Windows内核获取当前系统时间

VOID GetCurrentTime(PTIME_FIELDS TimeFields)
{
    LARGE_INTEGER Time;
    KeQuerySystemTime(&Time);
    ExSystemTimeToLocalTime(&Time, &Time);
    RtlTimeToTimeFields(&Time, TimeFields);
}