4.5.1.1 Upstream Partner Sends Out CMD_REMOTE_CO
COMM_BOP (4 bytes):
-
00 00 00 00
COMM_COMMAND (4 bytes): 18 2 00 0
COMM_TO (50 bytes):
-
10 00 00 00 e6 87 d1 e5 aa 12 df 48 ab c1 d7 94 0a e0 80 4c 1a 00 00 00 53 00 48 00 49 00 43 00 4f 00 2d 00 54 00 45 00 4d 00 50 00 2d 00 32 00 00 00
COMM_FROM (50 bytes):
-
10 00 00 00 1a b2 f4 54 fd 03 74 43 8e 3b 28 75 e7 40 d9 58 1a 00 00 00 53 00 48 00 49 00 43 00 4f 00 2d 00 54 00 45 00 4d 00 50 00 2d 00 31 00 00 0
COMM_REPLICA (96 bytes):
-
10 00 00 00 e6 87 d1 e5 aa 12 df 48 ab c1 d7 94 0a e0 80 4c 48 00 00 00 44 00 4f 00 4d 00 41 00 49 00 4e 00 20 00 53 00 59 00 53 00 54 00 45 00 4d 00 20 00 56 00 4f 00 4c 00 55 00 4d 00 45 00 20 00 28 00 53 00 59 00 53 00 56 00 4f 00 4c 00 20 00 53 00 48 00 41 00 52 00 45 00 29 00 00 0
COMM_CXTION (98 bytes):
-
10 00 00 00 f0 a3 f7 08 5c e0 94 49 9a 60 e7 cd 40 57 ec 6f 4a 00 00 00 31 00 43 00 33 00 30 00 46 00 43 00 33 00 38 00 2d 00 30 00 37 00 44 00 31 00 2d 00 34 00 30 00 44 00 46 00 2d 00 38 00 37 00 37 00 42 00 2d 00 38 00 43 00 34 00 38 00 42 00 46 00 32 00 31 00 32 00 30 00 30 00 44 00 00 00
COMM_JOIN_GUID (20 bytes):
-
10 00 00 00 ae 1b b7 65 7a c4 40 db c9 f8 bd 7e 32 65 43 41
COMM_LAST_JOIN_TIME (8 bytes):
-
14 71 d5 42 f1 8f c6 01
COMM_REMOTE_CO (796 bytes):
-
18 03 00 00 1a 00 00 00 2c 00 00 01 00 00 00 00 14 00 00 00 03 80 00 00 00 00 00 00 20 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 1d f8 09 e6 09 90 c6 01 60 b1 c9 00 00 00 00 00 b0 b0 c9 00 00 00 00 00 b0 b0 c9 00 00 00 00 00 01 00 00 00 01 00 00 00 4d 0c d2 35 0d b9 09 4d bd 87 e2 c6 b0 8d 59 21 76 65 78 79 63 b8 da 41 b1 1a 41 63 46 eb be b3 de fb 44 7f b7 58 d3 4a 8d 05 2a 3a 0b ec 17 d0 e6 87 d1 e5 aa 12 df 48 ab c1 d7 94 0a e0 80 4c e6 87 d1 e5 aa 12 df 48 ab c1 d7 94 0a e0 80 4c 5e 1b 8b 23 ea ac 07 4e be ca e7 ad 76 85 16 ad 8e 89 bf 35 b5 89 c6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 1d e8 00 00 00 00 00 ca 58 93 64 f1 8f c6 01 16 00 72 00 65 00 67 00 65 00 64 00 69 00 74 00 2e 00 65 00 78 00 65 00 00 00 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Type _CHANGE_ORDER_RECORD_*
-
+0x000 SequenceNumber : 1a 0 0 0 +0x004 Flags : 2c 0 0 1 (0x100002c - CO_FLAG_COMPRESSED_STAGE | CO_FLAG_LOCALCO | CO_FLAG_LOCATION_CMD | CO_FLAG_CONTENT_CMD) +0x008 IFlags : 0 0 0 0 (0x0) +0x00c State : 14 0 0 0 (Request outbound propagation) +0x010 ContentCmd : 3 80 0 0 (0x8003 - REASON_BASIC_INFO_CHANGE | REASON_DATA_EXTEND | REASON_DATA_OVERWRITE) +0x014 LocationCmd : 0 0 0 0 (0x0) +0x018 FileAttributes : 20 0 0 0 +0x01c FileVersionNumber : 0 0 0 0 +0x020 PartnerAckSeqNumber : 1a 0 0 0 0 0 0 0 +0x028 FileSize : 0 0 2 0 0 0 0 0 +0x030 FileOffset : 0 0 0 0 0 0 0 0 +0x038 FrsVsn : 1d f8 9 e6 9 90 c6 1 +0x040 FileUsn : 60 b1 c9 0 0 0 0 0 +0x048 JrnlUsn : b0 b0 c9 0 0 0 0 0 +0x050 JrnlFirstUsn : b0 b0 c9 0 0 0 0 0 +0x058 OriginalReplicaNum : 1 0 0 0 +0x05c NewReplicaNum : 1 0 0 0 +0x060 ChangeOrderGuid : 4d c d2 35 d b9 9 4d bd 87 e2 c6 b0 8d 59 21 +0x070 OriginatorGuid : 76 65 78 79 63 b8 da 41 b1 1a 41 63 46 eb be b3 +0x080 FileGuid : de fb 44 7f b7 58 d3 4a 8d 5 2a 3a b ec 17 d0 +0x090 OldParentGuid : e6 87 d1 e5 aa 12 df 48 ab c1 d7 94 a e0 80 4c +0x0a0 NewParentGuid : e6 87 d1 e5 aa 12 df 48 ab c1 d7 94 a e0 80 4c +0x0b0 CxtionGuid : 5e 1b 8b 23 ea ac 7 4e be ca e7 ad 76 85 16 ad +0x0c0 AckVersion : 8e 89 bf 35 b5 89 c6 1 +0x0c8 Spare2Ull : 0 0 0 0 0 0 0 0 +0x0d0 Spare1Guid : 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 +0x0e0 Spare2Guid : 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 +0x0f0 Spare1Wcs : 0 0 0 0 +0x0f4 Spare2Wcs : 0 0 0 0 +0x0f8 Extension : f8 1d e8 0 +0x0fc Spare2Bin : 0 0 0 0 +0x100 EventTime : ca 58 93 64 f1 8f c6 1 +0x108 FileNameLength : 16 0 +0x10a FileName : 72 0 65 0 67 0 65 0 64 0 69 0 74 0 2e 0 65 0 78 0 65 0 (regedit.exe)
COMM_CO_EXTENSION_2 (72 bytes):
-
48 00 00 00 01 00 02 00 18 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 01 00 00 00 57 68 ac c0 53 63 0b ac fb b1 81 81 1e bf 80 32 18 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 28 56 77 66 f1 8f c6 01
COMM_EOP (4 bytes):
-
ff ff ff ff