# Guest write watch `GuestWriteWatch` is an optional diagnostic tool. It helps you find managed code and HLE code that damage guest memory. The tool starts only if you set one or more `SHARPEMU_WATCH_*` environment variables. The tool monitors writes through the SharpEmu managed virtual-memory APIs. It does not monitor stores that native guest code makes directly. Use a platform debugger or a hardware watchpoint to monitor these stores. ## Watch modes - `SHARPEMU_WATCH_WRITE=0x

` logs a write that overlaps the eight-byte block at the specified guest address. - `SHARPEMU_WATCH_POOL_HEADER=1` monitors the pointer at offset `0x40`. It monitors the first 64 direct mappings that have a size of 64 KiB and protection value `0xF2`. - `SHARPEMU_WATCH_VALUE_PATTERN=1` logs an eight-byte write if its lower 32 bits are `1`. The upper 32 bits must look like a small guest-pointer prefix. - `SHARPEMU_WATCH_VALUE1=1` logs short writes of value `1` in the high guest memory range. The tool logs a maximum of 128 entries for each process. - `SHARPEMU_WATCH_BULK_TORN=1` scans aligned 64-bit words in bulk writes. It finds damaged pointer patterns and byte-shifted pointer patterns. The tool logs a maximum of 64 entries for each process. - `SHARPEMU_WATCH_BULK_DEST_HI=0x` scans only writes that have the specified upper 32 bits in the destination address. For each match, the tool logs the destination address, the data pattern, and the managed call stack. The log uses the `watch_write` or `watch_bulk_torn` warning tag. Use these variables together to scan bulk writes in the `0x00000080xxxxxxxx` region. macOS and Linux: ```sh SHARPEMU_WATCH_BULK_TORN=1 \ SHARPEMU_WATCH_BULK_DEST_HI=0x80 \ SharpEmu /path/to/eboot.bin ``` Windows PowerShell: ```powershell $env:SHARPEMU_WATCH_BULK_TORN = "1" $env:SHARPEMU_WATCH_BULK_DEST_HI = "0x80" & .\SharpEmu.exe C:\path\to\game\eboot.bin ``` To reduce unnecessary log entries, use an exact `SHARPEMU_WATCH_WRITE` address from a crash dump.