[DISCUSSION] Windows 8.1 termsrv.dll Patching

Discussion in 'Windows 8' started by GuryYu, Aug 31, 2013.

Tags:
  1. Mimiloki

    Mimiloki MDL Novice

    Oct 21, 2013
    1
    0
    0
    #41 Mimiloki, Oct 21, 2013
    Last edited: Oct 21, 2013
    I have Russian Win8.1 PRO x64 with installed English language package. Your patched termsrv.dll works fine for me, thank you.
     
  2. sunstar

    sunstar MDL Junior Member

    Jun 29, 2013
    50
    22
    0
    first thanks for your excellent patch about terminal server of windows 8.1 x64

    and how i can find patch place on x86 version ?

    if you need termsrv.dll for x86 version let me know


    thanks in advance
     
  3. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,770
    1,101
    60
  4. sunstar

    sunstar MDL Junior Member

    Jun 29, 2013
    50
    22
    0
    h t t p : / / r g h o s t . n e t / 4 9 6 4 1 0 8 0

    please remove space from link
     
  5. sunstar

    sunstar MDL Junior Member

    Jun 29, 2013
    50
    22
    0
    I will send you patched x86 version as soon as possible

    patched place found !
     
  6. sunstar

    sunstar MDL Junior Member

    Jun 29, 2013
    50
    22
    0
    text:100160FC mov edi, edi
    .text:100160FE push ebp
    .text:100160FF mov ebp, esp
    .text:10016101 mov eax, [ebp+arg_0]
    .text:10016104 mov edx, [ecx+32Ch]
    .text:1001610A push esi
    .text:1001610B xor esi, esi
    .text:1001610D mov [eax], edx
    .text:1001610F mov eax, [ecx+324h]
    .text:10016115 cmp eax, [ecx+320h]


    here you are :D
     
  7. sunstar

    sunstar MDL Junior Member

    Jun 29, 2013
    50
    22
    0
    No
    You must change
    8B 81 24 03 00 00 3B 81 20 03 00 00 0F 84 C0 EC 01 00

    to

    B8 00 01 00 00 89 81 24 03 00 00 3B 81 20 03 00 00 90
     
  8. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,770
    1,101
    60
    #48 Mr Jinje, Oct 21, 2013
    Last edited: Oct 21, 2013
    Gotcha, I see that string at "1550F-15520", I'll test in a VM tomorrow. Keep up the hard works.

     
  9. srojtas

    srojtas MDL Novice

    Sep 18, 2013
    2
    0
    0
    I tried running the scripts with PowerShell. They all resulted in Remote Desktop Services not being able to start. It was working fine on Windows 7 and 8 for years. Can it be because my termsrv.dll was modded for 7/8?

    I'm running Windows 8.1 Pro Final x64.
     
  10. srojtas

    srojtas MDL Novice

    Sep 18, 2013
    2
    0
    0
    Just reverted to the old file. At least it's starting now and working for at least a single session.

    Also, I was not able to find any of the hex you were talking about in the original file before the script modded it.
     
  11. tking0036

    tking0036 MDL Novice

    Dec 15, 2009
    6
    0
    0
    #53 tking0036, Oct 23, 2013
    Last edited: Oct 23, 2013
    How are you guys getting this working? I am running W8.1 x64 Pro Retail 9600 latest updates..

    I do net stop TermService
    takeown /f C:\Windows\system32\termsrv.dll
    rename it, put the new one in
    and then net start TermService.. It starts again
    but then I still get disconnected when I RDP..

    Is there some kind of trick? Does it only work with VL? Do you have your account linked with a microsoft account or is it just local accounts?
     
  12. Pebaar

    Pebaar MDL Novice

    Oct 22, 2013
    14
    0
    0
    Hi. Is there any chance this works on W8.1? I can't get this to work on RTM. I get Error 193 when trying to start Terminal Service after executing this? Any help would be appreciated :)
     
  13. tking0036

    tking0036 MDL Novice

    Dec 15, 2009
    6
    0
    0
    Had the same problem.. Don't use the script just used the patched Termsrv.dll the one guy posted earlier
     
  14. Pebaar

    Pebaar MDL Novice

    Oct 22, 2013
    14
    0
    0
    Is this the patched DLL you are talking about?
    I can't get that to work either. Do I have to do anything other than just Copy/Paste?
     
  15. barisnet

    barisnet MDL Novice

    Oct 24, 2013
    1
    0
    0
    windows 8.1 build 9600

    I am pached this file and okey.
    but i cant send link. dont have 20 post.
     
  16. Pebaar

    Pebaar MDL Novice

    Oct 22, 2013
    14
    0
    0
    Could you post the link with spaces?
     
  17. stefanwg8

    stefanwg8 MDL Novice

    Sep 26, 2013
    1
    1
    0
    Is there a problem in line "icacls C:\Windows\System32\termsrv.dll /grant administrators:F" with non-english versions?

    I use german version, and with the script the administrators don't get full access to the file.
    Because of that the patched termsrv.dll isn't copied into system32 folder and the patch doesn't work.
    When I set the acls manuallly, I can put termsrv.dll to system32, and the patch is working.
     
  18. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,770
    1,101
    60