View Array Type in dnSpy

Question

I'm debugging a .NET application and see a declaration of a local array:

$ArrayType$$$BY05PAD $ArrayType$$$BY05PAD;

I break on an instruction that uses data inside that (char*) array:

num9 = <Module>.strtoul(*(ref $ArrayType$$$BY05PAD + 4), null, 10);

Before the call to strtoul, I want to show in a hex editor the contents of *(ref $ArrayType$$$BY05PAD + 4), but this is not a valid expression in the watch window and it doesn't appear as a local variable. How can I inspect raw field memory?

Answer 1

Those are identified as raw locals. You can enable their visibility by going to Options in Debug menu.

After that you will be able to see those elements in the locals window.

And from there you can right click on it and select Show in Memory Window -> Memory 1

and analyze the data:

But that's not the end of our work. Those are just the pointers so our array contains such addresses (little-endian):

[0x610245D4,0x610245D7,0x610245DA,0x610245DD,0x610245E0]

So if your example tries to access offset +4 it will get the second address and if we navigate there in the Memory window we will see the strings there that will be passed to strtoul method