0

I installed dtrace on Windows 10, with this version:

C:\Users\xyz>dtrace -V
dtrace: Sun D 1.13.1

This command does not work:

C:\Users\xyz>dtrace -n "tick-3sec { trace(sizeof(nt`_GUID));exit(0);} "
dtrace: invalid probe specifier tick-3sec { trace(sizeof(nt`_GUID));exit(0);} : in action list: failed to resolve nt`_GUID: Unknown symbol name

Same problem with a struct _EPROCESS : Any declaration of a _EPROCESS variable fails. I tried from CMD and PowerShell resulting to the same error message.

However, D scripts with pointers to a struct _GUID run fine, for example a cast: (struct nt`_GUID *).

Idea, please ?

remi.chateauneu
  • 109
  • 2
  • 9

0 Answers0