OrcLib: SystemDetails: add GetShutdownTimeFromRegistry

Author: fabienfl-orc

src/OrcLib/SystemDetails.cpp

@@ -26,6 +26,7 @@
 #include "BinaryBuffer.h"
 #include "Utils/Time.h"
 #include "Utils/TypeTraits.h"
+#include "Utils/Guard.h"
 
 namespace fs = std::filesystem;
 using namespace std::string_view_literals;
@@ -1007,6 +1008,34 @@ HRESULT Orc::SystemDetails::GetUserLanguage(std::wstring& strLanguage)
     return S_OK;
 }
 
+Result<std::chrono::system_clock::time_point> Orc::SystemDetails::GetShutdownTimeFromRegistry()
+{
+    const wchar_t key[] = L"SYSTEM\\CurrentControlSet\\Control\\Windows";
+
+    Guard::RegistryHandle hKey;
+    auto status = RegOpenKeyW(HKEY_LOCAL_MACHINE, key, &hKey.value());
+    if (status != ERROR_SUCCESS)
+    {
+        auto ec = Win32Error(status);
+        Log::Debug(L"Failed RegOpenKeyW (key: {}) [{}]", key, ec);
+        return ec;
+    }
+
+    FILETIME shutdownTime;
+    const wchar_t value[] = L"ShutdownTime";
+    DWORD valueType = 0L;
+    DWORD cbData = sizeof(shutdownTime);
+    status = RegQueryValueExW(hKey.value(), value, NULL, &valueType, (LPBYTE)&shutdownTime, &cbData);
+    if (status != ERROR_SUCCESS)
+    {
+        auto ec = Win32Error(status);
+        Log::Debug(L"Failed RegQueryValueExW (key: {}, value: {}) [{}]", key, value, ec);
+        return ec;
+    }
+
+    return FromFileTime(shutdownTime);
+}
+
 SystemDetails::DriveType SystemDetails::GetPathLocation(const std::wstring& strAnyPath)
 {
     WCHAR szVolume[ORC_MAX_PATH];

src/OrcLib/SystemDetails.h

@@ -114,6 +114,7 @@ class SystemDetails
     static HRESULT GetSystemLanguage(std::wstring& strLocale);
     static HRESULT GetUserLanguage(std::wstring& strLocale);
 
+    static Result<std::chrono::system_clock::time_point> GetShutdownTimeFromRegistry();
     static HRESULT GetCurrentWorkingDirectory(std::filesystem::path& cwd);
 
     static HRESULT GetProcessBinary(std::wstring& strFullPath);