For Dungeons & Dragons: Eye of the Beholder GBA game. Hacking Guide V1.0 Originally created 12/2/2002 Also posted in the GameFaqs message board at around the same time. Section 1: D&D Character Memory Blocks and Intro Section 2: Byte by Byte Section 3: Character Block Address Table Section 4: Race Code Table Section 5: Alignment Code Table Section 6: Feats Section 7: Item Code Table Section 8: Spell Code Table Credits and Misc. ____________________________ Section 1: D&D Character Memory Blocks and Intro ____________________________ Disclaimer: I'm not in any way responsible for what you do to your saved games or your games in general. Don't flame or spam me for any damage you've done to yourself :p Onwards... In D&D:EoB, characters are stored in memory blocks which I call character memory blocks. Each character memory block uses approximately 304 bytes worth of data. (I hope I counted right) Every byte controls every item, skill, spell, level, exp, and feats of that character. Character memory blocks correspond to the order in which the characters are listed at the Recruiter. Even the characters that you run across on your adventures that you can also recruit can be found here and listed along with the pre-set or rolled characters. I assume there's a limit to how many characters you can roll or create, I haven't went THAT far, so don't ask me :p If anyone took a look at the Zoids GBA Hacking Guide in the same GameFaqs, you'll notice resemblance between this and that one. Yes, I structured it similarly because the memory blocks themselves are rather similar. One thing to note: Even if you remove a character from your party, that character still remains existant and counts in the number of character memory blocks. (a difference in these memory blocks compared to Zoids memory blocks, thank god) ____________________________ Section 2: Byte by Byte ____________________________ Here's the breakdown of the main bytes for a character memory block. Byte numbering is not random by any means, and the value in parenthesis is the address for the first rolled character you've created. Note that since I don't know whether or not there exists a byte before this section that affects the character, the first byte I've listed might not be the actual first byte... But for all intents and purposes, they are in here :p Byte 0 (03002648) STR CURRENT Byte 1 (03002649) STR MAX Byte 2 (0300264a) INT CURRENT Byte 3 (0300264b) INT MAX Byte 4 (0300264c) WIS CURRENT Byte 5 (0300264d) WIS MAX Byte 6 (0300264e) DEX CURRENT Byte 7 (0300264f) DEX MAX Byte 8 (03002650) CON CURRENT Byte 9 (03002651) CON MAX Byte 10 (03002652) CHA CURRENT Byte 11 (03002653) CHA MAX Byte 12 (03002654) Cleric level Byte 13 (03002655) Fighter level Byte 14 (03002656) Rogue Level Byte 15 (03002657) Wizard Level Bytes 16-19 (03002658) EXP Byte 20 (0300265c) hp CURRENT Byte 21 (0300265d) hp MAX Byte 22 (0300265e) turns per day CURRENT Byte 23 (0300265f) turns per day MAX Byte 24 (03002660) race code (see below) Byte 25 (03002661) alignment code (see below) Byte 26 (03002662) gender (see below) Byte 27 (03002663) base AC Byte 28 (03002664) face Byte 29 (03002665) miniature pic Byte 30 (03002666) Appraise (SKILL RANKS upto 0300267a) Byte 31 (03002667) Bluff Byte 32 (03002668) Climb Byte 33 (03002669) Concentration Byte 34 (0300266a) Decipher Script Byte 35 (0300266b) Diplomacy Byte 36 (0300266c) Disable Device Byte 37 (0300266d) Escape Artist Byte 38 (0300266e) Forgery Byte 39 (0300266f) Heal Byte 40 (03002670) Hide Byte 41 (03002671) Intimidate Byte 42 (03002672) Intuit Direction Byte 43 (03002673) Listen Byte 44 (03002674) Open Lock Byte 45 (03002675) Search Byte 46 (03002676) Sense Motive Byte 47 (03002677) Spellcraft Byte 48 (03002678) Spot Byte 49 (03002679) Tumble Byte 50 (0300267a) Use Magic Device Bytes 51-59 (0300267b) *Unknown Byte 60 (03002684) Feats (see below) Byte 61 (03002685) Feats Byte 62 (03002686) Feats Byte 63 (03002687) *Unknown Byte 64 (03002688) Equipment - Body - Item Code (see below) Byte 65 (03002689) *Unknown Byte 66 (0300268a) Equipment - Right Hand Byte 67 (0300268b) *Unknown Byte 68 (0300268c) Equipment - Left Hand Byte 69 (0300268d) *Unknown Byte 70 (0300268e) Equipment - Quiver Byte 71 (0300268f) *Unknown Byte 72 (03002690) Equipment - Head Byte 73 (03002691) *Unknown Byte 74 (03002692) Equipment - Neck Byte 75 (03002693) *Unknown Byte 76 (03002694) Equipment - Right Fingers Byte 77 (03002695) *Unknown Byte 78 (03002696) Equipment - Left Fingers Byte 79 (03002697) *Unknown Byte 80 (03002698) Equipment - Arms Byte 81 (03002699) *Unknown Byte 82 (0300269a) Equipment - Arms Byte 83 (0300269b) *Unknown Byte 84 (0300269c) Inventory slot #1 Byte 85 (0300269d) *Unknown Byte 86 (0300269e) Inventory slot #2 Byte 87 (0300269f) *Unknown Byte 88 (030026a0) Inventory slot #3 Byte 89 (030026a1) *Unknown Byte 90 (030026a2) Inventory slot #4 Byte 91 (030026a3) *Unknown Byte 92 (030026a4) Inventory slot #5 Byte 93 (030026a5) *Unknown Byte 94 (030026a6) Inventory slot #6 Byte 95 (030026a7) *Unknown Byte 96 (030026a8) Inventory slot #7 Byte 97 (030026a9) *Unknown Byte 98 (030026aa) Inventory slot #8 Byte 99 (030026ab) *Unknown Byte 100 (030026ac) Inventory slot #9 Byte 101 (030026ad) *Unknown Byte 102 (030026ae) Inventory slot #10 Byte 103 (030026af) *Unknown Byte 104 (030026b0) Inventory slot #11 Byte 105 (030026b1) *Unknown Byte 106 (030026b2) Inventory slot #12 Byte 107 (030026b3) *Unknown Byte 108 (030026b4) Inventory slot #13 Byte 109 (030026b5) *Unknown Byte 110 (030026b6) Inventory slot #14 Byte 111 (030026b7) *Unknown Byte 112 (030026b8) Inventory slot #15 Byte 113 (030026b9) *Unknown Byte 114 (030026ba) Inventory slot #16 Byte 115 (030026bb) *Unknown Byte 116 (030026bc) Arcane Spellbook - Spellbook Code (see below) Byte 117 (030026bd) Arcane Spellbook Byte 118 (030026be) Arcane Spellbook Byte 119 (030026bf) Arcane Spellbook Byte 120 (030026c0) Arcane Spellbook Byte 121 (030026c1) Arcane Spellbook Byte 122 (030026c2) Arcane Spellbook Byte 123 (030026c3) Arcane Spellbook Byte 124 (030026c4) Arcane Spellbook Byte 125 (030026c5) Arcane Spellbook Byte 126 (030026c6) Arcane Spellbook Byte 127 (030026c7) *Unknown Byte 128 (030026c8) *Unknown Byte 129 (030026c9) *Unknown Byte 130 (030026ca) *Unknown Byte 131 (030026cb) *Unknown Byte 132 (030026cc) Divine Spells Section Byte 133 (030026cd) Arcane Spells Section Byte 134 (030026ce) *Unknown Byte 135 (030026cf) *Unknown Byte 136-295? (030026d0) Spell Slots - #1-160 Byte 296-302 (03002770) Spell Slots??? - #161-7 Byte 303 (03002777) Spell Slots??? - #168 Race Code - The code that denotes what race the character is. For further information, exact values and their meanings, see Section 4. Alignment Code - The code that denotes what alignment the character is. For further information, exact values, and their meanings, see Section 5. Gender - 0 for male, 1 for female Feats - Just three bytes for