Native DB object trees
Frostbite’s native DB stores named or unnamed values in lists and objects. It carries the install manifest in
layout.toc behind the TOC envelope, and chunk metadata inside bundle manifests. It is distinct from
EBX. Observed
ProvenObservedSourcedInferredUnknownNot described
| Offset | Size | Type | Field | Confidence | Notes |
|---|---|---|---|---|---|
| 0x0 | 1 | u8 | node tag | Observed | Low five bits are type; bit 7 set means unnamed. Type zero terminates a container. |
| 0x1 | variable | cstring | optional name | Observed | Present only for a named non-terminator node; single-byte characters. |
| after optional name | variable | bytes | typed payload | Observed |
| Type | Payload | Confidence |
|---|---|---|
1, 2 |
List/object: variable-length byte count, children, optional zero terminator | Observed |
7, 19 |
String/blob: variable-length byte count followed by bytes | Observed |
6 |
One byte | Observed |
8, 11 |
Four bytes | Observed |
9, 12 |
Eight bytes | Observed |
15 |
Sixteen bytes | Observed |
16 |
Twenty bytes | Observed |
Lengths use seven payload bits per byte, least significant group first, with bit 0x80 indicating continuation.
Container lengths include their child data and any terminator. Type 8 carries little-endian u32 values such as
persistentIndex; string payloads can include a trailing zero. Observed