Windows 模拟用户点击桌面图标（双击、右击）

前言：2014-04-22记录在hi baidu上，现移过来。

思路：1、获取指定图标的坐标；2、发送右击、双击操作；

第一步： 获取坐标

/*
* Purpose: 获取32位桌面图标坐标
* Arguments:
*           hDeskWnd => 桌面窗口句柄
*           pszName  => 图标名称
*           lpPoint  => 图标坐标
* Returns:
*           TRUE     => 获取成功
*           FALSE    => 获取失败
*/
BOOL WINAPI GetXY32( HWND hDeskWnd, char *pszName, LPPOINT lpPoint)
{
BOOL bRet = FALSE;
// 遍历外部进程所有图标
DWORD dwThreadId = 0;
GetWindowThreadProcessId( hDeskWnd, &dwThreadId );
HANDLE hProcess = OpenProcess( PROCESS_VM_READ|PROCESS_VM_OPERATION|PROCESS_VM_WRITE, FALSE, dwThreadId );
if( hProcess == NULL ) {
printf( "OpenProcess Failed.\n" );
}
else {
LVITEMA* plvItem = (LVITEMA*)VirtualAllocEx( hProcess, NULL, sizeof(LVITEMA), MEM_COMMIT, PAGE_READWRITE );
char *pszText = (char*)VirtualAllocEx( hProcess, NULL, 512,MEM_COMMIT, PAGE_READWRITE);
POINT *pItemPt= (POINT*)VirtualAllocEx( hProcess, NULL, sizeof(POINT), MEM_COMMIT, PAGE_READWRITE);
POINT pt;
if( !pItemPt || !plvItem || !pszText ) {
printf( "AllocEx Failed.\n" );
}
else {
LVITEMA lvItem;
lvItem.mask         = LVIF_TEXT;
lvItem.cchTextMax   = 512;
lvItem.pszText      = pszText;
char szItemBuf[512] = {0};
int nMaxItem = ::SendMessage( hDeskWnd, LVM_GETITEMCOUNT, 0, 0 );
for( int nItem = 0; nItem < nMaxItem; nItem++ ) {
lvItem.iItem    = nItem;
lvItem.iSubItem = 0;
// 将设置好的结构插入目标进程
WriteProcessMemory( hProcess, plvItem, &lvItem, sizeof(lvItem), NULL);
// 发送LVM_GETITEM消息
BOOL retValue = (BOOL)::SendMessage( hDeskWnd, LVM_GETITEMTEXTA, nItem, (LPARAM)plvItem );
// 获取pszText
ReadProcessMemory( hProcess, pszText, szItemBuf, 512,NULL );
if( _stricmp( szItemBuf, pszName ) == 0 ) {
// Send LVM_GETITEMPOSITION Get position
::SendMessage( hDeskWnd, LVM_GETITEMPOSITION, nItem, (LPARAM)pItemPt);
ReadProcessMemory( hProcess, pItemPt, &pt, sizeof(POINT), NULL );
memcpy_s( lpPoint, sizeof(POINT), &pt, sizeof(POINT) );
bRet=TRUE;
break;
}
}
VirtualFreeEx( hProcess, plvItem, 0, MEM_RELEASE);
VirtualFreeEx( hProcess, pszText, 0, MEM_RELEASE);
VirtualFreeEx( hProcess, pItemPt, 0, MEM_RELEASE);
}
CloseHandle(hProcess);
}
return bRet;
}

