C#通过WIN32 API 获取外部程序sysListview的值和TreeView的值

http://blog.csdn.net/taotaohuoli/article/details/45913099

C#通过WIN32 API 获取外部程序sysListview的值

using System.Runtime.InteropServices;    public const uint LVM_FIRST = 0x1000;  public const uint LVM_GETITEMCOUNT = LVM_FIRST + 4;  public const uint LVM_GETITEMW = LVM_FIRST + 75;    [DllImport("user32.DLL")]  public static extern int SendMessage(IntPtr hWnd, uint Msg, int wParam, int lParam);  [DllImport("user32.DLL")]  public static extern IntPtr FindWindow(string lpszClass, string lpszWindow);  [DllImport("user32.DLL")]  public static extern IntPtr FindWindowEx(IntPtr hwndParent,      IntPtr hwndChildAfter, string lpszClass, string lpszWindow);  [DllImport("user32.dll")]  public static extern uint GetWindowThreadProcessId(IntPtr hWnd,      out uint dwProcessId);    public const uint PROCESS_VM_OPERATION = 0x0008;  public const uint PROCESS_VM_READ = 0x0010;  public const uint PROCESS_VM_WRITE = 0x0020;    [DllImport("kernel32.dll")]  public static extern IntPtr OpenProcess(uint dwDesiredAccess,      bool bInheritHandle, uint dwProcessId);  public const uint MEM_COMMIT = 0x1000;  public const uint MEM_RELEASE = 0x8000;    public const uint MEM_RESERVE = 0x2000;  public const uint PAGE_READWRITE = 4;    [DllImport("kernel32.dll")]  public static extern IntPtr VirtualAllocEx(IntPtr hProcess, IntPtr lpAddress,      uint dwSize, uint flAllocationType, uint flProtect);    [DllImport("kernel32.dll")]  public static extern bool VirtualFreeEx(IntPtr hProcess, IntPtr lpAddress,     uint dwSize, uint dwFreeType);    [DllImport("kernel32.dll")]  public static extern bool CloseHandle(IntPtr handle);    [DllImport("kernel32.dll")]  public static extern bool WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,     IntPtr lpBuffer, int nSize, ref uint vNumberOfBytesRead);    [DllImport("kernel32.dll")]  public static extern bool ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,     IntPtr lpBuffer, int nSize, ref uint vNumberOfBytesRead);    public struct LVITEM  {      public int mask;      public int iItem;      public int iSubItem;      public int state;      public int stateMask;      public IntPtr pszText; // string      public int cchTextMax;      public int iImage;      public IntPtr lParam;      public int iIndent;      public int iGroupId;      public int cColumns;      public IntPtr puColumns;  }  public int LVIF_TEXT = 0x0001;    public int ListView_GetItemCount(IntPtr AHandle)  {      return SendMessage(AHandle, LVM_GETITEMCOUNT, 0, 0);  }    private void button1_Click(object sender, EventArgs e)  {      IntPtr vHandle = FindWindow("#32770", "Windows 任务管理器");      vHandle = FindWindowEx(vHandle, IntPtr.Zero, "#32770", null);      vHandle = FindWindowEx(vHandle, IntPtr.Zero, "SysListView32", null);      if (vHandle == IntPtr.Zero) return;      int vItemCount = ListView_GetItemCount(vHandle);      uint vProcessId;      GetWindowThreadProcessId(vHandle, out vProcessId);        IntPtr vProcess = OpenProcess(PROCESS_VM_OPERATION | PROCESS_VM_READ |          PROCESS_VM_WRITE, false, vProcessId);      IntPtr vPointer = VirtualAllocEx(vProcess, IntPtr.Zero, 4096,          MEM_RESERVE | MEM_COMMIT, PAGE_READWRITE);      try      {          for (int i = 0; i  < vItemCount; i++)          {              byte[] vBuffer = new byte[256];              LVITEM[] vItem = new LVITEM[1];              vItem[0].mask = LVIF_TEXT;              vItem[0].iItem = i;              vItem[0].iSubItem = 0;              vItem[0].cchTextMax = vBuffer.Length;              vItem[0].pszText = (IntPtr)((int)vPointer + Marshal.SizeOf(typeof(LVITEM)));              uint vNumberOfBytesRead = 0;                WriteProcessMemory(vProcess, vPointer,                  Marshal.UnsafeAddrOfPinnedArrayElement(vItem, 0),                  Marshal.SizeOf(typeof(LVITEM)), ref vNumberOfBytesRead);              SendMessage(vHandle, LVM_GETITEMW, i, vPointer.ToInt32());              ReadProcessMemory(vProcess,                  (IntPtr)((int)vPointer + Marshal.SizeOf(typeof(LVITEM))),                  Marshal.UnsafeAddrOfPinnedArrayElement(vBuffer, 0),                  vBuffer.Length, ref vNumberOfBytesRead);                string vText = Marshal.PtrToStringUni(                  Marshal.UnsafeAddrOfPinnedArrayElement(vBuffer, 0));              Console.WriteLine(vText);          }      }      finally      {          VirtualFreeEx(vProcess, vPointer, 0, MEM_RELEASE);          CloseHandle(vProcess);      }  } 

