You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
469 lines
100 KiB
469 lines
100 KiB
{\rtf1\ansi\ansicpg1252\uc1 \deff0\deflang1033\deflangfe1033{\fonttbl{\f0\froman\fcharset0\fprq2{\*\panose 02020603050405020304}Times New Roman;}{\f1\fswiss\fcharset0\fprq2{\*\panose 020b0604020202020204}Arial{\*\falt Helvetica};}{\f2\fmodern\fcharset0\fprq1{\*\panose 02070309020205020404}Courier New;}{\f3\froman\fcharset2\fprq2{\*\panose 05050102010706020507}Symbol;}{\f4\froman\fcharset0\fprq2{\*\panose 00000000000000000000}Times;}{\f5\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}Helvetica;}{\f6\fmodern\fcharset0\fprq1{\*\panose 00000000000000000000}Courier;}{\f7\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}Geneva;}{\f8\froman\fcharset0\fprq2{\*\panose 00000000000000000000}Tms Rmn;}{\f9\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}Helv;}{\f10\froman\fcharset0\fprq2{\*\panose 00000000000000000000}MS Serif;}{\f11\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}MS Sans Serif;}{\f12\froman\fcharset0\fprq2{\*\panose 00000000000000000000}New York;}{\f13\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}System;}{\f14\fnil\fcharset2\fprq2{\*\panose 05000000000000000000}Wingdings;}{\f15\fswiss\fcharset0\fprq2{\*\panose 020b0604030504040204}Tahoma;}{\f16\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}AvantGarde;}{\f17\froman\fcharset0\fprq2{\*\panose 00000000000000000000}ITC Bookman;}{\f18\fswiss\fcharset0\fprq2{\*\panose 00000000000000000000}Helvetica-Narrow;}{\f19\froman\fcharset0\fprq2{\*\panose 00000000000000000000}NewCenturySchlbk;}{\f20\froman\fcharset0\fprq2{\*\panose 00000000000000000000}Palatino;}{\f21\froman\fcharset0\fprq2{\*\panose 00000000000000000000}ZapfChancery;}{\f22\fdecor\fcharset2\fprq2{\*\panose 00000000000000000000}ZapfDingbats;}{\f23\fnil\fcharset2\fprq2{\*\panose 00000000000000000000}Marlett;}{\f24\fmodern\fcharset0\fprq1{\*\panose 020b0609040504020204}Lucida Console;}{\f25\fswiss\fcharset0\fprq2{\*\panose 020b0602030504020204}Lucida Sans Unicode;}{\f26\fswiss\fcharset0\fprq2{\*\panose 020b0506020202030204}Arial Narrow;}{\f27\fswiss\fcharset0\fprq2{\*\panose 020b0a04020102020204}Arial Black;}{\f28\fswiss\fcharset0\fprq2{\*\panose 020f0704030504030204}Arial Rounded MT Bold;}{\f29\froman\fcharset0\fprq2{\*\panose 02040602050305030304}Book Antiqua;}{\f30\froman\fcharset0\fprq2{\*\panose 02050604050505020204}Bookman Old Style;}{\f31\fswiss\fcharset0\fprq2{\*\panose 020b0502020202020204}Century Gothic;}{\f32\froman\fcharset0\fprq2{\*\panose 02040604050505020304}Century Schoolbook;}{\f33\fnil\fcharset2\fprq2{\*\panose 01010601010101010101}Monotype Sorts;}{\f34\fswiss\fcharset0\fprq2{\*\panose 020b0706040902060204}Haettenschweiler;}{\f35\fdecor\fcharset0\fprq2{\*\panose 04020705040a02060702}Algerian;}{\f36\fdecor\fcharset0\fprq2{\*\panose 04030b070d0b02020403}Braggadocio;}{\f37\fswiss\fcharset0\fprq2{\*\panose 020b0903060703020204}Britannic Bold;}{\f38\fscript\fcharset0\fprq2{\*\panose 03060802040406070304}Brush Script MT;}{\f39\fdecor\fcharset0\fprq2{\*\panose 04020805060202030203}Colonna MT;}{\f40\fdecor\fcharset0\fprq2{\*\panose 04020505020e03040504}Desdemona;}{\f41\froman\fcharset0\fprq2{\*\panose 0204060206030a020304}Footlight MT Light;}{\f42\froman\fcharset0\fprq2{\*\panose 02020404030301010803}Garamond;}{\f43\fswiss\fcharset0\fprq2{\*\panose 020b0806030902050204}Impact;}{\f44\fdecor\fcharset0\fprq2{\*\panose 040307050d0c02020703}Kino MT;}{\f45\froman\fcharset0\fprq2{\*\panose 020a0a07050505020404}Wide Latin;}{\f46\fscript\fcharset0\fprq2{\*\panose 03020802060602070202}Matura MT Script Capitals;}{\f47\fdecor\fcharset0\fprq2{\*\panose 040506030a0602020202}Playbill;}{\f48\fswiss\fcharset0\fprq2{\*\panose 020b0506030101010103}Abadi MT Condensed;}{\f49\froman\fcharset2\fprq2{\*\panose 05020102010507070707}Wingdings 2;}{\f50\froman\fcharset2\fprq2{\*\panose 05040102010807070707}Wingdings 3;}{\f51\fnil\fcharset2\fprq2{\*\panose 05000000000000000000}MS Outlook;}{\f52\fscript\fcharset0\fprq2{\*\panose 030f0702030302020204}Comic Sans MS;}{\f53\froman\fcharset2\fprq2{\*\panose 05050102010706020507}Bookshelf Symbol 3;}{\f54\fswiss\fcharset0\fprq2{\*\panose 020b0604030504040204}Verdana;}{\f55\fnil\fcharset0\fprq1{\*\panose 00000000000000000000}Small Fonts;}{\f56\froman\fcharset238\fprq2 Times New Roman CE;}{\f57\froman\fcharset204\fprq2 Times New Roman Cyr;}{\f59\froman\fcharset161\fprq2 Times New Roman Greek;}{\f60\froman\fcharset162\fprq2 Times New Roman Tur;}{\f61\froman\fcharset186\fprq2 Times New Roman Baltic;}{\f68\fmodern\fcharset238\fprq1 Courier New CE;}{\f69\fmodern\fcharset204\fprq1 Courier New Cyr;}{\f71\fmodern\fcharset161\fprq1 Courier New Greek;}{\f72\fmodern\fcharset162\fprq1 Courier New Tur;}{\f73\fmodern\fcharset186\fprq1 Courier New Baltic;}{\f146\fswiss\fcharset238\fprq2 Tahoma CE;}{\f147\fswiss\fcharset204\fprq2 Tahoma Cyr;}{\f149\fswiss\fcharset161\fprq2 Tahoma Greek;}{\f150\fswiss\fcharset162\fprq2 Tahoma Tur;}{\f151\fswiss\fcharset186\fprq2 Tahoma Baltic;}{\f200\fmodern\fcharset238\fprq1 Lucida Console CE;}{\f201\fmodern\fcharset204\fprq1 Lucida Console Cyr;}{\f203\fmodern\fcharset161\fprq1 Lucida Console Greek;}{\f204\fmodern\fcharset162\fprq1 Lucida Console Tur;}{\f206\fswiss\fcharset238\fprq2 Lucida Sans Unicode CE;}{\f207\fswiss\fcharset204\fprq2 Lucida Sans Unicode Cyr;}{\f209\fswiss\fcharset161\fprq2 Lucida Sans Unicode Greek;}{\f210\fswiss\fcharset162\fprq2 Lucida Sans Unicode Tur;}{\f212\fswiss\fcharset238\fprq2 Arial Narrow CE;}{\f213\fswiss\fcharset204\fprq2 Arial Narrow Cyr;}{\f215\fswiss\fcharset161\fprq2 Arial Narrow Greek;}{\f216\fswiss\fcharset162\fprq2 Arial Narrow Tur;}{\f217\fswiss\fcharset186\fprq2 Arial Narrow Baltic;}{\f218\fswiss\fcharset238\fprq2 Arial Black CE;}{\f219\fswiss\fcharset204\fprq2 Arial Black Cyr;}{\f221\fswiss\fcharset161\fprq2 Arial Black Greek;}{\f222\fswiss\fcharset162\fprq2 Arial Black Tur;}{\f223\fswiss\fcharset186\fprq2 Arial Black Baltic;}{\f236\froman\fcharset238\fprq2 Bookman Old Style CE;}{\f237\froman\fcharset204\fprq2 Bookman Old Style Cyr;}{\f239\froman\fcharset161\fprq2 Bookman Old Style Greek;}{\f240\froman\fcharset162\fprq2 Bookman Old Style Tur;}{\f241\froman\fcharset186\fprq2 Bookman Old Style Baltic;}{\f308\froman\fcharset238\fprq2 Garamond CE;}{\f309\froman\fcharset204\fprq2 Garamond Cyr;}{\f311\froman\fcharset161\fprq2 Garamond Greek;}{\f312\froman\fcharset162\fprq2 Garamond Tur;}{\f313\froman\fcharset186\fprq2 Garamond Baltic;}{\f314\fswiss\fcharset238\fprq2 Impact CE;}{\f315\fswiss\fcharset204\fprq2 Impact Cyr;}{\f317\fswiss\fcharset161\fprq2 Impact Greek;}{\f318\fswiss\fcharset162\fprq2 Impact Tur;}{\f319\fswiss\fcharset186\fprq2 Impact Baltic;}}{\colortbl;\red0\green0\blue0;\red0\green0\blue255;\red0\green255\blue255;\red0\green255\blue0;\red255\green0\blue255;\red255\green0\blue0;\red255\green255\blue0;\red255\green255\blue255;\red0\green0\blue128;\red0\green128\blue128;\red0\green128\blue0;\red128\green0\blue128;\red128\green0\blue0;\red128\green128\blue0;\red128\green128\blue128;\red192\green192\blue192;}{\stylesheet{\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \snext0 Normal;}{\s1\qj\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\outlinelevel0\adjustright \b\fs28\cf2\cgrid \sbasedon44 \snext44 heading 1;}{\s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\adjustright \fs28\cf2\cgrid \sbasedon1 \snext44 heading 2;}{\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\adjustright \cf2\cgrid \sbasedon2 \snext44 heading 3;}{\s4\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl3\outlinelevel3\adjustright \b\fs20\cf2\cgrid \sbasedon3 \snext44 heading 4;}{\s5\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl4\outlinelevel4\adjustright \fs20\cf2\cgrid \sbasedon4 \snext44 heading 5;}{\s6\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl5\outlinelevel5\adjustright \i\fs20\cf2\cgrid \sbasedon5 \snext44 heading 6;}{\s7\qj\ri720\sb240\sa86\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl6\outlinelevel6\adjustright \f4\fs20\cgrid \sbasedon47 \snext47 heading 7;}{\s8\qj\ri720\sb240\sa86\keepn\nowidctlpar\widctlpar\ls1\ilvl7\outlinelevel7\adjustright \f4\fs20\cgrid \sbasedon7 \snext44 heading 8;}{\s9\qj\ri720\sb240\sa86\keepn\nowidctlpar\widctlpar\jclisttab\tx360\ls1\ilvl8\outlinelevel8\adjustright \i\f4\fs20\cgrid \sbasedon8 \snext38 heading 9;}{\*\cs10 \additive Default Paragraph Font;}{\*\cs15 \additive \b\f5\fs16\lang1033 \sbasedon10 annotation reference;}{\s16\fi-630\li630\nowidctlpar\widctlpar\adjustright \f5\fs16\cgrid \snext16 annotation text;}{\s17\qj\li5040\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext17 toc 8;}{\s18\qj\li4320\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext18 toc 7;}{\s19\qj\li3600\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext19 toc 6;}{\s20\qj\li2880\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext20 