---------------------------------------------------- Display Stacks ---------------------------------------------------- !list -t nt!_KTHREAD.ThreadListEntry.Flink -x ".thread /r /p /w @$extret; k; .effmach AMD64" poi(@$proc + @@C++(#FIELD_OFFSET(nt!_KPROCESS, ThreadListHead))) - @@C++(#FIELD_OFFSET(nt!_KTHREAD, ThreadListEntry)) ------------------------------------------------------- Contact -------------------------------------------------------- www.andreybazhan.com contact@andreybazhan.com twitter.com/AndreyBazhan ua.linkedin.com/in/andreybazhan github.com/AndreyBazhan