fix: _field_4dc reads game_info+0x44C, not net_game+0x44C

Ghidra mislabeled param8 as net_game in the DDGame constructor, but
the actual code reads game_info+0x44C for the loading progress total.
net_game is null in offline/bot replays; game_info is always valid.

Wrapper+0x04DC now matches original (0x39B). Only remaining wrapper
diff is +0x04D8 tick counter (off by 2).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

crates/openwa-core/src/engine/ddgame.rs

@@ -992,10 +992,8 @@ pub unsafe fn create_ddgame(
 
     // Verify game_info is set
     let _ = crate::log::log_line(&format!(
-        "[DDGame] exposed: ddgame=0x{:08X}, game_info=0x{:08X}, ddgame+0x24=0x{:08X}",
-        ddgame as u32,
-        game_info as u32,
-        (*ddgame).game_info as u32,
+        "[DDGame] exposed: ddgame=0x{:08X}, game_info=0x{:08X}, net_game=0x{:08X}",
+        ddgame as u32, game_info as u32, net_game as u32,
     ));
 
     // ── 5. Set g_GameInfo global ──
@@ -1237,12 +1235,13 @@ unsafe fn init_graphics_and_resources(
 
     // ── DDGameWrapper field inits ──
     (*wrapper)._field_4d8 = 0;
-    // Original checks `display == NULL`, but our headless display is non-null.
-    // Use net_game null check as equivalent (net_game is null in headless/offline modes).
-    if net_game.is_null() {
+    // Original: if (display == NULL) iVar4=0 else iVar4=*(byte*)(game_info+0x44C)*0x38+0x7E
+    // Ghidra mislabeled game_info as param8 — the original reads game_info, not net_game.
+    // Our headless display is non-null, so use is_headless as the condition.
+    if is_headless {
         (*wrapper)._field_4dc = 0x2AD;
     } else {
-        let byte_val = *net_game.add(0x44C) as u32;
+        let byte_val = *(game_info as *const u8).add(0x44C) as u32;
         (*wrapper)._field_4dc = byte_val * 0x38 + 0x7E + 0x2AD;
     }
     (*wrapper)._field_4e0 = 0xFFFFFF9C; // -100

crates/openwa-wormkit/src/replacements/game_session.rs

@@ -107,9 +107,18 @@ pub(crate) unsafe fn construct_ddgame_wrapper(
     let timer_obj = (*session).timer_obj;
     let net_game  = (*session).net_game;
 
+    // Debug: dump session fields around net_game (0xBC-0xC8)
+    let session_base = session as *const u8;
     let _ = log_line(&format!(
-        "[GameSession] Before create_ddgame: wrapper+0x4D0=0x{:08X}, display=0x{:08X}",
-        *(this as *const u8).add(0x4D0).cast::<u32>(), display as u32,
+        "[GameSession] session=0x{:08X} +0xBC=0x{:08X} +0xC0=0x{:08X} +0xC4=0x{:08X}",
+        session as u32,
+        *(session_base.add(0xBC) as *const u32),
+        *(session_base.add(0xC0) as *const u32),
+        *(session_base.add(0xC4) as *const u32),
+    ));
+    let _ = log_line(&format!(
+        "[GameSession] display=0x{:08X}, net_game=0x{:08X}, timer=0x{:08X}, game_info(EDI)=0x{:08X}",
+        display as u32, net_game as u32, timer_obj as u32, game_info as u32,
     ));
 
     // Toggle: use Rust constructor (true) or original (false)