feat: add passthrough hooks for 6 InitGameState constructors (Groups D+E)

Passthrough hooks that call the original WA function, validating
calling conventions at runtime:

Group D (core game objects):
- HudPanel__Constructor (0x524070): stdcall(1), RET 0x4
- InitWeaponTable (0x53CAB0): stdcall(1), RET 0x4
- DDGame__InitTeamsFromSetup (0x5220B0): stdcall(2), RET 0x8

Group E (task objects):
- TeamManager__Constructor (0x563D40): stdcall(2), RET 0x8
- CTaskTurnGame__Constructor (0x55B280): stdcall(2), RET 0x8
- CTaskGameState__Constructor (0x532330): stdcall(2), RET 0x8

Key finding: TurnGame and GameState hooks cannot use format!/log_line
in the passthrough — the heap allocation clobbers ECX/EDX which the
caller's post-call code depends on. Logging removed from these two.

New file: game_state_hooks.rs for InitGameState passthrough hooks.
All 5 functions named in Ghidra. Headful + headless PASS.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

crates/openwa-core/src/address.rs

@@ -366,6 +366,16 @@ pub mod va {
     pub const INIT_TURN_STATE: u32 = 0x0052_8690;
     /// CGameTask__InitLandscapeFlags (0x528480): usercall(EAX=wrapper), plain RET.
     pub const INIT_LANDSCAPE_FLAGS: u32 = 0x0052_8480;
+    /// HudPanel__Constructor (0x524070): stdcall(this), RET 0x4.
+    pub const HUD_PANEL_CONSTRUCTOR: u32 = 0x0052_4070;
+    /// DDGame__InitTeamsFromSetup (0x5220B0): stdcall(team_arena, setup_data), RET 0x8.
+    pub const INIT_TEAMS_FROM_SETUP: u32 = 0x0052_20B0;
+    /// TeamManager__Constructor (0x563D40): stdcall(this, wrapper), RET 0x8.
+    pub const TEAM_MANAGER_CONSTRUCTOR: u32 = 0x0056_3D40;
+    /// CTaskTurnGame__Constructor (0x55B280): stdcall(this, setup_data), RET 0x8.
+    pub const TURN_GAME_CONSTRUCTOR: u32 = 0x0055_B280;
+    /// CTaskGameState__Constructor (0x532330): stdcall(this, param), RET 0x8.
+    pub const GAME_STATE_CONSTRUCTOR: u32 = 0x0053_2330;
     /// DDGame__InitFeatureFlags (0x524700): stdcall(wrapper), RET 0x4.
     pub const DDGAME_INIT_FEATURE_FLAGS: u32 = 0x0052_4700;
     /// DDGame__InitDisplayFinal_Maybe (0x56A830): display finalization for non-headless.

