ͻ
 WinICE-ScreenSHOT v1.1        (c) MARQUIS DE SOIRE                   07.93 
ͼ
                  *Breakpoint example inside WINICE-Code*                      
EAX=00001FA0   EBX=805A1A2C   ECX=000007E8   EDX=0010F300   ESI=838E8060       
EDI=00000000   EBP=80010D3C   ESP=80010BF0   EIP=80015587   o d i s Z a P c    
CS=0028   DS=0030   SS=0030   ES=122F   FS=122F   GS=0030                      
bytePROT(0)
0028:0000B172 C9 33 D2 B8 02 42 8B 1E-E8 01 CD 21 73 01 CC 58  .3...B.....!s..X
0028:0000B182 C3 E8 AB FF B4 3E CD 21-73 01 CC C6 06 B7 01 00  .....>.!s.......
0028:0000B192 90 C3 CC 75 FD 00 63 3A-5C 62 74 5C 74 5C 77 69  ...u..c:\bt\t\wi
0028:0000B1A2 63 65 73 68 6F 74 2E 74-78 74 00 00 00 00 00 00  ceshot.txt......
0028:0000B1B2 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00  ................
0028:0000B1C2 00 00 00 00 00 00 05 00-05 00 0D 0A 24 FE 0A 66  ............$..f
PROT32
0028:8001557F 2E803D3116048000  CMP     BYTE PTR CS:[80041631],00    *BPMB*    
0028:80015587 0F845D010000      JE      800156EA                               
0028:8001558D 2E803DAC39048000  CMP     BYTE PTR CS:[800439AC],00    *BPX*     
0028:80015595 0F844F010000      JE      800156EA                               
0028:8001559B 1E                PUSH    DS                                     
0028:8001559C 50                PUSH    EAX                                    
0028:8001559D 2E668E1D28530380  MOV     DS,CS:[80035328]                       
0028:800155A5 0F20D0            MOV     EAX,CR2                                
0028:800155A8 A375530380        MOV     [80035375],EAX                         
0028:800155AD 51                PUSH    ECX                                    
0028:800155AE 8B0D8D360480      MOV     ECX,[8004368D]                         
0028:800155B4 0BC9              OR      ECX,ECX                                
0028:800155B6 0F847A000000      JE      80015636                               
0028:800155BC A900000080        TEST    EAX,80000000                           
0028:800155C1 7473              JZ      80015636                               
0028:800155C3 2500F0FFFF        AND     EAX,FFFFF000                           
0028:800155C8 3B048D49360480    CMP     EAX,[80043649+4*ECX]                   
0028:800155CF E0F7              LOOPNZ  800155C8                               
0028:800155D1 7563              JNZ     80015636                               
0028:800155D3 833C8D6D360480FF  CMP     DWORD PTR [8004366D+4*ECX],-01         
0028:800155DB 7459              JZ      80015636                               
0028:800155DD 8B048D6D360480    MOV     EAX,[8004366D+4*ECX]                   
WINICE+166B
:u winice+166b  (but remember: not all BP will work as we all want...)
00)   BPX #0028:8001558D C=01                                                  
01)   BPMB #0028:80041631 RW DR3 C=01                                          
:g    (Start an application...)                                          
Break Due to BPMB #0028:80041631 RW DR3 C=01                                   

PS: Next time you maybe get "BPR" enabled...                                                                               

