From 5b36f7cf022420b11f2a7aed371730fc3515dac0 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 28 Mar 2024 02:44:43 +1100 Subject: [PATCH 01/40] Added support for 10.0.19041.4239 x64 only --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index c3f8078..99112c8 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-03-13a +Updated=2024-03-28a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -9982,6 +9982,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =2866C SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.4239-SLInit] +; no x86 section + +bServerSku.x64 =123078 +bRemoteConnAllowed.x64=12308C +bFUSEnabled.x64 =123098 +bAppServerAllowed.x64 =123084 +bMultimonAllowed.x64 =123090 +lMaxUserSessions.x64 =12307C +ulMaxDebugSessions.x64=123094 +bInitialized.x64 =123074 + +[10.0.19041.4239] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91191 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =182BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F2D5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27FFC +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19101.1112-SLInit] ; no x86 section From a3f2eead2ffc4676b50d942964d9af8511fe2732 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Fri, 29 Mar 2024 00:05:47 +1100 Subject: [PATCH 02/40] Added support for 10.0.19041.4239 x86 Data from: https://github.com/stascorp/rdpwrap/issues/2529#issuecomment-2024130507 [ post by https://github.com/prssrp ] --- rdpwrap.ini | 24 +++++++++++++++++++++--- 1 file changed, 21 insertions(+), 3 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 99112c8..2717786 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-03-28a +Updated=2024-03-28b LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -9983,7 +9983,14 @@ SLInitOffset.x64 =2866C SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.19041.4239-SLInit] -; no x86 section +bServerSku.x86 =E398C +bRemoteConnAllowed.x86=E39A0 +bFUSEnabled.x86 =E39AC +bAppServerAllowed.x86 =E3998 +bMultimonAllowed.x86 =E39A4 +lMaxUserSessions.x86 =E3990 +ulMaxDebugSessions.x86=E39A8 +bInitialized.x86 =E3988 bServerSku.x64 =123078 bRemoteConnAllowed.x64=12308C @@ -9995,7 +10002,18 @@ ulMaxDebugSessions.x64=123094 bInitialized.x64 =123074 [10.0.19041.4239] -; no x86 section +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1B19 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45675 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41629 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =6FCD8 +SLInitFunc.x86 =New_CSLQuery_Initialize LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =91191 From 44b1ee834bcd9c920b094990801bec455eb46255 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Wed, 24 Apr 2024 22:26:03 +1000 Subject: [PATCH 03/40] Added these new x64 sections: 10.0.19041.4355 10.0.19041.4355-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 2717786..4b8d574 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-03-28b +Updated=2024-04-24a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10028,6 +10028,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =27FFC SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.4355-SLInit] +; no x86 section + +bServerSku.x64 =123098 +bRemoteConnAllowed.x64=1230AC +bFUSEnabled.x64 =1230B8 +bAppServerAllowed.x64 =1230A4 +bMultimonAllowed.x64 =1230B0 +lMaxUserSessions.x64 =12309C +ulMaxDebugSessions.x64=1230B4 +bInitialized.x64 =123094 + +[10.0.19041.4355] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91281 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1835B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F375 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2885C +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19101.1112-SLInit] ; no x86 section From 67ba5b21922e190fcabbfc33306fcdbdb4097ae1 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 02:03:19 +1000 Subject: [PATCH 04/40] Added new x86 sections 10.0.19041.4355 10.0.19041.4355-SLInit from: https://github.com/stascorp/rdpwrap/issues/2590#issuecomment-2075033988 --- rdpwrap.ini | 24 +++++++++++++++++++++--- 1 file changed, 21 insertions(+), 3 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 4b8d574..9644b2f 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-24a +Updated=2024-04-25a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10029,7 +10029,14 @@ SLInitOffset.x64 =27FFC SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.19041.4355-SLInit] -; no x86 section +bServerSku.x86 =E3990 +bRemoteConnAllowed.x86=E39A4 +bFUSEnabled.x86 =E39B0 +bAppServerAllowed.x86 =E399C +bMultimonAllowed.x86 =E39A8 +lMaxUserSessions.x86 =E3994 +ulMaxDebugSessions.x86=E39AC +bInitialized.x86 =E398C bServerSku.x64 =123098 bRemoteConnAllowed.x64=1230AC @@ -10041,7 +10048,18 @@ ulMaxDebugSessions.x64=1230B4 bInitialized.x64 =123094 [10.0.19041.4355] -; no x86 section +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1BB9 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45605 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =415B9 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =700D8 +SLInitFunc.x86 =New_CSLQuery_Initialize LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =91281 From 255b12f5c587d9eb13d2e0d6b1694e25551b9daa Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 02:22:14 +1000 Subject: [PATCH 05/40] Added these new x64 sections: 10.0.22621.3527 10.0.22621.3527-SLInit [ as provided at https://github.com/stascorp/rdpwrap/issues/2594#issue-2261644468 ] --- rdpwrap.ini | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/rdpwrap.ini b/rdpwrap.ini index 9644b2f..4a8e5f3 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -13966,6 +13966,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =297C0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3527-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3527] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D6F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C4D3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C3C5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29F60 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.23403.1001-SLInit] ; no x86 section From 6716a754e3301d964994b2e8eaecf2dc8837510b Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 02:51:38 +1000 Subject: [PATCH 06/40] Added these new x64 sections: 10.0.22621.3447 10.0.22621.3447-SLInit [ reference https://github.com/stascorp/rdpwrap/issues/2549#issuecomment-2046417039 ] --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 4a8e5f3..86565b9 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25a +Updated=2024-04-25b LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -13966,6 +13966,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =297C0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3447-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3447] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D661 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29ED0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22621.3527-SLInit] ; no x86 section From 448e11503a77c41097831fd3f1811cdf05aa6775 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 03:20:36 +1000 Subject: [PATCH 07/40] Added these new x64 sections: 10.0.22621.3520 10.0.22621.3520-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 86565b9..c4f026e 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25b +Updated=2024-04-25c LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -13994,6 +13994,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =29ED0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3520-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3520] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D741 