"""Two loose ends. (1) FUN_18010c3b0 also calls FUN_18011f380 four times -- is it a SECOND path that can size the trade-pile vector (i.e. is maximumTradePileSize really the only lever for the "TRANSFER LIST 0/N" denominator)? (2) descriptor vt+0x10 = 0x18011f940, the response allocator: corroborate the ctor defaults for the settings sub-struct (+0x50 tradingEnabled vs +0x54 storeEnabled). CONTROL for (2): live +0x1fd2f=1, +0x1fd2e=0 with configs:[] and a sole writer, so any ctor read must agree with 1 and 0. """ import traceback try: print("=== FUN_18010c3b0 ===") s = dec(0x18010c3b0); print("len=%d" % len(s)); print(s[:5000]) print("\n=== 0x18011f940 (descriptor vt+0x10, response allocator) ===") s = dec(0x18011f940); print("len=%d" % len(s)); print(s[:6000]) except Exception: traceback.print_exc()