llccd/RDPWrapOffsetFinder

doesn't find values for 10.0.22621.3593

Opened this issue · 3 comments

Ran latest version RDPWrapOffsetFinder-0.5. Produces:

[10.0.22621.3593]
ERROR: CDefPolicy_Query not found
ERROR: GetInstanceOfTSLicense not found
ERROR: CSLQuery_Initialize not found

I tried again with RDPWrapOffsetFinder_nosymbol instead of RDPWrapOffsetFinder and it produced something that works. What's the difference between the two executables? Last time the nosymbol version was not needed.

nd
ERROR: CSLQuery_Initialize not found

I also have the same problem

nd
ERROR: CSLQuery_Initialize not found

I also have the same problem

I just tried it again and it worked!

[10.0.22621.3593]
SingleUserPatch.x64=1
SingleUserOffset.x64=C563
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C455
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9F1A1
LocalOnlyCode.x64=jmpshort
SLInitHook.x64=1
SLInitOffset.x64=2BAC0
SLInitFunc.x64=New_CSLQuery_Initialize

[10.0.22621.3593-SLInit]
bServerSku.x64=12DF50
bRemoteConnAllowed.x64=12DF64
bFUSEnabled.x64=12DF74
bAppServerAllowed.x64=12DF5C
bMultimonAllowed.x64=12DF68
lMaxUserSessions.x64=12DF54
ulMaxDebugSessions.x64=12DF70
bInitialized.x64=12DF4C

image