diff --git a/rdpwrap.ini b/rdpwrap.ini index c3f8078..df2ff63 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-03-13a +Updated=2026-06-27a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10,18 +10,25 @@ SLPolicyHookNT61=1 [PatchCodes] nop=90 Zero=00 +nop_2=9090 +nop_3=909090 +nop_4=90909090 +nop_7=90909090909090 jmpshort=EB nopjmp=90E9 +mov_eax_1_nop_1=B80100000090 +mov_eax_1_nop_2=B8010000009090 +pop_eax_add_esp_12_nop_2=5883C40C9090 CDefPolicy_Query_edx_ecx=BA000100008991200300005E90 CDefPolicy_Query_eax_rcx_jmp=B80001000089813806000090EB CDefPolicy_Query_eax_esi=B80001000089862003000090 CDefPolicy_Query_eax_rdi=B80001000089873806000090 -CDefPolicy_Query_eax_ecx=B80001000089812003000090 +CDefPolicy_Query_eax_ecx=B80001000089812403000090 CDefPolicy_Query_eax_ecx_jmp=B800010000898120030000EB0E CDefPolicy_Query_eax_rcx=B80001000089813806000090 CDefPolicy_Query_edi_rcx=BF0001000089B938060000909090 -; new patch by sebaxakerhtc -CDefPolicy_Query_eax_rdi_jmp=B800010000898738060000EB0D +CDefPolicy_Query_eax_rdi_jmp=B80001000089873806000090EB +CDefPolicy_Query_r9d_rdi_jmp=C7873806000000010000EB [SLInit] bServerSku=1 @@ -6489,7 +6496,7 @@ LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =77941 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 -SingleUserOffset.x64 =1322C +SingleUserOffset.x64 =C5C5 SingleUserCode.x64 =Zero DefPolicyPatch.x64 =1 DefPolicyOffset.x64 =17F45 @@ -9817,7 +9824,14 @@ SLInitOffset.x64 =2895C SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.19041.3513-SLInit] -; no x86 section +bServerSku.x86 =E4990 +bRemoteConnAllowed.x86=E49A4 +bFUSEnabled.x86 =E49B0 +bAppServerAllowed.x86 =E499C +bMultimonAllowed.x86 =E49A8 +lMaxUserSessions.x86 =E4994 +ulMaxDebugSessions.x86=E49AC +bInitialized.x86 =E498C bServerSku.x64 =125078 bRemoteConnAllowed.x64=12508C @@ -9829,7 +9843,18 @@ ulMaxDebugSessions.x64=125094 bInitialized.x64 =125074 [10.0.19041.3513] -; no x86 section +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C3299 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =459D5 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41999 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =70E18 +SLInitFunc.x86 =New_CSLQuery_Initialize LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =92AF1 @@ -9982,6 +10007,320 @@ SLInitHook.x64 =1 SLInitOffset.x64 =2866C SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.4233-SLInit] +bServerSku.x86 =E398C +bRemoteConnAllowed.x86=E39A0 +bFUSEnabled.x86 =E39AC +bAppServerAllowed.x86 =E3998 +bMultimonAllowed.x86 =E39A4 +lMaxUserSessions.x86 =E3990 +ulMaxDebugSessions.x86=E39A8 +bInitialized.x86 =E3988 + +bServerSku.x64 =123078 +bRemoteConnAllowed.x64=12308C +bFUSEnabled.x64 =123098 +bAppServerAllowed.x64 =123084 +bMultimonAllowed.x64 =123090 +lMaxUserSessions.x64 =12307C +ulMaxDebugSessions.x64=123094 +bInitialized.x64 =123074 + +[10.0.19041.4233] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1B19 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45675 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41629 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =6FCD8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91191 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =182BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F2D5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27FFC +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.4235-SLInit] +bServerSku.x86 =E398C +bRemoteConnAllowed.x86=E39A0 +bFUSEnabled.x86 =E39AC +bAppServerAllowed.x86 =E3998 +bMultimonAllowed.x86 =E39A4 +lMaxUserSessions.x86 =E3990 +ulMaxDebugSessions.x86=E39A8 +bInitialized.x86 =E3988 + +bServerSku.x64 =123078 +bRemoteConnAllowed.x64=12308C +bFUSEnabled.x64 =123098 +bAppServerAllowed.x64 =123084 +bMultimonAllowed.x64 =123090 +lMaxUserSessions.x64 =12307C +ulMaxDebugSessions.x64=123094 +bInitialized.x64 =123074 + +[10.0.19041.4235] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1B19 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45675 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41629 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =6FCD8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91191 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =182BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F2D5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27FFC +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.4239-SLInit] +bServerSku.x86 =E398C +bRemoteConnAllowed.x86=E39A0 +bFUSEnabled.x86 =E39AC +bAppServerAllowed.x86 =E3998 +bMultimonAllowed.x86 =E39A4 +lMaxUserSessions.x86 =E3990 +ulMaxDebugSessions.x86=E39A8 +bInitialized.x86 =E3988 + +bServerSku.x64 =123078 +bRemoteConnAllowed.x64=12308C +bFUSEnabled.x64 =123098 +bAppServerAllowed.x64 =123084 +bMultimonAllowed.x64 =123090 +lMaxUserSessions.x64 =12307C +ulMaxDebugSessions.x64=123094 +bInitialized.x64 =123074 + +[10.0.19041.4239] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1B19 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45675 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41629 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =6FCD8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91191 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =182BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F2D5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27FFC +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.4353-SLInit] +bServerSku.x86 =E3990 +bRemoteConnAllowed.x86=E39A4 +bFUSEnabled.x86 =E39B0 +bAppServerAllowed.x86 =E399C +bMultimonAllowed.x86 =E39A8 +lMaxUserSessions.x86 =E3994 +ulMaxDebugSessions.x86=E39AC +bInitialized.x86 =E398C + +bServerSku.x64 =123098 +bRemoteConnAllowed.x64=1230AC +bFUSEnabled.x64 =1230B8 +bAppServerAllowed.x64 =1230A4 +bMultimonAllowed.x64 =1230B0 +lMaxUserSessions.x64 =12309C +ulMaxDebugSessions.x64=1230B4 +bInitialized.x64 =123094 + +[10.0.19041.4353] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1BB9 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45605 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =415B9 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =700D8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91281 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1835B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F375 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2885C +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.4355-SLInit] +bServerSku.x86 =E3990 +bRemoteConnAllowed.x86=E39A4 +bFUSEnabled.x86 =E39B0 +bAppServerAllowed.x86 =E399C +bMultimonAllowed.x86 =E39A8 +lMaxUserSessions.x86 =E3994 +ulMaxDebugSessions.x86=E39AC +bInitialized.x86 =E398C + +bServerSku.x64 =123098 +bRemoteConnAllowed.x64=1230AC +bFUSEnabled.x64 =1230B8 +bAppServerAllowed.x64 =1230A4 +bMultimonAllowed.x64 =1230B0 +lMaxUserSessions.x64 =12309C +ulMaxDebugSessions.x64=1230B4 +bInitialized.x64 =123094 + +[10.0.19041.4355] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1BB9 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45605 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =415B9 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =700D8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91281 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1835B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F375 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2885C +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.4474-SLInit] +; no x86 section + +bServerSku.x64 =1270A8 +bRemoteConnAllowed.x64=1270BC +bFUSEnabled.x64 =1270C8 +bAppServerAllowed.x64 =1270B4 +bMultimonAllowed.x64 =1270C0 +lMaxUserSessions.x64 =1270AC +ulMaxDebugSessions.x64=1270C4 +bInitialized.x64 =1270A4 + +[10.0.19041.4474] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =93EB1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1843B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F455 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2AE5C +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.5678-SLInit] +; no x86 section + +bServerSku.x64 =125098 +bRemoteConnAllowed.x64=1250AC +bFUSEnabled.x64 =1250B8 +bAppServerAllowed.x64 =1250A0 +bMultimonAllowed.x64 =1250B0 +lMaxUserSessions.x64 =12509C +ulMaxDebugSessions.x64=1250B4 +bInitialized.x64 =125094 + +[10.0.19041.5678] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91A61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =183FB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F415 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2902C +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.6456-SLInit] +; no x86 section + +bServerSku.x64 =125098 +bRemoteConnAllowed.x64=1250AC +bFUSEnabled.x64 =1250B8 +bAppServerAllowed.x64 =1250A0 +bMultimonAllowed.x64 =1250B0 +lMaxUserSessions.x64 =12509C +ulMaxDebugSessions.x64=1250B4 +bInitialized.x64 =125094 + +[10.0.19041.6456] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91A61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1842B +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F415 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2902C +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19101.1112-SLInit] ; no x86 section @@ -11466,6 +11805,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =26940 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.20348.2400-SLInit] +; no x86 section + +bServerSku.x64 =122ED0 +bRemoteConnAllowed.x64=122EE4 +bFUSEnabled.x64 =122EF4 +bAppServerAllowed.x64 =122EDC +bMultimonAllowed.x64 =122EE8 +lMaxUserSessions.x64 =122ED4 +ulMaxDebugSessions.x64=122EF0 +bInitialized.x64 =122ECC + +[10.0.20348.2400] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =99D91 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =166AF +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1CA05 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27290 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.21277.1000-SLInit] ; no x86 section @@ -12222,6 +12589,33 @@ SLInitHook.x64 =1 SLInitOffset.x64 =27790 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22000.2899-SLInit] +; no x86 section + +bRemoteConnAllowed.x64=121EE4 +bFUSEnabled.x64 =121EF4 +bAppServerAllowed.x64 =121EDC +bMultimonAllowed.x64 =121EE8 +lMaxUserSessions.x64 =121ED4 +ulMaxDebugSessions.x64=121EF0 +bInitialized.x64 =121ECC + +[10.0.22000.2899] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9A131 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =16BFF +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1BBA5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =28050 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22449.1000-SLInit] ; no x86 section @@ -13874,72 +14268,352 @@ SLInitHook.x64 =1 SLInitOffset.x64 =297C0 SLInitFunc.x64 =New_CSLQuery_Initialize -[10.0.23403.1001-SLInit] +[10.0.22621.3358-SLInit] ; no x86 section -bServerSku.x64 =128F30 -bRemoteConnAllowed.x64=128F44 -bFUSEnabled.x64 =128F54 -bAppServerAllowed.x64 =128F3C -bMultimonAllowed.x64 =128F48 -lMaxUserSessions.x64 =128F34 -ulMaxDebugSessions.x64=128F50 -bInitialized.x64 =128F2C +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C -[10.0.23403.1001] +[10.0.22621.3358] ; no x86 section LocalOnlyPatch.x64 =1 -LocalOnlyOffset.x64 =9B7E1 +LocalOnlyOffset.x64 =9D691 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 -SingleUserOffset.x64 =186B2 +SingleUserOffset.x64 =C3F3 SingleUserCode.x64 =Zero DefPolicyPatch.x64 =1 -DefPolicyOffset.x64 =1C135 +DefPolicyOffset.x64 =1C2E5 DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx SLInitHook.x64 =1 -SLInitOffset.x64 =286D0 +SLInitOffset.x64 =29F00 SLInitFunc.x64 =New_CSLQuery_Initialize -[10.0.23419.1000-SLInit] +[10.0.22621.3371-SLInit] ; no x86 section -bServerSku.x64 =128F30 -bRemoteConnAllowed.x64=128F44 -bFUSEnabled.x64 =128F54 -bAppServerAllowed.x64 =128F3C -bMultimonAllowed.x64 =128F48 -lMaxUserSessions.x64 =128F34 -ulMaxDebugSessions.x64=128F50 -bInitialized.x64 =128F2C +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C -[10.0.23419.1000] +[10.0.22621.3371] ; no x86 section LocalOnlyPatch.x64 =1 -LocalOnlyOffset.x64 =9B7E1 +LocalOnlyOffset.x64 =9D691 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 -SingleUserOffset.x64 =186B2 +SingleUserOffset.x64 =C3F3 SingleUserCode.x64 =Zero DefPolicyPatch.x64 =1 -DefPolicyOffset.x64 =1C135 +DefPolicyOffset.x64 =1C2E5 DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx SLInitHook.x64 =1 -SLInitOffset.x64 =286D0 +SLInitOffset.x64 =29F00 SLInitFunc.x64 =New_CSLQuery_Initialize -[10.0.23424.1000-SLInit] +[10.0.22621.3374-SLInit] ; no x86 section -bServerSku.x64 =128F30 -bRemoteConnAllowed.x64=128F44 -bFUSEnabled.x64 =128F54 -bAppServerAllowed.x64 =128F3C -bMultimonAllowed.x64 =128F48 -lMaxUserSessions.x64 =128F34 -ulMaxDebugSessions.x64=128F50 +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3374] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D661 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29ED0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3430-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3430] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D611 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29E80 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3447-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3447] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D661 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29ED0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3495-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3495] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D611 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29E80 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3520-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3520] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D741 