Identity

I’ve spent some time on different versions of scrapebox and want to share the information I have found while analyzing version v1.14.61 which by this time of course is already outdated.

This post is made to educate people and give them insight what kind of protections a software can use against malicious persons.

So as I’ve already stated before, scrapebox is packed with pecompact. It can be unpacked with Unpecompact2 by MadMickael quite well if you have no experience on your own how to unpack it – otherwise you wouldn’t be able to study it.

To reverse scrapebox more successfully I strongly advice to load delphi signatures in IDA and if IDA is not your main working place or if you use both (olly and IDA) then export the map file to olly, so you can have the advantage of understanding more code.

Read the rest of this entry »

Flash Tracker and debug player.

http://code.google.com/p/flash-tracer

http://www.adobe.com/support/flashplayer/downloads.html

Run C:\Program Files (x86)\Adobe\Adobe Help\Adobe Help.exe and change the preferences again.

function getFlashVars():Object
{
	return Object( LoaderInfo( this.loaderInfo ).parameters );
}
var UserName = getFlashVars().UserName || "empty";

in html pseudocode <blah.swf?UserName=lolol>

Great tutorial for IDA’s plugin writing by Steve Micallef which is really really throughout and useful material to read.

http://www.binarypool.com/idapluginwriting/index.html

I added a copy of it to my site, in case his should ever go down, otherwise I recommend downloading it from Steve’s homepage.

http://abc.planet.ee/uplod/idapw.pdf