TEXT   44
memory editing v1-0-6
Guest on 13th May 2022 08:06:10 AM


  1. Base pounter = sGameMan
  2. 0x3E48 UINT =  0=Solo/Deathmatch 1=Teams 2=Slitscreen
  3. 0x3FC8 - 1 = mission running, 2 = mission end
  4. 0x3FCC - Mission time
  5. 0x3FD4 - Last time bonus (seconds)
  6.  
  7. Base pointer "sGameMan" = "BH6.exe"+013C549C (add 0x5000 to any of these offsets to make them alinged with sGameMan)
  8. -0xC410D8 = BSAA Agent health (4 bytes) This is for reference only, editing it doesn't affect anything.
  9. -0xC3EFE0 = Ingame or not? (2 bytes)
  10. -0x47420 = 1P active (1 byte) Following 7 bytes are for other players. 0 = active, -1 = not active, 1 = online player. If you force a value to be 0 during campaign mode, players joining will start spectating as that slot instead of taking control of them
  11. -0x4741F = 2P active (1 byte)
  12. -0x4741E = 3P active (1 byte)
  13. -0x4741D = 4P active (1 byte)
  14. -0x4741C = 5P active (1 byte)
  15. -0x4741B = 6P active (1 byte)
  16. -0x4741A = 7P active (1 byte)
  17. -0x47419 = 8P active (1 byte)
  18. -0x47418 = Multiplayer mode (4 bytes) Follows same values as game mode. Always 0 during singleplayer.
  19. -0x473E8 = Player count (1 byte)
  20. -0x473E7 = Online or not? (1 byte)
  21. -0x4FC8 = Main menu option (4 bytes) Controls which main menu option is selected. Some functions check this to see what mode is active. This and following doesn't reflect specific menus, but rather the menu depth. For instance, mercs menu could also be survivors menu or siege menu.
  22. -0x4FC0 = Play game menu option (4 bytes)
  23. -0x4FB8 = Extra content menu option (4 bytes)
  24. -0x4FB0 = Mercs menu option (4 bytes)
  25. -0x4F8C = Multiplayer state (4 bytes) Bitflags? Always 0 during solo. Usually 1 during lobby. 2 during loading. 4 during ingame.
  26. -0x4F54 = Game mode (4 bytes) 30 = mercs, 80 = no mercy, 0 = Campaing / Agent hunt, 50 = survivors, 40 = onslaught, 60 = predator, 70 = siege
  27. -0x4F48 = Chapter select (4 bytes)
  28. -0x4F44 = Sub chapter select (4 bytes)
  29. -0x4A5C = Main local player (4 bytes) Only main player can restart game and exit
  30. -0x4A50 = 1P control (4 bytes) 0 = local, 1 = AI, 2 = network
  31. -0x4A4C = 2P control (4 bytes)
  32. -0x4A48 = 3P control (4 bytes)
  33. -0x4A44 = 4P control (4 bytes)
  34. -0x4A40 = 5P control (4 bytes)
  35. -0x4A3C = 6P control (4 bytes)
  36. -0x4A38 = 7P control (4 bytes)
  37. -0x4A34 = 8P control (4 bytes)
  38. -0x4A30 = 1P controller (4 bytes) Which local controller is being used. Probably an extra value somewhere defining if it's keyboard or a gamepad.
  39. -0x4A2C = 2P controller (4 bytes)
  40. -0x4A28 = 3P controller (4 bytes)
  41. -0x4A24 = 4P controller (4 bytes)
  42. -0x4A20 = 5P controller (4 bytes)
  43. -0x4A1C = 6P controller (4 bytes)
  44. -0x4A18 = 7P controller (4 bytes)
  45. -0x4A14 = 8P controller (4 bytes)
  46. -0x4A10 = 1P team (4 bytes)
  47. -0x4A0C = 2P team (4 bytes) Changing this for mercs turns friendly fire on.
  48. -0x4A08 = 3P team (4 bytes)
  49. -0x4A04 = 4P team (4 bytes)
  50. -0x4A00 = 5P team (4 bytes)
  51. -0x49FC = 6P team (4 bytes)
  52. -0x49F8 = 7P team (4 bytes)
  53. -0x49F4 = 8P team (4 bytes)
  54. -0x4918 = Versus Spawn pos # (4 bytes) Spawn position from STP.