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C4D3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C3C5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29FB0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22621.3527-SLInit] ; no x86 section From e6e9846017cfe9dfd962d2beaf12451836009d01 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 04:21:11 +1000 Subject: [PATCH 08/40] Added these new x64 sections: 10.0.22621.3495 10.0.22621.3495-SLInit [ reference https://github.com/stascorp/rdpwrap/issues/2575#issuecomment-2063842545 ] --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index c4f026e..cd5e782 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25c +Updated=2024-04-25d LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -13994,6 +13994,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =29ED0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3495-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3495] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D611 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29E80 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22621.3520-SLInit] ; no x86 section From a74dc99ba98a0ee72d186dd9ea054e06e43e2388 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 05:09:18 +1000 Subject: [PATCH 09/40] Added these new x64 sections: 10.0.22621.3374 10.0.22621.3374-SLInit [ reference https://github.com/stascorp/rdpwrap/issues/2528#issuecomment-2022318278 ] --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index cd5e782..0665fc8 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25d +Updated=2024-04-25e LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -13966,6 +13966,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =297C0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3374-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3374] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D661 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29ED0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22621.3447-SLInit] ; no x86 section From b2dfdf0bf85c283356dff978fbc7ff7479470b93 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 05:39:49 +1000 Subject: [PATCH 10/40] Added these new x86 and x64 sections: 10.0.19041.4353 10.0.19041.4353-SLInit [ reference https://github.com/stascorp/rdpwrap/issues/2584#issuecomment-2067296654 ] --- rdpwrap.ini | 48 +++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 47 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 0665fc8..3e5d6f4 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25e +Updated=2024-04-25f LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10028,6 +10028,52 @@ SLInitHook.x64 =1 SLInitOffset.x64 =27FFC SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.4353-SLInit] +bServerSku.x86 =E3990 +bRemoteConnAllowed.x86=E39A4 +bFUSEnabled.x86 =E39B0 +bAppServerAllowed.x86 =E399C +bMultimonAllowed.x86 =E39A8 +lMaxUserSessions.x86 =E3994 +ulMaxDebugSessions.x86=E39AC +bInitialized.x86 =E398C + +bServerSku.x64 =123098 +bRemoteConnAllowed.x64=1230AC +bFUSEnabled.x64 =1230B8 +bAppServerAllowed.x64 =1230A4 +bMultimonAllowed.x64 =1230B0 +lMaxUserSessions.x64 =12309C +ulMaxDebugSessions.x64=1230B4 +bInitialized.x64 =123094 + +[10.0.19041.4353] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1BB9 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45605 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =415B9 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =700D8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91281 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1835B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F375 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2885C +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19041.4355-SLInit] bServerSku.x86 =E3990 bRemoteConnAllowed.x86=E39A4 From f83b67a2d448063a1200762d9de86b0a463eb34c Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Apr 2024 05:56:40 +1000 Subject: [PATCH 11/40] Corrected value for 10.0.17763.1 as follows SingleUserOffset.x64=C5C5 (was incorrectly set to 1322C) [ reference https://github.com/loyejaotdiqr47123/rdpwrap/commit/ee784bf33cd97cdd4b9d0f46a535232b09b55551 ] --- rdpwrap.ini | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 3e5d6f4..ec203a5 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25f +Updated=2024-04-25g LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -6489,7 +6489,7 @@ LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =77941 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 -SingleUserOffset.x64 =1322C +SingleUserOffset.x64 =C5C5 SingleUserCode.x64 =Zero DefPolicyPatch.x64 =1 DefPolicyOffset.x64 =17F45 From 9fe01f218a28b0396edbc631ffdbf0ac5cfd6154 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sat, 27 Apr 2024 22:18:03 +1000 Subject: [PATCH 12/40] Added these new x64 sections from https://github.com/sebaxakerhtc/rdpwrap.ini 10.0.19041.1348 10.0.19041.1348-SLInit 10.0.19041.4233 10.0.19041.4233-SLInit 10.0.19041.4235 10.0.19041.4235-SLInit 10.0.20348.2400 10.0.20348.2400-SLInit 10.0.22000.2899 10.0.22000.2899-SLInit 10.0.22621.3358 10.0.22621.3358-SLInit 10.0.22621.3371 10.0.22621.3371-SLInit 10.0.22621.3430 10.0.22621.3430-SLInit 10.0.22621.3566 10.0.22621.3566-SLInit 10.0.25398.1 10.0.25398.1-SLInit 10.0.25398.709 10.0.25398.709-SLInit 10.0.25398.830 10.0.25398.830-SLInit 10.0.26002.1000 10.0.26002.1000-SLInit 10.0.26020.1000 10.0.26020.1000-SLInit 10.0.26040.1000 10.0.26040.1000-SLInit 10.0.26080.1 10.0.26080.1-SLInit 10.0.26085.1 10.0.26085.1-SLInit 10.0.26090.1 10.0.26090.1-SLInit 10.0.26100.1 10.0.26100.1-SLInit 10.0.26200.5001 10.0.26200.5001-SLInit Added these new x86 sections from https://github.com/sebaxakerhtc/rdpwrap.ini 10.0.19041.1348 10.0.19041.1348-SLInit 10.0.19041.3513 10.0.19041.3513-SLInit 10.0.19041.4233 10.0.19041.4233-SLInit 10.0.19041.4235 10.0.19041.4235-SLInit --- rdpwrap.ini | 591 +++++++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 588 insertions(+), 3 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index ec203a5..c493b13 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-25g +Updated=2024-04-27a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -9817,7 +9817,14 @@ SLInitOffset.x64 =2895C SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.19041.3513-SLInit] -; no x86 section +bServerSku.x86 =E4990 +bRemoteConnAllowed.x86=E49A4 +bFUSEnabled.x86 =E49B0 +bAppServerAllowed.x86 =E499C +bMultimonAllowed.x86 =E49A8 +lMaxUserSessions.x86 =E4994 +ulMaxDebugSessions.x86=E49AC +bInitialized.x86 =E498C bServerSku.x64 =125078 bRemoteConnAllowed.x64=12508C @@ -9829,7 +9836,18 @@ ulMaxDebugSessions.x64=125094 bInitialized.x64 =125074 [10.0.19041.3513] -; no x86 section +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C3299 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =459D5 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41999 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =70E18 +SLInitFunc.x86 =New_CSLQuery_Initialize LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =92AF1 @@ -9982,6 +10000,98 @@ SLInitHook.x64 =1 SLInitOffset.x64 =2866C SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.4233-SLInit] +bServerSku.x86 =E398C +bRemoteConnAllowed.x86=E39A0 +bFUSEnabled.x86 =E39AC +bAppServerAllowed.x86 =E3998 +bMultimonAllowed.x86 =E39A4 +lMaxUserSessions.x86 =E3990 +ulMaxDebugSessions.x86=E39A8 +bInitialized.x86 =E3988 + +bServerSku.x64 =123078 +bRemoteConnAllowed.x64=12308C +bFUSEnabled.x64 =123098 +bAppServerAllowed.x64 =123084 +bMultimonAllowed.x64 =123090 +lMaxUserSessions.x64 =12307C +ulMaxDebugSessions.x64=123094 +bInitialized.x64 =123074 + +[10.0.19041.4233] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1B19 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45675 