Ran the size-independent statistic db1e69c asked for, and it confirms the
confound. Bucketing level-0 functions by distinct-immediate count, the rate
containing 0xc0 is:
0-15 72/1082 6.7% 64-79 31/59 52.5%
16-31 119/713 16.7% 80-95 13/25 52.0%
32-47 104/291 35.7% 112-127 3/7 42.9%
48-63 39/119 32.8% 624+ 1/1 100%
Monotone from 6.7% to over 50%. Pigeonhole: a function with hundreds of distinct
immediates has more chances to contain any particular value.
So the 394 is largely a list of large functions and '394 of 2,323' was never a
shortlist. db1e69c was right; 3ea5ab7's framing was wrong and is corrected here.
This does not retract the neighbour result. 0xc0 being enriched over 0xb8-0xc8,
and 0xc0 being enriched in bigger functions, are separate claims and both hold.
What it retracts is the inference that the 394 are candidates for anything.
The control that would settle it: 0xc0's rate against a specific neighbour's rate
within the same set-size bucket. Not measured, and named so the next attempt
starts there rather than re-ranking by size.
No test -- the bucket rates are the finding, and an assertion on any single
threshold would be arbitrary.