OpenMaidEngine/docs/opcode-reference.md

Opcode Reference (generated)

548 AGE catalog opcodes: 248 observed in Himegari and 300 compatibility stubs. Source of truth: vm-map/opcodes.toml.

adv

0x6e show-text (show-text, argc 2)

• summary: (layout_slot)(text) - build and publish a retained text run in the selected ADV layout, using the current glyph delay and raster style; slot zero selects the current layout.
• grounding: source=investigation, confidence=high
• evidence: Native op 0x6e enters adv_text_build_glyph_records@0x4576c0, which snapshots the selected layout cursor and active font/color state, rasterizes one record per CP932 glyph, advances the live cursor, and publishes records through adv_text_publish_next_glyph@0x451220 using text-manager charDelay. adv_text_layout_check_overflow@0x45efc0 returns independent horizontal/vertical bits from strict right/bottom comparisons; the builder's wrap branch excludes CP932 0x8141/0x8142/0x8176. The publisher passes record edges directly to gfx_object_bind_draw@0x47e870 and stops at layout+0x6c capacity. Native SC0000 traces show a 50-ms ordinary delay and retained layout publication; MAMES/ITMES/SKMES/INFOMES set delay zero for immediate UI descriptions.

The live 20-byte glyph record is {chain_flag,left,top,right,bottom}; rectangle members are edges. Overflow bits use strict bound<glyph-edge comparisons. With horizontal wrapping enabled, CP932 0x8141/0x8142/0x8176 (、/。/」) remain on the preceding line. Timed publication binds first_handle+reveal_index only while reveal_index is below the configured object capacity.

0x6f end-text-line (end-text-line, argc 1)

• summary: (layout_slot) - reset the selected layout's horizontal cursor and advance vertically by the primary font height plus configured line spacing.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 newline paths at 0x456fd0/0x452970 reset x to the layout's configured line origin and advance y by text-manager line spacing at +0x560 minus the negative primary LOGFONT height. The corpus pairs op 0x6f after show-text throughout ADV and retained UI helpers; STUDY's 16-pixel font plus 9-pixel spacing yields the observed 25-pixel MAMES line step.

0x70 define-adv-text-layout (define-adv-text-layout, argc 5)

• summary: (layout_slot)(width)(height)(x)(y) - configure an ADV text layout/surface and, when history recording is enabled, append its logical history index and arm the next retained record as a group start.
• grounding: source=investigation, confidence=high
• depended on by: 0x79, 0x1c1
• evidence: Ghidra /v2: op_0x70_handler@0x41e4e0 forwards the five operands and ctx+0x55110 to adv_text_layout_define@0x4550e0. The worker stores width/height/origin, creates or resizes surface slot layout+0x14, appends {layout_slot,current_record_count} to the 8-byte history index unless suppression bit31 is set, and arms manager+0xd40[slot] so the next 0x48-byte record receives group-start flag bit0.

0x71 reset-adv-text-layout (reset-adv-text-layout, argc 1)

• summary: (layout_slot) - clear/reset an ADV text layout, append a retained-history boundary when recording is enabled, snapshot the current code/text position, and commit pending ReadTextDB records. T1 entries target these structural reset sites.
• grounding: source=investigation, confidence=high
• depended on by: 0x79, 0x1c1
• evidence: Corpus: T1 targets op-0x71 records, but the operand is a layout slot (SC0000 uses 1; HISTORY computes 2..6), not an anchor id. Ghidra /v2: op_0x71_handler@0x41e540 calls adv_text_layout_reset@0x455210 with ctx+0x55110; adv_text_layout_reset_cursor_and_bounds_record@0x455070 reconstructs the initial five-dword record, then reset zeroes the complete layout surface and calls gfx_object_erase_range(first,capacity). It appends {slot,current_record_count}/arms group-start unless suppressed. The handler also snapshots (frame_pc-frame_codebase)/4 and text state and calls read_text_db_commit_pending@0x46ae20.

The reset recreates the initial {0,reset_x,reset_y,right,bottom} layout record, clears every pixel of source surface layout_slot+0x14, and erases the complete configured glyph-object range. Port status (2026-07-24): also commits the profile-owned ReadTextDB queue, records the current T1 coordinate, and refreshes per-message read-skip state.

0x72 wait-for-input (wait-for-input, argc 1)

• summary: (layout_slot) - arm the ADV input wait after text reveal completes; activate the configured wait indicator and, while Auto is enabled, arm the appropriate Auto-message timer.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x72_handler@0x41e690 fetches operand 1 and calls FUN_00453120(text_manager, layout_slot, -1, &state), then sets the input-wait run-state flags. FUN_00453120 resolves layout slot 0 as current and consumes the indicator descriptor at layout+0x3c configured by op 0x73. SYSTEM4 layout 1 uses SO000's bat strip; the click that completes show-text is consumed before this opcode is reached. The handler also checks ctx+0x55104 (Auto enabled): when ctx+0x6dbe4 has no pending voice it arms the timer with message:AutoMessageTime1, substituting 100 ms for configuration value zero. adv_input_service_poll@0x411230 waits for an active voice to finish and then arms AutoMessageTime0, likewise with a 100-ms zero fallback. The same click/Auto completion path calls read_text_db_queue_message@0x469340 with the current script id, resolved per-script message index, and message count; an already-skipped wait queues it directly in op 0x72. Op 0x71 later commits the pending records.

Port status (2026-07-24): after the blocking host releases this wait, the VM queues the current packed script id, T1 message index, and T1 count; the next 0x71 commits it. Already-read waits use the same queue path after immediate host release.

0x73 configure-adv-wait-indicator (configure-adv-wait-indicator, argc 10)

• summary: (layout_slot)(dst_x)(dst_y)(surface_slot)(src_x)(src_y)(cell_w)(cell_h)(terminal_frame)(frame_period_ms) - configure the animated marker shown while the selected ADV layout waits for input.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x73_configure_wait_indicator@0x41e900 passes operands 1..9 to adv_text_configure_wait_indicator@0x44ff60 and operand 10 to adv_indicator_set_frame_period@0x44d060. The worker writes surface/source rect, layout-relative destination, enabled=1, and terminal/column values to the selected layout at +0x3c..+0x60. SYSTEM4 executes set-texture 0x337c 0xc 0xff00 (raw id 0x337c = SO000.AGF, a decoded 360x27 strip of twelve 30x27 bat frames), then 0x73 1 385 140 12 0 0 30 27 12 48; the value 12 is the exclusive terminal/frame count, so animation publishes frames 0..11 and wraps before 12. Layout 1 begins at y=430, placing the 30x27 marker at screen (385,570), matching the original. Op 0x72 activates this descriptor only after reveal completion.

0x75 set-font-size (set-font-size, argc 1)

• summary: (pixels) - set the primary text font height and rebuild its native rasterization state.
• grounding: source=investigation, confidence=high
• depended on by: 0x205
• evidence: Ghidra /v2: op_0x75_set_font_size@0x41ea10 calls text_set_primary_font_size@0x415bd0 on ctx+0x14940. The worker writes the negated pixel height to both primary LOGFONT states, sets lfWidth to negative half the requested size, applies AGE's odd/32/33-pixel height adjustment, and rebuilds both GDI font resources plus glyph buffers. All shipped Himegari sizes are even and avoid the adjustment; HISTORY.BIN selects 22 pixels while active and restores 24 on exit.

0x76 set-text-color (set-text-color, argc 1)

• summary: (rgb) - set the current primary text color.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x76_handler@0x41ea50 byte-swaps operand RGB into text-manager+0x54c and rebuilds text raster state. Retained 0x48-byte history records copy this field to record+0x24; HISTORY.BIN uses white.

0x77 set-text-effect-color (set-text-effect-color, argc 1)

• summary: (rgb) - set the secondary outline/shadow color used by the current text raster mode.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x77_handler@0x41eab0 byte-swaps operand RGB into text-manager+0x550 and rebuilds text raster state. The rasterizer consumes it beside the primary color and retained history copies it to record+0x1c; HISTORY.BIN uses dark 0x333e52 while active.

0x78 set-text-render-mode (set-text-render-mode, argc 1)

• summary: (mode) - select the current text raster/effect mode.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x78_set_text_render_mode@0x41eb10 writes operand 1 to text-manager+0x558 and rebuilds font state. Himegari's DrawMode=1 path reaches text_raster_string_cached@0x45b600: mode 1 blits effect color at (+x,+y); mode 2 repeats a quarter-coverage glyph bitmap in primary color; mode 3 samples text_compute_outline_ellipse_offset@0x459860 around 360 degrees before the primary blit. The corpus uses only mode 1 (43 sites) and mode 3 (165 sites).

Mode 0 draws only the primary glyph. Mode 1 draws one effect-colored copy displaced by the configured x/y offset, then the primary glyph. Mode 2 adds a reduced-coverage primary-color bitmap pass after the ordinary glyph and is unused by Himegari scripts. Mode 3 repeatedly draws the effect glyph around an ellipse whose radii are the configured x/y extents, then draws the primary glyph; Himegari's (1,1) profile produces its one-pixel outline.

0x79 set-adv-text-reset-cursor (set-adv-text-reset-cursor, argc 3)

• summary: (layout_slot)(x)(y) - configure the cursor coordinates restored by a later reset of the selected ADV text layout. Slot 0 selects the current layout. This does not move the live cursor immediately; opcode 0x7a does that.
• grounding: source=investigation, confidence=high
• depends on: 0x70, 0x71
• evidence: Ghidra /v2: op_0x79_set_adv_text_reset_cursor@0x41eb50 reads three operands and calls adv_text_layout_set_reset_cursor@0x44fed0. Slot 0 resolves through the manager current-layout field at +0x4c8; the selected layout pointer is manager+0x414[slot], and x/y are stored at layout +0x1c/+0x20. adv_text_layout_reset_cursor_and_bounds_record@0x455070 later copies those configured values into the initial retained record on layout reset. SYSTEM4 has all nine corpus sites, paired with 0x1c1 after defining/resetting layouts 1..9; slot 1 configures (100,47), layouts 2..6 configure (45,42), layouts 7/8 (53,10), and layout 9 (10,10). Port implementation stores the configured cursor separately from the live cursor, restores it on 0x71, and replays the SYSTEM4 configuration in the direct-scene bootstrap.

0x7a set-adv-text-cursor (set-adv-text-cursor, argc 3)

• summary: (layout_slot)(x)(y) - set the cursor in the selected ADV text layout's last 20-byte record. Slot 0 selects the current layout.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x7a_handler@0x41eba0 fetches operands 3,2,1 and calls adv_text_set_cursor@0x4530f0 on text manager ctx+0x14940. Slot 0 resolves manager+0x4c8; manager+0x414[slot] selects the layout; text_layout_set_cursor@0x452530 writes x/y to +4/+8 of its last 0x14-byte record. SC0000 0x9d3 computes slot 1, x=75, y=47 before voiced show-text.

0x7f get-message-glyph-delay (u00414C60, argc 1)

• summary: (out) - read the current per-glyph ADV text reveal delay in milliseconds.
• grounding: source=investigation, confidence=high
• evidence: Complete corpus consistency across all 7 uses in 5 scripts: MAMES, ITMES, SKMES, and INFOMES save this value immediately before op 0x1b5 sets zero for retained UI-description text, then restore it on exit; CONFIG reads it for the message-speed slider, whose paired op 0x1b5 adjustments use 5-ms steps over 5..100. Native ADV traces identify the consumed text-manager field as the per-glyph charDelay (normally 50 ms).

0x85 clear-text-history (clear-text-history, argc 0)

• summary: Clear both the retained ADV text-record vector and its logical layout/message index.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x85_handler@0x4163d0 calls text_history_clear@0x455d70 on the text manager. The worker destroys the 0x48-byte record vector and clears the 8-byte logical index vector. Corpus: two sites in each of 143 normal ADV scripts bracket the retained backlog lifetime.

0x8b set-text-line-spacing (u0041B3D0, argc 1)

• summary: (pixels) - set the extra pixel spacing added between text lines.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x8b_set_text_line_spacing@0x41f270 stores operand 1 at text manager +0x560 (ctx+0x14ea0). adv_text_manager_initialize@0x456800 defaults it to 6. Horizontal newline/history paths at 0x456fd0/0x452970 advance y by (+0x560 - primary LOGFONT.lfHeight); lfHeight is negative, so this is font pixel height plus configured leading. Corpus arguments are 8 for 22/24px Mincho blocks and 9 for 16px Gothic blocks.

0x197 set-ruby-font-size (set-ruby-font-size, argc 1)

• summary: (pixels) - set the secondary/ruby text font height and rebuild its native rasterization state.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x197_handler@0x41f3b0 calls the parallel secondary-font size worker at 0x415c40 on ctx+0x14940, which updates the second LOGFONT pair and rebuilds it. UI font preset sequences consistently set primary size through 0x75 and the smaller ruby size through 0x197; HISTORY.BIN uses 22/8.

0x198 set-adv-text-layout-origin (set-adv-text-layout-origin, argc 3)

• summary: (layout_slot)(x)(y) - set the selected ADV text layout's presentation origin; slot 0 selects the current layout.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x198_handler@0x41f3f0 passes all three operands to adv_text_layout_set_origin@0x44ff30 on ctx+0x14940. The worker resolves slot 0 to current and writes x/y to layout+0x0c/+0x10. HISTORY.BIN positions its dynamically selected backlog layout with this opcode.

0x1a4 set-text-effect-offset (set-text-effect-offset, argc 2)

• summary: (x)(y) - set the horizontal and vertical extent/offset used by the current text effect mode.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a4_set_text_effect_offset@0x41f440 writes operands 1/2 to text-manager+0x564/+0x568. Mode 1 uses them as a single displaced effect-color shadow. Mode 3 treats them as ellipse radii and samples x=cos(angle)*offset_x, y=sin(angle)*offset_y around the glyph before the primary draw. The Himegari corpus pairs mode 1 with (0,0) at all 43 sites and mode 3 with (1,1) at all 164 paired sites.

0x1a5 set-font (set-font, argc 1)

• summary: (face) - select the primary GDI font face, derive its vertical-writing companion, and rebuild the native font/glyph state.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a5_set_font_face@0x42bbf0 resolves operand 1 and calls text_set_primary_font_face@0x42b1d0 on ctx+0x14940. The worker copies the face to manager+0x4e8, formats @%s into the vertical LOGFONT state at +0x18e74, rebuilds CreateFontIndirectA handles/metrics/glyph buffers through text_rebuild_primary_font_resources@0x44f7f0, and maintains both names in its font-family caches. SYS4INI seeds FONT=ＭＳ 明朝.

The requested CP932 face is copied into the primary LOGFONT lfFaceName and AGE also constructs an @-prefixed vertical face. Himegari uses only the full-width Windows family names ＭＳ 明朝 (168 sites) and ＭＳ ゴシック (39 sites). This is live raster state, not a declaration/no-op.

0x1b5 set-message-glyph-delay (u0041B5F0, argc 1)

• summary: (milliseconds) - set the per-glyph ADV text reveal delay; zero makes retained UI text publish immediately.
• grounding: source=investigation, confidence=high
• evidence: Complete corpus consistency across all 11 uses in 5 scripts: CONFIG initializes the value to 50 ms and changes it in 5-ms steps over 5..100; MAMES, ITMES, SKMES, and INFOMES bracket retained show-text descriptions with get op 0x7f, set 0, and restore the saved value. Native ADV traces show ordinary show-text consuming the corresponding charDelay with a 50-ms default.

0x1bb set-text-history-recording (set-text-history-recording, argc 1)

• summary: (enabled) - enable or suppress retained ADV text-history recording. Zero suppresses recording; one enables it.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1bb_handler@0x41f650 writes 0x80000000 to ctx+0x55110 for operand 0 and zero for operand 1, rejecting other values. Text/layout/metadata/voice paths test or propagate that high bit before appending retained history. HISTORY.BIN disables recording at entry and reenables it at exit so the backlog UI does not record itself.

0x1c1 set-adv-text-bounds (set-adv-text-bounds, argc 3)

• summary: (layout_slot)(right)(bottom) - configure the selected ADV text layout's right and bottom overflow boundaries in layout-local coordinates. Slot 0 selects the current layout.
• grounding: source=investigation, confidence=high
• depends on: 0x70, 0x71
• evidence: Ghidra /v2: op_0x1c1_set_adv_text_bounds@0x41f6c0 reads three operands and calls adv_text_layout_set_bounds@0x44ff00. That helper stores right/bottom at layout +0x24/+0x28; adv_text_layout_reset_cursor_and_bounds_record@0x455070 copies them into the initial retained record, and adv_text_layout_check_overflow@0x45efc0 compares glyph end coordinates against them. SYSTEM4 has all nine sites, paired with 0x79. Slot 1 computes (720,147), layouts 2..6 use (645,135), layout 7 (495,180), layout 8 (495,60), and layout 9 (250,368), proving these are layout-local boundary coordinates rather than width/height deltas. Port implementation retains the configured bounds in engine-owned layout snapshots and sizes ordinary/history Godot labels from right-cursor_x and bottom-cursor_y.

0x1ce set-adv-wait-indicator-enabled (u0041B9F0, argc 1)

• summary: (enabled) - explicitly start or stop the animated ADV input-wait indicator service.
• grounding: source=investigation, confidence=high
• evidence: Ghidra op_0x1ce_set_adv_wait_indicator_enabled@0x41f8c0 writes enabled to ctx+0x5f734. A nonzero value sets run bit 0x40000000, resets ctx+0x5f72c to frame zero, and starts the ctx+0x5f64c elapsed timer. Zero erases the indicator through adv_text_publish_wait_indicator_frame@0x453120 using ctx+0x6da84 and frame -2 when necessary, then clears the run bit. The corpus uses 0x1ce(0) on modal/menu entry, including HISTORY.BIN@0x3.

0x1d0 step-text-history (step-text-history, argc 3)

• summary: (out_layout_slot)(out_record_index)(delta) - resolve a cumulative delta from the latest retained ADV boundary and return its layout slot and first record index, or -1 outputs at a boundary.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1d0_step_text_history@0x427360 calls text_history_step_group@0x4537c0 with operand 3 and mode mask 2, then writes the index entry's first field (layout slot) and second field (record index). Layout define/reset set manager+0xd6c to the newest entry; the helper reads but does not mutate that anchor, so deltas are cumulative. It skips duplicate record offsets and record-flag bit1, and returns -1 outputs at a boundary. HISTORY.BIN uses negative cumulative deltas to count/page backward.

0x1d1 render-text-history (u0041BAE0, argc 5)

• summary: (layout_slot)(record_index)(flags)(color_a)(color_b) - render retained ADV text records into a selected text layout/surface.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1d1_render_text_history@0x41f950 forwards all five operands plus the text manager at ctx+0x14508 to text_history_render_records@0x4526c0. That helper walks 0x48-byte retained text records, applies record flags/colors/font state, measures strings, and rasterizes/binds them to the chosen layout. HISTORY.BIN uses it to draw each visible backlog line.

0x1d2 append-text-history-metadata (append-text-history-metadata, argc 2)

• summary: (metadata_type)(value) - append a typed metadata record to the current retained ADV message group when history recording is enabled.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1d2_append_text_history_metadata@0x41f9c0 tests ctx+0x55110, fetches operand 2 followed by operand 1, and calls text_history_append_typed_metadata@0x455f00 as (layout=0, type=operand1, value=operand2). The helper appends a 0x48-byte record with flag 0x20000000, value at +0x14, and type at +0x18, consuming the pending group-start flag if set. SC0000's voiced page at 0x96d writes (type=2, value=0x11), and HISTORY.BIN later queries type 2 before replay. The corpus has 17,323 uses. This opcode is effectful, not a statement marker.

0x1d3 find-text-history-value (find-text-history-value, argc 5)

• summary: (out_found)(out_value)(direction)(record_index)(value_type) - find typed metadata within one retained ADV message group.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1d3_find_text_history_value@0x4273c0 calls text_history_find_typed_value@0x450840 and writes its boolean result plus returned value. The helper scans forward from operand 4 until the next group-start bit for flag 0x20000000 and matching type in record+0x18, returning the last match's record+0x14. Operand 3 reaches an unused helper parameter. HISTORY.BIN passes 1 and queries types 1 and 2 for line decoration/name metadata.

0x1d4 find-text-history-pair (find-text-history-pair, argc 4)

• summary: (out_a)(out_b)(direction)(record_index) - find paired metadata within one retained ADV message group.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1d4_find_text_history_pair@0x427430 calls text_history_find_pair@0x4509f0 and writes two outputs. The helper scans forward from operand 4 until the next group-start bit and returns the last 0x40000000 record's +0x14/+0x18 pair, defaulting both outputs to -1. Operand 3 reaches an unused helper parameter. HISTORY.BIN passes 1 and uses the pair to expose voice replay for a backlog entry.

0x204 draw-string (draw-string, argc 4)

• summary: (surface_slot)(x)(y)(string) - rasterize a CP932 string immediately into a numbered graphics surface using current font/color/effect state.
• grounding: source=investigation, confidence=high
• depended on by: 0x205
• evidence: Ghidra /v2: op_0x204_handler@0x422a60 resolves operand 4 as a string, fetches surface/x/y, then calls draw_string_to_surface@0x450150 on text manager ctx+0x14940. The worker validates and locks gfx-manager surface table +0xa590[slot], chooses text_raster_string_uncached@0x459d90 or cached/effect path @0x45b600, rasterizes GDI GetGlyphOutlineA bitmaps through text_blit_glyph_bitmap@0x458c80 using font/color state +0x4d0/+0x458, then unlocks. SC0000 0x9b2 draws the speaker name into 400x30 surface 0xd at (1,1); following 0x1fb binds it to retained object 0xe678 at (74,444).

0x20a publish-adv-text-layout (u00420CE0, argc 1)

• summary: (layout_slot) - republish one ADV text layout and, while active, its current wait-indicator frame.
• grounding: source=investigation, confidence=high
• evidence: Ghidra op_0x20a_publish_adv_text_layout@0x422ce0 passes the requested slot to adv_text_publish_layout@0x450c80. That worker reads manager+0x570, clamps against record count, erases layout+0x68/+0x6c, and binds each record's native edges through gfx_object_bind_draw without a capacity check. If ADV run-state bit 0x40000000 is active, the opcode also calls adv_text_publish_wait_indicator_frame@0x453120 with ctx+0x5f72c. Slot zero resolves the text manager's current layout; the corpus always uses slot one, including HISTORY.BIN@0x13ab in its shared ADV redraw callback.

Republish snapshots the global reveal index, clamps only to the selected layout's record count, erases its configured retained-object interval, and rebinds records zero through the reveal index inclusive from surface layout_slot+0x14. Unlike timed reveal, native republish does not clamp to the configured object capacity; Himegari reserves 500 handles for every layout and shipped ordinary strings remain below that bound.

0x212 set-adv-wait-indicator-handle (set-adv-wait-indicator-handle, argc 2)

• summary: 0x212 (layout_slot)(retained_handle) — set the retained gfx handle used by that ADV layout's animated wait indicator.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: handler 0x4230c0 indexes ctx+0x14d54, which is text-manager ctx+0x14940 plus its layout-pointer table at +0x414, then writes layout+0x64. adv_text_publish_wait_indicator_frame@0x453120 reads layout+0x64 for both gfx_object_bind_draw and gfx_object_erase. The only corpus site is SYSTEM4(layout 1, handle 0xd674).

0x213 set-adv-text-object-range (set-adv-text-object-range, argc 3)

• summary: 0x213 (layout_slot)(first_handle)(capacity) — assign the retained gfx-object interval used to publish that ADV layout's glyphs.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: handler 0x423110 indexes the ADV layout pointer table at text-manager+0x414 (EngineCtx+0x14d54) and writes layout+0x68/+0x6c. adv_text_publish_next_glyph@0x451220 binds handle first+glyph_index; adv_text_layout_reset@0x455210 and adv_text_publish_layout@0x450c80 erase this interval. All nine corpus sites are SYSTEM4 layout initialization; layout 1 receives 0xd6d8/0x1f4.

0x2bd set-font-bold (set-font-bold, argc 1)

• summary: (enabled) - set the current primary text font weight to 700 when enabled or 0 when disabled, then rebuild the native font state.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x2bd_set_font_bold@0x4251c0 writes enabled?700:0 to LOGFONT weight at text-manager+0x4dc and calls text_rebuild_primary_font_resources@0x44f7f0. It immediately follows set-font throughout the UI corpus; HISTORY.BIN selects the Mincho face with bold enabled.

audio

0xb4 sfx-load (play-sound-effect, argc 2)

• summary: (packed_raw_resource_id)(channel) — synchronously open the universal SYS4INI/AAI catalog entry and replace the channel's decoded sound buffer without starting playback. A zero high byte is a raw SYS4INI index; a nonzero high byte selects an append catalog and uses the low 24-bit index. Native manager supports channels 0..12; SC0000 uses 0..9.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xb4_sfx_load@0x4201d0 -> sfx_channel_load@0x482500 -> asset_open_indexed_entry@0x44f390 + sound_decode_channel@0x483360. The opener indexes the base catalog directly for a zero high byte and selects mounted_aai[high_byte] otherwise. SC0000 0xc29 uses raw 0x28 = E0808.WAV. TITLE independently proves the addressing rule: raw 0x2aea = SE020.WAV is preloaded on channel 2 and started on every hover-selection change; raw 0x3321 = SE015.WAV is loaded/started on activation. The pre-fix port trace reported file=null under scene-manifest resolution; after switching Godot to ResolveSoundEffect/ResolvePacked, a synchronized TITLE->GAMESTART->TITLE trace resolves and starts SE020/SE015/SE013, confirmed audible by the user.

0xb5 sfx-start (u0041D050, argc 1)

• summary: (channel) — start the already-loaded channel once (logical loop=false). DirectSound publishes synchronously through Play(0,0,DSBPLAY_LOOPING); the low-level flag loops only the streaming ring, while decoder EOF stops logical playback.
• grounding: source=investigation, confidence=high
• evidence: Ghidra op 0xb5 handler 0x420210 passes mode 0 to sfx_channel_start@0x4825d0; mode 1 belongs to op 0xba. sound_buffer_start@0x484270 primes four quarter-buffer notifications then calls IDirectSoundBuffer::Play with flag 1 before returning. Native trace at SC0000 0xc2e: E0808 channel 0 start enters/leaves in the same ms, preloaded 1->0 and playing 0->1.

