DEBUGGER_EVENT_TYPE_ENUM
enum. This enum will be updated in future versions, but if you want to simulate a special command, check the command's manual to see what's the command's type.CommandsEventList
to the list of user-mode commands.ConditionBufferSize != 0
), you can use set the size if ConditionBufferSize
and append the buffer to the end of the above structure, and when you send the buffer to the kernel, you should send the sizeof(DEBUGGER_GENERAL_EVENT_DETAIL)+ ConditionBufferSize (if any)
.sizeof(DEBUGGER_GENERAL_ACTION)+ Size of Custom code (if any)
to the following function.DeviceIoControl
, you can use the following IOCTL.