4.6.6.1 ROP Request Buffer

The ROP request buffer in this example resembles the following.

 0000: 48 06 00 01 00 00 03 BB-97 31 A7 02

The composition of the bytes is as follows:

RopId: 0x48 (RopSpoolerLockMessage ROP ([MS-OXCROPS] section 2.2.7.5))

LogonID: 0x06

InputHandleIndex: 0x00 (handle to the Logon object)

MessageId: 0001-0003BB9731A7

LockState: 0x02 (finish)

Show: