...
0x004a2dfc0x62462 00 00 00add runtime descriptor index operand=0x00 via 0x004576e8 queue; handler advances +0x04
0x004a2e000x62462 01 00 00add runtime descriptor index operand=0x01 via 0x004576e8 queue; handler advances +0x04
0x004a2e040x62462 02 00 00add runtime descriptor index operand=0x02 via 0x004576e8 queue; handler advances +0x04
0x004a2e080x04804 00 00 00 dc 2e 4a 00call/push-continuation -> 0x004a2edc; pushes return address 0x004a2e10 to object return stack object+0x44[object+0x5c], increments object+0x5c, then jumps to target
0x004a2e100x63463 00 00 00remove runtime descriptor index operand=0x00 via 0x004576e8 queue; handler advances +0x04
0x004a2e140x63463 01 00 00remove runtime descriptor index operand=0x01 via 0x004576e8 queue; handler advances +0x04
0x004a2e180x63463 02 00 00remove runtime descriptor index operand=0x02 via 0x004576e8 queue; handler advances +0x04
0x004a2e1c0x12812 80 00 00 00 00 00 00dword field arithmetic/write command; group=0x80 field=+0x0000 literal=0
0x004a2e240x03803 00 00 00 34 2e 4a 00jump -> 0x004a2e34

child object 생성/slot 저장

createstorechild scriptruntime slotregionpositionrect/template
0x004ddc840x004ddc8c0x004dee187#60,00,0 416x352 tpl 0
0x004ddc900x004ddc980x004dee588#3416,0416,0 224x96 tpl 2
0x004ddc9c0x004ddca40x004dee989#4416,96416,96 224x256 tpl 3
0x004ddca80x004ddcb00x004deed811#5416,352416,480 224x128 tpl 4
0x004ddcb40x004ddcbc0x004def0c12#8324,128324,128 80x112 tpl 13

명령열

VAopbytes역할세부
0x004ddc6c0x4040 00 00 00input/controller mask or state bind-
0x004ddc700x1010 c0 2e 00field/control write-
0x004ddc740x2f2f 02 00 00 2e 84 4e 00attach/display payload pointerpayloadVaHex=0x004e842e
0x004ddc7c0x2f2f 02 00 00 20 81 4e 00attach/display payload pointerpayloadVaHex=0x004e8120
0x004ddc840x0707 00 00 00 18 ee 4d 00create child objectchildScriptVaHex=0x004dee18
childScriptRefCount=1
init region #6 pos=0,0 rect=0,0 416x352
0x004ddc8c0x2828 00 07 00store child object to runtime slotmode=0
slot=7
runtimeSlotExpression=0x59dd70[7]
0x004ddc900x0707 00 00 00 58 ee 4d 00create child objectchildScriptVaHex=0x004dee58
childScriptRefCount=1
init region #3 pos=416,0 rect=416,0 224x96
0x004ddc980x2828 00 08 00store child object to runtime slotmode=0
slot=8
runtimeSlotExpression=0x59dd70[8]
0x004ddc9c0x0707 00 00 00 98 ee 4d 00create child objectchildScriptVaHex=0x004dee98
childScriptRefCount=3
init region #4 pos=416,96 rect=416,96 224x256
0x004ddca40x2828 00 09 00store child object to runtime slotmode=0
slot=9
runtimeSlotExpression=0x59dd70[9]
0x004ddca80x0707 00 00 00 d8 ee 4d 00create child objectchildScriptVaHex=0x004deed8
childScriptRefCount=5
init region #5 pos=416,352 rect=416,480 224x128
0x004ddcb00x2828 00 0b 00store child object to runtime slotmode=0
slot=11
runtimeSlotExpression=0x59dd70[11]
0x004ddcb40x0707 00 00 00 0c ef 4d 00create child objectchildScriptVaHex=0x004def0c
childScriptRefCount=1
init region #8 pos=324,128 rect=324,128 80x112
0x004ddcbc0x2828 00 0c 00store child object to runtime slotmode=0
slot=12
runtimeSlotExpression=0x59dd70[12]
0x004ddcc00x2f2f 02 00 00 90 81 4e 00attach/display payload pointerpayloadVaHex=0x004e8190
0x004ddcc80x1212 80 00 00 00 00 00 00dword field arithmetic/writefieldGroupHex=0x80
fieldOffsetHex=0x0000
literalHex=0x00000000
0x004ddcd00x8a8a 01 03 00object/menu selector update-
0x004ddcd40x8a8a 00 04 00object/menu selector update-
0x004ddcd80xd5d5 03 2e 00dispatch/helper command-
0x004ddcdc0x8686 00 07 00set object slot state flagmode=0
slot=7
runtimeSlotExpression=0x59dd70[7]
0x004ddce00x8686 00 08 00set object slot state flagmode=0
slot=8
runtimeSlotExpression=0x59dd70[8]
0x004ddce40x8686 00 09 00set object slot state flagmode=0
slot=9
runtimeSlotExpression=0x59dd70[9]
0x004ddce80x8686 00 0a 00set object slot state flagmode=0
slot=10
runtimeSlotExpression=0x59dd70[10]
0x004ddcec0x4040 00 00 00input/controller mask or state bind-
0x004ddcf00x8787 01 2f 00 b0 01 28 00runtime object slot field cursor/draw helpermode=1
selectorOffsetHex=0x2f
cursorMode=0
baseX=432
baseY=40
handlerVaHex=0x0040af7e
drawHelperVaHex=0x00421406
sourceExpression=object+0xa8[0x2f]
0x004ddcf80x8a8a 00 04 00object/menu selector update-

Object +0x28 Region Initializers

low16 selects region; high16 is packed type/group
initpackedregionpositionregion rect/templaterefs
0x004dee580x00030003#3 group 0x0003416,0416,0 224x96 tpl 21 0x004ddc94
0x004def480x00030003#3 group 0x0003200,0416,0 224x96 tpl 21 0x004de46c
0x004dee980x00030004#4 group 0x0003416,96416,96 224x256 tpl 33 0x004ddca0 0x004de83c 0x004de990
0x004def880x00030004#4 group 0x0003200,96416,96 224x256 tpl 31 0x004de478
0x004dee180x00030006#6 group 0x00030,00,0 416x352 tpl 01 0x004ddc88
0x0043f9140x00220003#3 group 0x0022,416,0 224x96 tpl 21 0x0043f900
0x0044b2c40x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0044a534
0x0044b3140x000c0003#3 group 0x000c,416,0 224x96 tpl 22 0x0044a53c 0x0044acfc
0x0044b38c0x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0044a544
0x0044b3f00x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0044a54c
0x00453dc40x00210003#3 group 0x0021,416,0 224x96 tpl 21 0x00453db0
0x004794b80x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0047801c
0x004795080x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x00478024
0x0047956c0x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0047802c
0x004795d00x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x00478034
0x004af2a80x00220003#3 group 0x0022,416,0 224x96 tpl 21 0x004af294
0x004e11000x00220003#3 group 0x0022,416,0 224x96 tpl 21 0x004e10ec
0x004f2f000x000c0003#3 group 0x000c,416,0 224x96 tpl 22 0x004f24fc 0x004f2b88
0x004f2f500x000c0003#3 group 0x000c,416,0 224x96 tpl 22 0x004f2504 0x004f2b90
0x004f2fb40x000c0003#3 group 0x000c,416,0 224x96 tpl 22 0x004f250c 0x004f2b98
0x004f30180x000c0003#3 group 0x000c,416,0 224x96 tpl 22 0x004f2514 0x004f2ba0
0x004ff2200x00220003#3 group 0x0022,416,0 224x96 tpl 21 0x004ff20c
0x0050099c0x00220003#3 group 0x0022,416,0 224x96 tpl 21 0x00500988
0x0051557c0x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x00514f24
0x005155e00x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x00514f2c
0x005156440x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x00514f34
0x005156a80x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x00514f3c
0x00526aac0x00220003#3 group 0x0022,416,0 224x96 tpl 21 0x00526a98
0x0053c8a40x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0053c124
0x0053c8f40x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0053c12c
0x0053c9680x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0053c134
0x0053c9cc0x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x0053c13c
0x00540c8c0x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x005403dc
0x00540cdc0x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x005403e4
0x00540d400x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x005403ec
0x00540da40x000c0003#3 group 0x000c,416,0 224x96 tpl 21 0x005403f4
0x0044b4540x000c0004#4 group 0x000c,416,96 224x256 tpl 32 0x0044a7c8 0x0044adcc
0x0044b4a40x000c0004#4 group 0x000c,416,96 224x256 tpl 32 0x0044a7d0 0x0044add4
0x004796340x000c0004#4 group 0x000c,416,96 224x256 tpl 31 0x00478214
0x004796840x000c0004#4 group 0x000c,416,96 224x256 tpl 31 0x0047821c

Descriptor Root Closure Scan

recursive decode of 0x442d95[id] roots
idrootnodes/cmdsopcodesregion opssamplesfiltered false opcodes
00x004f867c12/980x00=2
0x01=6
0x03=9
0x08=2
0x0b=2
0x0c=2
0x10=1
0x11=9
0x13=4
0x18=8
0x1c=1
0x20=3
0x21=19
0x30=1
0x34=1
0x38=2
0x3f=2
0x40=1
0x54=2
0x58=1
0x6c=2
0x7c=1
0x84=1
