When I try to set a breakpoint on HMEMCPY softice says Symbol not Defined. Some tutorials I am trying to complete use this breakpoint so I was wondering if anyone could help me out.

Have you removed the semi-colon from in front of the exp statements in winice.dat?
It should look something like:
EXP=c:\windows\system\kernel32.dll
EXP=c:\windows\system\user32.dll
EXP=c:\windows\system\gdi32.dll
EXP=C:\windows\system\vb40032.dll
EXP=C:\windows\system\msvbvm60.dll
EXP=c:\windows\system\advapi32.dll
EXP=c:\windows\system\comdlg32.dll
EXP=c:\windows\system\shell32.dll
Scally

HMEMCPY is only for Win9x/ME. It can't be found in WinNT/2K/XP.

Ok thanks, I have win2k so thats why it wasn't working. I got memcpy working so that must probably be the win2k version

Is MEMCPY working fine as a replacement to HMEMCPY

NO!

hi buddy

can someone tell me the equivalent of hmemcpy in Win NT/2K/XP.
i will be glad to know that

unfortunately there is no such equivalent due to the difference of kernel code.

Actually ANY appropriate API can be used as a breakpoint.

I know some guys relies heavily on this hmemcpy in Win9x, but they have to forget it in WinNT/2k/XP. There may be some pain when they move from Win9x to WinNT.

The best way is to learn Win32 API programming first, then they will know what are the appropriate breakpoints.

To learn Win32 API programming is to learn how your target works.

Am I right?

I wanted to crack a vb4 prog in w2k, but all the tutorials use hmemcpy. I tried memcpy and lots of other things. Nothing worked.

I solved everything by exporting vb40032.dll in winice.dat
Used softsnoop to check which API's to breakpoint
Then I bp'd all those rtc-functions.

Hey! At least it worked!

thanx Solomon
u r right

I'm just kind of wondering why some of you are using ArthaXerXes
avatar? It's kind of like using someone's nick. We also have someone using +Splaj's old avatar, but at least it's not his current one. Imitation is the highest form of flattery, but this goes against the grain some how. Just my 2 cents.

Avatar sharing is no prob for me. The fee is $10 per message

Hehehe , no one wants to use my new 'heads-up' avatar

BTW 1) whats hmemcpy ?

BTW 2) I am beginning to wonder wtf is going to happen to you guys without icedump vxd on XP ? no /tracex .....no hiding //./NTICE.... better start learning to patch the ntice.sys !

Spl/\j

Sorry?
I'm kind of new here, I just picked the first avatar offered...
Didn't know they were personal. Now I do. Didn't even know what it meant, besides "avenger" that is. I guess It's the little picture to the left. I'll remove it when I learn how to do that

So I'll have to make a picture I guess.

If you want to see how some 'avatars' really ah-erm 'enhance' a MB :-


h**p://board.iexbeta.com/

especially the flame section