0xb6 sfx-release (u0041D080, argc 1)

• summary: (channel) - stop/destroy the channel decoder and DirectSound buffer, clear its retained resource id, and leave the slot empty. Idempotent for an unused channel.
• grounding: source=investigation, confidence=high
• evidence: Ghidra op 0xb6 handler 0x420250 -> sfx_channel_release@0x482600 -> sound_buffer_destroy@0x4831a0, which releases the per-channel object under its critical section and clears the slot. Native trace captured SC0000's channels 0..9 release sweep in consecutive calls.

0xb7 restart-bgm-loop (restart-bgm-loop, argc 1)

• summary: (track_or_zero) — force-start looping BGM even when the requested nonzero track already matches the retained current track. A zero operand restarts the retained track; when no track is retained it resolves to an idempotent stop. Any active BGM fade is completed/cancelled first.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xb7_force_play_bgm_loop@0x4202d0 first clears run-state bit 0x200 and forces bgm_fade_tick(...,100) when a fade is active, then calls bgm_force_play_track@0x464a90 with operand 1 and logical start mode 1. Unlike ordinary bgm_play_track@0x464750 (op 0xbf), the force worker has no same-track early return. A nonzero operand replaces EngineCtx.current_bgm_track_id; zero reuses it, or releases when it is also zero. The OGG backend forwards mode 1 through sound_buffer_start; sound_stream_fill_quarter rewinds at EOF only for nonzero mode. Corpus: CALLBACK_LOAD uses zero to restart restored music; CONFIG uses BGM029 for its music preview.

Implemented: the VM resolves zero through its retained current track and calls the explicit forced-restart host seam with mode 1. Godot replaces the OGG stream with Loop=true and cancels any deferred fade; ordinary op 0xbf keeps its same-track idempotence.

0xb8 stop-bgm (stop-bgm, argc 0)

• summary: Stop and release the active BGM source and clear the retained current track. Any active BGM fade is completed/cancelled first.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xb8_stop_bgm@0x416ba0 clears run-state bit 0x200 and forces bgm_fade_tick(...,100) when a fade is active, then calls bgm_stop_release@0x464690. The worker clears music-facade current track/status fields and invokes the active backend's stop/release method. Corpus: CONFIG stops the BGM029 preview while closing; MMODE stops current music before building the music-room screen.

Implemented: the VM clears its retained track and calls StopBgm. Godot cancels voice ducking and any fade, stops playback, releases the stream, and restores neutral gain.

0xb9 restart-bgm-once (restart-bgm-once, argc 1)

• summary: (track_or_zero) — force-start one-shot BGM even when the requested nonzero track already matches the retained current track. A zero operand restarts the retained track once; when no track is retained it resolves to an idempotent stop. Any active BGM fade is completed/cancelled first.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xb9_force_play_bgm_once@0x420330 shares op 0xb7's fade-finalization and bgm_force_play_track@0x464a90 path but supplies logical start mode 0. The OGG backend forwards that mode through sound_buffer_start; sound_stream_fill_quarter pads/stops at decoder EOF instead of rewinding. Corpus: STAGECLEAR's sole site force-starts BGM025 as its one-shot clear fanfare.

Implemented: the VM shares op 0xb7's retained-track/zero handling but supplies mode 0. Godot replaces the OGG stream with Loop=false, so BGM025 naturally stops at EOF.

0xba sfx-start-loop (sfx-start-loop, argc 1)

• summary: (channel) — start the already-loaded sound-effect channel with logical loop mode 1; the streaming decoder rewinds at EOF until the channel is replaced or released.
• grounding: source=investigation, confidence=high

0xbf play-bgm (play-bgm, argc 1)

• summary: Play background music by id. BGM is addressed by DIRECT LITERAL NAME: id -> BGM{id:03d}.OGG (in DATA3), unlike ordinary resource operands, which are universal packed SYS4INI/AAI ids. E.g. play-bgm 5 -> BGM005. Reasserting the facade's current track id is idempotent and preserves playback position; a different id starts the new track, while fade-to-zero clears the current id so a later request can start it again.
• grounding: source=investigation, confidence=high
• evidence: By-ear confirmed (2026-07-06): SC0000 real game plays BGM005 for play-bgm 0x5 and BGM008 for play-bgm 0x8 (we initially mis-played BGM006/BGM009 via the disproven scene-section model). Direct-name proven by play-bgm 0x23 -> BGM035.OGG, a real standalone track (the BGM set skips 030-034). Ghidra /v2 op_0xbf_handler@0x420390 forwards the numeric track to the BGM facade rather than asset_open_indexed_entry; the facade retains that id at EngineCtx.current_bgm_track_id for op 0xc0 and numbered saves. FIELD intentionally reasserts stage_bgm_id from its common post-action/event cleanup at 0x884a, reached after unit movement; restarting an identical host stream there resets the music once per unit during enemy turns. Op 0xc2 target zero releases the source and the VM clears the retained id. Diagnostic: Age.Cli audio SC0000.BIN.

0xc0 get-current-bgm-track (get-current-bgm-track, argc 1)

• summary: (track_out) - return the direct-name BGM track id retained by the music facade; the same value is restored from numbered saves.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 op_0xc0_get_current_bgm_track@0x428440 writes EngineCtx.current_bgm_track_id (+0xa0b84) to operand 1. op 0xbf's bgm_play_track retains the selected direct-name id at the same music-facade field; layout-3 serialization copies it to payload +0x008 and restoration copies it back. Installed SAVE00 stores 0x18, matching FORT's BGM024.

0xc2 fade-bgm (u0041D2B0, argc 2)

• summary: (target_percent)(duration_ms) — block script service while linearly fading current BGM volume to 0..100%. Durations >=1000 ms use 100 steps; shorter fades use 10. Target 0 releases the current BGM source at completion.
• grounding: source=investigation, confidence=high
• evidence: Ghidra op 0xc2 handler 0x4204c0 sets run-state 0x200, arms the service timer, and calls bgm_fade_arm@0x464830; bgm_fade_tick@0x464960 interpolates current/target percent and applies volume, releasing at target 0. Native SC0000 trace at 0x7c1/0x126c shows target 0, duration 3000, 1% ticks at about 30 ms.

Implemented through the blocking host fade clock. Target zero clears the VM's retained track after the wait and invokes the shared BGM stop/release seam, so Godot does not retain a silent bound stream.

0xc4 play-voice (play-voice, argc 1)

• summary: Play a voice clip by universal packed SYS4INI/AAI id with native playback/history variant 0. While all-message Skip is active, retain/replace the queued voice request instead of starting it; playback resumes from the latest queued request after Skip clears. Uses the same packed-id opener as textures/scripts/movies, unlike play-bgm's direct BGM{id:03d} naming.
• grounding: source=investigation, confidence=high
• evidence: By-ear confirmed (2026-07-06): SC0000 prologue voices play on their lines via Godot AudioStreamPlayer. Ghidra /v2 op_0xc4_handler@0x420610 passes operand 1 unchanged to voice_play_indexed_asset@0x488330, which passes it unchanged to asset_open_indexed_entry@0x44f390. That opener directly indexes the flat base table for a zero high byte or selects mounted_aai[high_byte] and low24 for append resources; it has no executing-scene input or section-base branch. SC0010 is decisive beyond base-zero SC0000: play-voice 0x120 is raw SYS4INI entry LILA1414.OGG, also SC0010 file_number 2; applying SC0010 base 0x11e again is wrong. ROOM's 0x3365 similarly resolves directly to EUA0016.OGG. While Skip is active the handler stores the latest id/zero variant at ctx+0x6dbf4/+0x6dbf8; adv_interpreter_tick starts and clears it when Skip/read-skip input ends. Lily's lines remain correctly form-gated.

0xc5 get-audio-volume (get-audio-volume, argc 2)

• summary: (category)(out_basis_points) — read the configured audio volume: 0=master, 1=music, 2=SFX, 3=voice, 4=movie. Native values use 0..10000 basis points.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xc5_get_audio_volume@0x428470 selects sound:Volume0..Volume4 for operand 1 values 0..4, queries the engine settings registry, and writes the result to operand 2. CONFIG.BIN uses the results to draw and adjust four visible category sliders; its initialization also sets Volume0..Volume3 to 10000/6500/5000/8000.

Port status (2026-07-29): implemented against the profile-lifetime AudioMixerSettings registry. The native -1 unconfigured sentinel is preserved; CONFIG reads receive the exact stored basis-point value.

0xc6 set-audio-volume (set-audio-volume, argc 2)

• summary: (category)(basis_points) — update the configured 0..10000 audio volume and apply it immediately: 0=master, 1=music, 2=SFX, 3=voice, 4=movie.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xc6_set_audio_volume@0x4206d0 writes sound:Volume0..Volume4 through the settings registry and dispatches selectors 0..4 to the live master/music/SFX/voice/movie volume workers. The master worker reapplies dependent volume to active movies and sound buffers; category workers update active BGM, ten SFX channels, voice channel 12, or the movie basis respectively.

Port status (2026-07-29): implemented with native SYS4REG.INI [sound] persistence and live Godot Master/Music/SFX/Voice/Movie bus gain changes. The CP932 preserving writer retains unrelated options; master and category buses compose multiplicatively like native basis-point application.

0xc7 get-audio-route-enabled (get-audio-route-enabled, argc 2)

• summary: (category)(out_enabled) — query whether an audio route is enabled: 1=music, 2=SFX, 3=voice, 4=movie. Writes boolean 0 or 1.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xc7_get_audio_route_enabled@0x4285a0 queries sound:Music/SE/Voice/Movie for selectors 1..4 and writes boolean 0/1 to operand 2. CONFIG.BIN's only site loops selectors 1..3 to choose enabled/disabled presentation.

Port status (2026-07-29): implemented as the read half of the shared audio-route registry loaded from native SYS4REG.INI.

0x1ba set-audio-route-enabled (set-audio-route-enabled, argc 2)

• summary: (category)(enabled) — enable or disable an audio route and persist the setting: 1=music, 2=SFX, 3=voice, 4=movie.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1ba_set_audio_route_enabled@0x420860 dispatches selectors 1..4 to the music/SFX/voice/movie enable workers. Those workers update the live route, stop active playback when disabling where applicable, write sound:Music/SE/Voice/Movie through the settings registry, and reject selectors outside 1..4. All 15 CONFIG.BIN sites pass literal 0/1.

Port status (2026-07-29): implemented with native SYS4REG.INI route persistence and live bus muting. AGE's raw music value band is preserved (Himegari 2 enabled toggles to -1 disabled); music changes restart/stop the retained stream, disabling SFX or voice stops active playback, and movie changes remain non-destructive.

0x1bd play-history-voice (u0041D910, argc 1)

• summary: Replay a voice id selected from retained ADV text history using native playback/history variant 1, preserving normal Skip and Auto-voice state behavior.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1bd_play_history_voice@0x420920 stops/replaces the active voice and calls voice_play_indexed_asset@0x488330 with operand 1 plus playback variant 1 when Skip is inactive (or queues that pair while Skip is active). When text-history recording is enabled it appends voice pair {id,1}; HISTORY.BIN suppresses recording with op 0x1bb while its UI is active, preventing replay clicks from recursively entering the backlog. The handler also sets adv_auto_voice_pending when playback exists. voice_play_indexed_asset retains the variant in sound-buffer state before starting channel 12; its exact audible meaning remains unproven.

0x1cf set-voice-bgm-duck-control (set-voice-bgm-duck-control, argc 1)

• summary: (flags) - replace the transient voice/BGM-duck control mask. Bit 0 suppresses automatic BGM attenuation when voice playback starts; zero permits the configured duck behavior.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1cf_set_voice_bgm_duck_control@0x4209f0 fetches operand 1 and writes it verbatim to ctx+0x6dbf0. The voice-start helper voice_bgm_duck_begin@0x406de0 tests bit 0 before arming BGM attenuation; native settings defaults register MusicFadeOnVoicePlaying=1 and MusicFadeOnVoicePlayingVol=50. SC0000 uses values 0 and 1.

0x2bf schedule-sfx-start (schedule-sfx-start, argc 3)

• summary: (channel)(start_mode)(delay_ms) - schedule the already-loaded SFX channel to enter the ordinary start worker after the requested delay. Channels are limited to 0..9.
• grounding: source=frida, confidence=high
• evidence: Ghidra /v2: op_0x2bf_schedule_sfx_start@0x425240 calls sfx_set_delay@0x482720 on the ctx+0x14024 sound facade. The worker's native error text names Function:SetDelay, validates channel<=9, and stores active/progress/delay/start-mode state. Existing SC0000 trace: SetDelay(channel 4, mode 0, 100) is followed about 109 ms later by the ordinary sfx_channel_start worker on channel 4 with mode 0 and no intervening 0xb5.

0x2c0 schedule-voice-playback (schedule-voice-playback, argc 3)

• summary: Arm delayed voice playback: (voice_id, playback_variant, delay_ms). The engine main tick starts the voice after the monotonic deadline.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x2c0_schedule_voice_playback@0x425290 forwards three operands to voice_schedule_delayed_playback@0x488480 on the text/ADV service at EngineCtx+0x14508. That worker stores active=1, start=0, delay at +0x424, voice id at +0x428, and variant at +0x42c. engine_main_tick_with_exception_policy calls voice_tick_delayed_playback@0x4884d0; after unsigned elapsed >= delay it clears the request and calls voice_play_indexed_asset(voice_id,variant). Corpus: one BTL site at 0x2f6e.

The setter replaces the single pending request, marks it active, and clears its start timestamp. On the first service tick the worker captures the current millisecond time; once unsigned elapsed time reaches delay_ms it clears the request and calls the ordinary indexed-voice player with voice_id and playback_variant. BTL's only call selects a randomized combat voice id, variant 0, and an entity-specific delay.

compute

0x60 random-modulo (u0041A270, argc 2)

• summary: (destination)(bound) — write CRT rand() % bound. A bound of zero first writes zero and then raises the engine's script error.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x60_handler@0x426970 calls imported CRT rand(), fetches operand 2, takes signed remainder, and writes operand 1. The zero-bound branch writes zero then throws error 0x10005. ROOM@0x5 calls (local 0x110,4), and its following branches select one of four character surface sets; variants 0..2 also select voice-id sextets. /v2 annotated and saved 2026-07-21.

0x61 lookup-array (lookup-array, argc 3)

• summary: Take a typed reference to base[index], preserving whether the base belongs to local or global storage.
• grounding: source=investigation, confidence=high
• evidence: HISTORY.BIN copies x/y tables into local-int cells 0x4 and 0x68, then lookup-array local-ptr <- local-int base supplies every right-side button and hovered-row draw coordinate. Treating the local operand's current value as a global base collapses those draws to (0,0); retaining the local address yields the native x=768/y=121..549 positions. RECOVER.BIN independently exercises the same pointer destination with global bases.

Operand 2 names the base cell itself: a global-bank operand produces a global reference and a local-bank operand produces a local reference. Operand 3 is added as the element offset. Pointer destinations retain that address domain; reading or writing the pointer dereferences the corresponding bank. Non-pointer destinations receive the addressed value. The same domain-preserving address model applies to lookup-array-2d (0x12c).

0x63 take-address (take-address, argc 2)

• summary: (destination_pointer)(source) - store the underlying typed storage address of source in destination_pointer; a pointer source aliases its existing target.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 op_0x63_take_address@0x426ac0 calls vm_operand_resolve_address@0x425a50 for operand 2 with unsubscripted indices -1/-1, then vm_pointer_operand_write@0x416090 for operand 1. The resolver returns a backing-cell address for direct global/local integer or string operands and the already-stored target for pointer operands. Corpus: 92 calls; destination is always local-ptr, while sources are local-ptr x81, local-int x7, and global-int x4. The C# VM preserves the local/global address domain and supports the native string-pointer destination forms; the traced natural boot reaches the UNITECH/CALCCC pair without fallback.

0x64 copy-inline-int-array (copy-inline-int-array, argc 2)

• summary: (destination)(inline_blob_offset) - decode the count-prefixed integer literal blob at codebase + offset*4 and copy its values to consecutive VM integer cells beginning at destination.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x64_handler@0x426b00 resolves operand 1 as a writable VM address, reads a count dword followed by values from frame_codebase + operand2*4, reverses the native loader's rotate/XOR in-memory representation with anti_tamper_a, and writes consecutive dwords. The original SYS4 file footer stores the count and values plainly; HISTORY.BIN uses 15 blobs to initialize its rectangle, coordinate, and lookup arrays.

0x6c zero-int-range (copy-to-global, argc 2)

• summary: (destination)(count) — write logical integer zero to count consecutive VM cells beginning at the resolved destination.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x6c_handler@0x426d90 resolves operand 1 as a writable VM pointer and fills operand-2 consecutive dwords with ctx->anti_tamper_b, the native encoded representation of logical integer zero. INITCONFIG@0x30 clears G[0x2e49..0x2e55] before registering those 13 profile cells; treating operand 2 as a scalar source incorrectly wrote 13 to G[0x2e49] and disabled ROOM's character greeting/farewell voices. /v2 annotated and saved 2026-07-21.

0x12f sort-indices-by-key-sum (sort-indices-by-key-sum, argc 4)

• summary: (out_indices, key_a, key_b, count) - write a stable ascending permutation of indices 0..count-1, ordered by the signed 32-bit sum key_a[index] + key_b[index].
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x12f_sort_indices_by_key_sum@0x429360 resolves operands 1-3 as integer-array bases, seeds out_indices[0]=0, then performs insertion sort. It shifts a prior index only when signed unchecked(key_a[new]+key_b[new]) is strictly less than the prior sum, so equal keys retain source order. Operand 4 is fetched as the exclusive count. The final native loop merely re-encodes direct writes into AGE's protected integer representation. Release corpus: 40 sites. CHMENU@0x1c9b sorts 100 party-slot keys and reads the populated tail; a no-op leaves the initial party slot undiscoverable even though UNITECH created it.

Implemented with domain-preserving addressed-array access, native signed 32-bit key addition/overflow, stable insertion ordering, repeated count reads, and the native unconditional out_indices[0]=0 write. Focused tests lock stability/overflow/zero-count behavior; a natural SYSTEM4-to-SC0000 state carried into release CHMENU proves the initial slot remains selected after the real roster sort.

0x132 reset-int-queue (reset-int-queue, argc 1)

• summary: (queue_id) - destroy any existing queue in the selected engine slot and replace it with an empty integer FIFO. Valid queue ids are 0..10.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x132_reset_int_queue@0x4217d0 fetches queue_id, rejects values above 10, invokes the existing object's virtual destructor, allocates 0x1c bytes, and calls int_queue_construct@0x4074c0. The constructor allocates 0x100 dwords, sets capacity and growth quantum to 0x100, and zeros the read/end/high-water indices. scene_context_init_reset@0x40b560 constructs exactly ten queue pointers at EngineCtx+0x55130 before the ten stack pointers at +0x55158, so admitted queue id 10 aliases stack slot 0. The only corpus sites are ATSEEK@0x32 and MVSEEK@0x145, both using id 0 before their flood fills.

Implemented as 11 safe logical queue slots so the handler-admitted 0..10 script ABI cannot corrupt adjacent host state. Reset replaces the selected queue with an empty FIFO pre-sized to the native 0x100-dword initial capacity; invalid ids halt with a diagnostic. Native physically owns only ten independent slots and its id-10 address aliases stack slot 0.

0x133 enqueue-int (enqueue-int, argc 2)

• summary: (queue_id, value) - append one integer to the selected engine FIFO, compacting consumed entries or growing its storage when required.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x133_enqueue_int@0x4218d0 validates queue_id 0..10, fetches value, and calls int_queue_enqueue@0x408930 on ctx's selected queue. The helper appends at end_index, compacts unread entries when read_index is nonzero, or grows capacity by the 0x100-dword quantum. All four corpus sites are in ATSEEK/MVSEEK and enqueue coordinates packed as (x << 16) + y.

Implemented with signed 32-bit value normalization into the selected FIFO. The port diagnoses invalid or never-reset slots; every shipped use resets queue 0 before enqueueing.

0x134 try-dequeue-int (try-dequeue-int, argc 3)

• summary: (queue_id, out_success, out_value) - consume the next integer from the selected FIFO, writing success=1 and the value; write success=0 when empty.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x134_try_dequeue_int@0x429620 validates queue_id 0..10 and compares the selected queue's read_index with end_index. When nonempty it reads data[read_index], increments read_index, updates the high-water index, writes 1 to operand 2, and writes the item to operand 3; when empty it writes 0 to operand 2. Native still writes a non-item implementation value to operand 3 on failure, but both shipped callers branch on out_success before reading out_value. ATSEEK and MVSEEK use the opcode as the loop head for their coordinate flood fills.

Implemented as FIFO TryDequeue: nonempty writes success=1 plus the signed dword; empty writes success=0 and retains the prior value destination because native's failure value is an unusable implementation pointer. Focused tests cover slot independence, ordering, empty/reset behavior, and signed values; real MVSEEK/ATSEEK regressions prove both searches expand beyond the origin.

0x135 bit-set (bit-set, argc 2)

• summary: (value)(bit_index) - set the indexed bit in the destination integer.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x135_handler@0x4296c0 fetches operand 2 as an unsigned bit index, rejects values >=32 through the native script-error path, fetches operand 1, and writes value | (1 << index). HIDEWIN.BIN sets index 1 at 0x13d and later tests mask 0x2 at 0x146.

0x136 bit-reset (bit-reset, argc 2)

• summary: (value)(bit_index) - clear the indexed bit in the destination integer.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x136_handler@0x429730 fetches operand 2 as an unsigned bit index, rejects values >=32 through the native script-error path, fetches operand 1, and writes value & ~(1 << index). HIDEWIN.BIN clears index 1 at 0x154 after testing mask 0x2.

0x137 reset-int-stack (reset-int-stack, argc 1)

• summary: (stack_id) - destroy the selected native integer LIFO and replace it with an empty stack.
• grounding: source=investigation, confidence=high
• depended on by: 0x138, 0x139
• evidence: Ghidra /v2: op_0x137_reset_int_stack@0x421940 destroys the pointer at EngineCtx+0x55158+id*4, allocates 0x14 bytes, and calls int_stack_construct@0x407410. The constructor allocates 0x100 dwords, records a 0x100-dword growth quantum, and initializes top=-1. scene_context_init_reset@0x40b560 constructs exactly ten entries [0,10), while the handler checks only id<=10; id 10 therefore lands at +0x55180, the numeric-glyph-style table. Corpus: CALLBACK_LOAD@0xf2 is the sole site and resets stack 0 before rebuilding the eight retained ADV layers.

AGE owns ten independent stack pointers at EngineCtx+0x55158 and reconstructs all ten on every scene-context reset. The handler's unsigned range check accidentally admits id 10 as well as 0..9; that address aliases the first dword of the numeric-glyph-style table rather than an eleventh stack. Himegari uses only id 0. Port status (2026-07-29): implemented with eleven safely isolated handler-addressable stacks, each initially available with native-equivalent 0x100-dword starting capacity and reconstructed empty on root scene reload. Reset replaces only the selected logical stack; invalid ids halt diagnostically.

0x138 push-int-stack (push-int-stack, argc 2)

• summary: (stack_id, value) - push one signed integer onto the selected native LIFO, growing its dword buffer by 0x100 entries when full.
• grounding: source=investigation, confidence=high
• depends on: 0x137
• depended on by: 0x139
• evidence: Ghidra /v2: op_0x138_push_int_stack@0x421a40 admits stack ids <=10 and calls int_stack_push@0x408860. The helper grows capacity by the stored 0x100-dword quantum when top+2 reaches capacity, increments top, and stores the value. The ten-slot/id-10 alias caveat is documented on op 0x137. No Himegari script calls this opcode.

Port status (2026-07-29): implemented over the scene-context stack registry. All signed dword values round-trip through the VM's integer-cell representation, and handler-addressable slot 10 remains independent host state.

0x139 try-pop-int-stack (try-pop-int-stack, argc 3)

• summary: (stack_id, out_success, out_value) - pop the most recently pushed integer and write success=1, or write success=0 when empty.
• grounding: source=investigation, confidence=high
• depends on: 0x137, 0x138
• evidence: Ghidra /v2: op_0x139_try_pop_int_stack@0x4297a0 reads top at stack+0x10; when top>=0 it reads data[top] and decrements top, then writes success and value. When top<0, the local holding the value was never replaced from the incoming EngineCtx pointer, yet operand 3 is still written. No Himegari script calls this opcode.

On success native writes the removed value. On empty, the release handler still writes its reused this/EngineCtx local into out_value, so that cell is implementation garbage and must not be consumed unless out_success is nonzero. Port status (2026-07-29): implemented as LIFO TryPop; success writes 1 and the signed dword, while empty writes 0 and deliberately preserves out_value rather than exposing a host pointer. The ten-slot/id-10 alias caveat is documented on op 0x137.

0x191 absolute-value (absolute-value, argc 2)

• summary: Write the signed 32-bit absolute value of operand 2 to operand 1.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x191_handler@0x426de0 computes (value ^ (value >> 31)) - (value >> 31) and writes it through vm_operand_write. All five Himegari calls are in SELACT, where it normalizes a signed preview delta before drawing it.

0x193 concat (concat, argc 3)

• summary: Concatenate operand 2 followed by operand 3 and replace the destination string. Sources are resolved before the write, so destination/source aliasing is supported.
• grounding: source=inference, confidence=high
• evidence: Kelebek identifies param1 = param2.concat(param3). Corpus ordering confirms direction and aliasing: ADDEXP builds level/result messages with both literal-prefix concat(dst, literal, dst) and append concat(dst, dst, literal); BTL has eight calls.

0x194 string-equals (string-equals, argc 3)

• summary: (out)(left)(right) - compare two complete SYS4 strings and write 1 when equal, otherwise 0.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 op_0x194_string_equals@0x426e20 fetches operands 2 and 3 through the string resolver, compares their byte ranges through FUN_004017a0, and writes compare_result==0 to integer operand 1. INIT2 and GAMESTART use it as a branch predicate for INPUTNAME/default-name handling; the natural Game Start diagnostic reached one GAMESTART call at 0x134c. The C# VM implements ordinal equality through the shared string resolver, covering literal, global, local, global-string-pointer, and local-string-pointer operands; the traced natural-boot regression proves the reached GAMESTART call no longer falls back.

