Trass3r

Unpacking an Executable using UPX + Anti-Unpacking Tricks

1. Restore Section Header Names

   • The section header names had been erased.
   • Rename the relevant sections to UPX0 and UPX1 to match the original UPX convention.

2. Restore the UPX! Magic

   • The UPX! magic signature was zeroed out.
   • It is normally located 32 bytes before the start of the actual UPX1 section data.

• Use a hex editor to write UPX! at this location.

Trass3r

bl_info = {
    "name": "Import OBJ with morph targets",
    "author": "Trass3r",
    "version": (1, 0, 0),
    "blender": (3, 2, 0),
    "location": "File > Import/Export",
    "description": "Import OBJ with morph targets",
    "doc_url": "",
    "support": "COMMUNITY",
    "category": "Import-Export",

Trass3r

#version 450

#extension GL_KHR_shader_subgroup_shuffle : require
#extension GL_EXT_samplerless_texture_functions : require

layout(local_size_x = 4, local_size_y = 4, local_size_z = 4) in;

layout(set = 0, binding = 0, rgba8) writeonly uniform image2D uOutput;
layout(set = 0, binding = 1) uniform utexture2D uInput;

Trass3r

class Torch {
    private holderInstance: BABYLON.InstancedMesh; // Instance of the torch holder
    private flameSprite: BABYLON.Sprite; // Sprite for the flame
    private torchLight: BABYLON.PointLight; // Light for the torch flame
    private torchTransform: BABYLON.TransformNode; // Transform node for grouping
    private static torchHolderBaseMesh: BABYLON.Mesh;
    private static flameManager: BABYLON.SpriteManager;

    constructor(
        scene: BABYLON.Scene,

Trass3r

set(CMAKE_AUTOMOC ON)
set(CMAKE_AUTOGEN_ORIGIN_DEPENDS OFF)
set(CMAKE_GLOBAL_AUTOGEN_TARGET ON)

set(CMAKE_UNITY_BUILD OFF CACHE BOOL "")
set(CMAKE_UNITY_BUILD_BATCH_SIZE 4)
add_compile_options("$<$<CONFIG:Debug>:-Og;-fno-omit-frame-pointer>" -fvisibility-inlines-hidden) # -ftime-trace) # ;-gsplit-dwarf
link_libraries(debug -Wl,--gdb-index)
link_libraries(debug -Wl,--gc-sections)

Trass3r

[
  "-i",
  "VID.mp4",
  "-map", "0:a", "-c:a", "copy",
  "rec.m4a"
]

Trass3r

cd %USERPROFILE%\Desktop\ViVeTool-v0.3.3
ViVeTool.exe /query /id:36354489,37634385,39145991
vivetool /fullreset
vivetool /disable /id:40729001,37634385

Trass3r

# https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository
sudo apt update
sudo apt install -y ca-certificates curl gnupg

sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

echo \
  "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \

Trass3r

#target_compile_definitions(${TARGET} PRIVATE BOOST_STACKTRACE_USE_BACKTRACE)
target_link_libraries(${TARGET} PRIVATE dl)
#target_link_libraries(${TARGET} PRIVATE backtrace)

Trass3r

ldmd2 -i -O -release -inline -L--gc-sections -Xcc=-static-libgcc dustmite.d -v

docker run --rm -it -v `pwd`:/workspace/ ubuntu:rolling
sudo chown 1000:1000 dustmite