ESTUDIO COLECTIVO DE DESPROTECCIONES
Última Actualizacion: 25/10/2001

Título Resumen de los Comandos del SoftIce
Tipo de Tutorial [X]Original, []Adaptación, []Aplicación, []Traducción
Cracker Mr.Brown
Grupo Whiskey Kon Tekila
Fecha 15 de Julio de 1998

Comandos existentes en el SoftIce v3.22

 SETTING BREAK POINTS 

======================

BPM, BPMB, BPMW, BPMD

       - Breakpoint on memory access

BPR    - Breakpoint on memory range

BPIO   - Breakpoint on I/O port access

BPINT  - Breakpoint on interrupt

BPX    - Breakpoint on execution

BMSG   - Breakpoint on Windows message

BSTAT  - Breakpoint Statistics

CSIP   - Set CS:EIP range qualifier



 MANIPULATING BREAK POINTS 

===========================

BPE    - Edit breakpoint

BPT    - Use breakpoint as a template

BL     - List current breakpoints

BC     - Clear breakpoint

BD     - Disable breakpoint

BE     - Enable breakpoint

BH     - Breakpoint history



 DISPLAY/CHANGE MEMORY 

=======================

R      - Display/change register contents

U      - Un-assembles instructions

D, DB, DW, DD, DS, DL, DT

       - Display memory

E, EB, EW, ED, ES, EL, ET

       - Edit memory

PEEK   - Read from physical address

POKE   - Write to physical address

PAGEIN - Load a page into physical memory (note: not always safe)

H      - Help on the specified function

?      - Evaluate expression

VER    - SoftICE version

WATCH  - Add watch

FORMAT - Change format of data window

DATA   - Change data window



 DISPLAY SYSTEM INFORMATION 

============================

GDT    - Display global descriptor table

LDT    - Display local descriptor table

IDT    - Display interrupt descriptor Table

TSS    - Display task state segment

CPU    - Display cpu register information

PCI    - Display PCI device information

MOD    - Display windows module list

HEAP   - Display windows global heap

LHEAP  - Display windows local heap

VXD    - Display windows VxD map

TASK   - Display windows task list

VCALL  - Display VxD calls

WMSG   - Display windows messages

PAGE   - Display page table information

PHYS   - Display all virtual addresses for physical address

STACK  - Display call stack

XFRAME - Display active exception frames

MAPV86 - Display v86 memory map

HWND   - Display window handle information

CLASS  - Display window class information

VM     - Display virtual machine information

THREAD - Display thread information

ADDR   - Display/change address Contexts

MAP32  - Display 32 bit section map

PROC   - Display process information

QUERY  - Display a processes virtual address space map

WHAT   - Identify the type of an expression

OBJDIR - Display info about an object directory

DEVICE - Display info about a device

DRIVER - Display info about a driver

FOBJ   - Display info about a file object

IRP    - Display info about a IRP



 I/O PORT COMMANDS 

===================

I, IB, IW, ID

       - Input data from I/O port

O, OB, OW, OD

       - Output data to I/O port



 FLOW CONTROL COMMANDS 

=======================

X      - Return to host debugger or program

G      - Go to address

T      - Single step one instruction

P      - Step skipping calls, Int, etc.

HERE   - Go to current cursor line

EXIT   - Force an exit to current DOS/Windows program

GENINT - Generate an interrupt

HBOOT  - System boot (total reset)



 MODE CONTROL 

==============

I1HERE - Direct INT1 to SoftICE

I3HERE - Direct INT3 to SoftICE

ZAP    - Zap embedded INT1 or INT3

FAULTS - Enable/disable SoftICE fault trapping

SET    - Change an internal variable



 CUSTOMIZATION COMMANDS 

========================

PAUSE  - Controls display scroll mode

ALTKEY - Set key sequence to invoke window

FKEY   - Display/set function keys

DEX    - Display/assign window data expressions

CODE   - Display instruction bytes in code window

COLOR  - Display/set screen colors

ANSWER - Auto-answer and redirect console to modem

DIAL   - Redirect console to modem

SERIAL - Redirect console

TABS   - Set/display tab settings

LINES  - Set/display number of lines on screen

WIDTH  - Set/display number of columns on screen

PRN    - Set printer output port

PRINT-SCREEN key - Dump screen to printer

MACRO  - Define a named macro command



 UTILITY COMMANDS 

==================

A      - Assemble code

S      - Search for data

F      - Fill memory with data

M      - Move data

C      - Compare two data blocks



 LINE EDITOR KEY USAGE 

=======================

(Up)   - Recall previous command line

(Down) - Recall next command line

(Right)- Move cursor right

(Left) - Move cursor left

BKSP   - Back over last character

HOME   - Start of line

END    - End of line

INS    - Toggle insert mode

DEL    - Delete character

ESC    - Cancel current command



 SCROLLING KEY USAGE 

=====================

PageUp      - Display previous page of display history

PageDn      - Display next page of display history

Alt-(Up)    - Scroll data window down one line

Alt-(Down)  - Scroll data window up one line

Alt-PageUp  - Scroll data window down one page

Alt-PageDn  - Scroll data window up one page

Ctrl-PageUp - Scroll code window down one page

Ctrl-PageDn - Scroll code window up one page

Ctrl-(Up)   - Scroll code window down one line

Ctrl-(Down) - Scroll code window up one line



 WINDOW COMMANDS 

=================

WC     - Toggle code window

WD     - Toggle data window

WF     - Toggle floating point stack window

WL     - Toggle locals window

WR     - Toggle register window

WW     - Toggle watch window

EC     - Enable/disable code window

.      - Locate current instruction



 WINDOW CONTROL 

================

CLS    - Clear window

RS     - Restore program screen

ALTSCR - Change to alternate display

FLASH  - Restore screen during P and T



 SYMBOL/SOURCE COMMANDS 

========================

SYM    - Display symbols

SYMLOC - Relocate symbol base

EXP    - Display export symbols

SRC    - Toggle between source, mixed & code

TABLE  - Select/remove symbol table

FILE   - Change/display current source file

SS     - Search source module for string

TYPES  - List all types, or display type definition

LOCALS - Display locals currently in scope



 BACK TRACE COMMANDS 

=====================

SHOW   - Display from backtrace buffer

TRACE  - Enter back trace simulation mode

XT     - Step in trace simulation mode

XP     - Program step in trace simulation mode

XG     - Go to address in trace simulation mode

XRSET  - Reset back trace history buffer



 SPECIAL OPERATORS 

===================

.      - Preceding a decimal number specifies a line number

$      - Preceding an address specifies SEGMENT addressing

#      - Preceding an address specifies SELECTOR addressing

@      - Preceding an address specifies indirection

[ Entrada | Documentos Genéricos | WkT! Web Site ]
[ Todo el ECD | x Tipo de Protección | x Fecha de Publicación | x Orden Alfabético ]
(c) Whiskey Kon Tekila [WkT!] - The Original Spanish Reversers.
Si necesitas contactar con
nosotros , lee esto antes e infórmate de cómo puedes ayudarnos