--

ESTUDIO COLECTIVO DE DESPROTECCIONES
WKT Tutorialz Site
WKT
Mr.Brown Resumen de los Comandos del SoftIce Julio 1998

Comandos existentes en el SoftIce 3.22
 SETTING BREAK POINTS 
======================
BPM, BPMB, BPMW, BPMD
       - Breakpoint on memory access
BPR    - Breakpoint on memory range
BPIO   - Breakpoint on I/O port access
BPINT  - Breakpoint on interrupt
BPX    - Breakpoint on execution
BMSG   - Breakpoint on Windows message
BSTAT  - Breakpoint Statistics
CSIP   - Set CS:EIP range qualifier

 MANIPULATING BREAK POINTS 
===========================
BPE    - Edit breakpoint
BPT    - Use breakpoint as a template
BL     - List current breakpoints
BC     - Clear breakpoint
BD     - Disable breakpoint
BE     - Enable breakpoint
BH     - Breakpoint history

 DISPLAY/CHANGE MEMORY 
=======================
R      - Display/change register contents
U      - Un-assembles instructions
D, DB, DW, DD, DS, DL, DT
       - Display memory
E, EB, EW, ED, ES, EL, ET
       - Edit memory
PEEK   - Read from physical address
POKE   - Write to physical address
PAGEIN - Load a page into physical memory (note: not always safe)
H      - Help on the specified function
?      - Evaluate expression
VER    - SoftICE version
WATCH  - Add watch
FORMAT - Change format of data window
DATA   - Change data window

 DISPLAY SYSTEM INFORMATION 
============================
GDT    - Display global descriptor table
LDT    - Display local descriptor table
IDT    - Display interrupt descriptor Table
TSS    - Display task state segment
CPU    - Display cpu register information
PCI    - Display PCI device information
MOD    - Display windows module list
HEAP   - Display windows global heap
LHEAP  - Display windows local heap
VXD    - Display windows VxD map
TASK   - Display windows task list
VCALL  - Display VxD calls
WMSG   - Display windows messages
PAGE   - Display page table information
PHYS   - Display all virtual addresses for physical address
STACK  - Display call stack
XFRAME - Display active exception frames
MAPV86 - Display v86 memory map
HWND   - Display window handle information
CLASS  - Display window class information
VM     - Display virtual machine information
THREAD - Display thread information
ADDR   - Display/change address Contexts
MAP32  - Display 32 bit section map
PROC   - Display process information
QUERY  - Display a processes virtual address space map
WHAT   - Identify the type of an expression
OBJDIR - Display info about an object directory
DEVICE - Display info about a device
DRIVER - Display info about a driver
FOBJ   - Display info about a file object
IRP    - Display info about a IRP

 I/O PORT COMMANDS 
===================
I, IB, IW, ID
       - Input data from I/O port
O, OB, OW, OD
       - Output data to I/O port

 FLOW CONTROL COMMANDS 
=======================
X      - Return to host debugger or program
G      - Go to address
T      - Single step one instruction
P      - Step skipping calls, Int, etc.
HERE   - Go to current cursor line
EXIT   - Force an exit to current DOS/Windows program
GENINT - Generate an interrupt
HBOOT  - System boot (total reset)

 MODE CONTROL 
==============
I1HERE - Direct INT1 to SoftICE
I3HERE - Direct INT3 to SoftICE
ZAP    - Zap embedded INT1 or INT3
FAULTS - Enable/disable SoftICE fault trapping
SET    - Change an internal variable

 CUSTOMIZATION COMMANDS 
========================
PAUSE  - Controls display scroll mode
ALTKEY - Set key sequence to invoke window
FKEY   - Display/set function keys
DEX    - Display/assign window data expressions
CODE   - Display instruction bytes in code window
COLOR  - Display/set screen colors
ANSWER - Auto-answer and redirect console to modem
DIAL   - Redirect console to modem
SERIAL - Redirect console
TABS   - Set/display tab settings
LINES  - Set/display number of lines on screen
WIDTH  - Set/display number of columns on screen
PRN    - Set printer output port
PRINT-SCREEN key - Dump screen to printer
MACRO  - Define a named macro command

 UTILITY COMMANDS 
==================
A      - Assemble code
S      - Search for data
F      - Fill memory with data
M      - Move data
C      - Compare two data blocks

 LINE EDITOR KEY USAGE 
=======================
(Up)   - Recall previous command line
(Down) - Recall next command line
(Right)- Move cursor right
(Left) - Move cursor left
BKSP   - Back over last character
HOME   - Start of line
END    - End of line
INS    - Toggle insert mode
DEL    - Delete character
ESC    - Cancel current command

 SCROLLING KEY USAGE 
=====================
PageUp      - Display previous page of display history
PageDn      - Display next page of display history
Alt-(Up)    - Scroll data window down one line
Alt-(Down)  - Scroll data window up one line
Alt-PageUp  - Scroll data window down one page
Alt-PageDn  - Scroll data window up one page
Ctrl-PageUp - Scroll code window down one page
Ctrl-PageDn - Scroll code window up one page
Ctrl-(Up)   - Scroll code window down one line
Ctrl-(Down) - Scroll code window up one line

 WINDOW COMMANDS 
=================
WC     - Toggle code window
WD     - Toggle data window
WF     - Toggle floating point stack window
WL     - Toggle locals window
WR     - Toggle register window
WW     - Toggle watch window
EC     - Enable/disable code window
.      - Locate current instruction

 WINDOW CONTROL 
================
CLS    - Clear window
RS     - Restore program screen
ALTSCR - Change to alternate display
FLASH  - Restore screen during P and T

 SYMBOL/SOURCE COMMANDS 
========================
SYM    - Display symbols
SYMLOC - Relocate symbol base
EXP    - Display export symbols
SRC    - Toggle between source, mixed & code
TABLE  - Select/remove symbol table
FILE   - Change/display current source file
SS     - Search source module for string
TYPES  - List all types, or display type definition
LOCALS - Display locals currently in scope

 BACK TRACE COMMANDS 
=====================
SHOW   - Display from backtrace buffer
TRACE  - Enter back trace simulation mode
XT     - Step in trace simulation mode
XP     - Program step in trace simulation mode
XG     - Go to address in trace simulation mode
XRSET  - Reset back trace history buffer

 SPECIAL OPERATORS 
===================
.      - Preceding a decimal number specifies a line number
$      - Preceding an address specifies SEGMENT addressing
#      - Preceding an address specifies SELECTOR addressing
@      - Preceding an address specifies indirection