HyperDbg's SDK IOCTL codes. More...

Macros
#define	CTL_CODE(DeviceType, Function, Method, Access)

#define	FILE_ANY_ACCESS 0

#define	METHOD_BUFFERED 0

#define	FILE_DEVICE_UNKNOWN 0x00000022

#define	IOCTL_REGISTER_EVENT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x800, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, register a new event

#define	IOCTL_RETURN_IRP_PENDING_PACKETS_AND_DISALLOW_IOCTL CTL_CODE(FILE_DEVICE_UNKNOWN, 0x801, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, irp pending mechanism for reading from message tracing buffers

#define	IOCTL_TERMINATE_VMX CTL_CODE(FILE_DEVICE_UNKNOWN, 0x802, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to terminate vmx and exit form debugger

#define	IOCTL_DEBUGGER_READ_MEMORY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x803, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to read memory

#define	IOCTL_DEBUGGER_READ_OR_WRITE_MSR CTL_CODE(FILE_DEVICE_UNKNOWN, 0x804, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to read or write on a special MSR

#define	IOCTL_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x805, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to read page table entries

#define	IOCTL_DEBUGGER_REGISTER_EVENT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x806, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, register an event

#define	IOCTL_DEBUGGER_ADD_ACTION_TO_EVENT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x807, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, add action to event

#define	IOCTL_DEBUGGER_HIDE_AND_UNHIDE_TO_TRANSPARENT_THE_DEBUGGER CTL_CODE(FILE_DEVICE_UNKNOWN, 0x808, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to enable or disable transparent-mode

#define	IOCTL_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x809, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, for !va2pa and !pa2va commands

#define	IOCTL_DEBUGGER_EDIT_MEMORY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80a, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to edit virtual and physical memory

#define	IOCTL_DEBUGGER_SEARCH_MEMORY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80b, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to search virtual and physical memory

#define	IOCTL_DEBUGGER_MODIFY_EVENTS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80c, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to modify an event (enable/disable/clear)

#define	IOCTL_DEBUGGER_FLUSH_LOGGING_BUFFERS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80d, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, flush the kernel buffers

#define	IOCTL_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80e, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, attach or detach user-mode processes

#define	IOCTL_DEBUGGER_PRINT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80f, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, print states (Deprecated)

#define	IOCTL_PREPARE_DEBUGGEE CTL_CODE(FILE_DEVICE_UNKNOWN, 0x810, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, prepare debuggee

#define	IOCTL_PAUSE_PACKET_RECEIVED CTL_CODE(FILE_DEVICE_UNKNOWN, 0x811, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, pause and halt the system

#define	IOCTL_SEND_SIGNAL_EXECUTION_IN_DEBUGGEE_FINISHED CTL_CODE(FILE_DEVICE_UNKNOWN, 0x812, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, send a signal that execution of command finished

#define	IOCTL_SEND_USERMODE_MESSAGES_TO_DEBUGGER CTL_CODE(FILE_DEVICE_UNKNOWN, 0x813, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, send user-mode messages to the debugger

#define	IOCTL_SEND_GENERAL_BUFFER_FROM_DEBUGGEE_TO_DEBUGGER CTL_CODE(FILE_DEVICE_UNKNOWN, 0x814, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, send general buffer from debuggee to debugger

#define	IOCTL_PERFROM_KERNEL_SIDE_TESTS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x815, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to perform kernel-side tests

#define	IOCTL_RESERVE_PRE_ALLOCATED_POOLS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x816, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to reserve pre-allocated pools

#define	IOCTL_SEND_USER_DEBUGGER_COMMANDS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x817, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to send user debugger commands

#define	IOCTL_GET_DETAIL_OF_ACTIVE_THREADS_AND_PROCESSES CTL_CODE(FILE_DEVICE_UNKNOWN, 0x818, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to get active threads/processes that are debugging

#define	IOCTL_GET_USER_MODE_MODULE_DETAILS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x819, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to get user mode modules details

#define	IOCTL_QUERY_COUNT_OF_ACTIVE_PROCESSES_OR_THREADS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81a, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, query count of active threads or processes

#define	IOCTL_GET_LIST_OF_THREADS_AND_PROCESSES CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81b, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to get list threads/processes

#define	IOCTL_QUERY_CURRENT_PROCESS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81c, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, query the current process details

#define	IOCTL_QUERY_CURRENT_THREAD CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81d, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, query the current thread details

#define	IOCTL_REQUEST_REV_MACHINE_SERVICE CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81e, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request service from the reversing machine

#define	IOCTL_DEBUGGER_BRING_PAGES_IN CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81f, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, request to bring pages in

#define	IOCTL_PREACTIVATE_FUNCTIONALITY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x820, METHOD_BUFFERED, FILE_ANY_ACCESS)
	ioctl, to preactivate a functionality

Detailed Description

HyperDbg's SDK IOCTL codes.

Author: Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

This file contains definitions of IOCTLs used in HyperDbg

Version: 0.2

Date: 2022-06-24

Copyright: This project is released under the GNU Public License v3.

