Force Installer To Recognize Windows 7

Discussion in 'Windows 7' started by A30N, Oct 29, 2009.

  1. A30N

    A30N MDL Novice

    May 11, 2008
    37
    0
    0
    #1 A30N, Oct 29, 2009
    Last edited: Oct 31, 2009
  2. str8

    str8 MDL Expert

    Jul 3, 2009
    1,506
    56
    60
    #2 str8, Oct 29, 2009
    See if you can try changing it directly in memory before this window about termination pops up.
     
  3. nononsence

    nononsence MDL Addicted

    Aug 18, 2009
    806
    826
    30
    #3 nononsence, Oct 29, 2009
    Last edited: Oct 29, 2009
  4. nononsence

    nononsence MDL Addicted

    Aug 18, 2009
    806
    826
    30
    #4 nononsence, Oct 29, 2009
    these are the changes to uninstall.exe to bypass os check

    Comparing files orig_Uninstal.exe and MOD_UNINSTAL.EXE
    00001261: 74 90
    00001262: 3D 90
    00001266: 74 90
    00001267: 15 90
    0000126B: 75 90
    0000126C: 55 90
    00001270: 75 90
    00001271: 50 90
     
  5. nononsence

    nononsence MDL Addicted

    Aug 18, 2009
    806
    826
    30
    #5 nononsence, Oct 29, 2009
  6. A30N

    A30N MDL Novice

    May 11, 2008
    37
    0
    0
    #6 A30N, Oct 29, 2009 (OP)
    Wow, thanks! That was above and beyond the call of duty! I'm going to go try it right now.
     
  7. A30N

    A30N MDL Novice

    May 11, 2008
    37
    0
    0
    #7 A30N, Oct 30, 2009 (OP)
    It worked perfectly! +1,000,000 rep points. :) Now to figure out how you found those offsets....
     
  8. nononsence

    nononsence MDL Addicted

    Aug 18, 2009
    806
    826
    30
    #8 nononsence, Oct 30, 2009
    I searched for GetVersionEX then to narrow down which sub to attack I changed some instructions so setup would crash, when I found the right sub
    I noped some jump instructions so the code would not branch.
     
  9. A30N

    A30N MDL Novice

    May 11, 2008
    37
    0
    0
    #9 A30N, Oct 31, 2009 (OP)
    So that's how you did it. Up until now I only knew how to search for "Version=" or "VersionNT=". I went back and recreated your method, and sure enough, it worked at the same offset you posted earlier. I feel suddenly enlightened! :D