mirror of https://github.com/stascorp/rdpwrap
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
951 lines
24 KiB
951 lines
24 KiB
; RDP Wrapper Library configuration
|
|
; Do not modify without special knowledge
|
|
|
|
[Main]
|
|
Updated=2016-01-28
|
|
LogFile=\rdpwrap.txt
|
|
SLPolicyHookNT60=1
|
|
SLPolicyHookNT61=1
|
|
|
|
[SLPolicy]
|
|
TerminalServices-RemoteConnectionManager-AllowRemoteConnections=1
|
|
TerminalServices-RemoteConnectionManager-AllowMultipleSessions=1
|
|
TerminalServices-RemoteConnectionManager-AllowAppServerMode=1
|
|
TerminalServices-RemoteConnectionManager-AllowMultimon=1
|
|
TerminalServices-RemoteConnectionManager-MaxUserSessions=0
|
|
TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions=0
|
|
TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions=2
|
|
TerminalServices-RDP-7-Advanced-Compression-Allowed=1
|
|
TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly=0
|
|
TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions=1000
|
|
TerminalServices-DeviceRedirection-Licenses-TSEasyPrintAllowed=1
|
|
TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed=1
|
|
TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed=1
|
|
TerminalServices-RemoteConnectionManager-UiEffects-DWMRemotingAllowed=1
|
|
|
|
[PatchCodes]
|
|
nop=90
|
|
Zero=00
|
|
jmpshort=EB
|
|
nopjmp=90E9
|
|
CDefPolicy_Query_edx_ecx=BA000100008991200300005E90
|
|
CDefPolicy_Query_eax_rcx_jmp=B80001000089813806000090EB
|
|
CDefPolicy_Query_eax_esi=B80001000089862003000090
|
|
CDefPolicy_Query_eax_rdi=B80001000089873806000090
|
|
CDefPolicy_Query_eax_ecx=B80001000089812003000090
|
|
CDefPolicy_Query_eax_rcx=B80001000089813806000090
|
|
|
|
[6.0.6000.16386]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=160BF
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=65E3E
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=15CD8
|
|
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=5C88F
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
|
|
|
|
[6.0.6001.18000]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=185E4
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=70DBA
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=17FD8
|
|
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=65BD7
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
|
|
|
|
[6.0.6002.18005]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=17FA8
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=70FF6
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=179C0
|
|
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=65E83
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
|
|
|
|
[6.0.6002.19214]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=17FC4
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=712AA
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=179B8
|
|
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=65FF7
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
|
|
|
|
[6.0.6002.23521]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=17FB4
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=71EAA
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=179CC
|
|
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=669CB
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
|
|
|
|
[6.1.7600.16385]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=19E25
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=17D96
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=196F3
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=17AD2
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
|
|
[6.1.7601.17514]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=1A49D
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=180E2
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=19D53
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=17D8A
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
|
|
[6.1.7601.18540]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=1A4E5
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=18006
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=19D9F
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=17C82
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
|
|
[6.1.7601.22750]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=1A655
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=17E8E
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=19E21
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=17C92
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
|
|
[6.1.7601.18637]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=1A4DD
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=180FA
