Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in / Register
pykd pykd
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 19
    • Issues 19
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge requests 0
    • Merge requests 0
  • Operations
    • Operations
    • Incidents
  • Analytics
    • Analytics
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • pykd
  • pykdpykd
  • Wiki
  • 0.3.4.3

Last edited by ussrhero Jan 12, 2019
Page history

0.3.4.3

Installation wheel packagies

pykd-0.3.4.3-cp27-none-win32.whl

pykd-0.3.4.3-cp27-none-win_amd64.whl

pykd-0.3.4.3-cp35-none-win32.whl

pykd-0.3.4.3-cp35-none-win_amd64.whl

pykd-0.3.4.3-cp36-none-win32.whl

pykd-0.3.4.3-cp36-none-win_amd64.whl

pykd-0.3.4.3-cp37-none-win32.whl

pykd-0.3.4.3-cp37-none-win_amd64.whl

Debug symbols

pykd-0.3.4.3-symbols.zip

What's new

  • evalExpr routine ( Evaluate C++ expression with typed information )
  • addSyntheticModule, removeSyntheticModule routines ( Synthetic module support )
  • special method __contains__ for typedVar, typeInfo, module classes ( support for 'in' operator )

Samples

evalExpr

'Ordinal' expression evaluator works like '?' or '??' command and returns integer value:

>>> expr("2+2")
4

evalExpr returns typedVar instance

>>> evalExpr("2+2")
<pykd.typedVar object at 0x0000017328024A58>
>>> print( evalExpr("2+2") )
Int4B at cached data Value: 0x4 (4)

evalExpr can use custom variable scope:

>>> scope = { 'a' : 10, 'b' : -10 }
>>> print( evalExpr('a * b', scope ) )
Int4B at cached data Value: 0xffffff9c (-100)

__contain__ ( 'in' operation support for typeInfo, typedVar, module )

>>> PEB = typeInfo("ntdll!_PEB")
>>> hasattr(PEB, 'CloudFileFlags')
True
>>> 'CloudFileFlags' in PEB
True
>>> 'CloudFileFlagsXXX' in PEB
False

Synthetic modules

addSyntheticModule(baseOffset, 0x10000, "MySynModule")
removeSyntheticModule(baseOffset)
Clone repository
  • 0.3.3.1
  • 0.3.3.2
  • 0.3.3.3
  • 0.3.3.4
  • 0.3.4.0
  • 0.3.4.1
  • 0.3.4.10
  • 0.3.4.11
  • 0.3.4.12
  • 0.3.4.13
  • 0.3.4.14
  • 0.3.4.15
  • 0.3.4.2
  • 0.3.4.3
  • 0.3.4.4
View All Pages