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41629 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =6FCD8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91191 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =182BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F2D5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27FFC +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.19041.4235-SLInit] +bServerSku.x86 =E398C +bRemoteConnAllowed.x86=E39A0 +bFUSEnabled.x86 =E39AC +bAppServerAllowed.x86 =E3998 +bMultimonAllowed.x86 =E39A4 +lMaxUserSessions.x86 =E3990 +ulMaxDebugSessions.x86=E39A8 +bInitialized.x86 =E3988 + +bServerSku.x64 =123078 +bRemoteConnAllowed.x64=12308C +bFUSEnabled.x64 =123098 +bAppServerAllowed.x64 =123084 +bMultimonAllowed.x64 =123090 +lMaxUserSessions.x64 =12307C +ulMaxDebugSessions.x64=123094 +bInitialized.x64 =123074 + +[10.0.19041.4235] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =C1B19 +LocalOnlyCode.x86 =jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86 =45675 +SingleUserCode.x86 =Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =41629 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x86 =1 +SLInitOffset.x86 =6FCD8 +SLInitFunc.x86 =New_CSLQuery_Initialize + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91191 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =182BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F2D5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27FFC +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19041.4239-SLInit] bServerSku.x86 =E398C bRemoteConnAllowed.x86=E39A0 @@ -11604,6 +11714,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =26940 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.20348.2400-SLInit] +; no x86 section + +bServerSku.x64 =122ED0 +bRemoteConnAllowed.x64=122EE4 +bFUSEnabled.x64 =122EF4 +bAppServerAllowed.x64 =122EDC +bMultimonAllowed.x64 =122EE8 +lMaxUserSessions.x64 =122ED4 +ulMaxDebugSessions.x64=122EF0 +bInitialized.x64 =122ECC + +[10.0.20348.2400] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =99D91 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =166AF +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1CA05 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =27290 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.21277.1000-SLInit] ; no x86 section @@ -12360,6 +12498,33 @@ SLInitHook.x64 =1 SLInitOffset.x64 =27790 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22000.2899-SLInit] +; no x86 section + +bRemoteConnAllowed.x64=121EE4 +bFUSEnabled.x64 =121EF4 +bAppServerAllowed.x64 =121EDC +bMultimonAllowed.x64 =121EE8 +lMaxUserSessions.x64 =121ED4 +ulMaxDebugSessions.x64=121EF0 +bInitialized.x64 =121ECC + +[10.0.22000.2899] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9A131 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =16BFF +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1BBA5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =28050 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22449.1000-SLInit] ; no x86 section @@ -14012,6 +14177,62 @@ SLInitHook.x64 =1 SLInitOffset.x64 =297C0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3358-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3358] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D691 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29F00 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.22621.3371-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3371] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D691 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29F00 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22621.3374-SLInit] ; no x86 section @@ -14040,6 +14261,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =29ED0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3430-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3430] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D611 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C3F3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C2E5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29E80 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.22621.3447-SLInit] ; no x86 section @@ -14152,6 +14401,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =29F60 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.3566-SLInit] +; no x86 section + +bServerSku.x64 =12BF50 +bRemoteConnAllowed.x64=12BF64 +bFUSEnabled.x64 =12BF74 +bAppServerAllowed.x64 =12BF5C +bMultimonAllowed.x64 =12BF68 +lMaxUserSessions.x64 =12BF54 +ulMaxDebugSessions.x64=12BF70 +bInitialized.x64 =12BF4C + +[10.0.22621.3566] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =9D6F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C4D3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C3C5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =29F60 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.23403.1001-SLInit] ; no x86 section @@ -16532,6 +16809,90 @@ SLInitHook.x64 =1 SLInitOffset.x64 =19060 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.25398.1-SLInit] +; no x86 section + +bServerSku.x64 =120F4C +bRemoteConnAllowed.x64=120F60 +bFUSEnabled.x64 =120F70 +bAppServerAllowed.x64 =120F58 +bMultimonAllowed.x64 =120F64 +lMaxUserSessions.x64 =120F50 +ulMaxDebugSessions.x64=120F6C +bInitialized.x64 =120F48 + +[10.0.25398.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =942C1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =77C3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =15B25 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =19060 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.25398.709-SLInit] +; no x86 section + +bServerSku.x64 =121F4C +bRemoteConnAllowed.x64=121F60 +bFUSEnabled.x64 =121F70 +bAppServerAllowed.x64 =121F58 +bMultimonAllowed.x64 =121F64 +lMaxUserSessions.x64 =121F50 +ulMaxDebugSessions.x64=121F6C +bInitialized.x64 =121F48 + +[10.0.25398.709] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =945A1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =77C3 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =15B25 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =192C0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.25398.830-SLInit] +; no x86 section + +bServerSku.x64 =122F4C +bRemoteConnAllowed.x64=122F60 +bFUSEnabled.x64 =122F70 +bAppServerAllowed.x64 =122F58 +bMultimonAllowed.x64 =122F64 +lMaxUserSessions.x64 =122F50 +ulMaxDebugSessions.x64=122F6C +bInitialized.x64 =122F48 + +[10.0.25398.830] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =954F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =7923 +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =15CA5 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =19DA0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.25905.1000-SLInit] ; no x86 section @@ -16896,6 +17257,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =ACA88 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26002.1000-SLInit] +; no x86 section + +bServerSku.x64 =11BDF4 +bRemoteConnAllowed.x64=11BE08 +bFUSEnabled.x64 =11BE18 +bAppServerAllowed.x64 =11BE00 +bMultimonAllowed.x64 =11BE0C +lMaxUserSessions.x64 =11BDF8 +ulMaxDebugSessions.x64=11BE14 +bInitialized.x64 =11BDF0 + +[10.0.26002.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8BBE1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =985CB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =959FF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =ACB28 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26010.1000-SLInit] ; no x86 section @@ -16952,6 +17341,62 @@ SLInitHook.x64 =1 SLInitOffset.x64 =ACD08 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26020.1000-SLInit] +; no x86 section + +bServerSku.x64 =11CDF4 +bRemoteConnAllowed.x64=11CE08 +bFUSEnabled.x64 =11CE18 +bAppServerAllowed.x64 =11CE00 +bMultimonAllowed.x64 =11CE0C +lMaxUserSessions.x64 =11CDF8 +ulMaxDebugSessions.x64=11CE14 +bInitialized.x64 =11CDF0 + +[10.0.26020.