vmp2
/
um-hook
3
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update README.md

Browse Source
master
_xeroxz 4 years ago
parent 13a3119a2f
commit aa1616323d
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File

12
README.md
Unescape View File

@ -4,24 +4,24 @@
</div> </div>
</div> </div>
# um-tracer - Usermode Virtual Instruction Tracer Demo # um-hook - Usermode Virtual Instruction Hook Demo
um-trace is a demo project/repo which contains an example of how to create a runtime trace of a VMProtect'ed binary (VMProtect 2). The binaries in this repo are not packed for simplicity sake, however in later demo's I will be applying packing to the executable. um-hook is a demo project/repo which contains an example of how to hook a virtual instruction and alter its results. The binaries in this repo are not packed for simplicity sake, however in later demo's I will be applying packing to the executable.
#### Contents #### Contents
* dependencies/ - this project is dependent on `vmtracer`. * dependencies/ - this project is dependent on `vmhook`.
* refbuilds/ - binaries protected with `ultra virtualization` and no packing. These bins are for you to mess with! * refbuilds/ - binaries protected with `ultra virtualization` and no packing. These bins are for you to mess with!
* src/ - source code for the usermode tracer. * src/ - source code for the usermode tracer.
* vmptest/ - source code for the the test bins * vmptest/ - source code for the the test bins
* um-tracer/ - source code for usermode tracer, includes a hook on `LCONSTBZX`. * um-hook/ - source code for usermode hook, includes a hook on `LCONSTBZX`.
### Usage ### Usage
First download the repo with `git clone --recursive https://githacks.org/vmp2/um-tracer.git`, then compile the `um-tracer` by opening `demo.sln` inside of `src/`. There should be an executable called `um-tracer.exe` in `x64/Release`. This tracer program is compiled for the first `vmptest` binary in the `refbuilds` directly. First download the repo with `git clone --recursive https://githacks.org/vmp2/um-hook.git`, then compile the `um-hook` by opening `demo.sln` inside of `src/`. There should be an executable called `um-hook.exe` in `x64/Release`. This hook demo program is compiled for the first `vmptest` binary in the `refbuilds` directly.
To create a trace file simply run the following: To create a trace file simply run the following:
``` ```
um-tracer.exe --bin vmptest.vmp.exe --table 0x6473 --base 0x140000000 --out test.vmp2 um-hook.exe --bin vmptest.vmp.exe --table 0x6473 --base 0x140000000 --out test.vmp2
``` ```
Write Preview
Loading…
Cancel
Save