mirror of
https://github.com/hasherezade/hollows_hunter.git
synced 2026-10-12 02:15:21 +00:00
251 lines
26 KiB
HTML
251 lines
26 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=11"/>
|
|
<meta name="generator" content="Doxygen 1.17.0"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>HollowsHunter: util/time_util.cpp Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="codefolding.js"></script>
|
|
<script type="text/javascript" src="clipboard.js"></script>
|
|
<script type="text/javascript" src="cookie.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<script type="module">
|
|
import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';
|
|
const theme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'default';
|
|
mermaid.initialize({ startOnLoad: true, theme: theme });
|
|
</script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr id="projectrow">
|
|
<td id="projectlogo"><img alt="Logo" src="logo2_128.png"/></td>
|
|
<td id="projectalign">
|
|
<div id="projectname">HollowsHunter
|
|
</div>
|
|
<div id="projectbrief">Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.17.0 -->
|
|
<script type="text/javascript">
|
|
let searchBox = new SearchBox("searchBox", "search/",'.html');
|
|
</script>
|
|
<script type="text/javascript">
|
|
document.addEventListener('DOMContentLoaded', codefold.init);
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
document.addEventListener('DOMContentLoaded', () => {
|
|
initMenu('',false);
|
|
init_search();
|
|
});
|
|
</script>
|
|
<div id="main-nav-mobile">
|
|
<div class="sm sm-dox"><input id="main-menu-state" type="checkbox"/>
|
|
<label class="main-menu-btn" for="main-menu-state">
|
|
<span class="main-menu-btn-icon"></span> Toggle main menu visibility</label>
|
|
<span id="searchBoxPos1" style="position:absolute;right:8px;top:8px;height:36px;"></span>
|
|
</div>
|
|
</div><!-- main-nav-mobile -->
|
|
<div id="main-nav">
|
|
<ul class="sm sm-dox" id="main-menu">
|
|
<li id="searchBoxPos2" style="float:right">
|
|
<div id="MSearchBox" class="MSearchBoxInactive">
|
|
<span class="left">
|
|
<span id="MSearchSelect" class="search-icon" onmouseover="return searchBox.OnSearchSelectShow()" onmouseout="return searchBox.OnSearchSelectHide()"><span class="search-icon-dropdown"></span></span>
|
|
<input type="text" id="MSearchField" value="" placeholder="Search" accesskey="S"
|
|
onfocus="searchBox.OnSearchFieldFocus(true)"
|
|
onblur="searchBox.OnSearchFieldFocus(false)"
|
|
onkeyup="searchBox.OnSearchFieldChange(event)"/>
|
|
</span><span class="right">
|
|
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><div id="MSearchCloseImg" class="close-icon"></div></a>
|
|
</span>
|
|
</div>
|
|
</li>
|
|
</ul>
|
|
</div><!-- main-nav -->
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<div id="MSearchResults">
|
|
<div class="SRPage">
|
|
<div id="SRIndex">
|
|
<div id="SRResults"></div>
|
|
<div class="SRStatus" id="Loading">Loading...</div>
|
|
<div class="SRStatus" id="Searching">Searching...</div>
|
|
<div class="SRStatus" id="NoMatches">No Matches</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="nav-path" class="navpath">
|
|
<ul>
|
|
<li class="navelem"><a href="dir_23ec12649285f9fabf3a6b7380226c28.html">util</a></li> </ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div id="doc-content">
|
|
<div class="header">
|
|
<div class="headertitle"><div class="title">time_util.cpp</div></div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<a href="time__util_8cpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a id="l00001" name="l00001"></a><span class="lineno"> 1</span><span class="preprocessor">#include "<a class="code" href="time__util_8h.html">time_util.h</a>"</span></div>
|
|
<div class="line"><a id="l00002" name="l00002"></a><span class="lineno"> 2</span><span class="preprocessor">#include <codecvt></span></div>
|
|
<div class="line"><a id="l00003" name="l00003"></a><span class="lineno"> 3</span><span class="preprocessor">#include <locale></span></div>
|
|
<div class="line"><a id="l00004" name="l00004"></a><span class="lineno"> 4</span><span class="preprocessor">#include <string></span></div>
|
|
<div class="line"><a id="l00005" name="l00005"></a><span class="lineno"> 5</span><span class="preprocessor">#include <sstream></span></div>
|
|
<div class="line"><a id="l00006" name="l00006"></a><span class="lineno"> 6</span> </div>
|
|
<div class="line"><a id="l00007" name="l00007"></a><span class="lineno"> 7</span><span class="preprocessor">#include <iostream></span></div>
|
|
<div class="line"><a id="l00008" name="l00008"></a><span class="lineno"> 8</span><span class="preprocessor">#include <iomanip></span></div>
|
|
<div class="line"><a id="l00009" name="l00009"></a><span class="lineno"> 9</span><span class="preprocessor">#include <ctime></span></div>
|
|
<div class="line"><a id="l00010" name="l00010"></a><span class="lineno"> 10</span><span class="preprocessor">#include <cmath></span></div>
|
|
<div class="line"><a id="l00011" name="l00011"></a><span class="lineno"> 11</span> </div>
|
|
<div class="line"><a id="l00012" name="l00012"></a><span class="lineno"> 12</span><span class="preprocessor">#include "ntddk.h"</span></div>
|
|
<div class="line"><a id="l00013" name="l00013"></a><span class="lineno"> 13</span><span class="preprocessor">#include "<a class="code" href="custom__buffer_8h.html">custom_buffer.h</a>"</span></div>
|
|
<div class="line"><a id="l00014" name="l00014"></a><span class="lineno"> 14</span> </div>
|
|
<div class="foldopen" id="foldopen00015" data-start="{" data-end="}">
|
|
<div class="line"><a id="l00015" name="l00015"></a><span class="lineno"><a class="line" href="namespaceutil.html#a928be58496639689a6a86142ab7030eb"> 15</a></span>std::wstring <a class="code hl_function" href="namespaceutil.html#a928be58496639689a6a86142ab7030eb">util::strtime</a>(<span class="keyword">const</span> time_t t)</div>
|
|
<div class="line"><a id="l00016" name="l00016"></a><span class="lineno"> 16</span>{</div>
|
|
<div class="line"><a id="l00017" name="l00017"></a><span class="lineno"> 17</span> <span class="keyword">struct </span>tm time_info;</div>
|
|
<div class="line"><a id="l00018" name="l00018"></a><span class="lineno"> 18</span> <span class="keywordflow">if</span> (localtime_s(&time_info, &t) == 0) {</div>
|
|
<div class="line"><a id="l00019" name="l00019"></a><span class="lineno"> 19</span> std::wstringstream str;</div>
|
|
<div class="line"><a id="l00020" name="l00020"></a><span class="lineno"> 20</span> str << std::put_time(&time_info, L<span class="stringliteral">"%c"</span>);</div>
|
|
<div class="line"><a id="l00021" name="l00021"></a><span class="lineno"> 21</span> std::wstring result = str.str();</div>
|
|
<div class="line"><a id="l00022" name="l00022"></a><span class="lineno"> 22</span> <span class="keywordflow">return</span> result;</div>
|
|
<div class="line"><a id="l00023" name="l00023"></a><span class="lineno"> 23</span> }</div>
|
|
