Update rdpwrap.ini

rdpwrap.ini - add support for termsrv.dll versions:
10.0.18362.267
10.0.18362.53
10.0.18362.1
10.0.17763.437
10.0.17763.379
10.0.17763.292
10.0.17763.165 x64
10.0.17134.706
(+saurav-biswas changes)
This commit is contained in:
asmtron 2019-09-04 16:36:04 +00:00 committed by GitHub
parent f79998c217
commit 9abffc40f3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 630 additions and 1 deletions

View File

@ -2,7 +2,7 @@
; Do not modify without special knowledge ; Do not modify without special knowledge
[Main] [Main]
Updated=2019-08-02 Updated=2019-09-02
LogFile=\rdpwrap.txt LogFile=\rdpwrap.txt
SLPolicyHookNT60=1 SLPolicyHookNT60=1
SLPolicyHookNT61=1 SLPolicyHookNT61=1
@ -93,6 +93,104 @@ DefPolicyPatch.x64=1
DefPolicyOffset.x64=65FF7 DefPolicyOffset.x64=65FF7
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6001.22286]
SingleUserPatch.x86=1
SingleUserOffset.x86=185E4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=70DDE
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=17FD8
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=65C01
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6001.22323]
SingleUserPatch.x86=1
SingleUserOffset.x86=185E4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=70DFA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=17FD8
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=65C1D
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6001.22357]
SingleUserPatch.x86=1
SingleUserOffset.x86=185E4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=70DFA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=17FD8
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=65C1D
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6001.22801]
SingleUserPatch.x86=1
SingleUserOffset.x86=185F8
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=71ADA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=18010
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=666AD
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.22515]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FA8
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=71AFA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179C0
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=6675D
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.22641]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FA8
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=71AFA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179C0
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=6675D
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.22790]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FA8
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=71B02
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179C0
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=66765
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.23521] [6.0.6002.23521]
SingleUserPatch.x86=1 SingleUserPatch.x86=1
SingleUserOffset.x86=17FB4 SingleUserOffset.x86=17FB4
@ -107,6 +205,20 @@ DefPolicyPatch.x64=1
DefPolicyOffset.x64=669CB DefPolicyOffset.x64=669CB
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6003.20482]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FC4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=71F8A
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179DC
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=66B65
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.1.7600.16385] [6.1.7600.16385]
SingleUserPatch.x86=1 SingleUserPatch.x86=1
SingleUserOffset.x86=19E25 SingleUserOffset.x86=19E25
@ -121,6 +233,20 @@ DefPolicyPatch.x64=1
DefPolicyOffset.x64=17AD2 DefPolicyOffset.x64=17AD2
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7600.20621]
SingleUserPatch.x86=1
SingleUserOffset.x86=19E1D
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17DC2
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=196EB
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17ADE
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7600.20890] [6.1.7600.20890]
SingleUserPatch.x86=1 SingleUserPatch.x86=1
SingleUserOffset.x86=19E2D SingleUserOffset.x86=19E2D
@ -149,6 +275,20 @@ DefPolicyPatch.x64=1
DefPolicyOffset.x64=17B5E DefPolicyOffset.x64=17B5E
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7600.21420]
SingleUserPatch.x86=1
SingleUserOffset.x86=19EF5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17D56
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19761
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17B3E
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.17514] [6.1.7601.17514]
SingleUserPatch.x86=1 SingleUserPatch.x86=1
SingleUserOffset.x86=1A49D SingleUserOffset.x86=1A49D
@ -233,6 +373,48 @@ DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D5E DefPolicyOffset.x64=17D5E
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.22213]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A5AD
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F26
