sc2k-reverse - User contributions [en]

MediaWiki:Sidebar

2025-04-15T10:53:34Z

Araxestroy:

* navigation
** mainpage|mainpage-description
** recentchanges-url|recentchanges
** randompage-url|randompage
** https://sc2kfix.net|sc2kfix Home
** https://sc2kfix.net/discord|Discord
** https://community.simtropolis.com/forums/topic/763619-sc2kfix-a-bugfix-and-modding-plugin-for-simcity-2000-special-edition/|Simtropolis thread
* SEARCH
* TOOLBOX
* LANGUAGES

Main Page

2025-04-15T10:52:03Z

Araxestroy:

__NOTOC__ __NOEDITSECTION__ {{#description2:Welcome to sc2k-reverse, the sc2kfix Project wiki!}}
[[File:{{#setmainimage:SC2K-reverse Header.png}}|center]]

'''Welcome to sc2k-reverse, the sc2kfix Project wiki!''' Pardon our dust, as this wiki is brand new and we haven't had a chance to do much of anything around here yet.

'''Need an account?''' PM araxestroy on the Simtropolis forums or on the libera.chat IRC network, or ask in the sc2kfix Discord.

== Wiki to-do list ==

* More page component templates (see [[:Category:Templates]])
** Game infoboxes
** RE related stuff? Not sure what we'll need
** Category navboxes
* Wiki meta pages (categories, help, copyright page, etc)
* Nicer main page (maybe split it into flex columns?)
* Get some stub articles written up as a "schema"
* <s>Make sure the email system actually works</s> it absolutely does not, I may need to move this thing to a Linode VPS sooner rather than later

== sc2kfix Plugin Information ==

* [https://sc2kfix.net/plugin.html Plugin user guide]
* [[SC2X|SC2X save file format]]
* '''Modding with C/C++'''
** [[Modding|C/C++ Modding Basics]] ''(draft)''
** [[Modding/Hooks|Hook List]]
* '''Modding with Kuroko'''
** [[Kuroko|Kuroko Basics]]
** [[Kuroko/Module_sc2kfix|sc2kfix module]]
** [[Kuroko/Module_sc2k|sc2k module]]

== SimCity 2000 Reverse Engineering ==

* [[Function list]]
* [[Known global variables]]
* [[Classes]]
* [[Map data]]
* [[Data formats]]
* [[Tiles]]
* [[SimCity 2000 Bugs]]

Known global variables

2025-04-09T03:09:12Z

Araxestroy:

{{Heavy construction}}

This is a table of global variables in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

Data about where in the MISC chunk certain variables are located is from dfloer's sc2k-docs repository on GitHub (CC BY-SA 4.0).

{| class="wikitable sortable"
|+ Uncategorized variables
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the variable.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 0x4C702C || CWnd* || '''pCWndRootWindow''' || || Pointer to the MFC CWnd class for the "root window"
|-
| 0x4C7104 || {{Win32_BOOL}} || '''bPriscillaActivated''' || || Whether or not the debug menu has been activated
|-
| 0x4C71F0 || {{Win32_BOOL}} || '''bOptionsMusicEnabled''' || 0x0FFC || Whether or not music is enabled
|-
| 0x4C71F4 || {{Win32_BOOL}} || '''bSoundEffectsEnabled''' || || Whether or not sound effects are enabled
|-
| 0x4C7318 || WORD || '''wSimulationSpeed''' || 0x0FEC || 1-5 for Paused through African Swallow
|-
| 0x4C7A9C || DWORD || '''dwSystemMetricCYHSCROLL''' || || Cached result from <code>GetSystemMetrics(SM_CYHSCROLL)</code>
|-
| 0x4C7AC8 || DWORD || '''dwSystemMetricCYVSCROLL''' || || Cached result from <code>GetSystemMetrics(SM_CYVSCROLL)</code>
|-
| 0x4C7ACC || DWORD || '''dwSystemMetricCXVSCROLL''' || || Cached result from <code>GetSystemMetrics(SM_CXVSCROLL)</code>
|-
| 0x4C7AD4 || DWORD || '''dwSystemMetricCXHSCROLL''' || || Cached result from <code>GetSystemMetrics(SM_CXHSCROLL)</code>
|-
| 0x4C85A0 || DWORD || '''dwTotalBusRiders''' || || Sum of all trips that entered the Bus Network
|-
| 0x4C85A4 || DWORD || '''dwTotalTrainRiders''' || || Sum of all trips that entered the Train Network
|-
| 0x4C8600 || DWORD || '''dwTotalSubwayRiders''' || || Sum of all trips that entered the Subway Network
|-
| 0x4C93AC || WORD || '''wTotalGeneratedWaterTiles''' || || Total number of generated watered tiles from water sources
|-
| 0x4C93B0 || WORD || '''wTotalGeneratedPowerTiles''' || || Total number of generated powered tiles from power plants
|-
| 0x4C93B4 || WORD || '''wXVALTiles_TotalCount''' || || Total count of XVAL masked tiles, needed for Average Land Value.
|-
| 0x4C9428 || WORD || '''wIndustrialMixPollutionBonus''' || || -1 to 2 used to calculate the map wide Pollution Divisor
|-
| 0x4C942C || WORD || '''wViewRotation''' || 0x0008 || 0 = north, 1 = west, 2 = south, 3 = east
|-
| 0x4C94C4 || DWORD || '''dwArcologyPopulation''' || 0x1020 || Population of the city specifically in arcologies
|-
| 0x4C9EE8 || DWORD || '''dwDisasterActive''' || || Set to 1 when disaster is active, overrides usual status bar messages.
|-
| 0x4C9EF0 || WORD[50] || '''wArrBondData''' || 0x0610 || Array of Interest rates for each outstanding bond.
|-
| 0x4CA1A0 || char* || '''pszCityName''' || || Pointer to the city name, loaded/saved as the CNAM chunk
|-
| 0x4CA1BC || WORD || '''wNationalEconomyTrend''' || 0x005C || A growth modifier for the SimNation economic model that only affects interest rates. (0="Bull Market",1="Steady",2="Recession",3="Depression")
|-
| 0x4CA1E8 || WORD || '''wIndustrialMixBonus''' || || This is used in RCI demand generation as a bonus (cities dominated by 1 industry receive growth bonuses)
|-
| 0x4CA1DC || WORD || '''wPrisonBonus''' || || This sets if power stations get increased Police power from Prisons.
|-
| 0x4CA1EC || WORD || '''wCurrentMapToolGroup''' || || Currently selected mapping tool group
|-
| 0x4CA3F0 || WORD || '''wCityNeighborConnections1500''' || || Count of all $1500 (industrial) neighbor connections (railroad, highways)
|-
| 0x4CA400 || DWORD || '''dwInterestRateSum''' || || The combined Total Sum of all the interest rates of outstanding bonds
|-
| 0x4CA41C || WORD || '''wSubwayXUNDCount''' || 0x0FE8 || Seems to be mostly used for budget calculations
|-
| 0x4CA420 || WORD || '''wSetTriggerDisasterType''' || 0x0070 || The ID of the next disaster to occur
|-
| 0x4CA42C || WORD || '''wCityMode''' || 0x0004 || 0 = map editor, 1 = regular gameplay, 2 = scenario mode
|-
| 0x4CA440 || int || '''dwCityLandValue''' || 0x0028 || Sum of all values in XVAL
|-
| 0x4CA444 || int || '''dwCityFunds''' || 0x0014 || How much money the city has
|-
| 0x4CA4C8 || WORD* || '''dwTileCount''' || || Pointer to an array of tile counts for every valid iTileID
|-
| 0x4CA4CC || DWORD || '''dwNewPopulations''' || || New Populations that moved into the city's zones from last count (new immigrants).
|-
| 0x4CA4D0 || DWORD || '''dwCityValue''' || 0x0024 || Appears to have something to do with bond interest rates
|-
| 0x4CA5D8 || {{Win32_BOOL}} || '''bAutoGoToFlag''' || || Auto-Go To Flag
|-
| 0x4CA5F0 || WORD || '''wCityGarbage''' || 0x0040 || Entirely unused. Initialized to 0 when the city is founded, goes up by dwCityPopulation on the 22nd of every month
|-
| 0x4CA5F4 || WORD || '''wCityStartYear''' || 0x000C || The year the city was founded
|-
| 0x4CA5F8 || DWORD || '''dwCityUnemployment''' || || (Population in "Abandoned buildings" x 100) / (Population in "Abandoned buildings" + TotalPopulation + 1)
|-
| 0x4CA804|| DWORD[3] || '''dwNeighborGNP''' || || the GNP of the Neighboring city
|-
| 0x4CA81C || WORD || '''wMonsterXTHGIndex''' || || Which XTHG entry the monster's [[Thing]] is
|-
| 0x4CA928 || DWORD || '''dwNationalPopulation''' || 0x0050 || Population of SimNation
|-
| 0x4CA92C || DWORD[3] || '''dwNeighborFame''' || || Completely unused and always 0.
|-
| 0x4CA934 || WORD* || '''dwMilitaryTiles''' || || Pointer to the beginning of the military tiles in the dwTileCount array
|-
| 0x4CA938 || WORD || '''wNationalFedRate''' || 0x0058 || The national base tax rate or the "fed rate", for calculating bond interest rates
|-
| 0x4CA93C || WORD || '''wCurrentDisasterType''' || || The Disaster ID for the current/ongoing disaster.
|-
| 0x4CAA40 || DWORD || '''dwCityOrdinances''' || 0x0FA0 || Flags for which city [[ordinances]] are enacted
|-
| 0x4CAA50 || DWORD || '''dwPowerUsedPercentage''' || || Percentage of power capacity in use
|-
| 0x4CAA74 || DWORD || '''dwCityPopulation''' || 0x102C || Total city population, excluding arcologies
|-
| 0x4CAD10|| DWORD[3] || '''dwNeighborPopulation''' || || the Population of the Neighboring city
|-
| 0x4CAD28 || DWORD || '''dwCityFame''' || 0x0038 || Completely unused
|-
| 0x4CAD2C || {{Win32_BOOL}} || '''bYearEndFlag''' || 0x0E3C || Whether or not the first of the month is the start of a new year
|-
| 0x4CAD44 || {{Win32_BOOL}} || '''bInScenario''' || || Whether or not this game is a scenario
|-
| 0x4CAD58 || neighbor_city_t[4] || '''stNeighborCities''' || 0x06D8 || Array of four strings for the actual neighbor city's names (32 bytes each), clockwise from bottom left. Doesn't last beyond current game session.
|-
| 0x4CADE0 || BYTE || '''bWeatherHeat''' || 0x0060 || Weather heat level (Temperature in Fahrenheit = [WeatherHeat - 100] as seen in newspapers)
|-
| 0x4CAE04 || DWORD || '''dwCityDays''' || 0x0010 || How many days have elapsed since the city was founded
|-
| 0x4CAE0C || BYTE || '''bWeatherWind''' || 0x0064 || Weather wind speed (miles per hour as seen in newspapers)
|-
| 0x4CB010 || WORD || '''wCityProgression''' || 0x0078 || Flags for city reward progression
|-
| 0x4CB014 || DWORD || '''dwNationalValue''' || 0x0054 || Gross National Product
|-
| 0x4CB018 || DWORD || '''dwCityAdvertising''' || 0x003C || Completely unused
|-
| 0x4CB01C || WORD || '''wCityCurrentMonth''' || || Which month of the year it is (0-indexed; calculated from dwCityDays)
|-
| 0x4CB020 || WORD || '''wCityElapsedYears''' || || Years since the city was founded (calculated from dwCityDays)
|-
| 0x4CB1A8 || DWORD || '''dwNewLocalBirthPops''' || || Seems to actually be local city newbirths in the city as opposed to new pops from immigration.
|-
| 0x4CB1B8 || void* || '''pArrSpriteHeaders''' || || Pointer to the array of loaded sprite headers
|-
| 0x4CB3D0 || {{Win32_BOOL}} || '''bNewspaperSubscription''' || 0x1004 || Whether or not the Subscription newspaper is checked
|-
| 0x4CB3D4 || BYTE || '''bWeatherRain''' || 0x0068 || Weather humidity value (Rain in mm as seen in newspaper)
|-
| 0x4CB3DC || WORD || '''wSewerBonus''' || || Whether the city has adequate wastewater treatment facilities for use in the Pollution Divisor
|-
| 0x4CB3E8 || WORD || '''wCityCurrentSeason''' || || Which season it is (0 = winter, 1 = spring, 2 = summer, 3 = autumn; calculated from dwCityDays)
|-
| 0x4CB38C || microsim_t* || '''dwMicroSimArr''' || || Pointer to the array of [[microsim]]s
|-
| 0x4CB404 || WORD || '''wCityDifficulty''' || 0x001C || Game difficulty (0 = no city founded, 1 = easy, 2 = medium, 3 = hard)
|-
| 0x4CB40C || BYTE || '''bWeatherTrend''' || 0x006C || What the [[WeatherTrend type|current weather type]] is
|-
| 0x4CB410 || DWORD || '''bWorkforceLE''' || || Workforce Life Expectancy
|-
| 0x4CB430 || WORD[17] || '''wCityInventionYears''' || 0x0738 || What years different technologies are invented in (see: [[Inventions]])
|-
| 0x4CB454 || DWORD || '''dwCityCrime''' || 0x002C || Sum of all values in XCRM
|-
| 0x4CB458 || WORD || '''wCityCenterXCoord''' || || The X location of where the Simulator deems to be the "city center"
|-
| 0x4CB45C || WORD || '''wCityCenterYCoord''' || || The Y location of where the Simulator deems to be the "city center"
|-
| 0x4CB460 || DWORD || '''dwWorkforcePercent''' || || Workforce Percent
|-
| 0x4CB464 || WORD || '''wCurrentCityToolGroup''' || || Currently selected city tool group
|-
| 0x4CC4B0 || {{Win32_BOOL}} || '''bAutoBudgetFlag''' || || When set to 1, the budget window will not pop up in January nor will there be a Fiscal Warning given for negative CityFunds.
|-
| 0x4CC4B4 || DWORD || '''dwWorkforceEQ''' || || Workforce Educational Quotient
|-
| 0x4CC4B8 || DWORD || '''dwWaterUsedPercentage''' || || Percentage of water capacity in use
|-
| 0x4CC4BC || {{Win32_BOOL}} || '''bNewspaperExtra''' || 0x1008 || Whether or not the Extra!!! newspaper is checked
|-
| 0x4CC4CC || void* || '''dwBudgetArr''' || || Pointer to the [[budget array]] (needs some reverse engineering and/or documentation work)
|-
| 0x4CC4D4 || {{Win32_BOOL}} || '''bNoDisasters''' || 0x1000 || Whether or not disasters should be disabled (also disables city council autonomy)
|-
| 0x4CC4D8 || WORD || '''wCityNeighborConnections1000''' || || Count of all $1000 (commercial) neighbor connections (roads)
|-
| 0x4CC4DC || WORD[3] || '''wNeighborStringNameID''' || || A string lookup ID for the neighbor city's name, the appropriate string is loaded whenever map is loaded. There are 36 city names.
|-
| 0x4CC4E0 || WORD || '''wStadiumSportsTypes''' || || Flags for the currently available "Sports types" (+1 Football, +2 baseball, +4 Soccer, +8 Cricket, +16 Rugby)
|-
| 0x4CC4E4 || BYTE || '''bMilitaryBaseType''' || 0x0EF4 || Military base type (0 = not offered yet, 1 = declined/no location, 2 = army, 3 = air force, 4 = navy, 5 = missile silos)
|-
| 0x4CC4E8 || DWORD || '''dwCityBonds''' || 0x0018 || Total number of current outstanding city bonds
|-
| 0x4CC8F8 || WORD || '''wCityResidentialDemand''' || 0x0718 || Residential demand (-2000 to +2000)
|-
| 0x4CC8FA || WORD || '''wCityCommericalDemand''' || 0x071C || Commercial demand (-2000 to +2000)
|-
| 0x4CC8FC || WORD || '''wCityIndustrialDemand''' || 0x0720 || Industrial demand (-2000 to +2000)
|-
| 0x4CC910 || DWORD || '''dwCityPollution''' || || Sum of all Pollution in city.
|-
| 0x4CC918 || WORD || '''wScenarioDisasterID''' || || ID of the disaster set for the given scenario.
|-
| 0x4CC91A || BYTE || '''bScenarioDisasterX''' || || X coordinate for preparing the disaster.
|-
| 0x4CC91B || BYTE || '''bScenarioDisasterY''' || || Y coordinate for preparing the disaster.
|-
| 0x4CC91C || BYTE || '''wScenarioTimeLimitMonths''' || || Time limit of the scenario in months.
|-
| 0x4CC91E || DWORD || '''dwScenarioCitySize''' || || Target total population for the scenario exceeded.
|-
| 0x4CC922 || DWORD || '''dwScenarioResPopulation''' || || Target Residential population for the scenario.
|-
| 0x4CC926 || DWORD || '''dwScenarioComPopulation''' || || Target Commericial population for the scenario.
|-
| 0x4CC92A || DWORD || '''dwScenarioIndPopulation''' || || Target Industrial population for the scenario.
|-
| 0x4CC92E || DWORD || '''dwScenarioCashGoal''' || || Cash goal target for the scenario.
|-
| 0x4CC932 || DWORD || '''dwScenarioLandValueGoal''' || || Land Value goal target for the scenario.
|-
| 0x4CC936 || WORD || '''wScenarioLEGoal''' || || Workforce LE goal target for the scenario.
|-
| 0x4CC938 || WORD || '''wScenarioEQGoal''' || || Workforce EQ goal target for the scenario.
|-
| 0x4CC93A || WORD || '''wScenarioPollutionLimit''' || || Pollution limit for the scenario.
|-
| 0x4CC93E || WORD || '''wScenarioCrimeLimit''' || || Crime limit for the scenario.
|-
| 0x4CC942 || WORD || '''wScenarioTrafficLimit''' || || Traffic limit for the scenario.
|-
| 0x4CC946 || BYTE || '''bScenarioBuildingGoal1''' || || Scenario building goal one.
|-
| 0x4CC947 || BYTE || '''bScenarioBuildingGoal2''' || || Scenario building goal two.
|-
| 0x4CC948 || WORD || '''wScenarioBuildingGoal1Count''' || || Scenario building goal one count.
|-
| 0x4CC94A || WORD || '''wScenarioBuildingGoal2Count''' || || Scenario building goal two count.
|-
| 0x4CC950 || WORD || '''wSelectedSubtoolBulldozer''' || || (*** See below) Selected Bulldozer mode (Demolish/Clear, Level Terrain, Raise Terrain, Lower Terrain, De-zone) **
|-
| 0x4CC952 || WORD || '''wSelectedSubtoolNature''' || || Selected Nature mode (trees, water) (forests and stream are available in map-editing mode) **
|-
| 0x4CC954 || WORD || '''wSelectedSubtoolDispatch''' || || Selected Dispatch mode (Police, Fire, Military (if facilities for the first two aren't present)) **
|-
| 0x4CC956 || WORD || '''wSelectedSubtoolPower''' || || Selected Power mode (Power Lines, Power Plant) **
|-
| 0x4CC958 || WORD || '''wSelectedSubtoolWater''' || || Selected Water mode (Pipes, Water Pump, Water Tower, Treatment, Desalinization) **
|-
| 0x4CC95A || WORD || '''wSelectedSubtoolRewards''' || || Selected Rewards mode (Mayor's Hour, City Hall, Statue, Military Base, Braun Llama Dome, Arcologies) **
|-
| 0x4CC95C || WORD || '''wSelectedSubtoolRoads''' || || Selected Roads mode (Road, Highway, Tunnel, Onramp, Bus Depot) **
|-
| 0x4CC95E || WORD || '''wSelectedSubtoolRail''' || || Selected Rail mode (Rail, Subway. Rail Depot, Sub Station, Sub<-->Rail) **
|-
| 0x4CC960 || WORD || '''wSelectedSubtoolPorts''' || || Selected Ports mode (Seaport, Airport) **
|-
| 0x4CC962 || WORD || '''wSelectedSubtoolResidential''' || || Selected Residential mode (Light, Dense) **
|-
| 0x4CC964 || WORD || '''wSelectedSubtoolCommercial''' || || Selected Commercial mode (Light, Dense) **
|-
| 0x4CC966 || WORD || '''wSelectedSubtoolIndustrial''' || || Selected Industrial mode (Light, Dense) **
|-
| 0x4CC968 || WORD || '''wSelectedSubtoolEducation''' || || Selected Education mode (School, College, Library, Museum) **
|-
| 0x4CC96A || WORD || '''wSelectedSubtoolServices''' || || Selected Services mode (Police, Fire Station, Hospital, Prison) **
|-
| 0x4CC96C || WORD || '''wSelectedSubtoolParks''' || || Selected Parks mode (Small Park, Big Park, Zoo, Stadium, Marina) **
|-
| 0x4CDB68 || WORD || '''wHighlightedTileX''' || || The X coordinate of the tile currently highlighted on the map
|-
| 0x4CDB70 || WORD || '''wHighlightedTileY''' || || The Y coordinate of the tile currently highlighted on the map
|-
| 0x4CDB7C || DWORD || '''dwLFSRState''' || || Randomness state for the linear feedback shift register PRNG
|-
| 0x4CDB80 || DWORD || '''dwLCGState''' || || Randomness state for the linear congruential generator PRNG
|-
| 0x4CE8C0 || AFX_CORE_STATE || '''pCWinApp''' || || Pointer to a CWinApp (needs reverse engineering -- maybe IDA picked this one out on its own?)
|-
| 0x4E6520 || DWORD || '''dwCheatsHandlingBuffer''' || || current lookup ID for current cheat being possibly entered, and then a return value once completed?
|-
| 0x4E6524 || DWORD || '''dwCheatsHandlingBufferLength''' || || current string length for the current possibly valid cheat attempting to be entered
|-
| 0x4E99C0 || WORD || '''wPassengerPlanes''' || || A total count of Passenger Plane things
|-
| 0x4E99C4 || WORD || '''wActiveHelicopters''' || || A total count of Helicopter things
|-
| 0x4E99C8 || WORD || '''wActiveCargoships''' || || A total count of Cargo Ship things
|-
| 0x4E99CC || WORD || '''wMaxisMan''' || || A total count of MaxisMan things.
|-
| 0x4E99D0 || WORD || '''wSailingBoats''' || || A total count of Sailing boats from Marinas.
|-
| 0x4E99D4 || WORD || '''wMonster''' || || If there is an active monster, it's set to 1.
|-
| 0x4E99D8 || WORD || '''wActiveTrains''' || || A total count of Train things (train entities, not 'tiles' of train)
|-
| 0x4E99DC || WORD || '''wTornados_XTHGs''' || || Active Tornado XTHGs
|-
| 0x4E99E0 || DWORD || '''dwHelicopterThing''' || || A 'thing' for Helicopter thing (will return to this one day)
|-
|}

<pre>
** The choices for each SelectedSubtool are for reference purposes only, they may not reflect the actual internal order.

*** wSelectedSubtoolBulldozer - Address 0x4CC94C (WORD array - 18 entries) - unique case to override without changing the currently selected tool.
</pre>

{| class="wikitable sortable"
|+ Terrain generation variables
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the variable.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 0x4C94C0 || {{Win32_BOOL}} || '''bCityHasOcean''' || 0x0E44 || Whether or not the city was generated with an ocean, also determines if City is eligible for Naval Base.
|-
| 0x4CA1E0 || WORD || '''wCityTerrainSliderHills''' || || Slider value for hill coverage during terrain generation
|-
| 0x4CA818 || __int16 || '''wWaterLevel''' || 0x0E40 || Water table level
|-
| 0x4CAAF8 || WORD || '''wCityTerrainSliderWater''' || || Slider vvalue for water coverage during terrain generation
|-
| 0x4CADD8 || WORD || '''wCityTerrainSliderTrees''' || || Slider value for tree coverage during terrain generation
|-
| 0x4CB3F8 || {{Win32_BOOL}} || '''bCityHasRiver''' || 0x0E48 || Whether or not the city was generated with a river
|-
|}



{| class="wikitable sortable"
|+ Map data pointers
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the variable.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 0x4C9430 || void* || '''dwMapXPLC''' || || Pointer to a 32x32 "minimap" for police coverage (1 byte per 4x4 block)
|-
| 0x4C9F58 || void* || '''dwMapXTER''' || || Pointer to a 128x128 map of terrain data (1 byte of type map_XTER_t per tile)
|-
| 0x4CA1F0 || void* || '''dwMapXZON''' || || Pointer to a 128x128 map of zone and corner info (1 byte of type map_XZON_t per tile)
|-
| 0x4CB3EC || void* || '''dwMapXMIC''' || || Pointer to an array of type map_XMIC_t[150] containing MicroSim data.
|-
| 0x4CA198 || void* || '''dwMapXLAB''' || || Pointer to an array of type map_XLAB_t[256].
|-
| 0x4CA434 || void* || '''dwMapXTHG''' || || Pointer to an array of type map_XTHG_t[256] containing [[Thing]]s
|-
| 0x4CA448 || void* || '''dwMapXPOP''' || || Pointer to a 32x32 "minimap" for population density (1 byte per 4x4 block)
|-
| 0x4CA4D8 || void* || '''dwMapXCRM''' || || Pointer to a 64x64 "minimap" for crime (1 byte per 2x2 block)
|-
| 0x4CA600 || void* || '''dwMapXTXT''' || || Pointer to a 128x128 map of [[XTXT]] IDs (1 byte per tile)
|-
| 0x4CA828 || void* || '''dwMapXPLT''' || || Pointer to a 64x64 "minimap" for pollution (1 byte per 2x2 block)
|-
| 0x4CA940 || void* || '''dwMapXTRF''' || || Pointer to a 64x64 "minimap" for traffic (1 byte per 2x2 block)
|-
| 0x4CAA78 || void* || '''dwMapXFIR''' || || Pointer to a 32x32 "minimap" for fire coverage (1 byte per 4x4 block)
|-
| 0x4CAB10 || void* || '''dwMapXBIT''' || || Pointer to a 128x128 map of tile flags (1 byte of type map_[[XBIT]]_t per tile)
|-
| 0x4CAE10 || void* || '''dwMapALTM''' || || Pointer to a 128x128 map of altitude data (1 byte of type map_ALTM_t per tile)
|-
| 0x4CB028 || void* || '''dwMapXROG''' || || Pointer to a 32x32 "minimap" of rate of growth data (1 byte of unknown type per 4x4 block)
|-
| 0x4CB0A8 || void* || '''dwMapXVAL''' || || Pointer to a 64x64 "minimap" of land value (1 byte of <code>(full value / 1000 - 1)</code> per 2x2 block)
|-
| 0x4CB1D0 || void* || '''dwMapXUND''' || || Pointer to a 128x128 map of underground map data (1 byte of type map_XUND_t per tile)
|-
| 0x4CC470 || void* || '''dwMapXGRP''' || || Pointer to the historical graph data
|-
| 0x4CC4F0 || void* || '''dwMapXBLD''' || || Pointer to a 128x128 map of tile IDs (1 byte of type enumTileID per tile)
|-
| 0x4CC6F4 || void* || '''dwMapTempValMap1''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (pollution?).
|-
| 0x4CC6F8 || void* || '''dwNaturalBeauty_ResCom''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (this includes surface water, water supply, terrain slopes, parks).
|-
| 0x4CC6FC || void* || '''dwMapTempValMap2''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (pollution?).
|-
| 0x4CC778 || void* || '''dwNaturalBeauty_Industrial''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (this includes surface water, water supply).
|-
|}
{| class="wikitable sortable"
|+ Simulation Arrays
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the array.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 004C94B4 || void* || '''pRawPopTable''' || || Pointer to 20-item array for the Population Table
|-
| 0x4CAA70 || void* || '''pLETable''' || || Pointer to 20-item array for the LE Table, these are as aggregate sums for the entire age group (LE/RawPop=AgeGroupLE).
|-
| 0x4C94BC || void* || '''pEQTable''' || || Pointer to 20-item array for the EQ Table, these are as aggregate sums for the entire age group (EQ/RawPop=AgeGroupEQ).
|-
| 0x4CB3F0 || void* || '''pIndividualIndPops''' || || Pointer to 11-item array for the Raw Populations for City Industries Table.
|-
| 0x4CB3E0 || void* || '''pIndividualIndTaxRate''' || || Pointer to 11-item array for the each of the Industrial Group's Tax Rates.
|-
| 0x4CA3F4 || void* || '''pIndividualIndDemands''' || || Pointer to 11-item array for the each of the Industrial Group's current Demand.
|-
| 0x4CA428 || void* || '''pZonePops''' || || Pointer to 8-item array of Zone Populations (/10): '''AllTotalPops, Light Res, Dense Res, Light Com, Dense Com, Light Ind, Dense Ind, Abandoned.'''
|-
| 0x4CA930 || void* || '''zonePopsBase''' || || Pointer to 3-item array of Zone (light+dense combined) Populations (/10): '''Residential, Commercial, Industrial'''
|-
| 0x4CAD10 || void* || '''pNeighborData''' || || Pointer to Neighbor Populations
|}
[[Category:Game data]]

MediaWiki:Common.css

2025-04-06T10:58:31Z

Araxestroy:

/* CSS placed here will be applied to all skins */

pre {
font-size: larger;
}

/*
* Message box template
* Lovingly borrowed from The Cutting Room Floor
*/
.msgbox {
margin: 0 12em 1em 12em;
border: 1px solid #888;
background: #ddd;
color: #000;
padding: 0;
border-spacing: 0;
}

.msgbox td {
vertical-align: middle;
padding: 0.5em 1em 0.5em 0;
width: 100%;
}

.msgbox .msgboximg {
vertical-align: middle;
width: 0;
padding: 0.5em 1em 0.5em 1em;
}

Modding/Hooks

2025-04-06T10:54:44Z

Araxestroy:

{{Live draft}}

{| class="wikitable sortable"
|+ Uncategorized hooks
|-
! {{tooltip|Name|The name of the hook.}} ! {{tooltip|Before?|If there's a _Before hook.}} ! {{tooltip|After?|If there's an _After hook.}} ! {{tooltip|Kuroko?|Whether or not this hook is exposed to Kuroko.}} ! {{tooltip|Since|What release/commit the hook was added in}} ! Signature
|-
| Hook_OnNewCity || {{Yes|}} || {{No|}} || {{NYI}} || {{tooltip|0.10-dev|Added in commit bdda241}} || <tt>void fn(void)</tt>
|-
| Hook_GameDoIdleUpkeep || {{Yes|}} || {{Yes|}} || {{NYI}} || {{tooltip|0.10-dev|Added in commit 6972bec}} || <tt>void fn(void* pThis)</tt>
|-
| Hook_SimulationProcessTickDaySwitch || {{Yes|}} || {{Yes|}} || {{NYI}} || {{tooltip|0.10-dev|Added in commit 170f38d}} || <tt>void fn(void)</tt>
|}

Modding/Hooks

2025-04-06T10:49:19Z

Araxestroy: Created page with "{{Live draft}} {| class="wikitable sortable" |+ Uncategorized hooks |- ! {{tooltip|Name|The name of the hook.}} ! {{tooltip|Before?|If there's a _Before hook.}} ! {{tooltip|After?|If there's an _After hook.}} ! {{tooltip|Kuroko?|Whether or not this hook is exposed to Kuroko.}} ! {{tooltip|Added in|What version/build the hook was added in}} ! Signature |- | Hook_OnNewCity || {{Yes|}} || {{No|}} || {{NYI}} || 0.10-dev || <tt>void fn(void)</tt> |- | Hook_GameDoIdleUpkeep |..."

{{Live draft}}

{| class="wikitable sortable"
|+ Uncategorized hooks
|-
! {{tooltip|Name|The name of the hook.}} ! {{tooltip|Before?|If there's a _Before hook.}} ! {{tooltip|After?|If there's an _After hook.}} ! {{tooltip|Kuroko?|Whether or not this hook is exposed to Kuroko.}} ! {{tooltip|Added in|What version/build the hook was added in}} ! Signature
|-
| Hook_OnNewCity || {{Yes|}} || {{No|}} || {{NYI}} || 0.10-dev || <tt>void fn(void)</tt>
|-
| Hook_GameDoIdleUpkeep || {{Yes|}} || {{Yes|}} || {{NYI}} || 0.10-dev || <tt>void fn(void* pThis)</tt>
|-
| Hook_SimulationProcessTickDaySwitch || {{Yes|}} || {{Yes|}} || {{NYI}} || 0.10-dev || <tt>void fn(void)</tt>
|}

Template:NYI

2025-04-06T10:46:08Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#CCCCCC; color:black; text-align:center; {{{style|}}}" class="table-yes"|{{tooltip|NYI|Not yet implemented}}<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#CCCCCC; color:black; text-align:center; {{{style|}}}" class="table-yes"|{{tooltip|NYI|Not yet implemented}}<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:No

2025-04-06T10:42:04Z

Araxestroy:

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#FFC7C7; color:black; text-align:center; {{{style|}}}" class="table-yes"|[[File:Dark Red x.svg|13px|link=|]] {{{1|No}}}<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:Yes

2025-04-06T10:41:49Z

Araxestroy:

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#9EFF9E; color:black; text-align:center; {{{style|}}}" class="table-yes"|[[File:Green check.svg|13px|link=|]] {{{1|Yes}}}<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:Yes

2025-04-06T10:41:12Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#9EFF9E; color:black; {{{style|}}}" class="table-yes"|link=| {{{1|Yes}}}<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#9EFF9E; color:black; {{{style|}}}" class="table-yes"|[[File:Green check.svg|13px|link=|]] {{{1|Yes}}}<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:No

2025-04-06T10:40:42Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#FFC7C7; color:black; {{{style|}}}" class="table-yes"|link=| {{{1|No}}}<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#FFC7C7; color:black; {{{style|}}}" class="table-yes"|[[File:Dark Red x.svg|13px|link=|]] {{{1|No}}}<noinclude>
|}
[[Category:Templates]]</noinclude>

File:Green check.svg

2025-04-06T10:38:57Z

Araxestroy:

File:Dark Red x.svg

2025-04-06T10:38:49Z

Araxestroy:

Main Page

2025-04-06T10:04:47Z

Araxestroy:

__NOTOC__ __NOEDITSECTION__ {{#description2:Welcome to sc2k-reverse, the sc2kfix Project wiki!}}
[[File:{{#setmainimage:SC2K-reverse Header.png}}|center]]

'''Welcome to sc2k-reverse, the sc2kfix Project wiki!''' Pardon our dust, as this wiki is brand new and we haven't had a chance to do much of anything around here yet.

'''Need an account?''' PM araxestroy on the Simtropolis forums or on the libera.chat IRC network.

== Wiki to-do list ==

* More page component templates (see [[:Category:Templates]])
** Game infoboxes
** RE related stuff? Not sure what we'll need
** Category navboxes
* Wiki meta pages (categories, help, copyright page, etc)
* Nicer main page (maybe split it into flex columns?)
* Get some stub articles written up as a "schema"
* <s>Make sure the email system actually works</s> it absolutely does not, I may need to move this thing to a Linode VPS sooner rather than later

== sc2kfix Plugin Information ==

* [https://sc2kfix.net/plugin.html Plugin user guide]
* [[SC2X|SC2X save file format]]
* '''Modding with C/C++'''
** [[Modding|C/C++ Modding Basics]] ''(draft)''
** [[Modding/Hooks|Hook List]]
* '''Modding with Kuroko'''
** [[Kuroko|Kuroko Basics]]
** [[Kuroko/Module_sc2kfix|sc2kfix module]]
** [[Kuroko/Module_sc2k|sc2k module]]

== SimCity 2000 Reverse Engineering ==

* [[Function list]]
* [[Known global variables]]
* [[Classes]]
* [[Map data]]
* [[Data formats]]
* [[Tiles]]
* [[SimCity 2000 Bugs]]

Modding

2025-04-06T09:34:38Z

Araxestroy: Created page with "{{Heavy construction}} {{Live draft}} == Example: Mod template (testmod) == <syntaxhighlight lang="c++" line> // sc2kfix/testmod dllmain.cpp: test/template mod with inline documentation // (c) 2025 sc2kfix project (https://sc2kfix.net) - released under the MIT license // These two lines are mandatory for sc2kfix mods. The first one ensures that all Windows API // calls use the ANSI calls instead of the Unicode calls, which aligns with the way that SimCity // 2000 was..."

{{Heavy construction}}
{{Live draft}}

== Example: Mod template (testmod) ==

<syntaxhighlight lang="c++" line>
// sc2kfix/testmod dllmain.cpp: test/template mod with inline documentation
// (c) 2025 sc2kfix project (https://sc2kfix.net) - released under the MIT license

// These two lines are mandatory for sc2kfix mods. The first one ensures that all Windows API
// calls use the ANSI calls instead of the Unicode calls, which aligns with the way that SimCity
// 2000 was compiled. It should be the first preprocessor line of each source file in each mod.
// The second is required in **EXACTLY** one file of each mod and no more, and lets sc2k_1996.h
// define all of its GAMECALLs and GAMEOFFs so the mod can interact with the game engine in the
// same way that the sc2kfix core does.
#undef UNICODE
#define GAMEOFF_IMPL

// Include files go here. The standard order used in the sc2kfix project is to have bracketed C
// header files first, then any bracketed C++ header files, and then quoted header files.
#include <windows.h>
#include "../sc2kfix.h"
#include "../../include/sc2k_1996.h"

// The stModHooks array of structs define each hook that the mod exports. Each hook is defined
// with a string of its full name followed by a signed integer of its priority level. Lower
// priorities are called first, so eg. a mod that exports Hook_OnNewCity_After with a priority
// of 0 will be called after a mod that exports Hook_OnNewCity_After with a priority of -1 and
// before a mod that exports Hook_OnNewCity_After with a priority of 1.
sc2kfix_mod_hook_t stModHooks[] = {
{ "Hook_SimulationProcessTickDaySwitch_Before", 0 },
{ "Hook_SimulationProcessTickDaySwitch_After", 0 },
{ "Hook_GameDoIdleUpkeep_Before", 0 }
};

// The stModInfo structure tells the sc2kfix mod loader about the mod and how to load it. It
// contains the version info for the mod itself as well as what version of sc2kfix it requires, as
// well as some basic textual descriptions of the mod and info about the stModHooks struct so that
// sc2kfix can load the mod's exported hooks.
//
// stModInfo should always be named exactly that; various macros depend on the stModInfo structure
// and renaming it will cause widespread compilation errors.
sc2kfix_mod_info_t stModInfo = {
/* .iModInfoVersion = */ 1,
/* .iModVersionMajor = */ 0,
/* .iModVersionMinor = */ 1,
/* .iModVersionPatch = */ 2,
/* .iMinimumVersionMajor = */ 0,
/* .iMinimumVersionMinor = */ 10,
/* .iMinimumVersionPatch = */ 0,
/* .szModName = */ "Test Native Code Mod",
/* .szModShortName = */ "testmod",
/* .szModAuthor = */ "sc2kfix Project",
/* .szModDescription = */ "A test mod to demonstrate sc2kfix native code mod loading, linking against DLL exports from sc2kfix, and manipulating game data from native code.",
/* .iHookCount = */ HOOKS_COUNT(stModHooks),
/* .pstHooks = */ stModHooks
};

// sc2kfix looks for the HookCb_GetModInfo function when loading each native code mod. You should
// never need to do anything in this function other than return a pointer to the stModInfo struct,
// as the entire purpose of this function is to initially validate that the DLL that sc2kfix is
// loading is actually a legitimate sc2kfix mod.
HOOKCB sc2kfix_mod_info_t* HookCb_GetModInfo(void) {
return &stModInfo;
}

// The DllMain function in each hook should be used sparingly and follow the best practices
// conventions of the Windows API documentation for DLL entry points, as the DllMain function
// is executed while under the global loader lock. See the following link for details:
// https://learn.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-best-practices
BOOL APIENTRY DllMain(HMODULE hModule, DWORD reason, LPVOID lpReserved) {
switch (reason) {
case DLL_PROCESS_ATTACH:
LOG(LOG_INFO, "testmod says hello!\n");
break;
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
break;
case DLL_PROCESS_DETACH:
LOG(LOG_INFO, "testmod says goodbye!\n");
break;
}
return TRUE;
}

// All game hooks exported from mods are declared using the HOOKCB macro, which expands to
// extern "C" __declspec(dllexport). This makes sure that there's no C++ name mangling and imports
// on the sc2kfix side are similarly simple.
//
// This is a "before" hook, and is called when sc2kfix intercepts a part of SimCity 2000's game
// engine, and before it lets the engine (or, depending on the hook, a recreation thereof) execute
// its original code. Many "before" hooks have a corresponding "after" hook that runs after the
// engine completes its designated task that the hook is related to, but before the calling
// function in the engine is returned to.
HOOKCB void Hook_SimulationProcessTickDaySwitch_Before(void) {
// dwCityDays is a game engine variable declared and defined as a C++ reference variable.
// Using reference variables lets sc2kfix developers and modders operate on SimCity 2000 game
// engine state as if their own code is part of the game engine. Since sc2kfix hooks are
// called into from the main game engine thread, this is safe to do from native code without
// any multithreading-aware locking or mutex mechanism.
if (dwCityDays % 300 == 0)
LOG(LOG_NOTICE, ":toot: Happy new year!\n");
}

// This is an example of an "after" hook. sc2kfix intercepts the end of the game engine's
// SimulationProcessTick function and calls the Hook_SimulationProcessTickDaySwitch_After exports
// from each mod before returning to the calling function (in this case, the default case of the
// GameDoIdleUpkeep function).
HOOKCB void Hook_SimulationProcessTickDaySwitch_After(void) {
// LOG() is a macro that prepends the module tag and the stModInfo.szModShortName to the log
// message before calling ConsoleLog to output it. You should not directly call ConsoleLog in
// mod DLLs; instead use LOG() to ensure that all log messages are properly formed.
LOG(LOG_NOTICE, "Today was day %d in the glorious history of %s.\n", dwCityDays + 1, *pszCityName);
}
</syntaxhighlight>

Template:Live draft

2025-04-06T09:34:24Z

Araxestroy: Created page with "{{mbox | text='''Release the terror of the year 2000!''' This page or section is a "live draft". It may be brand new or nearing completion, or constantly being reworked. Its current state should be considered accurate to the best of the knowledge of the authors, but may change in the future. | image=1224.png | iwidth=32 | min-width=32 | caption=1224 | border=#bbbbbb | background=#e8e8e8 }} <noinclude>Category:Templates</noinclude>"

{{mbox
| text='''Release the terror of the year 2000!''' This page or section is a "live draft". It may be brand new or nearing completion, or constantly being reworked. Its current state should be considered accurate to the best of the knowledge of the authors, but may change in the future.
| image=1224.png
| iwidth=32
| min-width=32
| caption=1224
| border=#bbbbbb
| background=#e8e8e8
}}
<noinclude>[[Category:Templates]]</noinclude>

File:1224.png

2025-04-06T09:26:58Z

Araxestroy:

[[Category:Game sprites]]

File:1224.png

2025-04-06T09:26:47Z

Araxestroy:

File:224.png

2025-04-06T09:26:25Z

Araxestroy:

Main Page

2025-04-06T06:50:47Z

Araxestroy:

__NOTOC__ __NOEDITSECTION__ {{#description2:Welcome to sc2k-reverse, the sc2kfix Project wiki!}}
[[File:{{#setmainimage:SC2K-reverse Header.png}}|center]]

'''Welcome to sc2k-reverse, the sc2kfix Project wiki!''' Pardon our dust, as this wiki is brand new and we haven't had a chance to do much of anything around here yet.

'''Need an account?''' PM araxestroy on the Simtropolis forums or on the libera.chat IRC network.

== Wiki to-do list ==

* More page component templates (see [[:Category:Templates]])
** Game infoboxes
** RE related stuff? Not sure what we'll need
** Category navboxes
* Wiki meta pages (categories, help, copyright page, etc)
* Nicer main page (maybe split it into flex columns?)
* Get some stub articles written up as a "schema"
* <s>Make sure the email system actually works</s> it absolutely does not, I may need to move this thing to a Linode VPS sooner rather than later

== sc2kfix Plugin Information ==

* [https://sc2kfix.net/plugin.html Plugin user guide]
* [[SC2X|SC2X save file format]]
* '''Modding with C/C++'''
** [[Modding|C/C++ Modding Basics]]
** [[Modding/Hooks|Hook List]]
* '''Modding with Kuroko'''
** [[Kuroko|Kuroko Basics]]
** [[Kuroko/Module_sc2kfix|sc2kfix module]]
** [[Kuroko/Module_sc2k|sc2k module]]

== SimCity 2000 Reverse Engineering ==

* [[Function list]]
* [[Known global variables]]
* [[Classes]]
* [[Map data]]
* [[Data formats]]
* [[Tiles]]
* [[SimCity 2000 Bugs]]

Main Page

2025-04-01T07:39:54Z

Araxestroy:

__NOTOC__ __NOEDITSECTION__ {{#description2:Welcome to sc2k-reverse, the sc2kfix Project wiki!}}
[[File:{{#setmainimage:SC2K-reverse Header.png}}|center]]

'''Welcome to sc2k-reverse, the sc2kfix Project wiki!''' Pardon our dust, as this wiki is brand new and we haven't had a chance to do much of anything around here yet.

'''Need an account?''' PM araxestroy on the Simtropolis forums or on the libera.chat IRC network.

== Wiki to-do list ==

* More page component templates (see [[:Category:Templates]])
** Game infoboxes
** RE related stuff? Not sure what we'll need
** Category navboxes
* Wiki meta pages (categories, help, copyright page, etc)
* Nicer main page (maybe split it into flex columns?)
* Get some stub articles written up as a "schema"
* <s>Make sure the email system actually works</s> it absolutely does not, I may need to move this thing to a Linode VPS sooner rather than later

== sc2kfix Plugin Information ==

* [https://sc2kfix.net/plugin.html Plugin user guide]
* '''Modding with C/C++'''
** [[Modding|C/C++ Modding Basics]]
** [[Modding/Hooks|Hook List]]
* '''Modding with Kuroko'''
** [[Kuroko|Kuroko Basics]]
** [[Kuroko/Module_sc2kfix|sc2kfix module]]
** [[Kuroko/Module_sc2k|sc2k module]]

== SimCity 2000 Reverse Engineering ==

* [[Function list]]
* [[Known global variables]]
* [[Classes]]
* [[Map data]]
* [[Data formats]]
* [[Tiles]]
* [[SimCity 2000 Bugs]]

User:Araxestroy/Class notes

2025-03-24T17:21:36Z

Araxestroy: Created page with "=== <code>class CCmdUI</code> === This is a base class in MFC used as a helper for UI update/draw callbacks when eg. menus are drawn. The following is from the MFC 2.1 include file <code>afxwin.h</code>, with additional annotations added: <syntaxhighlight lang="c++" line> class CCmdUI // simple helper class { public: // Attributes UINT m_nID; UINT m_nIndex; // menu item or other index // if a menu item CMenu* m_pMenu; // NULL if not a menu..."

=== <code>class CCmdUI</code> ===

This is a base class in MFC used as a helper for UI update/draw callbacks when eg. menus are drawn. The following is from the MFC 2.1 include file <code>afxwin.h</code>, with additional annotations added:

<syntaxhighlight lang="c++" line>
class CCmdUI // simple helper class
{
public:
// Attributes
UINT m_nID;
UINT m_nIndex; // menu item or other index

// if a menu item
CMenu* m_pMenu; // NULL if not a menu
CMenu* m_pSubMenu; // sub containing menu item
// if a popup sub menu - ID is for first in popup

// if from some other window
CWnd* m_pOther; // NULL if a menu or not a CWnd

// Operations to do in ON_UPDATE_COMMAND_UI
virtual void Enable(BOOL bOn = TRUE); // [ecx+0]
virtual void SetCheck(int nCheck = 1); // [ecx+4] 0, 1 or 2 (indeterminate)
virtual void SetRadio(BOOL bOn = TRUE); // [ecx+8]
virtual void SetText(LPCTSTR lpszText); // [ecx+12]

// Advanced operation
void ContinueRouting();

// Implementation
CCmdUI();
BOOL m_bEnableChanged;
BOOL m_bContinueRouting;
UINT m_nIndexMax; // last + 1 for iterating m_nIndex

CMenu* m_pParentMenu; // NULL if parent menu not easily determined
// (probably a secondary popup menu)

void DoUpdate(CCmdTarget* pTarget, BOOL bDisableIfNoHndler);
};
</syntaxhighlight>

=== <code>class CSimcityView</code> ===

CView-derived class for the main game window.

User:Araxestroy

2025-03-24T17:02:15Z

Araxestroy:

Hi, I'm Troy. I started and maintain the sc2kfix plugin and project.

== Notepad ==
::''Subpages:'' [[User:Araxestroy/DOS version decompilation notes]], [[User:Araxestroy/Class notes]]

=== 1995 load crash bug ===

It looks like this particular crash is a null pointer dereference caused by trying to retrieve the CSimcityView HWND before the CSimcityView class instance actually exists. I probably won't get around to fixing this one since there's a whole modding framework to be written.

=== Loading requirements ===

Intercept at '''int __thiscall LoadGame(void *this, int *a2, char *Src)''' -- 0x4025A4 -- and check the extension; jump to 0x4302E0 for .sc2

# Load everything into the structures
# Load pszCityName
# Call '''void sub_402743(void)''' -- recalculates border connections, updates power and water consumption, loads bond information, does some pollution modifiers I think?
# Call '''void sub_402EF5(void)''' -- updates dwTileCount
# Call '''void sub_401FFA(void)''' -- does ''something'' with regards to graphs, I think? Needs investigation
# Call '''void sub_430C00(void)''' if we need to "uncompress" XLAB -- should only need to be done on manually converted save files
# Return a non-zero from LoadGame intercept

Main Page

2025-03-20T01:01:04Z

Araxestroy:

__NOTOC__ __NOEDITSECTION__ {{#description2:Welcome to sc2k-reverse, the sc2kfix Project wiki!}}
[[File:{{#setmainimage:SC2K-reverse Header.png}}|center]]

'''Welcome to sc2k-reverse, the sc2kfix Project wiki!''' Pardon our dust, as this wiki is brand new and we haven't had a chance to do much of anything around here yet.

'''Need an account?''' PM araxestroy on the Simtropolis forums or on the libera.chat IRC network.

== Wiki to-do list ==

* More page component templates (see [[:Category:Templates]])
** Game infoboxes
** RE related stuff? Not sure what we'll need
** Category navboxes
* Wiki meta pages (categories, help, copyright page, etc)
* Nicer main page (maybe split it into flex columns?)
* Get some stub articles written up as a "schema"
* <s>Make sure the email system actually works</s> it absolutely does not, I may need to move this thing to a Linode VPS sooner rather than later

== sc2kfix Plugin Information ==

* [https://sc2kfix.net/plugin.html Plugin user guide]
* '''Modding with Kuroko'''
** [[Kuroko|Kuroko Basics]]
** [[Kuroko/Module_sc2kfix|sc2kfix module]]
** [[Kuroko/Module_sc2k|sc2k module]]

== SimCity 2000 Reverse Engineering ==

* [[Function list]]
* [[Known global variables]]
* [[Classes]]
* [[Map data]]
* [[Data formats]]
* [[Tiles]]
* [[SimCity 2000 Bugs]]

User:Araxestroy

2025-03-16T07:35:17Z

Araxestroy:

Hi, I'm Troy. I started and maintain the sc2kfix plugin and project.

== Notepad ==
::''Subpages:'' [[User:Araxestroy/DOS version decompilation notes]]

=== 1995 load crash bug ===

It looks like this particular crash is a null pointer dereference caused by trying to retrieve the CSimcityView HWND before the CSimcityView class instance actually exists. I probably won't get around to fixing this one since there's a whole modding framework to be written.

=== Loading requirements ===

Intercept at '''int __thiscall LoadGame(void *this, int *a2, char *Src)''' -- 0x4025A4 -- and check the extension; jump to 0x4302E0 for .sc2

# Load everything into the structures
# Load pszCityName
# Call '''void sub_402743(void)''' -- recalculates border connections, updates power and water consumption, loads bond information, does some pollution modifiers I think?
# Call '''void sub_402EF5(void)''' -- updates dwTileCount
# Call '''void sub_401FFA(void)''' -- does ''something'' with regards to graphs, I think? Needs investigation
# Call '''void sub_430C00(void)''' if we need to "uncompress" XLAB -- should only need to be done on manually converted save files
# Return a non-zero from LoadGame intercept

User:Araxestroy

2025-03-16T05:18:42Z

Araxestroy: /* Notepad */

Hi, I'm Troy. I started and maintain the sc2kfix plugin and project.

== Notepad ==
::''Subpages:'' [[User:Araxestroy/DOS version decompilation notes]]

=== Loading requirements ===

Intercept at '''int __thiscall LoadGame(void *this, int *a2, char *Src)''' -- 0x4025A4 -- and check the extension; jump to 0x4302E0 for .sc2

# Load everything into the structures
# Load pszCityName
# Call '''void sub_402743(void)''' -- recalculates border connections, updates power and water consumption, loads bond information, does some pollution modifiers I think?
# Call '''void sub_402EF5(void)''' -- updates dwTileCount
# Call '''void sub_401FFA(void)''' -- does ''something'' with regards to graphs, I think? Needs investigation
# Call '''void sub_430C00(void)''' if we need to "uncompress" XLAB -- should only need to be done on manually converted save files
# Return a non-zero from LoadGame intercept

Known global variables

2025-03-16T02:53:22Z

Araxestroy:

{{Heavy construction}}

This is a table of global variables in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

Data about where in the MISC chunk certain variables are located is from dfloer's sc2k-docs repository on GitHub (CC BY-SA 4.0).