0x195 string-not-equals (string-not-equals, argc 3)

• summary: (out)(left)(right) - compare two complete SYS4 strings and write 1 when different, otherwise 0.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: dispatch slot ctx[0x26c93+0x195] is op_0x195_string_not_equals@0x426f20. It resolves operands 2 and 3 as engine strings, compares their complete byte ranges through the same worker as sibling op 0x194, and writes compare_result!=0 to operand 1. Corpus: 17 sites; 15 immediately branch on the result. BUNKI uses three comparisons against the empty string for its optional title row.

This is the logical inverse of op 0x194 string-equals. Skipping it is stateful: the destination is not cleared. At BUNKI@0x905, local 0x99 still contains a nonzero graphics handle, so the missing write falsely reserves a 30-pixel title row and shifts every choice down. The C# VM implements ordinal inequality through the shared string resolver; focused tests cover literal/global/local/pointer operands and the exact empty-title stale-handle overwrite.

0x19d is-catalog-resource-unlocked (is-catalog-resource-unlocked, argc 2)

• summary: (out)(packed_resource_id) - return 1 when the shared SAVE.DAT catalog marker for the selected base or append resource decodes to AGE's deterministic per-index unlock stamp, otherwise 0.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x19d_handler@0x427810 fetches operand 2, rejects packed append ids when set:SaveVersion1/2 is older than 3.10, calls asset_catalog_is_resource_unlocked@0x415920 on ctx+0x9c24c, and writes the bool to operand 1. The helper selects base table +0x41c or append pointer table +0x3844 and compares the stored low word to (short)index * 0x6f99 - 0x4f50. asset_catalog_mark_resource_opened@0x44e410 writes the equivalent full stamp and encrypted profile marker after asset_open_indexed_entry succeeds. shared_profile_load decodes the catalog arrays with modular exponentiation before populating those tables. Corpus: four calls, in CGMODE, HMODE, MMODE, and ED. The installed port SAVE.DAT decodes to 7,966/13,208 base markers and 75/81 append markers; all 851 CGINIT gallery images and all 118 SPINIT H-scene scripts validate unlocked.

Base ids use the low 24-bit index in the primary catalog marker table. A nonzero high-byte selector addresses that append catalog's independent table; selectors require SaveVersion 3.10 or later, and AGE's signed selector lookup only supports 1..127. Successful native catalog opens write the stamp low16(index * 0x053d6f99 + 0xb0b0b0b0) and its encrypted SAVE.DAT form. CGMODE tests CGINIT image ids and HMODE tests SPINIT scene-script ids through this predicate. Port status (2026-07-28): shared-profile import decodes both catalog sections, successful VFS opens mark resources, shared SAVE.DAT writes native-decodable encrypted markers, and the opcode returns the live profile predicate.

0x1a6 half-byte-string-length (halve-strlen, argc 2)

• summary: Write half the resolved string's byte length, using integer truncation.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a6_half_byte_strlen@0x427020 resolves operand 2, scans to NUL, and vm_operand_write(1, strlen_bytes >> 1). DRAWCHP sites 0x9b3/0x9e2 multiply the result by 21 and subtract it from x=257 before draw-string.

Native applies strlen to the NUL-terminated engine byte string and shifts the byte count right by one. DRAWCHP uses this Shift-JIS-oriented width proxy to center unit and weapon names before rasterizing them into a scratch surface.

0x1b0 copy-dwords (copy-dwords, argc 3)

• summary: (source)(destination)(count) - copy count consecutive 32-bit cells from source to destination.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 op_0x1b0_copy_dwords@0x427060 fetches operand 3, resolves addressable operands 1 and 2 through vm_operand_resolve_address@0x425a50, and calls memcpy(destination, source, count*4). Corpus: 65 calls across direct global/local spans and local pointers; 43 are immediately preceded by take-address 0x63. The C# VM copies resolved integer-cell spans while retaining local/global address domains; focused tests cover direct spans and aliased pointers, and the traced natural boot reaches the UNITECH/CALCCC pair without fallback.

0x1c8 toString (toString, argc 2)

• summary: Convert the source signed 32-bit integer to its invariant decimal string and replace the destination string.
• grounding: source=inference, confidence=high
• evidence: Kelebek identifies integer-to-string conversion. All five corpus sites are in ADDEXP and feed concat immediately: level numbers, signed deployment-cost deltas, and movement deltas. Source types are global/local integer and the destination is a local string.

0x2c5 byte-string-length (strlen, argc 2)

• summary: Write the resolved NUL-terminated engine string's raw byte length.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x2c5_byte_strlen@0x42a690 resolves operand 2, scans byte-by-byte through the terminating NUL, and writes the byte count to operand 1. Corpus: 23 sites in 10 scripts. BUNKI uses two sites to size its temporary menu surface and horizontally place all primary option strings.

This is raw strlen(bytes), not a .NET UTF-16 character count. BUNKI compares all option/title byte lengths, adds four bytes of padding, and converts the result to pixels; skipping the opcode leaves its local maximum at zero, forcing the minimum-width menu and shifting every primary label right. The C# VM shares the configurable native-string byte counter used by op 0x1a6 (CP932 by default), including embedded-NUL termination; focused tests cover literals and local-string pointers.

0x2c6 cp932-character-length (cp932-character-length, argc 2)

• summary: (out)(string) - write the Japanese-locale multibyte character count of the CP932 string, counting a valid lead/trail pair as one character.
• grounding: source=investigation, confidence=high
• evidence: The real /v2 dispatch slot registers op_0x2c6_cp932_character_length@0x42a6d0. The handler sets LC_ALL to japanese, resolves operand 2, calls MSVC _mbstrlen, and writes the result to operand 1. INPUTNAME's sole site at 0x1002 uses this count as the loop bound before slicing each character with opcode 0x2c8.

This is character count rather than .NET UTF-16 length or raw CP932 byte length. Port status (2026-07-29): implemented by encoding the C-string prefix through VmOptions.NativeStringCodePage and counting valid CP932 lead/trail pairs as one character; focused tests cover mixed single-byte and double-byte characters.

0x2c8 cp932-substring (cp932-substring, argc 4)

• summary: (out)(string)(start)(count) - copy a CP932 substring selected by multibyte-character index and count without splitting valid lead/trail pairs.
• grounding: source=investigation, confidence=high
• evidence: The real /v2 dispatch slot registers op_0x2c8_cp932_substring@0x42c420. It copies operand 2 into a 256-byte buffer, sets LC_ALL to japanese, obtains _mbstrlen, reads start and count, clamps end=start+count to the character length when end is below 1 or beyond that length, and walks bytes with _mbbtype so CP932 lead/trail pairs are copied together. It writes the selected byte interval back through operand 1. INPUTNAME's sole site at 0x1021 loops substring(name,index,1) into its eight local character cells.

The release call uses nonnegative in-range indices and count 1. Port status (2026-07-29): implemented over encoded byte spans, preserving every valid lead/trail pair and reproducing native end clamping (end = length when start+count < 1 or > length) before selecting the half-open character interval [start,end).

control

0x1 throw-exit-request (throw-exit-request, argc 0)

• summary: () - raise Command_Exit_Exception with result value 1. The outer engine loop catches it, exits without advancing the VM PC, and returns control to the frontend. TITLE uses it for the fifth main-menu action; SYSTEM4 uses it after reporting an invalid execution mode.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1_throw_exit_request@0x4162e0 constructs a four-byte payload with value 1 and calls __CxxThrowException_8 with ThrowInfo 0x5a9710. Its CatchableTypeArray resolves to RTTI TypeDescriptor 0x5b13e8, .?AVCommand_Exit_Exception@@. The outer engine_main_tick_with_exception_policy@0x411840 has MSVC FuncInfo 0x5a9750; its typed catch entry maps Command_Exit_Exception to catch_CommandExitException_set_exit_result@0x412648, which forces result 1 and returns continuation 0x412961 for loop teardown/return. The dispatcher advances frame_pc only after a handler returns, and this catch never advances it. A separate generic error-dialog result-4 path at 0x412928 explicitly advances the PC, proving fall-through is opt-in and does not apply here. Corpus has exactly two sites: TITLE@0x393 after the fifth menu action's sound/sleep, and SYSTEM4@0x5b9 after printing 'invalid execution mode'. TITLE bytecode following 0x1 builds a developer debug menu and is unreachable in the retail native path. The frontend full-exit/return-to-title prompt remains a separate unimplemented boundary.

0x3 call-script (call-script, argc 1)

• summary: load & call another SYS4 script by id; id = RAW index into the SYS4INI file table (asset-index). Pushes a script frame; returns to caller when the callee ends.
• grounding: source=investigation, confidence=high
• evidence: native-RE (Ghidra): handler FUN_0041bc90 -> loader script_frame_load_resource@0x40e980 -> resolver asset_open_indexed_entry@0x44f390 indexes an 80-byte record table (FileDB+0x414 base, FileDB+0x40c count) at base+id*0x50 = the SYS4INI record layout {name[64],arc_id@0x40,file_number@0x44,offset@0x48,size@0x4c}. The FileDB is embedded at EngineCtx+0x9c24c, making those EngineCtx+0x9c660/+0x9c658. Confirmed statically: all 297 distinct base-corpus call-script ids resolve to a .BIN script with a semantically-exact name (0x1ab->ADDITEM, 0x2ae7->MES, 0x143->BUNKI, 0x329d->CALCREVISE), 0 out-of-range. See docs/engine-re.md + name-resolution.md #1.

op 0x03 (call-script, argc 1): call-script <id>. RESOLVED — the id is a direct RAW index into the SYS4INI global file table (the same table parse_sys4ini.py reads, but indexed WITHOUT skipping '@' placeholders; SYS4INI has 13208 records / 2 placeholders). No separate on-disk id->code registry exists; SYS4INI is the call-script registry. Native mechanism (dispatch table handler(op)=ctx[0x26c93+op], op 0x03 -> FUN_0041bc90):

1. FUN_0041bc90 fetches operand 1 (id), bounds-checks call depth (<=0x26), pushes a frame.
2. FUN_0040e980 (loader): opens the resource by id, reads the 0x20-byte SYS4 header, checks magic, allocates per-frame code/local buffers from the header var-counts, reads the bytecode body, pushes a script frame (stride 0x1e = 30 dwords, indexed by ctx[0x14f45]).
3. asset_open_indexed_entry@0x44f390 (resolver): its this is the embedded FileDB, not EngineCtx. Base record = [FileDB+0x414] + id0x50. It tries a LOOSE OVERRIDE first (CreateFileA on record.name -> mod/patch hook point), else opens archive [record.arc_id0x100 + FileDB+0x410], SetFilePointer to record.offset, size = record.size. High-byte-tagged ids select [FileDB+0x3028 + signed_selector*4] and index the chosen AAI by the low 24 bits. The base corpus has 0/297 explicit high-byte call-script operands; INIT2 op 0x143 supplies mounted record-zero ids dynamically. Companion op 0x8f call is INTRA-script (a local JSR), not cross-script -- see its entry. This also names the whole call graph statically (build/callscript-names.json).

0x6 preload-script-slot (preload-script-slot, argc 2)

• summary: (script_id, frame_slot) - load and allocate a script into a numbered engine context slot without executing it. Valid slots are 0..39.
• grounding: source=investigation, confidence=high
• depended on by: 0x8
• evidence: Ghidra /v2: op_0x6_preload_script_slot@0x41bdb0 fetches script_id and frame_slot, saves the current context index, selects frame_slot, rejects values above 39, calls script_frame_load_resource(ctx+0x54fe8, script_id), restores the caller index, and throws on load failure. SYSTEM4's only three sites preload ATSEEK.BIN (0x337f) into slot 0x1d, SETROUTE.BIN (0x3380) into 0x1e, and MVSEEK.BIN (0x3381) into 0x1f before INIT2.

Implemented as persistent VM-owned preloaded slots containing the resolved script id and one reusable ExecFrame. Replacing a slot allocates a fresh frame/local bank; invalid slots, absent providers, and unresolved scripts halt diagnostically. Root scene reload clears the slots before SYSTEM4 registers them again.

0x8 call-preloaded-script-slot (call-preloaded-script-slot, argc 1)

• summary: (frame_slot) - restart and execute the script previously loaded into that engine context slot, returning to the caller when it exits.
• grounding: source=investigation, confidence=high
• depends on: 0x6
• evidence: Ghidra /v2: op_0x8_call_preloaded_script_slot@0x41bf00 fetches frame_slot, switches cur_ctx_index to it, errors if frame_codebase is null, stores the caller context index into the selected slot's ctx_record_base, resets its PC to codebase and instruction length to zero, and returns to the dispatcher. op_0x2_exit_or_return_frame@0x417940 disposes only an adjacent child (parent+1==current); SYSTEM4's non-adjacent slots 0x1d..0x1f therefore retain their allocated local banks between calls. Corpus has 64 sites, exclusively slots 0x1d/0x1e/0x1f. FIELD uses 0x1f for MVSEEK, 0x1d for ATSEEK, and 0x1e for SETROUTE.

Implemented by recursively executing the reusable preloaded ExecFrame while preserving its local banks across invocations, restarting at script offset zero, and propagating halt/root-reload/exit outcomes like ordinary call-script. The port emits normal call-script trace events for observability. Focused tests prove code restart plus local persistence and drive the real MVSEEK through SYSTEM4's exact 0x06/0x08 ABI.

0x9 exit-script (exit-script, argc 0)

• summary: () - discard the complete active script stack, reset scene-owned engine services, and load raw script resource 0 as the new root. The global VM banks and process-owned configuration survive; the initial-root-run flag queried by op 0x130 is cleared so LOGO/OP are not replayed.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x9_reset_scene_and_reload_root@0x418f50 clears EngineCtx+0x54ff0, disposes all 40 interpreter-frame slots with script_frame_dispose@0x40e610, aborts timed/input callback state, calls scene_context_init_reset@0x40b3b0, resets hotspot/input services, optionally releases AutoFreeTex surfaces, then calls script_frame_load_resource(...,0). The scene reset clears interpreter/ADV/input/retained-gfx state and normally releases the 1000 surface/movie slots; it does not clear the VM global bank or engine configuration. Corpus sites are terminal scene/control exits rather than ordinary local returns.

Implemented as a whole-stack root-reload boundary in the persistent VM. A request propagates through every nested call-script frame without resuming caller instructions, clears VM/host scene presentation and input state, cancels deferred SFX starts while preserving active/process-owned audio, preserves globals/external globals and process-owned host configuration/caches, then resolves raw resource 0 through the script provider and starts it at offset zero. The retained history backlog is deliberately preserved pending a separate proof of its native lifetime; recording suppression is reset.

0x7b coroutine-save-yield-handlers (u0041ADB0, argc 2)

• summary: (handler1_pc)(handler2_pc) — scene-coroutine: save the two per-frame yield/resume handler PCs. Native writes op1→ctx[0x6da88+idx4], op2→ctx[0x6db28+idx4] (idx=ctx[0x53d14] script-context index); its generic handler prologue records the 5-dword instruction length. SC0000 0x79: 0x7b label_3c9 label_41e registers the ADV per-frame render→poll→yield handlers. Part of the scene-coroutine framework (see engine-re.md §Scene-coroutine framework); pairs with 0x7c (resume) + 0x140 (loop iterator).
• grounding: source=investigation, confidence=high
• evidence: Ghidra: handler FUN_0041ebf0 (dispatch ctx[0x26c93+0x7b]) = {frame_instruction_word_count[idx]=5; ctx[0x6da88+idx4]=op1; ctx[0x6db28+idx4]=op2}. Both operands are code PCs (handler labels).

0x7c coroutine-resume (u00416A90, argc 0)

• summary: () — scene-coroutine RESUME point. Native requires run-state bit 0x2000000 (ctx[0x6dbc8]) set — THROWS (__CxxThrowException) if unset, so it is only ever reached on a scheduler-driven re-entry, NEVER on a cold first pass (cold flow jmps over it). Restores PC=ctx[0x53d28]+ctx[0x6dbcc]*4, clears the run-bit (ctx+0xa0ce4 &= ~0x2000000), resets input/line state. SC0000 0x443 (falls into the main loop label_444). See engine-re.md §Scene-coroutine framework.
• grounding: source=investigation, confidence=high
• evidence: Ghidra: handler FUN_00417cb0 (dispatch ctx[0x26c93+0x7c]). Guards on (ctx[0x6dbc8] & 0x2000000)==0 → throw; else restores PC = ctx[0x53d2c-slot] = ctx[0x53d28]+ctx[0x6dbcc]*4, ctx[0xa0ce4]=ctx[0x6dbc8]&0xfdffffff, clears input state (ctx[0x13bdc]/0xc6f8=-1 etc.).

0x8f call (call, argc 1)

• summary: intra-script subroutine call (local JSR): PC = frame.codebase + operand*4; pushes a return address on the per-frame return stack. NOT cross-script (that is call-script 0x03).
• grounding: source=investigation, confidence=high
• evidence: native-RE (Ghidra): handler FUN_0041fba0 (= ctx[0x26c93+0x8f]) sets [frame PC @+0x53d2c] = [frame codebase @+0x53d28] + operand*4 and pushes ((pc-base)>>2)+3 onto the per-frame return stack ([ctx+0x552e8]/[ctx+0x55248]). Target is a code OFFSET within the current script (matches header table T3 tag 0x8F = local call targets), confirming it is a local JSR, not a script load.

0xa1 begin-value-switch (begin-value-switch, argc 0)

• summary: Clear and initialize the current value-to-PC dispatch table used by the following case and switch-jump opcodes.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xa1_handler@0x42bd60 resets the engine's open-addressing value-dispatch table with capacity 0xfff. Corpus has 12 canonical sequences of 0xa1, one or more 0xa2 cases, then 0xa3 dispatch.

0xa2 add-value-switch-case (add-value-switch-case, argc 2)

• summary: (case_value)(target_pc) - format the VM value as a dispatch key and add its branch target to the current switch table.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xa2_handler@0x42d310 formats operand 1 through vm_value_format_string@0x418860 and inserts operand 2 into value_dispatch_insert_case@0x42cf70. HISTORY.BIN maps action values 0,3,4,5,6 to callback branches; it is generic switch/case dispatch, not menu registration.

0xa3 value-switch-jump (value-switch-jump, argc 2)

• summary: (selector)(default_target) - jump to the target registered for selector, or to the supplied default target when no case matches.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xa3_handler@0x420060 formats operand 1, queries value_dispatch_lookup@0x419290, writes the matched or operand-2 default PC into the current frame, and clears the command type. Corpus pairs it with 0xa1/0xa2 in 12 generic switch sequences.

0xae continue-save-load-stack-restore (continue-save-load-stack-restore, argc 0)

• summary: () - during serialized save restoration, replace the current frame PC with its saved resume/call target and advance through the saved script-context stack; otherwise a no-op.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xae_continue_save_load_stack_restore@0x416790 first tests ctx+0x53d24 (set by save_data_deserialize_and_begin_restore@0x40fd10). When clear it returns. When set, it selects the serialized frame layout through set:SaveVersion1/2, restores the current PC from that layout's saved return/call target, advances through contexts with script_frame_restore_saved_layout@0x40f2d0, and clears the restore flag on reaching the saved terminal context. The restore helper calls script_frame_load_resource@0x40e980, which initializes each new frame PC to its script codebase; the script therefore executes its ordinary prologue before reaching 0xae. Native parent contexts retain restored coordinates while the child runs. SAVE00 -> SAVE03 proved the port must retain the terminal 0x1ad boundary; SAVE00 -> SAVE04 proved a managed parent parked at synthetic 0xae must serialize original resume=8/call=8 rather than synthetic -1/-1; slot 006 proved direct entry at 0xae skips FIELD's zoom-table prologue and collapses the dungeon map. Its 305 corpus sites overwhelmingly follow coroutine-resume/call boundaries.

Layout 3 frame d259 indexes SYS4 T1 read-message reset sites, d260 indexes T2 call-script sites, and the saved local return stack indexes T3 local-call sites. Port status (2026-07-24): each saved script is loaded at its ordinary entry, runs its frame-local prologue, and reaches 0xae itself; the active path then reconstructs the saved recursive frame chain, preserves each synthetic ancestor's original T1/T2/T3 coordinates while its restored child is active, reinstates the terminal restored frame as opcode 0x1ad's save boundary, and resumes it at T1. The installed SAVE00 continuation gate proves SYSTEM4 -> FORT restoration reaches FORT's CHMENU gameplay poll; the unchanged port-authored dungeon slot 006 proves FIELD's pre-rendezvous zoom table is initialized; synthetic gates assert both root/child prologue execution, SaveRestore rather than ordinary CallScript entry, exclusion of nested SAVE helpers from a re-save, and reload of that rewrite without ordinary boot re-entry.

0xc8 sleep (sleep, argc 1)

• summary: Pause the current script for milliseconds while retained presentation continues.
• grounding: source=investigation, confidence=high
• evidence: Ghidra: dispatch ctx[0x26c93+0xc8]=0x420ec0; sleep_op_0xc8 + sleep_timer_arm decoded/annotated 2026-07-08. docs/engine-re.md sleep section.

Native handler sleep_op_0xc8 @0x420ec0 is NON-BLOCKING: it arms a timer (sleep_timer_arm @0x44cff0 at ctx+0x5f304 = active flag + start tick + duration) that the engine main loop polls, resuming the script when elapsed. Operand UNIT = MILLISECONDS (start = ms tick source DAT_0056f3d4, timeGetTime/GetTickCount class), and the native arm helper clamps duration to a minimum of 1 ms. ROOM's input loop deliberately uses sleep(0), making it a one-engine-tick yield rather than a no-op. The handler also records its generic 3-dword instruction length and runs anti-tamper checks, neither needed host-side. Port equivalent: the Godot host parks the VM thread for max(1, scaled duration) ms while the presentation compositor continues. Sleep is one proven presentation-capable service boundary; ordinary AE setup runs burst-fast to 0x21c and is not paced per opcode. Headless hosts no-op it (parity).

0xd0 get-monotonic-time-ms (get-monotonic-time-ms, argc 1)

• summary: Write the native monotonic millisecond clock to operand 1. Battle presentation uses paired samples around timed callback sequences to calculate elapsed time.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xd0_handler@0x428860 calls imp_winmm_timeGetTime and writes the returned 32-bit tick count to operand 1. BTL samples it before and after its timed HP/damage presentation; MVRTN has the other two corpus calls.

0xd3 begin-timed-callback-sequence (u00425960, argc 0)

• summary: Clear and initialize the current script frame's timed local-callback sequence.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xd3_handler@0x41a430 clears the 16-byte-entry vector at ctx+0x5f694, sets last index ctx+0x5f6a4 and abort target ctx+0x5f690 to -1, and resets playback cursor ctx+0x5f6a8 to zero. HISTORY.BIN@0xbf9 begins its seven-event scrollbar interpolation schedule.

0xd4 append-relative-timed-callbacks (u004266F0, argc 4)

• summary: Append repeated relative deadlines and their on-time/catch-up local callback targets to the current frame's timed sequence.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xd4_handler@0x428890 loops operand 2 times, accumulates operand 1 onto the preceding deadline, stores operand 3 at entry+8 and operand 4 at entry+0xc, and appends each 16-byte entry. HISTORY.BIN@0xbfa/0xc03/0xc0c produces deadlines 10,20,30,40,50,51,52 ms.

0xd5 run-timed-callback-sequence (u004262C0, argc 1)

• summary: Start or service the frame-local timed sequence, dispatching scheduled local callbacks through the penultimate entry and selecting the catch-up target when the following deadline is already late.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xd5_handler@0x421090 retains the current script resource, starts the ctx+0x5f3ac timer, sorts the schedule, and keeps run-state bit 0x40 active only while cursor < last_index, making the final entry a non-dispatched look-ahead sentinel. timed_callback_sequence_tick@0x408170 waits to each deadline, compares the following entry deadline with elapsed time to select entry+8 versus entry+0xc, redirects the frame PC, and advances ctx+0x5f6a8. engine_main_tick_with_exception_policy@0x411840 bypasses its ordinary gfx_render_frame path while only run-state bit 0x40 owns the wait. Operand 1 is an optional abort/fallback PC; HISTORY and BUNKIMOVE pass 0xffffffff.

Run-state bit 0x40 suppresses the outer loop's ordinary retained-frame renderer while the timed service sleeps. A scheduled callback becomes visible only through its own explicit presentation opcode; the pacing wait is not itself a retained-state publication boundary.

0xd9 clear-run-state-0x1000 (u00415880, argc 0)

• summary: Clear native run/service bit 0x1000; if the secondary context is active, clear the same bit there. SC0000 executes it once after the initial SFX-channel reset, with no VM-visible result.
• grounding: source=investigation, confidence=high, noop_headless=True
• evidence: Ghidra op 0xd9 handler 0x416da0: ctx->run_state_flags &= ~0x1000; when ctx+0x6f8b8 is nonzero, also clears bit 0x1000 at ctx+0x53d20. No operands, calls, or return value.

0x130 get-initial-root-run (get-initial-root-run, argc 1)

• summary: (out) - write the engine's initial-root-run flag. It is initialized to 1 when the AGE context is constructed and cleared by op 0x9 before that opcode resets state and reloads root script id 0. SYSTEM4 uses the value to call LOGO.BIN and OP.BIN only on the process's initial root run.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x130_get_initial_root_run@0x4295b0 copies EngineCtx+0x54ff0 to operand 1. FUN_00413860 initializes +0x54ff0 to 1 at 0x413cc7/0x413d15; op_0x9_reset_scene_and_reload_root@0x418f50 is its only later writer and clears it before scene_context_init_reset plus script_frame_load_resource(...,0). Corpus: sole site SYSTEM4@0x29a branches to LOGO.BIN then OP.BIN only when the returned value is nonzero.

Implemented as process-lifecycle state owned by the persistent VM: it begins at one and op 0x9 clears it. It is not a script global, save/profile value, command-line seed, or script-name special case.