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=19DBB
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=17DC6
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
|
|
[6.1.7601.22843]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=1A655
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=17F96
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=19E25
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=17D6E
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
|
|
[6.2.8102.0]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=F7E9
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=D840
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=E47C
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=D3E6
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
SLPolicyInternal.x86=1
|
|
SLPolicyOffset.x86=1B909
|
|
SLPolicyFunc.x86=New_Win8SL
|
|
SLPolicyInternal.x64=1
|
|
SLPolicyOffset.x64=1A484
|
|
SLPolicyFunc.x64=New_Win8SL
|
|
|
|
[6.2.8250.0]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=159C9
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=11E74
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=13520
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1187A
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
SLPolicyInternal.x86=1
|
|
SLPolicyOffset.x86=1A0A9
|
|
SLPolicyFunc.x86=New_Win8SL_CP
|
|
SLPolicyInternal.x64=1
|
|
SLPolicyOffset.x64=18FAC
|
|
SLPolicyFunc.x64=New_Win8SL
|
|
|
|
[6.2.8400.0]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=15482
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=20824
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=13E48
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1F102
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
SLPolicyInternal.x86=1
|
|
SLPolicyOffset.x86=19629
|
|
SLPolicyFunc.x86=New_Win8SL
|
|
SLPolicyInternal.x64=1
|
|
SLPolicyOffset.x64=2492C
|
|
SLPolicyFunc.x64=New_Win8SL
|
|
|
|
[6.2.9200.16384]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=15552
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=2BAA8
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=13F08
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=2A31A
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
SLPolicyInternal.x86=1
|
|
SLPolicyOffset.x86=19559
|
|
SLPolicyFunc.x86=New_Win8SL
|
|
SLPolicyInternal.x64=1
|
|
SLPolicyOffset.x64=21FA8
|
|
SLPolicyFunc.x64=New_Win8SL
|
|
|
|
[6.2.9200.17048]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=20592
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=20948
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=1F408
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1F206
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
SLPolicyInternal.x86=1
|
|
SLPolicyOffset.x86=17059
|
|
SLPolicyFunc.x86=New_Win8SL
|
|
SLPolicyInternal.x64=1
|
|
SLPolicyOffset.x64=24570
|
|
SLPolicyFunc.x64=New_Win8SL
|
|
|
|
[6.2.9200.21166]
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=1557A
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=2BAF8
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=13F30
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=2A3B6
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
|
|
SLPolicyInternal.x86=1
|
|
SLPolicyOffset.x86=19581
|
|
SLPolicyFunc.x86=New_Win8SL
|
|
SLPolicyInternal.x64=1
|
|
SLPolicyOffset.x64=21FD0
|
|
SLPolicyFunc.x64=New_Win8SL
|
|
|
|
[6.3.9431.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=8A611
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=9F721
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=306A8
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=367F9
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=2EA25
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=350FD
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=196B0
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=2F9C0
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[6.3.9600.16384]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A2729
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=81824
|
|
LocalOnlyCode.x64=nopjmp
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=18028
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=20241
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=16115
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=57829
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=1CEB0
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=554C0
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[6.3.9600.17095]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A36D1
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=B9159
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=36BA9
