Pavel Yosifovich

icon indicating a website link https://scorpiosoftware.net icon indicating an email [email protected]

icon company Trainsec.net icon location United States icon location Windows Internals expert, author, and trainer. Teaching system programming & debugging at TrainSec. Check out my books & courses!

Results 145 comments of Pavel Yosifovich

Missing zombie at some point

Well, ObjExp is not perfect here :) The way it works is by finding handles to processes that are dead. However, even if there are zero handles, the object may...

Exports Parse Fault

Will check, thanks!

Exports Parse Fault

Can you share which binary caused a fault?

Exports Parse Fault

I don't get any exception. Are you sure you are using the latest release? I just updated in the releases to v2.03. This was also available under the AllTools repo.

Exports Parse Fault

Will look into it, very weird, as these are supposed to be formatted as numbers.

About nloader

Good to know!

Copy Remote URL

I'll do my best to add these.

Pls give ability to copy PDB entries from the table

I'm afraid I'm no longer maintaining this repo.

Save and Save as do not seem to be working

Yes, it's not implemented yet. I'll add to my todo list :)

can etw file event support correlating filepath?

Yes, it's possible, by correlating the file unique key... but it requires work, which I didn't get around to yet :) But I'm happy to receive PRs...