VOID
KeQuerySystemTime(
OUT PLARGE_INTEGER CurrentTime
);
KeQuerySystemTime obtains the current system time.
System time is a count of 100-nanosecond intervals since January 1, 1601.
Callers of this routine can be running at any IRQL.
KeQueryPerformanceCounter, KeQueryTickCount, KeQueryTimeIncrement