toc 5;}{\s21\qj\li2160\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext21 toc 4;}{\s22\qj\li1440\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext22 toc 3;}{\s23\qj\li720\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon24 \snext23 toc 2;}{\s24\qj\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid \sbasedon44 \snext24 toc 1;}{\s25\li2160\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon31 \snext25 index 7;}{\s26\li1800\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon31 \snext26 index 6;}{\s27\li1440\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon31 \snext27 index 5;}{\s28\li1080\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon31 \snext28 index 4;}{\s29\li720\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon31 \snext29 index 3;}{\s30\li360\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon31 \snext30 index 2;}{\s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon0 \snext31 index 1;}{\*\cs32 \additive \sbasedon10 line number;}{\s33\qj\sb240\sa58\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \adjustright \b\f4\fs20\cgrid \sbasedon44 \snext31 index heading;}{\s34\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright \f5\fs16\cgrid \sbasedon35 \snext35 footer;}{\s35\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright \f5\fs16\cgrid \snext35 header;}{\*\cs36 \additive \fs16\up6 \sbasedon10 footnote reference;}{\s37\qj\fi-101\li86\nowidctlpar\widctlpar\adjustright \f4\fs16\cgrid \sbasedon44 \snext37 footnote text;}{\s38\li720\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon0 \snext38 Normal Indent;}{\*\cs39 \additive \f1\fs16\lang1024 \sbasedon10 CodeText;}{\*\cs40 \additive \sbasedon10 page number;}{\s41\nowidctlpar\widctlpar\adjustright \i\fs20\cgrid \sbasedon0 \snext43 Revision Date;}{\s42\li1440\ri1584\sa60\nowidctlpar\widctlpar\box\brdrs\brdrw15\brsp20 \adjustright \scaps\f1\fs16\cf6\cgrid \sbasedon0 \snext42 Legal Info;}{\s43\qj\sb720\sa480\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon44 \snext1 Abstract;}{\s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon0 \snext44 Body;}{\s45\qj\li1440\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon49 \snext45 Body Sub Sub Sub;}{\s46\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw30\brsp60 \brdrbtw\brdrs\brdrw30\brsp60 \adjustright \b\fs36\cf2\cgrid \sbasedon0 \snext43 Title;}{\s47\qj\li720\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon44 \snext47 Body Sub;}{\s48\qj\fi-360\li1080\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon44 \snext48 Body Sub-Hang;}{\s49\qj\li1080\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon47 \snext49 Body Sub Sub;}{\s50\li288\sa58\sl202\slmult0\keep\nowidctlpar\widctlpar\adjustright \f5\fs18\cgrid \sbasedon44 \snext44 Annotation;}{\s51\sa60\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15 \brdrbtw\brdrs\brdrw15 \adjustright \f4\fs18\cgrid \sbasedon44 \snext51 Table Entry;}{\s52\sa60\keep\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15 \brdrbtw\brdrs\brdrw15 \adjustright \b\f4\fs18\cgrid \sbasedon44 \snext52 Table Label;}{\s53\sb120\sa58\keepn\nowidctlpar\widctlpar\adjustright \b\f4\fs18\cgrid \sbasedon44 \snext53 Table Head;}{\s54\li288\sa58\sl202\slmult0\keep\nowidctlpar\widctlpar\box\brdrs\brdrw15\brsp20 \adjustright \f5\fs18\cgrid \sbasedon50 \snext44 Annotation Box;}{\s55\nowidctlpar\widctlpar\adjustright \i\f4\fs18\cgrid \sbasedon0 \snext43 Byline;}{\s56\qj\li720\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \i\f4\fs20\cgrid \sbasedon47 \snext44 Illustration;}{\s57\sa60\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15 \brdrbtw\brdrs\brdrw15 \tx360\tx720\tx1080\tx1440\tx1800\tx2160\adjustright \f5\fs12\cgrid \sbasedon51 \snext57 Table Entry - Small;}{\s58\sb120\sa58\keepn\nowidctlpar\widctlpar\tx360\tx720\tx1080\tx1440\tx1800\tx2160\adjustright \b\f5\fs12\cgrid \sbasedon53 \snext58 Table Head - Small;}{\s59\qc\sb240\sa240\sl216\slmult0\keepn\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon44 \snext68 Figure;}{\s60\sa60\keep\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15 \brdrbtw\brdrs\brdrw15 \adjustright \b\f5\fs12\cgrid \sbasedon52 \snext60 Table Label - Small;}{\s61\sb60\sa120\keep\nowidctlpar\widctlpar\adjustright \f6\fs20\cgrid \sbasedon0 \snext61 Pseudocode;}{\s62\li2160\sa120\nowidctlpar\widctlpar\brdrt\brdrs\brdrw30\brsp20 \brdrbtw\brdrs\brdrw30\brsp20 \phmrg\posyt\adjustright \b\f5\fs48\cgrid \sbasedon63 \snext63 Title Large;}{\s63\li2160\sa120\nowidctlpar\widctlpar\phmrg\posyt\adjustright \b\f5\fs28\cgrid \sbasedon0 \snext64 Title Medium;}{\s64\li2160\sa120\nowidctlpar\widctlpar\phmrg\posyt\adjustright \i\f5\fs20\cgrid \sbasedon0 \snext64 Title Small;}{\s65\li2160\sa120\nowidctlpar\widctlpar\phmrg\posyt\adjustright \v\f5\fs12\cgrid \sbasedon64 \snext65 Time Stamp;}{\s66\nowidctlpar\widctlpar\absw1800\dxfrtext187\dfrmtxtx187\dfrmtxty187\adjustright \f4\fs20\cgrid \sbasedon0 \snext62 Logo;}{\s67\qj\fi-360\li1440\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon48 \snext67 Body Sub Sub-Hang;}{\s68\qj\li1440\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs18\cgrid \sbasedon47 \snext44 caption;}{\s69\sa60\keep\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15 \brdrbtw\brdrs\brdrw15 \adjustright \b\f4\fs18\cgrid \sbasedon44 \snext69 Table Lable;}{\s70\qj\fi-180\li900\ri720\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon47 \snext70 Term Definition;}{\s71\qc\sb240\sa240\sl216\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid \sbasedon44 \snext71 Picture Paragraph;}{\s72\sa60\keep\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15 \brdrbtw\brdrs\brdrw15 \adjustright \b\f5\fs12\cgrid \sbasedon69 \snext72 Table Lable -Small;}{\s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid \snext73 Code;}{\s74\fi-1440\li1800\sb58\nowidctlpar\widctlpar\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\adjustright \f4\fs20\cgrid \sbasedon44 \snext74 Method Clause;}{\s75\fi-720\li360\ri-720\sb360\keep\nowidctlpar\widctlpar\box\brdrsh\brdrs\brdrw15\brsp20 \tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid \sbasedon73 \snext74 Method Heading;}{\s76\qj\li720\ri720\sb240\sa240\sl216\slmult0\nowidctlpar\widctlpar\box\brdrs\brdrw15\brsp20 \adjustright \b\f5\fs16\cgrid \sbasedon47 \snext76 Annotation Public;}{\s77\nowidctlpar\widctlpar\adjustright \cbpat9 \f15\fs20\cgrid \sbasedon0 \snext77 Document Map;}}{\*\listtable{\list\listtemplateid-1{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'02\'00.;}{\levelnumbers\'01;}\s1}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'03\'00.\'01;}{\levelnumbers\'01\'03;}\s2}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'05\'00.\'01.\'02;}{\levelnumbers\'01\'03\'05;}\s3}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'07\'00.\'01.\'02.\'03;}{\levelnumbers\'01\'03\'05\'07;}\s4}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'09\'00.\'01.\'02.\'03.\'04;}{\levelnumbers\'01\'03\'05\'07\'09;}\s5}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext
|
|
\'0b\'00.\'01.\'02.\'03.\'04.\'05;}{\levelnumbers\'01\'03\'05\'07\'09\'0b;}\s6}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'0d\'00.\'01.\'02.\'03.\'04.\'05.\'06;}{\levelnumbers\'01\'03\'05\'07\'09\'0b\'0d;}\s7}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext\'0f\'00.\'01.\'02.\'03.\'04.\'05.\'06.\'07;}{\levelnumbers\'01\'03\'05\'07\'09\'0b\'0d\'0f;}\s8}{\listlevel\levelnfc0\leveljc0\levelfollow0\levelstartat1\levelold\levelspace144\levelindent0{\leveltext
|
|
\'11\'00.\'01.\'02.\'03.\'04.\'05.\'06.\'07.\'08;}{\levelnumbers\'01\'03\'05\'07\'09\'0b\'0d\'0f\'11;}\s9}{\listname ;}\listid-5}}{\*\listoverridetable{\listoverride\listid-5\listoverridecount0\ls1}}{\*\revtbl {Unknown;}{Markus Horstmann;}{Nat Brown;}}{\info{\title Compound File Binary Format}{\doccomm This document describes the on-disk format of the Compound File, used as the underpinnings of the structured storage support for OLE 2.0.}{\operator Markus Horstmann}{\creatim\yr1997\mo1\dy3\hr14\min26}{\revtim\yr1997\mo1\dy3\hr14\min27}{\version3}{\edmins2}{\nofpages10}{\nofwords3871}{\nofchars19621}{\*\company Microsoft Corporation}{\nofcharsws24394}{\vern71}}\widowctrl\ftnbj\aenddoc\revisions\noextrasprl\prcolbl\cvmme\sprsspbf\brkfrm\swpbdr\lytprtmet\hyphcaps0\fracwidth\viewkind4\viewscale111\viewzk2\pgbrdrhead\pgbrdrfoot \fet0{\*\template C:\\WINWORD\\CAIRO.DOT}\sectd \sbkodd\pgnrestart\pgnlcrm\linex0\endnhere\titlepg\sectdefaultcl {\*\pnseclvl1\pnucrm\pnstart1\pnindent720\pnhang{\pntxta .}}{\*\pnseclvl2\pnucltr\pnstart1\pnindent720\pnhang{\pntxta .}}{\*\pnseclvl3\pndec\pnstart1\pnindent720\pnhang{\pntxta .}}{\*\pnseclvl4\pnlcltr\pnstart1\pnindent720\pnhang{\pntxta )}}{\*\pnseclvl5\pndec\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl6\pnlcltr\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl7\pnlcrm\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl8\pnlcltr\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}{\*\pnseclvl9\pnlcrm\pnstart1\pnindent720\pnhang{\pntxtb (}{\pntxta )}}\pard\plain \ri-270\nowidctlpar\widctlpar\brdrt\brdrs\brdrw30\brsp20 \brdrbtw\brdrs\brdrw30\brsp20 \outlinelevel0\adjustright \f4\fs20\cgrid {\field{\*\fldinst {\b\fs36 title }}{\fldrslt {\b\fs36 Compound File Binary Format}}}{\b\fs36