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19DB1
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D06
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.22435]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A5BD
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F36
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19DB1
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D16
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.22476]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A5CD
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F56
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19DC1
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D52
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.22750] [6.1.7601.22750]
SingleUserPatch.x86=1 SingleUserPatch.x86=1
SingleUserOffset.x86=1A655 SingleUserOffset.x86=1A655
@ -289,6 +471,34 @@ DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D2E DefPolicyOffset.x64=17D2E
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.24326]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A675
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F1E
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19E41
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17CEE
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.24402]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A675
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F26
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19E41
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17CFE
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.2.8102.0] [6.2.8102.0]
SingleUserPatch.x86=1 SingleUserPatch.x86=1
SingleUserOffset.x86=F7E9 SingleUserOffset.x86=F7E9
@ -409,6 +619,27 @@ SLPolicyInternal.x64=1
SLPolicyOffset.x64=21FD0 SLPolicyOffset.x64=21FD0
SLPolicyFunc.x64=New_Win8SL SLPolicyFunc.x64=New_Win8SL
[6.2.9200.22715]
; x86-Offsets are not safe (determined without symbols)
SingleUserPatch.x86=1
SingleUserOffset.x86=155B2
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2BAE4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=13F68
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2A396
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=195B9
SLPolicyFunc.x86=New_Win8SL
SLPolicyInternal.x64=1
SLPolicyOffset.x64=21F90
SLPolicyFunc.x64=New_Win8SL
[6.3.9431.0] [6.3.9431.0]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=8A611 LocalOnlyOffset.x86=8A611
@ -617,6 +848,32 @@ SLInitHook.x64=1
SLInitOffset.x64=5D660 SLInitOffset.x64=5D660
SLInitFunc.x64=New_CSLQuery_Initialize SLInitFunc.x64=New_CSLQuery_Initialize
[6.3.9600.19318]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=B43E8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=89EAC
LocalOnlyCode.x64=nopjmp
SingleUserPatch.x86=1
SingleUserOffset.x86=3ED25
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=35779
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3D579
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=43CE5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=180F8
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=5C0D0
SLInitFunc.x64=New_CSLQuery_Initialize
[6.4.9841.0] [6.4.9841.0]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=956A8 LocalOnlyOffset.x86=956A8
@ -773,6 +1030,58 @@ SLInitHook.x64=1
SLInitOffset.x64=250F0 SLInitOffset.x64=250F0
SLInitFunc.x64=New_CSLQuery_Initialize SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10240.18036]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7E18
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=96961
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=32715
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17264
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2F299
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=EDC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3F968
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=24C30
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10240.18186]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8048
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=96A41
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=32B15
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17264
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2F699
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=EDC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3FA58
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=249D0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10586.0] [10.0.10586.0]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7C18 LocalOnlyOffset.x86=A7C18
@ -1399,6 +1708,48 @@ SLInitHook.x64=1
SLInitOffset.x64=C920 SLInitOffset.x64=C920
SLInitFunc.x64=New_CSLQuery_Initialize SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14393.2608]
; no x64 version
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6248
LocalOnlyCode.x86=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=36CE5
SingleUserCode.x86=nop
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31209
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
SLInitHook.x86=1
SLInitOffset.x86=45824
SLInitFunc.x86=New_CSLQuery_Initialize
[10.0.14393.2906]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6578
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D8A1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=36CE5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1B6A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31209
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=F185
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45912
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22C80
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14901.1000] [10.0.14901.1000]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6038 LocalOnlyOffset.x86=A6038
@ -2157,6 +2508,32 @@ SLInitHook.x64=1
SLInitOffset.x64=234DC SLInitOffset.x64=234DC
SLInitFunc.x64=New_CSLQuery_Initialize SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15063.1746]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A60D8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8CB21
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35CA5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=15EA4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30999
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=FAE5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3F94D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2328C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16179.1000] [10.0.16179.1000]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AA568 LocalOnlyOffset.x86=AA568
@ -2703,6 +3080,32 @@ SLInitHook.x64=1
SLInitOffset.x64=22D5C SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16299.1087]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A91F8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FC11
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=392E5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DD39
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4626D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22E4C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16353.1000] [10.0.16353.1000]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9388 LocalOnlyOffset.x86=A9388
@ -3095,6 +3498,62 @@ SLInitHook.x64=1
SLInitOffset.x64=1ABFC SLInitOffset.x64=1ABFC
SLInitFunc.x64=New_CSLQuery_Initialize SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17763.168]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AFC74
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=77AF1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=4D665
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1322C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=4BE69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17F45
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=5B18A
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=1ABFC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17763.288]
Patch CEnforcementCore::GetInstanceOfTSLicense
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AFAD4
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=77A11
LocalOnlyCode.x64=jmpshort
Patch CSessionArbitrationHelper::IsSingleSessionPerUserEnabled
SingleUserPatch.x86=1
SingleUserOffset.x86=4D665
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1322C
SingleUserCode.x64=Zero
Patch CDefPolicy::Query
DefPolicyPatch.x86=1
DefPolicyOffset.x86=4BE69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17F45
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
Hook CSLQuery::Initialize
SLInitHook.x86=1
SLInitOffset.x86=5B18A
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=1ABFC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17763.292] [10.0.17763.292]
LocalOnlyPatch.x86=1 LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AFAD4 LocalOnlyOffset.x86=AFAD4
@ -3413,6 +3872,25 @@ bServerSku.x64 =FA068
ulMaxDebugSessions.x64=FA06C ulMaxDebugSessions.x64=FA06C
bRemoteConnAllowed.x64=FA070 bRemoteConnAllowed.x64=FA070
[6.3.9600.19318-SLInit]
bFUSEnabled.x86 =D4068
lMaxUserSessions.x86 =D406C
bAppServerAllowed.x86 =D4070
bInitialized.x86 =D4074
bMultimonAllowed.x86 =D4078
bServerSku.x86 =D407C
ulMaxDebugSessions.x86=D4080
bRemoteConnAllowed.x86=D4084
bFUSEnabled.x64 =FA054
lMaxUserSessions.x64 =FA058
bAppServerAllowed.x64 =FA05C
bInitialized.x64 =FA060
bMultimonAllowed.x64 =FA064
bServerSku.x64 =FA068
ulMaxDebugSessions.x64=FA06C
bRemoteConnAllowed.x64=FA070
[6.4.9841.0-SLInit] [6.4.9841.0-SLInit]
bFUSEnabled.x86 =BF9F0 bFUSEnabled.x86 =BF9F0
lMaxUserSessions.x86 =BF9F4 lMaxUserSessions.x86 =BF9F4
@ -3470,6 +3948,7 @@ bServerSku.x64 =EDC04
ulMaxDebugSessions.x64=EDC08 ulMaxDebugSessions.x64=EDC08
bRemoteConnAllowed.x64=EDC0C bRemoteConnAllowed.x64=EDC0C
[10.0.9926.0-SLInit] [10.0.9926.0-SLInit]
bFUSEnabled.x86 =C17D8 bFUSEnabled.x86 =C17D8
