dx -r2 -g Debugger.Utility.Collections.FromListEntry(*(nt!_LIST_ENTRY*)&nt!HandleTableListHead, "nt!_HANDLE_TABLE", "HandleTableList").Where(h => h.QuotaProcess != 0).Select( p => new { EPROCESS = p.QuotaProcess, KPROCESS = p.QuotaProcess->Pcb, ImageName = ((char*)(p.QuotaProcess->ImageFileName)).ToDisplayString("s"), ProcessId = p.QuotaProcess->UniqueProcessId})
