RTL_PROCESS_LOCKS

The RTL_PROCESS_LOCKS structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemLocksInformation (0x0C).

Documentation Status

The RTL_PROCESS_LOCKS structure is not documented.

Layout

The RTL_PROCESS_LOCKS is 0x28 or 0x38 bytes in 32-bit and 64-bit Windows, respectively.

Offset (x86) Offset (x64) Definition
0x00 0x00
ULONG NumberOfLocks;
0x04 0x08
RTL_PROCESS_LOCK_INFORMATION Locks [ANYSIZE_ARRAY];