Working with typed information - it is main powerful feature of the pykd. There is a special class - 'typedVar' which exposes working with typed variable in "C style".
For example:
let MY_TYPE is structure with declaration:
For example:
let MY_TYPE is structure with declaration:
struct MY_TYPE {
int a;
char* b;
long arr[10];
};
This is a representation by pykd:var = typedVar( "MY_TYPE", address )
#you can work with field as in C code
print var.a + 10
print var.arr[0] + var.arr[2] + var.arr[3]
print loadCStr( var.b )
If you has installed full version, you can look through samples for working with typedVar. Simply type in the windbg '!py samples'