SYSTEM_HANDLE_INFORMATION

The SYSTEM_HANDLE_INFORMATION structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemHandleInformation (0x10).

Documentation Status

The SYSTEM_HANDLE_INFORMATION structure is not documented.

Layout

The SYSTEM_HANDLE_INFORMATION is 0x14 and 0x20 bytes in 32-bit and 64-bit Windows, respectively.

Offset (x86) Offset (x64) Definition
0x00 0x00
ULONG NumberOfHandles;
0x04 0x08
SYSTEM_HANDLE_TABLE_ENTRY_INFO Handles [ANYSIZE_ARRAY];