0xa4=1
0xac=1
0xbc=1
0xc0=1
0xc8=1
0xd8=1
0xe8=1
0xf8=8
0xfc=1		-0x004f8eac 0x40 40 92 4f 000x004f8688 0x63 cara_at1.cns
0x004f868c 0x5f cara_at1.cns
0x004f8690 0x2e cara_at1.cns
0x004f8694 0x00 cara_at1.cns
10x004e75a09/510x00=3
0x01=6
0x03=5
0x08=1
0x0b=2
0x0c=2
0x11=9
0x13=4
0x18=7
0x20=3
0x21=1
0x3f=2
0x78=2
0x88=1
0x98=1
0xa8=1
0xb8=1		--0x004e75ac 0x63 cara_rs1.cns
0x004e75b0 0x5f cara_rs1.cns
0x004e75b4 0x2e cara_rs1.cns
0x004e75b8 0x00 cara_rs1.cns
20x0054600410/630x00=3
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x11=9
0x13=4
0x18=8
0x20=3
0x21=9
0x28=1
0x30=1
0x38=1
0x3f=2
0x58=1
0x78=1
0xb0=1
0xe8=2		--0x0054601c 0x63 cara_sm1.cns
0x00546020 0x5f cara_sm1.cns
0x00546024 0x2e cara_sm1.cns
0x00546028 0x00 cara_sm1.cns
30x004b218c8/730x00=8
0x01=2
0x02=16
0x06=2
0x08=1
0x0b=4
0x0c=2
0x11=6
0x12=29
0x3f=2
0x4b=1		--0x004b2398 0x62 btl_etc.cns
0x004b239c 0x65 btl_etc.cns
0x004b238c 0x62 btl_efc.cns
0x004b2390 0x65 btl_efc.cns
40x004d58689/570x00=8
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=2
0x10=6
0x11=6
0x13=4
0x18=4
0x20=3
0x21=1
0x3f=2
0x42=3
0xa8=4
0xbc=4		--0x004d587c 0x62 btl_at.cns
0x004d5880 0x61 btl_at.cns
0x004d5884 0x6e btl_at.cns
50x004da88c9/950x00=8
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=6
0x13=4
0x18=4
0x1c=4
0x20=3
0x21=1
0x28=5
0x3f=2
0x40=5
0x42=3
0x54=5
0x68=5
0x7c=5
0xa8=5
0xbc=4
0xd4=5
0xec=5		-0x004dad44 0x40 40 ae 4d 00
0x004dad44 0x40 40 ae 4d 00
0x004dad44 0x40 40 ae 4d 00
0x004dad44 0x40 40 ae 4d 00
0x004dad44 0x40 40 ae 4d 00		0x004da8a0 0x62 btl_rs.cns
0x004da8a4 0x72 btl_rs.cns
0x004da8a8 0x6e btl_rs.cns
60x0052406015/3500x00=3
0x01=6
0x03=10
0x08=1
0x0b=2
0x0c=4
0x10=4
0x11=6
0x12=16
0x13=7
0x18=4
0x1c=30
0x20=8
0x21=25
0x28=5
0x2c=5
0x3f=2
0x40=30
0x42=3
0x50=4
0x54=5
0x58=10
0x68=5
0x6c=20
0x70=5
0x7c=5
0x80=5
0x90=10
0x94=5
0x9c=5
0xad=2
0xbc=19
0xbd=2
0xc2=2
0xcc=20
0xd4=5
0xdc=5
0xe0=5
0xe8=20
0xec=15
0xf0=5		-0x00524478 0x40 40 45 52 00
0x0052449c 0x40 40 45 52 00
0x00524510 0x40 40 55 52 00
0x00524514 0x40 40 55 52 00
0x00524518 0x40 40 55 52 00		0x00524074 0x62 btl_sm.cns
0x00524078 0x73 btl_sm.cns
0x0052407c 0x6e btl_sm.cns
120x0051be308/1330x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x3f=2
0x42=3
0x44=2
0x4c=5
0x50=2
0x5c=4
0xb8=5
0xbc=9
0xc0=45
0xd4=5
0xe8=5		0x0051bea8 0x44 -> #0
0x0051bea8 0x44 -> #0		0x0051bea8 0x44 44 be 51 00
0x0051bea8 0x44 44 be 51 00		-
170x00545c6c8/1380x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x3f=2
0x40=5
0x42=3
0x48=45
0x5c=5
0x70=5
0x78=5
0x80=2
0x8b=2
0xbc=9
0xc0=5
0xe4=4		-0x00545d14 0x80 80 5c 54 00
0x00545e34 0x40 40 5f 54 00
0x00545e34 0x40 40 5f 54 00
0x00545d14 0x80 80 5c 54 00
0x00545e34 0x40 40 5f 54 00		-
190x005434e08/1430x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x30=5
0x3f=2
0x42=3
0x44=5
0x54=4
0xb0=5
0xb8=45
0xbc=9
0xcc=5
0xe0=5
0xe8=5
0xf4=2
0xff=2		0x0054368c 0x44 -> #0
0x0054368c 0x44 -> #0
0x0054368c 0x44 -> #0
0x0054368c 0x44 -> #0
0x0054368c 0x44 -> #0		0x0054368c 0x44 44 37 54 00
0x0054368c 0x44 44 37 54 00
0x0054368c 0x44 44 37 54 00
0x0054368c 0x44 44 37 54 00
0x0054368c 0x44 44 37 54 00		-
230x004cbf8c10/1110x00=2
0x01=6
0x03=7
0x08=1
0x0b=2
0x0c=3
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=9
0x3f=2
0x42=3
0x4c=20
0x74=5
0x78=5
0xa0=2
0xab=2
0xad=1
0xbc=10
0xc2=1
0xd8=5
0xe8=4		--0x004cc398 0xc7 0x1dc7 0x1e2a 0x1e8e 0x1ef2
0x004cc39c 0x8e 0x1e8e 0x1ef2 0x1f56 0x1fba
0x004cc3a0 0x56 0x1f56 0x1fba 0x201d 0x2081
0x004cc3a4 0x1d 0x201d 0x2081 0x20e5 0x2148
260x004ce06c13/1540x00=2
0x01=7
0x03=11
0x04=2
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=6
0x14=2
0x18=4
0x20=3
0x21=9
0x24=2
0x3c=5
0x3f=2
0x42=3
0x44=45
0x58=5
0x70=5
0x80=2
0x8b=2
0xad=2
0xbc=10
0xbd=3
0xd0=5
0xe0=4		0x004ce208 0x44 -> #0
0x004ce20c 0x44 -> #0