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C4D3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C3C5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29FB0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3527-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3527] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D6F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C4D3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C3C5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29F60 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3566-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3566] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D6F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C4D3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C3C5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29F60 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.5124-SLInit] +; no x86 section + +bServerSku.x64 =12EFAC +bRemoteConnAllowed.x64=12EFC0 +bFUSEnabled.x64 =12EFD0 +bAppServerAllowed.x64 =12EFB4 +bMultimonAllowed.x64 =12EFC4 +lMaxUserSessions.x64 =12EFB0 +ulMaxDebugSessions.x64=12EFCC +bInitialized.x64 =12EFA8 + +[10.0.22621.5124] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =A0C41 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C893 +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C755 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2E500 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.23403.1001-SLInit] +; no x86 section + +bServerSku.x64 =128F30 +bRemoteConnAllowed.x64=128F44 +bFUSEnabled.x64 =128F54 +bAppServerAllowed.x64 =128F3C +bMultimonAllowed.x64 =128F48 +lMaxUserSessions.x64 =128F34 +ulMaxDebugSessions.x64=128F50 +bInitialized.x64 =128F2C + +[10.0.23403.1001] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9B7E1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =186B2 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C135 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =286D0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.23419.1000-SLInit] +; no x86 section + +bServerSku.x64 =128F30 +bRemoteConnAllowed.x64=128F44 +bFUSEnabled.x64 =128F54 +bAppServerAllowed.x64 =128F3C +bMultimonAllowed.x64 =128F48 +lMaxUserSessions.x64 =128F34 +ulMaxDebugSessions.x64=128F50 +bInitialized.x64 =128F2C + +[10.0.23419.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9B7E1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =186B2 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C135 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =286D0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.23424.1000-SLInit] +; no x86 section + +bServerSku.x64 =128F30 +bRemoteConnAllowed.x64=128F44 +bFUSEnabled.x64 =128F54 +bAppServerAllowed.x64 =128F3C +bMultimonAllowed.x64 =128F48 +lMaxUserSessions.x64 =128F34 +ulMaxDebugSessions.x64=128F50 bInitialized.x64 =128F2C [10.0.23424.1000] @@ -16254,6 +16928,90 @@ SLInitHook.x64 =1 SLInitOffset.x64 =19060 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.25398.1-SLInit] +; no x86 section + +bServerSku.x64 =120F4C +bRemoteConnAllowed.x64=120F60 +bFUSEnabled.x64 =120F70 +bAppServerAllowed.x64 =120F58 +bMultimonAllowed.x64 =120F64 +lMaxUserSessions.x64 =120F50 +ulMaxDebugSessions.x64=120F6C +bInitialized.x64 =120F48 + +[10.0.25398.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =942C1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =77C3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =15B25 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =19060 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.25398.709-SLInit] +; no x86 section + +bServerSku.x64 =121F4C +bRemoteConnAllowed.x64=121F60 +bFUSEnabled.x64 =121F70 +bAppServerAllowed.x64 =121F58 +bMultimonAllowed.x64 =121F64 +lMaxUserSessions.x64 =121F50 +ulMaxDebugSessions.x64=121F6C +bInitialized.x64 =121F48 + +[10.0.25398.709] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =945A1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =77C3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =15B25 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =192C0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.25398.830-SLInit] +; no x86 section + +bServerSku.x64 =122F4C +bRemoteConnAllowed.x64=122F60 +bFUSEnabled.x64 =122F70 +bAppServerAllowed.x64 =122F58 +bMultimonAllowed.x64 =122F64 +lMaxUserSessions.x64 =122F50 +ulMaxDebugSessions.x64=122F6C +bInitialized.x64 =122F48 + +[10.0.25398.830] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =954F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =7923 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =15CA5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =19DA0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.25905.1000-SLInit] ; no x86 section @@ -16618,6 +17376,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =ACA88 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26002.1000-SLInit] +; no x86 section + +bServerSku.x64 =11BDF4 +bRemoteConnAllowed.x64=11BE08 +bFUSEnabled.x64 =11BE18 +bAppServerAllowed.x64 =11BE00 +bMultimonAllowed.x64 =11BE0C +lMaxUserSessions.x64 =11BDF8 +ulMaxDebugSessions.x64=11BE14 +bInitialized.x64 =11BDF0 + +[10.0.26002.