spp-stuff

Collection of random stuff

Debugging """Guide"""

• Put machine into testsigning (bcdedit /set testsigning on)
• Install drivers under drivers/ by running install.cmd in each folder
• Install sppdebug.reg to have SPPSvc auto-suspend on startup
• Use PPLcontrol to set debugger to PP Windows protection level
• Use ScyllaHide with VMProtect profile for debugging
• Take care to avoid having debugger attached at the end of a heap execute, or sppsvc will crash with Fast Fail Exception

Credits

• asdcorp, abbodi, Lyssa - ImHex patterns
• asdcorp - SPP debug setup, tokens_rebuild_v2.py