search

nettitude / RunPE

C# Reflective loader for unmanaged binaries.
BSD 3-Clause "New" or "Revised" License
416 stars 64 forks source link

Not working on Windows7 #6

Closed TeachMeJavaTonight closed 1 year ago

TeachMeJavaTonight commented 2 years ago 
[*] Patching kernelbase!GetModuleHandleW to return base address of loaded PE if
called with NULL
[*] Calculating patch length for kernelbase!GetModuleHandleW
[-] Error running RunPE: System.Exception: Unable to calculate patch length, the
 function may have changed to a point it is is no longer recognised and this cod
e needs to be updated
   at RunPE.Patchers.ExtraAPIPatcher.CalculatePatchLength(IntPtr funcAddress)
   at RunPE.Patchers.ExtraAPIPatcher.PatchAPIs(IntPtr baseAddress)
   at RunPE.Program.Main(String[] args)
riskydissonance commented 1 year ago

Thanks but given Win7 is end of life we won't be supporting it, however if you'd like to add it you can add a new search pattern here: https://github.com/nettitude/RunPE/blob/main/RunPE/Patchers/ExtraAPIPatcher.cs#L133 for the specific version you're on with the appropriate length (which just has to be the length in bytes of a complete set of instructions).