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8BBE1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =985CB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =959FF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =ACB28 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26010.1000-SLInit] ; no x86 section @@ -16674,13 +17460,69 @@ SLInitHook.x64 =1 SLInitOffset.x64 =ACD08 SLInitFunc.x64 =New_CSLQuery_Initialize -[10.0.26052.1000-SLInit] +[10.0.26020.1000-SLInit] ; no x86 section -bServerSku.x64 =11ADF4 -bRemoteConnAllowed.x64=11AE08 -bFUSEnabled.x64 =11AE18 -bAppServerAllowed.x64 =11AE00 +bServerSku.x64 =11CDF4 +bRemoteConnAllowed.x64=11CE08 +bFUSEnabled.x64 =11CE18 +bAppServerAllowed.x64 =11CE00 +bMultimonAllowed.x64 =11CE0C +lMaxUserSessions.x64 =11CDF8 +ulMaxDebugSessions.x64=11CE14 +bInitialized.x64 =11CDF0 + +[10.0.26020.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8BDC1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =987AB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =95BDF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =ACD08 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26040.1000-SLInit] +; no x86 section + +bServerSku.x64 =11ADE4 +bRemoteConnAllowed.x64=11ADF8 +bFUSEnabled.x64 =11AE08 +bAppServerAllowed.x64 =11ADF0 +bMultimonAllowed.x64 =11ADFC +lMaxUserSessions.x64 =11ADE8 +ulMaxDebugSessions.x64=11AE04 +bInitialized.x64 =11ADE0 + +[10.0.26040.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8ACE1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9769B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94AEF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB370 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26052.1000-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 bMultimonAllowed.x64 =11AE0C lMaxUserSessions.x64 =11ADF8 ulMaxDebugSessions.x64=11AE14 @@ -16758,3 +17600,728 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB5B0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26080.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26080.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26085.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26085.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26090.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26090.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26100.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.1882-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26100.1882] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8ADA1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9775B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94BAF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB430 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.2454-SLInit] +; no x86 section + +bServerSku.x64 =11EE5C +bRemoteConnAllowed.x64=11EE70 +bFUSEnabled.x64 =11EE80 +bAppServerAllowed.x64 =11EE68 +bMultimonAllowed.x64 =11EE74 +lMaxUserSessions.x64 =11EE60 +ulMaxDebugSessions.x64=11EE7C +bInitialized.x64 =11EE58 + +[10.0.26100.2454] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8EB71 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B52B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9897F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF200 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.3037-SLInit] +; no x86 section + +bServerSku.x64 =11EE64 +bRemoteConnAllowed.x64=11EE78 +bFUSEnabled.x64 =11EE88 +bAppServerAllowed.x64 =11EE70 +bMultimonAllowed.x64 =11EE7C +lMaxUserSessions.x64 =11EE68 +ulMaxDebugSessions.x64=11EE84 +bInitialized.x64 =11EE60 + +[10.0.26100.3037] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8EC31 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B5EB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =98A3F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF2C0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.3323-SLInit] +; no x86 section + +bServerSku.x64 =11EE64 +bRemoteConnAllowed.x64=11EE78 +bFUSEnabled.x64 =11EE88 +bAppServerAllowed.x64 =11EE70 +bMultimonAllowed.x64 =11EE7C +lMaxUserSessions.x64 =11EE68 +ulMaxDebugSessions.x64=11EE84 +bInitialized.x64 =11EE60 + +[10.0.26100.3323] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8ECF1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B6AB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =98AFF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF380 