This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ; RDP Wrapper Library configuration | |
| ; Do not modify without special knowledge | |
| [Main] | |
| Updated=2020-07-22 | |
| LogFile=\rdpwrap.txt | |
| SLPolicyHookNT60=1 | |
| SLPolicyHookNT61=1 | |
| [PatchCodes] | |
| nop=90 | |
| Zero=00 | |
| jmpshort=EB | |
| nopjmp=90E9 | |
| CDefPolicy_Query_edx_ecx=BA000100008991200300005E90 | |
| CDefPolicy_Query_eax_rcx_jmp=B80001000089813806000090EB | |
| CDefPolicy_Query_eax_esi=B80001000089862003000090 | |
| CDefPolicy_Query_eax_rdi=B80001000089873806000090 | |
| CDefPolicy_Query_eax_ecx=B80001000089812003000090 | |
| CDefPolicy_Query_eax_ecx_jmp=B800010000898120030000EB0E | |
| CDefPolicy_Query_eax_rcx=B80001000089813806000090 | |
| CDefPolicy_Query_edi_rcx=BF0001000089B938060000909090 | |
| [SLInit] | |
| bServerSku=1 | |
| bRemoteConnAllowed=1 | |
| bFUSEnabled=1 | |
| bAppServerAllowed=1 | |
| bMultimonAllowed=1 | |
| lMaxUserSessions=0 | |
| ulMaxDebugSessions=0 | |
| bInitialized=1 | |
| [SLPolicy] | |
| TerminalServices-RemoteConnectionManager-AllowRemoteConnections=1 | |
| TerminalServices-RemoteConnectionManager-AllowMultipleSessions=1 | |
| TerminalServices-RemoteConnectionManager-AllowAppServerMode=1 | |
| TerminalServices-RemoteConnectionManager-AllowMultimon=1 | |
| TerminalServices-RemoteConnectionManager-MaxUserSessions=0 | |
| TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions=0 | |
| TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions=2 | |
| TerminalServices-RDP-7-Advanced-Compression-Allowed=1 | |
| TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly=0 | |
| TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions=1000 | |
| TerminalServices-DeviceRedirection-Licenses-TSEasyPrintAllowed=1 | |
| TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed=1 | |
| TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed=1 | |
| TerminalServices-RemoteConnectionManager-UiEffects-DWMRemotingAllowed=1 | |
| [6.0.6000.16386] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=160BF | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=65E3E | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=15CD8 | |
| DefPolicyCode.x86=CDefPolicy_Query_edx_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=5C88F | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6001.18000] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=185E4 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=70DBA | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=17FD8 | |
| DefPolicyCode.x86=CDefPolicy_Query_edx_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=65BD7 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6001.22286] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=185E4 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =17FD8 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=70DDE | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =65C01 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6001.22323] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=185E4 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =17FD8 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=70DFA | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =65C1D | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6001.22357] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=185E4 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =17FD8 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=70DFA | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =65C1D | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6001.22801] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=185F8 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =18010 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=71ADA | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =666AD | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6002.18005] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=17FA8 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=70FF6 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=179C0 | |
| DefPolicyCode.x86=CDefPolicy_Query_edx_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=65E83 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6002.19214] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=17FC4 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=712AA | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=179B8 | |
| DefPolicyCode.x86=CDefPolicy_Query_edx_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=65FF7 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6002.22515] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=17FA8 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =179C0 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=71AFA | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =6675D | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6002.22641] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=17FA8 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =179C0 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=71AFA | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =6675D | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6002.22790] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=17FA8 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =179C0 | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=71B02 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =66765 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6002.23521] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=17FB4 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=71EAA | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=179CC | |
| DefPolicyCode.x86=CDefPolicy_Query_edx_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=669CB | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp | |
| [6.0.6003.20482] | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=17FC4 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =179DC | |
| DefPolicyCode.x86 =CDefPolicy_Query_edx_ecx | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=71F8A | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =66B65 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx_jmp | |
| [6.1.7600.16385] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=19E25 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17D96 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=196F3 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17AD2 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7600.20621] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=19E1D | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=196EB | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17DC2 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17ADE | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7600.20890] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=19E2D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17DF2 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=196FB | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17B0E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7600.21316] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=19E2D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17E3E | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=196FB | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17B5E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7600.21420] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=19EF5 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19761 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17D56 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17B3E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.17514] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A49D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=180E2 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19D53 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D8A | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.18540] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A4E5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=18006 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19D9F | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17C82 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.18637] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A4DD | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=180FA | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19DBB | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17DC6 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.21650] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A49D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=180BE | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19D53 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D5A | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.21866] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A49D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=180BE | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19D53 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D5A | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.22104] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A49D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=180C6 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19D53 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D5E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.22213] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A5AD | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19DB1 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F26 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D06 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.22435] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A5BD | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19DB1 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F36 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D16 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.22476] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A5CD | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19DC1 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F56 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D52 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.22750] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A655 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17E8E | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19E21 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17C92 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.22843] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A655 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F96 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19E25 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D6E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.23403] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A65D | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F62 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19E29 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17CE2 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.24234] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A675 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F56 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19E41 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17D2E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.24326] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A675 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19E41 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F1E | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17CEE | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.1.7601.24402] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1A675 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=19E41 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17F26 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=17CFE | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| [6.2.8102.0] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=F7E9 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=D840 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=E47C | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=D3E6 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=1B909 | |
| SLPolicyFunc.x86=New_Win8SL | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=1A484 | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.8250.0] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=159C9 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=11E74 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=13520 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1187A | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=1A0A9 | |
| SLPolicyFunc.x86=New_Win8SL_CP | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=18FAC | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.8400.0] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=15482 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=20824 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=13E48 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1F102 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=19629 | |
| SLPolicyFunc.x86=New_Win8SL | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=2492C | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.9200.16384] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=15552 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=2BAA8 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=13F08 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=2A31A | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=19559 | |
| SLPolicyFunc.x86=New_Win8SL | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=21FA8 | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.9200.17048] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=20592 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=20948 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=1F408 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1F206 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=17059 | |
| SLPolicyFunc.x86=New_Win8SL | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=24570 | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.9200.21166] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=1557A | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=2BAF8 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=13F30 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=2A3B6 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=19581 | |
| SLPolicyFunc.x86=New_Win8SL | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=21FD0 | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.9200.22715] | |
| ; x86-Offsets are not safe (determined without symbols) | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=155B2 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=13F68 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=195B9 | |
| SLPolicyFunc.x86=New_Win8SL | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=2BAE4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=2A396 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rdi | |
| SLPolicyInternal.x64=1 | |
| SLPolicyOffset.x64=21F90 | |
| SLPolicyFunc.x64=New_Win8SL | |
| [6.2.9200.22977] | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=155B2 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=13F68 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_esi | |
| SLPolicyInternal.x86=1 | |
| SLPolicyOffset.x86=195B9 | |
| SLPolicyFunc.x86=New_Win8SL | |
| ; no x64-version | |
| [6.3.9431.0-SLInit] | |
| bFUSEnabled.x86 =A22A8 | |
| lMaxUserSessions.x86 =A22AC | |
| bAppServerAllowed.x86 =A22B0 | |
| bInitialized.x86 =A22B4 | |
| bMultimonAllowed.x86 =A22B8 | |
| bServerSku.x86 =A22BC | |
| ulMaxDebugSessions.x86=A22C0 | |
| bRemoteConnAllowed.x86=A22C4 | |
| bFUSEnabled.x64 =C4490 | |
| lMaxUserSessions.x64 =C4494 | |
| bAppServerAllowed.x64 =C4498 | |
| bInitialized.x64 =C449C | |
| bMultimonAllowed.x64 =C44A0 | |
| bServerSku.x64 =C44A4 | |
| ulMaxDebugSessions.x64=C44A8 | |
| bRemoteConnAllowed.x64=C44AC | |
| [6.3.9431.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=8A611 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=9F721 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=306A8 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=367F9 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2EA25 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=350FD | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=196B0 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=2F9C0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.16384-SLInit] | |
| bFUSEnabled.x86 =C02A8 | |
| lMaxUserSessions.x86 =C02AC | |
| bAppServerAllowed.x86 =C02B0 | |
| bInitialized.x86 =C02B4 | |
| bMultimonAllowed.x86 =C02B8 | |
| bServerSku.x86 =C02BC | |
| ulMaxDebugSessions.x86=C02C0 | |
| bRemoteConnAllowed.x86=C02C4 | |
| bServerSku.x64 =E6494 | |
| ulMaxDebugSessions.x64=E6498 | |
| bRemoteConnAllowed.x64=E649C | |
| bFUSEnabled.x64 =E64A0 | |
| lMaxUserSessions.x64 =E64A4 | |
| bAppServerAllowed.x64 =E64A8 | |
| bInitialized.x64 =E64AC | |
| bMultimonAllowed.x64 =E64B0 | |
| [6.3.9600.16384] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A2729 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=81824 | |
| LocalOnlyCode.x64=nopjmp | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=18028 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=20241 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=16115 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=57829 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=1CEB0 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=554C0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.17095-SLInit] | |
| bFUSEnabled.x86 =C12A8 | |
| lMaxUserSessions.x86 =C12AC | |
| bAppServerAllowed.x86 =C12B0 | |
| bInitialized.x86 =C12B4 | |
| bMultimonAllowed.x86 =C12B8 | |
| bServerSku.x86 =C12BC | |
| ulMaxDebugSessions.x86=C12C0 | |
| bRemoteConnAllowed.x86=C12C4 | |
| bServerSku.x64 =E4494 | |
| ulMaxDebugSessions.x64=E4498 | |
| bRemoteConnAllowed.x64=E449C | |
| bFUSEnabled.x64 =E44A0 | |
| lMaxUserSessions.x64 =E44A4 | |
| bAppServerAllowed.x64 =E44A8 | |
| bInitialized.x64 =E44AC | |
| bMultimonAllowed.x64 =E44B0 | |
| [6.3.9600.17095] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A36D1 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=B9159 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=36BA9 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=21829 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=37529 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1F6A1 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=117F1 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=3B110 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.17415-SLInit] | |
| bFUSEnabled.x86 =D3068 | |
| lMaxUserSessions.x86 =D306C | |
| bAppServerAllowed.x86 =D3070 | |
| bInitialized.x86 =D3074 | |
| bMultimonAllowed.x86 =D3078 | |
| bServerSku.x86 =D307C | |
| ulMaxDebugSessions.x86=D3080 | |
| bRemoteConnAllowed.x86=D3084 | |
| bFUSEnabled.x64 =F9054 | |
| lMaxUserSessions.x64 =F9058 | |
| bAppServerAllowed.x64 =F905C | |
| bInitialized.x64 =F9060 | |
| bMultimonAllowed.x64 =F9064 | |
| bServerSku.x64 =F9068 | |
| ulMaxDebugSessions.x64=F906C | |
| bRemoteConnAllowed.x64=F9070 | |
| [6.3.9600.17415] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=B33F8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8B2D9 | |
