[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. AlexPar

    AlexPar MDL Novice

    Jul 2, 2020
    2
    0
    0
    #321 AlexPar, Jul 3, 2020
    Last edited: Jul 3, 2020
    Thanks ! Now I've got it.
    But you wrote
    Search: 39813C0600000F84

    maybe you mean
    Search:39 81 3C 06 00 00 0F 84 D9 51 01 00
     
  2. wyxchari

    wyxchari MDL Novice

    Aug 19, 2018
    14
    12
    0
    #322 wyxchari, Jul 4, 2020
    Last edited: Jul 4, 2020
    D9 51 01 00 This part can vary because it is the offset of an assembler jump.

    You don't really need to search: termsrv.dll x64 v2004 10.0.19041.84 11.05.2020
    - Multi-user: File offset: 172D5h Write: B80001000089813806000090
    - Multi-session: File offset: B412h Write: 00
     
  3. pankaj4u

    pankaj4u MDL Novice

    Aug 20, 2018
    1
    0
    0
    #323 pankaj4u, Jul 29, 2020
    Last edited: Jul 30, 2020
    [QUOTE = "qBop, post: 1602365, member: 491645"] with RDS Host settings works great ... thx [USER = 37761] @sebus [/ USER] :)



    Š¢hank you both, will try later only with [USER = 1126303] @wyxchari [/ USER] offered offsets :)[/ QUOTE]

    I am also trying for windows server 2019. What is RDS host setting? Sorry am a newbie ..I tried the RDP wrapper but it shows not supported in red even though diagnostics show all 3 as green..

    my version is 10.0.17763.1369 ....please help
     
  4. bjf2000

    bjf2000 MDL Addicted

    Apr 11, 2008
    995
    150
    30
    Re 19041.84 x64. There are normally three changes. The first one is similar to what we've seen before:

    39813C0600000F84D9510100
    B80001000089813806000090

    The second, also mentioned in an earlier post, was at a completely different location than the previous version, but other than that the same small change:

    C706010000008BDF
    C706000000008BDF

    But this one was not found above. I based it on what was in the previous version:

    047411488D15F7
    04EB11488D15F7

    It all seems to work, but if there's a problem I'm sure someone will tell me.