Skip navigation.

Sign up | Lost password? | Help

my blog

.. and my reverse diary

Nokia E63 - 3 Italia - Xseries

, ,



3 ITA
Per chiunque fosse in possesso di un Nokia E63, e avesse sottoscritto un piano tariffario 3 con l'opzione X-series, non è possibile usufruire di skype, in quanto il client non risulta disponibile tra le applicazioni compatibili. Poco male. Il file skype.sis è un'applicazione per Symbian S60 disponibile sul sito 3 X-series se si usa un E71, o uno di quei device compatibili per 3. Scaricatelo ed installatelo sul vostro E63. Funziona benissimo, il traffico generato viene decurtato dalle soglie Xseries di 3 senza alcun problema. Per la ricezione delle chiamate usando Skype di 3 è necessario avere un piano flat, mentre per le chiamate in uscita si passa da un centralino SIP.

3 UK
Anyone have a Nokia E63 and use the mobile operator 3 (It, Uk, Ireland?) can use the option x-series (free web using wwww3, skype and msn). The device Nokia E63 for 3 is not compatible with Skype .. this is not true. You can get the file skype.sis to use with your Nokia E63 and your x-series option on 3 (it work only if you have subscribed the x-series pack).

Trojan Horse

RE of Win32 DD

I'm reversing win32dd, the tool of Matthieu Suiche, used to dump the entire content of RAM.

The software, in the latest release, can use:

  • \\Device\PhysicalMemory
  • MmMapIoSpace
  • PFN database


The article of Anton Bassov describe step by step what do to use \\Device\PhysicalMemory ..

* the post continue ... tomorrow, I'm sleeping now *

Vodafone Huawei

An year I subscribed a contract with Vodafone Italy for mobile broadband.. the Huawei K3715 with Vodafone software can't allow to use other SIM into modem.. apparently lock on Vodafone Network.

All days after the 8am o'clock the connection is not fast.. the modem use HSDPA network.. but the speed is like a GPRS connection :smile:

Yesterday evening I bought a Huawei modem of TIM... and with surprise the software of TIM can use also the VODAFONE modem (same manufacture) with other sim..

So, I'm stupid.. because before to buy a new modem I must patch software to try other sim.. then, anyone have vodafone huawey modem and same problems with connection can retrieve the Alice TIM software and to use other sim..

Aspire 751H

I have a new netbook ... an Aspire One 751h

Processor1.33GHz Intel Atom Z520
Memory 1GB, 533MHz DDR2
Hard drive160GB 5,400rpm
ChipsetIntel SCH US15W
GraphicsMobile Intel GMA 500 (integrated)
Operating SystemWindows XP
Dimensions (WD)11.8 x 8.5 inches (8.8 inches with battery)
Height1.0 inches
Screen size (diagonal)11.6 inches
System weight / Weight with AC adapter3.0/3.6 pounds

Today I tried Visual Studio 2008 on Aspire and it's work without problem.. but the project is small actually .. but I'm hope to expand it on weekend..

Tomorrow I will install DDK, Debuggers and other utilities for a mad guy :smile:

The only problem is linux.. I tried Ubuntu Netbook Remix 9.10 .. but the chipset is not supported.. without support X don't work properly ... the supported resolution of monitor is 1366x768, without driver ubuntu use only a 1024x768 pixel .. and it's too bad

I need the support for chipset!!

close my blog?

Actually I have no time to write on this blog, or to reverse applications or o.s. only for me ... In the week I work in a company but in evening and weekends I'm busy with others ...

A first "result" of my new position is available on Mentat Solutions web site.

good bye (but nobody read my posts :smile:)

how not use a dongle

So, I will be brief..

do You think to use a dongle to protect your software from piracy? Ok.. it be a beginning but..

Please don't write code like this

bool check_dongle()
{
   SKEY_LINK struc1;
   CHAR login_passphrase[] = { /* array of value */ };
   CHAR response_passprase[] = { /* array of value */ };

   struc1.command = 'A';

   int x = rand() % 0x14;

   memcpy(&struc1.data1, &login_passphrase[x*8], 8);

   if (smartlink(&struc1) == 0)
      return false;

   if (memcpy(&struc1.data1, &response_passphrase[x*8], 8) != 0)
      return false;

   return true;
}


I know it's possible to bypass this dongle check putting nop after two if to bypass check..
but, whereas login_passphrase and response_passphrase are respectively the input buffer before ?AES? encryption and response buffer after ?AES? encryption.. and they are into program binary .. why choose this dongle??

I suppose that the encryption function is AES, it's supported by dongle.. and actually this allow me to write an emulator, replacing smartkey dll with custom dll

Delphi -> IDA

So, they are three/four months that I'm working on a project where it's necessary to decompile a software written in Delphi without symbols, with anti-debugging tricks and no data...

It's a week that I think to write a plugin for IDA, but the problem are resources:

  • I have the freeware version of IDA and two books
  • My monitor .. an LCD 19" is too small to work :frown:


A personal license of IDA have a price of Euro 389, the professional version Euro 789 ... My piggy bank actually hold Euro 200.. so what will be first investment? Monitor to extend my video area and to can have the opportunity to watch compiler and disassembler at same time.. or a personal license of ida to have opportunity to write a plugin?

How disassemble skype quickly..

Skype have .text section encrypted ...

Run skype .. stop the main thread using a debugger or process explorer..
attach it with a debugger and dump to file the .text section (from offset .00401000 to end of section)..

Perform a full copy of skype.exe, open the copy with an hex editor, and replace the text data on file with the dump (don't replace all bytes with dump.. only .text physical size).

Now, you can open your copy with ida and using a Delphi plugin you can rebuild all classes, all vcl events, enumeration, strings, float data without problem..

now, if I have time today, I begin the coding of plugin to improve the performance of my script .. because I have a bit of problem with inner classes ..

it's time to go in office

megapanzer

Latest week a German online paper published the source code of a trojan with functionality to record the conversation of skype ... so, I read the source code and the trojan is not the best solution.. it record all capture data in in/out audio.. but skype support also voicemail, and from release 4 use IAudioClient interface on windows vista according to ms sdk for vista.

but today skype release a new version of skype, improving security to avoid spam, link.. ando megapanzer and minipanzer? what skype will do to protect users?

a day skype will use a sandbox like chronomium browser?

Original Post with sourcecode