0x140 coroutine-label-yield (u0041F9C0, argc 4)

• summary: (out)(name_str)(sub_str)(in) — scene-coroutine LOOP ITERATOR / labeled yield. Handler copies name/sub strings + the int operand and calls AGERC host command 8 through g_pfnAgercHostCallback(8, ctx[0x54fe8], &{name,sub,in}); writes the returned PC-like value to operand 1. In SC0000 label_462 'ループ開始' (@0x46d): out=G[0x6be]=LABEL('J',G[0x6be]); loop runs the intro-setup body (incl. call label_125bd = slot-table fill G[0x3239..0x324e]=4..11) and jmps back until out==G[0x6c3] (a per-scene exit-PC immediate) → mov aba5c 0 → content. The gate G[0xaba5c]==1 that opens this loop is NATIVE scene-entry state (no script sets it to 1). PORT = HOST-MODEL IMPLEMENTED: synthesize the ADV scene-entry gate, run the LABEL/J setup body once, then return the structurally discovered per-scene terminal; do not emulate the service dialog. See engine-re.md §Scene-coroutine framework.
• grounding: source=investigation, confidence=med
• evidence: Ghidra: handler 0x4299c0 (dispatch ctx[0x9b74c]=0x4299c0; created+typed EngineCtx*+annotated; Kelebek u0041F9C0 = VA-drift). Records the generic 9-dword instruction length; op2→local_204, op3→local_104, op4→local_208; g_pfnAgercHostCallback(8, ctx[0x54fe8], &local_210) → FUN_00425fb0(1,ret). A read-only probe resolves the callback to AGERC.DLL+0x1050; imported /support/AGERC.DLL identifies agerc_dispatch_host_command@0x100025f0 and its command-8 dialog-resource branch. FUN_00405740 calls the same dispatcher with command 3 and branches on return 1/2 for transition progress. Command 8's exact LABEL iterator calculation remains unresolved, so confidence remains medium.

0x143 run-mounted-append-autoruns (u00415FB0, argc 0)

• summary: () - enqueue record zero from every mounted nonzero AAI selector in ascending selector order, then execute those packed scripts serially before resuming the caller.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x143_run_mounted_append_autoruns@0x4172f0 scans mounted_aai_catalogs[1..255] at EngineCtx+0x9f278, enqueues selector<<24 through script_launch_queue_enqueue@0x40f820 while dispatch is suppressed, advances the caller PC, then tail-dispatches through script_launch_queue_dispatch_next@0x40f6e0. Positive queue entries load in reserved frame 37 with return sentinel -10; op_0x2_exit_or_return_frame@0x417940 dispatches the next queued entry or restores the suspended caller. Corpus: the sole site is INIT2@0x17f, after its 23 base INIT children and global/array setup and immediately before TUNE.BIN.

The opcode does not look up an AUTORUN filename. For each non-null mounted catalog pointer in selector slots 1 through 255, it constructs the packed id selector << 24, whose low 24-bit record index is zero. At Himegari cold boot the native catalog loader has already mounted APPEND01 in selector 1 before SYSTEM4 starts. SYSTEM4 calls INIT2; INIT2 runs EBINIT through SCINIT plus BTANINIT2, completes its base registry setup, executes this opcode, and resumes at its following TUNE call only after every queued record-zero script returns. Installed selector 1 record zero is $1$AUTORUN.BIN, which applies the append INIT deltas and registrations. This is a serial base-then-append patch boundary, not a filename overlay.

PORT = IMPLEMENTED. IScriptProvider.MountedAppendSelectors exposes mounted selector identity without coupling the VM to the SYS4 catalog type. The opcode snapshots, deduplicates, and sorts selectors, constructs each packed record-zero id, and runs the resolved script through the ordinary nested-frame machinery before resuming INIT2. Focused tests protect ordering, packed-id construction, caller suspension, and unresolved record-zero failure. Natural SYSTEM4 boot proves BTANINIT2 -> $1$AUTORUN.BIN -> $1$EBINIT.BIN -> TUNE.

0x199 yield-adv-coroutine (u00414D50, argc 0)

• summary: Yield/re-enter the registered ADV coroutine handler. The fifth standard chrome button uses this transition to enter the HIDEWIN/window-hidden flow.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x199_yield_adv_coroutine@0x416440 selects the registered coroutine yield-A or yield-B PC according to ctx+0x6dbc8, saves the current resume offset/state, and redirects the current frame PC. SC0000's x=772 ADV button invokes it; the SO001 tooltip at source x=528 reads Window hide, and the surrounding coroutine calls HIDEWIN.BIN.

0x19e save-numbered-slot (save-numbered-slot, argc 2)

• summary: (status_out)(slot) - write the active native VM/session state to SAVE%02d.DAT. The file is truncated/replaced in place after any compatibility-overwrite prompt; successful serialization also flushes shared SAVE.DAT/RT.DAT.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x19e_save_numbered_slot@0x4278b0 formats SAVE%2.2d.DAT, checks an existing header and prompts before replacing an incompatible file, opens CREATE_ALWAYS, reads set:SaveVersion2 then set:SaveVersion1, and calls context_state_serialize@0x40d320. Corpus: two calls in SAVE.BIN and SELSTAGE.BIN.

Uses set:SaveVersion1 and set:SaveVersion2 to choose the numbered payload layout. Status is 0 on success and 1 on refusal, open/create failure, or serializer failure. Numbered .DAT files do not use the shared profile's temp/backup replacement scheme. Port status (2026-07-24): layout 3 writes fixed state, six native banks, T1/T2/T3 frame records, surface/resource reload state, retained gfx records, the appended history tail, and then flushes shared SAVE.DAT/RT.DAT.

0x19f load-numbered-slot-data-only (load-numbered-slot-data-only, argc 2)

• summary: (status_out)(slot) - decode SAVE%02d.DAT without restoring the active script-frame chain or text history.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x19f_load_numbered_slot_data_only@0x427a40 opens SAVE%2.2d.DAT and calls save_data_deserialize_and_begin_restore@0x40fd10(handle, SaveVersion1, SaveVersion2, 0, 0), then decodes protected integer globals. Missing/open failure writes status 1; otherwise the decoder result is returned. Corpus count: 0.

This is the data-only companion to full-resume opcode 0x1a1. It selects the configured SaveVersion layout and restores serialized state with both runtime/history restore flags clear. Himegari's shipped script corpus does not call it, but it belongs to the shared SYS4 persistence ABI. Port status (2026-07-24): implemented for layout 3 through the same bank/resource/gfx decoder without activating history or frame restoration.

0x1a0 query-numbered-save-metadata (query-numbered-save-metadata, argc 9)

• summary: (status_out)(slot)(year)(month)(day)(hour)(minute)(second)(playtime_seconds) - validate a numbered .DAT header and return its timestamp and accumulated playtime.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a0_query_numbered_save_metadata@0x427ba0 calls save_container_read_and_validate_header@0x4306f0. It reads SYSTEMTIME WORDs at header +0x108/+0x10a/+0x10e/+0x110/+0x112/+0x114 and DWORD accumulated playtime at +0x118. Corpus: three calls in SAVE.BIN.

Status 0 means valid metadata was written, 1 means the file could not be opened, and 2 means its native header was invalid or incompatible. Metadata comes from the fixed 0x124-byte S3SD/S4SD container header; no payload decode is needed. Himegari numbered files use compatibility id 0x42323234, distinct from shared SAVE.DAT/RT.DAT id 0x4a343234. Port status (2026-07-24): implemented through the native directory store with fixed-header-only reads.

0x1a1 load-numbered-slot-and-resume (load-numbered-slot-and-resume, argc 2)

• summary: (status_out)(slot) - fully load SAVE%02d.DAT, including saved script frames and text history, then resume through CALLBACK_LOAD.BIN and opcode 0xae.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a1_load_numbered_slot_and_resume@0x427d30 calls save_data_deserialize_and_begin_restore@0x40fd10(handle, SaveVersion1, SaveVersion2, 1, 1), closes the file, and decodes protected integer globals. The loader activates the saved-frame state consumed by op_0xae. Corpus: one call in SAVE.BIN.

The caller pre-seeds status to zero. A missing/open failure writes 1; success starts the asynchronous native stack-restoration rendezvous and does not overwrite that zero. This is the ordinary load-game path, unlike data-only opcode 0x19f. Port status (2026-07-24): layout 3 restores banks, history, surfaces/resources, and retained gfx, unwinds the obsolete managed call chain, then reconstructs saved frames through opcode 0xae.

0x1a2 store-shared-profile-int (store-shared-profile-int, argc 1)

• summary: 0x1a2 (cell) — snapshot the selected global integer cell into AGE's shared SAVE.DAT profile table. Its native key is raw type byte 0x03 followed by eight lowercase ASCII hex digits for the lvalue's resolved global-bank index; the stored value is the cell's current raw 32-bit value. Insert-or-assign semantics replace an existing entry.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a2_store_shared_profile_int@0x42d360 reads operand 1 with vm_operand_fetch, resolves its cell index with vm_operand_lvalue (accepted types 3/6/0xc), formats 3%08x, and calls hash_table_insert_or_assign with ECX=ctx+0x5190. shared_profile_payload_write@0x430a20 serializes each 12-byte key plus 32-bit value to SAVE.DAT. Corpus: 17,585 calls in 315 scripts; 17,539 use local-ptr after lookup-array and 46 use global-int.

Paired reader 0x1a3 restores the same cell, returning zero when the key is absent. The table is embedded at ctx+0x5190, explicitly enumerated by shared_profile_payload_write into shared SAVE.DAT, and reconstructed by shared_profile_payload_read. It is not the retained gfx map, numbered SAVE##.DAT state, or RT.DAT ReadTextDB. Port status (2026-07-24): implemented through profile-owned SharedProfile state shared across fresh scene VMs and the native shared-payload/store lifecycle; direct globals and resolved global local-pointers are covered.

0x1a3 load-shared-profile-int (load-shared-profile-int, argc 1)

• summary: 0x1a3 (cell) — restore the selected global integer cell from AGE's shared SAVE.DAT profile table. It resolves the same raw 0x03 plus eight-hex-digit cell-address key as 0x1a2 and overwrites the operand with the stored raw 32-bit value, or zero when the key is absent.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a3_load_shared_profile_int@0x427e90 resolves operand 1 with vm_operand_lvalue, calls shared_profile_int_lookup@0x4199d0 with the shared-profile object at ctx+0x4d7c, then vm_operand_write stores the result. The wrapper searches the table at object+0x414 = ctx+0x5190 and returns zero on a miss. Current override-aware corpus: 77 calls in 12 scripts.

This is the read half of the shared-profile integer service, not a string operation. LOADCONFIG.BIN restores configuration globals with it; GAMESTART/GAMECLEAR and array-pointer call sites restore other selected profile-wide values. Port status (2026-07-24): implemented with 0x1a2 through the shared profile service and native payload codec.

0x1a9 store-shared-profile-string (store-shared-profile-string, argc 1)

• summary: (cell) - snapshot the selected global string cell into AGE's shared SAVE.DAT profile table under a raw 0x05 type byte plus eight lowercase ASCII hex digits for the resolved global-bank index, replacing any earlier value.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1a9_store_shared_profile_string@0x42d3e0 fetches operand 1's string, resolves the lvalue cell index, and calls shared_profile_store_string_by_typed_key@0x42d2b0 with type prefix 5. Corpus: 17 calls in GAMECLEAR, INPUTNAME, SAVE, and SELSTAGE.

This is the string counterpart to integer-store opcode 0x1a2. The value is profile-wide rather than numbered-slot-local and is written by the shared profile lifecycle. Port status (2026-07-24): implemented for direct global strings and resolved global string-pointers.

0x1aa load-shared-profile-string (load-shared-profile-string, argc 1)

• summary: (cell) - restore the selected global string cell from AGE's shared SAVE.DAT profile table using the raw 0x05 plus eight-hex-digit key; a missing key yields the native empty-string default.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1aa_load_shared_profile_string@0x42bd90 resolves operand 1's lvalue index, calls shared_profile_load_string_by_typed_key@0x419ca0 with type prefix 5, and writes the result back through the VM string lvalue. Corpus: seven calls in GAMESTART, INIT2, INPUTNAME, and SAVE.

This is the paired reader for opcode 0x1a9 and the string counterpart to integer-load opcode 0x1a3. Port status (2026-07-24): implemented through the shared profile service and native payload codec.

0x1ab delete-numbered-save (delete-numbered-save, argc 2)

• summary: (status_out)(slot) - attempt to delete both SAVE%02d.DAT and its SAVE%02d.STH thumbnail.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1ab_delete_numbered_save@0x427ed0 formats and calls DeleteFileA for the numbered .DAT and .STH paths with the layered status convention. Corpus: one call in SAVE.BIN.

Both deletes are attempted. Status is 0 when both succeed, 1 when only the DAT delete fails, and 2 whenever the STH delete fails (taking precedence over a DAT failure). Port status (2026-07-24): implemented against the paired native filenames.

0x1ac copy-numbered-save (copy-numbered-save, argc 3)

• summary: (status_out)(source_slot)(destination_slot) - copy both numbered .DAT state and .STH thumbnail, replacing destination files.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1ac_copy_numbered_save@0x427fb0 formats source/destination SAVE%2.2d.DAT and SAVE%2.2d.STH paths and invokes CopyFileA with fail-if-exists false. Corpus: two calls in SAVE.BIN.

Both copies are attempted with overwrite allowed. Status is 0 when both succeed, 1 when only the DAT copy fails, and 2 whenever the STH copy fails (taking precedence over a DAT failure). Port status (2026-07-24): implemented against the paired native filenames.

0x1ad mark-save-resume-frame (mark-save-resume-frame, argc 0)

• summary: Mark the current script context as the highest frame serialized by numbered-save layouts 2/3. The native serializer saves frames 0 through this boundary and strips the boundary frame's return target so loading resumes it as the top frame. This opcode performs no file I/O itself.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1ad_mark_save_resume_frame@0x416b70 writes decoded instruction size 1 and ctx+0x9928c=cur_ctx_index. context_state_serialize@0x40d320 uses that field (or cur_ctx_index when -1) as the inclusive frame cutoff for save layouts 2/3, serializes frames 0..cutoff, and forces the cutoff frame's saved return entry to -1. op_0x2_exit_or_return_frame@0x417940 clears the mark when unwinding below it. Corpus: 1,928 calls in 304 scripts; SC0000's six calls are at startup and immediately after HISTORY/MENU/HIDEWIN/INPUTNAME returns.

Port status (2026-07-24): implemented as an active ExecFrame identity marker. It survives nested calls and clears when its owning frame unwinds; the following full numbered-payload slice will consume the exposed zero-based cutoff.

0x1b2 append-diagnostic-value (u00425790, argc 1)

• summary: Format operand 1 with AGE's generic operand-to-string conversion and append its exact bytes to the context diagnostic accumulator. This does not present or clear the accumulated text.
• grounding: source=investigation, confidence=high
• depended on by: 0x1b3, 0x1b4
• evidence: The real /v2 dispatch slot ctx+0x9b914 registers op_0x1b2_append_diagnostic_value@0x41f4b0. It formats operand 1 through vm_operand_format_as_string@0x41af90, measures the returned NUL-terminated bytes, and appends them to the embedded MSVC string at ctx+0x6f880. Himegari has two literal-string sites and one SYSTEM4 global-integer site.

Implemented with an EngineCtx-lifetime accumulator shared across GameSession scene VMs. String operands append decoded text, integer and pointer forms append signed decimal, and float forms reproduce native %lf's six fractional digits.

0x1b3 append-diagnostic-newline (u004257D0, argc 0)

• summary: Append the literal CRLF byte pair to the context diagnostic accumulator without presenting or clearing it.
• grounding: source=investigation, confidence=high
• depends on: 0x1b2
• evidence: The real /v2 dispatch slot ctx+0x9b918 registers op_0x1b3_append_diagnostic_newline@0x41a400. Its one operation appends two bytes from DAT_0057082c to the same embedded string at ctx+0x6f880; memory at that address is 0d 0a 00. Both Himegari sites immediately follow diagnostic construction.

Implemented as an exact \r\n append to the shared diagnostic accumulator, including FIELD's persistent line and SYSTEM4's native post-clear newline.

0x1b4 show-and-clear-diagnostic (u004237C0, argc 0)

• summary: Show the accumulated text plus native script-location context in a synchronous owner-window information message box, then erase the complete accumulator.
• grounding: source=investigation, confidence=high
• depends on: 0x1b2
• evidence: The real /v2 dispatch slot ctx+0x9b91c registers op_0x1b4_show_and_clear_diagnostic@0x419240. It resolves the MSVC string bytes at ctx+0x6f880 and calls engine_host_show_message@0x403820 with owner HWND ctx+0x54fe8 and flags 0x10004. The thunk dispatches host_ui_interface vslot +4; the default host implementation at 0x431520 logs the raw text and calls age_show_message_box@0x409370. Flag 0x10000 appends FILE=%s ADDRESS=%X LINE=%d COMMAND=%s(%d) DEPTH=%d; low mode 4 formats %s%s, uses caption エラーが発生しました, and calls USER32 MessageBoxA with style 0x40 (MB_OK|MB_ICONINFORMATION). The optional command metadata at ctx+0x6ddac and source-line maps at ctx+0x6f798 are zero-initialized and have no writer in Himegari's release image, yielding LINE=-1 COMMAND=-(436) at this opcode. The opcode ignores the return, then calls msvc_string_erase(buffer,0,0xffffffff). SYSTEM4's sole site presents its invalid-execution-mode text and value; a following 0x1b3 appends CRLF to the now-empty accumulator.

Implemented as a synchronous host effect. Himegari's release-only null debug tables make the native suffix deterministic (LINE=-1 COMMAND=-(436)); FILE, dword ADDRESS, and zero-based frame DEPTH come from the live instruction. Godot marshals OS.Alert to the main thread and parks the VM until dismissal; CaptureHost records the effect. The accumulator clears only after the host call returns.

0x1cc get-adv-read-skip-state (get-adv-read-skip-state, argc 1)

• summary: (out) - copy the current ADV read/click-skip service state from ctx+0x6dbd4. label_1235a ORs it with 0x1c7's Ctrl/message-skip bit: zero takes 0x21c's normal transition/yield path; nonzero resets the animation service and presents the completed endpoint through 0x20c.
• grounding: source=investigation, confidence=high
• depended on by: 0x20c, 0x20d, 0x21c, 0x223
• evidence: Ghidra handler 0x427330 calls vm_operand_write(1, ctx+0x6dbd4). adv_refresh_read_skip_state@0x406cd0 and op 0x6e/0x71/0x72 maintain the field from message:ReadTextSkip plus read_text_db_find_message_index@0x468f50 and read_text_db_is_message_read@0x469930. The database is engine-owned shared RT.DAT state keyed by raw packed script resource id and per-script message index, not VM globals or slot-local SAVE##.DAT data. adv_interpreter_tick consumes the result in click/read-skip control; it is not op 0x223 surface-transition progress.

Port status (2026-07-24): the VM refreshes this state from message:ReadTextSkip plus the current packed script id/T1 message index at 0x6e, 0x71, and 0x72. It is shared-profile read history, not a host-only flag.

0x21c mark-frame-yield (mark-frame-yield, argc 0)

• summary: Set native run-state bit 0x400; in normal ADV playback this is the retained-presentation render/wait/resume boundary.
• grounding: source=investigation, confidence=high
• depends on: 0x223, 0x1c7, 0x1cc
• depended on by: 0x223
• evidence: Ghidra handler 0x417520 records the 1-dword instruction length and ORs ctx+0xa0ce4 with 0x400. engine_main_tick_with_exception_policy@0x411840 branch 0x4123d1 polls gfx_animation_service_poll; its active branch reads EffectSkipOnClick@0x570f60, rejects gfx_animation_service_flags bit 0, polls/consumes action-4 bit 0x10, clears run-state 0x400, calls gfx_request_force_complete_and_reset_anim_clock@0x4076c0, then gfx_render_frame. capture_presentation_trace.py: after 0x125a6 render, 0xcb8e/0xcb98 bind and 0xd5a/0xd63/0xd73/0xd8a mode+targets execute without render; repeated gfx_render_frame begins only at 0x21c. 2026-07-10, click lifecycle refined 2026-07-29.

SC0000 label_1235a reaches this when 0x1c7/0x1cc are zero. Native run-state bit 0x400 parks the interpreter while gfx_render_frame repeatedly samples finite one-shot object channels and queued surface commands; op 0x224 follows after dirty state clears. When system:EffectSkipOnClick is enabled and animation-service flag bit 0 is clear, logical action 4 is consumed and run-state 0x400 is cleared before the engine requests the same forced completion as 0x243 and renders once. Wait release is independent of endpoint completion: service-flags bit 1 can suppress the force worker, while op-0x242-detached channels, ambient cycles, and movie-backed presentation can continue asynchronously after interpreter resume. With ordinary flags, the request completes finite color/scale/rotation/translation channels and type-0 surface commands together. Native trace proves AE001D bind, mode-1 0x203, and 0x202 targets complete in one 5 ms batch with no render, then first compose here.

draw

0x21 fade-surface-in-from-black (u00418860, argc 2)

• summary: (surface_slot)(timing_argument) — block while fading from black to a captured full-frame surface. The captured surface remains the terminal frame.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x20d
• evidence: Ghidra /v2: dispatch slot 0x21 resolves to op_0x21_fade_surface_in_from_black@0x41cb00. With run_state_flags bit 0x08000000 clear, the handler sets effect-service bit 8, converts timing <=64 to interval=argument ms and alpha step=16 (otherwise interval=argument/16 and step=1), starts screen_transition_begin@0x439da0 mode 0, flushes the initiating trigger, and advances the PC. engine_main_tick_with_exception_policy@0x411840 owns natural progress and, when system:EffectSkipOnClick is enabled, forces action-4 clicks through screen_transition_tick@0x43a7a0 with delta 0x10000000. If fast-forward bit 0x08000000 was already set at dispatch, the handler instead publishes the operand-surface endpoint directly; it is not a post-transition re-entry. Corpus: 3 sites in EVOLVE, SELSTAGE, and STUDY, all (1,30), approximately 480 ms.

Port status (2026-07-29, skip lifecycle corrected 2026-07-29): implemented through the blocking legacy full-frame transition host path. An explicit empty/black source endpoint is composited beneath the captured target. An already-active ADV fast-forward channel bypasses the timed service and publishes the target endpoint; logical action 4 forces an in-progress transition endpoint when system:EffectSkipOnClick is enabled.

0x22 fade-surface-out-to-black (u00418920, argc 2)

• summary: (surface_slot)(timing_argument) — block while fading a captured full-frame surface to black. Black remains the terminal frame.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x20d
• evidence: Ghidra /v2: dispatch slot 0x22 resolves to op_0x22_fade_surface_out_to_black@0x41cbc0. With run_state_flags bit 0x08000000 clear, it uses the same timer/alpha-step conversion as 0x21/0x25, starts screen_transition_begin@0x439da0 mode 1, flushes the initiating trigger, and advances the PC. screen_transition_tick@0x43a7a0 keeps the operand surface opaque and raises black alpha 0->255; engine_main_tick_with_exception_policy@0x411840 owns natural and system:EffectSkipOnClick-forced completion. If fast-forward was already active at dispatch, the handler publishes black directly; it is not a post-transition re-entry. Corpus: 8 sites across ALCHEMY, CHMENU, EVOLVE, FORT, SELSTAGE, STUDY, and SUMMON, all (1,30), approximately 480 ms.

Port status (2026-07-29, skip lifecycle corrected 2026-07-29): implemented through the blocking legacy full-frame transition host path. The captured source is composited beneath an explicit empty/black target endpoint. An already-active ADV fast-forward channel bypasses the timed service and publishes black; logical action 4 forces an in-progress transition endpoint when system:EffectSkipOnClick is enabled.

0x23 fade-surface-in-from-white (u004189D0, argc 2)

• summary: (surface_slot)(timing_argument) — broader-AGE mode-2 sibling of 0x21: block while fading from white to a captured full-frame surface.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x20d
• evidence: Ghidra /v2: dispatch slot 0x23 resolves to op_0x23_fade_surface_in_from_white@0x41cc80 and starts screen_transition_begin@0x439da0 mode 2 with the same timing conversion as 0x21/0x22/0x25. Not observed in Himegari's script corpus.

0x24 fade-surface-out-to-white (u00418A90, argc 2)

• summary: (surface_slot)(timing_argument) — broader-AGE mode-3 sibling of 0x22: block while fading a captured full-frame surface to white.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x20d
• evidence: Ghidra /v2: dispatch slot 0x24 resolves to op_0x24_fade_surface_out_to_white@0x41cd40 and starts screen_transition_begin@0x439da0 mode 3 with the same timing conversion as 0x21/0x22/0x25. Not observed in Himegari's script corpus.

0x25 crossfade-surfaces (u00418B40, argc 3)

• summary: (source_surface)(target_surface)(interval_argument) — blocking legacy full-frame mode-4 alpha transition. The native engine composites the captured target surface over the captured source while an 8-bit alpha accumulator advances from 0 to 256.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x20d
• evidence: Ghidra /v2: dispatch handler op_0x25_handler@0x41ce00 checks ADV fast-forward bit 0x08000000. Clear: it sets effect-service bit 8, converts operand 3 to timer interval/alpha step (<=64: interval=arg ms and step=16; >64: interval=arg/16 ms and step=1), starts screen_transition_begin@0x439da0 mode 4, flushes the initiating trigger, and advances the PC. engine_main_tick_with_exception_policy@0x411840 polls interval_timer_poll_elapsed_steps@0x44d080 and calls screen_transition_tick@0x43a7a0; mode 4 draws source then target with progress alpha and commits target at 0x100. With system:EffectSkipOnClick enabled, logical action 4 is consumed and delta 0x10000000 forces that endpoint. If fast-forward was already set at dispatch, the handler calls screen_transition_finalize@0x4399c0 for the target directly; this is not post-transition re-entry. Thus ROOM argument 10 is about 160 ms and argument 30 about 480 ms. ROOM sites: 0x12f,0x7c6,0x856 use (1,2,10); 0x8dc uses (1,2,30). /v2 annotations corrected 2026-07-29.

The handler uses an alpha step of 16 and timer interval=argument when argument <=64. Above 64 it uses step=1 and interval=argument/16. The main loop polls that timer and does not resume ordinary script execution until the target endpoint is presented. An already-active ADV fast-forward channel publishes the target without starting the service; with system:EffectSkipOnClick enabled, logical action 4 forces an in-progress service to the same endpoint. ROOM uses (1,2,10) for button/character entry and exit fades and (1,2,30) for the final fade before returning to TITLE. The port captures retained-frame snapshots whenever op 0x20c presents to a selected offscreen render target, then reproduces the blocking and forced-endpoint lifecycle in the interactive host.