| LocalOnlyCode.x64=nopjmp | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=37115 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=33CE9 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3CFF9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=45825 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=18478 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=5DBC0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.18692-SLInit] | |
| bFUSEnabled.x86 =D3068 | |
| lMaxUserSessions.x86 =D306C | |
| bAppServerAllowed.x86 =D3070 | |
| bInitialized.x86 =D3074 | |
| bMultimonAllowed.x86 =D3078 | |
| bServerSku.x86 =D307C | |
| ulMaxDebugSessions.x86=D3080 | |
| bRemoteConnAllowed.x86=D3084 | |
| bFUSEnabled.x64 =F9054 | |
| lMaxUserSessions.x64 =F9058 | |
| bAppServerAllowed.x64 =F905C | |
| bInitialized.x64 =F9060 | |
| bMultimonAllowed.x64 =F9064 | |
| bServerSku.x64 =F9068 | |
| ulMaxDebugSessions.x64=F906C | |
| bRemoteConnAllowed.x64=F9070 | |
| [6.3.9600.18692] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=B3458 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8B2E9 | |
| LocalOnlyCode.x64=nopjmp | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=37105 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=37039 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3CFE9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=45835 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=18488 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=5DBD0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.18708-SLInit] | |
| bFUSEnabled.x86 =D3068 | |
| lMaxUserSessions.x86 =D306C | |
| bAppServerAllowed.x86 =D3070 | |
| bInitialized.x86 =D3074 | |
| bMultimonAllowed.x86 =D3078 | |
| bServerSku.x86 =D307C | |
| ulMaxDebugSessions.x86=D3080 | |
| bRemoteConnAllowed.x86=D3084 | |
| bFUSEnabled.x64 =FA054 | |
| lMaxUserSessions.x64 =FA058 | |
| bAppServerAllowed.x64 =FA05C | |
| bInitialized.x64 =FA060 | |
| bMultimonAllowed.x64 =FA064 | |
| bServerSku.x64 =FA068 | |
| ulMaxDebugSessions.x64=FA06C | |
| bRemoteConnAllowed.x64=FA070 | |
| [6.3.9600.18708] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=B35D8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8B376 | |
| LocalOnlyCode.x64=nopjmp | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=370F5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=36FE9 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3CFD9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=457D5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=18308 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=5DB70 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.18928-SLInit] | |
| bFUSEnabled.x86 =D3068 | |
| lMaxUserSessions.x86 =D306C | |
| bAppServerAllowed.x86 =D3070 | |
| bInitialized.x86 =D3074 | |
| bMultimonAllowed.x86 =D3078 | |
| bServerSku.x86 =D307C | |
| ulMaxDebugSessions.x86=D3080 | |
| bRemoteConnAllowed.x86=D3084 | |
| bFUSEnabled.x64 =FA054 | |
| lMaxUserSessions.x64 =FA058 | |
| bAppServerAllowed.x64 =FA05C | |
| bInitialized.x64 =FA060 | |
| bMultimonAllowed.x64 =FA064 | |
| bServerSku.x64 =FA068 | |
| ulMaxDebugSessions.x64=FA06C | |
| bRemoteConnAllowed.x64=FA070 | |
| [6.3.9600.18928] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=B39D8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8B25D | |
| LocalOnlyCode.x64=nopjmp | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=37D25 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=36C09 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3D6F9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=45495 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=18328 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=5D830 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.19093-SLInit] | |
| bFUSEnabled.x86 =D3068 | |
| lMaxUserSessions.x86 =D306C | |
| bAppServerAllowed.x86 =D3070 | |
| bInitialized.x86 =D3074 | |
| bMultimonAllowed.x86 =D3078 | |
| bServerSku.x86 =D307C | |
| ulMaxDebugSessions.x86=D3080 | |
| bRemoteConnAllowed.x86=D3084 | |
| bFUSEnabled.x64 =FA054 | |
| lMaxUserSessions.x64 =FA058 | |
| bAppServerAllowed.x64 =FA05C | |
| bInitialized.x64 =FA060 | |
| bMultimonAllowed.x64 =FA064 | |
| bServerSku.x64 =FA068 | |
| ulMaxDebugSessions.x64=FA06C | |
| bRemoteConnAllowed.x64=FA070 | |
| [6.3.9600.19093] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=B3958 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8AE4E | |
| LocalOnlyCode.x64=nopjmp | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=3F045 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=36BC9 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3D899 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=45305 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=18288 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=5D660 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.3.9600.19318-SLInit] | |
| bFUSEnabled.x86 =D4068 | |
| lMaxUserSessions.x86 =D406C | |
| bAppServerAllowed.x86 =D4070 | |
| bInitialized.x86 =D4074 | |
| bMultimonAllowed.x86 =D4078 | |
| bServerSku.x86 =D407C | |
| ulMaxDebugSessions.x86=D4080 | |
| bRemoteConnAllowed.x86=D4084 | |
| bFUSEnabled.x64 =FA054 | |
| lMaxUserSessions.x64 =FA058 | |
| bAppServerAllowed.x64 =FA05C | |
| bInitialized.x64 =FA060 | |
| bMultimonAllowed.x64 =FA064 | |
| bServerSku.x64 =FA068 | |
| ulMaxDebugSessions.x64=FA06C | |
| bRemoteConnAllowed.x64=FA070 | |
| [6.3.9600.19318] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86 =B43E8 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=3ED25 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =3D579 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =180F8 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =89EAC | |
| LocalOnlyCode.x64 =nopjmp | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=35779 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =43CE5 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =5C0D0 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [6.3.9600.19628-SLInit] | |
| ; no x86-version | |
| bFUSEnabled.x64 =FA054 | |
| lMaxUserSessions.x64 =FA058 | |
| bAppServerAllowed.x64 =FA05C | |
| bInitialized.x64 =FA060 | |
| bMultimonAllowed.x64 =FA064 | |
| bServerSku.x64 =FA068 | |
| ulMaxDebugSessions.x64=FA06C | |
| bRemoteConnAllowed.x64=FA070 | |
| [6.3.9600.19628] | |
| ; no x86-version | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =8A07D | |
| LocalOnlyCode.x64 =nopjmp | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=358E9 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =43EF5 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =5C2E0 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [6.4.9841.0-SLInit] | |
| bFUSEnabled.x86 =BF9F0 | |
| lMaxUserSessions.x86 =BF9F4 | |
| bAppServerAllowed.x86 =BF9F8 | |
| bInitialized.x86 =BF9FC | |
| bMultimonAllowed.x86 =BFA00 | |
| bServerSku.x86 =BFA04 | |
| ulMaxDebugSessions.x86=BFA08 | |
| bRemoteConnAllowed.x86=BFA0C | |
| bFUSEnabled.x64 =ECFF8 | |
| lMaxUserSessions.x64 =ECFFC | |
| bAppServerAllowed.x64 =ED000 | |
| bInitialized.x64 =ED004 | |
| bMultimonAllowed.x64 =ED008 | |
| bServerSku.x64 =ED00C | |
| ulMaxDebugSessions.x64=ED010 | |
| bRemoteConnAllowed.x64=ED014 | |
| [6.4.9841.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=956A8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=81141 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=30125 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=12159 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3B989 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=C125 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46A68 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=1EA50 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.4.9860.0-SLInit] | |
| bFUSEnabled.x86 =BF7E0 | |
| lMaxUserSessions.x86 =BF7E4 | |
| bAppServerAllowed.x86 =BF7E8 | |
| bInitialized.x86 =BF7EC | |
| bMultimonAllowed.x86 =BF7F0 | |
| bServerSku.x86 =BF7F4 | |
| ulMaxDebugSessions.x86=BF7F8 | |
| bRemoteConnAllowed.x86=BF7FC | |
| bFUSEnabled.x64 =ECBD8 | |
| lMaxUserSessions.x64 =ECBDC | |
| bAppServerAllowed.x64 =ECBE0 | |
| bInitialized.x64 =ECBE4 | |
| bMultimonAllowed.x64 =ECBE8 | |
| bServerSku.x64 =ECBEC | |
| ulMaxDebugSessions.x64=ECBF0 | |
| bRemoteConnAllowed.x64=ECBF4 | |
| [6.4.9860.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=962C8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=81091 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=30845 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=11AA9 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3BEC9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=B9F5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46F18 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=1EB00 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [6.4.9879.0-SLInit] | |
| bFUSEnabled.x86 =C27D8 | |
| lMaxUserSessions.x86 =C27DC | |
| bAppServerAllowed.x86 =C27E0 | |
| bInitialized.x86 =C27E4 | |
| bMultimonAllowed.x86 =C27E8 | |
| bServerSku.x86 =C27EC | |
| ulMaxDebugSessions.x86=C27F0 | |
| bRemoteConnAllowed.x86=C27F4 | |
| bFUSEnabled.x64 =EDBF0 | |
| lMaxUserSessions.x64 =EDBF4 | |
| bAppServerAllowed.x64 =EDBF8 | |
| bInitialized.x64 =EDBFC | |
| bMultimonAllowed.x64 =EDC00 | |
| bServerSku.x64 =EDC04 | |
| ulMaxDebugSessions.x64=EDC08 | |
| bRemoteConnAllowed.x64=EDC0C | |
| [6.4.9879.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A9CC8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=95611 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=30C55 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=16A34 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2DAB9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1BDC5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=41132 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=24750 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.9926.0-SLInit] | |