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=21829
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=37529
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1F6A1
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=117F1
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=3B110
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[6.3.9600.17415]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=B33F8
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=8B2D9
|
|
LocalOnlyCode.x64=nopjmp
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=37115
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=33CE9
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=3CFF9
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=45825
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=18478
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=5DBC0
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[6.4.9841.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=956A8
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=81141
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=30125
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=12159
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=3B989
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=C125
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=46A68
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=1EA50
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[6.4.9860.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=962C8
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=81091
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=30845
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=11AA9
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=3BEC9
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=B9F5
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=46F18
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=1EB00
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[6.4.9879.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A9CC8
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=95611
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=30C55
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=16A34
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=2DAB9
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1BDC5
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=41132
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=24750
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.9926.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A8C28
|
|
LocalOnlyCode.x86=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=31725
|
|
SingleUserCode.x86=nop
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=3CF99
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=3F140
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=95FF1
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=12A34
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=BE05
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=24EC0
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.10041.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A9D88
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=97141
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=32215
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=15C64
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=2DFC9
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=B795
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=46960
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=22E40
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.10240.16384]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A7D38
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=96901
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=32A95
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=18F74
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=2F5B9
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=22865
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=46581
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=250F0
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.10586.0]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A7C18
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=96AA1
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=353B5
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=190D4
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=30B69
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=229A5
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=469DE
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=25220
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.11082.1000]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A7C98
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=96AB1
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=35405
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=190D4
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=30BB9
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=229A5
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=46A3E
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=25220
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.11102.1000]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A5D58
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=95CD1
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=35A85
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=2A9C4
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=30159
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1B5D5
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=44FD2
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=D160
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[10.0.14251.1000]
|
|
LocalOnlyPatch.x86=1
|
|
LocalOnlyOffset.x86=A5D58
|
|
LocalOnlyCode.x86=jmpshort
|
|
LocalOnlyPatch.x64=1
|
|
LocalOnlyOffset.x64=95CD1
|
|
LocalOnlyCode.x64=jmpshort
|
|
SingleUserPatch.x86=1
|
|
SingleUserOffset.x86=35A85
|
|
SingleUserCode.x86=nop
|
|
SingleUserPatch.x64=1
|
|
SingleUserOffset.x64=2A9C4
|
|
SingleUserCode.x64=Zero
|
|
DefPolicyPatch.x86=1
|
|
DefPolicyOffset.x86=30159
|
|
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
|
|
DefPolicyPatch.x64=1
|
|
DefPolicyOffset.x64=1B5D5
|
|
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
|
|
SLInitHook.x86=1
|
|
SLInitOffset.x86=44FD2
|
|
SLInitFunc.x86=New_CSLQuery_Initialize
|
|
SLInitHook.x64=1
|
|
SLInitOffset.x64=D160
|
|
SLInitFunc.x64=New_CSLQuery_Initialize
|
|
|
|
[SLInit]
|
|
bServerSku=1
|
|
bRemoteConnAllowed=1
|
|
bFUSEnabled=1
|
|
bAppServerAllowed=1
|
|
bMultimonAllowed=1
|
|
lMaxUserSessions=0
|
|
ulMaxDebugSessions=0
|
|
bInitialized=1
|
|
|
|
[6.3.9431.0-SLInit]
|
|
bFUSEnabled.x86 =A22A8
|
|
lMaxUserSessions.x86 =A22AC
|
|
bAppServerAllowed.x86 =A22B0
|
|
bInitialized.x86 =A22B4
|
|
bMultimonAllowed.x86 =A22B8
|
|
bServerSku.x86 =A22BC
|
|
ulMaxDebugSessions.x86=A22C0
|
|
bRemoteConnAllowed.x86=A22C4
|
|
|
|
bFUSEnabled.x64 =C4490
|
|
lMaxUserSessions.x64 =C4494
|
|
bAppServerAllowed.x64 =C4498
|
|
bInitialized.x64 =C449C
|
|
bMultimonAllowed.x64 =C44A0
|
|
bServerSku.x64 =C44A4
|
|
ulMaxDebugSessions.x64=C44A8
|
|
bRemoteConnAllowed.x64=C44AC
|
|
|
|
[6.3.9600.16384-SLInit]
|
|
bFUSEnabled.x86 =C02A8
|
|
lMaxUserSessions.x86 =C02AC
|
|
bAppServerAllowed.x86 =C02B0
|
|
bInitialized.x86 =C02B4
|
|
bMultimonAllowed.x86 =C02B8
|
|
bServerSku.x86 =C02BC
|
|
ulMaxDebugSessions.x86=C02C0
|
|
bRemoteConnAllowed.x86=C02C4
|
|
|
|
bServerSku.x64 =E6494
|
|
ulMaxDebugSessions.x64=E6498
|
|
bRemoteConnAllowed.x64=E649C
|
|
bFUSEnabled.x64 =E64A0
|
|
lMaxUserSessions.x64 =E64A4
|
|
bAppServerAllowed.x64 =E64A8
|
|
bInitialized.x64 =E64AC
|
|
bMultimonAllowed.x64 =E64B0
|
|
|
|
[6.3.9600.17095-SLInit]
|
|
bFUSEnabled.x86 =C12A8
|
|
lMaxUserSessions.x86 =C12AC
|
|
bAppServerAllowed.x86 =C12B0
|
|
bInitialized.x86 =C12B4
|
|
bMultimonAllowed.x86 =C12B8
|
|
bServerSku.x86 =C12BC
|
|
ulMaxDebugSessions.x86=C12C0
|
|
bRemoteConnAllowed.x86=C12C4
|
|
|
|
bServerSku.x64 =E4494
|
|
ulMaxDebugSessions.x64=E4498
|
|
bRemoteConnAllowed.x64=E449C
|
|
bFUSEnabled.x64 =E44A0
|
|
lMaxUserSessions.x64 =E44A4
|
|
bAppServerAllowed.x64 =E44A8
|
|
bInitialized.x64 =E44AC
|
|
bMultimonAllowed.x64 =E44B0
|
|
|
|
[6.3.9600.17415-SLInit]
|
|
bFUSEnabled.x86 =D3068
|
|
lMaxUserSessions.x86 =D306C
|
|
bAppServerAllowed.x86 =D3070
|
|
bInitialized.x86 =D3074
|
|
bMultimonAllowed.x86 =D3078
|
|
bServerSku.x86 =D307C
|
|
ulMaxDebugSessions.x86=D3080
|
|
bRemoteConnAllowed.x86=D3084
|
|
|
|
bFUSEnabled.x64 =F9054
|
|
lMaxUserSessions.x64 =F9058
|
|
bAppServerAllowed.x64 =F905C
|
|
bInitialized.x64 =F9060
|
|
bMultimonAllowed.x64 =F9064
|
|
bServerSku.x64 =F9068
|
|
ulMaxDebugSessions.x64=F906C
|
|
bRemoteConnAllowed.x64=F9070
|
|
|
|
[6.4.9841.0-SLInit]
|
|
bFUSEnabled.x86 =BF9F0
|
|
lMaxUserSessions.x86 =BF9F4
|
|
bAppServerAllowed.x86 =BF9F8
|
|
bInitialized.x86 =BF9FC
|
|
bMultimonAllowed.x86 =BFA00
|
|
bServerSku.x86 =BFA04
|
|
ulMaxDebugSessions.x86=BFA08
|
|
bRemoteConnAllowed.x86=BFA0C
|
|
|
|
bFUSEnabled.x64 =ECFF8
|
|
lMaxUserSessions.x64 =ECFFC
|
|
bAppServerAllowed.x64 =ED000
|
|
bInitialized.x64 =ED004
|
|
bMultimonAllowed.x64 =ED008
|
|
bServerSku.x64 =ED00C
|
|
ulMaxDebugSessions.x64=ED010
|
|
bRemoteConnAllowed.x64=ED014