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8BDC1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =987AB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =95BDF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =ACD08 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26040.1000-SLInit] +; no x86 section + +bServerSku.x64 =11ADE4 +bRemoteConnAllowed.x64=11ADF8 +bFUSEnabled.x64 =11AE08 +bAppServerAllowed.x64 =11ADF0 +bMultimonAllowed.x64 =11ADFC +lMaxUserSessions.x64 =11ADE8 +ulMaxDebugSessions.x64=11AE04 +bInitialized.x64 =11ADE0 + +[10.0.26040.1000] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8ACE1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9769B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94AEF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB370 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26052.1000-SLInit] ; no x86 section @@ -17036,3 +17481,143 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB5B0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26080.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26080.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26085.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26085.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26090.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26090.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26100.1-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26100.1] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + +[10.0.26200.5001-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26200.5001] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8AC61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9761B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94A6F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB2F0 +SLInitFunc.x64 =New_CSLQuery_Initialize + From e6d5ef634fd62bb064baa8f2f9745fdf0848379e Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 30 May 2024 22:42:55 +1000 Subject: [PATCH 13/40] Added these new x64 sections: 10.0.19041.4474 10.0.19041.4474-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index c493b13..5087b86 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-04-27a +Updated=2024-05-30a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10230,6 +10230,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =2885C SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.4474-SLInit] +; no x86 section + +bServerSku.x64 =1270A8 +bRemoteConnAllowed.x64=1270BC +bFUSEnabled.x64 =1270C8 +bAppServerAllowed.x64 =1270B4 +bMultimonAllowed.x64 =1270C0 +lMaxUserSessions.x64 =1270AC +ulMaxDebugSessions.x64=1270C4 +bInitialized.x64 =1270A4 + +[10.0.19041.4474] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =93EB1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1843B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F455 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2AE5C +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19101.1112-SLInit] ; no x86 section From 4eb4c41d9cce2b8e9282ce8404bc990100bfdf70 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Tue, 12 Nov 2024 21:20:12 +1100 Subject: [PATCH 14/40] Added support for Windows 11 -- 10.0.26100.1882 (x64 only) --- rdpwrap.ini | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 5087b86..132020c 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-05-30a +Updated=2024-11-12a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17649,3 +17649,26 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB2F0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.1882] +SingleUserPatch.x64=1 +SingleUserOffset.x64=9775B +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=94BAF +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8ADA1 +LocalOnlyCode.x64=jmpshort +SLInitHook.x64=1 +SLInitOffset.x64=AB430 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.26100.1882-SLInit] +bServerSku.x64=11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64=11AE18 +bAppServerAllowed.x64=11AE00 +bMultimonAllowed.x64=11AE0C +lMaxUserSessions.x64=11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64=11ADF0 From 7f77fa7037971a5542edc88bb2ac746dc2551f08 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sun, 24 Nov 2024 01:13:18 +1100 Subject: [PATCH 15/40] Added support for Windows 11 -- 10.0.26100.2454 (x64 only) --- rdpwrap.ini | 75 ++++++++++++++++++++++++++++++++++++----------------- 1 file changed, 51 insertions(+), 24 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 132020c..b48b447 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-11-12a +Updated=2024-11-24a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17621,6 +17621,56 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB2F0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.1882-SLInit] +; no x86 section + +bServerSku.x64 =11ADF4 +bRemoteConnAllowed.x64=11AE08 +bFUSEnabled.x64 =11AE18 +bAppServerAllowed.x64 =11AE00 +bMultimonAllowed.x64 =11AE0C +lMaxUserSessions.x64 =11ADF8 +ulMaxDebugSessions.x64=11AE14 +bInitialized.x64 =11ADF0 + +[10.0.26100.1882] +SingleUserPatch.x64=1 +SingleUserOffset.x64=9775B +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=94BAF +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8ADA1 +LocalOnlyCode.x64=jmpshort +SLInitHook.x64=1 +SLInitOffset.x64=AB430 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.26100.2454-SLInit] +bServerSku.x64=11EE5C +bRemoteConnAllowed.x64=11EE70 +bFUSEnabled.x64=11EE80 +bAppServerAllowed.x64=11EE68 +bMultimonAllowed.x64=11EE74 +lMaxUserSessions.x64=11EE60 +ulMaxDebugSessions.x64=11EE7C +bInitialized.x64=11EE58 + +[10.0.26100.2454] +SingleUserPatch.x64=1 +SingleUserOffset.x64=9B52B +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=9897F +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8EB71 +LocalOnlyCode.x64=jmpshort +SLInitHook.x64=1 +SLInitOffset.x64=AF200 +SLInitFunc.x64=New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section @@ -17649,26 +17699,3 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB2F0 SLInitFunc.x64 =New_CSLQuery_Initialize -[10.0.26100.1882] -SingleUserPatch.x64=1 -SingleUserOffset.x64=9775B -SingleUserCode.x64=Zero -DefPolicyPatch.x64=1 -DefPolicyOffset.x64=94BAF -DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp -LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8ADA1 -LocalOnlyCode.x64=jmpshort -SLInitHook.x64=1 -SLInitOffset.x64=AB430 -SLInitFunc.x64=New_CSLQuery_Initialize - -[10.0.26100.1882-SLInit] -bServerSku.x64=11ADF4 -bRemoteConnAllowed.x64=11AE08 -bFUSEnabled.x64=11AE18 -bAppServerAllowed.x64=11AE00 -bMultimonAllowed.x64=11AE0C -lMaxUserSessions.x64=11ADF8 -ulMaxDebugSessions.x64=11AE14 -bInitialized.x64=11ADF0 From 56857c5e94f876ea6353e81fc1b55297e6f7e171 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sun, 24 Nov 2024 01:41:39 +1100 Subject: [PATCH 16/40] Cleaned up formatting to my normal standard. --- rdpwrap.ini | 68 +++++++++++++++++++++++++++++------------------------ 1 file changed, 37 insertions(+), 31 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index b48b447..bf3f201 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-11-24a +Updated=2024-11-24b LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17634,42 +17634,48 @@ ulMaxDebugSessions.x64=11AE14 bInitialized.x64 =11ADF0 [10.0.26100.1882] -SingleUserPatch.x64=1 -SingleUserOffset.x64=9775B -SingleUserCode.x64=Zero -DefPolicyPatch.x64=1 -DefPolicyOffset.x64=94BAF -DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp -LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8ADA1 -LocalOnlyCode.x64=jmpshort -SLInitHook.x64=1 -SLInitOffset.x64=AB430 -SLInitFunc.x64=New_CSLQuery_Initialize +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8ADA1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9775B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =94BAF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AB430 +SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.26100.2454-SLInit] -bServerSku.x64=11EE5C +; no x86 section + +bServerSku.x64 =11EE5C bRemoteConnAllowed.x64=11EE70 -bFUSEnabled.x64=11EE80 -bAppServerAllowed.x64=11EE68 -bMultimonAllowed.x64=11EE74 -lMaxUserSessions.x64=11EE60 +bFUSEnabled.x64 =11EE80 +bAppServerAllowed.x64 =11EE68 +bMultimonAllowed.x64 =11EE74 +lMaxUserSessions.x64 =11EE60 ulMaxDebugSessions.x64=11EE7C -bInitialized.x64=11EE58 +bInitialized.x64 =11EE58 [10.0.26100.2454] -SingleUserPatch.x64=1 -SingleUserOffset.x64=9B52B -SingleUserCode.x64=Zero -DefPolicyPatch.x64=1 -DefPolicyOffset.x64=9897F -DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp -LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8EB71 -LocalOnlyCode.x64=jmpshort -SLInitHook.x64=1 -SLInitOffset.x64=AF200 -SLInitFunc.x64=New_CSLQuery_Initialize +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8EB71 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B52B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9897F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF200 +SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.26200.5001-SLInit] ; no x86 section From 13ebd0f2a440d91bcd27acdbaeb7f04c1ad733b1 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Wed, 5 Feb 2025 05:00:09 +1100 Subject: [PATCH 17/40] Added x64 sections for Windows 11: 10.0.26100.3037-SLInit 10.0.26100.3037 --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index bf3f201..64f6d33 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2024-11-24b +Updated=2025-02-05a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17677,6 +17677,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AF200 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.3037-SLInit] +; no x86 section + +bServerSku.x64 =11EE64 +bRemoteConnAllowed.x64=11EE78 +bFUSEnabled.x64 =11EE88 +bAppServerAllowed.x64 =11EE70 +bMultimonAllowed.x64 =11EE7C +lMaxUserSessions.x64 =11EE68 +ulMaxDebugSessions.x64=11EE84 +bInitialized.x64 =11EE60 + +[10.0.26100.3037] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8EC31 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B5EB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =98A3F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF2C0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 17e4cf0cdb9604ecbca61b9e6fed3474d7475f69 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 6 Mar 2025 01:33:57 +1100 Subject: [PATCH 18/40] Added new x64 sections: 10.0.26100.3323 10.0.26100.3323-SLInit --- rdpwrap.ini | 28 +++++++++++++++++++++++++++- 1 file changed, 27 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 64f6d33..0ce22e0 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-02-05a +Updated=2025-03-06a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17705,6 +17705,32 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AF2C0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.3323-SLInit] +bServerSku.x64=11EE64 +bRemoteConnAllowed.x64=11EE78 +bFUSEnabled.x64=11EE88 +bAppServerAllowed.x64=11EE70 +bMultimonAllowed.x64=11EE7C +lMaxUserSessions.x64=11EE68 +ulMaxDebugSessions.x64=11EE84 +bInitialized.x64=11EE60 + +[10.0.26100.3323] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8ECF1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B6AB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =98AFF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF380 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From bc29c5f9bd139bef5ba1fb66f50240f6d584dced Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 27 Mar 2025 00:14:24 +1100 Subject: [PATCH 19/40] Added x64 sections for: 10.0.19041.5678-SLInit 10.0.19041.5678 --- rdpwrap.ini | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) mode change 100644 => 100755 rdpwrap.ini diff --git a/rdpwrap.ini b/rdpwrap.ini old mode 100644 new mode 100755 index 0ce22e0..e1165a6 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-03-06a +Updated=2025-03-26a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17759,3 +17759,26 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB2F0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.5678-SLInit] +bServerSku.x64 =125098 +bRemoteConnAllowed.x64=1250AC +bFUSEnabled.x64 =1250B8 +bAppServerAllowed.x64 =1250A0 +bMultimonAllowed.x64 =1250B0 +lMaxUserSessions.x64 =12509C +ulMaxDebugSessions.x64=1250B4 +bInitialized.x64 =125094 + +[10.0.19041.5678] +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91A61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =183FB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F415 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2902C +SLInitFunc.x64 =New_CSLQuery_Initialize From 2c5f17b5698667a5f4cc8290ab53334971fbc8cd Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 27 Mar 2025 00:15:51 +1100 Subject: [PATCH 20/40] Added x64 sections for: 10.0.19041.5678-SLInit 10.0.19041.5678 --- rdpwrap.ini | 0 1 file changed, 0 insertions(+), 0 deletions(-) mode change 100755 => 100644 rdpwrap.ini diff --git a/rdpwrap.ini b/rdpwrap.ini old mode 100755 new mode 100644 From 6d6f5fad774843b94a95e732e5d2ed40057f1312 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sat, 29 Mar 2025 02:50:17 +1100 Subject: [PATCH 21/40] Added these new x64 sections: 10.0.26100.3624 10.0.26100.3624-SLInit --- rdpwrap.ini | 95 ++++++++++++++++++++++++++++++++++++----------------- 1 file changed, 65 insertions(+), 30 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index e1165a6..b5a1e90 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-03-26a +Updated=2025-03-29a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10258,6 +10258,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =2AE5C SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.5678-SLInit] +; no x86 section + +bServerSku.x64 =125098 +bRemoteConnAllowed.x64=1250AC +bFUSEnabled.x64 =1250B8 +bAppServerAllowed.x64 =1250A0 +bMultimonAllowed.x64 =1250B0 +lMaxUserSessions.x64 =12509C +ulMaxDebugSessions.x64=1250B4 +bInitialized.x64 =125094 + +[10.0.19041.5678] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91A61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =183FB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F415 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2902C +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19101.1112-SLInit] ; no x86 section @@ -17706,14 +17734,16 @@ SLInitOffset.x64 =AF2C0 SLInitFunc.x64 =New_CSLQuery_Initialize [10.0.26100.3323-SLInit] -bServerSku.x64=11EE64 +; no x86 section + +bServerSku.x64 =11EE64 bRemoteConnAllowed.x64=11EE78 -bFUSEnabled.x64=11EE88 -bAppServerAllowed.x64=11EE70 -bMultimonAllowed.x64=11EE7C -lMaxUserSessions.x64=11EE68 +bFUSEnabled.x64 =11EE88 +bAppServerAllowed.x64 =11EE70 +bMultimonAllowed.x64 =11EE7C +lMaxUserSessions.x64 =11EE68 ulMaxDebugSessions.x64=11EE84 -bInitialized.x64=11EE60 +bInitialized.x64 =11EE60 [10.0.26100.3323] ; no x86 section @@ -17731,6 +17761,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AF380 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.3624-SLInit] +; no x86 section + +bServerSku.x64 =11EE64 +bRemoteConnAllowed.x64=11EE78 +bFUSEnabled.x64 =11EE88 +bAppServerAllowed.x64 =11EE70 +bMultimonAllowed.x64 =11EE7C +lMaxUserSessions.x64 =11EE68 +ulMaxDebugSessions.x64=11EE84 +bInitialized.x64 =11EE60 + +[10.0.26100.3624] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =8EA91 