Sample IDT dump from Softice (w2k sp4)
Code:
0000 IntG32 0008:80466B36 DPL=0 P ntoskrnl!Kei386EoiHelper+0590
0001 IntG32 0008:80466C86 DPL=3 P ntoskrnl!Kei386EoiHelper+06E0
0002 IntG32 0008:0000145E DPL=0 P
0003 IntG32 0008:80466F5E DPL=3 P ntoskrnl!Kei386EoiHelper+09B8
0004 IntG32 0008:804670C2 DPL=3 P ntoskrnl!Kei386EoiHelper+0B1C
0005 IntG32 0008:80467206 DPL=0 P ntoskrnl!Kei386EoiHelper+0C60
0006 IntG32 0008:8046736A DPL=0 P ntoskrnl!Kei386EoiHelper+0DC4
0007 IntG32 0008:80467903 DPL=0 P ntoskrnl!Kei386EoiHelper+135D
0008 TaskG 0050:000014B8 DPL=0 P
0009 IntG32 0008:80467CBF DPL=0 P ntoskrnl!Kei386EoiHelper+1719
000A IntG32 0008:80467DC7 DPL=0 P ntoskrnl!Kei386EoiHelper+1821
000B IntG32 0008:80467EF3 DPL=0 P ntoskrnl!Kei386EoiHelper+194D
000C IntG32 0008:804681F8 DPL=0 P ntoskrnl!Kei386EoiHelper+1C52
000D IntG32 0008:80468404 DPL=0 P ntoskrnl!Kei386EoiHelper+1E5E
000E IntG32 0008:80468E78 DPL=0 P ntoskrnl!Kei386EoiHelper+28D2
000F IntG32 0008:80469213 DPL=0 P ntoskrnl!Kei386EoiHelper+2C6D
...and from my own descriptor table dumper:
Code:
#0000: 0000 [00000008:80466b36] * 32bit=1, gran=0, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#0001: 000b [00000008:b3fcd769] * 32bit=1, gran=1, present=1, dpl=3, type=[S] 32-bit Interrupt Gate
#0002: 0010 [00000008:b3fcd778] * 32bit=1, gran=1, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#0003: 001b [00000008:b3fcd787] * 32bit=1, gran=1, present=1, dpl=3, type=[S] 32-bit Interrupt Gate
#0004: 0023 [00000008:804670c2] * 32bit=1, gran=0, present=1, dpl=3, type=[S] 32-bit Interrupt Gate
#0005: 0028 [00000008:80467206] * 32bit=1, gran=0, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#0006: 0030 [00000008:b3fcd796] * 32bit=1, gran=1, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#0007: 0038 [00000008:80467903] * 32bit=1, gran=0, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#0008: 0040 [00000050:000014b8] * 32bit=0, gran=0, present=1, dpl=0, type=[S] Task Gate
#0009: 0048 [00000008:80467cbf] * 32bit=1, gran=0, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#000a: 0050 [00000008:80467dc7] * 32bit=1, gran=0, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#000b: 0058 [00000008:b3fcd7a5] * 32bit=1, gran=1, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#000c: 0060 [00000008:b3fcd7b4] * 32bit=1, gran=1, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#000d: 0068 [00000008:b3fcd7c3] * 32bit=1, gran=1, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#000e: 0070 [00000008:b3fcd7d2] * 32bit=1, gran=1, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
#000f: 0078 [00000008:80469213] * 32bit=1, gran=0, present=1, dpl=0, type=[S] 32-bit Interrupt Gate
As you can clearly see, real values are NOT the one Softice shows you