|
|
|
|
[6.4.9860.0-SLInit]
|
|
bFUSEnabled.x86 =BF7E0
|
|
lMaxUserSessions.x86 =BF7E4
|
|
bAppServerAllowed.x86 =BF7E8
|
|
bInitialized.x86 =BF7EC
|
|
bMultimonAllowed.x86 =BF7F0
|
|
bServerSku.x86 =BF7F4
|
|
ulMaxDebugSessions.x86=BF7F8
|
|
bRemoteConnAllowed.x86=BF7FC
|
|
|
|
bFUSEnabled.x64 =ECBD8
|
|
lMaxUserSessions.x64 =ECBDC
|
|
bAppServerAllowed.x64 =ECBE0
|
|
bInitialized.x64 =ECBE4
|
|
bMultimonAllowed.x64 =ECBE8
|
|
bServerSku.x64 =ECBEC
|
|
ulMaxDebugSessions.x64=ECBF0
|
|
bRemoteConnAllowed.x64=ECBF4
|
|
|
|
[6.4.9879.0-SLInit]
|
|
bFUSEnabled.x86 =C27D8
|
|
lMaxUserSessions.x86 =C27DC
|
|
bAppServerAllowed.x86 =C27E0
|
|
bInitialized.x86 =C27E4
|
|
bMultimonAllowed.x86 =C27E8
|
|
bServerSku.x86 =C27EC
|
|
ulMaxDebugSessions.x86=C27F0
|
|
bRemoteConnAllowed.x86=C27F4
|
|
|
|
bFUSEnabled.x64 =EDBF0
|
|
lMaxUserSessions.x64 =EDBF4
|
|
bAppServerAllowed.x64 =EDBF8
|
|
bInitialized.x64 =EDBFC
|
|
bMultimonAllowed.x64 =EDC00
|
|
bServerSku.x64 =EDC04
|
|
ulMaxDebugSessions.x64=EDC08
|
|
bRemoteConnAllowed.x64=EDC0C
|
|
|
|
[10.0.9926.0-SLInit]
|
|
bFUSEnabled.x86 =C17D8
|
|
lMaxUserSessions.x86 =C17DC
|
|
bAppServerAllowed.x86 =C17E0
|
|
bInitialized.x86 =C17E4
|
|
bMultimonAllowed.x86 =C17E8
|
|
bServerSku.x86 =C17EC
|
|
ulMaxDebugSessions.x86=C17F0
|
|
bRemoteConnAllowed.x86=C17F4
|
|
|
|
bFUSEnabled.x64 =EEBF0
|
|
lMaxUserSessions.x64 =EEBF4
|
|
bAppServerAllowed.x64 =EEBF8
|
|
bInitialized.x64 =EEBFC
|
|
bMultimonAllowed.x64 =EEC00
|
|
bServerSku.x64 =EEC04
|
|
ulMaxDebugSessions.x64=EEC08
|
|
bRemoteConnAllowed.x64=EEC0C
|
|
|
|
[10.0.10041.0-SLInit]
|
|
bFUSEnabled.x86 =C5F60
|
|
lMaxUserSessions.x86 =C5F64
|
|
bAppServerAllowed.x86 =C5F68
|
|
bInitialized.x86 =C5F6C
|
|
bMultimonAllowed.x86 =C5F70
|
|
bServerSku.x86 =C5F74
|
|
ulMaxDebugSessions.x86=C5F78
|
|
bRemoteConnAllowed.x86=C5F7C
|
|
|
|
bFUSEnabled.x64 =F3448
|
|
lMaxUserSessions.x64 =F344C
|
|
bAppServerAllowed.x64 =F3450
|
|
bInitialized.x64 =F3454
|
|
bMultimonAllowed.x64 =F3458
|
|
bServerSku.x64 =F345C
|
|
ulMaxDebugSessions.x64=F3460
|
|
bRemoteConnAllowed.x64=F3464
|
|
|
|
[10.0.10240.16384-SLInit]
|
|
bFUSEnabled.x86 =C3F60
|
|
lMaxUserSessions.x86 =C3F64
|
|
bAppServerAllowed.x86 =C3F68
|
|
bInitialized.x86 =C3F6C
|
|
bMultimonAllowed.x86 =C3F70
|
|
bServerSku.x86 =C3F74
|
|
ulMaxDebugSessions.x86=C3F78
|
|
bRemoteConnAllowed.x86=C3F7C
|
|
|
|
lMaxUserSessions.x64 =F23B0
|
|
bAppServerAllowed.x64 =F23B4
|
|
bServerSku.x64 =F23B8
|
|
bFUSEnabled.x64 =F3460
|
|
bInitialized.x64 =F3464
|
|
bMultimonAllowed.x64 =F3468
|
|
ulMaxDebugSessions.x64=F346C
|
|
bRemoteConnAllowed.x64=F3470
|
|
|
|
[10.0.10586.0-SLInit]
|
|
bFUSEnabled.x86 =C3F60
|
|
lMaxUserSessions.x86 =C3F64
|
|
bAppServerAllowed.x86 =C3F68
|
|
bInitialized.x86 =C3F6C
|
|
bMultimonAllowed.x86 =C3F70
|
|
bServerSku.x86 =C3F74
|
|
ulMaxDebugSessions.x86=C3F78
|
|
bRemoteConnAllowed.x86=C3F7C
|
|
|
|
lMaxUserSessions.x64 =F23B0
|
|
bAppServerAllowed.x64 =F23B4
|
|
bServerSku.x64 =F23B8
|
|
bFUSEnabled.x64 =F3460
|
|
bInitialized.x64 =F3464
|
|
bMultimonAllowed.x64 =F3468
|
|
ulMaxDebugSessions.x64=F346C
|
|
bRemoteConnAllowed.x64=F3470
|
|
|
|
[10.0.11082.1000-SLInit]
|
|
bFUSEnabled.x86 =C3F60
|
|
lMaxUserSessions.x86 =C3F64
|
|
bAppServerAllowed.x86 =C3F68
|
|
bInitialized.x86 =C3F6C
|
|
bMultimonAllowed.x86 =C3F70
|
|
bServerSku.x86 =C3F74
|
|
ulMaxDebugSessions.x86=C3F78
|
|
bRemoteConnAllowed.x86=C3F7C
|
|
|
|
lMaxUserSessions.x64 =F23B0
|
|
bAppServerAllowed.x64 =F23B4
|
|
bServerSku.x64 =F23B8
|
|
bFUSEnabled.x64 =F3460
|
|
bInitialized.x64 =F3464
|
|
bMultimonAllowed.x64 =F3468
|
|
ulMaxDebugSessions.x64=F346C
|
|
bRemoteConnAllowed.x64=F3470
|
|
|
|
[10.0.11102.1000-SLInit]
|
|
bInitialized.x86 =C1F5C
|
|
bServerSku.x86 =C1F60
|
|
lMaxUserSessions.x86 =C1F64
|
|
bAppServerAllowed.x86 =C1F68
|
|
bRemoteConnAllowed.x86=C1F6C
|
|
bMultimonAllowed.x86 =C1F70
|
|
ulMaxDebugSessions.x86=C1F74
|
|
bFUSEnabled.x86 =C1F78
|
|
|
|
bInitialized.x64 =F2430
|
|
bRemoteConnAllowed.x64=F2434
|
|
bMultimonAllowed.x64 =F2438
|
|
ulMaxDebugSessions.x64=F243C
|
|
bFUSEnabled.x64 =F2440
|
|
bServerSku.x64 =F244C
|
|
lMaxUserSessions.x64 =F2450
|
|
bAppServerAllowed.x64 =F2454
|
|
|
|
[10.0.14251.1000-SLInit]
|
|
bInitialized.x86 =C1F5C
|
|
bServerSku.x86 =C1F60
|
|
lMaxUserSessions.x86 =C1F64
|
|
bAppServerAllowed.x86 =C1F68
|
|
bRemoteConnAllowed.x86=C1F6C
|
|
bMultimonAllowed.x86 =C1F70
|
|
ulMaxDebugSessions.x86=C1F74
|
|
bFUSEnabled.x86 =C1F78
|
|
|
|
bInitialized.x64 =F2430
|
|
bRemoteConnAllowed.x64=F2434
|
|
bMultimonAllowed.x64 =F2438
|
|
ulMaxDebugSessions.x64=F243C
|
|
bFUSEnabled.x64 =F2440
|
|
bServerSku.x64 =F244C
|
|
lMaxUserSessions.x64 =F2450
|
|
bAppServerAllowed.x64 =F2454
|