Debugging Commands

# (comment in batch scripts)

? (evaluate and execute expressions and scripts in debuggee)

~ (display and change the current operating core)

load (load the kernel modules)

unload (unload the kernel modules)

status (show the debuggee status)

events (show and modify active/disabled events)

p (step-over)

t (step-in)

i (instrumentation step-in)

gu (step-out or go up)

r (read or modify registers)

bp (set breakpoint)

bl (list breakpoints)

be (enable breakpoints)

bd (disable breakpoints)

bc (clear and remove breakpoints)

g (continue debuggee or processing kernel packets)

x (examine symbols and find functions and variables address)

db, dc, dd, dq (read virtual memory)

eb, ed, eq (edit virtual memory)

sb, sd, sq (search virtual memory)

u, u64, u2, u32 (disassemble virtual address)

k, kd, kq (display stack backtrace)

dt (display and map virtual memory to structures)

struct (make structures, enums, data types from symbols)

sleep (wait for specific time in the .script command)

pause (break to the debugger and pause processing kernel packets)

print (evaluate and print expression in debuggee)

lm (view loaded modules)

cpu (check cpu supported technologies)

rdmsr (read model-specific register)

wrmsr (write model-specific register)

flush (remove pending kernel buffers and messages)

prealloc (reserve pre-allocated pools)

output (create output source for event forwarding)

test (test functionalities)

settings (configures different options and preferences)

exit (exit from the debugger)