lMaxUserSessions.x86 =C17DC lMaxUserSessions.x86 =C17DC
@ -3518,6 +3997,45 @@ bServerSku.x86 =C3F74
ulMaxDebugSessions.x86=C3F78 ulMaxDebugSessions.x86=C3F78
bRemoteConnAllowed.x86=C3F7C bRemoteConnAllowed.x86=C3F7C
zlMaxUserSessions.x64 =F23B0
lMaxUserSessions.x64 =F23B0
bAppServerAllowed.x64 =F23B4
bServerSku.x64 =F23B8
bFUSEnabled.x64 =F3460
bInitialized.x64 =F3464
bMultimonAllowed.x64 =F3468
ulMaxDebugSessions.x64=F346C
bRemoteConnAllowed.x64=F3470
[10.0.10240.18036-SLInit]
bFUSEnabled.x86 =C3F88
lMaxUserSessions.x86 =C3F8C
bAppServerAllowed.x86 =C3F90
bInitialized.x86 =C3F94
bMultimonAllowed.x86 =C3F98
bServerSku.x86 =C3F9C
ulMaxDebugSessions.x86=C3FA0
bRemoteConnAllowed.x86=C3FA4
lMaxUserSessions.x64 =F23B0
bAppServerAllowed.x64 =F23B4
bServerSku.x64 =F23B8
bFUSEnabled.x64 =F3460
bInitialized.x64 =F3464
bMultimonAllowed.x64 =F3468
ulMaxDebugSessions.x64=F346C
bRemoteConnAllowed.x64=F3470
[10.0.10240.18186-SLInit]
bFUSEnabled.x86 =C4F88
lMaxUserSessions.x86 =C4F8C
bAppServerAllowed.x86 =C4F90
bInitialized.x86 =C4F94
bMultimonAllowed.x86 =C4F98
bServerSku.x86 =C4F9C
ulMaxDebugSessions.x86=C4FA0
bRemoteConnAllowed.x86=C4FA4
lMaxUserSessions.x64 =F23B0 lMaxUserSessions.x64 =F23B0
bAppServerAllowed.x64 =F23B4 bAppServerAllowed.x64 =F23B4
bServerSku.x64 =F23B8 bServerSku.x64 =F23B8
@ -3984,6 +4502,36 @@ bMultimonAllowed.x64 =E8478
ulMaxDebugSessions.x64=E847C ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64 =E8480 bFUSEnabled.x64 =E8480
[10.0.14393.2608-SLInit]
; no x64 version
bInitialized.x86 =C1F94
bServerSku.x86 =C1F98
lMaxUserSessions.x86 =C1F9C
bAppServerAllowed.x86 =C1FA0
bRemoteConnAllowed.x86=C1FA4
bMultimonAllowed.x86 =C1FA8
ulMaxDebugSessions.x86=C1FAC
bFUSEnabled.x86 =C1FB0
[10.0.14393.2906-SLInit]
bInitialized.x86 =C2F94
bServerSku.x86 =C2F98
lMaxUserSessions.x86 =C2F9C
bAppServerAllowed.x86 =C2FA0
bRemoteConnAllowed.x86=C2FA4
bMultimonAllowed.x86 =C2FA8
ulMaxDebugSessions.x86=C2FAC
bFUSEnabled.x86 =C2FB0
bServerSku.x64 =E73D0
lMaxUserSessions.x64 =E73D4
bAppServerAllowed.x64 =E73D8
bInitialized.x64 =E8470
bRemoteConnAllowed.x64=E8474
bMultimonAllowed.x64 =E8478
ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64 =E8480
[10.0.14901.1000-SLInit] [10.0.14901.1000-SLInit]
bInitialized.x86 =C1F6C bInitialized.x86 =C1F6C
bServerSku.x86 =C1F70 bServerSku.x86 =C1F70
@ -4537,6 +5085,28 @@ bServerSku.x64 =E9484
lMaxUserSessions.x64 =E9488 lMaxUserSessions.x64 =E9488
bAppServerAllowed.x64 =E948C bAppServerAllowed.x64 =E948C
[10.0.15063.1746-SLInit]
bInitialized.x86 =C3F98
bServerSku.x86 =C3F9C
lMaxUserSessions.x86 =C3FA0
bAppServerAllowed.x86 =C3FA4
bRemoteConnAllowed.x86=C3FA8
bMultimonAllowed.x86 =C3FAC
ulMaxDebugSessions.x86=C3FB0
bFUSEnabled.x86 =C3FB4
bInitialized.x64 =E9468
bRemoteConnAllowed.x64=E946C
bMultimonAllowed.x64 =E9470
ulMaxDebugSessions.x64=E9474
bFUSEnabled.x64 =E9478
bServerSku.x64 =E9484
lMaxUserSessions.x64 =E9488
bAppServerAllowed.x64 =E948C
[10.0.16179.1000-SLInit] [10.0.16179.1000-SLInit]
bInitialized.x86 =C7F6C bInitialized.x86 =C7F6C
bServerSku.x86 =C7F70 bServerSku.x86 =C7F70
@ -4936,6 +5506,27 @@ bMultimonAllowed.x64 =EE4A8
ulMaxDebugSessions.x64=EE4AC ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64 =EE4B0 bFUSEnabled.x64 =EE4B0
[10.0.16299.1087-SLInit]
bInitialized.x86 =C6F7C
bServerSku.x86 =C6F80
lMaxUserSessions.x86 =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86 =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86 =C6F98
bServerSku.x64 =ED3E8
lMaxUserSessions.x64 =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64 =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64 =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64 =EE4B0
[10.0.16353.1000-SLInit] [10.0.16353.1000-SLInit]
bInitialized.x86 =C6F7C bInitialized.x86 =C6F7C
bServerSku.x86 =C6F80 bServerSku.x86 =C6F80
@ -5222,6 +5813,44 @@ bMultimonAllowed.x64 =ECAC8
ulMaxDebugSessions.x64=ECACC ulMaxDebugSessions.x64=ECACC
bFUSEnabled.x64 =ECAD0 bFUSEnabled.x64 =ECAD0
[10.0.17763.168-SLInit]
bInitialized.x86 =CD798
bServerSku.x86 =CD79C
lMaxUserSessions.x86 =CD7A0
bAppServerAllowed.x86 =CD7A8
bRemoteConnAllowed.x86=CD7AC
bMultimonAllowed.x86 =CD7B0
ulMaxDebugSessions.x86=CD7B4
bFUSEnabled.x86 =CD7B8
bInitialized.x64 =ECAB0
bServerSku.x64 =ECAB4
lMaxUserSessions.x64 =ECAB8
bAppServerAllowed.x64 =ECAC0
bRemoteConnAllowed.x64=ECAC4
bMultimonAllowed.x64 =ECAC8
ulMaxDebugSessions.x64=ECACC
bFUSEnabled.x64 =ECAD0
[10.0.17763.288-SLInit]
bInitialized.x86 =CD798
bServerSku.x86 =CD79C
lMaxUserSessions.x86 =CD7A0
bAppServerAllowed.x86 =CD7A8
bRemoteConnAllowed.x86=CD7AC
bMultimonAllowed.x86 =CD7B0
ulMaxDebugSessions.x86=CD7B4
bFUSEnabled.x86 =CD7B8
bInitialized.x64 =ECAB0
bServerSku.x64 =ECAB4
lMaxUserSessions.x64 =ECAB8
bAppServerAllowed.x64 =ECAC0
bRemoteConnAllowed.x64=ECAC4
bMultimonAllowed.x64 =ECAC8
ulMaxDebugSessions.x64=ECACC
bFUSEnabled.x64 =ECAD0
[10.0.17763.292-SLInit] [10.0.17763.292-SLInit]
bInitialized.x86 =CD798 bInitialized.x86 =CD798
bServerSku.x86 =CD79C bServerSku.x86 =CD79C