4.5.1 Client Request Buffer

  • Article

The client request buffer for the RopMoveFolder ROP ([MS-OXCROPS] section 2.2.4.7) example consists of a 30-byte sequence formatted as follows.

 0000: 35 00 01 02 01 01 01 00-00 00 0E 8E DF 36 46 00
 0010: 6F 00 6C 00 64 00 65 00-72 00 31 00 00 00

The first six bytes of the request buffer map to the RopId and LogonID fields, as described in [MS-OXCROPS] section 2.2.4.7.1, and the SourceHandleIndex, DestHandleIndex, WantAsynchronous, and UseUnicode fields of the RopMoveFolder ROP format, as described in section 2.2.1.7.1.

  
 0000: 35 00 01 02 01 01

RopId: 0x35 (RopMoveFolder ROP)

LogonID: 0x00

SourceHandleIndex: 0x01. The location where the handle for the parent folder of the folder to move is stored.

DestHandleIndex: 0x02. The location where the handle for the destination folder is located.

WantAsynchronous: 0x01 (TRUE). The ROP is executed asynchronously.

UseUnicode: 0x01 (TRUE). The value of the NewFolderName field is in Unicode format.

The next eight bytes are the FolderId field, as described in section 2.2.1.7.1.

  
 0006: 01 00 00 00 0E 8E DF 36

FolderId: 0001-00000E8EDF36

The remaining 16 bytes of the request buffer specify the new name of the folder.

  
 000E: 46 00 6F 00 6C 00 64 00-65 00 72 00 31 00 00 00

NewFolderName: "Folder1"