Function ReadSysInternalsLogFileMessage

DebugView++Lib/FileIO.cpp:220–250

}

bool ReadSysInternalsLogFileMessage(const std::string& data, Line& line, USTimeConverter& converter)
{
	TabSplitter split(data);
	auto col1 = split.GetNext();
	auto col2 = split.GetNext();
	auto col3 = split.GetTail();

	// depending on regional settings Sysinternals debugview logs time differently.
	// we support the four most common formats
	// 'hh:MM:SS.mmm tt', 'hh:MM:SS tt', 'HH:MM:SS.mmm' and 'HH:MM:SS' 
	if (!converter.ReadLocalTimeUSRegionMs(col2,line.systemTime))			// try hh:MM:SS.mmm tt
		if (!converter.ReadLocalTimeUSRegion(col2,line.systemTime))		// try hh:MM:SS tt
			if (!ReadLocalTimeMs(col2, line.systemTime))		// try HH:MM:SS.mmm
				if (!ReadLocalTime(col2, line.systemTime))      // try HH:MM:SS
					ReadTime(col2, line.time);					// otherwise assume relative time: S.mmmmmm

	if (!col3.empty() && col3[0] == '[')						// messages from processes are preceeded by [pid], but kernel messages do not have a prefix
	{
		line.processName = "[unavailable]";
		std::istringstream is3(col3);
		char c1, c2, c3;
		if (is3 >> std::noskipws >> c1 >> line.pid >> c2 >> c3 && c1 == '[' && c2 == ']' && c3 == ' ' && std::getline(is3, line.message))
			return true;
	}
	else
	{
		line.processName = "[kernel]";
	}
	line.message = split.GetTail();
	return true;
}

bool ReadLogFileMessage(const std::string& data, Line& line)
{