-
Notifications
You must be signed in to change notification settings - Fork 20
/
rdpwrap.ini
338 lines (312 loc) · 8.9 KB
/
rdpwrap.ini
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
[Main]
Updated=2022-09-24
; UMU
LogFile=\rdpwrap.txt
SLPolicyHookNT60=1
SLPolicyHookNT61=1
[SLPolicy]
TerminalServices-RemoteConnectionManager-AllowRemoteConnections=1
TerminalServices-RemoteConnectionManager-AllowMultipleSessions=1
TerminalServices-RemoteConnectionManager-AllowAppServerMode=1
TerminalServices-RemoteConnectionManager-AllowMultimon=1
TerminalServices-RemoteConnectionManager-MaxUserSessions=0
TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions=0
TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions=2
TerminalServices-RDP-7-Advanced-Compression-Allowed=1
TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly=0
TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions=1000
TerminalServices-DeviceRedirection-Licenses-TSEasyPrintAllowed=1
TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed=1
TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed=1
TerminalServices-RemoteConnectionManager-UiEffects-DWMRemotingAllowed=1
[PatchCodes]
nop=90
Zero=00
jmpshort=EB
nopjmp=90E9
CDefPolicy_Query_edx_ecx=BA000100008991200300005E90
CDefPolicy_Query_eax_rcx_jmp=B80001000089813806000090EB
CDefPolicy_Query_eax_esi=B80001000089862003000090
CDefPolicy_Query_eax_rdi=B80001000089873806000090
CDefPolicy_Query_eax_ecx=B80001000089812003000090
CDefPolicy_Query_eax_ecx_jmp=B800010000898120030000EB0E
CDefPolicy_Query_eax_rcx=B80001000089813806000090
CDefPolicy_Query_edi_rcx=BF0001000089B938060000909090
[10.0.22000.1]
; Patch CEnforcementCore::GetInstanceOfTSLicense
LocalOnlyPatch.x64=1
; base = 98B80
LocalOnlyOffset.x64=98C11
LocalOnlyCode.x64=jmpshort
; Patch CSessionArbitrationHelper::IsSingleSessionPerUserEnabled
SingleUserPatch.x64=1
; base = 88B0
SingleUserOffset.x64=088C2
SingleUserCode.x64=Zero
; Patch CDefPolicy::Query
DefPolicyPatch.x64=1
; base = 1BB60
DefPolicyOffset.x64=1BB75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
; Hook CSLQuery::Initialize
SLInitHook.x64=1
SLInitOffset.x64=26AD0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.1-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
[10.0.22000.318]
LocalOnlyPatch.x64=1
; base = 98C10
LocalOnlyOffset.x64=98CA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
; base = 88B0
SingleUserOffset.x64=088C2
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BB75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26AD0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.318-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
[10.0.22000.466]
LocalOnlyPatch.x64=1
; base = 99220
LocalOnlyOffset.x64=992B1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
; base = 88B0
SingleUserOffset.x64=088C2
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BB75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26D20
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.466-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
[10.0.22000.469]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=992B1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=088C2
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BB75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26D20
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.469-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
[10.0.22000.651]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=991E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=18F22
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BA15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26E50
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.651-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
; The same as 10.0.22000.651
[10.0.22000.652]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=991E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=18F22
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BA15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26E50
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.652-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
; The same as 10.0.22000.651
[10.0.22000.653]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=991E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=18F22
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BA15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26E50
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.653-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
[10.0.22000.706]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=98CB1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=18F22
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BA15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26C10
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.706-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
; The same as 10.0.22000.706
[10.0.22000.708]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=98CB1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=18F22
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BA15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=26C10
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22000.708-SLInit]
bInitialized.x64 =11FECC
bServerSku.x64 =11FED0
lMaxUserSessions.x64 =11FED4
bAppServerAllowed.x64 =11FEDC
bRemoteConnAllowed.x64=11FEE4
bMultimonAllowed.x64 =11FEE8
ulMaxDebugSessions.x64=11FEF0
bFUSEnabled.x64 =11FEF4
[10.0.22621.1]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9B7E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=186B2
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C135
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=286D0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22621.1-SLInit]
bInitialized.x64 =128F2C
bServerSku.x64 =128F30
lMaxUserSessions.x64 =128F34
bAppServerAllowed.x64 =128F3C
bRemoteConnAllowed.x64=128F44
bMultimonAllowed.x64 =128F48
ulMaxDebugSessions.x64=128F50
bFUSEnabled.x64 =128F54
[10.0.22621.317]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9B7E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=186B2
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C135
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=286D0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22621.317-SLInit]
bInitialized.x64 =128F2C
bServerSku.x64 =128F30
lMaxUserSessions.x64 =128F34
bAppServerAllowed.x64 =128F3C
bRemoteConnAllowed.x64=128F44
bMultimonAllowed.x64 =128F48
ulMaxDebugSessions.x64=128F50
bFUSEnabled.x64 =128F54
[10.0.22621.608]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9B7E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=186B2
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C135
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=286D0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.22621.608-SLInit]
bInitialized.x64 =128F2C
bServerSku.x64 =128F30
lMaxUserSessions.x64 =128F34
bAppServerAllowed.x64 =128F3C
bRemoteConnAllowed.x64=128F44
bMultimonAllowed.x64 =128F48
ulMaxDebugSessions.x64=128F50
bFUSEnabled.x64 =128F54