0x004ce21c 0x44 -> #0
0x004ce220 0x44 -> #0
0x004ce224 0x44 -> #0
0x004ce228 0x44 -> #0
0x004ce22c 0x44 -> #0
0x004ce23c 0x44 -> #0		0x004ce114 0x80 80 e0 4c 00
0x004ce208 0x44 44 e2 4c 00
0x004ce20c 0x44 44 e2 4c 00
0x004ce21c 0x44 44 e2 4c 00
0x004ce220 0x44 44 e2 4c 00		-
270x00546a7c11/1640x00=3
0x01=8
0x03=8
0x08=2
0x0b=2
0x0c=3
0x10=54
0x11=6
0x12=2
0x13=4
0x18=9
0x20=3
0x21=20
0x2c=5
0x3f=2
0x42=3
0x48=5
0xac=9
0xad=2
0xbc=12
0xbf=1
0xc2=1		--0x00546a90 0x7a zk_komo.cns
0x00546a94 0x6f zk_komo.cns
0x00546a98 0x63 zk_komo.cns
280x005459149/1460x00=3
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=6
0x13=4
0x18=4
0x20=3
0x21=12
0x3f=2
0x42=3
0x44=9
0xa8=50
0xb0=5
0xbc=9
0xc4=5
0xe0=5
0xec=5		0x00545a68 0x44 -> #0
0x00545a7c 0x44 -> #0
0x00545a68 0x44 -> #0
0x00545a7c 0x44 -> #0
0x00545a68 0x44 -> #0
0x00545a7c 0x44 -> #0
0x00545a68 0x44 -> #0
0x00545a7c 0x44 -> #0		0x00545a68 0x44 44 5a 54 00
0x00545a7c 0x44 44 5b 54 00
0x00545a68 0x44 44 5a 54 00
0x00545a7c 0x44 44 5b 54 00
0x00545a68 0x44 44 5a 54 00		0x00545928 0x7a zk_big.cns
0x0054592c 0x69 zk_big.cns
0x00545930 0x6e zk_big.cns
290x004ede049/1450x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=6
0x13=4
0x18=4
0x20=3
0x21=12
0x3f=2
0x40=9
0x42=3
0x68=5
0xa4=45
0xac=5
0xbc=9
0xc0=5
0xdc=5
0xe8=5		-0x004edf64 0x40 40 df 4e 00
0x004edf78 0x40 40 e0 4e 00
0x004edf64 0x40 40 df 4e 00
0x004edf78 0x40 40 e0 4e 00
0x004edf64 0x40 40 df 4e 00		0x004ede18 0x7a zk_q.cns
0x004ede1c 0x2e zk_q.cns
0x004ede20 0x00 zk_q.cns
300x004cdc289/660x00=8
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=6
0x13=4
0x18=4
0x20=3
0x21=2
0x3f=2
0x42=3
0x80=4
0xbc=4
0xe4=10		-0x004cdda4 0x80 80 dd 4c 00
0x004cdda4 0x80 80 dd 4c 00
0x004cdda4 0x80 80 dd 4c 00
0x004cdda4 0x80 80 dd 4c 00		0x004cdc3c 0x7a zk_maoh.cns
0x004cdc40 0x61 zk_maoh.cns
0x004cdc44 0x63 zk_maoh.cns
310x0051372c8/1380x00=2
0x01=6
0x03=6
0x08=6
0x0b=2
0x0c=2
0x10=54
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x24=5
0x38=5
0x3f=2
0x40=2
0x42=3
0x44=5
0x4b=2
0xac=4
0xbc=9		0x00513900 0x44 -> #0
0x00513900 0x44 -> #0
0x00513900 0x44 -> #0
0x00513900 0x44 -> #0
0x00513900 0x44 -> #0		0x005137ec 0x40 40 37 51 00
0x00513900 0x44 44 3a 51 00
0x00513900 0x44 44 3a 51 00
0x005137ec 0x40 40 37 51 00
0x00513900 0x44 44 3a 51 00		-
320x0043fbac8/1430x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x34=5
0x3f=2
0x40=5
0x42=3
0x44=4
0x74=5
0xa0=5
0xa8=40
0xbc=14
0xc0=2
0xca=2
0xd0=5
0xdc=5		0x0043fd68 0x44 -> #0
0x0043fd68 0x44 -> #0
0x0043fd68 0x44 -> #0
0x0043fd68 0x44 -> #0		0x0043fd68 0x44 44 fd 43 00
0x0043fd9c 0x40 40 ff 43 00
0x0043fd68 0x44 44 fd 43 00
0x0043fd9c 0x40 40 ff 43 00
0x0043fd68 0x44 44 fd 43 00		-
330x004d17348/780x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x1c=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x48=2
0x52=2
0x80=10
0x94=5
0xa8=5
0xbc=4		-0x004d1944 0x80 80 19 4d 00
0x004d1948 0x80 80 19 4d 00
0x004d1944 0x80 80 19 4d 00
0x004d1948 0x80 80 19 4d 00
0x004d1944 0x80 80 19 4d 00		-
360x0054550817/1990x00=2
0x01=9
0x03=14
0x04=27
0x08=1
0x0b=2
0x0c=3
0x10=6
0x11=6
0x13=8
0x14=2
0x18=11
0x1c=2
0x20=4
0x21=16
0x24=2
0x28=7
0x3f=2
0x42=4
0x44=4
0x60=5
0x90=5
0x98=5
0xa0=4
0xa8=22
0xad=3
0xb0=2
0xbc=9
0xbd=3
0xc2=1
0xc4=3
0xe0=3
0xec=2		0x00545a68 0x44 -> #0
0x00545a68 0x44 -> #0
0x00545a7c 0x44 -> #0
0x00545a7c 0x44 -> #0		0x00545a68 0x44 44 5a 54 00
0x00545a68 0x44 44 5a 54 00
0x00545a7c 0x44 44 5b 54 00
0x00545a7c 0x44 44 5b 54 00		-
440x004da4ac8/730x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x80=4
0xbc=4
0xc0=2
0xcd=2
0xe4=10
0xf8=5		-0x004da6a4 0x80 80 a6 4d 00
0x004da6a4 0x80 80 a6 4d 00
0x004da6a4 0x80 80 a6 4d 00
0x004da6a4 0x80 80 a6 4d 00		-
450x004da4ac8/730x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x80=4
0xbc=4
0xc0=2
0xcd=2
0xe4=10