| bFUSEnabled.x86 =C17D8 | |
| lMaxUserSessions.x86 =C17DC | |
| bAppServerAllowed.x86 =C17E0 | |
| bInitialized.x86 =C17E4 | |
| bMultimonAllowed.x86 =C17E8 | |
| bServerSku.x86 =C17EC | |
| ulMaxDebugSessions.x86=C17F0 | |
| bRemoteConnAllowed.x86=C17F4 | |
| bFUSEnabled.x64 =EEBF0 | |
| lMaxUserSessions.x64 =EEBF4 | |
| bAppServerAllowed.x64 =EEBF8 | |
| bInitialized.x64 =EEBFC | |
| bMultimonAllowed.x64 =EEC00 | |
| bServerSku.x64 =EEC04 | |
| ulMaxDebugSessions.x64=EEC08 | |
| bRemoteConnAllowed.x64=EEC0C | |
| [10.0.9926.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A8C28 | |
| LocalOnlyCode.x86=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=31725 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3CF99 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=3F140 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=95FF1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=12A34 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=BE05 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=24EC0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.10041.0-SLInit] | |
| bFUSEnabled.x86 =C5F60 | |
| lMaxUserSessions.x86 =C5F64 | |
| bAppServerAllowed.x86 =C5F68 | |
| bInitialized.x86 =C5F6C | |
| bMultimonAllowed.x86 =C5F70 | |
| bServerSku.x86 =C5F74 | |
| ulMaxDebugSessions.x86=C5F78 | |
| bRemoteConnAllowed.x86=C5F7C | |
| bFUSEnabled.x64 =F3448 | |
| lMaxUserSessions.x64 =F344C | |
| bAppServerAllowed.x64 =F3450 | |
| bInitialized.x64 =F3454 | |
| bMultimonAllowed.x64 =F3458 | |
| bServerSku.x64 =F345C | |
| ulMaxDebugSessions.x64=F3460 | |
| bRemoteConnAllowed.x64=F3464 | |
| [10.0.10041.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A9D88 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=97141 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=32215 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=15C64 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2DFC9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=B795 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46960 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=22E40 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.10240.16384-SLInit] | |
| bFUSEnabled.x86 =C3F60 | |
| lMaxUserSessions.x86 =C3F64 | |
| bAppServerAllowed.x86 =C3F68 | |
| bInitialized.x86 =C3F6C | |
| bMultimonAllowed.x86 =C3F70 | |
| bServerSku.x86 =C3F74 | |
| ulMaxDebugSessions.x86=C3F78 | |
| bRemoteConnAllowed.x86=C3F7C | |
| lMaxUserSessions.x64 =F23B0 | |
| bAppServerAllowed.x64 =F23B4 | |
| bServerSku.x64 =F23B8 | |
| bFUSEnabled.x64 =F3460 | |
| bInitialized.x64 =F3464 | |
| bMultimonAllowed.x64 =F3468 | |
| ulMaxDebugSessions.x64=F346C | |
| bRemoteConnAllowed.x64=F3470 | |
| [10.0.10240.16384] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7D38 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=96901 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=32A95 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=18F74 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2F5B9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=22865 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46581 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=250F0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.10240.18036-SLInit] | |
| bFUSEnabled.x86 =C3F88 | |
| lMaxUserSessions.x86 =C3F8C | |
| bAppServerAllowed.x86 =C3F90 | |
| bInitialized.x86 =C3F94 | |
| bMultimonAllowed.x86 =C3F98 | |
| bServerSku.x86 =C3F9C | |
| ulMaxDebugSessions.x86=C3FA0 | |
| bRemoteConnAllowed.x86=C3FA4 | |
| lMaxUserSessions.x64 =F23B0 | |
| bAppServerAllowed.x64 =F23B4 | |
| bServerSku.x64 =F23B8 | |
| bFUSEnabled.x64 =F3460 | |
| bInitialized.x64 =F3464 | |
| bMultimonAllowed.x64 =F3468 | |
| ulMaxDebugSessions.x64=F346C | |
| bRemoteConnAllowed.x64=F3470 | |
| [10.0.10240.18036] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A7E18 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=32715 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =2F299 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =3F968 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =96961 | |
| LocalOnlyCode.x64 =jmpshort | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=17264 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =EDC5 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =24C30 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [10.0.10240.18186-SLInit] | |
| bFUSEnabled.x86 =C4F88 | |
| lMaxUserSessions.x86 =C4F8C | |
| bAppServerAllowed.x86 =C4F90 | |
| bInitialized.x86 =C4F94 | |
| bMultimonAllowed.x86 =C4F98 | |
| bServerSku.x86 =C4F9C | |
| ulMaxDebugSessions.x86=C4FA0 | |
| bRemoteConnAllowed.x86=C4FA4 | |
| lMaxUserSessions.x64 =F23B0 | |
| bAppServerAllowed.x64 =F23B4 | |
| bServerSku.x64 =F23B8 | |
| bFUSEnabled.x64 =F3460 | |
| bInitialized.x64 =F3464 | |
| bMultimonAllowed.x64 =F3468 | |
| ulMaxDebugSessions.x64=F346C | |
| bRemoteConnAllowed.x64=F3470 | |
| [10.0.10240.18186] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A8048 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=32B15 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =2F699 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =3FA58 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =96A41 | |
| LocalOnlyCode.x64 =jmpshort | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=17264 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =EDC5 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =249D0 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [10.0.10240.18485-SLInit] | |
| bFUSEnabled.x86 =C4F88 | |
| lMaxUserSessions.x86 =C4F8C | |
| bAppServerAllowed.x86 =C4F90 | |
| bInitialized.x86 =C4F94 | |
| bMultimonAllowed.x86 =C4F98 | |
| bServerSku.x86 =C4F9C | |
| ulMaxDebugSessions.x86=C4FA0 | |
| bRemoteConnAllowed.x86=C4FA4 | |
| ; no x64-version | |
| [10.0.10240.18485] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A8048 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=3B6DC | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =2F699 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =3FA58 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| ; no x64-version | |
| [10.0.10586.0-SLInit] | |
| bFUSEnabled.x86 =C3F60 | |
| lMaxUserSessions.x86 =C3F64 | |
| bAppServerAllowed.x86 =C3F68 | |
| bInitialized.x86 =C3F6C | |
| bMultimonAllowed.x86 =C3F70 | |
| bServerSku.x86 =C3F74 | |
| ulMaxDebugSessions.x86=C3F78 | |
| bRemoteConnAllowed.x86=C3F7C | |
| lMaxUserSessions.x64 =F23B0 | |
| bAppServerAllowed.x64 =F23B4 | |
| bServerSku.x64 =F23B8 | |
| bFUSEnabled.x64 =F3460 | |
| bInitialized.x64 =F3464 | |
| bMultimonAllowed.x64 =F3468 | |
| ulMaxDebugSessions.x64=F346C | |
| bRemoteConnAllowed.x64=F3470 | |
| [10.0.10586.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7C18 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=96AA1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=353B5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=190D4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30B69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=229A5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=469DE | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=25220 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.10586.589-SLInit] | |
| bFUSEnabled.x86 =C3F60 | |
| lMaxUserSessions.x86 =C3F64 | |
| bAppServerAllowed.x86 =C3F68 | |
| bInitialized.x86 =C3F6C | |
| bMultimonAllowed.x86 =C3F70 | |
| bServerSku.x86 =C3F74 | |
| ulMaxDebugSessions.x86=C3F78 | |
| bRemoteConnAllowed.x86=C3F7C | |
| lMaxUserSessions.x64 =F23B0 | |
| bAppServerAllowed.x64 =F23B4 | |
| bServerSku.x64 =F23B8 | |
| bFUSEnabled.x64 =F3460 | |
| bInitialized.x64 =F3464 | |
| bMultimonAllowed.x64 =F3468 | |
| ulMaxDebugSessions.x64=F346C | |
| bRemoteConnAllowed.x64=F3470 | |
| [10.0.10586.589] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7BE8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=96A51 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=353B5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=190D4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30B69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=229A5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=469DE | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=25220 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.11082.1000-SLInit] | |
| bFUSEnabled.x86 =C3F60 | |
| lMaxUserSessions.x86 =C3F64 | |
| bAppServerAllowed.x86 =C3F68 | |
| bInitialized.x86 =C3F6C | |
| bMultimonAllowed.x86 =C3F70 | |
| bServerSku.x86 =C3F74 | |
| ulMaxDebugSessions.x86=C3F78 | |
| bRemoteConnAllowed.x86=C3F7C | |
| lMaxUserSessions.x64 =F23B0 | |
| bAppServerAllowed.x64 =F23B4 | |
| bServerSku.x64 =F23B8 | |
| bFUSEnabled.x64 =F3460 | |
| bInitialized.x64 =F3464 | |
| bMultimonAllowed.x64 =F3468 | |
| ulMaxDebugSessions.x64=F346C | |
| bRemoteConnAllowed.x64=F3470 | |
| [10.0.11082.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7C98 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=96AB1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35405 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=190D4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30BB9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=229A5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46A3E | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=25220 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.11102.1000-SLInit] | |
| bInitialized.x86 =C1F5C | |
| bServerSku.x86 =C1F60 | |
| lMaxUserSessions.x86 =C1F64 | |
| bAppServerAllowed.x86 =C1F68 | |
| bRemoteConnAllowed.x86=C1F6C | |
| bMultimonAllowed.x86 =C1F70 | |
| ulMaxDebugSessions.x86=C1F74 | |
| bFUSEnabled.x86 =C1F78 | |
| bInitialized.x64 =F2430 | |
| bRemoteConnAllowed.x64=F2434 | |
| bMultimonAllowed.x64 =F2438 | |
| ulMaxDebugSessions.x64=F243C | |
| bFUSEnabled.x64 =F2440 | |
