help unlocking mogul spc/msl code

[fronz]

hpnasik i thought you were a programer, lol.....but i see were on the same page. I tried to Dissassemble & debug with pe explorer and debuggy with no luck, but i think you said exactly what needs to be done!

[Vinny]

Originally Posted by hpnasik

There is a cab file which gets installed into Mogul and that Cab file have 2 file

1. PPSt_Keygen.dll
2. WriteDMData.exe

means WriteDM is Writting the SPC with Help of PPSt_keygen.dll

here PPST_Keygen must be Calculating some Logic on ESN and should be Producing the Exact ESN which was Company were Provided, here We can learn the Logic of Sprint that How they Calculate SPC on ESN.

Hello Dissassembler please Crack PPST_Keygen.dll so it only return 000000 value to Exe which it calls so we can means we can set 000000 to Phone

Or Make any Program which can Call this Dll and and Generate SPC as per the Phones ESN???????????

Have you tried to dump the exports on PPST_Keygen.dll?
dumpbin /exports PPST_Keygen.dll or link /dump /exports PPST_Keygen.dll

[el_venga]

i opened the PPST_keygen.dll with a hex viewer and i found GetSPC, i think this means it reads the current spc and then writes it back. thats just what i think it is. some one with another ppc phone sprint compatible install this cab and if spc is changed, it has the logic for the SPC Calculator.

[fronz]

how to dump/export .dll?

[fronz]

we need some programers from xda developers on this

[Vinny]

Originally Posted by fronz

how to dump/export .dll?

dumpbin /exports PPST_Keygen.dll > exports.txt

or

link /dump /exports PPST_Keygen.dll > exports.txt

Then just post the text file

[Vinny]

Originally Posted by fronz

we need some programers from xda developers on this

I'll take a look when I get home.. though I have to admit.. I'll need to read up on the whole SPC ESN thing as I am not sure what I would be looking to do with the function even if i got it working.

[fronz]

the spc code allows you to access the built-in pst(phone support tool) then u can unlock the phone to different carrier

[opulence]

Originally Posted by fronz

the spc code allows you to access the built-in pst(phone support tool) then u can unlock the phone to different carrier

can this bult in pst software modify the esn on the phone to?

[Vinny]

Here ya go... all the functions...

Dump of file PPST_KeyGen.dll

File Type: DLL

Section contains the following exports for PPST_KeyGen.dll

00000000 characteristics
45E52608 time date stamp Wed Feb 28 00:49:44 2007
0.00 version
1 ordinal base
18 number of functions
18 number of names

ordinal hint RVA name

1 0 0000317C GetAAASSD
2 1 000036C0 GetAKEY
3 2 00002468 GetAOC
4 3 00003AA4 GetCheckSUM
5 4 00003174 GetHASSD
6 5 00002B84 GetHDRANPASS
7 6 00002AEC GetHDRANUID
8 7 000024FC GetIMSIS
9 8 00002460 GetMDN
10 9 0000316C GetMIPDUN
11 A 000030C8 GetNAI
12 B 000027F0 GetOTKSL
13 C 00002ADC GetPPPUMPASS
14 D 00002AD4 GetPPPUMUID
15 E 00002AE4 GetSIPDUN
16 F 0000250C GetSPC
17 10 00002504 GetTIMSIS
18 11 00002440 TestFunction

Summary

1000 .data
1000 .pdata
1000 .rdata
1000 .reloc
3000 .text