PFNKSCLOCK_CORRELATEDTIME - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ks.h
PFNKSCLOCK_CORRELATEDTIME PfnksclockCorrelatedtime;
LONGLONG PfnksclockCorrelatedtime(
[in] PFILE_OBJECT FileObject,
[out] PLONGLONG SystemTime
)
{...}
View the official Windows Driver Kit DDI referenceNo description available.
The routine is a system-supplied routine that retrieves and the following:
KStrClockGetCorrelatedTime is a system-supplied routine that retrieves both the current system time and the corresponding clock tick count since boot.
KStrClockGetCorrelatedPhysicalTime is a system-supplied routine that retrieves both the current system time minus suspended delta and the corresponding clock tick since boot.
FileObject [in]A pointer to the FILE_OBJECT structure to which a handle was returned when the clock instance was created.
SystemTime [out]A pointer to a 64-bit integer containing the number of clock ticks since system boot.
This routine returns the current system time as a value of type LONGLONG. This value is specified in 100 nanosecond units.
You can obtain an entry point for this routine by supplying a driver-allocated KSCLOCK_FUNCTIONTABLE structure in a KSPROPERTY_CLOCK_FUNCTIONTABLE request.
The system time is acquired from KeQueryPerformanceCounter.
Both time values are specified in 100 nanosecond units.
KSPROPERTY_CLOCK_FUNCTIONTABLE