2017-02-01 18:26:00 +00:00
|
|
|
// +build windows
|
|
|
|
|
|
|
|
package common
|
|
|
|
|
|
|
|
import (
|
2018-10-19 18:33:23 +00:00
|
|
|
"context"
|
2020-07-01 12:47:56 +00:00
|
|
|
"path/filepath"
|
|
|
|
"strings"
|
|
|
|
"syscall"
|
2017-02-01 18:26:00 +00:00
|
|
|
"unsafe"
|
2018-10-19 18:33:23 +00:00
|
|
|
|
|
|
|
"github.com/StackExchange/wmi"
|
|
|
|
"golang.org/x/sys/windows"
|
2017-02-01 18:26:00 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
// for double values
|
|
|
|
type PDH_FMT_COUNTERVALUE_DOUBLE struct {
|
|
|
|
CStatus uint32
|
|
|
|
DoubleValue float64
|
|
|
|
}
|
|
|
|
|
|
|
|
// for 64 bit integer values
|
|
|
|
type PDH_FMT_COUNTERVALUE_LARGE struct {
|
|
|
|
CStatus uint32
|
|
|
|
LargeValue int64
|
|
|
|
}
|
|
|
|
|
|
|
|
// for long values
|
|
|
|
type PDH_FMT_COUNTERVALUE_LONG struct {
|
|
|
|
CStatus uint32
|
|
|
|
LongValue int32
|
|
|
|
padding [4]byte
|
|
|
|
}
|
|
|
|
|
|
|
|
// windows system const
|
|
|
|
const (
|
|
|
|
ERROR_SUCCESS = 0
|
|
|
|
ERROR_FILE_NOT_FOUND = 2
|
|
|
|
DRIVE_REMOVABLE = 2
|
|
|
|
DRIVE_FIXED = 3
|
|
|
|
HKEY_LOCAL_MACHINE = 0x80000002
|
|
|
|
RRF_RT_REG_SZ = 0x00000002
|
|
|
|
RRF_RT_REG_DWORD = 0x00000010
|
|
|
|
PDH_FMT_LONG = 0x00000100
|
|
|
|
PDH_FMT_DOUBLE = 0x00000200
|
|
|
|
PDH_FMT_LARGE = 0x00000400
|
|
|
|
PDH_INVALID_DATA = 0xc0000bc6
|
|
|
|
PDH_INVALID_HANDLE = 0xC0000bbc
|
|
|
|
PDH_NO_DATA = 0x800007d5
|
|
|
|
)
|
|
|
|
|
2020-07-01 12:47:56 +00:00
|
|
|
const (
|
|
|
|
ProcessBasicInformation = 0
|
|
|
|
ProcessWow64Information = 26
|
|
|
|
)
|
|
|
|
|
2017-02-01 18:26:00 +00:00
|
|
|
var (
|
2018-10-19 18:33:23 +00:00
|
|
|
Modkernel32 = windows.NewLazySystemDLL("kernel32.dll")
|
|
|
|
ModNt = windows.NewLazySystemDLL("ntdll.dll")
|
|
|
|
ModPdh = windows.NewLazySystemDLL("pdh.dll")
|
|
|
|
ModPsapi = windows.NewLazySystemDLL("psapi.dll")
|
2017-02-01 18:26:00 +00:00
|
|
|
|
2020-07-01 12:47:56 +00:00
|
|
|
ProcGetSystemTimes = Modkernel32.NewProc("GetSystemTimes")
|
|
|
|
ProcNtQuerySystemInformation = ModNt.NewProc("NtQuerySystemInformation")
|
|
|
|
ProcRtlGetNativeSystemInformation = ModNt.NewProc("RtlGetNativeSystemInformation")
|
|
|
|
ProcRtlNtStatusToDosError = ModNt.NewProc("RtlNtStatusToDosError")
|
|
|
|
ProcNtQueryInformationProcess = ModNt.NewProc("NtQueryInformationProcess")
|
|
|
|
ProcNtReadVirtualMemory = ModNt.NewProc("NtReadVirtualMemory")
|
|
|
|
ProcNtWow64QueryInformationProcess64 = ModNt.NewProc("NtWow64QueryInformationProcess64")
|
|
|
|
ProcNtWow64ReadVirtualMemory64 = ModNt.NewProc("NtWow64ReadVirtualMemory64")
|
|
|
|
|
|
|
|
PdhOpenQuery = ModPdh.NewProc("PdhOpenQuery")
|
|
|
|
PdhAddCounter = ModPdh.NewProc("PdhAddCounterW")
|
|
|
|
PdhCollectQueryData = ModPdh.NewProc("PdhCollectQueryData")
|
|
|
|
PdhGetFormattedCounterValue = ModPdh.NewProc("PdhGetFormattedCounterValue")
|
|
|
|
PdhCloseQuery = ModPdh.NewProc("PdhCloseQuery")
|
|
|
|
|
|
|
|
procQueryDosDeviceW = Modkernel32.NewProc("QueryDosDeviceW")
|
2017-02-01 18:26:00 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
type FILETIME struct {
|
|
|
|
DwLowDateTime uint32
|
|
|
|
DwHighDateTime uint32
|
|
|
|
}
|
|
|
|
|
|
|
|
