[DISCUSSION] Windows 10 termsrv.dll Patching

Discussion in 'Windows 10' started by Mr Jinje, Oct 2, 2014.

  1. vtuyen

    vtuyen MDL Novice

    Joined:
    Jun 18, 2020
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    Please help file termsrv.dll windown 10 32bit 10.0.18363.. thanks
     
  2. MELERIX

    MELERIX MDL Expert

    Joined:
    Nov 7, 2011
    Messages:
    1,163
    Likes Received:
    614
    Trophy Points:
    60
  3. vtuyen

    vtuyen MDL Novice

    Joined:
    Jun 18, 2020
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    Thanks you verymuch
     
  4. Dennisw

    Dennisw MDL Novice

    Joined:
    Dec 4, 2019
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    0
    Q1, I still have 18363.900, why is the version 2004 not available for my system?

    Q2, my patched "termsrv.dll" has been working fine, just today it starts to reject remote multi-user. The "termsrv.dll" has patch B80001000089813806000090 and 58000000FF15F7. Anything wrong?
     
  5. AlexPar

    AlexPar MDL Novice

    Joined:
    Jul 2, 2020
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    Hi! What about one for Win10 2004 19041.329 version ? There is nothing so far ..
     
  6. wyxchari

    wyxchari MDL Novice

    Joined:
    Aug 19, 2018
    Messages:
    26
    Likes Received:
    25
    Trophy Points:
    0
    #326 wyxchari, Jul 3, 2020
    Last edited: Feb 28, 2021
    When we talk about versions, it is made from the versions of termsrv.dll, we are not talking about the windows versions.

    - termsrv.dll x64 10.0.19041.84 11.05.2020 is the version in Windows 10 x64 v2004 10.0.19041.329

    - Multiuser:
    IDA: ?Query@CDefPolicy@@UEAAJPEAH@Z proc near
    DefPolicyOffset.x64 =17ED5
    DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx
    Offset file: 172D5h Write: B80001000089813806000090

    - Multi-session:
    IDA: ?IsSingleSessionPerUserEnabled@CSessionArbitrationHelper@@UEAAJPEAH@Z proc near
    SingleUserOffset.x64 =0C012
    SingleUserCode.x64 =Zero
    File offset: B412h Write: 00
     
  7. AlexPar

    AlexPar MDL Novice

    Joined:
    Jul 2, 2020
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    #327 AlexPar, Jul 3, 2020
    Last edited: Jul 3, 2020
    Thanks ! Now I've got it.
    But you wrote
    Search: 39813C0600000F84

    maybe you mean
    Search:39 81 3C 06 00 00 0F 84 D9 51 01 00
     
  8. wyxchari

    wyxchari MDL Novice

    Joined:
    Aug 19, 2018
    Messages:
    26
    Likes Received:
    25
    Trophy Points:
    0
    #328 wyxchari, Jul 4, 2020
    Last edited: Jul 4, 2020
    D9 51 01 00 This part can vary because it is the offset of an assembler jump.

    You don't really need to search: termsrv.dll x64 v2004 10.0.19041.84 11.05.2020
    - Multi-user: File offset: 172D5h Write: B80001000089813806000090
    - Multi-session: File offset: B412h Write: 00
     
  9. pankaj4u

    pankaj4u MDL Novice

    Joined:
    Aug 20, 2018
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    0
    #329 pankaj4u, Jul 29, 2020
    Last edited: Jul 30, 2020
    [QUOTE = "qBop, post: 1602365, member: 491645"] with RDS Host settings works great ... thx [USER = 37761] @sebus [/ USER] :)



    Тhank you both, will try later only with [USER = 1126303] @wyxchari [/ USER] offered offsets :)[/ QUOTE]

    I am also trying for windows server 2019. What is RDS host setting? Sorry am a newbie ..I tried the RDP wrapper but it shows not supported in red even though diagnostics show all 3 as green..

