Updated Release: PYKD 0.3.2.0 (фев 27, 2017)

Supported Python Version

• Python 2.7 x86/x64
• Python 3.5 x86/x64
• Python 3.6 x86/x64

Installation as a WinDBG extension with pykd bootstrapper

If you are going to run pykd in the windbg it is easiest way. Follow this link pykd bootstrapper 2.0 to install pykd bootstrapper and get started.

Python 3.0 support

Pykd bootstrapper 2.0 fully supports python 3.x. You can use 2.x and 3.x python both inside the same windbg session. You can install pykd from PyPi for python 3.5 and 3.6. For another 3.x pythons you need to build pykd manually.

Installation as a Python package with pip:

You can install pykd as a common python package with pip:

pip install pykd

Or upgrade existing version:

pip install pykd --upgrade

Pip documentation: https://pip.pypa.io
Pykd page on the PyPI: https://pypi.python.org/pypi/pykd

If pip can not install pykd from PyPI

Sometimes pip can not install packages from PyPi, for example due proxy with NTLM authorization. In this situation you can download a python wheel ( file with wlh extension ) and install it with pip locally:

pip install pykd-0.3.1.1-cp27-none-win32.whl

Manual Installation guide:

0. choose x86 or x64 and download it
1. unpack archive to any catalog
2. run windbg and load pykd:
.load path-to-pykd
3. to use pykd within python program add a path to pykd to the PYTHONPATH or via registry ( \SOFTWARE\Python\PythonCore\version\PythonPath )

Attention!!! Do not attempt to copy pykd.pyd of the 0.3.x version over 0.2.x . It will not work properly!

Where is an automatic installer?

We still have a problem with the installer (see https://pykd.codeplex.com/workitem/13172 ) and can not upload fixed version now.

Whats new

This release contains the clang 3.9.0 backend and can get typeInfo from source code.
Try this example:

from pykd import *

source_code =  '''
struct Struct
{
    int    field1;
    float  field2;
    char   field3[10];
};
'''
Struct = getTypeFromSource(source_code, "Struct")

print Struct

It consructs a typeInfo class instance wich can be used for typed access to the target memory. The next sample is a bit complex. If source code has a lot of types declarations it has a sense to compile a code once time and then use a result:

from pykd import *

source_code = '#include <windows.h>\r\n'

options = '-I\"C:/Program Files (x86)/Windows Kits/8.1/Include/um\" -I\"C:/Program Files (x86)/Windows Kits/8.1/Include/shared\" -w'

typeInfoProvider = getTypeInfoProviderFromSource(source_code, options)

print( typeInfoProvider.getTypeByName("tagPOINT") )

print( typeInfoProvider.getTypeByName("tagWNDCLASSA") )