| bServerSku.x64 =F244C | |
| lMaxUserSessions.x64 =F2450 | |
| bAppServerAllowed.x64 =F2454 | |
| [10.0.11102.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A5D58 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=95CD1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35A85 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=2A9C4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30159 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B5D5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=44FD2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=D160 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14251.1000-SLInit] | |
| bInitialized.x86 =C1F5C | |
| bServerSku.x86 =C1F60 | |
| lMaxUserSessions.x86 =C1F64 | |
| bAppServerAllowed.x86 =C1F68 | |
| bRemoteConnAllowed.x86=C1F6C | |
| bMultimonAllowed.x86 =C1F70 | |
| ulMaxDebugSessions.x86=C1F74 | |
| bFUSEnabled.x86 =C1F78 | |
| bInitialized.x64 =F2430 | |
| bRemoteConnAllowed.x64=F2434 | |
| bMultimonAllowed.x64 =F2438 | |
| ulMaxDebugSessions.x64=F243C | |
| bFUSEnabled.x64 =F2440 | |
| bServerSku.x64 =F244C | |
| lMaxUserSessions.x64 =F2450 | |
| bAppServerAllowed.x64 =F2454 | |
| [10.0.14251.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A5D58 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=95CD1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35A85 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=2A9C4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30159 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B5D5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=44FD2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=D160 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14271.1000-SLInit] | |
| bInitialized.x86 =C0F5C | |
| bServerSku.x86 =C0F60 | |
| lMaxUserSessions.x86 =C0F64 | |
| bAppServerAllowed.x86 =C0F68 | |
| bRemoteConnAllowed.x86=C0F6C | |
| bMultimonAllowed.x86 =C0F70 | |
| ulMaxDebugSessions.x86=C0F74 | |
| bFUSEnabled.x86 =C0F78 | |
| bServerSku.x64 =EF3C0 | |
| lMaxUserSessions.x64 =EF3C4 | |
| bAppServerAllowed.x64 =EF3C8 | |
| bInitialized.x64 =F0460 | |
| bRemoteConnAllowed.x64=F0464 | |
| bMultimonAllowed.x64 =F0468 | |
| ulMaxDebugSessions.x64=F046C | |
| bFUSEnabled.x64 =F0470 | |
| [10.0.14271.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A4CE8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=941E1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35915 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=263F4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF79 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1C185 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=47725 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CE50 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14279.1000-SLInit] | |
| bInitialized.x86 =C0F5C | |
| bServerSku.x86 =C0F60 | |
| lMaxUserSessions.x86 =C0F64 | |
| bAppServerAllowed.x86 =C0F68 | |
| bRemoteConnAllowed.x86=C0F6C | |
| bMultimonAllowed.x86 =C0F70 | |
| ulMaxDebugSessions.x86=C0F74 | |
| bFUSEnabled.x86 =C0F78 | |
| bServerSku.x64 =EF3C0 | |
| lMaxUserSessions.x64 =EF3C4 | |
| bAppServerAllowed.x64 =EF3C8 | |
| bInitialized.x64 =F0460 | |
| bRemoteConnAllowed.x64=F0464 | |
| bMultimonAllowed.x64 =F0468 | |
| ulMaxDebugSessions.x64=F046C | |
| bFUSEnabled.x64 =F0470 | |
| [10.0.14279.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A4D28 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=94191 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35915 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=263F4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF79 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1C185 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=47725 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CE50 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14295.1000-SLInit] | |
| bInitialized.x86 =C0F5C | |
| bServerSku.x86 =C0F60 | |
| lMaxUserSessions.x86 =C0F64 | |
| bAppServerAllowed.x86 =C0F68 | |
| bRemoteConnAllowed.x86=C0F6C | |
| bMultimonAllowed.x86 =C0F70 | |
| ulMaxDebugSessions.x86=C0F74 | |
| bFUSEnabled.x86 =C0F78 | |
| bServerSku.x64 =E73C0 | |
| lMaxUserSessions.x64 =E73C4 | |
| bAppServerAllowed.x64 =E73C8 | |
| bInitialized.x64 =E8460 | |
| bRemoteConnAllowed.x64=E8464 | |
| bMultimonAllowed.x64 =E8468 | |
| ulMaxDebugSessions.x64=E846C | |
| bFUSEnabled.x64 =E8470 | |
| [10.0.14295.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A4D28 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D691 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35925 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=25514 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF89 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1BA35 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=47748 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C860 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14300.1000-SLInit] | |
| bServerSku.x64 =E93C0 | |
| lMaxUserSessions.x64 =E93C4 | |
| bAppServerAllowed.x64 =E93C8 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| [10.0.14300.1000] | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F5F1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=26B04 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1D125 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC60 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14316.1000-SLInit] | |
| bInitialized.x86 =C4F58 | |
| bServerSku.x86 =C4F5C | |
| lMaxUserSessions.x86 =C4F60 | |
| bAppServerAllowed.x86 =C4F64 | |
| bRemoteConnAllowed.x86=C4F68 | |
| bMultimonAllowed.x86 =C4F6C | |
| ulMaxDebugSessions.x86=C4F70 | |
| bFUSEnabled.x86 =C4F74 | |
| bServerSku.x64 =E93C0 | |
| lMaxUserSessions.x64 =E93C4 | |
| bAppServerAllowed.x64 =E93C8 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| [10.0.14316.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A8E88 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F5F1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=32B55 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=26B04 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3C1C9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1D295 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46ABD | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC60 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14328.1000-SLInit] | |
| bInitialized.x86 =C4F58 | |
| bServerSku.x86 =C4F5C | |
| lMaxUserSessions.x86 =C4F60 | |
| bAppServerAllowed.x86 =C4F64 | |
| bRemoteConnAllowed.x86=C4F68 | |
| bMultimonAllowed.x86 =C4F6C | |
| ulMaxDebugSessions.x86=C4F70 | |
| bFUSEnabled.x86 =C4F74 | |
| bServerSku.x64 =E93C0 | |
| lMaxUserSessions.x64 =E93C4 | |
| bAppServerAllowed.x64 =E93C8 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| [10.0.14328.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A8E88 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F5F1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=32B55 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=26B04 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3C1C9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1D365 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46ABD | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC60 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14332.1001-SLInit] | |
| bInitialized.x86 =C4F58 | |
| bServerSku.x86 =C4F5C | |
| lMaxUserSessions.x86 =C4F60 | |
| bAppServerAllowed.x86 =C4F64 | |
| bRemoteConnAllowed.x86=C4F68 | |
| bMultimonAllowed.x86 =C4F6C | |
| ulMaxDebugSessions.x86=C4F70 | |
| bFUSEnabled.x86 =C4F74 | |
| bServerSku.x64 =E93C0 | |
| lMaxUserSessions.x64 =E93C4 | |
| bAppServerAllowed.x64 =E93C8 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| [10.0.14332.1001] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A8E98 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F601 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=357E5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=2AE44 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=316A9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1C025 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=4755F | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CAD0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14342.1000-SLInit] | |
| bInitialized.x86 =C4F58 | |
| bServerSku.x86 =C4F5C | |
| lMaxUserSessions.x86 =C4F60 | |
| bAppServerAllowed.x86 =C4F64 | |
| bRemoteConnAllowed.x86=C4F68 | |
| bMultimonAllowed.x86 =C4F6C | |
| ulMaxDebugSessions.x86=C4F70 | |
| bFUSEnabled.x86 =C4F74 | |
| bInitialized.x64 =E9430 | |
| bRemoteConnAllowed.x64=E9434 | |
| bMultimonAllowed.x64 =E9438 | |
| ulMaxDebugSessions.x64=E943C | |
| bFUSEnabled.x64 =E9440 | |
| bServerSku.x64 =E944C | |
| lMaxUserSessions.x64 =E9450 | |
| bAppServerAllowed.x64 =E9454 | |
| [10.0.14342.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A8E98 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8EF31 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=357E5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=26774 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=316A9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1CEF5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=4755F | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CA20 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14352.1002-SLInit] | |
| bInitialized.x86 =C0F5C | |
| bServerSku.x86 =C0F60 | |
| lMaxUserSessions.x86 =C0F64 | |
| bAppServerAllowed.x86 =C0F68 | |
| bRemoteConnAllowed.x86=C0F6C | |
| bMultimonAllowed.x86 =C0F70 | |
| ulMaxDebugSessions.x86=C0F74 | |
| bFUSEnabled.x86 =C0F78 | |
| bServerSku.x64 =E73C0 | |
| lMaxUserSessions.x64 =E73C4 | |
| bAppServerAllowed.x64 =E73C8 | |
| bInitialized.x64 =E8460 | |
| bRemoteConnAllowed.x64=E8464 | |
| bMultimonAllowed.x64 =E8468 | |
| ulMaxDebugSessions.x64=E846C | |
