Hello!
I'am a newbie in using ollydbg.
in brief: what is the equivalent of "Hmemcpy" with ollydbg?
Thanks ++ in advance .

I make a tutirial of POINT HMEMCPY or POINT H in english for NT/2000/XP and is very similar a HMEMCPY of W98, if you read the old post the link for download is in the post.

Ricardo narvaja

Thank you a lot Ricrardo.i read it but where can i find this tutorial please?

i downloaded your Curso actualizado con programas de ejemplo (excelente)in site

http://www.hackemate.com.ar/cracking/ ("http://www.hackemate.com.ar/cracking/") but no funciona :errors in decompressing with winrar!!

You use Winrar up to 3 ? But all friends download good, i see.

Ricardo

you can download of my FTP

fxp://curso:curso@ricnar456.no-ip.org/

replace fxp for ftp and download .

user:curso
pass:curso

Ricardo

And in mi FTP is the rar of 40 megas in perfect state, and in a carpet NUEVO CURSO - TEORIAS you can download the tutes one only,the Punto H in english, for example.

Ricardo

This mirror work best

http://www.crackmanworld.com/~cracking/
("http://www.crackmanworld.com/~cracking/
")

Ricardo Narvaja

thanks Ricrado.with winrar 3.xx all work good.by the way the tuts are really intresting and there are no similar site in the net explaining ollydbg such yours.GRACIAS):

hello ricardo!
thanks for your lessons.in fact are very importants.yes amigo
bueno,concerning the hmemcpy with win 98 i tried to find it using the cruehead
crackme crue1.exe but no worked
i explain :
- i searched the "translatemessage Api" and i have breaked on it with log condition:MSG==201
assumed expession=MSG
on condition (ok)
debug:run
enter a keys & pressed ok
the crackme don't break at translatemessage
ok any way i tried an other crackme & in that case it breaks
so in brief what i did:
memory search
find my key yanos..
i set a break on it in acces read but a message of ollydbg is displayed saying me that break on memory acces whould freeze window!!!
i tried any way and don't care:
it breaks on a jump to translatemessage!? not on " REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS> " for exemple
ayuda me por favor Ricardo (help me)

PUNTO H o POINT H is only for NT/2000 y XP look my first post

I wrote:

I make a tutirial of POINT HMEMCPY or POINT H in english for NT/2000/XP and is very similar a HMEMCPY of W98, if you read the old post the link for download is in the post.

Ricardo narvaja

thanks recardo!
Then with win 98 is very dificult to find hmemcpy or impossible ?
thanks ricnar again.

In ollydbg in W98 impossible

If you want hmemcpy in 98 use softice.

Ricardo

well you can try to use conditional pause with runtrace with stepping into calls

stops at dll code i did it some times successfully in w98

but other wise w98 does not let you bpt dlls and it renders f7 useless

just steps over the calls

oops i registerd and runtrace with step into calls short cut is
ctrl+f11
and set condition in debug menu

thanks for all !
can anyone may explain all what 'OH ME ANON'(member) sayed with any exemple ?
thanks!

Thanks for the great tuts ricardo ive learned much from them and they give me new experience.