Sunday, February 20, 2011

Advapi32 patch for 64-bit Vista SP2 and Windows 2008 SP2

Recently, a reader of this blog asked for the patch of the 64-bit advapi32 dll of Windows Server 2008 SP2 64-bit (version 6.0.6002.18005). So, here it is (it also applies to Vista SP2 64-bit).
For the 32-bit advapi32 dll on these systems, I have already published the corresponding patch in the following post about Vista SP2 : http://blog.idrassi.com/2009/08/advapi32-patch-for-windows-vista-sp2.html

  • Advapi32 dll in System32 directory, version 6.0.6002.18005:
    • At offset 0x2BC9D : change 75 to 90
    • At offset 0x2BC9E : change 0B to 90
    • At offset 0x2BCA4 : change 0F to 90
    • At offset 0x2BCA5 : change 84 to E9
Its new SHA-256 hash value that should be put in the manifest files is :
oUGG12aBTnJoj/xm5nagheO7ePTc0P3BfW1fxRdbwB4=