-
Notifications
You must be signed in to change notification settings - Fork 20
Description
After some digging it seems it is simple to just install bspatch and run bspatch Wow.exe Wow.patched.exe Wow.exe.patch on linux to patch the executable. Maybe add this to the readme. The path file is under _extra.
And I am trying to find a way to patch the 64bit Wow executable. I've looked through ghidra at the first position being modified and it seems like instead of getting the result of a function, it is instead just putting 1 in the eax register for the next instruction to pass the jnz. I'm not an assembly expert, but I can figure this much. I'm not quite sure how I can cross reference the 64bit wow executable to make the same changes. If I had some more information on what exactly is being patched and why I might be able to make some more progress. I would need to run a debugger on Windows to find what function(s) need to return 1, but I don't know why this is necessary in the first place. IE, I have no idea what this means "by patching out the server redirection (which involves the RSA algorithm)"