---------------------------------------------------- Display Stacks ----------------------------------------------------

!list -t nt!_KTHREAD.ThreadListEntry.Flink -x ".thread /r /p /w @$extret; k; .effmach AMD64" poi(@$proc + @@C++(#FIELD_OFFSET(nt!_KPROCESS, ThreadListHead))) - @@C++(#FIELD_OFFSET(nt!_KTHREAD, ThreadListEntry))


------------------------------------------------------- Contact --------------------------------------------------------

www.andreybazhan.com
contact@andreybazhan.com
twitter.com/AndreyBazhan
ua.linkedin.com/in/andreybazhan
github.com/AndreyBazhan