Here is rest of bank 2 and beginning of bank 3. Lots of oddities this time.
Here's the proven null variables (checked across three save games this time - which removed lots of false nulls) and compared to DLPBs chart:
Bank 2: 27-63 (37 bytes)
Bank 2: 71, 73 (2 bytes)
Bank 2: 82, 85-87 (4 bytes)
Bank 2: 95-97, 110, 112, 113, 114, 126 (8 bytes)
Bank 2: 138-159 (22 bytes)
Bank 2: 167, 187 (2 bytes)
Bank 2: 196-205 used in convil2, lastmap and end game battles but are all null most of time - could use them at certain points I guess
Bank 2: 226, 227, 242, 243, 246, 247, 250, 251, 254, 255 / Bank 3: 6, 18, 31 (13 bytes) *see note below about this row
These are the ones to be careful of (at least until we have more info):
Bank 2: 115-125 and 127-132 are listed as free/unused in DLPB's chart, but the savemap is stuffed with data here (lots of high numbers and such). Unless its some sort of garbage data?
*Bank 2: 240-255 are listed as being free when some of them are not. In fact I would be wary of using anything in that row (seems to vary tons across save games), DLPB has Bank 3: 6 and 18 listed as not free also. 31 might be OK to use.
And the ones that DLPB listed as occupied but which also appear null:
Bank 2: 30, 31, 73, 82, 85-87, 96, 112, 126, 167, 187