|
|
\par }\pard\plain \s41\nowidctlpar\widctlpar\adjustright \i\fs20\cgrid {\revised\revauth1\revdttm-1508828266 {\*\bkmkstart DraftDate}3 January}{\deleted\revauthdel1\revdttmdel-1508828266 15 March}{, 199}{\deleted\revauthdel1\revdttmdel-1508828266 {\*\bkmkend DraftDate}6}{\revised\revauth1\revdttm-1508828266 7}{
|
|
\par }\pard\plain \s43\qj\sb240\sa240\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\field{\*\fldinst { COMMENTS \\* MERGEFORMAT }}{\fldrslt {This document describes the on-disk format of the Compound File, used as the underpinnings of the structured storage support for OLE 2.0.}}}{
|
|
\par }\pard\plain \nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {
|
|
\par
|
|
\par
|
|
\par
|
|
\par }\pard\plain \s24\qj\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid {\field\fldedit{\*\fldinst {TOC \\o "1-2"}}{\fldrslt {\lang1024 1. Overview\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782782 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782782 }}{\fldrslt {\lang1024 1}}}}}{\lang1024
|
|
\par 2. Sector Types\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782783 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782783 }}{\fldrslt {\lang1024 1}}}}}{\lang1024
|
|
\par }\pard\plain \s23\qj\li720\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid {\lang1024 2.1 Header\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782784 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782784 }}{\fldrslt {\lang1024 1}}}}}{\lang1024
|
|
\par 2.2 Fat Sectors\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782785 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782785 }}{\fldrslt {\lang1024 2}}}}}{\lang1024
|
|
\par 2.3 MiniFat Sectors\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782786 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782786 }}{\fldrslt {\lang1024 2}}}}}{\lang1024
|
|
\par 2.4 DIF Sectors\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782787 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782787 }}{\fldrslt {\lang1024 3}}}}}{\lang1024
|
|
\par 2.5 Directory Sectors\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782788 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782788 }}{\fldrslt {\lang1024 3}}}}}{\lang1024
|
|
\par 2.6 Storage Sectors\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782789 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782789 }}{\fldrslt {\lang1024 5}}}}}{\lang1024
|
|
\par }\pard\plain \s24\qj\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid {\lang1024 3. Examples\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782790 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782790 }}{\fldrslt {\lang1024 5}}}}}{\lang1024
|
|
\par }\pard\plain \s23\qj\li720\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid {\lang1024 3.1 Sector 0: Header\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782791 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782791 }}{\fldrslt {\lang1024 5}}}}}{\lang1024
|
|
\par 3.2 SECT 0: First (Only) FAT Sector\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782792 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782792 }}{\fldrslt {\lang1024 5}}}}}{\lang1024
|
|
\par 3.3 SECT 1: First (Only) Directory Sector\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782793 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782793 }}{\fldrslt {\lang1024 5}}}}}{\lang1024
|
|
\par 3.4 SECT 3: MiniFat Sector\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782794 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782794 }}{\fldrslt {\lang1024 7}}}}}{\lang1024
|
|
\par 3.5 SECT 4: MiniStream (Data of \ldblquote Stream 1\rdblquote )\tab }{\field{\*\fldinst {\lang1024 GOTOBUTTON _Toc351782795 }{\field{\*\fldinst {\lang1024 PAGEREF _Toc351782795 }}{\fldrslt {\lang1024 7}}}}}{\lang1024
|
|
\par }\pard\plain \nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid }}\pard\plain \nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {
|
|
\par }\pard\plain \s42\li1440\ri1584\sa60\nowidctlpar\widctlpar\box\brdrs\brdrw15\brsp20 \adjustright \scaps\f1\fs16\cf6\cgrid {\b Note:}{ This document is meant to accompany the Microsoft Structured Storage Reference Implementation, heretoafter referred to as the \ldblquote software\rdblquote . Some of the information in this documentation may be inaccurate or may not be an accurate representation of the actual func\-tionality of the software. When this document and the functionality of the software conflict, The actual functionality of the software represents the correct functionality. Microsoft assumes no responsibility for any damages that might occur either directly or indirectly from these discrepencies or inaccuracies. Microsoft may have trademarks, copyrights, patents or pending patent applications, or other intellectual property rights covering subject matter in this document and in the software. The furnishing of this document does not give you a license to these trademarks, copyrights, patents, or other intellectual property rights.
|
|
\par }\pard\plain \nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\sect }\sectd \marglsxn1440\margrsxn1440\binfsxn258\binsxn258\pgnrestart\pgnlcrm\linex0\endnhere\sectdefaultcl {\footer \pard\plain \s34\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx9360\adjustright \f5\fs16\cgrid {\i Copyright 1992-1995 Microsoft Corporation}{\tab page: }{\field{\*\fldinst {\cs40 PAGE }}{\fldrslt {\cs40\lang1024 i}}}{\cs40 \tab }{\cs40\i All Rights Reserved.}{
|
|
\par }\pard \s34\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright {
|
|
\par }}\pard\plain \s24\qj\ri720\nowidctlpar\widctlpar\tldot\tx8280\tqr\tx8640\adjustright \f4\fs20\cgrid {\sect }\sectd \marglsxn1440\margrsxn1440\binfsxn258\binsxn258\pgnrestart\linex0\endnhere\sectdefaultcl {\header \pard\plain \s35\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright \f5\fs16\cgrid {
|
|
\par }}{\*\bkmkstart INTERN_LINK2}{\*\bkmkstart INTERN_LINK1}{\*\bkmkstart _Toc345472308}{\*\bkmkstart _Toc345963637}{\*\bkmkstart _Toc351782782}{\listtext\pard\plain\s1 \b\fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 1.\tab}\pard\plain \s1\qj\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\outlinelevel0\ls1\outlinelevel0\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst2\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrstop6\pnrstart1\pnrrgb1\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc1\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr1\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \b\fs28\cf2\cgrid {Overview{\*\bkmkend _Toc345472308}{\*\bkmkend _Toc345963637}{\*\bkmkend _Toc351782782}
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {A Compound File is made up of a number of }{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \v\f4\fs20\cgrid {\xe {virtual stream}}}{\b virtual streams}{. These are collections of data that behave as a linear stream, although their on-disk format may be fragmented. Virtual streams can be user data, or they can be control structures used to maintain the file. Note that the file itself can also be considered a virtual stream.
|
|
\par All allocations of space within a Compound File are done in units called }{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \v\f4\fs20\cgrid {\xe {sector}}}{\b sectors}{. The size of a sector is definable at creation time of a Compound File, but for the purposes of this document will be 512 bytes. A virtual stream is made up of a sequence of sectors.
|
|
\par The Compound File uses several different types of sector: }{\i Fat}{, }{\i Directory}{, }{\i Minifat}{, }{\i DIF}{, and }{\i Storage}{. A separate type of 'sector' is a }{\i Header}{, the primary difference being that a Header is always 512 bytes long (regardless of the sector size of the rest of the file) and is always located at offset zero (0). With the exception of the header, sectors of any type can be placed anywhere within the file. The function of the various sector types is discussed below.
|
|
\par In the discussion below, the term }{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \v\f4\fs20\cgrid {\xe {SECT}}}{\b SECT}{ is used to describe the location of a sector within a virtual stream (in most cases this virtual stream is the file itself). Internally, a }{\cs39\f1\fs16\lang1024 SECT}{ is represented as a }{\cs39\f1\fs16\lang1024 ULONG}{.
