diff --git a/README.md b/README.md index 837e679c..1205ca0a 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,20 @@ +# RDP Wrapper & Autoupdate + +### Automatic RDP Wrapper installer and updater // asmtron (2024-04-29) + +#### Info: + The autoupdater first use and check the official rdpwrap.ini. + If a new termsrv.dll is not supported in the offical rdpwrap.ini, autoupdate uses the updated rdpwrap.ini files from the community. + Contributors: "sebaxakerhtc, asmtron, affinityv, DrDrrae, saurav-biswas" + Extra rdpwrap.ini sources can also be defined... + +#### autoupdate.bat Options: +- `-log` = redirect display output to the file autoupdate.log +- `-taskadd` = add autorun of autoupdate.bat on startup in schedule task +- `-taskremove` = remove autorun of autoupdate.bat on startup in schedule task + +#### [Download and Install](https://github.com/asmtron/rdpwrap/blob/master/binary-download.md) + # RDP Wrapper Library by Stas'M [![Telegram](https://img.shields.io/badge/chat-Telegram-blue.svg)](https://t.me/rdpwrap) @@ -9,7 +26,7 @@ The goal of this project is to enable Remote Desktop Host support and concurrent RDP sessions on reduced functionality systems for home usage. -RDP Wrapper works as a layer between Service Control Manager and Terminal Services, so the original termsrv.dll file remains untouched. Also this method is very strong against Windows Update. +RDP Wrapper works as a layer between Service Control Manager and Terminal Services, so the original `termsrv.dll` file remains untouched. Also this method is very strong against Windows Update. [pVistaST]: http://stascorp.com/images/rdpwrap/pVistaST.jpg [pVistaHB]: http://stascorp.com/images/rdpwrap/pVistaHB.jpg @@ -47,20 +64,20 @@ RDP Wrapper works as a layer between Service Control Manager and Terminal Servic | Windows 8.1 | [![Windows 8.1 Preview][pWin81P]][fWin81P] [![Windows 8.1][pWin81]][fWin81] | | Windows 10 | [![Windows 10 Technical Preview][pWin10TP]][fWin10TP] [![Windows 10 Pro Technical Preview][pWin10PTP]][fWin10PTP] [![Windows 10][pWin10]][fWin10] | --- -[WinPPE]: http://forums.mydigitallife.info/threads/39411-Windows-Product-Policy-Editor +[WinPPE]: https://forums.mydigitallife.net/threads/windows-product-policy-editor.39411/ This solution was inspired by [Windows Product Policy Editor][WinPPE], big thanks to **kost** :) — binarymaster ### Attention: -It's recommended to have original termsrv.dll file with the RDP Wrapper installation. If you have modified it before with other patchers, it may become unstable and crash in any moment. +It's recommended to have original `termsrv.dll` file with the RDP Wrapper installation. If you have modified it before with other patchers, it may become unstable and crash in any moment. ### Information: - Source code is available, so you can build it on your own -- RDP Wrapper does not patch termsrv.dll, it loads termsrv with different parameters -- RDPWInst and RDPChecker can be redistributed without development folder and batch files -- RDPWInst can be used for unattended installation / deployment +- RDP Wrapper does not patch `termsrv.dll`, it loads `termsrv` with different parameters +- `RDPWInst` and `RDPChecker` can be redistributed without development folder and batch files +- `RDPWInst` can be used for unattended installation / deployment - Windows 2000, XP and Server 2003 will not be supported ### Key features: @@ -448,16 +465,16 @@ Visit [issues](https://github.com/stascorp/rdpwrap/issues) section, and check wh - Windows 10 Enterprise - Windows Server 2016 Technical Preview -Installation instructions: +#### Installation instructions: - Download latest release binaries and unpack files - Right-click on **`install.bat`** and select Run as Administrator - See command output for details -To update INI file: +#### To update INI file: - Right-click on **`update.bat`** and select Run as Administrator - See command output for details -To uninstall: +#### To uninstall: - Go to the directory where you extracted the files - Right-click on **`uninstall.bat`** and select Run as Administrator - See command output for details diff --git a/autoupdate.zip b/autoupdate.zip new file mode 100644 index 00000000..a729833c Binary files /dev/null and b/autoupdate.zip differ diff --git a/autoupdate_v1.1.zip b/autoupdate_v1.1.zip new file mode 100644 index 00000000..5a808a35 Binary files /dev/null and b/autoupdate_v1.1.zip differ diff --git a/autoupdate_v1.2.zip b/autoupdate_v1.2.zip new file mode 100644 index 00000000..b5ededbb Binary files /dev/null and b/autoupdate_v1.2.zip differ diff --git a/bin/autoupdate.bat b/bin/autoupdate.bat new file mode 100644 index 00000000..c6c142b6 --- /dev/null +++ b/bin/autoupdate.bat @@ -0,0 +1,453 @@ + + + + + diff --git a/bin/autoupdate.ver b/bin/autoupdate.ver new file mode 100644 index 00000000..7e32cd56 --- /dev/null +++ b/bin/autoupdate.ver @@ -0,0 +1 @@ +1.3 diff --git a/bin/helper/autoupdate__disable_autorun_on_startup.bat b/bin/helper/autoupdate__disable_autorun_on_startup.bat new file mode 100644 index 00000000..91095329 --- /dev/null +++ b/bin/helper/autoupdate__disable_autorun_on_startup.bat @@ -0,0 +1,9 @@ +@echo off +if exist "%~dp0autoupdate.bat" ( + call "%~dp0autoupdate.bat" -taskremove +) else ( + if exist "%~dp0..\autoupdate.bat" ( + call "%~dp0..\autoupdate.bat" -taskremove + ) +) +pause \ No newline at end of file diff --git a/bin/helper/autoupdate__enable_autorun_on_startup.bat b/bin/helper/autoupdate__enable_autorun_on_startup.bat new file mode 100644 index 00000000..b18d7f71 --- /dev/null +++ b/bin/helper/autoupdate__enable_autorun_on_startup.bat @@ -0,0 +1,9 @@ +@echo off +if exist "%~dp0autoupdate.bat" ( + call "%~dp0autoupdate.bat" -taskadd +) else ( + if exist "%~dp0..\autoupdate.bat" ( + call "%~dp0..\autoupdate.bat" -taskadd + ) +) +pause \ No newline at end of file diff --git a/bin/helper/autoupdate__info.txt b/bin/helper/autoupdate__info.txt new file mode 100644 index 00000000..653bd74b --- /dev/null +++ b/bin/helper/autoupdate__info.txt @@ -0,0 +1,54 @@ + _ _ + _ | | _ | | _ + ____ _ _| |_ ___ _ _ ____ _ | | ____| |_ ____ | | _ ____| |_ + / _ | | | | _)/ _ \| | | | _ \ / || |/ _ | _)/ _ ) | || \ / _ | _) + ( ( | | |_| | |_| |_| | |_| | | | ( (_| ( ( | | |_( (/ / _| |_) ( ( | | |__ + \_||_|\____|\___\___/ \____| ||_/ \____|\_||_|\___\____(_|____/ \_||_|\___) + |_| + + Automatic RDP Wrapper installer and updater v.1.1 asmtron (2023-10-18) + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + Options: + -log = redirect display output to the file autoupdate.log + -taskadd = add autorun of autoupdate.bat on startup in schedule task + -taskremove = remove autorun of autoupdate.bat on startup in schedule task + + Info: + The autoupdater first use and check the official rdpwrap.ini. + If a new termsrv.dll is not supported in the offical rdpwrap.ini, + autoupdate uses the updated rdpwrap.ini files from the community. + contributors: "sebaxakerhtc, asmtron, affinityv, DrDrrae, saurav-biswas" + Extra rdpwrap.ini sources can also be defined... + + { Special thanks to binarymaster and all other contributors } + + + + + INSTALL of RDP Wrapper and Autoupdater + ====================================== + + 1. Create the directory: "%ProgramFiles%\RDP Wrapper" + (usually C:\Program Files\RDP Wrapper) + + + 2. Set in your Antivirus or Windows Defender an exclusion on the folder "%ProgramFiles%\RDP Wrapper" to prevent the deletion of RDP Wrapper files... + + + 3. Copy the files from the archive "RDPWrap-v1.6.2.zip" (or newer) to the directory: "%ProgramFiles%\RDP Wrapper" + + DO NOT use other directories to install/extract the RDP Wrapper files. + USE ONLY the directory: "%ProgramFiles%\RDP Wrapper" (usually C:\Program Files\RDP Wrapper) + + + 4. Copy the files/folder from the archive "autoupdate.zip" (or newer) to the directory: "%ProgramFiles%\RDP Wrapper" + + + 5. To enable autorun of autoupdate.bat on system startup, run the following helper batch file as administrator: + + "%ProgramFiles%\RDP Wrapper\helper\autoupdate__enable_autorun_on_startup.bat" + + + 6. Now you can use the autoupdate batch file to install and update the RDP Wrapper. Please run autoupdate.bat as administrator: + + "%ProgramFiles%\RDP Wrapper\autoupdate.bat" diff --git a/binary-download.md b/binary-download.md new file mode 100644 index 00000000..2b1bc1e7 --- /dev/null +++ b/binary-download.md @@ -0,0 +1,26 @@ +INSTALL of RDP Wrapper and Autoupdater +-------------------------------------- + +1. Create the directory: "%ProgramFiles%\RDP Wrapper" + + (usually C:\Program Files\RDP Wrapper) + +3. Set in your Antivirus or Windows Defender an exclusion on the folder "%ProgramFiles%\RDP Wrapper" to prevent the deletion of RDP Wrapper files... + +5. Download "RDPWrap-v1.6.2.zip" [LINK#1](https://github.com/stascorp/rdpwrap/releases) or [LINK#2](https://sabercathost.com/e2bm/RDPWrap-v1.6.2.zip) and extract all files to the "%ProgramFiles%\RDP Wrapper" directory + + DO NOT use other directories to install/extract the RDP Wrapper files. + USE ONLY the "%ProgramFiles%\RDP Wrapper" directory + (usually C:\Program Files\RDP Wrapper) + +7. Download [autoupdate_v1.2.zip](https://github.com/asmtron/rdpwrap/raw/master/autoupdate_v1.2.zip) and extract all files to the "%ProgramFiles%\RDP Wrapper" directory + +9. To enable autorun of autoupdate.bat on system startup, run the following helper batch file as administrator: + + "%ProgramFiles%\RDP Wrapper\helper\autoupdate__enable_autorun_on_startup.bat" + + +11. Now you can use the autoupdate batch file to install and update the RDP Wrapper. Please run autoupdate.bat as administrator: + + "%ProgramFiles%\RDP Wrapper\autoupdate.bat" + diff --git a/res/rdpwrap.ini b/res/rdpwrap.ini index 40e1b54f..76e53ad3 100644 --- a/res/rdpwrap.ini +++ b/res/rdpwrap.ini @@ -2,7 +2,7 @@ ; Do not modify without special knowledge [Main] -Updated=2018-10-10 +Updated=2024-04-12 LogFile=\rdpwrap.txt SLPolicyHookNT60=1 SLPolicyHookNT61=1 @@ -93,6 +93,104 @@ DefPolicyPatch.x64=1 DefPolicyOffset.x64=65FF7 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp +[6.0.6001.22286] +SingleUserPatch.x86=1 +SingleUserOffset.x86=185E4 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=70DDE +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=17FD8 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=65C01 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + +[6.0.6001.22323] +SingleUserPatch.x86=1 +SingleUserOffset.x86=185E4 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=70DFA +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=17FD8 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=65C1D +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + +[6.0.6001.22357] +SingleUserPatch.x86=1 +SingleUserOffset.x86=185E4 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=70DFA +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=17FD8 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=65C1D +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + +[6.0.6001.22801] +SingleUserPatch.x86=1 +SingleUserOffset.x86=185F8 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=71ADA +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=18010 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=666AD +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + +[6.0.6002.22515] +SingleUserPatch.x86=1 +SingleUserOffset.x86=17FA8 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=71AFA +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=179C0 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=6675D +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + +[6.0.6002.22641] +SingleUserPatch.x86=1 +SingleUserOffset.x86=17FA8 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=71AFA +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=179C0 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=6675D +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + +[6.0.6002.22790] +SingleUserPatch.x86=1 +SingleUserOffset.x86=17FA8 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=71B02 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=179C0 +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=66765 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + [6.0.6002.23521] SingleUserPatch.x86=1 SingleUserOffset.x86=17FB4 @@ -107,6 +205,20 @@ DefPolicyPatch.x64=1 DefPolicyOffset.x64=669CB DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp +[6.0.6003.20482] +SingleUserPatch.x86=1 +SingleUserOffset.x86=17FC4 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=71F8A +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=179DC +DefPolicyCode.x86=CDefPolicy_Query_edx_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=66B65 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp + [6.1.7600.16385] SingleUserPatch.x86=1 SingleUserOffset.x86=19E25 @@ -121,6 +233,20 @@ DefPolicyPatch.x64=1 DefPolicyOffset.x64=17AD2 DefPolicyCode.x64=CDefPolicy_Query_eax_rdi +[6.1.7600.20621] +SingleUserPatch.x86=1 +SingleUserOffset.x86=19E1D +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17DC2 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=196EB +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17ADE +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + [6.1.7600.20890] SingleUserPatch.x86=1 SingleUserOffset.x86=19E2D @@ -149,6 +275,20 @@ DefPolicyPatch.x64=1 DefPolicyOffset.x64=17B5E DefPolicyCode.x64=CDefPolicy_Query_eax_rdi +[6.1.7600.21420] +SingleUserPatch.x86=1 +SingleUserOffset.x86=19EF5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17D56 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=19761 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17B3E +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + [6.1.7601.17514] SingleUserPatch.x86=1 SingleUserOffset.x86=1A49D @@ -233,6 +373,48 @@ DefPolicyPatch.x64=1 DefPolicyOffset.x64=17D5E DefPolicyCode.x64=CDefPolicy_Query_eax_rdi +[6.1.7601.22213] +SingleUserPatch.x86=1 +SingleUserOffset.x86=1A5AD +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17F26 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=19DB1 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17D06 +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + +[6.1.7601.22435] +SingleUserPatch.x86=1 +SingleUserOffset.x86=1A5BD +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17F36 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=19DB1 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17D16 +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + +[6.1.7601.22476] +SingleUserPatch.x86=1 +SingleUserOffset.x86=1A5CD +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17F56 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=19DC1 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17D52 +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + [6.1.7601.22750] SingleUserPatch.x86=1 SingleUserOffset.x86=1A655 @@ -289,6 +471,34 @@ DefPolicyPatch.x64=1 DefPolicyOffset.x64=17D2E DefPolicyCode.x64=CDefPolicy_Query_eax_rdi +[6.1.7601.24326] +SingleUserPatch.x86=1 +SingleUserOffset.x86=1A675 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17F1E +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=19E41 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17CEE +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + +[6.1.7601.24402] +SingleUserPatch.x86=1 +SingleUserOffset.x86=1A675 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=17F26 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=19E41 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17CFE +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi + [6.2.8102.0] SingleUserPatch.x86=1 SingleUserOffset.x86=F7E9 @@ -409,6 +619,39 @@ SLPolicyInternal.x64=1 SLPolicyOffset.x64=21FD0 SLPolicyFunc.x64=New_Win8SL +[6.2.9200.22715] +; x86-Offsets are not safe (determined without symbols) +SingleUserPatch.x86=1 +SingleUserOffset.x86=155B2 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=2BAE4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=13F68 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=2A396 +DefPolicyCode.x64=CDefPolicy_Query_eax_rdi +SLPolicyInternal.x86=1 +SLPolicyOffset.x86=195B9 +SLPolicyFunc.x86=New_Win8SL +SLPolicyInternal.x64=1 +SLPolicyOffset.x64=21F90 +SLPolicyFunc.x64=New_Win8SL + +[6.2.9200.22977] +; no x64-version +SingleUserPatch.x86=1 +SingleUserOffset.x86=155B2 +SingleUserCode.x86=nop +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=13F68 +DefPolicyCode.x86=CDefPolicy_Query_eax_esi +SLPolicyInternal.x86=1 +SLPolicyOffset.x86=195B9 +SLPolicyFunc.x86=New_Win8SL + [6.3.9431.0] LocalOnlyPatch.x86=1 LocalOnlyOffset.x86=8A611 @@ -617,6 +860,46 @@ SLInitHook.x64=1 SLInitOffset.x64=5D660 SLInitFunc.x64=New_CSLQuery_Initialize +[6.3.9600.19318] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=B43E8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=89EAC +LocalOnlyCode.x64=nopjmp +SingleUserPatch.x86=1 +SingleUserOffset.x86=3ED25 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=35779 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=3D579 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=43CE5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=180F8 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=5C0D0 +SLInitFunc.x64=New_CSLQuery_Initialize + +[6.3.9600.19628] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8A07D +LocalOnlyCode.x64=nopjmp +SingleUserPatch.x64=1 +SingleUserOffset.x64=358E9 +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=43EF5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=5C2E0 +SLInitFunc.x64=New_CSLQuery_Initialize + [6.4.9841.0] LocalOnlyPatch.x86=1 LocalOnlyOffset.x86=956A8 @@ -773,128 +1056,221 @@ SLInitHook.x64=1 SLInitOffset.x64=250F0 SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.10586.0] +[10.0.10240.18036] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=A7C18 +LocalOnlyOffset.x86=A7E18 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=96AA1 +LocalOnlyOffset.x64=96961 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=353B5 +SingleUserOffset.x86=32715 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=190D4 +SingleUserOffset.x64=17264 SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=30B69 +DefPolicyOffset.x86=2F299 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=229A5 +DefPolicyOffset.x64=EDC5 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=469DE +SLInitOffset.x86=3F968 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=25220 +SLInitOffset.x64=24C30 SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.10586.589] +[10.0.10240.18186] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=A7BE8 +LocalOnlyOffset.x86=A8048 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=96A51 +LocalOnlyOffset.x64=96A41 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=353B5 +SingleUserOffset.x86=32B15 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=190D4 +SingleUserOffset.x64=17264 SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=30B69 +DefPolicyOffset.x86=2F699 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=229A5 +DefPolicyOffset.x64=EDC5 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=469DE +SLInitOffset.x86=3FA58 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=25220 +SLInitOffset.x64=249D0 SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.11082.1000] +[10.0.10240.18485] +; no x64-version LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=A7C98 +LocalOnlyOffset.x86=A8048 LocalOnlyCode.x86=jmpshort -LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=96AB1 -LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=35405 +SingleUserOffset.x86=3B6DC SingleUserCode.x86=nop -SingleUserPatch.x64=1 -SingleUserOffset.x64=190D4 -SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=30BB9 +DefPolicyOffset.x86=2F699 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx -DefPolicyPatch.x64=1 -DefPolicyOffset.x64=229A5 -DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=46A3E +SLInitOffset.x86=3FA58 SLInitFunc.x86=New_CSLQuery_Initialize -SLInitHook.x64=1 -SLInitOffset.x64=25220 -SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.11102.1000] +[10.0.10240.18818] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=A5D58 +LocalOnlyOffset.x86=A7818 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=95CD1 +LocalOnlyOffset.x64=95E91 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=35A85 +SingleUserOffset.x86=395BC SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=2A9C4 +SingleUserOffset.x64=18274 SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=30159 +DefPolicyOffset.x86=3C629 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=1B5D5 +DefPolicyOffset.x64=0F0C5 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=44FD2 +SLInitOffset.x86=44677 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=D160 +SLInitOffset.x64=254F0 SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.14251.1000] +[10.0.10586.0] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=A5D58 +LocalOnlyOffset.x86=A7C18 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=95CD1 +LocalOnlyOffset.x64=96AA1 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=35A85 +SingleUserOffset.x86=353B5 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=2A9C4 +SingleUserOffset.x64=190D4 SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=30159 +DefPolicyOffset.x86=30B69 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=1B5D5 +DefPolicyOffset.x64=229A5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=469DE +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=25220 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.10586.589] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A7BE8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=96A51 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=353B5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=190D4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=30B69 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=229A5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=469DE +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=25220 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.11082.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A7C98 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=96AB1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=35405 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=190D4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=30BB9 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=229A5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=46A3E +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=25220 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.11102.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A5D58 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=95CD1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=35A85 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=2A9C4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=30159 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1B5D5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=44FD2 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=D160 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.14251.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A5D58 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=95CD1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=35A85 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=2A9C4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=30159 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1B5D5 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 SLInitOffset.x86=44FD2 @@ -1399,6 +1775,177 @@ SLInitHook.x64=1 SLInitOffset.x64=C920 SLInitFunc.x64=New_CSLQuery_Initialize +[10.0.14393.2608] +; no x64 version +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A6248 +LocalOnlyCode.x86=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36CE5 +SingleUserCode.x86=nop +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31209 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +SLInitHook.x86=1 +SLInitOffset.x86=45824 +SLInitFunc.x86=New_CSLQuery_Initialize + +[10.0.14393.2906] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A6578 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8D8A1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36CE5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1B6A4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31209 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=F185 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45912 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22C80 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.14393.3383] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A6578 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8D8A1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36CE5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1B6A4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31209 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=F185 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45912 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22C80 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.14393.3986] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A6578 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8D8A1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36CE5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1B6A4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31209 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=F185 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45912 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22C80 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.14393.3471] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A6528 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8D931 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36C65 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1B6A4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31189 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=F185 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=458A2 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22C80 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.14393.3503] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A6528 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8D931 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36C65 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1B6A4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31189 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=F185 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=458A2 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22C80 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.14393.4169] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A5B28 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8CE51 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=398BC +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=25FA4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=3C009 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=29825 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=3F752 +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=CA40 +SLInitFunc.x64=New_CSLQuery_Initialize + [10.0.14901.1000] LocalOnlyPatch.x86=1 LocalOnlyOffset.x86=A6038 @@ -2157,6 +2704,47 @@ SLInitHook.x64=1 SLInitOffset.x64=234DC SLInitFunc.x64=New_CSLQuery_Initialize +[10.0.15063.1746] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A60D8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8CB21 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=35CA5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=15EA4 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=30999 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=FAE5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=3F94D +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=2328C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.15063.2283] +; no x86-version +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8CB21 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=15EA4 +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=FAE5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=2328C +SLInitFunc.x64=New_CSLQuery_Initialize + [10.0.16179.1000] LocalOnlyPatch.x86=1 LocalOnlyOffset.x86=AA568 @@ -2703,6 +3291,32 @@ SLInitHook.x64=1 SLInitOffset.x64=22D5C SLInitFunc.x64=New_CSLQuery_Initialize +[10.0.16299.1087] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A91F8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8FC11 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=392E5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1C774 +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=3DD39 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=12D85 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=4626D +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22E4C +SLInitFunc.x64=New_CSLQuery_Initialize + [10.0.16353.1000] LocalOnlyPatch.x86=1 LocalOnlyOffset.x86=A9388 @@ -2755,306 +3369,1153 @@ SLInitHook.x64=1 SLInitOffset.x64=22D9C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17004.1000] +[10.0.17004.