Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

3 Structure Examples

The following example depicts an FCIADS stream as an ADSStreamHeader (section 2.1) structure followed by two Normal Properties encoded as two ADSNonSecurePropertyHeader (section 2.5) structures.

 00000000 5F 0C EE 43 38 E0 1C 42-8A 3E AB 4E B1 16 61 24 *_..C8..B.>.N..a$*
 00000010 53 65 C6 80 73 17 DA CE-EB DB F4 99 B2 34 C9 01 *Se..s........4..*
 00000020 8A 00 00 00 00 00 00 00-00 00 00 00 02 00 00 00 *................*
 00000030 D8 AE 24 AF CF 9C 94 1F-01 00 00 00 08 00 00 00 *..$.............*
 00000040 36 00 00 00 2E 00 00 00-42 00 75 00 73 00 69 00 *6.......B.u.s.i.*
 00000050 6E 00 65 00 73 00 73 00-49 00 6D 00 70 00 61 00 *n.e.s.s.I.m.p.a.*
 00000060 63 00 74 00 00 00 48 00-42 00 49 00 00 00 07 00 *c.t...H.B.I.....*
 00000070 00 00 08 00 00 00 1C 00-00 00 18 00 00 00 50 00 *..............P.*
 00000080 49 00 49 00 00 00 31 00-00 00 *I.I...1...*
  
 Field    Name

 Offset

 Value

 VersionId

 0x00

 {43ee0c5f-e038-421c-8a3e-ab4eb1166124}

 Crc

 0x10

 0xceda1773`80c66553

 TimeStamp

 0x18

 0x01c934b2`99f4dbeb
 (2008-10-23   01:56:44)

 StreamLength

 0x20

 0x0000008a   (138 bytes)

 FirstFieldExtensionOffset

 0x24

 0x00000000

 Flags

 0x28

 0x00000000

 NonSecurePropertyCount

 0x2C

 0x00000002   (2)

 FileHash

 0x30

 0x1f949ccf`af24aed8

 -------------------------

 ------

 -------------------------------------

 Property   1 Type

 0x38

 0x00000001
 (FsrmPropertyDefinitionType_OrderedList)

 Property   1 Flags

 0x3C

 0x00000008
 (FsrmPropertyFlags_SetByClassifier)

 Property   1 Length

 0x40

 0x00000036
 (54   bytes)

 Property   1 ValueOffset

 0x44

 0x0000002e

 Property   1 Name

 0x48

 "BusinessImpact"

  

  

  

 Property   1 Value

 0x38
 +
 0x2E
 =
 0x66
  

 "HBI"

 -------------------------

 ------

 -------------------------------------

 Property   2 Type

 0x38
 +
 0x36
 =
 0x6E

 0x00000007
 (FsrmPropertyDefinitionType_Bool)

 Property   2 Flags

 0x72

 0x00000008
 (FsrmPropertyFlags_SetByClassifier)

 Property   2 Length

 0x76

 0x0000001c
 (28   bytes)

 Property   2 ValueOffset

 0x7A

 0x00000018

 Property   2 Name

 0x7E

 "PII"

 Property   2 Value

 0x6E
 +
 0x18
 =
 0x86

 "1"

  
Show:
© 2015 Microsoft