I don't see 914h and 918h in the codes I looked at?
My above 0x120 and 0x138 are NO wdf IDs, but internal data block sizes/pointer!
This project is possible, but quite some work (which IMHO is not justified for this feature). So the approach by TC/Flocke sounds better.
595BD4 wdf_IDs__LoadSave_Screen 595BCC UI_LoadSave_Screen__3C8_bytes +0-17h screen data ? +18h start of 24 byte save slot data (12*24 bytes) -> one dword entry is wdf ID for slot +138h start of 50 byte ingame save description strings (12*50 bytes) +390h selected object ID (-1 none)? +394h start of another 50 bytes active text string ? sub_4F0250 loadsave_ESP -> esp locations (default size E60h)