all the combinations of Feats your character could have... For further information, exact values, and their meanings, see Section 6. Item Code - The code that the game uses to distinguish the items your character wears or has. See Section 7 for more info. Spellbook Code - Eleven bytes for all the combinations of spells (both Cleric and Wizard) your character could have... For further information, exact values, and their meanings, see Section 8. Arcane Spells Section - It seems that the game stores all the spells first in this section (both Cleric and Wizard spells), the value in this byte equals to the number of the Cleric and Wizard spells you have readied. (?) Divine Spells Section - After the spells are stored in the Arcane Spells section, then the game shifts cleric spells over to this section. The value in this section equals to the number of spells shifted over from the Arcane Spells section, any remaining spells left in there are left alone. Spell Slots - I will generalize them as Arcane spells because of the fact that all spells would appear in the Arcane Spells Section if the Divine's value was 0. The values in these spell slots correspond to the name of the spell... WARNING: It seems that you CAN possibly have 160+ spells under your belt, up until 255, but the main problem is that this will override/overflow into the next character's memory block. To avoid doing so, limit yourself to within 160 spells for safety measures. ____________________________ Section 3: Character Block Address Table ____________________________ Remember, this is the beginning of each character memory block. Apply all hexadecimal rules to get to the address of your choice. I haven't tested most of the blocks, so use with caution, and always have a backup save file before attempting. I've only listed the first 20 memory blocks and their first addresses, if you rolled/encounted more characters and the list is longer, just follow the pattern and add as necessary. #1 - 3002188 #2 - 30022b8 #3 - 30023e8 #4 - 3002518 #5 - 3002648 #6 - 3002778 #7 - 30028a8 #8 - 30029d8 #9 - 3002b08 #10 - 3002c38 #11 - 3002d68 #12 - 3002e98 #13 - 3002fc8 #14 - 30030f8 #15 - 3003228 #16 - 3003358 #17 - 3003488 #18 - 30035b8 #19 - 30036e8 #20 - 3003818 ____________________________ Section 4: Race Code Table ____________________________ Self-explanatory. The values 0 through 6 are the ordinary values used in the game, the values beyond that seems to be available, experiment with them and see what you find out :) Race: 0 - human 1 - shield dwarf 2 - moon elf 3 - rock gnome 4 - half-elf 5 - Lf. Halfling 6 - Half-Orc 7 - Cleric....(???) 8 - Fighter 9 - Rogue 10 - Wizard 11 - Lawful Good....(??? etc.) ____________________________ Section 5: Alignment Code Table ____________________________ Similar in nature to the Race Codes, 0 through 8 are the values used ordinarily by the game. Alignment: 0 - Lawful Good 1 - Lawful Neutral 2 - Lawful Evil 3 - Neutral Good 4 - Neutral 5 - Neutral Evil 6 - Chaotic Good 7 - Chaotic Neutral 8 - Chaotic Evil 9 - Strength....(???) 