0x80 set-default-gfx-object-slot (u0041AF00, argc 1)

• summary: (slot) - select the retained graphics-object slot used when op 0x1d9 receives explicit slot zero.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x80_set_default_gfx_object_slot@0x41ed40 writes operand 1 to EngineCtx+0x14e08. op_0x1d9_handler@0x420a30 reads that field only when its operand-1 object slot is zero, otherwise it indexes the explicit slot; both paths write object+0x70. MENU-family scripts select working slots 7/8/9 on entry and restore slot 1 during teardown.

0x131 get-message-window-alpha (get-message-window-alpha, argc 1)

• summary: (out) - read the configured message:MesWinAlpha value used to alpha-modulate the ADV chrome.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x131_handler@0x4295e0 calls the settings getter with message:MesWinAlpha and writes the result. HISTORY.BIN and the shared ADV redraw path compute (16-value)<<4 for the control-strip alpha.

0x13a register-numeric-glyph-style (u0041F3A0, argc 6)

• summary: Register a decimal-glyph atlas style as (surface slot, source x/y, digit width/height); the handler admits style indices 0..10.
• grounding: source=investigation, confidence=high
• depended on by: 0x23b
• evidence: Ghidra /v2: op_0x13a_register_numeric_glyph_style@0x421ab0 writes operands 2..6 to EngineCtx+0x55180+style_index*0x14 after enforcing style_index<11. scene_context_init_reset@0x40b560 clears 200 bytes at +0x55180, exactly ten records; record 10 therefore overlaps ret_stack_a at +0x55248. Corpus: 74 sites in 24 scripts; all literal style registrations are 0..9.

The five-dword definition is stored at EngineCtx+0x55180+style_index*0x14. Opcode 0x23b consumes it to turn an integer into retained draw objects, one atlas cell per decimal digit. Scene reset clears only ten physical records (200 bytes, indices 0..9); the admitted index 10 begins at EngineCtx+0x55248 and aliases the return-stack table. Himegari's literal registrations use only 0..9. The port safely models all eleven handler-addressable logical records without reproducing the overflow.

0x141 set-message-window-alpha (set-message-window-alpha, argc 1)

• summary: (value) - write the configured message:MesWinAlpha value read by opcode 0x131. Himegari's CONFIG menu bounds the value to 0..16; larger values make the inverse-width opacity bar shorter.
• grounding: source=investigation, confidence=high
• evidence: CONFIG.BIN is a complete paired getter/setter proof: reset-defaults writes 4; the two message-window-opacity controls read op 0x131, increment/decrement within 0..16, then pass the result to op 0x141; the redraw path reads op 0x131 again and computes bar width (16-value)*80/16. The shared ADV/history paths independently consume the same getter as (16-value)<<4 alpha.

0x1ae write-numbered-save-thumbnail (write-numbered-save-thumbnail, argc 3)

• summary: (status_out)(slot)(surface_slot) - encode the selected surface into the numbered save's separate SAVE%02d.STH thumbnail file.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1ae_write_numbered_save_thumbnail@0x428100 creates SAVE%2.2d.STH with CREATE_ALWAYS and serializes operand 3's surface via the active renderer backend. Corpus: two calls in SAVE.BIN and SELSTAGE.BIN.

Status is 0 on success, 1 when the file cannot be created/opened, and 2 when surface encoding or writing fails. Renderer backend selects a handle-based or path-based native worker. Himegari writes an ordinary bottom-up 24-bit BMP (112x84 in installed files), BGR rows with four-byte padding, under the .STH extension. Its bfSize field historically omits the 14-byte BITMAPFILEHEADER. Port status (2026-07-24): implemented with exact native BMP output and host surface capture.

0x1af load-numbered-save-thumbnail (load-numbered-save-thumbnail, argc 3)

• summary: (status_out)(slot)(surface_slot) - decode the numbered save's separate SAVE%02d.STH thumbnail into a surface slot.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1af_load_numbered_save_thumbnail@0x428240 opens SAVE%2.2d.STH and passes it plus operand 3's surface slot to the active renderer decoder. Corpus: one call in SAVE.BIN.

Status is 0 on success, 1 when the file cannot be opened, and 2 when image decoding fails. The thumbnail format is owned by the renderer codec and is not embedded in the numbered .DAT payload. Port status (2026-07-24): implemented with 24-bit BMP decode and host surface replacement.

0x1f6 clear-retained-gfx-objects (clear-retained-gfx-objects, argc 0)

• summary: Clear the complete retained gfx-object registry while preserving allocated surface resources. Subsequent object queries return absent until draw/geometry operations recreate records.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1f6_clear_retained_gfx_objects@0x417430 passes ctx+0x46614 to retained_gfx_objects_clear@0x47cab0. The worker destroys every node in owner+0x408, resets its sentinel/count, and clears owner+0xb558/+0xb55c/+0xb564/+0xb568 plus bit 0x10000 state. DATA1: 293 calls in 146 scripts; 146 continue to 0x23d and 143 to 0x20e.

The handler clears the map embedded at retained-gfx owner+0x408, resets its count and transient dirty/force flags, but does not release the 1000 surface slots or clear the separate queued-surface-command list. Corpus call sites pair it either with 0x23d for a full transient-resource reset or with 0x20e for a backbuffer clear.

0x1f7 gfx-elem-erase (gfx-elem-erase, argc 2)

• summary: 0x1f7 (handle)(count) — erase retained gfx objects. Handler 0x422270 calls gfx_object_erase_range@0x47d8b0 for [handle,handle+count) when count>1, else gfx_object_erase@0x47d850. This removes entries from the same object map queried by op 0x215, so erased objects stop compositing. SC0000 uses it before op 0x1fa releases the returned surface slot.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x422270; gfx_object_erase_range@0x47d8b0 loops gfx_object_erase@0x47d850. Both operate on owner+0x408, the retained-object map also used by gfx_object_get_or_create/draw and gfx_object_query_source_slot.

0x1f8 create-texture (create-texture, argc 4)

• summary: Allocate/prepare a texture slot: (slot, width, height, flag). e.g. create-texture 0xd 0x190 0x1e 0x0 = slot 13, 400x30.
• grounding: source=investigation, confidence=med
• evidence: SC0000 CG/UI-draw path disasm; slot/w/h roles read off the operands (400x30 text bars, etc.).

0x1f9 set-texture (set-texture, argc 3)

• summary: Load a texture by universal packed SYS4INI/AAI id into a mode-0 surface slot: (resource_id, slot, colorkey). A zero high byte directly indexes the flat base catalog; a nonzero high byte selects an AAI mount and uses the low 24 bits. This is the same addressing contract as 0x249; only the native surface mode differs.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 gfx_op_0x1f9_load_surface@0x422360 fetches operand 1 and passes it unchanged to asset_open_indexed_entry@0x44f390. asset_catalog_parse_base_tables@0x44e7e0 builds one flat entry array; the opener has no scene/context input and directly indexes that array for high-byte zero. SC0010 set-texture 0x21 proves the distinction outside SC0000: raw 0x21 is SO013A.AGF, while adding SC0010's 0x11e section position lands on unrelated COL0023.OGG. The earlier 586/595 Frida correlation established that SYS4INI file_number describes grouping/order, not runtime operand rebasing.

0x1fa gfx-elem-release (gfx-elem-release, argc 1)

• summary: 0x1fa (surface_slot) — release the surface at ctx+0x52bd4[slot] (virtual free, then null) and call FUN_00474e40(slot). It releases a surface slot, not a retained object handle. SC0000 feeds it the slot returned by op 0x215 after op 0x1f7 erases the associated object group.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x4224a0 (dispatch ctx[0x26c93+0x1fa]); frees ctx+0x52bd4[operand1*4] via vtbl, then FUN_00474e40(operand1).

0x1fb draw-texture (draw-texture, argc 8)

• summary: Blit a texture slot to screen. Observed 8 args: (handle, slot, srcx, srcy, w, h, dstx, dsty). e.g. draw-texture 0xcf08 0x3 0 0 0x320 0x258 0 0 = full-screen (800x600) slot 3 at (0,0).
• grounding: source=investigation, confidence=med
• evidence: SC0000 CG-load subroutine label_12649: draw-texture (ptr) (slot) 0 0 (w) (h) (dstx) (dsty); full-screen slot-3 draws use 0x320x0x258 (800x600).

0x1fd gfx-set-scale-current (u00420620, argc 4)

• summary: (handle)(scale_x_percent)(scale_y_percent)(scale_z_percent) — immediately replace the retained object's current scale matrix at obj+0x6c. The handler divides each integer operand by 100.0 before calling matrix4_make_scale; this is distinct from 0x21e's delayed one-shot target scale.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: handler gfx_op_0x1fd_set_vec_scaled@0x422650 fetches operands 2..4, divides each by the 100.0 constant, and calls gfx_object_set_scale_current@0x47e6b0. The worker gets/creates the object, marks obj+0x68, and calls matrix4_make_scale on obj+0x6c. SC0000 sets AE001D handles to 210/210/100 and 240/240/100; without this setter their 800x800 alpha circles remain below the viewport. Both functions annotated and /v2 saved 2026-07-11.

0x1fe set-current-rotation-axis-angle (set-current-rotation-axis-angle, argc 5)

• summary: (handle)(axis_x)(axis_y)(axis_z)(angle_degrees) — immediately replace the retained object's current axis-angle rotation matrix. This is the direct-current companion to op 0x21f's delayed one-shot rotation target.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1fe_set_rotation_current@0x422700 converts operands 2..5 to float and calls gfx_object_set_rotation_current@0x47e720. The worker gets/creates the handle, marks transform state at obj+0x68, stores current axis obj+0x1ec..0x1f4 and angle degrees obj+0x204, converts degrees to radians with pi/180, builds the current matrix at obj+0xec through matrix4_make_axis_angle, and sets retained-gfx redraw dirty owner+0xb558 (EngineCtx+0x51b6c). The finite-channel consumer composes this current matrix between scale and translation. Corpus: 186/187 calls use Z axis (0,0,1); the lone DEBUG call uses Y axis (0,1,0).

0x1ff set-current-translation (set-gfx-geom3-c, argc 4)

• summary: 0x1ff (handle)(x)(y)(z) — immediately replace the retained object's current translation matrix at obj+0x16c. This is the direct-current companion to 0x220's delayed target at obj+0x1ac.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: handler gfx_op_0x1ff_set_geom3@0x4227b0 converts operands 2..4 to float and calls gfx_object_set_translation_current@0x47e800. The worker gets/creates the object, marks obj+0x168, and calls matrix4_make_translation on obj+0x16c. SC0000 uses (0,0,0) before animating BG001A. Annotated and saved 2026-07-11.

0x202 gfx-blit-color (gfx-blit-color, argc 5)

• summary: 0x202 (handle)(delay_ms)(duration_ms)(alpha)(color) — arm the one-shot packed-ARGB channel. Worker gfx_op_0x202_worker_set_color_anim @0x47ea00 resets shared start obj+0x34, writes delay +0x38, duration +0x4c, and target +0x64. gfx_object_apply_transform_channels @0x472f00 linearly interpolates each byte from current +0x60 on retained-gfx owner+0xb550 (EngineCtx+0x51b64), commits the target, clears timing, writes target -1, and clears the one-shot active bit when all sibling channels finish. Negative alpha/RGB independently preserve current bytes. Implemented in GfxState with synchronized current/target timeline evidence; draw-string 0x204/0x7a remains separate.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x4228d0 packs operands 4/5 and calls worker 0x47ea00(handle,delay,duration,packed). Consumer 0x472f00: shared start +0x34; color delay/duration +0x38/+0x4c; current/target +0x60/+0x64; frame clock retained-gfx owner+0xb550 (EngineCtx+0x51b64); bytewise integer LERP; natural or owner+0xb55c (EngineCtx+0x51b70) forced completion. /v2 annotated and saved 2026-07-10.

0x203 gfx-draw-color (gfx-draw-color, argc 4)

• summary: 0x203 (handle)(mode)(alpha)(color) — worker stores the D3D blend selector at obj+0x30 and STATIC packed color at obj+0x60; the handler's ctx+0x53d88 write is the generic 9-dword instruction length. Negative alpha/RGB preserve current static bytes. Mode 0 is the default textured path: preserved 0xffffffff is identity (the alpha byte is not tint strength). Its consumption is order-sensitive: a post-bind write supplies opacity until the next draw-texture bind, covering both FIELD's bound idle-unit suppression and CALLBACK_SETTING's freshly rebuilt ADV backing; pre-bind alpha-zero initialization remains opaque after the later bind. Mode 1 is SRCALPHA/ONE additive glow with ARGB alpha scaling the source contribution and RGB providing multiplicative modulation. Mode 2 conditionally forces ONE/ZERO for the selected render target and is used by 0x223 transition sources; mode 3 selects a subtractive special path. Surfaceless mode-0 fill consumption remains distinct.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x4229a0; negative operands read current obj+0x60, then worker 0x47e9b0 stores op2 at obj+0x30 and ARGB at +0x60. gfx_object_composite call-site 0x47f78f passes +0x30/+0x60 directly to gfx_object_blit_d3d9. Correct D3D9 constants at 0x4774c0 prove mode 1 writes SRCBLEND=5/SRCALPHA and DESTBLEND=2/ONE, not INVSRCALPHA. TITLE draws two opaque-black, no-colorkey SO022 flame sprites with mode 1; additive composition removes black and preserves the blue glow, verified in a windowed capture. Mode 2 transition setup and synchronized pixels prove 0xffffffff is identity, not solid white. SC0000 page 14 adds the mode-0 endpoint proof: after the EV052CA->EV052DA 0x223 crossfade, 0x203@0x12478 restores the base CG to mode 0 with preserved 0xffffffff; native keeps EV052DA visible while the port's tint-strength interpretation turns every texel white. FIELD's movement lifecycle clones idle handle 0x9c40+entity to temporary handle 0x9c40+0x76c, writes mode-0 alpha zero to the bound idle handle at 0x45dc/0x4699/0x5210, animates only the temporary handle, then DRAWCH rebinds the idle handle at the next tile. CALLBACK_SETTING independently erases the ADV family, binds SO001 to fresh handle 0xd2f0, reads message:MesWinAlpha, and writes (16-value)<<4 through static mode-0 0x203 before presenting. Rendering post-bind static mode-0 alpha as inert causes both the stationary FIELD ghost and the reported always-opaque post-CONFIG message window.

0x205 draw-formatted-integer (u00420A60, argc 6)

• summary: Format an integer into a fixed-width decimal field and rasterize it immediately into a numbered graphics surface using the current font/color/effect state.
• grounding: source=investigation, confidence=high
• depends on: 0x75, 0x204
• evidence: Ghidra /v2: op_0x205_handler@0x422ab0 fetches (surface,x,y,value,width,flags), calls format_integer_for_surface@0x407190, then draw_string_to_surface@0x450150. DRAWENP contains all 16 previously stubbed calls responsible for its level, HP/SP/FS, and stat values.

The field width includes an optional sign. Bit 0 zero-pads; bit 1 centers omitted leading cells; bit 2 left-aligns; bits 3/4 request '+' for positive/zero; bit 5 renders zero with '-'. With bit 16, output remains half-width ASCII and omitted-cell x adjustment uses half the current font cell advance; otherwise the formatter converts digits/signs to full-width CP932. Default alignment preserves the field's right edge by shifting x right for each omitted leading cell.

0x207 copy-surface-rect (copy-surface-rect, argc 8)

• summary: Copy a rectangular pixel region between mutable graphics surfaces: (source_surface, destination_surface, source_x, source_y, width, height, destination_x, destination_y).
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x207_handler@0x422b50 constructs source [x,y,x+w,y+h] and destination [dx,dy,dx+w,dy+h] rectangles and calls gfx_copy_surface_rect@0x477da0. The worker validates both surface slots, clips both rectangles together, marks the destination dirty, and copies through locked D3D surfaces. Corpus: 15 calls total: DRAWMINIMAP 8, STATUS 3, READICON 2, DRAWTIP 2.

The worker clips the paired source and destination rectangles against both surfaces while preserving their correspondence, returns successfully for an empty clipped rectangle, and marks the destination surface dirty. Himegari uses the opcode for minimap markers plus STATUS, READICON, and DRAWTIP surface composition.

0x208 get-texture-size (get-texture-size, argc 3)

• summary: 0x208 (slot)(out_w)(out_h) — writes the loaded texture's width/height into two output globals; keystone for bytecode-computed sprite/bg geometry (SC0000 label_12649)
• grounding: source=inference, confidence=med
• evidence: SC0000 label_12649: set-texture(resId,slot) then 0x208(slot)->w,h feeds w/2 horizontal-center + foot-anchor subtraction into draw-texture dst; stubbing yields 0x0 sizes / off-center draws

0x20b fill-surface-rect (fill-surface-rect, argc 7)

• summary: (surface_slot)(x)(y)(width)(height)(alpha)(rgb) - fill a clipped rectangle on a graphics surface with the supplied color and alpha.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x20b_handler@0x422d50 converts x/y/width/height to an exclusive rectangle, clamps alpha to 255, repacks RGB to native ARGB, and calls the surface manager's rectangle-fill path at 0x4790e0. HISTORY.BIN clears each 600x30 name strip on temporary surface 0xc1 before draw-string.

0x20c present-frame (present-frame, argc 0)

• summary: Draw every visible retained object over the selected target without implicitly clearing it, then present the composited backbuffer; label_1235a uses this on the read/message-skip branch to expose the completed foreground endpoint immediately.
• grounding: source=investigation, confidence=high
• depends on: 0x223, 0x1c7, 0x1cc
• depended on by: 0x21, 0x22, 0x23, 0x24, 0x25, 0x20d, 0x223
• evidence: Ghidra /v2: dispatch table FUN_00413860 param_1[0x26e9f]=gfx_op_0x20c_present_frame; 0x26e9f-0x26c93=0x20c. The handler calls gfx_render_frame@0x4820b0, which begins a D3D scene, consumes queued surface commands, draws all visible retained objects, ends the scene, and presents the backbuffer without calling d3d_clear_render_target_black; opcode 0x20e is the separate clear. Refined 2026-07-30.

Native handler gfx_op_0x20c_present_frame -> gfx_render_frame @0x4820b0. This is an explicit retained-state publication boundary, not a continuously visible object-store mutation. The renderer does not clear its selected target: opcode 0x20e owns explicit black clearing, so full-frame publication preserves preceding target pixels beneath its redraw. The read/message-skip branch resets the animation service then presents; the port publishes and snaps pending 0x223 state here. Normal playback branches to 0x21c, which owns repeated render/wait/resume. Headless hosts remain non-blocking.

0x20d select-render-target (select-render-target, argc 1)

• summary: Select an offscreen surface slot as Direct3D render target 0, or restore the device backbuffer when the operand is at least 1000.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x1c7, 0x1cc
• depended on by: 0x21, 0x22, 0x23, 0x24, 0x25
• evidence: Ghidra /v2: op_0x20d_select_render_target@0x422e10 passes operand 1 and retained-gfx owner ctx+0x46614 to retained_gfx_select_render_target@0x479660. Its D3D calls resolve texture level 0 or backbuffer 0, then invoke device vtable +0x94 SetRenderTarget and store selected slot at owner+0xb530. DATA1: 113 calls in 24 scripts.

For slots below 1000 the native worker obtains that surface's level-0 D3D texture surface and calls IDirect3DDevice9::SetRenderTarget(0,...). The >=1000 path obtains backbuffer 0 and records current target -1. Himegari commonly follows a freshly created blank surface selection with 0x20e before drawing into it.

0x20e clear-render-target (clear-render-target, argc 0)

• summary: Clear the currently selected render target to black and reset its depth buffer to 1.0.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x20e_clear_render_target@0x4174f0 passes renderer ctx+0x46188 to d3d_clear_render_target_black@0x471460. The worker calls device pointer +0x410, vtable +0xac with (0,NULL,3,0,1.0f,0). DATA1: 345 calls in 167 scripts; 57 directly follow 0x20d and 143 directly follow 0x1f6.

This is a target-pixel operation, not retained-object teardown. It invokes IDirect3DDevice9::Clear with zero rectangles, flags D3DCLEAR_TARGET|D3DCLEAR_ZBUFFER (3), color 0, depth 1.0, and stencil 0. The port tracks 0x20d target ownership and forwards the clear to the host; its retained compositor already rebuilds the backbuffer from black.

0x20f play-modal-movie-to-surface (play-modal-movie-to-surface, argc 3)

• summary: (packed_resource_id)(surface_slot)(movie_flags) - open a universal packed SYS4INI/AAI MPEG asset into an existing retained surface, start its native movie graph, and arm modal run-state bit 0x2000 so script execution remains parked until the movie completes or is skipped. This is the LOGO/OP/ED whole-movie path; op 0x236 uses the same resolver with non-modal lifecycle.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x20f_play_modal_movie_to_surface@0x422e50 requires an existing retained D3D target, shares the movie-object allocation, DirectShow graph open, audio-route, and volume setup used by 0x236, then calls movie_start_modal_playback@0x463280, ORs EngineCtx+0xa0ce4 with 0x2000, and marks movie presentation dirty. It does not reload/rebind the gfx surface record or assign an RGB color key. The start worker calls IMediaControl::Run at vtable +0x1c on the freshly stopped graph; AGE performs no explicit Pause, seek, or opening-frame decode. DirectShow's stopped-to-paused-to-running transition cues the first sample. movie_texture_renderer_receive_sample@0x4628d0 copies it to the D3D texture and sets renderer +0x5b4; movie_consume_renderer_new_frame_flag@0x405120 makes the outer tick render it. Read-only 2026-08-11 hooks installed before graph Run proved native LOGO video starts at 0 and advances by 33.3667 ms while audio starts at 0 in contiguous 26.1224 ms blocks; native video fingerprints expose changing 0--600 ms frames and match FFmpeg at equal later timestamps. The graph stays alive through its common stop endpoint. Corpus has exactly three sites: LOGO (0x335f,42,4), OP (0x3364,42,4), and ED (0x3324,42,dynamic flags).

Implemented through IHost.PlayModalMovieToSurface. Its operand uses the same native universal packed-id catalog contract as 0x236; the separate host call exists for modal wait/cancel lifecycle, not a different resolver. ResourceMap.ResolveMovie selects through ResolvePacked and retains MPEG signature validation in ReadMovie. Godot reuses the asynchronous FFmpeg decoder/retained-surface compositor, parks only the VM thread until EOF, and treats mouse click or Accept/Cancel input as completion before wrapper cleanup releases both video and per-playback audio output. Movie playback leaves the existing mutable target at resourceId 0 with no RGB color key; MovieSurfaceRegistry supplies its live pixels. Audio-bearing movies deliver timestamped stereo float PCM through AudioStreamGenerator and use the sound-hardware position as the master clock. The native shim rewinds both demuxers to the common media origin; this preserves LOGO's 218-frame PTS-0 opening rather than skipping to the video stream's declared 600 ms start and moving picture ahead of audio. The first decoded image is latched before audio starts, later frames retain their common-timeline cadence, and the terminal image remains through the full audio graph endpoint.

0x215 query-gfx-object? (query-gfx-object?, argc 2)

• summary: 0x215 (out_slot)(handle) — query the retained gfx-object map. Handler gfx_op_0x215_query_source_slot@0x42a0b0 calls gfx_object_query_source_slot@0x47f280 with owner ctx+0x46614. The worker searches owner+0x408, the same map populated by geometry/draw workers, and returns obj+4: the live source-surface slot written by draw-texture, or -1 if absent. gfx_object_init_default zeroes obj+4, so a geometry/animation-created but draw-unbound object returns slot 0, not -1. SC0000 uses a successful result for query-guarded teardown: op 0x1f7 erases the object group and op 0x1fa releases this slot. Matching the zero default prevents stale transforms from surviving into the EV050EA CG at SC0000 page 58.
• grounding: source=investigation, confidence=high
• evidence: Ghidra: handler 0x42a0b0 passes ECX=ctx+0x46614 to 0x47f280, which searches ECX+0x408 and returns object+4. gfx_object_bind_draw@0x47e870 writes the bound slot there; gfx_object_init_default@0x472810 explicitly writes zero to dword index 1. SC0000 page-58 trace: the old -1 default skipped cleanup of transform-created handle 0xcb2a, then EV050EA inherited translation (-100,0), rotation -90, and alpha 0; the native zero default makes the guard succeed and the reused object is identity/opaque.

0x216 query-gfx-field? (query-gfx-field?, argc 2)

• summary: 0x216 (out)(idx) — handler gfx_op_0x216_query_table46d14 @0x42a0f0: out = (ctx+0x46d14 + idx0x14). The generic instruction length is 5 dwords. A per-object field query over a stride-0x14 table. See docs/engine-re.md gfx op-contract table.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x42a0f0; reads ctx+0x46d14[operand2 * 0x14], writes operand1 via FUN_00425fb0(1,·).

0x217 set-gfx-geom3 (set-gfx-geom3, argc 4)

• summary: 0x217 (handle)(a)(b)(c) — handler gfx_op_0x217_set_geom3 @0x4231b0 SETS a 3-vector (int→float a,b,c) on object handle via native worker FUN_0047e960; its generic instruction length is 9 dwords. In SC0000 label_12649 it writes the anchor vector G[0x6249b/c/d] INTO the object; op 0x218 reads it back. See docs/engine-re.md gfx op-contract table.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x4231b0 (dispatch ctx[0x26c93+0x217]); FUN_0047e960(op1,(float)op2,(float)op3,(float)op4). label_12649 sites e.g. 0x00c67 handle=G[0x62457], vec=G[0x6249b/c/d].

0x218 get-gfx-geom3? (get-gfx-geom3?, argc 4)

• summary: 0x218 (handle)(out_a)(out_b)(out_c) — handler gfx_op_0x218_query_geom3 @0x42a130 GETS a stored 3-vector from object handle (FUN_0047f360) into out_a/b/c; its generic instruction length is 9 dwords. In label_12649 it reads the object's anchor vector back into G[0x6249b/c/d] — a stubbed DRIVER of the render drift (stale anchor → bad centering). See docs/engine-re.md gfx op-contract table.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x42a130; FUN_0047f360(obj op1) + 3x FUN_00550850→FUN_00425fb0(2/3/4). label_12649 site 0x00c8f handle=G[0x62457] → G[0x6249b/c/d].

