[DISCUSSION] Windows 10 termsrv.dll Patching

what happens if u tryed the x64er solution?

 

Patcher app says my version is 19041.1, but file property says 19041.2075
In patcher it just says pattern doesn't exist.
In imhex the pattern at that offset is something like "...F.o.r.c.e.R.e.m.o.v..."

 

Hi, pls try the following

Offset 3E1E9

search: 79 2C 8B CF FF 15 7C 95 0E 10 FF D7
replace: B8 00 01 00 00 89 81 20 03 00 00 90


If this should work (only u can try) then u can find future replacements in the file from quote (search for 2075, replace strings on top in the same file)

good luck!

 

Latest update (Win10 x64 retail) 10.0.19041.2670. Any patches for this release yet?

Edit:
It appears RDPWrap.ini has the patches, but I dont know how to translate that to hex patches..

 

What Win10 do u use? Home / Pro / Edu 21/22H(n) ?

Offset 1F2A5

search:
replace: B8 00 01 00 00 89 81 38 06 00 00 90

(pls post "search", i dont have this version atm - so i cant test)

 

Win10 x86, 10.0.19041.2673

Offset 3E1E0
search: 79 2C 8B CF FF 15 7C 95 0E 10 FF D7
replace: B8 00 01 00 00 89 81 20 03 00 00 90

 

Win10 Pro (termsrv.dll x64), 10.0.19041.2673
Offset 1E6A5:
search: 39813C0600000F8485450100
replace: B80001000089813806000090

 

Do you have the Multiple Sessions with same user hex? Thank you.

 

Maybe @wyxchari can help

 

Windows 11 termsrv.dll Fileversion 10.0.22000.1641
find
39 81 3C 06 00 00 0F 84 0B 6F 01 00
replace
B8 00 01 00 00 89 81 38 06 00 00 90

 

You need to login to view this posts content.

 

Win10 (x64) 10.0.19041.2913
search: 39 81 3C 06 00 00 0F 84 25 48 01 00
replace: B8 00 01 00 00 89 81 38 06 00 00 90

 

Windows 10 Pro
Version: 22H2
OS Build: 19045.3155
termsrv.dll (x64): 10.0.19041.3155
==============================================

Find: 39 81 3C 06 00 00 0F 84 73 55 01 00

Repl: B8 00 01 00 00 89 81 38 06 00 00 90​

 

Data not found

.3155

 

Hi!
is that possible to replicate this "patch" on termsrv.dll for windows server 2019? dll version is: 10.0.17763.3650

thanks

 

termsrv.dll (x64): 10.0.19041.3155
==============================================
Find: 39 81 3C 06 00 00 0F 84 87 46 01 00

Repl: B8 00 01 00 00 89 81 38 06 00 00 90

 

Thank you very much

 

===============================
termsrv.dll x64 10.0.19041.3271
===============================

Find: 39 81 3C 06 00 00 0F 84 E7 43 01 00

Repl: B8 00 01 00 00 89 81 38 06 00 00 90

 

thank you again

 

Thank you very much