feat(kd): callbacks/ssdt/vad commands for rootkit and VAD inspection

feat(rerun): re-spawn last exe with optional new args

feat(wt): WinDbg-style watch & trace through current function

feat(asm): assemble and patch x86/x64 instructions via Keystone

feat(analyze): WinDbg-style !analyze for the most recent stop

fix(symbols): chase PE forwarder chains during export cache load

feat(return): force-return from current function with optional rax value

feat(call): invoke arbitrary functions in the debuggee with typed args

feat(ftrace): bulk function tracing with glob expansion + forwarder chasing

feat(catch): catch exception <name|code> for first-chance SEH

fix(run): parse quoted Windows paths via shlex

feat: xref — find direct call/jmp xrefs to an address

feat: ntcalls — runtime NT syscall #/name resolver

feat: Win32 API prototype DB for call-site arg display

feat: syscalls — bulk-trace ntdll!Nt* exports via auto-continuing BPs