I've written a three part series in MSDN Magazine that covers the Debugging API (specifically, DbgEng). Writing a Debugging Tools for Windows Extension - Part 1 - March 2011 Covers the build environment and the basics of Output, reading Memory...

A Traditional Linked List At some point in every developer’s life, you’ll have to write some code that works with a Linked List. You’ll start by making a structure like this: typedef struct { ULONG64 ulStartAddress; ULONG64 ulEndAddress;...

One of my debugger extensions commands uses IDebugDataSpaces2::QueryVirtual to iterate through the target’s address space to find particular size allocations (regions that are used for the TEB if you must know).  The code was working fine but on...

To save a symbol lookup in a debugger extension, here are the hardcodes to use for StackBase and StackLimit. User Mode 32bit 0:000> dt nt!_TEB.Stack* ntdll!_TEB +0x000 NtTib : +0x004 StackBase : Ptr Void +0x008 StackLimit : Ptr Void...