Table A-1. Basic SoftICE commands
Command | Meaning |
---|---|
? | Evaluate expression |
A | Assemble code |
ADDR | Display/change address contents |
BC | Clear breakpoint |
BD | Disable breakpoint |
BE | Enable breakpoint |
BL | List current breakpoints |
BPE | Edit breakpoint |
BPT | Use breakpoint as a template |
BPM, BPMB, BPMW, BPMD | Breakpoint on memory access |
BPR | Breakpoint on memory range |
BPIO | Breakpoint on I/O port access |
BPINT | Breakpoint on interrupt |
BPX | Breakpoint on execution |
BPMSG | Breakpoint on Windows message |
C | Compare two data blocks |
CLASS | Display window class information |
D, DB, DW, DD, DS, DL, DT | Display memory |
DATA | Change data window |
E, EB, EW, ED, EL, ET | Edit memory |
EXIT | Exit |
F | Fill memory with data |
FORMAT | Change format of data window |
G | Go to address |
H | Help on specific function |
HBOOT | System boot (total reset) |
HERE | Go to current cursor line |
HWND | Display Windows handle information |
M | Move data |
MOD | Display Windows module list |
P | Step-skipping calls, interrupts, etc. |
R | Display/change register contents |
S | Search for data |
T | Single-step one instruction |
TASK | Display Windows task list |
THREAD | Display thread information |
U | Un-Assemblers instructions |
VER | SoftICE Version |
WATCH | Add watch |
WHAT | Identify the type of expression |
WMSG | Display Windows messages |
X | Return to host debugger or program |
Table A-2. Advanced SoftICE commands
Command | Meaning |
---|---|
CPU | Display CPU register information |
GDT | Display global descriptor table |
GENINT | Generate an interrupt |
HEAP | Display Windows global heap |
LHEAP | Display Windows local heap |
IDT | Display interrupt descriptor table |
I, IB, IW, ID | Input data from I/O port |
LDT | Display local descriptor table |
MAP32 | Display 32-bit section map |
MAPV86 | Display v86 memory map |
O, OB, OW, OD | Output data from I/O port |
PAGE | Display page table information |
PCI | Display PCI device information |
PEEK | Read from physical address |
PHYS | Display all virtual addresses for physical address |
POKE | Write to physical address |
PROC | Display process information |
QUERY | Display process virtual address space map |
TSS | Display task state segment |
STACK | Display call stack |
VCALL | Display VxD calls |
VM | Display virtual machine information |
VXD | Display Windows VxD map |
XFRAME | Display active exception frames |
Table A-4. Customization
Command | Meaning |
---|---|
ALTKEY | Set key sequence to invoke window |
ANSWER | Auto-answer and redirect console to modem |
CODE | Display instruction bytes in code window |
COLOR | Display/set screen colors |
DEX | Display/assign window data expression |
DIAL | Redirect console to modem |
FKEY | Display/set function keys |
LINES | Set/display number of lines on screen |
MACRO | Define a named macro command |
PAUSE | Control display scroll mode |
PRN | Set printer output port |
SERIAL | Redirect console |
TABS | Set/display tab setting |
The following are commands for working with breakpoints in SoftICE.
Table A-10. Breakpoint commands
Command | Meaning |
---|---|
BC # | Clear breakpoint |
BD # | Disable breakpoint |
BE # | Enable breakpoint |
BL | List breakpoints |
Useful breakpoints in SoftICE are as follows.
bpx hmemcpy
bpx MessageBox
bpx MessageBoxExA
bpx MessageBeep
bpx SendMessage
bpx GetDlgItemText
bpx GetDlgItemInt
bpx GetWindowText
bpx GetWindowWord
bpx GetWindowInt
bpx DialogBoxParamA
bpx CreateWindow
bpx CreateWindowEx
bpx ShowWindow
bpx UpdateWindow
bpx GetLocalTime
bpx GetFileTime
bpx GetSystemTime
bpx GetTickCount
bpx FileTimeToSystemTime
bpx GetPrivateProfileString
bpx GetPrivateProfileInt
bpx WritePrivateProfileString
bpx WritePrivateProfileInt