#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
// SysDbg APIs
// private
typedef enum _SYSDBG_COMMAND
{
SysDbgQueryModuleInformation,
SysDbgQueryTraceInformation,
SysDbgSetTracepoint,
SysDbgSetSpecialCall, // PVOID
SysDbgClearSpecialCalls, // void
SysDbgQuerySpecialCalls,
SysDbgBreakPoint,
SysDbgQueryVersion, // DBGKD_GET_VERSION64
SysDbgReadVirtual, // SYSDBG_VIRTUAL
SysDbgWriteVirtual, // SYSDBG_VIRTUAL
SysDbgReadPhysical, // SYSDBG_PHYSICAL // 10
SysDbgWritePhysical, // SYSDBG_PHYSICAL
SysDbgReadControlSpace, // SYSDBG_CONTROL_SPACE
SysDbgWriteControlSpace, // SYSDBG_CONTROL_SPACE
SysDbgReadIoSpace, // SYSDBG_IO_SPACE
SysDbgWriteIoSpace, // SYSDBG_IO_SPACE
SysDbgReadMsr, // SYSDBG_MSR
SysDbgWriteMsr, // SYSDBG_MSR
SysDbgReadBusData, // SYSDBG_BUS_DATA
SysDbgWriteBusData, // SYSDBG_BUS_DATA
SysDbgCheckLowMemory, // 20
SysDbgEnableKernelDebugger,
SysDbgDisableKernelDebugger,
SysDbgGetAutoKdEnable,
SysDbgSetAutoKdEnable,
SysDbgGetPrintBufferSize,
SysDbgSetPrintBufferSize,
SysDbgGetKdUmExceptionEnable,
SysDbgSetKdUmExceptionEnable,
SysDbgGetTriageDump, // SYSDBG_TRIAGE_DUMP
SysDbgGetKdBlockEnable, // 30
SysDbgSetKdBlockEnable,
SysDbgRegisterForUmBreakInfo,
SysDbgGetUmBreakPid,
SysDbgClearUmBreakPid,
SysDbgGetUmAttachPid,
SysDbgClearUmAttachPid,
SysDbgGetLiveKernelDump, // SYSDBG_LIVEDUMP_CONTROL
SysDbgKdPullRemoteFile, // SYSDBG_KD_PULL_REMOTE_FILE
SysDbgMaxInfoClass
} SYSDBG_COMMAND, *PSYSDBG_COMMAND;
View code on GitHub
Enumeration type SYSDBG_COMMAND
is used as a command number in a call to NtSystemDebugControl
function.
(?)
(?)
(?)
(?)
(?)
(?)