MASM32编程将TimeStamp/UTC转换为具体日期时间的几个有用函数代码

我会带着你远行 2024-02-17 19:53 35阅读 0赞

这两天在编写一个读取系统事件日志的程序，其中结构变量EVENTLOGRECORD中成员TimeGenerated和TimeWritten的值为：

> The time at which this entry was submitted. This time is measured in the number of seconds elapsed since 00:00:00 January 1, 1970, Universal Coordinated Time.

即从格林尼治时间1970年1月1日夜里12：00开始的秒数。  
  
Windows系统好像没有直接提供将其转换为对应的年月日、时分秒的API函数。

Google了一下，在  
[http://www.asmcommunity.net/board/index.php?topic=18369.0][http_www.asmcommunity.net_board_index.php_topic_18369.0]  
找到了donkey网友提供的方法，整理如下：

> BaseTimeLow equ 0D53E8000h  
> BaseTimeHigh equ 19DB1DEh  
>   
>   
> StampToLocalDateTime proc dwStamp: dword, lpstLocalTime: dword  
> local stUtcFileTime: FILETIME  
> local stLocalFileTime: FILETIME  
>   
> mov eax, dwStamp  
> mov edx,10000000  
> mul edx  
> add eax, BaseTimeLow  
> adc edx, BaseTimeHigh  
>   
> mov stUtcFileTime.dwLowDateTime, eax  
> mov stUtcFileTime.dwHighDateTime, edx  
> invoke FileTimeToLocalFileTime, addr stUtcFileTime, addr stLocalFileTime  
> invoke FileTimeToSystemTime, addr stLocalFileTime, lpstLocalTime  
>   
> ret  
> StampToLocalDateTime endp  
>   
>   
> LOCALE\_SYSTEM\_DEFAULT equ 0  
> g\_szFmtDate db "yyyy-M-d", 0  
> printDate proc lpstDate: dword  
> local buf\[12\]: byte  
> invoke GetDateFormat, LOCALE\_SYSTEM\_DEFAULT, NULL, lpstDate, offset g\_szFmtDate, addr buf, sizeof buf  
> m\_InsTxt addr buf  
> ret  
> printDate endp  
>   
> ;LOCALE\_SYSTEM\_DEFAULT equ 0  
> g\_szFmtTime db "H:m:ss", 0  
> printTime proc lpstTime: dword  
> local buf\[9\]: byte  
> invoke GetTimeFormat, LOCALE\_SYSTEM\_DEFAULT, NULL, lpstTime, offset g\_szFmtTime, addr buf, sizeof buf  
> m\_InsTxt addr buf  
> ret  
> printTime endp  
>   
>   
> g\_szFmtDateTime db "%d-%d-%d %d:%d:%d", 0  
> printDateTime proc lpstDateTime: DWORD  
> local buf\[30\]: byte  
>   
> pusha  
> mov edi, lpstDateTime  
> movzx eax, (SYSTEMTIME ptr \[edi\]).wYear  
> movzx ebx, (SYSTEMTIME ptr \[edi\]).wMonth  
> movzx ecx, (SYSTEMTIME ptr \[edi\]).wDay  
> movzx edx, (SYSTEMTIME ptr \[edi\]).wHour  
> movzx esi, (SYSTEMTIME ptr \[edi\]).wMinute  
> movzx edi, (SYSTEMTIME ptr \[edi\]).wSecond  
>   
> invoke wsprintf, addr buf, addr g\_szFmtDateTime, eax, ebx, ecx,edx, esi, edi  
> popa  
>   
> ret  
> printDateTime endp

[http_www.asmcommunity.net_board_index.php_topic_18369.0]: http://www.asmcommunity.net/board/index.php?topic=18369.0