starting offset is 0xC0000000 (all values are 4 bytes unless otherwise noted) (just about all important gameplay related variables seems to be stored here: starting offset: 0xCB000000 dump length: 0x01000000) -----March 4th patch----- 0B515E90 (2 bytes) - Leon/Mercs 1P 0B515F00 (2 bytes) - Helena/Mercs 2P 0B515F70 (2 bytes) - Chris 0B515FE0 (2 bytes) - Piers 0B516050 (2 bytes) - Jake 0B5160C0 (2 bytes) - Sherry 0B516130 (2 bytes) - Ada 0B5161A0 (2 bytes) - Agent 0B4E8604 (4 bytes) - Related to which character 1P is 0B4E8610 (4 bytes) - 1P local, AI or network player? 0B4E88CC (4 bytes) - Controls screen mode! 0=normal. 1=splitscreen. 2=wide-widescreen, 3=cutscene, 5=partner view 0B4E88D0 (4 bytes) - Which character 1P camera is following -----Jan 22nd patch----- 0B4D88C8 (this value needs to be changed to 01 for splitscreen mode to work) 0B4D88CC (controls screen mode! 0=normal. 1=splitscreen. 2=wide-widescreen, 3=cutscene, 5=partner view) 0B4D88D0 (controls viewpoint of 1P) 0B4D88D4 (controls viewpoint of 2P) (FF FF FF FF if it's following no player) 0B4D8600 (I think changing this changes which character a joining 2P will play as, it also changes some things for 1P when restarting) 0B4D8610 (1P: 0=local player, 1=AI player, 2=network player) 0B4D8614 (2P: 0=local player, 1=AI player, 2=network player) 0B4D8630 (1P: which input device has control over this character) 0B505E90 (2 bytes) - Leon/Merc P1 (could also be 0B509B74?) 0B505F00 (2 bytes) - Helena/Merc P2 0B505F70 (2 bytes) - Chris 0B505FE0 (2 bytes) - Piers 0B506050 (2 bytes) - Jake 0B5060C0 (2 bytes) - Sherry 0B506130 (2 bytes) - Ada (could also be 0B509E14?) 0B5061A0 (2 bytes) - Agent CB4E07FF - Campaign Skills Savegame CampSkills - D76F MercSkills - D917 OnSkills - 10263 PredSkills - 102AB 03 - Firearm lvl 3 06 - melee lvl 3 09 - Defense lvl 3 0C - Critical Hit lvl 3 0F - Piercing lvl 3 11 - J'avo killer lvl 2 13 - Zombie hunter lvl 2 14 - Grenade Power up 15-1C master 1D-24 inf 25 - AR ammo inc 26 - SG ammo inc 27 - MGN ammo inc 28 - RFL ammo inc 29 - Grenade inc 2A - arrow inc 2B - Last Shot 2D - Quick reload 2F - Lock on lvl 2 31 - Rock steady lvl 2 32 - Breakout 33 - Item Drop inc 35 - Recovery lvl 2 37 - Combat Guage Boost Lv2 38 - Eagle eye 39 - Team Up 3B - Field Medic 2 3C - Lone Wolf 3D - Shooting Wild 3E - Go for Broke 3F - Time Bonus + 40 - Combo Bonus + 41 - Limit Breaker 42 - Blitz Play 43 - Quick Shot Damage Increase 44 - Power Counter 45 - Second Wind 46 - Martial Arts Master 47 - Target Master 48 - Last Stand 4A - Preemptive Strike 4C - Dying Breath 4D - Pharmacist 4E - Medic 4F - First Responder 50 - Take it Easy 51 - Natural Healing 54 - Training -----December patch addresses----- 0B4D43BA (2 bytes) - Stage 0B4D5E90 (2 bytes) - 1P character in mercs -----Final game addresses (no TU)----- Related to 1P, not sure what it does: 0A2ED172, 0B438606 0B4388CC (controls screen mode! 0=normal. 1=splitscreen. 