SYSTEM_HANDLE_INFORMATION_EX

The SYSTEM_HANDLE_INFORMATION_EX structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemExtendedHandleInformation (0x40).

Documentation Status

The SYSTEM_HANDLE_INFORMATION_EX structure is not documented.

Layout

The SYSTEM_HANDLE_INFORMATION_EX is 0x24 or 0x38 bytes in 32-bit and 64-bit Windows, respectively.

Offset (x86) Offset (x64) Definition
0x00 0x00
ULONG_PTR NumberOfHandles;
0x04 0x08
ULONG_PTR Reserved;
0x08 0x10
SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handles [1];