This is how this patch works:
Monitoring stratum protocol, when it see mining.submit protocol, replace worker name to your wallet - from command line.
It's just like
https://github.com/BScrk/zecproxy.
So it have to write some code and, use a packer to bundle EXE and patch code, that's why the EXE larger than before.