Softice ,GetSystemTime

When i use the breakpoint GetSystemTime ,to crack a program from a tutorial ,softice is pop ups again and again so i cannot do nothing ,why this is happening ? and something else ,the breakpoint bpx hmemcpy is not work and softice says symbol not defined (hmemcpy). thank you ! and sorry if my english is bad .

[taos]

Not only your debugged program use GetSystemTime, several programs running in your system use it so "pop ups again".
You must read the name of the program that break in the bpx and then close it.

If you are running a NT system, hmemcpy is not work.

I think you must read,read and read, and then use google.

i am using win xp so maybe that is the problem ?

ok i disable all the programs that was running in memory and now its ok . but .. when i use the breakpoint getsystemtime and then i run the program which i want to crack ,softice pop up but i cannot see the program at the green line .

[EDIT JMI: Don't answer your own posts. That's what the EDIT BUTTON is for.]

Originally Posted by panagiotis

i am using win xp so maybe that is the problem ?

have u tried bpx getlocaltime?

regards

[WhoCares]

Better use a disassembler to determine where to set the breakpoint. It may help you to find the exact place from the code jungle where time check is done.

hi just a short q?

i did know the address of the bpx, i want. but how come if i set bpx address it not break there. am using winxp + softice . but if i bpx getlocaltime first then bc it then bpx address, it breaks... on the address i want...

am quite new, thanks for any info or help regarding this.

regards

Hi

@armmad8: This sounds a bit strange. I have the following theory. You said, you bpx'ed a specific adress first. Now I don't know how you did it, but it could have happend that you added a breakpoint in the wrong process. If you just le SICE pop up, you are mostly in a system process or so. When you now bpx an adress you would set it in the system process.
As you breaked on getlocaltime first, I assume that you certainly were in the correct process (your app you want to reverse) and so the breakpoint was set correctly (in the right process + at the right place). So always make sre you put a breakpoint in the correct process

@General dicussion: The approach with GetLocalTime and GetSystemTime is not really nice, but well...if you really have to do it, don't even think about settin this breakpoints globally (this would keep you pretty busy for a few hours ). Let Softice break on the Enrypoint and do a

bpx.p GetSystemTime or bpx.p GetLocalTime

The bpx.p limits the breakpoint to the current process (which would be the process of the app you wanna reverse, if you break on the entrypoint) and makes your life easier

Greetings
Mav

I give it up . nothing going like the tutorial saids .

Just check what operating system the cracker used for the tutorial, as wel as the EXACT version number of the software.