none
problems with kequery apis under VS2012 RRS feed

  • Question

  • tried to use kequerysystemtimeprecise api configuration win 8.1 vs2012

    none of the .h  files cited  is available in the installations of either the system or the VDE

    which additional components must i install to obtain these headers and the NtosKrnl.lib??


    claudio cannella

    Wednesday, April 6, 2016 11:38 AM

Answers

  • KeQuerySystemTimePrecise wouldn't give you the time in SYSTEMTIME (year, month, etc.) format either, even though its documentation has a link "system time" that suggests this.
    • Marked as answer by opaklaus Thursday, April 7, 2016 4:07 PM
    Wednesday, April 6, 2016 7:17 PM
  • Do you mean to use these API in application? No way. these are only for drivers.

    -- pa

    Wednesday, April 6, 2016 4:56 PM
  • You can take the FILETIME value and get the additional precision from it.  For example do FileTimeToSystemTime then SystemTimeToFileTime and subtract the resulting FILETIME from the original.  This will give you the number of 100 nanosecond intervals.


    Don Burn Windows Driver Consulting Website: http://www.windrvr.com

    • Marked as answer by opaklaus Wednesday, April 6, 2016 7:12 PM
    Wednesday, April 6, 2016 7:00 PM

All replies

  • Do you have the Windows 8 WDK installed?  If the Windows 8 WDK is installed you will have a DRIVERS menu in the Visual Studio IDE. 

    This function is in WDM.h see https://msdn.microsoft.com/en-us/library/windows/hardware/hh698269(v=vs.85).aspx


    Don Burn Windows Driver Consulting Website: http://www.windrvr.com

    Wednesday, April 6, 2016 11:47 AM
  • Do you mean to use these API in application? No way. these are only for drivers.

    -- pa

    Wednesday, April 6, 2016 4:56 PM
  • For user mode, there is GetSystemTimePreciseAsFileTime.

    Wednesday, April 6, 2016 5:10 PM
  • but then it must be converted to systemtime to be read and looses the added decimal figures


    claudio cannella

    Wednesday, April 6, 2016 6:03 PM
  • You can take the FILETIME value and get the additional precision from it.  For example do FileTimeToSystemTime then SystemTimeToFileTime and subtract the resulting FILETIME from the original.  This will give you the number of 100 nanosecond intervals.


    Don Burn Windows Driver Consulting Website: http://www.windrvr.com

    • Marked as answer by opaklaus Wednesday, April 6, 2016 7:12 PM
    Wednesday, April 6, 2016 7:00 PM
  • KeQuerySystemTimePrecise wouldn't give you the time in SYSTEMTIME (year, month, etc.) format either, even though its documentation has a link "system time" that suggests this.
    • Marked as answer by opaklaus Thursday, April 7, 2016 4:07 PM
    Wednesday, April 6, 2016 7:17 PM
  • this is therefore misleading  and should be indicated in the page at the very least  as a community addup 


    claudio cannella

    Thursday, April 7, 2016 4:07 PM
  • AFAIK, the "Community Additions" wiki feature is not available on WDK documentation pages. There is a "Send comments about this topic to Microsoft" link though.
    Friday, April 8, 2016 8:20 AM