  55. -0x4914 = Agent hunt Spawn pos # (4 bytes) Spawn position from STP.
  56. -0x4870 = Agent hunt Enemy type # (4 bytes) Enemy type. Taken from an EM file?
  57. -0x4798 = Screen mode default (4 bytes)
  58. -0x4794 = Screen mode current (4 bytes) 0 = normal, 1 = splitscreen, 3 = cutscene, 5 = partner view
  59. -0x4790 = Screen 1 (4 bytes)
  60. -0x478C = Screen 2 (4 bytes)
  61. -0x11B8 = Mercs multi state (4 bytes) 0 = solo, 1= online, 2 = splitscreen, 3 = showed 3 for a brief moment after selecting splitscreen
  62. -0x1184 = 1P character select (4 bytes)
  63. -0x1180 = 2P character select (4 bytes)
  64. -0x117C = 3P character select (4 bytes)
  65. -0x1178 = 4P character select (4 bytes)
  66. -0x1174 = 5P character select (4 bytes)
  67. -0x1170 = 6P character select (4 bytes)
  68. -0x116C = 7P character select (4 bytes)
  69. -0x1168 = 8P character select (4 bytes)
  70. -0x1104 = 1P ready (4 bytes) 0 = empty, 1 = joined, 2 = ready
  71. -0x1100 = 2P ready (4 bytes)
  72. -0x10FC = 3P ready (4 bytes)
  73. -0x10F8 = 4P ready (4 bytes)
  74. -0x10F4 = 5P ready (4 bytes)
  75. -0x10F0 = 6P ready (4 bytes)
  76. -0x10EC = 7P ready (4 bytes)
  77. -0x10E8 = 8P ready (4 bytes)
  78. -0x10E4 = 1P slot (4 bytes) (0 = locked, 1 = open, 2 = private, 3 = host) (3P to 8P slots needs to be locked for mercenaries mode to end properly)
  79. -0x10E0 = 2P slot (4 bytes)
  80. -0x10DC = 3P slot (4 bytes)
  81. -0x10D8 = 4P slot (4 bytes)
  82. -0x10D4 = 5P slot (4 bytes)
  83. -0x10D0 = 6P slot (4 bytes)
  84. -0x10CC = 7P slot (4 bytes)
  85. -0x10C8 = 8P slot (4 bytes)
  86. -0x10C4 = 1P spawn (4 bytes) (array after this are player IDs?)
  87. -0x10C0 = 2P spawn (4 bytes)
  88. -0x10BC = 3P spawn (4 bytes)
  89. -0x10B8 = 4P spawn (4 bytes)
  90. -0x10B4 = 5P spawn (4 bytes)
  91. -0x10B0 = 6P spawn (4 bytes)
  92. -0x10AC = 7P spawn (4 bytes)
  93. -0x10A8 = 8P spawn (4 bytes)
  94. -0xD7C = Mercenaries score (4 bytes) - Visual only?
  95. -0xD70 = Mercenaries score (4 bytes) - Real?
  96. -0xCAC = Versus - enemy type # (4 bytes) Enemy type. Taken from EM20 in survivors. Changing it doesn't seem to affect anything.
  97. -0x794 = Extra content modes timer (4 bytes)
  98. 0xBC = BGM volume (4 bytes)
  99. 0xC0 = SE volume (4 bytes)
  100. 0xC4 = VOICE volume (4 bytes)
  101. 0xC8 = CHAT volume (4 bytes)
  102. 0x412A4 = Stage (4 bytes)
  103. 0x412DC = P1 Kill count (2 bytes) In coop, this number can go abnormally high. Some kills must be counted for both player.
  104.         2 = Times died
  105.         4 = Total damage dealt (2 bytes) Instakill moves (back melees and some counters) deal add nothing to this count. 50,000 is max for this value.
  106.         6 = Total damage taken (2 bytes)
  107.         8 = Times helped by partner
  108.         A = Kills while dying?
  109.         C = Melee kills (2 bytes) This includes any type of melee kills.
  110.         E = Coup de Grace kills (2 bytes)
  111.         10 = Quick shot kills
  112.         12 = Counter kills (2 bytes)
  113.         14 = environmental kills
  114.         16 = kills with specific red barrel type
  115.         1C = head shot kills
  116.         1E = slide kills
  117.         20 = Gun kills (2 bytes)
  118.         22 = Knife kills
  119.         24 = Total grenade kills (2 bytes) Includes kills from any grenade type.