{| class="wikitable sortable"
|+ Uncategorized variables
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the variable.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 0x4C702C || CWnd* || '''pCWndRootWindow''' || || Pointer to the MFC CWnd class for the "root window"
|-
| 0x4C7104 || {{Win32_BOOL}} || '''bPriscillaActivated''' || || Whether or not the debug menu has been activated
|-
| 0x4C71F0 || {{Win32_BOOL}} || '''bOptionsMusicEnabled''' || 0x0FFC || Whether or not music is enabled
|-
| 0x4C7318 || WORD || '''wSimulationSpeed''' || 0x0FEC || 1-5 for Paused through African Swallow
|-
| 0x4C93AC || WORD || '''wTotalGeneratedWaterTiles''' || || Total number of generated watered tiles from water sources
|-
| 0x4C93B0 || WORD || '''wTotalGeneratedPowerTiles''' || || Total number of generated powered tiles from power plants
|-
| 0x4C93B4 || WORD || '''wXVALTiles_TotalCount''' || || Total count of XVAL masked tiles, needed for Average Land Value.
|-
| 0x4C9428 || WORD || '''wIndustrialMixPollutionBonus''' || || -1 to 2 used to calculate the map wide Pollution Divisor
|-
| 0x4C942C || WORD || '''wViewRotation''' || 0x0008 || 0 = north, 1 = west, 2 = south, 3 = east
|-
| 0x4C94C4 || DWORD || '''dwArcologyPopulation''' || 0x1020 || Population of the city specifically in arcologies
|-
| 0x4C9EF0 || WORD[50] || '''wArrBondData''' || 0x0610 || Interest rates of all outstanding bonds
|-
| 0x4CA1A0 || char* || '''pszCityName''' || || Pointer to the city name, loaded/saved as the CNAM chunk
|-
| 0x4CA1BC || WORD || '''wNationalEconomyTrend''' || 0x005C || Affects interest rates, apparently
|-
| 0x4CA1E8 || WORD || '''wIndustrialMixBonus''' || || This is used in RCI demand generation as a bonus (cities dominated by 1 industry receive growth bonuses)
|-
| 0x4CA1DC || WORD || '''wPrisonBonus''' || || This sets if power stations get increased Police power from Prisons.
|-
| 0x4CA1EC || WORD || '''wCurrentMapToolGroup''' || || Currently selected mapping tool group
|-
| 0x4CA3F0 || WORD || '''wCityNeighborConnections1500''' || || Count of all $1500 (industrial) neighbor connections (railroad, highways)
|-
| 0x4CA41C || WORD || '''wSubwayXUNDCount''' || 0x0FE8 || Seems to be mostly used for budget calculations
|-
| 0x4CA420 || WORD || '''wDisasterType''' || 0x0070 || The ID of the next disaster to occur
|-
| 0x4CA42C || WORD || '''wCityMode''' || 0x0004 || 0 = map editor, 1 = regular gameplay, 2 = scenario mode
|-
| 0x4CA440 || int || '''dwCityLandValue''' || 0x0028 || Sum of all values in XVAL
|-
| 0x4CA444 || int || '''dwCityFunds''' || 0x0014 || How much money the city has
|-
| 0x4CA4C8 || WORD* || '''dwTileCount''' || || Pointer to an array of tile counts for every valid iTileID
|-
| 0x4CA4D0 || DWORD || '''dwCityValue''' || 0x0024 || Appears to have something to do with bond interest rates
|-
| 0x4CA5F0 || WORD || '''wCityGarbage''' || 0x0040 || Entirely unused. Initialized to 0 when the city is founded, goes up by dwCityPopulation on the 22nd of every month
|-
| 0x4CA5F4 || WORD || '''wCityStartYear''' || 0x000C || The year the city was founded
|-
| 0x4CA5F8 || DWORD || '''dwCityUnemployment''' || || Exactly what it says on the tin. Probably.
|-
| 0x4CA81C || WORD || '''wMonsterXTHGIndex''' || || Which XTHG entry the monster's [[Thing]] is
|-
| 0x4CA928 || DWORD || '''dwNationalPopulation''' || 0x0050 || Population of SimNation
|-
| 0x4CA934 || WORD* || '''dwMilitaryTiles''' || || Pointer to the beginning of the military tiles in the dwTileCount array
|-
| 0x4CA938 || WORD || '''wNationalTax''' || 0x0058 || The national base tax rate or the "fed rate", for calculating bond interest rates
|-
| 0x4CAA40 || DWORD || '''dwCityOrdinances''' || 0x0FA0 || Flags for which city ordinances are enacted
|-
| 0x4CAA50 || DWORD || '''dwPowerUsedPercentage''' || || Percentage of power capacity in use
|-
| 0x4CAA74 || DWORD || '''dwCityPopulation''' || 0x102C || Total city population, excluding arcologies
|-
| 0x4CAD28 || DWORD || '''dwCityFame''' || 0x0038 || Completely unused
|-
| 0x4CAD2C || {{Win32_BOOL}} || '''bYearEndFlag''' || 0x0E3C || Whether or not the first of the month is the start of a new year
|-
| 0x4CAD44 || {{Win32_BOOL}} || '''bInScenario''' || || Whether or not this game is a scenario
|-
| 0x4CAD58 || neighbor_city_t[4] || '''stNeighborCities''' || 0x06D8 || Array of four neighbor cities (32 bytes each), clockwise from bottom left
|-
| 0x4CADE0 || BYTE || '''bWeatherHeat''' || 0x0060 || Weather heat level (Temperature in Fahrenheit = [WeatherHeat - 100] as seen in newspapers)
|-
| 0x4CAE04 || DWORD || '''dwCityDays''' || 0x0010 || How many days have elapsed since the city was founded
|-
| 0x4CAE0C || BYTE || '''bWeatherWind''' || 0x0064 || Weather wind speed (miles per hour as seen in newspapers)
|-
| 0x4CB010 || WORD || '''wCityProgression''' || 0x0078 || Flags for city reward progression
|-
| 0x4CB014 || DWORD || '''dwNationalValue''' || 0x0054 || Gross National Product
|-
| 0x4CB018 || DWORD || '''dwCityAdvertising''' || 0x003C || Completely unused
|-
| 0x4CB01C || WORD || '''wCityCurrentMonth''' || || Which month of the year it is (0-indexed; calculated from dwCityDays)
|-
| 0x4CB020 || WORD || '''wCityElapsedYears''' || || Years since the city was founded (calculated from dwCityDays)
|-
| 0x4CB1B8 || void* || '''pArrSpriteHeaders''' || || Pointer to the array of loaded sprite headers
|-
| 0x4CB3D0 || {{Win32_BOOL}} || '''bNewspaperSubscription''' || 0x1004 || Whether or not the Subscription newspaper is checked
|-
| 0x4CB3D4 || BYTE || '''bWeatherHumidity''' || 0x0068 || Weather humidity value (mm in Rain as seen in newspaper)
|-
| 0x4CB3DC || WORD || '''wSewerBonus''' || || Whether the city has adequate wastewater treatment facilities for use in the Pollution Divisor
|-
| 0x4CB3E8 || WORD || '''wCityCurrentSeason''' || || Which season it is (0 = winter, 1 = spring, 2 = summer, 3 = autumn; calculated from dwCityDays)
|-
| 0x4CB38C || microsim_t* || '''dwMicroSimArr''' || || Pointer to the array of [[microsim]]s
|-
| 0x4CB404 || WORD || '''wCityDifficulty''' || 0x001C || Game difficulty (0 = no city founded, 1 = easy, 2 = medium, 3 = hard)
|-
| 0x4CB40C || BYTE || '''bWeatherTrend''' || 0x006C || What the [[WeatherTrend type|current weather type]] is
|-
| 0x4CB430 || WORD[17] || '''wCityInventionYears''' || 0x0738 || What years different technologies are invented in
|-
| 0x4CB454 || DWORD || '''dwCityCrime''' || 0x002C || Sum of all values in XCRM
|-
| 0x4CB458 || WORD || '''wCityCenterXCoord''' || || The X location of where the Simulator deems to be the "city center"
|-
| 0x4CB45C || WORD || '''wCityCenterYCoord''' || || The Y location of where the Simulator deems to be the "city center"
|-
| 0x4CB464 || WORD || '''wCurrentCityToolGroup''' || || Currently selected city tool group
|-
| 0x4CC4B8 || DWORD || '''dwWaterUsedPercentage''' || || Percentage of water capacity in use
|-
| 0x4CC4BC || {{Win32_BOOL}} || '''bNewspaperExtra''' || 0x1008 || Whether or not the Extra!!! newspaper is checked
|-
| 0x4CC4CC || void* || '''dwBudgetArr''' || || Pointer to the budget array (needs some reverse engineering and/or documentation work)
|-
| 0x4CC4D4 || {{Win32_BOOL}} || '''bNoDisasters''' || 0x1000 || Whether or not disasters should be disabled (also disables city council autonomy)
|-
| 0x4CC4D8 || WORD || '''wCityNeighborConnections1000''' || || Count of all $1000 (commercial) neighbor connections (roads)
|-
| 0x4CC4E4 || BYTE || '''bMilitaryBaseType''' || 0x0EF4 || Military base type (0 = not offered yet, 1 = declined/no location, 2 = army, 3 = air force, 4 = navy, 5 = missile silos)
|-
| 0x4CC8F8 || WORD || '''wCityResidentialDemand''' || 0x0718 || Residential demand (-2000 to +2000)
|-
| 0x4CC8FA || WORD || '''wCityCommericalDemand''' || 0x071C || Commercial demand (-2000 to +2000)
|-
| 0x4CC8FC || WORD || '''wCityIndustrialDemand''' || 0x0720 || Industrial demand (-2000 to +2000)
|-
| 0x4CC910 || DWORD || '''dwCityPollution''' || || Sum of all Pollution in city.
|-
| 0x4CC918 || WORD || '''wScenarioDisasterID''' || || ID of the disaster set for the given scenario.
|-
| 0x4CC91A || BYTE || '''bScenarioDisasterX''' || || X coordinate for preparing the disaster.
|-
| 0x4CC91B || BYTE || '''bScenarioDisasterY''' || || Y coordinate for preparing the disaster.
|-
| 0x4CC91C || BYTE || '''wScenarioTimeLimitMonths''' || || Time limit of the scenario in months.
|-
| 0x4CC91E || DWORD || '''dwScenarioCitySize''' || || Target total population for the scenario exceeded.
|-
| 0x4CC922 || DWORD || '''dwScenarioResPopulation''' || || Target Residential population for the scenario.
|-
| 0x4CC926 || DWORD || '''dwScenarioComPopulation''' || || Target Commericial population for the scenario.
|-
| 0x4CC92A || DWORD || '''dwScenarioIndPopulation''' || || Target Industrial population for the scenario.
|-
| 0x4CC92E || DWORD || '''dwScenarioCashGoal''' || || Cash goal target for the scenario.
|-
| 0x4CC932 || DWORD || '''dwScenarioLandValueGoal''' || || Land Value goal target for the scenario.
|-
| 0x4CC93A || WORD || '''wScenarioPollutionLimit''' || || Pollution limit for the scenario.
|-
| 0x4CC93E || WORD || '''wScenarioCrimeLimit''' || || Crime limit for the scenario.
|-
| 0x4CC942 || WORD || '''wScenarioTrafficLimit''' || || Traffic limit for the scenario.
|-
| 0x4CC946 || BYTE || '''bScenarioBuildingGoal1''' || || Scenario building goal one.
|-
| 0x4CC947 || BYTE || '''bScenarioBuildingGoal2''' || || Scenario building goal two.
|-
| 0x4CC948 || WORD || '''wScenarioBuildingGoal1Count''' || || Scenario building goal one count.
|-
| 0x4CC94A || WORD || '''wScenarioBuildingGoal2Count''' || || Scenario building goal two count.
|-
| 0x4CC950 || WORD || '''wSelectedSubtoolBulldozer''' || || (*** See below) Selected Bulldozer mode (Demolish/Clear, Level Terrain, Raise Terrain, Lower Terrain, De-zone) **
|-
| 0x4CC952 || WORD || '''wSelectedSubtoolNature''' || || Selected Nature mode (trees, water) (forests and stream are available in map-editing mode) **
|-
| 0x4CC954 || WORD || '''wSelectedSubtoolDispatch''' || || Selected Dispatch mode (Police, Fire, Military (if facilities for the first two aren't present)) **
|-
| 0x4CC956 || WORD || '''wSelectedSubtoolPower''' || || Selected Power mode (Power Lines, Power Plant) **
|-
| 0x4CC958 || WORD || '''wSelectedSubtoolWater''' || || Selected Water mode (Pipes, Water Pump, Water Tower, Treatment, Desalinization) **
|-
| 0x4CC95A || WORD || '''wSelectedSubtoolRewards''' || || Selected Rewards mode (Mayor's Hour, City Hall, Statue, Military Base, Braun Llama Dome, Arcologies) **
|-
| 0x4CC95C || WORD || '''wSelectedSubtoolRoads''' || || Selected Roads mode (Road, Highway, Tunnel, Onramp, Bus Depot) **
|-
| 0x4CC95E || WORD || '''wSelectedSubtoolRail''' || || Selected Rail mode (Rail, Subway. Rail Depot, Sub Station, Sub<-->Rail) **
|-
| 0x4CC960 || WORD || '''wSelectedSubtoolPorts''' || || Selected Ports mode (Seaport, Airport) **
|-
| 0x4CC962 || WORD || '''wSelectedSubtoolResidential''' || || Selected Residential mode (Light, Dense) **
|-
| 0x4CC964 || WORD || '''wSelectedSubtoolCommercial''' || || Selected Commercial mode (Light, Dense) **
|-
| 0x4CC966 || WORD || '''wSelectedSubtoolIndustrial''' || || Selected Industrial mode (Light, Dense) **
|-
| 0x4CC968 || WORD || '''wSelectedSubtoolEducation''' || || Selected Education mode (School, College, Library, Museum) **
|-
| 0x4CC96A || WORD || '''wSelectedSubtoolServices''' || || Selected Services mode (Police, Fire Station, Hospital, Prison) **
|-
| 0x4CC96C || WORD || '''wSelectedSubtoolParks''' || || Selected Parks mode (Small Park, Big Park, Zoo, Stadium, Marina) **
|-
| 0x4CDB68 || WORD || '''wHighlightedTileX''' || || The X coordinate of the tile currently highlighted on the map
|-
| 0x4CDB70 || WORD || '''wHighlightedTileY''' || || The Y coordinate of the tile currently highlighted on the map
|-
| 0x4CDB7C || DWORD || '''dwLFSRState''' || || Randomness state for the linear feedback shift register PRNG
|-
| 0x4CDB80 || DWORD || '''dwLCGState''' || || Randomness state for the linear congruential generator PRNG
|-
| 0x4CE8C0 || AFX_CORE_STATE || '''pCWinApp''' || || Pointer to a CWinApp (needs reverse engineering -- maybe IDA picked this one out on its own?)
|-
| 0x4C93B4 || DWORD || '''dwXVALTotalCount''' || || A total count of XVAL "tiles" used in land value average calc.
|-
|}

