242 lines
8.5 KiB
C++
242 lines
8.5 KiB
C++
//=============================================================================
|
|
// Contains the refresh functions for the software environment categories.
|
|
//=============================================================================
|
|
|
|
#include "stdafx.h"
|
|
#include "category.h"
|
|
#include "dataset.h"
|
|
#include "wmiabstraction.h"
|
|
|
|
//-----------------------------------------------------------------------------
|
|
// This function gathers running task information.
|
|
//-----------------------------------------------------------------------------
|
|
|
|
HRESULT RunningTasks(CWMIHelper * pWMI, DWORD dwIndex, volatile BOOL * pfCancel, CPtrList * aColValues, int iColCount, void ** ppCache)
|
|
{
|
|
ASSERT(pWMI == NULL || aColValues);
|
|
if (pWMI == NULL)
|
|
return S_OK;
|
|
|
|
LPCTSTR szTaskProperties = _T("Name, ExecutablePath, ProcessID, Priority, MinimumWorkingSetSize, MaximumWorkingSetSize, CreationDate");
|
|
|
|
CString strName, strPath, strProcessID, strPriority, strMinWorking, strMaxWorking, strStartTime;
|
|
CString strFileObjectPath, strDate, strSize, strVersion;
|
|
DWORD dwProcessID, dwPriority, dwMinWorking, dwMaxWorking, dwStartTime, dwDate, dwSize;
|
|
|
|
HRESULT hr = S_OK;
|
|
|
|
CWMIObjectCollection * pCollection = NULL;
|
|
hr = pWMI->Enumerate(_T("Win32_Process"), &pCollection, szTaskProperties);
|
|
if (SUCCEEDED(hr))
|
|
{
|
|
CWMIObject * pObject = NULL;
|
|
CWMIObject * pFileObject = NULL;
|
|
while (S_OK == pCollection->GetNext(&pObject))
|
|
{
|
|
strName.Empty(); strPath.Empty(); strProcessID.Empty(); strPriority.Empty();
|
|
strMinWorking.Empty(); strMaxWorking.Empty(); strStartTime.Empty();
|
|
strDate.Empty(); strSize.Empty(); strVersion.Empty();
|
|
|
|
dwProcessID = dwPriority = dwMinWorking = dwMaxWorking = dwStartTime = dwDate = dwSize = 0;
|
|
|
|
pObject->GetInterpretedValue(_T("Name"), _T("%l"), _T('l'), &strName, NULL);
|
|
pObject->GetInterpretedValue(_T("ExecutablePath"), _T("%l"), _T('l'), &strPath, NULL);
|
|
//pObject->GetInterpretedValue(_T("ProcessID"), _T("0x%08x"), _T('x'), &strProcessID, &dwProcessID);
|
|
//a-kjaw . to fix bug "MSInfo: Running Tasks PID's are being displayed in HEX"
|
|
pObject->GetInterpretedValue(_T("ProcessID"), _T("%d"), _T('x'), &strProcessID, &dwProcessID);
|
|
//a-kjaw
|
|
pObject->GetInterpretedValue(_T("Priority"), _T("%d"), _T('d'), &strPriority, &dwPriority);
|
|
pObject->GetInterpretedValue(_T("MinimumWorkingSetSize"), _T("%d"), _T('d'), &strMinWorking, &dwMinWorking);
|
|
pObject->GetInterpretedValue(_T("MaximumWorkingSetSize"), _T("%d"), _T('d'), &strMaxWorking, &dwMaxWorking);
|
|
pObject->GetInterpretedValue(_T("CreationDate"), _T("%t"), _T('t'), &strStartTime, &dwStartTime);
|
|
|
|
strFileObjectPath.Format(_T("CIM_DataFile.Name='%s'"), strPath);
|
|
if (SUCCEEDED(pWMI->GetObject(strFileObjectPath, &pFileObject)))
|
|
{
|
|
pFileObject->GetInterpretedValue(_T("CreationDate"), _T("%t"), _T('t'), &strDate, &dwDate);
|
|
pFileObject->GetInterpretedValue(_T("FileSize"), _T("%z"), _T('z'), &strSize, &dwSize);
|
|
pFileObject->GetInterpretedValue(_T("Version"), _T("%s"), _T('s'), &strVersion, NULL);
|
|
delete pFileObject;
|
|
pFileObject = NULL;
|
|
}
|
|
else
|
|
{
|
|
strVersion = strSize = strDate = GetMSInfoHRESULTString(E_MSINFO_NOVALUE);
|
|
}
|
|
|
|
pWMI->AppendCell(aColValues[0], strName, 0);
|
|
pWMI->AppendCell(aColValues[1], strPath, 0);
|
|
