Nearly all IHandle realted actions seem to fail on Windows XP x64 Professional (with all currently available updates).
The reason might be a 'bug' in the current version of Microsoft's native Wow64 API (NtQuerySystemInformation(SystemHandleInformation, ...) returns STATUS_SUCCESS - but does NOT fill the handle infos for index 1 to Count-1).
Do you know a workaround (without the help of a 64-bit process)?
Note: NtWow64GetNativeSystemInformation (RtlGetNativeSystemInformation) supports only a subset of the system information classes (SystemBasicInformation, SystemProcessorInformation, SystemEmulationBasicInformation, and SystemEmulationProcessorInformation) - therefore this function is useless...
Yeah, I know no other solution right now. I've even thought about running a remote thread in an existing 64bit process - but that doesn't work, either, cause CreateRemoteThread only works for 32bit processes, when being called from a 32bit process.