The KeQuerySystemTime routine obtains the current system time.
VOID
KeQuerySystemTime(
OUT PLARGE_INTEGER CurrentTime
);
None
Declared in wdm.h and ntddk.h. Include wdm.h or ntddk.h.
System time is a count of 100-nanosecond intervals since January 1, 1601. System time is typically updated approximately every ten milliseconds. This value is computed for the GMT time zone. To adjust this value for the local time zone use ExSystemTimeToLocalTime.
Callers of KeQuerySystemTime can be running at any IRQL.
ExSystemTimeToLocalTime, KeQueryPerformanceCounter, KeQueryTickCount, KeQueryTimeIncrement