Before revision: SSDT is saved in RAM a peter je pan Structure of the SSDT typedef struct _KSERVICE_DESCRIPTOR_TABLE { PULONG ServiceTableBase; PULONG ServiceCounterTableBase; ULONG NumberOfServices; PUCHAR ParamTableBase; }KSERVICE_DESCRIPTOR_TABLE,*PKSERVICE_DESCRIPTOR_TABLE; The pointer to this structure is KeServiceDescriptorTable, exported by ntoskrnl.exe.
After revision: Structure of the SSDT typedef struct _KSERVICE_DESCRIPTOR_TABLE { PULONG ServiceTableBase; PULONG ServiceCounterTableBase; ULONG NumberOfServices; PUCHAR ParamTableBase; }KSERVICE_DESCRIPTOR_TABLE,*PKSERVICE_DESCRIPTOR_TABLE; The pointer to this structure is KeServiceDescriptorTable, exported by ntoskrnl.exe.