0x219 set-gfx-geom3-b (set-gfx-geom3-b, argc 4)

• summary: 0x219 (handle)(a)(b)(c) — handler gfx_op_0x219_set_geom3 @0x423240 SETS a 3-vector (int→float) on object handle via native worker FUN_0047e910 (sibling of 0x217, a different per-object vector); its generic instruction length is 9 dwords. See docs/engine-re.md gfx op-contract table.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x423240 (was unanalyzed; function created this session; dispatch ctx[0x26c93+0x219]); FUN_0047e910(op1,(float)op2,(float)op3,(float)op4).

0x21a get-gfx-geom3-b? (get-gfx-geom3-b?, argc 4)

• summary: 0x21a (handle)(out_a)(out_b)(out_c) — handler gfx_op_0x21a_query_geom3 @0x42a1b0 GETS a stored 3-vector from object handle (FUN_0047f2e0) into out_a/b/c; its generic instruction length is 9 dwords. In label_12649 it reads the object's position vector into G[0x62498/9/a] — a stubbed DRIVER of the render drift. See docs/engine-re.md gfx op-contract table.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x42a1b0; FUN_0047f2e0(obj op1) + 3x→FUN_00425fb0(2/3/4). label_12649 site 0x00c86 handle=G[0x62457] → G[0x62498/9/a].

0x21d clone-gfx-object (clone-gfx-object, argc 2)

• summary: (source_handle)(destination_handle) - clone the complete retained gfx object record (0xb5 dwords / 0x2d4 bytes). SC0000 uses destination=source+1 as range A's old-frame snapshot immediately before 0x223 crossfades range B's updated source into target handle source+2.
• grounding: source=investigation, confidence=high
• depends on: 0x223
• evidence: Ghidra handler 0x423310 -> gfx_object_clone@0x47e4f0. Worker requires source in retained-gfx owner+0x408 (EngineCtx+0x46a1c), creates destination, copies exactly 0xb5 dwords from source object record, then marks owner+0xb558 (EngineCtx+0x51b6c) dirty. SC0000 site 0x128fc passes current handle and handle+1 before queueing 0x223 at 0x129e7.

0x21e set-anim-transform-norm (set-anim-transform-norm, argc 6)

• summary: (handle)(delay_ms)(duration_ms)(sx)(sy)(sz) — set the normalized SCALE-matrix channel (100=identity). Target obj+0xac is linearly sampled from current obj+0x6c by gfx_object_apply_transform_channels@0x472f00 on retained-gfx frame time owner+0xb550 (EngineCtx+0x51b64), after delay and for duration, then committed. Shares only start timestamp obj+0x34 with op 0x220; neither Z is opacity.
• grounding: source=investigation, confidence=high
• evidence: Ghidra 0x47eaa0 calls matrix builder 0x48af1d for target obj+0xac. Consumer 0x472f00 uses delay obj+0x3c, duration obj+0x50, current obj+0x6c, target obj+0xac, shared start obj+0x34, and retained-gfx frame time owner+0xb550 (EngineCtx+0x51b64).

0x21f set-anim-rotation-axis-angle (set-anim-rotation-axis-angle, argc 7)

• summary: (handle)(delay_ms)(duration_ms)(axis_x)(axis_y)(axis_z)(angle_deg) — set the delayed one-shot axis-angle rotation channel. Handler converts axis/angle integers to floats; worker stores target axis obj+0x1f8 and angle obj+0x208 and builds target matrix obj+0x12c. gfx_object_apply_transform_channels samples current axis/angle linearly on shared start obj+0x34 and composes T(-anchor)scalerotationtranslationT(anchor).
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x423410 -> gfx_object_set_rotation_channel@0x47eb70; consumer gfx_object_apply_transform_channels@0x472f00 uses delay +0x40, duration +0x54, current axis +0x1ec/angle +0x204, target axis +0x1f8/angle +0x208, current matrix +0xec and target +0x12c. Native SC0000 handle 0xcb8e sample at 11/390 of axis (0,0,1), 30deg matches matrix [0.9055,0.0134;-0.0134,0.9055] and translation (74.1449,47.3127).

0x220 set-anim-transform-abs (set-anim-transform-abs, argc 6)

• summary: (handle)(delay_ms)(duration_ms)(tx)(ty)(tz) — set the absolute TRANSLATION-matrix channel. Target obj+0x1ac is linearly sampled from current obj+0x16c by gfx_object_apply_transform_channels@0x472f00 on retained-gfx frame time owner+0xb550 (EngineCtx+0x51b64), after delay and for duration, then committed. Independent of op 0x21e scale; neither Z is opacity.
• grounding: source=investigation, confidence=high
• evidence: Ghidra 0x47ecc0 calls matrix builder 0x48afb1 for target obj+0x1ac. Consumer 0x472f00 uses delay obj+0x44, duration obj+0x58, current obj+0x16c, target obj+0x1ac, shared start obj+0x34, and retained-gfx frame time owner+0xb550 (EngineCtx+0x51b64).

0x222 present-gfx-object-range (present-gfx-object-range, argc 2)

• summary: (first_handle)(count) - flush/present retained graphics objects in the selected handle range into the currently selected backbuffer or offscreen render target, then clear their pending update flags.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x222_handler@0x4235e0 calls gfx_present_object_range@0x482230. The worker enters the graphics service, walks the retained-object map, processes flagged objects whose handles fall in [first,first+count), clears pending flags, and finalizes the render batch in the D3D target previously selected by op 0x20d. HISTORY.BIN uses (0,60000) for the backbuffer. SAVE.BIN instead renders [0,0x130b0) into 800x600 slot 2, then handle 0x15f90 at 14% scale into 112x84 slot 192; op 0x1ae writes slot 192 as the numbered .STH thumbnail.

0x223 queue-surface-alpha-transition (queue-surface-alpha-transition, argc 8)

• summary: (command_key)(target_slot)(range_a_start)(range_a_count)(range_b_start)(range_b_count)(delay_ms)(duration_ms) — queue a type-0 timed alpha transition command in the separate ctx+0x414 command map. This is render-target/surface presentation state, not an object affine matrix. The render frame composites the two handle ranges into target_slot and ramps alpha 0->1 after delay over duration.
• grounding: source=investigation, confidence=high
• depends on: 0x20c, 0x21c, 0x1c7, 0x1cc
• depended on by: 0x20c, 0x21c, 0x21d, 0x24d
• evidence: Ghidra handler 0x423620 -> gfx_queue_surface_alpha_transition@0x47f440. Record fields: type +0=0, start +4=0, delay +8=arg7, duration +0xc=arg8, slot +0x10=arg2, range A +0x14/+0x1c=args3/4, range B +0x18/+0x20=args5/6. gfx_render_frame@0x47fbc0 initializes start from retained-gfx owner+0xb550 (EngineCtx+0x51b64) and consumes type 0 as an alpha ramp. SC0000 executes one shared-helper site at 0x129e7.

0x224 clear-gfx-command-queue (clear-gfx-command-queue, argc 0)

• summary: Clear the native gfx command queue rooted at ctx+0x418. Host-implicit because the port composites retained state directly.
• grounding: source=investigation, confidence=high, noop_headless=True
• evidence: Ghidra handler 0x417550 -> gfx_command_queue_clear 0x47cb10, which destroys queued nodes and restores the sentinel links/count.

0x228 query-gfx-translation-current (u00421940, argc 5)

• summary: 0x228 query current translation (succ)(handle)(outX)(outY)(outZ): clone the retained object, decompose its current translation matrix at obj+0x16c, and return its x/y/z translation. Returns succ=0 when found; when absent, writes succ=1 and leaves outputs untouched. This is independent of both delayed target obj+0x1ac and base draw position V24. See docs/engine-re.md §SC0000 anim cluster.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 handler gfx_op_0x228_query_translation_current@0x42a3a0 calls gfx_object_query_translation_current@0x47cdd0. The worker copies the complete 0xb5-dword object record to stack local -0x2e0, then passes local_174, exactly +0x16c within that copy, to matrix4_decompose_affine@0x48d7c8. Thus it decomposes the current matrix obj+0x16c, not target obj+0x1ac. SYSTEM4 P102 supplies the runtime proof: SC0000@0x84e8 resets BG001A current translation to zero, 0x228@0x84fa must return zero, and 0x220@0x8521 then targets +600. The port's target query returned the preceding CG endpoint +600, producing +1200 and leaving BG001A below the viewport. Missing-object output preservation remains valid. Functions renamed, commented, and /v2 saved 2026-08-16.

Implemented by querying TranslationCurrent while preserving the missing-object output contract. The focused regression seeds a reused handle with current/target +600, rebinds it, applies SC0000's 0x1ff current-zero reset, verifies 0x228 returns zero, and confirms the following 0x220 target is +600 rather than +1200. An exact GPU SYSTEM4 P102 capture at wait SC0000@0x85de shows BG001A visible at its intended endpoint.

0x229 set-gfx-range-transform (set-gfx-range-transform, argc 5)

• summary: (first_handle)(count)(anchor_x)(anchor_y)(anchor_z) — reset and select the retained-gfx range transform applied after each ordinary object matrix for handles in [first, first+count), then set its anchor/pivot. A zero count disables it.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x229_set_gfx_range_transform@0x423700 first calls gfx_range_transform_reset@0x472b80, then writes operands 1/2 to retained-gfx owner+0x420/+0x424 and operands 3..5 to the embedded transform object's anchor at owner+0x440..+0x448. gfx_object_composite@0x47f650 post-multiplies the sampled owner+0xb5b4 matrix only for handles in that selected range. Corpus: 693 calls/309 scripts; 590 disable with all zeroes, 101 select from handle 1 with a script-computed count, and FIELD/LOOK supply camera anchors. This supersedes the former incorrect per-object-position interpretation; per-object direct position is 0x22f.

0x22a set-gfx-range-scale-current (set-gfx-range-scale-current, argc 3)

• summary: (scale_x_percent)(scale_y_percent)(scale_z_percent) — immediately replace the selected retained-gfx range transform's current scale matrix.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x22a_set_gfx_range_scale_current@0x4237b0 divides all three operands by 100 and calls gfx_range_transform_set_scale_current@0x472c10, which builds owner+0x494. FIELD and LOOK each call it once after 0x229/0x22c; FIELD's zoom percent is G[0xccc09].

0x22c set-gfx-range-translation-current (set-gfx-range-translation-current, argc 3)

• summary: (translate_x)(translate_y)(translate_z) — immediately replace the selected retained-gfx range transform's current translation matrix.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x22c_set_gfx_range_translation_current@0x423900 passes the three integer operands as floats to gfx_range_transform_set_translation_current@0x472d00, which builds owner+0x594. FIELD computes (400-camera_x, 300-camera_y, 0), making the selected map anchor land at screen center; LOOK uses the same camera helper.

0x22d set-gfx-range-scale-target (set-gfx-range-scale-target, argc 5)

• summary: (delay_ms)(duration_ms)(scale_x_percent)(scale_y_percent)(scale_z_percent) — animate the selected retained-gfx range transform's scale from its current matrix to the target.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x22d_set_gfx_range_scale_target@0x423990 divides operands 3..5 by 100 and calls gfx_range_transform_set_scale_target@0x472d50. The worker arms the embedded transform object's ordinary scale channel (delay obj+0x3c, duration +0x50, target matrix +0xac), which gfx_range_transform_sample_frame@0x476df0 samples before range composition. FIELD has the sole corpus call, a 300 ms camera zoom.

0x22f set-gfx-range-translation-target (u00421DD0, argc 5)

• summary: (delay_ms)(duration_ms)(target_x)(target_y)(target_z) — animate the selected retained-gfx range transform's translation from its current matrix to the target. FIELD pairs this with an ordinary-object tween for the minimap viewport marker so both camera representations pan together.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2 assembly: op_0x22f_set_gfx_range_translation_target@0x423b00 loads ECX with retained-gfx owner ctx+0x46614 before calling gfx_range_transform_set_translation_target@0x472e90. The worker writes owner+0x428's embedded object fields: active bit, shared start obj+0x34, delay obj+0x44, duration obj+0x58, and target translation matrix obj+0x1ac. It never resolves an ordinary object handle. FIELD@0xb4d8 supplies (0, pan_duration, target_x, target_y, 0) while the following 0x220 animates the minimap viewport marker over the same duration.

0x230 reset-gfx-cyclic-animations (u00421E70, argc 1)

• summary: (handle) — get or create a retained gfx object, clear its cyclic-animation active flag, and zero all five looping-channel start/period pairs without changing current/base transforms.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x230_reset_gfx_cyclic_animations@0x423ba0 fetches the handle and calls gfx_object_reset_cyclic_animation_channels@0x47ee60. The worker clears object flag bit 2 and zeroes starts obj+0x20c/+0x210/+0x214/+0x218/+0x21c plus periods obj+0x220/+0x224/+0x228/+0x22c/+0x230, covering looping color, scale, rotation, the second cyclic matrix, and source-rectangle channels. Corpus: five DEBUGADV effect demonstrations plus one FIELD movement setup before 0x239.

Port status (2026-07-29): implemented as one retained-state reset covering cyclic color, scale, rotation, secondary-matrix, and source-rectangle timing. It disables the four modeled looping channels, clears the complete native raw timing block for drop-in persistence, and preserves base/current transforms, cyclic targets, and one-shot channels.

0x231 animate-gfx-srcrect-loop (u00421EA0, argc 4)

• summary: (handle)(frame_period_ms)(frame_count)(column_count) — loop row-major through the spritesheet. Every sample preserves draw-texture's source-rectangle width/height; frame=floor((shared_frame_time-object_start)/frame_period)%frame_count, src offset=(frame%columnswidth, frame/columnsheight). All objects use the retained manager's shared current/previous millisecond timestamps but retain their own start and period. The native consumer raises redraw dirty only when the current and previous samples select different cells. Worker gfx_worker_anim_srcrect @0x47eec0; consumer gfx_object_anim_interpolate @0x473ed0.
• grounding: source=investigation, confidence=high
• evidence: Native /v2 decompile: worker stores/reset start at obj+0x21c, period at +0x230, frame_count at +0x238, and columns at +0x23c. Interpolator seeds the object start from manager+0xb550, computes ((current-start)/period)%frame_count, then offsets both source-rect X bounds by rect_width*(frame%columns) and Y bounds by rect_height*(frame/columns). It repeats the cell calculation with manager+0xb554 and sets manager+0xb558 dirty only when the two cells differ. engine_main_tick_with_exception_policy shifts current to previous and samples timeGetTime once per active outer tick. SC0000 uses (100,8,4) with AE001H's eight 200x200 cells in a 4x2 800x400 sheet. FIELD configures prototype 0x9c40 with (200,4,2), then DRAWCH clones its complete zero-start record to the entity handles before the first render, phase-locking that family.

0x232 animate-gfx-color-loop (u00421EF0, argc 4)

• summary: 0x232 anim-color (handle)(period)(alpha)(color): ping-pong the temporary packed ARGB passed to the normal object blit. Handler resolves negative alpha/RGB from static color obj+0x60 and clamps alpha above 255. Blend selector obj+0x30 is unchanged: mode 0 keeps default blending (animated alpha is inert; RGB is vertex modulation), while mode 1 uses sampled ARGB alpha as the SRCALPHA scale for additive composition. Fresh static color is 0xffffffff. The C# VM resolves sentinels and consumes sampled ARGB through the unchanged mode-specific path. See docs/engine-re.md §SC0000 anim cluster.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: gfx_op_0x232_anim_color@0x423c30 resolves sentinels then calls gfx_worker_anim_color@0x47ef50; gfx_object_anim_interpolate@0x473ed0 samples static obj+0x60 toward target obj+0x240 into a temporary packed color; gfx_object_composite@0x47f650 passes that color plus unchanged selector obj+0x30 to gfx_object_blit_d3d9@0x4774c0. Blit mode 0 leaves the default path and passes RGB as modulation; mode 1 sets SRCALPHA/ONE additive composition. gfx_object_init_default@0x472810 initializes obj+0x60=0xffffffff. SC0000 0x1a0e (handle,1200,224,-1) is therefore 0xffffffff<->0xe0ffffff with inert alpha and identity RGB in mode 0: no visible pulse. C# regressions cover exact AE001H visual invariance, negative-RGB preservation, mode-0 RGB modulation, and mode-1 additive scaling.

0x233 set-scale-cycle (set-scale-cycle, argc 5)

• summary: (handle)(period_ms)(scale_x_percent)(scale_y_percent)(scale_z_percent) — configure a cyclic ping-pong scale matrix that moves identity→target over the first half-period and target→identity over the second.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x233_set_scale_cycle@0x423cf0 divides operands 3..5 by 100 and calls gfx_object_set_scale_cycle@0x47efd0. The worker stores start=0 at obj+0x210, period at +0x224, and the target scale matrix at +0x250. gfx_object_anim_interpolate@0x473ed0 samples a triangular phase 2*min(elapsed%period,period-elapsed%period)/period, linearly blends identity to target, and multiplies the result into the separately anchored cyclic-animation product. Corpus: 31 sites in nine scripts, including eight ordinary ADV scenes.

Port status (2026-07-28): implemented as an independent retained-object scale cycle. The compositor samples the exact triangular phase, keeps the channel frame-driven during waits, and composes it after one-shot translation but before the sibling cyclic rotation.

0x234 anim-start (anim-start, argc 5)

• summary: (handle)(period_ms)(axis_x)(axis_y)(axis_z) — configure cyclic rotation. Worker stores period obj+0x228, start obj+0x214=0, and float axis obj+0x244; each frame uses integer degrees floor(((now-start)%period)*360/period). gfx_object_composite right-multiplies this separately anchored transform after the one-shot scale/rotation/translation product, so cyclic rotation also rotates the translation vector.
• grounding: source=investigation, confidence=high
• evidence: Ghidra handler 0x423da0 converts axis ints to floats -> worker 0x47f060. gfx_object_anim_interpolate@0x473ed0 consumes obj+0x228/+0x214/+0x244 on retained-gfx owner+0xb550 (EngineCtx+0x51b64) and matrix4_make_axis_angle@0x48b215. gfx_object_composite@0x47f650 calls one-shot transform first, cyclic animation second.

0x236 play-movie-to-surface (play-movie-to-surface, argc 4)

• summary: (packed_resource_id)(surface_slot)(movie_flags)(start_delay_ms) - synchronously open a universal packed SYS4INI/AAI movie and construct its DirectShow graph, then start asynchronous frame delivery into the retained destination surface after the requested service-tick delay. The opcode itself is non-blocking: the VM advances to the next instruction. SC0000's 0x33 and BTL's 0x2axx/0x2bxx MVB ids are already absolute base-catalog indexes.
• grounding: source=investigation, confidence=high
• depended on by: 0x241, 0x24d
• evidence: Ghidra /v2 op_0x236_play_movie_to_surface@0x423ee0 fetches operand 1 and passes it unchanged to movie_to_texture_open_asset_graph@0x463e20, which passes it unchanged to asset_open_indexed_entry@0x44f390. The opener directly indexes the flat base table or selected AAI table and has no scene input. The handler leaves playback pending through movie_play_configure@0x4625e0; movie_start_pending_after_sync_delay@0x4633b0 records the first service tick and calls the shared IMediaControl::Run worker after operand 4's delay, giving non-modal playback the same DirectShow first-sample preroll as 0x20f. SC0000 native operand capture and exact 0x13c8->0x13d1 trace prove nonblocking behavior. BTL's live 0x2b21 site supplies 0x2af1/0x2af5/0x2bca/0x2bd8/0x2bde, the exact base entries MVB001/MVB004/MVB914/MVB958/MVB955.

The handler requires an existing destination texture, allocates/reuses a 0x478-byte movie-to-texture object for the surface without replacing its resource identity/color key, opens operand 1 through the native universal packed-id reader, builds FilterGraph/IGraphBuilder/IMediaControl/IMediaPosition/IMediaEvent/IBasicAudio, and presents bottom-up RGB samples through the movie texture renderer. Operand 3 selects movie/sound routing policy: bits 0x10000/0x20000/0x40000/0x80000 force mute/music/SE/voice routes, otherwise set:DependMovieSound selects the normal movie route; SC0000's low value 2 is retained as native movie mode state. Godot maps those categories to audio buses and sends FFmpeg-decoded timestamped stereo float PCM through a per-playback AudioStreamGenerator. Both native demuxers begin at the common timeline origin; the first image is latched before audio start and later video/audio retain their source timing. This recovers valid MPEG video preroll before AVStream.start_time instead of advancing picture by roughly 600 ms. Audio-bearing completion retains the terminal frame through the full graph endpoint. Operand 4 delays the pending graph start in native service ticks. Static layer preparation after 0x236 does not terminate the retained movie; 0x21c services it through EOF and subsequent surface cleanup stops/detaches both decoder and audio output. The port type-checks the selected ResolvePacked record as MPEG without adding a scene base or fallback.

0x238 set-anim-clock (set-anim-clock, argc 1)

• summary: (duration) — configure the separate global finite-animation service window: native ctx+0x51b78=0 (start), +0x51b7c=duration. The generic instruction length is 3 dwords. NON-BLOCKING: gfx_animation_service_poll seeds the start from the shared frame timestamp and keeps redraw active through the duration. This is not the time source or cadence for cyclic object channels, which sample ctx+0x51b64/+0x51b68 with object-local starts and periods. SC0000 opening @0x123bd/@0x13858. Handler 0x4240e0; Kelebek VA 0x422390 is drift.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x238_handler@0x4240e0 zeros retained-gfx manager+0xb564 and stores the duration at +0xb568. gfx_animation_service_poll@0x407640 seeds +0xb564 from manager+0xb550, marks redraw dirty while current<=start+duration, then clears the window. Cyclic worker gfx_object_anim_interpolate@0x473ed0 instead uses shared frame current/previous +0xb550/+0xb554 and per-channel object start/period fields.

0x239 animate-gfx-srcrect-target (u004223C0, argc 6)

• summary: (handle)(delay_ms)(duration_ms)(frame_count)(column_count)(target_frame) — one-shot row-major source-rectangle cell channel. Worker gfx_worker_set_srcrect_cell @0x47ed90 stores timing at obj+0x48/+0x5c, layout at +0x238/+0x23c, and target at +0x234. C# currently retains the endpoint cell immediately.
• grounding: source=investigation, confidence=high
• evidence: Native /v2 worker and gfx_object_apply_transform_channels decompile. The consumer advances target_frame cells over duration after delay, preserves the existing source-rect dimensions, and commits the endpoint.

0x23a query-movie-surface-active (query-movie-surface-active, argc 2)

• summary: Write whether a movie-backed surface has a nonzero playback/synchronization state at surface object offset 0x42c; an empty surface slot writes zero.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x23a_handler@0x42a440 indexes the surface table by operand 2, writes zero for a null slot, otherwise writes surface+0x42c != 0. All four corpus sites are movie completion polling loops: BTL checks active combat-movie surfaces 7+, while FIELD and USEMAGIC poll surface 42 between present-frame, frame-time sampling, and sleep(16).

0x23b draw-decimal-glyphs (u00422460, argc 7)

• summary: Draw an integer as decimal glyph objects from a style registered by opcode 0x13a.
• grounding: source=investigation, confidence=high
• depends on: 0x13a
• evidence: Ghidra /v2: op_0x23b_draw_decimal_glyphs@0x424190 reads the five-dword style record at EngineCtx+0x55180, erases the destination handle range, and calls gfx_object_bind_draw once per displayed digit. Corpus: 147 sites in 24 scripts; DRAWCHP contains 22 calls for the field HUD, including turn/control/mana/level/HP/SP/FS values visible as blank in the DEBUGMAP discrepancy.

First erase digit_capacity objects beginning at base_handle. Then split value by signed division/modulo 10 and bind at most digit_capacity retained objects using adjacent digit-width cells from the registered atlas. Flags bit 0 zero-pads, bit 1 centers the used digits, and bit 2 left-aligns them; with no alignment bit the value is right-aligned in the capacity. The handler admits style index 10 even though native physically clears only records 0..9; see op 0x13a's adjacent-memory alias note. Indices above 10 and unregistered styles raise the engine's script error.

0x23c sample-frame-time (sample-frame-time, argc 0)

• summary: Explicitly shift the shared current retained-presentation timestamp to the previous field, then sample the native monotonic millisecond clock as the new current timestamp. The active outer engine tick normally performs the same update; this opcode does not create a distinct timer or fixed-rate animation cadence.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x23c_handler@0x417580 copies EngineCtx frame_timer_current at +0x51b64 to frame_timer_previous at +0x51b68, then stores imp_winmm_timeGetTime() at +0x51b64. engine_main_tick_with_exception_policy@0x411840 performs the same shift/sample once per active outer presentation tick before dirty/movie rendering. BTL, ADDEXP, SHOWGROW, USEMAGIC, and FIELD place the explicit opcode at presentation/present-frame boundaries.

0x23d release-transient-surfaces (release-transient-surfaces, argc 0)

• summary: Stop movie bindings and release transient gfx surface slots 42 through 999 inclusive, preserving system-owned slots 0 through 41.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x23d_release_transient_surfaces@0x4175c0 loops EDI=42 while EDI<1000, stops/releases ctx+0x52bd4[EDI] movie objects, and calls retained_gfx_release_surface@0x474e40 on owner ctx+0x46614. DATA1: 149 calls in 146 scripts; 146 directly follow 0x1f6.

For each fixed slot in [42,1000), the handler stops/releases the movie-to-texture object at ctx+0x52bd4[slot], then invokes the ordinary retained-gfx surface-release worker. Protected/externally owned slots may be retained by the worker's per-slot guard. This is the resource half of the common 0x1f6/0x23d full-reset sequence.