|
|
\par {\*\bkmkstart _Toc345472309}{\*\bkmkstart _Toc345963638}{\*\bkmkstart _Toc351782783}{\listtext\pard\plain\s1 \b\fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.\tab}}\pard\plain \s1\qj\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\outlinelevel0\ls1\outlinelevel0\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst2\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrstop6\pnrstart1\pnrrgb1\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \b\fs28\cf2\cgrid {Sector Types{\*\bkmkend _Toc345472309}{\*\bkmkend _Toc345963638}{\*\bkmkend _Toc351782783}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\cs39\lang1024 \tab }{\cs39\revised\lang1024\revauth2\revdttm637768397 [4 bytes]\tab \tab }{\cs39\lang1024 typedef unsigned long ULONG;
|
|
\par \tab }{\cs39\revised\lang1024\revauth2\revdttm637768397 [2 bytes]\tab \tab }{\cs39\lang1024 typedef unsigned short USHORT;
|
|
\par }{\tab }{\revised\revauth2\revdttm637768397 [2 bytes]\tab \tab }{typedef short }{\b OFFSET}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 OFFSET}}}{;
|
|
\par \tab }{\revised\revauth2\revdttm637768397 [4 bytes]\tab \tab }{typedef ULONG }{\b SECT}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 SECT}}}{;
|
|
\par \tab }{\revised\revauth2\revdttm637768397 [4 bytes]\tab \tab }{typedef ULONG }{\b FSINDEX}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 FSINDEX}}}{;
|
|
\par \tab }{\revised\revauth2\revdttm637768397 [2 bytes]\tab \tab }{typedef USHORT }{\b FSOFFSET}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 FSOFFSET}}}{;
|
|
\par \tab }{\revised\revauth2\revdttm637768397 [4 bytes]\tab \tab }{typedef ULONG }{\b DFSIGNATURE}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 DFSIGNATURE}}}{;}{\revised\revauth2\revdttm637768397
|
|
\par \tab [1 byte]\tab \tab typedef unsigned char }{\revised\revauth2\revdttm637768398 BYTE;
|
|
\par \tab [2 bytes]\tab \tab typedef unsigned short WORD;
|
|
\par \tab [4 bytes]\tab \tab typedef unsigned long DWORD;
|
|
\par \tab [2 bytes]\tab \tab typedef WORD }{\b\revised\revauth2\revdttm637768398 DFPROPTYPE}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \v\fs12\revised\revauth2\revdttm637768399\cgrid {\xe {\f0\fs12\revised\revauth2\revdttm637768399 DFPROPTYPE}}}{\revised\revauth2\revdttm637768398 ;}{\revised\revauth2\revdttm637768399
|
|
\par \tab [4 bytes]\tab \tab typedef ULONG }{\b\revised\revauth2\revdttm637768399 SID}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \v\fs12\revised\revauth2\revdttm637768399\cgrid {\xe {\f0\fs12\revised\revauth2\revdttm637768399 SID}}}{\revised\revauth2\revdttm637768399 ;
|
|
\par \tab [16 bytes]\tab \tab typedef CLSID GUID;
|
|
\par
|
|
\par }{\cf6\revised\revauth2\revdttm637768399 \tab [8 bytes]\tab \tab typedef struct tagFILETIME}{\cf6\revised\revauth2\revdttm637768400 }{\cf6\revised\revauth2\revdttm637768399 \{
|
|
\par \tab \tab DWORD dwLowDateTime;
|
|
\par \tab \tab DWORD dwHighDateTime;
|
|
\par \tab }{\cf6\revised\revauth2\revdttm637768400 \tab }{\cf6\revised\revauth2\revdttm637768399 \} }{\b\cf6\revised\revauth2\revdttm637768399 FILETIME}{\revised\revauth2\revdttm637768400 , }{\b\revised\revauth2\revdttm637768400 TIME_T}{\revised\revauth2\revdttm637768400 ;}{\cf6\revised\revauth2\revdttm637768399
|
|
\par }{
|
|
\par
|
|
\par \tab }{\revised\revauth2\revdttm637768400 [4 bytes]\tab \tab }{const SECT }{\b DIFSECT}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 DIFSECT}}}{\tab \tab = 0xFFFFFFFC;
|
|
\par \tab }{\revised\revauth2\revdttm637768400 [4 bytes]\tab \tab }{const SECT }{\b FATSECT}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 FATSECT}}}{\tab \tab = 0xFFFFFFFD;
|
|
\par \tab }{\revised\revauth2\revdttm637768400 [4 bytes]\tab \tab }{const SECT }{\b ENDOFCHAIN}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 ENDOFCHAIN}}}{\tab = 0xFFFFFFFE;
|
|
\par \tab }{\revised\revauth2\revdttm637768400 [4 bytes]\tab \tab }{const SECT }{\b FREESECT}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 FREESECT}}}{\tab \tab = 0xFFFFFFFF;
|
|
\par {\*\bkmkstart _Toc345472310}{\*\bkmkstart _Toc345963639}{\*\bkmkstart _Toc351782784}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.1\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc1\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr1\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {Header{\*\bkmkend _Toc345472310}{\*\bkmkend _Toc345963639}{\*\bkmkend _Toc351782784}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\tab struct StructuredStorageHeader \{}{\revised\revauth2\revdttm637768401 \tab \tab }{\i\fs14\revised\revauth2\revdttm637768401 // [offset from start in bytes, length in bytes]}{
|
|
\par \tab \tab BYTE\tab \tab _abSig[8];\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768401 [0}{\i\fs14\revised\revauth2\revdttm637768402 00}{\i\fs14\revised\revauth2\revdttm637768401 H,}{\i\fs14\revised\revauth2\revdttm637768402 0}{\i\fs14\revised\revauth2\revdttm637768401 8] }{\i\fs14 \{0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1\} for current version,
|
|
\par }{\tab \tab \tab \tab \tab \tab \tab \tab \tab }{\i\fs14 // was \{0x0e, 0x11, 0xfc, 0x0d, 0xd0, 0xcf, 0x11, 0xe0\} on old, beta 2 files (late \rquote 92)
|
|
\par }{\tab \tab \tab \tab \tab \tab \tab \tab \tab }{\i\fs14 // which are also supported by the reference implementation}{
|
|
\par \tab \tab CLSID\tab \tab _clid;\tab \tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768402 [008H,16] }{\i\fs14 class id (set with WriteClassStg, retrieved with GetClassFile/ReadClassStg)}{
|
|
\par \tab \tab USHORT\tab \tab _uMinorVersion;\tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768402 [018H,02] }{\i\fs14 minor version of the format: 33 is written by reference implementation}{
|
|
\par \tab \tab USHORT\tab \tab _uDllVersion;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768402 [01AH,02] }{\i\fs14 major version of the dll/format: 3 is written by reference implementation}{
|
|
\par \tab \tab USHORT\tab \tab _uByteOrder;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768402 [01CH,02] }{\i\fs14 0xFFFE: indicates Intel byte-ordering}{
|
|
\par \tab \tab USHORT\tab \tab _uSectorShift;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768403 [01EH,02] }{\i\fs14 size of sectors in power-of-two (typically 9, indicating 512-byte sectors)}{
|
|
\par \tab \tab USHORT\tab \tab _uMiniSectorShift;\tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768403 [020H,02] }{\i\fs14 size of mini-sectors in power-of-two (typically 6, indicating 64-byte mini-sectors)}{
|
|
\par \tab \tab USHORT\tab \tab _usReserved;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768403 [022H,02] }{\i\fs14 reserved, must be zero}{
|
|
\par \tab \tab ULONG\tab \tab _ulReserved1;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768403 [024H,04] }{\i\fs14 reserved, must be zero}{
|
|
\par \tab \tab ULONG\tab \tab _ulReserved2;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768403 [028H,04] }{\i\fs14 reserved, must be zero}{
|
|
\par \tab \tab FSINDEX\tab \tab _csectFat;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768403 [02CH,04] }{\i\fs14 number of SECTs in the FAT chain}{
|
|
\par \tab \tab SECT\tab \tab _sectDirStart;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [030H,04] }{\i\fs14 first SECT in the }{\i\deleted\fs14\revauthdel2\revdttmdel-1509873007 FAT }{\i\fs14\revised\revauth2\revdttm-1509873007 Directory }{\i\fs14 chain}{
|
|
\par \tab \tab DFSIGNATURE\tab _signature;\tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [034H,04] }{\i\fs14 signature used for transactionin: must be zero. The reference implementation}{
|
|
\par \tab \tab \tab \tab \tab \tab \tab \tab \tab }{\i\fs14 // does not support transactioning}{
|
|
\par \tab \tab ULONG\tab \tab _ulMiniSectorCutoff;}{\i\fs14 \tab // }{\i\fs14\revised\revauth2\revdttm637768404 [038H,04] }{\i\fs14 maximum size for mini-streams: typically 4096 bytes}{
|
|
\par \tab \tab SECT\tab \tab _sectMiniFatStart;\tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [03CH,04] }{\i\fs14 first SECT in the mini-FAT chain}{
|
|
\par \tab \tab FSINDEX\tab \tab _csectMiniFat;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [040H,04] }{\i\fs14 number of SECTs in the mini-FAT chain}{
|
|
\par \tab \tab SECT\tab \tab _sectDifStart;\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [044H,04] }{\i\fs14 first SECT in the DIF chain}{
|
|
\par \tab \tab FSINDEX\tab \tab _csectDif;\tab \tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [048H,04] }{\i\fs14 number of SECTs in the DIF chain}{
|
|
\par \tab \tab SECT\tab \tab _sectFat[109];\tab \tab }{\i\fs14 // }{\i\fs14\revised\revauth2\revdttm637768404 [04CH,436] }{\i\fs14 the SECTs of the first 109 FAT sectors}{
|
|
\par \tab \tab \};
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\f0
|
|
\par }{The }{\i Header}{ contains vital information for the instantiation of a Compound File. Its total length is 512 bytes. There is exactly one }{\i Header }{in any Compound File, and it is always located beginning at offset zero in the file.
|
|
\par {\*\bkmkstart _Toc345472311}{\*\bkmkstart _Toc345963640}{\*\bkmkstart _Toc351782785}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.2\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {Fat Sectors{\*\bkmkend _Toc345472311}{\*\bkmkend _Toc345963640}{\*\bkmkend _Toc351782785}
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {The }{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \v\f4\fs20\cgrid {\xe {Fat}}}{\b Fat}{ is the main allocator for space within a Compound File. Every sector in the file is represented within the Fat in some fashion, including those sectors that are unallocated (free). The Fat is a virtual stream made up of one or more Fat Sectors.
|
|
\par Fat sectors are arrays of }{\cs39\f1\fs16\lang1024 SECT}{s that represent the allocation of space within the file. Each stream is represented in the Fat by a }{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \v\f4\fs20\cgrid {\xe {chain}}}{\b chain}{, in much the same fashion as a }{\cs39\f1\fs16\lang1024 DOS}{ file-allocation-table (FAT). To elaborate, the set of Fat Sectors can be considered together to be a single array -- each cell in that array contains the }{\cs39\f1\fs16\lang1024 SECT}{ of the next sector in the chain, and this SECT can be used as an index into the Fat array to continue along the chain. Special values are reserved for chain terminators (}{\cs39\f1\fs16\lang1024 ENDOFCHAIN = 0xFFFFFFFE}{), free sectors (}{\cs39\f1\fs16\lang1024 FREESECT = 0xFFFFFFFF}{), and sectors that contain storage for Fat Sectors (}{\cs39\f1\fs16\lang1024 FATSECT = 0xFFFFFFFD}{) or DIF Sectors (}{\cs39\f1\fs16\lang1024 DIFSECT = 0xFFFFFFC}{), which are not chained in the same way as the others.
|
|
\par }\pard \s44\qc\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright {\f0 {\pict\wmetafile8\picw9604\pich2963\picwgoal5445\pichgoal1680 \bin3776 [ / & ÿÿÿÿ ø˜œ 8
|
|
&
|
|
ÿÿÿÿ & $ ÿÿÿÿ TNPP Microsoft PowerPoint & TNPP P
|
|
&
|
|
ÿÿÿÿ & TNPP ˜ø ‚/ ÷ € € €€ € € € €€ ÀÀÀ ÀÜÀ ¦Êð ÿûð ¤ €€€ ÿ ÿ ÿÿ ÿ ÿ ÿ ÿÿ ÿÿÿ 4 5 & ÿÿÿÿ #ùY ! & ÿÿÿÿ ø_þ� ú - ü - �_þø
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ çøqù¦ û°ÿ ¼ Arial ¸š - .
