Geoff Chappell, Software Analyst
The SYSTEM_ENTROPY_TIMING_INFORMATION structure is expected as input to ZwSetSystemInformation or NtSetSystemInformation when given the information class SystemEntropyInterruptTimingInformation (0x83).
The SYSTEM_ENTROPY_TIMING_INFORMATION structure is not documented.
The SYSTEM_ENTROPY_TIMING_INFORMATION is 0x0C or 0x18 bytes in 32-bit and 64-bit Windows, respectively.
Offset (x86) | Offset (x64) | Definition |
---|---|---|
0x00 | 0x00 |
KENTROPY_TIMING_ROUTINE EntropyRoutine; |
0x04 | 0x08 |
KENTROPY_INITIALIZATION_ROUTINE InitializationRoutine; |
0x08 | 0x10 |
PVOID InitializationContext; |
Two of the types in the preceding are function pointers:
typedef VOID (*KENTROPY_TIMING_ROUTINE) (PVOID, ULONG); typedef VOID (*KENTROPY_INITIALIZATION_ROUTINE) (PVOID, ULONG, PVOID);