0x23f query-surface-stop-time-ms (u00422930, argc 2)

• summary: (out_stop_time_ms)(surface_slot) — query the DirectShow stop position retained by a loaded movie surface, convert seconds to integer milliseconds by truncating toward zero, and write -1 when the movie slot is empty. Port-only host decoder failure is modeled as an explicitly completed, zero-duration movie.
• grounding: source=investigation, confidence=high
• depended on by: 0x241
• evidence: Ghidra /v2: op_0x23f_query_surface_stop_time_ms@0x42a520 indexes EngineCtx surface array operand 2, returns -1 for a null slot, otherwise dereferences movie+0x414 IMediaPosition and calls vtable+0x28 get_StopTime. The adjacent op 0x23e uses the same interface at vtable+0x24 get_CurrentPosition; movie op 0x245 uses +0x20 put_CurrentPosition, independently confirming the documented vtable layout. The returned seconds are multiplied by g_dMillisecondsPerSecond@0x5713e8 (double 1000.0) and truncated by crt_ftol2_sse_truncate@0x550850 before vm_operand_write(1). All 23 Himegari sites in 17 scripts are associated with a preceding op 0x236 movie load to the queried surface. FIELD divides one result by 16 and adds 1 to build a 16 ms callback schedule; another path clamps the result to 600 ms before DRAWVOL.

The surface object's +0x414 member is IMediaPosition. Its vtable +0x28 entry is get_StopTime (after IUnknown, IDispatch, get_Duration, put_CurrentPosition, and get_CurrentPosition), returning a REFTIME double in seconds. Native multiplies by the double constant 1000.0 and calls the compiler float-to-integer helper, whose SSE2 and x87 paths both truncate toward zero. It does not inspect the getter HRESULT. For a valid graph the default stop time normally equals media duration, which explains duration-style consumers, but the exact ABI is stop position rather than get_Duration. The handler only queries state; it does not yield or alter playback. Native has no meaningful answer for a port host that cannot build a graph for a valid shipped MPEG. Port safety extension: op 0x236 normalizes missing host metadata to stop time 0 and marks decoder failure completed, while a truly empty movie slot still returns -1.

0x241 play-movie-to-surface-at-position (play-movie-to-surface-at-position, argc 5)

• summary: (packed_resource_id)(surface_slot)(movie_flags)(start_delay_ms)(position_ms) - perform the same non-modal movie-to-retained-surface open as opcode 0x236, seek the graph to the requested millisecond position, then arm playback.
• grounding: source=investigation, confidence=high
• depends on: 0x236, 0x23f
• evidence: Ghidra /v2: op_0x241_play_movie_to_surface_at_position@0x4247e0 uses the same 0x478-byte movie-to-texture object, destination render-target check, packed asset open, sound-route/volume path, and movie_play_configure worker as op 0x236. Between open and configure it calls movie+0x414 IMediaPosition vtable+0x20 put_CurrentPosition with operand5/1000.0; operand4 is then passed unchanged as the start delay. Corpus: sole site CALLBACK_LOAD@0x189 receives the layer resource, surface and flags from globals 0x3276/0x3239/0x328a, delay 0, and global 0x329e[layer]-1. The ordinary ADV creation path writes op 0x23f stop_time_ms into 0x329e immediately after op 0x236.

The seek is applied through IMediaPosition::put_CurrentPosition before movie_play_configure records the flags and start delay. CALLBACK_LOAD does not restore a separately sampled live playback cursor: the ADV setup path stores opcode 0x23f's stop time in global array 0x329e, and load passes stop_time_ms-1. The shipped use therefore reconstructs the movie layer at its terminal frame after a numbered load. Port status (2026-07-29): implemented through the existing 0x236 surface binding, routing, and completion lifecycle. FFmpeg ABI v3 seeks its independent video and audio demuxers before worker start; managed preroll selects the video frame active at the requested position (retaining the last frame at stop_time_ms-1), trims audio to the same point, and rebases both remaining timelines to playback time zero. Negative positions clamp to zero and positions at or beyond the graph stop clamp to stop_time_ms-1.

0x242 set-object-animation-detached (set-object-animation-detached, argc 2)

• summary: Replace the retained object's animation-control word at obj+0x2d0. Bit 0 detaches finite one-shot channels from blocking presentation and protects them from 0x243 forced completion until they finish naturally.
• grounding: source=investigation, confidence=high
• depended on by: 0x243
• evidence: Ghidra /v2: op_0x242_set_object_animation_detached@0x4249d0 calls gfx_object_set_animation_control@0x47f1a0. Consumer gfx_object_apply_transform_channels@0x472f00 tests obj+0x2d0 bit 0 to suppress manager+0xb55c forced completion and manager+0xb560 blocking-dirty publication, while still setting manager+0xb558 redraw dirty; it clears bit 0 when the finite group completes. DATA1: 303 calls; values zero x302, one x1.

The setter get-or-creates the object and writes the complete operand. During retained composition, bit 0 makes the one-shot color/scale/rotation/translation/source-rectangle group ignore the manager's force-complete request and suppresses the blocking-dirty flag while leaving the redraw-dirty flag active. When no finite channel remains, native clears bit 0 and the shared start time. SC0000's two common CG loaders explicitly write zero. Across DATA1, 302 calls write zero and the sole nonzero call is BTL.BIN's animated battle-object setup, which writes one.

0x243 reset-anim-clock (reset-anim-clock, argc 0)

• summary: When animation-service flag bit 1 is clear, request forced completion of ordinary finite one-shot object channels and reset the global animation-service elapsed/duration fields. Objects detached by 0x242 bit 0 ignore the force request.
• grounding: source=investigation, confidence=high
• depends on: 0x242
• evidence: Ghidra handler 0x4182d0: if !(ctx+0x51b80 & 2), set retained-gfx owner+0xb55c (EngineCtx+0x51b70)=1 and zero owner+0xb564/+0xb568. gfx_object_apply_transform_channels treats force value 1 as immediate completion unless obj+0x2d0 bit 0 is set. SC0000 label_1235a calls it before present-frame.

0x248 set-tiled-surface-edge-length (set-tiled-surface-edge-length, argc 1)

• summary: Set the legacy mode-1 tiled-surface edge length in pixels. Native surface creation, blitting, rectangle operations, and AGF upload use it to partition one logical surface into ordinary texture tiles; SYSTEM4 initializes it to 128.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x248_set_tiled_surface_edge_length@0x424af0 directly stores operand 1 in g_nTiledSurfaceEdgeLength@0x5b15b0. Its 30 xrefs are confined to gfx_tiled_surface_create/blit/rect_op/upload_agf, where dimensions are split by ceil(size / edge). SYSTEM4's sole call passes 128 immediately after opcode 0x149. This configures opcode 0x249's mode-1 tiled wrapper and is unrelated to adjacent opcode 0x24d.

Port status (2026-07-29): implemented as retained signed-dword graphics configuration. The value survives scene-context resets and does not dirty presentation or rebuild existing surfaces. The portable backend deliberately keeps mode-1 surfaces as contiguous RGBA images rather than reproducing legacy D3D texture tiling.

0x249 load-raw-texture-surface (load-raw-texture-surface, argc 3)

• summary: Load an AGF by universal packed SYS4INI/AAI catalog id into a retained surface slot using native surface mode 1 and the same packed-id/RGB-colorkey contract as set-texture (0x1f9).
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x249_load_raw_texture_surface@0x424b20 is instruction-length 7 and is contract-identical to gfx_op_0x1f9_load_surface through release, unchanged packed operand, asset_open_indexed_entry, RGB colorkey conversion, load failure, and cleanup. Its only relevant distinction is mode-1 gfx_surface_mode1_ctor, a tiled large-image wrapper: gfx_tiled_surface_create@0x432ff0 splits logical dimensions into ordinary mode-0 child textures; gfx_tiled_surface_upload_agf@0x431a10 decodes/uploads regions; gfx_tiled_surface_blit@0x4316b0 subdivides logical source rectangles. Corpus literals include FIELD 0x32da..0x32dd -> SO005/SO007/SO008A/SO007A. The former claim that only 0x249 bypasses scene normalization was wrong because native never performs scene normalization for 0x1f9 either.

0x24d play-movie-mask-transition (play-movie-mask-transition, argc 12)

• summary: Capture an old retained-object range into the newly drawn scratch surface, retime a movie to the requested duration, and use each decoded frame's green channel as a byte-per-pixel alpha mask within the supplied rectangle.
• grounding: source=investigation, confidence=high
• depends on: 0x236, 0x223
• evidence: Ghidra /v2: op_0x24d_play_movie_mask_transition@0x424db0 opens operand 10 through movie_to_texture_open_asset_graph, configures delay operand 11, sets IMediaPosition::put_Rate to native_stop_time_ms / operand12_ms, allocates a width*height byte mask through movie_texture_allocate_transition_mask@0x415d90, and calls gfx_movie_mask_transition_register@0x47f560 with operands 1-9/11. movie_texture_renderer_receive_sample@0x4628d0's mask-active branch copies byte +1 of every bottom-up RGB24 sample pixel, i.e. its green channel, directly into that mask. The retained compositor's type-1 branch applies the movie-updated mask between the old and new object ranges and holds its blocking dirty state until playback completes. Both DEBUG.BIN sites use TEST.AGF (an MPEG program stream), delay 0, and duration 1000 ms.

The RGB24 sample callback copies the bottom-up green byte verbatim. In the native 32-bit mask compositor, captured RGB remains unchanged and the output alpha byte is the high byte of ((source_argb >> 8) * mask_byte); this records the exact packed-integer operation, including its low-color carry, rather than approximating it as a scalar luminance crossfade. Mode 1 initializes the mask to 0 and completes at 255; all other modes initialize at 255 and complete at 0. Port status (2026-07-29): implemented through the existing retained-range software rasterizer and dynamic scratch-surface path. The decoder honors start delay and native stop/duration retiming, publishes logical top-down green masks, and holds opcode 0x21c until movie completion; click completion remains limited to type-0 transitions.

0x24e set-gfx-animation-service-flags (set-gfx-animation-service-flags, argc 1)

• summary: Replace the retained graphics animation-service flags with operand 1. BTL brackets combat presentation with values 1 and 0; GAMECLEAR uses 3 and 0.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x24e_handler@0x425070 writes operand 1 directly to EngineCtx.gfx_animation_service_flags at +0x51b80. engine_main_tick_with_exception_policy@0x411840 tests bit 0 before polling action 4 in the run-state-0x400 EffectSkipOnClick branch. gfx_request_force_complete_and_reset_anim_clock@0x4076c0 tests bit 1 before setting force-complete and zeroing the service clock; opcode 0x243 calls the same worker.

Bit 0 disables the run-state-0x400 EffectSkipOnClick branch while finite retained presentation is active. Bit 1 independently suppresses opcode 0x243 and the click branch's shared force-complete/clock-reset request. BTL brackets combat presentation with 1/0 and GAMECLEAR uses 3/0, protecting those service-owned animations from ordinary ADV click completion.

0x258 set-surface-persistence-flags (set-surface-persistence-flags, argc 2)

• summary: (surface_slot)(flags) - replace the native surface record's numbered-save persistence flags; bit 0 controls asset reload on restore and bit 1 controls the adjacent still-unnamed field.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x258_set_surface_persistence_flags@0x4250a0 reads the slot and flags operands and calls gfx_surface_set_persistence_flags@0x4159c0. The worker writes flags&1 to record +0x08 and (flags>>1)&1 to +0x0c in both 1,000-record tables. This corrects the old upstream address/name association: 0x422fe0 is opcode 0x20f movie playback, not 0x258. Corpus declaration chains follow opcode 0x259 at script entry.

Scripts place declaration chains immediately after opcode 0x259 clears both fields. The port models bit 0 because it is consumed by layout-3 restoration; bit 1 is retained as an identified native field but has no known runtime consumer yet.

0x259 script-entry (script-entry, argc 0)

• summary: zero-arg script/prologue entry; clears surface-record persistence fields +0x08 and +0x0c across both 1,000-record native tables before the declaration chain continues
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x259_script_entry_clear_surface_persistence_flags@0x417660 loops over both 20,000-byte surface-record tables (1,000 records x 20 bytes), writing zero to record +0x08 and +0x0c. SC0000 offset 0x0 and every observed script entry begins with this opcode; 0x258 continues the declaration chain. Port clears its modeled +0x08 reload policy; +0x0c remains opaque/unmodeled.

input

0x86 set-cursor-resource (u0041B210, argc 1)

• summary: (resource_id) - load an indexed cursor asset and install it as the active custom cursor.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x86_set_cursor_resource@0x41f0a0 opens operand 1 through asset_open_indexed_entry, extracts the asset payload, passes it to the cursor installer at 0x485ce0, releases the asset, and refreshes the OS cursor when the window is active. HIDEWIN.BIN selects resources 0x3318..0x331f according to the pointer's screen-edge region.

0x87 clear-cursor-resource (u00414D10, argc 0)

• summary: Clear the active custom cursor and refresh the OS cursor when the game window is active.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x87_clear_cursor_resource@0x416400 calls the cursor clear/release helper at 0x4856b0 and then the same active-window cursor refresh used by op 0x86. HIDEWIN.BIN calls it when leaving an edge region and on exit.

0x88 set-message-skip (u0041B290, argc 1)

• summary: (enabled) - set persistent all-message Skip state. Nonzero makes the interpreter inject ADV fast-forward input every tick; zero stops injection and clears the transient skip run-state bit.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x88_set_message_skip@0x41f130 writes operand 1 to ctx+0x13dc and ctx+0x550fc; nonzero also sets ctx+0x6da78=1, while zero clears run-state bit 0x08000000. adv_interpreter_tick injects input bit 0x40 on every tick while ctx+0x13dc is nonzero. engine_settings_register_defaults@0x46be30 initializes set:CancelMesSkipOnClick to 0; only a nonzero override enables its press/release cancellation path. All 301 ADV button callbacks pass 1; CALLBACK_LOAD.BIN is the sole corpus 0x88(0) reset.

0x90 register-hotspot-callbacks (u0041BEB0, argc 7)

• summary: (x)(y)(w)(h)(on_enter_pc)(on_leave_pc)(on_activate_pc) - append an inclusive cursor rectangle and three callback PCs to the current script frame's native input registry. This opcode only registers; the ADV input service dispatches callbacks later.
• grounding: source=investigation, confidence=high, noop_headless=True
• depended on by: 0x97
• evidence: Ghidra /v2: op_0x90_handler@0x41fc80 fetches x/y/w/h, forms x+w/y+h, fetches operands 5/6/7, and calls input_hotspot_register_rect_callbacks@0x403d70 on the current frame registry. The worker appends rect + callbacks to arrays and returns without changing PC. input_hotspot_poll_hover_callback@0x4040b0 returns operand 5 on entry and operand 6 on exit; input_hotspot_take_click_callback@0x404330 resets the registry and returns operand 7 on activation. All 301 ADV scripts contain the identical five control-strip records plus three keyed records.

op 0x90 (u0041BEB0, argc 7): 0x90 x y w h tgt_a tgt_b tgt_c. Kelebek left it "ukn" noting args 5-7 are code locations. Native RE plus corpus analysis resolves it:

• The opcode APPENDS a record; it is not an immediate branch. Rect bounds are stored as (x,y,x+w,y+h) and the cursor hit-test compares them inclusively.
• The later input service maps targets exactly: target A = pointer enter, target B = pointer leave, target C = activation/click. Moving directly between records emits leave first, then enter on the next service poll. Activation consumes/resets the registry before dispatching target C.
• Two forms, both ONLY in one shared ADV-chrome subroutine copied into every ADV script:
  • Mode A (1505 = 5x301): immediate x,y,w,h with w=h=20; the five on-screen buttons at (684|706|728|750|772, 572): History, Auto message, Message skip, Read-message skip, and Hide window. Their enter/leave callbacks set G[0x6c9..0x6cd] to 1/0 and redraw SO001's tooltip + generic 20x20 translucent hover overlay; target C runs the per-button action.
  • Mode B (903 = 3x301): local-int operands, w=h=1, only tgt_c real. Companion op 0x97 binds input-bit ids 0, 8, and 7 to these records for keyboard/pad activation.
• Every one of the 301 scripts has EXACTLY 8 sites (5 A + 3 B); zero scene-specific use.
• Registration returns normally to pc+1; later callbacks temporarily redirect execution.
• Headless (no cursor/input) can ignore registration; the 12 EMPTY sweep scenes are gated by state + this input-wait chrome, NOT by unmodelled 0x90. Model live in A2.

0x93 cancel-hotspot-wait (u00415040, argc 0)

• summary: Reset the current frame's hotspot registry/input wait and clear native run-state bit 0x00800000. Used before opening History, Menu, or HIDEWIN flows.
• grounding: source=investigation, confidence=high, noop_headless=True
• evidence: Ghidra /v2: op_0x93_cancel_hotspot_wait@0x416670 clears run-state bit 0x00800000, calls input_hotspot_reset@0x404130, and clears the active flag at ctx+0xc6e4 (or sets the pending flag at +0xc6e0 when already inactive).

0x94 arm-hotspot-wait (u00415090, argc 0)

• summary: Arm native hotspot input processing after the script has registered its rectangles.
• grounding: source=investigation, confidence=high, noop_headless=True
• evidence: Ghidra /v2: op_0x94_arm_hotspot_wait@0x4166d0 sets ctx+0xc6e4=1 and calls input_hotspot_arm_cursor_tracking@0x404230 with 10000. SC0000 executes it immediately after the five control-strip and three keyed registrations.

0x97 bind-hotspot-key (u0041C150, argc 5)

• summary: (x)(y)(w)(h)(logical_action) - find the already-registered rectangle with identical bounds and bind a logical input action to its activation callback.
• grounding: source=investigation, confidence=high, noop_headless=True
• depends on: 0x90
• evidence: Ghidra /v2: op_0x97_bind_hotspot_key@0x41ff30 builds the same inclusive rect as op 0x90 and calls input_hotspot_bind_key_bit@0x403f50. That worker searches registered rects for exact equality and stores operand 5 in the record's logical-action field. adv_input_service_poll@0x411230 passes the configured live action mask to input_hotspot_poll_bound_action_callback@0x403fb0, which returns the first matching record's activation PC. All 136 SC-family scripts bind action 7 to the callback that calls MENU.BIN; SYSTEM4 maps both right mouse and X to action 7.

0xcc register-mouse-callback (mouse_callback, argc 2)

• summary: (poll_interval_ms)(target_pc) - register a timed per-frame mouse callback in the current script.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xcc_register_mouse_callback@0x420f70 stores operand 2 as the callback PC and the current frame_script_resource_id as its owner, then arms operand 1 as the poll interval. HIDEWIN.BIN and HISTORY.BIN both register a 0x10-ms callback. Op 0xcd performs the timed dispatch.

0xcd dispatch-mouse-callback (get-input-type, argc 0)

• summary: Dispatch the registered mouse callback when its polling interval elapses.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xcd_dispatch_mouse_callback@0x417e10 compares timeGetTime against the registered interval, pushes the following PC, verifies the callback's saved script resource id matches the current frame, and jumps to the registered callback target. It writes no operand, so the upstream get-input-type label was incorrect.

0xfb register-joy-callback (joy_callback, argc 2)

• summary: (input_index)(target_pc) - register one of 32 per-frame joy/input callback targets.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xfb_register_joy_callback@0x421270 bounds-checks operand 1 to 0..31 and stores operand 2 in the current script frame's 33-entry callback table. Ops 0xff/0x100 poll and dispatch this table; HISTORY.BIN and HIDEWIN.BIN register indices 0..10.

0xfe set-input-action-count (u0041E360, argc 1)

• summary: (count) - set the logical action scan bound; op 0x100 uses callback slot count itself when the polled mask is empty.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xfe_set_input_action_count@0x421390 accepts unsigned values below 32, stores the count at EngineCtx+0x814, and throws script error 0x10005 otherwise. op_0x100_dispatch_joy_callbacks scans set mask bits only below this count; when op 0xff produces an empty mask, it instead dispatches the callback table entry at index count and resumes after op 0x100. SYSTEM4@0x1cf sets 10, enabling held logical actions 0..9 and reserving callback slot 10 for the no-input/release path before configuring joystick, mouse, and keyboard mappings.

0xff poll-joy-callback-input (u00415A10, argc 0)

• summary: Poll the configured keyboard/mouse/joystick action mask and initialize the op 0x100 dispatch scan.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0xff_poll_joy_callback_input@0x416eb0 clears the pending input mask, fills it through input_poll_action_mask@0x4608b0, resets EngineCtx+0x6da6c input_callback_scan_index, and copies input_action_count to +0x6da70. The poller combines configured keyboard, mouse-action, and joystick bits; the joystick button-slot loop uses input_action_count, while op 0x100 applies the final action scan bound. input_poll_mouse_action_bits@0x460240 maps VK_LBUTTON/VK_RBUTTON through mouse_button_action_map and adds 4; initialization leaves both slots zero, so left defaults to action 4, while SYSTEM4 op 0x10b remaps right to action 7.

0x100 dispatch-joy-callbacks (u00415A60, argc 0)

• summary: Dispatch each set logical action below the configured count, or callback slot count when no action is held.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x100_dispatch_joy_callbacks@0x416f00 scans the bitmask captured by op 0xff from EngineCtx+0x6da6c up to but excluding EngineCtx+0x814 input_action_count. Each set action resumes at op 0x100 so simultaneous bits continue dispatching. If the mask is empty, it dispatches callback table slot input_action_count and resumes after op 0x100. Callback targets come from the current frame's table populated by op 0xfb; SYSTEM4's count 10 therefore makes slot 10 the native no-input/release callback rather than an eleventh action bit.

0x101 reset-message-skip-input (u00415BF0, argc 0)

• summary: Reset transient message-skip/input service state after an ADV chrome action without clearing op 0x88's persistent all-message Skip flag.
• grounding: source=investigation, confidence=med
• evidence: Ghidra /v2: op_0x101_reset_message_skip_input@0x4170a0 resets the input state rooted at ctx+0xa0ce8, clears run-state bit 0x08000000, zeroes ctx+0xa0ce8, and writes ctx+0x6da74=1 / ctx+0x6da80=0. It does not touch ctx+0x13dc or ctx+0x550fc, so adv_interpreter_tick re-injects Skip on the following tick while persistent state remains enabled. The Auto, Message-skip, Read-skip, and Hide-window callbacks invoke it after their 100 ms cursor re-arm sequence.

0x107 map-joystick-button (u0041E500, argc 2)

• summary: (button_slot)(physical_button) - map a logical button slot to a physical joystick button; slot N emits logical action N+4.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x107_map_joystick_button@0x421550 writes operand 2 to EngineCtx+0x89c+operand1*4 when unsigned operand1<32, otherwise it is a no-op. input_poll_joystick_action_bits@0x460380 emits axes as actions 0=up, 1=right, 2=down, 3=left and mapped button slot N as action N+4. SYSTEM4 maps slots 0..5 to physical buttons 0,3,2,1,6,7, producing actions 4..9.

0x108 get-mouse-button-state (u00415E70, argc 1)

• summary: (out) - return the current mouse-button state bitmask.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x108_get_mouse_button_state@0x428b60 fills a local through input_poll_raw_mouse_buttons@0x4602e0 and writes it to operand 1. The raw mapping is VK_LBUTTON -> 0x1 and VK_RBUTTON -> 0x2. This is distinct from op 0xff's configured logical action mask: left defaults to action 4, while SYSTEM4 maps right to action 7 with op 0x10b. HIDEWIN registers both logical actions to its close/restore callback.

0x109 get-cursor-virtual (u00415EC0, argc 2)

• summary: (out_x)(out_y) - read the OS cursor and convert it into AGE's virtual-screen coordinates.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x109_get_cursor_virtual@0x428bb0 calls the cursor-position helper, converts client/display coordinates through the active VirtualFullScreen transform, and writes x/y to operands 1/2. The ADV chrome callbacks preserve x and then move y by alternating -1/+1 before op 0x10a.

0x10a set-cursor-virtual (u0041E540, argc 2)

• summary: (x)(y) - convert AGE virtual-screen coordinates to client/screen coordinates and move the OS cursor.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x10a_set_cursor_virtual@0x421590 maps virtual coordinates through the active VirtualFullScreen geometry and calls USER32 SetCursorPos. BUNKI@0x2b6 and SBUNKI@0x289 test G[0x3238], compute the default choice point, and call 0x10a when menu cursor auto-move is enabled; their disabled branches retain the physical position through 0x109. SC0000 also alternates the cursor by one vertical pixel after state-changing ADV button clicks so hover re-enters cleanly.

0x10b map-mouse-button (u0041E5A0, argc 2)

• summary: (button_slot)(physical_button) - map a physical mouse button to a logical button slot; polling emits the slot as logical action slot+4.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x10b_map_mouse_button@0x4216f0 writes operand 1 to EngineCtx+0x135c+operand2*4 when unsigned operand1<32; it does not validate the physical-button operand. input_poll_mouse_action_bits@0x460240 checks left/right physical indices 0/1, reads this map, adds 4, and sets that logical action bit. Initialization zeroes the map, so left defaults to action 4. SYSTEM4@0x218 uses (3,1), mapping right mouse to action 7.

0x10c map-keyboard-scancode (u0041E5E0, argc 2)

• summary: (action)(dik_scan_code) - map a DirectInput keyboard scan code to a logical input action.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x10c_map_keyboard_scancode@0x421730 requires unsigned operand1<32 or throws script error 0x10005. It translates operand 2 through EngineCtx+0x1828, the DIK-to-Win32-VK table built by input_initialize_dik_to_vk_table@0x45fc60, then writes the action to EngineCtx+0x1428[VK]. input_poll_keyboard_action_bits@0x4601a0 polls 256 virtual keys and emits the configured action bits. input_manager_initialize_defaults@0x460630 starts with count 7 and maps 0=Up, 1=Right, 2=Down, 3=Left, 4=Enter, 5=Space, and 6=Backspace. SYSTEM4 raises the count to 10 and adds Z to action 4, C/LeftCtrl to 6, X to 7, PageUp to 8, and PageDown to 9 without erasing the earlier mappings.

0x10d consume-mouse-wheel-delta (u00415F10, argc 1)

• summary: (out) - return the accumulated signed mouse-wheel delta and clear it.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x10d_consume_mouse_wheel_delta@0x428cf0 copies ctx+0x1c34 to operand 1 and immediately clears the field. AGE's window procedure at 0x486925 handles WM_MOUSEWHEEL by sign-extending the high word of wParam and accumulating it at ctx+0x1c34; HISTORY.BIN polls this value and branches on its sign to select one scroll direction.