2=wide-widescreen, 5=partner view) 0B4388D0 (controls viewpoint of 1P) 0B4388D4 (controls viewpoint of 2P) (mercenaries 1P) 0B465E8F (2 bytes) - 1P character Character list: 0000 (Leon USA) 0001 (Leon Asia) 0010 (Leon Pirate) 0011 (Leon Blue pirate) 0012 (Leon PS1) 0100 (Helena USA) 0101 (Helena Asia) 0102 (Helena carrying Deborah, does not work properly in mercs) 0103 Crash 0110 (Helena Police) 0200 (Chris Asia) 0201 (Chris Europe) 0202 Crash 0203 Crash 0210 (Chris Samurai) Chris Bad Piers Asia 0303 (Piers Canon?) Piers Europe Piers Personal 0400 (Jake Europe) 0401 (Jake monitor? doesn't render properly) 0402 (Jake Asia) 0403 (Jake Snow? dooesn't render properly) 0500 (Sherry Europe) 0501 (Sherry Monitor) 0502 (Sherry China) 0503 (Sherry Snow?, doesn't render properly in mercs) 0510 (Sherry RE2) 0511 (Sherry costume 2) 0600 (Ada normal) 0601 Crash 0602 (Carla) 0610 (Ada chinese dress) 0700 (Soldier normal) 0B4643BA (2 bytes) - Current map. Can be overridden to force another stage to be loaded. (this is only changed by the game when ending levels, choosing continue or choosing chapter select. other times it's safe to be changed) (chapter related) (one of these does correctly change which chapter you're playing as) 00A9458C (4 bytes) - Current chapter. Changing it doesn't seem to affect anything. 0B3EA578 (not this one) 0B422A14 0B42C958 0B430E90 (not this one) 0B4628C0 0B4643B0 0B47C5B4 0B861B64 1905678D Campaign IDs: 0 = Leon 1 = Chris 2 = Jake 3 = Ada 4 = Prelude (difficulty setting) 0B3EA574 0B430E8C 0B4628BC 0B4643AC (seems to reflect option chosen in menus) 0B47C5B0 0B861B60 ----Demo 2 addresses----- 0B3788CC (controls screen mode! 0=normal. 1=splitscreen. 2=wide-widescreen) 0B3788D0 (controls viewpoint of 1P) 0B3788D4 (controls viewpoint of 2P) (possible 1Ps) 03EEB052 048E1598 048E15B8 04901598 049015B8 04CCF364 04CCF368 05765E66 0587218C 05EABA47 0A0F4F19 0A22D170 0A5E23D7 0A5E2517 0A5E9BD7 0A9EA3D7 0B378604 0B3813C4 0B7AF79C 0BE7B22C 0BE7CE4C 0BF1195B 1FA48AFE 1FA4A3DE 1FA4A70E 1FA4AA3E 1FAA3B7E 1FACAAEE 1FB08264 1FBCE567 Demo 1 addresses: 0x0C93E9FD (4 bytes) - 1P character? (Total address: 0xCC93E9FD) 0x0C98418D (4 bytes) - 2P character? 0x0C9841CD (4 bytes) - 2P character? 0x18401900 (1p) 0x197105F8 (1p) (something to do with which menu options you have available. matches up with what player you control. other values removes menu options) 0x197108C0 (controls screen mode! 0=normal. 1=splitscreen. 2=wide-widescreen) 0x197108C4 (Controls the viewpoint of 1P!) 0x197108C8 (Controls the viewpoint of 2P!) test: (these change from 00 to 01 depending on if you played as 1p or 2p) 0x0415A99C 0x04306E94 0x04353C58 0x0439C938 0x0439CB78 0x0439CCE4 test: (these changed based on 1P character) 0x0CA39736 0x169AC1AE 0x19B2D044 0x1BC81968 ? 0x1CD1FC28 test: (manual findings) 197108F4 197108F8 test: (these show stage num) (these are 2 byte values) 1950D0EA (auto changed) 1971415A (not auto changed) 19739BD2 (not auto changed) (this is the primary one) 1973FAC6 (auto changed) stage reference: 502 chris - 01 F6 104 leon - 00 68 305 jake - 01 31 1100 leon intro - 04 4C 1110 chris intro - 04 56 try to find campaign setting value? 0xD9739BC2+0D (1 byte, controls whether it's a cutscene?) 0xD9739BC2+19 (1 byte, changes to 0A after we start loading after a cutscene)