ULONGLONG KeQueryUnbiasedInterruptTime(void){ return *(_QWORD *)&KUSER_SHARED_DATA.InterruptTime.LowPart - KUSER_SHARED_DATA.InterruptTimeBias; }