WheapGetTimestamp
VOID __stdcall WheapGetTimestamp(_WHEA_TIMESTAMP *Timestamp){
_LARGE_INTEGER v1;
int v3;
_WORD v4[8];
_LARGE_INTEGER v5;
*(_OWORD *)v4 = 0i64;
v5 = *(_LARGE_INTEGER *)&KUSER_SHARED_DATA.SystemTime.LowPart;
RtlpTimeToTimeFields(&v5, v4, v1);
v3 = v4[0];
*(_BYTE *)&Timestamp->0 = v4[5];
*((_BYTE *)&Timestamp->0 + 1) = v4[4];
BYTE2(Timestamp->AsLARGE_INTEGER.u.LowPart) = v4[3];
Timestamp->AsLARGE_INTEGER.QuadPart &= ~0x1000000ui64;
BYTE4(Timestamp->AsLARGE_INTEGER.QuadPart) = v4[2];
BYTE5(Timestamp->AsLARGE_INTEGER.QuadPart) = v4[1];
HIBYTE(Timestamp->AsLARGE_INTEGER.QuadPart) = v3 / 100;
BYTE6(Timestamp->AsLARGE_INTEGER.QuadPart) = v3 % 100;
}Referenced by:
WheaInitializeRecordHeader