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=A8EB8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8FB41 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=2F65C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=19D1C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=3DF09 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=12D85 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=4643F +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22D9C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17017.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AB388 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8F291 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=3477C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1977C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31049 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=125A5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45CDD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=227DC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17025.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AB498 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8F291 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=3477C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1977C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31049 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=125A5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45CDD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=227DC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17035.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AB3F8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8F271 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=354AC +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=14E7C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31F19 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10CB5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45C4D +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22AEC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17046.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AB3F8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8F281 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=354AC +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=14E8C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=31F19 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10CC5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=45C4D +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22AFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17063.1000] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AD7F8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=92671 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B0C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=153CC +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33569 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=111CE +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=474AD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=2318C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17115.1] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AD738 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=925D1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B0C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1511C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33569 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10E78 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x86=1 +SLInitOffset.x86=474AD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22E6C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17128.1] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AD738 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=925D1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B0C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1511C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33569 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10E78 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x86=1 +SLInitOffset.x86=474AD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22E6C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17133.1] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AD738 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=925D1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B0C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1511C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33569 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10E78 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x86=1 +SLInitOffset.x86=474AD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22E6C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17134.1] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AD738 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=925D1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B0C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1511C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33569 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10E78 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x86=1 +SLInitOffset.x86=474AD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22E6C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17134.706] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=ADAB8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=92521 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B1C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1511C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33579 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10E78 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x86=1 +SLInitOffset.x86=475DD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22F5C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17134.1304] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=ADAB8 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=92521 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=36B1C +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1511C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=33579 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=10E78 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x86=1 +SLInitOffset.x86=475DD +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22F5C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17134.1967] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=91BD1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=17CEC +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1BC38 +DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +SLInitHook.x64=1 +SLInitOffset.x64=2328C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17723.1000] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=75D91 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=1296C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17A45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1B10C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.1] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AF8E4 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77941 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D505 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1322C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BD09 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17F45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5B02A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=1ABFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.165] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77941 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=1322C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17F45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1ABFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.168] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFC74 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77AF1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D665 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1322C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BE69 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17F45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5B18A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=1ABFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.288] +Patch CEnforcementCore::GetInstanceOfTSLicense +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFAD4 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77A11 +LocalOnlyCode.x64=jmpshort +Patch CSessionArbitrationHelper::IsSingleSessionPerUserEnabled +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D665 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1322C +SingleUserCode.x64=Zero +Patch CDefPolicy::Query +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BE69 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17F45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +Hook CSLQuery::Initialize +SLInitHook.x86=1 +SLInitOffset.x86=5B18A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=1ABFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.292] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFAD4 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77A11 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D665 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1322C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BE69 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17F45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5B18A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=1ABFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.379] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFAD4 