From 37aa13893674045b2d05bd8a42a96842090e6689 Mon Sep 17 00:00:00 2001 From: WitherOrNot Date: Thu, 13 Feb 2025 18:48:40 -0500 Subject: [PATCH] Update README.md --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 0dfafa2..2e9814a 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,12 @@ # spp-stuff Collection of random stuff + +## Debugging """Guide""" + + - Put machine into testsigning (`bcdedit /set testsigning on`) + - Install drivers under `drivers/` by running `install.cmd` in each folder + - Install `sppdebug.reg` to have SPPSvc auto-suspend on startup + - Use PPLcontrol to set debugger to `PP Windows` protection level + - Use [ScyllaHide](https://github.com/x64dbg/ScyllaHide/releases/tag/v1.4) with VMProtect profile for debugging + - Take care to avoid having debugger attached at the end of a [heap execute](https://github.com/WitherOrNot/warbird-docs/blob/main/WarbirdModern.md#heap-executes), or sppsvc will crash with Fast Fail Exception