Security Warrior

Appendix A. Useful SoftICE Commands and Breakpoints

SoftICE Commands

Table A-1. Basic SoftICE commands

Command	Meaning
?	Evaluate expression
A	Assemble code
ADDR	Display/change address contents
BC	Clear breakpoint
BD	Disable breakpoint
BE	Enable breakpoint
BL	List current breakpoints
BPE	Edit breakpoint
BPT	Use breakpoint as a template
BPM, BPMB, BPMW, BPMD	Breakpoint on memory access
BPR	Breakpoint on memory range
BPIO	Breakpoint on I/O port access
BPINT	Breakpoint on interrupt
BPX	Breakpoint on execution
BPMSG	Breakpoint on Windows message
C	Compare two data blocks
CLASS	Display window class information
D, DB, DW, DD, DS, DL, DT	Display memory
DATA	Change data window
E, EB, EW, ED, EL, ET	Edit memory
EXIT	Exit
F	Fill memory with data
FORMAT	Change format of data window
G	Go to address
H	Help on specific function
HBOOT	System boot (total reset)
HERE	Go to current cursor line
HWND	Display Windows handle information
M	Move data
MOD	Display Windows module list
P	Step-skipping calls, interrupts, etc.
R	Display/change register contents
S	Search for data
T	Single-step one instruction
TASK	Display Windows task list
THREAD	Display thread information
U	Un-Assemblers instructions
VER	SoftICE Version
WATCH	Add watch
WHAT	Identify the type of expression
WMSG	Display Windows messages
X	Return to host debugger or program

Table A-2. Advanced SoftICE commands

Command	Meaning
CPU	Display CPU register information
GDT	Display global descriptor table
GENINT	Generate an interrupt
HEAP	Display Windows global heap
LHEAP	Display Windows local heap
IDT	Display interrupt descriptor table
I, IB, IW, ID	Input ...