osquery/tables/system/windows/registry.cpp
static LONGLONG filetimeToUnixtime(FILETIME ft) {
  LARGE_INTEGER date, adjust;
  date.HighPart = ft.dwHighDateTime;
  date.LowPart = ft.dwLowDateTime;
  adjust.QuadPart = 11644473600000 * 10000;
  date.QuadPart -= adjust.QuadPart;
  return date.QuadPart / 10000000;
}
/// Takes a Windows FILETIME object and returns seconds since epoch
Takes a Windows FILETIME object and returns seconds since epoch
Takes a Windows FILETIME object and returns seconds since epoch
static LONGLONG filetimeToUnixtime(FILETIME ft) {
  LARGE_INTEGER date, adjust;
  date.HighPart = ft.dwHighDateTime;
  date.LowPart = ft.dwLowDateTime;
  adjust.QuadPart = 11644473600000 * 10000;
  date.QuadPart -= adjust.QuadPart;
  return date.QuadPart / 10000000;
}
static LONGLONG filetimeToUnixtime ( FILETIME ft ) { LARGE_INTEGER date , adjust ; date . HighPart = ft . dwHighDateTime ; date . LowPart = ft . dwLowDateTime ; adjust . QuadPart = 11644473600000 * 10000 ; date . QuadPart -= adjust . QuadPart ; return date . QuadPart / 10000000 ; }
Takes a Windows FILETIME object and returns seconds since epoch
Takes a Windows FILETIME object and returns seconds since epoch