RSC7 resources
RSC7 wraps a typed resource in raw DEFLATE and two page descriptions. The decoded body contains system pages first,
then graphics pages. System pointers use base 0x50000000; graphics pointers use base 0x60000000.
Sourced · CodeWalker
Little-endian; the compressed body follows immediately.
| Offset | Size | Type | Field | Confidence | Notes |
|---|---|---|---|---|---|
| 0x0 | 4 | char[4] = RSC7 | magic | Sourced | |
| 0x4 | 4 | u32 | resource version | Sourced | |
| 0x8 | 4 | u32 | system page flags | Sourced | |
| 0xC | 4 | u32 | graphics page flags | Sourced |
RPF7 entries carry these flags directly. For an archived resource the high nibble of
the system flags supplies the version’s high nibble, and the high nibble of the graphics flags supplies its low
nibble: version = (systemFlags >> 28) * 16 + (graphicsFlags >> 28). Sourced · CodeWalker
Page flags
Section titled “Page flags”The page-size calculation is checked by decoding every one of the install’s 348,598 resource entries. Each body fills the flagged allocation or ends inside its final zero-filled page; a missing whole page is rejected. Proven · all archived resources
For either flag word, base = 512 << (flags & 15). Each count below contributes count * (base << shift) bytes;
their sum is that memory kind’s allocation size. Proven
| Flag bits | Count mask after shifting | Page-size shift | Confidence |
|---|---|---|---|
| 4 | 1 |
8 | Proven |
| 5–6 | 3 |
7 | Proven |
| 7–10 | 15 |
6 | Proven |
| 11–16 | 63 |
5 | Proven |
| 17–23 | 127 |
4 | Proven |
| 24 | 1 |
3 | Proven |
| 25 | 1 |
2 | Proven |
| 26 | 1 |
1 | Proven |
| 27 | 1 |
0 | Proven |
Some decoded streams end inside the last allocated page; its remaining bytes are zero-filled. The full-resource census distinguishes this short final page from a body missing an entire page. Proven
A graphics offset can exceed 256 MiB and yield a pointer starting with 0x7; classifying graphics pointers only by
the leading hexadecimal digit loses that range. Observed
Enhanced payload versions
Section titled “Enhanced payload versions”The version table comes from the full archive/resource census, including all archived copies. It establishes the versions of the accepted Enhanced layouts, rather than claiming that no other version exists in the install. Proven · all archived copies
| Payload | Version | Confidence |
|---|---|---|
Drawable (ydr) and drawable dictionary (ydd) |
159 | Proven |
Fragment (yft) |
171 | Proven |
Texture dictionary (ytd) |
5 | Proven |
Clip dictionary (ycd) |
46 | Proven |
Other layout versions can occur in the same physical install. A census that counts Legacy or older-tool variants without decoding them does not establish those variants’ payload layouts. Proven