JSI Tip 8575. How do I disable WFP in Windows XP SP2?

Starting with Windows 2000 SP2, and in Windows XP, Microsoft has crippled the ability to disable Windows File Protection.

We disabled WFP in tip 5392, and tip 8185.

The version of %SystemRoot%System32sfc_os.dll that is included in Windows XP SP2 is 5.1.2600.2180.

To Disable WFP in Windows XP SP2:

1. Copy %SystemRoot%System32SFC_OS.DLL to %SystemRoot%System32SFC_Patch.DLL.

2. Open %SystemRoot%System32SFC_Patch.DLL in a hex editor.

3. At offset 0xECE9, change 33C040 to 909090 and save the changes.

4. Open a CMD prompt and type:

Copy %SystemRoot%System32SFC_Patch.DLL %SystemRoot%System32dllcacheSFC_OS.DLL /Y
Copy %SystemRoot%System32SFC_Patch.DLL %SystemRoot%System32SFC_OS.DLL /Y

5. If prompted to insert the Windows CD-ROM, press Cancel.

6. Shutdown and restart Windows XP.

7. Set SFCDisable to 0xffffff9d.

8. Shutdown and restart Windows XP.

NOTE: You could use the Recovery Console to perform the copy.