| bFUSEnabled.x64 =E8470 | |
| [10.0.14352.1002] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A4478 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D911 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35465 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=24474 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30099 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AC05 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=44792 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CDB0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14366.0-SLInit] | |
| bInitialized.x86 =C4F68 | |
| bServerSku.x86 =C4F6C | |
| lMaxUserSessions.x86 =C4F70 | |
| bAppServerAllowed.x86 =C4F74 | |
| bRemoteConnAllowed.x86=C4F78 | |
| bMultimonAllowed.x86 =C4F7C | |
| ulMaxDebugSessions.x86=C4F80 | |
| bFUSEnabled.x86 =C4F84 | |
| bServerSku.x64 =E93E0 | |
| lMaxUserSessions.x64 =E93E4 | |
| bAppServerAllowed.x64 =E93E8 | |
| bInitialized.x64 =EA480 | |
| bRemoteConnAllowed.x64=EA484 | |
| bMultimonAllowed.x64 =EA488 | |
| ulMaxDebugSessions.x64=EA48C | |
| bFUSEnabled.x64 =EA490 | |
| [10.0.14366.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A9088 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8FB01 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=34F65 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=21DE4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=316E9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1A855 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=4793E | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CCE0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14367.0-SLInit] | |
| bInitialized.x86 =C4F68 | |
| bServerSku.x86 =C4F6C | |
| lMaxUserSessions.x86 =C4F70 | |
| bAppServerAllowed.x86 =C4F74 | |
| bRemoteConnAllowed.x86=C4F78 | |
| bMultimonAllowed.x86 =C4F7C | |
| ulMaxDebugSessions.x86=C4F80 | |
| bFUSEnabled.x86 =C4F84 | |
| bServerSku.x64 =E93E0 | |
| lMaxUserSessions.x64 =E93E4 | |
| bAppServerAllowed.x64 =E93E8 | |
| bInitialized.x64 =EA480 | |
| bRemoteConnAllowed.x64=EA484 | |
| bMultimonAllowed.x64 =EA488 | |
| ulMaxDebugSessions.x64=EA48C | |
| bFUSEnabled.x64 =EA490 | |
| [10.0.14367.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A9088 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8FB01 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=34F65 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=21DE4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=316E9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1A855 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=4793E | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CCE0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14372.0-SLInit] | |
| bInitialized.x86 =C3F68 | |
| bServerSku.x86 =C3F6C | |
| lMaxUserSessions.x86 =C3F70 | |
| bAppServerAllowed.x86 =C3F74 | |
| bRemoteConnAllowed.x86=C3F78 | |
| bMultimonAllowed.x86 =C3F7C | |
| ulMaxDebugSessions.x86=C3F80 | |
| bFUSEnabled.x86 =C3F84 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| bServerSku.x64 =EA47C | |
| lMaxUserSessions.x64 =EA480 | |
| bAppServerAllowed.x64 =EA484 | |
| [10.0.14372.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7698 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F931 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=34635 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=295A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B295 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=460D2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC10 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14379.0-SLInit] | |
| bInitialized.x86 =C3F68 | |
| bServerSku.x86 =C3F6C | |
| lMaxUserSessions.x86 =C3F70 | |
| bAppServerAllowed.x86 =C3F74 | |
| bRemoteConnAllowed.x86=C3F78 | |
| bMultimonAllowed.x86 =C3F7C | |
| ulMaxDebugSessions.x86=C3F80 | |
| bFUSEnabled.x86 =C3F84 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| bServerSku.x64 =EA47C | |
| lMaxUserSessions.x64 =EA480 | |
| bAppServerAllowed.x64 =EA484 | |
| [10.0.14379.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7698 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F941 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=34635 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=295A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B295 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=460D2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC10 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14383.0-SLInit] | |
| bInitialized.x86 =C3F68 | |
| bServerSku.x86 =C3F6C | |
| lMaxUserSessions.x86 =C3F70 | |
| bAppServerAllowed.x86 =C3F74 | |
| bRemoteConnAllowed.x86=C3F78 | |
| bMultimonAllowed.x86 =C3F7C | |
| ulMaxDebugSessions.x86=C3F80 | |
| bFUSEnabled.x86 =C3F84 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| bServerSku.x64 =EA47C | |
| lMaxUserSessions.x64 =EA480 | |
| bAppServerAllowed.x64 =EA484 | |
| [10.0.14383.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7698 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F941 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=34635 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=295A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B295 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=460D2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC10 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14385.0-SLInit] | |
| bInitialized.x86 =C3F68 | |
| bServerSku.x86 =C3F6C | |
| lMaxUserSessions.x86 =C3F70 | |
| bAppServerAllowed.x86 =C3F74 | |
| bRemoteConnAllowed.x86=C3F78 | |
| bMultimonAllowed.x86 =C3F7C | |
| ulMaxDebugSessions.x86=C3F80 | |
| bFUSEnabled.x86 =C3F84 | |
| bInitialized.x64 =EA460 | |
| bRemoteConnAllowed.x64=EA464 | |
| bMultimonAllowed.x64 =EA468 | |
| ulMaxDebugSessions.x64=EA46C | |
| bFUSEnabled.x64 =EA470 | |
| bServerSku.x64 =EA47C | |
| lMaxUserSessions.x64 =EA480 | |
| bAppServerAllowed.x64 =EA484 | |
| [10.0.14385.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7698 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8F941 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=34635 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=295A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B295 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=460D2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CC10 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14388.0-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14388.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6038 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D781 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=359C5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=299A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF29 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AFC5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45636 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C930 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14393.0-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.0] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6038 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D781 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=359C5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=299A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF29 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AFC5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45636 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C930 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14393.1198-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| [10.0.14393.1198] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6088 | |
| LocalOnlyCode.x86=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=359C5 | |
| SingleUserCode.x86=nop | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF29 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45636 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| [10.0.14393.1737-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.1737] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6198 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D861 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35AD5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=299A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30039 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AFC5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45724 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C930 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14393.2457-SLInit] | |
| bInitialized.x86 =C1F94 | |
| bServerSku.x86 =C1F98 | |
| lMaxUserSessions.x86 =C1F9C | |
| bAppServerAllowed.x86 =C1FA0 | |
| bRemoteConnAllowed.x86=C1FA4 | |
| bMultimonAllowed.x86 =C1FA8 | |
| ulMaxDebugSessions.x86=C1FAC | |
| bFUSEnabled.x86 =C1FB0 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.2457] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6248 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D811 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=36CE5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=29CF4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=31209 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B545 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45824 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C920 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14393.2608-SLInit] | |
| bInitialized.x86 =C1F94 | |
| bServerSku.x86 =C1F98 | |
| lMaxUserSessions.x86 =C1F9C | |
| bAppServerAllowed.x86 =C1FA0 | |
| bRemoteConnAllowed.x86=C1FA4 | |
| bMultimonAllowed.x86 =C1FA8 | |
| ulMaxDebugSessions.x86=C1FAC | |
| bFUSEnabled.x86 =C1FB0 | |
| ; no x64 version | |
