SYSTEM_CALL_TIME_INFORMATION

The SYSTEM_CALL_TIME_INFORMATION structure may be what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation would produce in its output buffer when given the information class SystemCallTimeInformation (0x0A). Instead, all versions yet inspected that don’t reject this information class as invalid reject it as not implemented.

Documentation Status

The SYSTEM_CALL_TIME_INFORMATION structure is not documented.

Layout

The SYSTEM_CALL_TIME_INFORMATION is 0x10 bytes in both 32-bit and 64-bit Windows.

Offset Definition
0x00
ULONG Length;
0x04
ULONG TotalCalls;
0x08
LARGE_INTEGER TimeOfCalls [ANYSIZE_ARRAY];