获取本地时间

  1. #include <ntddk.h>
  2. #include <ntstrsafe.h>
  3. VOID UnloadDriver(PDRIVER_OBJECT pDriver)
  4. {
  5.     DbgPrint("卸载成功\n");
  6. }
  8. NTSTATUS DriverEntry(PDRIVER_OBJECT pDriver, PUNICODE_STRING pRegPath)
  9. {
  10.     //创建两个格林威治时间变量
  11.     LARGE_INTEGER stime, ltime;
  12.     //定义人为可读懂时间对象
  13.     TIME_FIELDS retime;
  14.     //定义宽字符串来存年月日等信息
  15.     WCHAR time_str[32] = { 0 };
  16.     //查询系统时间
  17.     KeQuerySystemTime(&stime);
  18.     //系统时间转本地时间
  19.     ExSystemTimeToLocalTime(&stime, &ltime);
  20.     //把本地时间转为时间对象
  21.     RtlTimeToTimeFields(&ltime, &retime);
  22.     //按照一定格式把时间对象的值转换到宽字符数组中
  23.     RtlStringCchPrintfW(time_str, 32, L"%4d-%2d-%2d %2d-%2d-%2d", retime.Year, retime.Month, retime.Day, retime.Hour, retime.Minute, retime.Second);
  24.     DbgPrint("当前时间：%ws", time_str);
  25.     pDriver->DriverUnload = UnloadDriver;
  26. }