<pre>
** The choices for each SelectedSubtool are for reference purposes only, they may not reflect the actual internal order.

*** wSelectedSubtoolBulldozer - Address 0x4CC94C (WORD array - 18 entries) - unique case to override without changing the currently selected tool.
</pre>

{| class="wikitable sortable"
|+ Terrain generation variables
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the variable.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 0x4C94C0 || {{Win32_BOOL}} || '''bCityHasOcean''' || 0x0E44 || Whether or not the city was generated with an ocean, also determines if City is eligible for Naval Base.
|-
| 0x4CA1E0 || WORD || '''wCityTerrainSliderHills''' || || Slider value for hill coverage during terrain generation
|-
| 0x4CA818 || __int16 || '''wWaterLevel''' || 0x0E40 || Water table level
|-
| 0x4CAAF8 || WORD || '''wCityTerrainSliderWater''' || || Slider vvalue for water coverage during terrain generation
|-
| 0x4CADD8 || WORD || '''wCityTerrainSliderTrees''' || || Slider value for tree coverage during terrain generation
|-
| 0x4CB3F8 || {{Win32_BOOL}} || '''bCityHasRiver''' || 0x0E48 || Whether or not the city was generated with a river
|-
|}



{| class="wikitable sortable"
|+ Map data pointers
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the variable.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 0x4C9430 || void* || '''dwMapXPLC''' || || Pointer to a 32x32 "minimap" for police coverage (1 byte per 4x4 block)
|-
| 0x4C9F58 || void* || '''dwMapXTER''' || || Pointer to a 128x128 map of terrain data (1 byte of type map_XTER_t per tile)
|-
| 0x4CA1F0 || void* || '''dwMapXZON''' || || Pointer to a 128x128 map of zone and corner info (1 byte of type map_XZON_t per tile)
|-
| 0x4CB3EC || void* || '''dwMapXMIC''' || || Pointer to an array of type map_XMIC_t[150] containing MicroSim data.
|-
| 0x4CA198 || void* || '''dwMapXLAB''' || || Pointer to an array of type map_XLAB_t[256].
|-
| 0x4CA434 || void* || '''dwMapXTHG''' || || Pointer to an array of type map_XTHG_t[256] containing [[Thing]]s
|-
| 0x4CA448 || void* || '''dwMapXPOP''' || || Pointer to a 32x32 "minimap" for population density (1 byte per 4x4 block)
|-
| 0x4CA4D8 || void* || '''dwMapXCRM''' || || Pointer to a 64x64 "minimap" for crime (1 byte per 2x2 block)
|-
| 0x4CA600 || void* || '''dwMapXTXT''' || || Pointer to a 128x128 map of [[XTXT]] IDs (1 byte per tile)
|-
| 0x4CA828 || void* || '''dwMapXPLT''' || || Pointer to a 64x64 "minimap" for pollution (1 byte per 2x2 block)
|-
| 0x4CA940 || void* || '''dwMapXTRF''' || || Pointer to a 64x64 "minimap" for traffic (1 byte per 2x2 block)
|-
| 0x4CAA78 || void* || '''dwMapXFIR''' || || Pointer to a 32x32 "minimap" for fire coverage (1 byte per 4x4 block)
|-
| 0x4CAB10 || void* || '''dwMapXBIT''' || || Pointer to a 128x128 map of tile flags (1 byte of type map_[[XBIT]]_t per tile)
|-
| 0x4CAE10 || void* || '''dwMapALTM''' || || Pointer to a 128x128 map of altitude data (1 byte of type map_ALTM_t per tile)
|-
| 0x4CB028 || void* || '''dwMapXROG''' || || Pointer to a 32x32 "minimap" of rate of growth data (1 byte of unknown type per 4x4 block)
|-
| 0x4CB0A8 || void* || '''dwMapXVAL''' || || Pointer to a 64x64 "minimap" of land value (1 byte of <code>(full value / 1000 - 1)</code> per 2x2 block)
|-
| 0x4CB1D0 || void* || '''dwMapXUND''' || || Pointer to a 128x128 map of underground map data (1 byte of type map_XUND_t per tile)
|-
| 0x4CC470 || void* || '''dwMapXGRP''' || || Pointer to the historical graph data
|-
| 0x4CC4F0 || void* || '''dwMapXBLD''' || || Pointer to a 128x128 map of tile IDs (1 byte of type enumTileID per tile)
|-
| 0x4CC6F4 || void* || '''dwMapTempValMap1''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (pollution?).
|-
| 0x4CC6F8 || void* || '''dwNaturalBeauty_ResCom''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (this includes surface water, water supply, terrain slopes, parks).
|-
| 0x4CC6FC || void* || '''dwMapTempValMap2''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (pollution?).
|-
| 0x4CC778 || void* || '''dwNaturalBeauty_Industrial''' || || Pointer to a 32x32 "minimap" of 4x4 parcels needed for land value calculation (this includes surface water, water supply).
|-
|}
{| class="wikitable sortable"
|+ Simulation Arrays
|-
! {{tooltip|Address|The address of the variable.}} ! {{tooltip|Type|What type this variable is declared as.}} ! {{tooltip|Name|The name of the array.}} ! {{tooltip|MISC offset|If this variable is stored in the .sc2 MISC chunk, this is where in the chunk it's stored.}} ! Notes
|-
| 004C94B4 || void* || '''pRawPopTable''' || || Pointer to 20-item array for the Population Table
|-
| 0x4CAA70 || void* || '''pLETable''' || || Pointer to 20-item array for the LE Table, these are as aggregate sums for the entire age group (LE/RawPop=AgeGroupLE).
|-
| 0x4C94BC || void* || '''pEQTable''' || || Pointer to 20-item array for the EQ Table, these are as aggregate sums for the entire age group (EQ/RawPop=AgeGroupEQ).
|-
| 0x4CB3F0 || void* || '''pIndividualIndPops''' || || Pointer to 11-item array for the Raw Populations for City Industries Table.
|-
| 0x4CB3E0 || void* || '''pIndividualIndTaxRate''' || || Pointer to 11-item array for the each of the Industrial Group's Tax Rates.
|-
| 0x4CA3F4 || void* || '''pIndividualIndDemands''' || || Pointer to 11-item array for the each of the Industrial Group's current Demand.
|-
| 0x4CA428 || void* || '''pZonePops''' || || Pointer to 8-item array of Zone Populations (/10): '''AllTotalPops, Light Res, Dense Res, Light Com, Dense Com, Light Ind, Dense Ind, Abandoned.'''
|}
[[Category:Game data]]

Function list

2025-03-14T06:35:16Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401262 || 0x468D30 || int || __stdcall || '''[[SimulationEQ_LE_Processing]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22 || Handles EQ and LE simulation for the month.
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x4019EC || 0x4412E0 || int || __cdecl || '''CenterOnTileCoords''' || __int16 iTileX, __int16 iTileY || {{Somewhat understood}} || Called from the centering tool and anywhere that needs to center the display ||
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x40217B || 0x468150 || int || __stdcall || '''[[SimulationRCIDemandUpdates]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22 || Handles all RCI bar updates for "zone balance"
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402A9F || 0x40C100 || __int16 || __tstdcall || '''SimulationProcessTimer''' || || {{Mostly understood}} || Called from the root window's AFX_MSGMAP to handle WM_TIMER messages ||
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || || 00
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 23 and from "gilmartin" cheat ||
|-
| 0x401154 || 0x46A840 || int || __stdcall || '''[[SimulationPollutionTerrainLandValueScan]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 3 || This is where the land value, pollution and other things simulators lives.
|-
| 0x4025A4 || 0x4302E0 || int || __thiscall || '''LoadSegmentsFromSavedCity''' || void *this, int *a2, char *Src || {{Barely explored}} || || Seems to be related to the loading / parsing of segments from a saved SC2 file
|-
| 0x4025A9 || 0x42D940 || int || || '''ClearMapsAndOtherThingsFromMemory''' || || {{Barely explored}} || Appears to be called when the game is about to close down || Seems to clear / reinitialize a number of global variables
|}

{| class="wikitable sortable"
|+ [[MicroSim]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x40158C || 0x44DDC0 || __int16 || __cdecl || '''SimulationInitializeMicrosim''' || __int16 iMicroSimIdx, __int16 iTileID || {{Barely explored}} || || Seems to initialize the values for each microsim based on the provided tile ID. First param is an index into the XLAB map.
|-
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x4027E8 || 0x48A3F0 || LRESULT || __stdcall || '''MaxisMovieWndProc''' || HWND hWnd, UINT uMsg, WPARAM wParam, LPARAM lParam || {{Mostly understood}} || Registered as window class "MaxisMovie" by sub_405650 || Window procedure for the "fullscreen" window that plays Smacker movies
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|-
| 0x48A370 || || BOOL || __cdecl || '''MaxisMovieBlitNextFrame''' || HWND hWnd || {{Understood}} || Called by '''MaxisMovieWndProc''' from WM_PAINT message || Blits the next frame of a Smacker movie onto the MaxisMovie window
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

Known global variables

2025-03-12T09:14:17Z

Araxestroy: pCwndMainWindow -> pCWndRootWindow

Known global variables

2025-03-12T01:53:19Z

Araxestroy:

Function list

2025-03-12T01:50:16Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401262 || 0x468D30 || int || __stdcall || '''[[SimulationEQ_LE_Processing]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles EQ and LE simulation for the month.
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x4019EC || 0x4412E0 || int || __cdecl || '''CenterOnTileCoords''' || __int16 iTileX, __int16 iTileY || {{Somewhat understood}} || Called from the centering tool and anywhere that needs to center the display ||
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x40217B || 0x468150 || int || __stdcall || '''[[SimulationRCIDemandUpdates]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles all RCI bar updates for "zone balance"
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402A9F || 0x40C100 || __int16 || __tstdcall || '''SimulationProcessTimer''' || || {{Mostly understood}} || Called from the root window's AFX_MSGMAP to handle WM_TIMER messages ||
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || || 00
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 23 and from "gilmartin" cheat ||
|-
| 0x401154 || 0x46A840 || int || __stdcall || '''[[SimulationLandValueMapCalc]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 3 || This is where the land value and pollution simulator lives.
|-
| 0x4025A4 || 0x4302E0 || int || __thiscall || '''LoadSegmentsFromSavedCity''' || void *this, int *a2, char *Src || {{Barely explored}} || || Seems to be related to the loading / parsing of segments from a saved SC2 file
|-
| 0x4025A9 || 0x42D940 || int || || '''ClearMapsAndOtherThingsFromMemory''' || || {{Barely explored}} || Appears to be called when the game is about to close down || Seems to clear / reinitialize a number of global variables
|}

{| class="wikitable sortable"
|+ [[MicroSim]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x40158C || 0x44DDC0 || __int16 || __cdecl || '''SimulationInitializeMicrosim''' || __int16 iMicroSimIdx, __int16 iTileID || {{Barely explored}} || || Seems to initialize the values for each microsim based on the provided tile ID. First param is an index into the XLAB map.
|-
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

