Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All ROP Request Buffer

The ROP request buffer in this example resembles the following.

 0000: 48 06 00 01 00 00 03 BB-97 31 A7 02

The composition of the bytes is as follows:

RopId: 0x48 (RopSpoolerLockMessage ROP ([MS-OXCROPS] section

LogonID: 0x06

InputHandleIndex: 0x00 (handle to the Logon object)

MessageId: 0001-0003BB9731A7

LockState: 0x02 (finish)

© 2015 Microsoft