Узнать время запуска процесса

Кто нибудь знает, как получить время, когда был запущен процесс документированым способом? У меня на ум приходит только NtQueryInformationProcess, InfoClass = PROCTIME, но хотелось бы именно документироваными функциями...

 

Код (Text):

1. The GetProcessTimes function retrieves timing information for the specified process.
2.  
3.  
4. BOOL GetProcessTimes(
5.   HANDLE hProcess,
6.   LPFILETIME lpCreationTime,
7.   LPFILETIME lpExitTime,
8.   LPFILETIME lpKernelTime,
9.   LPFILETIME lpUserTime
10. );
11.  
12. Parameters
13. hProcess
14. [in] Handle to the process whose timing information is sought. This handle must be created with the PROCESS_QUERY_INFORMATION access right. For more information, see Process Security and Access Rights.
15. lpCreationTime
16. [out] Pointer to a FILETIME structure that receives the creation time of the process.
17. lpExitTime
18. [out] Pointer to a FILETIME structure that receives the exit time of the process. If the process has not exited, the content of this structure is undefined.
19. lpKernelTime
20. [out] Pointer to a FILETIME structure that receives the amount of time that the process has executed in kernel mode. The time that each of the threads of the process has executed in kernel mode is determined, and then all of those times are summed together to obtain this value.
21. lpUserTime
22. [out] Pointer to a FILETIME structure that receives the amount of time that the process has executed in user mode. The time that each of the threads of the process has executed in user mode is determined, and then all of those times are summed together to obtain this value.

 

О, сенкс! Надо больше в МСДН лазить, чем по внутреннястям NTDLL