I am trying to send a direct command to a camera connected via the USB.  I open the camera with createfile using "\\.\PhysicalDrive1" with the structure and call listed below.

I get an error 87 - invalid parameter.  I suspect that I am not setting up the SCSI_PASS_THROUGH_DIRECT command correctly.  

Does anyone have an example setup that works or see what I am doing wrong?

Command structure:
  typedef struct {
    SCSI_PASS_THROUGH_DIRECT spt;
    ULONG Filler;
    UCHAR ucSenseBuf[32];
  }
SCSI_PASS_THROUGH_DIRECT_WITH_BUFFER;

Command buffer:
       uint8_t cmd[8] = { 0xf0, 0x24, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00 };

Then I set up for the call:

            SCSI_PASS_THROUGH_DIRECT_WITH_BUFFER io;
            memset(&io, 0, sizeof(io));
            USHORT length = sizeof(SCSI_PASS_THROUGH_DIRECT);
            DWORD returned = 0;
            io.spt.Length= length;
            io.spt.CdbLength = cmdLen;
            io.spt.DataIn = SCSI_IOCTL_DATA_IN;
            io.spt.DataTransferLength = bufLen;
            io.spt.TimeOutValue = 60;
            io.spt.DataBuffer = io.spt.DataTransferLength ? buf : NULL;
            io.spt.SenseInfoOffset = sizeof(SCSI_PASS_THROUGH_DIRECT);
            io.spt.SenseInfoLength = 32;
            memcpy(io.spt.Cdb, cmd, cmdLen);
            memcpy(io.ucSenseBuf,sense,io.spt.SenseInfoLength);

            DeviceIoControl(sg_fd,IOCTL_SCSI_PASS_THROUGH_DIRECT,
                  &io,length,&io,length,&returned,NULL);