|
|
2
|
|
qù 3 ,
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ JúÔú¦ û°ÿ � Arial hš - ð .
|
|
2
|
|
quú 5 ,
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ýšý¦ û°ÿ � Arial Ûš - ð .
|
|
2
|
|
q;ý 1 ,
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ û@ü¦ û°ÿ � Arial ³š - ð .
|
|
2
|
|
qØû E 5
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ËøÓø� ú ÿÿÿ - - ð û ¼ "System - ð �sù+ø ú - yËø #Ëø - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ |ù„ù� - - �$úÜø ú - y|ù #|ù - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ .ú6ú� - - �ÖúŽù ú - y.ú #.ú - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ßúçú� - - �‡û?ú ú - yßú #ßú - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ‘û™û� - - �9üñú ú - y‘û #‘û - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ BüJü� - - �êü¢û ú - yBü #Bü - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ôüüü� - - �œýTü ú - yôü #ôü - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ¥ýý� - - �Mþý ú - y¥ý #¥ý - - ð 'ÿÿ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ <ûaý ú - @û
|
|
aýþbý ù
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ #ùHû ·DùDûþfý#ù ü - -
|
|
$ 'ù
|
|
~ù°@ù�
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ #ù®óù
|
|
- - #ù®ïù_»ú®#ù
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ïù®‰ú ®óùÁOúgŠú®]ù - -
|
|
$ …ú
|
|
Sú˜ úÄ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ‹ú¡;û - - ‹ú¡7ûuäû¡‹ú
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ 4û¡òû ¡8ûÀ¼ûuòû¡~ú - -
|
|
$ îû ½û˜‡ûÄ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ^ý?èþ - - ·€ý?äþÖk ?^ý - -
|
|
$ bý
|
|
ºý°|ý�
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ Þþœ Ï ûÈÿ � Arial »š - .
|
|
2
|
|
^ ÿ
|
|
Pointer in%
|
|
ûÈÿ � Arial ™ - ð .
|
|
2
|
|
¡ ÿ from Directory / (
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ßù§yû9 û°ÿ � Arial »š - ð .
|
|
2
|
|
|
|
ú Chaining: , - , , -
|
|
&
|
|
ÿÿÿÿ
|
|
&
|
|
ÿÿÿÿ & TNPP
|
|
&
|
|
ÿÿÿÿ - - ð ð - ð }}{
|
|
\par }\pard \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright {The locations of Fat Sectors are read from the DIF (Double-indirect Fat), which is described below. The Fat is represented in itself, but not by a chain \endash a special reserved }{\cs39\f1\fs16\lang1024 SECT}{ value (}{\cs39\f1\fs16\lang1024 FATSECT = 0xFFFFFFFD}{) is used to mark sectors allocated to the Fat.
|
|
\par A }{\cs39\f1\fs16\lang1024 SECT}{ can be converted into a byte offset into the file by using the following formula: }{\cs39\f1\fs16\lang1024 SECT << ssheader._uSectorShift + sizeof(ssheader)}{. This implies that sector 0 of the file begins at byte offset 512, not at 0.
|
|
\par {\*\bkmkstart _Toc345472312}{\*\bkmkstart _Toc345963641}{\*\bkmkstart _Toc351782786}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.3\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {MiniFat Sectors{\*\bkmkend _Toc345472312}{\*\bkmkend _Toc345963641}{\*\bkmkend _Toc351782786}
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {Since space for streams is always allocated in sector-sized blocks, there can be considerable waste when storing objects much smaller than sectors (typically 512 bytes). As a solution to this problem, we introduced the concept of the }{\b MiniFat}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 MiniFat}}}{. The MiniFat is structurally equivalent to the Fat, but is used in a different way. The virtual sector size for objects represented in the Minifat is }{\cs39\f1\fs16\lang1024 1 << ssheader._uMiniSectorShift}{ (typically 64 bytes) instead of }{\cs39\f1\fs16\lang1024 1 << ssheader._uSectorShift}{ (typically 512 bytes). The storage for these objects comes from a virtual stream within the Multistream (called the }{\b Ministream}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 Ministream}}}{).
|
|
\par The locations for MiniFat sectors are stored in a standard chain in the Fat, with the beginning of the chain stored in the header.
|
|
\par A Minifat sector number can be converted into a byte offset into the ministream by using the following formula: }{\cs39\f1\fs16\lang1024 SECT << ssheader._uMiniSectorShift}{. (This formula is different from the formula used to convert a SECT into a byte offset in the file, since no header is stored in the Ministream)
|
|
\par The Ministream is chained within the Fat in exactly the same fashion as any normal stream. It is referenced by the first Directory Entry (}{\cs39\f1\fs16\lang1024 SID}{ 0).
|
|
\par {\*\bkmkstart _Toc345472313}{\*\bkmkstart _Toc345963642}{\*\bkmkstart _Toc351782787}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.4\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc4\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr4\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {DIF Sectors{\*\bkmkend _Toc345472313}{\*\bkmkend _Toc345963642}{\*\bkmkend _Toc351782787}
|
|
\par }\pard\plain \s44\qc\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\f0 {\pict\wmetafile8\picw6058\pich3862\picwgoal3435\pichgoal2190 \bin1600 1 & ÿÿÿÿ âüNý@º
|
|
&
|
|
ÿÿÿÿ & $ ÿÿÿÿ TNPP Microsoft PowerPoint & TNPP P
|
|
&
|
|
ÿÿÿÿ & TNPP Nýâü l^1 ÷ ÿÿÿ € € €€ € € € €€ ÀÀÀ ÀÜÀ ¦Êð ÿûð ¤ €€€ ÿ ÿ ÿÿ ÿ ÿ ÿ ÿÿ ÿÿÿ 4 5 & ÿÿÿÿ {ÿ�ÿg C & ÿÿÿÿ ·ÿÁÿA! ûÑÿ ¼ Arial - .
|
|
. 2
|
|
üÿÔÿ Pointer to next DIF sector
|
|
|
|
#
|
|
|
|
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ âü¿ýœÿg ü ÿÿÿ - ú ÿÿÿ - ú - g œÿ¿ýâü
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ áþ œÿg ü ÿÿÿ - ð - ú - ð g œÿ áþ
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ’ÿòÿ C ú - ð ü - öÿ 0 ñÿC ©ÿ ÿ ü - ð -
|
|
$ –ÿ? H
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ iýNý&ÿÊý û¸ÿ ¼ Arial ?‚ - ð .
|
|
2
|
|
žý†ý
|
|
DIF Sector4 , 0 ( ( ,
|
|
&
|
|
ÿÿÿÿ & ÿÿÿÿ ïü÷ýzÿ`þ ûÈÿ � Arial - ð .
|
|
* 2
|
|
8þ ý Pointers to FAT sectors %
|
|
" & "
|
|
&
|
|
ÿÿÿÿ
|
|
&
|
|
ÿÿÿÿ & TNPP
|
|
&
|
|
ÿÿÿÿ - - ð ð û ¼ "System - ð }}{
|
|
\par }\pard \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright {The }{\b Double-Indirect Fat}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 Double-Indirect Fat}}}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 DIF}}}{ is used to represent storage of the Fat. The DIF is also represented by an array of }{\cs39\f1\fs16\lang1024 SECT}{s, and is chained by the terminating cell in each sector array (see the diagram above). As an optimization, the first 109 Fat Sectors are represented within the header itself, so no DIF sectors will be found in a small (< 7 MB) Compound File.
|
|
\par The DIF represents the Fat in a different manner than the Fat represents a chain. A given index into the DIF will contain the }{\cs39\f1\fs16\lang1024 SECT }{of the Fat Sector found at that offset in the Fat virtual stream. For instance, index 3 in the DIF would contain the }{\cs39\f1\fs16\lang1024 SECT }{for Sector #3 of the Fat.
|
|
\par The storage for DIF Sectors is reserved in the Fat, but is not chained there (space for it is reserved by a special }{\cs39\f1\fs16\lang1024 SECT}{ value , }{\cs39\f1\fs16\lang1024 DIFSECT=0xFFFFFFFC}{). The location of the first DIF sector is stored in the header.
|
|
\par }\pard\plain \nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {A value of }{\cs39\f1\fs16\lang1024 ENDOFCHAIN=0xFFFFFFFE}{ is stored in the pointer to the next DIF sector of the last DIF sector.
|
|
\par {\*\bkmkstart _Toc345472314}{\*\bkmkstart _Toc345963643}{\*\bkmkstart _Toc351782788}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.5\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc5\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr5\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {Directory Sectors{\*\bkmkend _Toc345472314}{\*\bkmkend _Toc345963643}{\*\bkmkend _Toc351782788}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\tab typedef enum tagSTGTY \{
|
|
\par \tab \tab STGTY_INVALID\tab \tab = 0,
|
|
\par \tab \tab STGTY_STORAGE\tab \tab = 1,
|
|
\par \tab \tab STGTY_STREAM\tab \tab = 2,
|
|
\par \tab \tab STGTY_LOCKBYTES\tab = 3,
|
|
\par \tab \tab STGTY_PROPERTY\tab = 4,
|
|
\par \tab \tab STGTY_ROOT\tab \tab = 5,
|
|
\par \tab \tab \} }{\b STGTY}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 STGTY}}}{;
|
|
\par
|
|
\par \tab typedef enum tagDECOLOR \{
|
|
\par \tab \tab DE_RED\tab \tab \tab \tab = 0,
|
|
\par \tab \tab DE_BLACK\tab \tab \tab = 1,
|
|
\par \tab \tab \} }{\b DECOLOR}{\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 DECOLOR}}}{;
|
|
\par
|
|
\par \tab struct StructuredStorageDirectoryEntry \{}{\revised\revauth2\revdttm637768405 \tab \tab \tab }{\i\fs14\revised\revauth2\revdttm637768405 // [offset from start in bytes, length in bytes]}{
|
|
\par \tab \tab BYTE\tab \tab _ab[32*sizeof(WCHAR)];\tab \tab // }{\i\fs14\revised\revauth2\revdttm637768405 [}{\i\fs14\revised\revauth2\revdttm637768406 000H,64}{\i\fs14\revised\revauth2\revdttm637768405 ] }{64 bytes. The Element name in Unicode, padded with zeros to
|
|
\par \tab \tab \tab \tab \tab \tab \tab \tab \tab \tab \tab // fill this byte array
|
|
\par \tab \tab WORD\tab \tab _cb;\tab \tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [040H,02] }{Length of the Element name in characters, not bytes
|
|
\par \tab \tab BYTE\tab \tab _mse;\tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [042H,01] }{Type of object: value taken from the STGTY enumeration
|
|
\par \tab \tab BYTE\tab \tab _bflags;\tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [043H,01] }{Value taken from DECOLOR enumeration.