pWMI->AppendCell(aColValues[2], strProcessID, dwProcessID);
|
|
pWMI->AppendCell(aColValues[3], strPriority, dwPriority);
|
|
pWMI->AppendCell(aColValues[4], strMinWorking, dwMinWorking);
|
|
pWMI->AppendCell(aColValues[5], strMaxWorking, dwMaxWorking);
|
|
pWMI->AppendCell(aColValues[6], strStartTime, dwStartTime);
|
|
pWMI->AppendCell(aColValues[7], strVersion, 0);
|
|
pWMI->AppendCell(aColValues[8], strSize, dwSize);
|
|
pWMI->AppendCell(aColValues[9], strDate, dwDate);
|
|
}
|
|
delete pObject;
|
|
delete pCollection;
|
|
}
|
|
|
|
return hr;
|
|
}
|
|
|
|
//-----------------------------------------------------------------------------
|
|
// This function gathers loaded module information.
|
|
//
|
|
// The list of loaded modules contains all the executables and other entities
|
|
// (such as DLLs) which are currently loaded. This can be found using the
|
|
// WMI class CIM_ProcessExecutable. The trick is to remove duplicates (since
|
|
// DLLs will show up for each time they are loaded).
|
|
//-----------------------------------------------------------------------------
|
|
|
|
HRESULT LoadedModules(CWMIHelper * pWMI, DWORD dwIndex, volatile BOOL * pfCancel, CPtrList * aColValues, int iColCount, void ** ppCache)
|
|
{
|
|
ASSERT(pWMI == NULL || aColValues);
|
|
ASSERT(iColCount == 6);
|
|
if (pWMI == NULL)
|
|
return S_OK;
|
|
|
|
HRESULT hr = S_OK;
|
|
CString strAntecedent;
|
|
CStringList listModules;
|
|
|
|
// Enumerate the CIM_ProcessExecutable class, creating a list of unique
|
|
// loaded files.
|
|
|
|
CWMIObjectCollection * pCollection = NULL;
|
|
hr = pWMI->Enumerate(_T("CIM_ProcessExecutable"), &pCollection);
|
|
if (SUCCEEDED(hr))
|
|
{
|
|
CWMIObject * pObject = NULL;
|
|
while (S_OK == pCollection->GetNext(&pObject))
|
|
{
|
|
if (SUCCEEDED(pObject->GetValueString(_T("Antecedent"), &strAntecedent)))
|
|
{
|
|
strAntecedent.MakeLower();
|
|
if (NULL == listModules.Find(strAntecedent))
|
|
listModules.AddTail(strAntecedent);
|
|
}
|
|
}
|
|
delete pObject;
|
|
delete pCollection;
|
|
}
|
|
|
|
// Traverse the list of unique modules and get information for each file.
|
|
|
|
CWMIObject * pFileObject;
|
|
CString strFileObject;
|
|
|
|
while (!listModules.IsEmpty())
|
|
{
|
|
strFileObject = listModules.RemoveHead();
|
|
|
|
int iColon = strFileObject.Find(_T(":"));
|
|
if (iColon != -1)
|
|
strFileObject = strFileObject.Right(strFileObject.GetLength() - iColon - 1);
|
|
|
|
if (SUCCEEDED(pWMI->GetObject(strFileObject, &pFileObject)))
|
|
{
|
|
pWMI->AddObjectToOutput(aColValues, iColCount, pFileObject, _T("FileName, Version, FileSize, CreationDate, Manufacturer, Name"), IDS_LOADEDMODULE1);
|
|
delete pFileObject;
|
|
}
|
|
else
|
|
{
|
|
int iEquals = strFileObject.Find(_T("="));
|
|
if (iEquals != -1)
|
|
strFileObject = strFileObject.Right(strFileObject.GetLength() - iEquals - 1);
|
|
|
|
// TBD - old MFC doesn't have these: strFileObject.TrimLeft(_T("\"'"));
|
|
// strFileObject.TrimRight(_T("\"'"));
|
|
StringReplace(strFileObject, _T("\\\\"), _T("\\"));
|
|
|
|
pWMI->AppendCell(aColValues[0], strFileObject, 0);
|
|
pWMI->AppendCell(aColValues[1], _T(""), 0);
|
|
pWMI->AppendCell(aColValues[2], _T(""), 0);
|
|
pWMI->AppendCell(aColValues[3], _T(""), 0);
|
|
pWMI->AppendCell(aColValues[4], _T(""), 0);
|
|
pWMI->AppendCell(aColValues[5], strFileObject, 0);
|
|
}
|
|
}
|
|
|
|
return hr;
|
|
}
|
|
|
|
//-----------------------------------------------------------------------------
|
|
// This function gathers OLE information.