<div class="line"><a id="l00024" name="l00024"></a><span class="lineno"> 24</span> <span class="keywordflow">return</span> L<span class="stringliteral">""</span>;</div>
|
|
<div class="line"><a id="l00025" name="l00025"></a><span class="lineno"> 25</span>}</div>
|
|
</div>
|
|
<div class="line"><a id="l00026" name="l00026"></a><span class="lineno"> 26</span> </div>
|
|
<div class="line"><a id="l00027" name="l00027"></a><span class="lineno"> 27</span><span class="comment">// snippet from: https://www.frenk.com/2009/12/convert-filetime-to-unix-timestamp/</span></div>
|
|
<div class="foldopen" id="foldopen00028" data-start="{" data-end="}">
|
|
<div class="line"><a id="l00028" name="l00028"></a><span class="lineno"><a class="line" href="namespaceutil.html#a997df248c1c5179ac292aa9a34a8013e"> 28</a></span>LONGLONG <a class="code hl_function" href="namespaceutil.html#a997df248c1c5179ac292aa9a34a8013e">util::LargeTime_to_POSIX</a>(LARGE_INTEGER date)</div>
|
|
<div class="line"><a id="l00029" name="l00029"></a><span class="lineno"> 29</span>{</div>
|
|
<div class="line"><a id="l00030" name="l00030"></a><span class="lineno"> 30</span> <span class="comment">// takes the last modified date</span></div>
|
|
<div class="line"><a id="l00031" name="l00031"></a><span class="lineno"> 31</span> LARGE_INTEGER adjust;</div>
|
|
<div class="line"><a id="l00032" name="l00032"></a><span class="lineno"> 32</span> </div>
|
|
<div class="line"><a id="l00033" name="l00033"></a><span class="lineno"> 33</span> <span class="comment">// 100-nanoseconds = milliseconds * 10000</span></div>
|
|
<div class="line"><a id="l00034" name="l00034"></a><span class="lineno"> 34</span> adjust.QuadPart = 11644473600000 * 10000;</div>
|
|
<div class="line"><a id="l00035" name="l00035"></a><span class="lineno"> 35</span> </div>
|
|
<div class="line"><a id="l00036" name="l00036"></a><span class="lineno"> 36</span> <span class="comment">// removes the diff between 1970 and 1601</span></div>
|
|
<div class="line"><a id="l00037" name="l00037"></a><span class="lineno"> 37</span> date.QuadPart -= adjust.QuadPart;</div>
|
|
<div class="line"><a id="l00038" name="l00038"></a><span class="lineno"> 38</span> </div>
|
|
<div class="line"><a id="l00039" name="l00039"></a><span class="lineno"> 39</span> <span class="comment">// converts back from 100-nanoseconds to seconds</span></div>
|
|
<div class="line"><a id="l00040" name="l00040"></a><span class="lineno"> 40</span> <span class="keywordflow">return</span> date.QuadPart / 10000000;</div>
|
|
<div class="line"><a id="l00041" name="l00041"></a><span class="lineno"> 41</span>}</div>
|
|
</div>
|
|
<div class="line"><a id="l00042" name="l00042"></a><span class="lineno"> 42</span> </div>
|
|
<div class="line"><a id="l00043" name="l00043"></a><span class="lineno"> 43</span> </div>
|
|
<div class="foldopen" id="foldopen00044" data-start="{" data-end="}">
|
|
<div class="line"><a id="l00044" name="l00044"></a><span class="lineno"><a class="line" href="namespaceutil.html#a60893a3cb25d9aff16347e26b602141b"> 44</a></span>LONGLONG <a class="code hl_function" href="namespaceutil.html#a60893a3cb25d9aff16347e26b602141b">util::FileTime_to_POSIX</a>(FILETIME ft)</div>
|
|
<div class="line"><a id="l00045" name="l00045"></a><span class="lineno"> 45</span>{</div>
|
|
<div class="line"><a id="l00046" name="l00046"></a><span class="lineno"> 46</span> <span class="comment">// takes the last modified date</span></div>
|
|
<div class="line"><a id="l00047" name="l00047"></a><span class="lineno"> 47</span> LARGE_INTEGER date;</div>