继续……

/*
* Purpose: 获取桌面图标坐标,在此处获取桌面窗口句柄,区分32位跟64位,以及Windows7和WindowsXP
* Arguments:
*           pszName  => 图标名称
*           lpPoint  => 图标坐标
* Returns:
*           TRUE     => 获取成功
*           FALSE    => 获取失败
*/
BOOL WINAPI GetDesktop( char *pszName, LPPOINT lpPoint )
{
// 桌面上SysListView32的窗口句柄
HWND hDeskWnd=NULL;
// find windows7
HWND hWnd= ::FindWindow( L"WorkerW", NULL );
while( hWnd ) {
HWND hShellView = ::FindWindowEx( hWnd, NULL, L"SHELLDLL_DefView", NULL );
if( hShellView ){
hDeskWnd=::FindWindowEx( hShellView, NULL, L"SysListView32", NULL);
break;
}
hWnd = ::GetWindow( hWnd, GW_HWNDNEXT );
}
// 在XP下找
if( !hDeskWnd ) {
hWnd = ::FindWindow( L"ProgMan" , L"Program Manager" );
if( hWnd ) {
hWnd = ::FindWindowEx( hWnd, NULL, L"SHELLDLL_DefView", NULL);
hDeskWnd = ::FindWindowEx( hWnd, NULL, L"SysListView32", NULL);
}
}
if( !hDeskWnd ){
printf( "Find Desktop Failed.\n" );
return FALSE;
}
BOOL bRet = FALSE;
if( Is64BitOS() ) {
bRet = GetXY64( hDeskWnd, pszName, lpPoint );
}
else {
bRet = GetXY32( hDeskWnd, pszName, lpPoint );
}
return bRet;
}

到此，获取到桌面的指定图标坐标，下一步开始模拟点击

第二步：双击、右击

双击

用python来模拟双击

################################################################################
# class FakeUserClicked: 模拟用户点击桌面指定坐标
# 传入参数：pos = [X,Y]
################################################################################
class FakeUserClicked:
"""docstring for FakeUserClicked"""
def __init__(self, pos):
self.posXY = pos

# 模拟点击
def FakeClicked(self):
# 移动箭头到指定坐标
autopy.mouse.move(self.posXY[0], self.posXY[1])
autopy.mouse.click()
time.sleep(0.03)
autopy.mouse.click()
return True

# 获取的坐标为原始坐标，也就是起点坐标
posXY[0] += 10
# 需要计算图标的高度，这里默认为30
posXY[1] += 30

print posXY[0],posXY[1]

# step2: 模拟执行
fakeClick = FakeUserClicked(posXY)
fakeClick.FakeClicked()

右击

右击操作主要是通过COM Shell32实现

/*
* path ==> 指定程序目录
* file_name ==> 程序名称
* item_name ==> 菜单项
* InvokeItemInPopupMenu("d:\\mydesktop", "PCHunter64.exe", "&load into pe editor");
*/
int InvokeItemInPopupMenu(const char * path, const char * file_name, const char * item_name)
{
CoInitialize(NULL);
Shell32::IShellDispatchPtr ptrShell;
ptrShell.CreateInstance(__uuidof(Shell32::Shell));
_variant_t var((short)Shell32::ssfRECENT);

Shell32::FolderPtr ptrFolder = ptrShell->NameSpace(path);
Shell32::FolderItemPtr ptrItem = ptrFolder->ParseName(file_name);
Shell32::FolderItemVerbsPtr t_verbs = ptrItem->Verbs();

for (long i = 0; i < t_verbs->Count; ++i) {
Shell32::FolderItemVerbPtr t_verb = t_verbs->Item(i);
cout << t_verb->Name << endl;
if (!_stricmp(t_verb->Name, item_name)) {
t_verb->DoIt();
Sleep(100);
}
}
ptrItem.Release();
ptrFolder.Release();
ptrShell.Release();
CoUninitialize();
return 0;
}

需要注意的是，64位系统和32位系统获取坐标方法一样，只是ITEM结构不一样：

// 64位系统下ITEM结构
typedef struct tagLVITEM64A
{
UINT mask;
int iItem;
int iSubItem;
UINT state;
UINT stateMask;
INT64 pszText;
int cchTextMax;
int iImage;
LPARAM lParam;
#if (_WIN32_IE >= 0x0300)
int iIndent;
#endif
#if (_WIN32_WINNT >= 0x501)
int iGroupId;
UINT cColumns; // tile view columns
PUINT puColumns;
#endif
} LVITEM64A, *LPLVITEM64A;