  120.         26 = Frag grenade kills (2 bytes)
  121.         28 = Fire grenade kills (2 bytes)
  122.         2A = Flash grenade kills
  123.         2C = Enemies flashed
  124.         30 = Kills while dying?
  125.         32 = Personal kill count? (2 bytes) Kill count not including indirect kills?
  126. 0x41394 = P2 Kill count (2 bytes)
  127. 0x4144C = P3 Kill count (2 bytes)
  128. 0x41504 = P4 Kill count (2 bytes)
  129. 0x415BC = P5 Kill count (2 bytes)
  130. 0x41674 = P6 Kill count (2 bytes)
  131. 0x4172C = P7 Kill count (2 bytes)
  132. 0x417E4 = P8 Kill count (2 bytes)
  133. 0x42D7C = 1P / Leon (2 bytes) In campaign mode each character is locked to a specific slot (Chris is always 3P, Leon is always 1P, etc). In other modes, host is always 1P and joining players take slots in order.
  134. 0x42DEC = 2P / Helena (2 bytes)
  135. 0x42E5C = 3P / Chris (2 bytes)
  136. 0x42ECC = 4P / Piers (2 bytes)
  137. 0x42F3C = 5P / Jake (2 bytes)
  138. 0x42FAC = 6P / Sherry (2 bytes)
  139. 0x4301C = 7P / Ada (2 bytes)
  140. 0x4308C = 8P / Agent (2 bytes)
  141.  
  142.  
  143.  
  144. -0x10A0 = 1P or 2P active or controller related? (4 bytes)
  145. -aa7cac = Ingame or not? (2 bytes)
  146. abab56 = Ingame or not? (2 bytes)
  147. -0x4A58 = Player count (4 bytes) 1 = 1 player, 3 = 2 players. This is bitflag. Each bit is for a player.
  148. 0x42DEE = 2P Starting health? (2 bytes) This is just after the 2P / Helena value.
  149. 0x41870 = Leon savegame info (array of shorts) Total size is 0x70. First 6 bytes are costume, current health and maximum health. After this are the player info for the other 7 characters.
  150. 0x42D7C = Leon info (array of shorts) Total size is 0x70. Not sure how this is used. Mercs maybe?
  151. There is yet another player info somewhere which is also 0x70 long and matches the above, but it changes position each time you load a stage. If you search for Leon's full info, the second last one is usually the valid one which changes stuff ingame.
  152.  
  153. 0x41892 = Leon assault rifle RN ammo (2 bytes) This is savegame version of value?
  154. 0x42D9E = Leon assault rifle RN ammo (2 bytes) What version of value is this?
  155.  
  156. ? = Times shouted next to door (4 bytes) Always 0 when not at door. Increases once with each partner call. (values before it are input status, a value just after or two after is a value which makes player spam a specific voice command)
  157. ? = Last voice command used (4 bytes)
  158.  
  159. Base pointer "Menu" = "BH6.exe"+014645F4
  160. 0x44 -> 0x220 = Menu Num (4 bytes)
  161. 0x44 -> 0x228 = Menu button amount (4 bytes)
  162. 0x44 -> 0x264 = Array with Id for each menu button (4 bytes each)
  163.  
  164. ? = Menu Id 1 (1 byte)
  165. ? = Menu Id 2 (1 byte)
  166. ? = Menu Id 3 (1 byte)
  167. ? = Menu Id 4 (1 byte)
  168.  
  169. ? = Menu Id 5 (1 byte)
  170. ? = Menu Id 6 (1 byte)
  171. ? = Menu Id 7 (1 byte)
  172. ? = Menu Id 8 (1 byte)
  173.  
  174.  
  175.  
  176. Position reference:
  177. Leon urban chaos: 5C 49 FD 43 80 6C 8E 3E 8A 2A 36 C5
  178. Leon steel beast: 0A BF 06 C6 30 03 E1 44 52 34 98 45
  179. Leon rail yard: EE DA 0A 45 34 33 C8 42 74 D3 5F 44 (starting near middle)
  180. Leon rail yard after climbing middle ladder: 37 25 26 44 0A 07 16 44 A6 BE C3 3E
  181.  