| [10.0.14393.2608] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A6248 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=36CE5 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =31209 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =45824 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| ; no x64 version | |
| [10.0.14393.2906-SLInit] | |
| bInitialized.x86 =C2F94 | |
| bServerSku.x86 =C2F98 | |
| lMaxUserSessions.x86 =C2F9C | |
| bAppServerAllowed.x86 =C2FA0 | |
| bRemoteConnAllowed.x86=C2FA4 | |
| bMultimonAllowed.x86 =C2FA8 | |
| ulMaxDebugSessions.x86=C2FAC | |
| bFUSEnabled.x86 =C2FB0 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.2906] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A6578 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=36CE5 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =31209 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =45912 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =8D8A1 | |
| LocalOnlyCode.x64 =jmpshort | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=1B6A4 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =F185 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =22C80 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [10.0.14393.3383-SLInit] | |
| bInitialized.x86 =C2F94 | |
| bServerSku.x86 =C2F98 | |
| lMaxUserSessions.x86 =C2F9C | |
| bAppServerAllowed.x86 =C2FA0 | |
| bRemoteConnAllowed.x86=C2FA4 | |
| bMultimonAllowed.x86 =C2FA8 | |
| ulMaxDebugSessions.x86=C2FAC | |
| bFUSEnabled.x86 =C2FB0 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.3383] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A6578 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=36CE5 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =31209 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =45912 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =8D8A1 | |
| LocalOnlyCode.x64 =jmpshort | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=1B6A4 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =F185 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =22C80 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [10.0.14393.3471-SLInit] | |
| bInitialized.x86 =C2F94 | |
| bServerSku.x86 =C2F98 | |
| lMaxUserSessions.x86 =C2F9C | |
| bAppServerAllowed.x86 =C2FA0 | |
| bRemoteConnAllowed.x86=C2FA4 | |
| bMultimonAllowed.x86 =C2FA8 | |
| ulMaxDebugSessions.x86=C2FAC | |
| bFUSEnabled.x86 =C2FB0 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.3471] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A6528 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=36C65 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =31189 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =458A2 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =8D931 | |
| LocalOnlyCode.x64 =jmpshort | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=1B6A4 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =F185 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =22C80 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [10.0.14393.3503-SLInit] | |
| bInitialized.x86 =C2F94 | |
| bServerSku.x86 =C2F98 | |
| lMaxUserSessions.x86 =C2F9C | |
| bAppServerAllowed.x86 =C2FA0 | |
| bRemoteConnAllowed.x86=C2FA4 | |
| bMultimonAllowed.x86 =C2FA8 | |
| ulMaxDebugSessions.x86=C2FAC | |
| bFUSEnabled.x86 =C2FB0 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14393.3503] | |
| LocalOnlyPatch.x86 =1 | |
| LocalOnlyOffset.x86 =A6528 | |
| LocalOnlyCode.x86 =jmpshort | |
| SingleUserPatch.x86 =1 | |
| SingleUserOffset.x86=36C65 | |
| SingleUserCode.x86 =nop | |
| DefPolicyPatch.x86 =1 | |
| DefPolicyOffset.x86 =31189 | |
| DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx | |
| SLInitHook.x86 =1 | |
| SLInitOffset.x86 =458A2 | |
| SLInitFunc.x86 =New_CSLQuery_Initialize | |
| LocalOnlyPatch.x64 =1 | |
| LocalOnlyOffset.x64 =8D931 | |
| LocalOnlyCode.x64 =jmpshort | |
| SingleUserPatch.x64 =1 | |
| SingleUserOffset.x64=1B6A4 | |
| SingleUserCode.x64 =Zero | |
| DefPolicyPatch.x64 =1 | |
| DefPolicyOffset.x64 =F185 | |
| DefPolicyCode.x64 =CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64 =1 | |
| SLInitOffset.x64 =22C80 | |
| SLInitFunc.x64 =New_CSLQuery_Initialize | |
| [10.0.14901.1000-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14901.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6038 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D781 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=359C5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=299A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF29 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AFC5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45636 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C930 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14905.1000-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| bServerSku.x64 =E73D0 | |
| lMaxUserSessions.x64 =E73D4 | |
| bAppServerAllowed.x64 =E73D8 | |
| bInitialized.x64 =E8470 | |
| bRemoteConnAllowed.x64=E8474 | |
| bMultimonAllowed.x64 =E8478 | |
| ulMaxDebugSessions.x64=E847C | |
| bFUSEnabled.x64 =E8480 | |
| [10.0.14905.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6038 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8D781 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=359C5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=299A4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF29 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AFC5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=45636 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C930 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14915.1000-SLInit] | |
| bInitialized.x86 =C4F6C | |
| bServerSku.x86 =C4F70 | |
| lMaxUserSessions.x86 =C4F74 | |
| bAppServerAllowed.x86 =C4F78 | |
| bRemoteConnAllowed.x86=C4F7C | |
| bMultimonAllowed.x86 =C4F80 | |
| ulMaxDebugSessions.x86=C4F84 | |
| bFUSEnabled.x86 =C4F88 | |
| bServerSku.x64 =E93D0 | |
| lMaxUserSessions.x64 =E93D4 | |
| bAppServerAllowed.x64 =E93D8 | |
| bInitialized.x64 =EA470 | |
| bRemoteConnAllowed.x64=EA474 | |
| bMultimonAllowed.x64 =EA478 | |
| ulMaxDebugSessions.x64=EA47C | |
| bFUSEnabled.x64 =EA480 | |
| [10.0.14915.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6D98 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8E241 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35E35 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=29EB4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=30399 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B4A5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46092 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CE40 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14926.1000-SLInit] | |
| bInitialized.x86 =C4F6C | |
| bServerSku.x86 =C4F70 | |
| lMaxUserSessions.x86 =C4F74 | |
| bAppServerAllowed.x86 =C4F78 | |
| bRemoteConnAllowed.x86=C4F7C | |
| bMultimonAllowed.x86 =C4F80 | |
| ulMaxDebugSessions.x86=C4F84 | |
| bFUSEnabled.x86 =C4F88 | |
| bServerSku.x64 =E93D0 | |
| lMaxUserSessions.x64 =E93D4 | |
| bAppServerAllowed.x64 =E93D8 | |
| bInitialized.x64 =EA470 | |
| bRemoteConnAllowed.x64=EA474 | |
| bMultimonAllowed.x64 =EA478 | |
| ulMaxDebugSessions.x64=EA47C | |
| bFUSEnabled.x64 =EA480 | |
| [10.0.14926.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A6D18 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8E071 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35E55 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=29EB4 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=303B9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1B4A5 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=460A2 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=CE40 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14931.1000-SLInit] | |
| bInitialized.x86 =C1F6C | |
| bServerSku.x86 =C1F70 | |
| lMaxUserSessions.x86 =C1F74 | |
| bAppServerAllowed.x86 =C1F78 | |
| bRemoteConnAllowed.x86=C1F7C | |
| bMultimonAllowed.x86 =C1F80 | |
| ulMaxDebugSessions.x86=C1F84 | |
| bFUSEnabled.x86 =C1F88 | |
| bServerSku.x64 =E63D0 | |
| lMaxUserSessions.x64 =E63D4 | |
| bAppServerAllowed.x64 =E63D8 | |
| bInitialized.x64 =E7470 | |
| bRemoteConnAllowed.x64=E7474 | |
| bMultimonAllowed.x64 =E7478 | |
| ulMaxDebugSessions.x64=E747C | |
| bFUSEnabled.x64 =E7480 | |
| [10.0.14931.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A4908 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8B411 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35705 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=29264 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FF69 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1AD05 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=452FD | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C7FC | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14936.1000-SLInit] | |
| bInitialized.x86 =C0F6C | |
| bServerSku.x86 =C0F70 | |
| lMaxUserSessions.x86 =C0F74 | |
| bAppServerAllowed.x86 =C0F78 | |
| bRemoteConnAllowed.x86=C0F7C | |
| bMultimonAllowed.x86 =C0F80 | |
| ulMaxDebugSessions.x86=C0F84 | |
| bFUSEnabled.x86 =C0F88 | |
| bInitialized.x64 =E8460 | |
| bRemoteConnAllowed.x64=E8464 | |
| bMultimonAllowed.x64 =E8468 | |
| ulMaxDebugSessions.x64=E846C | |
| bFUSEnabled.x64 =E8470 | |
| bServerSku.x64 =E847C | |
| lMaxUserSessions.x64 =E8480 | |
| bAppServerAllowed.x64 =E8484 | |
| [10.0.14936.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A3F38 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=8B9A1 | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35355 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=25174 | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FCD9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1BB55 | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=44CFE | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=C62C | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14942.1000-SLInit] | |