0xf8=5		-0x004da6a4 0x80 80 a6 4d 00
0x004da6a4 0x80 80 a6 4d 00
0x004da6a4 0x80 80 a6 4d 00
0x004da6a4 0x80 80 a6 4d 00		-
480x004bf83c9/1220x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=3
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=23
0x21=7
0x34=5
0x38=5
0x3f=2
0x42=3
0x44=5
0x48=5
0x50=2
0x5c=2
0xac=5
0xad=1
0xbc=13
0xc2=1
0xd8=5		0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0		0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00		-
490x004bf83c9/1220x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=3
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=23
0x21=7
0x34=5
0x38=5
0x3f=2
0x42=3
0x44=5
0x48=5
0x50=2
0x5c=2
0xac=5
0xad=1
0xbc=13
0xc2=1
0xd8=5		0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0		0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00		-
500x004bf83c9/1220x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=3
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=23
0x21=7
0x34=5
0x38=5
0x3f=2
0x42=3
0x44=5
0x48=5
0x50=2
0x5c=2
0xac=5
0xad=1
0xbc=13
0xc2=1
0xd8=5		0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0
0x004bfb10 0x44 -> #0		0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00
0x004bfb10 0x44 44 fc 4b 00		-
510x0053ad3c8/780x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x1c=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x50=2
0x5c=2
0x80=10
0x94=5
0xa8=5
0xbc=4		-0x0053af44 0x80 80 af 53 00
0x0053af48 0x80 80 af 53 00
0x0053af44 0x80 80 af 53 00
0x0053af48 0x80 80 af 53 00
0x0053af44 0x80 80 af 53 00		-
530x004c8c7c8/1380x00=2
0x01=6
0x03=6
0x08=5
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x3f=2
0x42=3
0x64=5
0x6c=45
0x80=5
0x90=2
0x94=5
0x9b=2
0xbc=14
0xf8=5		-0x004c8e38 0x80 80 8e 4c 00
0x004c8e38 0x80 80 8e 4c 00
0x004c8e38 0x80 80 8e 4c 00
0x004c8e38 0x80 80 8e 4c 00
0x004c8e38 0x80 80 8e 4c 00		-
550x004d79248/760x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x1c=4
0x20=3
0x21=1
0x38=2
0x3f=2
0x42=3
0x80=10
0x94=5
0xa8=5
0xbc=4		-0x004d7b44 0x80 80 7b 4d 00
0x004d7b48 0x80 80 7b 4d 00
0x004d7b44 0x80 80 7b 4d 00
0x004d7b48 0x80 80 7b 4d 00
0x004d7b44 0x80 80 7b 4d 00		-
560x004d53d410/1500x00=2
0x01=7
0x03=8
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x12=5
0x13=4
0x14=2
0x18=4
0x20=4
0x21=11
0x28=5
0x30=40
0x3f=2
0x42=3
0x44=5
0x58=5
0x64=5
0xad=1
0xbc=10
0xbd=1
0xcc=4
0xe8=2
0xec=5
0xf3=2		0x004d55fc 0x44 -> #0
0x004d55fc 0x44 -> #0
0x004d55fc 0x44 -> #0
0x004d55fc 0x44 -> #0
0x004d55fc 0x44 -> #0		0x004d55fc 0x44 44 56 4d 00
0x004d55fc 0x44 44 56 4d 00
0x004d55fc 0x44 44 56 4d 00
0x004d55fc 0x44 44 56 4d 00
0x004d55fc 0x44 44 56 4d 00		-
570x005101b48/830x00=4
0x01=4
0x03=4
0x08=4
0x0b=2
0x10=26
0x11=2
0x13=2
0x14=2
0x18=2
0x20=1
0x21=4
0x24=3
0x38=3
0x3f=2
0x42=1
0x44=3
0x70=3
0xac=2
0xbc=5
0xc8=2
0xd3=2		0x00510400 0x44 -> #0
0x00510400 0x44 -> #0
0x00510400 0x44 -> #0		0x00510400 0x44 44 05 51 00
0x00510400 0x44 44 05 51 00
0x00510400 0x44 44 05 51 00		-
580x00513d5c8/1360x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x38=5
0x3f=2
0x42=3
0x44=5
0x54=4
0x70=2
0xb0=5
0xb8=40
0xbc=9
0xcc=5
0xe0=5
0xec=5		0x00513f8c 0x44 -> #0
0x00513f8c 0x44 -> #0
0x00513f8c 0x44 -> #0
0x00513f8c 0x44 -> #0
0x00513f8c 0x44 -> #0		0x00513f8c 0x44 44 40 51 00
0x00513f8c 0x44 44 40 51 00
0x00513f8c 0x44 44 40 51 00
0x00513f8c 0x44 44 40 51 00
0x00513f8c 0x44 44 40 51 00		-
600x004f96588/1430x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=7
0x18=4
0x20=3
0x21=6
0x24=5
0x2c=35
0x3f=2
0x40=5
0x42=3
0x54=5
0x6c=2
0x78=2
0x80=5
0xb4=5
0xb8=5
0xbc=9
0xc8=4
0xf0=5		-0x004f9af8 0x40 40 9b 4f 00
0x004f9b28 0x80 80 9f 4f 00
0x004f9af8 0x40 40 9b 4f 00
0x004f9b28 0x80 80 9f 4f 00
0x004f9af8 0x40 40 9b 4f 00		-
660x00442ef810/1510x00=2
0x01=7
0x03=8
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x12=5
