From: ywd on
i can`t find some detialed information about KeServiceDescriptorTable could
anyone give me a hand ?
From: Don Burn on
Why would you want this? First the index of individual calls changes
often (depending on the OS even service packs have changed it). Second,
the main use for the data would be hooking which does not work on 64-bit
versions of the OS.


Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr



> -----Original Message-----
> From: ywd [mailto:ywd(a)discussions.microsoft.com]
> Posted At: Saturday, May 29, 2010 1:07 AM
> Posted To: microsoft.public.development.device.drivers
> Conversation: where can i find file about KeServiceDescriptorTable
> structure
> Subject: where can i find file about KeServiceDescriptorTable structure
>
> i can`t find some detialed information about KeServiceDescriptorTable
> could
> anyone give me a hand ?
>
>
> __________ Information from ESET Smart Security, version of virus
> signature
> database 5154 (20100528) __________
>
> The message was checked by ESET Smart Security.
>
> http://www.eset.com
>

From: x64 on
> First the index of individual calls changes
> often (depending on the OS even service packs have changed it).

They can be obtained dynamically.

> Second,
> the main use for the data would be hooking...

Not only hooking but also calling service routines which is not
exported by the kernel.