Patch for new Advapi32.dll of Windows XP SP3

On February 9th 2009, Microsoft released through Windows Update a new version of Advapi32 for Windows XP SP3 with version number 5.1.2600.5755. Here is the corresponding patch:

• Advapi32 dll, version 5.1.2600.5755:
• At offset 0x175C1 : change 75 to 90
• At offset 0x175C2 : change 0C to 90
• At offset 0x175C9 : change 0F to 90
• At offset 0x175CA : change 84 to E9

How to export/import CSP session keys in clear

Sometimes, it's handy to export and import plain text CSP session keys without being obliged to wrap them using RSA keys. For that, one can use a specially crafted RSA keys that have their private and public exponents set to "1". Thus, the encryption and the decryption with them always leed to the clear value. You'll find in the following link an MSDN article that provides a sample code explaining how we can achieve that. http://support.microsoft.com/kb/228786

How to clear saved Windows networking passwords

I had a problem connecting to shared VPN network folder because I changed my password but Windows kept using the old one stored in its cache. There was no obvious way to tell Windows to prompt for a new password. After some googling, I found the following command line that displays a dialog showing all the stored credentials and that gives the possibility to delete them : rundll32.exe keymgr.dll, KRShowKeyMgr It saved my life!!!

Advapi32 patch for Windows Vista 64-Bit (pre SP1)

A reader of this blog requested the patch for the advapi32 dll of the Vista 64-Bit (pre SP1). So here it is. For the SysWow64 copy, its patch is the same as the one of Vista 32-Bit version I already published.

• Advapi32 dll in System32 directory, version 5.2.3790.3959:
• At offset 0x12B39 : change 0F to 90
• At offset 0x12B3A : change 84 to E9
• At offset 0x67B0D : change 0F to 90
• At offset 0x67B0E : change 85 to 90
• At offset 0x67B0F : change 2C to 90
• At offset 0x67B10 : change B0 to 90
• At offset 0x67B11 : change FA to 90
• At offset 0x67B12 : change FF to 90

Advapi32 patch for Windows Vista SP1 64-Bit

Following a request by a reader of this blog, here is the patch for the advapi32 (version 6.0.6001.18000) of Windows Vista SP1 64-Bit. It's for the one present on the System32 folder used by native 64-Bit applications. The patch for the SysWow64 copy is the same as for the Windows Vista SP1 32-Bit version.

• Advapi32 dll, version 6.0.6001.18000, 64-Bit :
• At offset 0x27C29 : change 75 to 90
• At offset 0x27C2A : change 0B to 90
• At offset 0x27C30 : change 0F to 90
• At offset 0x27C31 : change 84 to E9