Run the TurboTax installer until the error dialog pops up. Click the close button since you can't go any further. Now press WinKey-R and type %TEMP% to go to the temporary folder. Copy the ckz_xxxx folder to the desktop. Select the setup.exe file and press CTRL-C then CTRL-V to make a copy.
Now use radare as follows:
Command | Description |
---|---|
r2 -A -w "setup - copy.exe" | analyze and allow writing |
axt str.Detected_OS_is_WIN_8_or_above | look for references to this string |
s 0x402ec2 | seek to the location that was found in the previous command |
VV | now we are at the node references the string. You need to reverse the opcode in the previous node by changing je 0x402ed9 to jnz 0x402ed9 |
Shift-TAB | go to previous node |
( | reverse the opcode |
exit from visual mode | |
q | quit radare |
Now you can click on "setup - copy.exe" and install without error. (Note that the Verified publisher says "unknown" even though we only changed one byte.)
Open the setup.exe file and at offset 0x000022c0 change the 74 to 75. Save it and you are done. Remember this offset only works with the version of TurboTax Deluxe mentioned above. If you have another version, follow the radare instructions above to find the right offset.
DISCLAIMER: This is for educational purposes only. Use TurboTax in Windows 7 at you own risk. It most likely will work just fine, but Intuit doesn't want to support older versions of Windows.
Thanks for following up. I did go through the H & B .exe with the r2 commands you posted above. The offset was exactly the same and I verified the change to 0x75 with a binary diff. After that, it got past the initial check, but gave the error after downloading the files. Win 7 x64 Ultimate, which I should have mentioned. I've installed it on Win 10 now.