crates/openwa-wormkit/src/replacements/game_state_hooks.rs

@@ -0,0 +1,113 @@
+//! Passthrough hooks for DDGame__InitGameState sub-functions.
+//!
+//! These hooks intercept stdcall constructors called during InitGameState,
+//! log their parameters, call the original, and return. This validates
+//! calling conventions and prepares for future Rust replacements.
+
+use crate::hook;
+use crate::log_line;
+use openwa_core::address::va;
+
+// ─── Trampoline storage ─────────────────────────────────────────────────────
+
+static mut HUD_PANEL_ORIG: *const () = core::ptr::null();
+static mut INIT_WEAPON_TABLE_ORIG: *const () = core::ptr::null();
+static mut INIT_TEAMS_ORIG: *const () = core::ptr::null();
+static mut TEAM_MANAGER_ORIG: *const () = core::ptr::null();
+static mut TURN_GAME_ORIG: *const () = core::ptr::null();
+static mut GAME_STATE_ORIG: *const () = core::ptr::null();
+
+// ─── Passthrough hooks ──────────────────────────────────────────────────────
+
+// HudPanel__Constructor (0x524070): stdcall(this), RET 0x4
+unsafe extern "stdcall" fn hook_hud_panel(this: u32) -> u32 {
+    let _ = log_line(&format!(
+        "[InitGameState] HudPanel::Constructor this=0x{this:08X}"
+    ));
+    let orig: unsafe extern "stdcall" fn(u32) -> u32 = core::mem::transmute(HUD_PANEL_ORIG);
+    orig(this)
+}
+
+// InitWeaponTable (0x53CAB0): stdcall(wrapper), RET 0x4
+unsafe extern "stdcall" fn hook_init_weapon_table(wrapper: u32) -> u32 {
+    let _ = log_line(&format!(
+        "[InitGameState] InitWeaponTable wrapper=0x{wrapper:08X}"
+    ));
+    let orig: unsafe extern "stdcall" fn(u32) -> u32 = core::mem::transmute(INIT_WEAPON_TABLE_ORIG);
+    orig(wrapper)
+}
+
+// DDGame__InitTeamsFromSetup (0x5220B0): stdcall(team_arena, setup_data), RET 0x8
+unsafe extern "stdcall" fn hook_init_teams(team_arena: u32, setup_data: u32) -> u32 {
+    let _ = log_line(&format!(
+        "[InitGameState] InitTeamsFromSetup arena=0x{team_arena:08X} setup=0x{setup_data:08X}"
+    ));
+    let orig: unsafe extern "stdcall" fn(u32, u32) -> u32 = core::mem::transmute(INIT_TEAMS_ORIG);
+    orig(team_arena, setup_data)
+}
+
+// TeamManager__Constructor (0x563D40): stdcall(this, wrapper), RET 0x8
+unsafe extern "stdcall" fn hook_team_manager(this: u32, wrapper: u32) -> u32 {
+    let _ = log_line(&format!(
+        "[InitGameState] TeamManager::Constructor this=0x{this:08X} wrapper=0x{wrapper:08X}"
+    ));
+    let orig: unsafe extern "stdcall" fn(u32, u32) -> u32 = core::mem::transmute(TEAM_MANAGER_ORIG);
+    orig(this, wrapper)
+}
+
+// CTaskTurnGame__Constructor (0x55B280): stdcall(this, setup_data), RET 0x8
+// No logging — format! clobbers ECX which the post-call code may depend on
+unsafe extern "stdcall" fn hook_turn_game(this: u32, setup_data: u32) -> u32 {
+    let orig: unsafe extern "stdcall" fn(u32, u32) -> u32 = core::mem::transmute(TURN_GAME_ORIG);
+    orig(this, setup_data)
+}
+
+// CTaskGameState__Constructor (0x532330): stdcall(this, param), RET 0x8
+// No logging — may clobber registers the caller depends on
+unsafe extern "stdcall" fn hook_game_state(this: u32, param: u32) -> u32 {
+    let orig: unsafe extern "stdcall" fn(u32, u32) -> u32 = core::mem::transmute(GAME_STATE_ORIG);
+    orig(this, param)
+}
+
+// ─── Hook installation ──────────────────────────────────────────────────────
+
+pub fn install() -> Result<(), String> {
+    unsafe {
+        HUD_PANEL_ORIG = hook::install(
+            "HudPanel__Constructor",
+            va::HUD_PANEL_CONSTRUCTOR,
+            hook_hud_panel as *const (),
+        )? as *const ();
+
+        INIT_WEAPON_TABLE_ORIG = hook::install(
+            "InitWeaponTable",
+            va::INIT_WEAPON_TABLE,
+            hook_init_weapon_table as *const (),
+        )? as *const ();
+
+        INIT_TEAMS_ORIG = hook::install(
+            "DDGame__InitTeamsFromSetup",
+            va::INIT_TEAMS_FROM_SETUP,
+            hook_init_teams as *const (),
+        )? as *const ();
+
+        TEAM_MANAGER_ORIG = hook::install(
+            "TeamManager__Constructor",
+            va::TEAM_MANAGER_CONSTRUCTOR,
+            hook_team_manager as *const (),
+        )? as *const ();
+
+        TURN_GAME_ORIG = hook::install(
+            "CTaskTurnGame__Constructor",
+            va::TURN_GAME_CONSTRUCTOR,
+            hook_turn_game as *const (),
+        )? as *const ();
+        GAME_STATE_ORIG = hook::install(
+            "CTaskGameState__Constructor",
+            va::GAME_STATE_CONSTRUCTOR,
+            hook_game_state as *const (),
+        )? as *const ();
+    }
+
+    Ok(())
+}

crates/openwa-wormkit/src/replacements/mod.rs

@@ -3,6 +3,7 @@ mod ddgame_init;
 mod display;
 mod frontend;
 mod game_session;
+mod game_state_hooks;
 mod hardware_init;
 mod headless;
 pub(crate) mod input;
@@ -28,5 +29,6 @@ pub fn install_all() -> Result<(), String> {
     speech::install()?;
     input::install()?;
     ddgame_init::install()?;
+    game_state_hooks::install()?;
     Ok(())
 }