SP3 Patched Files

[janedoe]

These files are ready for an unattended CD and SFC_OS.DLL/UXTHEME.DLL can be used to replace an existing file on a system with SP3 installed (you'll need a Replacer program).

Service Pack 3 ENU (5.1.2600.5512)

Disable Windows XP File Protection permanently without registry

Unlock Windows XP Setup - Enable edition of syssetup.inf

Unlock Windows XP Visual Styles (Themes)

--------------------------------------------------------------------------------

Service Pack 3 FRA (5.1.2600.5512)

D?sactiver la Protection de fichiers Windows de fa?on permanente sans registre

D?verrouiller l'Installation de Windows XP - Permettre l'?dition de syssetup.inf

D?verrouiller les Styles Visuels de Windows XP (Th?mes)

Edited May 12, 2008 by janedoe

[Yusuf M. Veteran]

I don't know if these files are legitimate especially since you're a resident one post wonder. Still, I'd test out the files but at the moment I don't have a machine with Windows XP SP3 installed. :/

[janedoe]

I don't know if these files are legitimate especially since you're a resident one post wonder. Still, I'd test out the files but at the moment I don't have a machine with Windows XP SP3 installed. :/

Anaron,

These files are from the SP3 RTM and I use the same patching since SP2 but to be honest I didn't test them if they worked with SP3. One thing is sure... the same patches for SP2 worked great and was time tested.

I'm gonna test these new files on my side to be sure of the quality.

jdoe

[Yusuf M. Veteran]

Anaron,

These files are from the SP3 RTM and I use the same patching since SP2 but to be honest I didn't test them if they worked with SP3. One thing is sure... the same patches for SP2 worked great and was time tested.

I'm gonna test these new files on my side to be sure of the quality.

jdoe

I see. Be sure to post back soon!

[janedoe]

I see. Be sure to post back soon!

Tested... OK

[Saint Shiv]

Tested... OK

We appreciate the post of the modified files, perhaps this should be stickied - as more users switch to SP3 they're going to be looking for these files. In fact, when I joined Neowin I was looking for the UXTheme patch.

[az`rael]

uxtheme.dll doesn't work for me. causes explorer not to boot.

now to correct this bull****...

[iron2000]

I think this type of files need to be decompressed in order to be replaced in the system.

DL_ files are kind of installation files, I think.

Just renaming to .dll don't work.

Its more for the cd thing like janedoe states.

[az`rael]

Ya it does need to be depressed.

I found a working one over at WinMatrix.

You can grab the .dll in full for any SP3 version :)

Final (build 5512 / listed as 2111 in winver): Here

[darth_vader]

The files can be extracted with winrar.

[iron2000]

Silly me, said decompress but didn't go ahead and do it.

7zip does the extraction too.

Thanks Darth.

I'm already using the uxtheme posted by FlishFun.

[janedoe]

Sorry, I thought it was obvious that these files were compressed (like those on the source CD).

On my web pages, there is a tool for fast compression/decompression called "CAB Tool 1.8"

My programs

[ceztko]

These files are ready for an unattended CD and SFC_OS.DLL/UXTHEME.DLL can be used to replace an existing file on a system with SP3 installed (you'll need a Replacer program).

...

Can you describe a systematic procedure to patch the SFC_OD.DLL file in any language? Here is reported a method that disable WFP on SP3 RTM, but it works only with a registry mofication.

Thanks

[janedoe]

Can you describe a systematic procedure to patch the SFC_OD.DLL file in any language? Here is reported a method that disable WFP on SP3 RTM, but it works only with a registry mofication.

Thanks

I can't have a look of all languages version of this dll but if it can help, I'll try to give you the informations that you *should* need.

To avoid the need of a registry edits to make the patch working, all other values of SFCDisable must be skipped. This is why my patch do a jump where it have to, like if SFCDisable was FFFFFF9D all the time (no matter what the real value is).

At the hexadecimal offset EC84 (or around this offset) you should find the following assembly...

cmp eax, FFFFFF9D ; 83F89D

jne 76C1F891 ; 7508

xor eax, eax ; 33C0

inc eax ; 40

Which is translate to machine code as 83F89D750833C040

You need to search for this byte patterns and replace these 8 bytes by 3BC0EB3290909090

cmp eax, eax ; 3BC0

jmp 76C1F8BA ; EB32

nop ; 90

nop ; 90

nop ; 90

nop ; 90

Hope it helps

[dmd3x]

you can extract using command line too

[ceztko]

I can't have a look of all languages version of this dll but if it can help, I'll try to give you the informations that you *should* need.

To avoid the need of a registry edits to make the patch working, all other values of SFCDisable must be skipped. This is why my patch do a jump where it have to, like if SFCDisable was FFFFFF9D all the time (no matter what the real value is).

At the hexadecimal offset EC84 (or around this offset) you should find the following assembly...

cmp eax, FFFFFF9D ; 83F89D

jne 76C1F891 ; 7508

xor eax, eax ; 33C0

inc eax ; 40

Which is translate to machine code as 83F89D750833C040

You need to search for this byte patterns and replace these 8 bytes by 3BC0EB3290909090

cmp eax, eax ; 3BC0

jmp 76C1F8BA ; EB32

nop ; 90

nop ; 90

nop ; 90

nop ; 90

Hope it helps

Sure, it helped.

Thanks.