From: GeminiServer on
Hi,

i have a problem that there is no KeQuerySystemTime for x64.
I need the system time also under x64. (not IA64).

Can some tell me a way or a an alternate function under x64 to
get the system time.

cheers,

GeminiServer


From: Don Burn on
Why do you think that the call is not there? It is a macro, but certainly
present.


--
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply



"GeminiServer" <melih_ataoglu(a)hotmail.com> wrote in message
news:%23KFwu7AeKHA.1596(a)TK2MSFTNGP06.phx.gbl...
> Hi,
>
> i have a problem that there is no KeQuerySystemTime for x64.
> I need the system time also under x64. (not IA64).
>
> Can some tell me a way or a an alternate function under x64 to
> get the system time.
>
> cheers,
>
> GeminiServer
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 4669 (20091208) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>



__________ Information from ESET NOD32 Antivirus, version of virus signature database 4669 (20091208) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com




From: GeminiServer on
Don Burn schrieb:
> Why do you think that the call is not there? It is a macro, but certainly
> present.
>
>
Simple, if i build it in x64 enviroment i get the info
"unresolved external symbol KeQuerySystemTime referenced in function ...."

Then i did a seachr in the WDK, there was no KeQuerySystemTime explizit
for x64. I only found for 386 & IA64.

Then i found the definition for x64 and include it to my x64 source.
Which will compile without problems. But this is for IA64 right?
--> 0xFFFFF78000000000UI64 ....UI64 ? A fixed tickcount adress ?
Read this ->
http://blogs.msdn.com/bobkjelgaard/archive/2009/04/18/exceptions-rule.aspx

#ifdef _AMD64_
#define KI_USER_SHARED_DATA 0xFFFFF78000000000UI64
#define SharedSystemTime (KI_USER_SHARED_DATA + 0x14)
#define KeQuerySystemTime(CurrentCount) *((PULONG64)(CurrentCount)) =
*((volatile ULONG64 *)(SharedSystemTime))
#endif

Regards, GeminiServer
From: GeminiServer on
Don Burn schrieb:
> Why do you think that the call is not there? It is a macro, but certainly
> present.
>
>
Simple, if i build it in x64 enviroment i get the info
"unresolved external symbol KeQuerySystemTime referenced in function ...."

Then i did a seachr in the WDK, there was no KeQuerySystemTime explizit
for x64. I only found for 386 & IA64.

Then i found the definition for x64 and include it to my x64 source.
Which will compile without problems. But this is for IA64 right?
--> 0xFFFFF78000000000UI64 ....UI64 ? A fixed tickcount adress ?
Read this ->
http://blogs.msdn.com/bobkjelgaard/archive/2009/04/18/exceptions-rule.aspx

#ifdef _AMD64_
#define KI_USER_SHARED_DATA 0xFFFFF78000000000UI64
#define SharedSystemTime (KI_USER_SHARED_DATA + 0x14)
#define KeQuerySystemTime(CurrentCount) *((PULONG64)(CurrentCount)) =
*((volatile ULONG64 *)(SharedSystemTime))
#endif

Regards, GeminiServer

From: Don Burn on
So are you trying to get the function address or just trying to use the
function? If you want the function address you are out of luck. The macro
works fine and no 0xFFFFF78000000000UI64 means a constant that is an
Unsigned Integer 64-bits not something that works only on Itanic (i.e.
IA64).


--
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply



"GeminiServer" <melih_ataoglu(a)hotmail.com> wrote in message
news:uiDEj9BeKHA.4880(a)TK2MSFTNGP05.phx.gbl...
> Don Burn schrieb:
>> Why do you think that the call is not there? It is a macro, but
>> certainly present.
>>
>>
> Simple, if i build it in x64 enviroment i get the info
> "unresolved external symbol KeQuerySystemTime referenced in function ...."
>
> Then i did a seachr in the WDK, there was no KeQuerySystemTime explizit
> for x64. I only found for 386 & IA64.
>
> Then i found the definition for x64 and include it to my x64 source. Which
> will compile without problems. But this is for IA64 right?
> --> 0xFFFFF78000000000UI64 ....UI64 ? A fixed tickcount adress ?
> Read this ->
> http://blogs.msdn.com/bobkjelgaard/archive/2009/04/18/exceptions-rule.aspx
>
> #ifdef _AMD64_
> #define KI_USER_SHARED_DATA 0xFFFFF78000000000UI64
> #define SharedSystemTime (KI_USER_SHARED_DATA + 0x14)
> #define KeQuerySystemTime(CurrentCount) *((PULONG64)(CurrentCount)) =
> *((volatile ULONG64 *)(SharedSystemTime))
> #endif
>
> Regards, GeminiServer
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 4670 (20091208) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>



__________ Information from ESET NOD32 Antivirus, version of virus signature database 4670 (20091208) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com