x64 Win10 DbgPrint driving me nuts

[Git]

I've developed the occasionally driver for many years, but this is the first time I've used Win10 as the development machine.

I can't see any DbgPrint() output

Nothing. I've tried the usual DebugView and also dbgMon. I've made the DEFAULT=0xFFFFFFFF registry fix I saw recommended. Still nothing. It may well be relevant that the Win10 machine is a VMWare guset OS.

Anybody point me at the obvious please?

Git

[nulli]

Did you run DebugView as admin and enable "Capture|Capture Kernel" and "Capture|Enable Verbose Kernel Output" menu items?

[Git]

I'm in the habit of running tools like that as admin, but I honsetly can't remember. Yes, Capture Kernel on, verbose tried on and off.

Later - admin mode didn't reakky make any difference. I am getting some entries in the lst, but none from my semi-working driver and it's very quiet in general compared to how I remember it.

Git

[atom0s]

Do you have any other tools swallowing the output before it hits the others you are watching? Any hooks in place to block the flow of those API as well?

[niculaita]

Originally Posted by Git

I've developed the occasionally driver for many years, but this is the first time I've used Win10 as the development machine.

I can't see any DbgPrint() output

Nothing. I've tried the usual DebugView and also dbgMon. I've made the DEFAULT=0xFFFFFFFF registry fix I saw recommended. Still nothing. It may well be relevant that the Win10 machine is a VMWare guset OS.

Anybody point me at the obvious please?

Git

I used hasp srm debuger sys with monitor on windows 10 x64 but works only if UAC is off

[Evilcry]

With DbgView remember also to add "Enable Verbose kernel output".

I had a few issues on W10 x64 because the dbgview driver was not running.

Here what I do:

Run DbgView as Admin
Set the various flags
At this point if it's not working I close and reopen it

don't know if it's your same issue but probably is worth a try

[Avalon]

If you have Visual Studio running, it will capture the debug output. Do you see any output in i.e. DbgView?

I assume you've verified the the regkey is:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Debug Print Filter "DEFAULT"WORD 0xF

Now during driver dev I often change the KdFilter away from DEFAULT to avoid spam from Windows and all other drivers. If you have windbg attached to the kernel of the guest in vmware what value does this give:

dd nt!Kd_DEFAULT_Mask