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9B44B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9889F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =AF120 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section @@ -17759,26 +17817,3 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AB2F0 SLInitFunc.x64 =New_CSLQuery_Initialize -[10.0.19041.5678-SLInit] -bServerSku.x64 =125098 -bRemoteConnAllowed.x64=1250AC -bFUSEnabled.x64 =1250B8 -bAppServerAllowed.x64 =1250A0 -bMultimonAllowed.x64 =1250B0 -lMaxUserSessions.x64 =12509C -ulMaxDebugSessions.x64=1250B4 -bInitialized.x64 =125094 - -[10.0.19041.5678] -LocalOnlyPatch.x64 =1 -LocalOnlyOffset.x64 =91A61 -LocalOnlyCode.x64 =jmpshort -SingleUserPatch.x64 =1 -SingleUserOffset.x64 =183FB -SingleUserCode.x64 =Zero -DefPolicyPatch.x64 =1 -DefPolicyOffset.x64 =1F415 -DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx -SLInitHook.x64 =1 -SLInitOffset.x64 =2902C -SLInitFunc.x64 =New_CSLQuery_Initialize From 13d8e22e92b2b6c6c910a03d0618cbd13ef25d2d Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sun, 27 Apr 2025 19:48:28 +1000 Subject: [PATCH 22/40] Added these new x64 sections: 10.0.26100.3912 10.0.26100.3912-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index b5a1e90..7ff825e 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-03-29a +Updated=2025-04-27a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17789,6 +17789,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =AF120 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.3912-SLInit] +; no x86 section + +bServerSku.x64 =126144 +bRemoteConnAllowed.x64=126158 +bFUSEnabled.x64 =126168 +bAppServerAllowed.x64 =126150 +bMultimonAllowed.x64 =12615C +lMaxUserSessions.x64 =126148 +ulMaxDebugSessions.x64=126164 +bInitialized.x64 =126140 + +[10.0.26100.3912] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =95541 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A1EFB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9F34F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B5BD0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From dada63a3c827399490ca9f6386c359d748012b34 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Wed, 14 May 2025 04:36:12 +1000 Subject: [PATCH 23/40] Added these new x64 sections: 10.0.22621.5124 10.0.22621.5124-SLInit Updated these x64 sections: 10.0.26100.3912 --- rdpwrap.ini | 34 +++++++++++++++++++++++++++++++--- 1 file changed, 31 insertions(+), 3 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 7ff825e..2fa6f04 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-04-27a +Updated=2025-05-14a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -14485,6 +14485,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =29F60 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.22621.5124-SLInit] +; no x86 section + +bServerSku.x64 =12EFAC +bRemoteConnAllowed.x64=12EFC0 +bFUSEnabled.x64 =12EFD0 +bAppServerAllowed.x64 =12EFB4 +bMultimonAllowed.x64 =12EFC4 +lMaxUserSessions.x64 =12EFB0 +ulMaxDebugSessions.x64=12EFCC +bInitialized.x64 =12EFA8 + +[10.0.22621.5124] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =A0C41 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =C893 +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1C755 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2E500 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.23403.1001-SLInit] ; no x86 section @@ -17808,8 +17836,8 @@ LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =95541 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 -SingleUserOffset.x64 =A1EFB -SingleUserCode.x64 =Zero +SingleUserOffset.x64 =A1F2B +SingleUserCode.x64 =mov_eax_1_nop_2 DefPolicyPatch.x64 =1 DefPolicyOffset.x64 =9F34F DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp From 834fbb9686a42cb418462af858200cf521aab8fb Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Fri, 30 May 2025 00:59:52 +1000 Subject: [PATCH 24/40] Added these new x64 sections: 10.0.26100.4202 10.0.26100.4202-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 2fa6f04..064a487 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-05-14a +Updated=2025-05-30a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17845,6 +17845,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B5BD0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.4202-SLInit] +; no x86 section + +bServerSku.x64 =127154 +bRemoteConnAllowed.x64=127168 +bFUSEnabled.x64 =127178 +bAppServerAllowed.x64 =127160 +bMultimonAllowed.x64 =12716C +lMaxUserSessions.x64 =127158 +ulMaxDebugSessions.x64=127174 +bInitialized.x64 =127150 + +[10.0.26100.4202] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =954C1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A1E7B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9F2CF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B5B50 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 887a51d1b36357097d184e7fda8212a66f328f34 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sat, 28 Jun 2025 00:26:12 +1000 Subject: [PATCH 25/40] Added these new x64 sections: 10.0.26100.4484 10.0.26100.4484-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 064a487..0c98384 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-05-30a +Updated=2025-06-28a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17873,6 +17873,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B5B50 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.4484-SLInit] +; no x86 section + +bServerSku.x64 =1281FC +bRemoteConnAllowed.x64=128210 +bFUSEnabled.x64 =128220 +bAppServerAllowed.x64 =128208 +bMultimonAllowed.x64 =128214 +lMaxUserSessions.x64 =128200 +ulMaxDebugSessions.x64=12821C +bInitialized.x64 =1281F8 + +[10.0.26100.4484] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =96DC1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A377B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =A0BCF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B7450 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 95cdc5e93293b0bb92acfa65f624034e28d831bf Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Wed, 23 Jul 2025 20:46:35 +1000 Subject: [PATCH 26/40] Added these new x64 sections: 10.0.26100.4768 10.0.26100.4768-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 0c98384..8a94382 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-06-28a +Updated=2025-07-23a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17901,6 +17901,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B7450 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.4768-SLInit] +; no x86 section + +bServerSku.x64 =12B21C +bRemoteConnAllowed.x64=12B230 +bFUSEnabled.x64 =12B240 +bAppServerAllowed.x64 =12B228 +bMultimonAllowed.x64 =12B234 +lMaxUserSessions.x64 =12B220 +ulMaxDebugSessions.x64=12B23C +bInitialized.x64 =12B218 + +[10.0.26100.4768] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =97691 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A42DB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =A172F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B7FB0 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 39048018af039374994d4abb7e23bc80e8fbaeb7 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Tue, 2 Sep 2025 00:38:47 +1000 Subject: [PATCH 27/40] Added these new x64 sections: 10.0.26100.5074 10.0.26100.5074-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 8a94382..d3589dc 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-07-23a +Updated=2025-09-02a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17929,6 +17929,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B7FB0 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.5074-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F7C +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.5074] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91DC1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E9FB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9BE4F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B26C8 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From f74acad7bb872654c4bd3356c4fbf72d1d0fa175 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Wed, 1 Oct 2025 04:38:41 +1000 Subject: [PATCH 28/40] Added these new x64 sections: 10.0.26100.6725 10.0.26100.6725-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index d3589dc..75b7de2 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-09-02a +Updated=2025-10-01a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17957,6 +17957,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B26C8 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.6725-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F7C +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.6725] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =92381 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9EFBB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C40F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2C88 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 035ce63fc210be6c9c738ea6ec32e4abb952fd35 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 16 Oct 2025 04:50:10 +1100 Subject: [PATCH 29/40] Added these new x64 sections: 10.0.26100.6899 10.0.26100.6899-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 75b7de2..0bae4e9 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-10-01a +Updated=2025-10-16a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -17985,6 +17985,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B2C88 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.6899-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F80 +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.6899] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =92381 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9EFBB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C40F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2C88 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From fa3e70b7c1bc6c0400219f9ce7bd7c091025b37a Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 16 Oct 2025 05:03:52 +1100 Subject: [PATCH 30/40] Added these new x64 sections: 10.0.19041.6456 10.0.19041.6456-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 0bae4e9..63c5c7a 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-10-16a +Updated=2025-10-16b LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10286,6 +10286,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =2902C SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.19041.6456-SLInit] +; no x86 section + +bServerSku.x64 =125098 +bRemoteConnAllowed.x64=1250AC +bFUSEnabled.x64 =1250B8 +bAppServerAllowed.x64 =1250A0 +bMultimonAllowed.x64 =1250B0 +lMaxUserSessions.x64 =12509C +ulMaxDebugSessions.x64=1250B4 +bInitialized.x64 =125094 + +[10.0.19041.6456] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91A61 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =1842B +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =1F415 +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx +SLInitHook.x64 =1 +SLInitOffset.x64 =2902C +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.19101.1112-SLInit] ; no x86 section From 409414c9667003fc66d94f8a87f011d071ef2b46 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Wed, 29 Oct 2025 20:55:56 +1100 Subject: [PATCH 31/40] Added these new x64 sections: 10.0.26100.7019 10.0.26100.7019-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 63c5c7a..905f475 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-10-16b +Updated=2025-10-29a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18041,6 +18041,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B2C88 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.7019-SLInit] +; no x86 section + +bServerSku.x64 =125F54 +bRemoteConnAllowed.x64=125F68 +bFUSEnabled.x64 =125F78 +bAppServerAllowed.x64 =125F5C +bMultimonAllowed.x64 =125F6C +lMaxUserSessions.x64 =125F58 +ulMaxDebugSessions.x64=125F74 +bInitialized.x64 =125F50 + +[10.0.26100.7019] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91FD1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9EC0B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C05F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B28D8 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From d8ae6b319f1a4750783054f7935043b5d2b6c606 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 4 Dec 2025 03:40:05 +1100 Subject: [PATCH 32/40] Added these new x64 sections: 10.0.26100.7309 10.0.26100.7309-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 905f475..9aa710a 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-10-29a +Updated=2025-12-04a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18069,6 +18069,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B28D8 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.7309-SLInit] +; no x86 section + +bServerSku.x64 =125F74 +bRemoteConnAllowed.x64=125F88 +bFUSEnabled.x64 =125F98 +bAppServerAllowed.x64 =125F80 +bMultimonAllowed.x64 =125F8C +lMaxUserSessions.x64 =125F78 +ulMaxDebugSessions.x64=125F94 +bInitialized.x64 =125F70 + +[10.0.26100.7309] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =923E1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9F01B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9C46F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2D98 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 0e5b93cad9ecf5ea274002819faa435c13bc621a Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sat, 31 Jan 2026 05:56:50 +1100 Subject: [PATCH 33/40] Added these new x64 sections: 10.0.26100.7705 10.0.26100.7705-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 9aa710a..65eb3d7 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2025-12-04a +Updated=2026-01-31a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18097,6 +18097,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B2D98 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.7705-SLInit] +; no x86 section + +bServerSku.x64 =124044 +bRemoteConnAllowed.x64=12405C +bFUSEnabled.x64 =12406C +bAppServerAllowed.x64 =124050 +bMultimonAllowed.x64 =124060 +lMaxUserSessions.x64 =124048 +ulMaxDebugSessions.x64=124068 +bInitialized.x64 =124040 + +[10.0.26100.7705] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90A01 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E4BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9AA4F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2698 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 7025004de2abdc85ceef59edc8244714793d5b4a Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 12 Feb 2026 02:33:12 +1100 Subject: [PATCH 34/40] Added these new x64 sections: 10.0.26100.7824 10.0.26100.7824-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 65eb3d7..3eddbcf 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-01-31a +Updated=2026-02-12a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18125,6 +18125,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B2698 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.7824-SLInit] +; no x86 section + +bServerSku.x64 =124044 +bRemoteConnAllowed.x64=12405C +bFUSEnabled.x64 =12406C +bAppServerAllowed.x64 =124050 +bMultimonAllowed.x64 =124060 +lMaxUserSessions.x64 =124048 +ulMaxDebugSessions.x64=124068 +bInitialized.x64 =124040 + +[10.0.26100.7824] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90A01 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E4BB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9AA4F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B2698 