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.3624-SLInit] +; no x86 section + +bServerSku.x64 =11EE64 +bRemoteConnAllowed.x64=11EE78 +bFUSEnabled.x64 =11EE88 +bAppServerAllowed.x64 =11EE70 +bMultimonAllowed.x64 =11EE7C +lMaxUserSessions.x64 =11EE68 +ulMaxDebugSessions.x64=11EE84 +bInitialized.x64 =11EE60 + +[10.0.26100.3624] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8EA91 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B44B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9889F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF120 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.3912-SLInit] +; no x86 section + +bServerSku.x64 =126144 +bRemoteConnAllowed.x64=126158 +bFUSEnabled.x64 =126168 +bAppServerAllowed.x64 =126150 +bMultimonAllowed.x64 =12615C +lMaxUserSessions.x64 =126148 +ulMaxDebugSessions.x64=126164 +bInitialized.x64 =126140 + +[10.0.26100.3912] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =95541 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A1F2B +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9F34F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B5BD0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.4202-SLInit] +; no x86 section + +bServerSku.x64 =127154 +bRemoteConnAllowed.x64=127168 +bFUSEnabled.x64 =127178 +bAppServerAllowed.x64 =127160 +bMultimonAllowed.x64 =12716C +lMaxUserSessions.x64 =127158 +ulMaxDebugSessions.x64=127174 +bInitialized.x64 =127150 + +[10.0.26100.4202] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =954C1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A1E7B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9F2CF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B5B50 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.4484-SLInit] +; no x86 section + +bServerSku.x64 =1281FC +bRemoteConnAllowed.x64=128210 +bFUSEnabled.x64 =128220 +bAppServerAllowed.x64 =128208 +bMultimonAllowed.x64 =128214 +lMaxUserSessions.x64 =128200 +ulMaxDebugSessions.x64=12821C +bInitialized.x64 =1281F8 + +[10.0.26100.4484] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =96DC1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A377B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =A0BCF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B7450 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.4768-SLInit] +; no x86 section + +bServerSku.x64 =12B21C +bRemoteConnAllowed.x64=12B230 +bFUSEnabled.x64 =12B240 +bAppServerAllowed.x64 =12B228 +bMultimonAllowed.x64 =12B234 +lMaxUserSessions.x64 =12B220 +ulMaxDebugSessions.x64=12B23C +bInitialized.x64 =12B218 + +[10.0.26100.4768] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =97691 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A42DB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =A172F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B7FB0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.5074-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F7C +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.5074] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91DC1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E9FB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9BE4F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B26C8 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.6725-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F7C +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.6725] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =92381 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9EFBB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C40F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2C88 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.6899-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F80 +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.6899] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =92381 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9EFBB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C40F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2C88 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.7019-SLInit] +; no x86 section + +bServerSku.x64 =125F54 +bRemoteConnAllowed.x64=125F68 +bFUSEnabled.x64 =125F78 +bAppServerAllowed.x64 =125F5C +bMultimonAllowed.x64 =125F6C +lMaxUserSessions.x64 =125F58 +ulMaxDebugSessions.x64=125F74 +bInitialized.x64 =125F50 + +[10.0.26100.7019] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91FD1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9EC0B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C05F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B28D8 