|
|
\par \tab \tab SID\tab \tab \tab _sidLeftSib;\tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [044H,04] }{SID of the left-sibling of this entry in the directory tree
|
|
\par \tab \tab SID\tab \tab \tab _sidRightSib;\tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 048H,04}{\i\fs14\revised\revauth2\revdttm637768406 ] }{SID of the right-sibling of this entry in the directory tree
|
|
\par \tab \tab SID\tab \tab \tab _sidChild;\tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 04CH,04}{\i\fs14\revised\revauth2\revdttm637768406 ] }{SID of the }{\deleted\revauthdel2\revdttmdel-1509872999 first }{child }{\revised\revauth2\revdttm-1509872998 acting as the root of all the children }{of this}{\revised\revauth2\revdttm-1509872998
|
|
\par \tab \tab \tab \tab \tab \tab \tab \tab \tab \tab \tab // }{ element (if _mse=STGTY_STORAGE)
|
|
\par \tab \tab GUID\tab \tab _clsId;\tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 050H,16}{\i\fs14\revised\revauth2\revdttm637768406 ] }{CLSID of this storage (if _mse=STGTY_STORAGE)
|
|
\par \tab \tab DWORD\tab \tab _dwUserFlags;\tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 060H,04}{\i\fs14\revised\revauth2\revdttm637768406 ] }{User flags of this storage (if _mse=STGTY_STORAGE)
|
|
\par \tab \tab TIME_T\tab \tab _time[2];\tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 064H,16}{\i\fs14\revised\revauth2\revdttm637768406 ] }{Create/Modify time-stamps (if _mse=STGTY_STORAGE)
|
|
\par \tab \tab SECT\tab \tab _sectStart;\tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 074H,04}{\i\fs14\revised\revauth2\revdttm637768406 ] }{starting SECT of the stream (if _mse=STGTY_STREAM)
|
|
\par \tab \tab ULONG\tab \tab _ulSize;\tab \tab \tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 078H,04}{\i\fs14\revised\revauth2\revdttm637768406 ] }{size of stream in bytes (if _mse=STGTY_STREAM)
|
|
\par \tab \tab DFPROPTYPE\tab _dptPropType;\tab \tab \tab // }{\i\fs14\revised\revauth2\revdttm637768406 [}{\i\fs14\revised\revauth2\revdttm637768407 07CH,02}{\i\fs14\revised\revauth2\revdttm637768406 ] }{Reserved for future use. Must be zero.
|
|
\par \tab \tab \};
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {
|
|
\par The }{\b Directory}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 Directory}}}{ is a structure used to contain per-stream information about the streams in a Compound File, as well as to maintain a tree-styled containment structure. It is a virtual stream made up of one or more Directory Sectors. The Directory is represented as a standard chain of sectors within the Fat. The first sector of the Directory chain (the Root Directory Entry)
|
|
\par Each level of the containment hierarchy (i.e. each set of siblings) is represented as a red-black tree. The parent of this set of sibilings will have a pointer to the top of this tree. This red-black tree must maintain the following conditions in order for it to be valid:
|
|
\par }\pard \s44\qj\fi-360\li360\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright {\tab 1.\tab The root node must always be black.}{\revised\revauth1\revdttm-1508828265 Since the root }{\revised\revauth1\revdttm-1508828264 directory }{\revised\revauth1\revdttm-1508828263 (see below) }{\revised\revauth1\revdttm-1508828265 does not have siblings, it's color is irrelevant and may therefore be either red or black.}{
|
|
\par \tab 2.\tab No two consecutive nodes may both be red.
|
|
\par \tab 3.\tab The left child must always be less than the right child. This relationship is defined as:
|
|
\par \tab \tab }{\field\flddirty{\*\fldinst {SYMBOL 183 \\f "Symbol" \\s 10 \\h}}{\fldrslt }}{ A node with a shorter name is less than a node with a longer name (i.e. compare length of the name)
|
|
\par \tab \tab }{\field\flddirty{\*\fldinst {SYMBOL 183 \\f "Symbol" \\s 10 \\h}}{\fldrslt }}{ For nodes with the same length names, compare the two names.
|
|
\par }\pard \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright {The simplest implementation of the above invariants would be to mark every node as black, in which case the tree is simply a binary tree.
|
|
\par A Directory Sector is an array of Directory Entries, a structure represented in the diagram below. Each user stream within a Compound File is represented by a single Directory Entry. The Directory is considered as a large array of Directory Entries. It is useful to note that the Directory Entry for a stream remains at the same index in the Directory array for the life of the stream \endash thus, this index (called an }{\b SID}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 SID}}}{) can be used to readily identify a given stream.
|
|
\par }{\f0 The directory entry is then padded out with zeros to make a total size of 128 bytes.
|
|
\par }{Directory entries are grouped into blocks of four to form Directory Sectors.
|
|
\par {\listtext\pard\plain\s3 \cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.5.1\tab}}\pard\plain \s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst5\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrxst46\pnrxst0\pnrxst2\pnrxst0\pnrstop12\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb5\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc5\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr5\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr1\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \cf2\cgrid {Root Directory Entry
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {The first sector of the Directory chain (also referred to as the first element of the Directory array, or }{\cs39\f1\fs16\lang1024 SID}{ 0) is known as the }{\b Root Directory Entry}{\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \b\v\fs12\cgrid {\xe {\b\f0\fs12 Root Directory Entry}}}{ and is reserved for two purposes: First, it provides a root parent for all objects stationed at the root of the multi-stream. Second, its function is overloaded to store the size and starting sector for the Mini-stream.
|
|
\par The Root Directory Entry behaves as both a stream and a storage. All of the fields in the Directory Entry are valid for the root. The Root Directory Entry\rquote s Name field typically contains the string \ldblquote RootEntry\rdblquote in Unicode, although some versions of structured storage (particularly the preliminary reference implementation and the Macintosh version) store only the first letter of this string, \ldblquote R\rdblquote in the name. This string is always ignored, since the Root Directory Entry is known by its position at }{\cs39\f1\fs16\lang1024 SID}{ 0 rather than by its name, and its name is not otherwise used. New implementations should write \ldblquote RootEntry\rdblquote properly in the Root Directory Entry for consistency and support manipulating files created with only the \ldblquote R\rdblquote name.
|
|
\par {\listtext\pard\plain\s3 \cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.5.2\tab}}\pard\plain \s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst5\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrxst46\pnrxst0\pnrxst2\pnrxst0\pnrstop12\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb5\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc5\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr5\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \cf2\cgrid {Other Directory Entries
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {Non-root directory entries are marked as either stream (}{\cs39\f1\fs16\lang1024 STGTY_STREAM}{) or storage (}{\cs39\f1\fs16\lang1024 STGTY_STORAGE}{) elements. Storage elements have a }{\cs39\f1\fs16\lang1024 _clsid}{, }{\cs39\f1\fs16\lang1024 _time[]}{, and }{\cs39\f1\fs16\lang1024 _sidChild}{ values; stream elements may not. Stream elements have valid }{\cs39\f1\fs16\lang1024 _sectStart}{ and }{\cs39\f1\fs16\lang1024 _ulSize}{ members, whereas these fields are set to zero for storage elements (except as noted above for the Root Directory Entry).
|
|
\par To determine the physical file location of actual stream data from a stream directory entry, it is necessary to determine which FAT (normal or mini) the stream exists within. Streams whose }{\cs39\f1\fs16\lang1024 _ulSize}{ member is less than the }{\cs39\f1\fs16\lang1024 _ulMiniSectorCutoff}{ value for the file exist in the ministream, and so the }{\cs39\f1\fs16\lang1024 _startSect}{ is used as an index into the MiniFat (which starts at }{\cs39\f1\fs16\lang1024 _sectMiniFatStart}{) to track the chain of mini-sectors through the mini-stream (which is, as noted earlier, the standard (non-mini) stream referred to by the Root Directory Entry\rquote s }{\cs39\f1\fs16\lang1024 _sectStart}{ value). Streams whose }{\cs39\f1\fs16\lang1024 _ulSize}{ member is greater than the }{\cs39\f1\fs16\lang1024 _ulMiniSectorCutoff}{ value for the file exist as standard streams \endash their }{\cs39\f1\fs16\lang1024 _sectStart}{ value is used as an index into the standard FAT which describes the chain of full sectors containing their data).
|
|
\par {\*\bkmkstart _Toc345472315}{\*\bkmkstart _Toc345963644}{\*\bkmkstart _Toc351782789}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 2.6\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc6\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr6\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {Storage Sectors{\*\bkmkend _Toc345472315}{\*\bkmkend _Toc345963644}{\*\bkmkend _Toc351782789}
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {Storage sectors are simply collections of arbitrary bytes. They are the building blocks of user streams, and no restrictions are imposed on their contents. Storage sectors are represented as chains in the Fat, and each storage chain (stream) will have a single Directory Entry associated with it.
|
|
\par {\*\bkmkstart _Toc345472316}{\*\bkmkstart _Toc345963645}{\*\bkmkstart _Toc351782790}{\listtext\pard\plain\s1 \b\fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.\tab}}\pard\plain \s1\qj\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\outlinelevel0\ls1\outlinelevel0\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst2\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrstop6\pnrstart1\pnrrgb1\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \b\fs28\cf2\cgrid {Examples{\*\bkmkend _Toc345472316}{\*\bkmkend _Toc345963645}{\*\bkmkend _Toc351782790}
|
|
\par }\pard\plain \s44\qj\sa60\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {This section contains a hexadecimal dump of an example structured storage file to clarify the binary file format.
|
|
\par {\*\bkmkstart _Toc345472317}{\*\bkmkstart _Toc345963646}{\*\bkmkstart _Toc351782791}{\*\bkmkend INTERN_LINK2}{\*\bkmkend INTERN_LINK1}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.1\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc1\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr1\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {Sector 0: Header{\*\bkmkend _Toc345472317}{\*\bkmkend _Toc345963646}{\*\bkmkend _Toc351782791}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 \tab _abSig\tab \tab \tab \tab \tab = DOCF 11E0 A1B1 1AE1
|
|
\par _clid\tab \tab \tab \tab \tab = 0000 0000 0000 0000 0000 0000 0000 0000
|
|
\par _uMinorVersion\tab \tab \tab = 003B
|
|
\par _uDllVersion\tab \tab \tab = 3
|
|
\par _uByteOrder\tab \tab \tab = FFFE (Intel byte order)
|
|
\par _uSectorShift\tab \tab \tab = 9 (512 bytes)
|
|
\par _uMiniSectorShift\tab \tab = 6 (64 bytes)
|
|
\par _usReserved\tab \tab \tab = 0000
|
|
\par _ulReserved1\tab \tab \tab = 00000000
|
|
\par _ulReserved2\tab \tab \tab = 00000000
|
|
\par _csectFat\tab \tab \tab \tab = 00000001
|
|
\par _sectDirStart\tab \tab \tab = 00000001
|
|
\par _signature\tab \tab \tab \tab = 00000000
|
|
\par _ulMiniSectorCutoff\tab = 00001000 (4096 bytes)
|
|
\par _sectMiniFatStart\tab \tab = 00000002
|
|
\par _csectMiniFat\tab \tab \tab = 00000001
|
|
\par _sectDifStart\tab \tab \tab = FFFFFFFE (no DIF, file is < 7Mb)
|
|
\par _csectDIF\tab \tab \tab \tab = 00000000
|
|
\par _sectFat[]\tab \tab \tab \tab = 00000000 FFFFFFFF . . . (continues with FFFFFFFF)
|
|
\par
|
|
\par 000000: D0CF 11E0 A1B1 1AE1 0000 0000 0000 0000 ................
|
|
\par 000010: 0000 0000 0000 0000 3B00 0300 FEFF 0900 ........;.......
|
|
\par 000020: 0600 0000 0000 0000 0000 0000 0100 0000 ................
|
|
\par 000030: 0100 0000 0000 0000 0010 0000 0200 0000 ................
|
|
\par 000040: 0100 0000 FEFF FFFF 0000 0000 0000 0000 ................
|
|
\par 000050: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par . . .
|
|
\par 0001F0: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par {\*\bkmkstart _Toc345472318}{\*\bkmkstart _Toc345963647}{\*\bkmkstart _Toc351782792}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.2\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc2\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {SECT 0: First (Only) FAT Sector{\*\bkmkend _Toc345472318}{\*\bkmkend _Toc345963647}{\*\bkmkend _Toc351782792}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 \tab SECT 0: FFFFFFFD = FATSECT: marks this sector as a FAT sector.
|
|
\par \tab \tab \tab \tab Referred to in header by _sectFat[0]
|
|
\par \tab SECT 1: FFFFFFFE = ENDOFCHAIN: marks the end of the directory chain,
|
|
\par \tab \tab \tab \tab referred to in header by _sectDirStart
|
|
\par \tab SECT 2: FFFFFFFE = ENDOFCHAIN: marks the end of the mini-fat, referred to
|
|
\par \tab \tab \tab \tab in header by _sectMiniFatStart
|
|
\par \tab SECT 3: 00000004 = pointer to the next sector in the \ldblquote Stream 1\rdblquote data. This sector is
|
|
\par \tab \tab \tab \tab the first sector of \ldblquote Stream 1\rdblquote , it is referred to by the Directory Entry
|
|
\par \tab SECT 4: ENDOFCHAIN (0xFFFFFFFE): marks the end of the \ldblquote Stream 1\rdblquote stream data.
|
|
\par \tab Further Entries are empty (FREESECT = 0xFFFFFFFF)
|
|
\par
|
|
\par 000200: FDFF FFFF FEFF FFFF FEFF FFFF 0400 0000 ................
|
|
\par 000210: FEFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par . . .
|
|
\par 0003F0: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par {\*\bkmkstart _Toc345472319}{\*\bkmkstart _Toc345963648}{\*\bkmkstart _Toc351782793}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.3\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {SECT 1: First (Only) Directory Sector{\*\bkmkend _Toc345472319}{\*\bkmkend _Toc345963648}{\*\bkmkend _Toc351782793}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 SID 0: Root SID: Root Name = "R"
|
|
\par SID 1: Element 1 SID: Name = "Storage 1"
|
|
\par SID 2: Element 2 SID: Name = "Stream 1"
|
|
\par SID 3: Unused
|
|
\par {\listtext\pard\plain\s3 \cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.3.1\tab}}\pard\plain \s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst5\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrxst46\pnrxst0\pnrxst2\pnrxst0\pnrstop12\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb5\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr1\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \cf2\cgrid {SID 0: Root Directory Entry
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 _ab = ("R") (this should be \ldblquote Root Entry\rdblquote )
|
|
\par _cb = 000}{\f2\revised\revauth2\revdttm637768409 4}{\deleted\f2\revauthdel2\revdttmdel637768409 2}{\f2 (}{\f2\revised\revauth2\revdttm637768409 4}{\deleted\f2\revauthdel2\revdttmdel637768409 2}{\f2 bytes, }{\deleted\f2\revauthdel2\revdttmdel637768409 do}{\deleted\f2\revauthdel2\revdttmdel637768410 es not }{\f2 include}{\f2\revised\revauth2\revdttm637768410 s}{\f2 double-null terminator)
|
|
\par _mse = 05 (STGTY_ROOT)
|
|
\par _bflags = 00 (DE_RED)
|
|
\par _sidLeftSib = FFFFFFFF (none)
|
|
\par _sidRightSib = FFFFFFFF (none)
|
|
\par _sidChild = 00000001 (SID 1: \ldblquote Storage 1\rdblquote )
|
|
\par _clsid = 0067 6156 54C1 CE11 8553 00AA 00A1 F95B
|
|
\par _dwUserFlags = 00000000 (n/a for STGTY_ROOT)
|
|
\par _time[0] = CreateTime = 0000 0000 0000 0000 (none set)
|
|
\par _time[1] = ModifyTime = 801E 9213 4BB4 BA01 (??)
|
|
\par _sectStart = 00000003 (starting sector of MiniStream)
|
|
\par _ulSize = 00000240 (length of MiniStream in bytes)
|
|
\par _dptPropType = 0000 (n/a)
|
|
\par
|
|
\par 000400: 0052 0000 0000 0000 0000 0000 0000 0000 .R..............
|
|
\par 000410: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000420: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000430: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000440: 0}{\f2\revised\revauth2\revdttm637768410 4}{\deleted\f2\revauthdel2\revdttmdel637768410 2}{\f2 00 0500 FFFF FFFF FFFF FFFF 0100 0000 ................
|
|
\par 000450: 0067 6156 54C1 CE11 8553 00AA 00A1 F95B .gaVT....S.....[
|
|
\par 000460: 0000 0000 0000 0000 0000 0000 801E 9213 ................
|
|
\par 000470: 4BB4 BA01 0300 0000 4002 0000 0000 0000 K.......@.......
|
|
\par {\listtext\pard\plain\s3 \cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.3.2\tab}}\pard\plain \s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst5\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrxst46\pnrxst0\pnrxst2\pnrxst0\pnrstop12\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb5\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr2\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \cf2\cgrid {SID 1: \ldblquote Storage 1\rdblquote
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 _ab = ("Storage 1")
|
|
\par _cb = 0014 (20 bytes, including double-null terminator)
|
|
\par _mse = 01 (STGTY_STORAGE)
|
|
\par _bflags = 01 (DE_BLACK)
|
|
\par _sidLeftSib = FFFFFFFF (none)
|
|
\par _sidRightSib = FFFFFFFF (none)
|
|
\par _sidChild = 00000002 (SID 2: \ldblquote Stream 1\rdblquote )
|
|
\par _clsid = 0000 0000 0000 0000 0000 0000 0000 0000 (none set)
|
|
\par _dwUserFlags = 00000000 (none set)
|
|
\par _time[0] = CreateTime = 00000000 00000000 (none set)
|
|
\par _time[1] = ModifyTime = 00000000 00000000 (none set)
|
|
\par _sectStart = 00000000 (n/a)
|
|
\par _ulSize = 00000000 (n/a)
|
|
\par _dptPropType = 0000 (n/a)
|
|
\par
|
|
\par 000480: 5300 7400 6F00 7200 6100 6700 6500 2000 S.t.o.r.a.g.e. .
|
|
\par 000490: 3100 0000 0000 0000 0000 0000 0000 0000 1...............
|
|
\par 0004A0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0004B0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0004C0: 1400 0101 FFFF FFFF FFFF FFFF 0200 0000 ................
|
|
\par 0004D0: 0061 6156 54C1 CE11 8553 00AA 00A1 F95B .aaVT....S.....[
|
|
\par 0004E0: 0000 0000 0088 F912 4BB4 BA01 801E 9213 ........K.......
|
|
\par 0004F0: 4BB4 BA01 0000 0000 0000 0000 0000 0000 K...............
|
|
\par {\listtext\pard\plain\s3 \cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.3.3\tab}}\pard\plain \s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst5\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrxst46\pnrxst0\pnrxst2\pnrxst0\pnrstop12\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb5\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \cf2\cgrid {SID 2: \ldblquote Stream 1\rdblquote
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 _ab = ("Stream 1")
|
|
\par _cb = 0012 (18 bytes, including double-null terminator)
|
|
\par _mse = 02 (STGTY_STREAM)
|
|
\par _bflags = 01 (DE_BLACK)
|
|
\par _sidLeftSib = FFFFFFFF (none)
|
|
\par _sidRightSib = FFFFFFFF (none)
|
|
\par _sidChild = FFFFFFFF (n/a for STGTY_STREAM)
|
|
\par _clsid = 0000 0000 0000 0000 0000 0000 0000 0000 (n/a)
|
|
\par _dwUserFlags = 00000000 (n/a)
|
|
\par _time[0] = CreateTime = 00000000 00000000 (n/a)
|
|
\par _time[1] = ModifyTime = 00000000 00000000 (n/a)
|
|
\par _startSect = 00000000 (SECT in mini-fat, since _ulSize is smaller than _ulMiniSectorCutoff)
|
|
\par _ulSize = 00000220 (< ssheader._ulMiniSectorCutoff, so _sectStart is in Mini)
|
|
\par _dptPropType = 0000 (n/a)
|
|
\par
|
|
\par 000500: 5300 7400 7200 6500 6100 6D00 2000 3100 S.t.r.e.a.m. .1.
|
|
\par 000510: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000520: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000530: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000540: 1200 0201 FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par 000550: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000560: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 000570: 0000 0000 0000 0000 2002 0000 0000 0000 ........ .......
