Thursday, June 5, 2008

Advapi32 Patch for Windows XP SP3

The SP3 of Windows XP is already here and with its arrival comes the necessity of testing and validating CSP dlls under it. So, as usual, I'm releasing the necessary patch of advapi32 dll to help on this and avoid the signing process. And here we go :
  • Advapi32 dll, version 5.1.2600.5512:
    • At offset 0x175A1 : change 75 to 90
    • At offset 0x175A2 : change 0C to 90
    • At offset 0x175A9 : change 0F to 90
    • At offset 0x175AA : change 84 to E9


Lara Hati said...

Hi Mounir,

Is there any procedure or step that we need to take to replace the advapi32.dll in XP SP3?

Mounir IDRASSI said...

The procedure is always the same.
1- Access the hard drive from another operating system: I usually use a multi-boot system ( 2000 - XP-Vista), but you can also access the hard drive but other means.

2- backup the advapi32.dll copies that are in c:\system32 and c:\system32\dllcache.

3- place the patched advapi32.dll in c:\system32 and c:\system32\dllcache.

That's it. You can now boot your XP machine and your system should be running fine.