Sysinternals Homepage
Forum Home Forum Home > Windows Discussions > Development
  New Posts New Posts RSS Feed - Windows driver: find original entry SSDTShadow tbl
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Windows driver: find original entry SSDTShadow tbl

 Post Reply Post Reply
Author
Message
flashcoder View Drop Down
Newbie
Newbie
Avatar

Joined: 06 March 2017
Status: Offline
Points: 16
Post Options Post Options   Thanks (0) Thanks(0)   Quote flashcoder Quote  Post ReplyReply Direct Link To This Post Topic: Windows driver: find original entry SSDTShadow tbl
    Posted: 10 April 2017 at 4:12pm
I have a code that restores SSDT and Shadow table in x32 Windows and is able to find correct address of original entry in shadow table from Win Server until Win8, already when i tested with Win8.1 part of original address is wrong, so causing a BSOD on system:

Debug: 



The project is here.

PS: Compiled with VS 2010 Professional, WDK 7, Visual DDK, target Windows Server 2003



Edited by flashcoder - 10 April 2017 at 6:23pm
Back to Top
flashcoder View Drop Down
Newbie
Newbie
Avatar

Joined: 06 March 2017
Status: Offline
Points: 16
Post Options Post Options   Thanks (0) Thanks(0)   Quote flashcoder Quote  Post ReplyReply Direct Link To This Post Posted: 26 August 2017 at 11:35am
Already solved!
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 11.06
Copyright ©2001-2016 Web Wiz Ltd.