Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
Here we show a technique suggested by a reader of DumpAnalysis.org (Yuhong Bao): to use .thread WinDbg command with /w option. We found additional necessary steps when playing with a test complete memory dump from x64 Windows Server 2003 SP2:
0. Find a 32-bit process of interest: