From 513a7a1ebf6daeccfc98adec64a95eeea21f455e Mon Sep 17 00:00:00 2001
From: binarymaster <x86corez@gmail.com>
Date: Sat, 24 Jan 2015 20:36:45 +0300
Subject: [PATCH] 10.0.9926.0 x64 contributed by v-yadli

---
 res/rdpwrap.ini | 41 ++++++++++++++++++++++++++++++++++++++++-
 technical.txt   |  7 +++++++
 2 files changed, 47 insertions(+), 1 deletion(-)

diff --git a/res/rdpwrap.ini b/res/rdpwrap.ini
index c60341a..bc3bf18 100644
--- a/res/rdpwrap.ini
+++ b/res/rdpwrap.ini
@@ -2,7 +2,7 @@
 ; Do not modify without special knowledge
 
 [Main]
-Updated=2014-12-13
+Updated=2015-01-22
 LogFile=\rdpwrap.txt
 SLPolicyHookNT60=1
 SLPolicyHookNT61=1
@@ -1276,6 +1276,34 @@ SLInitHook.x64=1
 SLInitOffset.x64=24750
 SLInitFunc.x64=New_CSLQuery_Initialize
 
+[10.0.9926.0]
+; x64 contributed by v-yadli
+; Patch CEnforcementCore::GetInstanceOfTSLicense
+LocalOnlyPatch.x64=1
+;;;OFFSET = 0x61
+;;;BASE   = 0x95F90
+LocalOnlyOffset.x64=95FF1
+LocalOnlyCode.x64=jmpshort
+; Patch CSessionArbitrationHelper::IsSingleSessionPerUserEnabled
+SingleUserPatch.x64=1
+;;;OFFSET   = 0x43
+;;;BASE     = 0x12F90
+;;;;instruction = 0xBB 0x01 0x00 0x00 0x00
+;;;                   ^^^ +1 offset
+SingleUserOffset.x64=12A34
+SingleUserCode.x64=Zero
+; Patch CDefPolicy::Query
+DefPolicyPatch.x64=1
+;;;
+;;;BASE     = 0xBDF0
+;;;OFFSET   = 0x15
+DefPolicyOffset.x64=BE05
+DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
+; Hook CSLQuery::Initialize
+SLInitHook.x64=1
+SLInitOffset.x64=24EC0
+SLInitFunc.x64=New_CSLQuery_Initialize
+
 [SLInit]
 bServerSku=1
 bRemoteConnAllowed=1
@@ -1418,3 +1446,14 @@ bMultimonAllowed.x64  =EDC00
 bServerSku.x64        =EDC04
 ulMaxDebugSessions.x64=EDC08
 bRemoteConnAllowed.x64=EDC0C
+
+[10.0.9926.0-SLInit]
+; x64 contributed by v-yadli
+bFUSEnabled.x64       =EEBF0
+lMaxUserSessions.x64  =EEBF4
+bAppServerAllowed.x64 =EEBF8
+bInitialized.x64      =EEBFC
+bMultimonAllowed.x64  =EEC00
+bServerSku.x64        =EEC04
+ulMaxDebugSessions.x64=EEC08
+bRemoteConnAllowed.x64=EEC0C
diff --git a/technical.txt b/technical.txt
index 62134f6..b5125df 100644
--- a/technical.txt
+++ b/technical.txt
@@ -55,12 +55,19 @@ Terminal Services supported versions
 6.4.9841.0     (Windows 10 Technical Preview)          [init hook + extended patch]
 6.4.9860.0     (Windows 10 Technical Preview Update 1) [init hook + extended patch]
 6.4.9879.0     (Windows 10 Technical Preview Update 2) [init hook + extended patch]
+10.0.9926.0    (Windows 10 Technical Preview Update 3) [init hook + extended patch] [!todo x86]
 
 Known failures
 6.0.6000.16386 (Windows Vista RTM x86, crashes on logon attempt)
 
 Source code changelog (rdpwrap library):
 
+2015.01.24 :
+- Researching Windows 10 Technical Preview Update 3 (10.0.9926.0 x86)
+
+2015.01.22 :
+- v-yadli contributed offsets for version 10.0.9926.0 (x64)
+
 2014.12.13 :
 - Added more policy values to INI file