winice.dat

Windows 2000-XPWinice.zip

PENTIUM=ON
NMI=ON
LOWERCASE=OFF
VERBOSE=OFF


SYM=512
HST=256
MACROS=64
DRAWSIZE=2048

INIT="Faults off;set font 2;lines 40;wd.1 1;dd;dex 1 eax;wd.2 1;dex 2 @esp;wd.3 2;dd;dex 3 ss:esp;wd.0 2;wc 28;code on;width 80;x;"


EXP=\SystemRoot\system32\NTDLL.DLL
EXP=\SystemRoot\system32\ADVAPI32.DLL

F1="h;"
F2="PAGEIN B ProcDump32 - Dumper Server; "
F3="^src;"
F4="^rs;"
F5="^x;"
F6="^ec;"
F7="^here;"
F8="^t;"
F9="^bpx;"
F10="^p;"
F11="^G @SS:ESP;"
F12="^p ret;"
SF3="^format;"
AF1="^wr;"
AF2="^wd;"
AF11="^dd dataaddr->0;"
AF12="^dd dataaddr->4;"
CF1="altscr off; lines 60; wc 32; wd 8;"
CF2="cls;^bc*;^bpx eip;^p ret;bl;"
CF3="^Set Mouse off;^Set Mouse on;"


MACRO argesp8  ="D esp->8 ; p ret "
MACRO argespc  ="D esp->c ; p ret "
MACRO argesp14 ="D ESP->14; p ret "
MACRO mon      ="Set Mouse on"
MACRO moff     ="Set Mouse off"
MACRO bpxgeta  ="bpx GetDlgItemTextA DO \"argespc\"; bpx GetWindowTextA DO \"argesp8\""
MACRO bpxgetw  ="bpx GetDlgItemTextW DO \"argespc\"; bpx GetWindowTextW DO \"argesp8\""
MACRO bpxma    ="bpx MessageBoxA ;bpx MessageBoxExA ;bpx MessageBeep DO \"p ret\""
MACRO bpxmw    ="bpx MessageBoxExW ;bpx MessageBeep DO \"p ret\""
MACRO bpxdiaa  ="bpx DialogBoxParamA ; bpx CreateWindowExA ; bpx ShowWindow "
MACRO bpxdiaw  ="bpx DialogBoxParamW ; bpx CreateWindowExW ; bpx ShowWindow "
MACRO bpxrega  ="bpx RegQueryValueExA IF *(ESP->8) == '%1' DO \" D ESP->14 \"" 
MACRO bpxregw  ="bpx RegQueryValueExW IF *(ESP->8) == '%1' DO \" D ESP->14 \"" 
MACRO regqva   ="BPX RegQueryValueExA IF(*(ESP->8)=='%1')||(*(ESP->8)=='%2')DO \"argesp14 \""  
MACRO regqvw   ="BPX RegQueryValueExW IF(*(ESP->8)=='%1')||(*(ESP->8)=='%2')DO \"D ESP->14 \""  
MACRO bpxpe    ="bpx LoadLibraryA DO \" D ESP->4 \"" 
MACRO bpxfi    ="bpx CreateFileA DO \" D ESP->4 \"" 
macro 1bpm     ="bpm %1 x do \"bc bpindex\" "       
MACRO foepa    ="bpx GetCommandLineA DO \"p ret\";bpx GetVersion DO \"p ret\";bpx GetModuleHandleA DO \"p ret\"; bpx GetStartupInfoA  DO \"p ret\""
MACRO foepw    ="bpx GetCommandLineW DO \"p ret\";bpx GetVersion DO \"p ret\";bpx GetModuleHandleW DO \"p ret\"; bpx GetStartupInfoW  DO \"p ret\""
MACRO vba="bpx msvbvm60!__vbastrcmp;bpx msvbvm60!__vbastrcomp; bpx msvbvm60!__vbaStrCopy; bpx msvbvm60!__vbaStrMove;bpx MultiByteToWideChar;"  
MACRO bpxseh   ="bpx KiUserExceptionDispatcher"       


MOUSE=ON
ECHOKEYS=OFF
NOLEDS=OFF
NOPAGE=OFF
PENTIUM=ON
THREADP=ON
SIWVIDRANGE=ON

MENU=Copy         ,   NMPD_COPY         , 0
MENU=Paste         ,    NMPD_PASTE         , 0
MENU=Copy&Paste      ,    NMPD_COPYANDPASTE   , 0
MENU=Display      ,    NMPD_DISPLAY      , 0
MENU=Un-Assemble   ,    NMPD_UNASSEMBLE      , 0
MENU=What         ,    NMPD_WHAT           , 0         
MENU=Prev         ,    NMPD_PREV           , 0         
MENU=Add Watch      ,    watch %cp%          , 0
MENU=Break On Text  ,   bpx %cp%            , 0
MENU=Reip          ,    r eip %cp%     , 0


; WINICE.DAT
; (SystemRoot\System32\Drivers\WINICE.DAT)
; for use with SoftICE for Windows NT (versions 3.0 and greater)
; 
; ***** Examples of export symbols that can be included *****
;	Change the path to the appropriate drive and directory
;以下的命令是SoftICE加载各个动态链接库，需要时将前面的分号去掉
;
;
; EXP=\SystemRoot\System32\hal.dll
; EXP=\SystemRoot\System32\ntoskrnl.exe
; EXP=\SystemRoot\System32\csrsrv.dll
; EXP=\SystemRoot\System32\basesrv.dll
; EXP=\SystemRoot\System32\winsrv.dll
; EXP=\SystemRoot\system32\VBRUN300.DLL
; EXP=\SystemRoot\system32\VB40032.DLL
; EXP=\SystemRoot\system32\msvbvm50.dll
; EXP=\SystemRoot\system32\msvbvm60.dll
;以下三条SoftICE默认是装载的
; EXP=\SystemRoot\system32\KERNEL32.DLL
; EXP=\SystemRoot\system32\USER32.DLL
; EXP=\SystemRoot\system32\GDI32.DLL