|
|
//-----------------------------------------------------------------------------
|
|
|
|
HRESULT OLERegistration(CWMIHelper * pWMI, DWORD dwIndex, volatile BOOL * pfCancel, CPtrList * aColValues, int iColCount, void ** ppCache)
|
|
{
|
|
ASSERT(pWMI == NULL || aColValues);
|
|
ASSERT(iColCount == 2);
|
|
if (pWMI == NULL)
|
|
return S_OK;
|
|
|
|
HRESULT hr = S_OK;
|
|
CString strCheckObject;
|
|
|
|
int i = 1;
|
|
|
|
CWMIObjectCollection * pCollection = NULL;
|
|
hr = pWMI->Enumerate(_T("Win32_ClassicCOMClassSetting"), &pCollection, _T("Caption, LocalServer32, Insertable, Control"));
|
|
if (SUCCEEDED(hr))
|
|
{
|
|
CWMIObject * pObject = NULL;
|
|
while (S_OK == pCollection->GetNext(&pObject))
|
|
{
|
|
DWORD dwInsertable = 0, dwControl = -1;
|
|
|
|
pObject->GetValueDWORD(_T("Insertable"), &dwInsertable);
|
|
pObject->GetValueDWORD(_T("Control"), &dwControl);
|
|
|
|
if (dwInsertable == -1 && dwControl == 0)
|
|
{
|
|
if (SUCCEEDED(pObject->GetValueString(_T("Caption"), &strCheckObject)) && !strCheckObject.IsEmpty())
|
|
pWMI->AddObjectToOutput(aColValues, iColCount, pObject, _T("Caption, LocalServer32"), IDS_OLEREG1);
|
|
}
|
|
}
|
|
|
|
delete pObject;
|
|
delete pCollection;
|
|
}
|
|
|
|
return hr;
|
|
}
|
|
|
|
|
|
HRESULT WindowsErrorReporting(CWMIHelper * pWMI, DWORD dwIndex, volatile BOOL * pfCancel, CPtrList * aColValues, int iColCount, void ** ppCache)
|
|
{
|
|
ASSERT(pWMI == NULL || aColValues);
|
|
if (pWMI == NULL)
|
|
return S_OK;
|
|
|
|
HRESULT hr = S_OK;
|
|
|
|
LPCTSTR aszQueries[] =
|
|
{
|
|
_T("SELECT TimeGenerated, SourceName, Message FROM Win32_NTLogEvent WHERE EventIdentifier = 1000"),
|
|
_T("SELECT TimeGenerated, SourceName, Message FROM Win32_NTLogEvent WHERE EventIdentifier = 1001"),
|
|
_T("SELECT TimeGenerated, SourceName, Message FROM Win32_NTLogEvent WHERE EventIdentifier = 1002"),
|
|
NULL
|
|
};
|
|
|
|
for (int i = 0; aszQueries[i] != NULL; i++)
|
|
{
|
|
CWMIObjectCollection * pCollection = NULL;
|
|
if (SUCCEEDED(pWMI->WQLQuery(aszQueries[i], &pCollection)))
|
|
{
|
|
CWMIObject * pObject = NULL;
|
|
while (S_OK == pCollection->GetNext(&pObject))
|
|
{
|
|
pWMI->AddObjectToOutput(aColValues, iColCount, pObject, _T("TimeGenerated, SourceName, Message"), IDS_SWWINERR1);
|
|
}
|
|
delete pObject;
|
|
delete pCollection;
|
|
}
|
|
}
|
|
|
|
return hr;
|
|
}
|