Monday, June 30, 2008

Advapi32 patch for Windows Vista SP1 64-Bit

Following a request by a reader of this blog, here is the patch for the advapi32 (version 6.0.6001.18000) of Windows Vista SP1 64-Bit. It's for the one present on the System32 folder used by native 64-Bit applications. The patch for the SysWow64 copy is the same as for the Windows Vista SP1 32-Bit version.
  • Advapi32 dll, version 6.0.6001.18000, 64-Bit :
    • At offset 0x27C29 : change 75 to 90
    • At offset 0x27C2A : change 0B to 90
    • At offset 0x27C30 : change 0F to 90
    • At offset 0x27C31 : change 84 to E9

6 comments:

MReynolds said...

Can you post the changes needed to modify the RTM (pre-SP1) version of x64 Vista advapi32.dll.

Mounir IDRASSI said...

I don't have access to a Vista pre-SP1 X64 version. I'll try to install one when I have time but you can also send me your copy of advapi32 dll, thus I can take a look at it and with some luck I can find a patch without running the whole system!

MReynolds said...

Sure I can send the Vista RTM version of the x64 advapi files (sys32 and sysWOW).
Where do you want me to send them to?

Mounir IDRASSI said...

You can send them to the email address on my blogger's profile (just click on my picture).
The advapi32 present on SysWow64 is 32bit and if its version is 6.0.6000.16386 then its patch is the same as the one I already published for Vista 32Bit on the following post :
http://blog.idrassi.com/2008/04/advapi32-patch-for-new-windows-os.html

Anonymous said...

do u have for vista sp1-32 bit?

Mounir IDRASSI said...

I have already published the patch for Vista SP1 32Bit. You'll find it on the following post : http://blog.idrassi.com/2008/04/advapi32-patch-for-new-windows-os.html (it's in the third position along side Windows 2008)