SYSTEM_OBJECTTYPE_INFORMATION

The SYSTEM_OBJECTTYPE_INFORMATION structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces at the start of its output buffer when given the information class SystemObjectInformation (0x11). The output can, and typically does, continue with multiple structures but at irregular positions since each can be followed by any number of SYSTEM_OBJECT_INFORMATION structures.

Documentation Status

The SYSTEM_OBJECTTYPE_INFORMATION structure is not documented.

Layout

The SYSTEM_OBJECTTYPE_INFORMATION is 0x38 or 0x40 bytes in 32-bit and 64-bit Windows, respectively.

Offset Definition
0x00
ULONG NextEntryOffset;
0x04
ULONG NumberOfObjects;
0x08
ULONG NumberOfHandles;
0x0C
ULONG TypeIndex;
0x10
ULONG InvalidAttributes;
0x14
GENERIC_MAPPING GenericMapping;
0x24
ULONG ValidAccessMask;
0x28
ULONG PoolType;
0x2C
BOOLEAN SecurityRequired;
0x2D
BOOLEAN WaitableObject;
0x30
UNICODE_STRING TypeName;