Skip to content

Linux patcher and need more information to patch Wow-64.exe #3

@knuxyl

Description

@knuxyl

After some digging it seems it is simple to just install bspatch and run bspatch Wow.exe Wow.patched.exe Wow.exe.patch on linux to patch the executable. Maybe add this to the readme. The path file is under _extra.

And I am trying to find a way to patch the 64bit Wow executable. I've looked through ghidra at the first position being modified and it seems like instead of getting the result of a function, it is instead just putting 1 in the eax register for the next instruction to pass the jnz. I'm not an assembly expert, but I can figure this much. I'm not quite sure how I can cross reference the 64bit wow executable to make the same changes. If I had some more information on what exactly is being patched and why I might be able to make some more progress. I would need to run a debugger on Windows to find what function(s) need to return 1, but I don't know why this is necessary in the first place. IE, I have no idea what this means "by patching out the server redirection (which involves the RSA algorithm)"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions