Geoff Chappell, Software Analyst
The SYSTEM_HANDLE_INFORMATION_EX structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemExtendedHandleInformation (0x40).
The SYSTEM_HANDLE_INFORMATION_EX structure is not documented.
The SYSTEM_HANDLE_INFORMATION_EX is 0x24 or 0x38 bytes in 32-bit and 64-bit Windows, respectively.
Offset (x86) | Offset (x64) | Definition |
---|---|---|
0x00 | 0x00 |
ULONG_PTR NumberOfHandles; |
0x04 | 0x08 |
ULONG_PTR Reserved; |
0x08 | 0x10 |
SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handles [1]; |