admin/eversinc33-MogVMP
1
0
Fork 0
mirror of https://github.com/eversinc33/MogVMP synced 2026-06-06 15:44:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
eversinc33
2026-06-02 13:34:12 +02:00
committed by GitHub
parent d3d7a7a109
commit a0df9dfb0c
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+3 -3
View File
@@ -33,11 +33,11 @@ Branching example:
Run the binary on the target executable, witha VMENTER address and an output path:
```sh
lifter [--save-intermediate-steps] [--continue <vmentry,...>] [--args <count>] --vmenter <0xADDR> [--imagebase <0xADDR>] <pe> <out.ll>
lifter [--save-intermediate-steps] [--continue <vmentry,...>] [--args <count>] --vmenter <0xADDR> [--imagebase <0xADDR>] <pe> <out.ll>
# e.g. for a simple example
./build/lifter --vmenter 0x004040ED ./tests/data/Project1.vmp.exe out.ll
lifter --vmenter 0x004040ED ./tests/data/Project1.vmp.exe out.ll
# function with multiple VMs
./build/lifter --vmenter 0x0040C890 --continue 0x4312d7,0x41F618 ./tests/data/devirtualizeme32_vmp_3.0.9_v1.exe devirt.ll
lifter --vmenter 0x0040C890 --continue 0x4312d7,0x41F618 ./tests/data/devirtualizeme32_vmp_3.0.9_v1.exe devirt.ll
```
- `--vmenter <0xADDR>` - address of the VMENTER to lift