x64 / ntdllntoskrnl /

_EPROCESS_VALUES

← 10.0.28000.3231 19 builds latest →
struct _EPROCESS_VALUES {
unsigned __int64 KernelTime;/* 0x0 8 */
unsigned __int64 UserTime;/* 0x8 8 */
unsigned __int64 ReadyTime;/* 0x10 8 */
unsigned __int64 CycleTime;/* 0x18 8 */
unsigned __int64 ContextSwitches;/* 0x20 8 */
__int64 ReadOperationCount;/* 0x28 8 */
__int64 WriteOperationCount;/* 0x30 8 */
__int64 OtherOperationCount;/* 0x38 8 */
/* ── cacheline 1 boundary (64 bytes) ── */
__int64 ReadTransferCount;/* 0x40 8 */
__int64 WriteTransferCount;/* 0x48 8 */
__int64 OtherTransferCount;/* 0x50 8 */
unsigned __int64 KernelWaitTime;/* 0x58 8 */
unsigned __int64 UserWaitTime;/* 0x60 8 */
};
size 104 (0x68)13 members0 holespadding 02 cachelines
Used in (1)