No OneTemporary
Actions

Size

33 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/trunk/mainwindow.h b/trunk/datainterpreter.cpp
	similarity index 53%
	copy from trunk/mainwindow.h
	copy to trunk/datainterpreter.cpp
	index 4a32622..6cf0e84 100644
	--- a/trunk/mainwindow.h
	+++ b/trunk/datainterpreter.cpp
	@@ -1,76 +1,72 @@
	/*******************************************************************************
	* fred Copyright (c) 2011 by Gillen Daniel <gillen.dan@pinguin.lu> *
	* *
	* Forensic Registry EDitor (fred) is a cross-platform M$ registry hive editor *
	* with special feautures useful during forensic analysis. *
	* *
	* This program is free software: you can redistribute it and/or modify it *
	* under the terms of the GNU General Public License as published by the Free *
	* Software Foundation, either version 3 of the License, or (at your option) *
	* any later version. *
	* *
	* This program is distributed in the hope that it will be useful, but WITHOUT *
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or *
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for *
	* more details. *
	* *
	* You should have received a copy of the GNU General Public License along with *
	* this program. If not, see <http://www.gnu.org/licenses/>. *
	*******************************************************************************/

	-#ifndef MAINWINDOW_H
	-#define MAINWINDOW_H
	+#include "datainterpreter.h"

	-#include <QMainWindow>
	+#include <QHeaderView>
	+#include <QFontMetrics>

	-#include <hivex.h>
	-
	-#include "registrynodetreemodel.h"
	-#include "registrykeytablemodel.h"
	-#include "qhexedit/qhexedit.h"
	-
	-namespace Ui {
	- class MainWindow;
	+DataInterpreter::DataInterpreter(QWidget *p_parent)
	+ : QTableWidget(p_parent)
	+{
	+ this->setColumnCount(2);
	+ this->setTextElideMode(Qt::ElideNone);
	+ this->horizontalHeader()->setHidden(true);
	+ this->verticalHeader()->setHidden(true);
	}

	-class MainWindow : public QMainWindow {
	- Q_OBJECT
	-
	- public:
	- explicit MainWindow(QWidget *parent = 0);
	- ~MainWindow();
	-
	- private slots:
	- void on_action_Quit_triggered();
	- void on_action_Open_hive_triggered();
	- void on_action_Close_hive_triggered();
	- void on_actionAbout_Qt_triggered();
	- void on_actionAbout_fred_triggered();
	+DataInterpreter::~DataInterpreter() {
	+ // Free table widget items
	+ this->ClearValues();
	+}

	- void SlotNodeTreeClicked(QModelIndex index);
	- void SlotKeyTableClicked(QModelIndex index);
	- void SlotKeyTableDoubleClicked(QModelIndex index);
	- void SlotUpdateDataInterpreter(int hex_offset);
	+void DataInterpreter::AddValue(QString name, QString value) {
	+ QTableWidgetItem *p_name_item=new QTableWidgetItem(name);
	+ QTableWidgetItem *p_value_item=new QTableWidgetItem(value);
	+ this->setRowCount(this->rowCount()+1);
	+ this->setItem(this->rowCount()-1,0,p_name_item);
	+ this->setItem(this->rowCount()-1,1,p_value_item);
	+ this->resizeColumnsToContents();
	+ this->resizeRowsToContents();
	+}

	-private:
	- Ui::MainWindow *ui;
	- QString last_open_location;
	- hive_h *hhive;
	- bool is_hive_open;
	- RegistryNodeTreeModel *p_reg_node_tree_model;
	- RegistryKeyTableModel *p_reg_key_table_model;
	- QByteArray selected_key_value;
	+void DataInterpreter::ClearValues() {
	+ // Free all items
	+ while(this->rowCount()>0) {
	+ delete this->item(0,0);
	+ delete this->item(0,1);
	+ this->setRowCount(this->rowCount()-1);
	+ }
	+}

	- // Widgets
	- QTreeView *p_node_tree;
	- QTableView *p_key_table;
	- QHexEdit *p_hex_edit;
	- QLabel *p_data_interpreter;
	- QSplitter *p_horizontal_splitter;
	- QSplitter *p_horizontal_splitter2;
	- QSplitter *p_vertical_splitter;
	+int DataInterpreter::sizeHintForColumn(int column) const {
	+ int size_hint=0;
	+ int i=0;
	+ int item_width=0;
	+ QFontMetrics fm(this->fontMetrics());

	- void UpdateWindowTitle(QString filename="");
	-};
	+ // Find string that needs the most amount of space
	+ for(i=0;i<this->rowCount();i++) {
	+ item_width=fm.width(this->item(i,column)->text())+10;
	+ if(item_width>size_hint) size_hint=item_width;
	+ }

	-#endif // MAINWINDOW_H
	+ return size_hint;
	+}
	diff --git a/trunk/mainwindow.h b/trunk/datainterpreter.h
	similarity index 54%
	copy from trunk/mainwindow.h
	copy to trunk/datainterpreter.h
	index 4a32622..2f237fe 100644
	--- a/trunk/mainwindow.h
	+++ b/trunk/datainterpreter.h
	@@ -1,76 +1,57 @@
	/*******************************************************************************
	* fred Copyright (c) 2011 by Gillen Daniel <gillen.dan@pinguin.lu> *
	* *
	* Forensic Registry EDitor (fred) is a cross-platform M$ registry hive editor *
	* with special feautures useful during forensic analysis. *
	* *
	* This program is free software: you can redistribute it and/or modify it *
	* under the terms of the GNU General Public License as published by the Free *
	* Software Foundation, either version 3 of the License, or (at your option) *
	* any later version. *
	* *
	* This program is distributed in the hope that it will be useful, but WITHOUT *
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or *
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for *
	* more details. *
	* *
	* You should have received a copy of the GNU General Public License along with *
	* this program. If not, see <http://www.gnu.org/licenses/>. *
	*******************************************************************************/

	-#ifndef MAINWINDOW_H
	-#define MAINWINDOW_H
	+#ifndef DATAINTERPRETER_H
	+#define DATAINTERPRETER_H

	-#include <QMainWindow>
	+#include <QWidget>
	+#include <QTableWidget>

	-#include <hivex.h>
	-
	-#include "registrynodetreemodel.h"
	-#include "registrykeytablemodel.h"
	-#include "qhexedit/qhexedit.h"
	-
	-namespace Ui {
	- class MainWindow;
	-}
	-
	-class MainWindow : public QMainWindow {
	+class DataInterpreter : public QTableWidget {
	Q_OBJECT

	public:
	- explicit MainWindow(QWidget *parent = 0);
	- ~MainWindow();
	-
	- private slots:
	- void on_action_Quit_triggered();
	- void on_action_Open_hive_triggered();
	- void on_action_Close_hive_triggered();
	- void on_actionAbout_Qt_triggered();
	- void on_actionAbout_fred_triggered();
	-
	- void SlotNodeTreeClicked(QModelIndex index);
	- void SlotKeyTableClicked(QModelIndex index);
	- void SlotKeyTableDoubleClicked(QModelIndex index);
	- void SlotUpdateDataInterpreter(int hex_offset);
	-
	-private:
	- Ui::MainWindow *ui;
	- QString last_open_location;
	- hive_h *hhive;
	- bool is_hive_open;
	- RegistryNodeTreeModel *p_reg_node_tree_model;
	- RegistryKeyTableModel *p_reg_key_table_model;
	- QByteArray selected_key_value;
	-
	- // Widgets
	- QTreeView *p_node_tree;
	- QTableView *p_key_table;
	- QHexEdit *p_hex_edit;
	- QLabel *p_data_interpreter;
	- QSplitter *p_horizontal_splitter;
	- QSplitter *p_horizontal_splitter2;
	- QSplitter *p_vertical_splitter;
	-
	- void UpdateWindowTitle(QString filename="");
	+ DataInterpreter(QWidget *p_parent=0);
	+ ~DataInterpreter();
	+
	+ /*
	+ * AddValue
	+ *
	+ * Add a value pair (name,value) to data interprter.
	+ */
	+ void AddValue(QString name, QString value);
	+ /*
	+ * ClearValues
	+ *
	+ * Remove all value pairs from table
	+ */
	+ void ClearValues();
	+
	+ protected:
	+ /*
	+ * sizeHintForColumn
	+ *
	+ * Needed reimplementation in order to allow resizeColumnsToContent
	+ * to resize hidden columns too.
	+ */
	+ int sizeHintForColumn(int column) const;
	};

	-#endif // MAINWINDOW_H
	+#endif // DATAINTERPRETER_H
	diff --git a/trunk/fred.pro b/trunk/fred.pro
	index 6f126df..00c417b 100644
	--- a/trunk/fred.pro
	+++ b/trunk/fred.pro
	@@ -1,59 +1,61 @@
	#*******************************************************************************
	# fred Copyright (c) 2011 by Gillen Daniel <gillen.dan@pinguin.lu> *
	# *
	# Forensic Registry EDitor (fred) is a cross-platform M$ registry hive editor *
	# with special feautures useful during forensic analysis. *
	# *
	# This program is free software: you can redistribute it and/or modify it *
	# under the terms of the GNU General Public License as published by the Free *
	# Software Foundation, either version 3 of the License, or (at your option) *
	# any later version. *
	# *
	# This program is distributed in the hope that it will be useful, but WITHOUT *
	# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or *
	# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for *
	# more details. *
	# *
	# You should have received a copy of the GNU General Public License along with *
	# this program. If not, see <http://www.gnu.org/licenses/>. *
	#******************************************************************************/

	system(bash compileinfo.sh > compileinfo.h)

	QT += core \
	gui

	TARGET = fred

	TEMPLATE = app


	SOURCES += main.cpp\
	mainwindow.cpp \
	registrynode.cpp \
	registrynodetreemodel.cpp \
	registrykey.cpp \
	registrykeytablemodel.cpp \
	dlgabout.cpp \
	dlgkeydetails.cpp \
	qhexedit/qhexedit_p.cpp \
	- qhexedit/qhexedit.cpp
	+ qhexedit/qhexedit.cpp \
	+ datainterpreter.cpp

	HEADERS += mainwindow.h \
	registrynode.h \
	registrynodetreemodel.h \
	registrykey.h \
	registrykeytablemodel.h \
	dlgabout.h \
	dlgkeydetails.h \
	qhexedit/qhexedit_p.h \
	- qhexedit/qhexedit.h
	+ qhexedit/qhexedit.h \
	+ datainterpreter.h

	FORMS += mainwindow.ui \
	dlgabout.ui \
	dlgkeydetails.ui

	LIBS += -lhivex

	RESOURCES += \
	fred.qrc
	diff --git a/trunk/mainwindow.cpp b/trunk/mainwindow.cpp
	index 3f96c9a..5b3c3a8 100644
	--- a/trunk/mainwindow.cpp
	+++ b/trunk/mainwindow.cpp
	@@ -1,373 +1,431 @@
	/*******************************************************************************
	* fred Copyright (c) 2011 by Gillen Daniel <gillen.dan@pinguin.lu> *
	* *
	* Forensic Registry EDitor (fred) is a cross-platform M$ registry hive editor *
	* with special feautures useful during forensic analysis. *
	* *
	* This program is free software: you can redistribute it and/or modify it *
	* under the terms of the GNU General Public License as published by the Free *
	* Software Foundation, either version 3 of the License, or (at your option) *
	* any later version. *
	* *
	* This program is distributed in the hope that it will be useful, but WITHOUT *
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or *
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for *
	* more details. *
	* *
	* You should have received a copy of the GNU General Public License along with *
	* this program. If not, see <http://www.gnu.org/licenses/>. *
	*******************************************************************************/

	#include <QFileDialog>
	#include <QMessageBox>
	#include <QStringList>
	#include <QDesktopWidget>
	#include <QDir>
	#include <QSplitter>

	#include "mainwindow.h"
	#include "ui_mainwindow.h"
	#include "dlgabout.h"
	#include "dlgkeydetails.h"

	#include "compileinfo.h"

	MainWindow::MainWindow(QWidget *parent) :
	QMainWindow(parent), ui(new Ui::MainWindow)
	{
	ui->setupUi(this);

	// Initialize private vars
	this->hhive=NULL;
	this->is_hive_open=false;
	this->p_reg_node_tree_model=NULL;
	this->p_reg_key_table_model=NULL;

	// Set main window size
	int cur_screen=QApplication::desktop()->screenNumber(this);
	int window_width=
	QApplication::desktop()->availableGeometry(cur_screen).width()*0.5;
	int window_height=
	QApplication::desktop()->availableGeometry(cur_screen).height()*0.5;
	int window_x=
	(QApplication::desktop()->availableGeometry(cur_screen).width()/2)-
	(window_width/2);
	int window_y=
	(QApplication::desktop()->availableGeometry(cur_screen).height()/2)-
	(window_height/2);
	this->setGeometry(window_x,
	window_y,
	window_width,
	window_height);

	// Create widgets
	- this->p_node_tree=new QTreeView();
	- this->p_node_tree->setHeaderHidden(true);
	- this->p_key_table=new QTableView();
	- this->p_key_table->setSelectionBehavior(QAbstractItemView::SelectRows);
	this->p_horizontal_splitter=new QSplitter();
	this->p_horizontal_splitter->setOrientation(Qt::Horizontal);
	- this->p_horizontal_splitter2=new QSplitter();
	- this->p_horizontal_splitter2->setOrientation(Qt::Horizontal);
	- this->p_vertical_splitter=new QSplitter();
	+
	+ this->p_node_tree=new QTreeView(this->p_horizontal_splitter);
	+ this->p_node_tree->setHeaderHidden(true);
	+
	+ this->p_vertical_splitter=new QSplitter(this->p_horizontal_splitter);
	this->p_vertical_splitter->setOrientation(Qt::Vertical);
	+
	+ this->p_key_table=new QTableView(this->p_vertical_splitter);
	+ this->p_key_table->setSelectionBehavior(QAbstractItemView::SelectRows);
	+
	+ this->p_horizontal_splitter2=new QSplitter(this->p_vertical_splitter);
	+ this->p_horizontal_splitter2->setOrientation(Qt::Horizontal);
	+
	+ this->p_hex_edit_widget=new QWidget(this->p_horizontal_splitter2);
	+ this->p_hex_edit_layout=new QVBoxLayout(this->p_hex_edit_widget);
	+ this->p_hex_edit_layout->setContentsMargins(0,0,0,0);
	this->p_hex_edit=new QHexEdit();
	this->p_hex_edit->setReadOnly(true);
	- this->p_data_interpreter=new QLabel();
	+ this->p_hex_edit_status_bar=new QLabel();
	+
	+ this->p_data_interpreter=new DataInterpreter(this->p_horizontal_splitter2);

	// Make sure hex viewer font is monospaced.
	QFont mono_font("Monospace");
	mono_font.setStyleHint(QFont::TypeWriter);
	this->p_hex_edit->setFont(mono_font);

	// Lay out widgets
	- this->p_horizontal_splitter2->addWidget(this->p_hex_edit);
	+ this->p_hex_edit_layout->addWidget(this->p_hex_edit);
	+ this->p_hex_edit_layout->addWidget(this->p_hex_edit_status_bar);
	+
	+ this->p_horizontal_splitter2->addWidget(this->p_hex_edit_widget);
	this->p_horizontal_splitter2->addWidget(this->p_data_interpreter);
	+
	this->p_vertical_splitter->addWidget(this->p_key_table);
	this->p_vertical_splitter->addWidget(this->p_horizontal_splitter2);
	+
	this->p_horizontal_splitter->addWidget(this->p_node_tree);
	this->p_horizontal_splitter->addWidget(this->p_vertical_splitter);

	// Set stretch factors
	QSizePolicy node_tree_policy=this->p_node_tree->sizePolicy();
	node_tree_policy.setHorizontalStretch(1);
	node_tree_policy.setVerticalStretch(100);
	this->p_node_tree->setSizePolicy(node_tree_policy);
	+
	QSizePolicy vertical_splitter_policy=this->p_vertical_splitter->sizePolicy();
	vertical_splitter_policy.setHorizontalStretch(4);
	vertical_splitter_policy.setVerticalStretch(100);
	this->p_vertical_splitter->setSizePolicy(vertical_splitter_policy);
	+
	QSizePolicy key_table_policy=this->p_key_table->sizePolicy();
	key_table_policy.setVerticalStretch(5);
	key_table_policy.setHorizontalStretch(100);
	this->p_key_table->setSizePolicy(key_table_policy);

	+ QSizePolicy hex_edit_widget_policy=this->p_hex_edit_widget->sizePolicy();
	+ hex_edit_widget_policy.setVerticalStretch(2);
	+ hex_edit_widget_policy.setHorizontalStretch(200);
	+ this->p_hex_edit_widget->setSizePolicy(hex_edit_widget_policy);

	- QSizePolicy hex_edit_policy=this->p_hex_edit->sizePolicy();
	- hex_edit_policy.setVerticalStretch(2);
	- hex_edit_policy.setHorizontalStretch(20);
	- this->p_hex_edit->setSizePolicy(hex_edit_policy);
	QSizePolicy data_interpreter_policy=this->p_data_interpreter->sizePolicy();
	data_interpreter_policy.setVerticalStretch(2);
	- data_interpreter_policy.setHorizontalStretch(1);
	+ data_interpreter_policy.setHorizontalStretch(0);
	this->p_data_interpreter->setSizePolicy(data_interpreter_policy);

	// Connect signals
	this->connect(this->p_node_tree,
	SIGNAL(clicked(QModelIndex)),
	this,
	SLOT(SlotNodeTreeClicked(QModelIndex)));
	this->connect(this->p_node_tree,
	SIGNAL(activated(QModelIndex)),
	this,
	SLOT(SlotNodeTreeClicked(QModelIndex)));
	this->connect(this->p_key_table,
	SIGNAL(clicked(QModelIndex)),
	this,
	SLOT(SlotKeyTableClicked(QModelIndex)));
	this->connect(this->p_key_table,
	SIGNAL(doubleClicked(QModelIndex)),
	this,
	SLOT(SlotKeyTableDoubleClicked(QModelIndex)));
	this->connect(this->p_hex_edit,
	SIGNAL(currentAddressChanged(int)),
	this,
	- SLOT(SlotUpdateDataInterpreter(int)));
	+ SLOT(SlotHexEditAddressChanged(int)));

	// Add central widget
	+ this->setContentsMargins(4,4,4,0);
	this->setCentralWidget(this->p_horizontal_splitter);

	// Set window title
	this->UpdateWindowTitle();

	// Set last open location to home dir
	this->last_open_location=QDir::homePath();
	}

	MainWindow::~MainWindow() {
	if(this->is_hive_open) {
	hivex_close(this->hhive);
	}
	delete ui;
	}

	void MainWindow::on_action_Quit_triggered() {
	qApp->exit();
	}

	void MainWindow::on_action_Open_hive_triggered() {
	QString hive_file="";

	hive_file=QFileDialog::getOpenFileName(this,
	tr("Open registry hive"),
	this->last_open_location,
	tr("All files (*)"));
	if(hive_file=="") return;

	// Update last open location
	this->last_open_location=hive_file.left(hive_file.
	lastIndexOf(QDir::separator()));

	// If another hive is currently open, close it
	if(this->is_hive_open) this->on_action_Close_hive_triggered();

	// Try to open hive
	this->hhive=hivex_open(hive_file.toAscii().constData(),0);
	if(this->hhive==NULL) {
	QMessageBox::critical(this,
	tr("Error opening hive file"),
	tr("Unable to open file '%1'").arg(hive_file));
	return;
	}

	// Create tree model
	hive_node_h root_node=hivex_root(hhive);
	if(root_node==0) {
	QMessageBox::critical(this,
	tr("Error opening hive file"),
	tr("This hive seems to have no root node!")
	.arg(hive_file));
	return;
	}
	this->p_reg_node_tree_model=
	new RegistryNodeTreeModel(this->hhive,
	root_node);
	this->p_node_tree->setModel(this->p_reg_node_tree_model);

	this->is_hive_open=true;
	this->ui->action_Close_hive->setEnabled(true);
	this->UpdateWindowTitle(hive_file);
	}

	void MainWindow::on_action_Close_hive_triggered() {
	if(this->is_hive_open) {
	// Delete models
	if(this->p_reg_node_tree_model!=NULL) {
	delete this->p_reg_node_tree_model;
	this->p_reg_node_tree_model=NULL;
	}
	if(this->p_reg_key_table_model!=NULL) {
	delete this->p_reg_key_table_model;
	this->p_reg_key_table_model=NULL;
	}

	+ // Remove any data from hex edit and data interpreter
	+ this->p_hex_edit->setData(QByteArray());
	+ this->p_hex_edit_status_bar->setText("");
	+ this->p_data_interpreter->ClearValues();
	+
	// Close hive
	hivex_close(this->hhive);

	this->is_hive_open=false;
	this->ui->action_Close_hive->setEnabled(false);
	this->UpdateWindowTitle();
	}
	}

	void MainWindow::on_actionAbout_Qt_triggered() {
	QMessageBox::aboutQt(this,tr("About Qt"));
	}

	void MainWindow::on_actionAbout_fred_triggered() {
	DlgAbout dlg_about(this);
	dlg_about.exec();
	}

	void MainWindow::SlotNodeTreeClicked(QModelIndex index) {
	QStringList nodes;

	//Built node path
	nodes.clear();
	nodes.append(this->p_reg_node_tree_model->
	data(index,Qt::DisplayRole).toString());
	while(this->p_reg_node_tree_model->parent(index)!=QModelIndex()) {
	// Prepend all parent nodes
	index=this->p_reg_node_tree_model->parent(index);
	nodes.prepend(this->p_reg_node_tree_model->
	data(index,Qt::DisplayRole).toString());
	}

	// Get hive_node handle for current node
	hive_node_h hive_node=hivex_root(this->hhive);
	QString cur_node;
	for(QStringList::iterator it=nodes.begin();it!=nodes.end();++it) {
	cur_node=*it;
	hive_node=hivex_node_get_child(this->hhive,
	hive_node,
	cur_node.toAscii().constData());
	}

	// Create table model and attach it to the table view
	if(this->p_reg_key_table_model!=NULL) delete this->p_reg_key_table_model;
	this->p_reg_key_table_model=new RegistryKeyTableModel(this->hhive,
	hive_node);
	this->p_key_table->setModel(this->p_reg_key_table_model);

	// Resize table rows / columns to fit data
	this->p_key_table->resizeColumnsToContents();
	this->p_key_table->horizontalHeader()->stretchLastSection();
	}

	-void MainWindow::UpdateWindowTitle(QString filename) {
	- if(filename=="") {
	- this->setWindowTitle(QString().sprintf("%s v%s",APP_TITLE,APP_VERSION));
	- } else {
	- this->setWindowTitle(QString().sprintf("%s v%s - %s",
	- APP_TITLE,
	- APP_VERSION,
	- filename.toLocal8Bit().constData()));
	- }
	-}
	-
	void MainWindow::SlotKeyTableDoubleClicked(QModelIndex index) {
	QModelIndex key_index;
	QModelIndex node_index;
	QStringList nodes;

	QString key_name;
	QString key_type;
	QByteArray key_value;

	if(!index.isValid()) return;

	// Get key name, type and value
	key_index=this->p_reg_key_table_model->index(index.row(),0);
	key_name=this->p_reg_key_table_model->data(key_index,Qt::DisplayRole)
	.toString();
	key_index=this->p_reg_key_table_model->index(index.row(),1);
	key_type=this->p_reg_key_table_model->data(key_index,Qt::DisplayRole)
	.toString();
	key_index=this->p_reg_key_table_model->index(index.row(),2);
	key_value=this->p_reg_key_table_model->data(key_index,
	RegistryKeyTableModel::
	AdditionalRoles_GetRawData)
	.toByteArray();

	// Get current node
	node_index=this->p_node_tree->currentIndex();

	//Built node path
	nodes.clear();
	nodes.append(this->p_reg_node_tree_model->
	data(node_index,Qt::DisplayRole).toString());
	while(this->p_reg_node_tree_model->parent(node_index)!=QModelIndex()) {
	// Prepend all parent nodes
	node_index=this->p_reg_node_tree_model->parent(node_index);
	nodes.prepend(this->p_reg_node_tree_model->
	data(node_index,Qt::DisplayRole).toString());
	}

	DlgKeyDetails dlg_key_details(this);
	dlg_key_details.SetValues(nodes,key_name,key_type,key_value);
	dlg_key_details.exec();
	}

	void MainWindow::SlotKeyTableClicked(QModelIndex index) {
	if(!index.isValid()) return;

	this->selected_key_value=
	this->p_reg_key_table_model->data(this->p_reg_key_table_model->
	index(index.row(),2),
	RegistryKeyTableModel::
	AdditionalRoles_GetRawData)
	.toByteArray();
	this->p_hex_edit->setData(this->selected_key_value);
	}

	-void MainWindow::SlotUpdateDataInterpreter(int hex_offset) {
	- #define rotl32(x,n) (((x) << n) \| ((x) >> (32 - n)))
	- //#define rotr32(x,n) (((x) >> n) \| ((x) << (32 - n)))
	- #define rotl64(x,n) (((x) << n) \| ((x) >> (64 - n)))
	- //#define rotr64(x,n) (((x) >> n) \| ((x) << (64 - n)))
	+void MainWindow::SlotHexEditAddressChanged(int hex_offset) {
	+ // Update hex edit status bar
	+ this->p_hex_edit_status_bar->
	+ setText(QString().sprintf("Byte offset: 0x%04X (%u)",hex_offset,hex_offset));
	+ // Update data interpreter
	+ this->UpdateDataInterpreter(hex_offset);
	+}

	- QString ret="";
	+void MainWindow::UpdateWindowTitle(QString filename) {
	+ if(filename=="") {
	+ this->setWindowTitle(QString().sprintf("%s v%s",APP_TITLE,APP_VERSION));
	+ } else {
	+ this->setWindowTitle(QString().sprintf("%s v%s - %s",
	+ APP_TITLE,
	+ APP_VERSION,
	+ filename.toLocal8Bit().constData()));
	+ }
	+}
	+
	+void MainWindow::UpdateDataInterpreter(int hex_offset) {
	QDateTime date_time;
	- const char *p_data=this->selected_key_value.constData();
	- int remaining_data_len=this->selected_key_value.size()-hex_offset;
	+ const char *p_data;
	+ int remaining_data_len;

	+ // Remove all old values from data interpreter
	+ this->p_data_interpreter->ClearValues();
	+
	+ // Calculate how many bytes are remainig after current offset
	+ remaining_data_len=this->selected_key_value.size()-hex_offset;
	if(!remaining_data_len>0) {
	- this->p_data_interpreter->setText("");
	+ // Nothing to show
	return;
	}
	+
	+ // Get pointer to data at current offset
	+ p_data=this->selected_key_value.constData();
	p_data+=hex_offset;

	+ #define rotl32(x,n) (((x) << n) \| ((x) >> (32 - n)))
	+ //#define rotr32(x,n) (((x) >> n) \| ((x) << (32 - n)))
	+ #define rotl64(x,n) (((x) << n) \| ((x) >> (64 - n)))
	+ //#define rotr64(x,n) (((x) >> n) \| ((x) << (64 - n)))
	+
	+ if(remaining_data_len>=1) {
	+ this->p_data_interpreter->AddValue("int8:",
	+ QString().sprintf("%d",
	+ (int8_t)p_data));
	+ this->p_data_interpreter->AddValue("uint8:",
	+ QString().sprintf("%u",
	+ (uint8_t)p_data));
	+ }
	if(remaining_data_len>=2) {
	- ret.append(QString().sprintf("int16: %d\n",(int16_t)p_data));
	- ret.append(QString().sprintf("uint16: %u\n",(uint16_t)p_data));
	+ this->p_data_interpreter->AddValue("int16:",
	+ QString().sprintf("%d",
	+ (int16_t)p_data));
	+ this->p_data_interpreter->AddValue("uint16:",
	+ QString().sprintf("%u",
	+ (uint16_t)p_data));
	}
	if(remaining_data_len>=4) {
	- ret.append(QString().sprintf("int32: %d\n",(int32_t)p_data));
	- ret.append(QString().sprintf("uint32: %u\n",(uint32_t)p_data));
	+ this->p_data_interpreter->AddValue("int32:",
	+ QString().sprintf("%d",
	+ (int32_t)p_data));
	+ this->p_data_interpreter->AddValue("uint32:",
	+ QString().sprintf("%d",
	+ (uint32_t)p_data));
	date_time.setTime_t((uint32_t)p_data);
	- ret.append(QString("Unixtime: %1\n").arg(date_time.toString("yyyy/MM/dd hh:mm:ss UTC")));
	- //uint32_t value_be=rotl32(value,16);
	- //ret.append(QString().sprintf("uint32 (be): %u\n",value_be));
	+ this->p_data_interpreter->AddValue("Unixtime:",
	+ date_time.
	+ toString("yyyy/MM/dd hh:mm:ss"));
	}
	if(remaining_data_len>=8) {
	- ret.append(QString().sprintf("int64: %d\n",(int64_t)p_data));
	- ret.append(QString().sprintf("uint64: %u\n",(uint64_t)p_data));
	+ this->p_data_interpreter->AddValue("int64:",
	+ QString().sprintf("%d",
	+ (int64_t)p_data));
	+ this->p_data_interpreter->AddValue("uint64:",
	+ QString().sprintf("%d",
	+ (uint64_t)p_data));
	date_time.setTime_t(((uint64_t)p_data-116444736000000000)/10000000);
	- ret.append(QString("Win64time: %1\n").arg(date_time.toString("yyyy/MM/dd hh:mm:ss UTC")));
	+ this->p_data_interpreter->AddValue("Win64time:",
	+ date_time.
	+ toString("yyyy/MM/dd hh:mm:ss"));
	}

	#undef rotl32
	#undef rotl64
	-
	- this->p_data_interpreter->setText(ret);
	}
	diff --git a/trunk/mainwindow.h b/trunk/mainwindow.h
	index 4a32622..c5fbce4 100644
	--- a/trunk/mainwindow.h
	+++ b/trunk/mainwindow.h
	@@ -1,76 +1,91 @@
	/*******************************************************************************
	* fred Copyright (c) 2011 by Gillen Daniel <gillen.dan@pinguin.lu> *
	* *
	* Forensic Registry EDitor (fred) is a cross-platform M$ registry hive editor *
	* with special feautures useful during forensic analysis. *
	* *
	* This program is free software: you can redistribute it and/or modify it *
	* under the terms of the GNU General Public License as published by the Free *
	* Software Foundation, either version 3 of the License, or (at your option) *
	* any later version. *
	* *
	* This program is distributed in the hope that it will be useful, but WITHOUT *
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or *
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for *
	* more details. *
	* *
	* You should have received a copy of the GNU General Public License along with *
	* this program. If not, see <http://www.gnu.org/licenses/>. *
	*******************************************************************************/

	#ifndef MAINWINDOW_H
	#define MAINWINDOW_H

	#include <QMainWindow>

	#include <hivex.h>

	#include "registrynodetreemodel.h"
	#include "registrykeytablemodel.h"
	#include "qhexedit/qhexedit.h"
	+#include "datainterpreter.h"

	namespace Ui {
	class MainWindow;
	}

	class MainWindow : public QMainWindow {
	Q_OBJECT

	public:
	explicit MainWindow(QWidget *parent = 0);
	~MainWindow();

	private slots:
	void on_action_Quit_triggered();
	void on_action_Open_hive_triggered();
	void on_action_Close_hive_triggered();
	void on_actionAbout_Qt_triggered();
	void on_actionAbout_fred_triggered();

	void SlotNodeTreeClicked(QModelIndex index);
	void SlotKeyTableClicked(QModelIndex index);
	void SlotKeyTableDoubleClicked(QModelIndex index);
	- void SlotUpdateDataInterpreter(int hex_offset);
	+ void SlotHexEditAddressChanged(int hex_offset);

	private:
	Ui::MainWindow *ui;
	QString last_open_location;
	hive_h *hhive;
	bool is_hive_open;
	RegistryNodeTreeModel *p_reg_node_tree_model;
	RegistryKeyTableModel *p_reg_key_table_model;
	QByteArray selected_key_value;

	- // Widgets
	+ // Widgets etc...
	QTreeView *p_node_tree;
	QTableView *p_key_table;
	+ QWidget *p_hex_edit_widget;
	QHexEdit *p_hex_edit;
	- QLabel *p_data_interpreter;
	+ QLabel *p_hex_edit_status_bar;
	+ DataInterpreter *p_data_interpreter;
	+ QVBoxLayout *p_hex_edit_layout;
	QSplitter *p_horizontal_splitter;
	QSplitter *p_horizontal_splitter2;
	QSplitter *p_vertical_splitter;

	+ /*
	+ * UpdateWindowTitle
	+ *
	+ * Updates the window title
	+ */
	void UpdateWindowTitle(QString filename="");
	+ /*
	+ * UpdateDataInterpreter
	+ *
	+ * Update data interpreter
	+ */
	+ void UpdateDataInterpreter(int hex_offset);
	};

	#endif // MAINWINDOW_H

File Metadata

Mime Type: text/x-diff
Expires: Tue, Dec 24, 3:06 AM (1 d, 3 h)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 1176969
Default Alt Text: (33 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions