Windows XP 32bit process dump not dumping modules

Question

glmcdona opened this issue 8 years ago · 2 comments

For some reason with the new Process Dump version no modules are being dumped. They are being found, but not dumped.

Attached the logfile 'pd.exe -system -verbose':
pd_log.txt

Answer 1 · 2016-09-19T16:42:21.000Z

As a note, the following command also fails to add any hashes to the clean db:
'pd -db genquick'

Answer 2 · 2016-09-21T03:44:13.000Z

Fixed this bug. Fixed a mistake in the get_mbi_info() function causing it to consider all regions unallocated for 32-bit MBI structures.