0x13=4
0x14=2
0x18=4
0x20=4
0x21=11
0x28=5
0x30=45
0x3f=2
0x42=3
0x44=5
0x58=5
0x5c=5
0xac=5
0xad=1
0xbc=10
0xbd=1
0xcc=4		0x004430fc 0x44 -> #0
0x004430fc 0x44 -> #0
0x004430fc 0x44 -> #0
0x004430fc 0x44 -> #0
0x004430fc 0x44 -> #0		0x004430fc 0x44 44 31 44 00
0x004430fc 0x44 44 31 44 00
0x004430fc 0x44 44 31 44 00
0x004430fc 0x44 44 31 44 00
0x004430fc 0x44 44 31 44 00		-
720x0053388019/3070x00=2
0x01=9
0x03=12
0x04=42
0x07=3
0x08=2
0x0a=4
0x0b=2
0x0c=7
0x10=5
0x11=6
0x12=15
0x13=8
0x14=2
0x18=11
0x1f=3
0x20=4
0x21=33
0x24=38
0x38=5
0x3c=6
0x3f=2
0x42=9
0x48=5
0x6c=8
0x7c=4
0x90=5
0x94=6
0x9f=2
0xa0=4
0xa8=5
0xac=4
0xad=3
0xbc=5
0xbd=3
0xc2=1
0xc4=4
0xd4=2
0xdc=4
0xec=3
0xf4=4
0xf8=5		-0x00533a4c 0x9f 9f 38 53 00
0x00533a4c 0x9f 9f 38 53 00		-
740x004b15a49/2960x00=2
0x01=6
0x03=1
0x08=1
0x0a=6
0x0b=2
0x0c=8
0x10=22
0x11=4
0x13=4
0x14=2
0x18=4
0x20=8
0x21=10
0x24=2
0x30=5
0x3c=5
0x3f=2
0x42=3
0x50=5
0x7c=96
0x80=5
0x8c=18
0x94=4
0x9c=6
0xad=1
0xb4=5
0xb8=2
0xbc=9
0xc4=2
0xd4=6
0xf8=40		-0x004b19f4 0x80 80 1e 4b 00
0x004b19f4 0x80 80 1e 4b 00
0x004b19f4 0x80 80 1e 4b 00
0x004b19f4 0x80 80 1e 4b 00
0x004b19f4 0x80 80 1e 4b 00		-
750x004f96588/1430x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=7
0x18=4
0x20=3
0x21=6
0x24=5
0x2c=35
0x3f=2
0x40=5
0x42=3
0x54=5
0x6c=2
0x78=2
0x80=5
0xb4=5
0xb8=5
0xbc=9
0xc8=4
0xf0=5		-0x004f9af8 0x40 40 9b 4f 00
0x004f9b28 0x80 80 9f 4f 00
0x004f9af8 0x40 40 9b 4f 00
0x004f9b28 0x80 80 9f 4f 00
0x004f9af8 0x40 40 9b 4f 00		-
760x004bb4948/730x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x80=4
0xa8=2
0xb4=2
0xbc=4
0xe4=10
0xf8=5		-0x004bb7a4 0x80 80 b7 4b 00
0x004bb7a4 0x80 80 b7 4b 00
0x004bb7a4 0x80 80 b7 4b 00
0x004bb7a4 0x80 80 b7 4b 00		-
770x0043fbac8/1430x00=2
0x01=6
0x03=6
0x08=1
0x0b=2
0x0c=2
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x20=3
0x21=6
0x34=5
0x3f=2
0x40=5
0x42=3
0x44=4
0x74=5
0xa0=5
0xa8=40
0xbc=14
0xc0=2
0xca=2
0xd0=5
0xdc=5		0x0043fd68 0x44 -> #0
0x0043fd68 0x44 -> #0
0x0043fd68 0x44 -> #0
0x0043fd68 0x44 -> #0		0x0043fd68 0x44 44 fd 43 00
0x0043fd9c 0x40 40 ff 43 00
0x0043fd68 0x44 44 fd 43 00
0x0043fd9c 0x40 40 ff 43 00
0x0043fd68 0x44 44 fd 43 00		-
780x004d17348/780x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x1c=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x48=2
0x52=2
0x80=10
0x94=5
0xa8=5
0xbc=4		-0x004d1944 0x80 80 19 4d 00
0x004d1948 0x80 80 19 4d 00
0x004d1944 0x80 80 19 4d 00
0x004d1948 0x80 80 19 4d 00
0x004d1944 0x80 80 19 4d 00		-
810x0053388019/3070x00=2
0x01=9
0x03=12
0x04=42
0x07=3
0x08=2
0x0a=4
0x0b=2
0x0c=7
0x10=5
0x11=6
0x12=15
0x13=8
0x14=2
0x18=11
0x1f=3
0x20=4
0x21=33
0x24=38
0x38=5
0x3c=6
0x3f=2
0x42=9
0x48=5
0x6c=8
0x7c=4
0x90=5
0x94=6
0x9f=2
0xa0=4
0xa8=5
0xac=4
0xad=3
0xbc=5
0xbd=3
0xc2=1
0xc4=4
0xd4=2
0xdc=4
0xec=3
0xf4=4
0xf8=5		-0x00533a4c 0x9f 9f 38 53 00
0x00533a4c 0x9f 9f 38 53 00		-
840x0053ad3c8/780x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x1c=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x50=2
0x5c=2
0x80=10
0x94=5
0xa8=5
0xbc=4		-0x0053af44 0x80 80 af 53 00
0x0053af48 0x80 80 af 53 00
0x0053af44 0x80 80 af 53 00
0x0053af48 0x80 80 af 53 00
0x0053af44 0x80 80 af 53 00		-
850x0053ad3c8/780x00=2
0x01=6
0x03=1
0x08=1
0x0b=2
0x0c=7
0x10=4
0x11=4
0x13=4
0x14=2
0x18=4
0x1c=4
0x20=3
0x21=1
0x3f=2
0x42=3
0x50=2
0x5c=2
0x80=10
0x94=5
0xa8=5
0xbc=4		-0x0053af44 0x80 80 af 53 00
0x0053af48 0x80 80 af 53 00
0x0053af44 0x80 80 af 53 00
0x0053af48 0x80 80 af 53 00
0x0053af44 0x80 80 af 53 00		-
870x0053388019/3070x00=2
0x01=9
0x03=12
0x04=42
0x07=3
0x08=2
0x0a=4
0x0b=2
0x0c=7
0x10=5
0x11=6
0x12=15
0x13=8
0x14=2
0x18=11
0x1f=3
0x20=4
0x21=33
0x24=38
0x38=5
0x3c=6
0x3f=2
0x42=9
0x48=5
0x6c=8
0x7c=4
0x90=5
0x94=6
0x9f=2
0xa0=4
0xa8=5
0xac=4
0xad=3
0xbc=5
0xbd=3
0xc2=1
0xc4=4
0xd4=2
0xdc=4
0xec=3
0xf4=4
0xf8=5		-0x00533a4c 0x9f 9f 38 53 00
0x00533a4c 0x9f 9f 38 53 00		-

Descriptor Root Table Sample

0x00442d95[id]
idrootscript+0script+4script+8bytes
00x004f867c0x004f8dd80x004f8df80x004f8e0cd8 8d 4f 00 f8 8d 4f 00 0c 8e 4f 00 63 61 72 61 5f 61 74 31 2e 63 6e 73
10x004e75a00x004e785c0x004e787c0x004e78905c 78 4e 00 7c 78 4e 00 90 78 4e 00 63 61 72 61 5f 72 73 31 2e 63 6e 73
20x005460040x005462fc0x0054631c0x00546330fc 62 54 00 1c 63 54 00 30 63 54 00 6d 69 64 64 61 74 61 2e 6d 6c 6b 00
30x004b218c0x004b35d40x004b36040x004b3620d4 35 4b 00 04 36 4b 00 20 36 4b 00 5c 36 4b 00 08 37 4b 00 b4 37 4b 00
40x004d58680x004d5ca80x004d5cc80x004d5d6ca8 5c 4d 00 c8 5c 4d 00 6c 5d 4d 00 dc 5c 4d 00 68 5d 4d 00 62 74 6c 5f
50x004da88c0x004dac1c0x004dac3c0x004dace01c ac 4d 00 3c ac 4d 00 e0 ac 4d 00 50 ac 4d 00 dc ac 4d 00 62 74 6c 5f
60x005240600x005243500x005243700x0052441450 43 52 00 70 43 52 00 14 44 52 00 84 43 52 00 10 44 52 00 62 74 6c 5f
70x004d21c00x004d222c0x004d224c0x004d22bc2c 22 4d 00 4c 22 4d 00 bc 22 4d 00 60 22 4d 00 b8 22 4d 00 7a 73 61 5f
80x0048c0940x0048c1440x0048c1640x0048c1e044 c1 48 00 64 c1 48 00 e0 c1 48 00 78 c1 48 00 dc c1 48 00 7a 73 6c 5f
90x0055734c0x005573cc0x005573ec0x00557468cc 73 55 00 ec 73 55 00 68 74 55 00 00 74 55 00 64 74 55 00 7a 73 61 5f
100x0052dad80x0052db580x0052db7c0x0052dbf858 db 52 00 7c db 52 00 f8 db 52 00 90 db 52 00 f4 db 52 00 7a 73 61 5f
110x004aab000x004aab840x004aaba40x004aac5484 ab 4a 00 a4 ab 4a 00 54 ac 4a 00 b8 ab 4a 00 50 ac 4a 00 7a 73 61 5f
120x0051be300x0051be980x0051beb80x0051bf2898 be 51 00 b8 be 51 00 28 bf 51 00 cc be 51 00 24 bf 51 00 7a 69 5f 69
130x004e1ad80x004e1b400x004e1b600x004e1bd040 1b 4e 00 60 1b 4e 00 d0 1b 4e 00 74 1b 4e 00 cc 1b 4e 00 7a 69 5f 61
140x004904380x004904d00x004904f00x0049056cd0 04 49 00 f0 04 49 00 6c 05 49 00 04 05 49 00 68 05 49 00 7a 69 5f 69
150x004a3d380x004a3dec0x004a3e0c0x004a3e94ec 3d 4a 00 0c 3e 4a 00 94 3e 4a 00 20 3e 4a 00 90 3e 4a 00 7a 69 5f 69
160x005037f00x005038700x005038900x0050390c70 38 50 00 90 38 50 00 0c 39 50 00 a4 38 50 00 08 39 50 00 7a 73 5f 73
170x00545c6c0x00545d040x00545d240x00545db004 5d 54 00 24 5d 54 00 b0 5d 54 00 38 5d 54 00 ac 5d 54 00 7a 73 5f 69
180x004e56600x004e56f80x004e57180x004e57a0f8 56 4e 00 18 57 4e 00 a0 57 4e 00 2c 57 4e 00 9c 57 4e 00 7a 73 5f 65
190x005434e00x005435780x005435980x0054362078 35 54 00 98 35 54 00 20 36 54 00 ac 35 54 00 1c 36 54 00 7a 73 5f 69
200x004cd5700x004cd6080x004cd6280x004cd6b008 d6 4c 00 28 d6 4c 00 b0 d6 4c 00 3c d6 4c 00 ac d6 4c 00 7a 73 5f 72
210x0044dcc40x0044dd5c0x0044dd7c0x0044de045c dd 44 00 7c dd 44 00 04 de 44 00 90 dd 44 00 00 de 44 00 7a 73 5f 6d
220x004a692c0x004a69ac0x004a69cc0x004a6a48ac 69 4a 00 cc 69 4a 00 48 6a 4a 00 e0 69 4a 00 44 6a 4a 00 7a 68 5f 64
230x004cbf8c0x004cc00c0x004cc02c0x004cc0b40c c0 4c 00 2c c0 4c 00 b4 c0 4c 00 40 c0 4c 00 b0 c0 4c 00 7a 68 5f 64
240x004e72380x004e72b80x004e72d80x004e7360b8 72 4e 00 d8 72 4e 00 60 73 4e 00 ec 72 4e 00 5c 73 4e 00 7a 68 5f 6b
250x005286100x005286a80x005286c80x00528750a8 86 52 00 c8 86 52 00 50 87 52 00 dc 86 52 00 4c 87 52 00 7a 68 5f 73
260x004ce06c0x004ce1040x004ce1240x004ce1ac04 e1 4c 00 24 e1 4c 00 ac e1 4c 00 38 e1 4c 00 a8 e1 4c 00 7a 68 5f 72
270x00546a7c0x00546adc0x00546afc0x00546b78dc 6a 54 00 fc 6a 54 00 78 6b 54 00 10 6b 54 00 74 6b 54 00 7a 6b 5f 6b
280x005459140x005459740x005459940x00545a1074 59 54 00 94 59 54 00 10 5a 54 00 a8 59 54 00 0c 5a 54 00 7a 6b 5f 62
290x004ede040x004ede640x004ede840x004edf0c64 de 4e 00 84 de 4e 00 0c df 4e 00 98 de 4e 00 08 df 4e 00 7a 6b 5f 71
300x004cdc280x004cdc980x004cdcb80x004cdd4c98 dc 4c 00 b8 dc 4c 00 4c dd 4c 00 cc dc 4c 00 48 dd 4c 00 7a 6b 5f 6d
310x0051372c0x005137dc0x005137fc0x00513878dc 37 51 00 fc 37 51 00 78 38 51 00 10 38 51 00 74 38 51 00 7a 73 5f 72