|
|
<div class="line"><a id="l00048" name="l00048"></a><span class="lineno"> 48</span> date.HighPart = ft.dwHighDateTime;</div>
|
|
<div class="line"><a id="l00049" name="l00049"></a><span class="lineno"> 49</span> date.LowPart = ft.dwLowDateTime;</div>
|
|
<div class="line"><a id="l00050" name="l00050"></a><span class="lineno"> 50</span> <span class="keywordflow">return</span> <a class="code hl_function" href="namespaceutil.html#a997df248c1c5179ac292aa9a34a8013e">LargeTime_to_POSIX</a>(date);</div>
|
|
<div class="line"><a id="l00051" name="l00051"></a><span class="lineno"> 51</span>}</div>
|
|
</div>
|
|
<div class="line"><a id="l00052" name="l00052"></a><span class="lineno"> 52</span> </div>
|
|
<div class="line"><a id="l00053" name="l00053"></a><span class="lineno"> 53</span> </div>
|
|
<div class="line"><a id="l00054" name="l00054"></a><span class="lineno"> 54</span><span class="comment">//---</span></div>
|
|
<div class="line"><a id="l00055" name="l00055"></a><span class="lineno"> 55</span> </div>
|
|
<div class="foldopen" id="foldopen00056" data-start="{" data-end="}">
|
|
<div class="line"><a id="l00056" name="l00056"></a><span class="lineno"><a class="line" href="namespaceutil.html#a1735e5b81407395fd70e22d944855bec"> 56</a></span>LONGLONG <a class="code hl_function" href="namespaceutil.html#a1735e5b81407395fd70e22d944855bec">util::process_start_time</a>(IN DWORD pid)</div>
|
|
<div class="line"><a id="l00057" name="l00057"></a><span class="lineno"> 57</span>{</div>
|
|
<div class="line"><a id="l00058" name="l00058"></a><span class="lineno"> 58</span> <span class="keyword">static</span> <span class="keyword">auto</span> mod = GetModuleHandleA(<span class="stringliteral">"ntdll.dll"</span>);</div>
|
|
<div class="line"><a id="l00059" name="l00059"></a><span class="lineno"> 59</span> <span class="keywordflow">if</span> (!mod) <span class="keywordflow">return</span> <a class="code hl_define" href="time__util_8h.html#a0dd0def9d0d1f83eab3aa811bedbc3e4">INVALID_TIME</a>;</div>
|
|
<div class="line"><a id="l00060" name="l00060"></a><span class="lineno"> 60</span> </div>
|
|
<div class="line"><a id="l00061" name="l00061"></a><span class="lineno"> 61</span> <span class="keyword">static</span> <span class="keyword">auto</span> pNtQuerySystemInformation = <span class="keyword">reinterpret_cast<</span>decltype(&NtQuerySystemInformation)<span class="keyword">></span>(GetProcAddress(mod, <span class="stringliteral">"NtQuerySystemInformation"</span>));</div>
|
|
<div class="line"><a id="l00062" name="l00062"></a><span class="lineno"> 62</span> <span class="keywordflow">if</span> (!pNtQuerySystemInformation) <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a id="l00063" name="l00063"></a><span class="lineno"> 63</span> </div>
|
|
<div class="line"><a id="l00064" name="l00064"></a><span class="lineno"> 64</span> <a class="code hl_struct" href="structutil_1_1_auto_buffer.html">util::AutoBuffer</a> bBuf;</div>
|
|
<div class="line"><a id="l00065" name="l00065"></a><span class="lineno"> 65</span> </div>
|
|
<div class="line"><a id="l00066" name="l00066"></a><span class="lineno"> 66</span> NTSTATUS status = STATUS_UNSUCCESSFUL;</div>
|
|
<div class="line"><a id="l00067" name="l00067"></a><span class="lineno"> 67</span> <span class="keywordflow">while</span> (status != STATUS_SUCCESS) {</div>
|
|
<div class="line"><a id="l00068" name="l00068"></a><span class="lineno"> 68</span> ULONG ret_len = 0;</div>
|
|
