Description: By enumerating the ntdll.dll export table, first determine Nt is the beginning, is to determine if re-statement is not the first to mov eax, this is the case then get the index number.
To Search:
File list (Check if you may need any files):
entry.cpp
GetSSDTInformation.cpp
GetSSDTInformation.h
Download