SYSTEM_LEGACY_DRIVER_INFORMATION

The SYSTEM_LEGACY_DRIVER_INFORMATION structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemLegacyDriverInformation (0x2B).

Documentation Status

The SYSTEM_LEGACY_DRIVER_INFORMATION structure is not documented.

Layout

The SYSTEM_LEGACY_DRIVER_INFORMATION is 0x0C or 0x18 bytes in 32-bit and 64-bit Windows, respectively.

Offset (x86) Offset (x64) Definition
0x00 0x00
ULONG VetoType;
0x04 0x08
UNICODE_STRING VetoList;

The string that VetoList describes by size and address immediately follows this fixed-size structure.