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 7c1785be875073e9ee33aa6d2342eec4286ebc79 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 26 Feb 2026 02:42:59 +1100 Subject: [PATCH 35/40] Added these new x64 sections: 10.0.26100.7920 10.0.26100.7920-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 3eddbcf..407bc72 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-02-12a +Updated=2026-02-26a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18153,6 +18153,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B2698 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.7920-SLInit] +; no x86 section + +bServerSku.x64 =124014 +bRemoteConnAllowed.x64=12402C +bFUSEnabled.x64 =12403C +bAppServerAllowed.x64 =124020 +bMultimonAllowed.x64 =124030 +lMaxUserSessions.x64 =124018 +ulMaxDebugSessions.x64=124038 +bInitialized.x64 =124010 + +[10.0.26100.7920] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =91301 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9E38B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9B32F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B21B8 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 385f829bbdba124c7237b6196531f6edce7637ef Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 2 Apr 2026 05:40:48 +1100 Subject: [PATCH 36/40] Added these new x64 sections: 10.0.26100.8115 10.0.26100.8115-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 407bc72..f1fbbdc 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-02-26a +Updated=2026-04-02a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18181,6 +18181,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B21B8 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.8115-SLInit] +; no x86 section + +bServerSku.x64 =124FE4 +bRemoteConnAllowed.x64=124FFC +bFUSEnabled.x64 =12500C +bAppServerAllowed.x64 =124FF0 +bMultimonAllowed.x64 =125000 +lMaxUserSessions.x64 =124FE8 +ulMaxDebugSessions.x64=125008 +bInitialized.x64 =124FE0 + +[10.0.26100.8115] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90E81 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9DF9B +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9AEEF +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B1DC8 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 8fa062458b682568a62cf8287bcdc53ddfc47257 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sat, 2 May 2026 11:01:48 +1000 Subject: [PATCH 37/40] Added these new x64 sections: 10.0.26100.8328 10.0.26100.8328-SLInit --- rdpwrap.ini | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index f1fbbdc..6166448 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-04-02a +Updated=2026-05-02a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18209,6 +18209,34 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B1DC8 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.8328-SLInit] +; no x86 section + +bServerSku.x64 =123004 +bRemoteConnAllowed.x64=12301C +bFUSEnabled.x64 =12302C +bAppServerAllowed.x64 =123010 +bMultimonAllowed.x64 =123020 +lMaxUserSessions.x64 =123008 +ulMaxDebugSessions.x64=123028 +bInitialized.x64 =123000 + +[10.0.26100.8328] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =90111 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9CFAB +SingleUserCode.x64 =Zero +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9A17F +DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp +SLInitHook.x64 =1 +SLInitOffset.x64 =B0D18 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 7e5909e095a0041846719bff0af604325e5edc6e Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 28 May 2026 03:44:09 +1000 Subject: [PATCH 38/40] Added these new x64 sections: 10.0.26100.8521 10.0.26100.8521-SLInit --- rdpwrap.ini | 27 ++++++++++++++++++++++++++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index 6166448..f12ab1e 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-05-02a +Updated=2026-05-28a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18237,6 +18237,31 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B0D18 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.8521-SLInit] +; no x86 section + +bServerSku.x64 =126FCC +bRemoteConnAllowed.x64=126FE4 +bFUSEnabled.x64 =126FF4 +bAppServerAllowed.x64 =126FD8 +bMultimonAllowed.x64 =126FE8 +lMaxUserSessions.x64 =126FD0 +ulMaxDebugSessions.x64=126FF0 +bInitialized.x64 =126FC8 + +[10.0.26100.8521] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =920F1 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =9F36B +SingleUserCode.x64 =Zero +SLInitHook.x64 =1 +SLInitOffset.x64 =B3468 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 64662a28b58091da1d93cd9b321a7312eb4ecf0d Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Thu, 25 Jun 2026 02:56:17 +1000 Subject: [PATCH 39/40] Added these new x64 sections: 10.0.26100.8737 10.0.26100.8737-SLInit --- rdpwrap.ini | 27 ++++++++++++++++++++++++++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index f12ab1e..fe9d030 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-05-28a +Updated=2026-06-25a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -18262,6 +18262,31 @@ SLInitHook.x64 =1 SLInitOffset.x64 =B3468 SLInitFunc.x64 =New_CSLQuery_Initialize +[10.0.26100.8737-SLInit] +; no x86 section + +bServerSku.x64 =12913C +bRemoteConnAllowed.x64=129154 +bFUSEnabled.x64 =129164 +bAppServerAllowed.x64 =129148 +bMultimonAllowed.x64 =129158 +lMaxUserSessions.x64 =129140 +ulMaxDebugSessions.x64=129160 +bInitialized.x64 =129138 + +[10.0.26100.8737] +; no x86 section + +LocalOnlyPatch.x64 =1 +LocalOnlyOffset.x64 =95301 +LocalOnlyCode.x64 =jmpshort +SingleUserPatch.x64 =1 +SingleUserOffset.x64 =A257B +SingleUserCode.x64 =Zero +SLInitHook.x64 =1 +SLInitOffset.x64 =B6678 +SLInitFunc.x64 =New_CSLQuery_Initialize + [10.0.26200.5001-SLInit] ; no x86 section From 64facd42db278fe07cc70cbfd394f7e6b7adbb02 Mon Sep 17 00:00:00 2001 From: Andrew McGlashan Date: Sat, 27 Jun 2026 03:16:29 +1000 Subject: [PATCH 40/40] Updated PatchCodes section Corrected these new x64 sections: 10.0.26100.8737 10.0.26100.8737-SLInit --- rdpwrap.ini | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) diff --git a/rdpwrap.ini b/rdpwrap.ini index fe9d030..df2ff63 100644 --- a/rdpwrap.ini +++ b/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2026-06-25a +Updated=2026-06-27a LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -10,18 +10,25 @@ SLPolicyHookNT61=1 [PatchCodes] nop=90 Zero=00 +nop_2=9090 +nop_3=909090 +nop_4=90909090 +nop_7=90909090909090 jmpshort=EB nopjmp=90E9 +mov_eax_1_nop_1=B80100000090 +mov_eax_1_nop_2=B8010000009090 +pop_eax_add_esp_12_nop_2=5883C40C9090 CDefPolicy_Query_edx_ecx=BA000100008991200300005E90 CDefPolicy_Query_eax_rcx_jmp=B80001000089813806000090EB CDefPolicy_Query_eax_esi=B80001000089862003000090 CDefPolicy_Query_eax_rdi=B80001000089873806000090 -CDefPolicy_Query_eax_ecx=B80001000089812003000090 +CDefPolicy_Query_eax_ecx=B80001000089812403000090 CDefPolicy_Query_eax_ecx_jmp=B800010000898120030000EB0E CDefPolicy_Query_eax_rcx=B80001000089813806000090 CDefPolicy_Query_edi_rcx=BF0001000089B938060000909090 -; new patch by sebaxakerhtc -CDefPolicy_Query_eax_rdi_jmp=B800010000898738060000EB0D +CDefPolicy_Query_eax_rdi_jmp=B80001000089873806000090EB +CDefPolicy_Query_r9d_rdi_jmp=C7873806000000010000EB [SLInit] bServerSku=1 @@ -18281,8 +18288,11 @@ LocalOnlyPatch.x64 =1 LocalOnlyOffset.x64 =95301 LocalOnlyCode.x64 =jmpshort SingleUserPatch.x64 =1 -SingleUserOffset.x64 =A257B -SingleUserCode.x64 =Zero +SingleUserOffset.x64 =A25AB +SingleUserCode.x64 =mov_eax_1_nop_2 +DefPolicyPatch.x64 =1 +DefPolicyOffset.x64 =9F74D +DefPolicyCode.x64 =CDefPolicy_Query_r9d_rdi_jmp SLInitHook.x64 =1 SLInitOffset.x64 =B6678 SLInitFunc.x64 =New_CSLQuery_Initialize