VC 如何通过托盘图标得到该所属进程

博主：墨言
发布时间：2020 年 06 月 27 日
2216 次浏览
暂无评论
13162字数
分类：编程学习

//本例以获取程序托盘图标位置为例

//根据需要还可以获取不少信息

//获取托盘区域数据
RECT CTray::GetTrayRect()
{
    RECT rect = {0};
    HWND hWnd = NULL;

    hWnd = FindTrayWnd();
    if (hWnd != NULL)
    {
        if (!EnumNotifyWindow(rect,hWnd))//如果没在普通托盘区
        {
            hWnd = FindNotifyIconOverflowWindow();//在溢出区（win7）
            if (hWnd != NULL)
            {
                EnumNotifyWindow(rect,hWnd);
            }
        }
    }

    return rect;
}
//枚举获取托盘区域位置
bool CTray::EnumNotifyWindow(RECT &rect,HWND hWnd)
{
    //RECT rect = {0};
    bool bSuc = false;
    unsigned long lngPID = 0;
    long ret = 0,lngButtons = 0;
    long lngHwndAdr = 0,lngHwnd = 0;//,lngTextAdr,lngButtonID;
    HANDLE hProcess = NULL;
    LPVOID lngAddress = NULL,lngRect = NULL;

    if (hWnd != NULL)
    {
        ret = GetWindowThreadProcessId(hWnd, &lngPID);
        if(ret != 0 && lngPID != 0)
        {
            hProcess = OpenProcess(PROCESS_ALL_ACCESS|PROCESS_VM_OPERATION|PROCESS_VM_READ|PROCESS_VM_WRITE,0,lngPID);//
            if (hProcess != NULL)
            {
                lngAddress = VirtualAllocEx(hProcess,0, 0x4096, MEM_COMMIT, PAGE_READWRITE);
                lngRect = VirtualAllocEx(hProcess,0,sizeof(RECT), MEM_COMMIT, PAGE_READWRITE);
                lngButtons = SendMessage(hWnd, TB_BUTTONCOUNT, 0, 0); //发送消息获取托盘button数量
                if (lngAddress != NULL  && lngRect != NULL)
                {
                    for(int i=0 ;i< lngButtons;i++)
                    {
                        RECT rc = {0}; 
                        int j = i;
                        ret = SendMessage(hWnd,TB_GETBUTTON,j,long(lngAddress));//发送消息获取托盘项数据起始地址
                        ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 12),&lngHwndAdr,4,0);
                        if(ret != 0 && lngHwndAdr != -1)
                        {
                            ret = ReadProcessMemory(hProcess, LPVOID(lngHwndAdr),&lngHwnd, 4,0);//获取句柄
                            if(ret != 0 && (HWND)lngHwnd == m_NotifyIconData.hWnd)//
                            {
                                ret = ::SendMessage(hWnd,TB_GETITEMRECT,(WPARAM)j,(LPARAM)lngRect); //发送消息获取托盘项区域数据
                                ret = ReadProcessMemory(hProcess,lngRect,&rc, sizeof(rc),0);  //读取托盘区域数据
                                if(ret != 0)
                                {
                                    CWnd::FromHandle(hWnd)->ClientToScreen(&rc);
                                    rect = rc;
                                }
                                bSuc = true;//在普通托盘区找到，在溢出区不再查找
                                break;
                            }
                        }
                    } 
                }
                if (lngAddress != NULL)
                {
                    VirtualFreeEx( hProcess, lngAddress, 0x4096, MEM_DECOMMIT);
                    VirtualFreeEx( hProcess, lngAddress, 0, MEM_RELEASE);
                }
                if (lngRect != NULL)
                {
                    VirtualFreeEx( hProcess, lngRect, sizeof(RECT), MEM_DECOMMIT);
                    VirtualFreeEx( hProcess, lngRect, 0, MEM_RELEASE);
                }
                CloseHandle(hProcess);
            }
        }
    }
    return bSuc;
}
//获取普通托盘区窗口句柄
HWND CTray::FindTrayWnd()
{
    HWND hWnd = NULL;
    HWND hWndPaper = NULL;

    if ((hWnd = FindWindow(_T("Shell_TrayWnd"), NULL)) != NULL)
    {
        if ((hWnd = FindWindowEx(hWnd, 0, _T("TrayNotifyWnd"), NULL)) != NULL)
        {
            hWndPaper = FindWindowEx(hWnd, 0, _T("SysPager"), NULL);
            if(!hWndPaper)
                hWnd = FindWindowEx(hWnd, 0, _T("ToolbarWindow32"), NULL);
            else
                hWnd = FindWindowEx(hWndPaper, 0, _T("ToolbarWindow32"), NULL);
        }
    }

    return hWnd;
}
//获取溢出托盘区窗口句柄
HWND CTray::FindNotifyIconOverflowWindow()
{
    HWND hWnd = NULL;

    hWnd = FindWindow(_T("NotifyIconOverflowWindow"), NULL);
    if (hWnd != NULL)
    {
        hWnd = FindWindowEx(hWnd, NULL, _T("ToolbarWindow32"), NULL);
    }

    return hWnd;
}

//以下代码网上收集的，变量初始化指针句柄及函数是否成功都没判定

//需要的自己加下判定，有时间再改了


struct TRAYDATA
{
    HWND hwnd;                               
    UINT uID;                               
    UINT uCallbackMessage;       
    DWORD Reserved[2];               
    HICON hIcon;                               
};
void CTray::GetTrayRect()
{
HWND hWnd,hWndPaper;
unsigned long lngPID;
long ret,lngButtons;
HANDLE hProcess;
LPVOID lngAddress;
long lngTextAdr,lngHwndAdr,lngHwnd,lngButtonID;
TCHAR strBuff[1024]={0};
  TRAYDATA trayData = {0};
  TBBUTTON btnData={0};

hWnd = FindWindow(_T("Shell_TrayWnd"), NULL);
hWnd = FindWindowEx(hWnd, 0, _T("TrayNotifyWnd"), NULL);
hWndPaper = FindWindowEx(hWnd, 0, _T("SysPager"), NULL);
if(!hWndPaper)
hWnd = FindWindowEx(hWnd, 0, _T("ToolbarWindow32"), NULL);
else
hWnd = FindWindowEx(hWndPaper, 0, _T("ToolbarWindow32"), NULL);
ret = GetWindowThreadProcessId(hWnd, &lngPID);
hProcess = OpenProcess(PROCESS_ALL_ACCESS|PROCESS_VM_OPERATION|PROCESS_VM_READ|PROCESS_VM_WRITE,0,lngPID);
lngAddress = VirtualAllocEx(hProcess,0, 0x4096, MEM_COMMIT, PAGE_READWRITE);
lngButtons = SendMessage(hWnd, TB_BUTTONCOUNT, 0, 0);                      
RECT rc; POINT point;
LPVOID lngRect = VirtualAllocEx(hProcess,0,sizeof(RECT), MEM_COMMIT, PAGE_READWRITE);

CRect rect;
for(int i=0 ;i< lngButtons;i++)
{
int j = i;
ret = SendMessage(hWnd,TB_GETBUTTON,j,long(lngAddress));
ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 16),&lngTextAdr,4,0);
if(lngTextAdr != -1)
{
ret = ReadProcessMemory(hProcess, LPVOID(lngTextAdr),strBuff,1024,0);
//ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 12),&lngHwndAdr,4,0); //获取句柄
//ret = ReadProcessMemory(hProcess, LPVOID(lngHwndAdr),&lngHwnd, 4,0);
//ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 4),&lngButtonID,4,0);//获取buttonID
CString str(strBuff);
if (str.Compare(m_NotifyIconData.szTip) == 0)
{
::SendMessage(hWnd,TB_GETITEMRECT,(WPARAM)j,(LPARAM)lngRect);
ReadProcessMemory(hProcess,lngRect,&rc, sizeof(rc),0);  //获取托盘图标区域
CWnd::FromHandle(hWnd)->ClientToScreen(&rc);
}

//以下是隐藏托盘图标
// 　　 {
// 　　 if(show)
// 　　 {
// 　　 SendMessage(hWnd,TB_HIDEBUTTON,lngButtonID,0);
// 　　 }
// 　　 else
// 　　 { 
// 　　 SendMessage(hWnd,TB_HIDEBUTTON,lngButtonID,1);
// 　　 }
// 　　 }

}
}
VirtualFreeEx( hProcess, lngAddress, 0x4096, MEM_DECOMMIT);
VirtualFreeEx( hProcess, lngAddress, 0, MEM_RELEASE);
VirtualFreeEx( hProcess, lngRect, sizeof(RECT), MEM_DECOMMIT);
VirtualFreeEx( hProcess, lngRect, 0, MEM_RELEASE);
CloseHandle(hProcess);
}

//另一例子

VOID StartStorm()
{
         HWND hMain = FindWindow("animate_layered_window_class", "暴风媒体中心");
         if ( hMain )
         {
                 ShowWindow(hMain, SW_HIDE);
         }

        //得到工具栏句柄
     HWND hTray = FindWindow("Shell_TrayWnd", NULL);
     hTray = FindWindowEx(hTray, 0, "TrayNotifyWnd", NULL);
     hTray = FindWindowEx(hTray, 0, "SysPager", NULL);
     hTray = FindWindowEx(hTray, 0, "ToolbarWindow32", NULL);

        //获取explore进程ID
         DWORD TrayPid;
         GetWindowThreadProcessId(hTray, &TrayPid);

        //打开进程 并且开辟进程空间
         RECT rect;
         TBBUTTON tb;
         TBBUTTON pTb;
         LPVOID lpAddr;
         DWORD dwThreadIdOfICO;
         DWORD dwTempId = FindStorm("Stormtray.exe"); //你要点击的进程的PID

         TRAYDATA traydata;

        HANDLE hOpen = OpenProcess(PROCESS_ALL_ACCESS, FALSE, TrayPid);
         lpAddr = VirtualAllocEx(hOpen, NULL, sizeof(tb) + sizeof(rect), MEM_COMMIT, PAGE_READWRITE);

        int nCount = SendMessage(hTray, TB_BUTTONCOUNT, 0, 0);
         int i;
         DWORD dwOutWrite;
         for ( i = 0; i < nCount; i ++)
         {
                 ZeroMemory(&tb, sizeof(tb));
                 ZeroMemory(&rect, sizeof(rect));
                 //把参数写进目标进程
                 WriteProcessMemory(hOpen, lpAddr, &tb, sizeof(tb), &dwOutWrite);
                 //WriteProcessMemory(hOpen, (LPVOID)((DWORD)lpAddr + sizeof(pTb)), &rect, sizeof(rect), &dwOutWrite);
                 //获取BUTTON
                 SendMessage(hTray, TB_GETBUTTON, i, LPARAM(lpAddr));
                 //读取TBBUTTON结构
                 ReadProcessMemory(hOpen, lpAddr, &pTb, sizeof(TBBUTTON), &dwOutWrite);
                 //读取TRAYDATA结构
                 ReadProcessMemory(hOpen, (LPVOID)pTb.dwData, &traydata, sizeof(TRAYDATA), &dwOutWrite);

                 GetWindowThreadProcessId(traydata.hwnd, &dwThreadIdOfICO);
                 if ( dwThreadIdOfICO == dwTempId )
                 {
                         //获取ICO的RECT
                         LPVOID lp = (LPVOID)((DWORD)lpAddr + sizeof(pTb));
                         SendMessage(hTray, TB_GETITEMRECT, i, (LPARAM)lp);
                         LPVOID lpdata = (LPVOID)((DWORD)lpAddr + sizeof(TBBUTTON));
                         ReadProcessMemory(hOpen, lpdata, &rect, sizeof(rect), &dwOutWrite);
                         int iGap = rect.right/2; //得到图标的中间坐标的间隔
                         //点击
                         SendMessage(hTray, WM_LBUTTONDOWN, MK_LBUTTON, MAKELPARAM(rect.right - iGap, rect.bottom - iGap));
                         SendMessage(hTray, WM_LBUTTONUP, 0, MAKELPARAM(rect.right - iGap, rect.bottom - iGap));
                         //
                         CloseHandle(hOpen);
                         break;;
                 }
         }

}

//win7有一个溢出托盘区：以下是隐藏在托盘区中的托盘信息，用以上的方法找不到，因为在NotifyIconOverflowWindow里

Fhwnd = FindWindow("NotifyIconOverflowWindow", NULL)

参考文章：http://topic.csdn.net/u/20101003/23/859851ee-5aa1-4476-8ce1-1359826df2b0.html


#include "stdafx.h"
#include <afx.h>
#include <locale.h>
#include <string>
using namespace std;

typedef BOOL (WINAPI *LPFN_ISWOW64PROCESS) (HANDLE, PBOOL);

BOOL IsWow64()
{
    BOOL bIsWow64 = FALSE;

    LPFN_ISWOW64PROCESS 
        fnIsWow64Process = (LPFN_ISWOW64PROCESS)GetProcAddress(
        GetModuleHandle(_T("kernel32")),"IsWow64Process");

    if (NULL != fnIsWow64Process)
    {
        if (!fnIsWow64Process(GetCurrentProcess(),&bIsWow64))
        {
            // handle error
        }
    }
    return bIsWow64;
}

HWND FindTrayWnd()
{
    HWND hWnd = NULL;

    hWnd = FindWindow(_T("Shell_TrayWnd"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("TrayNotifyWnd"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("SysPager"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("ToolbarWindow32"), NULL);

    return hWnd;
}

HWND FindNotifyIconOverflowWindow()
{
    HWND hWnd = NULL;

    hWnd = FindWindow(_T("NotifyIconOverflowWindow"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("ToolbarWindow32"), NULL);

    return hWnd;
}

void EnumNotifyWindow(HWND hWnd)
{
    DWORD dwProcessId = 0;
    GetWindowThreadProcessId(hWnd,&dwProcessId);

    HANDLE hProcess = OpenProcess(PROCESS_VM_OPERATION | PROCESS_VM_READ | PROCESS_VM_WRITE, FALSE, dwProcessId);
    if ( hProcess==NULL ){
        return;
    }
    LPVOID lAddress = VirtualAllocEx(hProcess, 0, 4096, MEM_COMMIT, PAGE_READWRITE);
    if ( lAddress==NULL ){
        return;
    }
    DWORD lTextAdr = 0;
    BYTE buff[1024] = {0};
    CString strFilePath;
    CString strTile;
    HWND hMainWnd = NULL;
    int nDataOffset = sizeof(TBBUTTON) - sizeof(INT_PTR) - sizeof(DWORD_PTR);
    int nStrOffset = 18; 
    if ( IsWow64() ){
        nDataOffset+=4;
        nStrOffset+=6;
    }

    //得到圖標個數
    int lButton = SendMessage(hWnd, TB_BUTTONCOUNT, 0, 0);
    for (int i = 0; i < lButton; i++) {
        SendMessage(hWnd, TB_GETBUTTON, i, (LPARAM)lAddress);
        //讀文本地址
        ReadProcessMemory(hProcess, (LPVOID)((DWORD)lAddress + nDataOffset), &lTextAdr, 4, 0);
        if ( lTextAdr!=-1 ) {
            //讀文本
            ReadProcessMemory(hProcess, (LPCVOID)lTextAdr, buff, 1024, 0);
            hMainWnd = (HWND)(*((DWORD*)buff));
            strFilePath = (WCHAR *)buff + nStrOffset;
            strTile = (WCHAR *)buff + nStrOffset + MAX_PATH;
            _tprintf(_T("%s %s\n"),strTile,strFilePath);
        }
    }
    VirtualFreeEx(hProcess, lAddress, 4096, MEM_RELEASE);
    CloseHandle(hProcess);
}

int _tmain(int argc, _TCHAR* argv[])
{
    setlocale(LC_ALL, "chs");
    EnumNotifyWindow(FindTrayWnd());
    _tprintf(_T("\n"));
    EnumNotifyWindow(FindNotifyIconOverflowWindow());
    system("pause");
    return 0;
}

//还有一个版本

void  CTrayDlg::OnButton1()    
{  
           //  TODO:  Add  your  control  notification  handler  code  here  
HWND  wd=::FindWindow("Shell_TrayWnd",NULL);  
   if  (wd==NULL)  
   {  
         MessageBox("Error1");  
             return;  
   }  
   HWND  wtd=FindWindowEx(wd,NULL,"TrayNotifyWnd",NULL);  
   if  (wtd==NULL)  
   {  
         MessageBox("Error2");  
             return;  
   }  
   HWND  wd1=FindWindowEx(wtd,NULL,"ToolbarWindow32",NULL);  
   if  (wd1==NULL)  
   {  
         MessageBox("Error3");  
             return;  
   }  
   DWORD  pid;  
   pid=0;  
   GetWindowThreadProcessId(wd1,&pid);  
   if  (pid==NULL)  
   {  
         MessageBox("Error4");  
             return;  
   }  

   HANDLE  hd=OpenProcess(PROCESS_QUERY_INFORMATION    ¦    PROCESS_ALL_ACCESS            ,true,pid);  
   if  (hd==NULL)  
   {  
         MessageBox("Error6");  
         return;  
     }  

   int  num=::SendMessage(wd1,TB_BUTTONCOUNT  ,NULL,NULL);  
   int  i;  
   unsigned  long  n;  
   TBBUTTON  p,*pp;  
   CString  x;  
   wchar_t  name[256];  
   unsigned  long  whd,proid;  
   CString  temp;  

   TBBUTTON  *sp;  

   sp=  (TBBUTTON  *)0x20f00; //这里应该改成用VirtualAllocEx分配内存否则有可能出错，不过人懒，就先这么着吧 
   for(i=0;i<num;i++)  
   {  
           ::SendMessage(wd1,TB_GETBUTTON,i,(LPARAM)sp);  
       pp=&p;  
       ReadProcessMemory(hd,sp,pp,sizeof(p),&n);  
//        x.Format("%x  %x  %x  %x    %x  %x",p.iBitmap,p.idCommand,p.fsState,p.fsStyle,    p.dwData,  p.iString);  
       name[0]=0;  
       if  (p.iString!=0xffffffff)  
       {  
               try  
               {  
                       ReadProcessMemory(hd,(void  *)p.iString,name,255,&n);  
                       name[n]=0;  
               }  
               catch()  
               {  
               }  
//                x+="  ";  
//                x+=name;  
                       temp=name;  
                       try  
                       {  
                                   whd=0;  
                       ReadProcessMemory(hd,(void  *)p.dwData,&whd,4,&n);  
                       }  
                       catch()  
                       {  
                       }  
                       proid=0;  
               GetWindowThreadProcessId((HWND)whd,&proid);  
                       x.Format("位置=%d  名称=%s  窗口句柄=%08x  进程ID=%08x",  
                                         i,(LPCTSTR  )temp,whd,proid);  
               m_list.AddString(x);  
       }  
   }              
}

另一段收集

void   CTrayDlg::OnButton1()     
  {   
  //   TODO:   Add   your   control   notification   handler   code   here   
  HWND   wd=::FindWindow("Shell_TrayWnd",NULL);   
      if   (wd==NULL)   
      {   
            MessageBox("Error1");   
    return;   
      }   
      HWND   wtd=FindWindowEx(wd,NULL,"TrayNotifyWnd",NULL);   
      if   (wtd==NULL)   
      {   
            MessageBox("Error2");   
    return;   
      }   
      HWND   wd1=FindWindowEx(wtd,NULL,"ToolbarWindow32",NULL);   
      if   (wd1==NULL)   
      {   
            MessageBox("Error3");   
    return;   
      }   
      DWORD   pid;   
      pid=0;   
      GetWindowThreadProcessId(wd1,&pid);   
      if   (pid==NULL)   
      {   
            MessageBox("Error4");   
    return;   
      }   

      HANDLE   hd=OpenProcess(PROCESS_QUERY_INFORMATION   |     PROCESS_ALL_ACCESS ,true,pid);   
      if   (hd==NULL)   
      {   
            MessageBox("Error6");   
            return;   
        }   

      int   num=::SendMessage(wd1,TB_BUTTONCOUNT   ,NULL,NULL);   
      int   i;   
      unsigned   long   n;   
      TBBUTTON   p,*pp;   
      CString   x;   
      wchar_t   name[256];   
      unsigned   long   whd,proid;   
      CString   temp;   

      TBBUTTON   *sp;   

      sp=   (TBBUTTON   *)0x20f00;   
      for(i=0;i<num;i++)   
      {   
  ::SendMessage(wd1,TB_GETBUTTON,i,(LPARAM)sp);   
          pp=&p;   
          ReadProcessMemory(hd,sp,pp,sizeof(p),&n);   
  //         x.Format("%x   %x   %x   %x     %x   %x",p.iBitmap,p.idCommand,p.fsState,p.fsStyle,     p.dwData,   p.iString);   
          name[0]=0;   
          if   (p.iString!=0xffffffff)   
          {   
                  try   
                  {   
                          ReadProcessMemory(hd,(void   *)p.iString,name,255,&n);   
                          name[n]=0;   
                  }   
                  catch(...)   
                  {   
                  }   
  //                 x+="   ";   
  //                 x+=name;   
  temp=name;   
  try   
  {   
  whd=0;   
                          ReadProcessMemory(hd,(void   *)p.dwData,&whd,4,&n);   
  }   
  catch(...)   
  {   
  }   
  proid=0;   
                  GetWindowThreadProcessId((HWND)whd,&proid);   
  x.Format("位置=%d   名称=%s   窗口句柄=%08x   进程ID=%08x",   
        i,(LPCTSTR   )temp,whd,proid);   
                  m_list.AddString(x);   
          }   

      }   

  }

最后修改：2020 年 06 月 27 日

如果觉得我的文章对你有用，请随意赞赏

发表评论取消回复
使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款

评论 *

私密评论

名称 *

🎲

邮箱 *

地址

VC 如何通过托盘图标得到该所属进程

墨言 • 2020 年 06 月 27 日

//本例以获取程序托盘图标位置为例
//根据需要还可以获取不少信息
<pre><code class="language-cpp">//获取托盘区域数据
RECT CTray::GetTrayRect()
{
 RECT rect = {0};
 HWND hWnd = NULL;

hWnd = FindTrayWnd();
    if (hWnd != NULL)
    {
        if (!EnumNotifyWindow(rect,hWnd))//如果没在普通托盘区
        {
            hWnd = FindNotifyIconOverflowWindow();//在溢出区（win7）
            if (hWnd != NULL)
            {
                EnumNotifyWindow(rect,hWnd);
            }
        }
    }

return rect;
}
//枚举获取托盘区域位置
bool CTray::EnumNotifyWindow(RECT &amp;rect,HWND hWnd)
{
    //RECT rect = {0};
    bool bSuc = false;
    unsigned long lngPID = 0;
    long ret = 0,lngButtons = 0;
    long lngHwndAdr = 0,lngHwnd = 0;//,lngTextAdr,lngButtonID;
    HANDLE hProcess = NULL;
    LPVOID lngAddress = NULL,lngRect = NULL;

if (hWnd != NULL)
    {
        ret = GetWindowThreadProcessId(hWnd, &amp;lngPID);
        if(ret != 0 &amp;&amp; lngPID != 0)
        {
            hProcess = OpenProcess(PROCESS_ALL_ACCESS|PROCESS_VM_OPERATION|PROCESS_VM_READ|PROCESS_VM_WRITE,0,lngPID);//
            if (hProcess != NULL)
            {
                lngAddress = VirtualAllocEx(hProcess,0, 0x4096, MEM_COMMIT, PAGE_READWRITE);
                lngRect = VirtualAllocEx(hProcess,0,sizeof(RECT), MEM_COMMIT, PAGE_READWRITE);
                lngButtons = SendMessage(hWnd, TB_BUTTONCOUNT, 0, 0); //发送消息获取托盘button数量
                if (lngAddress != NULL  &amp;&amp; lngRect != NULL)
                {
                    for(int i=0 ;i&lt; lngButtons;i++)
                    {
                        RECT rc = {0}; 
                        int j = i;
                        ret = SendMessage(hWnd,TB_GETBUTTON,j,long(lngAddress));//发送消息获取托盘项数据起始地址
                        ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 12),&amp;lngHwndAdr,4,0);
                        if(ret != 0 &amp;&amp; lngHwndAdr != -1)
                        {
                            ret = ReadProcessMemory(hProcess, LPVOID(lngHwndAdr),&amp;lngHwnd, 4,0);//获取句柄
                            if(ret != 0 &amp;&amp; (HWND)lngHwnd == m_NotifyIconData.hWnd)//
                            {
                                ret = ::SendMessage(hWnd,TB_GETITEMRECT,(WPARAM)j,(LPARAM)lngRect); //发送消息获取托盘项区域数据
                                ret = ReadProcessMemory(hProcess,lngRect,&amp;rc, sizeof(rc),0);  //读取托盘区域数据
                                if(ret != 0)
                                {
                                    CWnd::FromHandle(hWnd)-&gt;ClientToScreen(&amp;rc);
                                    rect = rc;
                                }
                                bSuc = true;//在普通托盘区找到，在溢出区不再查找
                                break;
                            }
                        }
                    } 
                }
                if (lngAddress != NULL)
                {
                    VirtualFreeEx( hProcess, lngAddress, 0x4096, MEM_DECOMMIT);
                    VirtualFreeEx( hProcess, lngAddress, 0, MEM_RELEASE);
                }
                if (lngRect != NULL)
                {
                    VirtualFreeEx( hProcess, lngRect, sizeof(RECT), MEM_DECOMMIT);
                    VirtualFreeEx( hProcess, lngRect, 0, MEM_RELEASE);
                }
                CloseHandle(hProcess);
            }
        }
    }
    return bSuc;
}
//获取普通托盘区窗口句柄
HWND CTray::FindTrayWnd()
{
    HWND hWnd = NULL;
    HWND hWndPaper = NULL;

if ((hWnd = FindWindow(_T("Shell_TrayWnd"), NULL)) != NULL)
    {
        if ((hWnd = FindWindowEx(hWnd, 0, _T("TrayNotifyWnd"), NULL)) != NULL)
        {
            hWndPaper = FindWindowEx(hWnd, 0, _T("SysPager"), NULL);
            if(!hWndPaper)
                hWnd = FindWindowEx(hWnd, 0, _T("ToolbarWindow32"), NULL);
            else
                hWnd = FindWindowEx(hWndPaper, 0, _T("ToolbarWindow32"), NULL);
        }
    }

return hWnd;
}
//获取溢出托盘区窗口句柄
HWND CTray::FindNotifyIconOverflowWindow()
{
    HWND hWnd = NULL;

hWnd = FindWindow(_T("NotifyIconOverflowWindow"), NULL);
    if (hWnd != NULL)
    {
        hWnd = FindWindowEx(hWnd, NULL, _T("ToolbarWindow32"), NULL);
    }

return hWnd;
}</code></pre>
//以下代码网上收集的，变量 初始化 指针句柄 及函数是否成功都没判定
//需要的自己加下判定，有时间再改了
<pre><code class="language-cpp">
struct TRAYDATA
{
 HWND hwnd; 
 UINT uID; 
 UINT uCallbackMessage; 
 DWORD Reserved[2]; 
 HICON hIcon; 
};
void CTray::GetTrayRect()
{
HWND hWnd,hWndPaper;
unsigned long lngPID;
long ret,lngButtons;
HANDLE hProcess;
LPVOID lngAddress;
long lngTextAdr,lngHwndAdr,lngHwnd,lngButtonID;
TCHAR strBuff[1024]={0};
 TRAYDATA trayData = {0};
 TBBUTTON btnData={0};

hWnd = FindWindow(_T("Shell_TrayWnd"), NULL);
hWnd = FindWindowEx(hWnd, 0, _T("TrayNotifyWnd"), NULL);
hWndPaper = FindWindowEx(hWnd, 0, _T("SysPager"), NULL);
if(!hWndPaper)
hWnd = FindWindowEx(hWnd, 0, _T("ToolbarWindow32"), NULL);
else
hWnd = FindWindowEx(hWndPaper, 0, _T("ToolbarWindow32"), NULL);
ret = GetWindowThreadProcessId(hWnd, &amp;lngPID);
hProcess = OpenProcess(PROCESS_ALL_ACCESS|PROCESS_VM_OPERATION|PROCESS_VM_READ|PROCESS_VM_WRITE,0,lngPID);
lngAddress = VirtualAllocEx(hProcess,0, 0x4096, MEM_COMMIT, PAGE_READWRITE);
lngButtons = SendMessage(hWnd, TB_BUTTONCOUNT, 0, 0);                      
RECT rc; POINT point;
LPVOID lngRect = VirtualAllocEx(hProcess,0,sizeof(RECT), MEM_COMMIT, PAGE_READWRITE);

CRect rect;
for(int i=0 ;i&lt; lngButtons;i++)
{
int j = i;
ret = SendMessage(hWnd,TB_GETBUTTON,j,long(lngAddress));
ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 16),&amp;lngTextAdr,4,0);
if(lngTextAdr != -1)
{
ret = ReadProcessMemory(hProcess, LPVOID(lngTextAdr),strBuff,1024,0);
//ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 12),&amp;lngHwndAdr,4,0); //获取句柄
//ret = ReadProcessMemory(hProcess, LPVOID(lngHwndAdr),&amp;lngHwnd, 4,0);
//ret = ReadProcessMemory(hProcess, LPVOID(long(lngAddress) + 4),&amp;lngButtonID,4,0);//获取buttonID
CString str(strBuff);
if (str.Compare(m_NotifyIconData.szTip) == 0)
{
::SendMessage(hWnd,TB_GETITEMRECT,(WPARAM)j,(LPARAM)lngRect);
ReadProcessMemory(hProcess,lngRect,&amp;rc, sizeof(rc),0);  //获取托盘图标区域
CWnd::FromHandle(hWnd)-&gt;ClientToScreen(&amp;rc);
}

//以下是隐藏托盘图标
// 　　 {
// 　　 if(show)
// 　　 {
// 　　 SendMessage(hWnd,TB_HIDEBUTTON,lngButtonID,0);
// 　　 }
// 　　 else
// 　　 { 
// 　　 SendMessage(hWnd,TB_HIDEBUTTON,lngButtonID,1);
// 　　 }
// 　　 }

}
}
VirtualFreeEx( hProcess, lngAddress, 0x4096, MEM_DECOMMIT);
VirtualFreeEx( hProcess, lngAddress, 0, MEM_RELEASE);
VirtualFreeEx( hProcess, lngRect, sizeof(RECT), MEM_DECOMMIT);
VirtualFreeEx( hProcess, lngRect, 0, MEM_RELEASE);
CloseHandle(hProcess);
}
</code></pre>
//另一例子
<pre><code class="language-cpp">VOID StartStorm()
{
 HWND hMain = FindWindow("animate_layered_window_class", "暴风媒体中心");
 if ( hMain )
 {
 ShowWindow(hMain, SW_HIDE);
 }

//得到工具栏句柄
     HWND hTray = FindWindow("Shell_TrayWnd", NULL);
     hTray = FindWindowEx(hTray, 0, "TrayNotifyWnd", NULL);
     hTray = FindWindowEx(hTray, 0, "SysPager", NULL);
     hTray = FindWindowEx(hTray, 0, "ToolbarWindow32", NULL);

//获取explore进程ID
         DWORD TrayPid;
         GetWindowThreadProcessId(hTray, &amp;TrayPid);

//打开进程 并且开辟进程空间
         RECT rect;
         TBBUTTON tb;
         TBBUTTON pTb;
         LPVOID lpAddr;
         DWORD dwThreadIdOfICO;
         DWORD dwTempId = FindStorm("Stormtray.exe"); //你要点击的进程的PID

TRAYDATA traydata;

HANDLE hOpen = OpenProcess(PROCESS_ALL_ACCESS, FALSE, TrayPid);
         lpAddr = VirtualAllocEx(hOpen, NULL, sizeof(tb) + sizeof(rect), MEM_COMMIT, PAGE_READWRITE);

int nCount = SendMessage(hTray, TB_BUTTONCOUNT, 0, 0);
         int i;
         DWORD dwOutWrite;
         for ( i = 0; i &lt; nCount; i ++)
         {
                 ZeroMemory(&amp;tb, sizeof(tb));
                 ZeroMemory(&amp;rect, sizeof(rect));
                 //把参数写进目标进程
                 WriteProcessMemory(hOpen, lpAddr, &amp;tb, sizeof(tb), &amp;dwOutWrite);
                 //WriteProcessMemory(hOpen, (LPVOID)((DWORD)lpAddr + sizeof(pTb)), &amp;rect, sizeof(rect), &amp;dwOutWrite);
                 //获取BUTTON
                 SendMessage(hTray, TB_GETBUTTON, i, LPARAM(lpAddr));
                 //读取TBBUTTON结构
                 ReadProcessMemory(hOpen, lpAddr, &amp;pTb, sizeof(TBBUTTON), &amp;dwOutWrite);
                 //读取TRAYDATA结构
                 ReadProcessMemory(hOpen, (LPVOID)pTb.dwData, &amp;traydata, sizeof(TRAYDATA), &amp;dwOutWrite);

GetWindowThreadProcessId(traydata.hwnd, &amp;dwThreadIdOfICO);
                 if ( dwThreadIdOfICO == dwTempId )
                 {
                         //获取ICO的RECT
                         LPVOID lp = (LPVOID)((DWORD)lpAddr + sizeof(pTb));
                         SendMessage(hTray, TB_GETITEMRECT, i, (LPARAM)lp);
                         LPVOID lpdata = (LPVOID)((DWORD)lpAddr + sizeof(TBBUTTON));
                         ReadProcessMemory(hOpen, lpdata, &amp;rect, sizeof(rect), &amp;dwOutWrite);
                         int iGap = rect.right/2; //得到图标的中间坐标的间隔
                         //点击
                         SendMessage(hTray, WM_LBUTTONDOWN, MK_LBUTTON, MAKELPARAM(rect.right - iGap, rect.bottom - iGap));
                         SendMessage(hTray, WM_LBUTTONUP, 0, MAKELPARAM(rect.right - iGap, rect.bottom - iGap));
                         //
                         CloseHandle(hOpen);
                         break;;
                 }
         }

}
</code></pre>
//win7有一个溢出托盘区：以下是隐藏在托盘区中的托盘信息，用以上的方法找不到，因为在NotifyIconOverflowWindow里
Fhwnd = FindWindow(&quot;NotifyIconOverflowWindow&quot;, NULL) 
参考文章：<a href="https://www.moyann.com/go/aHR0cDovL3RvcGljLmNzZG4ubmV0L3UvMjAxMDEwMDMvMjMvODU5ODUxZWUtNWFhMS00NDc2LThjZTEtMTM1OTgyNmRmMmIwLmh0bWw" target="_blank" >http://topic.csdn.net/u/20101003/23/859851ee-5aa1-4476-8ce1-1359826df2b0.html</a>
<pre><code class="language-cpp">
#include "stdafx.h"
#include &lt;afx.h&gt;
#include &lt;locale.h&gt;
#include &lt;string&gt;
using namespace std;

typedef BOOL (WINAPI *LPFN_ISWOW64PROCESS) (HANDLE, PBOOL);

BOOL IsWow64()
{
    BOOL bIsWow64 = FALSE;

LPFN_ISWOW64PROCESS 
        fnIsWow64Process = (LPFN_ISWOW64PROCESS)GetProcAddress(
        GetModuleHandle(_T("kernel32")),"IsWow64Process");

if (NULL != fnIsWow64Process)
    {
        if (!fnIsWow64Process(GetCurrentProcess(),&amp;bIsWow64))
        {
            // handle error
        }
    }
    return bIsWow64;
}

HWND FindTrayWnd()
{
    HWND hWnd = NULL;

hWnd = FindWindow(_T("Shell_TrayWnd"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("TrayNotifyWnd"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("SysPager"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("ToolbarWindow32"), NULL);

return hWnd;
}

HWND FindNotifyIconOverflowWindow()
{
    HWND hWnd = NULL;

hWnd = FindWindow(_T("NotifyIconOverflowWindow"), NULL);
    hWnd = FindWindowEx(hWnd, NULL, _T("ToolbarWindow32"), NULL);

return hWnd;
}

void EnumNotifyWindow(HWND hWnd)
{
    DWORD dwProcessId = 0;
    GetWindowThreadProcessId(hWnd,&amp;dwProcessId);

HANDLE hProcess = OpenProcess(PROCESS_VM_OPERATION | PROCESS_VM_READ | PROCESS_VM_WRITE, FALSE, dwProcessId);
    if ( hProcess==NULL ){
        return;
    }
    LPVOID lAddress = VirtualAllocEx(hProcess, 0, 4096, MEM_COMMIT, PAGE_READWRITE);
    if ( lAddress==NULL ){
        return;
    }
    DWORD lTextAdr = 0;
    BYTE buff[1024] = {0};
    CString strFilePath;
    CString strTile;
    HWND hMainWnd = NULL;
    int nDataOffset = sizeof(TBBUTTON) - sizeof(INT_PTR) - sizeof(DWORD_PTR);
    int nStrOffset = 18; 
    if ( IsWow64() ){
        nDataOffset+=4;
        nStrOffset+=6;
    }

//得到圖標個數
    int lButton = SendMessage(hWnd, TB_BUTTONCOUNT, 0, 0);
    for (int i = 0; i &lt; lButton; i++) {
        SendMessage(hWnd, TB_GETBUTTON, i, (LPARAM)lAddress);
        //讀文本地址
        ReadProcessMemory(hProcess, (LPVOID)((DWORD)lAddress + nDataOffset), &amp;lTextAdr, 4, 0);
        if ( lTextAdr!=-1 ) {
            //讀文本
            ReadProcessMemory(hProcess, (LPCVOID)lTextAdr, buff, 1024, 0);
            hMainWnd = (HWND)(*((DWORD*)buff));
            strFilePath = (WCHAR *)buff + nStrOffset;
            strTile = (WCHAR *)buff + nStrOffset + MAX_PATH;
            _tprintf(_T("%s %s\n"),strTile,strFilePath);
        }
    }
    VirtualFreeEx(hProcess, lAddress, 4096, MEM_RELEASE);
    CloseHandle(hProcess);
}

int _tmain(int argc, _TCHAR* argv[])
{
 setlocale(LC_ALL, "chs");
 EnumNotifyWindow(FindTrayWnd());
 _tprintf(_T("\n"));
 EnumNotifyWindow(FindNotifyIconOverflowWindow());
 system("pause");
 return 0;
}
</code></pre>
//还有一个版本
<pre><code class="language-cpp">void CTrayDlg::OnButton1() 
{ 
 // TODO: Add your control notification handler code here 
HWND wd=::FindWindow("Shell_TrayWnd",NULL); 
 if (wd==NULL) 
 { 
 MessageBox("Error1"); 
 return; 
 } 
 HWND wtd=FindWindowEx(wd,NULL,"TrayNotifyWnd",NULL); 
 if (wtd==NULL) 
 { 
 MessageBox("Error2"); 
 return; 
 } 
 HWND wd1=FindWindowEx(wtd,NULL,"ToolbarWindow32",NULL); 
 if (wd1==NULL) 
 { 
 MessageBox("Error3"); 
 return; 
 } 
 DWORD pid; 
 pid=0; 
 GetWindowThreadProcessId(wd1,&amp;pid); 
 if (pid==NULL) 
 { 
 MessageBox("Error4"); 
 return; 
 }

HANDLE  hd=OpenProcess(PROCESS_QUERY_INFORMATION    ¦    PROCESS_ALL_ACCESS            ,true,pid);  
   if  (hd==NULL)  
   {  
         MessageBox("Error6");  
         return;  
     }

int  num=::SendMessage(wd1,TB_BUTTONCOUNT  ,NULL,NULL);  
   int  i;  
   unsigned  long  n;  
   TBBUTTON  p,*pp;  
   CString  x;  
   wchar_t  name[256];  
   unsigned  long  whd,proid;  
   CString  temp;

TBBUTTON  *sp;

sp= (TBBUTTON *)0x20f00; //这里应该改成用VirtualAllocEx分配内存否则有可能出错，不过人懒，就先这么着吧 
 for(i=0;i&lt;num;i++) 
 { 
 ::SendMessage(wd1,TB_GETBUTTON,i,(LPARAM)sp); 
 pp=&amp;p; 
 ReadProcessMemory(hd,sp,pp,sizeof(p),&amp;n); 
// x.Format("%x %x %x %x %x %x",p.iBitmap,p.idCommand,p.fsState,p.fsStyle, p.dwData, p.iString); 
 name[0]=0; 
 if (p.iString!=0xffffffff) 
 { 
 try 
 { 
 ReadProcessMemory(hd,(void *)p.iString,name,255,&amp;n); 
 name[n]=0; 
 } 
 catch() 
 { 
 } 
// x+=" "; 
// x+=name; 
 temp=name; 
 try 
 { 
 whd=0; 
 ReadProcessMemory(hd,(void *)p.dwData,&amp;whd,4,&amp;n); 
 } 
 catch() 
 { 
 } 
 proid=0; 
 GetWindowThreadProcessId((HWND)whd,&amp;proid); 
 x.Format("位置=%d 名称=%s 窗口句柄=%08x 进程ID=%08x", 
 i,(LPCTSTR )temp,whd,proid); 
 m_list.AddString(x); 
 } 
 } 
}</code></pre>
另一段收集
<pre><code class="language-cpp">void CTrayDlg::OnButton1() 
 { 
 // TODO: Add your control notification handler code here 
 HWND wd=::FindWindow("Shell_TrayWnd",NULL); 
 if (wd==NULL) 
 { 
 MessageBox("Error1"); 
 return; 
 } 
 HWND wtd=FindWindowEx(wd,NULL,"TrayNotifyWnd",NULL); 
 if (wtd==NULL) 
 { 
 MessageBox("Error2"); 
 return; 
 } 
 HWND wd1=FindWindowEx(wtd,NULL,"ToolbarWindow32",NULL); 
 if (wd1==NULL) 
 { 
 MessageBox("Error3"); 
 return; 
 } 
 DWORD pid; 
 pid=0; 
 GetWindowThreadProcessId(wd1,&amp;pid); 
 if (pid==NULL) 
 { 
 MessageBox("Error4"); 
 return; 
 }

HANDLE   hd=OpenProcess(PROCESS_QUERY_INFORMATION   |     PROCESS_ALL_ACCESS ,true,pid);   
      if   (hd==NULL)   
      {   
            MessageBox("Error6");   
            return;   
        }

int   num=::SendMessage(wd1,TB_BUTTONCOUNT   ,NULL,NULL);   
      int   i;   
      unsigned   long   n;   
      TBBUTTON   p,*pp;   
      CString   x;   
      wchar_t   name[256];   
      unsigned   long   whd,proid;   
      CString   temp;

TBBUTTON   *sp;

sp=   (TBBUTTON   *)0x20f00;   
      for(i=0;i&lt;num;i++)   
      {   
  ::SendMessage(wd1,TB_GETBUTTON,i,(LPARAM)sp);   
          pp=&amp;p;   
          ReadProcessMemory(hd,sp,pp,sizeof(p),&amp;n);   
  //         x.Format("%x   %x   %x   %x     %x   %x",p.iBitmap,p.idCommand,p.fsState,p.fsStyle,     p.dwData,   p.iString);   
          name[0]=0;   
          if   (p.iString!=0xffffffff)   
          {   
                  try   
                  {   
                          ReadProcessMemory(hd,(void   *)p.iString,name,255,&amp;n);   
                          name[n]=0;   
                  }   
                  catch(...)   
                  {   
                  }   
  //                 x+="   ";   
  //                 x+=name;   
  temp=name;   
  try   
  {   
  whd=0;   
                          ReadProcessMemory(hd,(void   *)p.dwData,&amp;whd,4,&amp;n);   
  }   
  catch(...)   
  {   
  }   
  proid=0;   
                  GetWindowThreadProcessId((HWND)whd,&amp;proid);   
  x.Format("位置=%d   名称=%s   窗口句柄=%08x   进程ID=%08x",   
        i,(LPCTSTR   )temp,whd,proid);   
                  m_list.AddString(x);   
          }

}

} 
</code></pre>

VC 如何通过托盘图标得到该所属进程

发表评论取消回复
使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款

TunSafe—最安全的使用WireGuard的高性能安全客户端

远程桌面中转，基于 UltraVNC Repeater（中继器）的远程桌面服务搭建，用于复杂网络环境

Altium Designer 20.2.3 build 150 破解版下载

Linux(CentOS)网络流量实时监控（iftop）

N2N Windows编译过程。。。以及遇到的一些坑（这篇不是网上复制的。绝对有用）

通过 Wireguard 构建 NAT to NAT VPN

《最终幻想7》蒂法·洛克哈特COS

交换机配置——VTP管理交换机的VLAN配置

Fate∕GrandOrder##玛修·基列莱特#玛修

win11右键菜单怎么变回去？windows11右键改回win10老版

VC 如何通过托盘图标得到该所属进程

发表评论 取消回复 使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款

VC 如何通过托盘图标得到该所属进程

发表评论取消回复
使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款