NtQueryTimer - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

/**
 * The NtQueryTimer routine retrieves information about a timer object.
 *
 * \param TimerHandle A handle to the timer object.
 * \param TimerInformationClass The class of information to retrieve.
 * \param TimerInformation A pointer to a buffer that receives the requested information.
 * \param TimerInformationLength The size of the buffer, in bytes.
 * \param ReturnLength A pointer to a variable that receives the size of the data returned.
 * \return NTSTATUS Successful or errant status.
 */
NTSYSCALLAPI
NTSTATUS
NTAPI
NtQueryTimer(
    _In_ HANDLE TimerHandle,
    _In_ TIMER_INFORMATION_CLASS TimerInformationClass,
    _Out_writes_bytes_(TimerInformationLength) PVOID TimerInformation,
    _In_ ULONG TimerInformationLength,
    _Out_opt_ PULONG ReturnLength
    );

#endif
#endif

View code on GitHub
#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwQueryTimer(
    _In_ HANDLE TimerHandle,
    _In_ TIMER_INFORMATION_CLASS TimerInformationClass,
    _Out_writes_bytes_(TimerInformationLength) PVOID TimerInformation,
    _In_ ULONG TimerInformationLength,
    _Out_opt_ PULONG ReturnLength
    );

#endif

View code on GitHub

NtDoc

No description available.

NTinternals.net (undocumented.ntinternals.net)

TimerHandle

HANDLE to Timer Object opened with TIMER_QUERY_STATE access.

TimerInformationClass

Information class. See TIMER_INFORMATION_CLASS for details.

TimerInformation

User's allocated buffer for result data.

TimerInformationLength

Length of TimerInformation buffer, in bytes.

ReturnLength

Optional pointer to value received used/required length of TimerInformation buffer.

Documented by

See also