Method ParseProcessStartStop

WinSysCore/TraceManager.cpp:191–218

}

bool TraceManager::ParseProcessStartStop(EventData* data) {
	if (data->GetEventName().substr(0, 8) != L"Process/")
		return false;

	switch (data->GetEventDescriptor().Opcode)
	{
		case 1:	// process created
		{
			auto prop = data->GetProperty(L"ImageFileName");
			if (prop) {
				auto name = prop->GetAnsiString();
				if (name) {
					std::wstring pname;
					pname.assign(name, name + strlen(name));
					AddProcessName(data->GetProperty(L"ProcessId")->GetValue<DWORD>(), pname);
					assert(!pname.empty());
				}
			}
			break;
		}

		case 2: // process end
			RemoveProcessName(data->GetProcessId());
			break;
	}

	return true;
}

void TraceManager::ResetIndex(uint32_t index) {
	_index = index;