Vista installed QQ2007 in XP Unable to run the workaround

Many people have found that qq2007beta1 in Vista and XP, there will be a lot of different things to put on. Moreover, the most serious problem is that the qq2007beta1 installed in XP cannot run in Vista, and the qq2007beta1 installed under Vista cannot run in XP. This provides a way to solve this problem by modifying the LoginCtrl.dll of the Vista version of Qq2007beta1.

Many people have found that qq2007beta1 in Vista and XP, there will be a lot of different things to put on. Moreover, the most serious problem is that the qq2007beta1 installed in XP cannot run in Vista, and the qq2007beta1 installed under Vista cannot run in XP. On the latest version of the database on the Coral Forum, there are two:

[Versions]

0661=qq2007 Beta1 Vista

065f=qq2007 Beta1

It can be explained that XP and Vista under the QQ2007BETA1 is different. I compared the Vista version lacks those and keyboard encryption-related components, npk*.sys absent, and, the Vista version of the LoginCtrl.dll size is the 168KB,XP version is 184KB. I've been disassembled to discover that the code that restricts the Vista version running under XP is in this LoginCtrl.dll.

* Reference to:kernel32. GetVersionExA, ord:0175h

|

: 10012146 ff15c0b00110 call DWORD ptr [1001B0C0]

: 1001214C 8d4df0 Lea ecx, DWORD ptr [ebp-10] ' call GetVersionExA get System version

* Reference to:mfc42. ordinal:021c, ord:021ch

|

: 1001214F e8fe430000 Call 10016552

: 10012154 33DB xor ebx, ebx

: 10012156 68af0b0000 Push 00000BAF

: 1001215B 8d4df0 Lea ecx, DWORD ptr [EBP-10]

: 1001215E 895DFC mov dword ptr [ebp-04], ebx

* Reference to:mfc42. ordinal:1040, ord:1040h

|

: 10012161 e83a440000 Call 100165a0

: 10012166 83bd60ffffff06 cmp dword ptr [EBP+FFFFFF60], 00000006 ' major version number is 6?

: 1001216D 7318 jnb 10012187 ' is the jump

: 1001216F 6a10 Push 00000010

: 10012171 6828490210 Push 10024928

: 10012176 ff75f0 push [ebp-10]

: 10012179 push EBX

* Reference To:user32. MessageBoxA, Ord:01beh

|

: 1001217A ff15f0b70110 call DWORD ptr [1001B7F0]

: 10012180 push ebx ' pop-up file corruption ' warning

* Reference to:kernel32. ExitProcess, ORD:007DH

|

: 10012181 ff15c4b00110 call DWORD ptr [1001B0C4] ' exit

* Referenced by a (U) nconditional or (C) onditional Jump at address:

|:1001216D (C)

|

* Reference to:mfc42. ordinal:0490, ord:0490h

|

: 10012187 e87a440000 call 10016606 ' into the Login dialog box process

: 1001218C 8b400c mov eax, DWORD ptr [eax+0c]

: 1001218F push EBX

: 10012190 6a10 Push 00000010

: 10012192 6a10 Push 00000010

: 10012194 6A01 Push 00000001

: 10012196 68c33e0000 Push 00003EC3

: 1001219B push EAX

(Omitted below)

So, as long as the LoginCtrl.dll Vista version of the

: 1001216D 7318 jnb 10012187 ' is the jump

Changed it into

: 1001216D EB18 jmp 10012187 ' direct jump

, you can bypass the process of checking out the exit program after the system is XP, and go directly to the login screen.

The test is effective for qq2007beta1 V07.0.101.162.

This article is published in accordance with the LGPL agreement and can be transmitted arbitrarily and modified in the case of the source and author of the original document.