How to hook non system call api in coredll ? - Windows Mobile Development and Hacking General

I have successful hooked the system call (ex. "CreateFile") but I can't hook other non system call coredll api (ex. "InitLocale"). Is there anyway to hook these api ?
Sorry for my poor english.

you can use ReinitLocale function, or replace wince.nls file

Related

How to add or change interrupt in WindowsMobile

Hi to ALL!
Is it possible to add or change exsisting hardware interrupts in WindowsMobile 2003/2005?
I mean this:
Code:
FFFF0000 LDR PC, =funс_ad_1
FFFF0004 LDR PC, =funс_ad_2
FFFF0008 LDR PC, =funс_ad_3
etc...
FFFF03E0 fund_aс_1
FFFF03E4 fund_aс_2
FFFF03E7 fund_aс_3
I want to add my own func_ad_X or change one of these addresses.
I tried to write in this part of memory in kernel mode (using SetKMode) but get an access violation.
Maybe I must use some kernel API functions (like HookInterrupt or something else) and reach a goal more correctly. Anybody knows?
So, help me please.
Thanks.

Help coding a Flash7 wrapper for WM5/WM6

We need to update one of our old pocketpc programs to Windows Mobile. It's a pretty simple program, but I'm not a C#/VB programmer.
For a visitor center we give the visitors a PDA with a flash interface. The only thing the wrapper needs to do is:
Play a flash7 file Fullscreen (regardless of resolution on screen)
Disable all hardware keys (but send to flash) and flash right click if possible.
Receive quit & reset command from Flash
Flash Lite is not an option as we use flash communication server for all communication.
This was no problem for PPC2003, but the old program does not work in WM5/6. Since we have simplified our wrapper functionality I thought it would be simple to create a new flash wrapper. I can preinstall the flash7 plugin.
Option 1: I've managed to get a C# file running if I embed IE and let that open a html with a swf, but I still need to block all hardware keys and flash right click. I've tried several things, but nothing works. It also seems like using IE inbetween is a bad solution. Embedding the flash player directly by adding it as a reference like the VB example below.
Option 2: I VB if I add the flash.dll (extracted from cab file) as a reference and run the following code:
Code:
Dim FlashObj As New ShockwaveFlashObjects.ShockwaveFlash
FlashObj.Movie = "main.swf"
I don't get a error, but I also don't get a visible flash file...
Any ideas? I know several people need to play flash files on wm5/6 as Zinc and other commercial wrappers don't support it.
I would pay for a product like this

Promiscuous sniffing with Handy Sniffer on VOX

I have downloaded Handy Sniffer 1.6 Demo version to my HTC Vox/S710.
The WiFi hardware is: TNETW1251.
The handysniffer website quotes: Promiscuous mode for some TNETW1251 WiFi adapters.
So when i select extended mode it gives me the anomalies error, which seems to mean that the unofficial promiscuous mode is not supported.
When i enable the official promiscuous mode, it only sniffs local packets, not from other pc's. Why is that?
Hi Rubberducky,
I am developer of HS.
// Handy Sniffer
>> So when i select extended mode it gives me the anomalies error,
>> which seems to mean that the unofficial promiscuous mode is not supported
Is not YET supported,
Send your "Windows\tnetw1251.dll" file to me.
Maybe we will have a luck.
// ARP Spoof
Try to send "arp-req.bin"/"arp-reply.bin" (possibly edit some fields) example packets from "Handy Sniffer\raw" folder. Some built-in WiFi adapters permit sending of packets with foreign source MAC address (-> you can configure valid arp packet). On target host run e.g. WireShark sniffer or see current ARP table...
The file tnetw1251.dll doesn't exist in \Windows on my HTC Vox\s710.
It is possible driver has name "tnetwln.dll" but it is a system file (hidden) and I think it has ROM attribute. If you can extract it I'll ready to analyse it...
I would gladly try to extract it, only i have no idea how i would go about doing this...
Try the program from GreateVK:
http://forum.xda-developers.com/showthread.php?p=1571715
If you have success send me file to "[email protected]".
I'm having problems extracting the file. Rom Extractor seems to be developed for Pocket PC, i have a Smartphone.
But i'll keep trying.
If the extended mode would work in my VOX, would that mean that i can intercept all the packets on the network (Like ARP spoofing), or only packets that are sent to my device?
You can capture ALL USER packets an Access Point (re)transmits in network: broadcast, multicast, directed and with foreign DestMacAddr.
I sent you the file, and i'll also attach it here. Maybe other people need it too.
Here is the file
So? Is that all?

Acces to PDU in Windows Mobile

Dear gurus!
I want to get access to PDU to sent raw SMS.
But official sources (i.e. MSDN Library) say it's only enable to recive it, not send.
Can I get access to low-level PDU structures?
Thnaks very much!
Can I do this with RIL function RIL_SendMsg() or it is impossible because this function is avaliable only in the Windows Embedded CE 6.0 (I'm using Windows Mobile 6.0 but it is not the same, isn't it)?

Modification of RILD Library

Hi,
I have two questions.
First: There is someone who modify the rild library and replace the modified for the one that is in the Android (emulator or real phone)? without build a new Android image. For example, I need to turn off the radio interface and is not possible through Java. The only way is using the Unix socket to rild, but this process accept only one connection and only from the Phone application. I tested the rild-debug socket but when I send a turn off command, all telephony services stop and I cant turn on again.
Second: Is some document that specified the commands received by the baseband? For example, on G1.
Best Regards

Categories

Resources