|
|
\par 000580: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par {\listtext\pard\plain\s3 \cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.3.4\tab}}\pard\plain \s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\s3\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\ls1\ilvl2\outlinelevel2\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst5\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrxst46\pnrxst0\pnrxst2\pnrxst0\pnrstop12\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb5\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr4\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \cf2\cgrid {SID 3: Unused
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 000590: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0005A0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0005B0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0005C0: 0000 0000 FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par 0005D0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0005E0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par 0005F0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
|
|
\par {\*\bkmkstart _Toc345472320}{\*\bkmkstart _Toc345963649}{\*\bkmkstart _Toc351782794}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.4\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc4\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr4\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {SECT 3: MiniFat Sector{\*\bkmkend _Toc345472320}{\*\bkmkend _Toc345963649}{\*\bkmkend _Toc351782794}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\f2 \tab SECT 0: 00000001: pointer to the second sector in the \ldblquote Stream 1\rdblquote data. This sector is
|
|
\par \tab \tab \tab \tab the first sector of \ldblquote Stream 1\rdblquote , it is referred to by _sectStart of SID 2
|
|
\par \tab SECT 1: 00000002: pointer to the third sector in the \ldblquote Stream 1\rdblquote data. This sector is
|
|
\par \tab \tab \tab \tab the second sector of \ldblquote Stream 1\rdblquote , it is referred to in MiniFat SECT 0, above.
|
|
\par . . .
|
|
\par }\pard \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\outlinelevel0\adjustright \shading500 {\f2 SECT 8: FFFFFFFE = ENDOFCHAIN: marks the end of the \ldblquote Stream 1\rdblquote data.
|
|
\par }\pard \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 {\f2
|
|
\par }\pard \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\outlinelevel0\adjustright \shading500 {\f2 \tab Further Entries are empty (FREESECT = 0xFFFFFFFF)
|
|
\par }\pard \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 {\f2
|
|
\par 000600: 0100 0000 0200 0000 0300 0000 0400 0000 ................
|
|
\par 000610: 0500 0000 0600 0000 0700 0000 0800 0000 ................
|
|
\par 000620: FEFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par . . .
|
|
\par 0007F0: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par {\*\bkmkstart _Toc345472321}{\*\bkmkstart _Toc345963650}{\*\bkmkstart _Toc351782795}{\listtext\pard\plain\s2 \fs28\cf2\cgrid \hich\af0\dbch\af0\loch\f0 3.5\tab}}\pard\plain \s2\qj\ri3600\sb240\sa86\keep\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \ls1\ilvl1\outlinelevel1\ls1\ilvl1\outlinelevel1\pnrauth1\pnrdate-1508828266\pnrstart0\pnrxst3\pnrxst0\pnrxst0\pnrxst0\pnrxst46\pnrxst0\pnrxst1\pnrxst0\pnrstop8\pnrstart1\pnrrgb1\pnrrgb3\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrrgb0\pnrstop9\pnrstart2\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc3\pnrnfc0\pnrnfc0\pnrnfc0\pnrnfc5\pnrnfc0\pnrnfc0\pnrstop18\pnrstart3\pnrpnbr3\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr5\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrpnbr0\pnrstop36\adjustright \fs28\cf2\cgrid {SECT 4: MiniStream (Data of \ldblquote Stream 1\rdblquote ){\*\bkmkend _Toc345472321}{\*\bkmkend _Toc345963650}{\*\bkmkend _Toc351782795}
|
|
\par }\pard\plain \s73\fi-720\li360\ri-720\nowidctlpar\widctlpar\tx720\tx1080\tx1440\tx1800\tx2160\tx2520\tx2880\tx3240\tx3600\tx3960\tx4320\tx4680\tx5040\tx5400\tx5760\tx6120\tx6480\tx6840\tx7200\tx7560\tx7920\tx8280\adjustright \shading500 \f1\fs16\cgrid {\i\f2\fs14 // referred to by SECTs in MiniFat of SECT 3, above
|
|
\par }{\f2
|
|
\par 000800: 4461 7461 2066 6F72 2073 7472 6561 6D20 Data for stream
|
|
\par 000810: 3144 6174 6120 666F 7220 7374 7265 616D 1Data for stream
|
|
\par 000820: 2031 4461 7461 2066 6F72 2073 7472 6561 1Data for strea
|
|
\par . . .
|
|
\par 000A00: 7461 2066 6F72 2073 7472 6561 6D20 3144 ta for stream 1D
|
|
\par 000A10: 6174 6120 666F 7220 7374 7265 616D 2031 ata for stream 1
|
|
\par
|
|
\par }{\i\f2\fs14 // data ends at 000A1F, MiniSector is filled to the end with known data (a copy of the header or
|
|
\par // FFFFFFF to prevent random disk or memory contents from contaminating the file on-disk.
|
|
\par }{\f2
|
|
\par 000A20: 0000 0000 0000 0000 3B00 03FF FE00 0900 ........;.......
|
|
\par 000A30: 0600 0000 0000 0000 0000 0000 0000 0100 ................
|
|
\par 000A40: D0CF 11E0 A1B1 1AE1 0000 0000 0000 0000 ................
|
|
\par 000A50: 0000 0000 0000 0000 003B 0003 FFFE 0009 .........;......
|
|
\par 000A60: 0006 0000 0000 0000 0000 0000 0000 0001 ................
|
|
\par 000A70: 0000 0001 0000 0000 0000 1000 0000 0002 ................
|
|
\par 000A80: 0000 0001 FFFF FFFE 0000 0000 0000 0000 ................
|
|
\par 000A90: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
|
|
\par . . .
|
|
\par 000BF0: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................}{
|
|
\par }\pard\plain \nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\f0 \sect }\sectd \marglsxn1440\margrsxn1440\binfsxn258\binsxn258\pgnrestart\pgnlcrm\linex0\endnhere\sectdefaultcl {\header \pard\plain \s35\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright \f5\fs16\cgrid {
|
|
\par }}\pard\plain \s46\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw30\brsp60 \brdrbtw\brdrs\brdrw30\brsp60 \outlinelevel0\adjustright \b\fs36\cf2\cgrid {Index
|
|
\par }\pard\plain \s43\qj\sb720\sa480\sl220\slmult0\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\f0 \sect }\sectd \marglsxn1440\margrsxn1440\binfsxn258\binsxn258\sbknone\pgnrestart\pgnlcrm\linex0\cols2\endnhere\sectdefaultcl {\header \pard\plain \s35\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright \f5\fs16\cgrid {\field{\*\fldinst {ref ProjectName}}{\fldrslt {\b Error! Reference source not found.}}}{\tab }{\field{\*\fldinst {title }}{\fldrslt {Compound File Binary Format}}}{\tab Draft: }{\field{\*\fldinst {ref Version}}{\fldrslt {\b Error! Reference source not found.}}}{; }{\field{\*\fldinst {DATE}}{\fldrslt {\lang1024 01/03/97}}}{
|
|
\par }}{\footer \pard\plain \s34\keepn\nowidctlpar\widctlpar\tqc\tx4320\tqr\tx8640\adjustright \f5\fs16\cgrid {\f3 \'d3}{\f1 Microsoft Corporation, 1992. All Rights Reserved.\tab }{\field{\*\fldinst {\f1 if }{\field{\*\fldinst {\f1 seq chapt \\c}}{\fldrslt {\f1\lang1024 0}}}{\f1 <> 0 "}{\field{\*\fldinst {\f1 info subject}}{\fldrslt }}{\f1 }{\field{\*\fldinst {\f1 seq chapt \\c}}{\fldrslt {\f1\lang1024 0}}}{\f1 -" ""}}}{\field\flddirty{\*\fldinst {\f1 PAGE}}{\fldrslt {\f1 i}}}{\f1 \tab Microsoft Confidential}{\v\f1 (printed }{\field{\*\fldinst {\v\f1 date \\@ "M/d/yy h:mm AM/PM"}}{\fldrslt {\v\f1\lang1024 1/3/97 2:20 PM}}}{\v\f1 )}{\f1
|
|
\par }{
|
|
\par }}\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \outlinelevel0\adjustright \b\f4\fs20\cgrid {\field{\*\fldinst {\f0 INDEX \\h "A"}}{\fldrslt {\b0\f0\lang1024 C
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\lang1024 chain, 2
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \outlinelevel0\adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 D
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\b\lang1024 DECOLOR}{\lang1024 , 3
|
|
\par }\pard \s31\nowidctlpar\widctlpar\outlinelevel0\adjustright {\lang1024 DFPROPTYPE, 1
|
|
\par }\pard \s31\nowidctlpar\widctlpar\adjustright {\b\lang1024 DFSIGNATURE}{\lang1024 , 1
|
|
\par }{\b\lang1024 DIF}{\lang1024 , 3
|
|
\par }{\b\lang1024 DIFSECT}{\lang1024 , 1
|
|
\par }{\b\lang1024 Directory}{\lang1024 , 3
|
|
\par }\pard \s31\nowidctlpar\widctlpar\outlinelevel0\adjustright {\b\lang1024 Double-Indirect Fat}{\lang1024 , 3
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \outlinelevel0\adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 E
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\b\lang1024 ENDOFCHAIN}{\lang1024 , 1
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \outlinelevel0\adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 F
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\lang1024 Fat, 2
|
|
\par }{\b\lang1024 FATSECT}{\lang1024 , 1
|
|
\par }{\b\lang1024 FREESECT}{\lang1024 , 1
|
|
\par }{\b\lang1024 FSINDEX}{\lang1024 , 1
|
|
\par }{\b\lang1024 FSOFFSET}{\lang1024 , 1
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 M
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\b\lang1024 MiniFat}{\lang1024 , 2
|
|
\par }{\b\lang1024 Ministream}{\lang1024 , 2
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 O
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\outlinelevel0\adjustright \f4\fs20\cgrid {\b\lang1024 OFFSET}{\lang1024 , 1
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 R
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\outlinelevel0\adjustright \f4\fs20\cgrid {\b\lang1024 Root Directory Entry}{\lang1024 , 4
|
|
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \outlinelevel0\adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 S
|
|
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\lang1024 SECT, 1
|
|
\par sector, 1
\par SID, 1, 4
\par }{\b\lang1024 STGTY}{\lang1024 , 3
\par }\pard\plain \s33\qj\sb240\sa58\keepn\nowidctlpar\widctlpar\brdrt\brdrs\brdrw15\brsp20 \brdrbtw\brdrs\brdrw15\brsp20 \outlinelevel0\adjustright \b\f4\fs20\cgrid {\b0\f0\lang1024 V
\par }\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\lang1024 virtual stream, 1
\par }}}\pard\plain \s31\nowidctlpar\widctlpar\adjustright \f4\fs20\cgrid {\f0
\par }}
|