Rob,
Did you get an error log when you acquired the physical memory. If so,
look at what pages could not be acquired and compare that to the DTB of
the suspect process. Also, inspect the DTB physical page in the memory
"dump" using a hex editor and see if it looks like a DTB.
Regards,
George.