It worked. Five concurrent RDP sessions, no license errors.
At 11 PM, Marina downloaded a hex editor. She located termsrv.dll in C:\Windows\System32 . Following an online guide—written in broken English, dated 2015—she changed bytes at offset 0x2F7E from 75 to 74 (a common jump modification for older Windows builds). She rebooted into recovery mode, replaced the DLL, and restarted. termsrv.dll patch windows server 2022