    my version is 10.0.17763.1369 ....please help
     
  10. bjf2000

    bjf2000 MDL Expert

    Joined:
    Apr 11, 2008
    Messages:
    1,015
    Likes Received:
    156
    Trophy Points:
    60
    Re 19041.84 x64. There are normally three changes. The first one is similar to what we've seen before:

    39813C0600000F84D9510100
    B80001000089813806000090

    The second, also mentioned in an earlier post, was at a completely different location than the previous version, but other than that the same small change:

    C706010000008BDF
    C706000000008BDF

    But this one was not found above. I based it on what was in the previous version:

    047411488D15F7
    04EB11488D15F7

    It all seems to work, but if there's a problem I'm sure someone will tell me.
     
  11. simplecross45

    simplecross45 MDL Novice

    Joined:
    Oct 10, 2020
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    0
    Using x86 Version of termsrv.dll 10.0.19041.84
    Patched with rdpwrapper + autoupdater i get 5 Connections , the 6th Connection crashes.
    is there any Manual pathing neccessary for this Version
    or does anybody have complete patch advice for this Version ?
     
  12. vaasjoe

    vaasjoe MDL Novice

    Joined:
    Jan 30, 2013
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    0
    Can you kinldy share Window server 2019 build 1809 modified termsrv.dll
     
  13. MrCaaal

    MrCaaal MDL Novice

    Joined:
    Dec 2, 2020
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    0
    #333 MrCaaal, Dec 2, 2020
    Last edited: Dec 19, 2020
    termsrv.dll version 10.0.17763.1613 (Win10 1809. e.g. LTSC), copy of file here:
    Look for a new replacement string?
     
  14. wyxchari

    wyxchari MDL Novice

    Joined:
    Aug 19, 2018
    Messages:
    26
    Likes Received:
    25
    Trophy Points:
    0
    #334 wyxchari, Dec 4, 2020
    Last edited: Dec 11, 2020
    - termsrv.dll x64 19041.662 01.12.2020 (Windows x64 v20H2 10.0.19042.662)
    - Multi-user: File_offset:17DD5h, Write:B80001000089813806000090
    - Multi-session: File_offset:BF12h, Write:00
     
  15. Dennisw

    Dennisw MDL Novice

    Joined:
    Dec 4, 2019
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    0
    Hi,
    termsrv.dll x64 version 19041.662, Windows 10 x64 version 20H2 10.0.19042.685
    I made the change to termsrv.dll for multi-user, then the "Remote Desktop Services" could not be started. I put the original termsrv.dll back again, the service can start. Anybody have same problem? Is there a fix to this?


     
  16. Dennisw

    Dennisw MDL Novice

    Joined:
    Dec 4, 2019
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    0
    Huh, I replaced
    39813C0600000F84E95D0100 with
    B80001000089813806000090

    Now it appears working.

     
  17. Antonio Santos Aguirre

    Antonio Santos Aguirre MDL Novice

    Joined:
    Dec 11, 2020
    Messages:
    1
    Likes Received:
    4
    Trophy Points:
    0
  18. bjf2000

    bjf2000 MDL Expert

    Joined:
    Apr 11, 2008
    Messages:
    1,015
    Likes Received:
    156
    Trophy Points:
    60
    Just to have it in one post:

    termsrv.dll x64 19041.662 (for 20H2 19042)

    39813C0600000F84E95D0100
    B80001000089813806000090

    C706010000008BDF
    C706000000008BDF

    047411488D1597
    04EB11488D1597
     
  19. jlp_svk

    jlp_svk MDL Novice

    Joined:
    Feb 4, 2009
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    0
    Server 2016 10.0.14393.3986 support??? RDP Wrap with autoupdate not working. :(
     
  20. kabino

    kabino MDL Member

    Joined:
    Nov 13, 2013
    Messages:
    172
    Likes Received:
    634
    Trophy Points:
    10
    Question
    i have windows server 2019 on my dedicated and only 2 users can use it by rdp session. For another one, someone have to disconnect.
    Is there any workaround to improove this number? At least 3 user at the same time.
    Thank you.