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.7309-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F80 +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.7309] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =923E1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9F01B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C46F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2D98 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.7705-SLInit] +; no x86 section + +bServerSku.x64 =124044 +bRemoteConnAllowed.x64=12405C +bFUSEnabled.x64 =12406C +bAppServerAllowed.x64 =124050 +bMultimonAllowed.x64 =124060 +lMaxUserSessions.x64 =124048 +ulMaxDebugSessions.x64=124068 +bInitialized.x64 =124040 + +[10.0.26100.7705] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90A01 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E4BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9AA4F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2698 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.7824-SLInit] +; no x86 section + +bServerSku.x64 =124044 +bRemoteConnAllowed.x64=12405C +bFUSEnabled.x64 =12406C +bAppServerAllowed.x64 =124050 +bMultimonAllowed.x64 =124060 +lMaxUserSessions.x64 =124048 +ulMaxDebugSessions.x64=124068 +bInitialized.x64 =124040 + +[10.0.26100.7824] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90A01 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E4BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9AA4F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2698 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.7920-SLInit] +; no x86 section + +bServerSku.x64 =124014 +bRemoteConnAllowed.x64=12402C +bFUSEnabled.x64 =12403C +bAppServerAllowed.x64 =124020 +bMultimonAllowed.x64 =124030 +lMaxUserSessions.x64 =124018 +ulMaxDebugSessions.x64=124038 +bInitialized.x64 =124010 + +[10.0.26100.7920] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91301 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E38B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9B32F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B21B8 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.8115-SLInit] +; no x86 section + +bServerSku.x64 =124FE4 +bRemoteConnAllowed.x64=124FFC +bFUSEnabled.x64 =12500C +bAppServerAllowed.x64 =124FF0 +bMultimonAllowed.x64 =125000 +lMaxUserSessions.x64 =124FE8 +ulMaxDebugSessions.x64=125008 +bInitialized.x64 =124FE0 + +[10.0.26100.8115] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90E81 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9DF9B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9AEEF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B1DC8 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.8328-SLInit] +; no x86 section + +bServerSku.x64 =123004 +bRemoteConnAllowed.x64=12301C +bFUSEnabled.x64 =12302C +bAppServerAllowed.x64 =123010 +bMultimonAllowed.x64 =123020 +lMaxUserSessions.x64 =123008 +ulMaxDebugSessions.x64=123028 +bInitialized.x64 =123000 + +[10.0.26100.8328] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90111 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9CFAB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9A17F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B0D18 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.8521-SLInit] +; no x86 section + +bServerSku.x64 =126FCC +bRemoteConnAllowed.x64=126FE4 +bFUSEnabled.x64 =126FF4 +bAppServerAllowed.x64 =126FD8 +bMultimonAllowed.x64 =126FE8 +lMaxUserSessions.x64 =126FD0 +ulMaxDebugSessions.x64=126FF0 +bInitialized.x64 =126FC8 + +[10.0.26100.8521] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =920F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9F36B +SingleUserCode.x64 =Zero +SLInitHook.x64 =1 +SLInitOffset.x64 =B3468 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.8737-SLInit] +; no x86 section + +bServerSku.x64 =12913C +bRemoteConnAllowed.x64=129154 +bFUSEnabled.x64 =129164 +bAppServerAllowed.x64 =129148 +bMultimonAllowed.x64 =129158 +lMaxUserSessions.x64 =129140 +ulMaxDebugSessions.x64=129160 +bInitialized.x64 =129138 + +[10.0.26100.8737] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =95301 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A25AB +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9F74D +DefPolicyCode.x64 =CDefPolicy_Query_r9d_rdi_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B6678 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26200.5001-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26200.5001] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize +