RtlCopyMemory(Dest, Source->Buffer, Source->Length*sizeof(WCHAR));
Dest[Source->Length / sizeof(WCHAR)] = L'\0';

BOOLEAN GetProcessInfo(ProcessData *pProcessData)
{
EPROCESS *pEProcess = NULL;
NTSTATUS status;
UNICODE_STRING p;

if(KeGetCurrentIrql() > DISPATCH_LEVEL) {
 DBGOUT(("GetProcessInfo: IRQL too high. IRQL: %d", KeGetCurrentIrql()));
 return FALSE;
}

if(!pProcessData)
 return FALSE;

status = PsLookupProcessByProcessId(pProcessData->ulProcessID, (PEPROCESS *)&pEProcess);
if(!NT_SUCCESS(status)) {
 DBGOUT(("GetProcessInfo: PsLookupProcessByProcessId Failed: %08X", status));
 return FALSE;
}

if(!pEProcess) {
 DBGOUT(("GetProcessInfo: pEProcess is null!"));
 return FALSE;
}

pProcessData->ulParentPID = pEProcess->InheritedFromUniqueProcessId;
#if DBG
if(pProcessData->ulParentPID == 0)
 DBGOUT(("PID %d has a Parent PID of 0!", pProcessData->ulProcessID));

if(pProcessData->ulProcessID == 0)
 DBGOUT(("Process has a PID of 0!"));
#endif

RtlZeroMemory(&pProcessData->usProcessName, sizeof(UNICODE_STRING));
RtlZeroMemory(&pProcessData->usWindowTitle, sizeof(UNICODE_STRING));
RtlZeroMemory(&pProcessData->usUsername, sizeof(UNICODE_STRING));

if(!pEProcess->Peb) {
 DBGOUT(("GetProcessInfo: pEProcess->Peb is null!"));
 return FALSE;
} else {
 if(!pEProcess->Peb->ProcessParameters) {
  DBGOUT(("GetProcessInfo: pEPRocess->Peb->ProcessParameters is null!"));
  return FALSE;
 }

 pProcessData->usWindowTitle.MaximumLength = min(pEProcess->Peb->ProcessParameters->WindowTitle.Length + sizeof(WCHAR), PROCESSDATA_MAX_LENGTH - sizeof(WCHAR));
 //pProcessData->usWindowTitle.Buffer = (WCHAR *)ExAllocatePool(PagedPool, pProcessData->usWindowTitle.MaximumLength+  sizeof(WCHAR));
 pProcessData->usWindowTitle.Buffer = (PWSTR)ExAllocateFromNPagedLookasideList(&g_GetProcessLookasideList);
 RtlZeroMemory(pProcessData->usWindowTitle.Buffer, pProcessData->usWindowTitle.MaximumLength);
 RtlCopyUnicodeString(&pProcessData->usWindowTitle, &pEProcess->Peb->ProcessParameters->WindowTitle);

 // We only want the filename of the exe not the full path
 p.Buffer = wcsrchr(pEProcess->Peb->ProcessParameters->ImagePathName.Buffer, '\\') + 1;
 p.MaximumLength = p.Length = wcslen(p.Buffer) * sizeof(WCHAR);
 pProcessData->usProcessName.MaximumLength = min(p.Length + sizeof(WCHAR), PROCESSDATA_MAX_LENGTH - sizeof(WCHAR));
 pProcessData->usProcessName.Buffer = (PWSTR)ExAllocateFromNPagedLookasideList(&g_GetProcessLookasideList);
 RtlZeroMemory(pProcessData->usProcessName.Buffer, pProcessData->usProcessName.MaximumLength);
 RtlCopyUnicodeString(&pProcessData->usProcessName, &p);

 pProcessData->usUsername.MaximumLength = PROCESSDATA_MAX_LENGTH - sizeof(WCHAR);
 pProcessData->usUsername.Length = 0;
 pProcessData->usUsername.Buffer = (PWSTR)ExAllocateFromNPagedLookasideList(&g_GetProcessLookasideList);
 RtlZeroMemory(pProcessData->usUsername.Buffer, pProcessData->usUsername.MaximumLength + sizeof(WCHAR));

 if(!GetUserSIDFromProcess(pEProcess, &pProcessData->usUsername)) {
  DBGOUT(("GetProcessInfo: Unable to get UserSID From Process!"));
  ExFreeToNPagedLookasideList(&g_GetProcessLookasideList, pProcessData->usWindowTitle.Buffer);
  ExFreeToNPagedLookasideList(&g_GetProcessLookasideList, pProcessData->usProcessName.Buffer);
  RtlZeroMemory(&pProcessData->usProcessName, sizeof(UNICODE_STRING));
  RtlZeroMemory(&pProcessData->usWindowTitle, sizeof(UNICODE_STRING));
  RtlZeroMemory(&pProcessData->usUsername, sizeof(UNICODE_STRING));
  return FALSE;
 }
}

//DBGOUT(("GetProcessInfo: ProcName: %S UserName: %S WindowTitle: %S PID: %d", pProcessData->usProcessName.Buffer, pProcessData->usUsername.Buffer, pProcessData->usWindowTitle.Buffer, pProcessData->ulParentPID));
return TRUE;
}