Geoff Chappell, Software Analyst
The SYSTEM_EXCEPTION_INFORMATION structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemExceptionInformation (0x21).
The SYSTEM_EXCEPTION_INFORMATION structure is defined in WINTERNL.H from the Software Development Kit (SDK). The definition there has the whole structure as one array of bytes, named Reserved1. Documentation of NtQuerySystemInformation describes the structure as “opaque” and suggests that whatever is produced in it for the SystemExceptionInformation case “can be used to generate an unpredictable seed for a random number generator.”
The SYSTEM_EXCEPTION_INFORMATION is 0x10 bytes in both 32-bit and 64-bit Windows.