| bInitialized.x86 =C0F6C | |
| bServerSku.x86 =C0F70 | |
| lMaxUserSessions.x86 =C0F74 | |
| bAppServerAllowed.x86 =C0F78 | |
| bRemoteConnAllowed.x86=C0F7C | |
| bMultimonAllowed.x86 =C0F80 | |
| ulMaxDebugSessions.x86=C0F84 | |
| bFUSEnabled.x86 =C0F88 | |
| bInitialized.x64 =EC460 | |
| bRemoteConnAllowed.x64=EC464 | |
| bMultimonAllowed.x64 =EC468 | |
| ulMaxDebugSessions.x64=EC46C | |
| bFUSEnabled.x64 =EC470 | |
| bServerSku.x64 =EC47C | |
| lMaxUserSessions.x64 =EC480 | |
| bAppServerAllowed.x64 =EC484 | |
| [10.0.14942.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A3F38 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=9115B | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35355 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=199BD | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FCD9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1064E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=44CFE | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=258EC | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14946.1000-SLInit] | |
| bInitialized.x86 =C0F6C | |
| bServerSku.x86 =C0F70 | |
| lMaxUserSessions.x86 =C0F74 | |
| bAppServerAllowed.x86 =C0F78 | |
| bRemoteConnAllowed.x86=C0F7C | |
| bMultimonAllowed.x86 =C0F80 | |
| ulMaxDebugSessions.x86=C0F84 | |
| bFUSEnabled.x86 =C0F88 | |
| bInitialized.x64 =EC460 | |
| bRemoteConnAllowed.x64=EC464 | |
| bMultimonAllowed.x64 =EC468 | |
| ulMaxDebugSessions.x64=EC46C | |
| bFUSEnabled.x64 =EC470 | |
| bServerSku.x64 =EC47C | |
| lMaxUserSessions.x64 =EC480 | |
| bAppServerAllowed.x64 =EC484 | |
| [10.0.14946.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A4018 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=911AB | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=35355 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=199AD | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2FCD9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1064E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=44CFD | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=258DC | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14951.1000-SLInit] | |
| bInitialized.x86 =C5F68 | |
| bServerSku.x86 =C5F6C | |
| lMaxUserSessions.x86 =C5F70 | |
| bAppServerAllowed.x86 =C5F74 | |
| bRemoteConnAllowed.x86=C5F78 | |
| bMultimonAllowed.x86 =C5F7C | |
| ulMaxDebugSessions.x86=C5F80 | |
| bFUSEnabled.x86 =C5F84 | |
| bServerSku.x64 =EF3D0 | |
| lMaxUserSessions.x64 =EF3D4 | |
| bAppServerAllowed.x64 =EF3D8 | |
| bInitialized.x64 =F0470 | |
| bRemoteConnAllowed.x64=F0474 | |
| bMultimonAllowed.x64 =F0478 | |
| ulMaxDebugSessions.x64=F047C | |
| bFUSEnabled.x64 =F0480 | |
| [10.0.14951.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A78D8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=94A6B | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=3BA85 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=1CEDD | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=32629 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=11E9E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=3F680 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=22EE0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14955.1000-SLInit] | |
| bInitialized.x86 =C5F68 | |
| bServerSku.x86 =C5F6C | |
| lMaxUserSessions.x86 =C5F70 | |
| bAppServerAllowed.x86 =C5F74 | |
| bRemoteConnAllowed.x86=C5F78 | |
| bMultimonAllowed.x86 =C5F7C | |
| ulMaxDebugSessions.x86=C5F80 | |
| bFUSEnabled.x86 =C5F84 | |
| bServerSku.x64 =EF3D0 | |
| lMaxUserSessions.x64 =EF3D4 | |
| bAppServerAllowed.x64 =EF3D8 | |
| bInitialized.x64 =F0470 | |
| bRemoteConnAllowed.x64=F0474 | |
| bMultimonAllowed.x64 =F0478 | |
| ulMaxDebugSessions.x64=F047C | |
| bFUSEnabled.x64 =F0480 | |
| [10.0.14955.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A78D8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=94A6B | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=3BA85 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=1CEDD | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=32629 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=11E9E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=3F680 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=22EE0 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14959.1000-SLInit] | |
| bInitialized.x86 =C4F68 | |
| bServerSku.x86 =C4F6C | |
| lMaxUserSessions.x86 =C4F70 | |
| bAppServerAllowed.x86 =C4F74 | |
| bRemoteConnAllowed.x86=C4F78 | |
| bMultimonAllowed.x86 =C4F7C | |
| ulMaxDebugSessions.x86=C4F80 | |
| bFUSEnabled.x86 =C4F84 | |
| bServerSku.x64 =EE3D0 | |
| lMaxUserSessions.x64 =EE3D4 | |
| bAppServerAllowed.x64 =EE3D8 | |
| bInitialized.x64 =EF470 | |
| bRemoteConnAllowed.x64=EF474 | |
| bMultimonAllowed.x64 =EF478 | |
| ulMaxDebugSessions.x64=EF47C | |
| bFUSEnabled.x64 =EF480 | |
| [10.0.14959.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A79B8 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=934AB | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=2EF05 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=16A0D | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=2A4E9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=10A8E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=448A0 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=26960 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14965.1001-SLInit] | |
| bInitialized.x86 =C5F68 | |
| bServerSku.x86 =C5F6C | |
| lMaxUserSessions.x86 =C5F70 | |
| bAppServerAllowed.x86 =C5F74 | |
| bRemoteConnAllowed.x86=C5F78 | |
| bMultimonAllowed.x86 =C5F7C | |
| ulMaxDebugSessions.x86=C5F80 | |
| bFUSEnabled.x86 =C5F84 | |
| bInitialized.x64 =EF460 | |
| bRemoteConnAllowed.x64=EF464 | |
| bMultimonAllowed.x64 =EF468 | |
| ulMaxDebugSessions.x64=EF46C | |
| bFUSEnabled.x64 =EF470 | |
| bServerSku.x64 =EF47C | |
| lMaxUserSessions.x64 =EF480 | |
| bAppServerAllowed.x64 =EF484 | |
| [10.0.14965.1001] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7868 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=9345B | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=3BA85 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17DFD | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=32A59 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1212E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=3F680 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=26610 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14971.1000-SLInit] | |
| bInitialized.x86 =C5F68 | |
| bServerSku.x86 =C5F6C | |
| lMaxUserSessions.x86 =C5F70 | |
| bAppServerAllowed.x86 =C5F74 | |
| bRemoteConnAllowed.x86=C5F78 | |
| bMultimonAllowed.x86 =C5F7C | |
| ulMaxDebugSessions.x86=C5F80 | |
| bFUSEnabled.x86 =C5F84 | |
| bServerSku.x64 =EE3C0 | |
| lMaxUserSessions.x64 =EE3C4 | |
| bAppServerAllowed.x64 =EE3C8 | |
| bInitialized.x64 =EE470 | |
| bRemoteConnAllowed.x64=EE474 | |
| bMultimonAllowed.x64 =EE478 | |
| ulMaxDebugSessions.x64=EE47C | |
| bFUSEnabled.x64 =EE480 | |
| [10.0.14971.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7968 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=925FB | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=36FE5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=1803D | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3D9A9 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=11FBE | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=46500 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=26180 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14986.1000-SLInit] | |
| bInitialized.x86 =C5F68 | |
| bServerSku.x86 =C5F6C | |
| lMaxUserSessions.x86 =C5F70 | |
| bAppServerAllowed.x86 =C5F74 | |
| bRemoteConnAllowed.x86=C5F78 | |
| bMultimonAllowed.x86 =C5F7C | |
| ulMaxDebugSessions.x86=C5F80 | |
| bFUSEnabled.x86 =C5F84 | |
| bServerSku.x64 =EE3C0 | |
| lMaxUserSessions.x64 =EE3C4 | |
| bAppServerAllowed.x64 =EE3C8 | |
| bInitialized.x64 =EE470 | |
| bRemoteConnAllowed.x64=EE474 | |
| bMultimonAllowed.x64 =EE478 | |
| ulMaxDebugSessions.x64=EE47C | |
| bFUSEnabled.x64 =EE480 | |
| [10.0.14986.1000] | |
| LocalOnlyPatch.x86=1 | |
| LocalOnlyOffset.x86=A7878 | |
| LocalOnlyCode.x86=jmpshort | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=926BB | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x86=1 | |
| SingleUserOffset.x86=36FA5 | |
| SingleUserCode.x86=nop | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=17FFD | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x86=1 | |
| DefPolicyOffset.x86=3D979 | |
| DefPolicyCode.x86=CDefPolicy_Query_eax_ecx | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=11F7E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x86=1 | |
| SLInitOffset.x86=464A0 | |
| SLInitFunc.x86=New_CSLQuery_Initialize | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=26140 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.14997.1001-SLInit] | |
| bServerSku.x64 =F0408 | |
| lMaxUserSessions.x64 =F040C | |
| bAppServerAllowed.x64 =F0410 | |
| bInitialized.x64 =F0480 | |
| bRemoteConnAllowed.x64=F0484 | |
| bMultimonAllowed.x64 =F0488 | |
| ulMaxDebugSessions.x64=F048C | |
| bFUSEnabled.x64 =F0490 | |
| [10.0.14997.1001] | |
| LocalOnlyPatch.x64=1 | |
| LocalOnlyOffset.x64=931EB | |
| LocalOnlyCode.x64=jmpshort | |
| SingleUserPatch.x64=1 | |
| SingleUserOffset.x64=274ED | |
| SingleUserCode.x64=Zero | |
| DefPolicyPatch.x64=1 | |
| DefPolicyOffset.x64=1D95E | |
| DefPolicyCode.x64=CDefPolicy_Query_eax_rcx | |
| SLInitHook.x64=1 | |
| SLInitOffset.x64=E000 | |
| SLInitFunc.x64=New_CSLQuery_Initialize | |
| [10.0.15002.1001-SLInit] | |
| bInitialized.x86 =C6F74 | |
| bServerSku.x86 =C6F78 | |
| lMaxUserSessions.x86 =C6F7C | |
| bAppServerAllowed.x86 =C6F80 | |
| bRemoteConnAllowed.x86=C6F84 | |
| bMultimonAllowed.x86 =C6F88 | |
| ulMaxDebugSessions.x86=C6F8C | |
| bFUSEnabled.x86 =C6F90 | |