10 - Dexterity (etc.) ____________________________ Section 6: Feats ____________________________ Now, this is the second longest section in this series. Each of the three bytes (#60, 61, 62) that enable your character to use Feats work in a very tedious way. You'll see why when you look at the pattern. I will list only a part of the pattern in the first byte, and for the other two bytes, I will only list the first and the last values. Byte 60 --------- 0 - none 1 - alertness 2 - armor prof. (heavy) 3 - alertness + armor prof. (heavy) 4 - armor prof. (light) 5 - alertness + armor prof. (light) 6 - armor prof. (heavy) + armor prof. (light) 7 - alertness + armor prof. (heavy) + armor prof. (light) 8 - armor prof. (med) 9 - alertness + armor prof. (med) 10 - armor prof. (heavy) + armor prof. (med) 11 - alertness + armor prof. (heavy) + armor prof. (med) 12 - armor prof. (light) + armor prof. (med) 13 - alertness + armor prof. (light) + armor prof. (med) 14 - armor prof. (heavy) + armor prof. (light) + armor prof. (med) 15 - alertness + armor prof. (heavy) + armor prof. (light) + armor prof. (med) 16 - combat casting 17 - ..... 24 - ..... 25 - alertness + armor prof. (heavy) + armor prof. (light) + combat casting 26 - ..... 30 - armor prof. (heavy) + armor prof. (light) + armor prof. (med) + combat casting 40 - armor prof. (med) + combat reflexes 50 - armor prof. (heavy) + combat casting + combat reflexes 70 - armor prof. (heavy) + armor prof. (light) + exotic weapon prof. 90 - armor prof. (heavy) + armor prof. (med) + combat casting + exotic weapon prof. 100 - armor prof. (light) + combat reflexes + exotic weapon prof. 140 - armor prof. (light) + armor prof. (med) + extra turning 180 - armor prof. (light) + combat casting + combat reflexes + extra turning 255 - alertness + armor prof. (heavy) + armor prof. (light) + armor prof. (med) + combat casting + combat reflexes + exotic weapon prof. + extra turning Byte 61 --------- 0 - none 255 - great fortitude + improved initiative + iron will + lightning reflexes + martial weapon prof. + point blank shot + precise shot + quick draw Byte 62 --------- 0 - none 255 - rapid shot + scribe scroll + shield prof. + simple weapon prof. + smooth talk + thug + toughness + weapon finesse ____________________________ Section 7: Item Code Table ____________________________ Just as exactly as it appears in your equipment. Each one of the known ones can be placed on any equipped slot, whether or not they'll work on inventory or potion slots is a whole different matter and I won't go that far yet. Also, they are not tested to see if they can actually be usable/re-equippable/removable/etc, they are only tested to see whether they'll cause automatic crashes to your game. Use at discretion. 0 - Empty 1 - Light Mace 2 - Club 3 - Halfspear 4 - Heavy Mace 5 - Morning Star 6 - Shortspear 7 - Light Crossbow 8 - Poison Blow-dart 9 - Sling 10 - Heavy Crossbow 11 - Throwing Axe 12 - Light Hammer 13 - Handaxe 14 - Light Pick 15 - Short Sword 16 - Battleaxe 17 - Light Flail 18 - Longsword 19 - Heavy Pick 20 - Rapier 21 - Scimitar 22 - Trident 23 - Warhammer 24 - Falchion 25 - Heavy Flail 26 - Greataxe 27 - Greatclub 28 - Greatsword 29 - Shortbow 30 - Composite Shortbow 31 - Longbow 32 - Composite Longbow 33 - Kukri 34 - Bastard Sword 35 - Dwarven Waraxe 36 - Hand Crossbow 37 - Crossbow Bolts 38 - Sling Bullets 39 - Arrows 40 - Padded Armor 41 - Leather Armor 42 - Studded Leather 43 - Chain Shirt 44 - Hide Armor 45 - Scale Mail 46 - Chainmail 47 - Breastplate 48 - Splint Mail 49 - Banded Mail 50 - Half-Plate 51 - Full Plate 52 - Buckler 53 - Sml Wooden Shield 54 - Small Metal Shield 55 - Lrg Wooden Shield 56 - Lrg Metal Shield 57 - Light Mace +1 58 - Skeleton Claw 59 - Zombie Slam 60 - Silver Key 61 - Gold Key 62 - Stone Key 63 - Potn: Cure Lt Wnd 64 - Dagger +1 65 - Longsword +1 66 - Mwk Falchion 67 - Dagger 68 - Scrl: Sleep 69 - Scrl: Cure Lt Wnd 70 - Mithral Chainmail 71 - Red Gem 72 - Ring of Pro + 1 73 - Wand of Aganazzar 74 - Banedead Claw 75 - Vampire Slam 76 - Bandead Bite 77 - Blood Key 78 - Dagger +2 79 - Light Mace +2 80 - Longsword +2 81 - Spider Bite 82 - Scrl: Web 83 - Potn: N. Poison 84 - Scrl: Spiderclimb 85 - Scrl: Acid Arrow 86 - Scrl: Flame Arrow 87 - Potn: L. Restore 88 - Longbow +1 89 - Studded Leather +1 90 - Stone Sceptre 91 - Battleaxe +3 Keen 92 - Scrl: Snow Storm 93 - Scrl: Invis. Prg 94 - Scrl: Hold Person 95 - Stone Necklace 96 - Scrl: Cat's Grace 97 - Stone Ring 98 - Stone Medallion 99 - Stone Holy Symbol 100 - Stone Orb 101 - Stone Dagger 102 - Stone Gem 103 - Non-Descript Vile 104 - Scrl: Invis. 105 - Wand: Mgc Misl 106 - Boots of Striding 107 - Holy Symbol 108 - Kuo-Toa Bite 109 - Trident +1 110 - Scrl: Knock 111 - Lrg Mtl Shield + 1 112 - Kuo-Toa Tadpoles 113 - Writ of Passage 114 - Scrl: Fireball 115 - Ring:Fire Resist. 116 - Mrgstar +2 Frost 117 - Chainmail +2 118 - A Sliver of Bone 119 - A Piece of Glass 120 - A Bar of Steel 121 - A Splinter of Wood 122 - A Chunk of Rock 123 - Drow Poison Dart 124 - Scrl: L. Restore 125 - Lrg Mithral Shield 126 - Longsword +3 127 - Half-Plate +2 128 - Wand of Lightning 129 - Drow Key A 130 - Jeweled Key 131 - Scrl: Vamp. Touch 132 - Cloak:Resistance 133 - Drider's Bite 134 - Hell Hound's Bite 135 - Full Plate +1 136 - Full Plate +1 137 - Wood Key 138 - Drow Boots 139 - Rust Monster Bite 140 - Rust Monster Ant 141 - Displacer Tentacle 142 - Displacer Bite 143 - Vial:Murky Liquid 144 - Vile:Milky Liquid 145 - Scrl: Raise Dead 146 - Wand of Fireball 147 - Maul 148 - Maul +1 149 - Lrg Wood Shield +2 150 - Arrows Shock 151 - Ghaunadanpod 152 - Xanathar Bite 153 - Arrow +2 154 - Robe of Pro +1 155 - Mithral Key 156 - Elixer of Life 157 - Crimson-red Key 158 - Mwk Scale Mail 159 - Wand of Knock 160 - Gem (Moss Agate) 161 - Gem (Fire Opal) 162 - Gem (Onyx) 163 - Scrl: Infl Mnr Wnd 164 - Scrl: Cause Fear 165 - Scrl: Infl Lt Wnd 166 - Dagger of Venom 167 - Red Glass Key 168 - Gauntlets +1 169 - Sml Mtl Shield +1 170 - Blue cell key 171 - Grey cell key 172 - Orange cell key 173 - Pink cell key 174 - Green cell key 175 - Brown cell key 176 - Black cell key 177 - White cell key 178 - Crystal key 179 - Rusted Iron key 180 - Blessed Wand 181 - Magical Cap 182 - Magical Cape 183 - A Rotten Turnip 184 - Spider Key 185 - Drow Key 186 - Scrl: Mage Armor 187 - Scrl: Charm Prsn 188 - Scrl: Invis 189 - Scrl: Acid Splsh 190 - Scrl: R. Frost 191 - Wand: Faith Shield 192 - Yellow Glass Key 193 - Pearl Key 194 - Unarmed Strike 195 - Blowgun 196 - Bone Key 197 - Hvy Mace +1 198 - Xanathar Key 199 - Blank Scroll 200 - Scribed Scroll 201 - Scrl: Feather Fall 202 - Scrl: Aganzr Scor 203 - Scrl: Blur 204 - Scrl: Eagle Splend 205 - Scrl: Ghoul Touch 206 - Scrl: Dispel Magic 207 - Scrl: Light Bolt 208 - Scrl: Remove Curse 209 - Scrl: Cloudkill 210 - Scrl: Cone of Cold 211 - Scrl: Domin Person 212 - Scrl: Feeblemind 213 - Scrl: Hold Monster 214 - Potn: Cure Ser Wnd 215 - Potn: Pro Neg Enrg 216 - Potn: R. Blnd/Deaf 217 - Potn: Remove Curse 218 - Potn: Bull's Str 219 - Potn: Cat's Grace 220 - Wand of Silvas 221 - Blowgun Dart 222 - DAT 223 - (empty) 224 - # # 225 - (empty) 226 - DAT 227 - (empty) 228 - 1 229 - DAT 230 - (empty) 231 - (empty) 232 - apon 233 - (empty) 234 - (empty) 235 - (empty) 236 - (empty) 237 - (empty) 238 - (emtpy) 239 - (empty) 240 - (empty) 241 - (empty) 242 - (empty) 243 - (empty) 244 - (empty) 245 - (empty) 246 - (empty) 247 - (empty) 248 - (empty) 249 - ( 250 - Kobold Swordsman 251 - (empty) 252 - (empty) 253 - (empty) 254 - (empty) All spots marked with (empty) literally have no item names, I haven't tested to see if they actually have affect on the character, any spots marked with anything other than (empty) contains the item name as indicated. #156 I believe is the fake Elixer of Life, just as a warning. Test it yourself with an experimental character. ____________________________ Section 8: Spell Code Table ____________________________ The pattern and format is the same as the feats, so I'll make it simple enough and list only the first and last values (listing all 255 combinations on each of the 11 bytes is tedious and a waste of time and space...). Note: The repeat of "Hand of Pronto" in byte 119, 121, 123, and 125 is not a mistake, it seriously DOES appear multiple times... The spelling error of "Neutralize Poision" in byte 124 is also not my mistake, I simply copied what exactly appeared on the screen. Byte 116 --------- 0 - None 255 - Cure Minor Wounds + Inflict Minor Wounds + Feather Fall + Resistance + Virtue + Ray of Frost + Acid Splash + Electric Jolt Byte 117 --------- 0 - None 255 - Bane + Bless + Cause Fear + Cure Light Wounds + Doom + Inflict Light Wounds + Spider Climb + Protection from Chaos Byte 118 --------- 0 - None 255 - Protection from Law + Protection from Good + Protection from Evil + Remove Fear + Shield of Faith + Cone of Cold + Mage Armor + Detect Secret Door Byte 119 --------- 0 - None 255 - True Strike + Charm Person + Sleep + Magic Missile + Ray of Enfeeblement + Hand of Pronto + Aid + Bull's Strength Byte 120 --------- 0 - None 255 - Cure Moderate Wound + Divine Favor + Endurance + Hold Person + Inflict Mod. Wound + Lesser Restoration + Remove Paralysis + Melf's Acid Arrow Byte 121 --------- 0 - None 255 - Web + Blur + Hand of Pronto + Ghoul Touch + Scare + Cat's Grace + Knock + Curse of Ill Fortunes Byte 122 --------- 0 - None 255 - Spell Shield + Aganazzar's Scorcher + Gedlee's Elec. Loop + Snilloc's Snow. Swarm + Eagle's Splendor + Bestow Curse + Blindness + Deafness Byte 123 --------- 0 - None 255 - Cure Serious Wounds + Dispel Magic + Inflict Serious Wound + Hand of Pronto + Negative Energy Pro. + Remove Blind/Deaf + Flame Arrow + Stinking Cloud Byte 124 --------- 0 - None 255 - Hold Monster + Fireball + Lightning Bolt + Vampiric Touch + Cure Critical Wounds + Inflict Crit. Wound + Neutralize Poision + Poison Byte 125 --------- 0 - None 255 - Restoration + Remove Curse + Stoneskin + Ice Storm + Hand of Pronto + Enervation + Fear + Circle of Doom Byte 126 --------- 0 - None 255 - Flame Strike ____________________ Credits and Misc. ____________________ Most of the credit goes to the creators of this wonderful and fun RPG game :) And for GameFaqs and everyone in the boards. Also, as I've mentioned in Section 1, the FAQ structure is not mine. That credit goes to Soren Kanzaki for his very in-depth FAQ. Version 1.0 Originally created 12/2/2002 This is the only hacking FAQ version I'll make unless there's anything needed to be fixed. Sorry for the very long delay of actually submitting this... didn't think the one I posted in the msg boards were only temporary. Constructive criticism welcome at knight8183@yahoo.com . And please, no hate mails :p Copytrighted 2003 by Knight8183