[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. sebaxakerhtc

    sebaxakerhtc MDL Novice

    Nov 27, 2018
    38
    17
    0
    With Hex editor. Find=>Replace
     
  2. qBop

    qBop MDL Novice

    Mar 31, 2015
    2
    0
    0
    Can someone make a patch for Server 2019, 17763.771 ?

    original file is here -> h ttps://mega.nz/file/zNFWjYbY#4L4PKKPReO8nnFwzKgVDtfLGerZ_bsNoW8SQmIAX9Fg


    -----------------NOT WORKING multisession----------------------

    C706010000008BDF ==>C706000000008BDF
    007418488D15D6DF ==>00EB18488D15D6DF
    4883EC2033DBC740080100 ==>4883EC2033DBC740080000
    39813C0600000F84CB2B0100 ==>B80001000089813806000090

    with this settings working only multiuser...
     
  3. sebus

    sebus MDL Guru

    Jul 23, 2008
    6,111
    1,901
    210
    For Server just make it RDS Host
     
  4. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    13
    11
    0
    Try this alone without any other patchs.
    Offset 17425h B80001000089813806000090
    Offset 12899h 00
     
  5. qBop

    qBop MDL Novice

    Mar 31, 2015
    2
    0
    0
    with RDS Host settings works great... thx @sebus :)

    Тhank you both, will try later only with @wyxchari offered offsets :)
     
  6. matroist

    matroist MDL Novice

    Jul 4, 2016
    2
    0
    0
    #311 matroist, Jun 23, 2020
    Last edited: Jun 24, 2020
    What are the pros and cons of using a straight hack of termsrv.dll vs the rdpwrap approach?

    From what I have gathered so far it seems that RDPwrapper has some advantages that straight patching does not, but does lack some printing functionality.

    I was curious about some remarks that were made about server: why would one want to use a k'd termsrv.dll on Windows Server 2019 with RDS and CALs from eBay at an affordable price? Are there reasons and what are they if so?

    Also why do we have 2 forks?
    • https: github.com asmtron rdpwrap (last commit 11 days ago and from 2014 edtrejo)
    • https: github.com sebaxakerhtc rdpwrap (last commit dec 2018 and from stascorp)
     
  7. sml156

    sml156 MDL Member

    Sep 8, 2009
    153
    83
    10
    It's open source and it's GitHub, If you have a GitHub account you can fork it too with the click of one button
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. matroist

    matroist MDL Novice

    Jul 4, 2016
    2
    0
    0
    I'm not asking what this is, I'm asking why are there two forks from what appears to be the same member of the forum but with two different GitHub accounts. I have no problem with this being done, I simply am trying to understand why it's being done since I've seen both being referred to......

    Is there a reason? What's the reason? What do we need to be aware of so we use the right version? And so forth.
     
  9. tvcat

    tvcat MDL Novice

    Feb 23, 2011
    26
    10
    0
    stascorp is the original, some people fork it just to have a backup. Just recently the stascorp rdpwarp github got locked but reopen as of now.
     
  10. vtuyen

    vtuyen MDL Novice

    Jun 18, 2020
    2
    0
    0
    Please help file termsrv.dll windown 10 32bit 10.0.18363.. thanks
     
  11. vtuyen

    vtuyen MDL Novice

    Jun 18, 2020
    2
    0
    0
    Thanks you verymuch
     
  12. Dennisw

    Dennisw MDL Novice

    Dec 4, 2019
    6
    0
    0
    Q1, I still have 18363.900, why is the version 2004 not available for my system?

    Q2, my patched "termsrv.dll" has been working fine, just today it starts to reject remote multi-user. The "termsrv.dll" has patch B80001000089813806000090 and 58000000FF15F7. Anything wrong?
     
  13. AlexPar

    AlexPar MDL Novice

    Jul 2, 2020
    2
    0
    0
    Hi! What about one for Win10 2004 19041.329 version ? There is nothing so far ..
     
  14. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    13
    11
    0
    #320 wyxchari, Jul 3, 2020
    Last edited: Jul 3, 2020
    When we talk about versions, it is made from the versions of termsrv.dll, we are not talking about the windows versions.

    - termsrv.dll x64 10.0.19041.84 11.05.2020 is the version in Windows 10 x64 v2004 10.0.19041.329

    - Multiuser:
    IDA: ?Query@CDefPolicy@@UEAAJPEAH@Z proc near
    DefPolicyOffset.x64 =17ED5
    DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx
    Search: 39813C0600000F84
    Write : B80001000089813806000090
    Offset file: 172D5h Write: B80001000089813806000090

    - Multi-session:
    IDA: ?IsSingleSessionPerUserEnabled@CSessionArbitrationHelper@@UEAAJPEAH@Z proc near
    SingleUserOffset.x64 =0C012
    SingleUserCode.x64 =Zero
    Search: C706010000008BDF
    Write : ----00----------
    File offset: B412h Write: 00