Macro Definition Documentation

◆ CTL_CODE

#define CTL_CODE	(	DeviceType,
		Function,
		Method,
		Access )

Value:

( \

((DeviceType) << 16) | ((Access) << 14) | ((Function) << 2) | (Method))

29# define CTL_CODE(DeviceType, Function, Method, Access) ( \

30 ((DeviceType) << 16) | ((Access) << 14) | ((Function) << 2) | (Method))

◆ FILE_ANY_ACCESS

#define FILE_ANY_ACCESS 0

◆ FILE_DEVICE_UNKNOWN

#define FILE_DEVICE_UNKNOWN 0x00000022

◆ IOCTL_DEBUGGER_ADD_ACTION_TO_EVENT

#define IOCTL_DEBUGGER_ADD_ACTION_TO_EVENT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x807, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, add action to event

113#define IOCTL_DEBUGGER_ADD_ACTION_TO_EVENT \

114 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x807, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS

#define IOCTL_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80e, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, attach or detach user-mode processes

162#define IOCTL_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS \

163 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80e, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_BRING_PAGES_IN

#define IOCTL_DEBUGGER_BRING_PAGES_IN CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81f, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to bring pages in

282#define IOCTL_DEBUGGER_BRING_PAGES_IN \

283 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81f, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_EDIT_MEMORY

#define IOCTL_DEBUGGER_EDIT_MEMORY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80a, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to edit virtual and physical memory

134#define IOCTL_DEBUGGER_EDIT_MEMORY \

135 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80a, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_FLUSH_LOGGING_BUFFERS

#define IOCTL_DEBUGGER_FLUSH_LOGGING_BUFFERS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80d, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, flush the kernel buffers

155#define IOCTL_DEBUGGER_FLUSH_LOGGING_BUFFERS \

156 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80d, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_HIDE_AND_UNHIDE_TO_TRANSPARENT_THE_DEBUGGER

#define IOCTL_DEBUGGER_HIDE_AND_UNHIDE_TO_TRANSPARENT_THE_DEBUGGER CTL_CODE(FILE_DEVICE_UNKNOWN, 0x808, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to enable or disable transparent-mode

120#define IOCTL_DEBUGGER_HIDE_AND_UNHIDE_TO_TRANSPARENT_THE_DEBUGGER \

121 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x808, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_MODIFY_EVENTS

#define IOCTL_DEBUGGER_MODIFY_EVENTS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80c, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to modify an event (enable/disable/clear)

148#define IOCTL_DEBUGGER_MODIFY_EVENTS \

149 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80c, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_PRINT

#define IOCTL_DEBUGGER_PRINT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80f, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, print states (Deprecated)

170#define IOCTL_DEBUGGER_PRINT \

171 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80f, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_READ_MEMORY

#define IOCTL_DEBUGGER_READ_MEMORY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x803, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to read memory

85#define IOCTL_DEBUGGER_READ_MEMORY \

86 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x803, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_READ_OR_WRITE_MSR

#define IOCTL_DEBUGGER_READ_OR_WRITE_MSR CTL_CODE(FILE_DEVICE_UNKNOWN, 0x804, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to read or write on a special MSR

92#define IOCTL_DEBUGGER_READ_OR_WRITE_MSR \

93 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x804, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS

#define IOCTL_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x805, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to read page table entries

99#define IOCTL_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS \

100 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x805, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_REGISTER_EVENT

#define IOCTL_DEBUGGER_REGISTER_EVENT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x806, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, register an event

106#define IOCTL_DEBUGGER_REGISTER_EVENT \

107 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x806, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_SEARCH_MEMORY

#define IOCTL_DEBUGGER_SEARCH_MEMORY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80b, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request to search virtual and physical memory

141#define IOCTL_DEBUGGER_SEARCH_MEMORY \

142 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x80b, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS

#define IOCTL_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x809, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, for !va2pa and !pa2va commands

127#define IOCTL_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS \

128 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x809, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_GET_DETAIL_OF_ACTIVE_THREADS_AND_PROCESSES

#define IOCTL_GET_DETAIL_OF_ACTIVE_THREADS_AND_PROCESSES CTL_CODE(FILE_DEVICE_UNKNOWN, 0x818, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to get active threads/processes that are debugging

233#define IOCTL_GET_DETAIL_OF_ACTIVE_THREADS_AND_PROCESSES \

234 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x818, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_GET_LIST_OF_THREADS_AND_PROCESSES

#define IOCTL_GET_LIST_OF_THREADS_AND_PROCESSES CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81b, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to get list threads/processes

254#define IOCTL_GET_LIST_OF_THREADS_AND_PROCESSES \

255 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81b, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_GET_USER_MODE_MODULE_DETAILS

#define IOCTL_GET_USER_MODE_MODULE_DETAILS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x819, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to get user mode modules details

240#define IOCTL_GET_USER_MODE_MODULE_DETAILS \

241 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x819, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_PAUSE_PACKET_RECEIVED

#define IOCTL_PAUSE_PACKET_RECEIVED CTL_CODE(FILE_DEVICE_UNKNOWN, 0x811, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, pause and halt the system

184#define IOCTL_PAUSE_PACKET_RECEIVED \

185 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x811, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_PERFROM_KERNEL_SIDE_TESTS

#define IOCTL_PERFROM_KERNEL_SIDE_TESTS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x815, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to perform kernel-side tests

212#define IOCTL_PERFROM_KERNEL_SIDE_TESTS \

213 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x815, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_PREACTIVATE_FUNCTIONALITY

#define IOCTL_PREACTIVATE_FUNCTIONALITY CTL_CODE(FILE_DEVICE_UNKNOWN, 0x820, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to preactivate a functionality

289#define IOCTL_PREACTIVATE_FUNCTIONALITY \

290 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x820, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_PREPARE_DEBUGGEE

#define IOCTL_PREPARE_DEBUGGEE CTL_CODE(FILE_DEVICE_UNKNOWN, 0x810, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, prepare debuggee

177#define IOCTL_PREPARE_DEBUGGEE \

178 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x810, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_QUERY_COUNT_OF_ACTIVE_PROCESSES_OR_THREADS

#define IOCTL_QUERY_COUNT_OF_ACTIVE_PROCESSES_OR_THREADS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81a, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, query count of active threads or processes

247#define IOCTL_QUERY_COUNT_OF_ACTIVE_PROCESSES_OR_THREADS \

248 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81a, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_QUERY_CURRENT_PROCESS

#define IOCTL_QUERY_CURRENT_PROCESS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81c, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, query the current process details

261#define IOCTL_QUERY_CURRENT_PROCESS \

262 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81c, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_QUERY_CURRENT_THREAD

#define IOCTL_QUERY_CURRENT_THREAD CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81d, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, query the current thread details

268#define IOCTL_QUERY_CURRENT_THREAD \

269 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81d, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_REGISTER_EVENT

#define IOCTL_REGISTER_EVENT CTL_CODE(FILE_DEVICE_UNKNOWN, 0x800, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, register a new event

64#define IOCTL_REGISTER_EVENT \

65 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x800, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_REQUEST_REV_MACHINE_SERVICE

#define IOCTL_REQUEST_REV_MACHINE_SERVICE CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81e, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, request service from the reversing machine

275#define IOCTL_REQUEST_REV_MACHINE_SERVICE \

276 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x81e, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_RESERVE_PRE_ALLOCATED_POOLS

#define IOCTL_RESERVE_PRE_ALLOCATED_POOLS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x816, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to reserve pre-allocated pools

219#define IOCTL_RESERVE_PRE_ALLOCATED_POOLS \

220 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x816, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_RETURN_IRP_PENDING_PACKETS_AND_DISALLOW_IOCTL

#define IOCTL_RETURN_IRP_PENDING_PACKETS_AND_DISALLOW_IOCTL CTL_CODE(FILE_DEVICE_UNKNOWN, 0x801, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, irp pending mechanism for reading from message tracing buffers

71#define IOCTL_RETURN_IRP_PENDING_PACKETS_AND_DISALLOW_IOCTL \

72 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x801, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_SEND_GENERAL_BUFFER_FROM_DEBUGGEE_TO_DEBUGGER

#define IOCTL_SEND_GENERAL_BUFFER_FROM_DEBUGGEE_TO_DEBUGGER CTL_CODE(FILE_DEVICE_UNKNOWN, 0x814, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, send general buffer from debuggee to debugger

205#define IOCTL_SEND_GENERAL_BUFFER_FROM_DEBUGGEE_TO_DEBUGGER \

206 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x814, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_SEND_SIGNAL_EXECUTION_IN_DEBUGGEE_FINISHED

#define IOCTL_SEND_SIGNAL_EXECUTION_IN_DEBUGGEE_FINISHED CTL_CODE(FILE_DEVICE_UNKNOWN, 0x812, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, send a signal that execution of command finished

191#define IOCTL_SEND_SIGNAL_EXECUTION_IN_DEBUGGEE_FINISHED \

192 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x812, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_SEND_USER_DEBUGGER_COMMANDS

#define IOCTL_SEND_USER_DEBUGGER_COMMANDS CTL_CODE(FILE_DEVICE_UNKNOWN, 0x817, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to send user debugger commands

226#define IOCTL_SEND_USER_DEBUGGER_COMMANDS \

227 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x817, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_SEND_USERMODE_MESSAGES_TO_DEBUGGER

#define IOCTL_SEND_USERMODE_MESSAGES_TO_DEBUGGER CTL_CODE(FILE_DEVICE_UNKNOWN, 0x813, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, send user-mode messages to the debugger

198#define IOCTL_SEND_USERMODE_MESSAGES_TO_DEBUGGER \

199 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x813, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ IOCTL_TERMINATE_VMX

#define IOCTL_TERMINATE_VMX CTL_CODE(FILE_DEVICE_UNKNOWN, 0x802, METHOD_BUFFERED, FILE_ANY_ACCESS)

ioctl, to terminate vmx and exit form debugger

78#define IOCTL_TERMINATE_VMX \

79 CTL_CODE(FILE_DEVICE_UNKNOWN, 0x802, METHOD_BUFFERED, FILE_ANY_ACCESS)

◆ METHOD_BUFFERED

#define METHOD_BUFFERED 0

Macros