<div class="line"><a id="l00069" name="l00069"></a><span class="lineno"> 69</span> status = pNtQuerySystemInformation(SystemProcessInformation, bBuf.<a class="code hl_variable" href="structutil_1_1_auto_buffer.html#ae91405161ad997bb473fcb5a6a4d0a16">buf</a>, bBuf.<a class="code hl_variable" href="structutil_1_1_auto_buffer.html#a35dc14f9ab1bc6b032a2cddec5246d4f">buf_size</a>, &ret_len);</div>
|
|
<div class="line"><a id="l00070" name="l00070"></a><span class="lineno"> 70</span> <span class="keywordflow">if</span> (status == STATUS_INFO_LENGTH_MISMATCH) {</div>
|
|
<div class="line"><a id="l00071" name="l00071"></a><span class="lineno"> 71</span> <span class="keywordflow">if</span> (!bBuf.<a class="code hl_function" href="structutil_1_1_auto_buffer.html#ac5f843dd06dac7de4297370f219d10de">alloc</a>(ret_len)) {</div>
|
|
<div class="line"><a id="l00072" name="l00072"></a><span class="lineno"> 72</span> <span class="keywordflow">return</span> <a class="code hl_define" href="time__util_8h.html#a0dd0def9d0d1f83eab3aa811bedbc3e4">INVALID_TIME</a>;</div>
|
|
<div class="line"><a id="l00073" name="l00073"></a><span class="lineno"> 73</span> }</div>
|
|
<div class="line"><a id="l00074" name="l00074"></a><span class="lineno"> 74</span> <span class="keywordflow">continue</span>; <span class="comment">// try again</span></div>
|
|
<div class="line"><a id="l00075" name="l00075"></a><span class="lineno"> 75</span> }</div>
|
|
<div class="line"><a id="l00076" name="l00076"></a><span class="lineno"> 76</span> <span class="keywordflow">break</span>; <span class="comment">//other error, or success</span></div>
|
|
<div class="line"><a id="l00077" name="l00077"></a><span class="lineno"> 77</span> };</div>
|
|
<div class="line"><a id="l00078" name="l00078"></a><span class="lineno"> 78</span> </div>
|
|
<div class="line"><a id="l00079" name="l00079"></a><span class="lineno"> 79</span> <span class="keywordflow">if</span> (status != STATUS_SUCCESS) {</div>
|
|
<div class="line"><a id="l00080" name="l00080"></a><span class="lineno"> 80</span> <span class="keywordflow">return</span> <a class="code hl_define" href="time__util_8h.html#a0dd0def9d0d1f83eab3aa811bedbc3e4">INVALID_TIME</a>;</div>
|
|
<div class="line"><a id="l00081" name="l00081"></a><span class="lineno"> 81</span> }</div>
|
|
<div class="line"><a id="l00082" name="l00082"></a><span class="lineno"> 82</span> </div>
|
|
<div class="line"><a id="l00083" name="l00083"></a><span class="lineno"> 83</span> <span class="keywordtype">bool</span> found = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a id="l00084" name="l00084"></a><span class="lineno"> 84</span> SYSTEM_PROCESS_INFORMATION* info = (SYSTEM_PROCESS_INFORMATION*)bBuf.<a class="code hl_variable" href="structutil_1_1_auto_buffer.html#ae91405161ad997bb473fcb5a6a4d0a16">buf</a>;</div>
|
|
<div class="line"><a id="l00085" name="l00085"></a><span class="lineno"> 85</span> while (info) {</div>
|
|
<div class="line"><a id="l00086" name="l00086"></a><span class="lineno"> 86</span> <span class="keywordflow">if</span> (info->UniqueProcessId == pid) {</div>
|
|
<div class="line"><a id="l00087" name="l00087"></a><span class="lineno"> 87</span> found = <span class="keyword">true</span>;</div>
|
|
<div class="line"><a id="l00088" name="l00088"></a><span class="lineno"> 88</span> <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a id="l00089" name="l00089"></a><span class="lineno"> 89</span> }</div>
|
|
<div class="line"><a id="l00090" name="l00090"></a><span class="lineno"> 90</span> <span class="keywordflow">if</span> (!info->NextEntryOffset) {</div>
|
|
<div class="line"><a id="l00091" name="l00091"></a><span class="lineno"> 91</span> <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a id="l00092" name="l00092"></a><span class="lineno"> 92</span> }</div>
|
|
<div class="line"><a id="l00093" name="l00093"></a><span class="lineno"> 93</span> <span class="keywordtype">size_t</span> record_size = info->NextEntryOffset;</div>
|
|
<div class="line"><a id="l00094" name="l00094"></a><span class="lineno"> 94</span> <span class="keywordflow">if</span> (record_size < <span class="keyword">sizeof</span>(SYSTEM_PROCESS_INFORMATION)) {</div>
|
|
<div class="line"><a id="l00095" name="l00095"></a><span class="lineno"> 95</span> <span class="comment">// Record size smaller than expected, probably it is an old system that doesn not support the new version of this API</span></div>
|
|
<div class="line"><a id="l00096" name="l00096"></a><span class="lineno"> 96</span><span class="preprocessor">#ifdef _DEBUG</span></div>
|
|
<div class="line"><a id="l00097" name="l00097"></a><span class="lineno"> 97</span> std::cout << <span class="stringliteral">"The new version of SYSTEM_PROCESS_INFORMATION is not supported!\n"</span>;</div>
|
|
<div class="line"><a id="l00098" name="l00098"></a><span class="lineno"> 98</span><span class="preprocessor">#endif</span></div>
|
|
<div class="line"><a id="l00099" name="l00099"></a><span class="lineno"> 99</span> <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a id="l00100" name="l00100"></a><span class="lineno"> 100</span> }</div>
|
|
<div class="line"><a id="l00101" name="l00101"></a><span class="lineno"> 101</span> info = (SYSTEM_PROCESS_INFORMATION*)((ULONG_PTR)info + info->NextEntryOffset);</div>
|
|
<div class="line"><a id="l00102" name="l00102"></a><span class="lineno"> 102</span> <span class="keywordflow">if</span> (!info) {</div>
|
|
<div class="line"><a id="l00103" name="l00103"></a><span class="lineno"> 103</span> <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a id="l00104" name="l00104"></a><span class="lineno"> 104</span> }</div>
|
|
<div class="line"><a id="l00105" name="l00105"></a><span class="lineno"> 105</span> }</div>
|
|
<div class="line"><a id="l00106" name="l00106"></a><span class="lineno"> 106</span> </div>
|
|
<div class="line"><a id="l00107" name="l00107"></a><span class="lineno"> 107</span> <span class="keywordflow">if</span> (!found) {</div>
|
|
<div class="line"><a id="l00108" name="l00108"></a><span class="lineno"> 108</span> <span class="keywordflow">return</span> <a class="code hl_define" href="time__util_8h.html#a0dd0def9d0d1f83eab3aa811bedbc3e4">INVALID_TIME</a>;</div>
|
|
<div class="line"><a id="l00109" name="l00109"></a><span class="lineno"> 109</span> }</div>
|
|
<div class="line"><a id="l00110" name="l00110"></a><span class="lineno"> 110</span> </div>
|
|
<div class="line"><a id="l00111" name="l00111"></a><span class="lineno"> 111</span> LARGE_INTEGER createTime = info->CreateTime;</div>
|
|
<div class="line"><a id="l00112" name="l00112"></a><span class="lineno"> 112</span> <span class="keywordflow">return</span> <a class="code hl_function" href="namespaceutil.html#a997df248c1c5179ac292aa9a34a8013e">util::LargeTime_to_POSIX</a>(createTime);</div>
|
|
<div class="line"><a id="l00113" name="l00113"></a><span class="lineno"> 113</span>}</div>
|
|
</div>
|
|
<div class="line"><a id="l00114" name="l00114"></a><span class="lineno"> 114</span> </div>
|
|
