Skip to content

Useful binary edits

zeroKilo edited this page Feb 27, 2020 · 8 revisions

Yeti_Release.exe useful binary edits

Load Language files unencrypted

  • replace 51 52 50 E8 AF 52 52 00 83 C4 0C
  • with 90 90 90 90 90 90 90 90 90 90 90

Remove WS_EX_TOPMOST flag from splashscreen window

  • replace 2 instances of 68 08 00 08 00
  • with 68 00 00 08 00

ODSK.dll useful binary edits

Remove ALSR to have same offsets in IDA and Debugger

  • Option 1 : Use ALSR Remover Tool
  • Option 2 : open ubi.odsk_r.dll in hexeditor and goto address 0x156 and replace the 0x40 with 0x00

Add more output to logs

  • replace 05 60 F1 69 10 60 90 47 10 C7 05 70 F1 69 10 01 00 00 00
  • with 05 60 F1 69 10 60 90 47 10 C7 05 70 F1 69 10 FF FF FF FF
Clone this wiki locally