0x12e find-hit-rectangle (find-hit-rectangle, argc 8)

• summary: (index_inout)(reference_rect)(pointer_x)(pointer_y)(rect_array)(x_offsets)(y_offsets)(count) - scan after the incoming index for the next inclusive rectangle intersection, or return -1.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x12e_find_hit_rectangle@0x428ff0 resolves the reference rectangle and three array operands as VM pointers, decodes rectangle/offset values with anti_tamper_a, and starts at incoming_index+1. Each candidate is [left,right,top,bottom]; the worker subtracts its per-entry x/y offsets from the pointer, inclusively intersects it with the reference rectangle, and writes the matched array index or -1 to operand 1. HISTORY.BIN uses decoded local arrays for scrollbar/control regions, close region 8, and visible text rows 9..13.

0x142 set-system-menu-enabled (set-system-menu-enabled, argc 1)

• summary: (enabled) - replace the EngineCtx flag exposed through IAGEService to gate reentrant native AGERC system-menu actions. Scene reset defaults it to 1; CONFIG writes 0 on entry and 1 immediately before teardown and exit.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x142_set_system_menu_actions_enabled@0x421fe0 directly stores operand 1 at EngineCtx+0xa0d10. scene_context_init_reset initializes the field to 1. iage_service_query_system_menu_enabled@0x45f7c0 exposes it as a boolean through the AGE:IAGEService vtable at +0xb4. Shipped /support/AGERC.DLL's agerc_refresh_system_menu_state@0x10002e10 calls that method; zero invokes EnableMenuItem(...,MF_GRAYED) for command ids 0x9c63/64/65/68/6c/6e/6f. CONFIG.BIN's only sites bracket its complete scripted settings UI with 0 then 1.

Port status (2026-07-29): implemented as an EngineCtx-lifetime signed-dword field on VirtualMachine. Root scene reload restores one. The current Godot frontend has no AGERC native system menu, so the value is retained for exact state parity and a future equivalent menu consumer without affecting game input or persisted settings.

0x144 edit-fullwidth-string-dialog (edit-fullwidth-string-dialog, argc 2)

• summary: (result_inout)(initial_text) - synchronously open AGERC's modal full-width text editor. Accept writes at most eight valid CP932 double-byte characters to operand 1; cancel leaves operand 1 unchanged. Operand 2 supplies the initial edit text and is preserved.
• grounding: source=investigation, confidence=high
• evidence: The real /v2 dispatch slot registers op_0x144_edit_fullwidth_string_dialog@0x42bdd0. It copies both resolved string operands into 0x400-byte buffers, calls the runtime host callback g_pfnAgercHostCallback with command 10 and owner HWND, then writes both returned buffers back. A read-only Frida probe of the pristine game resolved that callback to AGERC.DLL+0x1050. Imported /support/AGERC.DLL shows agerc_dispatch_host_command@0x100025f0 opening dialog resource 10 with agerc_fullwidth_text_dialog_proc@0x10002140: edit control 1006 is initialized from operand 2; IDOK rejects more than 16 bytes (字数オーバーです) or any non-DBCS cell (半角文字は使用できません) before copying the accepted text to operand 1; IDCANCEL closes without changing operand 1. INPUTNAME's sole site at 0xdcd passes its assembled current name in both operands, then resplits operand 1 through 0x2c6/0x2c8.

This is INPUTNAME's optional native keyboard-entry button, not the surrounding script-authored character palette. The VM can use a synchronous host seam like the existing diagnostic dialog because the Godot host runs script execution on its worker thread while the main thread owns the modal UI. Compatibility requires the native full-width-only and 16-CP932-byte limits before accepting the result.

Port status (2026-07-29): implemented. The VM issues an explicit accept/cancel request through IHost; headless hosts preserve the inout value by default. Godot parks the VM worker, opens a main-thread modal LineEdit, keeps it open on either native validation error, and resumes the worker only after valid accept or cancel. Accept replaces operand 1 and cancel leaves it untouched; operand 2 is never modified.

0x148 get-system-menu-show-delay (get-system-menu-show-delay, argc 1)

• summary: (out) - return the current unsigned TIMER_SHOWMENU top-edge dwell threshold paired with opcode 0x149.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x148_get_system_menu_show_delay@0x429c70 writes EngineCtx+0x5511c to operand 1. Scene reset initializes the field to 0, opcode 0x149 replaces it, and the windowed top-edge TIMER_SHOWMENU path consumes it as an unsigned millisecond threshold. This getter is not observed in Himegari's corpus.

Port status (2026-07-29): implemented with opcode 0x149. The getter writes the retained dword through the VM's signed integer-cell representation so high-bit values preserve the same native 32 bits.

0x149 set-system-menu-show-delay (set-system-menu-show-delay, argc 1)

• summary: (milliseconds) - replace the unsigned dwell threshold before pointer hover at the top two client rows reveals AGERC's modeless system-menu strip. Scene reset defaults to 0; SYSTEM4 sets 1000.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x149_set_system_menu_show_delay@0x422050 directly stores operand 1 at EngineCtx+0x5511c; scene_context_init_reset writes 0 and paired op_0x148_get_system_menu_show_delay@0x429c70 reads it. system_menu_top_edge_dwell_timer_tick@0x486280 compares the field unsigned against timeGetTime elapsed while WM_MOUSEMOVE is in client y=0..1, then requires no left/right button, windowed ScreenMode, and g_pfnAgercHostCallback(-1)==0 before system_menu_strip_show@0x407bd0 invokes AGERC command 4. The handler uses the complete dword. SYSTEM4's sole site sets 1000 immediately before the unrelated tiled-surface edge setting.

Port status (2026-07-29): implemented as unsigned scene-context state. The setter preserves all 32 operand bits, root scene reload restores zero, and the current Godot frontend deliberately adds no host effect because it has no AGERC application-menu strip.

0x19a get-message-skip (u00414E50, argc 1)

• summary: (out) - return the current all-message skip state set by op 0x88.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x19a_get_message_skip@0x4271b0 writes ctx+0x550fc to operand 1. The shared ADV redraw routine uses it to select SO001's active Message-skip icon at x=728.

0x19b suspend-adv-skip-service (u00414E80, argc 0)

• summary: () - suspend persistent/read-driven ADV fast-forward while preserving the user's all-message Skip toggle; physically held logical action 6 is independent.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x19b_suspend_adv_skip_service@0x416560 clears run-state bit 0x08000000, ctx+0x13dc active message skip, ctx+0x55100 ADV skip-service enable, and the click-cancel phase, but deliberately leaves ctx+0x550fc persistent all-message Skip unchanged. It does not mutate the input manager; adv_interpreter_tick@0x410fb0 polls logical action 6 (mask bit 0x40) independently of ctx+0x55100. Corpus comments call the opcode savemesskip; ADV-end/branch and CALLBACK_LOAD paths use it before leaving ADV presentation.

This lifecycle operation affects persistent/read-driven active Skip only. Physical logical action 6 is process input polled independently by adv_interpreter_tick and remains active while held.

0x19c resume-adv-skip-service (u00414EC0, argc 0)

• summary: () - enable the persistent/read ADV skip service and recompute active fast-forward from all-message Skip or the live read-skip channel; physical action 6 remains independent.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x19c_resume_adv_skip_service@0x4165a0 sets ctx+0x55100, clears the click-cancel phase, and normally activates run-state bit 0x08000000 when ctx+0x550fc persistent all-message Skip or ctx+0x6dbd4 adv_read_skip_state is nonzero. Otherwise it clears ctx+0x13dc and the run-state bit. A separate startup fast-forward guard at ctx+0x6f86c suppresses reactivation while active. Corpus comments call it loadmesskip; ADV setup, branch, and CALLBACK_LOAD paths pair it with op 0x19b.

0x1b6 get-auto-message (u00414F60, argc 1)

• summary: (out) - return whether automatic message advance is enabled.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1b6_get_auto_message@0x4271e0 writes (ctx+0x55104 != 0) to operand 1. FUN_00411230 consumes the same field to arm AutoMessageTime0/1 timers; the shared ADV redraw routine uses it for the active Auto icon.

0x1b7 set-auto-message (u0041B640, argc 1)

• summary: (enabled) - enable or disable automatic message advance.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1b7_set_auto_message@0x41f560 stores (operand1 != 0) at ctx+0x55104. SC0000's x=706 Auto button reads the current value through 0x1b6, toggles modulo 2, then writes it through this opcode.

0x1b8 get-auto-message-time (u0041B670, argc 2)

• summary: (selector)(out) - read an Auto-message delay from engine configuration: selector 0 = post-voice AutoMessageTime0, selector 1 = unvoiced AutoMessageTime1.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1b8_handler@0x427210 dispatches selector 0 to config key message:AutoMessageTime0 and selector 1 to message:AutoMessageTime1, then writes the result to operand 2. CONFIG.BIN uses it to bound the two UI settings.

0x1b9 set-auto-message-time (u0041B710, argc 2)

• summary: (selector)(milliseconds) - write an Auto-message delay to engine configuration: selector 0 = post-voice AutoMessageTime0, selector 1 = unvoiced AutoMessageTime1.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1b9_handler@0x41f5a0 dispatches selector 0/1 to config setters for message:AutoMessageTime0/1. CONFIG.BIN initializes them to 500/2000 ms and adjusts each in 500-ms steps within 500..9500.

0x1bc reset-message-voice-state (u00415670, argc 0)

• summary: Reset the per-message queued-voice flag used by ADV Auto timing.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1bc_handler@0x416c20 writes zero to ctx+0x6dbe4 (adv_auto_voice_pending). Opcode 0xc4 sets that field when voice playback is queued; adv_input_service_poll consumes it to select the post-voice AutoMessageTime0 path.

0x1c7 get-message-skip (get-message-skip, argc 1)

• summary: (out) - write 1 iff ADV message-skip run-state bit 0x08000000 is set, otherwise 0.
• grounding: source=investigation, confidence=high
• depended on by: 0x20c, 0x20d, 0x21c, 0x223
• evidence: Ghidra /v2: handler 0x4272b0 reads ctx+0xa0ce4 bit 0x08000000 and vm_operand_write(1, 1|0). adv_interpreter_tick@0x410fb0 first polls the configured logical-action mask; action 6 is bit 0x40 and therefore drives this transient run state from SYSTEM4's C/LeftCtrl bindings or the retained native Backspace default. Persistent op-0x88 state injects the same bit. SC0000 label_1235a ORs the result with op 0x1cc.

0x1ca set-read-message-skip (u0041B9B0, argc 1)

• summary: (enabled) - set the engine setting message:ReadTextSkip, which skips only previously read text.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1ca_set_read_message_skip@0x41f880 calls the engine setting interface's setter for message:ReadTextSkip with operand 1. SC0000's x=750 Read-message-skip button toggles the value read by op 0x1cb.

Port status (2026-07-24): implemented as profile-lifetime engine setting state. Changing it immediately refreshes the current T1 message against the shared RT.DAT-backed ReadTextDB.

0x1cb get-read-message-skip (u00414FD0, argc 1)

• summary: (out) - read the engine setting message:ReadTextSkip.
• grounding: source=investigation, confidence=high
• evidence: Ghidra /v2: op_0x1cb_get_read_message_skip@0x4272f0 calls the engine setting interface's getter for message:ReadTextSkip and writes the result to operand 1. The shared ADV redraw routine uses it for the active Read-message-skip icon.

Port status (2026-07-24): implemented through the same profile-lifetime setting used by 0x1ca and the ADV ReadTextDB query path.

marker

0x1a8 instruction-marker-noop (dev_ukn, argc 0)

• summary: Zero-operand structural marker. The native shared 0xaf/0x1a8 handler only records this instruction's one-dword length and returns.
• grounding: source=investigation, confidence=high, noop_headless=True
• evidence: Ghidra /v2: op_0xaf_0x1a8_handler@0x416650 writes frame_instruction_word_count=1 for the current script context and immediately returns. Himegari has 1,989 op-0x1a8 sites. The port's explicit no-op matches native behavior.

0x1bf call-end (u004156C0, argc 0)

• summary: zero-arg; call->0x1bf->stmt-end — end-of-call-statement marker
• grounding: source=inference, confidence=med, noop_headless=True

0x1d5 cond-block (u00415700, argc 0)

• summary: zero-arg; ALWAYS follows jcc — marks conditional body entry
• grounding: source=inference, confidence=high, noop_headless=True

0x1f4 stmt-begin (u004160D0, argc 0)

• summary: zero-arg; opens scripts, pairs with stmt-end 0x1f5
• grounding: source=investigation, confidence=high, noop_headless=True

0x1f5 stmt-end (u00416120, argc 0)

• summary: zero-arg; precedes exit/next-stmt, pairs with 0x1f4
• grounding: source=investigation, confidence=high, noop_headless=True

0x21b line-id? (u004213E0, argc 1)

• summary: 1 imm; mov->0x21b->stmt-end; near save/load-messkip — likely line/stmt id, verify not msg-control
• grounding: source=harness, confidence=med, noop_headless=True

unknown

0x2 exit (exit, argc 0)

• summary: —
• grounding: source=kelebek, confidence=med
• evidence: Ghidra /v2: op_0xba_sfx_start_loop@0x420290 records a 3-dword instruction, fetches channel operand 1, and calls sfx_channel_start@0x4825d0 with logical loop mode 1. The same worker receives mode 0 from op 0xb5. sound_stream_fill_quarter@0x483b70 rewinds the decoder at EOF only for mode 1. All 334 Himegari sites pass literal channel 9 immediately after op 0xb4 loads that channel.

0x4 u00417E30 (u00417E30, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x5 ret (ret, argc 0)

• summary: —
• grounding: source=kelebek, confidence=med

0x7 u00417F90 (u00417F90, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xa u00424170 (u00424170, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xb u00418090 (u00418090, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xc u004149E0 (u004149E0, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xd u004181A0 (u004181A0, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xe u00418200 (u00418200, argc 12)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xf u00418300 (u00418300, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x10 u00414A00 (u00414A00, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x11 u00418330 (u00418330, argc 9)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x12 u004183F0 (u004183F0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x13 u00418420 (u00418420, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x14 u00414A20 (u00414A20, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x15 u00418490 (u00418490, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x16 u00418520 (u00418520, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x17 u00418560 (u00418560, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1e u004185B0 (u004185B0, argc 8)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1f u00418690 (u00418690, argc 12)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x20 u004187C0 (u004187C0, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x26 u00418C00 (u00418C00, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x27 u00418CC0 (u00418CC0, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x28 u00418D90 (u00418D90, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2a u00418E60 (u00418E60, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2b u00418F30 (u00418F30, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c u00419010 (u00419010, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d u004190A0 (u004190A0, argc 12)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e u004194B0 (u004194B0, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f u004195A0 (u004195A0, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x30 u00419670 (u00419670, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x31 u00419750 (u00419750, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32 u004197C0 (u004197C0, argc 10)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x33 u00419900 (u00419900, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x34 u004199C0 (u004199C0, argc 12)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x35 u00419AF0 (u00419AF0, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x36 u00419C00 (u00419C00, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x37 u00419C90 (u00419C90, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x38 u00419DA0 (u00419DA0, argc 12)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x50 add (add, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x51 sub (sub, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x52 mul (mul, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x53 div (div, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x54 mod (mod, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x55 mov (mov, argc 2)

• summary: —
• grounding: source=kelebek, confidence=med

0x56 and (and, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x57 or (or, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x58 sar (sar, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x59 shl (shl, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x5a eq (eq, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x5b ne (ne, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x5c lt (lt, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x5d lte (lte, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x5e gr (gr, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x5f gre (gre, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x62 u0041A360 (u0041A360, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x65 u00414AA0 (u00414AA0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x66 u00414AE0 (u00414AE0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x67 u00414B20 (u00414B20, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x68 u00414B60 (u00414B60, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x69 u00414BA0 (u00414BA0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x6a u00414BE0 (u00414BE0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x6b u00414C20 (u00414C20, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x6d u00416960 (u00416960, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x74 u0041AC00 (u0041AC00, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x7d u0041AE00 (u0041AE00, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x7e u0041AEA0 (u0041AEA0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x81 u0041AF30 (u0041AF30, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x82 u0041AF80 (u0041AF80, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x83 u00414C90 (u00414C90, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x84 u0041AFE0 (u0041AFE0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x89 u0041B2E0 (u0041B2E0, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x8a u0041B330 (u0041B330, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x8c jmp (jmp, argc 1)

• summary: —
• grounding: source=kelebek, confidence=med

0x8d u0041BCE0 (u0041BCE0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x8e u0041BD60 (u0041BD60, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x91 u0041BFB0 (u0041BFB0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x92 u0041C030 (u0041C030, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x95 u0041C0C0 (u0041C0C0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x96 u004150C0 (u004150C0, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xa0 jcc (jcc, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0xaa u0041C270 (u0041C270, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xab u0041C330 (u0041C330, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xac u0041C3E0 (u0041C3E0, argc 9)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xad u00415110 (u00415110, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xaf u00415480 (u00415480, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xb0 u0041C530 (u0041C530, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xb1 u0041C560 (u0041C560, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xb2 u0041C590 (u0041C590, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xb3 u004154B0 (u004154B0, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xbb u0041D250 (u0041D250, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xbc u0041D280 (u0041D280, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xbd u00415570 (u00415570, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xbe u004155E0 (u004155E0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xc1 u00415650 (u00415650, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xc3 u0041D390 (u0041D390, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xc9 u00415770 (u00415770, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xca u004157A0 (u004157A0, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xcb u00415800 (u00415800, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xce u0041E0B0 (u0041E0B0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xcf u00416D40 (u00416D40, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xd1 u00415860 (u00415860, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xd2 u0041E110 (u0041E110, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xd6 u004267D0 (u004267D0, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xd7 u0041E1A0 (u0041E1A0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xd8 u0041E150 (u0041E150, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xda u004158B0 (u004158B0, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xfa u00415940 (u00415940, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xfc u004159F0 (u004159F0, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0xfd u0041E2D0 (u0041E2D0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x102 u0041E3C0 (u0041E3C0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x103 u0041E4A0 (u0041E4A0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x104 u00415C50 (u00415C50, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x105 u0041E4D0 (u0041E4D0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x106 u00415E40 (u00415E40, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x10e u0041E650 (u0041E650, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x10f u0041E690 (u0041E690, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x12c lookup-array-2d (lookup-array-2d, argc 5)

• summary: —
• grounding: source=kelebek, confidence=med

0x12d u0041E720 (u0041E720, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x13b u0041F440 (u0041F440, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x13c u0041F7E0 (u0041F7E0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x13d u0041F840 (u0041F840, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x13e u0041F8D0 (u0041F8D0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x13f check-bit (check-bit, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x145 u00416040 (u00416040, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x146 u0041FB40 (u0041FB40, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x147 u0041FB80 (u0041FB80, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x14a u0041FD10 (u0041FD10, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x14b u0041FF50 (u0041FF50, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x14c set-agerc-export (set-agerc-export, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x14d call-agerc-export (call-agerc-export, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x190 u0041C5E0 (u0041C5E0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x192 set-string (set-string, argc 2)

• summary: —
• grounding: source=kelebek, confidence=med

0x196 display-furigana (display-furigana, argc 3)

• summary: —
• grounding: source=kelebek, confidence=med

0x1a7 comment (comment, argc 1)

• summary: —
• grounding: source=kelebek, confidence=med

0x1b1 u0041B5C0 (u0041B5C0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1be u0041D9D0 (u0041D9D0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c0 u0041DB70 (u0041DB70, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c2 u0041B860 (u0041B860, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c3 u0041B8A0 (u0041B8A0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c4 u00415720 (u00415720, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c5 u00425800 (u00425800, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c6 u0041DD80 (u0041DD80, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1c9 u0041B8E0 (u0041B8E0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1cd u0041A560 (u0041A560, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1d6 u0041DA40 (u0041DA40, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1d7 u0041DA80 (u0041DA80, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1d8 u0041DAD0 (u0041DAD0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1d9 u0041DB20 (u0041DB20, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x1fc u004205F0 (u004205F0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x200 u00420800 (u00420800, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x201 u00416190 (u00416190, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x206 u004161C0 (u004161C0, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x209 u00420C50 (u00420C50, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x210 u00420FF0 (u00420FF0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x211 u00421060 (u00421060, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x214 u00421120 (u00421120, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x221 u00421670 (u00421670, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x225 u00421780 (u00421780, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x226 u004217D0 (u004217D0, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x227 u00421880 (u00421880, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x22b u00421B30 (u00421B30, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x22e u00421D10 (u00421D10, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x235 u00422100 (u00422100, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x237 u00422350 (u00422350, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x23e u004228C0 (u004228C0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x240 u004229A0 (u004229A0, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x244 u00416360 (u00416360, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x245 u00422DA0 (u00422DA0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x246 u00422E10 (u00422E10, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x247 u00416390 (u00416390, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x24a u004163C0 (u004163C0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x24f u00422ED0 (u00422ED0, argc 10)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x250 u00422F60 (u00422F60, argc 10)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x251 u00422FF0 (u00422FF0, argc 12)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x252 u00423000 (u00423000, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x253 u00423019 (u00423019, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x254 u00423049 (u00423049, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x256 u00423050 (u00423050, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x257 257 (257, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x25a u00423120 (u00423120, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x25b 25B (25B, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x25c u00423122 (u00423122, argc 8)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x25d u00423123 (u00423123, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x25e u00423124 (u00423124, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x25f u00423125 (u00423125, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x260 u00423126 (u00423126, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x261 u00423127 (u00423127, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x262 262 (262, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x263 263 (263, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x264 264 (264, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2bc u00423020 (u00423020, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2be u00423140 (u00423140, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c1 u00425BC0 (u00425BC0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c2 u00425CD0 (u00425CD0, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c3 u00423200 (u00423200, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c4 u00416450 (u00416450, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c7 u0042B5F0 (u0042B5F0, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2c9 2C9 (2C9, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2cc 2CC (2CC, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2cd 2CD (2CD, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2ce u0042B616 (u0042B616, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2cf u0042B617 (u0042B617, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d0 u0042B940 (u0042B940, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d1 u0042B950 (u0042B950, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d2 u0042B960 (u0042B960, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d3 u0042B970 (u0042B970, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d5 u0042B990 (u0042B990, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d7 u0042B9B0 (u0042B9B0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d8 set-array-to (set-array-to, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2d9 u0042BA30 (u0042BA30, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2da u004234E0 (u004234E0, argc 8)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2db u004235C0 (u004235C0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2dc u0042BA80 (u0042BA80, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2dd u0042D880 (u0042D880, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2de u0042BAC0 (u0042BAC0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2df u0042BAC1 (u0042BAC1, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e0 u0042CE0F (u0042CE0F, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e1 u0042CE10 (u0042CE10, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e2 u0042CE11 (u0042CE11, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e3 u0042CE30 (u0042CE30, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e4 u0042CE31 (u0042CE31, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e5 u0042CE50 (u0042CE50, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e6 u0042CE60 (u0042CE60, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e7 u0042CE70 (u0042CE70, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e8 u0042CE80 (u0042CE80, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2e9 u0042CE90 (u0042CE90, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2ea u0042CEA0 (u0042CEA0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2eb u0042CEB0 (u0042CEB0, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2ec u0042CEC0 (u0042CEC0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2ee u0042CEC2 (u0042CEC2, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2ef u0042CEC3 (u0042CEC3, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f0 u0042CEC4 (u0042CEC4, argc 9)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f1 u0042CEC5 (u0042CEC5, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f2 u0042CEC6 (u0042CEC6, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f3 2F3 (2F3, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f4 2F4 (2F4, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f5 2F5 (2F5, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f6 2F6 (2F6, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f7 2F7 (2F7, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f8 2F8 (2F8, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2f9 2F9 (2F9, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2fa 2FA (2FA, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2fb 2FB (2FB, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2fc 2FC (2FC, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2fd 2FD (2FD, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2fe 2FE (2FE, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x2ff 2FF (2FF, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x300 300 (300, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x301 301 (301, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x302 302 (302, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x303 303 (303, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x304 304 (304, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x305 305 (305, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x306 306 (306, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x307 307 (307, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x308 308 (308, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x30a 30A (30A, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x30c 30C (30C, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x320 u0043AA20 (u0043AA20, argc 10)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x321 u0043AA30 (u0043AA30, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x322 u0043AA40 (u0043AA40, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x323 u0043AA50 (u0043AA50, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x324 u0043AA60 (u0043AA60, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x325 u0043AA70 (u0043AA70, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x326 u0043AA80 (u0043AA80, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x327 u0043AA90 (u0043AA90, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x328 u0043AAA0 (u0043AAA0, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x329 u0043AAB0 (u0043AAB0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32a 32A (32A, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32b u0043AAD0 (u0043AAD0, argc 0)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32c u0043AAE0 (u0043AAE0, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32d u0043AAF0 (u0043AAF0, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32e u0043AB10 (u0043AB10, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x32f u0043AB11 (u0043AB11, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x330 u0043AB12 (u0043AB12, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x332 u0043AB14 (u0043AB14, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x334 u0043AB16 (u0043AB16, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x335 u0043AB17 (u0043AB17, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x337 u0043AB19 (u0043AB19, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x33b u0043AB1D (u0043AB1D, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x33d u0043AB1E (u0043AB1E, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x33e u0043AB1F (u0043AB1F, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x33f u0043AB20 (u0043AB20, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=low
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x340 340 (340, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x341 341 (341, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x342 342 (342, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x344 344 (344, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x345 345 (345, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x349 349 (349, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x34d 34D (34D, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x34e 34E (34E, argc 4)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x352 352 (352, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x353 353 (353, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x354 354 (354, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x358 358 (358, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x35a 35A (35A, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x35b 35B (35B, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x35c 35C (35C, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x35d 35D (35D, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x35f 35F (35F, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x360 360 (360, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x361 361 (361, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x363 363 (363, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x364 364 (364, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x384 384 (384, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x386 386 (386, argc 11)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x387 387 (387, argc 8)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x388 388 (388, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x389 389 (389, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x38f 38F (38F, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x390 390 (390, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x391 391 (391, argc 2)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x392 392 (392, argc 1)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x393 393 (393, argc 6)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x396 396 (396, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x398 398 (398, argc 3)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x399 399 (399, argc 7)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.

0x39b 39B (39B, argc 5)

• summary: Broader AGE-catalog compatibility stub; the port currently traces and skips it.
• grounding: source=kelebek, confidence=med
• evidence: Not observed in Himegari's script corpus; ABI label/argc come from Kelebek's AGE table.