<div class="ttc" id="acustom__buffer_8h_html"><div class="ttname"><a href="custom__buffer_8h.html">custom_buffer.h</a></div></div>
|
|
<div class="ttc" id="anamespaceutil_html_a1735e5b81407395fd70e22d944855bec"><div class="ttname"><a href="namespaceutil.html#a1735e5b81407395fd70e22d944855bec">util::process_start_time</a></div><div class="ttdeci">LONGLONG process_start_time(IN DWORD processID)</div><div class="ttdef"><b>Definition</b> <a href="#l00056">time_util.cpp:56</a></div></div>
|
|
<div class="ttc" id="anamespaceutil_html_a60893a3cb25d9aff16347e26b602141b"><div class="ttname"><a href="namespaceutil.html#a60893a3cb25d9aff16347e26b602141b">util::FileTime_to_POSIX</a></div><div class="ttdeci">LONGLONG FileTime_to_POSIX(FILETIME ft)</div><div class="ttdef"><b>Definition</b> <a href="#l00044">time_util.cpp:44</a></div></div>
|
|
<div class="ttc" id="anamespaceutil_html_a928be58496639689a6a86142ab7030eb"><div class="ttname"><a href="namespaceutil.html#a928be58496639689a6a86142ab7030eb">util::strtime</a></div><div class="ttdeci">std::wstring strtime(const time_t t)</div><div class="ttdef"><b>Definition</b> <a href="#l00015">time_util.cpp:15</a></div></div>
|
|
<div class="ttc" id="anamespaceutil_html_a997df248c1c5179ac292aa9a34a8013e"><div class="ttname"><a href="namespaceutil.html#a997df248c1c5179ac292aa9a34a8013e">util::LargeTime_to_POSIX</a></div><div class="ttdeci">LONGLONG LargeTime_to_POSIX(LARGE_INTEGER date)</div><div class="ttdef"><b>Definition</b> <a href="#l00028">time_util.cpp:28</a></div></div>
|
|
<div class="ttc" id="astructutil_1_1_auto_buffer_html"><div class="ttname"><a href="structutil_1_1_auto_buffer.html">util::AutoBuffer</a></div><div class="ttdef"><b>Definition</b> <a href="custom__buffer_8h_source.html#l00006">custom_buffer.h:7</a></div></div>
|
|
<div class="ttc" id="astructutil_1_1_auto_buffer_html_a35dc14f9ab1bc6b032a2cddec5246d4f"><div class="ttname"><a href="structutil_1_1_auto_buffer.html#a35dc14f9ab1bc6b032a2cddec5246d4f">util::AutoBuffer::buf_size</a></div><div class="ttdeci">size_t buf_size</div><div class="ttdef"><b>Definition</b> <a href="custom__buffer_8h_source.html#l00036">custom_buffer.h:36</a></div></div>
|
|
<div class="ttc" id="astructutil_1_1_auto_buffer_html_ac5f843dd06dac7de4297370f219d10de"><div class="ttname"><a href="structutil_1_1_auto_buffer.html#ac5f843dd06dac7de4297370f219d10de">util::AutoBuffer::alloc</a></div><div class="ttdeci">BYTE * alloc(size_t _buf_size)</div><div class="ttdef"><b>Definition</b> <a href="custom__buffer_8h_source.html#l00019">custom_buffer.h:19</a></div></div>
|
|
<div class="ttc" id="astructutil_1_1_auto_buffer_html_ae91405161ad997bb473fcb5a6a4d0a16"><div class="ttname"><a href="structutil_1_1_auto_buffer.html#ae91405161ad997bb473fcb5a6a4d0a16">util::AutoBuffer::buf</a></div><div class="ttdeci">BYTE * buf</div><div class="ttdef"><b>Definition</b> <a href="custom__buffer_8h_source.html#l00034">custom_buffer.h:34</a></div></div>
|
|
<div class="ttc" id="atime__util_8h_html"><div class="ttname"><a href="time__util_8h.html">time_util.h</a></div></div>
|
|
<div class="ttc" id="atime__util_8h_html_a0dd0def9d0d1f83eab3aa811bedbc3e4"><div class="ttname"><a href="time__util_8h.html#a0dd0def9d0d1f83eab3aa811bedbc3e4">INVALID_TIME</a></div><div class="ttdeci">#define INVALID_TIME</div><div class="ttdef"><b>Definition</b> <a href="time__util_8h_source.html#l00007">time_util.h:7</a></div></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.17.0
|
|
</small></address>
|
|
</div><!-- doc-content -->
|
|
</body>
|
|
</html>
|