LHMon Api m_SystemTime question

Home › Forums › Discussions › Support › LHMon Api m_SystemTime question

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • December 13, 2004 at 10:55 am #4895
    gbuhrhh
    Participant

      Hi

      I am not quite clear how to translate the m_SystemTime value into a readable format. What is exactly the meaning of that timestamp.

      Can anyone help ?

      Thanks

      Guenter

      December 13, 2004 at 1:06 pm #5680
      Vadim Smirnov
      Keymaster

        This value is filled using KeQuerySystemTime (equal to user-mode NtQuerySystemTime). Here is the short description:

        “System time is a count of 100-nanosecond intervals since January 1, 1601. System time is typically updated approximately every ten milliseconds. This value is computed for the GMT time zone.” (Windows DDK help)

        In order to convert the m_SystemTime to SYSTEMTIME structure do the following:

        1) Copy m_SystemTime to FILETIME structure (don’t use simple typecast, because alignment can be different).
        2) Call FileTimeToSystemTime.

      • Author
        Posts
      Viewing 2 posts - 1 through 2 (of 2 total)
      • You must be logged in to reply to this topic.