  182. Various reference:
  183.  
  184. Player character/costumes:
  185. 0000 (Leon USA)
  186. 0001 (Leon Asia)
  187. 0010 (Leon Costume 1)
  188. 0011 (Leon Costume 2)
  189. 0012 (Leon Retro)
  190. 0013 (Nick)
  191.  
  192. 0100 (Helena USA)
  193. 0101 (Helena Asia)
  194. 0102 (Helena carrying Deborah)
  195. 0110 (Helena Costume 1)
  196. 0111 (Helena Costume 2)
  197. 0112 (Helena Retro)
  198.  
  199. 0200 (Chris Asia)
  200. 0201 (Chris Europe)
  201. 0210 (Chris Costume 1)
  202. 0211 (Chris Costume 2)
  203. 0212 (Chris Retro)
  204. (Chris Bad)
  205. 0213 (Coach)
  206.  
  207. 0300 (Piers Asia?)
  208. 0301 (Piers Europe?)
  209. 0303 (Piers Canon)
  210. 0310 (Piers Costume 1)
  211. 0311 (Piers Costume 2)
  212. 0312 (Piers Retro)
  213. (Piers Personal)
  214. 0313 (Ellis)
  215.  
  216. 0400 (Jake Europe)
  217. 0401 (Jake Monitor)
  218. 0402 (Jake Asia)
  219. 0403 (Jake Snow)
  220. 0410 (Jake Costume 1)
  221. 0411 (Jake Costume 2)
  222. 0412 (Jake Retro)
  223.  
  224. 0500 (Sherry Europe)
  225. 0501 (Sherry Monitor)
  226. 0502 (Sherry China)
  227. 0503 (Sherry Snow)
  228. 0510 (Sherry Costume 1)
  229. 0511 (Sherry Costume 2)
  230. 0512 (Sherry Retro)
  231. 0513 (Rochelle)
  232.  
  233. 0600 (Ada normal)
  234. 0602 (Carla)
  235. 0610 (Ada Costume 1)
  236. 0611 (Ada Costume 2)
  237. 0612 (Ada Retro)
  238.  
  239. 0700 (Agent)
  240. 0702 (BSAA Rookie)
  241.  
  242. Player character select:
  243. 0 Leon
  244. 1 Leon costume 1
  245. 2 Leon costume 2
  246. 3 Leon retro
  247. 4 Helena
  248. 5 Helena costume 1
  249. 8 Chris
  250. 12 Piers
  251. 16 Jake
  252. 20 Sherry
  253. 24 Ada
  254. 28 Carla
  255. 29 Agent
  256. 30 Coach
  257. 31 Nick
  258. 32 Ellis
  259. 33 Rochelle
  260.  
  261. Menu ID 1-4:
  262. 01 ## 01 00 = campaign select
  263. 02 ## 01 00 = chapter select
  264. 03 ## 01 00 = difficulty/Screen type
  265. 04 ## 01 00 = campaign character select
  266. 05 ## 01 00 = system settings just before starting a campaign lobby
  267. 06 ## 01 00 = coop campaign lobby
  268. 02 0C 01 00 = splitscreen lobby (for mercs, no mercy and onslaught)
  269.  
  270. Menu ID 5-8:
  271. 02 03 02 01 = Extra content
  272. 02 03 01 01 = Play game
  273. 02 03 02 01 = Campaign
  274. 02 03 02 02 = Coop lobby (campaign)
  275.  
  276. Voice command IDs: (based on Leon)
  277. 00 = This way
  278. 01 = Wait
  279. 02 = Move in
  280. 03 = Come back here
  281. 04 = Sure
  282. 05 = Not right now
  283. 06 = Glad you're here
  284. 07 = I'm on my way
  285. 08 = Wish I could help / Sorry
  286. 09 = Roger
  287. 0A = Beautiful
  288. 0B = I need backup!
  289. 0C = You gotta help me!
  290. 0D = Helena / Hey
  291. 0E = C'mon
  292. 0F = I know already / Relax, okay
  293. 10 = Move
  294. 11 = Everything okay? / Okay, let's go. / You okay?
  295. 12 = Move your head! / Don't worry, I got your back!
  296. 13 = Hang in there. / I'm on my way.

Raw Paste

Login or Register to edit or fork this paste. It's free.