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77A11 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D665 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1322C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BE69 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=17F45 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5B18A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=1ABFC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.437] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFE24 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77A41 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D7B5 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1339C +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BFB9 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=18025 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5B2CA +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=1ACDC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.771] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFEB4 +LocalOnlyCode.x86=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D7F5 +SingleUserCode.x86=nop +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BFF9 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +SLInitHook.x86=1 +SLInitOffset.x86=5B30A +SLInitFunc.x86=New_CSLQuery_Initialize +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77AD1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=1339C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=18025 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1ACDC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.1369] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=AFEB4 +LocalOnlyCode.x86=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4D7F5 +SingleUserCode.x86=nop +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4BFF9 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +SLInitHook.x86=1 +SLInitOffset.x86=5B30A +SLInitFunc.x86=New_CSLQuery_Initialize +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=77AD1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=1339C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=18025 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1ACDC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.1613] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =B5834 +LocalOnlyCode.x86 =jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=7E381 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86=4EC35 +SingleUserCode.x86 =nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=1386C +SingleUserCode.x64=Zero +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =4D439 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=184F5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86 =1 +SLInitOffset.x86 =61A0A +SLInitFunc.x86 =New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=2198C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.17763.1697] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=B4584 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=7E421 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=4EF55 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=138BC +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=18545 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=4D5D9 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +SLInitHook.x64=1 +SLInitOffset.x64=21A3C +SLInitFunc.x64=New_CSLQuery_Initialize +SLInitHook.x86=1 +SLInitOffset.x86=61C6A +SLInitFunc.x86=New_CSLQuery_Initialize + +[10.0.18362.1] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=B7A16 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=82F35 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=50515 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=0DBFC +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=50249 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1FE05 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5A75A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22DCC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.18362.53] +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=B7D06 +LocalOnlyCode.x86=jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=82FB5 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=50535 +SingleUserCode.x86=nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=0DBFC +SingleUserCode.x64=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=50269 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1FE15 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x86=1 +SLInitOffset.x86=5A77A +SLInitFunc.x86=New_CSLQuery_Initialize +SLInitHook.x64=1 +SLInitOffset.x64=22DDC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.18362.267] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=A8EB8 +LocalOnlyOffset.x86=B7D06 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8FB41 +LocalOnlyOffset.x64=82FB5 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=2F65C +SingleUserOffset.x86=50535 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=19D1C +SingleUserOffset.x64=0DBFC SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=3DF09 +DefPolicyOffset.x86=50269 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=12D85 +DefPolicyOffset.x64=1FE15 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=4643F +SLInitOffset.x86=5A77A SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22D9C +SLInitOffset.x64=22DDC SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17017.1000] +[10.0.18362.657] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AB388 +LocalOnlyOffset.x86=B7D06 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8F291 +LocalOnlyOffset.x64=82FB5 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=3477C +SingleUserOffset.x86=50535 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1977C +SingleUserOffset.x64=0DBFC SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=31049 +DefPolicyOffset.x86=50269 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=125A5 +DefPolicyOffset.x64=1FE15 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=45CDD +SLInitOffset.x86=5A77A SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=227DC +SLInitOffset.x64=22DDC SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17025.1000] +[10.0.18362.836] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AB498 +LocalOnlyOffset.x86=B7D06 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8F291 +LocalOnlyOffset.x64=82FC5 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=3477C +SingleUserOffset.x86=50515 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1977C +SingleUserOffset.x64=0DBFC SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=31049 +DefPolicyOffset.x86=50249 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=125A5 +DefPolicyOffset.x64=1FE15 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=45CDD +SLInitOffset.x86=5A75A SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=227DC +SLInitOffset.x64=22DDC SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17035.1000] +[10.0.18362.1316] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AB3F8 +LocalOnlyOffset.x86=B67C6 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8F271 +LocalOnlyOffset.x64=83075 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=354AC +SingleUserOffset.x86=35735 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=14E7C +SingleUserOffset.x64=0DC4C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=31F19 +DefPolicyOffset.x86=4D679 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=10CB5 +DefPolicyOffset.x64=1FE65 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=45C4D +SLInitOffset.x86=5C18A SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22AEC +SLInitOffset.x64=22E9C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17046.1000] +[10.0.18362.1533] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AB3F8 +LocalOnlyOffset.x86=B67C6 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=8F281 +LocalOnlyOffset.x64=83075 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=354AC +SingleUserOffset.x86=35735 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=14E8C +SingleUserOffset.x64=0DC4C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=31F19 +DefPolicyOffset.x86=4D679 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=10CC5 +DefPolicyOffset.x64=1FE65 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=45C4D +SLInitOffset.x86=5C18A SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22AFC +SLInitOffset.x64=22E9C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17063.1000] +[10.0.19041.84] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AD7F8 +LocalOnlyOffset.x86=B46B9 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=92671 +LocalOnlyOffset.x64=87611 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=36B0C -SingleUserCode.x86=nop +SingleUserOffset.x86=3AD27 +SingleUserCode.x86=Zero SingleUserPatch.x64=1 -SingleUserOffset.x64=153CC +SingleUserOffset.x64=0BF0C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=33569 +DefPolicyOffset.x86=3D7D9 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=111CE +DefPolicyOffset.x64=17ED5 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=474AD +SLInitOffset.x86=66658 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=2318C +SLInitOffset.x64=1BDFC SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17115.1] +[10.0.19041.662] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AD738 +LocalOnlyOffset.x86=B5F59 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=925D1 +LocalOnlyOffset.x64=88E81 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=36B0C +SingleUserOffset.x86=3BC05 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1511C +SingleUserOffset.x64=0CA0C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=33569 +DefPolicyOffset.x86=3E779 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=10E78 -DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +DefPolicyOffset.x64=189D5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=474AD +SLInitOffset.x86=68068 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22E6C +SLInitOffset.x64=1D50C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17128.1] +[10.0.19041.746] +LocalOnlyPatch.x86 =1 +LocalOnlyOffset.x86 =B5979 +LocalOnlyCode.x86 =jmpshort +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=88F31 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x86 =1 +SingleUserOffset.x86=3BC05 +SingleUserCode.x86 =nop +SingleUserPatch.x64=1 +SingleUserOffset.x64=0CA4C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=18A15 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +DefPolicyPatch.x86 =1 +DefPolicyOffset.x86 =3E779 +DefPolicyCode.x86 =CDefPolicy_Query_eax_ecx +SLInitHook.x64=1 +SLInitOffset.x64=1D5BC +SLInitFunc.x64=New_CSLQuery_Initialize +SLInitHook.x86 =1 +SLInitOffset.x86 =67B9A +SLInitFunc.x86 =New_CSLQuery_Initialize + +[10.0.19041.789] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AD738 +LocalOnlyOffset.x86=B59D9 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=925D1 +LocalOnlyOffset.x64=88F41 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=36B0C +SingleUserOffset.x86=3BC45 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1511C +SingleUserOffset.x64=0CA4C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=33569 +DefPolicyOffset.x86=3E7C9 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=10E78 -DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +DefPolicyOffset.x64=18A15 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=474AD +SLInitOffset.x86=67BF8 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22E6C +SLInitOffset.x64=1D5BC SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17133.1] +[10.0.19041.964] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AD738 +LocalOnlyOffset.x86=B65C9 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=925D1 +LocalOnlyOffset.x64=89F31 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=36B0C +SingleUserOffset.x86=3BD35 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1511C +SingleUserOffset.x64=0CA4C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=33569 +DefPolicyOffset.x86=3E8A9 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=10E78 -DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +DefPolicyOffset.x64=18A15 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=474AD +SLInitOffset.x86=687F8 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22E6C +SLInitOffset.x64=1E29C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17134.1] +[10.0.19041.1023] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=89C51 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=0CA4C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=18A15 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1DFDC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.19041.1081] LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AD738 +LocalOnlyOffset.x86=B66B9 LocalOnlyCode.x86=jmpshort LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=925D1 +LocalOnlyOffset.x64=89D81 LocalOnlyCode.x64=jmpshort SingleUserPatch.x86=1 -SingleUserOffset.x86=36B0C +SingleUserOffset.x86=3BD25 SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1511C +SingleUserOffset.x64=D13C SingleUserCode.x64=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=33569 +DefPolicyOffset.x86=3E899 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx DefPolicyPatch.x64=1 -DefPolicyOffset.x64=10E78 -DefPolicyCode.x64=CDefPolicy_Query_edi_rcx +DefPolicyOffset.x64=19105 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x86=1 -SLInitOffset.x86=474AD +SLInitOffset.x86=68809 SLInitFunc.x86=New_CSLQuery_Initialize SLInitHook.x64=1 -SLInitOffset.x64=22E6C +SLInitOffset.x64=1E98C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17723.1000] +[10.0.19041.1200] LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=75D91 +LocalOnlyOffset.x64=89D81 LocalOnlyCode.x64=jmpshort SingleUserPatch.x64=1 -SingleUserOffset.x64=1296C +SingleUserOffset.x64=0D212 SingleUserCode.x64=Zero DefPolicyPatch.x64=1 -DefPolicyOffset.x64=17A45 +DefPolicyOffset.x64=19105 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x64=1 -SLInitOffset.x64=1B10C +SLInitOffset.x64=1E98C SLInitFunc.x64=New_CSLQuery_Initialize -[10.0.17763.1] +[10.0.19041.1202] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=89D81 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=0D212 +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=19105 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1E98C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.19041.1319] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=89A21 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=0D1E2 +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=190D5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1E6AC +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.19041.1320] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=89A21 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=0D1E2 +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=190D5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1E6AC +SLInitFunc.x64=New_CSLQuery_Initialize LocalOnlyPatch.x86=1 -LocalOnlyOffset.x86=AF8E4 +LocalOnlyOffset.x86=B6419 LocalOnlyCode.x86=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=3BDE7 +SingleUserCode.x86=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=3E899 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +SLInitHook.x86=1 +SLInitOffset.x86=68578 +SLInitFunc.x86=New_CSLQuery_Initialize + +[10.0.19041.1348] LocalOnlyPatch.x64=1 -LocalOnlyOffset.x64=77941 +LocalOnlyOffset.x64=89AC1 LocalOnlyCode.x64=jmpshort -SingleUserPatch.x86=1 -SingleUserOffset.x86=4D505 -SingleUserCode.x86=nop SingleUserPatch.x64=1 -SingleUserOffset.x64=1322C +SingleUserOffset.x64=0D1E2 SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=190D5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1E6AC +SLInitFunc.x64=New_CSLQuery_Initialize +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=B64A9 +LocalOnlyCode.x86=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=3BDE7 +SingleUserCode.x86=Zero DefPolicyPatch.x86=1 -DefPolicyOffset.x86=4BD09 +DefPolicyOffset.x86=3E899 DefPolicyCode.x86=CDefPolicy_Query_eax_ecx +SLInitHook.x86=1 +SLInitOffset.x86=68578 +SLInitFunc.x86=New_CSLQuery_Initialize + +[10.0.19041.1379] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8A021 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=D1E2 +SingleUserCode.x64=Zero DefPolicyPatch.x64=1 -DefPolicyOffset.x64=17F45 +DefPolicyOffset.x64=190D5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1E95C +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.19041.1387] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=8A021 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=0D1E2 +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=190D5 DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=1E95C +SLInitFunc.x64=New_CSLQuery_Initialize +LocalOnlyPatch.x86=1 +LocalOnlyOffset.x86=B6899 +LocalOnlyCode.x86=jmpshort +SingleUserPatch.x86=1 +SingleUserOffset.x86=3BDE7 +SingleUserCode.x86=Zero +DefPolicyPatch.x86=1 +DefPolicyOffset.x86=3E899 +DefPolicyCode.x86=CDefPolicy_Query_eax_ecx SLInitHook.x86=1 -SLInitOffset.x86=5B02A +SLInitOffset.x86=68778 SLInitFunc.x86=New_CSLQuery_Initialize + +[10.0.22621.3235] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=9D3F1 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=17F5C +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1C055 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx SLInitHook.x64=1 -SLInitOffset.x64=1ABFC +SLInitOffset.x64=297C0 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.22621.3374] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=9D661 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=181AC +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1C2E5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=29ED0 +SLInitFunc.x64=New_CSLQuery_Initialize + +[10.0.22621.3447] +LocalOnlyPatch.x64=1 +LocalOnlyOffset.x64=9D661 +LocalOnlyCode.x64=jmpshort +SingleUserPatch.x64=1 +SingleUserOffset.x64=181AC +SingleUserCode.x64=Zero +DefPolicyPatch.x64=1 +DefPolicyOffset.x64=1C2E5 +DefPolicyCode.x64=CDefPolicy_Query_eax_rcx +SLInitHook.x64=1 +SLInitOffset.x64=29ED0 SLInitFunc.x64=New_CSLQuery_Initialize + [SLInit] bServerSku=1 bRemoteConnAllowed=1 @@ -3217,6 +4678,35 @@ bServerSku.x64 =FA068 ulMaxDebugSessions.x64=FA06C bRemoteConnAllowed.x64=FA070 +[6.3.9600.19318-SLInit] +bFUSEnabled.x86 =D4068 +lMaxUserSessions.x86 =D406C +bAppServerAllowed.x86 =D4070 +bInitialized.x86 =D4074 +bMultimonAllowed.x86 =D4078 +bServerSku.x86 =D407C +ulMaxDebugSessions.x86=D4080 +bRemoteConnAllowed.x86=D4084 + +bFUSEnabled.x64 =FA054 +lMaxUserSessions.x64 =FA058 +bAppServerAllowed.x64 =FA05C +bInitialized.x64 =FA060 +bMultimonAllowed.x64 =FA064 +bServerSku.x64 =FA068 +ulMaxDebugSessions.x64=FA06C +bRemoteConnAllowed.x64=FA070 + +[6.3.9600.19628-SLInit] +bFUSEnabled.x64 =FA054 +lMaxUserSessions.x64 =FA058 +bAppServerAllowed.x64 =FA05C +bInitialized.x64 =FA060 +bMultimonAllowed.x64 =FA064 +bServerSku.x64 =FA068 +ulMaxDebugSessions.x64=FA06C +bRemoteConnAllowed.x64=FA070 + [6.4.9841.0-SLInit] bFUSEnabled.x86 =BF9F0 lMaxUserSessions.x86 =BF9F4 @@ -3274,6 +4764,7 @@ bServerSku.x64 =EDC04 ulMaxDebugSessions.x64=EDC08 bRemoteConnAllowed.x64=EDC0C + [10.0.9926.0-SLInit] bFUSEnabled.x86 =C17D8 lMaxUserSessions.x86 =C17DC @@ -3322,6 +4813,45 @@ bServerSku.x86 =C3F74 ulMaxDebugSessions.x86=C3F78 bRemoteConnAllowed.x86=C3F7C +zlMaxUserSessions.x64 =F23B0 +lMaxUserSessions.x64 =F23B0 +bAppServerAllowed.x64 =F23B4 +bServerSku.x64 =F23B8 +bFUSEnabled.x64 =F3460 +bInitialized.x64 =F3464 +bMultimonAllowed.x64 =F3468 +ulMaxDebugSessions.x64=F346C +bRemoteConnAllowed.x64=F3470 + +[10.0.10240.18036-SLInit] +bFUSEnabled.x86 =C3F88 +lMaxUserSessions.x86 =C3F8C +bAppServerAllowed.x86 =C3F90 +bInitialized.x86 =C3F94 +bMultimonAllowed.x86 =C3F98 +bServerSku.x86 =C3F9C +ulMaxDebugSessions.x86=C3FA0 +bRemoteConnAllowed.x86=C3FA4 + +lMaxUserSessions.x64 =F23B0 +bAppServerAllowed.x64 =F23B4 +bServerSku.x64 =F23B8 +bFUSEnabled.x64 =F3460 +bInitialized.x64 =F3464 +bMultimonAllowed.x64 =F3468 +ulMaxDebugSessions.x64=F346C +bRemoteConnAllowed.x64=F3470 + +[10.0.10240.18186-SLInit] +bFUSEnabled.x86 =C4F88 +lMaxUserSessions.x86 =C4F8C +bAppServerAllowed.x86 =C4F90 +bInitialized.x86 =C4F94 +bMultimonAllowed.x86 =C4F98 +bServerSku.x86 =C4F9C +ulMaxDebugSessions.x86=C4FA0 +bRemoteConnAllowed.x86=C4FA4 + lMaxUserSessions.x64 =F23B0 bAppServerAllowed.x64 =F23B4 bServerSku.x64 =F23B8 @@ -3331,6 +4861,36 @@ bMultimonAllowed.x64 =F3468 ulMaxDebugSessions.x64=F346C bRemoteConnAllowed.x64=F3470 +[10.0.10240.18485-SLInit] +; no x64-version +bFUSEnabled.x86 =C4F88 +lMaxUserSessions.x86 =C4F8C +bAppServerAllowed.x86 =C4F90 +bInitialized.x86 =C4F94 +bMultimonAllowed.x86 =C4F98 +bServerSku.x86 =C4F9C +ulMaxDebugSessions.x86=C4FA0 +bRemoteConnAllowed.x86=C4FA4 + +[10.0.10240.18818-SLInit] +bInitialized.x86 =C3F94 +bServerSku.x86 =C3F9C +lMaxUserSessions.x86 =C3F8C +bAppServerAllowed.x86 =C3F90 +bRemoteConnAllowed.x86=C3FA4 +bMultimonAllowed.x86 =C3F98 +ulMaxDebugSessions.x86=C3FA0 +bFUSEnabled.x86 =C3F88 + +lMaxUserSessions.x64 =F13B0 +bAppServerAllowed.x64 =F13B4 +bServerSku.x64 =F13B8 +bFUSEnabled.x64 =F2460 +bInitialized.x64 =F2464 +bMultimonAllowed.x64 =F2468 +ulMaxDebugSessions.x64=F246C +bRemoteConnAllowed.x64=F2470 + [10.0.10586.0-SLInit] bFUSEnabled.x86 =C3F60 lMaxUserSessions.x86 =C3F64 @@ -3788,6 +5348,131 @@ bMultimonAllowed.x64 =E8478 ulMaxDebugSessions.x64=E847C bFUSEnabled.x64 =E8480 +[10.0.14393.2608-SLInit] +; no x64 version +bInitialized.x86 =C1F94 +bServerSku.x86 =C1F98 +lMaxUserSessions.x86 =C1F9C +bAppServerAllowed.x86 =C1FA0 +bRemoteConnAllowed.x86=C1FA4 +bMultimonAllowed.x86 =C1FA8 +ulMaxDebugSessions.x86=C1FAC +bFUSEnabled.x86 =C1FB0 + +[10.0.14393.2906-SLInit] +bInitialized.x86 =C2F94 +bServerSku.x86 =C2F98 +lMaxUserSessions.x86 =C2F9C +bAppServerAllowed.x86 =C2FA0 +bRemoteConnAllowed.x86=C2FA4 +bMultimonAllowed.x86 =C2FA8 +ulMaxDebugSessions.x86=C2FAC +bFUSEnabled.x86 =C2FB0 + +bServerSku.x64 =E73D0 +lMaxUserSessions.x64 =E73D4 +bAppServerAllowed.x64 =E73D8 +bInitialized.x64 =E8470 +bRemoteConnAllowed.x64=E8474 +bMultimonAllowed.x64 =E8478 +ulMaxDebugSessions.x64=E847C +bFUSEnabled.x64 =E8480 + +[10.0.14393.3383-SLInit] +bInitialized.x86 =C2F94 +bServerSku.x86 =C2F98 +lMaxUserSessions.x86 =C2F9C +bAppServerAllowed.x86 =C2FA0 +bRemoteConnAllowed.x86=C2FA4 +bMultimonAllowed.x86 =C2FA8 +ulMaxDebugSessions.x86=C2FAC +bFUSEnabled.x86 =C2FB0 + +bServerSku.x64 =E73D0 +lMaxUserSessions.x64 =E73D4 +bAppServerAllowed.x64 =E73D8 +bInitialized.x64 =E8470 +bRemoteConnAllowed.x64=E8474 +bMultimonAllowed.x64 =E8478 +ulMaxDebugSessions.x64=E847C +bFUSEnabled.x64 =E8480 + +[10.0.14393.3471-SLInit] +bInitialized.x86 =C2F94 +bServerSku.x86 =C2F98 +lMaxUserSessions.x86 =C2F9C +bAppServerAllowed.x86 =C2FA0 +bRemoteConnAllowed.x86=C2FA4 +bMultimonAllowed.x86 =C2FA8 +ulMaxDebugSessions.x86=C2FAC +bFUSEnabled.x86 =C2FB0 + +bServerSku.x64 =E73D0 +lMaxUserSessions.x64 =E73D4 +bAppServerAllowed.x64 =E73D8 +bInitialized.x64 =E8470 +bRemoteConnAllowed.x64=E8474 +bMultimonAllowed.x64 =E8478 +ulMaxDebugSessions.x64=E847C +bFUSEnabled.x64 =E8480 + +[10.0.14393.3503-SLInit] +bInitialized.x86 =C2F94 +bServerSku.x86 =C2F98 +lMaxUserSessions.x86 =C2F9C +bAppServerAllowed.x86 =C2FA0 +bRemoteConnAllowed.x86=C2FA4 +bMultimonAllowed.x86 =C2FA8 +ulMaxDebugSessions.x86=C2FAC +bFUSEnabled.x86 =C2FB0 + +bServerSku.x64 =E73D0 +lMaxUserSessions.x64 =E73D4 +bAppServerAllowed.x64 =E73D8 +bInitialized.x64 =E8470 +bRemoteConnAllowed.x64=E8474 +bMultimonAllowed.x64 =E8478 +ulMaxDebugSessions.x64=E847C +bFUSEnabled.x64 =E8480 + +[10.0.14393.3986-SLInit] +bInitialized.x86 =C2F94 +bServerSku.x86 =C2F98 +lMaxUserSessions.x86 =C2F9C +bAppServerAllowed.x86 =C2FA0 +bRemoteConnAllowed.x86=C2FA4 +bMultimonAllowed.x86 =C2FA8 +ulMaxDebugSessions.x86=C2FAC +bFUSEnabled.x86 =C2FB0 + +bServerSku.x64 =E73D0 +lMaxUserSessions.x64 =E73D4 +bAppServerAllowed.x64 =E73D8 +bInitialized.x64 =E8470 +bRemoteConnAllowed.x64=E8474 +bMultimonAllowed.x64 =E8478 +ulMaxDebugSessions.x64=E847C +bFUSEnabled.x64 =E8480 + +[10.0.14393.4169-SLInit] +bInitialized.x86 =C1F94 +bServerSku.x86 =C1F98 +lMaxUserSessions.x86 =C1F9C +bAppServerAllowed.x86 =C1FA0 +bRemoteConnAllowed.x86=C1FA4 +bMultimonAllowed.x86 =C1FA8 +ulMaxDebugSessions.x86=C1FAC +bFUSEnabled.x86 =C1FB0 + +bServerSku.x64 =E63D0 +lMaxUserSessions.x64 =E63D4 +bAppServerAllowed.x64 =E63D8 +bInitialized.x64 =E7470 +bRemoteConnAllowed.x64=E7474 +bMultimonAllowed.x64 =E7478 +ulMaxDebugSessions.x64=E747C +bFUSEnabled.x64 =E7480 + [10.0.14901.1000-SLInit] bInitialized.x86 =C1F6C bServerSku.x86 =C1F70 @@ -4341,6 +6026,36 @@ bServerSku.x64 =E9484 lMaxUserSessions.x64 =E9488 bAppServerAllowed.x64 =E948C +[10.0.15063.1746-SLInit] +bInitialized.x86 =C3F98 +bServerSku.x86 =C3F9C +lMaxUserSessions.x86 =C3FA0 +bAppServerAllowed.x86 =C3FA4 +bRemoteConnAllowed.x86=C3FA8 +bMultimonAllowed.x86 =C3FAC +ulMaxDebugSessions.x86=C3FB0 +bFUSEnabled.x86 =C3FB4 + +bInitialized.x64 =E9468 +bRemoteConnAllowed.x64=E946C +bMultimonAllowed.x64 =E9470 +ulMaxDebugSessions.x64=E9474 +bFUSEnabled.x64 =E9478 +bServerSku.x64 =E9484 +lMaxUserSessions.x64 =E9488 +bAppServerAllowed.x64 =E948C + +[10.0.15063.2283-SLInit] +;no x86-version +bInitialized.x64 =E9468 +bRemoteConnAllowed.x64=E946C +bMultimonAllowed.x64 =E9470 +ulMaxDebugSessions.x64=E9474 +bFUSEnabled.x64 =E9478 +bServerSku.x64 =E9484 +lMaxUserSessions.x64 =E9488 +bAppServerAllowed.x64 =E948C + [10.0.16179.1000-SLInit] bInitialized.x86 =C7F6C bServerSku.x86 =C7F70 @@ -4740,6 +6455,25 @@ bMultimonAllowed.x64 =EE4A8 ulMaxDebugSessions.x64=EE4AC bFUSEnabled.x64 =EE4B0 +[10.0.16299.1087-SLInit] +bInitialized.x86 =C6F7C +bServerSku.x86 =C6F80 +lMaxUserSessions.x86 =C6F84 +bAppServerAllowed.x86 =C6F88 +bRemoteConnAllowed.x86=C6F8C +bMultimonAllowed.x86 =C6F90 +ulMaxDebugSessions.x86=C6F94 +bFUSEnabled.x86 =C6F98 + +bServerSku.x64 =ED3E8 +lMaxUserSessions.x64 =ED3EC +bAppServerAllowed.x64 =ED3F0 +bInitialized.x64 =EE4A0 +bRemoteConnAllowed.x64=EE4A4 +bMultimonAllowed.x64 =EE4A8 +ulMaxDebugSessions.x64=EE4AC +bFUSEnabled.x64 =EE4B0 + [10.0.16353.1000-SLInit] bInitialized.x86 =C6F7C bServerSku.x86 =C6F80 @@ -4968,6 +6702,54 @@ bMultimonAllowed.x64 =F2438 ulMaxDebugSessions.x64=F243C bFUSEnabled.x64 =F2440 +[10.0.17134.706-SLInit] +bInitialized.x86 =CBF38 +bServerSku.x86 =CBF3C +lMaxUserSessions.x86 =CBF40 +bAppServerAllowed.x86 =CBF44 +bRemoteConnAllowed.x86=CBF48 +bMultimonAllowed.x86 =CBF4C +ulMaxDebugSessions.x86=CBF50 +bFUSEnabled.x86 =CBF54 + +bServerSku.x64 =F1378 +lMaxUserSessions.x64 =F137C +bAppServerAllowed.x64 =F1380 +bInitialized.x64 =F2430 +bRemoteConnAllowed.x64=F2434 +bMultimonAllowed.x64 =F2438 +ulMaxDebugSessions.x64=F243C +bFUSEnabled.x64 =F2440 + +[10.0.17134.1304-SLInit] +bInitialized.x86 =CBF38 +bServerSku.x86 =CBF3C +lMaxUserSessions.x86 =CBF40 +bAppServerAllowed.x86 =CBF44 +bRemoteConnAllowed.x86=CBF48 +bMultimonAllowed.x86 =CBF4C +ulMaxDebugSessions.x86=CBF50 +bFUSEnabled.x86 =CBF54 + +bServerSku.x64 =F1378 +lMaxUserSessions.x64 =F137C +bAppServerAllowed.x64 =F1380 +bInitialized.x64 =F2430 +bRemoteConnAllowed.x64=F2434 +bMultimonAllowed.x64 =F2438 +ulMaxDebugSessions.x64=F243C +bFUSEnabled.x64 =F2440 + +[10.0.17134.1967-SLInit] +bServerSku.x64 =F0378 +lMaxUserSessions.x64 =F037C +bAppServerAllowed.x64 =F0380 +bInitialized.x64 =F1430 +bRemoteConnAllowed.x64=F1434 +bMultimonAllowed.x64 =F1438 +ulMaxDebugSessions.x64=F143C +bFUSEnabled.x64 =F1440 + [10.0.17723.1000-SLInit] bInitialized.x64 =E9AB0 bServerSku.x64 =E9AB4 @@ -4996,3 +6778,565 @@ bRemoteConnAllowed.x64=ECAC4 bMultimonAllowed.x64 =ECAC8 ulMaxDebugSessions.x64=ECACC bFUSEnabled.x64 =ECAD0 + +[10.0.17763.165-SLInit] +bInitialized.x64 =ECAB0 +bServerSku.x64 =ECAB4 +lMaxUserSessions.x64 =ECAB8 +bAppServerAllowed.x64 =ECAC0 +bRemoteConnAllowed.x64=ECAC4 +bMultimonAllowed.x64 =ECAC8 +ulMaxDebugSessions.x64=ECACC +bFUSEnabled.x64 =ECAD0 + +[10.0.17763.168-SLInit] +bInitialized.x86 =CD798 +bServerSku.x86 =CD79C +lMaxUserSessions.x86 =CD7A0 +bAppServerAllowed.x86 =CD7A8 +bRemoteConnAllowed.x86=CD7AC +bMultimonAllowed.x86 =CD7B0 +ulMaxDebugSessions.x86=CD7B4 +bFUSEnabled.x86 =CD7B8 + +bInitialized.x64 =ECAB0 +bServerSku.x64 =ECAB4 +lMaxUserSessions.x64 =ECAB8 +bAppServerAllowed.x64 =ECAC0 +bRemoteConnAllowed.x64=ECAC4 +bMultimonAllowed.x64 =ECAC8 +ulMaxDebugSessions.x64=ECACC +bFUSEnabled.x64 =ECAD0 + +[10.0.17763.288-SLInit] +bInitialized.x86 =CD798 +bServerSku.x86 =CD79C +lMaxUserSessions.x86 =CD7A0 +bAppServerAllowed.x86 =CD7A8 +bRemoteConnAllowed.x86=CD7AC +bMultimonAllowed.x86 =CD7B0 +ulMaxDebugSessions.x86=CD7B4 +bFUSEnabled.x86 =CD7B8 + +bInitialized.x64 =ECAB0 +bServerSku.x64 =ECAB4 +lMaxUserSessions.x64 =ECAB8 +bAppServerAllowed.x64 =ECAC0 +bRemoteConnAllowed.x64=ECAC4 +bMultimonAllowed.x64 =ECAC8 +ulMaxDebugSessions.x64=ECACC +bFUSEnabled.x64 =ECAD0 + +[10.0.17763.292-SLInit] +bInitialized.x86 =CD798 +bServerSku.x86 =CD79C +lMaxUserSessions.x86 =CD7A0 +bAppServerAllowed.x86 =CD7A8 +bRemoteConnAllowed.x86=CD7AC +bMultimonAllowed.x86 =CD7B0 +ulMaxDebugSessions.x86=CD7B4 +bFUSEnabled.x86 =CD7B8 +bInitialized.x64 =ECAB0 + +bServerSku.x64 =ECAB4 +lMaxUserSessions.x64 =ECAB8 +bAppServerAllowed.x64 =ECAC0 +bRemoteConnAllowed.x64=ECAC4 +bMultimonAllowed.x64 =ECAC8 +ulMaxDebugSessions.x64=ECACC +bFUSEnabled.x64 =ECAD0 + +[10.0.17763.379-SLInit] +bInitialized.x86 =CD798 +bServerSku.x86 =CD79C +lMaxUserSessions.x86 =CD7A0 +bAppServerAllowed.x86 =CD7A8 +bRemoteConnAllowed.x86=CD7AC +bMultimonAllowed.x86 =CD7B0 +ulMaxDebugSessions.x86=CD7B4 +bFUSEnabled.x86 =CD7B8 + +bInitialized.x64 =ECAB0 +bServerSku.x64 =ECAB4 +lMaxUserSessions.x64 =ECAB8 +bAppServerAllowed.x64 =ECAC0 +bRemoteConnAllowed.x64=ECAC4 +bMultimonAllowed.x64 =ECAC8 +ulMaxDebugSessions.x64=ECACC +bFUSEnabled.x64 =ECAD0 + +[10.0.17763.437-SLInit] +bInitialized.x86 =CD798 +bServerSku.x86 =CD79C +lMaxUserSessions.x86 =CD7A0 +bAppServerAllowed.x86 =CD7A8 +bRemoteConnAllowed.x86=CD7AC +bMultimonAllowed.x86 =CD7B0 +ulMaxDebugSessions.x86=CD7B4 +bFUSEnabled.x86 =CD7B8 + +bInitialized.x64 =ECAB0 +bServerSku.x64 =ECAB4 +lMaxUserSessions.x64 =ECAB8 +bAppServerAllowed.x64 =ECAC0 +bRemoteConnAllowed.x64=ECAC4 +bMultimonAllowed.x64 =ECAC8 +ulMaxDebugSessions.x64=ECACC +bFUSEnabled.x64 =ECAD0 + +[10.0.17763.771-SLInit] +bInitialized.x86 =CD79C +bServerSku.x86 =CD7A0 +lMaxUserSessions.x86 =CD7A4 +bAppServerAllowed.x86 =CD7AC +bRemoteConnAllowed.x86=CD7B0 +bMultimonAllowed.x86 =CD7B4 +ulMaxDebugSessions.x86=CD7B8 +bFUSEnabled.x86 =CD7BC + +bServerSku.x64 =ECAB8 +lMaxUserSessions.x64 =ECABC +bAppServerAllowed.x64 =ECAC4 +bInitialized.x64 =ECAB4 +bRemoteConnAllowed.x64=ECAC8 +bMultimonAllowed.x64 =ECACC +ulMaxDebugSessions.x64=ECAD0 +bFUSEnabled.x64 =ECAD4 + +[10.0.17763.1369-SLInit] +bInitialized.x86 =CD79C +bServerSku.x86 =CD7A0 +lMaxUserSessions.x86 =CD7A4 +bAppServerAllowed.x86 =CD7AC +bRemoteConnAllowed.x86=CD7B0 +bMultimonAllowed.x86 =CD7B4 +ulMaxDebugSessions.x86=CD7B8 +bFUSEnabled.x86 =CD7BC + +bServerSku.x64 =ECAB8 +lMaxUserSessions.x64 =ECABC +bAppServerAllowed.x64 =ECAC4 +bInitialized.x64 =ECAB4 +bRemoteConnAllowed.x64=ECAC8 +bMultimonAllowed.x64 =ECACC +ulMaxDebugSessions.x64=ECAD0 +bFUSEnabled.x64 =ECAD4 + +[10.0.17763.1613-SLInit] +bInitialized.x86 =D3828 +bServerSku.x86 =D382C +lMaxUserSessions.x86 =D3830 +bAppServerAllowed.x86 =D3838 +bRemoteConnAllowed.x86=D383C +bMultimonAllowed.x86 =D3840 +ulMaxDebugSessions.x86=D3844 +bFUSEnabled.x86 =D3848 + +bServerSku.x64 =F3B90 +lMaxUserSessions.x64 =F3B94 +bAppServerAllowed.x64 =F3B9C +bInitialized.x64 =F3B8C +bRemoteConnAllowed.x64=F3BA0 +bMultimonAllowed.x64 =F3BA4 +ulMaxDebugSessions.x64=F3BA8 +bFUSEnabled.x64 =F3BAC + +[10.0.17763.1697-SLInit] +bInitialized.x86 =D1828 +bServerSku.x86 =D182C +lMaxUserSessions.x86 =D1830 +bAppServerAllowed.x86 =D1838 +bRemoteConnAllowed.x86=D183C +bMultimonAllowed.x86 =D1840 +ulMaxDebugSessions.x86=D1844 +bFUSEnabled.x86 =D1848 + +bInitialized.x64 =F3B8C +bServerSku.x64 =F3B90 +lMaxUserSessions.x64 =F3B94 +bAppServerAllowed.x64 =F3B9C +bRemoteConnAllowed.x64=F3BA0 +bMultimonAllowed.x64 =F3BA4 +ulMaxDebugSessions.x64=F3BA8 +bFUSEnabled.x64 =F3BAC + +[10.0.18362.1-SLInit] +bInitialized.x86 =D477C +bServerSku.x86 =D4780 +lMaxUserSessions.x86 =D4784 +bAppServerAllowed.x86 =D478C +bRemoteConnAllowed.x86=D4790 +bMultimonAllowed.x86 =D4794 +ulMaxDebugSessions.x86=D4798 +bFUSEnabled.x86 =D479C + +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.18362.53-SLInit] +bInitialized.x86 =D577C +bServerSku.x86 =D5780 +lMaxUserSessions.x86 =D5784 +bAppServerAllowed.x86 =D578C +bRemoteConnAllowed.x86=D5790 +bMultimonAllowed.x86 =D5794 +ulMaxDebugSessions.x86=D5798 +bFUSEnabled.x86 =D579C + +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.18362.267-SLInit] +bInitialized.x86 =D577C +bServerSku.x86 =D5780 +lMaxUserSessions.x86 =D5784 +bAppServerAllowed.x86 =D578C +bRemoteConnAllowed.x86=D5790 +bMultimonAllowed.x86 =D5794 +ulMaxDebugSessions.x86=D5798 +bFUSEnabled.x86 =D579C + +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.18362.657-SLInit] +bInitialized.x86 =D577C +bServerSku.x86 =D5780 +lMaxUserSessions.x86 =D5784 +bAppServerAllowed.x86 =D578C +bRemoteConnAllowed.x86=D5790 +bMultimonAllowed.x86 =D5794 +ulMaxDebugSessions.x86=D5798 +bFUSEnabled.x86 =D579C + +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.18362.836-SLInit] +bInitialized.x86 =D577C +bServerSku.x86 =D5780 +lMaxUserSessions.x86 =D5784 +bAppServerAllowed.x86 =D578C +bRemoteConnAllowed.x86=D5790 +bMultimonAllowed.x86 =D5794 +ulMaxDebugSessions.x86=D5798 +bFUSEnabled.x86 =D579C + +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.18362.1316-SLInit] +bInitialized.x86 =D377C +bServerSku.x86 =D3780 +lMaxUserSessions.x86 =D3784 +bAppServerAllowed.x86 =D378C +bRemoteConnAllowed.x86=D3790 +bMultimonAllowed.x86 =D3794 +ulMaxDebugSessions.x86=D3798 +bFUSEnabled.x86 =D379C +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.18362.1533-SLInit] +bInitialized.x86 =D377C +bServerSku.x86 =D3780 +lMaxUserSessions.x86 =D3784 +bAppServerAllowed.x86 =D378C +bRemoteConnAllowed.x86=D3790 +bMultimonAllowed.x86 =D3794 +ulMaxDebugSessions.x86=D3798 +bFUSEnabled.x86 =D379C +bInitialized.x64 =F6A8C +bServerSku.x64 =F6A90 +lMaxUserSessions.x64 =F6A94 +bAppServerAllowed.x64 =F6A9C +bRemoteConnAllowed.x64=F6AA0 +bMultimonAllowed.x64 =F6AA4 +ulMaxDebugSessions.x64=F6AA8 +bFUSEnabled.x64 =F6AAC + +[10.0.19041.84-SLInit] +bInitialized.x86 =CF920 +bServerSku.x86 =CF924 +lMaxUserSessions.x86 =CF928 +bAppServerAllowed.x86 =CF930 +bRemoteConnAllowed.x86=CF938 +bMultimonAllowed.x86 =CF93C +ulMaxDebugSessions.x86=CF940 +bFUSEnabled.x86 =CF944 + +bInitialized.x64 =103FF8 +bServerSku.x64 =103FFC +lMaxUserSessions.x64 =104000 +bAppServerAllowed.x64 =104008 +bRemoteConnAllowed.x64=104010 +bMultimonAllowed.x64 =104014 +ulMaxDebugSessions.x64=104018 +bFUSEnabled.x64 =10401C + +[10.0.19041.662-SLInit] +bInitialized.x86 =D1954 +bServerSku.x86 =D1958 +lMaxUserSessions.x86 =D195C +bAppServerAllowed.x86 =D1964 +bRemoteConnAllowed.x86=D196C +bMultimonAllowed.x86 =D1970 +ulMaxDebugSessions.x86=D1974 +bFUSEnabled.x86 =D1978 + +bInitialized.x64 =106028 +bServerSku.x64 =10602C +lMaxUserSessions.x64 =106030 +bAppServerAllowed.x64 =106038 +bRemoteConnAllowed.x64=106040 +bMultimonAllowed.x64 =106044 +ulMaxDebugSessions.x64=106048 +bFUSEnabled.x64 =10604C + +[10.0.19041.746-SLInit] +bInitialized.x86 =D0954 +bServerSku.x86 =D0958 +lMaxUserSessions.x86 =D095C +bAppServerAllowed.x86 =D0964 +bRemoteConnAllowed.x86=D096C +bMultimonAllowed.x86 =D0970 +ulMaxDebugSessions.x86=D0974 +bFUSEnabled.x86 =D0978 + +bInitialized.x64 =106028 +bServerSku.x64 =10602C +lMaxUserSessions.x64 =106030 +bAppServerAllowed.x64 =106038 +bRemoteConnAllowed.x64=106040 +bMultimonAllowed.x64 =106044 +ulMaxDebugSessions.x64=106048 +bFUSEnabled.x64 =10604C + +[10.0.19041.789-SLInit] +bInitialized.x86 =D0954 +bServerSku.x86 =D0958 +lMaxUserSessions.x86 =D095C +bAppServerAllowed.x86 =D0964 +bRemoteConnAllowed.x86=D096C +bMultimonAllowed.x86 =D0970 +ulMaxDebugSessions.x86=D0974 +bFUSEnabled.x86 =D0978 + +bInitialized.x64 =106028 +bServerSku.x64 =10602C +lMaxUserSessions.x64 =106030 +bAppServerAllowed.x64 =106038 +bRemoteConnAllowed.x64=106040 +bMultimonAllowed.x64 =106044 +ulMaxDebugSessions.x64=106048 +bFUSEnabled.x64 =10604C + +[10.0.19041.964-SLInit] +bInitialized.x86 =D1A04 +bServerSku.x86 =D1A08 +lMaxUserSessions.x86 =D1A0C +bAppServerAllowed.x86 =D1A14 +bRemoteConnAllowed.x86=D1A1C +bMultimonAllowed.x86 =D1A20 +ulMaxDebugSessions.x86=D1A24 +bFUSEnabled.x86 =D1A28 + +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1023-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1081-SLInit] +bInitialized.x86 =D1A04 +bServerSku.x86 =D1A08 +lMaxUserSessions.x86 =D1A0C +bAppServerAllowed.x86 =D1A14 +bRemoteConnAllowed.x86=D1A1C +bMultimonAllowed.x86 =D1A20 +ulMaxDebugSessions.x86=D1A24 +bFUSEnabled.x86 =D1A28 + +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1200-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1202-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1319-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1320-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C +bInitialized.x86 =D1A04 +bServerSku.x86 =D1A08 +lMaxUserSessions.x86 =D1A0C +bAppServerAllowed.x86 =D1A14 +bRemoteConnAllowed.x86=D1A1C +bMultimonAllowed.x86 =D1A20 +ulMaxDebugSessions.x86=D1A24 +bFUSEnabled.x86 =D1A28 + +[10.0.19041.1348-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C +bInitialized.x86 =D1A04 +bServerSku.x86 =D1A08 +lMaxUserSessions.x86 =D1A0C +bAppServerAllowed.x86 =D1A14 +bRemoteConnAllowed.x86=D1A1C +bMultimonAllowed.x86 =D1A20 +ulMaxDebugSessions.x86=D1A24 +bFUSEnabled.x86 =D1A28 + +[10.0.19041.1379-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C + +[10.0.19041.1387-SLInit] +bInitialized.x64 =107108 +bServerSku.x64 =10710C +lMaxUserSessions.x64 =107110 +bAppServerAllowed.x64 =107118 +bRemoteConnAllowed.x64=107120 +bMultimonAllowed.x64 =107124 +ulMaxDebugSessions.x64=107128 +bFUSEnabled.x64 =10712C +bInitialized.x86 =D1A04 +bServerSku.x86 =D1A08 +lMaxUserSessions.x86 =D1A0C +bAppServerAllowed.x86 =D1A14 +bRemoteConnAllowed.x86=D1A1C +bMultimonAllowed.x86 =D1A20 +ulMaxDebugSessions.x86=D1A24 +bFUSEnabled.x86 =D1A28 + +[10.0.22621.3235-SLInit] +bInitialized.x64 =12AF4C +bServerSku.x64 =12AF50 +lMaxUserSessions.x64 =12AF54 +bAppServerAllowed.x64 =12AF5C +bRemoteConnAllowed.x64=12AF64 +bMultimonAllowed.x64 =12AF68 +ulMaxDebugSessions.x64=12AF70 +bFUSEnabled.x64 =12AF74 + +[10.0.22621.3374-SLInit] +bInitialized.x64 =12BF4C +bServerSku.x64 =12BF50 +lMaxUserSessions.x64 =12BF54 +bAppServerAllowed.x64 =12BF5C +bRemoteConnAllowed.x64=12BF64 +bMultimonAllowed.x64 =12BF68 +ulMaxDebugSessions.x64=12BF70 +bFUSEnabled.x64 =12BF74 + +[10.0.22621.3447-SLInit] +bInitialized.x64 =12BF4C +bServerSku.x64 =12BF50 +lMaxUserSessions.x64 =12BF54 +bAppServerAllowed.x64 =12BF5C +bRemoteConnAllowed.x64=12BF64 +bMultimonAllowed.x64 =12BF68 +ulMaxDebugSessions.x64=12BF70 +bFUSEnabled.x64 =12BF74 + +