|
From Skype Memory Analysis |
3. locate "Skype.exe" in the process list and double click it
4. switch to the "Strings" tab in the occouring process window (could take a few seconds)
5. select the "Memory" option on the left bottom of the window (could take again a few seconds to complete)
6. save the strings dump to a textfile via the "Save" button on the right bottom of the window
7. load the resulting textfile in the text editor (Notepad++ in my case)
8. search for one of the already well known commands (e.g. "/help")
Now you should be in a region of the file where several commands are visible. Looking for additional commands is merely a try&error of the strings around that location and observing possible effects. The same approach can be used for in-text replacements like smilies, flags or similar. From that on things get pretty inconvenient. Some of the commands or usable strings are clearly identifyable as such (like "/help") but not all of them are prepended with a "/". Examples for such are the flag-identifiers ( eg: (flag:uk) ) or the smilies.
Looking for such strings in a file with more than 400k lines becomes pretty tedious after a while. But using some of the known strings as anchor points makes it a bit easier.
So, all in all that's how I approached the Skype app and found out about (up to that point) aparently unknown and undocumented commands, icons and shortcuts.
Maybe I'll make a run again sometime and look if something as changed but for that there has to be a chunk of spare time available.
[1]: http://kosi2801.freepgs.com/2008/12/20/skype_chat_commands.html "Skype chat commands"
[2]: http://kosi2801.freepgs.com/2010/10/29/more_mysterious_skype_chat_commands.html "More mysterious Skype chat commands"
[3]: http://technet.microsoft.com/en-us/sysinternals/bb896653 "Process Explorer"
[4]: http://technet.microsoft.com/en-us/sysinternals/default "Windows Sysinternals"
[5]: https://blogs.technet.com/b/markrussinovich/ "Mark's Blog"
[6]: http://notepad-plus-plus.org "Notepad++"]]>