header image
Home arrow Blog arrow Cryptography In Life arrow Advapi32 Patch for Windows XP 64-Bit
Advapi32 Patch for Windows XP 64-Bit PDF Print E-mail
As usual, here is the patch of advapi32 on Windows XP 64-Bit that enables testing of CSP dlls without Microsoft signature.

In this platform, there is two versions of this dll : on in the System32 directory that is the real 64-bit one, and one in the SysWOW64 directory that is the 32-bit one. So, we have to patch the two dlls. You'll find below the usual patch description for each one of them. You may notice that two have an identical version number, 5.2.3790.1830, that is the same for advapi32 on Windows 2003 SP1. This is why the patch for the SysWOW64 copy is identical to the one on Windows 2003 SP1.

  • Advapi32 dll in SysWOW64 directory :
    • At offset 0x68CD : change 0F to EB
    • At offset 0x68CE : change 84 to 42
    • At offset 0x68CF : change 62 to 90
    • At offset 0x68D0 : change 0B to 90
    • At offset 0x68D1 : change 03 to 90
    • At offset 0x68D2 : change 00 to 90
  • Advapi32 dll in System32 directory :
    • At offset 0x11B15 : change 0F to 90
    • At offset 0x11B16 : change 84 to E9
    • At offset 0x4D2AD : change 0F to 90
    • At offset 0x4D2AE : change 85 to 90
    • At offset 0x4D2AF : change 68 to 90
    • At offset 0x4D2B0 : change 48 to 90
    • At offset 0x4D2B1 : change FC to 90
    • At offset 0x4D2B2 : change FF to 90

If you are looking for advice or help on the field of Cryptography or IT Security, don't hesitate to contact my company IDRIX by going to its web site: http://www.idrix.fr. You'll benefit from the tremendous experience acquired by IDRIX and my self through advanced projects for many requiring customers with very high expectations.