Thursday, August 7, 2008

Advapi32 patch for Windows Vista 64-Bit (pre SP1)

A reader of this blog requested the patch for the advapi32 dll of the Vista 64-Bit (pre SP1). So here it is. For the SysWow64 copy, its patch is the same as the one of Vista 32-Bit version I already published.
  • Advapi32 dll in System32 directory, version 5.2.3790.3959:
    • At offset 0x12B39 : change 0F to 90
    • At offset 0x12B3A : change 84 to E9
    • At offset 0x67B0D : change 0F to 90
    • At offset 0x67B0E : change 85 to 90
    • At offset 0x67B0F : change 2C to 90
    • At offset 0x67B10 : change B0 to 90
    • At offset 0x67B11 : change FA to 90
    • At offset 0x67B12 : change FF to 90