171 |
{ |
{ |
172 |
flags |= RDP_LOGON_BLOB; |
flags |= RDP_LOGON_BLOB; |
173 |
DEBUG_RDP5(("Sending RDP5-style Logon packet\n")); |
DEBUG_RDP5(("Sending RDP5-style Logon packet\n")); |
174 |
packetlen = 4 + // Unknown uint32 |
packetlen = 4 + /* Unknown uint32 */ |
175 |
4 + // flags |
4 + /* flags */ |
176 |
2 + // len_domain |
2 + /* len_domain */ |
177 |
2 + // len_user |
2 + /* len_user */ |
178 |
(flags & RDP_LOGON_AUTO ? 2 : 0) + // len_password |
(flags & RDP_LOGON_AUTO ? 2 : 0) + /* len_password */ |
179 |
(flags & RDP_LOGON_BLOB ? 2 : 0) + // Length of BLOB |
(flags & RDP_LOGON_BLOB ? 2 : 0) + /* Length of BLOB */ |
180 |
2 + // len_program |
2 + /* len_program */ |
181 |
2 + // len_directory |
2 + /* len_directory */ |
182 |
(0 < len_domain ? len_domain : 2) + // domain |
(0 < len_domain ? len_domain : 2) + /* domain */ |
183 |
len_user + (flags & RDP_LOGON_AUTO ? len_password : 0) + 0 + // We have no 512 byte BLOB. Perhaps we must? |
len_user + (flags & RDP_LOGON_AUTO ? len_password : 0) + 0 + /* We have no 512 byte BLOB. Perhaps we must? */ |
184 |
(flags & RDP_LOGON_BLOB && !(flags & RDP_LOGON_AUTO) ? 2 : 0) + // After the BLOB is a unknown int16. If there is a BLOB, that is. |
(flags & RDP_LOGON_BLOB && !(flags & RDP_LOGON_AUTO) ? 2 : 0) + /* After the BLOB is a unknown int16. If there is a BLOB, that is. */ |
185 |
(0 < len_program ? len_program : 2) + (0 < len_directory ? len_directory : 2) + 2 + // Unknown (2) |
(0 < len_program ? len_program : 2) + (0 < len_directory ? len_directory : 2) + 2 + /* Unknown (2) */ |
186 |
2 + // Client ip length |
2 + /* Client ip length */ |
187 |
len_ip + // Client ip |
len_ip + /* Client ip */ |
188 |
2 + // DLL string length |
2 + /* DLL string length */ |
189 |
len_dll + // DLL string |
len_dll + /* DLL string */ |
190 |
2 + // Unknown |
2 + /* Unknown */ |
191 |
2 + // Unknown |
2 + /* Unknown */ |
192 |
64 + // Time zone #0 |
64 + /* Time zone #0 */ |
193 |
2 + // Unknown |
2 + /* Unknown */ |
194 |
64 + // Time zone #1 |
64 + /* Time zone #1 */ |
195 |
32; // Unknown |
32; /* Unknown */ |
196 |
|
|
197 |
s = sec_init(sec_flags, packetlen); |
s = sec_init(sec_flags, packetlen); |
198 |
DEBUG_RDP5(("Called sec_init with packetlen %d\n", packetlen)); |
DEBUG_RDP5(("Called sec_init with packetlen %d\n", packetlen)); |
199 |
|
|
200 |
out_uint32(s, 0); // Unknown |
out_uint32(s, 0); /* Unknown */ |
201 |
out_uint32_le(s, flags); |
out_uint32_le(s, flags); |
202 |
out_uint16_le(s, len_domain); |
out_uint16_le(s, len_domain); |
203 |
out_uint16_le(s, len_user); |
out_uint16_le(s, len_user); |
243 |
out_uint16_le(s, 0); |
out_uint16_le(s, 0); |
244 |
} |
} |
245 |
out_uint16_le(s, 2); |
out_uint16_le(s, 2); |
246 |
out_uint16_le(s, len_ip + 2); // Length of client ip |
out_uint16_le(s, len_ip + 2); /* Length of client ip */ |
247 |
rdp_out_unistr(s, "127.0.0.1", len_ip); |
rdp_out_unistr(s, "127.0.0.1", len_ip); |
248 |
out_uint16_le(s, len_dll + 2); |
out_uint16_le(s, len_dll + 2); |
249 |
rdp_out_unistr(s, "C:\\WINNT\\System32\\mstscax.dll", len_dll); |
rdp_out_unistr(s, "C:\\WINNT\\System32\\mstscax.dll", len_dll); |