Function list

2025-03-12T01:48:02Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401262 || 0x468D30 || int || __stdcall || '''[[SimulationEQ_LE_Processing]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles EQ and LE simulation for the month.
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x4019EC || 0x4412E0 || int || __cdecl || '''CenterOnTileCoords''' || __int16 iTileX, __int16 iTileY || {{Somewhat understood}} || Called from the centering tool and anywhere that needs to center the display ||
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x40217B || 0x468150 || int || __stdcall || '''[[SimulationRCIDemandUpdates]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles all RCI bar updates for "zone balance"
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402A9F || 0x40C100 || __int16 || __tstdcall || '''SimulationProcessTimer''' || || {{Mostly understood}} || Called from the root window's AFX_MSGMAP to handle WM_TIMER messages ||
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || || 00
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 23 and from "gilmartin" cheat ||
|-
| 0x401154 || 0x46A840 || int || __stdcall || '''[[SimulationLandValueMapCalc]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 3 || This is where the land value and pollution simulator lives.
|-
| 0x4025A4 || 0x4302E0 || int || __thiscall || '''LoadSegmentsFromSavedCity''' || void *this, int *a2, char *Src || {{Barely explored}} || || Seems to be related to the loading / parsing of segments from a saved SC2 file
|-
| 0x4025A9 || 0x42D940 || int || || '''ClearMapsAndOtherThingsFromMemory''' || || {{Barely explored}} || || Seems to clear / reinitialize a number of global variables
|}

{| class="wikitable sortable"
|+ [[MicroSim]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x40158C || 0x44DDC0 || __int16 || __cdecl || '''SimulationInitializeMicrosim''' || __int16 iMicroSimIdx, __int16 iTileID || {{Barely explored}} || || Seems to initialize the values for each microsim based on the provided tile ID. First param is an index into the XLAB map.
|-
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

Function list

2025-03-11T09:57:12Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401262 || 0x468D30 || int || __stdcall || '''[[SimulationEQ_LE_Processing]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles EQ and LE simulation for the month.
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x4019EC || 0x4412E0 || int || __cdecl || '''CenterOnTileCoords''' || __int16 iTileX, __int16 iTileY || Called from the centering tool and anywhere that needs to center the display ||
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x40217B || 0x468150 || int || __stdcall || '''[[SimulationRCIDemandUpdates]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles all RCI bar updates for "zone balance"
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402A9F || 0x40C100 || __int16 || __tstdcall || '''SimulationProcessTimer''' || || {{Mostly understood}} || Called from the root window's AFX_MSGMAP to handle WM_TIMER messages ||
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || || 00
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 23 and from "gilmartin" cheat ||
|-
| 0x401154 || 0x46A840 || int || __stdcall || '''[[SimulationLandValueMapCalc]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 3 || This is where the land value and pollution simulator lives.
|-
| 0x4025A4 || 0x4302E0 || int || __thiscall || '''LoadSegmentsFromSavedCity''' || void *this, int *a2, char *Src || {{Barely explored}} || || Seems to be related to the loading / parsing of segments from a saved SC2 file
|-
| 0x4025A9 || 0x42D940 || int || || '''ClearMapsAndOtherThingsFromMemory''' || || {{Barely explored}} || || Seems to clear / reinitialize a number of global variables
|}

{| class="wikitable sortable"
|+ [[MicroSim]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x40158C || 0x44DDC0 || __int16 || __cdecl || '''SimulationInitializeMicrosim''' || __int16 iMicroSimIdx, __int16 iTileID || {{Barely explored}} || || Seems to initialize the values for each microsim based on the provided tile ID. First param is an index into the XLAB map.
|-
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

User:Araxestroy/DOS version decompilation notes

2025-03-11T03:32:28Z

Araxestroy:

We're not doing a full patch or anything on the DOS version but I've got an IDA database going for it to compare a few things against. If anyone asks me for a DOS patch I will put them in The Little Box Of Screams along with the Amiga fanboys.

=== Possible thiscall format ===

A lot seems to use __usercall with int a1@<edx> at the start. I'm wondering if this is a __thiscall variant specific to some DOS compiler, where that should actually be int this@<edx> more or less across the board. Watcom perhaps? I don't have enough experience with DOS C++ compilers to know whether or not that's accurate.

=== Some functions ===

* '''cseg01:00038BA7''': char __usercall SimulationProposeMilitaryBase@<al>(int a1@<edx>, __int16 a2@<di>)
:: Cities with coastlines seem to have a 50/50 chance of getting a naval base versus getting something else! This is good to know for reimplementation in the Win95 version.
* '''cseg01:00049F2A''': char __usercall MessageBoxYesNo@<al>(int a1@<edx>, int a2)
:: Message format is an array of 32-bit near pointers to strings followed by a null pointer for termination.

=== Some variables ===

Booleans all seem to be the C++ bool type, so sizeof(bool) == 1.

* '''dseg03:000C82E5''': char bMilitaryBaseType
:: Same format as Win95 version
* '''dseg03:000C82E6''': bool bCityHasOcean

=== Map data ===
* '''dseg03:000D64C4''' dwMapXUND
* '''dseg03:000D66C4''' dwMapXZON
* '''dseg03:000D68C4''' dwMapXTER
* '''dseg03:000D6AC4''' dwMapALTM
* '''dseg03:000D6CC4''' dwMapXBLD
* '''dseg03:000D7154''' dwMapXBIT

User:Araxestroy/DOS version decompilation notes

2025-03-11T03:31:14Z

Araxestroy:

We're not doing a full patch or anything on the DOS version but I've got an IDA database going for it to compare a few things against. If anyone asks me for a DOS patch I will put them in The Little Box Of Screams along with the Amiga fanboys.

=== Possible thiscall format ===

A lot seems to use __usercall with int a1@<edx> at the start. I'm wondering if this is a __thiscall variant specific to some DOS compiler, where that should actually be int this@<edx> more or less across the board. Watcom perhaps? I don't have enough experience with DOS C++ compilers to know whether or not that's accurate.

=== Some functions ===

* '''cseg01:00038BA7''': char __usercall SimulationProposeMilitaryBase@<al>(int a1@<edx>, __int16 a2@<di>)
:: Cities with coastlines seem to have a 50/50 chance of getting a naval base versus getting something else! This is good to know for reimplementation in the Win95 version.
* '''cseg01:00049F2A''': char __usercall MessageBoxYesNo@<al>(int a1@<edx>, int a2)
:: Message format is an array of 32-bit near pointers to strings followed by a null pointer for termination.

=== Some variables ===

Booleans all seem to be the C++ bool type, so sizeof(bool) == 1.

* '''dseg03:000C82E5''': char bMilitaryBaseType
:: Same format as Win95 version
* '''dseg03:000C82E6''': bool bCityHasOcean

=== Map data ===
* '''dseg03:000D66C4''' dwMapXZON
* '''dseg03:000D68C4''' dwMapXTER
* '''dseg03:000D6AC4''' dwMapALTM
* '''dseg03:000D6CC4''' dwMapXBLD
* '''dseg03:000D7154''' dwMapXBIT

User:Araxestroy/DOS version decompilation notes

2025-03-11T03:28:57Z

Araxestroy:

We're not doing a full patch or anything on the DOS version but I've got an IDA database going for it to compare a few things against. If anyone asks me for a DOS patch I will put them in The Little Box Of Screams along with the Amiga fanboys.

=== Possible thiscall format ===

A lot seems to use __usercall with int a1@<edx> at the start. I'm wondering if this is a __thiscall variant specific to some DOS compiler, where that should actually be int this@<edx> more or less across the board. Watcom perhaps? I don't have enough experience with DOS C++ compilers to know whether or not that's accurate.

=== Some functions ===

* '''cseg01:00038BA7''': char __usercall SimulationProposeMilitaryBase@<al>(int a1@<edx>, __int16 a2@<di>)
:: Cities with coastlines seem to have a 50/50 chance of getting a naval base versus getting something else! This is good to know for reimplementation in the Win95 version.
* '''cseg01:00049F2A''': char __usercall MessageBoxYesNo@<al>(int a1@<edx>, int a2)
:: Message format is an array of 32-bit near pointers to strings followed by a null pointer for termination.

=== Some variables ===

Booleans all seem to be the C++ bool type, so sizeof(bool) == 1.

* '''dseg03:000C82E5''': char bMilitaryBaseType
:: Same format as Win95 version
* '''dseg03:000C82E6''': bool bCityHasOcean

=== Map data ===
* '''dseg03:000D66C4''' dwMapXZON
* '''dseg03:000D68C4''' dwMapXTER
* '''dseg03:000D6CC4''' dwMapXBLD
* '''dseg03:000D7154''' dwMapXBIT

User:Araxestroy/DOS version decompilation notes

2025-03-11T03:20:47Z

Araxestroy: Created page with "We're not doing a full patch or anything on the DOS version but I've got an IDA database going for it to compare a few things against. If anyone asks me for a DOS patch I will put them in The Little Box Of Screams along with the Amiga fanboys. === Possible thiscall format === A lot seems to use __usercall with int a1@<edx> at the start. I'm wondering if this is a __thiscall variant specific to some DOS compiler, where that should actually be int this@<edx> more or less..."

User:Araxestroy

2025-03-11T03:09:51Z

Araxestroy:

Hi, I'm Troy. I started and maintain the sc2kfix plugin and project.

=== Notepad ===

[[User:Araxestroy/DOS version decompilation notes]]

MapXBLD

2025-03-11T02:55:24Z

Araxestroy: Redirected page to Tiles

#REDIRECT [[Tiles]]

Function list

2025-03-09T09:27:04Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401262 || 0x468D30 || int || __stdcall || '''[[SimulationEQ_LE_Processing]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles EQ and LE simulation for the month.
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x40217B || 0x468150 || int || __stdcall || '''[[SimulationRCIDemandUpdates]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles all RCI bar updates for "zone balance"
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402A9F || 0x40C100 || __int16 || __tstdcall || '''SimulationProcessTimer''' || || {{Mostly understood}} || Called from the root window's AFX_MSGMAP to handle WM_TIMER messages ||
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || || 00
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 23 and from "gilmartin" cheat ||
|-
| 0x401154 || 0x46A840 || int || __stdcall || '''[[SimulationLandValueMapCalc]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' on day 3 || This is where the land value and pollution simulator lives.
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

Function list

2025-03-09T00:24:07Z

Araxestroy: Add thunks and function signatures for two functions

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401262 || 0x468D30 || int || __stdcall || '''[[EQ_LE_Processing]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles EQ and LE simulation for the month.
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x40217B || 0x468150 || int || __stdcall || '''[[RCIDemandUpdates]]''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 22? || Handles all RCI bar updates for "zone balance"
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || ||
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 23 and from "gilmartin" cheat ||
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

Main Page

2025-03-08T05:52:45Z

Araxestroy:

__NOTOC__ __NOEDITSECTION__ {{#description2:Welcome to sc2k-reverse, the sc2kfix Project wiki!}}
[[File:{{#setmainimage:SC2K-reverse Header.png}}|center]]

'''Welcome to sc2k-reverse, the sc2kfix Project wiki!''' Pardon our dust, as this wiki is brand new and we haven't had a chance to do much of anything around here yet.

'''Need an account?''' PM araxestroy on the Simtropolis forums or on the libera.chat IRC network.

== Wiki to-do list ==

* More page component templates (see [[:Category:Templates]])
** Game infoboxes
** RE related stuff? Not sure what we'll need
** Category navboxes
* Wiki meta pages (categories, help, copyright page, etc)
* Nicer main page (maybe split it into flex columns?)
* Get some stub articles written up as a "schema"
* <s>Make sure the email system actually works</s> it absolutely does not, I may need to move this thing to a Linode VPS sooner rather than later

== sc2kfix Plugin Information ==

* [https://sc2kfix.net/plugin.html Plugin user guide]

== SimCity 2000 Reverse Engineering ==

* [[Function list]]
* [[Known global variables]]
* [[Classes]]
* [[Map data]]
* [[Data formats]]

Main Page

2025-03-08T05:20:20Z

Araxestroy:

Function list

2025-03-07T10:21:33Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || {{Barely explored}} || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || {{Mostly understood}} || || Returns the effective cost of an ordinance
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || {{Barely explored}} || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || {{Mostly understood}} || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || {{Mostly understood}} || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || {{Somewhat understood}} || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || {{Mostly understood}} || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || {{Somewhat understood}} || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || {{Barely explored}} || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || {{Somewhat understood}} || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || {{Barely explored}} || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || {{Barely explored}} || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || {{Somewhat understood}} || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || {{Barely explored}} || ||
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || {{Somewhat understood}} || Called from '''SimulationProcessTick''' day 23 and from "gilmartin" cheat ||
|-
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || {{Barely explored}} || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || {{Barely explored}} || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || {{Barely explored}} || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || {{Barely explored}} || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || {{Mostly understood}} || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || {{Understood}} || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || {{Understood}} || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || {{Barely explored}} || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || {{Understood}} || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || {{Understood}} || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || {{Understood}} || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || {{Understood}} || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || {{Understood}} || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || {{Understood}} || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || {{Understood}} || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || {{Understood}} || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || {{Understood}} || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || {{Understood}} || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || {{Understood}} || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || {{Understood}} || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || {{Understood}} || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || {{Understood}} || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || {{Understood}} || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || {{Understood}} || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || {{Understood}} || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || {{Understood}} || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || {{Understood}} || ||
|}

[[Category:Game data]]

Template:Mostly understood

2025-03-07T10:21:21Z

Araxestroy:

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#BBFFCC; color:black; {{{style|}}}" class="table-yes"|Mostly understood<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:Barely explored

2025-03-07T10:18:40Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#FFC7C7; color:black; {{{style|}}}" class="table-yes"|Barely explored<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#FFC7C7; color:black; {{{style|}}}" class="table-yes"|Barely explored<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:Somewhat understood

2025-03-07T10:18:01Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#FFFF88; color:black; {{{style|}}}" class="table-yes"|Somewhat understood<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#FFFF88; color:black; {{{style|}}}" class="table-yes"|Somewhat understood<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:Mostly understood

2025-03-07T10:17:24Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#CCEEFF; color:black; {{{style|}}}" class="table-yes"|Mostly understood<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#CCEEFF; color:black; {{{style|}}}" class="table-yes"|Mostly understood<noinclude>
|}
[[Category:Templates]]</noinclude>

Template:Understood

2025-03-07T10:16:44Z

Araxestroy: Created page with "<noinclude> {| class="wikitable" |- |</noinclude>style="background:#9EFF9E; color:black; {{{style|}}}" class="table-yes"|Understood<noinclude> |} Category:Templates</noinclude>"

<noinclude>
{| class="wikitable"
|-
|</noinclude>style="background:#9EFF9E; color:black; {{{style|}}}" class="table-yes"|Understood<noinclude>
|}
[[Category:Templates]]</noinclude>

Function list

2025-03-07T00:42:28Z

Araxestroy:

{{Heavy construction}}

This is a table of functions in SimCity 2000 that have been at least partially reverse engineered and given names. It is probably going to be unpleasant to update, but at least it looks nice and you can sort it.

When adding new functions to the table, please make sure you insert them into the appropriate order by thunk address (the function that just has a <code>jmp '''ActualFunctionBody'''</code> instruction in it). If/when it gets too unwieldy we can split it out into multiple tables.

{| class="wikitable sortable"
|+ Uncategorized functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40130C || 0x45F760 || {{Win32_BOOL}} || __stdcall || '''SimulationDoDisasterTick''' || || Barely explored || Called from '''SimulationStartDisaster''' ||
|-
| 0x4013ED || 0x42BCA0 || int || __cdecl || '''SimulationCalculateOrdinanceCost''' || DWORD dwOrdinance || Mostly understood || || Returns the effective cost of an ordinance
|-
| 0x401460 || 0x44CF60 || char || __cdecl || '''SimulationProvisionMicrosim''' || __int16 a1, int a2, __int16 iTileID || Barely explored || || iTileID is the only argument used; needs some RE work for sure
|-
| 0x4015E6 || 0x4731E0 || int || __cdecl || '''SimulationPrepareBudgetDialog''' || int a1 || Mostly understood || || arg a1 only referenced on line, seems to be more like "BOOL bUseParentWindow"
|-
| 0x401672 || 0x441E50 || int || __cdecl || '''SimulationGrantReward''' || __int16 iRewardID, BOOL bAddReward || Mostly understood || || Adds a city progression reward if (bAddReward), removes it if (!bAddReward).
|-
| 0x40174E || 0x42B4D0 || int || __cdecl || '''SimulationPrepareDisaster''' || DWORD *a1, __int16 a2, __int16 a3 || Somewhat understood || || Seems to prepare the starting location for disasters.
|-
| 0x401820 || 0x413520 || void || __stdcall || '''SimulationProcessTick''' || || Mostly understood || Called from '''GameDoIdleUpkeep''' based on game speed || Advances the calendar date and performs all appropriate daily/monthly/etc. tasks. May need better name?
|-
| 0x401CA8 || 0x464550 || int || __stdcall || '''SimulationUpdateWaterConsumption''' || || Barely explored || Called whenever tiles are placed and on '''SimulationProcessTick''' day 2 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x401E65 || 0x471BC0 || char || __stdcall || '''SimulationDetermineCityCrisis''' || || Somewhat understood || Called on the last day of the month and from ''sub_406A50'' || Changes the city status line if there's a new demand, and also starts disasters.
|-
| 0x4022FC || 0x4358B0 || int || __cdecl || '''SimulationGrowthTick''' || __int16 a1, __int16 a2 || Barely explored || Called from '''SimulationProcessTick''' on days 4-17 || The arguments and algorithms are not yet understood.
|-
| 0x402527 || 0x45CF10 || int || __stdcall || '''SimulationStartDisaster''' || || Somewhat understood || Called from '''GameDoIdleUpkeep''' || Calls the appropriate disaster creation function and then runs disaster ticks
|-
| 0x4026B2 || 0x4734A0 || int || __usercall || '''SimulationGrowSpecificZone''' || int a1@<ebp>, __int16 iX, __int16 iY, __int16 iTileID, __int16 iZoneType || Barely explored || Called from '''SimulationGrowthTick''' || Might be an omit-frame-pointer function?
|-
| 0x4026F8 || 0x467860 || int || __stdcall || '''SimulationUpdatePowerConsumption''' || || Barely explored || Called whenever tiles are placed and on '''SimulationProcessTick''' day 21 || Vanilla SC2K doesn't call this when tiles are placed on cities over 50,000 pop.
|-
| 0x402A3B || 0x405AB0 || DWORD || __thiscall || '''GameDoIdleUpkeep''' || CWinApp* this || Somewhat understood || Called from '''CWinApp::OnIdle''' via the class CWinApp vtable || Could stand to have a better name.
|-
| 0x402D2E || 0x4734A0 || __int16 || __stdcall || '''SimulationCalculateBudgetUpdates''' || || Barely explored || ||
|-
| 0x403017 || 0x4142C0 || int || __stdcall || '''SimulationProposeMilitaryBase''' || || Somewhat understood || Called from '''SimulationProcessTick''' day 23 and from "gilmartin" cheat ||
|-
|}

{| class="wikitable sortable"
|+ [[Thing]] functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40132A || 0x4562E0 || void || __cdecl || '''SimulationThingTickSailboat''' || __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' || Has a rare chance of turning into Nessie
|-
| 0x40137F || 0x454EA0 || void || __cdecl || '''SimulationThingTickTornado''' ||__int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' ||
|-
| 0x401992 || 0x4548C0 || void || __usercall || '''SimulationThingTickMonster''' || int a1@<ebx>, __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' || The function signature of this one is odd and needs investigation.
|-
| 0x401B6D || 0x455500 || void || __cdecl || '''SimulationThingTickTrain''' || __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' || Used for XTHG_TRAIN_ENGINE and XTHG_UNKNOWN_3
|-
| 0x401EBA || 0x452FA0 || int || __cdecl || '''SimulationSpawnMaxisMan''' || __int16 iDisasterID || Barely explored || Called from '''SimulationStartDisaster''' || Creates the Thing for Maxis Man and determines based on iDisasterID what his behavior should be
|-
| 0x40236F || 0x456760 || void || __usercall || '''SimulationThingTickCargoShip''' || int a1@<ebx>, __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' || IDA really doesn't like this function for some reason
|-
| 0x402464 || 0x450890 || int || __stdcall || '''SimulationDoThingTick''' || || Barely explored || Called from '''GameDoIdleUpkeep''' via ''sub_401DBB'' || Does the individual simulation ticks for Things every 30-45 ms.
|-
| 0x4024AA || 0x455020 || void || __cdecl || '''SimulationThingTickMaxisMan''' || __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' || If you shoot down a helicopter and it lights something on fire, it's your own dang fault
|-
| 0x4027A2 || 0x453980 || void || __usercall || '''SimulationThingTickAirplane''' || int a1@<ebx>, __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' || Another one with a bizarre function signature
|-
| 0x4028D3 || 0x4546F0 || void || __cdecl || '''SimulationThingTickExplosion''' || __int16 iXTHGIndex || Barely explored || Called '''SimulationDoThingTick''' ||
|-
| 0x402ED2 || 0x4540C0 || void || __cdecl || '''SimulationThingTickHelicopter''' || __int16 iXTHGIndex || Barely explored || Called from '''SimulationDoThingTick''' ||
|}

{| class="wikitable sortable"
|+ Sound and music functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401096 || 0x4251D0 || int || __thiscall || '''SoundPlaySound''' || int* this, int iSoundID || Mostly understood || Called in so many places || Calls through to ''sub_4802B0'', which does the buffer loads and calls to ''sndPlaySoundA''
|-
| 0x401389 || 0x480890 || MCIERROR || __thiscall || '''MusicSendMCICommands''' || unsigned __int16* this, char* szMidiPath || Understood || Called by '''MusicPlayMidi''' || Sends the actual MCI commands to play/stop a MIDI file
|-
| 0x401479 || 0x480770 || MCIERROR || __thiscall || '''MusicPlayMidi''' || unsigned __int16* this, int iSongID || Understood || Called by '''MusicPlay''' || Turns iSongID into szMidiPath
|-
| 0x4015FF || 0x480B20 || void || __thiscall || '''AllocateSoundBuffers''' || DWORD *this, int a2 || Barely explored || Called by '''CMainFrame:OnCreate''' || Allocates sound buffers; replaced by sc2kfix
|-
| 0x401A9B || 0x425290 || int || __thiscall || '''MusicPlayNextRefocusSong''' || unsigned __int16** this || Understood || Called in a few places || Loops through the non-event music; replaced by sc2kfix
|-
| 0x401CE9 || 0x425220 || int || __thiscall || '''SoundStopSound''' || int* this, int iSoundID || Understood || Called in so many places || Does a few checks then blasts out ''sndPlaySoundA(0, 0)''
|-
| 0x401F9B || 0x480140 || void || __stdcall || '''LoadSoundBuffer''' || int iSoundID, void* lpBuffer || Understood || Called before a few sound calls || This and many other sound functions are replaced by sc2kfix
|-
| 0x402414 || 0x425260 || int || __thiscall || '''MusicPlay''' || unsigned __int16** this, iSongID || Understood || Called by anything that changes the music || Basically just a trampoline to '''MusicPlayMidi'''
|-
| 0x402BE4 || 0x480AE0 || MCIERROR || __thiscall || '''MusicStop''' || int this || Understood || Called by anything that stops the music || Sends an MCI_CLOSE command to the sequencer device
|}

{| class="wikitable sortable"
|+ Randomness functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x401019 || 0x47FC30 || __int16 || __stdcall || '''RandomWordLFSRMod32''' || || Understood || || Returns a random word from the LFSR modulo 32
|-
| 0x40116D || 0x47FAA0 || __int16 || __cdecl || '''RandomWordLCGMod''' || __int16 iModulus || Understood || || Returns a random word from the LCG modulo iModulus
|-
| 0x401415 || 0x47FC70 || __int16 || __stdcall || '''RandomWordLFSRMod64''' || || Understood || || Returns a random word from the LFSR modulo 64
|-
| 0x4017AD || 0x47FAE0 || int || __stdcall || '''GetRandomLFSRState''' || || Understood || || Returns the state of the LFSR
|-
| 0x401CAD || 0x47FAF0 || __int16 || __cdecl || '''RandomWordLFSRMod''' || __int16 iModulus || Understood || || Returns a random word from the LFSR modulo iModulus
|-
| 0x401D9D || 0x47FCF0 || unsigned __int16 || __stdcall || '''RandomWordLFSR''' || || Understood || || Returns a random word from the LFSR
|-
| 0x401F19 || 0x47FA80 || int || __cdecl || '''SeedRandomLCG''' || int iSeed || Understood || || Sets the LCG state
|-
| 0x402261 || 0x47FB70 || __int16 || __stdcall || '''RandomWordLFSRMod4''' || || Understood || || Returns a random word from the LFSR modulo 4
|-
| 0x4025E5 || 0x47FBF0 || __int16 || __stdcall || '''RandomWordLFSRMod16''' || || Understood || || Returns a random word from the LFSR modulo 16
|-
| 0x402626 || 0x47FAD0 || int || __cdecl || '''SeedRandomLFSR''' || int iSeed || Understood || || Sets the LFSR state
|-
| 0x40288D || 0x47FBB0 || __int16 || __stdcall || '''RandomWordLFSRMod8''' || || Understood || || Returns a random word from the LFSR modulo 8
|-
| 0x402946 || 0x47FB30 || __int16 || __stdcall || '''RandomWordLFSRMod2''' || || Understood || Called by '''SimulationThingTickTrain''' and '''SimulationDoDisasterTick''' || Returns a random word from the LFSR modulo 2
|-
| 0x402B3F || 0x47FCB0 || __int16 || __stdcall || '''RandomWordLFSRMod128''' || || Understood || || Returns a random word from the LFSR modulo 128
|}

{| class="wikitable sortable"
|+ Frequently-reused MFC class functions
|-
! {{tooltip|Thunk address|The address of the function thunk that other functions call.}} ! {{tooltip|Main address|The address that the thunk function jumps to, where the function actually starts}} ! {{tooltip|Return type|The function's return type from the C function signature.}} ! {{tooltip|Calling convention|Typically __cdecl, __stdcall, or __thiscall. Sometimes __usercall or __userpurge in IDA. Write __stdcall if it takes zero arguments.}} ! {{tooltip|Function name|Just the name, not the parameters}} ! {{tooltip|Arguments|What parameters the function takes, or blank for void.}} ! {{tooltip|Status|How well we know what goes on inside the function.}} ! {{tooltip|Related functions|If any, and if not too long to list.}} ! Notes
|-
| 0x40219E || 0x4815E0 || INT_PTR || __thiscall || '''CGameDialog::DoModal''' || LPCDLGTEMPLATEA* this || Understood || Called in so many places || Seems to pause the simulation, call CDialog::DoModal(this), then restore the simulation.
|-
| 0x40281A || 0x481300 || struct CRuntimeClass* || __stdcall || '''CGameDialog::GetRuntimeClass''' || || Understood || ||
|}

[[Category:Game data]]