Shell编程

开发平台：
Visual C++

main.cpp：源码内容
							//---------------------------------------------------------------------------
#include <vcl.h>
#pragma hdrstop 
#include "main.h"
//---------------------------------------------------------------------------
#pragma package(smart_init)
#pragma resource "*.dfm"
TfrmMain *frmMain;
//---------------------------------------------------------------------------
AnsiString __fastcall TfrmMain::SHEventName(AnsiString strPath1,AnsiString strPath2,DWORD lParam)
{
        AnsiString sEvent;
        
        switch(lParam)//根据参数设置提示消息
        {
                case SHCNE_RENAMEITEM:    sEvent = "重命名文件 ["+strPath1 + "] 为 [" + strPath2 + "]"; break;
                case SHCNE_CREATE:        sEvent = "建立文件   ["+strPath1 + "]";break;
                case SHCNE_DELETE:        sEvent = "删除文件   ["+strPath1 + "]";break;
                case SHCNE_MKDIR:         sEvent = "新建目录   ["+strPath1 + "]";break;
                case SHCNE_RMDIR:         sEvent = "删除目录   ["+strPath1 + "]";break;
                case SHCNE_MEDIAINSERTED: sEvent = "[" + strPath1+"] 中插入可移动存储介质";break;
                case SHCNE_MEDIAREMOVED:  sEvent = "[" + strPath1+"] 中移去可移动存储介质"+strPath1+" "+strPath2;break;
                case SHCNE_DRIVEREMOVED:  sEvent = "移去驱动器 ["+strPath1+ "]";break;
                case SHCNE_DRIVEADD:      sEvent = "添加驱动器 ["+strPath1+ "]";break;
                case SHCNE_NETSHARE:      sEvent = "设置目录 ["+strPath1+"] 为共享";break;
                case SHCNE_NETUNSHARE:    sEvent = "取消目录 ["+strPath1+"] 的共享"; break;
                case SHCNE_ATTRIBUTES:    sEvent = "改变文件目录属性 ["+strPath1+ "]";break;
                case SHCNE_UPDATEDIR:     sEvent = "更新目录 ["+strPath1+ "]";break;
                case SHCNE_UPDATEITEM:    sEvent = "更新文件 ["+strPath1+ "]";break;
                case SHCNE_SERVERDISCONNECT: sEvent = "断开与服务器的连接 ["+strPath1+"] ["+strPath2+ "]";break;
                case SHCNE_UPDATEIMAGE:   sEvent = "执行：SHCNE_UPDATEIMAGE 操作";break;
                case SHCNE_DRIVEADDGUI:   sEvent = "执行：SHCNE_DRIVEADDGUI 操作";break;
                case SHCNE_RENAMEFOLDER:  sEvent = "重命名文件夹 ["+strPath1+"] 为 ["+strPath2+ "]";break;
                case SHCNE_FREESPACE:     sEvent = "磁盘空间大小改变 ";break;
                case SHCNE_ASSOCCHANGED:  sEvent = "改变文件关联";break;
                case SHCNE_EXTENDED_EVENT:sEvent = "此目录有变化 [" + strPath2 + "]"; break;
                default:                  sEvent = "未知操作 ["+IntToStr(lParam)+ "]";break;
        }
        return sEvent;
}
bool __fastcall TfrmMain::SHNotify_Register(HWND hWnd)
{
        IDLSTRUCT ps;
        if( m_hSHNotify != NULL) return False;
        
        if( SHGetSpecialFolderLocation == NULL) return;
        if( SHGetSpecialFolderLocation(0,CSIDL_DESKTOP,&m_pidlDesktop) == NOERROR)
        {
                if( m_pidlDesktop )
                {
                        ps.pidl = m_pidlDesktop;
                        ps.bWatchSubFolders = 1;
                        m_hSHNotify = SHChangeNotifyRegister(hWnd,
                                        SHCNF_TYPE | SHCNF_IDLIST,
                                        SHCNE_ALLEVENTS | SHCNE_INTERRUPT,
                                        WM_SHNOTIFY,1,&ps);
                        return True;
                }
                else
                {
                        CoTaskMemFree(m_pidlDesktop);
                }
        }
        return False;
}
bool __fastcall TfrmMain::SHNotify_UnRegister()
{
        if( m_hSHNotify == NULL) return False;
        if( SHChangeNotifyDeregister == NULL) return False;
        if( SHChangeNotifyDeregister(m_hSHNotify) )
        {
                m_hSHNotify = NULL;
                CoTaskMemFree(m_pidlDesktop);
                return True;
        }
        return False;
}
__fastcall TfrmMain::TfrmMain(TComponent* Owner)
        : TForm(Owner)
{
}
//---------------------------------------------------------------------------
void __fastcall TfrmMain::WMShellReg(TMessage & Message)
{
        //TODO: Add your source code here
        AnsiString strPath1;
        AnsiString strPath2;
        char strPath[256];
        AnsiString sTmp;
        PSHNOTIFYSTRUCT pidlItem;
        pidlItem = (PSHNOTIFYSTRUCT)Message.WParam;
        SHGetPathFromIDList(pidlItem->dwItem1,strPath);
        strPath1 = strPath;
        SHGetPathFromIDList(pidlItem->dwItem2,strPath);
        strPath2 = strPath;
        sTmp = FormatDateTime("[yyyy-mm-dd hh:mm:ss]:",Now()) + SHEventName(strPath1,strPath2,Message.LParam);
        
        Memo1->Lines->Add(sTmp);
}
void __fastcall TfrmMain::WMKeyLog(TMessage & Message)
{
        //TODO: Add your source code here
        Memo1->Lines->AddStrings(HookList);
        HookList->Clear();
}
void __fastcall TfrmMain::FormCreate(TObject *Sender)
{
        m_hSHNotify = NULL;
        HMODULE DLLHandle = LoadLibrary("SHELL32.DLL");
        if( DLLHandle )
        {
                SHChangeNotifyRegister   = (SHNRegister)GetProcAddress(DLLHandle,(LPCSTR)2);
                SHChangeNotifyDeregister = (SHNUnRegister)GetProcAddress(DLLHandle,(LPCSTR)4);
        }
        FreeLibrary(DLLHandle);
        
        SHNotify_Register(Handle);
        InstallHook(Handle);
}
//---------------------------------------------------------------------------
void __fastcall TfrmMain::FormClose(TObject *Sender, TCloseAction &Action)
{
        SHNotify_UnRegister();
        UnInstallHook();
}
//---------------------------------------------------------------------------

						