MyGetCurrentTime 驱动获取当前时间

 

MyGetCurrentTime 驱动获取当前时间

 

//比 __TIME__ 精准

VOID MyGetCurrentTime()
{
 LARGE_INTEGER snow,now;
 TIME_FIELDS now_fields;
 NTSTATUS status;
 
 //获取标准时间
 KeQuerySystemTime(&snow);

 //转为当地时间
 ExSystemTimeToLocalTime(&snow,&now);

 //转为可视时间
 RtlTimeToTimeFields(&now,&now_fields);

 /*
 status = RtlStringCchPrintfW(time_str,
      32*2,
      L"当前时间: %4d-%2d-%2d-%2d %2d-%2d-%2d",
      now_fields.Year,
      now_fields.Month,
      now_fields.Day,
      now_fields.Hour,
      now_fields.Minute,
      now_fields.Second);
      */

 DbgPrint("当前时间: %04d-%02d-%02d %02d:%02d:%02d",
  now_fields.Year,
  now_fields.Month,
  now_fields.Day,
  now_fields.Hour,
  now_fields.Minute,
  now_fields.Second);

}

 

 

//内核休眠函数

 

#define DELAY_ONE_MICROSECOND (-10)
#define DELAY_ONE_MILLISECOND (DELAY_ONE_MICROSECOND*1000)

VOID MySleep(LONG msec)   //毫秒
{
 LARGE_INTEGER my_interval;
 my_interval.QuadPart = DELAY_ONE_MILLISECOND;
 my_interval.QuadPart *=msec;
 KeDelayExecutionThread(KernelMode,0,&my_interval);
 DbgPrint("正在执行函数MySleep!/r/n");
}