INT64 __fastcall KeQuerySystemTimeUnsafe(){ return *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart; }