Saber
August 30th, 2004, 15:51
Hi guys (and girls)!
I'm kinda new to this cracking scene.
Been learning from Krobar's great tuts
But now i'm encounting problems with non-working hmemcpy in WinXP.
Quote from krobar's tut:
bpx hmemcpy and push enter. Now F5 out of softice and click Check it Baby!
:
:
:
After about the 6th RET, we'll land here:
xxxx:0042F4CA 8B45F0 MOV EAX,[EBP-10]
xxxx:0042F4CD 8B55F4 MOV EDX,[EBP-0C]
xxxx:0042F4D0 E82745FDFF CALL 004039FC
xxxx:0042F4D5 751A JNZ 0042F4F1
We see a CALL just before a jump. Well we gonna trace INTO this call. F8 traces INTO a call (push F8 when we on the call line) and we end up here:
xxxx:004039FC 53 PUSH EBX<--we land here
xxxx:004039FD 56 PUSH ESI
xxxx:004039FE 57 PUSH EDI
xxxx:004039FF 89C6 MOV ESI,EAX
xxxx:00403A01 89D7 MOV EDI,EDX
xxxx:00403A03 39D0 CMP EAX,EDX
xxxx:00403A05 0F848F000000 JZ 00403A9A
:end of quote
So, how can I break into this same place of the code:
xxxx:0042F4CA 8B45F0 MOV EAX,[EBP-10]
I've already tried different breakpoints, just doesn't break in any near this.
Is it possible to break like this: "BPX 0042F4CA"? At least it seems not, cos I've tried it several times with different options.
And i've already read some help-files for breakpoints...
Thanks in advance, help noob.
I'm kinda new to this cracking scene.
Been learning from Krobar's great tuts

But now i'm encounting problems with non-working hmemcpy in WinXP.
Quote from krobar's tut:
bpx hmemcpy and push enter. Now F5 out of softice and click Check it Baby!
:
:
:
After about the 6th RET, we'll land here:
xxxx:0042F4CA 8B45F0 MOV EAX,[EBP-10]
xxxx:0042F4CD 8B55F4 MOV EDX,[EBP-0C]
xxxx:0042F4D0 E82745FDFF CALL 004039FC
xxxx:0042F4D5 751A JNZ 0042F4F1
We see a CALL just before a jump. Well we gonna trace INTO this call. F8 traces INTO a call (push F8 when we on the call line) and we end up here:
xxxx:004039FC 53 PUSH EBX<--we land here
xxxx:004039FD 56 PUSH ESI
xxxx:004039FE 57 PUSH EDI
xxxx:004039FF 89C6 MOV ESI,EAX
xxxx:00403A01 89D7 MOV EDI,EDX
xxxx:00403A03 39D0 CMP EAX,EDX
xxxx:00403A05 0F848F000000 JZ 00403A9A
:end of quote
So, how can I break into this same place of the code:
xxxx:0042F4CA 8B45F0 MOV EAX,[EBP-10]
I've already tried different breakpoints, just doesn't break in any near this.
Is it possible to break like this: "BPX 0042F4CA"? At least it seems not, cos I've tried it several times with different options.
And i've already read some help-files for breakpoints...
Thanks in advance, help noob.