320x0043fbac0x0043fc5c0x0043fc7c0x0043fd105c fc 43 00 7c fc 43 00 10 fd 43 00 90 fc 43 00 0c fd 43 00 7a 73 5f 72
330x004d17340x004d17e40x004d18040x004d18e8e4 17 4d 00 04 18 4d 00 e8 18 4d 00 18 18 4d 00 e4 18 4d 00 7a 73 5f 72
340x004433080x004434000x004434200x004434a800 34 44 00 20 34 44 00 a8 34 44 00 34 34 44 00 a4 34 44 00 7a 73 6b 5f
350x005033d00x005034800x005034a00x0050353480 34 50 00 a0 34 50 00 34 35 50 00 b4 34 50 00 30 35 50 00 7a 6a 6b 5f
360x005455080x005455b80x005455d80x0054566cb8 55 54 00 d8 55 54 00 6c 56 54 00 ec 55 54 00 68 56 54 00 7a 6a 6b 5f
370x004934880x004935380x004935580x004935ec38 35 49 00 58 35 49 00 ec 35 49 00 6c 35 49 00 e8 35 49 00 7a 6a 6b 5f
380x004bda7c0x004bdb2c0x004bdb4c0x004bdbe02c db 4b 00 4c db 4b 00 e0 db 4b 00 60 db 4b 00 dc db 4b 00 7a 6a 6b 5f
390x004c28f40x004c2a080x004c2a280x004c2ae408 2a 4c 00 28 2a 4c 00 e4 2a 4c 00 3c 2a 4c 00 e0 2a 4c 00 7a 6b 67 5f

Initial Slot Row Sample

0x00457750 + id*0xd8; runtime overwrites parts
idslotfirst dwords+58/+59/+61/+62/+67
00x004577500x00000000
0x00010001
0x001e001e
0x0012001e
0x00120012
0x00640000		+0x58=3
+0x59=4
+0x61=0
+0x62=35
+0x67=0
10x004578280x00000000
0x00010101
0x001a001a
0x0018001a
0x00180018
0x00640000		+0x58=3
+0x59=4
+0x61=0
+0x62=28
+0x67=0
20x004579000x00000000
0x00010201
0x00200020
0x00100020
0x00100010
0x00640000		+0x58=0
+0x59=0
+0x61=0
+0x62=20
+0x67=0
30x004579d80x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000		+0x58=0
+0x59=0
+0x61=0
+0x62=0
+0x67=0
40x00457ab00x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000		+0x58=0
+0x59=0
+0x61=0
+0x62=0
+0x67=0
50x00457b880x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000		+0x58=0
+0x59=0
+0x61=0
+0x62=0
+0x67=0
60x00457c600x00000000
0x00010002
0x00000018
0x00c80000
0x00640064
0x00640064		+0x58=100
+0x59=120
+0x61=100
+0x62=125
+0x67=0
70x00457d380x00000000
0x00640000
0x00000000
0x00020402
0x0000000f
0x00130016		+0x58=30
+0x59=0
+0x61=125
+0x62=75
+0x67=100
80x00457e100x7d786450
0x00647d96
0x00000000
0x001e0000
0x00000000
0x00140802		+0x58=30
+0x59=0
+0x61=0
+0x62=100
+0x67=90
90x00457ee80x6e3c785a
0x640fc864
0x64966432
0x00641e32
0x00000000
0x000e0000		+0x58=20
+0x59=0
+0x61=0
+0x62=23
+0x67=0
100x00457fc00x00640041
0x32320001
0x5a7d1e46
0x64050532
0x19c86419
0x00413200		+0x58=0
+0x59=0
+0x61=0
+0x62=0
+0x67=0
110x004580980x00130014
0x001e002a
0x00640028
0x50640001
0x7d96645a
0x64056464		+0x58=0
+0x59=0
+0x61=0
+0x62=0
+0x67=0
120x004581700x0000005a
0x004f001c
0x00410014
0x0041004f
0x00640048
0x50640001		+0x58=125
+0x59=100
+0x61=0
+0x62=0
+0x67=0
130x004582480x00000000
0x00201b02
0x00000048
0x00830019
0x00620014
0x0096009d		+0x58=90
+0x59=60
+0x61=100
+0x62=100
+0x67=0
140x004583200x00000000
0x03e80000
0x00000000
0x00191f02
0x0000006c
0x00320064		+0x58=50
+0x59=0
+0x61=25
+0x62=80
+0x67=100
150x004583f80xaf55555f
0x007d6464
0x00000000
0x00320000
0x00000000
0x00192302		+0x58=65
+0x59=0
+0x61=0
+0x62=100
+0x67=75

다음 분석 타겟

  • Do not treat 0x0047e624/0x004a2cb0 as the field ESC opener without more proof; it is title/intro-adjacent.
  • Find a normal field-state root that calls add descriptor 0x62/0x80/0x99 and reaches 0x004ddc6c without the intro/title resource context.
  • Do not use descriptor-root closure 0x62 hits as opener proof unless they survive the ASCII/numeric-table filters.
  • Do not rescan the strict active-object +0xec inventory for the ESC opener unless the inventory extraction criteria change; it contains no 0x62 add and no 0x9f cancel command.
  • Do not search for a direct non-opcode caller of 0x00431fe8/0x00432541 as the opener; both routines are only called by opcode handlers. Find the upstream command stream/root that emits opcode 0x62 for the field status menu.