KStrClockGetCorrelatedPhysicalTime routine
KStrClockGetCorrelatedPhysicalTime is a system-supplied routine that retrieves both the current system time minus suspended delta and the corresponding clock tick since boot.
Syntax
PFNKSCLOCK_CORRELATEDTIME KStrClockGetCorrelatedPhysicalTime;
LONGLONG FASTCALL KStrClockGetCorrelatedPhysicalTime(
_In_ PFILE_OBJECT FileObject,
_Out_ PLONGLONG SystemTime
)
{ ... }
Parameters
FileObject [in]
A pointer to the FILE_OBJECT structure to which a handle was returned when the clock instance was created.SystemTime [out]
A pointer to a 64-bit integer containing the number of clock ticks since system boot.
Return value
This routine returns the current system time (minus any suspended delta) as a value of type LONGLONG. This value is specified in 100 nanosecond units.
Remarks
You can obtain an entry point for this routine by supplying a driver-allocated KSCLOCK_FUNCTIONTABLE structure in a KSPROPERTY_CLOCK_FUNCTIONTABLE request.
The system time is acquired from KeQueryPerformanceCounter.
Both time values are specified in 100 nanosecond units.
Requirements
Target platform |
Desktop |
Header |
Ks.h (include Ks.h) |
See also
KSPROPERTY_CLOCK_FUNCTIONTABLE