ms_dtyp 0.0.3

Data types of [MS-DTYP] (incomplete)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

use crate::DWORD;

/// ```c
/// typedef struct _FILETIME {
///   DWORD dwLowDateTime;
///   DWORD dwHighDateTime;
/// } FILETIME,
///  *PFILETIME,
///  *LPFILETIME;
/// ```
#[derive(Clone, Debug, PartialEq, Default)]
pub struct FILETIME {
    pub dwLowDateTime: DWORD,
    pub dwHighDateTime: DWORD,
}

impl FILETIME {
    pub fn new(dwLowDateTime: DWORD, dwHighDateTime: DWORD) -> Self {
        return Self {
            dwHighDateTime,
            dwLowDateTime,
        };
    }

    pub fn from_unix_timestamp(timestamp: u64) -> Self {
        let file_timestamp = timestamp * 10000000 + 116444736000000000;
        return file_timestamp.into();
    }

    pub fn to_le_bytes(&self) -> [u8; 8] {
        let low_bytes = self.dwLowDateTime.to_le_bytes();
        let high_bytes = self.dwHighDateTime.to_le_bytes();

        return [
            low_bytes[0],
            low_bytes[1],
            low_bytes[2],
            low_bytes[3],
            high_bytes[0],
            high_bytes[1],
            high_bytes[2],
            high_bytes[3],
        ];
    }
}

impl From<u64> for FILETIME {
    fn from(timestamp: u64) -> Self {
        return Self::new(
            timestamp as u32,
            (timestamp >> 32) as u32 
        );
    }
}

#[cfg(test)]
mod test {
    use super::*;

    #[test]
    fn test_filetime_to_le_bytes() {
        let ft = FILETIME::new(0x16fe6d00, 0x1d630f2);
        assert_eq!(
            [0x00, 0x6D, 0xFE, 0x16, 0xF2, 0x30, 0xD6, 0x01],
            ft.to_le_bytes()
        );
    }

    #[test]
    fn test_filetime_from_u64() {
        assert_eq!(
            FILETIME::new(0xa3b82380, 0x1d63110),
            0x1d63110a3b82380.into()
        )
    }
    
}