SYSTEM_INTERRUPT_INFORMATION

The SYSTEM_INTERRUPT_INFORMATION structure is produced in the output buffer by a successful call to the following functions:

when given the information class SystemInterruptInformation (0x17).

Documentation Status

The SYSTEM_INTERRUPT_INFORMATION structure is defined in WINTERNL.H from the Software Development Kit (SDK). The definition there has the whole structure as one array of bytes, named Reserved1. Documentation of NtQuerySystemInformation describes the structure as “opaque” and suggests that whatever is produced in it for the SystemInterruptInformation case “can be used to generate an unpredictable seed for a random number generator.”

Layout

The SYSTEM_INTERRUPT_INFORMATION is 0x18 bytes in both 32-bit and 64-bit Windows.

Offset Definition
0x00
ULONG ContextSwitches;
0x04
ULONG DpcCount;
0x08
ULONG DpcRate;
0x0C
ULONG TimeIncrement;
0x10
ULONG DpcBypassCount;
0x14
ULONG ApcBypassCount;