Hi guys,
I am using ZwQuerySystemInformation(SystemTimeOfDayInformation) to get system boot time in driver, however i observe that occasionally SYSTEM_TIMEOFDAY_INFORMATION.BootTime return different value in different process contexts, all these processes are normal user processes without UAC.
so far it happens in win8 only. and It happens in user mode as well if i call NtQuerySystemInformation from application.
does anyone know why it happens? it is ridiculous to me.
Regards
haibo