// borrowed from net/interface_windows.go
|
|
|
|
func BytePtrToString(p *uint8) string {
|
|
|
|
a := (*[10000]uint8)(unsafe.Pointer(p))
|
|
|
|
i := 0
|
|
|
|
for a[i] != 0 {
|
|
|
|
i++
|
|
|
|
}
|
|
|
|
return string(a[:i])
|
|
|
|
}
|
|
|
|
|
|
|
|
// CounterInfo
|
|
|
|
// copied from https://github.com/mackerelio/mackerel-agent/
|
|
|
|
type CounterInfo struct {
|
|
|
|
PostName string
|
|
|
|
CounterName string
|
2018-10-19 18:33:23 +00:00
|
|
|
Counter windows.Handle
|
2017-02-01 18:26:00 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// CreateQuery XXX
|
|
|
|
// copied from https://github.com/mackerelio/mackerel-agent/
|
2018-10-19 18:33:23 +00:00
|
|
|
func CreateQuery() (windows.Handle, error) {
|
|
|
|
var query windows.Handle
|
2017-02-01 18:26:00 +00:00
|
|
|
r, _, err := PdhOpenQuery.Call(0, 0, uintptr(unsafe.Pointer(&query)))
|
|
|
|
if r != 0 {
|
|
|
|
return 0, err
|
|
|
|
}
|
|
|
|
return query, nil
|
|
|
|
}
|
|
|
|
|
|
|
|
// CreateCounter XXX
|
2018-10-19 18:33:23 +00:00
|
|
|
func CreateCounter(query windows.Handle, pname, cname string) (*CounterInfo, error) {
|
|
|
|
var counter windows.Handle
|
2017-02-01 18:26:00 +00:00
|
|
|
r, _, err := PdhAddCounter.Call(
|
|
|
|
uintptr(query),
|
2018-10-19 18:33:23 +00:00
|
|
|
uintptr(unsafe.Pointer(windows.StringToUTF16Ptr(cname))),
|
2017-02-01 18:26:00 +00:00
|
|
|
0,
|
|
|
|
uintptr(unsafe.Pointer(&counter)))
|
|
|
|
if r != 0 {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
return &CounterInfo{
|
|
|
|
PostName: pname,
|
|
|
|
CounterName: cname,
|
|
|
|
Counter: counter,
|
|
|
|
}, nil
|
|
|
|
}
|
2018-10-19 18:33:23 +00:00
|
|
|
|
|
|
|
// WMIQueryWithContext - wraps wmi.Query with a timed-out context to avoid hanging
|
|
|
|
func WMIQueryWithContext(ctx context.Context, query string, dst interface{}, connectServerArgs ...interface{}) error {
|
|
|
|
if _, ok := ctx.Deadline(); !ok {
|
|
|
|
ctxTimeout, cancel := context.WithTimeout(ctx, Timeout)
|
|
|
|
defer cancel()
|
|
|
|
ctx = ctxTimeout
|
|
|
|
}
|
|
|
|
|
|
|
|
errChan := make(chan error, 1)
|
|
|
|
go func() {
|
|
|
|
errChan <- wmi.Query(query, dst, connectServerArgs...)
|
|
|
|
}()
|
|
|
|
|
|
|
|
select {
|
|
|
|
case <-ctx.Done():
|
|
|
|
return ctx.Err()
|
|
|
|
case err := <-errChan:
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
}
|
2020-07-01 12:47:56 +00:00
|
|
|
|
|
|
|
// Convert paths using native DOS format like:
|
|
|
|
// "\Device\HarddiskVolume1\Windows\systemew\file.txt"
|
|
|
|
// into:
|
|
|
|
// "C:\Windows\systemew\file.txt"
|
|
|
|
func ConvertDOSPath(p string) string {
|
|
|
|
rawDrive := strings.Join(strings.Split(p, `\`)[:3], `\`)
|
|
|
|
|
|
|
|
for d := 'A'; d <= 'Z'; d++ {
|
|
|
|
szDeviceName := string(d) + ":"
|
|
|
|
szTarget := make([]uint16, 512)
|
|
|
|
ret, _, _ := procQueryDosDeviceW.Call(uintptr(unsafe.Pointer(syscall.StringToUTF16Ptr(szDeviceName))),
|
|
|
|
uintptr(unsafe.Pointer(&szTarget[0])),
|
|
|
|
uintptr(len(szTarget)))
|
|
|
|
if ret != 0 && windows.UTF16ToString(szTarget[:]) == rawDrive {
|
|
|
|
return filepath.Join(szDeviceName, p[len(rawDrive):])
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return p
|
|
|
|
}
|