C#通过WIN32 API 获取外部程序TreeView的值

 

using System.Runtime.InteropServices;    public const int TV_FIRST = 0x1100;  public const int TVM_GETCOUNT = TV_FIRST + 5;  public const int TVM_GETNEXTITEM = TV_FIRST + 10;  public const int TVM_GETITEMA = TV_FIRST + 12;  public const int TVM_GETITEMW = TV_FIRST + 62;    public const int TVGN_ROOT = 0x0000;  public const int TVGN_NEXT = 0x0001;  public const int TVGN_PREVIOUS = 0x0002;  public const int TVGN_PARENT = 0x0003;  public const int TVGN_CHILD = 0x0004;  public const int TVGN_FIRSTVISIBLE = 0x0005;  public const int TVGN_NEXTVISIBLE = 0x0006;  public const int TVGN_PREVIOUSVISIBLE = 0x0007;  public const int TVGN_DROPHILITE = 0x0008;  public const int TVGN_CARET = 0x0009;  public const int TVGN_LASTVISIBLE = 0x000A;    public const int TVIF_TEXT = 0x0001;  public const int TVIF_IMAGE = 0x0002;  public const int TVIF_PARAM = 0x0004;  public const int TVIF_STATE = 0x0008;  public const int TVIF_HANDLE = 0x0010;  public const int TVIF_SELECTEDIMAGE = 0x0020;  public const int TVIF_CHILDREN = 0x0040;  public const int TVIF_INTEGRAL = 0x0080;    [DllImport("User32.DLL")]  public static extern int SendMessage(IntPtr hWnd,      uint Msg, int wParam, int lParam);    [DllImport("kernel32.dll")]  public static extern IntPtr OpenProcess(uint dwDesiredAccess,      bool bInheritHandle, uint dwProcessId);  public const uint MEM_COMMIT = 0x1000;  public const uint MEM_RELEASE = 0x8000;    public const uint MEM_RESERVE = 0x2000;  public const uint PAGE_READWRITE = 4;    public const uint PROCESS_VM_OPERATION = 0x0008;  public const uint PROCESS_VM_READ = 0x0010;  public const uint PROCESS_VM_WRITE = 0x0020;    [DllImport("kernel32.dll")]  public static extern IntPtr VirtualAllocEx(IntPtr hProcess, IntPtr lpAddress,      uint dwSize, uint flAllocationType, uint flProtect);    [DllImport("kernel32.dll")]  public static extern bool VirtualFreeEx(IntPtr hProcess, IntPtr lpAddress,     uint dwSize, uint dwFreeType);    [DllImport("kernel32.dll")]  public static extern bool CloseHandle(IntPtr handle);    [DllImport("kernel32.dll")]  public static extern bool WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,     IntPtr lpBuffer, int nSize, ref uint vNumberOfBytesRead);    [DllImport("kernel32.dll")]  public static extern bool ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,     IntPtr lpBuffer, int nSize, ref uint vNumberOfBytesRead);    [DllImport("user32.dll")]  public static extern uint GetWindowThreadProcessId(IntPtr hWnd,      out uint dwProcessId);    [StructLayout(LayoutKind.Sequential)]  public struct TVITEM  {      public int mask;      public IntPtr hItem;      public int state;      public int stateMask;      public IntPtr pszText;      public int cchTextMax;      public int iImage;      public int iSelectedImage;      public int cChildren;      public IntPtr lParam;      public IntPtr HTreeItem;  }         public static uint TreeView_GetCount(IntPtr hwnd)  {      return (uint)SendMessage(hwnd, TVM_GETCOUNT, 0, 0);  }    public static IntPtr TreeView_GetNextItem(IntPtr hwnd, IntPtr hitem, int code)  {      return (IntPtr)SendMessage(hwnd, TVM_GETNEXTITEM, code, (int)hitem);  }    public static IntPtr TreeView_GetRoot(IntPtr hwnd)  {      return TreeView_GetNextItem(hwnd, IntPtr.Zero, TVGN_ROOT);  }    public static IntPtr TreeView_GetChild(IntPtr hwnd, IntPtr hitem)  {      return TreeView_GetNextItem(hwnd, hitem, TVGN_CHILD);  }    public static IntPtr TreeView_GetNextSibling(IntPtr hwnd, IntPtr hitem)  {      return TreeView_GetNextItem(hwnd, hitem, TVGN_NEXT);  }    public static IntPtr TreeView_GetParent(IntPtr hwnd, IntPtr hitem)  {      return TreeView_GetNextItem(hwnd, hitem, TVGN_PARENT);  }    public static IntPtr TreeNodeGetNext(IntPtr AHandle, IntPtr ATreeItem)  {      if (AHandle == IntPtr.Zero || ATreeItem == IntPtr.Zero) return IntPtr.Zero;      IntPtr result = TreeView_GetChild(AHandle, ATreeItem);      if (result == IntPtr.Zero)          result = TreeView_GetNextSibling(AHandle, ATreeItem);        IntPtr vParentID = ATreeItem;      while (result == IntPtr.Zero && vParentID != IntPtr.Zero)      {          vParentID = TreeView_GetParent(AHandle, vParentID);          result = TreeView_GetNextSibling(AHandle, vParentID);      }      return result;  }    public static bool GetTreeViewText(IntPtr AHandle, List <string> AOutput)  {      if (AOutput == null) return false;      uint vProcessId;      GetWindowThreadProcessId(AHandle, out vProcessId);        IntPtr vProcess = OpenProcess(PROCESS_VM_OPERATION | PROCESS_VM_READ |          PROCESS_VM_WRITE, false, vProcessId);      IntPtr vPointer = VirtualAllocEx(vProcess, IntPtr.Zero, 4096,          MEM_RESERVE | MEM_COMMIT, PAGE_READWRITE);      try      {          uint vItemCount = TreeView_GetCount(AHandle);          IntPtr vTreeItem = TreeView_GetRoot(AHandle);          Console.WriteLine(vItemCount);          for (int i = 0; i  < vItemCount; i++)          {              byte[] vBuffer = new byte[256];              TVITEM[] vItem = new TVITEM[1];              vItem[0] = new TVITEM();              vItem[0].mask = TVIF_TEXT;              vItem[0].hItem = vTreeItem;              vItem[0].pszText = (IntPtr)((int)vPointer + Marshal.SizeOf(typeof(TVITEM)));              vItem[0].cchTextMax = vBuffer.Length;              uint vNumberOfBytesRead = 0;              WriteProcessMemory(vProcess, vPointer,                  Marshal.UnsafeAddrOfPinnedArrayElement(vItem, 0),                  Marshal.SizeOf(typeof(TVITEM)), ref vNumberOfBytesRead);              SendMessage(AHandle, TVM_GETITEMA, 0, (int)vPointer);              ReadProcessMemory(vProcess,                  (IntPtr)((int)vPointer + Marshal.SizeOf(typeof(TVITEM))),                  Marshal.UnsafeAddrOfPinnedArrayElement(vBuffer, 0),                  vBuffer.Length, ref vNumberOfBytesRead);              Console.WriteLine(Marshal.PtrToStringAnsi(                  Marshal.UnsafeAddrOfPinnedArrayElement(vBuffer, 0)));                vTreeItem = TreeNodeGetNext(AHandle, vTreeItem);          }      }      finally      {          VirtualFreeEx(vProcess, vPointer, 0, MEM_RELEASE);          CloseHandle(vProcess);      }      return true;  }    private void button1_Click(object sender, EventArgs e)  {      List <string> vOutput = new List <string>();      GetTreeViewText((IntPtr)xxxx, vOutput); // xxxx替换成相应treeview句柄。获得参考上贴FindWindow()的使用      foreach (string vLine in vOutput)          Console.WriteLine(vLine);  }