Method UpdateNewProcess

PeaceMakerGUI/InvestigateProcessWindow.cpp:127–254

* @brief InvestigateProcessWindow::UpdateNewProcess - Set the investigator to display another process. * @param detailedProcessInformation - The new process to display. */

 * @param detailedProcessInformation - The new process to display.
 */
void InvestigateProcessWindow::UpdateNewProcess(PROCESS_DETAILED_REQUEST detailedProcessInformation)
{
    std::time_t processExecutionDate;
    std::string dateString;
    ULONG i;
    CHAR tempBuffer[sizeof(SYMBOL_INFO) + MAX_SYM_NAME];
    PSYMBOL_INFO currentSymbolInformation;
    ULONG64 offset;
    QString stackHistoryString;
    QString tooltip;
    QTableWidgetItem* newWidget;
    bool stackHistoryViolation;

    memset(tempBuffer, 0, sizeof(tempBuffer));
    currentSymbolInformation = RCAST<PSYMBOL_INFO>(tempBuffer);
    currentSymbolInformation->SizeOfStruct = sizeof(SYMBOL_INFO);
    currentSymbolInformation->MaxNameLen = MAX_SYM_NAME;

    //
    // First, we need to convert the epoch time to a date.
    //
    processExecutionDate = detailedProcessInformation.EpochExecutionTime;
    dateString = std::ctime(&processExecutionDate);
    dateString[dateString.length()-1] = '\0'; // Remove the newline.

    this->ProcessId = detailedProcessInformation.ProcessId;
    this->EpochExecutionTime = detailedProcessInformation.EpochExecutionTime;

    //
    // Copy basic process information.
    //
    this->ui->ProcessInformationTable->setItem(0, 1, new QTableWidgetItem(QString::number(RCAST<ULONG64>(detailedProcessInformation.ProcessId))));

    newWidget = new QTableWidgetItem(QString::fromWCharArray(detailedProcessInformation.ProcessPath));
    newWidget->setToolTip(QString::fromWCharArray(detailedProcessInformation.ProcessPath));
    this->ui->ProcessInformationTable->setItem(1, 1, newWidget);

    newWidget = new QTableWidgetItem(QString::fromWCharArray(detailedProcessInformation.ProcessCommandLine));
    newWidget->setToolTip(QString::fromWCharArray(detailedProcessInformation.ProcessCommandLine));
    this->ui->ProcessInformationTable->setItem(2, 1, newWidget);

    this->ui->ProcessInformationTable->setItem(3, 1, new QTableWidgetItem(QString::fromStdString(dateString)));
    this->ui->ProcessInformationTable->resizeRowsToContents();

    this->ui->ProcessInformationTable->setItem(4, 1, new QTableWidgetItem(QString::number(RCAST<ULONG64>(detailedProcessInformation.CallerProcessId))));

    //newWidget = new QTableWidgetItem(QString::fromWCharArray(detailedProcessInformation.CallerProcessPath));
    //newWidget->setToolTip(QString::fromWCharArray(detailedProcessInformation.CallerProcessPath));
    //this->ui->ProcessInformationTable->setItem(5, 1, new QTableWidgetItem(QString::fromWCharArray(detailedProcessInformation.CallerProcessPath)));

    this->ui->ProcessInformationTable->setItem(5, 1, new QTableWidgetItem(QString::number(RCAST<ULONG64>(detailedProcessInformation.ParentProcessId))));

    newWidget = new QTableWidgetItem(QString::fromWCharArray(detailedProcessInformation.ParentProcessPath));
    newWidget->setToolTip(QString::fromWCharArray(detailedProcessInformation.ParentProcessPath));
    this->ui->ProcessInformationTable->setItem(6, 1, new QTableWidgetItem(QString::fromWCharArray(detailedProcessInformation.ParentProcessPath)));

    this->ui->ProcessInformationTable->resizeRowsToContents();