typedef struct ServiceDescriptorTable { PVOID ServiceTableBase; PVOID ServiceCounterTable(0); unsigned int NumberOfServices; PVOID ParamTableBase;}where
ServiceTableBase | Base address of the System Service Dispatch Table. |
NumberOfServices | Number of services described by ServiceTableBase. |
ServiceCounterTable | This field is used only in checked builds of the operating system and contains the counter of how many times each service in SSDT is called. This counter is updated by INT 2Eh handler (KiSystemService). |
ParamTableBase | Base address of the table containing the number of parameter bytes for each of the system services. |