Breakpoints and events

ba

Set a hardware (debug-register) breakpoint.

ba [/1] [/p <pid>] [/t <tid|ethread>] [/c <processor>] [/w "<expr>"] <access><size> <address> [<passes>] [if <expr>] [do <commands>]

access: e=execute, r=read/write, w=write; size: 1,2,4,8 bytes (execute is 1). Not available on a dump or the memory backend. e.g. ba w4 nt!MyGlobal. In VTL1 (the .vtl 1 view or a vCPU stopped there) only ba e1 on GDB backends is accepted, and it is global: no /p or /t, which name NT processes and threads. e.g. .vtl 1; ba e1 securekernel!SkeSelectProcessAddressSpace; g

bc

Clear one or more breakpoints by ID.

bc <id|id-id|*>

bd

Disable one or more breakpoints by ID.

bd <id|id-id|*>

be

Enable one or more breakpoints by ID.

be <id|id-id|*>

bl

List all breakpoints.

bl

The status column reads e enabled, d disabled, or o owed (a kernel code breakpoint waiting for its page to become resident).

bm

Set deferred symbolic breakpoints for matching symbols.

bm [/1] [/p <pid>] [/t <tid|ethread>] [/c <processor>] [/w "<expr>"] <symbol-pattern> [<passes>] [if <expr>] [do <commands>]

bp

Set a breakpoint.

bp [/1] [/p <pid>] [/t <tid|ethread>] [/c <processor>] [/w "<expr>"] <address> [<passes>] [if <expr>] [do <commands>]

bpc

Update or clear a breakpoint condition.

bpc <id> <condition|clear>

bpp

Reset a breakpoint pass count.

bpp <id> <passes>

br

Renumber a breakpoint.

br <id> <newid>

bs

Set or clear a breakpoint command action.

bs <id> <commands|clear>

Also: bpa

bu

Set a deferred symbolic breakpoint.

bu [/1] [/p <pid>] [/t <tid|ethread>] [/c <processor>] [/w "<expr>"] <symbol> [<passes>] [if <expr>] [do <commands>]

sx

List configured exception policies.

sx or sxl

Also: sxl

sxd

Pass first-chance exceptions and break on second chance.

sxd [-c <commands>] [-f <break|gh|gn>] <exception-code|alias>

-c runs commands at the stop; -f explicitly selects the final break/handled/not-handled action.

sxe

Break when an exception occurs.

sxe [-c <commands>] [-f <break|gh|gn>] <exception-code|alias>

Current backends acknowledge module load/unload events internally; ld/ud policies are unavailable.

sxi

Pass exceptions without breaking or notification.

sxi [-c <commands>] [-f <break|gh|gn>] <exception-code|alias>

-c runs commands at the stop; -f explicitly selects the final break/handled/not-handled action.

sxn

Notify and pass exceptions without breaking.

sxn [-c <commands>] [-f <break|gh|gn>] <exception-code|alias>

-c runs commands at the stop; -f explicitly selects the final break/handled/not-handled action.

sxr

Reset exception policies to default break behavior.

sxr