Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I did not manage to figure out what the hex number mean, but the second number is ANSI date, that is the number of days elapsed since 1st January 1601. The parameter is the number of seconds elapsed since 1900-01-01 00:00:00, but it has reverse byte order, the first byte is the least significant (1900-01-01 00:00:01 is encoded as 0x01000000). To have w32tm print out 15th January 2013 22:00 UTC, use this command:</p> <pre><code>w32tm /ntpte 0xe04fa0d4 </code></pre> <p>or</p> <pre><code>w32tm /ntpte 3763314900 </code></pre> <p>(conversion from hex to decimal is as if the byte order was normal).</p> <p>EDIT: It seems that the hex value printed by w32tm is a 64-bit integer representing the number of 100-nanosecond intervals since 1st January 1601. From this <a href="https://stackoverflow.com/questions/6256703/convert-64bit-timestamp-to-a-readable-value">article</a> I know this is how Windows stores FILETIME.</p> <p>EDIT2: After some more playing I found two another things:</p> <ol> <li><p>Parameter passed to <code>w32tm /ntpte</code> is really a 64-bit integer. As I wrote before, most significant 32-bits represent the number of seconds since 1900-01-01 00:00:00, while least significant 32-bits represent the fraction of second. The whole 64-bit number represents the number of 1/(2 to the power 32) second intervals since 1st January 1900. So <code>0x0000008000000000</code> is equal to 1/2 second after 1900-01-01 00:00:00.</p></li> <li><p>The hex value printed by <code>w32tm /ntpte</code> can be directly passed as a parameter to <code>w32tm /ntte</code></p></li> </ol>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload