This guide shows how to download and run Need for Speed Heat on Windows 7 or Windows 8, by patching Origin to disable its operating system check.

If this works for you, I’d appreciate if you bought me a coffee.

Prerequisites

Get a hex editor that can handle big files. I’m using HxD (Portable).

Check your Origin.exe version:

Alternatively, you can try the advanced patching guide that should work on any version, but the advanced guide is a lot more involved and there be dragons.

I recommend switching Origin to offline mode, because if the game needs an update, you will have to do this again.

Edits

Open each file in the hex editor. Go to each offset, make sure the sequence of bytes at that offset is the same as what’s in the Old column, change it to what’s in the New column.

In HxD, use Search - Go to… (Ctrl+G), paste in the offset, click OK, make sure your cursor is inside the hex section and not the decoded text section, and type in the new hex values.

Origin.exe

Offset Old New
1F006 75 EB
1F077 75 EB
1F0E1 0F 85 92 00 00 00 E9 93 00 00 00 90
1F130 75 EB
28E40 0F 8F 07 01 00 00 E9 08 01 00 00 90
28F4F 74 EB
2915C 74 EB

OriginClient.dll

Offset Old New
3C4B15 0F 84 37 01 00 00 E9 38 01 00 00 90
3C4C9A 0F 84 4B 01 00 00 E9 4C 01 00 00 90

OriginClientService.exe

Offset Old New
2E224 75 EB
33316 75 4D 68 4C 03 00 00 E9 7C 03 00 00 90 90
33392 75 EB
334EF 0F 84 46 01 00 00 E9 47 01 00 00 90
335FF 0F 84 79 00 00 00 E9 7A 00 00 00 90
5F17C F8 94
5F186 04 00

Explanation

If you want a very brief explanation, hex 74/75 are conditional jumps, and we turn them into EB, which is a forced jump, to skip over a bunch of code. Sequences 0F 85/0F 8F are variants of jumps that can jump further, and their forced jump equivalent is E9 which takes 1 byte less, so whatever follows after the jump destination (4 bytes) is turned into 90, a no-op instruction that does nothing but prevents shifting everything by a byte.

In most cases, we skip over code that either acts upon the result of an OS version check, or the result of a signature check. Most of it is signature checks that throw a fit (technical term) when one of the exe/dll files is modified. It’s so effective that you need to modify 3 files instead of 1 to get this working (although it’s probably a good idea to be validating exe files because parts of Origin run with SYSTEM level privileges, more privileged than your poweruser administrator account).

In other cases that don’t match what I just said, I forgot what I did there… figure it out as your homework. Some are probably leftovers from things I tried patching out unsuccessfully and forgot to undo ¯\_(ツ)_/¯

HxD also has a handy Data Inspector panel where, if you select one or more bytes, you can see the x86-64 instruction it represents.