The "4-byte header" that precedes every response class name in .rdata, which cost six
failed class-to-deserializer resolutions before anyone noticed the offset, is not a
length prefix or a refcount. It is the string RS4:. The full literal is
RS4:FutXServerResponse, and searching for the bare class name lands four bytes in.
Verified directly on three classes:
FutDestroyMatchServerResponse name@0x18021d694 header = b'RS4:'
FutGetDraftCurrentStateServerResponse name@0x180224204 header = b'RS4:'
FutStickerBookStats2ServerResponse name@0x1802220cc header = b'RS4:'
Found by a verification agent that had been instructed to distrust the rule. It did,
and came back with the reason rather than the offset. A magic constant you have to
remember is a rule you will eventually get wrong; a prefix you can read is not.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VUT92pz6RWKih9dSr8ZpxW
funman300
397d46f174