Convert Registry Shutdown value to date/time

[HeidiR]

Hi All,

I'm trying to convert the Windows registry Shutdown value to a date/time string. The reg path and key are below.

RegRead("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows", "ShutdownTime")

However, I have not yet been successful iin converting the REG_BINARY value (e.g. hex:b0,ce,a6,34,68,4f,c9,01) to a date/time string.

Any ideas?

[ProgAndy]

This is a FileTime structure in binayr format. You can read it like this:

#include<Date.au3>
; Read Value
$RegVal = RegRead("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows", "ShutdownTime") 
; Create a FileTime Struct (in bytes, so you can set registry value)
$FileTime = DllStructCreate("byte[" & _SIZEOF($tagFILETIME) & "]")
; set data to struct
DllStructSetData($FileTime,1,Binary("0x"&$RegVal))
; Convert to String
$String = _Date_Time_FileTimeToStr($FileTime)

MsgBox(0, '', $String)

; Prog@ndy
Func _SIZEOF($tagStruct)
    Return DllStructGetSize(DllStructCreate($tagStruct,1))
EndFunc

[Bert]

http://www.autoitscript.com/forum/index.ph...ead++REG_BINARY

[HeidiR]

This is a FileTime structure in binayr format. You can read it like this:

#include<Date.au3>
; Read Value
$RegVal = RegRead("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows", "ShutdownTime") 
; Create a FileTime Struct (in bytes, so you can set registry value)
$FileTime = DllStructCreate("byte[" & _SIZEOF($tagFILETIME) & "]")
; set data to struct
DllStructSetData($FileTime,1,Binary("0x"&$RegVal))
; Convert to String
$String = _Date_Time_FileTimeToStr($FileTime)

MsgBox(0, '', $String)

; Prog@ndy
Func _SIZEOF($tagStruct)
    Return DllStructGetSize(DllStructCreate($tagStruct,1))
EndFunc

Perfect! Many thanks for your help!

[meltman]

I'm actually trying to use the above code but $String always comes back as null.

I believe I'm having troubles using the _Date_Time_FileTimeToStr function as @Error returns 1. Any thoughts? I'm not much of a programmer, pretty new to this.

[holyeyed]

#include<Date.au3>
; Read Value
Func _filetime2str($RegVal = "6000000010000000")
; Create a FileTime Struct (in bytes, so you can set value)
$FileTime = DllStructCreate("struct; dword hi; dword lo; endstruct")
; set data to struct
;set hi value
DllStructSetData($FileTime,1,Binary("0x"&Stringleft($RegVal,8)))
;set lo value
DllStructSetData($FileTime,2,Binary("0x"&StringRight($RegVal,8))
; Convert to String
$String = _Date_Time_FileTimeToStr($FileTime)
ConsoleWrite($String&@CRLF)
return $String
EndFunc

this is what i use to convert 64bit FileTime value from registry into Readable Date/Time string

convert 64bit Filetime hex string into local time String