Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Linux patcher and need more information to patch Wow-64.exe #3

Open
knuxyl opened this issue Mar 28, 2023 · 0 comments
Open

Linux patcher and need more information to patch Wow-64.exe #3

knuxyl opened this issue Mar 28, 2023 · 0 comments

Comments

@knuxyl
Copy link

knuxyl commented Mar 28, 2023

After some digging it seems it is simple to just install bspatch and run bspatch Wow.exe Wow.patched.exe Wow.exe.patch on linux to patch the executable. Maybe add this to the readme. The path file is under _extra.

And I am trying to find a way to patch the 64bit Wow executable. I've looked through ghidra at the first position being modified and it seems like instead of getting the result of a function, it is instead just putting 1 in the eax register for the next instruction to pass the jnz. I'm not an assembly expert, but I can figure this much. I'm not quite sure how I can cross reference the 64bit wow executable to make the same changes. If I had some more information on what exactly is being patched and why I might be able to make some more progress. I would need to run a debugger on Windows to find what function(s) need to return 1, but I don't know why this is necessary in the first place. IE, I have no idea what this means "by patching out the server redirection (which involves the RSA algorithm)"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant