header image
Home arrow Blog arrow Cryptography In Life arrow Patch for Advapi32 of Windows Vista SP2
Patch for Advapi32 of Windows Vista SP2 PDF Print E-mail

Here is the patch bytes for the advapi32 of Windows Vista SP2 that enable CSP testing without the MS signing process.
You'll also find the value of the SHA256 hash of the resulting dll: this value must be updated on the two manifest files associated with advapi32 and which are located under winsxs\Manifests and winsxs\backup. To find them, just do a file name search containing the strings "advapi32" and "6.0.6002.18005". Do the same search to find the other folder besides winsxs\backup and system32 where you must put the patched copy.

Patch for advapi32.dll version 6.0.6002.18005 :

  • At offset 0x2C106 : change 75 to 90
  • At offset 0x2C107 : change 0C to 90
  • At offset 0x2C10E : change 0F to 90
  • At offset 0x2C10F : change 84 to E9

The new SHA256 hash value is : UJ03+cGhkgBS/X7C/YIy+tu0ko+6sgJmmdHUexvsWSk=

 

If you are looking for advice or help on the field of Cryptography or IT Security, don't hesitate to contact my company IDRIX by going to its web site: http://www.idrix.fr. You'll benefit from the tremendous experience acquired by IDRIX and my self through advanced projects for many requiring customers with very high expectations.