<div class="content"><p> </p><p>The <b>RPC_HEADER_EXT</b> structure provides information
about the payload that follows.</p><table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td colspan="16">
  <p>Version</p>
  </td>
  <td colspan="16">
  <p>Flags</p>
  </td>
 </tr>
 <tr>
  <td colspan="16">
  <p>Size</p>
  </td>
  <td colspan="16">
  <p>SizeActual</p>
  </td>
 </tr>
</tbody></table><p><b>Version (2 bytes):  </b>The version of the
structure. This value MUST be set to 0x0000.</p><p><b>Flags (2 bytes):  </b>The <span><a href="c5869b4a-c0d3-4ceb-80f4-c47a250ddf3d#gt_425bcab9-7911-4eae-b414-624b7a51eb5f" data-linktype="relative-path">flags</a></span>
that specify how data that follows this header MUST be interpreted. The flags
in the following table are valid.</p><table><thead>
  <tr>
   <th>
   <p>Flag name</p>
   </th>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Meaning</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p><b>Compressed</b></p>
  </td>
  <td>
  <p>0x0001</p>
  </td>
  <td>
  <p>The data that follows the <b>RPC_HEADER_EXT</b>
  structure is compressed. The size of the data when uncompressed is in the <b>SizeActual</b>
  field. If this flag is not set, the <b>Size</b> and <b>SizeActual</b> fields
  MUST be the same. If this flag is set, the value of the <b>Size</b> field MUST
  be less than the value of the <b>SizeActual</b> field.</p>
  </td>
 </tr><tr>
  <td>
  <p><b>XorMagic</b></p>
  </td>
  <td>
  <p>0x0002</p>
  </td>
  <td>
  <p>The data following the <b>RPC_HEADER_EXT</b> structure
  has been obfuscated. For more details about the obfuscation algorithm, see
  section <span><a href="1395a1f7-9ffe-41a0-8649-e99dc310b27b" data-linktype="relative-path">3.1.4.1.1.3</a></span>.</p>
  </td>
 </tr><tr>
  <td>
  <p><b>Last</b></p>
  </td>
  <td>
  <p>0x0004</p>
  </td>
  <td>
  <p>No other <b>RPC_HEADER_EXT</b> structure follows the
  data of the current <b>RPC_HEADER_EXT </b>structure. This flag indicates that
  there are multiple buffers, each with its own <b>RPC_HEADER_EXT</b>, one
  after the other.</p>
  </td>
 </tr></tbody></table><p><b>Size (2 bytes):  </b>The total length of the
payload data that follows the <b>RPC_HEADER_EXT</b> structure. This length does
not include the length of the <b>RPC_HEADER_EXT</b> structure.</p><p><b>SizeActual (2 bytes):  </b>The length of the
payload data after it has been uncompressed. This field is only useful if the <b>Compressed</b>
flag is set in the <b>Flags </b>field. If the <b>Compressed</b> flag is not
set, this value MUST be equal to the value of the <b>Size</b> field.</p></div>