Before revision: SSDT is saved in RAM Structure of the SSDT typedef struct _KSERVICE_DESCRIPTOR_TABLE { PULONG ServiceTableBase; PULONG ServiceCounterTableBase; ULONG NumberOfServices; PUCHAR ParamTableBase; }KSERVICE_DESCRIPTOR_TABLE,*PKSERVICE_DESCRIPTOR_TABLE; The pointer to this structure is KeServiceDescriptorTable, exported by ntoskrnl.exe.
After revision: a peter je panSSDT is saved in RAM Structure of the SSDT typedef struct _KSERVICE_DESCRIPTOR_TABLE { PULONG ServiceTableBase; PULONG ServiceCounterTableBase; ULONG NumberOfServices; PUCHAR ParamTableBase; }KSERVICE_DESCRIPTOR_TABLE,*PKSERVICE_DESCRIPTOR_TABLE; The pointer to this structure is KeServiceDescriptorTable, exported by ntoskrnl.exe.