Method FormatProperty

WinArk/FormatHelper.cpp:476–543

}

std::wstring FormatHelper::FormatProperty(const EventData* data, const EventProperty& prop){
	static const auto statusFunction = [](auto, auto& p) {
		CString result;
		ATLASSERT(p.GetLength() == sizeof(DWORD));
		result.Format(L"%0x%08X", p.GetValue<DWORD>());
		return (PCWSTR)result;
	};

	static const auto int64ToHex = [](auto, auto& p)->std::wstring {
		ATLASSERT(p.GetLength() == sizeof(LONGLONG));
		CString text;
		text.Format(L"0x%llX", p.GetValue<LONGLONG>());
		return (PCWSTR)text;
	};

	static const auto initialTimeToString = [](auto, auto& p) -> std::wstring {
		ATLASSERT(p.GetLength() == sizeof(LONGLONG));
		auto time = p.GetValue<time_t>();
		auto initTime = GetBootTime() + time;
		return std::wstring(FormatTime(initTime));
	};

	static const std::unordered_map<std::wstring,
		std::function<std::wstring(const EventData*, const EventProperty&)>> functions{
		{ L"Status", statusFunction },
		{ L"NtStatus", statusFunction },
		{ L"InitialTime", initialTimeToString },
		{ L"TimeDateStamp", statusFunction },
		{ L"PageFault/VirtualAlloc;Flags", [](auto, auto& p) -> std::wstring {
			ATLASSERT(p.GetLength() == sizeof(DWORD));
			return (PCWSTR)VirtualAllocFlagsToString(p.GetValue<DWORD>(), true);
			} },
		{ L"MajorFunction", [](auto, auto& p) -> std::wstring {
			ATLASSERT(p.GetLength() == sizeof(DWORD));
			return (PCWSTR)MajorFunctionToString((UCHAR)p.GetValue<DWORD>());
			} },
		{ L"FileName", [](auto data, auto& p) -> std::wstring {
			auto value = data->FormatProperty(p);
			if (value[0] == L'\\')
				value = TraceManager::GetDosNameFromNtName(value.c_str());
			return value;
			} },
		{ L"ObjectType", [](auto, auto& p) -> std::wstring {
			ATLASSERT(p.GetLength() == sizeof(USHORT));
			auto type = p.GetValue<USHORT>();
			return std::to_wstring(type) + L" (" + ObjectTypeToString(type) + L")";
			} },
		{ L"Tag", [](auto data, auto& p) -> std::wstring {
			if (p.GetLength() != sizeof(DWORD))
				return data->FormatProperty(p);
			auto tag = p.GetValue<DWORD>();
			auto chars = (const char*)&tag;
			CStringA str(chars[0]);
			((str += chars[1]) += chars[2]) += chars[3];
			CStringA text;
			text.Format("%s (0x%X)", str, tag);
			return std::wstring(CString(text));
			} },